External attackers likely could/would port scan and be able to identify the device [Tripphrases](http://worrydream.com/tripphrase/) plan9 security: [Factotum](http://doc.cat-v.org/plan_9/4th_edition/papers/auth)