Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×
Security Technology

GMC to Begin Remotely Scanning Cars for Trouble 620

Momoru writes "GMC, in an effort to give their vehicles more appeal to consumers, will begin offering an "OnStar Vehicle Diagnostics" program for free, where GM will remotely scan your vehicle for problems once a month via it's OnStar system. GM has had this ability for a while, however it was always "On Request". OnStar is already automatically notified in the event of an airbag deployment, and can remotely unlock your vehicle. While this seems handy, I am interested if anyone here fears the security implications of the OnStar system's power?"
This discussion has been archived. No new comments can be posted.

GMC to Begin Remotely Scanning Cars for Trouble

Comments Filter:
  • by bscott ( 460706 ) on Wednesday September 14, 2005 @04:40AM (#13555191)
    I'm not sure, but isn't Onstar a fee-based system? If you don't pay, it goes away?

    However scary a feature-set might be, so long as there's a reliable opt-out I'm not going to be critical. My satellite TV receiver could report what I watch, if I ever hooked it up to my phone line - but it keeps working even if I don't.

    Asking why one can't get a useful safety feature *without* agreeing to a lot of intrusive fine print at the same time, is perhaps what we should be asking.
  • by amodm ( 876842 ) on Wednesday September 14, 2005 @04:43AM (#13555197)
    that it needs to be done remotely ?

    If not, couldn't they put in a mechanism in the car itself, where at the press of a button, all the diagnostics would be run, and a report generated and shown in a panel or something like that.
  • by putko ( 753330 ) on Wednesday September 14, 2005 @04:57AM (#13555238) Homepage Journal
    How does On Star send back the data?

    E.g. oil needs changing....

    I understand that On Star can send to the car, perhaps via a satellite connection. But how does the car talk back? Or can it not talk back? Is the car really broadcasting anything?

    That could get ugly -- e.g. car has mic, and On Star personnel use the mic to listen in on you.

    This is something I don't get about satellite radio -- how do they figure out what folks are listening to? E.g. is my satellite receiver talking back to the satellite? (no way!) Or is it broadcasting on some other frequencies, and the satellite radio company has receivers all over the place to pick up those signals (some of them, at least?)

    As it is, how does a satellite radio company know what channels are popular/unpopular?
  • by apathyruiner ( 222745 ) on Wednesday September 14, 2005 @05:03AM (#13555256)
    You know, my '94 Saab 900 Does a basic test every time I start the car, and displays the results on a panel in the center of the dash, right above the stereo. I mean beyond the average car's... err... POST. I've seen "Coolant Low" on the display. I've even gotten diagnostic info while driving: "Frontlight Failure" when one of my high beams was out.
    While some of the safety features of OnStar intrigue me I don't really care for the rest of it, and would most likely do my best to disable it entirely.
    Do these "features" stay active even when your free trial is over? Something else to consider.
  • Warranty claims? (Score:5, Interesting)

    by ThreeGigs ( 239452 ) on Wednesday September 14, 2005 @05:04AM (#13555261)
    I wonder if GM might *not* tell you if they detect something amiss if it's covered under warranty. After all, if *you* didn't notice anything wrong, why should *they* spend money (and lower corporate earnings) to fix it? Can you imagine the earnings hit if 10% of OnStar vehicles were called back for an out-of-spec fuel injector? The driver wouldn't notice something like that, aside from a small hit on fuel economy. But will GM bother to tell you your injector on cylinder #3 is spitting out 10% more fuel than it should be?
  • Padding the profits (Score:4, Interesting)

    by barista ( 587936 ) on Wednesday September 14, 2005 @05:11AM (#13555292) Homepage
    I'm not really worried about the security implications (don't own a car, don't drive), but I imagine they would tell people to get service (oil changes, brake repairs, etc) they might not necessarily need - like printers that tell you to change the cartridge, even though they're not empty.

    What's worse is if the owner doesn't get the service, then the company might imply it would void the warranty.
  • by ContemporaryInsanity ( 583611 ) on Wednesday September 14, 2005 @05:13AM (#13555298)
    It happens. I was recently involved in a project where commercial kitchen equipment monitors itself and reports performance and any potential problems via wifi to a central PC which will automatically inform the manufacturers of performance, maintenance issues and call out an engineer or manager if required via email, SMS etc. An big freezer full of food that dies in the middle of the night could be very expensive, one that rings you up so you can get it fixed as soon as possible can save a fortune.
  • by Bill Dog ( 726542 ) on Wednesday September 14, 2005 @05:14AM (#13555303) Journal
    That could get ugly -- e.g. car has mic, and On Star personnel use the mic to listen in on you.

    Several years ago Heather Locklear was on Letterman or Leno, can't remember which, and was telling a story of driving with her friend and chatting away in her car, and all of a sudden a voice spoke to them and asked if it was really her, and she realized that the OnStar folk had been listening in and recognized her voice. She hadn't realized that they could/would do that. Neither had I, until she told that story.
  • I don't think so (Score:3, Interesting)

    by maxpublic ( 450413 ) on Wednesday September 14, 2005 @05:37AM (#13555369) Homepage
    I don't want OnStar or a GPS tracker in my car. If the next new car I decide comes with these 'features' standard I'm going to have them ripped out. Tinfoil hat or no, nobody has any business knowing what's going on in my car, or where it is, except for me.

    Max
  • Airbags (Score:5, Interesting)

    by MichaelSmith ( 789609 ) on Wednesday September 14, 2005 @05:48AM (#13555404) Homepage Journal

    A friend of mine has a Toyota MR2. Recently he returned to his car from a walk and found that somebody had triggered the airbags (probably) by fiddling with an accelerometer.

    Funny thing is, all the doors were unlocked. It turns out that when the airbags fire the doors unlock, and you can fire airbags by physically hitting the accelerometer, and possibly by shorting a contact.

    So is this an easy way of unlocking the doors of a car? Sounds a bit insecure to me.

  • Re:No substitute (Score:3, Interesting)

    by EvilSS ( 557649 ) on Wednesday September 14, 2005 @05:56AM (#13555428)
    I wonder who's schedule they will go by. If you buy a car, your dealer sends you "maintenance" reminders all the time. Funny thing is, if you actually RTFM for the car, the schedule is much different. For example, I received a notice for my dealer for 20,000, 30,000, and 50,000 mile "maintenance" along with reminders to change my oil every 3,000 miles. Checked the manual, there are no scheduled maintenance events (other than fluids) until 100,000 miles. nada. Oil, every 5,000-10,000 miles (the car actually computes it based on driving habits and conditions and a little light comes on).

    So I have to wonder if they will use the real schedule, or the dealer needs a new boat schedule.
  • Re:Airbags (Score:2, Interesting)

    by Petersson ( 636253 ) on Wednesday September 14, 2005 @06:25AM (#13555522)
    Funny thing is, all the doors were unlocked. It turns out that when the airbags fire the doors unlock, and you can fire airbags by physically hitting the accelerometer, and possibly by shorting a contact. So is this an easy way of unlocking the doors of a car? Sounds a bit insecure to me

    Generally, this feature was probably meant to increase possibility of life saving after an accident. But it looks like it was poorly designed (car was not moving, engine was not running, there were no persons inside and no seat belts used).

    It really looks like some design flaw or car theft trick :take some other car, crash it a little bit in that Toyota and make it opened.

  • by Spamalope ( 91802 ) on Wednesday September 14, 2005 @06:27AM (#13555528)
    Not getting the Onstar recommended services may void the warranty?
    I could be worse than that. The current black boxes in your car tracks most aspects of operation, not just the simple codes aftermarket tools can read out.

    Onstar has detected abnormally high acceleration and speed in your Corvette. Your drivetrain warranty has been automatically voided, you've been Onstared.

    Gm may tell you up front, or just wait until you bring it in for service.

    Oh, the FBI can do more than just listen to you. They can track your movements with that fancy Nav system too.
  • by sczimme ( 603413 ) on Wednesday September 14, 2005 @06:37AM (#13555567)

    Is the process so complex... that it needs to be done remotely ?

    Complexity probably isn't the main issue. If you are in a remote area this feature makes a lot of sense. For example, you are driving in the middle of nowhere and the wonderfully descriptive 'check engine' light comes on. You are concerned about driving farther because you don't know what's wrong and don't want to cause further damage. This feature could tell you a) it's the $FOO sensor acting up, go ahead and drive or b) the $BAR actuator is broken, call a tow truck.

