Old Cars ‘Tell Tales’ by Storing Data That’s Never Wiped

Research and development engineer Romain Marchand of Paris headquartered Quarkslab obtained a telematic control unit (TCU) from a salvage yard in Poland… Marchand tore down the TCU, which is based on a Qualcomm system on a chip, and extracted the Linux-based file system from the Micron multi-chip package (MCP) which contained NAND-based non-volatile storage memory. The non-volatile storage contained sensitive information, including system configuration data and more importantly, logs that revealed the vehicle’s GPS positions over time.

None of that information was encrypted, Marchand told iTnews, which made it possible to collect and retrieve sensitive data of interest. What’s more, the global navigation satellite system (GNSS) logs with GPS positions covered the BYD’s full journey from the factory in China to its operational life in the United Kingdom, and to its final wrecking in Poland, Marchand explained in an analysis… The issue is not restricted to BYD, and Marchand added that the hardware architecture of the Chinese car maker’s TCU is broadly similar to what can be found in other brands.