Removal of Mazda Connected Services integration

Zim · October 24, 2023, 8:51pm

It’s great to see car manufacturers go out of their way to screw their clients. They won’t be around much longer this way

NathanCu · October 24, 2023, 9:01pm

The sad fact is most of thier clients will never notice because the idea of connecting thier car to thier computer is so foreign to them that they don’t even know it’s important. They will never even blink unless people like us light Mazda up enough that they understand they made a mistake…

avd706 · October 24, 2023, 9:06pm

I think takedowns are automatic.

SethCalkins · October 30, 2023, 7:12pm

I think the simple solution is to provide this as a custom_integration instead of having it inside core. I managed to get it working but getting a bunch of these errors. None of the entitiesID / Names are properly being filled out… any ideas? Not sure which door is which door. EntityID’s are showing like binary_sensor.2022_cx_5_2_5_s_ce_awd_door_6

Logger: homeassistant.helpers.entity
Source: helpers/entity.py:371
First occurred: October 27, 2023 at 10:33:08 PM (7 occurrences)
Last logged: October 27, 2023 at 10:33:08 PM

* Entity None (<class 'custom_components.mazda.button.MazdaButtonEntity'>) is implicitly using device name by not setting its name. Instead, the name should be set to None, please report it to the custom integration author
* Entity None (<class 'custom_components.mazda.sensor.MazdaSensorEntity'>) is implicitly using device name by not setting its name. Instead, the name should be set to None, please report it to the custom integration author
* Entity None (<class 'custom_components.mazda.device_tracker.MazdaDeviceTracker'>) is implicitly using device name by not setting its name. Instead, the name should be set to None, please report it to the custom integration author
* Entity None (<class 'custom_components.mazda.lock.MazdaLock'>) is implicitly using device name by not setting its name. Instead, the name should be set to None, please report it to the custom integration author

IceBotYT · November 1, 2023, 1:17am

Valdorama · November 2, 2023, 8:00pm

This seems promising - did you get any further with it?

Mibix · November 7, 2023, 11:15am

Any updates and how can I get this working myself?

CM000n · November 7, 2023, 6:25pm

By the way, it seems that the repo with the Python lib for the Toyota Home Assistant custom component for North America has also been taken down with a DMCA notice: https://github.com/widewing/toyota-na

Let’s hope Toyota Europe doesn’t take similar steps. It’s sad to see this behavior of car makers currently.

Townsmcp · November 7, 2023, 8:49pm

I wonder if SmartCar got another recent addition to their integrations

avd706 · November 8, 2023, 10:55pm

Just a thought.

Does Mazda App or connected services build on any open source code?

Can’t find a copyright statement in the app or the connected services documents.

Cant find any open source references either.

Hmmm. …

GSzabados · November 9, 2023, 1:12am

Who does not? It is very unlikely that they are not using some sort of code which is open source.

GSzabados · November 9, 2023, 1:21am

Since when can anybody copy code directly from a secure repository?

github.com

github/dmca/blob/66dd87b1ac48243cd54570d125499df87478860c/2022/09/2022-09-20-toyota.md

**Are you the copyright holder or authorized to act on the copyright owner's behalf?**

Yes, I am authorized to act on the copyright owner's behalf.

**Are you submitting a revised DMCA notice after GitHub Trust & Safety requested you make changes to your original notice?**

No

**Does your claim involve content on GitHub or npm.js?**

GitHub

**Please describe the nature of your copyright ownership or authorization to act on the owner's behalf.**

I work within a [private] team at Toyota Motor North America. We have recently been made aware of our code being exposed in public Github repos. We are working to determine who and how they uploaded our code to the public, but would like this to be flagged and removed immediately. I am working with [private] teams on both [private], and am listed as an owner of our [private] repositories. Additional approvals if needed can be provided.

**Please provide a detailed description of the original copyrighted work that has allegedly been infringed. If possible, include a URL to where it is posted online.**

We currently have our intellectual property being copied in the repo: [private]  
This includes multiple real-life user data stores, code copied from our internal source code, and exposure of our API Gateway & Key here: https://github.com/toyotha/toyota-na/blob/master/toyota_na/client.py

This file has been truncated. show original

And when an API’s address and key has became copyrighted material?

I think that these guys taking down these repositories are happy to make their own company look shit…

avd706 · November 9, 2023, 1:43am

Don’t they have to disclose.

As far as I can tell there is no copyright notice in the app.

GSzabados · November 9, 2023, 2:11am

I believe that depends on the license of the source code. But you can have a look what is compiled in the apk:

And you can notify the owner of the source code if you find any open source code which is not disclosed.

For example GPL has this:

The GPL additionally states that a distributor may not impose “further restrictions on the rights granted by the GPL”. This forbids activities such as distributing the software under a non-disclosure agreement or contract.
The fourth section for version 2 of the license and the seventh section of version 3 require that programs distributed as pre-compiled binaries be accompanied by a copy of the source code, a written offer to distribute the source code via the same mechanism as the pre-compiled binary, or the written offer to obtain the source code that the user got when they received the pre-compiled binary under the GPL. The second section of version 2 and the fifth section of version 3 also require giving “all recipients a copy of this License along with the Program”. Version 3 of the license allows making the source code available in additional ways in fulfillment of the seventh section. These include downloading source code from an adjacent network server or by peer-to-peer transmission, provided that is how the compiled code was available and there are “clear directions” on where to find the source code.
The FSF does not hold the copyright for a work released under the GPL unless an author explicitly assigns copyrights to the FSF (which seldom happens except for programs that are part of the GNU project). Only the individual copyright holders have the authority to sue when a license violation is suspected.
Source: GNU General Public License - Wikipedia

GSzabados · November 9, 2023, 6:31am

Actually that has been taken down a year ago. The DMCA notice was from 2022.09.20.

But Mazda did another DMCA for forks of the original project:

github.com

github/dmca/blob/66dd87b1ac48243cd54570d125499df87478860c/2023/10/2023-10-19-mazda.md

**Are you the copyright holder or authorized to act on the copyright owner's behalf?**

Yes, I am authorized to act on the copyright owner's behalf.

**Are you submitting a revised DMCA notice after GitHub Trust & Safety requested you make changes to your original notice?**

No

**Does your claim involve content on GitHub or npm.js?**

GitHub

**Please describe the nature of your copyright ownership or authorization to act on the owner's behalf.**

"I have read and understand GitHub's Guide to Filing a DMCA Notice."
The original copyright owner is Mazda Motor Corporation (MC), parent company of Mazda North American Operations (MNAO). The original copyright code is published on Apple App Store https://apps.apple.com/us/app/mymazda/id451886367 and Google Play App Store https://play.google.com/store/apps/details?id=com.interrait.mymazda&pli=1 and we been authorized by our colleagues at MC who are the owners of MyMazda app copyright code to reach out to GitHub to request removal of code that we believe is violating MC's copyright ownership. We’ve been directed by MC [private] [private] [private] [private] to work with Github on takedown request.

**Please provide a detailed description of the original copyrighted work that has allegedly been infringed. If possible, include a URL to where it is posted online.**

The original copyright code is published on Apple App Store https://apps.apple.com/us/app/mymazda/id451886367 and Google Play App Store https://play.google.com/store/apps/details?id=com.interrait.mymazda&pli=1. The code enables MNAO customers to use these apps to perform following functionality on their vehicles:

This file has been truncated. show original