Typing a password slows you down, so now you’ll need to enter a 2fa and a password. Fucking brilliant!
You must log in or register to comment.
Also, being able to manipulate the operation of the vehicle remotely or it announcing its own location at all times doesn’t exactly scream ‘security’ (or privacy) to me.
Oh boy are you gonna be disappointed with every vehicle manufactured in the last decade
I am :(
My car is only recent enough to have Bluetooth. I’m really dreading the day I have to get something newer. I love being able to just turn a knob to adjust the temperature or volume
I have a 2025 Toyota and it has buttons and knobs for both volume and climate control. They do have an app but it requires a subscription fee to use any of those features and I don’t have any need for it. At most I’ll use remote start but I can do that with my key fob.
If there’s an app that can access that, it means there is a connection between your car and their servers, at least, and an ID tied to you that was set up when you purchased the car.
Most definitely. I was just referring to the car still having physical buttons and knobs. Not everyone has switched to touchscreen control for everything, which is something I cannot stand as well.
Agreed. I mean, it wouldn’t be so bad if they used hardware that could keep up with what they were trying to do instead of going as cheap as possible like I assume they do and the program needs time to process every touch.
But even if they were always snappy, volume and climate control should be adjustable with just a glance. It wouldn’t surprise me if auto makers think like Microsoft and “optimise” where things are each update, probably driven by someone who has strong opinions on how it should be set up but isn’t the one using it because someone else drives for them.
There’s a way to disable connected services by talking to someone with the SOS button. It obviously doesn’t cut off cell connection because it can be reactivated remotely but short of installing a bypass harness to cut power to the modem it’s the next best way to hopefully minimize telematics. They can share the telematics of your vehicle during an accident.
Literally why I keep driving only old cars.
Yes, to a degree mere words cannot accurately convey.
De nye biler og deres konstante bippen gør mig vanvittig.
Hvad? Du bryder dig ikke om tvungen kommunikation med dit køretøj som om det var en spastisk version af R2D2 med munddiarre og dyb opmærksomhedstrang?
Det er fuldt forståeligt.
Jeg kørte for nylig i en Qashqai fra Esbjerg til København, og den bippede ad mig hele vejen. Jeg var lige ved at køre den galt, bare for at få den til at holde op.
Jeg ville være villig til at betale mere for at få mindre hvis det gjorde det muligt at få en bil i stedet for et moderat mobilt infotainment center eller en to ton smartphone monteret på hjul. Men… Den eneste måde at opnå det på lige nu er at sælge huset for at købe en Koenigsegg eller sådan noget, og så meget er jeg ikke villig til at betale ekstra. Så vil jeg sgu hellere taget toget eller en bus.
…Og givet hvor godt DSB gør deres job disse dage siger det en del om hvor vi er henne.
Our 2yo Crosstrek has no starlink. No LTE. No wifi. Is it leaking our location via tachyons?
Oh, it still has a cellular module, you just don’t get to benefit from it.
https://www.torquenews.com/1084/subaru-now-involved-vehicle-data-collection-lawsuit-investigation
It likely does have a 4g connection just one you’re not also allowed to piggyback on since you didnt get the higher trim or add-on package which changes a single bit in the firmware from a 0 to 1 allowing you to use it too.
As a rule of thumb, if your car model is approved for sale in the EU after 2017, it most likely has tracking in it. And post-2021, it almost definitely has it.
Sure, it’s possible that they have a different model specifically for the non-EU market, but they still usually have the same modules installed… your data is valuable, especially in countries where they don’t need to care as much about privacy laws.
Amazon sidewalk?
I feel like whoever screenshotted this cropped a following paragraph telling users to use passkeys… That’s the only way this would make sense
Ah yes, the third kind of evil.
Passkeys can be kinda nifty. Restrictions on what is accepted as a valid device for passkeys and that sort of issues suck though.
You’re ridiculous
Im not convinced. Considering my first examples of seeing passkeys were from Microsoft and Meta trying to force feed them to me just like they do with their AI, I’m in the camp of believing there’s a more nefarious purpose behind them until completely proven otherwise. These companies are completely allergic to altruistic motives especially when it’s something being pushed this hard.
i barely see the point of passkeys anyways, you can do 90% the same thing with a password manager which 1) keeps your credentials under your own control, and 2) adds another layer of security by encrypting your list of “passkeys” (i.e. very long passwords).
The biggest selling point with passkeys is the mutual authentication. Solving for attacker in the middle phishing is huge.
