prusa3d / Prusa-Link

140 stars 21 forks source link

feature request : override passwords or disable security entirely #824

Open shukriadams opened 10 months ago

shukriadams commented 10 months ago

It would be great if, on Prusalink on the Mk4, we could specify our own passwords, or disable security entirely. For those of us on home networks, behind routers with firewalls, it's not necessary to have long strong passwords on our printers. We understand the risks etc. Many of us are using Prusalink for the convenience of not having to write Gcode to USB keys, it makes no sense to force us to use a password manager for a printer on a network only we have access to.

jmckeown2 commented 9 months ago

Let's be frank. PrusaLink is running unencrypted HTTP. so that nice strong password is being sent to the printer in the clear anyway. So it's already pretty insecure, if the home network is compromised, the printer is exploitable. "Wireshark and wait" WILL compromise the password no matter how strong or weak it is.

bearclaws8 commented 9 months ago

Having the ability to modify the passwords and/or completely disable the need for passwords would be a great enhancement.

I was hoping to install Prusa Link on a completely dead end router setup but haven't been able to because the installation process requires connection to Prusa servers, even for a completely local network only installation. Which is unfortunate. I am hoping they can revise the coding around this to permit fully off-line (non-internet connected) local network setups (see #845 ) as I would like to use the slick looking Prusa Link locally instead of having to rely on octoprint only.

GRIFFCOMMca commented 8 months ago

I am sure this is open somewhere else, but YES, change password / disable is a must

spontarelliam commented 7 months ago

Agree, this is an obnoxious requirement in a shared makerspace. The paper printers don't need a password, nor the embroidery machine, or refrigerator, and not even the 3d printers.

cbc02009 commented 3 months ago

Yes, please implement this. I'm behind a firewall and don't need a password.

BoCoKeith commented 3 days ago

IMHO, the ability to change the password is a must. It's partly a convenience -- having to find, copy, and paste the password for my MK4 every time I start up PrusaLink is a pain -- but it's also a matter of security -- no one other than me should be managing passwords for the devices on my network.