Typing a password slows you down, so now you’ll need to enter a 2fa and a password. Fucking brilliant!
You must log in or register to comment.
That seems like an idiot took the copy for two competing internal opinions and pasted them without understanding.
Also, being able to manipulate the operation of the vehicle remotely or it announcing it’s own location at all times doesn’t exactly scream ‘security’ (or privacy) to me.
Oh boy are you gonna be disappointed with every vehicle manufactured in the last decade
Yes, to a degree mere words cannot accurately convey.
De nye biler og deres konstante bippen gør mig vanvittig.
Hvad? Du bryder dig ikke om tvungen kommunikation med dit køretøj som om det var en spastisk version af R2D2 med munddiarre og dyb opmærksomhedstrang?
Det er fuldt forståeligt.
Jeg kørte for nylig i en Qashqai fra Esbjerg til København, og den bippede ad mig hele vejen. Jeg var lige ved at køre den galt, bare for at få den til at holde op.
Our 2yo Crosstrek has no starlink. No LTE. No wifi. Is it leaking our location via tachyons?
As a rule of thumb, if your car model is approved for sale in the EU after 2017, it most likely has tracking in it. And post-2021, it almost definitely has it.
Sure, it’s possible that they have a different model specifically for the non-EU market, but they still usually have the same modules installed… your data is valuable, especially in countries where they don’t need to care as much about privacy laws.
It likely does have a 4g connection just one you’re not also allowed to piggyback on since you didnt get the higher trim or add-on package which changes a single bit in the firmware from a 0 to 1 allowing you to use it too.
Oh, it still has a cellular module, you just don’t get to benefit from it.
https://www.torquenews.com/1084/subaru-now-involved-vehicle-data-collection-lawsuit-investigation
I am :(
My car is only recent enough to have Bluetooth. I’m really dreading the day I have to get something newer. I love being able to just turn a knob to adjust the temperature or volume
I have a 2025 Toyota and it has buttons and knobs for both volume and climate control. They do have an app but it requires a subscription fee to use any of those features and I don’t have any need for it. At most I’ll use remote start but I can do that with my key fob.
If there’s an app that can access that, it means there is a connection between your car and their servers, at least, and an ID tied to you that was set up when you purchased the car.
Most definitely. I was just referring to the car still having physical buttons and knobs. Not everyone has switched to touchscreen control for everything, which is something I cannot stand as well.
Literally why I keep driving only old cars.
“I can see you’re trying to adjust your headrest. I can help you with that. To assist me, please log in to your Ford account with MFA…”
“Seat adjustment detected a new driver. Please login to add a second driver to your account. Please drink verification can to continue.”
Passkeys are the way to go… Best of both worlds imo
I superficially thought so. Then read this article and ended up reconsidering my initial perspective. There’s a reason they’re being pushed currently and for sure it’s not to improve the user experience.
Great article, thanks for sharing it
B b b but for access to my car?? Disclaimer: I must admit, I don’t get, why I would want to have remote access.
So you can lay in bed on a winter day and trigger the remote start. That’s about it. I have used the “feature” exactly once.
My wife does love that feature I must say. Although you can also use your keyfob and point it out the window if your car is nearby.
I have my KIA connected to home assistant which knows my calendar. Its nice to just have the car warm/cool without thinking about it. But its not necessary, just nice.
Remote start doesn’t need that though - I’ve installed several since the 90’s and none of them needed internet or an account.
The latest ones take about 15 minutes to install - that includes unboxing, reading the instructions, and finding the connectors.
I dont have this problem with my 1996 F-350 :)
I feel like whoever screenshotted this cropped a following paragraph telling users to use passkeys… That’s the only way this would make sense
That’s the only way this would make sense
Like, as fud to sell the walled garden? Yeah, that’s pretty common recently.
“My tea is cold”
“Have you learned about our Lord and Savior passkeys?”
Ah yes, the third kind of evil.
