pull down to refresh

Fucking FINALLY someone else saying this.

Personally, I wouldn’t want an Umbrel machine on my network.

Last I heard, they are working to enable HTTPS

reply

Yes, last I heard 5 years ago.

reply

Yes, they are very slow. Maybe in 5 more years. "We are on the verge of releasing it".

https://github.com/getumbrel/umbrel-apps/pull/932#issuecomment-2134285086

reply

Damn heartbroken

reply

Why even on your network? What about it gives you this level of concern?

reply
reply

MoneyPrinterGoBrrr is changed by any sane user after first login. 2FA is available, so no, stealing raspi won't be enough. But yes, a hacker guest with wifi password can sniff traffic with wireshark and maybe get the real password (I could not, must be hashed).

reply

Most people never change the default.

reply

Why blame Umbrel for this? If I remember correctly, Umbrel 1.1 forces you to change the password on first login.

reply

No, not all default passwords.

reply

I talk about the main password MoneyPrinterGoBrrr. The internal passwords of some apps are redundand.

reply

Have fun with your Umbrel…