[mythtv-users] Tivo/Yahoo deal - How convenient!

[James C. Dastrup]

All these "average consumers" have a public web interface on their 
Linksys, Netgear, D-link  routers already. Are Linksys and Netgear
worried about the security risk? Now, because it's off by default
on the public side and only advanced users know how to go in and
turn it on. And if someone does turn it on and get hacked
because they didn't change the default password, nobody blames
Linksys. Plus, TiVo already has a network connection, and although
it's not using port 80, it doesn't mean it's not hackable.
 
Having a web interface on a home appliance isn't the problem, it's
the $$. Like William said, they want to track what you're watching
and have all that control.

________________________________

From: mythtv-users-bounces at mythtv.org on behalf of Joseph A. Caputo
Sent: Mon 11/7/2005 10:25 AM
To: Discussion about mythtv
Subject: Re: [mythtv-users] Tivo/Yahoo deal - How convenient!



On Monday 07 November 2005 11:53, James C. Dastrup wrote:
> Although the Yahoo portal for your Tivo is new, this feature, with the
> minimum 1-hour in advance, 
> has been around for a while at tivo.com.  Slowly, the canned and
> subscription DVR's are 
> listening to what people really want.  But I don't understand why they
> won't just put a simple 
> web interface on their own devices.
> MCE has a similar feature - logon to msn.com and schedule a recording,
> but no remote access 
> directly to your MCE from a browser.
> Reasons like this are why we all love our MythTV.

I'd say it's pretty likely that the lack of a web interface in 'canned'
DVR appliances has more to do with security/liability issues.  It's
much more secure for the DVR to query a remote web site every hour than
it is to have an open web server running on the DVR appliance.  After
all, the average consumer may not have a firewall, etc, etc...

Imagine the negative publicity and possible lawsuits that would arise if
a default web server configuration on a Tivo or MCE was found to have
an exploitable security flaw?

At least with MythWeb, the user has to set up & configure their own web
server.  It's not much of a hurdle, but at least any security issues
are entirely the user's own responsibility.

-JAC
_______________________________________________
mythtv-users mailing list
mythtv-users at mythtv.org
http://mythtv.org/cgi-bin/mailman/listinfo/mythtv-users


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 5993 bytes
Desc: not available
Url : http://mythtv.org/pipermail/mythtv-users/attachments/20051107/19d939bc/attachment.bin