Skip to content

Syncthing credential security #1181

@GermanTacos

Description

@GermanTacos

Current implementation of Syncthing (/mnt/SDCARD/spruce/bin/Syncthing or /mnt/SDCARD/spruce/bin64/Syncthing) do not have default user credentials applied (spruce/happygaming) which could allow for third-party man-in-the-middle compromise of user filesystem via LAN. Most/all? other spruce network functions require user authentication presently.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions