Here's a couple of reasons I think port 9000 should have a password:

  
- Port 9000 lets you do some things that should only be done by an
  authenticated administrator. Two examples are setting passwords and
  turning CSRF protection on/off.
- The password can be set without having to enter the old password.
-  The CVEDetails site shows that LMS has had security holes in the
  past, and we have to assume it has some today. Without a password,
  those holes are exploitable by anyone who has access to your network.
- Sonos has terrible security. I'm new here, so I don't know if LMS
  developers would care that better security is a competitive advantage
  over Sonos. Sonos can't offer it due to backwards-compatibility
  concerns. 
  

People who don't agree should be able to run without a password, but it
should at least be an option


------------------------------------------------------------------------
rick_k's Profile: http://forums.slimdevices.com/member.php?userid=72191
View this thread: http://forums.slimdevices.com/showthread.php?t=115292

_______________________________________________
Squeezecenter mailing list
[email protected]
http://lists.slimdevices.com/mailman/listinfo/squeezecenter

Reply via email to