News for hackers. Stuff that matters.

A comment on The ReMarkable Tablet: A Review. Parent comment

Re:The ReMarkable Tablet: A Review by knolax on Sunday September 22, 2019 @09:04AM (#21041176)
> It comes with SSH running and you have the root password

Is the password different for every device? Is the ssh daemon updated regularly? Seems like a massive security vulnerability otherwise.

[ Parent | on HN ]
Re:The ReMarkable Tablet: A Review by ACS_Solver on Sunday September 22, 2019 @09:24AM (#21041247)
The password is randomly generated for each device, yes. And of course the network only becomes available once you connect the device to your WiFi, or via cable to a PC. Once you're connected, you can also change to key-only authentication if you want.

The SSH daemon is Dropbear, and it doesn't seem to be updated though:

> reMarkable: ~/ dropbear -V

> Dropbear v2016.72

[ Parent | on HN ]
Re:The ReMarkable Tablet: A Review by sandsmark on Sunday September 22, 2019 @11:21AM (#21041748)
Hmm, I thought we were at 2017.75, are you sure your device is up to date?

We shipped the first software with an old dropbear, though it had backported patches for the known CVEs: http://cgit.openembedded.org/openembedded-core/tree/meta/rec...

[ Parent | on HN ]
Re:The ReMarkable Tablet: A Review by ACS_Solver on Sunday September 22, 2019 @11:54AM (#21041942)
I'm on 1.7.2.3, so only missing the latest update.
[ Parent | on HN ]