DCM fuse

There's a thread going on about this in the 3rd gen forum, wondering how this works on 4th gen trucks. In the 3rd gen Tacoma, you can pull the DCM fuse and it will disable the remote telematics / spying, and you'll also lose your mic, but apparently the speakers still work as long as the box itself isn't removed.

Has anyone pulled the DCM fuse on their 4th gen?

 

I just drive around wearing my tin foil cap insert.

 

Don't know, but I'd venture to say it transmits the same data.
We'd need to see wiring diagrams to "test it".

If the incorporated in with some other circuit that is engine / safety critical, you might not get away with pulling the "fuse".
Just have to see if someone with a 24' wants to find out?

 

Hey man, if you don't care that white hat hackers have already demonstrated they can remotely access connected vehicles, issue commands to the ECU and access your data, then you go ahead and do you, but try not too many kilobytes of database storage on childish comments that literally nobody ever asked for, and if there's a major breach that puts you in danger, be ready to pretend like you didn't make fun of the people warning you it was a security risk.

Yeah -- I can't imagine a good reason why they'd pair the DCM with something critical, so that it cannot be simply pulled, but it's always possible. Waiting on someone with electrical knowledge to take a look.

 

This is an industry wide problem. I’m surprised there are no laws around automobile data.

 

I’m more concerned with the hackers that shut my plant down, wiped the servers and asking for a hefty ransom. No one cares what POI I was searching for on my navigation, or Toyota knowing that I like to do 80 in a 65 on the thruway.

 

Why is your plant on the internet?

 

Factory automation

Also internal network where we keep machine files, plans, and everyone’s work files. Everything is down. Phones and all. Been 3 weeks. Limited production, bunch of people laid off. No bueno

 

Cool. The hacker can also shut your car off or control it's steering remotely, which could kill you, but if you don't want to concern yourself with it, why don't you just leave this thread since it is clearly irrelevant to you.

 

Well, your CIO needs to be fired for not hiring a competent IT and Security company.

 

If you want to complain about vehicle IT security, you really need to get legislators to create some laws with teeth. The car companies aren’t going to do shit until they are forced.

 

This thread is getting derailed... I really don't care about hypothetical legislative solutions, I only care if pulling the DCM fuse in the Gen 4 achieves the same thing as in the Gen 3

 

What needs to be done in the tundra?

 

Rumor is the contract with our security company expired the day before. 3 hours later in the middle of the night, we were attacked. Bad coincidence or inside job? Company hasn’t been very transparent about anything that is going on. Everything seems hush hush. They even want all media inquires to be directed to them. Just glad to have been working all through this since I’m an electrician in the plant.

 

I’ve seen the videos, however what I have not seen is one report where this has actually happened. What I was trying to say earlier is anyone capable of this is capable of other things where they can actually make money doing more or less destructive things. Unless someone has a personal vendetta against an individual, I don’t see this becoming a popular trend.

While my comments in this thread my be off topic, they have provided helpful bumping of your thread. This would of already have been lost into the TW archive

 

Inside job, no doubt. Hopefully some law enforcement agency will catch their ass.

 

The linked article goes into some of the details on the attacks. Toyota was listed for PII vulnerability, but the writing is unclear if Toyota is open to vulnerabilities that could result in remote control. It also seems like most attacks require some very specific, in person actions. But most importantly the article is old and says that patches were implement.

 

Any internet connection is an attack vector. There is no good reason to have your car connected to the internet. You gain... Remote start when out of range of your fob, and an app that can track your car's location -- which you could do with a GPS tracker to begin with. You lose... Security.

No system is unhackable. The best move is not to play. That is, just not having a receiver that can receive signals from a hacker.

 

From my very limited understanding many vehicle attacks come from a combination of vulnerabilities, usually including Bluetooth. So let's get rid of that too?

 

Bluetooth can be disabled, easily, in the infotainment interface in the car -- but sure, yeah, I'd buy a car without Bluetooth.