88
edits
Changes
Jump to navigation
Jump to search
Line 60:
Line 60: − Everybody wanting to connect his Zynthian to a “not secure” network (every network not controlled by himself should be considered “not secure” ;-) ) '''SHOULD CHANGE the default zynthian password'''. You can do that from the webconf tool.+ − Also, you have to understand that:+ − +
→About Zynthian Security
FYI, everything in Zynthian is executed as root user. The Pi user in the new PiOS images have sudo rights, so i don’t see a big security difference between the Gorgona and the PiOS images. PiOS is about automation and evolution, but currently it doesn’t improve security AFAIK.
FYI, everything in Zynthian is executed as root user. The Pi user in the new PiOS images have sudo rights, so i don’t see a big security difference between the Gorgona and the PiOS images. PiOS is about automation and evolution, but currently it doesn’t improve security AFAIK.
Anybody who wants to connect their Zynthian to a “not secure” network (any network not controlled by themselves should be considered “not secure”) ) '''SHOULD CHANGE the default zynthian password'''. You can do that from the webconf tool.
You also have to understand that:
* Although the Webconf Tool ask for the password, currently, it doesn’t use HTTPS, so your password could be sniffed by bad actors connected to the local network. That is specially true if you are using an ethernet cable or the old WEP Wifi protocol. If you are using WPA2 Wifi protocol in your 2 devices (Zynthian and your “computer”), then you should be protected against sniffers.
* Although the Webconf Tool ask for the password, it doesn’t use HTTPS, so your password could be sniffed by bad actors connected to the local network. That is especially true if you are using an ethernet cable or the old WEP Wifi protocol. If you are using WPA2 Wifi protocol on your 2 devices (Zynthian and your “computer”), then you should be protected against sniffers.
* When a MOD-UI layer is created in zynthian, the MOD-UI server run completely open for everybody in the local network.
* When a MOD-UI layer is created in zynthian, the MOD-UI server run completely open for everybody in the local network.