It disturbs me that Hijack is passwordless (both FTP and HTTP) by default.

Hey, guys, be reasonable, this is a frigging car audio! It is meant to be connected to one's *home* machine, probably via USB. It was not meant to reside on corporate LAN or Internet. Those of us who do install Hijack and put our players at mercy of our co-workers are expected to be able to decide whether they need a bit of security provided by Hijack.

That said, a simple password for emplode access via ethernet (resetable via serial and USB connection) *would* be usefull. Perhaps two level of protection - one against changes, another against any access. (Hm, I am I bit behind with Hijack features - perhaps something like that is already there? No, that would require a change emplode.)