On Fri, 2012-09-28 at 15:53 -0400, V G wrote:
> >
> > # cat /etc/passwd | grep sh
> > root:x:0:0:root:/root:/bin/bash
> > git:x:998:998:git daemon user:/:/bin/bash
> >
>=20
> Nope. No normal user. It's silly to have root login disabled via SSH by
> default on an image designed for a cheap development board that's almost
> 100% of the time never exposed to the Internet, especially on first login=
..
> No one's going to try to try and brute force the root account.

No it's not. I would be appalled with ANY linux distro that by default
enabled root login by ssh. It's a BIG deal.

That said, not having a regular user account created on that image is
silly (other images do).=20

To be devil's advocate though, I'd say that a good number of people,
when first powering up a Pi, have a keyboard and monitor connected. I
know I did. It's by far the simplest way for most to get things working.

After all, say you plug an ethernet cable in, what IP does the board
grab? While there are ways to find out, they are VERY dependant on your
setup (i.e. run wireshark to sniff the DHCP request, log into your DHCP
server to see what IP was assigned?). Supporting that is a non-starter.
Much easier to just guide people to connected a keyboard and monitor and
get started from there.

TTYL

--=20
http://www.piclist.com PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist
.