Skip to content

Enabling debug console by default poses a security risk #159

@ntietz

Description

@ntietz

Currently, the debug console is enabled by default. On OS X, this means that any user of the system (which is, by definition, a multi-user system) is able to read any key that is pressed on the keyboard.

This is enabled by default for both custom-built firmware and for firmware downloaded from the configurator tool. This is a dangerous default, and not behavior that users would expect.

I suggest disabling this by default, and allowing users to enable it if they need that functionality (as most users will likely not). I will be submitting a pull request with this fix shortly.

Metadata

Metadata

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions