No issue. I did it. 20k phantom load and lost all settings and lost AC Couple on 18kpv

[millsan1]

20kw wasn't going anywhere, it was a software glitch.

Replied in PM

 

[millsan1]

I have a theory on what happened. Discussing with others via PM.

 

[SparkyJJO]

 

[millsan1]

Well, I think I figured it out.

Someone logged into my account yesterday and reset all factory options. PW changed. MF.

 

[SparkyJJO]

Told ya it was aliens.

*edit* I asked them. This was their response. Dang it, it is like my kids - no HE did it!

 

[BKY2003]

Well, I think I figured it out.

Someone logged into my account yesterday and reset all factory options. PW changed. MF.

Thats crazy, thank goodness they didn't set your HZ to 50. This is the reason I disconnected mine from the WiFi. Thanks for letting us know about this.

 

[jarred125]

Honestly these platforms really do concern me in terms of security. There is no MFA option for the service that Sol-Ark uses and the overall feeling there doesn't scream "we are super secure" to me.

 

[Brucey]

Is this a case of there being an "admin" type account with a default password?

 

[millsan1]

Yeah, I actually sent a request for MFA to be added to the dev queue to EG4. Or a separate admin login.

It is my fault for using a soft combo. I didn't think anyone would be interested in f ing with my solar but I guess I was wrong.

 

[Luxpower_Gilbert]

Well, I think I figured it out.

Someone logged into my account yesterday and reset all factory options. PW changed. MF.

this is the user that reset to default

 

[jarred125]

Well, I think I figured it out.

Someone logged into my account yesterday and reset all factory options. PW changed. MF.

Do you use the password for this service anywhere else? Is it a good password or one that would be considered weak?

 

[Tulex]

Hacking into an inverter is so bizarre.
Hey dude, wanna have some fun. Yeah man, what do you want to do? I know, let's hack into random solar inverters.

 

[Tulex]

this is the user that reset to default
View attachment 216585

I'm confused, how can someone other than the user name log into the inverter? Wouldn't that have to be a hack into the service end to act as someone with rights?

 

[jarred125]

I'm confused, how can someone other than the user name log into the inverter? Wouldn't that have to be a hack into the service end to act as someone with rights?

The username there matches the username here. Guessing the account was compromised (most likely scenario).

 

[hwy17]

The news always said they're infiltrating our grid. Now they're in our off grid too.

 

[Tulex]

The username there matches the username here. Guessing the account was compromised (most likely scenario).

Sorry, didn't catch that the name matched. Guess the way you said this is the user, my brain assumed it was different.

 

[n2aws]

@millsan1 A while back, I thought my account had been hacked too, but it turns out I was trying to record a video.. I played it back, and realized I had done it myself. I suspect the likelyhood of someone hacking your account to mess with you, is pretty low. Occams razor would sugest that.. like my scenario, you likely did it without realizing it.

 

[millsan1]

@millsan1 A while back, I thought my account had been hacked too, but it turns out I was trying to record a video.. I played it back, and realized I had done it myself. I suspect the likelyhood of someone hacking your account to mess with you, is pretty low. Occams razor would sugest that.. like my scenario, you likely did it without realizing it.

Yeah, I just checked my cameras. I was driving back from lunch when it happened. Maybe a pocket dial thing? Anything is possible. But me, going in and setting all settings to default is not something I would have done purposely.

 

[Luxpower_Gilbert]

Sorry, didn't catch that the name matched. Guess the way you said this is the user, my brain assumed it was different.

my best bet its either the account is compromised or the user reset to default accidently, because looking at the logs there's to many setting changed by a single user name which is the owner account. any settings that changed is being recorded except if the setting is done on the inverter screen.

 

[millsan1]

my best bet its either the account is compromised or the user reset to default accidently, because looking at the logs there's to many setting changed by a single user name which is the owner account. any settings that changed is being recorded except if the setting is done on the inverter screen.

Yeah, that is me fixing the problem.

 

[Quattrohead]

my best bet its either the account is compromised or the user reset to default accidently, because looking at the logs there's to many setting changed by a single user name which is the owner account. any settings that changed is being recorded except if the setting is done on the inverter screen.

Are you sure you should be posting details from people's logs like this? I would not be happy if you did that to me that's for sure.

 

[BKY2003]

Another easy way the system can be breached is through local connect. But I recognize someone would have to be close to the unit.

 

[Luxpower_Gilbert]

Are you sure you should be posting details from people's logs like this? I would not be happy if you did that to me that's for sure.

I'm not sure why would be bad it just a history logs of setting, there's no sensitive information in my opinion.

 

[millsan1]

I'm not sure why would be bad it just a history logs of setting, there's no sensitive information in my opinion.

besides my serial number and station name?

 

[Luxpower_Gilbert]

you posted your serial number here. and its useless to anyone unless you have a super admin account with luxpower or EG4.