News for hackers. Stuff that matters.
Re:Keystroke timing obfuscation added to SSH(1) by dredmorbius on Tuesday August 29, 2023 @10:59PM (#37317133)
I'm presuming the hard reset is to a factory-assigned password.

Is that uniform across all devices, or device-specific?

Practice I've seen for some years now is to have a label on the device with admin/root password, which is presumably neither uniform across devices nor trivially-determinable from device characteristics (e.g., MAC address, sequential serial numbers, etc.).

I'd still consider that practice reasonably tolerable, though you should be keeping better tabs on assets and credentials.

There are no comments on this comment yet.