Passkeys can be kinda nifty. Restrictions on what is accepted as a valid device for passkeys and that sort of issues suck though.
You’re ridiculous
Im not convinced. Considering my first examples of seeing passkeys were from Microsoft and Meta trying to force feed them to me just like they do with their AI, I’m in the camp of believing there’s a more nefarious purpose behind them until completely proven otherwise. These companies are completely allergic to altruistic motives especially when it’s something being pushed this hard.
i barely see the point of passkeys anyways, you can do 90% the same thing with a password manager which 1) keeps your credentials under your own control, and 2) adds another layer of security by encrypting your list of “passkeys” (i.e. very long passwords).
The biggest selling point with passkeys is the mutual authentication. Solving for attacker in the middle phishing is huge.
Wow, look at that whole heap of why modern cars can fuck all the way off.
Just another reason not to use the app I already don’t use
But think of all the useful data you’re missing out on generating. Sure, it’s not useful to you, but how is the manufacturer supposed to keep making money after you drive it off the lot? If you’re not thinking of the shareholders, you’re a selfish person.
This could have been done by issuing a private key stored locally on device via Bluetooth. 2FA by requiring biometric on opening the app. Bonus points for allowing USB and then use whatever that monstrosity is as fallback.
Then for other sensitive details have whatever account do go through one time proof of ownership flow.
Doing it this way is just lazy.
In exchange for being able to check what the charge is on our car - basically, whether it’s time to leave coffee shop - I get one of the most information-stealing, asks too-many-privileges apps on my phone. And it’s quite hard to do without it with an electric car. Looking at you, Ford, although I understand all manufacturers do the same.
MFAA and a password in exchange for eg. an OAuth token so that you can manage the devices on your account, and then use your phone’s usual security to control access to the app, would be one thing. But this looks more like the security team has made some demands, and the developers have implemented it in the laziest, MVP-compliant, way that they can.
But this looks more like the security team has made some demands
More like the marketing team has made some demands that the information absolutely must never, at all costs, be provided in an open API that third-party apps that don’t steal your private info can use.
We need so much more consumer protection regulation than we have.
I get one of the most information-stealing, asks too-many-privileges apps on my phone
Ford’s app doesn’t actually require ANY permissions other than network access to do what you said. It doesn’t even require Nearby Devices to lock/unlock the car, nor start climate, set departure times, etc. Their app is actually pretty non-intrusive.
…this is thanks to the fact that the car’s onboard modem is so “cloud connected” instead, so it’s even more difficult to avoid telemetries! So cool, right?
This is also why I will always make sure I have a physical keyfob if I’m ever driving a Ford somewhere. It has happened way too often that when Google Cloud has problems, Ford’s “keyless entry” goes down.
I’ve used this feature once to unlock the car after I forgot the keys inside. It’s nice enough to have, but that’s about the only scenario I’m likely to ever use for.
How does that happen? Does the door not unlock when you open it from the inside? Sounds like a very bad design decision on the manufacturer’s part
I don’t recall the specific circumstances, it was something along the lines of having my hands full and trying to take things in from the car.
Has this really never happened to you or anyone you know? It’s not exactly common, but it’s happened to most people at one time or another. I suppose this is probably a generational thing, and harder to do with modern cars.
I don’t think they were locked in the car, the keys were.
I understand, but what I don’t understand is how the keys end up inside a locked car. Surely you need the keys to be outside to look the door through which you are exiting?
Every car in the last 30 years will lock keys in the car intentionally. It’s done this way because otherwise the car will be stolen with the keys inside of it.
Apparently not Fords. I leave the keys in my 2026 Ford Ranger fairly regularly (I live in the middle of nowhere, nobody is going to steal it here) and it has never locked the doors on me. In fact, if I leave the key in the ignition (with the car off) and hit the door lock button and close the door, it beeps twice and unlocks itself. I just tested it. If I leave the key in the cup holder I can lock it in the car, but not if it’s in the ignition.
