# More spying technology

**URL:** <https://community.cartalk.com/t/more-spying-technology/186478>\
**Category:** General Discussion\
**Created:** [September 21, 2022, 6:55pm UTC](https://community.cartalk.com/t/more-spying-technology/186478 "2022-09-21T18:55:10Z")\
**Posts on this page:** 6\
**Page:** 4

<div class="post-metadata">

**Author:** ![MikeInNH](https://avatars.discourse-cdn.com/v4/letter/m/a587f6/32.png) [@MikeInNH](https://community.cartalk.com/u/MikeInNH)\
**Post date:** [September 26, 2022, 5:09pm UTC](https://community.cartalk.com/t/more-spying-technology/186478/66 "2022-09-26T17:09:13Z")

</div>

> [@bing](#):
>
> My plan if I get hit is to throw the computer away and get a new one. When my guy set mine up I got two thumb drives. One to never tough unless he had to reinstall everything, and one I’m supposed to update every couple weeks.

The only problem with that is if there’s a virus that virus software can’t detect/remove yet. May have to wait for an update from anti-virus software company.

---

<div class="post-metadata">

**Author:** ![cwatkin](https://avatars.discourse-cdn.com/v4/letter/c/59ef9b/32.png) [@cwatkin](https://community.cartalk.com/u/cwatkin)\
**Post date:** [September 26, 2022, 7:45pm UTC](https://community.cartalk.com/t/more-spying-technology/186478/67 "2022-09-26T19:45:23Z")

</div>

Cookies are not the only way. Device fingerprinting uses various metadata to do the same thing, though without the perfection of cookies. It is good enough. Read about how this works here. [device fingerprinting - Google Search](https://www.google.com/search?q=device+fingerprinting&source=hp&ei=zv8xY--BFbaJ0PEPhZOJwAE&iflsig=AJiK0e8AAAAAYzIN3vonGZDJTgfcsdyKM-CJX3_4dOtQ&oq=device+fingerprin&gs_lp=Egdnd3Mtd2l6uAED-AEBGgIYAioCCAAyBRAAGIAEMgUQABiABDIFEAAYgAQyBRAAGIAEMgUQABiABDIFEAAYgAQyBRAAGIAEMgUQABiABDIFEAAYgAQyBRAAGIAEwgIFEAAYkQLCAgQQLhhDwgIaEC4YgAQYsQMYgwEYxwEY0QMYiwMYqAMY0gPCAgsQLhixAxiDARiLA8ICDhAuGLEDGIMBGNQCGIsDwgIREC4YgAQYsQMYxwEY0QMYiwPCAgkQABhDGEYY-QHCAgQQABhDwgIIEC4YsQMYgwHCAhEQLhiABBixAxiDARjHARjRA8ICDhAAGIAEGLEDGIMBGIsDwgIQEC4YsQMYgwEYxwEY0QMYQ8ICBxAuGLEDGEPCAg4QLhiABBixAxiDARjUAsICCxAuGIAEGLEDGIMBwgIHEC4Y1AIYQ8ICBRAuGJECwgIIEAAYgAQYsQPCAg4QLhiABBixAxjHARivAcICBxAAGLEDGEPCAgsQABiABBixAxiDAcICCBAAGLEDGIMBwgIEEAAYA8ICCBAAGIAEGMkDSPYZUABYqxNwAHgAyAEAkAEAmAHaAaABkxOqAQYwLjE1LjI&sclient=gws-wiz)

Also, I have seen remote access software used by cybercriminals loaded into the UEFI BIOS of more modern computers. This is something that used to be done by a nation-state attacker but now there are ready to go toolkits for sale on the dark web to make this much easier and they tend to focus on commonly used systems. I haven’t seen this but twice but it is scary stuff. You can completely replace the hard drive or SSD, reload the OS, and the bad guys can still gain remote access. I told the customers it might be possible to crash the BIOS and recover it, wiping it clean. I told them it might render the computer unusable and they just wanted to replace the entire thing, being concerned about the risk of something remaining that we cannot see.

