• Have you tried out dark mode?! Scroll to the bottom of any page to find a sun or moon icon to turn dark mode on or off!

diy solar

diy solar

CHINA kills all non Sol-Ark branded DEYE unit in the USA this morning.

Well, this is a wake up call and an eye opener for someone like me doing research for the future installation of a solar ESS.

First, I would like to say to Sol-Ark and Deye, both of your companies are complicit in this scandal. So, any consideration I may have given to inverters manufactured by Deye, including Sol-Ark, are now off the table. Both of your companies are “dead” to me.

Second and lastly, to Signature Solar, EG4 and LuxPower, although your affirmation that what just took place with Deye inverters would not happen to EG4/LuxPower inverters is a step in the right direction, I would probably demand—ahead of purchasing any equipment—the implementation of a fail safe guarantees/warranty in way of legally binding agreements and end user controls (i.e. both hardware- and software-wise) to prevent this situation from ever taking place with EG4/LuxPower hybrid and off-grid inverters. I hope to hear from the team soon on the plan to solve this issue for U.S. and international customers.
 
The DSP's used in most Hybrids which are TI's TMS320 series have built in code security module (DCSM), which once activated prevents even Jtag from accessing secure memory, been this way since my days of design with the TMS320 2802 series which came out in 2004.

Basically short of of state sponsored 8 figure operations, the code is secure.
 
Didn't read all 63 pages, but what a duck move from Deye/Sol-Ark. There's no way Deye did this on their own. I mean they can't be that stupid to shoot their own leg like this. This is going to hurt Deye somewhat, but to Sol-Ark this worst PR possible. I mean you have to be blind not to see what happened. Was it the right move from Deye, certainly not. It's not illegal to buy nearly identical units three times cheaper if someone is willing to sell them for you. This is not customers fault, not even if they know S-A has monopoly in their area. That's between Deye and S-A, not between S-A and customer.

Has there been any bricked Deyes other than Sol-Ark territory? Any in UK/Pakistan?

I have two Deye12Ks both online and they are doing fine because there's no Sol-Ark here. I'm utterly satisfied with my units so far, but it seems I need to get them offline in near future. Furthermore the little hobbit of Russia is keen to start war with us and would love to team up with China even more than currently in Ukraine. On their own Russia is kind of impotent to win any war anywhere, but with China they could do stunts like this on larger scale.
 
jlramirezrodriguez said:
Well, this is a wake up call and an eye opener for someone like me doing research for the future installation of a solar ESS.

First, I would like to say to Sol-Ark and Deye, both of your companies are complicit in this scandal. So, any consideration I may have given to inverters manufactured by Deye, including Sol-Ark, are now off the table. Both of your companies are “dead” to me.

Second and lastly, to Signature Solar, EG4 and LuxPower, although your affirmation that what just took place with Deye inverters would not happen to EG4/LuxPower inverters is a step in the right direction, I would probably demand—ahead of purchasing any equipment—the implementation of a fail safe guarantees/warranty in way of legally binding agreements and end user controls (i.e. both hardware- and software-wise) to prevent this situation from ever taking place with EG4/LuxPower hybrid and off-grid inverters. I hope to hear from the team soon on the plan to solve this issue for U.S. and international customers.
Click to expand...
The statement is legally binding with an official seal, it is actionable in courts in the USA as well as in China, what it does guarantee is that nobody involved in the making of our hardware will ever harm private property in the pursuit of business deals. This is important as a chinese document as those property rights are not so clear there and DEYE apparently does not recognize them. I shudder to thing what happens if they and their American label ever get side-ways.

With the statement we published we can hold each company accountable in either country for never attacking hardware owners as collateral damage to our deals. you will never wake up with a ransom screen caused by a corporate deal or argument.
 
Hedges said:
The question is how do dump and how to load firmware.
If these were old socketed 2716 EEPROM, easy to do offline.
For NVM soldered to a PCB, much prefer to access through data ports.
If built in to a processor, must do it that way.

There can be firmware that provides the service of updating a portion of the NVM address space.
or there can be JTAG port for access.

I have similar issue with Sunny Boy Storage. I updated too latest firmware, which had a "feature" I didn't like. I "updated" to an earlier firmware and it partially bricked the unit, broke some functions even though I tried to re-update to latest. Haven't been able to get SMA support to successfully remote log-in to my laptop so they can use their backdoor access to attempt fix.

