Everything should be managed remotely from the server.
There should be no need or ability to modify the system locally without physically cracking the kiosk open. No exposed ports, no magic key sequences, nada.
At most, there should be a QR code for finding the Admin URL for configuring this client, which would be secured a la #33.
Everything should be managed remotely from the server.
There should be no need or ability to modify the system locally without physically cracking the kiosk open. No exposed ports, no magic key sequences, nada.
At most, there should be a QR code for finding the Admin URL for configuring this client, which would be secured a la #33.