3 ms·
TL;DR: It's $199 to $399 for a plastic case literally just containing a Raspberry Pi 3 Model B, running an outdated Raspian, and the software stack is extremel
by ckastner 10y ago
TL;DR:
It's $199 to $399 for a plastic case literally just containing a Raspberry Pi 3 Model B, running an outdated Raspian, and the software stack is extremely poorly developed. eg: their "secure handshake between devices" is basically two devices serving SMTP on port 26 instead of port 25.
- JasuM 10y agoIts port 26 enforces TLS though.
- deleted 10y ago[deleted]
- tankenmate 10y agoBut doesn't bother to check if the certs (local and remote server) have been signed by a trusted authority. Nor does it attempt to pin these certs. It provides encryption, but no authentication nor authorisation. In short an ever so slight improvement over normal SMTP.
- i336_ 10y agoIt's actively ten thousand times worse than that. From the article: > The device uses self-signed certs throughout and they aren't even device specific. It's using the default ssl-cert-snakeoil.pem and ssl-cert-snakeoil.key in the Postfix config.