Feature Request: On new devices, set the admin username to the same as the password on the label.

RouterOS General
1

Feature Request: On new devices, set the admin username to the same as the password on the label.

Very easy to implement, just edit the get-custom-defconf file which changes from admin to $defconfPassword the default username.

Additionally:
Prevent name “admin”, “root” & Co. for users from being created.
Prevent stupid passwords like the username, 1234, 0000, etc.

Considerations:
On netinstall are keeped “admin” at first boot if not defaults are loaded.
If you read the label you remember the username.
If you lost it anyway you will no longer log in, because it is also the password and you must use netinstall.
The default username can be changed like the password, and readed from CSV like already is it.
In case of RouterOS update/upgrade, nothing changes for the already installed fleet, so as not to break the balls of those who work there.

Advantage:
No CVEs when guessing username.
No idiots use admin or other trivial words as username.
1000% (if no more) increase in security.

2

I would add electric shock for stupid passwords and the second time, a pre-recorded message: You are an idiot, this router will self-destruct in 10 seconds.

3

This would be a shocking increase in security…

4

http://forum.mikrotik.com/t/something-needs-to-be-done-about-the-default-passwords/166081/174

5

Good point!

These random passwords are fine, but users are prompted to change them on their first login. The problem is that a first-time user might set a weak password like “123456” and become vulnerable (since ROS, by default, does not have login rate limiting or “fail2ban”, right?).

It would also be smart to change the default “admin” username, but many people don’t do that because it’s inconvenient. Having a randomly generated username by default would solve this issue perfectly.