Toyota Forum banner

2nd major security breach in less than a year

3.3K views 37 replies 13 participants last post by  StephenBForbes  
#1 ·
#2 ·
There really are no excuses for data breaches, you either secure your data or not. How important or how much damage could occur from its losses = how much hardening of your system is necessary, its really very simple.

Any execution less than that is a disservice to the users.
 
#4 ·
What really is inexcusable is that Toyota hasn't taken active steps to inform owners and the information only appeared in a 3rd party IT news site. Whenever a data breach occurs, the company should immediately inform owners, tell them what information was exposed, and how they can protect themselves. But Toyota has a long history of trying to hide safety and security issues from the public and authorities. Total lack of corporate ethics.
 
#8 ·
I am the original owner of a 1986.5 MkIII Supra.
If I ever buy a replacement ... :LOL: I'd want to opt out of all the big-brother crap.
I've looked but can't find a thread on that topic, but perhaps my search skills are weak.

Can someone point me in the right direction?
Is it still as simple as pulling the proper fuse out of the fuse box?

Thanks!
Jim
 
#10 ·
I am the original owner of a 1986.5 MkIII Supra.
If I ever buy a replacement ... :LOL: I'd want to opt out of all the big-brother crap.
I've looked but can't find a thread on that topic, but perhaps my search skills are weak.

Can someone point me in the right direction?
Is it still as simple as pulling the proper fuse out of the fuse box?

Thanks!
Jim
I found this article this morning have not read yet, but in case any of y'all are interested:



Your car is spying on you:

Your car is spying on you: How to see what data it's collecting and delete it
 
#9 · (Edited by Moderator)
I have no idea what the T-Connect "APP" is or does, nor do I care in the slightest!

I was in data processing and computer management for decades and as far as I am concerned XP-Pro was the pinnacle of operating systems. The rest is just Big Brother taking over. Just like he has done with our cars. Therefore, I have no smartphones, I still use a desktop computer with WindSucks 7 Pro and will not own any vehicle later than 2000!

If people didn't keep all of their personal information on their stupid phones then these problems wouldn't occur! Way too much technology way too fast and no responsibility or sanity to guide its use. You got what you deserved!

Step back. Get older cars and stop relying on toys to do things for you. If no one buys the newer junk heaps with all of the bells and whistles then they will sit on them until Hell freezes over. Unfortunately, the children must have their toys and play things which is why such problems as data breeches exist.

Screw it all! Get back to basics!
 
#11 ·
That is just one of the reasons why I refuse to buy any car beyond 2000! None of that invasive BS is contained within my vehicles. Big Brother is watching! This just proves it. Stop buying cars made after 2000 if you want your privacy! Also, get rid of your stupid notsosmart phones! They are a direct link back to The Man! However, if you don't mind having all of your personal information spread across the universe, then go ahead and buy a new clown mobile. You WILL get what you deserve!
 
#12 ·
If you have a smartphone, a computer or a tablet (which you obviously do, because you are able to post on this forum) your personal information is already spread across the universe. Smartphones are the biggest thieves of personal information, especially if you use apps. A car makes almost no difference once you sell your soul to the devil by buying an iPhone or Android phone.
 
#13 ·
Ask the dealer to throw one in
Image
 
#14 ·
I have no smartphone. Only a basic flip phone. I store nothing on it. I remember any phone number I wish to call and do not store them on the phone. Any number that I do not recognize goes unanswered. I have no voice mail.

I access the Internet through a well protected laptop which goes through several security steps. My overall presence and information spillage is minimal, at best. I do very, very little business through the Internet and my banking is done mostly in person.

This forum has many script based hitch hikers which are blocked from accessing this system. Here is the list:


…toyotanation.com
…amazon-adsystem.com
…cloudflareinsights.com
…doubleclick.net
…googletagmanager.com
…gstatic.com
…htplayground.com
…speedcurve.com


I've been at this for a long time and know how to keep most of my information off line. That is due to the use of a military grade service provider.

My cars have only the basic in computer power because none of them are newer than 2000. I plan on keeping it that way.

FWIW
 
#21 ·
I have no smartphone. Only a basic flip phone. I store nothing on it. I remember any phone number I wish to call and do not store them on the phone. Any number that I do not recognize goes unanswered. I have no voice mail.

I access the Internet through a well protected laptop which goes through several security steps. My overall presence and information spillage is minimal, at best. I do very, very little business through the Internet and my banking is done mostly in person.

This forum has many script based hitch hikers which are blocked from accessing this system. Here is the list:


…toyotanation.com

…amazon-adsystem.com

…cloudflareinsights.com

…doubleclick.net

…googletagmanager.com

…gstatic.com

…htplayground.com

…speedcurve.com


I've been at this for a long time and know how to keep most of my information off line. That is due to the use of a military grade service provider.

My cars have only the basic in computer power because none of them are newer than 2000. I plan on keeping it that way.

