Notifications
Clear all
Topic starter
May 6, 2025 4:33 pm
Not to come off as condescending but is there a reason why EG4 hasn't focused on data security and implemented 2 Factor Authentication for their monitor center or for any of their network connected systems?
If someone gets ahold of a username + password for the monitor.eg4electronics.com portal they could really (and I mean really) wreak some havoc on a system (or systems) quickly.
Want to force discharge everything? Want to deprovision everything / factory reset it? Want to force grid sell back (even if you don't have a grid tie agreement? Yup yup and yup... that's all possible.
From an information security / data security side of things it would really be pertinent to add this as soon as possible.
If you add this feature please also avoid SMS or phone number 2FA since it's the weakest form of 2FA and can be easily bypassed with a SIM swap.
Thank you for your time and consideration on this.
This topic was modified 4 weeks ago by redpineapple
BobAndRoslyn reacted
May 7, 2025 1:01 pm
I think the monitoring site is fantastic. I geek out on all the information on there. That being said I keep mine offline unless I absolutely have to look at something. Maybe online a total of a week in the last 9 months. If you want it 100% secure the only real way is to be offline. I’ll leave it at that. PM if you want more info
Topic starter
May 7, 2025 1:54 pm
PM'ed - but the issue still exists for all customers of EG4.
If there is a possibility of a 3rd party getting into your account to cause damage you want 2FA on at a MINIMUM and I'm shocked to see that they don't have this basic level of security.
May 7, 2025 7:57 pm
Agree with the concerns.
May 8, 2025 8:03 pm
Note for safety you can disable remote updates, and only enable it as needed.
https://eg4electronics.com/wp-content/uploads/2024/11/Remote-Support-Disable.pdf
Topic starter
May 21, 2025 2:03 pm
Bump to make sure EG4 sees this (still no response)
