Remix.run Logo
everdrive 6 hours ago

The 2024 Ford Maverick has a single fuse for the telematics unit that you can remove without throwing a code or an error. No idea if this remained true after the 2025-2026 refresh, but worth knowing.

https://www.mavericktruckclub.com/forum/threads/telematics-f...

xattt 5 hours ago | parent | next [-]

Kias have a “Massachusetts mode” flag hidden behind a service menu (that needs a dealer code) that disables telematics at the owner’s request. However, the service menu pin also has timeout protection that will inject a waiting period between retries so there is no guessing.

I don’t think there’s convincing my dealer to get into the service menu and disabling it.

I would presume that other manufacturers might have this as well.

ok_dad 5 hours ago | parent | next [-]

Give one of the mechanics $500 and I bet they’ll accidentally drop the password on the floor of the car as they get out after moving it inside to change the oil.

s3p 4 hours ago | parent | next [-]

Or someone get access to 5.5 cyber or mythos and brute force their way in

cucumber3732842 an hour ago | parent | prev [-]

I bet if you can speak to the mechanic without the service advisor supervising the innteraction $100 would do it.

ok_dad 44 minutes ago | parent [-]

Yea but it’s worth at least $500 to me so I’d give the guy more, personally. $100 is a nice dinner out, $500 might help pay a bill.

formerly_proven 41 minutes ago | parent | prev | next [-]

> I would presume that other manufacturers might have this as well.

On newer vdubs there’s both a “location services” and a “offline mode” toggle in the infotainment, though this only turns the infotainment SIM off. Obviously this also disables remotely controlling the car using the app.

And the secondary eCall SIM cannot be disabled - not without triggering a fault code and a tell-tale. Since eCall is considered a safety-critical system it has self-monitoring and must work for the vehicle to pass inspection. It even has its own separate power supply. This is true for any vehicle (type) newer than ~2018 in the EU. This probably makes tracking the rough location of any eCall-equipped vehicle quite easy, if you have signaling-level access to the cell network – exactly like in all those SS7 exploits.

edit: turns out they thought about that and eCall modules aren’t supposed to constantly stay connected to a cellular network (dormant mode). Instead they only log onto the cellular network when needed. Difficult to verify as a consumer though.

giancarlostoro 2 hours ago | parent | prev | next [-]

I'm more afraid of the likelihood of someone smashing the window on a modern Kia thinking they can start it up with an iPhone lightning cable (just look up "Kia Boys" if you're confused by any of this) and drive off with it, when in fact, they cannot anymore. Unfortunately, until people stop breaking into Kias I'll avoid the brand in perpetuity.

38 minutes ago | parent [-]
[deleted]
bell-cot 4 hours ago | parent | prev | next [-]

> I don't think there's convincing my dealer...

How far do you live from Massachusetts, and how do your feel about driving vacations?

nullc 4 hours ago | parent | prev [-]

> Kias have a “Massachusetts mode” flag hidden behind a service menu (that needs a dealer code) that disables telematics at the owner’s request.

I would be very concerned that the flag just continues to submit your data but with a "telematics disabled" bit set on it. This is absolutely how location privacy is implemented in some devices. Moreover, even if it is effective it could be remotely reset including accidentally as part of an update.

Better than not setting it, I suppose! :)

drnick1 6 hours ago | parent | prev [-]

Older Toyotas also had a DCM fuse, and this was the easiest way to get rid of telemetry. I am not sure if partially disassembling the dash and physically removing the DCM is now necessary.

arkadiyt 5 hours ago | parent [-]

There's still a fuse for the DCM even in this car but:

- It has an internal battery and will keep running for quite a while after pulling the fuse. This is a safety feature in case you get in a crash that disconnects the 12V battery

- It will break your in-car microphone as discussed. Repairing that requires opening up the dash

- That won't do anything for disconnecting the GPS antenna

brewdad 4 hours ago | parent [-]

GPS is receive only. If you've disabled the ability to send telemetry, there should be no reason to be concerned about the GPS antenna.

fc417fc802 4 hours ago | parent | next [-]

If it keeps collecting telemetry it could upload it later if it ever gets the chance. Better it isn't collected in the first place.

willis936 2 hours ago | parent | next [-]

That also means it isn't passed to your phone via android auto / carplay. Phone GPS is much worse than car GPS for road navigation. It's basically unusable.

drnick1 2 hours ago | parent | prev [-]

Good point, but in practice I think the only way onboard data could be exfiltrated is by a dealer while the car is being serviced. If you DIY or hire an independent mechanic, this seems unlikely.

throwway120385 2 hours ago | parent [-]

Or by the FBI, NSA, CIA, DHS, or some other interested entity.

willis936 2 hours ago | parent [-]

If a TLA is interested in you then you don't need to worry about a data log in your car.

arkadiyt 3 hours ago | parent | prev [-]

This is addressed in the blog :)