Jump to content




Photo

Locked out of AGR account again


  • Please log in to reply
11 replies to this topic

#1 MARC Rider

MARC Rider

    Conductor

  • Members
  • PipPipPipPipPip
  • 724 posts
  • Gender:Male

Posted 25 October 2016 - 07:06 PM

What's going on?  I had this problem last month, and I called AGR, they were very apologetic, but the agent on the phone said she couldn't fix the problem, she'd have to write a ticket for the software crew to handle the next day (I was calling in the evening.)  I eventually got in, but I did change my password, and when I went to check my balance this evening, I was notified that I was locked out again.  I appreciate the concern for my online security, but if I can't log into my account, what good is it to me?

 

And they are telling us there will be no problems when we have fully networked self-driving cars!   :(  If that tech works as well as most the tech I use, I expect to be locked out of my car most of the time and will have to call the help desk, and (maybe) have the car working the next day.


Edited by MARC Rider, 27 October 2016 - 01:47 PM.


#2 jis

jis

    Engineer

  • Members
  • PipPipPipPipPipPip
  • 18,644 posts
  • Gender:Male
  • Location:Space Coast, Florida, Area code 3-2-1
  • Interests:Trains, Planes and Travel

Posted 26 October 2016 - 12:39 PM

Some of us have looked at some of the REST interfaces that likes of Tesla provide for access over the internet. They are at best poorly designed by amateurs and are not that difficult to hijack, unfortunately. Hopefully things will improve over time. But security in IoT networking is pretty poor at present. The recent DDoS attack is proof positive about how poor things are.

#3 KmH

KmH

    Engineer

  • Members
  • PipPipPipPipPipPip
  • 1,265 posts
  • Gender:Male
  • Location:Is this heaven? No. It's Iowa.
  • Interests:Astronomy, photography

Posted 27 October 2016 - 10:58 AM

I can log in, but then I can't get to the page to buy some points.

"Error: Something went wrong"

Why do I have to log in again to buy points.

 

So last night I tried to reset my password, and that also didn't work.

 

I've sent AGR an email regarding my issues.


U. S. Congress - underground trolley system (1963) • Disneyland train (1968 and various other dates) • Old Tucson steam train (1969)

Amtrak: California Zephyr - Coast Starlight 

. . . . . . .Total Amtrak miles - 11,390

• 4993 miles booked May '17 - Southwest Chief, Sunset Limited, Texas Eagle, Illinois Zephyr.

 

 

 

 


#4 KmH

KmH

    Engineer

  • Members
  • PipPipPipPipPipPip
  • 1,265 posts
  • Gender:Male
  • Location:Is this heaven? No. It's Iowa.
  • Interests:Astronomy, photography

Posted 28 October 2016 - 12:29 PM

I was able to reset my password, but still no access to the Buy Points page.

 

Got an email back from AGR. They wanted to know what OS and browser I use - Windows 10 Ver: 1607, and Chrome.


U. S. Congress - underground trolley system (1963) • Disneyland train (1968 and various other dates) • Old Tucson steam train (1969)

Amtrak: California Zephyr - Coast Starlight 

. . . . . . .Total Amtrak miles - 11,390

• 4993 miles booked May '17 - Southwest Chief, Sunset Limited, Texas Eagle, Illinois Zephyr.

 

 

 

 


#5 Devil's Advocate

Devil's Advocate

    Engineer

  • Members
  • PipPipPipPipPipPip
  • 8,402 posts
  • Gender:Male
  • Location:SAS
  • Interests:Mechanized Travel

Posted 28 October 2016 - 04:44 PM

Some of us have looked at some of the REST interfaces that likes of Tesla provide for access over the internet. They are at best poorly designed by amateurs and are not that difficult to hijack, unfortunately. Hopefully things will improve over time. But security in IoT networking is pretty poor at present. The recent DDoS attack is proof positive about how poor things are.


IoT security has been a sad joke from day one. Nobody wanted to admit it but anybody with even a minor understanding of network security knew the IoT revolution was destined to become an unmitigated disaster. Millions of idle plug and play network devices with brief production runs and extremely limited support windows that were expected to remain online for years at a time?

The real solution isn't technical so much as legal. The penalty for designing/manufacturing/distributing/selling poorly protected/supported IoT devices has to be painful enough that it vastly outweighs the desire to simply ignore it. The nature of IoT devices requires that they have especially robust security protection and recovery measures. Unfortunately the reality of the situation is that they have some of the weakest and most easily defeated protections the internet has ever seen.

I'd rather be a glass half empty than a glass half fool.


#6 neroden

neroden

    Engineer

  • Members
  • PipPipPipPipPipPip
  • 5,711 posts
  • Gender:Not Telling
  • Location:Ithaca, NY
  • Interests:Please feel free to moderate my posts

Posted 31 October 2016 - 04:02 PM

I will say that Tesla is using significantly better security protocols than the vast majority of internet-of-things implementations.  Still not as secure or robust as I want, but not "casual hacker can crack everything at once trivially" level, like most of 'em.


--Nathanael--

Please feel free to moderate my posts.

#7 Bob Dylan

Bob Dylan

    Engineer

  • Members
  • PipPipPipPipPipPip
  • 15,223 posts
  • Gender:Male
  • Location:Austin Texas
  • Interests:Passenger Trains/Travel/Sports(except Soccer)/Government-Politics/Reading/Old Buildings
    Movies/Music/Unicorns and Ancient Aliens!

Posted 31 October 2016 - 05:31 PM

I was unable to access my joint Amtrak/AGR Account yesterday, so sent in a Reset Pass word Request and it works fine now!
 
"There's Something About a Train! It's Magic!"-- 1970s Amtrak Ad
 
".. I ride on a Mail Train Baby, can't buy a thrill.."--I said that!
 
"..My heart is warm with the friends I make,and better friends I'll not be knowing,
Yet there isn't a train I wouldn't take,No matter where its going!.." -Edna St. Vincent Millay

#8 jis

jis

    Engineer

  • Members
  • PipPipPipPipPipPip
  • 18,644 posts
  • Gender:Male
  • Location:Space Coast, Florida, Area code 3-2-1
  • Interests:Trains, Planes and Travel

Posted 01 November 2016 - 09:50 AM

I will say that Tesla is using significantly better security protocols than the vast majority of internet-of-things implementations.  Still not as secure or robust as I want, but not "casual hacker can crack everything at once trivially" level, like most of 'em.

I agree. They certainly do not have n administrative login with the password "admin" frozen in firmware for anyone to use as their hack port :) There is a Chinese outfit that has many millions of devices out with this unique feature and they have no way to withdraw them either. Those are the ones being used in the DDoS attacks. Some say that it is perhaps intentional and not an accident. ;)



#9 KmH

KmH

    Engineer

  • Members
  • PipPipPipPipPipPip
  • 1,265 posts
  • Gender:Male
  • Location:Is this heaven? No. It's Iowa.
  • Interests:Astronomy, photography

Posted 02 November 2016 - 12:10 PM

I got an email from AGR today regarding not being able to log in to the Buy Points For Yourself page to buy AGR points.

We are currently experiencing technical difficulties with our partner, Points.com. We are aware of the problem and are currently working to resolve this issue.

U. S. Congress - underground trolley system (1963) • Disneyland train (1968 and various other dates) • Old Tucson steam train (1969)

Amtrak: California Zephyr - Coast Starlight 

. . . . . . .Total Amtrak miles - 11,390

• 4993 miles booked May '17 - Southwest Chief, Sunset Limited, Texas Eagle, Illinois Zephyr.

 

 

 

 


#10 dlagrua

dlagrua

    Engineer

  • Members
  • PipPipPipPipPipPip
  • 2,481 posts
  • Gender:Male
  • Location:Hillsborough, NJ
  • Interests:Car collecting, Train Travel, Model RR, Visiting Historical sights, Cooking, Antiques, but above all love for friends and family.

Posted 28 December 2016 - 09:30 AM

I don't have much interest in buying points at a higher price than the redemption rate but I can't get into that area of the AGR web page even if I wanted to buy them.  The password gets me into AGR but not into the Buy points section. Buying points is a losing proposition but if they ever go with the 50% bonus I may buy some points again to make up shortages. As it is now I am locked out but really don't care.



#11 KmH

KmH

    Engineer

  • Members
  • PipPipPipPipPipPip
  • 1,265 posts
  • Gender:Male
  • Location:Is this heaven? No. It's Iowa.
  • Interests:Astronomy, photography

Posted 01 January 2017 - 03:55 PM

I had that problem too - until I enabled 3rd party cookies in my browser.

With 3rd party cookies disabled I could not get to the points buying page.


Edited by KmH, 01 January 2017 - 03:56 PM.

U. S. Congress - underground trolley system (1963) • Disneyland train (1968 and various other dates) • Old Tucson steam train (1969)

Amtrak: California Zephyr - Coast Starlight 

. . . . . . .Total Amtrak miles - 11,390

• 4993 miles booked May '17 - Southwest Chief, Sunset Limited, Texas Eagle, Illinois Zephyr.

 

 

 

 


#12 Railroadgoddess

Railroadgoddess

    Train Attendant

  • Newbie
  • Pip
  • 1 posts

Posted 10 January 2017 - 09:36 PM

Not being able to purchase points is definitely a cookie problem. Once you've enabled cookies (you may need to also clear old cookies) you should be all set.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users