58 points by wisdomseaker 2 days ago | 15 comments on HN
| Moderate positive
Contested
Human Rights · v3.7· 2026-02-28 08:39:09 0
Summary Privacy & Surveillance Champions
Can't Hide Your Stride is an empirical research study demonstrating privacy and surveillance vulnerabilities in unencrypted automotive TPMS transmissions. The paper champions human rights protections—especially privacy (Article 12) and freedom of movement (Article 13)—by exposing how static, unencrypted identifiers enable systematic vehicle tracking at minimal cost ($100/receiver) and explicitly advocates for policymakers and manufacturers to implement privacy-preserving designs. Published in an open institutional repository, the work embodies freedom of expression (Article 19) and supports remedy through policy reform (Article 8).
I have an RTL SDR setup in a retail business receiving temperatures from sensors around the property. Besides the neighbors' weather stations I see a lot of TPMS coming, presumably, from the parking lot. I see the same cars regularly. I could definitely correlate them with the POS terminals and identify individual customers.
I built a demo of this back when I worked at Qualcomm in Seattle; match this with WiFi beacons and you can trace a person fairly well. It's been over a decade, but at the time both iOS and Android would send pings fairly frequently to all known WiFi networks looking to see if they should switch to a faster one. With your device ID, list of SSIDs you know, and your TPMS data, a person can learn a lot about you.
Like, where do you work? Where do you stay (Hotel SSIDs)? Who are your friends (other people's home SSIDs)?
Thought this was going to be about reading the road like the groove on a record player. Apparently it is about cleartext radio signals and vehicle-specific identifiers.
Most places where this would be legal there are probably much more effective ways to do it at the POS, even non-biometrically. Although yes you might consider usng TPMS as part of an ensemble.
And this is what I exhaustively tell people who insist that [tech company] is listening. My reply boils down to, "Why would they need to when you already send them everything in writing?"
CORE ARTICLE. Entire paper focuses on privacy violations in TPMS communications. Advocates for privacy-preserving design. Frames unencrypted, static identifiers as systematic violation of Article 12. Provides detailed analysis of privacy threat mechanisms.
FW Ratio: 50%
Observable Facts
Abstract states TPMS transmissions are 'sent over the air in clear text' with 'unique identifier that does not change over very long periods of time.'
Paper investigates 'privacy implications for car owners' and demonstrates how transmissions 'can be used to systematically infer potentially sensitive information.'
Footer explicitly states 'Valoramos su privacidad: ¡este sitio no utiliza cookies!' (We value your privacy: this site does not use cookies!).
Inferences
Paper frames TPMS as systematic violation of communications privacy, directly advocating for Article 12 protection.
Repository's privacy-first footer reinforces institutional commitment to privacy rights.
Publishing privacy research openly enables informed protection of this fundamental right.
Paper demonstrates how TPMS tracking reveals driving patterns, directly surveilling freedom of movement. Advocates for privacy-preserving TPMS. Frames surveillance as chilling effect on free movement.
FW Ratio: 50%
Observable Facts
Abstract explicitly mentions inferring 'driving pattern of the driver' as surveillance capability.
Paper title directly references 'movement patterns' as core threat being analyzed: 'Can't Hide Your Stride.'
Inferences
Systematic inference of driving patterns frames surveillance as chilling effect on freedom of movement.
Publishing this research directly supports Article 13 by exposing tracking infrastructure.
Paper is published research, exemplifying academic freedom and freedom of expression. Authors fully attributed. Repository publication directly supports freedom of scientific inquiry and dissemination.
Content directly advocates for protection of 'security of person' by exposing TPMS surveillance vulnerabilities. Frames unencrypted transmissions as security threat enabling systematic tracking of car owners.
FW Ratio: 50%
Observable Facts
Abstract states 'we investigate the privacy implications for car owners' and demonstrates TPMS transmissions 'can be used to systematically infer potentially sensitive information.'
Cost claim ('as low as $100 per receiver') demonstrates widespread threat to security of thousands of car owners.
Inferences
Quantifying feasibility and scale of threat demonstrates advocacy for security-enhancing policy intervention.
Publishing in open access format directly supports right to security by ensuring knowledge reaches policymakers and public.
Content explicitly advocates for remedy through policy change. Frames TPMS vulnerabilities as requiring action from duty-bearers. Provides empirical evidence for effective remedy.
FW Ratio: 50%
Observable Facts
Abstract explicitly 'urges policymakers and car manufacturers' to act, positioning research as evidence for remedy.
10-week measurement study with 12 verified cars provides quantifiable data for policy advocacy.
Inferences
Publication of empirical findings frames this as advocacy for policy remedy.
Open access ensures duty-bearers can access evidence.
Abstract frames privacy protection and security as foundational values requiring enforcement. Implicitly advocates for 'more secure and privacy-preserving' design. Aligns with preamble ideals of dignity and justice.
FW Ratio: 50%
Observable Facts
The abstract urges 'policymakers and car manufacturers to design a more secure and privacy-preserving TPMS for future cars,' positioning privacy as foundational policy value.
Footer displays EU funding: 'Fondo Social Europeo', 'Fondo Europeo de Desarrollo Regional'—indicating public commitment to collective welfare.
Inferences
Privacy and security are framed as foundational values requiring protection, consistent with preamble language on dignity and justice.
Publication choice reflects institutional commitment to transparency as a means of protecting rights.
Paper advocates for social order respecting rights ('policymakers and car manufacturers to design more secure...TPMS'). Frames security and privacy as foundational to just social order.
FW Ratio: 50%
Observable Facts
Abstract calls for systemic change to 'design a more secure and privacy-preserving TPMS' as policy imperative.
Inferences
Advocacy for policy change frames rights-respecting social order as necessary response to surveillance threats.
Surveillance threatens dignity through loss of autonomy over personal information. Paper implicitly defends dignity as foundational by exposing violations.
FW Ratio: 50%
Observable Facts
The paper infers 'potentially sensitive information such as the presence, type, weight, or driving pattern of the driver' from passive transmissions, demonstrating surveillance of personal autonomy.
Inferences
Exposure of driving-pattern inference frames surveillance as threat to personal dignity and autonomy.
Research paper represents educational contribution to knowledge. Open publication supports right to education and access to information. Technical content enables informed public participation.
FW Ratio: 50%
Observable Facts
Paper published in open institutional repository with bilingual interface (English/español).
Research provides technical knowledge necessary for informed policy advocacy.
Inferences
Open access publication supports right to education and information access.
Bilingual repository design supports broader participation in knowledge.
Surveillance creates unequal power: car owners unaware they transmit identifiers while malicious actors track them systematically. Frames as violation of equal protection.
FW Ratio: 50%
Observable Facts
Paper demonstrates 'malicious actors could easily scale their efforts to track several thousands of cars' while drivers remain unaware of identifier transmission.
Inferences
Power asymmetry (trackers unidentified, tracked drivers unaware) frames surveillance as equality violation.
Paper calls for legal protections through policy reform ('urges policymakers and car manufacturers to design more secure...TPMS'). Advocates rule-of-law response to identified threat.
FW Ratio: 50%
Observable Facts
Abstract concludes by urging 'policymakers and car manufacturers to design a more secure and privacy-preserving TPMS for future cars.'
Inferences
Call to policymakers frames legal/regulatory reform as necessary remedy for documented threat.
Surveillance enables presumption of guilt; drivers are profiled and tracked without legal process or evidence of wrongdoing, inverting presumption of innocence.
FW Ratio: 50%
Observable Facts
Paper demonstrates systematic ability to infer behavior patterns and presence, enabling profiling without legal process.
Inferences
Systematic tracking and profiling presume drivers guilty without evidence, inverting presumption of innocence.
Repository publication is direct structural support for privacy rights. Open access ensures privacy threats are documented and publicized. Footer explicitly affirms privacy protection: 'this site does not use cookies.'
Institutional repository is structural embodiment of academic freedom. Open access publication directly implements freedom of expression and information access.
Open institutional repository embodies commitment to transparency and collective dignity through knowledge dissemination. EU funding visible, supporting collective welfare.
build 1ad9551+j7zs · deployed 2026-03-02 09:09 UTC · evaluated 2026-03-02 13:57:54 UTC
Support HN HRCB
Each evaluation uses real API credits. HN HRCB runs on donations — no ads, no paywalls.
If you find it useful, please consider helping keep it running.