I certainly hope these new technologically advanced cars have means of preventing such hack or recovering from such hacks without too much trouble or danger. Perhaps the systems need to be separated in some way or another. Here is just one example of what can happen. [Police: Thieves use computers to start, steal Jeeps](https://www.freep.com/story/money/cars/2016/08/06/police-thieves-use-computers-start-steal-jeeps/88336694/)

---

<div class="post-metadata">

**Author:** ![cdaquila](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/cdaquila/32/18089_2.png) [@cdaquila](https://community.cartalk.com/u/cdaquila)\
**Post date:** [September 26, 2022, 11:39pm UTC](https://community.cartalk.com/t/more-spying-technology/186478/68 "2022-09-26T23:39:20Z")

</div>

it’s been about 15 posts since we last touched on cars. any way to get back on topic? thanks.

---

<div class="post-metadata">

**Author:** ![MikeInNH](https://avatars.discourse-cdn.com/v4/letter/m/a587f6/32.png) [@MikeInNH](https://community.cartalk.com/u/MikeInNH)\
**Post date:** [September 27, 2022, 1:01pm UTC](https://community.cartalk.com/t/more-spying-technology/186478/69 "2022-09-27T13:01:04Z")

</div>

> [@cwatkin](#):
>
> Cookies are not the only way.

Never said it was. I was just commenting on your understanding of cookies. But you were talking about advertising. Device fingerprinting is much more invasive than sending you targeted ads. A lot more complicated too. Cookies are by far the easiest way to do targeted ads.

> [@cwatkin](#):
>
> Also, I have seen remote access software used by cybercriminals loaded into the UEFI BIOS of more modern computers.

Again - that’s a completely different subject. If you want to get into a discussion on System security - I’ll be happy to accommodate. This software manager and architect in the telecom industry I’m very aware of system security. I’ve been designing and coding secure applications for decades.

> [@cwatkin](#):
>
> I certainly hope these new technologically advanced cars have means of preventing such hack or recovering from such hacks without too much trouble or danger.

They can if they want to. But they need to spend the time and money in the upfront design. You MUST design this from the start. Retrofitting security into an existing system is far more difficult. They don’t need general access like your or mine home system does. These are dedicated systems for dedicated tasks. This makes if far easier to secure. I’ve designed and built extremely secure systems that have been up and running for years and have NEVER been breached. We have one system up in running in the Middle East that easily gets attacked 1 million times a month and it’s never been breached.

---

<div class="post-metadata">

**Author:** ![cwatkin](https://avatars.discourse-cdn.com/v4/letter/c/59ef9b/32.png) [@cwatkin](https://community.cartalk.com/u/cwatkin)\
**Post date:** [September 27, 2022, 2:01pm UTC](https://community.cartalk.com/t/more-spying-technology/186478/70 "2022-09-27T14:01:28Z")

</div>

I agree that retrofits after the fact are less ideal than when compared to something designed properly from the start. Often the “fixes” only mitigate the problem a bit or introduce other issues. We saw this with firmware and software patches for Intel and AMD CPUs to mitigate the meltdown/spectre type exploits.

The biggest issues I see are social engineering/phishing where people get tricked into giving the bad guys information or just open the door and let them right in. It would be like leaving a sign on your car door stating that that the door was unlocked and that there is a brand new Apple computer and designer handbag sitting there. People just make it so easy for the bad guys 90% or more of the time.

The device fingerprinting is one thing the browser I use obscures. There is no easy way to ID my browsing sessions when compared to using a browser like Chrome which is all about selling ads.

---

<div class="post-metadata">

**Author:** ![cwatkin](https://avatars.discourse-cdn.com/v4/letter/c/59ef9b/32.png) [@cwatkin](https://community.cartalk.com/u/cwatkin)\
**Post date:** [September 27, 2022, 3:37pm UTC](https://community.cartalk.com/t/more-spying-technology/186478/71 "2022-09-27T15:37:20Z")

</div>

I really think the engine management systems and such should not be connected at all times. Maybe have a service connection that requires an appointment onsite to be flashed but not something connected to the internet via cellular. No, it wouldn’t be as convenient but would be more secure.

Then non-critical stuff like the navigation system can be flashed or updated over the air when new roads are added to maps, etc. Systems controlling throttle, steering, braking, etc. are all sealed/firewalled and only accessible via a service port at the dealer.

[Previous page](https://community.cartalk.com/t/more-spying-technology/186478.md?page=3)
