Garmin Connect outage

Security, done properly, is hard.

I worked for about twenty years in one sector of consumer electronics. Our devices had mandated security systems - there were only four or five companies in the world that could provide this. Which one you used depended on what the corporate customer who’d ordered the devices used as it had to work with their central systems.

One day, maybe fifteen years ago, a rumour started going around that company X’s security had been hacked. Over the next week details emerged. It had been “hacked” by Y, one of the other security companies who had taken six months with a scanning electron microscope and planing one layer of the chip away at a time to do the hack! About six months after that company X released a revised set of guidelines which included something along the lines of “the hardware must be able to resist any physical attack”!

At my last job I spent part of my time hardening the Linux kernel to meet one of these companies’ demands - company Y as it happens.

1 Like

You can upload garmin directly by usb to a free account :+1:

This isn’t looking good as it’s still down.

1 Like

Received the following email from TrainingPeaks. Do they know / suspect that Garmin’s outage is a result of a deliberate attack?

Garmin is currently experiencing an outage that prevents us from syncing data with Garmin Connect, including structured and completed workouts. We are unsure of the extent of this issue or when this will be resolved, but we will share an update when we know more.

As a precaution, we always recommend using different passwords across platforms. If you think you may be using the same login credentials for both TrainingPeaks and Garmin, we recommend updating your password.

1 Like

as God is my witness, I thought turkeys could fly.

Thank you Mr. Carlson

1 Like

Looking on the bright side, Garmin doesn’t have my credit card?

1 Like

If you use Garmin pay they do

Got an email from training peaks advising the following

Garmin is currently experiencing an outage that prevents us from syncing data with Garmin Connect, including structured and completed workouts. We are unsure of the extent of this issue or when this will be resolved, but we will share an update when we know more.

As a precaution, we always recommend using different passwords across platforms. If you think you may be using the same login credentials for both TrainingPeaks and Garmin, we recommend updating your password.

How do I transfer a route I created from PC to my Garmin device? I created a route in Komoot and downloaded the GPX file, however Garmin uses FIT files and it didn’t recognize it.

It should recognise a GPX file if you copy it to Garmin > Garmin > NewFiles

2 Likes

Should not be that simple, there is a multi layer process with your bank etc… Despite that, still sucks.

Still no comms from Garmin…

  • no eta for the return of any of their services
  • no mention of what data isn’t, might be, or has been compromised

I can only assume that the reason for the lack of comms is that they can’t answer any of the above. And that’s after over 48hrs. Yikes!

2 Likes

There’s another important part of users’ data held by Garmin – our home locations. While you can set privacy zones in Strava and other apps, that only affects what everyone else can see, the data from and to your door is still in the files. If I go for a ride with my wife, my activity shows me starting from our door, hers from the edge of her privacy zone and vice versa.

Simple to write a script to extract the first and last minutes of every activity then offer it to local crims with “bikes at this location” type hints.

2 Likes

Never start your garmin near your house, always turn gps off when on the turbo

Read bobw’s post, if you want to find out where somebody lives, made easy if they have a public strava / tr / komoot account, look at where start finish rides, even if they have have a strava exclusion zone, its a circle and you can plot all the exit points

Had a argument with sombody on here when TR started pulling Garmin rides, within 5 minutes I could tell where he lived to the street (Strava \ TR), what bike he rode (bianci, twitter and facebook) and what time he left his house on a sunday morning and what road he would be on to get to the club ride

2 Likes

FWIW, before this I saw that GC had set up privacy zones. :+1:

1 Like

Didn’t realis this, but I expect that if the hackers have hacked Garmin, then the have the source data

1 Like

I don’t know if it’s as clever as Strava’s new privacy zones which are supposed to move to stop triangulation :+1:

1 Like