The IQ Gateway authentication is done entirely offline - but you do have to have a device online (laptop, pi, mobile etc) to obtain a JWT to present to it.
Installer tokens are 12 hours, Owner tokens are a year. Some endpoints are only accessible with roles higher than Owner however, see https://github.com/Matthew1471/Enphase-API/blob/main/Documen.... for my scripts (available as the "examples") they're set to renew the tokens automatically where required.
I would like to see more people using the wrapper so we have a common way of talking to the IQ Gateway (there's a lot of tightly coupled projects on GitHub), but most people seem more interested in the docs I provide and rolling their own wrapper.
I always have plans to add more to it - I found multiple security vulnerabilities in the IQ Gateway and that allowed me to get a dump of the firmware - so there's plenty more URLs for me to write about :)
They call this “Life event marketing” - one of the companies posting physical mail to me declared the name of the company that they got my details from so I could then contact them and ask them to take me off the list.
I have a similarish story - I went to New York once (I didn’t book it). I connected to the hotel WiFi and any other free WiFi in the area. I wasn’t using TLS. I received a lot of New York related spam for a while.. it dropped off after a while - I guess these lists have a shelf-life.
Identifying an issue with the hardware - yeah fair enough.
Scanning the ISP’s residential customer range for hacking recon - yes I can see why that might bring a lawsuit.
I don’t port scan my ISP and then complain when they get cross.
I suspect these things will go in waves.. For a while we’ll embrace big tech.. then we’ll hear of aspirations to create a privacy revolution or run our own mail servers and jump on the next big thing.
Case in point Facebook.. it’s still huge but there are plenty of people that have decided they just don’t want a Facebook account anymore and Facebook’s own growth is floundering. Users are fairly fickle, WordPerfect to Microsoft Word, Flickr to Instagram, Instagram to TikTok.. A lot of employers even deliberately default to Bing instead of Google these days.
Look at the dominance Microsoft used to have with the Windows ecosystem, a significant number of people just want a web-browser and couldn’t even tell you what OS they were using.
I don’t think the concern is misplaced, profit driven companies will always strive for vendor lock in and monopolisation if given a choice but nobody is producing tech that someone else can’t.
I think the project is novel and cute.. but in terms of usage given most mobiles these days are used to access content rather than make calls I am not sure of the longterm suitability for most use cases. There’s a lot of “Well just plug it in to something to get even more things” but I am sure having to plug your mobile into a monitor or TV to read your e-mails is going to get boring relatively fast.
Also as already stated most network operators (at least UK ones at least) have a planned death date for 3G, some have already been shutting it down.
When I saw this I immediately thought of the Nokia 3210 reboot (fun and useful for those that want a dumb-ish phone just for calls and/or texts). That said I suspect the phone could be fairly good fun for sending SMS via a PC or making apps that interact via SMS.
The IQ Gateway authentication is done entirely offline - but you do have to have a device online (laptop, pi, mobile etc) to obtain a JWT to present to it.
Installer tokens are 12 hours, Owner tokens are a year. Some endpoints are only accessible with roles higher than Owner however, see https://github.com/Matthew1471/Enphase-API/blob/main/Documen.... for my scripts (available as the "examples") they're set to renew the tokens automatically where required.