Secure access

Feedback and Suggestions for Beyonwiz can be posted here.

Moderators: Gully, peteru

Post Reply
chris78
Apprentice
Posts: 10
Joined: Sun Oct 11, 2015 12:38

Secure access

Post by chris78 » Mon Oct 26, 2015 22:22

I feel this needs to be implemented ASAP or we are gonna have hundreds of Beyonwiz's hacked!

As it is atm root has no password even! ridculous!

Please please please work on this!

Chris

User avatar
MrQuade
Uber Wizard
Posts: 11842
Joined: Sun Jun 24, 2007 13:40
Location: Perth

Re: Secure access

Post by MrQuade » Mon Oct 26, 2015 22:28

You can change the password if you want to.

Best of all, definitely don't open it up to the Internet without securing it first.
Logitech Harmony Ultimate+Elite RCs
Beyonwiz T2/3/U4/V2, DP-S1 PVRs
Denon AVR-X3400h, LG OLED65C7T TV
QNAP TS-410 NAS, Centos File Server (Hosted under KVM)
Ubiquiti UniFi Managed LAN/WLAN, Draytek Vigor130/Asus RT-AC86U Internet
Pixel 4,5&6, iPad 3 Mobile Devices

chris78
Apprentice
Posts: 10
Joined: Sun Oct 11, 2015 12:38

Re: Secure access

Post by chris78 » Mon Oct 26, 2015 23:15

its the first thing i did, but given its a consumer electronic device i shouldnt have to be telneting in do do that, MOST buyers will not understand anything about such things, so security NEEDS to setup during tbe setup process

Chris

User avatar
MrQuade
Uber Wizard
Posts: 11842
Joined: Sun Jun 24, 2007 13:40
Location: Perth

Re: Secure access

Post by MrQuade » Mon Oct 26, 2015 23:34

It shouldn't be a problem unless someone already has access to your network. And if they do, you are hosed anyway.

Certainly if someone is forwarding http/https ports to their Wiz, then they should be setting a password on the WebIF. But people doing that should have enough knowledge to secure the connection properly.

For everyone else, having no password makes local access to recordings a lot easier.

I was concerned about the situation at first myself. But the T series has been out for almost 2 years now, and I haven't heard of anyone having an exploited machine yet.
Logitech Harmony Ultimate+Elite RCs
Beyonwiz T2/3/U4/V2, DP-S1 PVRs
Denon AVR-X3400h, LG OLED65C7T TV
QNAP TS-410 NAS, Centos File Server (Hosted under KVM)
Ubiquiti UniFi Managed LAN/WLAN, Draytek Vigor130/Asus RT-AC86U Internet
Pixel 4,5&6, iPad 3 Mobile Devices

chris78
Apprentice
Posts: 10
Joined: Sun Oct 11, 2015 12:38

Re: Secure access

Post by chris78 » Tue Oct 27, 2015 03:30

on the t2 at least for https it has NO certificate.. sure u can use the phone app and require authentication but thats http only (plain text) as a web connected machine it should be locked down more imo..

anyways it seems my week old T2 has died :(

User avatar
MrQuade
Uber Wizard
Posts: 11842
Joined: Sun Jun 24, 2007 13:40
Location: Perth

Re: Secure access

Post by MrQuade » Tue Oct 27, 2015 08:22

Check this thread to set of anything applied to you.
viewtopic.php?f=50&t=9661

The T2s came with an underspecced power supply which may be the cause of your issues.
Logitech Harmony Ultimate+Elite RCs
Beyonwiz T2/3/U4/V2, DP-S1 PVRs
Denon AVR-X3400h, LG OLED65C7T TV
QNAP TS-410 NAS, Centos File Server (Hosted under KVM)
Ubiquiti UniFi Managed LAN/WLAN, Draytek Vigor130/Asus RT-AC86U Internet
Pixel 4,5&6, iPad 3 Mobile Devices

chris78
Apprentice
Posts: 10
Joined: Sun Oct 11, 2015 12:38

Re: Secure access

Post by chris78 » Tue Oct 27, 2015 10:02

Yep it's the PS.. DED new ones are on the way apparently

in the mean time I only have one here that's 12v 1.5A can it hurt anything using that??

Chris

Edit: Just realised the original PS is only rated to 1.5A

Post Reply

Return to “Feedback and Suggestions”