Dingle Dongle Security (again)

Just wondering if we are any closer to a fix for the horrendous wifi dongle security? I'm on an older GivAC3.0 inverter with the plug in dongle and it has to be on its own isolated wifi network as it's so insecure.

Is there a patch / replacement / wired solution coming for this? I'd be quite happy to run an ethernet cable.

If there isn't a fix, is it possible to use a 4G dongle to ensure there isn't an insecure wifi hotspot connected to the batteries and my network?

I'm not going to list the issues I found but they are numerous, serious and I reported them to Giv a long time ago. I strongly advise anyone using this model of inverter to isolate it on its own wireless network with a password very different to your main network.

EDIT: by "password" I mean the password for the dongle's network (you can hide it, but it doesn't do much) and the wifi network it connects to (on your router) need different passwords to your normal wireless network - assume the passwords can be read.

PhilS you’d have to contact GivEnergy for a formal answer but my bet is that there won’t be any upgrade or replacement for the wifi dongle in the older inverters. Giv have said that the Gen 1 hybrid is end of life and I’m sure they will treat the AC3 the same. All the focus is on the newer kit like the AIO.

A 4G dongle is available, £102 from midsummer https://midsummerwholesale.co.uk/buy/giv-energy/giv-4G

Your installer should be able to swap you onto this from the wifi dongle

PhilS If you are concerned with WiFi security, use wired connection. Even if you don't have the ability to bring Ethernet cable anywhere nearby your GE equipment, you can use pair of two powerline adapters to do the job. Problem solved.

bRhFDKtjRMK9 The issue is that the AC3 dongle is (very insecure) wi-fi only, and the AC3 cannot use ethernet.

Baychattan That's very unfortunate, sorry I didn't know. So, what WiFi protocol it is using?
Anyway, £5 router working at a separate access point just for this device solves this, as @PhilS has noticed.

bRhFDKtjRMK9 I use WPA2.
I have a Deco mesh network and I have the dongle on its own 'IOT' SSID with 2.4 Ghz only.
The dongle set up instructions specify WPA2PSK.

WPA3 doesn't work with the dongle.

GE are still selling AC3 inverters.

Rob

Rbor 2.4GHz WPA2, how is that insecure? Is it 100% compromised? Sorry for my ignorance. I still use 2.4GHz network at home, provided by OpenWRT access point.

As supplied by GivEnergy, the AC3 dongle has all security measures turned off. The factory admin login is "admin", password IIRC "password". WPA etc turned off. It can be made more secure by changing the login name and password, and switching WPA etc on, but many installers don't. Result - non tech-savvy users have a seriously insecure system.

Baychattan That doesn’t sound any less secure than the dongle on my hybrid inverter. The installers didn’t bother fully following the GivEnergy wifi setup process and left the inverter dongle broadcasting an open SSID with no password and access to my home wifi.

If the installers don’t follow the process then these are insecure. I only noticed the extra SSID a few weeks after install; fortunate a rural area with the house a distance from the neighbours.