Live data from Hacker News

Volkswagen blocks Home Assistant by requiring client assertion

github.com

111–120 of 203 posts

Re: Volkswagen blocks Home Assistant by requiring client assertion

#112

Earlier quoted context omitted.

By the way, regarding additional profit stream, to access VW data before you still needed WeConnect subscription (100€ a year), just that before you could use another app or automation to access the data. Now you MUST use exclusively WeConnect and partners to access same data even though you paying already for subscription.

Pretty sure connect is free for like ten years.

Well, might be depending on model. I own eUp and it was free for first year.

Re: Volkswagen blocks Home Assistant by requiring client assertion

#113
post #58

Seems doubtful that this security will be very strong. It won't be hard to spoof an official client.

If they’ve done it using Secure Enclave it’s essentially physically impossible to spoof.

If the data is going through the air or a wire it can be sniffed, right? Is every message signed or encrypted like ssl/tls, or is this just some kind of extra header(s)?

Re: Volkswagen blocks Home Assistant by requiring client assertion

#115
post #75
post #51

Sad to see some people still believe raw capitalism works and that they can "vote with their wallet".. but they don't see that all car manufacturers can just agree to enshittify their products the same way and use their position to ensure you won't just "start your own car company". There's no real choice and those in power don't care. Only regulation can help.. or a revolution in case the political system in your co…

Anti-competitive practices that you describe ("all car manufacturers can just agree") is definitely not a capitalistic thing (market competition being an important part of capitalism), and indeed regulation can improve the bad outcomes. I think revolutions are more successful when there is some new idea of what to replace the system with. Currently I did not see anything remotely interesting (ex: french revolution ca…

I don't think there's a consensus about that, as demonstrated by divided opinions on EU DMA and Apple vs Epic.

The anti-regulation arguments aren't framed as "market competition is bad", but rather "the market will sort itself out without intervention" and "let companies do whatever they want to avoid killing innovation".

Re: Volkswagen blocks Home Assistant by requiring client assertion

#116

BYD DMCAd my whole repo to connect to their cars... https://github.com/github/dmca/blob/master/2026/05/2026-05-2... It's a shame these car makers are locking down their cars (which are brought for a premium!) and going on a crusade against open source.

You should email Louis Rossmann, he's been helping people in similar situations.

Re: Volkswagen blocks Home Assistant by requiring client assertion

#117

Earlier quoted context omitted.

Access to capital, mostly. The US has always been willing to grant hefty amounts of taxpayer money to startups, something culturally foreign to Germany (startups are risky, Germans don't want taxpayer money to be spent on risky adventures that might bring losses) and the US also has dozens of billions of dollars a month in 401k pension savings making their way into the asset markets. And China, well, it's a dictators…

> The US has always been willing to grant hefty amounts of taxpayer money to startups Care to elaborate? I was under impression that absolute majority of startups in US are fully funded by a (private) venture capital. There are (were?) some exceptions like tax reductions on "green" projects, but they were not restricted to startups/small companies in any way.

> I was under impression that absolute majority of startups in US are fully funded by a (private) venture capital.

Tesla got a shitload of government funding, including a 465 million dollar loan [1]. SpaceX was effectively funded by NASA in its early days. In total, the Muskverse alone got 38 billion dollars [2]. Bezos' Blue Origin got at least 1.5 billion dollars [3].

Sure, by number most startups are fully privately funded. But that doesn't mean the US government isn't willing to help things along, at least for those well connected. And on top of that come government research grants to universities who then spin off companies and keep the profits from the spinoffs.

[1] https://finance.yahoo.com/news/elon-musk-paid-off-teslas-193...

[2] https://www.congress.gov/119/meeting/house/117956/documents/...

[3] https://thehill.com/lobbying/5113500-bottom-line-bezos-blue-...

Re: Volkswagen blocks Home Assistant by requiring client assertion

#118
post #80

Earlier quoted context omitted.

> There is only one use for this technology right now, and it is to prevent people from doing what they want to do with the devices they own. Well, that and making it possible to deploy devices you own in environments where they might be physically accessible to people you don't want extracting credentials from them. Or for ensuring people can only access sensitive company information on company issued devices rather…

> Or using a phone as a credit card payment terminal without the possibility of displaying one payment amount on screen and authorising for a different amount. It only attests that the device booted normally (locked bootloader, factory firmware, etc.). Any kind of post-boot compromise (whether it's from malware or something user-initiated) goes completely undetected and does not impact attestation status.

Sure, it’s one element in a defense in depth. You ensure that post boot it’s not possible to manipulate what’s being loaded, and then you ensure that during boot the OS in the expected state for that to be true. It’s not a panacea but it is an important part of the process.
Post reply on HN