[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
www/proprietary all.html malware-cars.html malw...
|
From: |
Therese Godefroy |
|
Subject: |
www/proprietary all.html malware-cars.html malw... |
|
Date: |
Tue, 25 Apr 2023 08:22:47 -0400 (EDT) |
CVSROOT: /webcvs/www
Module name: www
Changes by: Therese Godefroy <th_g> 23/04/25 08:22:47
Modified files:
proprietary : all.html malware-cars.html
malware-microsoft.html
proprietary-back-doors.html
proprietary-insecurity.html
proprietary-sabotage.html
proprietary-subscriptions.html
proprietary-surveillance.html proprietary.html
proprietary/workshop: mal.rec
Log message:
BMW is enabling and disabling car features remotely, Tesla problem,
Surveillance software in cars (www-discuss 2023-04-07);
update a link.
CVSWeb URLs:
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/all.html?cvsroot=www&r1=1.149&r2=1.150
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/malware-cars.html?cvsroot=www&r1=1.50&r2=1.51
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/malware-microsoft.html?cvsroot=www&r1=1.166&r2=1.167
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-back-doors.html?cvsroot=www&r1=1.150&r2=1.151
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-insecurity.html?cvsroot=www&r1=1.207&r2=1.208
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-sabotage.html?cvsroot=www&r1=1.137&r2=1.138
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-subscriptions.html?cvsroot=www&r1=1.50&r2=1.51
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-surveillance.html?cvsroot=www&r1=1.459&r2=1.460
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary.html?cvsroot=www&r1=1.468&r2=1.469
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/workshop/mal.rec?cvsroot=www&r1=1.492&r2=1.493
Patches:
Index: all.html
===================================================================
RCS file: /webcvs/www/www/proprietary/all.html,v
retrieving revision 1.149
retrieving revision 1.150
diff -u -b -r1.149 -r1.150
--- all.html 20 Apr 2023 17:58:58 -0000 1.149
+++ all.html 25 Apr 2023 12:22:43 -0000 1.150
@@ -50,6 +50,43 @@
to detect once installed...</a></strong></p>
<ul class="blurbs">
+<!--#set var='ADD' value='2023-04-25' --><!--#set var='PUB' value='2023-02-28'
--><li><small class='date-tag'>Added: <span class="gnun-split"></span><!--#echo
encoding='none' var='ADD' --><span class="gnun-split"></span> — Latest
reference: <span class="gnun-split"></span><!--#echo encoding='none' var='PUB'
--></small>
+ <p>Volkswagen <a
+ href="https://pluralistic.net/2023/02/28/kinderwagen/";>
+ tracks the location of every driver, and sells that data to
+ third-parties</a>. However, it refuses to use the data to implement a
+ feature for the benefit of its customers unless they pay extra money
+ for it.</p>
+
+ <p>This came to attention and brought controversy when Volkswagen
+ refused to locate a car-jacked vehicle with a toddler in it because
+ the owner of the car had not subscribed to the relevant service.</p>
+ </li>
+
+<!--#set var='ADD' value='2023-04-25' --><!--#set var='PUB' value='2022-07-14'
--><li><small class='date-tag'>Added: <span class="gnun-split"></span><!--#echo
encoding='none' var='ADD' --><span class="gnun-split"></span> — Latest
reference: <span class="gnun-split"></span><!--#echo encoding='none' var='PUB'
--></small>
+ <p>BMW is now luring British customers into <a
+
href="https://edition.cnn.com/2022/07/14/business/bmw-subscription/index.html";>
+ paying for the built-in heated-seat feature of their new cars on a
+ subscription basis</a>. People also have the option to buy the feature
+ when they are paying for the car, but those who bought a used car have
+ to pay BMW extra money to remotely enable the heated seats. This is