My 2018 Excape has a keyless ignition. If I leave the key fob in the car, lock the doors with the button, and close it, the car immediately unlocks itself (without a beep). The only way to lock the key in the Escape is with a 2nd fob or with the phone app.
Modern cars suck
30 years?
You heard me
Nah they often just have settings to automatically lock so many minutes after exiting or lock if you’ve unlocked the vehicle but haven’t opened the door within a certain time frame. I can’t see any manufacturer trying to figure out and program the logic to intentionally lock you out of your car to prevent it from getting stolen.
It’s happened to me in like a dozen cars I don’t know what to tell you
You locking your keys in your car a dozen times doesn’t equate to proof of manufacturers programming cars to intentionally lock keys inside of them.
These systems are typically time-based around entry/exit not the location of the keys. You’re telling me every one of these dozen cars would automatically lock the vehicle if the keys were left inside but never lock if you took the keys with you? That’s supposed to be “more secure” than just locking the car 3-5 minutes after you get out and shut the door? With many vehicles being keyless now allowing you to unlock the door by just grabbing the door handle with they key fob in close proximity, how would that even work?
Furthermore, the only security present with keys 30 years ago was a tiny RFID embedded in the key that could only be “read” by the vehicle when it was in the ignition barrel, so how were these vehicles determining that your keys were still in the car? Always-on proximity sensors for key fobs only became a thing with push-button start in the 2010s.
Your old school key fobs were nothing more than ‘dumb’ garage door openers or TV remotes that only transmit when a button is pressed and only receive if the transmission is close enough to the receiving antenna, meaning neither one knows the position of the other. My TV remote will work the same whether I’m using it in my living room or standing in my front yard pointing it through my living room window. Neither the TV nor remote ‘know’ whether I’m standing inside or outside my house while pressing a button and they certainly don’t know where either is located when I’m not pressing button, so how were cars doing this way back in 1996?
Nope. Lock button on the inside of the door, near the window buttons.
I’ve nearly done it myself a couple of times 😬
Ah shit that makes so much more sense.
That’s why I like that my car just uses a normal key and not an electronic one. I just made a fuck ton of copies of it lol. Keep them everywhere. One’s even hidden on the exterior of the car itself.
You don’t understand the concept of keys getting locked inside a car? This is about the most “touch grass” situation in the history of Internet comments. Locking keys in a car is super common, plenty of locksmiths make a living off the fact that it happens. Not sure how you missed that.
I think the confusion is this was a solved problem 30 years ago. Door automatically unlocks if you open from the inside and can’t be locked until you close it again. You had to work hard to get you keys locked in the car.
Engineers can create guards against mistakes, but if I wanted to find a way to lock my keys in my car that could be believably done by accident, I don’t think it would be hard. My dad recently locked his keys in his new truck. It’s possible to do.
Edit: also, 30 years? 1996 vehicles didn’t commonly protect you very much against this…
Because they unsolved the problem for some reason. Probably cut a deal with major locksmiths.
To help speed up your log in experience, you’ll now also need to separately log into another app in order to log into this one in addition to the current method.
It’s so smooth
Person heading towards lonely, empty carpark late at night after work or uni finished.
Notices someone following them.
Increases speed.
So does the person following.
Rushes to their car as the person following them starts running towards them.
Gets in their car and slams the door just as the person reaches the car, furiously smashing at the window to try and get in.
Person begins to start the car and the car responds:
“We have sent a 6-digit code to the following mobile phone number. When you receive it, type the code into your car’s keypad to authenticate”.
But the car’s ‘voice’ is drowned out by the screams as the window smashes.
My new Ford has a 5g antenna installed. I regret my purchase tbh but I needed a small truck with good MPG and there wasn’t anything else I could get.
It probably also has an rf connector that you can disconnect.
Your vehicle might be too new for this, but you might be able to disable it by just pulling a fuse.
I believe there are guides to remove the sim card in the car
A new car in 2026 probably has an eSIM, not a removable one
I think it might be a bit overkill to require a login to start your car.
