PSA: Unauthorized API use can disable your FordPass account

[737flyer]

Because they were lied to by Smartcar. They tell partners their spoofed FordPass login page is evidence they work with Ford via OAuth, but it's fake. When you entered your Ford password during the initial setup, that was a fake website hosted by Smartcar designed to look like the real Ford website, Ford logo and everything:

Thanks for the info. What a mess.

Sponsored

 

[Hilikus]

Thanks for the info. What a mess.

I also just had to un-enroll from the off-peak charging program with Duke because of this account blockage. Pretty frustrating, but I suppose the blame lies on Duke for not having a better recording solution than to tap into the car's app.

 

[737flyer]

Because they were lied to by Smartcar. They tell partners their spoofed FordPass login page is evidence they work with Ford via OAuth, but it's fake. When you entered your Ford password during the initial setup, that was a fake website hosted by Smartcar designed to look like the real Ford website, Ford logo and everything:

https://rollingenergyresources.com/
They did the setup for Duke Energy.

 

[737flyer]

I also just had to un-enroll from the off-peak charging program with Duke because of this account blockage. Pretty frustrating, but I suppose the blame lies on Duke for not having a better recording solution than to tap into the car's app.

Did you get your account unlock. Mine was locked last Tuesday. Still waiting.

 

[cditty]

Did you get your account unlock. Mine was locked last Tuesday. Still waiting.

I'm still waiting since last Sunday. I don't think Ford it too worried about us little ole customers.

 

[klb]

I'm still waiting since last Sunday. I don't think Ford it too worried about us little ole customers.

I had to delete every integration, not merely disable it. It seems that Ford has–to some extent–automated the reactivation process, but only if they see no attempted connections for the account for some period of time.

 

[cditty]

I had to delete every integration, not merely disable it. It seems that Ford has–to some extent–automated the reactivation process, but only if they see no attempted connections for the account for some period of time.

I reached out to Tronity and they confirmed that they have stopped polling the car. I've changed my password like 6 times so even it someone else was doing it, they can't get in now. So now I guess I just wait and can't remote start the car to warm it up. (This is what pisses me off the most. Locking us out of something like this. I don't give a crap about the ford.com account. It's the features that I paid for when I bought the car.)

 

[klb]

I reached out to Tronity and they confirmed that they have stopped polling the car. I've changed my password like 6 times so even it someone else was doing it, they can't get in now. So now I guess I just wait and can't precondition the car to warm it up. (This is what pisses me off the most. Locking us out of something like this. I don't give a crap about the ford.com account. It's the features that I paid for when I bought the car.)

Call FordPass support. They were able to tell me the general location of the suspect network requests, which helped me eliminate suspects and hone in on the culprit.

Hopefully these are growing pains and Ford will learn from this.

 

[cditty]

Call FordPass support. They were able to tell me the general location of the suspect network requests, which helped me eliminate suspects and hone in on the culprit.

Hopefully these are growing pains and Ford will learn from this.

Is that the same number that was posted several pages back? When I called, it was a nice lady that just took my information and said she would pass it on up the chain.

I hope these are just growing pains. As a first time Ford owner, this sours my faith in Ford quite a bit.

 

[737flyer]

My fordpass was disconnected last week for letting my power company regulate my charging times. Can I still receive OTA updates?

 

[generaltso]

My fordpass was disconnected last week for letting my power company regulate my charging times. Can I still receive OTA updates?

Yes.

 

[737flyer]

Yes.

I’ve been waiting for 3.6.1 HVAC

 

[mkhuffman]

Is that the same number that was posted several pages back? When I called, it was a nice lady that just took my information and said she would pass it on up the chain.

I hope these are just growing pains. As a first time Ford owner, this sours my faith in Ford quite a bit.

If you have changed your password and nobody but you has it, you are good to go.

 

[Mach-Lee]

Call FordPass support. They were able to tell me the general location of the suspect network requests, which helped me eliminate suspects and hone in on the culprit.

Hopefully these are growing pains and Ford will learn from this.

What was the source of the continued pings?

 

[Herb]

Source: FordPass™ Terms and Conditions

Any right or authorization granted to you by us is also subject to the following restrictions:

• you may not, nor allow third parties to, create derivative works, use any data mining, robots, or similar data gathering and extraction tools, create a database, download or store FordPass Content other than as licensed above, link or frame FordPass Content, extract, derive or attempt to extract or derive any source code or structure of all or any portion of FordPass Content by reverse engineering, disassembly, decompilation or any other means;
• you may not use FordPass Content with other content or in a manner that impersonates any person, business or entity, including us;
• you may not interfere, try to interfere, disrupt, or try to disrupt our servers or networks, or disobey any of our network access or security requirements;

Even though we don't usually read them, these *seem* to be the relevant portions of terms and conditions that Ford is enforcing that we accepted when we created a Fordpass account

Sponsored