INTL 3:770/1 3:770/3
REPLYADDR cl@isbd.net
REPLYTO 3:770/3.0 UUCP
MSGID:  3676b612
REPLY:  a049d4ef
PID: SoupGate-Win32 v1.05
Andy Burns  wrote:
> Chris Green wrote:
>
> > Is there **really** such a big security issue with default login names
> > and passwords on Raspberry Pis?  Surely almost all of them are going
> > to be on home networks behind NAT routers and also surely no one is
> > going to (without thinking about it a bit!) put confidential data on
> > one.
>
> Plenty of Pis (especially the compute modules) end-up in industrial kit,
> maybe not much data on them, but you don't want them being used to
> laterally attack other systems.
>
> 
>
>        "Passwords must be—
>                (a)unique per product; or
>                (b)defined by the user of the product."

Ah, so it's legislation has caused this. :-)

Again I say, anyone who is actually deploying Pis in such a situation
needs to know what they're doing.  If they don't know what they're
doing no amount of legislation is going to help much.


What really is getting to me is that the non-GUI user who wants to use
a Pi (or arduino or BBB) to moinitor the temperature in his garage
ends up having to jumpo through lots of unnecessary hoops to do it. To
a significant extent it's because the Pi has become much more 'mass
market'.

Oh well, I guess I can live with it. Rant over.  :-)

--
Chris Green
·

--- SoupGate-Win32 v1.05
 * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
SEEN-BY: 4/0 19/10 88/0 90/0 105/81 106/201 128/187 129/305 153/757
SEEN-BY: 153/7715 154/110 218/700 840 220/70 221/1 6 360 226/17 30
SEEN-BY: 226/100 227/114 229/110 111 114 200 206 275 300 317 400 426
SEEN-BY: 229/428 470 550 616 664 700 705 266/512 267/800 291/111 292/854
SEEN-BY: 301/1 310/31 320/219 322/757 335/364 341/66 342/200 396/45
SEEN-BY: 460/58 633/280 712/848 770/1 3 100 330 340 772/210 220 230
SEEN-BY: 880/1 900/0 102 106 902/0 19 26 905/0 930/1 2320/105 5020/400
SEEN-BY: 5075/35
PATH: 770/3 1 218/840 221/6 341/66 902/26 229/426