bruce

https://www.schneier.com/blog/archives/2017/09/securing_a_rasp.html
- standard user: pi (VERY hard to change or get totally rid of this user)
- standard password: raspberry
- passwordless su (no joke)
- until recently: ssh (with user password) open by default...
- no firewall at all
It takes less than 20 minutes for a Pi to get pwned by ssh if not secured. I tried, as an experiment.
--
https://www.indiegogo.com/projects/cloud-connected-wearable-camera-shonin-streamcam-security
--