Nissan LEAF Leaks Speed & Location To RSS Feed 180
thecarchik writes "An intrepid tinkerer has discovered yet another security issue with the Nissan Leaf: it could be revealing your location and speed to websites around the globe. The issue stems from CARWINGS, the telematics system that Nissan devised for the Leaf. '... when Leaf owners use Nissan's RSS reader to access sites like CNN, the New York Times, or this one, CARWINGS supplies ... the exact location of the vehicle — latitude and longitude — and even the speed at which the vehicle is traveling at the time of the request.'"
Law enforcement will love that (Score:1)
"xxxxxxxx is going 95mph while reading CNN. He is at xxxxx,xxxxx. Wonderful!
Re: (Score:2)
Re: (Score:3)
Re: (Score:2)
Re: (Score:2)
But was it the driver or the passenger.
Re: (Score:2)
So ... (Score:4, Funny)
Re: (Score:2)
Well, it precisely tracks the *actual* device location rather than random sources of EM around it, so no ;-)
It also sends that data out, unlike iOS, so maybe it's more like Android - can you opt out on the Leaf?
(note non-seriousness and winky smiley, just to be 100% crystal clear to any hot button mods).
Re: (Score:2)
I think Safari on iOS at least asks if you want to share your location with a web site. The Android browser certainly does. It seems like they just enabled it by default, a bit like when Microsoft enabled ActiveX in IE by default. It's shocking that they were capable of making an in-car computer system but not clued up enough to avoid making mistakes that were embarrassing in the 90s.
Re: (Score:2)
The Nissan GTR is actually a much better example of a driveable iOS device. You can't mod it or drive it fast outside of a Nissan-approved track.
What if I'm reading a porn RSS feed? (Score:5, Funny)
Porn site RSS log:
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 100 mph
speed: 0 mph
connection lost
Re: (Score:1)
Re: (Score:2)
No, that 100 MPH to 0 MPH wasn't a car crash, it was draining the battery in 10 seconds and coasting to a stop.
Re: (Score:2)
100 mph in a LEAF? You are funny.
I suspect that's where he lost control and went over the guardrail.
Re: (Score:2)
You mean...like this [youtube.com]?
(Humor and taste are sometimes mutually exclusive, and sometimes, neither of them works very well.)
Re: (Score:2)
Re: (Score:2)
You can go very fast in a short time by pointing things downwards...
Nisaan Leaf violates the laws of physics (Score:5, Funny)
the exact location of the vehicle â" latitude and longitude â" and even the speed at which the vehicle is traveling at the time of the request.
Heisenberg says NEIN!
Re: (Score:1)
Re: (Score:1)
The Leaf has Heisenberg compensators.
Re: (Score:2)
Nisaan Leaf violates the laws of physics
The Leaf has Heisenberg compensators.
You cannot break the laws of physics. The dilithiam crystals 'll never take it captain.
Re: (Score:2)
MPG? (Score:2)
This is a random question, but I can't find the answer so I figured someone here might know:
What is the Leaf's gasoline MPG? Not the combined MPG, but the MPG if the battery was completely dead and you ran the car on gasoline power?
I own a Honda Insight (70MPG) and have driven the Civic Hybrid (51mpg), which are basically pure gasoline cars (no EV mode), so I'm curious how the leaf compares.
Re: (Score:2)
What is the Leaf's gasoline MPG? Not the combined MPG, but the MPG if the battery was completely dead and you ran the car on gasoline power?
Zero. You may be thinking of the Chevy Volt.
The Leaf is pure electric, range of 100 miles per charge, or if you drive like I do, more like 50 miles per charge.
Re: (Score:2)
range of 100 miles per charge
THAT'S IT? For a car that costs over $30,000? I would not be able to drive to work and back on that. No wonder the lady at work that just got a Leaf needed to install a charging station there.
Re: (Score:2)
You are not the target audience. I live close enough to mostly make it work.
But I have no garage to install the charger thingy, just a carport. A 110v extension cord does not cut it.
So apparently I am not in the target zone either. I wonder how many people actually are?
Re: (Score:2)
Consider it a (working) proof-of-concept for now, and once the charging stations start popping up everywhere, expect a lot of development in this area.
Although if they start using technology to track location and speed, expect it to die very quickly.
Re: (Score:2)
Whats it like to drive?
