LinHES Forums
http://forums.linhes.org/

Security and Mythweb
http://forums.linhes.org/viewtopic.php?f=17&t=16055
Page 1 of 1

Author:  Too Many Secrets [ Mon Aug 06, 2007 9:57 am ]
Post subject:  Security and Mythweb

OK so I setup my router to port-forward to Mythweb and everything is working, but I want to know where my security is at.

I've changed my password and I think it's 'strong'. But I can't setup the ssh to socket for access with my iPhone. (I enjoy scheduling recordings on the fly...)

Is there any info on setting up https? I might have missed something on the wiki. Is there something else I can do to further secure my mythbox?

TIA

Author:  khrusher [ Mon Aug 06, 2007 11:52 am ]
Post subject: 

not sure what you are asking? can you reword a bit?

Are you tring to access mythweb via https? did you port-forward the https port (443 by default)?

ARe you trying to access the box via ssh?

Author:  mihanson [ Mon Aug 06, 2007 1:18 pm ]
Post subject: 

Take a look at this post...

http://www.mysettopbox.tv/phpBB2/viewtopic.php?t=15796

It goes over SSL HTTPS, etc.

Author:  Too Many Secrets [ Mon Aug 06, 2007 6:21 pm ]
Post subject: 

khrusher wrote:
not sure what you are asking? can you reword a bit?

Are you tring to access mythweb via https? did you port-forward the https port (443 by default)?

ARe you trying to access the box via ssh?


I guess what I'm asking is "how secure is Mythweb with just a strong password for protection on port 80? How much better is a https connection then http?"

I mean I'm not running a bank out of my mythbox, but I don't want someone zombie'n it, or deleting everything either.

Author:  Too Many Secrets [ Mon Aug 06, 2007 7:46 pm ]
Post subject: 

mihanson wrote:
Take a look at this post...

http://www.mysettopbox.tv/phpBB2/viewtopic.php?t=15796

It goes over SSL HTTPS, etc.


Thanks, working on this one now.

Author:  alien [ Tue Aug 07, 2007 2:40 am ]
Post subject: 

Too Many Secrets wrote:
I guess what I'm asking is "how secure is Mythweb with just a strong password for protection on port 80? How much better is a https connection then http?"


Actually, two questions here:

How do https and http compare security wise? - Password authentication for http is digest based, so it is relatively hard to crack. Not as hard as https, but probably good enough. More of a concern is that after authentication, someone can sniff the traffic and see everything you do.

How Secure is Mythweb? - Not very. There are many pages that are not password protected.

The post referenced earlier should help with both of these. Don't underestimate what/who is on the "internet".

Page 1 of 1 All times are UTC - 6 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/