upvote
> I wonder what happens if you disable the e-SIM (in the US) and then a safety recall appears via software update - do dealers have any way to update control modules besides OTA?

I would assume so. Even on older cars, service techs can typically manually push firmware updates over the OBD-II / J2534 port. Rivian's OBD-II port actually hides an Ethernet signal inside of it - so the interface is certainly there.

Fun fact: You can buy an Ethernet adapter directly from Rivian here to connect to the car's internal network: https://rivianservicetools.com/Catalog/Product/TSN00535-300-...

reply
> Rivian's OBD-II port actually hides an Ethernet signal inside of it - so the interface is certainly there.

Nice. This is really normal now, for what it's worth - all of the European makes have moved this direction as well (DoIP over ENET). There's shockingly little documentation about Rivian online, though, probably because emissions regulation doesn't mandate it.

reply
reply
The first link leads malicious ads/malware. On iphone says viruses detected pretending to be apple/google
reply
I am on desktop and saw no such warning, but I'm also using adblockers and noscript.
reply
Yeah, I got a cable to update my 2017 BMW's infotainment system, and it's OBD-II to RJ45. Doesn't seem to be too new of a thing.
reply
Yep! Depending on the vintage, BMWs have "real" DoIP or a BMW-ized version (sort of like how KWP2000 was the predecessor to UDS). For emissions modules, they still also have to support updates over UDS as well as ENET, though, for the above mentioned J2534 reasons (Ethernet wasn't added to J2534 until 2022).
reply
> Even on older cars, service techs can typically manually push firmware updates

Older cars have no concept of such updates.

Happy with my 70s and 80s and early 90s cars.

reply
You can adjust the ECU for these 80s and 90s cars and “flash” them like anything else. There’s just a lot less settings! Not sure about the 70s but I’m sure some resto-mods also allow for this.
reply
Actually almost any fuel injected vehicle can accept flash updates through the port to at least the ECU and PCM, frequently the BCU is also write enabled.
reply
This is tangential, but Kia declined to cover an engine failure, under warranty that was extended by recall, because I had not done an update.

Edit: I eventually recovered most of the cost via a settlement court.

reply
Even more tangential: Kia declined to cover an engine failure, under warranty that was extended by recall because I change my own oil.

Kia's engines are known to fail predictably even within first 100K miles. They extended their warranty because of it. But then they weasel out of it unless you hire an attorney and go to war.

reply
This would be a violation of the Magnuson-Moss Warranty act of 1975 which requires they show the work done directly caused the failure.

If this were a widespread policy I bet class action lawyers would be all over it without you having to pay for it.

reply
Maybe they researched customers’ backgrounds and only screwed the ones they thought wouldn’t lawyer up
reply
This doesn't require research. Just reject by default and concede if a lawyer shows up. It doesn't cost any money to have a default denial policy and saves millions.
reply
Same case goes to the same court too many times and you are gonna raise eyebrows.
reply
Yeah, because you allegedly consented to them being able to update your ECUs via the mobile link in the cars when you bought the car.

As if I needed another reason to keep my 2014 skoda.

If i ever have to get a new car, i will disable telemetry, and i will buy it either without telemetry, or with the agreement that i do not consent to telemetry.

(read the fine print before getting a new car. the shit they can do that can go wrong and you have to pay for.. no wonder old cars cost as much as new ones.)

reply
I assure you that “old cars costing as much as new ones” isn’t the result of the market force of people reading contractual fine print and/or freaking out about telemetry. Concentric circles of echo chambers over here.
reply
The main reason is more tangible to people. It is more reliability and simplicity. For instance the Toyota Tundra used to have a V8 that was pretty bomb proof. But over the years, manufacturers put in more efficient but more prone to problems turbocharged smaller engines. The bearing clearances went down, thinner oil then can be used which is also more efficient. But the margin for error when you are putting what used to be a performance engine in a car is much smaller and there have been issues. As car prices have gone up, people value a time tested drivetrain. There have been a lot of problematic CVT transmissions too.
reply
I agree. I have never met anyone in real life that's concerned about telemetry on their car.