FWIW
Short list there...
Just on this page I have 40 blocked...
Image
 
  • Like
Reactions: NoGo3
#15 · (Edited)
Your data will never be safe even if you do everything to keep your presence to the absolute minimum. Unless the people around you are as diligent as you regarding data security, they will spread your data through them and their technology. Today's world is so connected that thieves do not need access to you to find out who you are. Even forum posts are enough to start the search if you have time and diligence to find connections.

Maybe not if you live under a rock as a hermit.

In the meantime, I'll enjoy my 2023 car with all the bells and whistles.
 
#16 ·
#17 ·
I learned a valuable lesson long before the majority of you were born. "Keep your friends close. Keep your enemies closer!" My rule that I passed on to my team and kids was that you never, EVER take prisoners and if so, leave no witnesses, even on your side! BWAHAHAHAHA!

You can have all of the useless bells and whistles that your little heart desires. I find them to be completely useless and of no value whatsoever. There is no special toy that is in your car that I would ever require. Not one. All of my cars have what is needed to do the job of driving to and from my destination, which is the primary goal of having a car. What could you have in your car that is not in mine that is an absolute mandatory item? Nothing!
 
#18 ·
It is sad that you find it necessary to live as you do. I have worked in top secret and secret positions and know from first hand experience, most people are not even a target for anyone but maybe spammers or people who want to steal your identity. Unless you are a foreign agent or a possible terrorist or someone who has made threats to the government or high ranking folks, the government could care less who you are or what you do.
 
#19 ·
If you have a Store Card, a Bank Account, or Credit Card, Visit your PCP aka Doctor, or have Utility Bill, Phone Bill, or cable bill, regardless if you never have used a computer or cellular phone. The U.S. Government including foreign companies and governments do have information about you. You cannot hide in this age of technology. Most people you know at one time or another have spoken of you and the things you do. Word gets around. Why Hide? they will find you anyways. Can you run away from 8 Billion human inhabitants? Your birth record, social security, marriage license, property taxes, vehicle ownership, and driver's license it is all out there. If someone is determined to get it, they will have it. Don't become a Hermit, live your life not in constant fear or phobia. Life is too short as it is. Why not buy a newer automobile? Sure, I love the Classics cars of the later 1950s, 1960s, to mid-1970s, and some antiques.
 
#22 ·
The problem with data collection is not the collection but the fact it's on insecure servers waiting to be stolen. There's an insane amount of data breaches every day. Few are reported and some have been lurking on networks silently for years undetected. Then there's the undocumented back doors. A common programmer "feature" that started as soon as programming did. Then the doors and decryption the US government demands.

Oh, and how many US and other nation's government agencies have been hacked to date? You may not access the net but your personal information is stored there.

FYI @StephenBForbes your flip phone has the same traceable options as a brand new smart phone. GPS and cell tower triangulation. Your calls, texts and any activity are all logged by your provider too.

Digital fingerprinting is also bypassing all your security measures when connecting to the net. It's now impossible to live without being traced somewhere.

Personally I've made the decision (thought it was happening last year, then again this year) once my internet provider refuses to give me service for $30/month I terminate my service, Probably next year.
 
#26 ·
Well, you got "the government", you got "the hidden hand" that directs the government and controls the boards of directors of all the corporations, and you got hierarchies of organized crime, through which data is bought, sold, collected and ultimately used by ...someone.

Lower exposure means less problems. Many have been absolutely cursed by identity theft-related crime.

It seems like it's only a matter of time where some sort of "Wiki leaks" style of attack is launched against the citizenry in what will be the next controlled crisis, i.e. "problem, reaction, solution" control of society.
Or maybe a giant sun-spot flare will happen first, crashing the digital world all at once.
We've been warned about these things, so which are probably parts of elaborate future narratives that are being planned as we speak.

It seems odd that supermarkets offer such large new discounts every week to those who allow an "app" to interact with their phone, I'm talking dollars off of an already sale-priced item.
 
#27 ·
It amazes me that people worry about "big government" watching them, but willingly give away tons of information to private companies who monetize this information for profit.

While the government may be interested in some aspects of your personal data, such as extremist viewpoints, the reality is that it's nothing compared to the amount of deeply intimate personal information you willingly give away to a dozens of private companies when you open a Facebook or Twitter account, sign up for Gmail or simply use Google search or maps. As soon as you accept their Terms and Conditions and Privacy Policy, you essentially give these companies a total and unlimited access to your personal information. They track and analyze your every post, email or even the time you spent looking at photos or other people posts on their websites. You don't even have to "like" a post to leave a "signature", the simple fact that you stare at a photo or somebody's post for 10 seconds vs just scrolling through gives them insight about your interests, viewpoints and wealth. Google, Meta, Twitter and your cellular (or ISP) provider knows everything about you. And, unlike the government, which has to stick to some rules and laws, these companies can do whatever they want with this information. The amount of legal protection of the information you willingly give away to private companies by accepting any of their services is practically zero. You are just a "product" that Meta, Twitter, Google, Amazon and your ISP sell to the highest bidder every day.