+ probably done by BMW accessing a back door in the car software.</p>
+ </li>
+
+<!--#set var='ADD' value='2023-04-25' --><!--#set var='PUB' value='2022-07-04'
--><li><small class='date-tag'>Added: <span class="gnun-split"></span><!--#echo
encoding='none' var='ADD' --><span class="gnun-split"></span> — Latest
reference: <span class="gnun-split"></span><!--#echo encoding='none' var='PUB'
--></small>
+ <p>A bug in Tesla cars software <a
+
href="https://www.tweaktown.com/news/86780/new-app-allows-hackers-to-steal-teslas-by-making-their-own-keys/index.html";>
+ lets crackers install new car keys</a>, unlock cars, start engines,
+ and even prevent real owners from accessing their cars.</p>
+
+ <p>Another report also states that crackers are/were able to <a
+
href="https://fortune.com/2022/01/12/teen-hacker-david-colombo-took-control-25-tesla-ev/";>
+ disable security systems and take control of the cars</a>.</p>
+
+ <small>Please note that these articles wrongly use the word “<a
+
href="https://www.gnu.org/philosophy/words-to-avoid.html#Hacker";>hacker</a>”
nstead of cracker.</small>
+ </li>
+
<!--#set var='ADD' value='2023-04-12' --><!--#set var='PUB' value='2023-04-06'
--><li><small class='date-tag'>Added: <span class="gnun-split"></span><!--#echo
encoding='none' var='ADD' --><span class="gnun-split"></span> — Latest
reference: <span class="gnun-split"></span><!--#echo encoding='none' var='PUB'
--></small>
<p>Tesla cars record videos of activity inside the car, and <a
href="https://arstechnica.com/tech-policy/2023/04/tesla-workers-shared-images-from-car-cameras-including-scenes-of-intimacy/";>
@@ -2296,7 +2333,7 @@
force-installing a “remediation”
program</a> on computers running certain
versions of Windows 10. Remediation, in Microsoft's view, means <a
-
href="https://support.microsoft.com/en-us/topic/kb4023057-update-for-windows-update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a";>
+
href="https://support.microsoft.com/en-us/topic/kb4023057-update-health-tools-windows-update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a";>
tampering with users' settings and files</a>, notably to
“repair” any components of the updating system that users
may have intentionally disabled, and thus regain full power over
@@ -3063,7 +3100,7 @@
<p class="unprintable">Updated:
<!-- timestamp start -->
-$Date: 2023/04/20 17:58:58 $
+$Date: 2023/04/25 12:22:43 $
<!-- timestamp end -->
</p>
</div>
Index: malware-cars.html
===================================================================
RCS file: /webcvs/www/www/proprietary/malware-cars.html,v
retrieving revision 1.50
retrieving revision 1.51
diff -u -b -r1.50 -r1.51
--- malware-cars.html 12 Apr 2023 08:25:46 -0000 1.50
+++ malware-cars.html 25 Apr 2023 12:22:44 -0000 1.51
@@ -91,6 +91,21 @@
8 years.</p>
</li>
+ <li id="M202302280">
+ <!--#set var="DATE" value='<small class="date-tag">2023-02</small>'
+ --><!--#echo encoding="none" var="DATE" -->
+ <p>Volkswagen <a
+ href="https://pluralistic.net/2023/02/28/kinderwagen/";>
+ tracks the location of every driver, and sells that data to
+ third-parties</a>. However, it refuses to use the data to implement a
+ feature for the benefit of its customers unless they pay extra money
+ for it.</p>
+
+ <p>This came to attention and brought controversy when Volkswagen
+ refused to locate a car-jacked vehicle with a toddler in it because
+ the owner of the car had not subscribed to the relevant service.</p>
+ </li>
+
<li id="M202211301">
<!--#set var="DATE" value='<small class="date-tag">2022-11</small>'
--><!--#echo encoding="none" var="DATE" -->
@@ -132,6 +147,34 @@
<p>This is one more reason why cars must not be
“connected.”</p>
</li>
+ <li id="M202207140">