    If not, couldn't they put in a mechanism in the car itself, where at the press of a button, all the diagnostics would be run, and a report generated and shown in a panel or something like that.

    What is the average Joe Motorist going to do with that information? Why would automakers go to the additional expense of installing such display panels when the report can (and should) be sent to someone who actually knows how to read it?
  • by Anonymous Coward on Wednesday September 14, 2005 @06:38AM (#13555569)
    I've got a GM that just did a timing belt - because of the poor engine design, the heads crashed into the valves - $2200 later to replace all heads and valves.

    As apposed to a ford that I owned that also did a timing belt - they only had to replace the timing belt....

  • by Jason Straight ( 58248 ) on Wednesday September 14, 2005 @07:11AM (#13555680) Homepage
    Yeah, a $200 code reader, or a $2000 transmitter that is capable of sending that data to a satellite. Seems like if they really cared they'd build in actual displays into your dash that tell you more than check engine.

    Fact is (in my experience) when a dash light comes on it's usually the sensor that's supposed to detect a problem that IS the problem, and there is no other problem with the engine.

    I prefer an actual temp guage, and oil psi guage along with my ability to tell if my car is running well to sensors any day.

    My 1970 Chevy pickup has more miles on it than most cruise ships probably do, and it's the most reliable vehicle I've ever known of. On the off chance something is wrong with it I've always been able to figure it out on my own, and never had to take it anywhere to have someone else work on it because it doesn't require pulling the engine to change the timing GEARS, not belt.
  • Re:Warranty claims? (Score:3, Interesting)

    by sheldon ( 2322 ) on Wednesday September 14, 2005 @08:54AM (#13556187)
    After all, if *you* didn't notice anything wrong, why should *they* spend money (and lower corporate earnings) to fix it?


    You're right. This has been GM's attitude in the past.

    That might explain why I won't ever buy another GM car, and definately explains why they have been losing marketshare for the past 40 years.
  • by PantsWearer ( 739529 ) on Wednesday September 14, 2005 @09:05AM (#13556271)
    Years ago, I worked on the OnStar desktop app used by the call center folks to talk to the people in the cars, so I know a bit about how the system works. Of course, my information is out of date, but I doubt a lot has changed since most of the limitations were hardware related.

    OnStar was originally envisioned to use something other than cellular to handle the communications (I think it was microwave towers or something like that). It was proposed by some aerospace/telecom company that GM bought. Early in the design process it was switched over to a cellular system, but, at least in the generations that I worked with, it had a lot of limitations. (And not just bad cellular reception.)

    The first and second generation systems (the latest I worked with), could not get information from the car and speak to the customer at the same time (most likely this is still true, since there's only one cell phone per vehicle). Basically, when a call is connected, while the nifty little message is playing in the car saying that it is connecting, it connects to the call center in data mode (just a modem installed with the phone) and lets the center know the state of the vehicle, which for a normal customer call is the location of the car, whether your lights are on, state of the locks, etc. Then the phone switches over to voice mode (which is a line transfer at the call center) and the "This is Bob at OnStar, how may I help you?" speel starts. If the airbag deploys, the car calls by itself and Bob's message is different, but otherwise things stay the same technically.

    Of course, this means that anytime you need something done in the car while the OnStar agent is speaking to you through the car, you get put on hold. Generally, this isn't a problem, since if you need your car unlocked or something, you're probably outside of your car (I think you do get put on hold anyway as the data call is placed). The problem comes in when you're trying to get directions to somewhere. The car can only transfer your location when in data mode. So if you're driving down the highway at 75 mph and you missed the exit you were told to turn at by Bob, Bob still only knows your location when the call was first made, not where you are at that moment.

    Though the using the cell phone to actually make voice calls was just being tested when I left (at least through a voice recognition system so you wouldn't have to talk to an agent), basically all the calls go through the same call center and are then connected to the requested number. You'll notice that GM vehicles don't have a numeric keypad in them; the cell phone in the car can only call one place, so it would be pretty easy (as another post spoke about) for a OnStar agent to listen in.

    Also, the hardware in the car has hooks really, really deep into the system. An OnStar agent has a special demo mode they can go into to show it off at dealships where they honk the horn, flash the lights, unlock the doors, etc. What they don't tell you is that the hardware also has hooks into the ignition system. When I worked there, there wasn't any way for the desktop software to actually start or stop the engine, but the hardware is there. I'm not really fond of the thought of some call center employee shutting off my engine while I'm on the highway, but the potential is there.

    As other people have suspected, when the call center connects to your car, there isn't any warning. I think this was originally intended to get the cars location, etc. if the car was stolen, but there's no reason that it's limited to that alone. In fact, I heard stories from the call center about a guy calling OnStar to locate his car and finding it in the middle of a corn field with his wife and her lover in it.

  • by zipoff ( 62601 ) <sd@NOSPAM.zipoff.com> on Wednesday September 14, 2005 @09:49AM (#13556644) Homepage
    It is entirely opt-in. Not just buying a vehicle opt-in.

    You go to their website, provide your OnStar account # and the VIN # of the vehicle, as well as your email address and you opt-in.

    You can also opt-out at any time after opting-in.
  • Re:Airbags (Score:3, Interesting)

    by SydShamino ( 547793 ) on Wednesday September 14, 2005 @10:27AM (#13557007)
    This is why, once I got over my concerns with leaving my car unattended with the top down, I found it easy to leave it with the windows rolled down, too.

    "Hey opportunistic thieves! There's nothing in my car worth taking, see? But hey, that other car over there, the one with its windows up. They must be protecting something?"

    The cost of replacing a broken window is higher than the cost of replacing my driving sunglasses or mini flashlight or US atlas. If someone really wanted them enough to steal them, they can have them.
  • Re:Airbags (Score:4, Interesting)

    by Miamicanes ( 730264 ) on Wednesday September 14, 2005 @10:34AM (#13557054)
    Yeah, but having your airbags triggered by a thief is several orders of magnitude worse than having a window broken. By law, the car commits electronic suicide the moment the airbags deploy and can't be driven, period, until a few thousand dollars worth of repair work has been done. Not just the ECU and airbags... the wires and sensors need to be replaced too. And then there's the matter of legal liability... any repair shop has to buy an insurance policy against someone who tries to sue in the future claiming the recertified airbag system deployed unnecessarily or failed to deploy when necessary due to some fault of theirs.

    For all intents and purposes (in America, at least), a car whose airbags have deployed is effectively "totaled" because, from the insurance company's perspective, it's cheaper to pay the claim as a total loss and sell the car to a broker for export to some third-world country where the car can legally be repaired without the airbags and recertification than it is to pay to have it repaired, recertified, and liability-insured for use in the US.
  • Just say no (Score:2, Interesting)

    by raelimperialaerosolk ( 528725 ) on Wednesday September 14, 2005 @11:13AM (#13557404) Homepage
    Onstar was 'standard' on my 2003 Envoy. It adds about $700 to the base price of the vehicle, but you get one year "safe and sound" package for free which is "worth" about $200. I keept the first year, used it once when I had a check engine light come on (left the gas cap off), and used about 2 minutes of my free 30 minutes of cell phone.

    AFter enduring several months of onstar literature, they finally gave up on me. The onstar unit for my truck is located underneath one of the back seats. Easy enough to take the cover off and disconnect it, which I had done for about a year till my wife said to hook it back up.

    Her cousin consults for OnStar. He told her that even if you aren't a subscriber, that you can hit the button in an emergency and they'll help you out. He said if you are in a bad neighborhood, you can hit the button and say "I don't feel safe" and they'll guide you out. They don't want the bad publicity of someone saying they contacted OnStar in an emergency only to get hung up on because they weren't a subscriber.

    I've always wondered that if my vehicle ever got stolen, could I call OnStar up, sign up for the service, then say "oh, by the way, would you mind locating the vehicle...I was just carjacked".

    I still think $16/month is too much for OnStar. I'd like to see them implement an "a la carte" menu. Lock your keys in the car, it'll cost you $100. Got your car ripped off AGAIN, that's gonna cost you $200 to locate it. I'd be glad to do a fee-for-service...but I'm just tired of getting nickeled and dimed to death with all these little monthly fees.

    A big portion of OnStar subscribers are senior citizens. They like the idea of that someone is there to take care of them in an emergency. My in-laws are looking for a new vehicle, and they are specifically looking at GM so that they can get OnStar.
  • by jafiwam ( 310805 ) on Wednesday September 14, 2005 @12:50PM (#13558359) Homepage Journal
    It was a "sucker the user into coming in" code.