They're worried about the cost of a new car, and the cost of all the electronics, should they go bad.

reply
The Chinese government banned Tesla vehicles from entering (Chinese) military bases. This is due to the prolific number of cameras streaming live video to a hostile (to China) organization/government. One can find blogposts by analysts who show that the upload stream from Tesla vehicles includes cabin audio.
reply
I’ve certainly met them, particularly in the context of Chinese EVs.

I really wish car review publications would start adding a ‘Privacy’ section along side the Perfectly, Road Handling etc parts of reviews

reply
Do they seriously not? Malpractice
reply
I realize that I'm not a person in your real life, but FYI I'm concerned about the telemetry in my car.

(Just stating this as a data point for you.)

reply
How do you disable telemetry in a new car. I have a 2022 Kona. It's the first car I've had with telemetry. No idea how to disable it.
reply
1. get a _real_, unabridged service manual. that takes some darkweb experience nowadays.

2. identify anything that looks like capable of housing a cell modem. that takes some understanding of contemporary car electronics

3. deny RF interface to units identified. that takes some understanding what RF = radio frequency interface is and also getting rid of fear of disassembling significant portions of your car.

All in all that is a great learning experience.

reply
If I disable the modem, does that disable the SOS feature? Do I need to tell my insurance company?
reply
That is the least of your troubles. SOS is the telemetry you wanted to get rid of in the first place.

And chances are you would have to get rid of 2/3 or more of oem electronics.

It'll end up a prototype vehicle or something, with custom ECU and stuff. On the bright side it will belong to you and not to the some mckinsey guys running those insurances and whatnot. It has been done too, although I personally prefer to just use vehicles that do not require this level of effort.

The other day there was a thread on unclouded tractors what I missed and I must tell I love my Universal 445 made in Romania in 1989. For all its quirks, it just gets the job done, no connectivity, no nothing, it's an unbreakable 3-cylinder diesel that just works.

reply
> do dealers have any way to update control modules besides OTA?

I get some updates OTA, but the dealer has to install some others, and when I took it there they updated it with a USB stick.

reply
Nice, thanks for the reply; this is surprisingly undocumented online. Presumably if they got cornered and the module under repair was updatable via this mechanism they'd have some ability to use that system, then. I wonder how charitable they will be about using it for non-recall updates for customers who have solely chosen to opt out.

Rivian are probably the only major manufacturer I've never had a chance to look at in any RE capacity and I'm getting more curious by the second. The reaction their vehicles had to the infamous bricked-infotainment update actually represented a pretty good adherence to safety guidelines (the drivetrain as well as the speedometer and warning lights on the cluster still worked in a degraded format even when the infotainment was bricked) IMO, so they do seem to apply a reasonable degree of care.

reply
I said this elsewhere, but I had trouble with Kia even for an issue covered by recall. Because I hadn’t had the update done, they refused to cover.
reply
I wonder what happens if they issue a recall that you want to refuse.

What if they did the EV equivalent of Dieselgate[1]? Say it has a dangerous amount of torque or something, but you like that.

Could you just turn off the network and keep it in the desired (unsupported) state?

[1]: https://en.wikipedia.org/wiki/Volkswagen_emissions_scandal

reply
In the US, a vehicle with an outstanding recall technically isn't roadworthy, though consumer level enforcement of this is non-existent in practice. It's mostly enforced on dealers, who can't sell a vehicle with active recalls. The only way I can imagine it mattering to a consumer is if they sold it.
reply
I can imagine car insurance refusing to pay out in the case of an accident
reply
Doesn't being legally non roadworthy only apply to NHTSA safety recalls while there are other types of recalls for non compliance or manufacturer voluntary recalls?
reply
Having worked (on the vehicle registration system) for a state agency that is a combination "department of motor vehicles" plus "highway department", there could be a case made that since your vehicle does not meet NTSB/DOT standards, that it isn't roadworthy and the best you could get would be a SALVAGE title. Which would require expensive inspections if you try to sell it or register it.