Re: (Score:2)
I'd imagine it's boring and a bit slow, but comfortable, like any other modern car.
Re: (Score:2)
Re: (Score:2)
So, how's that ~4 gallon commute working out for you? Economically and environmentally sustainable, is it?
Absolutely, or I wouldn't be doing it.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
He gets his plumbing done by Joe the Plumber :D
Re: (Score:2)
Sorry If you live more than 50 miles from work then why are you travelling by car at all ...?
Unless you are out in the sticks any other means of transport has to be cheaper, even moving closer to work would save you a fortune ?
Re: (Score:2)
Sorry If you live more than 50 miles from work then why are you travelling by car at all ...?
Unless you are out in the sticks any other means of transport has to be cheaper, even moving closer to work would save you a fortune ?
Unfortunately, not around here. I work in San Francisco and live in the North Bay. The bus would cost over $20/day and I would have to leave an hour and a half earlier than by car. There is no train up here. The ferry wouldn't get me where I need to go. And if you want to move, the closer you get to San Francisco the more ridiculously expensive it is to live.
Re: (Score:2)
Ah the joys of a sprawling city with poor public transport ...
Re: (Score:2)
Wow, you live pretty far from work. I could nearly drive a Leaf around for a week on a single charge.
Re: (Score:2)
The construction industry does that to you. You have to go where there's work. It doesn't come to you, unfortunately.
Re: (Score:2)
BTW, I am against subsidies, but there are federal and (some) state subsidies that greatly lower the cost to the consumer.
(Yes.. at the cost to the rest of the taxpayers, that's why I'm against subsidies.. but would take advantage of them while they're in place.)
Re: (Score:2)
off-topic but holy shit dude, you live 50mi+ from your work? Why?!
Seriously it happens. We have a guy in our office who commutes 60 miles each way, taking nearly two hours twice a day. He was made redundant in his previous job. It took him six months to find this position, during which he worked on a couple of contracts 250 miles from home (away every week) He has kids who will be going through their final school exams in the next two years - moving schools would be very disruptive at this point. It is unlikely that he will get another job near his home - in a largely rur
Re: (Score:2)
He has kids who will be going through their final school exams in the next two years - moving schools would be very disruptive at this point.
So is driving a hundred miles every day.
I don't have any easy answers for people with kids, but they made their bed and now we should have to lie in it? It's easy for me to talk because I don't have kids, but that was a choice. I don't get a say in whether you are burning up a bunch of fuel to get to a job that the world would probably be better off without anyway, statistically. Especially if it's a government job.
Re: (Score:2)
Since you say "taking nearly two hours twice a day", it sounds like you mean he runs into a lot of traffic.
So if he had a car charger at work, he could use a LEAF too, since it easily will get him *to* work. My traffic comment means that the car isn't just wasting energy (idling with gas) while stuck in traffic.
Re: (Score:1)
It's 100% electric. You can't run it on petrol.
Re: (Score:2)
To answer the question you could charge it from a petrol powered generator.
Re: (Score:2)
However, even all electric vehicles display MPGE, so that one can make a reasonable comparison between energy efficiency in different vehicles.
Re: (Score:2)
Never mind!
Stupid me - I thought the Leaf was a hybrid car like the Chevy Volt (40 mpg). Ooops.
Re: (Score:2)
Re: (Score:2)
0. It doesn't have a gasoline engine. It's not a hybrid.
Re: (Score:2)
No it is zero. The leaf would travel zero miles even if provided with 1 gallon of gas. 0/1 is zero.
Re: (Score:2)
+Inf. 100 miles / 0 gallons.
Re: (Score:3)
He's got an original Insight, the weird looking ones with the narrower rear axle, and the original MPG rating, before the EPA changed how Hybrids' ratings were calculated.
Re: (Score:2)
WTF? (Score:3)
Why is a car reading RSS feeds?
Re: (Score:2)
THat is what I was thinking! I thought we were supposed to avoid driver distraction.
Re: (Score:2)
"No," said Samuel, "but you can make very crashy car."
Re: (Score:2)
Re: (Score:3)
It gets bored while waiting at red lights?
Automatically updating its drivers? Ba-dum ching!
Re: (Score:2)
Broadcast power. [borderlands.com]
Re: (Score:2)
On the Internet, no one knows you're a car.
Re: (Score:2)
They do when you tell them you're on a highway doing 60 mph....
