Questions about security/password/network

For topics which do not fit in other specific forums.
AtomicShroom
Posts: 69
Joined: Sun Mar 07, 2021 12:28 pm
Has thanked: 10 times
Been thanked: 19 times

Questions about security/password/network

Unread post by AtomicShroom »

I have a few questions:

When I connect to my MiSTer via LAN FTP, I’m using the default root / 1 username and password. Can only LAN devices see/connect to the MiSTer or could technically anyone on the internet connect to it with those default credentials? Basically: Am I meant to change them?

Thanks!
User avatar
Crystal
Posts: 48
Joined: Sun May 24, 2020 8:52 pm
Has thanked: 7 times
Been thanked: 11 times

Re: Questions about security/password/network

Unread post by Crystal »

That depends, whether you set up port forwarding on your router and whether your ISP would even allow it. As far MiSTer or DE-10 nano is concerned, no. It makes no attempts on it's own, like UPnP port forwarding, for it to have FTP, SSH, etc., reachable outside of LAN
AtomicShroom
Posts: 69
Joined: Sun Mar 07, 2021 12:28 pm
Has thanked: 10 times
Been thanked: 19 times

Re: Questions about security/password/network

Unread post by AtomicShroom »

Awesome, thank you! :)
User avatar
toastboy
Posts: 27
Joined: Wed Sep 09, 2020 9:20 pm
Has thanked: 4 times
Been thanked: 14 times

Re: Questions about security/password/network

Unread post by toastboy »

You probably should change the default password though.
If an attacker somehow managed to get traffic past your router's firewall, then the mister's weak password might give them a foothold in your home network.
Granted the mister is unlikely to be online 24/7, and it's running a very cut-down version of linux so it would be of limited use to an attacker, but best to be safe.

If you're using a windows PC, download "putty" ssh client and use it to connect as user "root" to your mister's IP address in the form "192.168.x.x".
From a mac/linux launch a terminal and type "ssh root@192.168.x.x".

Once connected to the mister, type "passwd root" and enter a new password.

Updates to the linux part of mister sometimes reset the password back to "1", meaning you have to modify it again.
User avatar
Crystal
Posts: 48
Joined: Sun May 24, 2020 8:52 pm
Has thanked: 7 times
Been thanked: 11 times

Re: Questions about security/password/network

Unread post by Crystal »

toastboy wrote: Mon Sep 13, 2021 5:34 pm From a mac/linux launch a terminal and type "ssh root@192.168.x.x".
if you are using a relatively modern built of windows 10 or newer, you can do this from command prompt, without the need for putty or other ssh client.

as far security improvements, does mister support access with private key on ssh? that would raise it again, as now you need 2 things, password for private key and private key itself, instead of just the password for mister
Post Reply