New 4.1.20 RetroPie images for testing

BuZz

@BuZz @robertybob @herb_fargus I think there may have been a misunderstanding anyway - not important. Herb mentioned your post to me, but we thought it was about not mentioning the theme additions. Which I didn't, but not everything makes the changelog really. It's been added now.

Meleu's module was mentioned though as requested.

obsidianspider

I just updated to 4.2 on my Pis and laptop and it's working very well. Thanks again for all your hard work.

BuZz

@obsidianspider cheers! No doubt there will be new bugs. But then there is also 4.2.1 ;-)

obsidianspider

@BuZz At least my friggin TFT didn't go crazy* this time. ;)

*To be fair that was a kernel update and an Adafruit code problem coming together to cause that, and it wasn't RetroPie's fault.

TMNTturtlguy

Question regarding updating to 4.1.20 - I have my current build running nicely on the last version of retropie. I noticed that changes have been made to the N64 emulators. If i do an upgrade of my current retropie, will I need to go into my N64 and reset which emulators each rom uses? Any other settings that might get "reset" during the update? Thanks and excited for the new updates.

Shakz

@BuZz I really feel we should have ssh enabled by default. Obviously I have a vested interest as my toolkit uses ssh to connect to the pi but there are also the 1000s of other how to videos that are now obsolete....this only adds to a new users frustration in getting things setup. Samba is dead slow compared to sftp for rom transfers as well.
Just not sure there is any value to having ssh disabled by default especially for security reasons.....I get it from the raspbian perspective...but retropie? I know its trivial to fix through raspi-config but again.....where is the value?
Please consider adding it back in 4.2.1

BuZz

@Shakz Not going to happen. Security is more important and Raspbian made the decision for a reason. For us to ignore it, would be irresponsible.

RetroPie images are Raspbian.

Shakz

@BuZz Thanks for responding. I figured as much given its one of the first things you mention in the description. UXS and a mess of other tools will be broken for the pi now. While I do not like the change and feel its completely unnecessary for a gaming console build...I do appreciate all the work you and the others put into this project.

BuZz

@Shakz They are not broken - you just need to re-enable SSH which is simple (preferably after changing the password). The tools can be updated too.

You could argue it's even more necessary - many people install RetroPie who have no knowledge of linux and may not realise that it was open by default.

See https://www.raspberrypi.org/blog/a-security-update-for-raspbian-pixel/

I do not want to be blamed for making a decision contrary to Raspbian that would put people at risk.

SSH is not needed on RetroPie either for most people.

Floob

I wonder if its worth making a sticky topic about the SSH change for a short period to pre-empt the swathe of queries about why peoples SFTP or SSH clients no longer connect?

Or maybe I'm assuming there will be more posts about this than there will be?

Shakz

@Floob Well....just with my tiny little channel I am getting flooded with them (queries). I try to give advice to everyone having issues and its biting me now. Let us not forget this change is not mentioned in the release notes. Only in the beta image notes.
WinSCP
UXS
FileZilla
as well as a ton of smaller tools people have made are not working and folks don't know why because it was not highlighted.
Yes...I understand its an easy fix. Heck its even already installed just disabled.
The normal users...who I guess are not "most people" have no idea why these tools are not working with the new image given that since forever its been enabled by default....seemingly putting everyone at a heightened security risk. I know I spend hours every night trying to hack through my neighbors router firewall so I can log into their retropie and steal me some romz!!!

Shakz

P.S. Daphne controller config script works great now ;-)

BuZz

@Shakz said in New 4.1.20 RetroPie images for testing:

The normal users...who I guess are not "most people" have no idea why these tools are not working with the new image given that since forever its been enabled by default....seemingly putting everyone at a heightened security risk. I know I spend hours every night trying to hack through my neighbors router firewall so I can log into their retropie and steal me some romz!!!

If this is supposed to be funny - it's not. It just shows a complete lack of understanding of the issue.

I suggest you read the raspbian link which details the reasons for the change.

The details were missing from the 4.2 announcement by accident - I have heaps of stuff to do to prepare for a release, and sometimes things get forgotten.

backstander

When I first used Raspbian, I was a little surprised that SSH was enabled by default but I didn't complain. It might be a little bit bumpy transition but I think in the long run this will be best.

I read the link that @BuZz posted and it says something about making an empty file named ssh and placing it in the /boot/ directory and this will automatically enable SSH on boot. I wasn't sure if it was only for the first boot or any boot? Anyways its pretty easy to enable SSH from raspi-config but I was just curious.

BuZz

@backstander will work for any boot afaik.

Shakz

@BuZz said in New 4.1.20 RetroPie images for testing:

If this is supposed to be funny - it's not. It just shows a complete lack of understanding of the issue.

I completely understand the issue.
I think that retort just shows a complete lack of understanding of how the webcam "hack" was done. The webcams sent a upnpc command the victims routers to open ports so the victims could access the cameras outside of their home network. The "hackers" sniffed for the open port...found it and logged in with the default password. This is not hard. Raspbian/Retropie do not open ports on the router...although upnpc is installed by default....thats kinda interesting. I wonder how many folks running Rays image have actually opened up thier home networks?

Even if a port was open on the router (most of the time there is one open) it would still need to be directed to the pi for a hack to occur. Steam and many other video games open ports all the time. The comparison to retropie and the security camera incident is not really valid. Your home network is only as secure as the router firewall protecting it and the devices inside opening ports to the outside.

Again....I asked...you said no....its your distro....that's that.
Apologies for ruffling your feathers...I do love retropie and respect the work and consideration that you and others put into it.
I consider the issue closed and will not post again about it.