„Security flaws” is a very weird way to describe a deliberately implemented feature.
this post was submitted on 25 Jan 2025
22 points (95.8% liked)
Cars - For Car Enthusiasts
4034 readers
38 users here now
About Community
c/Cars is the largest automotive enthusiast community on Lemmy and the fediverse. We're your central hub for vehicle-related discussion, industry news, reviews, projects, DIY guides, advice, stories, and more.
Rules
- Stay respectful to the community, hold civil discussions, even when others hold opinions that may differ from yours.
- This is not an NSFW community, and any such content will not be tolerated.
- Policy, not politics! Policy discussions revolve around the concept; political discussions revolve around the individual, party, association, etc. We only allow POLICY discussions and political discussions should go to c/politics.
- Must be related to cars, anything that does not have connection to cars will be considered spam/irrelevant and is subject to removal.
founded 2 years ago
MODERATORS
I just removed the fuse for the DCM in my Subaru earlier today. Both because I don't trust Subaru with my data (the privacy policy says basically by existing in the cabin, you consent to being audio recorded and the recordings sent back to Suburu for any use Subaru might want to use them for) and because my car apparently can't go four days without being driven without the battery dying. I'm hoping the problem is parasitic draw from the Starlink DCM module thing that I just disabled.
If it's not that, I'll have to do more diagnostics.
There's a recall for that. They will replace your telematics module for free with a "bypass box", which preserves the function of the front speakers, which stop working when you pull that fuse. Sorry I don't know if this also ends the telematics phone home problem. This is specifically to address the battery drain problem. It fixed my similar battery issues.
Anybody know if it turns off the data uploads, or not?
Why the fuck don’t you sell that spying smart piece of shit then? You know, they aren’t really forcing us to buy new trendy things.
That's the state of vehicles these days. I bought the Subaru I'm driving now because my 2005 Saturn was getting harder and harder to maintain. (And because I wanted more than 1,000 cubic centimeters of cargo space. (Yes, I'm being hyperbolic, but yeah.))
Subaru is hardly the worst offender on privacy. I don't know that I could have gotten a less "smart" car without getting an older vehicle, and the one I was selling was harder to maintain specifically because it was old.
I think the best we can hope for is hackable devices. Being able to just remove the DCM fuse is "hackable" in my book. I got a robot vacuum cleaner, but I got the model that's best for running Valetudo. I got a smartphone with an unlocked bootloader so I could run LineageOS. I didn't get a Nintendo Switch until the Fusee Gilee vulnerability was discovered. I didn't really shop around for a "hackable" car before I bought this Subaru. But I'm satisfied with the "just unplug the DCM fuse" solution.
I mean, that definitely shouldn't be the issue with the battery. But, definitely let us know if it is cause that'd seriously be news worthy info.
It's a well-known problem with Subarus. There's a class action suit about it. My Subaru supposedly isn't from one of the affected model years, so it may well be a long shot hoping this is the DCM. But I guess I'll find out for sure if the problem with my particular Subaru is the DCM.
Another thing I've heard from a random Reddit post is that the alternator's firmware might not allow the battery to fully charge.
And, of course, anything else might pull current for no reason. Or the batter might be fucked. Who knows. I'll figure it out eventually.
I don't think anyone is surprised by security flaws in automanufacturers's technology. It's expected.
I wouldn't even argue which manufacturer does it better. Security is an afterthought.
Hopefully Subaru fixes their flaws soon.