Mythfilldatabase Using Unencrypted Authentication?

For discussion related to MythTV which doesn't belong in another forum.

Moderator: Forum Moderators

Post Reply
Vaska
Newcomer
Posts: 6
Joined: Fri Sep 01, 2017 11:09 pm
Canada

Mythfilldatabase Using Unencrypted Authentication?

Post by Vaska » Mon Apr 30, 2018 12:30 am

Hi,

I deployed an IDS system on my network and it has identified Mythfilldatabase's traffic as one that is using an outgoing unencrypted form of authentication for SchedulesDirect. Is this the case? Would it be possible to encrypt this traffic using SSL instead?

Timestamp: 2018-04-29T17:34:35.836877-0500
Alert: ET POLICY Outgoing Basic Auth Base64 HTTP Password detected unencrypted
Alert sid: 2006380
Protocol: TCP
Source IP: 192.168.1.2
Destination IP: 54.85.117.227

Thanks,
Vaska

Gary Buhrmaster
Junior
Posts: 52
Joined: Mon Feb 10, 2014 8:19 pm
United States of America

Re: Mythfilldatabase Using Unencrypted Authentication?

Post by Gary Buhrmaster » Sat May 05, 2018 3:49 am

Vaska wrote:
Mon Apr 30, 2018 12:30 am
Would it be possible to encrypt this traffic using SSL instead?
That would likely be the legacy DataDirect protocol (I am not sure if https is even offered there). I would recommend converting to one of the new JSON based SchedulesDirect grabbers and it will use https (and you will get more days of data as a side effect).

Vaska
Newcomer
Posts: 6
Joined: Fri Sep 01, 2017 11:09 pm
Canada

Re: Mythfilldatabase Using Unencrypted Authentication?

Post by Vaska » Thu May 24, 2018 2:16 am

Looks like the new JSON grabber isn't supported by the MythTV team. Despite this, are many people using it? Without any issues?

---From the Notes section of https://www.mythtv.org/wiki/Schedules_Direct---
There is a Schedules Direct grabber available which uses an alternate JSON feed. This grabber is not supported by the MythTV team. It inserts data directly into the MythTV database, bypassing MythTV's ability to sanity check, correct and act upon information at a single point of insertion. We will be unable to assist users who run this grabber if they encounter bugs or broken features as a result.

User avatar
paulh
Developer
Posts: 348
Joined: Thu Feb 06, 2014 6:09 pm
Great Britain

Re: Mythfilldatabase Using Unencrypted Authentication?

Post by paulh » Thu May 24, 2018 6:19 am

It's true we don't support the old JSON grabber that I believe inserts data directly into the database but there are now 2 xmltv grabbers that will just work like any other xmltv complaint grabber.

Gary is to modest to say but one of the grabbers is his and is the one all the developers use :)

Post Reply