Hacker News new | ask | show | jobs
by autoexec 1154 days ago
> CarPlay and AndroidAuto don’t give the car any access to the phone data

Perhaps that's changed. There have been warnings about using AndroidAuto and CarPlay with rental cars for years. Now that cars are increasingly collecting data and sending it home themselves, any info your personal car has collected from your phone or usage can be sent back too.

https://www.wgal.com/article/connecting-your-cellphone-to-yo...

https://www.creativetechs.com/2022/06/24/how-to-safely-use-c...

https://old.reddit.com/r/AndroidAuto/comments/v1z1ru/is_it_g...

For some details see: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9571200/

> In addition, the forensic artifacts acquired in each analysis area show that the forensic artifacts obtainable in IVI systems using Android Auto and Apple CarPlay are not limited to the internal storage in a mobile device. As such, a digital forensic examination of various elements constituting the IVI system is a useful addition to vehicle forensics. An increasing number of people are using Android Auto and Apple CarPlay, and more vehicles and manufacturers are sup-porting these systems. The proposed forensic methodology and the acquired artifacts can be applied as an important basis for future vehicle crime investigations.

2 comments

Your second link says

> There’s no worry about CarPlay revealing any of your information to later car renters

And the NIH study just says there has not been any research done on the issue yet.

The issue isn't with Android Auto/CarPlay, but the legacy Bluetooth features that give the car access to your phonebook and SMS logs. You need to make sure to decline those when connecting your phone.

I’m not sure CarPlay gives anything.

But every car I’ve hooked CarPlay up to wants to register it with Bluetooth at the same time so it can access my contacts. And that is a risk.