My house batteries for my PV system are also susceptible to this. Ugh.
They’ve both got Bluetooth for monitoring and configuration. Some config changes require a PIN but not the settings to enable/disable charge and discharge. Someone could just get within range of them, install the official app, and set discharge to “off” and shut down my house.
I’ve also not found a way to disable bluetooth on them. Gonna have to put them in a damn Faraday cage if I decide to worry about that possibility. :sigh:
That really sucks. My Solar system from my previous home used zigbee instead of bluetooth, but it was pretty much only for monitoring. I was glad that they failed to lock it down as getting access to that was the only way I could get to see interesting data, the company refused to let owners have access to their own data.
There is a Bluetooth chip somewhere that is connected somehow. Assuming you can somehow get to it without destroying the battery, disconnecting it shouldn’t be difficult.
I thought about that, but one of the safety features of these batteries is an active fire suppression system that fills the interior with some kind of fire-extinguishing foam. I’m terrified to try to take these apart for fear of somehow triggering that. Plus, they’re hella expensive lol.
Wait, mine requires I scan a QR code physically on the device, or typing in the serial number. You can just… connect without any security?
Yep. The QR code is only the encoded BT address to make connecting in the app easier than…selecting it from a list.
Oooof. What an amazingly smart design choice.
You built this functionality on purpose, you twits.
