17217 - Web interface security issues external access

TVMosaic live and recorded TV products for Desktop/NAS/Raspbery Pi
Post Reply
Montoya
Posts: 180
Joined: Mon Feb 26, 2018 9:07 am

17217 - Web interface security issues external access

Post by Montoya » Fri Feb 08, 2019 10:03 am

With the release of 17217 with web interface, do we get the same security issues we had with DVBLink, that non-tech minded TVMosaic users leave their TVMosaic server wide open to the internet, when they have “on the go”/WAN access enabled ?

Still a lot of DVBLink servers are to be found which are accessible by web interface, be just using a search engine...
Just query "TV guide - DVBLink" in Google and you will be surprised....

I expect the same happening now with this new version of TVMosaic with web interface, so this is very BAD :shock:

So what are the plans to finally incorporate https access with SSL, so DVBLogic takes responsibility of this security issue, without hiding that it is the users responsibility to make TVMosaic access safe :?:

We need options in TVMosaic settings provided by DVBLogic, to make that access safe.
Plex and Emby already provides https access with SSL, so step up DVBLogic, take responsibility and put this also on your roadmap with HIGH priority :idea:

In my humble opinion, the web interface shouldn't be introduced, when secure access is not available or fixed.
DVBLink server 6.0.0 build14499, DVBLink TVSource 6.0.0 build14061, DVBLink for IPTV build 13107
TVMosaic server build 17051, Kodi 18.0 (Git:20190128-d81c34c465), Win10 Pro x64 1809 build17763.262

muppets4
Posts: 28
Joined: Sun Jun 03, 2018 9:12 pm

Re: 17217 - Web interface security issues external access

Post by muppets4 » Fri Feb 08, 2019 10:37 am

I would like to know the answer to this crucial question too. My server is on 24/7, like many of us have.

Oberon
Posts: 1205
Joined: Thu Jan 26, 2017 8:45 am

Re: 17217 - Web interface security issues external access

Post by Oberon » Fri Feb 08, 2019 11:39 am

It is planned in one or another form.

Montoya
Posts: 180
Joined: Mon Feb 26, 2018 9:07 am

Re: 17217 - Web interface security issues external access

Post by Montoya » Fri Feb 08, 2019 12:57 pm

Oberon wrote:
Fri Feb 08, 2019 11:39 am
It is planned in one or another form.
Could you consider making secure acces in TVMosaic just as easy as this guide (Emby https access with SSL) ?
https://blog.awelswynol.co.uk/2018/01/s ... -with-emby

So users could use a free Cloudflare signed SSL certificate in TVMosaic and use all security options available with a free Cloudflare account and set that up in TVMosaic settings page, with domain, which ports to use and with the option to load a pxf certificate and input password for that pxf in TVMosaic settings.

Emby.PNG
Emby.PNG (129.16 KiB) Viewed 168 times
DVBLink server 6.0.0 build14499, DVBLink TVSource 6.0.0 build14061, DVBLink for IPTV build 13107
TVMosaic server build 17051, Kodi 18.0 (Git:20190128-d81c34c465), Win10 Pro x64 1809 build17763.262

Oberon
Posts: 1205
Joined: Thu Jan 26, 2017 8:45 am

Re: 17217 - Web interface security issues external access

Post by Oberon » Fri Feb 08, 2019 1:02 pm

It will be something lie that. But, if you ask me, this guide is far from being easy for an average user.
The way how Plex does it is easy, but it requires the resources, which we do not have.

Post Reply