Mythfilldatabase Using Unencrypted Authentication?

For discussion related to MythTV which doesn't belong in another forum.

Moderator: Forum Moderators

Post Reply
Vaska
Newcomer
Posts: 5
Joined: Fri Sep 01, 2017 11:09 pm
Canada

Mythfilldatabase Using Unencrypted Authentication?

Post by Vaska » Mon Apr 30, 2018 12:30 am

Hi,

I deployed an IDS system on my network and it has identified Mythfilldatabase's traffic as one that is using an outgoing unencrypted form of authentication for SchedulesDirect. Is this the case? Would it be possible to encrypt this traffic using SSL instead?

Timestamp: 2018-04-29T17:34:35.836877-0500
Alert: ET POLICY Outgoing Basic Auth Base64 HTTP Password detected unencrypted
Alert sid: 2006380
Protocol: TCP
Source IP: 192.168.1.2
Destination IP: 54.85.117.227

Thanks,
Vaska

Gary Buhrmaster
Junior
Posts: 52
Joined: Mon Feb 10, 2014 8:19 pm
United States of America

Re: Mythfilldatabase Using Unencrypted Authentication?

Post by Gary Buhrmaster » Sat May 05, 2018 3:49 am

Vaska wrote:
Mon Apr 30, 2018 12:30 am
Would it be possible to encrypt this traffic using SSL instead?
That would likely be the legacy DataDirect protocol (I am not sure if https is even offered there). I would recommend converting to one of the new JSON based SchedulesDirect grabbers and it will use https (and you will get more days of data as a side effect).

Post Reply