INTL 3:770/1 3:770/3
REPLYADDR theom+news@chiark.greenend.org.uk
REPLYTO 3:770/3.0 UUCP
MSGID: eb86f369
REPLY: cba5390b
PID: SoupGate-Win32 v1.05
Chris Green wrote:
> Theo wrote:
> >
> Who puts a 'naked' Raspberry Pi on the internet? 99.999% of them will
> either be stand-alone systems not connected to anything or will be on
> a home LAN behind NAT and a firewall.
According to Shodan there are 22,700 systems claiming to be 'Raspbian' on
the internet.
Also, even if the Pi is firewalled, there is a threat from other users of
the LAN including compromised machines. You only need one machine to be
compromised to allow attackers into the network and then they can search out
for vulnerable machines from there.
If your network only has you, yourself and I, this is a different threat
from say a school where there are potentially many machines out of your
control.
> Yes, I did find I could install rpi-imager from the Ubuntu
> repositories, that's how I managed to get installed in the end.
OK, so your thread title is inaccurate.
> > More to the point it's now illegal to have default usernames and passwords
> > in the UK, so the RPi folks have to comply.
> >
> How about no password, would that be OK? :-)
It would be illegal to sell something in that state.
Otherwise, it depends on your threat model...
Theo
--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
SEEN-BY: 10/0 1 15/0 90/1 103/705 105/81 106/201 128/260 129/305 135/225
SEEN-BY: 153/757 7715 218/0 1 601 700 840 870 930 220/70 221/1 6 226/17
SEEN-BY: 226/30 100 227/114 229/110 112 113 200 206 307 317 400 426
SEEN-BY: 229/428 470 550 616 664 700 240/1120 266/512 267/800 282/1038
SEEN-BY: 291/111 292/854 301/1 113 812 310/31 320/219 322/757 335/364
SEEN-BY: 341/66 342/200 396/45 460/58 633/280 712/848 770/1 3 100
SEEN-BY: 770/330 340 772/210 220 230 5020/400 1042 5058/104 5075/35
PATH: 770/3 1 218/840 221/6 301/1 218/700 229/426
|
