[callumjones]

But this is just the process of connecting it to a wireless network, which would be the hacker's network? The risk seems pretty contrived?

You could make the same argument for other assisted headless installations: speakers, smart plugs, etc.

[lisper]

> You could make the same argument for other assisted headless installations: speakers, smart plugs, etc.

That's true, but in those devices can be isolated from the internet by a firewall. Berrylan can't be, or it loses its utility. In order to talk to the app, Berrylan has to send packets to and receive packets from the internet. Also, even after the setup, most RaspPi applications entail having the computer continue to have access to the internet. So the situation is much risker with the RaspPi.

[callumjones]

Doesn't this just work over Bluetooth for the initial config? The internet isn't useful at this point because it isn't connected to a WLAN.

[lisper]

Ah, that's a good point.