Search results

It is trivial to do that, but it would be a lot easier to use the interface on the big screen to select playlists, search for music and in general use the app.

Just out of curiosity. But I need to ask. Did you get your own API-keys and secrets, or are you also using the keys that are lifted from the official apps?

It is standard for cars produced after November (?) 2014.

I just started logging the http-responses from the API, and after the last downtime a few days ago, it seems to have stabilized quite a lot. The last 1000 requests to the API has given the following response-codes: Last 1000 responses: 200 => 981 503 => 14 502 => 5 IE about 2% errors. And...

The short answer is "yes". The long answer is that you need to use the new API, and authentication, and that this requires Teslas proprietary API-key and secrets. These are not publicly available, and Tesla has so far been quiet about when (or if) they will open up for 3rd party development.

Been down for a while now...

While I don't have specific numbers, my feeling is that I would see similar stats. My app simply ignores the errors and will retry the same query a minute later, so they are not fatal here. But they seem to be grouped so if a request fails, all requests will fail for the next 20-30 seconds, and...

My guess is that files without an extension will not be recognised by the player app, HOWEVER, I don't think it uses the extension to identify the file types. So my guess is that a flac file with a .mp3 extension will play just fine. The player probably opens the file and determines the file...

Yeah. It's pretty unstable. Whether it is the car losing its connection with Teslas servers, or the servers are unavailable for clients is hard to know. But I have seen on several occasions that I lose contact with the car both in my own logger (exploiting the API) and in the official android...

But there were reports in the media this summer that norwegian holiday habits - driving through Europe (and especially to Sweden) did cost Tesla a small fortune.

1.67.73 rolling out OTA in Norway today. Some believe it is a fix for the frequent 3G connection problems that has been a big issue here. A bit early to tell, as it's just a few hours since the first cars were upgraded.

My money is on that too. But html5 audio would allow a bunch of 3.party music services to work.

If they would only allow html5 audio (not even video) in the browser it would help a lot.

On my way out of Oslo, towards Sarpsborg, last Sunday morning, the car adviced me to exit E6 at Vinterbro just to re enter a few hundred meters ahead. There was no traffic at the time. On RV7 between Hønefoss and Sokna it also suggest that I exit the highway, take a few km on the back roads...

Here in Norway, it often tells me to exit highways, just to get back on them on the next entry. And it's not because of traffic. It even happens early Sunday morning, while I am almost alone on the road.

My guess is that they don't prioritise enhancements that are going to be replaced by 3. party apps "soon". Audio is an obvious target for external applications (Spotify, Google play, you name it). Annoying, yes, but I hope they put more resources into allowing app. development for the car than...

That logic is flawed anyway, and should be changed to a better way of sorting way points. It makes no sense to me to add a "work" location as I never drive to work (it is just a few minutes away from home). I'd rather like to add a couple of other favourites to stay at top and be treated...

With the new (post 6.0) API and oauth, they can easily limit the allowed functions based on the application id. Today we are "forced" to fake the id of either the official android app or the iPhone app. If they allowed 3. party apps, we could use unique ids for each application (Tesla Companion...

Thanks. That would be great. The apiary page should probably be updated as well, to keep it up to date and "official".

What was the version number on 5.14? Is this just an update to 6.0 to get in sync with the 5.14 release number?

Sorry. 503 of course. I'll start logging them and see if I can report back how often they happen for me.

Fwiw. I too see a few 504s with my client, but not to the extent you do. How often do you poll the rest API? I poll every minute, and get a couple of periods with 504 every day, but they usually last only a few minutes at a time.

Ah, sorry I missed this. Glad you solved it.

Of course, if the exploit requires physical access to the car, then that's a different matter than if all you need is a rogue dhcp-server or a webservice. I would still have notified Tesla first though, because if I can find the bug so can somebody else, and they might be both better at...

The author of the Tesla Companion app for Windows phones has apparently found a way to integrate the calendar. Hope he will post some info here.

The car obviously runs a dhcp-client, and apparently some dhcp-clients will pass certain dhcp-options to external commands which might trigger a shell of some sort. Of course it comes down to which dhcp-client it is running, whether it accepts those options, that it does not sanitise them, and...

Vehicle_id is used in the streaming API. Not sure why they have two different IDs.

Well, MY webserver runs as "nobody" with pretty strict selinux-rules to prevent it from accessing files and resources it doesn't need. I have not he of anyone running a webserver as root, being apache or anything else, for many, many years. Dhclient might run as root, but you will at least need...

