The developers behind Raspberry Pi have enhanced security by forcing users to choose a new username and password on start-up. Senior principal software engineer, Simon Long, explained in a blog post that previously, users were able to keep the default username “pi.” They were also able to bypass a setup wizard which requested users to choose a new password on start-up, which would leave them with the default option of “raspberry.” This made it easier for attackers to guess or brute force such devices.

Read full article on Infosecurity