>>>>> "Ted" == Ted Lemon <ted.le...@nominum.com> writes:
>> So, I have a question: how much privacy is actually contained in the
>> VIN or indexed by the VIN? Given that it's printed on the windshield.
>> Yes, it contains model, year and manufacturer of the car, but all of
>> that information is also visible by looking at the vehicle.
Ted> The fact that the VIN is printed on the windshield is not as
Ted> practical a problem as it would be if the VIN could be
Ted> trivially retrieved electronically. How big a privacy issue
Ted> that is, I don't know, but it would certainly make tracking the
Ted> car easy.
So, we have assumed that a 802.11p sniffer sitting in Times Square can
sniff the prefix used by passing vehicles. If I put another sniffer
outside Wrigley Field, I can do correlation... how does knowing the VIN
help me? I already know it is the same car.
If I can derive the VIN from the prefix, I agree that it helps identify
the vehicle, but not really. If any of this stuff is going to be
useful, there will already be a collision avoidance protocol that will
tell each car (even when they are parked) where the other vehicles are,
so that they can be avoided.
If I can rederive the prefix from the VIN, then it seems we also have
problems.
What I'm saying is that I don't
think that there are *new*
privacy problems here.
>> I am way more concerned about privacy concerns where the VIN, given that
>> it can be easily known, can then be used to derive the prefix that the
>> vehicle uses and then seek out that vehicle's systems electronically.
Ted> Indeed, if a car thief wanted to hack their way into the car to
Ted> steal it, being able to read the VIN off the window and then
Ted> immediately identify which messages were coming from that car
Ted> would be a minor or major problem, depending on how bad the
Ted> security on the car was.
If there are security problems with the car security system, I don't
think the problem of identifying the vehicle by VIN is a hurdle.
Use ICMP echo ("ping") RTT as sonar (see, it was named probably), and when you
are nearby, tell the vehicle to turn itself on, honk the horn, and pop
the trunk.
--
] Never tell me the odds! | ipv6 mesh networks [
] Michael Richardson, Sandelman Software Works | network architect [
] m...@sandelman.ca http://www.sandelman.ca/ | ruby on rails [
pgpnIIjtrNbAv.pgp
Description: PGP signature
-------------------------------------------------------------------- IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------