AND gaining root _also_ requires some kind of local privilege escalation, which might or might not be possible.

Only if you have a vulnerable cgi-script (or some other environment that will trigger bash from the Web server process).

Thanks again for the clarification. It is the last suggestion I tried to do. IE. convince Google that my server is an android app that subscribe to these notifications.

Well, they added sensors and camera for blind spot detection, acc, speed limit notifications and lane assist, and I have still not seen a public announcement of that... So slight changes in regen-algorithms and cc-sensitivity is nothing compared to those changes that we know for sure has happened.

Thank you for the information. I guess what I tried to do was to register my server as an android app, and thereby receiving the notifications from gcm to both my phone and my server. I don't know if the system will notify all devices. What happens if you have several phones or tablets logged...

Do you know how to register an URL for notifications? I don't have an iPhone, only android, and there are no settings in the app for notifications. I have neither seen any info about this in the car settings. After searching the source code of the app I found a few interesting sections, and I...

I started to look at the notification system, but it looks like it depends on third party services. And it does not look like it uses the "standard" API calls. If someone have a dump of the traffic when a notification is added or changed it would be great.

Just tested the defroster-commands with the client-id and secret from the iPhone app as well, and they still only give "unknown command". So I guess the commands are just added to the backend app code (but maybe not to the user interface?) but not implemented in the server code yet. I also...

Not sure, but I still find it confusing when the car locks on "walk away" and when it does not. After a few incidents where the car was left unlocked on a public parking, I was inspired to create a small "app" that runs on a server I have at home, which sends a notification to my phone if the...

Just tested the defroster-commands, and I get "unknown command" even with a 6.0 car. But I use the Android app-id and secrets, so it _might_ be a possibility that they have rigged the API to allow different commands from different apps. It would make sense to disable IE. remote start from a web...

It is the "daemon" I have spent most time working on, so a better web app, that is accessing the db instead of the rest API directly is of course a great thing to build

I have divided my code in pieces. One is a kind of deamon - really just a php-cli-script - that constantly polls the rest and streaming APIs, and adds the data into a SQLite-database. Then a couple of other scripts and webapps shows the data from the database in different ways. That way I only...

I just received 6.0,so I will check in a few days. Spending the weekend in a cabin with my family, so no coding for a while. ;)

In the Android app there are both "prod" and "dev" client-id/client-secret. None of these start with 8c or 81 so they probably used different ids and secrets for the two platforms. This is both a good sign - they obviously have code in place to handle multiple client ids, but it could also mean...

I haven't released anything yet, but if/when I do, I guess I'll just remove the keys from the code. As I write PHP there is no easy way to obscure them. Ofcourse I could encrypt them, but then the encryption key would need to be in plain text in the code instead, and that would not really...

a) Your username is your email address. While I, and probably a few others have plenty of email addresses to choose from, I guess most owners have one or maybe two. We also know that people are people, and they regularly use the same password for many services. So with a bit of trial and error...

The API now provides a method to change password, but I don't think it's implemented in the apps yet(?), so they have probably thought about it, and I think we'll see more updates to the apps and interfaces shortly.

Value of "expires in" for the "bearer". I first thought it was milliseconds, as their other timestamps are given in ms, and that the bearer would expire in 7776 seconds - about 2 hours. However I have now successfully used the same bearer for more than 12 hours so I decided to do a few more...

I have not really given it that much thought, but I use them in more than one function, so they would either need to be global, or defined multiple places or passed around as arguments to various functions, and they are pretty constant :wink: (no need to change them throughout the application)...

Oh, the PHP-code I posted works fine, so it's not really a problem now. But it might be the content-type that was the problem when I first tested with a json-object. It looks like you can then do either a regular http-post with a query string, OR a http-post with content-type application/json...

Pretty certain. Just for reference, here is (part) of my PHP-code: define('PROD_OAUTH_CLIENT_ID', "XXXXXXXXXXXXXXXXXXXXXXX"); define('PROD_OAUTH_CLIENT_SECRET', "XXXXXXXXXXXXXXXXXXXXXXXX"); define('HOST_PROD_API', "owner-api.teslamotors.com"); $request = array( 'grant_type'...

Might be a "reconnect", to make the wifi to connect to a different access point with better reception? Anyone tried how the car behaves if it can detect more than one (pre configured) wifi network, and what happens if the signal strength of one of them changes?