Anyone know?

[MrD]

The login/password for the open telnet session on the MVP extender? heh heh heh

-MrD

[MrApollinax]

Since the image is loaded from the server you could try to decompress the MVP.bin to see if telnet is even part of it's TCP/IP stack. Anyway I tried and tested to see if I can get into it and I figured it out. So to sum up... yes i do.

[MrD]

It is not even that difficult. a simple telnet "ip" brings up a prompt. So it is a matter of guessing the user/password. So if you did it it aint that secure. So it's a security hole.

-MrD

[MrApollinax]

On this I'm going to agree except for the single fact that after looking at the code and the setup I really don't see how much of a security hole it is in terms of personal information. The MVP and your computer communicate of very specific ports and echange very specific information. I'd probably flag this to one of the developers or support to fix this. However any changes you make using the command line interface will be lost upon power cycle since you are going to load the mvp.bin again. The only real way to change how the MVP behaves or what it displays is to edit the MVP.bin which would mean decompressing it and editing it explictly. After poking around in the MVP for a little bit I'm not finding anything really useful from the telnet for an end user. If you were in development the command line interface is a good troubleshooting tool but for everyone else it's probably not going to do much.

[dagar]

Exactly, besides BootP/DHCP isn't the most secure protocol stack either ... so worry not

[TheSuper]

That is cool... it has a Telnet port.
I should of though of that when the documentation showed Linux as the operation system.

Yes it is easy to access but I do not see it as a Security Risk. The MVP sits inside my home network, behind the firewall and is not mapped for direct access from the internet. If it were plugged directly into the internet then yes I could easy be hacked, but then it would be useless as a Media Device.

It looks like it is running a version of Linux called "BusyBox" (www.busybox.net)... never heard of it. But it is very similar to RedHat linux. With more commands available than indicated in the "help" command.

Correct me if I am wrong.
If I read the MediaMVP memory numbers correctly via the shell comands.
* The Operatin System has 2meg of memory to load BusyBox Linux and uses 100% of the available memory.
Filesystem.......1k-blocks.......Used...Available...Use%...Mounted on
/dev/ram0.............1856........1856............0....100%.../

* The working memory appears to be 14meg with 8meg used and 6meg free. If this is correct I am plesantly suprised to see this much memory installed.
...............total.......used.......free.......shared.......buffers
Mem:.......14436......8388.......6048.............0.........1812
Swap:............0...........0............0
Total:......14436......8388.......6048

Hopefully some that that memory is used for caching the video stream to reduce video glitches. By the slight menu delays and occasional stuttering, I though it only had 512k of memory. It is good to see that memory is not lacking.

Now the question is what type of processing power does this MVP contain. Based on the preformance of the MediaMVP I'd guess it has the equivalent of a Pentium2 500Mhz computer or slower.

Since I am a computer nut.. Can the MediaMVP firmware and or Linux BusyBox be upgraded to the latest versions. I check the Hauppauge website and currently there are no firmware updates. But there are many updates for BusyBox. Ya I know.. it isn't broken.. don't fix it.

Mike

[blade]

According to this review:

The heart of MediaMVP is a controller of the STBx25xx series, based on an IBM Corporation PowerPC 405 CPU.

There are also 32 MB allocated in two 7.5ns memory chips by Hynix Semiconductor.

[MrD]

Most things aren't security risks if you what you are doing.

You should see the number of open wireless networks around my house.

Let's say an MVP is on one of those open wireless networks. Let's say I upload my own software on the MVP...

-MrD