You are conflating two separate types of passwords. Hardcoded password is differ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

segmondy on Oct 13, 2023 | parent | context | favorite | on: Cisco can't stop using hard-coded passwords

You are conflating two separate types of passwords.

Hardcoded password is different from default passwords. You can't change a hardcoded password, it's always part of the source code/image.

A default password can be changed.

Both can be backdoors if kept secret, but a hardcoded password from the onset is a backdoor.

mecsred on Oct 13, 2023 [–]

Do you mean can't be changed on a live system? It's very easy to change a hard-coded password, just recompile the source and flash. That could definitely be what OP is referring to if they pushed OTA firmware upgrades.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact