Re: [slim] Hacked! What can the hacker do ?

2020-01-06 Thread slartibartfast
d6jg wrote: > You will never be able to connect via VPN from your internal network - > that is by design.But a little confusing when you are testing if it works or > not [emoji3] Sent from my Pixel 3a using Tapatalk

Re: [slim] Hacked! What can the hacker do ?

2020-01-06 Thread Roland0
You might want to check if the user running LMS has write permissions on the NAS share mounted on your odroid. If yes, there's the possibility to put malicious files on it to attack other devices accessing those files, Rather unlikely unless the hacker is really competent and motivated, but

Re: [slim] Hacked! What can the hacker do ?

2020-01-06 Thread Shozzer
> If the security vulnerabilities that allow LMS to be relatively easily > hacked are simply limited to messing around with the LMS installation > and services itself, I'm not too worried. Even this is a problem: loud music starting randomly in the middle of the night...

Re: [slim] Hacked! What can the hacker do ?

2020-01-06 Thread Paul Webster
Fro your VPN questions it is probably best for you to move over to a relatively recent VPN thread. https://forums.slimdevices.com/showthread.php?111207-Guide-for-setting-up-VPN-remote-access-to-LMS Paul Webster http://dabdig.blogspot.com Author Radio France (FIP etc) plugin

Re: [slim] Hacked! What can the hacker do ?

2020-01-06 Thread slartibartfast
echable wrote: > Thank you all for your quick, high-quality replies :) > > Nothing seems to have been done with the plugins or anything else, the > only thing was that the music started by itself. > > I have already set up an OpenVPN setup through which I can from e.g. my > mobile phone

Re: [slim] Anyone using Sony STR-DN1080 DLNA with LMS?

2020-01-06 Thread DJWillis
itm wrote: > I'm looking for a new receiver to replace my Onkyo TX-NR515, which > suffers from frequent HDMI audio drop-outs. I'm considering the Sony > STR-DN1080, which seems to be DLNA-capable. I was wondering whether > anyone here has the DN1080, and can tell me whether it can be recognised

Re: [slim] Anyone using Sony STR-DN1080 DLNA with LMS?

2020-01-06 Thread itm
DJWillis wrote: > Appreciate this is an old'ish post but the Sony STR-DN1080 is fine as a > DLNA player or renderer. Used both with LMS quite a bit in the past. > It's also got ChromeCast built in so works well with the great > ChromeCast plugin. > > Do make sure you have the latest firmware

Re: [slim] Hacked! What can the hacker do ?

2020-01-06 Thread echable
Thank you all for your quick, high-quality replies :) Nothing seems to have been done with the plugins or anything else, the only thing was that the music started by itself. I have already set up an OpenVPN setup through which I can from e.g. my mobile phone access LMS through its home network

Re: [slim] Hacked! What can the hacker do ?

2020-01-06 Thread d6jg
slartibartfast wrote: > For what it's worth, when I recently set up OpenVPN on my router I could > not connect over the VPN from inside my home network. From outside my > network it worked properly. > > Sent from my Pixel 3a using Tapatalk You will never be able to connect via VPN from your

Re: [slim] Hacked! What can the hacker do ?

2020-01-06 Thread bpa
LMS runs as a normal program - Perl is an interpreted language which means code can be changed dynamically so very hard to protect once accessed. As Paul has mentioned custom plugins are one way but there are many other ways (e.g. "play" an OPML URL with a custom parser) depending on the skill

Re: [slim] Hacked! What can the hacker do ?

2020-01-06 Thread Michael Herger
What Paul said. Really check the 3rd party plugin. I know that some install my ImageViewer top basically expose all your file system through LMS, giving "visitors" access to all your photos etc. Check all installed 3rd party plugins and make sure you really enabled them. Ask here if in doubt.

[slim] Hacked! What can the hacker do ?

2020-01-06 Thread echable
5am last night my LMS on an Odroid XU4 started playback, I assume it was because a hacker through port forwarding hacking has accessed my LMS. The LMS's music source is an NFS mounted drive on a Synology NAS. No files appear to have been deleted or anything on the NAS. I have shut down and not

Re: [slim] Hacked! What can the hacker do ?

2020-01-06 Thread Paul Webster
I think that so far no-one has reported anything happening outside of LMS. However, if someone was being really malicious they could install a custom plug in and then that plug in could do anything. This is why there is a big warning telling people not to do port forwarding to LMS. Paul

Re: [slim] Anyone using Sony STR-DN1080 DLNA with LMS?

2020-01-06 Thread DJWillis
itm wrote: > Thanks for that. I've heard people say that the STR-DN1080 has some > annoying bugs - e.g. unwanted menus popping up when switching sources, > losing internet connection every time the amp resumes from standby,... > Have you noticed any issues with it? Can't say I have seen those

Re: [slim] Anyone using Sony STR-DN1080 DLNA with LMS?