Anybody know how to write firmware to these Deye without using their user interface/menu?
Click to expand...
I can actually do the ones made into the boards. I bought all of the equipment to do it when I had a bad flash on a motherboards once. The thing piggybacks onto the existing chips prongs.
 
Plum Crazy Rob said:
I don't suppose you would offer a comment on your mini split biz with Deye like the one currently purring behind my head?? I'm quite amazed that you don't have more insidery info on the inverter debacle....:)
Click to expand...
I've been keeping my mouth shut, visited Deye in person several times this year, have been in the actual Solark inverter R+D lab there too lol (super nice, didnt take photos tho). robby's CCP comment was hilarious given that Deye was the first time I saw a CCP delegation at a company.

I agree with the sentiment that control and cloud has to move to a 100% american option on comms hardware we developed, it is underway and we will have that option too, however, Armageddon aside if companies don't recognize your right to property you have a much more dangerous enemy within.
 
It’s down in Costa Rica too, Deye tell me its SolArk, SolArk is not answering, have a normal EU version because I don’t need the split version, the company where I have bought it tells me the have this year restrictions from Deye to sell it to US or Central America but have bought it last year. Have the contract with Deye and not SolArk, the shutdown was 1:30 am CR time, no one at SolArk is working at this time only Deye is working at this time.
 
Solar Guppy said:
The DSP's used in most Hybrids which are TI's TMS320 series have built in code security module (DCSM), which once activated prevents even Jtag from accessing secure memory, been this way since my days of design with the TMS320 2802 series which came out in 2004.

Basically short of of state sponsored 8 figure operations, the code is secure.
Click to expand...

Glitch attack, fault injection.
Not that I've done it, but apparently pretty easy.

www.design-reuse.com

How a voltage glitch attack could cripple your SoC or MCU - and how to securely protect it

Hackers and criminals have an array of techniques available to them to intrude into, tamper with, disable or destroy electronics products and services. Some of the techniques are invasive, and call for very expensive equipment and deep engineering expertise to analyze and modify nanoscale...
www.design-reuse.com www.design-reuse.com


www.darkreading.com

Glitching: The Hardware Attack That Can Disrupt Secure Software

Glitching (or fault-injection) attacks aren't easy (yet). But get ready, because as the IoT grows, these attacks will be a big reason that hardware security should be part of your cybersecurity planning.
www.darkreading.com www.darkreading.com

www.synacktiv.com

How to voltage fault injection

Introduction Fault injection is a technique used to assess a device security, consisting in deliberately inducing faults or errors into hardware components to bypass security functionalities, such as
www.synacktiv.com www.synacktiv.com


Sometimes back doors are left in the designs. A big name FPGA manufactured in China was hacked by monitoring power supply current while feeding in code to unlock. As the digital "tumblers" fell into place, current draw changed. The code was cracked and used to read out protected firmware. Turned out the back door was not installed by Chinese fab company, it was left there by American IC company.
 
robby said:
Sol-Ark migration to US based servers was not Mandatory and not everyone went.
If your Inverter is still linked to Powerview or even Worst Solarman then you are vulnerable to any CCP orders that may come out in the future, just like all those Luxpower, EG4 and Growatt Inverters.
Click to expand...
@robby

Try logging into PowerView and adjusting settings. (Even though there are no "live" numbers showing...) Then go into MySolArk and see if the settings carried over. Full stop......... Behold, they do.....

My "migrated" sites can still have settings adjusted from in PowerView!

PowerView:
1732123709173.png
MySolArk:
1732123774456.png

Now I adjust this setting in PowerView and save:
1732123862530.png

And go back to MySolArk:
1732123925028.png



As you can see, this site is very obviously both connected to PowerView AND MySolArk!

Any further questions @robby ??

I hate to break it to you, but to say Sol-Ark inverters are fully migrated to US based servers is false! I can replicate this behavior with other sites as well! Now, to be fair, Sol-Ark may be planning to "finish" the migration once the bugs are all ironed out..... But at this point it is simply false for them to say they have migrated everything to US based servers!

And as I mentioned in an earlier comment, we have set up a number of new 15Ks that we were not even able to connect the dongles to MySolArk. We were forced to connect these to PowerView in order to set up remote monitoring! Those ones are not even able to be seen on MySolArk! And Sol-Ark hasn't given us any ETA for a migration! They mentioned that they might be able to send new dongles to replace these, but it's been weeks now with no new dongles in the mail! This issue is hit-or-miss. Some new 15Ks we can connect to MySolArk, others we need to use PowerView.
 
