this post was submitted on 06 Jul 2026
46 points (100.0% liked)

Cybersecurity

10717 readers
153 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] IcedRaktajino@startrek.website 22 points 3 months ago* (last edited 3 months ago) (10 children)

My house batteries for my PV system are also susceptible to this. Ugh.

They've both got Bluetooth for monitoring and configuration. Some config changes require a PIN but not the settings to enable/disable charge and discharge. Someone could just get within range of them, install the official app, and set discharge to "off" and shut down my house.

I've also not found a way to disable bluetooth on them. Gonna have to put them in a damn Faraday cage if I decide to worry about that possibility. :sigh:

[–] Tar_alcaran@sh.itjust.works 2 points 3 months ago (2 children)

Wait, mine requires I scan a QR code physically on the device, or typing in the serial number. You can just... connect without any security?

[–] IcedRaktajino@startrek.website 1 points 3 months ago (1 children)

Yep. The QR code is only the encoded BT address to make connecting in the app easier than....selecting it from a list.

[–] Tar_alcaran@sh.itjust.works 1 points 3 months ago* (last edited 3 months ago)

Oooof. What an amazingly smart design choice.

load more comments (7 replies)