Multi-factor auth

[Tim-in-CA]

Given the multiple threads blowing up over this (Reddit, here, FB) I assume next update will be a better version? This one seems like a ball dropped.

Rivian just needs to add PIN to drive that’s kept locally and input directly on the vehicle screen as a final backup for access to resolve the issue if the phone is lost or broken. It amazes me that no one raised this issue internally during development, or if they did, they were summarily dismissed.

Sponsored

 

[risingphoenix]

The way Rivian implemented this definitely will not work. If you lose your phone, your shit out of luck. Even if you have your key card or keyfob, you’re still shit out of luck because you need your phone if you have MFD enabled.

This. They should label the toggle "If I lose my phone I'm fucked".

 

[risingphoenix]

They have added nearly all the features people have asked for over the years. Some speed improvements, general bug fixes but not much more to add as new features.

This must have been typed while on Elon's ketamine. Text messaging implementation? Pretty sure Rivian is the only automaker on the planet currently making cars that doesn't have some form of text messaging notification or verbal interaction. And before you reply "I don't want/need it so no one else should" please save your breath.

 

[bigsky]

Ok, through a series of questionable life and career decisions, I'm a security person, by choice. You can decide if it was a good or bad choice, but I have less hair and a twitch in my left eye after many years of this stuff.

I'm intrigued by MFA in the truck's new SW update. It's a clever implementation, and I'm sure it will prevent all sorts of bad behavior, theft, and bring peace of mind to the paranoid among us.

But ... has no one ever dealt with a lost or dead phone before? I carry a key card in my wallet (when I bring my wallet) for backup in the event phone goes missing.

What was wrong with PIN? I would really like that as an option, despite the obvious security shortcomings of a simple 4 or 6 digit code.

What's the backup retrieval / startup method if your phone is dead/gone?

A "clever" implementation?
You are a very kind person, or reek of political correctness, or all of the above.

But...exactly!
Who the hell designed this MFA aberration that requires and indeed relies on an external piece of hardware for it to work!
And what if I do not have my phone or lost it...SOL, your vehicle ain't going nowhere?

Rivian MFA is a most demented, absurd, ridiculous, asinine, plain stupid and dumb implementation.

As I said, Rivian, please reach out to Tesla engineers, or buy a Tesla. See how Tesla does PIN to drive so brilliantly and useful, and LEARN.

Personally, I wonder if the Rivian MFA "experts" are the same ones that conceived the childish, infantile, dumb Rivian pet mascot also.

 

[tate16t]

Appreciate the clarification. Sounds like a continued issue if you're not in cell service range. How else do you contact the other person with an enabled device to disable MFA?

I know "out of range" seems like a somewhat foreign concept in todays "always connected" world, but I think with this vehicle in particular, it will be more common than say an Audi, or a Hyundai. I know a good portion of my weekends are either at the boat ramp or the ski resort. Both of which have little/no service, and are places I leave the vehicle unattended for long periods of time with little security around it. So this "feels" like more of a miss than a hit for me if security is really the goal. If the goal is just to say "we're the only ones that have this tech", then maybe it's a marketing win for Rivian as a whole. I'm also sure there are some who will use it, and like it, and think it's a value add for the truck.

I touched on your first point on another thread, maybe this one but, yes this is a problem.

Sounds like MFD is not for you.

 

[thrill]

This. They should label the toggle "If I lose my phone I'm fucked".

They could attach a "subscribe to connect+" to it!

 

[2kwik4u]

I touched on your first point on another thread, maybe this one but, yes this is a problem.

Sounds like MFD is not for you.

SO many threads hard to keep up.

Yea MFD isn't for me, and that's OK. Honestly would prefer a Non-Bluetooth solution to passive entry as well. My Audi had an RF remote, and touch sensors on every door handle. Just had to be close to the car, and touch it and it would open for you. Worked 99.99% of the time for 3.5yrs without delay. Only time it didn't work was when the battery in the fob died. Was able to extract the physical key from the fob, and place it in the hidden slot on the drivers door handle and gain access. I really think Audi's system is a masterclass in how to handle passive entry and drive access. It's the appropriate balance of speed and security in terms of access.

