Key Takeaways
- A study by Northeastern University and Consumer Reports found that connected cars share data with advertisers and tech firms.
- Using a car’s companion app can increase the amount of data shared.
- The research involved testing 21 cars from 19 different brands.
A recent study conducted by researchers from Northeastern University and Consumer Reports has revealed that connected cars continue to pose significant privacy concerns, sharing user data with a variety of entities, including advertisers and technology firms.
The study, which tested 21 cars from 19 different brands, uncovered patterns of data sharing that extend beyond the car itself, with traffic being directed to advertisers and trackers, as well as major tech companies such as Microsoft and Adobe.
Furthermore, the use of a car’s companion app was found to exacerbate the issue, potentially multiplying the amount of data shared with external entities.
To conduct the study, the researchers employed a range of methods, including driving the cars under various conditions and even parking 11 electric vehicles in a Faraday tent to simulate the loss of cellular signals.
Despite attempts to analyze the actual data packets using modified certificates, these efforts were unsuccessful. However, the network traces provided valuable insights, including the domains contacted via DNS traffic, Server Name Indication (SNI) in TLS handshakes, the volume and timing of transmissions, and differences in behavior across experimental scenarios.
The study highlights the ongoing privacy challenges associated with connected cars, echoing previous findings from the Mozilla Foundation, which in 2023 published a report appalled by the privacy policies of major automakers.
The researchers emphasized that the network traces yielded more useful information than direct analysis of the data packets, suggesting that the data itself may be obfuscated or encrypted in ways that prevent easy interpretation.
These findings underscore the need for greater transparency and stronger privacy protections in the automotive industry, as consumers continue to rely on connected cars for both convenience and safety.
