Live data from Hacker News

Volkswagen started blocking GrapheneOS users

discuss.grapheneos.org

361–370 of 497 posts

Re: Volkswagen started blocking GrapheneOS users

#361
post #70

It is amazing how Volkswagen keeps messing up. I am currently in the market for a new car, an EV specifically. Volkswagen brands were at the top of my list for many reasons, among them the excellent driving assist implementation. I got an offer from a dealer three weeks ago and was going to order the car, then the API for the community integration got turned off. I decided to hold back and see what comes from it. Now…

German companies, especially old school industrial ones like VW, have a very hard time understanding open platforms. The view everything through the lense of liability and compliance first. Their thinking is that if someone runs their app on a custom ROM and uses that to manipulate the app in any way, and that causes some extremely hypothetical damage, that they might be held liable for not having prevented this situ…

[deleted]

Re: Volkswagen started blocking GrapheneOS users

#362

Earlier quoted context omitted.

I’m with you in spirit, but the ship is sinking, man. Your arguments were already made in the 90s when the first puff of smoke from all this was on the horizon. Thirty years of chicken little later, I’ve moved past being upset about this and am trying instead to persuade the Linux community to step up before the window of opportunity closes on GP computing altogether. Do something, act , if you want a better future;…

Make the installer KISS. Linux installation still host the realm of complex verbose jargon. "Starting anaconda", "Enable Kdump", on anything RedHat. Debian spews an ancient terminal window of options upon options and who knows how to install Arch. Linux installations has never been click, click go. Installation wizards are still designed for the tech enabled and not the common user. We have a helicopter on Mars yet t…

I'm not sure that is even possible with Secure Boot

Re: Volkswagen started blocking GrapheneOS users

#363

Earlier quoted context omitted.

Think of the children that will bypass all of the "protections" recently adopted by the UK.

How would they even do that? A VPN is just a remote machine. Anything can be a VPN

Probably by forcing VPNs to only allow approved operating systems to connect to the Internet via hardware attestation, then those operating systems will only allow users to install signed apps, and only government-approved VPNs will be allowed.

Re: Volkswagen started blocking GrapheneOS users

#364

I got an iPad as backup with my 2fa stuff, and so I can keep an eye on kids in Apple ecosystem. When my iPhone mini does I'll go for /e/OS or GrapheneOS. And then I'll have the iPad lying at home for all the shenanigans that are nice but I don't even really need. My phone must serve me.

I would recommend Grapheneos over e because it has much better support and is a different class of privacy and security.

Re: Volkswagen started blocking GrapheneOS users

#365

Earlier quoted context omitted.

Why does a car even need an app? Don't they have a screen and internet connection on the car itself?

Why does a car even need an Internet connection? I'd prefer a car without. I recently bought a 2024 model Chinese EV, and it doesn't seem to have an internet connection of its own. Neither does it seem to have an app. Reasons I could think of for an app: Remotely check battery charge, and that would purely be for interest rather than necessity. I get why people might like or want remote heating/cooling as well, and I…

> I recently bought a 2024 model Chinese EV, and it doesn't seem to have an internet connection of its own.

That you know of...

/s

Re: Volkswagen started blocking GrapheneOS users

#367
post #144

Earlier quoted context omitted.

Probably made worse by the fact that _every_ VW brand car I’ve driven has read about 10% high on the speedometer. I think I’m going 100 kph, but timing using the km markers on the highway show I’m going about 90. When I talked to the dealers, they said that the speedometers only have to be accurate +/- 10% according to the SAE specifications. After DieselGate I assumed that the high reading was to game the fuel consu…

Just use the speed reported by your GPS. Most navigation apps show the GPS-based speed.

A little nice thing the cars could do is automatically calibrate the speedometer from GPS when on a long stretch of a road. You would get the accuracy of GPS and the reliability of speedometer even when in city jungle, underground, during slow speed manoeuvres etc.

Re: Volkswagen started blocking GrapheneOS users

#368
post #70

It is amazing how Volkswagen keeps messing up. I am currently in the market for a new car, an EV specifically. Volkswagen brands were at the top of my list for many reasons, among them the excellent driving assist implementation. I got an offer from a dealer three weeks ago and was going to order the car, then the API for the community integration got turned off. I decided to hold back and see what comes from it. Now…

German companies, especially old school industrial ones like VW, have a very hard time understanding open platforms. The view everything through the lense of liability and compliance first. Their thinking is that if someone runs their app on a custom ROM and uses that to manipulate the app in any way, and that causes some extremely hypothetical damage, that they might be held liable for not having prevented this situ…

It looks like the software development at Volkswagen is done by mixed bag of different deparments with different quality.

On one hand you have: Linux at Volkswagen

"Software development without Linux is no longer possible within automotive environment. Therefore Volkswagen Group IT created and maintains a Linux distribution for our developers. This short talk will highlight our starting goal to integrate into the existing environment, highlight our integration problems and solutions with contributing to upstream. Furthermore we will show where Linux desktop need to improve in future iteration to be a good fitting replacement for other systems."

https://media.ccc.de/v/4486-linux-at-volkswagen

On the other hand you have insecure implementation of telemetry: Wir wissen wo dein Auto steht

"Bewegungsdaten von 800.000 E-Autos sowie Kontaktinformationen zu den Besitzern standen ungeschützt im Netz. Sichtbar war, wer wann zu Hause parkt, beim BND oder vor dem Bordell.

Welche Folgen hat es, wenn VW massenhaft Fahrzeug-, Bewegungs- und Diagnosedaten sammelt und den Schlüssel unter die Fußmatte legt?"

https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-vo...

Re: Volkswagen started blocking GrapheneOS users

#369

Earlier quoted context omitted.

If I had to guess it’s liability concerns around the app-based remote unlock and parking + R155 and CRA. A lot of european companies have moved to require attestation in their apps, likely spurred on by the CRA.

But why? I'd understand (though not approve) them tightening down everything about the car firmware to the max. They are responsible for the app, sure (it's a "digital element"), but they aren't responsible for the OS the app runs on. The CRA should not be used as an excuse to enact stupid restrictions.

Unfortunately, due to the nature of these things, you cannot verify an app is unmodified without also verifying the OS running it is also unmodified. So if VW decides that only their unmodified app may access APIs, then they kind of are stuck verifying the OS.

They can, given basic competence in SW engineering, also verify against GrapheneOS' published release keys. The reason they don't is the same reason Google closed my ticket asking them to include Graphene keys in Play Integrity checks: they don't care.

Re: Volkswagen started blocking GrapheneOS users

#370

Earlier quoted context omitted.

“Users shouldn’t be same to control their own engines actually” hmm well ok then

May I introduce you to the "rolling coal" morons?

I would rather they continue to exist than the alternative of a horrifically authoritarian sterile controlled-society dystopia, which is what certain parts of the world are rapidly heading towards.

We live in a country where freedom is predicated on allowing certain things that others don't like. Being loud and obnoxious is just a natural part of the culture of expressing that freedom. They're not doing it all the time anyway.

Post reply on HN