+ <!--#set var="DATE" value='<small class="date-tag">2022-07</small>'
+ --><!--#echo encoding="none" var="DATE" -->
+ <p>BMW is now luring British customers into <a
+
href="https://edition.cnn.com/2022/07/14/business/bmw-subscription/index.html";>
+ paying for the built-in heated-seat feature of their new cars on a
+ subscription basis</a>. People also have the option to buy the feature
+ when they are paying for the car, but those who bought a used car have
+ to pay BMW extra money to remotely enable the heated seats. This is
+ probably done by BMW accessing a back door in the car software.</p>
+ </li>
+
+ <li id="M202207040">
+ <!--#set var="DATE" value='<small class="date-tag">2022-07</small>'
+ --><!--#echo encoding="none" var="DATE" -->
+ <p>A bug in Tesla cars software <a
+
href="https://www.tweaktown.com/news/86780/new-app-allows-hackers-to-steal-teslas-by-making-their-own-keys/index.html";>
+ lets crackers install new car keys</a>, unlock cars, start engines,
+ and even prevent real owners from accessing their cars.</p>
+
+ <p>Another report also states that crackers are/were able to <a
+
href="https://fortune.com/2022/01/12/teen-hacker-david-colombo-took-control-25-tesla-ev/";>
+ disable security systems and take control of the cars</a>.</p>
+
+ <small>Please note that these articles wrongly use the word “<a
+
href="https://www.gnu.org/philosophy/words-to-avoid.html#Hacker";>hacker</a>”
nstead of cracker.</small>
+ </li>
+
<li id="M202008181">
<!--#set var="DATE" value='<small class="date-tag">2020-08</small>'
--><!--#echo encoding="none" var="DATE" -->
@@ -501,7 +544,7 @@
<p class="unprintable">Updated:
<!-- timestamp start -->
-$Date: 2023/04/12 08:25:46 $
+$Date: 2023/04/25 12:22:44 $
<!-- timestamp end -->
</p>
</div>
Index: malware-microsoft.html
===================================================================
RCS file: /webcvs/www/www/proprietary/malware-microsoft.html,v
retrieving revision 1.166
retrieving revision 1.167
diff -u -b -r1.166 -r1.167
--- malware-microsoft.html 4 Apr 2023 11:47:33 -0000 1.166
+++ malware-microsoft.html 25 Apr 2023 12:22:44 -0000 1.167
@@ -485,7 +485,7 @@
force-installing a “remediation”
program</a> on computers running certain
versions of Windows 10. Remediation, in Microsoft's view, means <a
-
href="https://support.microsoft.com/en-us/topic/kb4023057-update-for-windows-update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a";>
+
href="https://support.microsoft.com/en-us/topic/kb4023057-update-health-tools-windows-update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a";>
tampering with users' settings and files</a>, notably to
“repair” any components of the updating system that users
may have intentionally disabled, and thus regain full power over
@@ -1052,7 +1052,7 @@
<p class="unprintable">Updated:
<!-- timestamp start -->
-$Date: 2023/04/04 11:47:33 $
+$Date: 2023/04/25 12:22:44 $
<!-- timestamp end -->
</p>
</div>
Index: proprietary-back-doors.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-back-doors.html,v
retrieving revision 1.150
retrieving revision 1.151
diff -u -b -r1.150 -r1.151
--- proprietary-back-doors.html 26 Nov 2022 11:26:56 -0000 1.150
+++ proprietary-back-doors.html 25 Apr 2023 12:22:45 -0000 1.151
@@ -147,6 +147,18 @@
<h3 id='alter-data'>Altering user's data or settings</h3>
<ul class="blurbs">
+ <li id="M202207140">
+ <!--#set var="DATE" value='<small class="date-tag">2022-07</small>'
+ --><!--#echo encoding="none" var="DATE" -->
+ <p>BMW is now luring British customers into <a
+
href="https://edition.cnn.com/2022/07/14/business/bmw-subscription/index.html";>
+ paying for the built-in heated-seat feature of their new cars on a
+ subscription basis</a>. People also have the option to buy the feature
