Nodered hacked by adding invisible nodes

[meeki007]

@jbudd

Four letter passwords are ****!

???
good, wise, gold, pure ..... !

[Becker]

@TotallyInformation

There are online tools that you can use to test your password. Basic auth is really very simple to crack I believe. And of course, we are assuming that you are using TLS with recommended modern settings? A password with no TLS is worse than useless of course.

I use Nginx Proxy Manager (Docker) with Let's Encrypt SSL - it´s only one mouse click - I don´t know much about it. It's a shame that fail2ban isn't integrated into the nginx docker.

I tried https://checkdeinpasswort.de/ and I will extend it to > 15 years been cracked

@TotallyInformation

PS: The bigger issue you have with an in-car system is that the most likely security issue is going to be actual theft - either of the whole car or the device. Either way, someone now has the full device and all data. Most likely they will simply pawn the device but you will never be able to trust any password set on that device again.

the browser forgets the password after a few hours. I think Elon won't allow it

[gregorius]

You see, your password was blanked out.