Researchers drove a NIO ES8 electric SUV deep into a Norwegian underground mine specifically to sever its external connections. The car kept attempting to reach servers, most of them located in China. These findings echo broader concerns about hidden data collection, similar to how a surveillance app was built to covertly target users without their knowledge.
That finding sits at the center of Project Lion Cage, a multi-year study initiated in 2022 by Tor Indstøy, a risk management and threat intelligence executive at Telenor Group. Indstøy purchased the NIO ES8 as a dedicated research platform.
The project arrives as Chinese EV brands expand across European markets with assurances about local data processing. Observed network behavior appears to contradict those assurances.
I’d like to not be spied on. But if forced to choose, I would rather be spied on by a foreign goverment than a domestic one.
Why? At least with a domestic government you can vote and lobby for data controls. GDPR, etc.
My BMW checking if my bmw subscription is active when I’m trying to enable seat heater
I wonder what the security is like. I’d love to know how difficult it would be to set up a mock-service to just tell it you have everything.
You’d expect there to be encryption and some kind of certificate validation to check the response is trustworthy, but given what we now know about the CAN bus that many cars use, and how vulnerable it is to attack, it suggests the motor industry is way behind the times in terms of security.
It would just be easier to wire it directly to a switch.
No shit? A communist country that has more camera than people, tracks all communication, and blocks the Internet/all major apps from their entire countrys cars they manufactured track everything you do… I’m so shocked /s
These people that cry about wanting Chinese EVs in the US are the same people that cry when they have thermal runaway, no warranty, and are built cutting every corner possible. I fucking hate Trump, but in case in hate to say he’s right.
All of that has nothing to do with communism. China isn’t even communist.
Obviously it would keep calling…
The point was likely to see what would happen if they could be 100% sure it couldn’t connect in anyway.
Before deciding if it’s worth attempting to find every conney, you need to verify what happens if you did succeed.
Like, finding out it bricks every vehicle after 24 hrs means it’s useless to bother and they need banned.
Like the Polish trains that were remotely disabled when taken in at a competitor’s maintenance shop https://hackaday.com/2023/12/14/polish-train-manufacturer-threatens-hackers-who-unbricked-their-trains/
