Just a reminder to all, if you have any BrightSign players on public internet IP's, please remember to secure them with username and password.
While searching Google for some BrightSign information, I happened upon a Google Search Result that is a direct link to a HD222 player in the Czech Republic that has no login username and password, and is open to the world.
I could look at log files, the contents of the SD card, etc. If I wanted to I could maliciously change the content, but I am a nice guy.
Unfortunately a quick look around, I found no means of identifying the company that owns this player, so I can not contact them to let them know that their player is not secure.
So please, remember to secure all your players with usernames and passwords especially if they are on public IP addresses!
John
