[ NNSquad ] Nissan Leaf reportedly leaks lotsa data (including location/speed) via RSS

[Lauren Weinstein <lauren@vortex.com>]

Nissan Leaf reportedly leaks lotsa data (including location/speed) via RSS
http://j.mp/kB3GYB  (This message on Google Buzz)

 - - -

http://j.mp/kRtCEs  (Casey Halverson)

    "Looking at the GET string above, "lat" and "lon" variables contain the
     current position of the vehicle, "speed" is the vehicle speed,
     "car_dir" is the direction of the car, and "lat_dst" and "lon_dst" is
     your destination configured in your navigation system ... All of these
     lovely values are being provided to any third party RSS provider you
     configure: CNN, Fox News, Weather Channel, it doesn't matter! While a
     lot of these providers are probably not aware of these (rather
     valuable) parameters the car passes, they probably sit in thousands of
     HTTP logs already, waiting to be parsed out - or perhaps supported in
     the future."

     ...

    "Update June 13 3:23 PDT: While nobody bothered to inform the
     customers, Nissan does document this functionality in this
     obscure Japanese developer document:
     http://lab.nissan-carwings.com/CWL/Spec.cgi [Google Translated]."

 - - -

--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org
Founder:
 - Network Neutrality Squad: http://www.nnsquad.org
 - Global Coalition for Transparent Internet Performance: http://www.gctip.org
 - PRIVACY Forum: http://www.vortex.com
Member: ACM Committee on Computers and Public Policy
Blog: http://lauren.vortex.com
Twitter: https://twitter.com/laurenweinstein 
Google Buzz: http://j.mp/laurenbuzz 
Tel: +1 (818) 225-2800 / Skype: vortex.com