stuart wrote: > I never did this as (I think) we don't have a clean way of storing > non-volatile credential on all the different types of mediamvp boxes.
In theory there is Flash storage available on the MVP, though so far the project hasn't ventured into using it. As I recall there were still some technical hurdles to cross. (Do some searches on the dev list for more info.) > As I see it, the credentials will be stored in the start up script on > the server in clear text. Then the clients will tftp over the script and > execute it. So if someone can access the tftp files or sniffs the > network they can capture the credentials. That'd be no worse than the way Samba and other credentials end up getting embedded in the startup script. mvpmc isn't exactly designed with security in mind, and really depends on operating in a controlled LAN with restricted access. > Audience: I think this is more for people who share their networks with > others. Like in a dorm room, apartment building or multiple small > business setting. If SqueezeCenter did it right, requiring credentials > should prevent a casual user from, among other things, deleting your > music. In the dorm room scenario, the MVP could be behind a NAT firewall, and connect to a SqueezeCenter off the immediate LAN (but elsewhere in the same building), without compromising security too much. Of course if the connection to SqueezeCenter isn't encrypted, you're still passing plain-text credentials across a potentially hostile network. -Tom ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Mvpmc-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mvpmc-users mvpmc wiki: http://mvpmc.wikispaces.com/
