Hi,
I deployed an IDS system on my network and it has identified Mythfilldatabase's traffic as one that is using an outgoing unencrypted form of authentication for SchedulesDirect. Is this the case? Would it be possible to encrypt this traffic using SSL instead?
Timestamp: 2018-04-29T17:34:35.836877-0500
Alert: ET POLICY Outgoing Basic Auth Base64 HTTP Password detected unencrypted
Alert sid: 2006380
Protocol: TCP
Source IP: 192.168.1.2
Destination IP: 54.85.117.227
Thanks,
Vaska
Mythfilldatabase Using Unencrypted Authentication?
Moderator: Forum Moderators
-
- Junior
- Posts: 52
- Joined: Mon Feb 10, 2014 8:19 pm
Re: Mythfilldatabase Using Unencrypted Authentication?
That would likely be the legacy DataDirect protocol (I am not sure if https is even offered there). I would recommend converting to one of the new JSON based SchedulesDirect grabbers and it will use https (and you will get more days of data as a side effect).
Re: Mythfilldatabase Using Unencrypted Authentication?
Looks like the new JSON grabber isn't supported by the MythTV team. Despite this, are many people using it? Without any issues?
---From the Notes section of https://www.mythtv.org/wiki/Schedules_Direct---
There is a Schedules Direct grabber available which uses an alternate JSON feed. This grabber is not supported by the MythTV team. It inserts data directly into the MythTV database, bypassing MythTV's ability to sanity check, correct and act upon information at a single point of insertion. We will be unable to assist users who run this grabber if they encounter bugs or broken features as a result.
---From the Notes section of https://www.mythtv.org/wiki/Schedules_Direct---
There is a Schedules Direct grabber available which uses an alternate JSON feed. This grabber is not supported by the MythTV team. It inserts data directly into the MythTV database, bypassing MythTV's ability to sanity check, correct and act upon information at a single point of insertion. We will be unable to assist users who run this grabber if they encounter bugs or broken features as a result.
Re: Mythfilldatabase Using Unencrypted Authentication?
It's true we don't support the old JSON grabber that I believe inserts data directly into the database but there are now 2 xmltv grabbers that will just work like any other xmltv complaint grabber.
Gary is to modest to say but one of the grabbers is his and is the one all the developers use
Gary is to modest to say but one of the grabbers is his and is the one all the developers use