+ when they are paying for the car, but those who bought a used car have
+ to pay BMW extra money to remotely enable the heated seats. This is
+ probably done by BMW accessing a back door in the car software.</p>
+ </li>
+
<li id="M202109220">
<!--#set var="DATE" value='<small class="date-tag">2021-09</small>'
--><!--#echo encoding="none" var="DATE" -->
@@ -1018,7 +1030,7 @@
<p class="unprintable">Updated:
<!-- timestamp start -->
-$Date: 2022/11/26 11:26:56 $
+$Date: 2023/04/25 12:22:45 $
<!-- timestamp end -->
</p>
</div>
Index: proprietary-insecurity.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-insecurity.html,v
retrieving revision 1.207
retrieving revision 1.208
diff -u -b -r1.207 -r1.208
--- proprietary-insecurity.html 4 Mar 2023 16:45:19 -0000 1.207
+++ proprietary-insecurity.html 25 Apr 2023 12:22:45 -0000 1.208
@@ -174,6 +174,22 @@
to crackers as “hackers.”</small></p>
</li>
+ <li id="M202207040">
+ <!--#set var="DATE" value='<small class="date-tag">2022-07</small>'
+ --><!--#echo encoding="none" var="DATE" -->
+ <p>A bug in Tesla cars software <a
+
href="https://www.tweaktown.com/news/86780/new-app-allows-hackers-to-steal-teslas-by-making-their-own-keys/index.html";>
+ lets crackers install new car keys</a>, unlock cars, start engines,
+ and even prevent real owners from accessing their cars.</p>
+
+ <p>Another report also states that crackers are/were able to <a
+
href="https://fortune.com/2022/01/12/teen-hacker-david-colombo-took-control-25-tesla-ev/";>
+ disable security systems and take control of the cars</a>.</p>
+
+ <small>Please note that these articles wrongly use the word “<a
+
href="https://www.gnu.org/philosophy/words-to-avoid.html#Hacker";>hacker</a>”
nstead of cracker.</small>
+ </li>
+
<li id="M202202090">
<!--#set var="DATE" value='<small class="date-tag">2022-02</small>'
--><!--#echo encoding="none" var="DATE" -->
@@ -1347,7 +1363,7 @@
<p class="unprintable">Updated:
<!-- timestamp start -->
-$Date: 2023/03/04 16:45:19 $
+$Date: 2023/04/25 12:22:45 $
<!-- timestamp end -->
</p>
</div>
Index: proprietary-sabotage.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-sabotage.html,v
retrieving revision 1.137
retrieving revision 1.138
diff -u -b -r1.137 -r1.138
--- proprietary-sabotage.html 12 Nov 2022 20:56:29 -0000 1.137
+++ proprietary-sabotage.html 25 Apr 2023 12:22:45 -0000 1.138
@@ -255,7 +255,7 @@
force-installing a “remediation”
program</a> on computers running certain
versions of Windows 10. Remediation, in Microsoft's view, means <a
-
href="https://support.microsoft.com/en-us/topic/kb4023057-update-for-windows-update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a";>
+
href="https://support.microsoft.com/en-us/topic/kb4023057-update-health-tools-windows-update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a";>
tampering with users' settings and files</a>, notably to
“repair” any components of the updating system that users
may have intentionally disabled, and thus regain full power over
@@ -926,7 +926,7 @@
<p class="unprintable">Updated:
<!-- timestamp start -->
-$Date: 2022/11/12 20:56:29 $
+$Date: 2023/04/25 12:22:45 $
<!-- timestamp end -->
</p>
</div>
Index: proprietary-subscriptions.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-subscriptions.html,v
retrieving revision 1.50
retrieving revision 1.51
diff -u -b -r1.50 -r1.51
--- proprietary-subscriptions.html 4 Apr 2023 10:49:24 -0000 1.50
+++ proprietary-subscriptions.html 25 Apr 2023 12:22:45 -0000 1.51
@@ -116,6 +116,18 @@
<p>This is one more reason why cars must not be
“connected.”</p>
</li>
+ <li id="M202207140">
+ <!--#set var="DATE" value='<small class="date-tag">2022-07</small>'
+ --><!--#echo encoding="none" var="DATE" -->
