@fazalmajid@social.vivaldi.net
Post #4210545
2026-07-21 15:35 UTC
@ryanboswell@sfba.social the UK's PSTI bans default credentials in consumer IOT devices, but exempts EV chargers that are covered by Electric Vehicles (Smart Charge Points) Regulations 2021:
https://www.schneier.com/blog/archives/2024/05/the-uk-bans-default-passwords.html
The EV Smart Charger regulation does also require unique passwords per charger if present, however.
https://www.legislation.gov.uk/uksi/2021/1467/schedule/1/made
Thus these chargers would be illegal in the UK.
Replies (1)
-
@ryanboswell@sfba.social 2026-07-21 17:08
@fazalmajid@social.vivaldi.net Wow, regulation that specific is great, I wish it were common here in the US. The manufacturer of the charger that was targeted is based in Germany and by all accounts are at least moderately common in parts of mainland Europe. I wonder if they have any in the UK and if those are better protected (ironic) or also vulnerable (and illegal).