Reverse Engineering the BMW I3 API(shkspr.mobi)

https://shkspr.mobi/blog/2015/11/reverse-engineering-the-bmw-i3-api/

20 comments

orless11 anni fa

A few years ago I've posted a question "How to limit speed with BMW JSDK on 116i programmatically from Java?" on StackOverflow as an April Fool's joke:

http://stackoverflow.com/questions/2557423/how-to-limit-spee...

Now it seems to be not-so-much of a joke anymore.

striking11 anni fa

The refresh_token is so you can grab another access_token without logging in again. It's part of OAuth2 spec.

edent11 anni fa

Aha! I completely missed that. Will update on the morning. Thanks

nolanbrown2311 anni fa

I did this on my 2015 3 series which provides access to a lot of cool APIs as well but performance data is accessible only for the i3. The best use I could find for the API was an iOS extension to easily send Maps locations directly to my car for use with the built-in navigation system.

barlo11 anni fa

Have you open sourced any of this, by chance? Was just thinking of attempting this on my BMW.

keehun11 anni fa

Am I understanding this correctly? The car is constantly communicating with BMW's servers?

edent11 anni fa

Not quite. The car has a 3G modem which is always on. When the app makes a request to BMW's servers, they forward the request to the car, which then responds.

I assume that it probably pushes some days regularly.

If the car is out of coverage, the app doesn't get any data back - as far as I can tell.

vetinari11 anni fa

I would expect this data to be available only by banging on k- or d-bus, not that it is being uploaded to BMW.

I'm getting old...

TeMPOraL11 anni fa

Any sensible reason for it, or is it just another case of insane engineering - pushing through cloud stuff that should go through a LAN?

edent11 anni fa

If your vehicle is in a car park, it needs some way to connect to the net. It might make sense to have wifi for home use - but does your network stretch out to your garage?

Finbarr11 anni fa

I was at the HackTheDrive event. Part of the data made available was logs from several trips taken in the i3. This included car sensor and location data, pinged every few seconds of the journey. I'm not sure if this is transmitted by default.

xkcd-sucks11 anni fa

in principle it's kind of scary that the easiest way to get data from your car is to query a www server

papaf11 anni fa

Its an authenticated query. Why is it scary - is there a problem with the authentication?

If the authentication is sound it is actually quite cool.

jacquesm11 anni fa

It's scary because that server could be compromised and then your car is wide open.

jamiesonbecker11 anni fa

No authentication stays sound forever.

Havoc11 anni fa

>in principle it's kind of scary that the easiest way to get data from your car is to query a www server

Not entirely unexpected though. I mean...Engineer X is being evaluated on 50 performance criteria...none of which includes "will HN approve of the coms". In that case vanilla www queries are certainly a viable option.

the_mitsuhiko11 anni fa

Depends on what you mean by easy. There is also the CAN bus.

jacquesm11 anni fa

But at least that requires physical access to the vehicle, something that is a bit harder to do when you're doing 90 miles per hour on the autobahn. But a server that can give you access to that car bypasses the air gap that would otherwise keep you safe.

[deleted]11 anni fa

jacquesm11 anni fa

What is it with all this stuff relying on server round trips when strictly speaking that is simply not necessary, why all this totally superfluous complexity?