Banana Pi is working on the upcoming Banana Pi BPI-M7 SBC powered by Rockchip RK3588 SoC whose low profile design reminds me of boards from Khadas such as
The Banana Pi BPI-M7 single board computer is equipped with up to 32GB RAM and 128GB eMMC flash, and features an M.2 2280 socket for one NVMe SSD, three display interfaces (HDMI, USB-C, MIPI DSI), two camera connectors, dual 2.5GbE, WiFi 6 and Bluetooth 5.2, a few USB ports, and a 40-pin GPIO header for expansion.
That’s just good password security and reasonable.
Yes, that’s my point, you don’t need to disable it by default.
See that qualifying word there? “Most”? That’s why they force SSH to be disabled and password changes. If you PERSONALLY can guarantee that no one will EVER put a freshly imaged RPi directly on the internet backed by a 10 million dollar/pound/euro guarantee per incident it still doesn’t matter; there’s still a need to change these defaults. I’ve seen the RPi’s deployed in a business environment and I 10000% know that vendors are fscking stupid and would leave default permissions enabled because they’re the lowest bidder.
There are those things called licenses and liability liability waivers that are signed specially for those cases. The people doing deployments on business environment should know how to change password / use SSH keys and whatnot, if they don’t that’s not the Pi’s problem.
It’s people like you why we have massive botnets due to default security measures being ignored by major manufacturers.
By enabling people who shouldn’t be configuring Pi boards in the first place you’re are the one creating botnets. They might be saved by the fact that it doesn’t have SSH enabled by default just to be hacked later on when they decide to run a sudo wget ... | sh.
Making things easier has this downside, you protect people so much, they don’t ever learn and then things go bad they can’t handle it and the damage is way way worse.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
Resources:
selfh.st Newsletter and index of selfhosted software and apps
Yes, that’s my point, you don’t need to disable it by default.
There are those things called licenses and liability liability waivers that are signed specially for those cases. The people doing deployments on business environment should know how to change password / use SSH keys and whatnot, if they don’t that’s not the Pi’s problem.
By enabling people who shouldn’t be configuring Pi boards in the first place you’re are the one creating botnets. They might be saved by the fact that it doesn’t have SSH enabled by default just to be hacked later on when they decide to run a
sudo wget ... | sh.Making things easier has this downside, you protect people so much, they don’t ever learn and then things go bad they can’t handle it and the damage is way way worse.
Now you’re just a troll arguing in bad faith.
I SAID GOOD DAY SIR!