Reformatting device?

That would be very unfortunate. But look at the bright side, there are unlimited tries. :wink: So even if you’d have to try all combinations with one second steps, with lets say extra two minutes for each, in addition to button holding time, it can be done in about 22 hours (if I’m counting correctly). So it depends if the device is SXT or CCR1072. It would be worth it to hire some cheap labor to play with the latter.

Seemingly obvious flaw is that it would be also worth it for thief, but I guess it’s easier to steal outside mounted SXT than something expensive that’s more likely to be locked in server room, so the feature would still make sense to me.

What I don’t get is what useful reformat-hold-button actually does if it works according to latest official explanation.

It’s not protection against thieves but against reading security data from flash via pxe booted Linux.

There are two options:

  1. protected-routerboot - This is the protection against unauthorized access. Enable it and you can’t change boot or do netinstall, nothing except boot to installed RouterOS. I think the description in wiki is very clear (with one exception, see below).

  2. reformat-hold-button - My “thief repelent” theory might of course be completely wrong, but there has to be some reason why this option exists, right? What’s the advantage of configurable reset delay, compared to fixed e.g. 30 seconds?

Description for protected-rooterboot says “[to reformat the device] you have to know the reset button hold time in seconds” and right after that, description for reformat-hold-button denies it by saing “Even if reformat-hold-button time is forgotten, holding the reset button for more than 300s will allow you to perform reformat”. I can’t help it, I find it confusing.

By the way. Thief is not informed about technical complications to bring device to life. So he will steal anyway.

this page should be updated again cause this:

Even if reformat-hold-button time is forgotten, holding the reset button for more than 300s will allow you to perform reformat.

is no longer valid after recently adding this:

reformat-hold-button-max (5s .. 600s; Default: 10m) Increase the security even further by setting the max hold time, this means that you must release the reset button within a specified time interval. If you set t he “reformat-hold-button” to 60s and “reformat-hold-button-max” to 65s, it will mean that you must hold the button 60 to 65 seconds, not less and not more, making guesses impossible. Introduced in RouterBOOT 3.38.3

Well now
Someone was able to format in Nand-only mode