In Europe, car manufacturers have to show that their cars meet safety standards. In the US, car manufacturers only have to say/certify that their cars meet safety standards. This is the huge sticking point for Trump's attempt to force EU countries to accept cars that have not been proved to meet safety standards (it is portrayed as "unfair/uneven trade barriers" in the US media).

reply
My experience is J2534 support is sketchy and if you want to do the things you actually want to do you need a manufacturer approved device with an insane markup. Also the subscriptions are insanely expensive, not even close to reasonable and you need to be a company (at least you used to be with Ford last time I checked, but they accept the UK or Dutch royal residence as a valid company location so there is that...)
reply
What about using ForSCAN? It allows anyone with the software and a dongle to monitor and to update modules in the ECU AFAIK. I paid under $100 (can't remember) for a dongle and downloaded the free software and it is extremely handy working on one of my vehicles. The other two Fords I own are both pre-OBDII so there is less bullshit on them to begin with. Ford forums are full of owners who use ForSCAN to modify their vehicle's operation. Lots of hacks available.

Just do as /u/bigfatkitten suggests and get the service manuals when you purchase the vehicle.

reply
> at least you used to be with Ford last time I checked

Certainly not any time in the last 15 years that I’ve been buying IDS/FDRS and service manual access.

reply
"a lot of people don't know this; for almost any ICE car in the US, you can buy a 3-day or 1-week subscription to the dealership level diagnostic software for a somewhat reasonable fee and use it with a J2534 device"

Whoa, didn't know that. Well the caveat is finding a decent J2534 device, right? There are a lot of cheapo knockoffs. Then actually knowing how to use the software with it.

reply
I'm pretty sure decent ones run about 50-80 dollars, a very good one.
reply
Oh that's not bad at all, I thought it was like $500. My cheapo knockoff was $20.
reply
Have you flashed anything? I need to flash the gearbox on my CRV, really wanted to DIY it at home and not get upcharged by the stealerships.

https://www.crvownersclub.com/attachments/tsb-15-086-crv-tra...

reply
No, but I'm not a good person to ask. My two cars are on opposite extremes, one is simple and doesn't need anything beyond OBD2, and the other is too scary to mess with digitally.
reply
...do dealers have any way to update control modules besides OTA?

Of course they do. It would be absolutely silly not to. And in the case of safety recalls, their duty to inform you would entail a more traditional and substantiated disclosure i.e. a letter.

reply
What ever happened to take it to a dealer or authorized repair place to have it done? While I may be willing to take certain things apart that, the one thing in life I have resisted is any kind of monkeying with my car. There are certain things where I'm willing to accept that I took it apart and it no longer works because I bricked it, shorted something, or otherwise damaged it beyond my skill set to undo. My car is not one of them. However, I also do not want my car to be under the direct control of someone else that can decide I can no longer operate my car. If there's an update, I'll bring it in to have someone trained/responsible for that update.
reply
There's really no reason to be scared working on your car. I have no formal training and I have never paid a shop to fix my car in my 20 years of car ownership.

The mechanical parts of a car haven't changed much in the last 25 years, and are easy to understand just by watching a few YouTube videos.

The electronics have certainly gotten more complex, but if you can understand basic computer networking and low voltage electronics it's still quite simple.

If you are interested in learning how to fix your own car, there is a great guy who runs an auto repair business on YouTube and his tagline is: "Remember folks If I can do it, you can do it."

https://www.youtube.com/@SouthMainAuto/videos

reply
The perfect modern consumer/sucker...

My car needed another key. The stealership quoted me >$400 for it. I took it as a personal insult and did the research and ordered an OBD device and also discovered you can order replacement keys on aliexpress, and they'll even cut them for you with a good picture of your existing key. It was actually a fun project and very satisfying when I was able to successfully program and link the RFID chip to the ECU to start the engine.

May not be feasible with more locked-down modern cars which I wouldn't touch with a ten-foot pole, but I was able to fix it for about $150, not including my time of course. But I have the OBD device to use next time now as well.

reply
>May not be feasible with more locked-down modern cars which I wouldn't touch with a ten-foot pole

What's your plan for the future? I have an old car, but I know it won't last forever.

reply
Which I read this a month ago. Mazda dealer charged me $450 for mine. I figures the entire system is propietiary, so they can charge whatever they want.
reply
Excellent. Sounds about what I’ve paid.

eBay key fob (new) + local locksmith, easy and no insults!

reply
Some people like messing with cars. They take the time to understand what's happening and learn the process and pitfalls. Hobbyists wiil never be as good as trained professionally but we can still get the job done. I went through the trouble to diagnose and replace a bad alternator on my civic after the battery started dying too fast. I did it cause it was fun.

