a 15 digit password and no standard username makes any bruteforce attack on it impossible..
if anyone hacks my units, i salute the for the hours of hashing they might steal from me..
creating a storm in a teacup.
There is more than the username/passwd combo to web interface security
Don't hook random appliances up to the interwebs without any firewalling, just common sense
From default passwords to debug backdoors accidentally left open, I've seen it all in the past
i see, so you have found a backdoor to ddwrt? it is a firewall. maybe post this to them and they can update with your hack for next update! and again, no idea where you get "without firewalling" from. ddwrt is an opensource firewall..
Setting an avalon, which already has a firewall behind a firewall, is no specific added security.. especially if it is a standard dlink or netgear.. A firewall is only as safe as it can be configured. DDWRT is a secure opensource firewall.
Hooking up a pc using cgminer all public ports could not be adviced. However, cgminer in this case is running on top of a ddwrt firewall.
If you want to read more about ddwrt go ere:
http://www.dd-wrt.com/wiki/index.php/What_is_DD-WRT%3F
I would only be interested in this too if there is something inside the firmware that transmits out to home base some where that would allow someone in. Otherwise I could care less as I don't put my Avalon's on the internet without a firewall in front them as that would be very bad practice!!