Sicherheitsprobleme bei Hoymiles Wechselrichter

[khbraemer]

What happened?

Hallo, was sagen die Hoymiles Besitzer zu dieser Meldung.?

https://www.heise.de/news/Sicherheitsalbtraum-Wechselrichter-Hoymiles-laesst-Nachbarschaften-verstummen-11357067.html

To Reproduce Bug

Bitte den Report von Heise Online lesen.

Expected Behavior

Bitte den Report von Heise Online lesen.

Install Method

Pre-Compiled binary from GitHub releases

What git-hash/version of OpenDTU?

v26.3.30

What firmware variant (PIO Environment)?

generic_esp32s3_usb

Relevant log/trace output

Bitte den Report von Heise Online lesen.

Anything else?

https://www.heise.de/news/Sicherheitsalbtraum-Wechselrichter-Hoymiles-laesst-Nachbarschaften-verstummen-11357067.html

Please confirm the following

• I believe this issue is a bug that affects all users of OpenDTU, not something specific to my installation.
• I have already searched for relevant existing issues and discussions before opening this report.
• I have updated the title field above with a concise description.
• I have double checked that my inverter does not contain a W in the model name (like HMS-xxxW) as they are not supported.

[jetronic18s]

Ja eben auch erst gelesen, was ist denn dieser Diebstahlschutz?

[metabubble]

I would love for OpenDTU to implement a Wizard to find and secure Inverters. Mine are all behind the modules on a fence and I would have to take them all down to read the serial numbers. I guess one can dream...

[puni2k]

#3135

[rweickelt]

I read somewhere that HM inverters support encryption. Details anybody? Does Open-DTU support that? here somebody wrote that OpenDTU would stop working if encryption is enabled.

[technics42]

No encryption possible, yet, but Hoymiles seems to think about creating a new firmware with encrypted data transfer.
If that would be used, of course, Open-DTU could not be used any more (or would need to handle that encryption)