That’s the only way this would make sense
Like, as fud to sell the walled garden? Yeah, that’s pretty common recently.
“My tea is cold”
“Have you learned about our Lord and Savior passkeys?”
It is for passkey
That seems like an idiot took the copy for two competing internal opinions and pasted them without understanding.
I dont have this problem with my 1996 F-350 :)
Damn its wild I dont get these issues on my 1994 renault 5 either, really gets the noggin joggin
Person heading towards lonely, empty carpark late at night after work or uni finished.
Notices someone following them.
Increases speed.
So does the person following.
Rushes to their car as the person following them starts running towards them.
Gets in their car and slams the door just as the person reaches the car, furiously smashing at the window to try and get in.
Person begins to start the car and the car responds:
“We have sent a 6-digit code to the following mobile phone number. When you receive it, type the code into your car’s keypad to authenticate”.
But the car’s ‘voice’ is drowned out by the screams as the window smashes.
Demanding you to use 2FA? Should be standard in this day and age.
As long as session cookie lasts for, dunno, months. Extended automatically.
Mandating 2FA for every fucking time you use the app, and only using email for 2FA? Special place in Hell. (I’m looking at you McDonald’s)
(Could be worse. Could be SMS 2FA.)
I went to a McDonald’s for the first time in years recently, and the first thing they ask you now is not some variation of what you’d like to order, but “Did you order on the app?”
Will you be using the McDonald’s app today?
Could be that. All I could hear through their crappy speaker was “McDonald’s app” asked in an interrogative tone.
Wow, look at that whole heap of why modern cars can fuck all the way off.
In exchange for being able to check what the charge is on our car - basically, whether it’s time to leave coffee shop - I get one of the most information-stealing, asks too-many-privileges apps on my phone. And it’s quite hard to do without it with an electric car. Looking at you, Ford, although I understand all manufacturers do the same.
MFAA and a password in exchange for eg. an OAuth token so that you can manage the devices on your account, and then use your phone’s usual security to control access to the app, would be one thing. But this looks more like the security team has made some demands, and the developers have implemented it in the laziest, MVP-compliant, way that they can.
I get one of the most information-stealing, asks too-many-privileges apps on my phone
Ford’s app doesn’t actually require ANY permissions other than network access to do what you said. It doesn’t even require Nearby Devices to lock/unlock the car, nor start climate, set departure times, etc. Their app is actually pretty non-intrusive.
…this is thanks to the fact that the car’s onboard modem is so “cloud connected” instead, so it’s even more difficult to avoid telemetries! So cool, right?
This is also why I will always make sure I have a physical keyfob if I’m ever driving a Ford somewhere. It has happened way too often that when Google Cloud has problems, Ford’s “keyless entry” goes down.
But this looks more like the security team has made some demands
More like the marketing team has made some demands that the information absolutely must never, at all costs, be provided in an open API that third-party apps that don’t steal your private info can use.
We need so much more consumer protection regulation than we have.
This could have been done by issuing a private key stored locally on device via Bluetooth. 2FA by requiring biometric on opening the app. Bonus points for allowing USB and then use whatever that monstrosity is as fallback.
Then for other sensitive details have whatever account do go through one time proof of ownership flow.
Doing it this way is just lazy.
I think it might be a bit overkill to require a login to start your car.
It’s only for remote start, or off you have the highest trim versions, using your phone instead of a key fob. Using the standard key fob requires no logging in. Though I do wish you could choose to require a pin to start the car, that would actually be a nice security feature.
Just another reason not to use the app I already don’t use
But think of all the useful data you’re missing out on generating. Sure, it’s not useful to you, but how is the manufacturer supposed to keep making money after you drive it off the lot? If you’re not thinking of the shareholders, you’re a selfish person.
Haha, love it
“I can see you’re trying to adjust your headrest. I can help you with that. To assist me, please log in to your Ford account with MFA…”
“Seat adjustment detected a new driver. Please login to add a second driver to your account. Please drink verification can to continue.”
To help speed up your log in experience, you’ll now also need to separately log into another app in order to log into this one in addition to the current method.
It’s so smooth
I’ve used this feature once to unlock the car after I forgot the keys inside. It’s nice enough to have, but that’s about the only scenario I’m likely to ever use for.
How does that happen? Does the door not unlock when you open it from the inside? Sounds like a very bad design decision on the manufacturer’s part
I don’t think they were locked in the car, the keys were.
I understand, but what I don’t understand is how the keys end up inside a locked car. Surely you need the keys to be outside to look the door through which you are exiting?