Re: (Score:2)
The radio has an RSS reader with text-to-speech. You can tune into an RSS feed just as you would a radio station and it will read the stories to you one by one. A friend of mine owns a Leaf. I rode in it last month and he was showing off this feature. It was pretty cool to cruise down the highway listening to LWN.net stories.
Leak? (Score:3)
Where's the leak? According to the data I see in the article this feature looks like it's specifically designed in. It's not "leaking" anything, it's specifically disseminating that information.
Re: (Score:3)
Where's the leak? According to the data I see in the article this feature looks like it's specifically designed in. It's not "leaking" anything, it's specifically disseminating that information.
It's not a leak, that's just the way it was designed. Similar to a condom with a hole in it.
Wait, that's inseminating not disseminating, never mind.
RSS Reader? (Score:3)
Ok here is my question, why on earth does a car have an RSS reader? I thought the idea was to avoid crashes and avoid driver distraction?
Re: (Score:2)
Ok here is my question, why on earth does a car have an RSS reader? I thought the idea was to avoid crashes and avoid driver distraction?
Its surely for behind-the-scenes stuff like traffic and weather updates for the GPS, firmware patches, etc. RSS is functional enough for automated "push" distribution.
Re: (Score:2)
http://www.nissan-global.com/EN/ENVIRONMENT/SOCIAL/CARWINGS/ [nissan-global.com]
the car uses realtime traffic data to do GPS route creation
there's also some weird stuff about comparing fuel economy with other car owners. something hypermilers have to do manually. of course, there's the question of why an all-electric car gives a fuck about fuel economy...
Re: (Score:2)
Re: (Score:2)
of course, there's the question of why an all-electric car gives a fuck about fuel economy...
The battery economy of an electric car is highly variable depending on driving conditions. From an engineering perspective, there is just no substitue for massive amounts of data from actual field use. Also, hypermilers are OCD douchebags who really like to feel smug about their driving habits.
Re: (Score:2)
The radio has an RSS reader with text-to-speech and will read stories aloud while you drive.
Another good use for a GPS jammer (Score:2)
Enables route-specific feeds (Score:2)
Probably to allow RSS feeds specific to your journey - for example 'travel issues affecting my journey', or 'coffee shops en route'.
The oversight is that it isn't asking before sending that information.
What if you take the SIM card out? (Score:5, Interesting)
The LEAF has a SIM card to do its stuff wirelessly. What happens if you take the SIM out? Will it just queue up all the tracking info and upload it as soon as it gets reconnected, or is it a shoot-and-forget thing where the local copy gets binned regardless of if the transmission was successful or not?
I've been looking at the LEAF (and Tesla's line-up, yes I know the prices are vastly different, that's not an issue for me) and the whole "phone home" thing is a deal-breaker. I won't buy a car with OnStar or the equivalent unless I can be 100% sure that it is disabled. I don't need that level of hand-holding and I won't spend my money in support of such a product unless it has a 100% provable "off switch."
Re: (Score:2)
Re: (Score:2)
The free market can't work without information.
Well, first things first. Let's get that "free market" thingie working, and then we'll worry about information.
Re: (Score:2)
Usually those things are pretty easy to disable. OnStar's system sits in a module in known locations which you can simply unplug the power or antenna to (a screwdriver, ratchet and a bit of manhandling may be required). I don't know about the LEAF system but I know Saab had a SIM-card based system which you could remove with a bent paperclip and when you took it out it just didn't do anything, queuing up any of that data would be useless. You could also reset the system before ever activating it again.
At th
Re: (Score:2)
You used to be able to disable OnStar just by not paying the exhorbitant fee for it.
Re: (Score:2)
Is it disabled? I assumed that they still tracked you. They just wouldn't unlock your car or tell you where you were when you got lost.
Re:What if you take the SIM card out? (Score:4, Interesting)
Re: (Score:2)
If I had the money I'd buy a Tesla Roadster, it's a very good sports car, and imagine the look on Corvette owners' faces when you pull away from them in a straight line! :D If you need the seats their new sedan is good too. The Leaf's a decent grocery-getter, but that's all it is. A boring commuter. Not even good looking, mildly sporty or luxurious, like Tesla's sedan.
Re: (Score:2)
No, I want something that makes uses of the massive over-capacity of solar-panels I installed on my roof. My intent was to use the excess to power my car rather than sell it back to the electric co at wholesale rates.