James Showalter said:
The statement is legally binding with an official seal, it is actionable in courts in the USA as well as in China, what it does guarantee is that nobody involved in the making of our hardware will ever harm private property in the pursuit of business deals. This is important as a chinese document as those property rights are not so clear there and DEYE apparently does not recognize them. I shudder to thing what happens if they and their American label ever get side-ways.

With the statement we published we can hold each company accountable in either country for never attacking hardware owners as collateral damage to our deals. you will never wake up with a ransom screen caused by a corporate deal or argument.
Click to expand...
James you are an honorable/reputable business leader. Thank you for taking the time to address my concerns. I’m happy to know your company, along with LuxPower, are willing to ensure customers that they will not wake up to their properties being bricked without any consideration on how people are being affected. I’m sure some customers knew what they’re were doing by buying a Deye inverter for use in the U.S. At the same time, some customers perhaps bought Deye inverters as part of bundle provided by dishonest suppliers/installers looking to profit from a product they well knew it could not be sold in the U.S. That’s the main reason for my repudiation for Deye and Sol-Ark as companies. Their actions have adversely affected innocent people. With that said, technical solutions ought to be offer to offer customers an extra layer or two of peace of mind.
 
Cmiller said:
@robby

Try logging into PowerView and adjusting settings. (Even though there are no "live" numbers showing...) Then go into MySolArk and see if the settings carried over. Full stop......... Behold, they do.....

My "migrated" sites can still have settings adjusted from in PowerView!

PowerView:
View attachment 257289
MySolArk:
View attachment 257290

Now I adjust this setting in PowerView and save:
View attachment 257291

And go back to MySolArk:
View attachment 257292



As you can see, this site is very obviously both connected to PowerView AND MySolArk!

Any further questions @robby ??

I hate to break it to you, but to say Sol-Ark inverters are fully migrated to US based servers is false! I can replicate this behavior with other sites as well! Now, to be fair, Sol-Ark may be planning to "finish" the migration once the bugs are all ironed out..... But at this point it is simply false for them to say they have migrated everything to US based servers!

And as I mentioned in an earlier comment, we have set up a number of new 15Ks that we were not even able to connect the dongles to MySolArk. We were forced to connect these to PowerView in order to set up remote monitoring! Those ones are not even able to be seen on MySolArk! And Sol-Ark hasn't given us any ETA for a migration! They mentioned that they might be able to send new dongles to replace these, but it's been weeks now with no new dongles in the mail! This issue is hit-or-miss. Some new 15Ks we can connect to MySolArk, others we need to use PowerView.
Click to expand...
So will you continue to feed the beast and install more Sol Ark units?
 
Last edited:
Cmiller said:
@robby

Try logging into PowerView and adjusting settings. (Even though there are no "live" numbers showing...) Then go into MySolArk and see if the settings carried over. Full stop......... Behold, they do.....

My "migrated" sites can still have settings adjusted from in PowerView!

PowerView:
View attachment 257289
MySolArk:
View attachment 257290

Now I adjust this setting in PowerView and save:
View attachment 257291

And go back to MySolArk:
View attachment 257292



As you can see, this site is very obviously both connected to PowerView AND MySolArk!

Any further questions @robby ??

I hate to break it to you, but to say Sol-Ark inverters are fully migrated to US based servers is false! I can replicate this behavior with other sites as well! Now, to be fair, Sol-Ark may be planning to "finish" the migration once the bugs are all ironed out..... But at this point it is simply false for them to say they have migrated everything to US based servers!

And as I mentioned in an earlier comment, we have set up a number of new 15Ks that we were not even able to connect the dongles to MySolArk. We were forced to connect these to PowerView in order to set up remote monitoring! Those ones are not even able to be seen on MySolArk! And Sol-Ark hasn't given us any ETA for a migration! They mentioned that they might be able to send new dongles to replace these, but it's been weeks now with no new dongles in the mail! This issue is hit-or-miss. Some new 15Ks we can connect to MySolArk, others we need to use PowerView.
Click to expand...
Sorry to Break it to you but you are Wrong!
They are not connected if you migrated it properly. Your system is not properly migrated!
If I go into settings on Powerview I get this.
1.jpg

If I look at the settings in Powerview they are the same ones left behind from the day I migrated to MySolArk.
2.jpg


Here is what is running now in MySolark, as you can see it's not the same.
3.jpg


If I try and change Anything in Powerview I Get the Message that the Inverter is not connected and nothing happens / Gets saved.
4.jpg


I suggest you call Sol-Ark because your system is still wide open to a CCP attack just like an EG4 Inverter.
Pledges mean nothing when the CCP is controlling the company making the Pledges.
 
