61–70 of 131 posts
I'd like to hear a security expert's take on this. Something about this makes me feel real nervous.
1) it seems silly to build anything on Teslas platform. 2) it seems silly for customers to add more commercial stuff on top of Teslas platform.
Even as someone who develops software for a living, I think most tech out there today is stupid. Some is useful but most seems not. And occasionally someone shows me use for something I thought was dumb, but I can usually go on without it.
Am I a luddite?
Earlier quoted context omitted.
My own anecdotal contribution, based off the constant bickering of people I know who work for engineering firms that have Tesla as a client, is that they do not have any of their shit organized in a manner which could be remotely described as "together".
There are many words I could use to describe my limited interactions with Tesla manufacturing, but "together" is not one of them. After being harried to hurry up and build something exactly to the 34th revision of their ever-changing specs (the inside of the electrical panel was powder-coated the wrong manufacturer-original color and therefore unacceptable, and on and on...) and warned about the severe penalties for…
Another SAAS embedded within Car which cannot be opted out. Is there a way to get FOSS Tesla? IMO the Government must intervene to make this opt-in rather than compulsory?
FOSS laws never made as much sense. How can we not have the right to understand how our 3000 lb death machines work?
Another SAAS embedded within Car which cannot be opted out. Is there a way to get FOSS Tesla? IMO the Government must intervene to make this opt-in rather than compulsory?
I'd like to hear a security expert's take on this. Something about this makes me feel real nervous.
I mean, oauth2 is pretty much the standard/best practice for third party access to user-controlled identity and/or resource permissions. I'd like to know more about scopes and how they do authz, but as far as access goes, this has the makings of a best practices implementation like you'd see from Google, reddit, etc. Fine grained access control via scopes, user-facing "you want this app to get access to permissions?"…
Now, companies like Facebook have discovered the hard way that most users don't think carefully before giving away access to their data. All it takes is one app that says "I'd like access to everything you can see on facebook please", and that's how cambridge analytica happened.
Ever since then, the vast majority of companies have locked down API's - because the company doesn't want to get in legal hot water for the actions of a third party app granted full access by the user.
I can't wait for the opposite of this; Tesla App Store will be an insane value-add feature; for both owners and app developers.
I take it as a sign of the current state of hackernews that nearly no one took the time to actually RTFA. This isnt about making apps that run on the car, this is about being able to integrate your external apps with the fleet API. Like, can external app that has permission would be able to locate the vehicle. That said, I think the security implications are fairly important, since I expect one of the exposed feature…
> I expect one of the exposed features is to be able to unlock or start the car. I'd really like that (effectively allowing third parties to implement their own tesla app). However, I suspect that no/very few third parties will be allowed to have that API scope.
This API looks like it is meant to control entire fleets.
Also, like Apple devices, I assume Tesla will have master control over the cars in the same way and can brick them if needed.
I don't understand some things, and I'm not going to phrase them as questions but just my opinions. 1) it seems silly to build anything on Teslas platform. 2) it seems silly for customers to add more commercial stuff on top of Teslas platform. Even as someone who develops software for a living, I think most tech out there today is stupid. Some is useful but most seems not. And occasionally someone shows me use for so…
If I understand you correctly, you think that there is no value to be added by software to a Tesla.
There are very obvious counter examples. E.g. fleet management for rental cars or 3rd party navigation (in the case of these APIs running on a phone, but using the API for e.g. the current state of charge). There are countless other possible products to be built on top of Teslas platform.