Re: (Score:2)
I have difficulting believing a car lover ...
What gave you that idea?
I can think of neater things to do with power, like making the entire home wireless.
Uh I don't really give a damn about how its transmitted around my house, I care about how it is consumed.
Re: (Score:2)
I have difficulting believing a car lover could be satisfied with anything less than internal combustion.
It's mostly old-school and muscle-car guys who have that mindset. Yeah you'll miss the noise, but the convenience, low maintenance and crushing acceleration on sporty models make up for it.
Re: (Score:2)
There are others you can buy but Nissan tries like hell to invalidate your warranty if you don't use their blessed charger installed by their holy electrician.
Ah the one that worked on the pope-mobile
Re: (Score:2)
They aren't clean though. I live in the UK with a VW using the same engine, and here it is considered a luxury higher performance engine. If you care more about "clean" you go for the blue motion - that isn't clean either though.
Re: (Score:2)
If you remove the SIM card from the vehicle, it will not "start," in that the vehicle will not shift from Park unless the SIM card is installed.
Wow. That is some suck. Will it run with a dummy card in place?
Re: (Score:2)
a large group of Nissan employees show up in a micro van and pummel you for 2 hours with Domo-kun dolls or until you submit and put the card back in.
But how do they know where to find you to beat you up, if you've pulled the SIM card from the car? Unless you're a dumbass, and pull the card while your car is sitting in your driveway at home.
If the card can be accessed while driving, even by a passenger, then pull it while you're one the freeway with your foot to the floor. That way you can avoid the ninja sqaud, and with any luck, they'll also think the car blew up....
If it's under the hood, or somewhere like that, pull over on the freeway after drivin
No security risk (Score:2)
As cars get more tech... (Score:3)
Re: (Score:2)
And people who like to breathe will never tailgate you!
Re: (Score:2, Insightful)
if the socialists would stop placing tracking electronics in modern more efficient cars people would have one less reason to avoid them.
Re: (Score:2)
I have a 1982 Mercedes Diesel sedan with over 200k on it and it barely smokes. I had a 1981 before it that smoked like a mad bastard (the guy who sold it to me is a lying sack of shit. he's my ex's uncle. his family owns a marina and a supermarket in town. this seems to be a theme in my life. the owner of hahn automotive sold me a travel trailer and made false claims, I guess I shoulda got 'em on paper.) This one actually smoked a lot too until I deleted the nonfunctional EGR, now it runs better and smokes
Re: (Score:2)
While there are some individual cases of older cars (not trucks) having pretty good emissions, anything older than 10 years will not have anything close to the emissions standards new cars have. The '72 Ford F-150 most certainly has a diesel or leaded gasoline, probably the latter. This truck is 40 years old. This means a carburetor that needs frequent tuning (possible) and no catalytic converter at all.
It's not solely the exhaust you see and/or smell, but also the exhaust you don't.
The plain fact that th
Re: (Score:2)
With a little shell script (Score:2)
Re: (Score:3)
Nissan should seriously consider a package without the GSM radio, carwings..etc... some people who would otherwise purchase a leaf may be disinclined to do so due to all the creepy unecessary features.
But they probably make at least a 50% profit margin on those 'creepy unnecessary features'.
Re: (Score:2)
Like putting a swimming pool in your backyard, adding a feature that attracts one customer but drives away another gives you net zero increase in resale price.
Re: (Score:3)
I don't want to "compare my mileage against that of other Leaf owners". What is this, the 8th grade locker room? No idea what information about the speed of your vehicle could be used for?
My sister is considering a Leaf, so I've been reading up on it. In a nutshell, all this 'telematics' is about crowdsourcing performance data on the car, so Nissan (and others) can get an accurate sense of battery life and other performance factors under a variety of conditions over the lifespan of the vehicles. So
Re:I own one of these... (Score:5, Interesting)
And the vehicle NAV screen displays an annoying message EVERY SINGLE TIME you start the car, explaining that it will be transmitting your location data and requires you to press a button on the screen to "agree" or "disagree." I assume if you disagree it won't send anything.
Mod parent up.
The LEAF has an RSS reader that reads (text to speech) the selected feed. I don't have any idea why they provide the location data to RSS feeds, but it is an opt-in system.
Re: (Score:2)
They don't follow the usual EULA approach and just not start the car if you don't agree? I find that quite impressive.