 

[mkhuffman]

Dudes. I just took my beautiful wife to lunch, and MFA was flawless. So easy. The first time I already had the app open, so it literally took less than a second to start the truck.

The second time my phone was locked, and all I had to do was quickly unlock it and hit the button. It took like 2 seconds. I love it. And I love the fact that I know my truck is secure.

IMO, all these over the top complaints are unwarranted. Just don't turn it on if you don't like it. It really is no big deal.

And who never has their phone? I always have my phone because I use it as the key. If my phone is dead, I'm not getting in my truck anyway. Just relax and take a chill pill from the chill pill bag.

 

[tate16t]

The second time my phone was locked, and all I had to do was quickly unlock it and hit the button. It took like 2 seconds. I love it. And I love the fact that I know my truck is secure.

If you have biometrics unabled, you shouldn’t have to unlock your phone. Just look at it, press and hold or some say “hard press“ the prompt, and it should request you to approve or deny.

 

[risingphoenix]

If my phone is dead, I'm not getting in my truck anyway. Just relax and take a chill pill from the chill pill bag.

Lol. Many people carry a key card in their wallet (hence the credit card shape of the card) so that if they don't have their phone they can still get in and operate their vehicle. Enabling MFA eliminates this safety net. So the net effect is that if you enable MFA you can create more space in your wallet and replace it with extra cash to help you figure out how to get home.

 

[COdogman]

A "clever" implementation?
You are a very kind person, or reek of political correctness, or all of the above.

But...exactly!
Who the hell designed this MFA aberration that requires and indeed relies on an external piece of hardware for it to work!
And what if I do not have my phone or lost it...SOL, your vehicle ain't going nowhere?

Rivian MFA is a most demented, absurd, ridiculous, asinine, plain stupid and dumb implementation.

As I said, Rivian, please reach out to Tesla engineers, or buy a Tesla. See how Tesla does PIN to drive so brilliantly and useful, and LEARN.

Personally, I wonder if the Rivian MFA "experts" are the same ones that conceived the childish, infantile, dumb Rivian pet mascot also.

 

[HaveBlue]

So if someone has your phone and can get into the car, they can start it anyway.
Also, having to pull out your phone and push a button sounds suspiciously like using the key fob on most cars, WHICH IS WHAT THEY SHOULD HAVE DONE TO BEGIN WITH AND SPARE US FROM THIS TERRIBLE LOCK SYSTEM. My Audi works perfectly (better). Grab the handle to unlock or lock. No Vampire drain.

Feels like the inclinometers that stop measuring at just the angle where we start to need them. Why??

 

[bigsky]

Haha. Not a matter of how it makes me feel, really. Just calling this abomination total POS, what-the-hell-were-you-thinking Rivian MFA exactly what it is .

 

[Revelation]

For those that are happy with MFA, great I am happy for you. For the rest of us, even if we are in the minority, why NOT implement PIN to drive? It would be vastly easier than MFA.

Why not give the user the choice?

 

[mkhuffman]

For those that are happy with MFA, great I am happy for you. For the rest of us, even if we are in the minority, why NOT implement PIN to drive? It would be vastly easier than MFA.

Why not give the user the choice?

It would not be vastly easier than pressing one button on your phone. It would be vastly harder and take vastly longer to enter a pin code every time I want to drive. And very annoying.

I am serious. I unlocked my phone with my biometrics and pressed one button. So easy.

A pin code will be at least 4 digits, but much longer for it to be secure. My Mach-e had a password which I could never remember because it was so long and I so rarely used it.

No two step access method will be faster or easier than how Rivian implemented it. And I know because I have actually used it. I recommend you try it out before you crap all over it.

Sponsored