MT5 Multi-Tracer Operating Manual
page 59
6.4.3. Resetting Passwords
As long as the web administrator username and password are known, it should not be
necessary to force a reset of the passwords. However, when needed, this may be done
using the direct hardware interface (see section 4.6
Resetting the web access passwords necessarily deletes the web administrator and all
usernames and passwords. After deleting administrator and users, there will be no web
access restriction and both the user and administrator access is open to anyone on the
network. Be sure to redefine the administrator as soon as possible after resetting the
web access usernames and passwords.
Resetting the FTP passwords, sets the FTP data user and data administrator to the
default values. Refer to section 5.3
“Accessing Data Files” for these values.
6.4.4. Security Limitations
The MT5 system uses basic and common web page password protection which has
known vulnerabilities to network hacking. Furthermore, MT5 data is not encoded.
Similarly, the FTP access has known vulnerabilities. Although breaking this security
would require a concerted effort, the potential does exist.
While MT5 operation and data would typically not be considered sensitive, users are
encouraged to limit network access via other means when possible. For example, do
not expose the MT5 system to the worldwide web unnecessarily. Consult with your
network administrator about network access options.