+ <p>BMW is now luring British customers into <a
+
href="https://edition.cnn.com/2022/07/14/business/bmw-subscription/index.html";>
+ paying for the built-in heated-seat feature of their new cars on a
+ subscription basis</a>. People also have the option to buy the feature
+ when they are paying for the car, but those who bought a used car have
+ to pay BMW extra money to remotely enable the heated seats. This is
+ probably done by BMW accessing a back door in the car software.</p>
+ </li>
+
<li id="M202106220">
<!--#set var="DATE" value='<small class="date-tag">2021-06</small>'
--><!--#echo encoding="none" var="DATE" -->
@@ -302,7 +314,7 @@
<p class="unprintable">Updated:
<!-- timestamp start -->
-$Date: 2023/04/04 10:49:24 $
+$Date: 2023/04/25 12:22:45 $
<!-- timestamp end -->
</p>
</div>
Index: proprietary-surveillance.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-surveillance.html,v
retrieving revision 1.459
retrieving revision 1.460
diff -u -b -r1.459 -r1.460
--- proprietary-surveillance.html 12 Apr 2023 08:25:46 -0000 1.459
+++ proprietary-surveillance.html 25 Apr 2023 12:22:45 -0000 1.460
@@ -3042,6 +3042,21 @@
8 years.</p>
</li>
+ <li id="M202302280">
+ <!--#set var="DATE" value='<small class="date-tag">2023-02</small>'
+ --><!--#echo encoding="none" var="DATE" -->
+ <p>Volkswagen <a
+ href="https://pluralistic.net/2023/02/28/kinderwagen/";>
+ tracks the location of every driver, and sells that data to
+ third-parties</a>. However, it refuses to use the data to implement a
+ feature for the benefit of its customers unless they pay extra money
+ for it.</p>
+
+ <p>This came to attention and brought controversy when Volkswagen
+ refused to locate a car-jacked vehicle with a toddler in it because
+ the owner of the car had not subscribed to the relevant service.</p>
+ </li>
+
<li id="M202105130">
<!--#set var="DATE" value='<small class="date-tag">2021-05</small>'
--><!--#echo encoding="none" var="DATE" -->
@@ -3774,7 +3789,7 @@
<p class="unprintable">Updated:
<!-- timestamp start -->
-$Date: 2023/04/12 08:25:46 $
+$Date: 2023/04/25 12:22:45 $
<!-- timestamp end -->
</p>
</div>
Index: proprietary.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary.html,v
retrieving revision 1.468
retrieving revision 1.469
diff -u -b -r1.468 -r1.469
--- proprietary.html 12 Apr 2023 08:25:47 -0000 1.468
+++ proprietary.html 25 Apr 2023 12:22:45 -0000 1.469
@@ -225,6 +225,49 @@
to detect once installed...</a></strong></p>
<ul class="blurbs">
+ <li id="M202302280">
+ <!--#set var="DATE" value='<small class="date-tag">2023-02</small>'
+ --><!--#echo encoding="none" var="DATE" -->
+ <p>Volkswagen <a
+ href="https://pluralistic.net/2023/02/28/kinderwagen/";>
+ tracks the location of every driver, and sells that data to
+ third-parties</a>. However, it refuses to use the data to implement a
+ feature for the benefit of its customers unless they pay extra money
+ for it.</p>
+
+ <p>This came to attention and brought controversy when Volkswagen
+ refused to locate a car-jacked vehicle with a toddler in it because
+ the owner of the car had not subscribed to the relevant service.</p>
+ </li>
+
+ <li id="M202207140">
+ <!--#set var="DATE" value='<small class="date-tag">2022-07</small>'
+ --><!--#echo encoding="none" var="DATE" -->
+ <p>BMW is now luring British customers into <a
+
href="https://edition.cnn.com/2022/07/14/business/bmw-subscription/index.html";>
+ paying for the built-in heated-seat feature of their new cars on a
+ subscription basis</a>. People also have the option to buy the feature
+ when they are paying for the car, but those who bought a used car have
+ to pay BMW extra money to remotely enable the heated seats. This is
+ probably done by BMW accessing a back door in the car software.</p>
