BreachExchange mailing list archives

fringe: Nissan LEAF CARWINGS tells any RSS feed provider your current position, speed, direction, destination, etc.


From: security curmudgeon <jericho () attrition org>
Date: Tue, 14 Jun 2011 00:33:51 -0500 (CDT)


http://seattlewireless.net/~casey/?p=97

Nissan LEAF CARWINGS tells any RSS feed provider your current position, 
speed, direction, destination, etc.

The Nissan LEAF all-electric car is full of technological firsts. One of 
which is a GSM cellular connection to the internet for providing voluntary 
telemetry information to Nissan, new charging stations, competitive driver 
rankings, and even RSS feeds. This is called Nissan CARWINGS.

However, before you start plugging in your favorite RSS feed sources, 
there is something you need to be aware of.

After creating some of my own third party RSS feeds, I noticed something 
very peculiar in the HTTP GET in my apache logs (note that I blanked out 
the exact position of the car in my drive way with x and y):

[..]

This entry was posted on Sunday, June 12th, 2011 at 8:11 pm
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Learn encryption strategies that manage risk and shore up compliance.
Download Article 1 of CREDANT Technologies' The Essentials Series:
Endpoint Data Encryption That Actually Works
http://credant.com/campaigns/realtime2/gap-LP1/


Current thread: