TECH Signal 425
Raspberry Pi tipping machine crashes in London pub, exposes default login
↗
A TiPJAR contactless tipping device in a London pub crashed and displayed its Raspbian GNU/Linux terminal, logged in as the default user 'pi' with hostname 'raspberrypi.'
WHY IT MATTERS
Embedded Linux devices deployed in public spaces with default credentials and hostnames present an obvious attack surface. Anyone with a keyboard could potentially access this payment-handling system.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
01
A TiPJAR tipping machine in a London pub crashed and exposed its Raspbian GNU/Linux terminal to patrons
02
The device was logged in as the default 'pi' user with the generic hostname 'raspberrypi'
03
The system appeared to rely on rc.local for startup, suggesting minimal hardening for a public-facing deployment
THE CLUSTER