JWLV said:
True, but if they disable the stolen vehicle while you are driving it on the freeway at 70MPH and damage or injury is caused, who's ultimately responsible?
Click to expand...
Not how it works... Once you stop you can't go again. (Was in the Cab business). At some point you have to stop. Just don't put it in park, you can keep driving.
 
Hedges said:
Sometimes back doors are left in the designs. A big name FPGA manufactured in China was hacked by monitoring power supply current while feeding in code to unlock. As the digital "tumblers" fell into place, current draw changed. The code was cracked and used to read out protected firmware. Turned out the back door was not installed by Chinese fab company, it was left there by American IC company.
Click to expand...
This is done to show the code was stolen.
 
robby said:
Sorry to Break it to you but you are Wrong!
They are not connected if you migrated it properly. Your system is not properly migrated!
If I go into settings on Powerview I get this.
View attachment 257308

If I look at the settings in Powerview they are the same ones left behind from the day I migrated to MySolArk.
View attachment 257312


Here is what is running now in MySolark, as you can see it's not the same.
View attachment 257314


If I try and change Anything in Powerview I Get the Message that the Inverter is not connected and nothing happens / Gets saved.
View attachment 257320


I suggest you call Sol-Ark because your system is still wide open to a CCP attack just like an EG4 Inverter.
Pledges mean nothing when the CCP is controlling the company making the Pledges.
Click to expand...
I tried the same test as @Cmiller I was able to change Max Solar Power from PowerView. The change immediately showed up in MySolArk. Perhaps your system has fully migrated. I suspect most have not.
 
I tried powerview. The data shown was from when I migrated.

I tried to change settings, but I got a "server exception error. Please try again later.

I'm not sure that it's conclusive, though, since they could never get my phone to actually change any settings.

Now with the MySolArk, my phone works but my pc doesn't...
 
cs1234 said:
I'm just quoting this so people don't miss it at the bottom of your long picture filled post. I found it delightful. 🤣
Click to expand...
Yeah well the CCP also controls Deye the same way they control Luxpower.
You won't see Mr. Wang come on here and make any statement that says he will alert you if the CCP decides to shutdown your 18KPv Inverter and for all his talk James has no ability to stop it or even know if it is coming.
That was the Big reason why Sol-Ark parted ways with Deye on Firmware and all Chinese software and server hosting.
I use to think this crap would never happen, but it's already started.
 
Last edited:
Oldphile said:
I tried the same test as @Cmiller I was able to change Max Solar Power from PowerView. The change immediately showed up in MySolArk. Perhaps your system has fully migrated. I suspect most have not.
Click to expand...
Call Sol-Ark. I left my dongle in during migration but I know many people hesitated and pulled it out and put it back in later. It seems like some people did not get a clean migration.
 
DougfromdaUP said:
I tried powerview. The data shown was from when I migrated.

I tried to change settings, but I got a "server exception error. Please try again later.

I'm not sure that it's conclusive, though, since they could never get my phone to actually change any settings.

Now with the MySolArk, my phone works but my pc doesn't...
Click to expand...
If it shows the old settings from when you Migrated then you are fully migrated to the new system.
You are safe.
 
jlramirezrodriguez said:
James you are an honorable/reputable business leader. Thank you for taking the time to address my concerns. I’m happy to know your company, along with LuxPower, are willing to ensure customers that they will not wake up to their properties being bricked without any consideration on how people are being affected. I’m sure some customers knew what they’re were doing by buying a Deye inverter for use in the U.S. At the same time, some customers perhaps bought Deye inverters as part of bundle provided by dishonest suppliers/installers looking to profit from a product they well knew it could not be sold in the U.S. That’s the main reason for my repudiation for Deye and Sol-Ark as companies. Their actions have adversely affected innocent people. With that said, technical solutions ought to be offer to offer customers an extra layer or two of peace of mind.
Click to expand...
Do you have any Deye or Sol Ark inverter that got bricked?
 
You must log in or register to reply here.

diy solar

diy solar
Back
Top