News for hackers. Stuff that matters.
Re:Keystroke timing obfuscation added to SSH(1) by dredmorbius on Tuesday August 29, 2023 @01:38PM (#37311254)
[delayed]
Re:Keystroke timing obfuscation added to SSH(1) by fragmede on Tuesday August 29, 2023 @02:51PM (#37312184)
I don't know. I come across old AP/routers where I've forgotten the login credentials and find myself hard resetting them with some regularly, one that's above "approximately never" anyway.
Re:Keystroke timing obfuscation added to SSH(1) by dredmorbius on Tuesday August 29, 2023 @10:59PM (#37317133)
I'm presuming the hard reset is to a factory-assigned password.

Is that uniform across all devices, or device-specific?

Practice I've seen for some years now is to have a label on the device with admin/root password, which is presumably neither uniform across devices nor trivially-determinable from device characteristics (e.g., MAC address, sequential serial numbers, etc.).

I'd still consider that practice reasonably tolerable, though you should be keeping better tabs on assets and credentials.

Re:Keystroke timing obfuscation added to SSH(1) by samus on Tuesday August 29, 2023 @05:17PM (#37314249)
It could be totally fine if you disable WiFi and connect physically. At least the first time for setup.