Possible security Concern with Hotspot and ssh access

Hi, I recently downloaded Astroprint for the RaspberryPi, and I’m loving it for providing a clean and simple interface to my Printrbot.

Having completed a couple or prints I decided to ssh into the pi to, initially to see if the octoprint plugins directory was there (I like the idea of a growl message telling me the print has completed).

However on logging into the Pi, the last login date caused me some concern.
It was from a laptop named “daniels-macbook-pro.local” which I am hoping is that you guys when you created the image?

Even if it is you at Astroprint, it would appear that when the hotspot is active you can ssh into the box using the very well known “standard” username and passwords. Is this the case?

You are correct that was us creating the image and you are also correct ssh is open with “standard” username/password.

Most of our RPi users want to be able to get in so we didn’t change the ssh defaults for that reason.

Of course we recommend for you to change them to your own preferred values.