+ </li>
+
+ <li id="M202207040">
+ <!--#set var="DATE" value='<small class="date-tag">2022-07</small>'
+ --><!--#echo encoding="none" var="DATE" -->
+ <p>A bug in Tesla cars software <a
+
href="https://www.tweaktown.com/news/86780/new-app-allows-hackers-to-steal-teslas-by-making-their-own-keys/index.html";>
+ lets crackers install new car keys</a>, unlock cars, start engines,
+ and even prevent real owners from accessing their cars.</p>
+
+ <p>Another report also states that crackers are/were able to <a
+
href="https://fortune.com/2022/01/12/teen-hacker-david-colombo-took-control-25-tesla-ev/";>
+ disable security systems and take control of the cars</a>.</p>
+
+ <small>Please note that these articles wrongly use the word “<a
+
href="https://www.gnu.org/philosophy/words-to-avoid.html#Hacker";>hacker</a>”
nstead of cracker.</small>
+ </li>
+
<li id="M202304060">
<!--#set var="DATE" value='<small class="date-tag">2023-04</small>'
--><!--#echo encoding="none" var="DATE" -->
@@ -249,54 +292,6 @@
snoops on other apps, and takes control of them</a>. It also installs
additional malware that is hard to remove.</p>
</li>
-
- <li id="M202304010">
- <!--#set var="DATE" value='<small class="date-tag">2023-04</small>'
- --><!--#echo encoding="none" var="DATE" -->
- <p>GM is switching to a new
- audio/video system in its cars in order to <a
-
href="https://edition.cnn.com/2023/04/01/business/gm-apple-play-evs/index.html";>
- collect complete information about what people in the car watch or
- listen to, and also how they drive</a>.</p>
-
- <p>The new system for navigation and “driving assistance”
- will be tethered to various online dis-services, and GM will snoop on
- everything the users do with them. But don't feel bad about that,
- because some of these subscriptions will be gratis for the first
- 8 years.</p>
- </li>
-
- <li id="M202302080">
- <!--#set var="DATE" value='<small class="date-tag">2023-02</small>'
- --><!--#echo encoding="none" var="DATE" -->
- <p>As soon as it boots, and without asking any permission, <a
-
href="https://www.techspot.com/news/97535-windows-11-spyware-machine-out-users-control.html";>Windows
- 11 starts to send data to online servers</a>. The user's personal
- details, location or hardware information are reported to Microsoft and
- other companies to be used as telemetry data. All of this is done is
- the background, and users have no easy way to prevent it—unless
- they switch the computer offline.</p>
- </li>
-
- <li id="M202301230">
- <!--#set var="DATE" value='<small class="date-tag">2023-01</small>'
- --><!--#echo encoding="none" var="DATE" -->
- <p>A dispute between Blizzard and one of its partners caused <a
-
href="https://www.theguardian.com/world/2023/jan/23/world-of-warcraft-offline-china-millions-gamers-bereft";>
- World of Warcraft to go offline in China</a>. The shutdown may not be
- permanent, but even if it is not, the fact that a business disagreement
- can stop all users in China from playing the game illustrates the
- injustice of requiring the use of a specific server.</p>
-
- <p>We expect that users must pay to use that server, but whether that
- is the case is a side issue. Even if use of that server is gratis,
- the harm comes from the fact that the program doesn't allow people
- to make and use other servers for that job.</p>
-
- <p>Let's hope game fans in China learn the importance of <a
- href="https://gnu.org/philosophy/nonfree-games.html";>rejecting nonfree
- games</a>.</p>
- </li>
</ul>
<p class="button right-align">
<a href="/proprietary/all.html">More items…</a></p>
@@ -359,7 +354,7 @@
<p class="unprintable">Updated:
<!-- timestamp start -->
-$Date: 2023/04/12 08:25:47 $
+$Date: 2023/04/25 12:22:45 $
