Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-08-30 Thread Michael Herger
1. What plugin is affected? (This should really have been included in the mail, if it's legit.) The Picture Gallery plugin is known to have been abused. I'm not aware of others. But as I said: an attacker could install any kind of plugin. His own, formatting your disk, installing malware, what

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-08-30 Thread glen66
Hi All This happened to myself 2 days ago for the first time. Realised why and is now sorted, however I received the email below today. I have two questions: 1. What plugin is affected? (This should really have been included in the mail, if it's legit.) 2. Why and how did I receive this mail sh

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-08-30 Thread mark f
Sorry for coming to the party so late; but, ... I use a wired Raspberry PI (2B) as a VPN server for my LMS. My internet connection is limited to a max of 2Mb/s (upstream) so a superfast VPN machine is not required. For me, the Pi 2B + 8GB micro SD + case + 5V/2A power supply + ethernet cable <

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-01-21 Thread jstraw
Mnyb wrote: > Or if your router supports third party firmware you can reflash it with > new software ? Yes, but I'm hesitant to take myself off the path of manufacturer's firmware updates. jstraw's Profile: http://forums.

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-01-21 Thread Mnyb
jstraw wrote: > Alas, in my Netgear r6300 there's no VPN server. I'm going to have to > look into a new router. Or if your router supports third party firmware you can reflash it with new software ? Main hifi: Touch + CIA PS

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-01-21 Thread jstraw
Mnyb wrote: > In my router from linksys it's pretty much self explanatory. > > Create a couple users for your needs , with passwords . Create the > config file or what's it called . > > And likewise the iPhone app . > > You mail the config file to yourself click on the file and the ovpn app >

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-01-21 Thread Mnyb
In my router from linksys it's pretty much self explanatory. Create a couple users for your needs , with passwords . Create the config file or what's it called . And likewise the iPhone app . You mail the config file to yourself click on the file and the ovpn app helps you .

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-01-21 Thread jstraw
drmatt wrote: > Let me Google that for you... > > https://forum.xda-developers.com/showthread.php?t=1353528 > > http://www.techrepublic.com/blog/smartphones/securely-connect-your-android-smartphone-via-vpn/ > > http://www.howtogeek.com/135036/how-to-connect-to-a-vpn-on-android/ Google? Never

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-01-21 Thread drmatt
Google says https://forum.xda-developers.com/showthread.php?t=1353528 -- Hardware: 3x Touch, 1x Radio, 2x Receivers, 1 HP Microserver NAS with Debian+LMS 7.9.0 Music: ~1300 CDs, as 450 GB of 16/44k FLACs. No less than 3x 24/44k albums..

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-01-21 Thread jstraw
Mnyb wrote: > You can install open vpn on the phone and many routers supports open > vpn. > > You the start the open vpn app on the phone and then the player , I use > iPeng that way . > > There are also open vpn desktop clients A tutorial...a tutorial...my kingdom for a tutorial! --

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-01-21 Thread Mnyb
You can install open vpn on the phone and many routers supports open vpn. You the start the open vpn app on the phone and then the player , I use iPeng that way . There are also open vpn desktop clients Main hifi: Touch + CI

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2017-01-21 Thread jstraw
I have no experience with VPNs. If I'm using a router with a VPN server, will I be able to access my library with mobile devices (both phone and tablet)? With or without some sort of authentication? How about with Squeezeplay installed on my desktop computer at work?

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-10-24 Thread stereoptic
Mnyb wrote: > Afiak the security in lms is not very good easilly broken by people with > programming skills and i dont think it even applies on every part of the > protocoll the VPN is your security, > > The LMS password can be used at home for purposes like protecting your > settings from being

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-10-22 Thread drmatt
Mnyb wrote: > Afiak the security in lms is not very good easilly broken by people with > programming skills and i dont think it even applies on every part of the > protocoll the VPN is your security, > > The LMS password can be used at home for purposes like protecting your > settings from being

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-10-21 Thread Mnyb
Afiak the security in lms is not very good easilly broken by people with programming skills and i dont think it even applies on every part of the protocoll the VPN is your security, The LMS password can be used at home for purposes like protecting your settings from being messed up by your kids b

