> It comes with SSH running and you have the root password
Is the password different for every device? Is the ssh daemon updated regularly? Seems like a massive security vulnerability otherwise.
Is the password different for every device? Is the ssh daemon updated regularly? Seems like a massive security vulnerability otherwise.
The SSH daemon is Dropbear, and it doesn't seem to be updated though:
> reMarkable: ~/ dropbear -V
> Dropbear v2016.72
We shipped the first software with an old dropbear, though it had backported patches for the known CVEs: http://cgit.openembedded.org/openembedded-core/tree/meta/rec...