    Lots of car manufacturers have built in "Check engine" codes that go off at a certain milage plus some random number. (My car included.)

    If they are not busy, they try to get you to maintainance service while the code is cleared.

    Get a code reader and read them yourself. That way you know what is up before you go in. (The codes are available on the internet for a persistant searcher.)
  • Re:Airbags (Score:3, Interesting)

    by subreality ( 157447 ) * on Wednesday September 14, 2005 @03:35PM (#13559885)
    It depends on your insurance policy. I have good insurance. I bought a new car, and it was totaled a little more htan a month later when a drunk rear ended me. My insurance paid out not by $new - $depreciation, but by doing a survey of similar condition used vehicles - IE, they found similar model cars (with 1000-2000 miles on them) that dealers had in their used sections, and paid out what it'd cost for one of those.

    I'd haggled a good deal on mine when I bought it, and they actually paid out a little more than I paid for it, since 1000-mile fully reconditioned cars were selling used for a little more than I paid. I found it to be an entirely fair result.

    You might get a different result from companies that are catering to the bottom dollar crowd rather than ones aiming for good customer service.
  • by Jherek Carnelian ( 831679 ) on Wednesday September 14, 2005 @04:43PM (#13560585)
    You use your social security number everywhere, and you hand your credit cards and checks to people you've never even met before (cashiers) without even thinking twice.

    Maybe you do, maybe you haven't heard of this new trendy crime sweeping the nation? Identity theft. It is people like you with your head in the ground approach to the risks involved that have enabled identity thieves to thrive.

    And yet you worry about a car company attacking it's own consumer-base? That'd be the absolute stupidist business decision a huge company like GM could make.

    I don't see anyone besides you and your strawman claiming that GM will "attack its own" customers. Do banks steal your identity? No. But they provide part of the infrastructure that makes it trivially easy for a third party to do so.

    OnStar and similar systems have signifcant and non-obvious privacy risks. Just because *you* are too dull to see them doesn't mean a clever and malicious person won't see them and won't abuse them for his own benefit.
  • by cr0sh ( 43134 ) on Wednesday September 14, 2005 @05:01PM (#13560758) Homepage
    The true fact is that on a new car, you shouldn't have to change your oil out until about 12,000 miles or so, provided you do a few things:

    1. Measure the amount of oil that is in your engine
    2. Remove a bit of oil and note how much you removed
    3. Send this amount to an oil testing company to form a baseline
    4. Replace the amount you removed with new oil
    5. With the results from the testing company, monitor the oil on a monthly basis
    6. Replace your oil filter regularly
    7. Replace your oil when the viscosity is starting to fail or when the metal levels rise percentage wise, faster than what they did previously

    This was test actually performed by a couple of guys on a web-based automobile repair information site. They wanted to test the theory that it is bad to run a car (in their case, it was a brand-new Vette or something similar) without changing the oil regularly (ie, every 3000 miles). They found that actually changing the oil could cause more problems than it helped, especially on a newer engine. They found that the best thing to do was to change the filter. They stressed that you had to establish your baseline oil performance and monitor it over the course of your driving, by utilizing a laboratory oil testing service, which takes a sample and runs it through various tests - the two most important of which were metal content and viscosity breakdown over time. IIRC, they ran the test for a year or more. They did note that 12,000 miles was a bit extreme, but that 3000 miles was way to soon. They said that somewhere in between was ultimately better. Something else they noted was that when they replaced the oil (when they removed oil for the lab tests) - they found that the next test always improved. They tried an experiment where they added a new quart of the same oil as in the engine, and the results came back almost as "good-as-new". Basically, the new oil "propped up" the old oil, and allowed the old stuff work like new.

    I would say for most vehicles, you could get away with a 7000 mile or so change schedule, changing your filter at 3000 miles, and replacing the "lost" quart (in the filter) with a new charge of the same kind of oil (DO NOT MIX SYNTHETICS WITH REGULAR OIL) that is in the engine. You will save time, money, and resources overall. Of course, standard disclaimers apply, and you should research all of this on your own...

BLISS is ignorance.

Working...