6 ms·
TL;DR > put a file called ssh in the /boot/ directory with any content to enable SSH which we turned off by default to prevent unauthorized access of your devi
by aq3cn 10y ago
TL;DR
> put a file called ssh in the /boot/ directory with any content to enable SSH which we turned off by default to prevent unauthorized access of your devise in public network.
I wonder how many people are going to scratch their head when their headless Raspberry Pi will be unable to connect to their laptop in same way as earlier without this piece of information.
I hope running sudo apt-get update, notifies them of this critical change.
- Normal_gaussian 10y agoSSH off by default is a change to the image, not an update through apt. I am not sure if this is the case with the warning telling you that you are still using the default password.
- aq3cn 10y agoI don't run Raspbian OS in my device, so I cannot verify. But reading this created doubt in my mind. > To update your existing Jessie image with all the bug fixes and these new security changes, type the following at the command line: I think better implementation would be asking if one is running their device in public or private network and explaining the consequences while setting up for the first time. We are asked of same question when we connect to network for first time in Windows since last several versions. I am sure tutorials made previously will create lot of frustration among newcomers.
- Normal_gaussian 10y agoThe situation in which you want definitely want SSH enabled on a pi is when you are running it headlessly. This is an incredibly common use case, especially for more experienced users. In such a setup there is no opportunity to ask the user anything.
- aq3cn 10y agoThere are other OS too like Arch ARM, Windows core, Ubuntu Core, Kali OS etc.
- gacek 10y agoAs I understand the article, they've only modified the image used to deploy a fresh Raspbian, an update won't disable the ssh.
- alexellisuk 10y agoYes this ruins just about every Pi from scratch tutorial. The worst part is if this affects the "lite" distro which is headless. The beauty of using an image like Raspbian Lite was being able to flash, ssh (ip via DHCP), change password/hostname and done.
- jcriddle4 10y agoSpeaking from my own experience, google has a real problem with indexing out-dated material.
- Declanomous 10y agoIf you can flash an sd card you can turn on SSH with the new method. All my Pi's are headless, and this is a mild inconvenience at best. Way less inconvenient than the internet falling apart because users don't know anything about security.
- alexellisuk 10y agoNew method is what? I sometimes mount the Linux partition if I'm flashing from a Linux PC to edit hostname etc but this is extra hassle especially if using a Mac.
- Declanomous 10y agoYou add a file named ssh to the boot directory. This permanently enables SSH. The boot partition is fat formatted and can be edited on basically any device as a result. It's right in the linked article.
- mSparks 10y ago...and then deletes the file. -> or just get angry when they reboot and cant get back in without unplugging it from whatever remote location it was plugged into and taking it home to plug into a keyboard mouse and monitor. great for the effort. i did baulk when i first started a pi to find the defaults were so insecure. But I'm not sure the solutions are that helpful. cant we just set a root password on first boot like every other nix distro.
- bm5k 10y agoThis is for a headless first-boot scenario. - write the file - put the SD card in your pi - it boots with ssh enabled - it deletes the file - SSH in and permanently enable SSH on boot - done It's a bit of a hassle for anyone who knows their way around linux, but Pis are marketed toward kids & other "normals". This is what happens to products designed for everyone.
- mSparks 10y agoYeah, and we definitely shouldn't be training the kids & other "normals" about security..... :| HHHrrrmpf.