Server default password - new law

[Mr Pointy]

One for the installers on here but the nice folks in California have brought in a new law that will probably have global implications for those involved in fitting out data centers. It's no longer permissable to have the management port sent out with a general default username/password like admin/admin, they have to be unique for each server. This explains what's going on:
https://www.youtube.com/watch?v=EcRyQWvTif4

So when you can't log in to your nice shiny new server, this might be the reason. I wonder if it applies to domestic equipment as well?

[colin79666]

New rules in the EU look set to ban default passwords on IoT kit.

Arguably even more important since those are often directly connected to the internet rather than your dedicated management LAN.

Of course you do have a separate (V)LAN for you server management...

[GlenMH]

QNAP have already done this with their latest operating system. Now the MAC address of the first network port.

[colin79666]

GlenMH said:

QNAP have already done this with their latest operating system. Now the MAC address of the first network port.

Hmm I hope they have some brute force protection in there too. Not difficult to guess your way in to a 48 bit address when the first half is already known for the manufacturer.