Wi-Fi password is stored in plain text.

[ray77]

Available for everyone here:
http://ip/api/system/info

[skot]

@benjamin-wilson can we omit the WiFi passwd from the API?

[benjamin-wilson]

Yes

[benjamin-wilson]

Fixed 84c0611

[johnny9]

Does the web ui handle the missing value?

[benjamin-wilson]

It does but I should probably put in a fake placeholder

[ray77]

It does but I should probably put in a fake placeholder

or any hash, generated from a unique esp device id, wifi-password and mac address.
This would still be a real, fairly secure password that can be used by the ESP to log in.
just an idea.

On the other hand, once the intruder is in the network (port forwarding from outside), he can at least grill the miner - the Wifi password is then pretty much irrelevant.