Talk:LaFonera Software Heartbeat

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 21:18, 7 March 2007 (edit)
Wildblue (Talk | contribs)
m
← Previous diff
Revision as of 17:16, 8 March 2007 (edit) (undo)
Wildblue (Talk | contribs)

Next diff →
Line 34: Line 34:
[[User:wildblue|wildblue]] 2007-03-07 [[User:wildblue|wildblue]] 2007-03-07
 +
 +
 +== Final version ==
 +I think you described the situation in the right way.
 +The changes you made, krikkit, are ok.
 +
 +[[User:wildblue|wildblue]] 2007-03-08

Revision as of 17:16, 8 March 2007

The first method shown is extremely dangerous. If somebody could make the router think that he (the attacker) is www.wildblue.de, he is able to do *anything* as root! I recommend not to choose that approach. --Mercurix 13:54, 6 Feb 2007 (CET)


added your warning to the main page --Krikkit 20:25, 6 Feb 2007 (CET) removed your warning from the main page (see below) --wildblue 2007-03-07

Using internal memory for heartbeat files ?

Is it possible, for better security, to save the 3 files under /tmp/... and not using wget ? Microbug , 28 Feb 2007


the whole story about my modification

I wanna tell you something about security. I gave some people with no or little knowledge about ftp/webserver skills the possiblilty to activate their device as easy as possible. Also not everybody has its own ftp/webserver nor their desktop computers running 24/7. You have no possibility to store any document on your fonera. If you reboot the device, all settings are gone.

So i made some modifications to the original script and made it running this way. If you feel sad about running someone elses code you cant use any other code, too. But who knows what any script you just downloaded will do.

I know that some people with some more IT-skills will write their own script or will test every line of code from a script just downloaded. But take a look at the forum and see what kind of users work with dd-wrt. Not everybody is mr. super-it-skill.

Also i think that everybody's looking at this page will read the whole site. And thus who are scared of some paranoic conspiration would use the second way to activate the fonera. The "security warning" is also written on this site, therefore i removed it.

?? DO YOU TRUST WWW.DD-WRT.COM ?? The same thing you discribed can also happen to the dd-wrt site.


You can allways take a look at the files that were downloaded and if you run them you will see the version of the file. I collect all versions on my webpage, so you can test them for issues. My mailadress is also published so you can drop a message if you have some updates or modifications.

I think in the near future this script will be included in the source, maybe.

wildblue 2007-03-07


Final version

I think you described the situation in the right way. The changes you made, krikkit, are ok.

wildblue 2007-03-08