• 0 Posts
  • 9 Comments
Joined 2 years ago
cake
Cake day: August 9th, 2023

help-circle




  • One dreams of a day where it could be a thing. My take is that a drop in replacement is not possible because there is no incentive for car manufacturers to provide that hardware interoperability. They profit too much from the work google does to write the software for them, and all your data they can sell. They want you to buy a whole new car to get the latest features, they are not going to make it any easier on you to extend the lifetime of their product.

    There are projects like Crankshaft that allow you to add a head unit to a vehicle that does not have one, but that does not get rid of the android app on your phone. As far as i know all these projects relay on a reverse engineered implementation of the android auto spec: https://github.com/f1xpl/openauto

    One could read that implementation and make a client, but i am not aware of one that exists, let alone is actively maintained. Ibl believe the reason is the cost of testing the software for compatibility with all the different auto maker hardware makes this too difficult to sustain. I look forward to other responses to see what others are using.


  • my understanding is that terms of service would be helpful but not needed if someone trued to sue because you blocked access to the site. I would not expect ToS for a site like you are explaining, but if it did it would say “the web admin will ban you if you are naughty, you have been warned”

    For privacy policy i think what you wrote to give us context is near perfect. Explain how your app stores data, be specific about encryption at rest and in motion. If your app is designed to hold name, email address, billing info you should highlight that in your policy. including a (monitored) contact email for questions would be nice, but not needed imo unless you are storing PII



  • To expand with my personal experience, I self host a synapse server partly for the reason that i want my children (aged 8-14 now) to have a communication platform they can access to get ahold of me with out requireing a sim card. I do not federate, and i do not allow account sign ups. That keeps a pretty isolated instance while still allowing everyone on that homeserver to be able to talk to each other.

    I help them get Element setup on each device. I dont think this is overly complicated, but i am sure i am a horrible judge of complexity… They have to enter the url of the server, then their password, then they need to scan a qr code/verify from an existing device. Or, they need to enter a second passcode to verify their identity. I help them keep those secrets in bitwarden, so imo, that complexity is an opportunity to explain some opsec and encryption!