The installer who set up my heat pump created a Gmail account on a tablet they provided, then used it to set up an account for the heat pump.

[cheatha@chaos.social]

@ryanc [x] heat pump is replaced because Account cannot be changed

[tezoatlipoca@mas.to]

@ryanc you missed the one where the account is suspended but can't be deleted and HP co can't change account used by HP unless the old account acknowledges some 2FA and then your HP just stops working because of the whole affair and you run to the hardware store to buy a space heater.

[aimaz@mstdn.social]

@ryanc Google wouldn’t say

They would let you assume it from the context of never acknowledging your query.

Based on my experience of trying to get my money back on a boot looping phone bought from Google.

[ryanc@infosec.exchange]

@Cheatha that's what GDPR is for, there is no can't, only "fined" and "not fined"

[ljrk@todon.eu]

@ryanc I'm still lost on why the heat pump requires an e-mail account o.O

[marshray@infosec.exchange]

@ryanc (F) Installer left the spreadsheet with all their customers’ email addresses and password(s) open on the web and your HP was banned for sending spam and ddosing

[ryanc@infosec.exchange]

@aimaz I'm sure they'll at least have a bot tell me that I've been a naughty enby and that I know exactly what it did.

[miah@hachyderm.io]

@ryanc

Good luck! This sounds like _hell_.

[trantion@masto.ai]

@ryanc I voted for "Google says " then immediately remembered that Google never says anything to their users

[ryanc@infosec.exchange]

@tezoatlipoca There is no "can't", only "haven't been persuaded yet". I have bullied an airline into having an engineer manually edit their database for me.

[ryanc@infosec.exchange]

@ljrk The management app requires "the cloud", and I haven't gotten around to reversing the control plane (which is not encrypted) yet

[ryanc@infosec.exchange]

@marshray It's on its own VLAN with egress filtering, I am not an amateur.

[ryanc@infosec.exchange]

@trantion "Google's automaton says"...

[acsawdey@fosstodon.org]

@trantion @ryanc It's implied when they ghost your request for help ...

[ryanc@infosec.exchange]

@miah It will make a fantastic example for the "don't fuck it up" section of the next anti-fraud talk I give.

[ryanc@infosec.exchange]

@acsawdey @trantion also that

[fritzadalis@infosec.exchange]

@ryanc @dangoodin
I think that last one is all but guaranteed at this point.

[mansr@society.oftrolls.com]

@ryanc Why does a heat pump need a Gmail account?

[ryanc@infosec.exchange]

@mansr fucking cloud bullshit - doesn't have to be a gmail account, just needs a working email address and password

[ryanc@infosec.exchange]

@mansr it speaks some unencrypted protocol to the server so I should be able decloud it...