PSA: Unauthorized API use can disable your FordPass account

[kennelh]

Were all you locked-out folks using Optiwatt or are the other apps that caused it too?

No, I was using the Android Ford Status Widget.

Sponsored

 

[Herb]

Was using dimo.zone

 

[DevSecOps]

Were all you locked-out folks using Optiwatt or are the other apps that caused it too?

I was locked out for using postman and I'm part of their developer program. Anyone who is a developer knows we use postman for API testing regularly.

For people talking about us using unauthorized methods or shady ways of doing things, they do have a developer program and they allow access to the API. It's not shady when they allow us access through an official program. All that said, their API documentation is absolute garbage and they don't mention what will get you locked out or not, nor do they even check if you're a developer before locking you out.

 

[kennelh]

For people talking about us using unauthorized methods or shady ways of doing things, they do have a developer program and they allow access to the API. It's not shady when they allow us access through an official program. All that said, their API documentation is absolute garbage and they don't mention what will get you locked out or not, nor do they even check if you're a developer before locking you out.

Additionally, the API documentation mentions they use OAuth2 (we all know that), but nowhere does it give details on how to use it. I reached out to Ford a week ago through the developer's site asking for any information on how to "properly" go about developing my app and have yet to get a response.

 

[Logal727]

I was locked out for using postman and I'm part of their developer program. Anyone who is a develop knows we use postman for API testing regularly.

For people talking about us using unauthorized methods or shady ways of doing things, they do have a developer program and they allow access to the API. It's not shady when they allow us access through an official program. All that said, their API documentation is absolute garbage and they don't mention what will get you locked out or not, nor do they even check if you're a developer before locking you out.

Explain your intentions will clearly track down the nefarious hackers lol

 

[DevSecOps]

Explain your intentions will clearly track down the nefarious hackers lol

It just proves how disjointed the whole system is. "Explain what your intentions were"... If these guys had 1/2 of a clue they would know that Postman is used to test APIs by over 20 million developers. If they only bothered to cross reference their data to the developer accounts they would see it was using the same email address registered as a developer. It's just a mess and no where does it say you can't use postman. I have searched high and low.

To your point, that's just another example of how clueless they are. As if a true malicious actor would state their actual intent.

 

[neiloakley]

? ? ? ? ?

No phone number. I'll send you a DM with the email address. You have to email them and it will take a couple days.

any chance I can get that info please?

Homebridge plus the FordPass plugin seems to be causing the issue for me!

 

[jrdelong1043]

Another update since I have been locked out, and then let back into my account. I have been locked out again even though I deleted and stopped using the Optiwatt app ?. So annoying.

 

[Kamuelaflyer]

Another update since I have been locked out, and then let back into my account. I have been locked out again even though I deleted and stopped using the Optiwatt app ?. So annoying.

Were you using either of the widget like programs for iOS or Android?

 

[Mach-Lee]

Another update since I have been locked out, and then let back into my account. I have been locked out again even though I deleted and stopped using the Optiwatt app ?. So annoying.

If all you did was delete the app, then Optiwatt’s server is still pinging Ford’s with you account info. You need to remove the Mach-E from your Optiwatt account completely.

 

[jrdelong1043]

If all you did was delete the app, then Optiwatt’s server is still pinging Ford’s with you account info. You need to remove the Mach-E from your Optiwatt account completely.

Good thinking, I just went in and deleted both my truck and Mache. Thanks!

 

[mdntblu]

I just got off the phone and they said they can't fix it right now as there is a global ticket out for this problem and there is nothing they can do.

 

[mdntblu]

Did another call today and tried to start over and see what happens. They ended up giving me a claim # and told me they'll get back to me in 2-3 business days.

 

[methorian]

? ? ? ? ?

No phone number. I'll send you a DM with the email address. You have to email them and it will take a couple days.

Hey - so I just had this happen to my account. Do you mind shooting me that e-mail in a DM? Was going to e-mail early access since they've helped me with random issues in the past.

 

[DevSecOps]

Hey - so I just had this happen to my account. Do you mind shooting me that e-mail in a DM? Was going to e-mail early access since they've helped me with random issues in the past.

Email them. That's who is best to help you if you are in EAP

Sponsored