99% of security breaches and identity theft doesn't happen on government sites, but from databases held by private companies.
 
#28 ·
This is true and that is why I only post things that I don’t care if the whole world knows. Identity theft is definitely a concern of mine but I know from experience with the government that my identity would not be useful to the government so it’s the individual citizens who I am more concerned with. I most concerned about the citizens who want to destroy this country thinking they are going to save it.

Well, you got "the government", you got "the hidden hand" that directs the government and controls the boards of directors of all the corporations, and you got hierarchies of organized crime, through which data is bought, sold, collected and ultimately used by ...someone.

Lower exposure means less problems. Many have been absolutely cursed by identity theft-related crime.

It seems like it's only a matter of time where some sort of "Wiki leaks" style of attack is launched against the citizenry in what will be the next controlled crisis, i.e. "problem, reaction, solution" control of society.
Or maybe a giant sun-spot flare will happen first, crashing the digital world all at once.
We've been warned about these things, so which are probably parts of elaborate future narratives that are being planned as we speak.

It seems odd that supermarkets offer such large new discounts every week to those who allow an "app" to interact with their phone, I'm talking dollars off of an already sale-priced item.
The hidden hand or whatever has been with humanity for over two thousand years and probably longer than that. Things have never been what they seem to be or what has been documented. But generally throughout history, the peasants, which is most of the citizens, have just been expendable pawns. Occasionally the peasants overthrow the power but soon the peasants fall under the control of new hidden hands and new power and give up any power that they briefly had.
 
#30 ·
A wise old friend once said: "The difference between an optimist and a pessimist is that a pessimist knows all the facts."

I'm not afraid of the guv'ment knowing my personal data. I'm afraid of some hacker getting the DATA they store.
Only one social online presence and that's TN.

Sure, Microsoft stores my emails and google stores my searches. ScamAzon offers me suggestions for air filters that don't fit my car. Baby items because I once bought a microwave baby bottle sterilizer that I thought I could use to sterilize my Amber glass bottles I use for my bulk vaping bases.

I've always said "Artificial Intelligence is a substitute for natural stupidity.
There's a small group of people in the middle between tin foil hat conspiracists and a naive fools.
People are NOT generally good and honest. That's something that comes with knowledge and wisdom.

To the famous quote "There's a sucker born every minute"
I add: "... and 2 morons!"

And you don't need to be something to realize someone else is.
"A fool thinks he's wise. A wise man knows he's a fool"
When I was young I thought I knew it all. Now that I've amassed years of knowledge I know that I know nothing.

Some people grow old and some people grow up.
 
  • Like
Reactions: garywayne
#32 ·
A wise old friend once said: "The difference between an optimist and a pessimist is that a pessimist knows all the facts."

I'm not afraid of the guv'ment knowing my personal data. I'm afraid of some hacker getting the DATA they store.
Only one social online presence and that's TN.

Sure, Microsoft stores my emails and google stores my searches. ScamAzon offers me suggestions for air filters that don't fit my car. Baby items because I once bought a microwave baby bottle sterilizer that I thought I could use to sterilize my Amber glass bottles I use for my bulk vaping bases.

I've always said "Artificial Intelligence is a substitute for natural stupidity.
There's a small group of people in the middle between tin foil hat conspiracists and a naive fools.
People are NOT generally good and honest. That's something that comes with knowledge and wisdom.

To the famous quote "There's a sucker born every minute"
I add: "... and 2 morons!"

And you don't need to be something to realize someone else is.
"A fool thinks he's wise. A wise man knows he's a fool"
When I was young I thought I knew it all. Now that I've amassed years of knowledge I know that I know nothing.

Some people grow old and some people grow up.
An optimist and a pessimist can both have the same knowledge. It’s their perception of the information that slants their point of view.
 
#36 ·
Let's try and get back on thread subject matter rather than a whine party with no cheese.
2nd major security breach in less than a year

Yota like thousands of other companies does not take IT security seriously.
Buy burner prepaid phones cash if you want some privacy.
Use burner email accounts for forced registrations and use a fake name and your neighbor's address.
Don't register on day to day sites where phone txt message authentication and/or to much info is demanded.
Don't use your google or other login easy access schemes.
Setup a firewall or better yet segregate your network with a smart switch and VLANs between your home network and your smart TV and devices. Avoid wfi and hardwire main PC(s) Kick all easily hackable IOT devices out of your home. Don't use any apps and services that store your info in the cloud. That's what home servers and NAS are for.
Never open spam/scam emails even if it might seem legit. Opening is enough for some attacks to work. NEVER click on a link. If it's from your bank etc then log into the site directly.

NEVER use public WIFI without a PAID GOOD VPN SERVICE. Better yet never connect to public WFI.

Lock credit cards after use and only unlock when needed. Get rid of any CC that doesn't offer locking.

You can't keep all the bugs from getting into your house but the more you seal openings the less you need to chase.