• CADmonkey@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    3 hours ago

    A city near me has installed a device that tracks vehicles based on their tpms (Tire Pressure Monitoring System) sensors.

    All cars after 2008 in the US have TPMS. Inside the tire, integrated with the vale stem, are little pressure sensors with a radio that broadcasts on the 315Mhz band. Each one uses a slightly different frequency so that your vehicle can tell which of the four tires is low.

    So each vehicle in the US made after 2008 has four unique radio signals being broadcast from it, and now there are police departments with equipment that can track those signals, and can assign each car a signature based on the frequencies the sensors are broadcasting on.

    • yeehaw@lemmy.ca
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 hours ago

      That’s alarming, but how much can these really vary? I’d be surprised if a lot of vehicles weren’t the same.

      • iglou@programming.dev
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        59 minutes ago

        Well, from my knowledge, the person you replied to is inaccurate. All tires will transmit at the same frequency. But every X seconds, when each tire transmits its data, it transmits an ID unique to its transmitter with it.

        • dual_sport_dork 🐧🗡️@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          23 minutes ago

          Every X seconds is pretty generous. My Subaru only seems to poll the sensors every few minutes, and only when the wheel speed is above 35 MPH or so, at least via what I’ve observed with my diagnostic tool. The sensors are battery powered and I suspect the low refresh rate is a deliberate gambit to conserve battery life.

          You are correct on the ID point, though. They can contain up to 16 hexidecimal digits as far as I’ve seen, and while there doesn’t seem to be any mechanism for truly enforcing uniqueness the chances of an ID collision are so low that you may as well consider it impossible. Some aftermarket sensors can be wirelessly reprogrammed with an arbitrary ID, though, which may be of marginal utility for the truly paranoid. (My diagnostic tool can do this, too. The intended use case is cloning the ID from an OEM sensor for a car whose TPMS relearn procedure is more trouble than it’s worth.)

          Regardless of your vehicle’s polling frequency, most sensors can be woken up any time by a specific radio pulse, which my diagnostic tool can also do, and the range is surprisingly long. Just my car’s own BMS where the receiver is (above the rear left wheel well) can pick up the sensors in my snow tire rims even when said rims are sitting in their storage rack inside my garage, about three car lengths away.