Hacker News new | ask | show | jobs
by OutOfHere 3 hours ago
To play devil's advocate, there is some logic to banning Chinese cars, which is that their firmware risks sending telemetry to China, also disabling/malfunctioning the car if China were to have a military engagement with the US. I suggest a middle road which is that the entire telemetry surface and firmware updates must be domestically managed, with no room for a closed-source foreign entity to manipulate it.

An EV really shouldn't be needing to send telemetry at all. It's not a self-driving car. It would be better if the user could reliably and permanently disable it even when one's phone is connected.

The vehicle would also have to be tested to ensure that no covert or p2p radio signals can be sent to it that can signal it to shutdown or malfunction. This is very difficult to assert. There would have to exist domestic personnel who take responsibility for it.

Frankly though, Israel scares me more than China, as Israel is known to actually add remotely detonated explosives to exported consumer products.

4 comments

At this point, for me it's equally scary that the US government can do that. If I can't control the firmware then I don't really care for which government my car is spying for. It's all bad
If I was American, I'd be more worried about the American government & corporations spying on me because they're the one with the power over me. If I was Chinese, I'd be more worried about the Chinese government spying on me.
I'm sure China is going to be yearning for those sweet traffic pattern data during a war. They'll know which Walmarts they need to bomb first.

It's not like there are satellites that can get high-res pictures of most of the US every few hours. Or millions of phones running all kinds of software.

Even the US-made cars have dozens of computers that run very crude C-based code, full of bugs and overflows. Security was never a priority for this code. There are so many routes of ingress that it's not even funny.

> I suggest a middle road which is that the entire telemetry surface and firmware updates must be domestically managed, with no room for a closed-source foreign entity to manipulate it.

Seems fair? What about manufacturing as well, I'm sure the US can hold these Chinese car design and manufacturing techniques with the same copyright and IP protection that China gives the US's stuff.

Then make a regulation that every firmware that runs on car needs to be open sourced.

Banning isn't a good solution, we should create healthy competition.