funsec mailing list archives

Re: Ford's SyncMyRide -- all your voice are belong to us?


From: Shawn Merdinger <shawnmer () gmail com>
Date: Wed, 10 Mar 2010 12:13:00 -0500

On Wed, Mar 10, 2010 at 11:02 AM, Benjamin Brown <optikali () gmail com> wrote:
creeptastic

I kinda think it gets better...or worse ;)

From what I've seen so far, the SyncMyRide registration site to obtain
the "Vehicle Health Report" only requires a VIN.  Those are easy to
get, such as from Ebay Motors (and of course plenty of other places,
the vehicle dashboard, accident reports, etc.).

With the vehicle's VIN, *it seems* that anyone can go to SyncMyRide
website, then register someone else's car to anyone's contact
information (cell phone, email) to receive "Vehicle Health Reports."

The tie-in of the registered cell phone to that vehicle' SyncMyRide
service audio recording capability becomes an issue if we recall from
the terms of service:

"....Both recorded utterances and WCRs may be associated with you or
the cell phone number assigned to the Service...."

Btw, has anyone seen the actual "Vehicle Health Report" from
SyncMyRide?  Wondering what kind of info is there.

Cheers,
--scm
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: