Locked out of AGR account again

Discussion in 'Amtrak Guest Rewards' started by MARC Rider, Oct 26, 2016.

Amtrak Unlimited Discussion Forum

Help Support Amtrak Unlimited Discussion Forum:

  1. Oct 26, 2016 #1

    MARC Rider

    M

    MARC Rider

    Conductor

    Joined:
    Apr 5, 2011
    Messages:
    1,248
    Location:
    Baltimore. MD
    What's going on? I had this problem last month, and I called AGR, they were very apologetic, but the agent on the phone said she couldn't fix the problem, she'd have to write a ticket for the software crew to handle the next day (I was calling in the evening.) I eventually got in, but I did change my password, and when I went to check my balance this evening, I was notified that I was locked out again. I appreciate the concern for my online security, but if I can't log into my account, what good is it to me?

    And they are telling us there will be no problems when we have fully networked self-driving cars! :( If that tech works as well as most the tech I use, I expect to be locked out of my car most of the time and will have to call the help desk, and (maybe) have the car working the next day.
     
    Last edited by a moderator: Oct 27, 2016
  2. Oct 26, 2016 #2

    jis

    jis

    jis

    Conductor AU Lifetime Supporter Gathering Team Member

    Joined:
    Aug 24, 2003
    Messages:
    24,604
    Location:
    Space Coast, Florida, Area code 3-2-1
    Some of us have looked at some of the REST interfaces that likes of Tesla provide for access over the internet. They are at best poorly designed by amateurs and are not that difficult to hijack, unfortunately. Hopefully things will improve over time. But security in IoT networking is pretty poor at present. The recent DDoS attack is proof positive about how poor things are.
     
  3. Oct 27, 2016 #3

    KmH

    KmH

    KmH

    Conductor

    Joined:
    Dec 6, 2014
    Messages:
    2,055
    Location:
    Is this heaven? No. It's Iowa.
    I can log in, but then I can't get to the page to buy some points.

    "Error: Something went wrong"

    Why do I have to log in again to buy points.

    So last night I tried to reset my password, and that also didn't work.

    I've sent AGR an email regarding my issues.
     
  4. Oct 28, 2016 #4

    KmH

    KmH

    KmH

    Conductor

    Joined:
    Dec 6, 2014
    Messages:
    2,055
    Location:
    Is this heaven? No. It's Iowa.
    I was able to reset my password, but still no access to the Buy Points page.

    Got an email back from AGR. They wanted to know what OS and browser I use - Windows 10 Ver: 1607, and Chrome.
     
  5. Oct 28, 2016 #5

    Devil's Advocate

    Devil's Advocate

    Devil's Advocate

    Conductor

    Joined:
    May 24, 2010
    Messages:
    10,676
    Location:
    Америка
    IoT security has been a sad joke from day one. Nobody wanted to admit it but anybody with even a minor understanding of network security knew the IoT revolution was destined to become an unmitigated disaster. Millions of idle plug and play network devices with brief production runs and extremely limited support windows that were expected to remain online for years at a time?

    The real solution isn't technical so much as legal. The penalty for designing/manufacturing/distributing/selling poorly protected/supported IoT devices has to be painful enough that it vastly outweighs the desire to simply ignore it. The nature of IoT devices requires that they have especially robust security protection and recovery measures. Unfortunately the reality of the situation is that they have some of the weakest and most easily defeated protections the internet has ever seen.
     
  6. Oct 31, 2016 #6

    neroden

    n

    neroden

    Conductor

    Joined:
    Feb 23, 2014
    Messages:
    7,316
    Location:
    Ithaca, NY
    I will say that Tesla is using significantly better security protocols than the vast majority of internet-of-things implementations. Still not as secure or robust as I want, but not "casual hacker can crack everything at once trivially" level, like most of 'em.
     
  7. Oct 31, 2016 #7

    Bob Dylan

    Bob Dylan

    Bob Dylan

    Conductor

    Joined:
    May 31, 2009
    Messages:
    18,185
    Location:
    Austin Texas
    I was unable to access my joint Amtrak/AGR Account yesterday, so sent in a Reset Pass word Request and it works fine now!
     
  8. Nov 1, 2016 #8

    jis

    jis

    jis

    Conductor AU Lifetime Supporter Gathering Team Member

    Joined:
    Aug 24, 2003
    Messages:
    24,604
    Location:
    Space Coast, Florida, Area code 3-2-1
    I agree. They certainly do not have n administrative login with the password "admin" frozen in firmware for anyone to use as their hack port :) There is a Chinese outfit that has many millions of devices out with this unique feature and they have no way to withdraw them either. Those are the ones being used in the DDoS attacks. Some say that it is perhaps intentional and not an accident. ;)
     
  9. Nov 2, 2016 #9

    KmH

    KmH

    KmH

    Conductor

    Joined:
    Dec 6, 2014
    Messages:
    2,055
    Location:
    Is this heaven? No. It's Iowa.
    I got an email from AGR today regarding not being able to log in to the Buy Points For Yourself page to buy AGR points.

     
  10. Dec 28, 2016 #10

    dlagrua

    dlagrua

    dlagrua

    Conductor

    Joined:
    Nov 24, 2009
    Messages:
    3,032
    Location:
    Hillsborough, NJ
    I don't have much interest in buying points at a higher price than the redemption rate but I can't get into that area of the AGR web page even if I wanted to buy them. The password gets me into AGR but not into the Buy points section. Buying points is a losing proposition but if they ever go with the 50% bonus I may buy some points again to make up shortages. As it is now I am locked out but really don't care.
     
  11. Jan 1, 2017 #11

    KmH

    KmH

    KmH

    Conductor

    Joined:
    Dec 6, 2014
    Messages:
    2,055
    Location:
    Is this heaven? No. It's Iowa.
    I had that problem too - until I enabled 3rd party cookies in my browser.

    With 3rd party cookies disabled I could not get to the points buying page.
     
    Last edited by a moderator: Jan 1, 2017
  12. Jan 11, 2017 #12

    Railroadgoddess

    R

    Railroadgoddess

    Joined:
    Oct 8, 2016
    Messages:
    2
    Not being able to purchase points is definitely a cookie problem. Once you've enabled cookies (you may need to also clear old cookies) you should be all set.
     

Share This Page

arrow_white