a 15 digit password and no standard username makes any bruteforce attack on it impossible..
if anyone hacks my units, i salute the for the hours of hashing they might steal from me..
creating a storm in a teacup.
There is more than the username/passwd combo to web interface security
Don't hook random appliances up to the interwebs without any firewalling, just common sense
From default passwords to debug backdoors accidentally left open, I've seen it all in the past
i see, so you have found a backdoor to ddwrt? it is a firewall. maybe post this to them and they can update with your hack for next update! and again, no idea where you get "without firewalling" from. ddwrt is an opensource firewall..
Setting an avalon, which already has a firewall behind a firewall, is no specific added security.. especially if it is a standard dlink or netgear.. A firewall is only as safe as it can be configured. DDWRT is a secure opensource firewall.
Hooking up a pc using cgminer all public ports could not be adviced. However, cgminer in this case is running on top of a ddwrt firewall.
If you want to read more about ddwrt go ere:
http://www.dd-wrt.com/wiki/index.php/What_is_DD-WRT%3F