Nope. Lock button on the inside of the door, near the window buttons.
I’ve nearly done it myself a couple of times 😬
That should only lock doors that are currently closed
That’s why I like that my car just uses a normal key and not an electronic one. I just made a fuck ton of copies of it lol. Keep them everywhere. One’s even hidden on the exterior of the car itself.
Ah shit that makes so much more sense.
You don’t understand the concept of keys getting locked inside a car? This is about the most “touch grass” situation in the history of Internet comments. Locking keys in a car is super common, plenty of locksmiths make a living off the fact that it happens. Not sure how you missed that.
I think the confusion is this was a solved problem 30 years ago. Door automatically unlocks if you open from the inside and can’t be locked until you close it again. You had to work hard to get you keys locked in the car.
Engineers can create guards against mistakes, but if I wanted to find a way to lock my keys in my car that could be believably done by accident, I don’t think it would be hard. My dad recently locked his keys in his new truck. It’s possible to do.
Edit: also, 30 years? 1996 vehicles didn’t commonly protect you very much against this…
Because they unsolved the problem for some reason. Probably cut a deal with major locksmiths.
Every car in the last 30 years will lock keys in the car intentionally. It’s done this way because otherwise the car will be stolen with the keys inside of it.
Apparently not Fords. I leave the keys in my 2026 Ford Ranger fairly regularly (I live in the middle of nowhere, nobody is going to steal it here) and it has never locked the doors on me. In fact, if I leave the key in the ignition (with the car off) and hit the door lock button and close the door, it beeps twice and unlocks itself. I just tested it. If I leave the key in the cup holder I can lock it in the car, but not if it’s in the ignition.
My 2018 Excape has a keyless ignition. If I leave the key fob in the car, lock the doors with the button, and close it, the car immediately unlocks itself (without a beep). The only way to lock the key in the Escape is with a 2nd fob or with the phone app.
Nah they often just have settings to automatically lock so many minutes after exiting or lock if you’ve unlocked the vehicle but haven’t opened the door within a certain time frame. I can’t see any manufacturer trying to figure out and program the logic to intentionally lock you out of your car to prevent it from getting stolen.
It’s happened to me in like a dozen cars I don’t know what to tell you
You locking your keys in your car a dozen times doesn’t equate to proof of manufacturers programming cars to intentionally lock keys inside of them.
These systems are typically time-based around entry/exit not the location of the keys. You’re telling me every one of these dozen cars would automatically lock the vehicle if the keys were left inside but never lock if you took the keys with you? That’s supposed to be “more secure” than just locking the car 3-5 minutes after you get out and shut the door? With many vehicles being keyless now allowing you to unlock the door by just grabbing the door handle with they key fob in close proximity, how would that even work?
Furthermore, the only security present with keys 30 years ago was a tiny RFID embedded in the key that could only be “read” by the vehicle when it was in the ignition barrel, so how were these vehicles determining that your keys were still in the car? Always-on proximity sensors for key fobs only became a thing with push-button start in the 2010s.
Your old school key fobs were nothing more than ‘dumb’ garage door openers or TV remotes that only transmit when a button is pressed and only receive if the transmission is close enough to the receiving antenna, meaning neither one knows the position of the other. My TV remote will work the same whether I’m using it in my living room or standing in my front yard pointing it through my living room window. Neither the TV nor remote ‘know’ whether I’m standing inside or outside my house while pressing a button and they certainly don’t know where either is located when I’m not pressing button, so how were cars doing this way back in 1996?
Modern cars suck
30 years?
You heard me
Three decades
My car literally won’t lock if I’m outside trying to lock it and the keys are inside. It’s saved me a few times.
My less-than-30-year-old car has a normal metal key and doesn’t lock automatically.
I don’t recall the specific circumstances, it was something along the lines of having my hands full and trying to take things in from the car.
Has this really never happened to you or anyone you know? It’s not exactly common, but it’s happened to most people at one time or another. I suppose this is probably a generational thing, and harder to do with modern cars.
Most modern cars won’t lock with the key fob inside unless you fit e them to by locking them many time with a different fob
My new Ford has a 5g antenna installed. I regret my purchase tbh but I needed a small truck with good MPG and there wasn’t anything else I could get.
It probably also has an rf connector that you can disconnect.
I believe there are guides to remove the sim card in the car
A new car in 2026 probably has an eSIM, not a removable one
Fuuuck. Just smash it fr
Your vehicle might be too new for this, but you might be able to disable it by just pulling a fuse.
