Menu

#128 Password ability

open
nobody
None
5
2019-05-30
2017-08-13
No

What about password ability?
Ther was a patch for NathanaelA/minidlna. why isn't this in the main release?

Discussion

  • Shrimpkin

    Shrimpkin - 2017-08-27

    Probably because it's not standard and insecure. Any network packet analyzer will capture the passcode. Also, the patch fails to address access via http. Ex:

    for N in $(seq 20 100) ; do wget http://${SERVER}:${PORT}/MediaItems/${N} ; done
    

    The above one liner will download all media items up to id 100. Add in ffprobe, you can restore file extensions and rename files if they are tagged.

     
  • Ales Dolecek

    Ales Dolecek - 2019-03-17

    And you are speaking on behalf of the author?

    DLNA can be used only on home network. I wonder how would you add packet analyzer between router and client on home network?

    Mentioned solution is still better than no solution at all. My children aged 6 and 8 can definitelly hack it. My wife neither.

     
    • Shrimpkin

      Shrimpkin - 2019-05-30

      I speak for Shrimpkin.

      I wonder how would you add packet analyzer between router and client on home network?

      The internet is a great source of information.

      Mentioned solution is still better than no solution at all. My children aged 6 and 8 can definitelly hack it. My wife neither.

      A simple app could be created that would allow a technically inept person to bypass security.

       

Log in to post a comment.