Conversation

Notices

1. Embed this notice
   Andy Smith (grifferz@social.bitfolk.com)'s status on Saturday, 04-Jan-2025 21:55:53 JST Andy Smith

   Volkswagen left telemetry from 800,000 electric vehicles on an open S3 bucket. In 466k cases — including the entire fleet of the Hamburg police — it was possible to reconstruct the detailed movements of every vehicle and connect that with the identity of the owner.

   Update: See replies. Not an open S3 bucket but AWS key dumped out of JVM.

   https://www.carscoops.com/2024/12/vw-group-data-breach-exposed-location-info-for-800000-evs/

   • Embed this notice
     Andy Smith (grifferz@social.bitfolk.com)'s status on Saturday, 04-Jan-2025 21:56:11 JST Andy Smith

     in reply to

     • Russ Garrett

     @russss
     Hah, great slide… position of VW EVs with owner email that ends in "gov.uk"

   • Embed this notice
     Russ Garrett (russss@chaos.social)'s status on Saturday, 04-Jan-2025 21:56:12 JST Russ Garrett

     in reply to

     @grifferz the talk was really good but it's in German - here's the English simultaneous translation:

     https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-volksdaten-von-volkswagen#l=eng

     Matthew Fennell repeated this.
   • Embed this notice
     Russ Garrett (russss@chaos.social)'s status on Saturday, 04-Jan-2025 21:56:14 JST Russ Garrett

     in reply to

     @grifferz it wasn't quite an open S3 bucket this time:

     https://chaos.social/@russss/113729717983729088