<!-- timestamp end -->
</p>
</div>
Index: workshop/mal.rec
===================================================================
RCS file: /webcvs/www/www/proprietary/workshop/mal.rec,v
retrieving revision 1.492
retrieving revision 1.493
diff -u -b -r1.492 -r1.493
--- workshop/mal.rec 20 Apr 2023 17:58:59 -0000 1.492
+++ workshop/mal.rec 25 Apr 2023 12:22:46 -0000 1.493
@@ -24,6 +24,61 @@
#### Please don't remove the blank line after this marker! ####
# ADD NEW BLURB HERE
+Added: 2023-04-25
+Id: 202302280
+RT: www-discuss 2023-04-07 (Surveillance software in cars)
+PubDate: 2023-02-28
+Target: malware-cars.html malware-cars
+Target: proprietary-surveillance.html SpywareInVehicles
+Target: proprietary-subscriptions.html
+Keywords:
+Blurb: <p>Volkswagen <a
++ href="https://pluralistic.net/2023/02/28/kinderwagen/";>
++ tracks the location of every driver, and sells that data to
++ third-parties</a>. However, it refuses to use the data to implement a
++ feature for the benefit of its customers unless they pay extra money
++ for it.</p>
++
++ <p>This came to attention and brought controversy when Volkswagen
++ refused to locate a car-jacked vehicle with a toddler in it because
++ the owner of the car had not subscribed to the relevant service.</p>
+
+Added: 2023-04-25
+Id: 202207040
+RT: www-discuss 2023-04-07 (Tesla problem)
+PubDate: 2022-07-04
+PubDate: 2022-01-12
+Target: malware-cars.html malware-cars
+Target: proprietary-insecurity.html proprietary-insecurity
+Keywords:
+Blurb: <p>A bug in Tesla cars software <a
++
href="https://www.tweaktown.com/news/86780/new-app-allows-hackers-to-steal-teslas-by-making-their-own-keys/index.html";>
++ lets crackers install new car keys</a>, unlock cars, start engines,
++ and even prevent real owners from accessing their cars.</p>
++
++ <p>Another report also states that crackers are/were able to <a
++
href="https://fortune.com/2022/01/12/teen-hacker-david-colombo-took-control-25-tesla-ev/";>
++ disable security systems and take control of the cars</a>.</p>
++
++ <small>Please note that these articles wrongly use the word “<a
++
href="https://www.gnu.org/philosophy/words-to-avoid.html#Hacker";>hacker</a>”
nstead of cracker.</small>
+
+Added: 2023-04-25
+Id: 202207140
+RT: www-discuss 2023-04-07 (BMW is enabling and disabling car features...)
+PubDate: 2022-07-14
+Target: proprietary-subscriptions.html proprietary-subscriptions
+Target: proprietary-back-doors.html alter-data
+Target: malware-cars.html malware-cars
+Keywords:
+Blurb: <p>BMW is now luring British customers into <a
++
href="https://edition.cnn.com/2022/07/14/business/bmw-subscription/index.html";>
++ paying for the built-in heated-seat feature of their new cars on a
++ subscription basis</a>. People also have the option to buy the feature
++ when they are paying for the car, but those who bought a used car have
++ to pay BMW extra money to remotely enable the heated seats. This is
++ probably done by BMW accessing a back door in the car software.</p>
+
Added: 2023-04-12
Id: 202304060
RT: www-discuss 2023-04-09 (surveillance)
@@ -3371,7 +3426,7 @@
+ force-installing a “remediation”
+ program</a> on computers running certain
+ versions of Windows 10. Remediation, in Microsoft's view, means <a
-+
href="https://support.microsoft.com/en-us/topic/kb4023057-update-for-windows-update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a";>
++
href="https://support.microsoft.com/en-us/topic/kb4023057-update-health-tools-windows-update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a";>
+ tampering with users' settings and files</a>, notably to
+ “repair” any components of the updating system that users
+ may have intentionally disabled, and thus regain full power over