Your New Car
Is Listening.
A researcher woke a brand-new car’s cabin microphone with no password — and captured a banking code straight off the audio. The same surveillance technology stripped from government walls has rolled straight back into our most secure zones, on wheels.
Are you aware of this? Most Australians have no idea.
The Connected Spy, at a Glance
Three findings that should stop you cold
Every one of these is documented in the full dossier. We don’t ask you to take our word for it — we lay out the evidence, and you discern for yourself.
A microphone woken with no password
Researcher Dan Restchuk accessed a BYD Shark 6 through connection points that lacked password authentication, then remotely woke the cabin microphone — with no notification to the occupant. In a live demonstration, a driver dictating a temporary banking password (initials, house number, full date of birth) had those credentials captured straight off the audio stream.
900+ devices stripped from government walls — then waved through on wheels
A 2023 audit stripped more than 900 Chinese-made surveillance devices — including Dahua CCTV — from Commonwealth buildings. Yet no regulation stops the very same Dahua camera technology operating inside a connected vehicle driving on public roads, past the very buildings it was banned from.
Parked beside ASIO — mapping the cars of Cabinet
A single car park near the Australian Signals Directorate and ASIO routinely holds 20 or more EVs, around half of them Chinese marques. Parked beside ASIO’s headquarters and Defence’s Russell Offices, these vehicles can map employee movements, facility hours and behavioural anomalies — including the cars driven by members of the National Security Committee of Cabinet.
‘War driving’ on public roads
As connected cars move past defence and intelligence sites, they quietly scan, log and map every surrounding Wi-Fi and Bluetooth signal — building a live network map that can serve as a launch pad for a cyber attack.
Your robot vacuum is regulated. Your car is not.
A one-kilogram robot vacuum sitting in your home is covered by mandatory cyber standards. A two-tonne connected car doing 110 km/h on public highways faces zero minimum cybersecurity laws — and no exclusion zones near ASD, ASIO or Defence.
This is the part they’d rather you didn’t read.
The full 15-part dossier maps the entire pipeline — the over-the-air vulnerability, the offshore data route, the privacy gap, and exactly how to close the loophole. Plus the companion episode of The Watchers’ Record.
Free account. No lawyer, no jargon. Already have an account? Sign in
The Narrow Road exists to put the evidence in front of you — clearly, calmly and in full — so you can discern for yourself. Truth, privacy and living, without the fear-mongering and without the spin.