Live data from Hacker News

Volkswagen blocks Home Assistant by requiring client assertion

github.com

61–70 of 203 posts

Re: Volkswagen blocks Home Assistant by requiring client assertion

#61

/me scratches VAG cars from a possible new EV purchase. I hate Elon as much as the next guy, but Tesla is still playing the API game way better than the rest of the pack (even with the "not so new" Tesla Fleet API change)

Volvo is also doing pretty good with offering an official API

Volvo also has the fully mandatory requirement of a consumer Google Account to use the vehicle now due to how tightly integrated Google Automotive is.

Re: Volkswagen blocks Home Assistant by requiring client assertion

#63

Earlier quoted context omitted.

This could equally illustrate the difference between long established multi national companies with an overbearing corporate culture vs young upstart companies with a dynamic startup culture.

The question is why doesn't Germany have any young upstart auto companies when the US and China do? The question being the rhetorical kind.

Access to capital, mostly. The US has always been willing to grant hefty amounts of taxpayer money to startups, something culturally foreign to Germany (startups are risky, Germans don't want taxpayer money to be spent on risky adventures that might bring losses) and the US also has dozens of billions of dollars a month in 401k pension savings making their way into the asset markets.

And China, well, it's a dictatorship with effectively unlimited foreign currency reserves. They can do whatever they want.

Re: Volkswagen blocks Home Assistant by requiring client assertion

#65
post #30

I mean, it was founded by the Nazi party, they single handedly destroyed diesels through the world's largest scam, what ethics can you really expect from them? I find it extremely funny when people boycott Teslas for being "Nazi" but won't boycott actual Volkswagens that was founded by the real Nazi party and to date - followed some of the most unethical practices in automative history :)

Well so the Nazis founded VW with confiscated union capital, and after the war control of the company was basically handed over to the union to make things right.

Re: Volkswagen blocks Home Assistant by requiring client assertion

#66

This comment has really nice translation of corpo-speek to human language : https://github.com/robinostlund/homeassistant-volkswagencarn... Why are they shooting them selves in the feet? Is this really a tangible income stream? Is it really increasing security?

> Why are they shooting them selves in the feet? Because people will still buy their cars. The average Joe has very little regard for their privacy. We've been trained to be numb. > Is this really a tangible income stream? Yep. > Is it really increasing security? Nope.

How is this a tangible income stream? I suspect that the amount of customers willing to pay for some weird API access or We Connect offering is rather limited. It would have to be bundled into some other solution, which again I'd guess have a limited customer base.

I have VW and I suppose We Connect, there's not a single thing that's worth paying for, not when you have CarPlay and Android Auto (or whatever that's called). If anything I'd prefer that they'd just drop the personalization they do with users. Our car will forever assume that my wife is driving, because that what the dealer configured and none of us care to mess around with it.

But yeah, people will buy the cars anyway, because all the automation is something that only an incredibly small segment has any interest in. It's just weird that those who actually care about connected cars are the only one VW is punishing with this move.

Re: Volkswagen blocks Home Assistant by requiring client assertion

#67
post #30

I mean, it was founded by the Nazi party, they single handedly destroyed diesels through the world's largest scam, what ethics can you really expect from them? I find it extremely funny when people boycott Teslas for being "Nazi" but won't boycott actual Volkswagens that was founded by the real Nazi party and to date - followed some of the most unethical practices in automative history :)

Insert "we live in a society" meme

Re: Volkswagen blocks Home Assistant by requiring client assertion

#68
post #5

There needs to be a law that makes remote attestation - no matter who provides the root certificates, Google/Apple/GrapheneOS - illegal. There is only one use for this technology right now, and it is to prevent people from doing what they want to do with the devices they own, while also making interoperability cryptographically impossible. This is anti-competitive and should simply be illegal.

It already is illegal in the EU under the EU Data act. The VW executives are just criminals who don't care about the law, because they can bend it like before.

Re: Volkswagen blocks Home Assistant by requiring client assertion

#69

Earlier quoted context omitted.

Volvo is also doing pretty good with offering an official API

But Volvo does not have cheap models with a reasonable range, unfortunately. I'm seeing right now on their Spain's website 40k EUR for a single motor EX30 with 337km WLTP which is ridiculous

EX30 in Spain starts at 29K small battery version, and 36 the large battery version. The dealerships make a huge discounts to be honest.

I was dealing with this 6 weeks ago!

Re: Volkswagen blocks Home Assistant by requiring client assertion

#70
post #59

Quite a few other manufacturers have done the same thing. I use a reverse engineered Polestar library to get charging status but I'm in the middle of building a CANBUS sniffer to do the same job because I don't trust they won't do the same thing as this. I don't really understand it, it doesn't seem to offer a huge potential revenue stream and it pisses off the people who are most invested in your product.

They already add cryptographic authentication to some CAN messages, so you can't change them. It is only a matter of time until they add encryption. This is mostly a corporate problem of risk aversion in my opinion. Some department writes down a risk assessment with a list of miniscule risks, for example of some 3rd party app backend being hacked. Or just a headline "Tinkerer hacked his car to use with his home assis…

> draconian countermeasures are drafted and constructed one by one.

Except when it’s about privacy or anything else we actually care about: then absolutely nothing is done because it would cost more than 0 to do anything.

Post reply on HN