The other reason i did it is because the dealership and other shops quoted me over 10 times the cost of parts, and I literally did not have the money to take them up should i have wanted to. Car maintenance is expensive, _especially_ at the dealership.

reply
Some how, we've changed the direction of the conversation to something you lost vs a software update to the brains of the car. I'm guessing just to make the obvious point the dealership is not the cheapest place for repair.??? This isn't change the tire or get an oil change. This is something a consumer has deliberately done to prevent the manufacture from making an OTA software update. These are the kinds of changes that I want someone available right then and there to be responsible if the update borked the car.
reply
I wonder what happens if you disable the e-SIM (in the US) and then a safety recall appears via software update - do dealers have any way to update control modules besides OTA?

Yes.

You get a letter in the mail asking you to take your car to the dealer so they can install the update.

Been there. Done this.

reply
Interesting, I reviewed every Rivian software update recall letter I could find before I posted this and they all said something like "If you have not already updated to software version 2025.18.30 or later, please do so to remedy this issue at no cost to you," with no mention of the dealership as a remedy - for example, https://static.nhtsa.gov/odi/rcl/2025/RCLRPT-25V585-0759.pdf . This is different from other manufacturers who explicitly mention the dealer, like this Ford EV recall: https://static.nhtsa.gov/odi/rcl/2025/RCAK-25V863-3736.pdf
reply
Of course they don't mention it. They don't want you to bring it in and have to pay a tech to do the update for you. It doesn't mean the dealership can't do it.
reply
Aren’t Rivian dealers relatively rare? I’d compare them to Tesla.
reply
WiFi. Flip it on for an update, then leave it off.

> do dealers have any way to update control modules besides OTA?

Yes.

reply
I kinda assume the dealer does this as part of any service they do. Either that, or they update some other way. My software notices went away when I had my service done, even though I’ve opted out of everything (and verified again after).
reply
WiFi is, err, still OTA, although it does answer the eSIM question. I assume the truly concerned/paranoid wouldn't want to connect to WiFi either, since presumably telemetry / tracking metadata could be uploaded at that time too.
reply
Anyone concerned about preventing telemetry from being uploaded would probably also be concerned about taking it to the dealer for an update, though. Because how do you know the dealer won't just do an update by turning the car's e-SIM back on, then turning it off before giving the car back to you? Which would then allow the car to upload all the stored telemetry you're concerned about. (Note: generic "you" meaning "the person concerned about telemetry", not bri3d in particular). Or, as long as they've connected a device to the car that can upload data, how do you know that that device won't also download stored data, which the dealership can then upload over their own WiFi?

I believe the truly concerned/paranoid will not want to take their car to the dealership for updates at all. Which would, IMHO, be a mistake: having known security holes in your car's software is more likely to lead to a privacy invasion (via getting your car hacked at some point) than letting the dealership get their hands on it for a few hours.

(I should note that all of this is theoretical for me: I drive a car that's old enough it doesn't have any software).

EDIT to add this P.S.: Actually, I can think of one category of people who would be concerned enough to turn off the car's ability to connect to the Internet, but feel fine about taking it to a dealer for updates. That would be people who want to turn off the car's Internet connectivity not because of privacy concerns, but because they don't want anyone to be able to disable the car (either via hacking or via "legitimate" means, i.e. the manufacturer does it) while they're driving. Such a person would care a lot about the car's Internet access being completely off while they are driving, but not care about it being turned on while it is at the dealership.

reply
This is the exact mindset that has amused me for years with computers. People use an OS with which they have a seriously hostile relationship. Why would you continue to pay a lot of money for a product you consider to be your adversary?
reply
What's special about EVs that gives them this loophole? Is it something to do with not having dealerships and going direct to consumer?
reply
Emissions. Most things about ICE cars come through EPA and CARB.
reply
I'm pretty sure that the only diagnostic codes that an ECU is required to output are emissions-related codes. Since EVs have no emissions, I'm gonna guess they can force all diagnostics through the dealer if they really want to.
reply
without oil change and wear of brakes there is little need for inspections.
reply
Ball-joints and tires are still consumables, and they go faster as weight goes up.
reply
Surely wheel bearings too. And you have to do a safety every year to check for rust perforation (at least in the U.S. states that still do that).
reply
[dead]
reply
[flagged]
reply