Possible NEWA streaming security issue.

[JP23]

Hi,

I've just enabled remote streaming, and I'm able to stream from home to my office which is fantastic.

However, I was a little surprised that I was able to open a stream from VLC, and have the channel start playing when not logged into NEWA.

I seem to be able to do this from any machine, without logging in.

Is this the intended behaviour?

[mvallevand]

There are really two web servers, sub's and NEWA There is no security on sub's direct streaming interface, but it does defaults to private IP's only.

Martin

[JP23]

Ok, thanks for that. I guess I should be using a VPN to access my home network anyway.

[UncleJohnsBand]

yep... the player lives in the public directory so that people could share a video with someone without having to build an entire user management system. If it is a bother simply delete the web.config file in the public directory which is what allows items in that directory to be publically accessed.

[UncleJohnsBand]

yep... the player lives in the public directory so that people could share a video with someone without having to build an entire user management system. If it is a bother simply delete the web.config file in the public directory which is what allows items in that directory to be publically accessed.

May be better idea to rename and see what happens.... javascript hangs out there as well and I think some of it supports the login process.