(04-07-2020, 02:09 PM)p1trson Wrote: Hey janw,
ofc this is a security issue, but we're still talking about development device. If there are people actually running this as main driver and storing sensitive data there at this point, that's not wise thing to do. How many people do you think change the default accounts/passwords which are shown in this forum in a plain text ?The ones who change it most probably also secure their ssh anyway.
I just got tired by having to install it by hand using that default keyboard.
Thanks for advice with creating the image - I'll see whether I find enough time for that.
I see what you mean, but I'm actually glad it isn't installed already because consider this: the PinePhone UBports Community Edition has just been released. Basically Ubuntu for ARM devices, a debian based distro. That's probably going to mean an influx of newbies. I could see one of them buying the phone, deciding they want Debian, coming here and not being aware that ssh-server is installed. Whereas for testers, the ssh-server is an apt install away
While it is an inconvenience when there is a bug that makes the phone inaccessible through normal means...
There is probably a middle way. Perhaps if there was a way to get default ssh only via the USB cable on the local computer, and not through wifi or data of the phone, nor any neighboring devices on the LAN of the connected computer, then that would be fine to leave as a default.
*.*.* PinePhone BraveHeart edition w/ distro: Debian + Phosh // GuixOS, Debian, Arch // pocket linux enthusiast // washed up sysadmin *.*.*