Live data from Hacker News

Volkswagen blocks Home Assistant by requiring client assertion

github.com

51–60 of 203 posts

Re: Volkswagen blocks Home Assistant by requiring client assertion

#51
Sad to see some people still believe raw capitalism works and that they can "vote with their wallet".. but they don't see that all car manufacturers can just agree to enshittify their products the same way and use their position to ensure you won't just "start your own car company". There's no real choice and those in power don't care.

Only regulation can help.. or a revolution in case the political system in your country is broken..

Re: Volkswagen blocks Home Assistant by requiring client assertion

#53

/me scratches VAG cars from a possible new EV purchase. I hate Elon as much as the next guy, but Tesla is still playing the API game way better than the rest of the pack (even with the "not so new" Tesla Fleet API change)

Volvo is also doing pretty good with offering an official API

But Volvo does not have cheap models with a reasonable range, unfortunately. I'm seeing right now on their Spain's website 40k EUR for a single motor EX30 with 337km WLTP which is ridiculous

Re: Volkswagen blocks Home Assistant by requiring client assertion

#54
post #30

I mean, it was founded by the Nazi party, they single handedly destroyed diesels through the world's largest scam, what ethics can you really expect from them? I find it extremely funny when people boycott Teslas for being "Nazi" but won't boycott actual Volkswagens that was founded by the real Nazi party and to date - followed some of the most unethical practices in automative history :)

https://m.youtube.com/watch?v=sa8sllg5KIU&pp=ygUOxaFrb2RhIGh...

Re: Volkswagen blocks Home Assistant by requiring client assertion

#55
post #43

This comment has really nice translation of corpo-speek to human language : https://github.com/robinostlund/homeassistant-volkswagencarn... Why are they shooting them selves in the feet? Is this really a tangible income stream? Is it really increasing security?

Most executives make commercially disadvantageous decisions in exchange for more power. It's practically a law of business: executives prioritize their power first and their company's profit margins second . This is one reason why outsourcing coding was so popular despite not saving money and being so commercially disastrous - execs were in the driving seat with that relationship much more than they were with us. Des…

I haven't seen anyone put this dynamic in such a clear and succinct description - the fact is that a lot of people (especially corporate managers) just hate the loss of control and will go out of their way to ban people accessing their things "wrong" - even if it's counterproductive for their larger corporation or a goal.

Re: Volkswagen blocks Home Assistant by requiring client assertion

#57

Earlier quoted context omitted.

pretty much. correct me if I am wrong, but these T&C treated like "local" laws (in respect to interaction of client and business within their interaction) within most jurisdictions by courts. so even if T&C does not make sense, usually courts are in favour of enforcing them. unless some severe contradiction with constitution or alike, or serious harm to people or something, they would throw away T&C in cases. but AFA…

No: T&C cannot override the law, that is a national/EU law is still superior to anything that is written in the T&C. If there is a contrast between T&C and the law of course that T&C are just scratch paper.

Noone is claiming T&C overrides the law, but most laws (even here in EU) give a lot of leeway to contracts (which T&C is an example of) in cases where law doesn't establish any extra positive right.

And there's no law demanding you get access to a proprietary system (as of right now) that would override a T&C restriction.

Re: Volkswagen blocks Home Assistant by requiring client assertion

#59

Quite a few other manufacturers have done the same thing. I use a reverse engineered Polestar library to get charging status but I'm in the middle of building a CANBUS sniffer to do the same job because I don't trust they won't do the same thing as this. I don't really understand it, it doesn't seem to offer a huge potential revenue stream and it pisses off the people who are most invested in your product.

They already add cryptographic authentication to some CAN messages, so you can't change them. It is only a matter of time until they add encryption.

This is mostly a corporate problem of risk aversion in my opinion. Some department writes down a risk assessment with a list of miniscule risks, for example of some 3rd party app backend being hacked. Or just a headline "Tinkerer hacked his car to use with his home assistant" in the local press. This list circulates, and since nobody in the middle management wants to be responsible for anything, and there is no officially approved positive use case, draconian countermeasures are drafted and constructed one by one.

Re: Volkswagen blocks Home Assistant by requiring client assertion

#60
post #56

What does client assertion mean here? I don't see any mention in the GitHub issue.

It means that the request to the API contains cryptographic proof that is was generated by a legitimate, reviewed app running on a unmodified and non-rooted mobile device controlled by Apple or Google.
Post reply on HN