A few years ago, I wrote a shell script that I installed on my SB-Radio
to read out its internal light sensor and post that data to Domoticz in
a 5-second CRON. I could do that by SSHing into the Radio and by knowing
it’s a Linux-based device, I could find my way around on its file system
pretty quickly. 

When my script is running, it in no way changes the behavior of the SBR
from a user’s perspective. That did make me very aware of what happens
when a device on your local LAN is compromised to become part of a
botnet. My code wasn’t malicious and I wrote it myself, but what if?

To get in to the SBR, you have to navigate the menu structure in the
player’s GUI and enable SSH. In theory you need physical access to the
player to do that. But of course if there’s a zero-day in the BusyBox
then who knows…

The chances are very, very, very small. But never, ever, say never.




------------------------------------------------------------------------
philchillbill's Profile: http://forums.slimdevices.com/member.php?userid=68920
View this thread: http://forums.slimdevices.com/showthread.php?t=115017

_______________________________________________
discuss mailing list
[email protected]
http://lists.slimdevices.com/mailman/listinfo/discuss

Reply via email to