Re:Ask HN: I’m an FCC Commissioner proposing regulation of I...
by kybernetikos on Wednesday September 06, 2023 @11:37AM
(#37406688)
Sticker in the box / on the user manual could probably solve those cases. The problem with requiring a setup phase is that that means you're shipping it in a vulnerable state.
Re:Ask HN: I’m an FCC Commissioner proposing regulation of I...
by yencabulator on Wednesday September 06, 2023 @11:43AM
(#37406768)
I recall Dell and HP servers at least used to come with a hang tag attached that listed the random initial firmware password. It doesn't need to be a permanent part of the device -- though you do risk losing the hang tag.
Some IoT devices could be handled the same way, but there are plenty of reasonable IoT applications where a password written on the device is impractical or a security risk.