2020-01-06 Thread Paul Webster
itm wrote: > As a matter of interest, if using an RPi would you get a decent enough > DAC bundled for $50? If connecting via HDMI then the DAC question is pushed further down the line. Paul Webster http://dabdig.blogspot.com Author Radio France (FIP etc) plugin

Re: [slim] Anyone using Sony STR-DN1080 DLNA with LMS?

2020-01-06 Thread Apesbrain
DJWillis wrote: > That said, I just feed one of my Duet's into it these days, but I am odd > like that ;). Exactly, why not spend $50 on a RPi and just run Squeezebox natively into an unused HDMI input? Apesbrain's

Re: [slim] Anyone using Sony STR-DN1080 DLNA with LMS?

2020-01-06 Thread RobbH
itm wrote: > Presumably if the receiver has built-in Chromecast then neither the RPi > nor the Squeezebox is required? > > As a matter of interest, if using an RPi would you get a decent enough > DAC bundled for $50? Last I knew, the Chromecast bridge was not capable of synchronizing with

Re: [slim] Anyone using Sony STR-DN1080 DLNA with LMS?

2020-01-06 Thread d6jg
RobbH wrote: > Last I knew, the Chromecast bridge was not capable of synchronizing with > other players. If that's still true, it could be a strike against that > option. But if synchronizing players is not important it should be > perfectly satisfactory. Doesn’t that AVR also have AirPlay? The

Re: [slim] Anyone using Sony STR-DN1080 DLNA with LMS?

2020-01-06 Thread itm
Apesbrain wrote: > Exactly, why not spend $50 on a RPi and just run Squeezebox natively > into an unused HDMI input? Presumably if the receiver has built-in Chromecast then neither the RPi nor the Squeezebox is required? As a matter of interest, if using an RPi would you get a decent enough

[slim] New Logitech Squeezebox 2020 Edition

2020-01-06 Thread dmcdayton
I heard a rumor that Logitech product management has now recognized that: -In 2020, 80% of the music business will be streaming content -That their SlimDevices Squeezebox line may have been 10 years ahead of its time. -That there still isn't a product on the market that streams as easy or as

Re: [slim] New Logitech Squeezebox 2020 Edition

2020-01-06 Thread rcampbel3
dmcdayton wrote: > I heard a rumor that Logitech product management has now recognized > that: > -In 2020, 80% of the music business will be streaming content > -That their SlimDevices Squeezebox line may have been 10 years ahead of > its time. > -That there still isn't a product on the market

Re: [slim] New Logitech Squeezebox 2020 Edition

2020-01-06 Thread garym
Good dream. First thought was, "Is it April First already?" ;) *Home:* VBA 4TB (2.5)>LMS 7.9.2>Transporter, Touch, Boom, Radio (all ethernet) *Cottage:* VBA 3TB (2.4)>LMS 7.9.1>Touch>Benchmark DAC I, Boom, Radio w/Battery (ethernet, Radio WIFI) *Office:* Win10(64)>LMS 7.9.2>Squeezelite *The

Re: [slim] New Logitech Squeezebox 2020 Edition

2020-01-06 Thread Apesbrain
Oh man, you had me going! Apesbrain's Profile: http://forums.slimdevices.com/member.php?userid=738 View this thread: http://forums.slimdevices.com/showthread.php?t=111449 ___

Re: [slim] Argh! Transporter seems to have died.

2020-01-06 Thread RonM
I see that the screws fixing the case cover are teensy hex heads. Anyone know if they are metric or SAE? I suspect metric, and it looks like the 1.5mm should work, but I don't want to strip edges using a poorly fitted key. I don't have any that small, and will have to buy. R. LMS on a

Re: [slim] New Logitech Squeezebox 2020 Edition

2020-01-06 Thread dmcdayton
rcampbel3 wrote: > Give me a stereo radio with Alexa built in or another voice control > option, and I'd upgrade every Radio in my house. My kids can't be > bothered to use radio controls -- they'll walk downstairs to the tiniest > speaker in our house and ask Alexa to play a song. > I hate

Re: [slim] New Logitech Squeezebox 2020 Edition

2020-01-06 Thread dmcdayton
I mean, Squeezebox is a unicorn. Most electronics have a product life cycle of 3-5 years, at best. These things are still providing value and doing things no other devices can do (at least not as easily/elegantly) 10 years down the road. For the life of me I can't understand why Logitech would

Re: [slim] New Logitech Squeezebox 2020 Edition

2020-01-06 Thread w3wilkes
Pretty cool dream, but I'm not holding my breath. Main system - Rock Solid with LMS 7.9.1 Official on WHS 2011 - 2 Duets and Squeeseslave Cabin system - Rock solid with LMS 7.9.1 Official on Win10 Pro - 1 RPi 3 Model B/Hifiberry DAC+ Pro/PiCorePlayer and Squeezeslave Headphones and car -