Live data from Hacker News

There's another right to repair fight brewing in Massachusetts

thedrive.com

51–60 of 111 posts

Re: There's another right to repair fight brewing in Massachusetts

#51

While I support right to repair and will be voting accordingly as a born and raised Masshole the whole "centralized platform for service info" thing is a massive red flag to me. Having to go through the government (the proposal as I understand it) to get service literature is only better than having to go through an uncooperative manufacturer. They could have just revoked the exemption for telemetry data without any…

> Cracking down on the backyard mechanics who keep the shitboxes of the greater Boston area running

Don't really have much to add to your point. But I wanted to mention, that on my block (a mixed income neighborhood in Boston) has 1 guy who fixes almost all our cars. He doesn't own a shop, he just brings his tools and fixes your box on the street. Every time he's out there he acquires a new customer. We all love him. His work is great, and his prices are so low my wife has to argue with him to take more. Without him, there's a lot of people where I live who would be in a tough spot.

Re: There's another right to repair fight brewing in Massachusetts

#52
post #47
post #19

Earlier quoted context omitted.

What use is location based information to a repair shop? Is it simply that opening up this dealer-only content to 3rd parties will in turn share the location data? I can't see any benefit in sharing location specific info to a shop. Why not have the bill insulate that type of data...walled off, for dealer and owner only to access.

Of no use to them, but perhaps a valuable thing they can sell to others (insurance companies, marketers, spies, etc). I'd really rather my car not gather that much data to start with. My phone provides all the mobile compute and navigation (and privacy invasion) I need. I don't think historical telemetry data of any kind is going to deliver extra value to me, the car owner. Every extra feature in a car is just anothe…

This. This, this, this.

Worse, it doesn't give you extra value, it detracts value. It's info about you, out of your control, yet unlike gmail, which is free, you've paid cold hard cash to be tracked.

I think what we need is just an "everything" bill. If you pay ANYTHING for the hardware, then you control EVERYTHING.

The full stack. You can't sell it, the code isn't yours, but by rights you get the full dev kit for the entire OS.

This is the only way forward. The only way to stop all spying, show everything malicious being done to end users, and ensure I can repair anything borked down the road.

Re: There's another right to repair fight brewing in Massachusetts

#53
post #52
post #47

Earlier quoted context omitted.

Of no use to them, but perhaps a valuable thing they can sell to others (insurance companies, marketers, spies, etc). I'd really rather my car not gather that much data to start with. My phone provides all the mobile compute and navigation (and privacy invasion) I need. I don't think historical telemetry data of any kind is going to deliver extra value to me, the car owner. Every extra feature in a car is just anothe…

This. This, this, this. Worse, it doesn't give you extra value, it detracts value. It's info about you, out of your control, yet unlike gmail, which is free, you've paid cold hard cash to be tracked. I think what we need is just an "everything" bill. If you pay ANYTHING for the hardware, then you control EVERYTHING. The full stack. You can't sell it, the code isn't yours, but by rights you get the full dev kit for th…

Amusing, IMMEDIATE downvote by closed-source advocates.

Re: There's another right to repair fight brewing in Massachusetts

#55
MA voter who's genuinely torn here.

The thing that bugs me out about this law is that, AFAICT, this data is _already_ required to be available to any 3rd party manufacturer through a physical "non-proprietary interface" (so far, an OBD-II port) after a similar ballot initiative from 2013 [0]. This law essentially just makes the data available wirelessly.

I care about security holes and I care about consent. Having a physical interface makes it easy to provide data with consent to repair shops who need while trivially making sure no third party manufacturer or insurance company is leaked a massive database of everyone's driving data. I really don't see how the "wireless" addition gives me more of a right to repair, but I clearly see how it forces manufacturers to significantly increase their surface area of possible data leaks.

I'm all for Ben Franklin's liberty/safety argument, but with the 2013 law already in place, I honestly don't see the upside of the 2020 law.

[0] https://malegislature.gov/Laws/SessionLaws/Acts/2013/Chapter....

Re: There's another right to repair fight brewing in Massachusetts

#56
I don’t understand how engineers can read the actual text of the Question and think this is a good idea...

> shall be required to equip such vehicles with an inter-operable, standardized and open access platform across all of the manufacturer’s makes and models.

What is a “platform” in this context? The vehicle is supposed to be equipped with one, so presumably not a cloud server then?

Inter-operable with what? Other manufacturers? Standardized how and by whom? What does “open access” mean in this context?

Does this run on the car? In the cloud? How do you connect to it? Remember this is a legal requirement, not a spec that can just be revised.

> Such platform shall be capable of securely communicating all mechanical data emanating directly from the motor vehicle via direct data connection to the platform.

