I agree that this is most likely the best (or maybe only) option I have. Let's hope that the password handling is simple enough to be quickly verified because I'd have to repeat the process for every single new version...
Hi Volker.Berlin,
If you take a look at the FAQ it talks a little bit about security. You can find it online
here or in the Documentation folder that comes with VT.
As araxara points out, you can read the code and build it yourself to ensure that the jar file actually reflects the sources that you're reading. The Readme.md file on github has notes on how to set up the build environment.
hans has a good point (that I just added to the next version of the FAQ). You could use an app to monitor all network traffic coming from VisibleTesla and forbid any connections that you don't want. Little Snitch on the Mac is a good example. FYI, VT talks to Tesla, Dropbox (to check for and download new versions), and MailGun to send notifications. It will only check for new versions and send notifications if you explicitly ask it to do so. Otherwise it just talks to tesla.
You may already be familiar with hans'
teslams project. If not you should definitely check it out. It's an awesome package and you'll probably find it much easier to do a security review of it than of VT.
Joe
- - - Updated - - -
Can you explain to me why VT decides to reduce the polling interval once the car actually starts to do something?
View attachment 41056
I can't tell you what is happening in this specific case based on just this image, but I can tell you a few things about how VT works (also in the documentation) which might help. I also encourage you to take a look at the code if you want to see what's really going on at a detailed level.
The Graphs Tab has a data collector that collects data samples every two minutes unless the car is in motion in which case it collects data every 30 seconds. This happens regardless of what Tab you are displaying as long as the app isn't asleep.
When you are sitting in another tab, e.g. the Overview tab, the app auto-refreshes the displayed information every 30 seconds unless the app is asleep or daydreaming. The Graphs tab will opportunistically grab any relevant information that is collected by the other tabs and add it to it's own data set.
The location tab is a special case of this. If you are viewing the location tab while the car is in motion, it uses the streaming API which may collect data at a much higher rate. The graphs tab also opportunistically includes any relevant data from there also.
People are going to think hans is paying me since I'm mentioning this twice in a row, but I really encourage people who are interested in data collection to check out teslams. It's got very nice data collection and visualization capabilities and can easily be run on a server to collect data in the background. It's also easily modified to make it do exactly what you want. Of course you can modify VT too, but there is a lot more code to wade through since it has all of the GUI code, etc.