So I think this is saying that all mechanical data which is emanating from the vehicle must also be made available by connecting directly to “the platform” but you could read it two or three other ways.

> Such platform shall be directly accessible by the owner of the vehicle through a mobile-based application and, upon the authorization of the vehicle owner, all mechanical data shall be directly accessible by an independent repair facility

As supposed to the ODBII port which is the current standard, now we have a “mobile-based application” which the “owner” of the vehicle uses to directly access the “platform”.

I don’t know how the car is supposed to know who the owner is, let alone the original manufacturer of the car.

But then after somehow authenticating the owner on this mobile based application there’s also going to be a way to authorize your repair shop to do the same?

So perhaps repair shops are registered with this platform and I can select them from a list, or maybe after I’m magically authenticated I send them an email and they open that on their phone and click a link which send a message to an app which... wait what?

> limited to the time to complete the repair or for a period of time agreed to by the vehicle owner for the purposes of maintaining, diagnosing and repairing the motor vehicle.

Oh yeah and these access tokens are also time limited and revocable.

> Access shall include the ability to send commands to in-vehicle components if needed for purposes of maintenance, diagnostics and repair.

So I’m just not following at all the level of complexity here and the huge number of red flags on legislation which is trying to spell out a technical solution instead of just spelling out the effect.

We don’t need an open access inter-operable standardized data platform providing direct and delegatable remote control via mobile application to mechanical control systems. We really don’t.

I would be a lot happier if it simply said that manufacturers must provide documented vendor extensions to the ODBII port to cover any new data streams.

Re: There's another right to repair fight brewing in Massachusetts

#58
post #56

I don’t understand how engineers can read the actual text of the Question and think this is a good idea... > shall be required to equip such vehicles with an inter-operable, standardized and open access platform across all of the manufacturer’s makes and models. What is a “platform” in this context? The vehicle is supposed to be equipped with one, so presumably not a cloud server then? Inter-operable with what? Other…

My understanding is the motivation for Q1 is that vendors will stop including ODB ports since they can rely on OTA mechanisms [1], thus bypassing the intent of the previously enacted right to repair bill. The Globe editorial [2], despite being in favor of Question 1, acknowledges many of the concerns you've laid out. They suggest, as a possible remedy, that the Legislature amend the law if and when voters approve it, and propose "a compromise that requires all cars, including electric vehicles, to keep their OBD ports — which mechanics can currently plug into to retrieve diagnostics data ."

1: "More than 90% of new cars transmit real-time repair information wirelessly, and independent repair shops will soon have limited or no access." https://massrighttorepair.org/ 2: https://www.bostonglobe.com/2020/10/13/opinion/vote-yes-ques...

Re: There's another right to repair fight brewing in Massachusetts

#59
post #50
post #15

Earlier quoted context omitted.

They're incredibly scummy but a super thin veneer. I don't know how anyone buys their BS. On one hand they feature grease monkeys talking about people hacking your car, I'm not sure people should be using their local mechanic for cybersecurity advice. More important, the fine print at the end makes it clear that it's the auto manufacturers sponsoring those ads, and their bias is obvious. I'll lose some faith in human…

What I don't get is, why hasn't anyone stated the obvious. Why do cars have location data stored onboard? Personal information? GPS data? I have a phone, which already has stupid levels of personal info in it. Who on Earth needs another phone in their car, tracking everything, watching where I drive, who I call, on and on and on. I don't get it. No one needs any of this crap in a car. Take a phone for example, terrib…

Most cars probably don't store that data. The opposition ad is lying about whats in your car and who can access it.

Re: There's another right to repair fight brewing in Massachusetts

#60

MA voter who's genuinely torn here. The thing that bugs me out about this law is that, AFAICT, this data is _already_ required to be available to any 3rd party manufacturer through a physical "non-proprietary interface" (so far, an OBD-II port) after a similar ballot initiative from 2013 [0]. This law essentially just makes the data available wirelessly. I care about security holes and I care about consent. Having a…

I'm in the same boat. I don't understand the argument that manufacturers are using telematics as a loophole, since it seems that the 2013 law specifically says that while many uses of telematics are not covered by the law, those that are "necessary to diagnose and repair a customer's vehicle" ARE still covered.

> With the exception of telematics diagnostic and repair information that is provided to dealers, necessary to diagnose and repair a customer’s vehicle and not otherwise available to an independent repair facility [...] nothing in this chapter shall apply to telematics services [...].

So, are manufacturers doing things like including telematics that they claim "aren't necessary" but in reality are pretty important? If so, then independent repair shops are at a disadvantage, but the solution should be to force those signals to be available through the physical port.

Or is it a matter of independent repair shops not being able to compete with the dealerships who can get telematics to do things like email you when it is detected that your oil is low?

Post reply on HN