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-10-21 Thread stereoptic
I am now using a VPN server to access my Squeezebox environment remotely. I have a question regarding the user name and password in situations where the ports are left open (and a VPN connection is _not_ used remotely). For the incidents related in this thread, where the ports were left open, wa

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-10-06 Thread maggior
Chalk me up to another instance. The are getting cute about thisrather than playing music from my local server, they played some hardcore deathmetal song from an internet radio station at full volume. Scared the hell out of my son because it sounded like a barrage!! As others said, it was l

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-24 Thread docterry
This happened to me too. Except it was at 04:00. When I would shut down one audio source, another player (my phone) would take over. When I disconnected iPeng on my phone, the Radio would fire up again. My wife was convinced the players were possessed because they would play sound clips from my l

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-20 Thread stereoptic
mherger wrote: > > What steps should be taken once the system is compromised like this? > > Obviously, close the port to the outside internet, change the LMS > > password. What can be analyzed in the logs? Change User login > > passwords? > > I don't think there's anything interesting being log

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-19 Thread Michael Herger
What steps should be taken once the system is compromised like this? Obviously, close the port to the outside internet, change the LMS password. What can be analyzed in the logs? Change User login passwords? I don't think there's anything interesting being logged by default, as those accesses

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-19 Thread stereoptic
What steps should be taken once the system is compromised like this? Obviously, close the port to the outside internet, change the LMS password. What can be analyzed in the logs? Change User login passwords? stereoptic's

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-19 Thread Mnyb
Wictorsson wrote: > Interesting! There is no motive other than mischief I guess? But at > least we have a probable hypothesis. > Thanks all for your thoughts on this! There are download links in LMS web-UI . There is a function to dl audio files . Thats like selling sand to arabia , but maybe t

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-19 Thread Wictorsson
mherger wrote: > > Yes, I publish it at port 9000. I guess I thought it used some kind > of > > authentication... > > I might have to reconsider this... > > Yep. I seriously doubt this happening to two persons around the same > time was a coincidence. It's like putting the remote controls for y

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-19 Thread Michael Herger
Yes, I publish it at port 9000. I guess I thought it used some kind of authentication... I might have to reconsider this... Yep. I seriously doubt this happening to two persons around the same time was a coincidence. It's like putting the remote controls for your TV set or radio clock on the d

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-19 Thread Wictorsson
mherger wrote: > > Same thing happend to me, strangely at exactly the same time that > > @Wictorsson described. > > Same track? Was it a local track or from some music service? Are you > running off mysb or your own LMS? > > > So I guess it has nothing to do with "someone" remotely switching t

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-19 Thread Squeezemenicely
This is the activity shown in the spotify protocol handler: 12:12:32.561840] main:619 req: stream.flc res: spotify:track:4mbVBOnlDb9pNl997oyyXR par: player=00%3A04%3A20%3A1f%3A26%3A75&start=0&sync=1&id=2 prot: SPOTSTREAM/1.0 auth: (null) [12:12:32.564253] main:702 relogging in as user: XXX [1

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-19 Thread Michael Herger
Same thing happend to me, strangely at exactly the same time that @Wictorsson described. Same track? Was it a local track or from some music service? Are you running off mysb or your own LMS? So I guess it has nothing to do with "someone" remotely switching the boxes on, at the same time -

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-19 Thread Squeezemenicely
Same thing happend to me, strangely at exactly the same time that @Wictorsson described. So I guess it has nothing to do with "someone" remotely switching the boxes on, at the same time - the same effect, that seems highly improbable. Look here: http://forums.slimdevices.com/showthread.php?10

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-19 Thread Mnyb
Wictorsson wrote: > I do use iPeng remotely, to my iPhone if that is what you mean? > If that is a problem, is it possible to secure it better? If you portforward to the outside of your local network the only thing we need is your external IP to start controlling your players ;) You can use a V

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-18 Thread Wictorsson
Mnyb wrote: > Do you port forward your LMS server to the outside ? ( don't do that ) I do use iPeng remotely, to my iPhone if that is what you mean? If that is a problem, is it possible to secure it better? 2xBoom, 2xClassic, 2xRadio, iPhone, iPad -

Re: [SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-18 Thread Mnyb
Do you port forward your LMS server to the outside ? ( don't do that ) Main hifi: Touch + CIA PS +MeridianG68J MeridianHD621 MeridianG98DH 2 x MeridianDSP5200 MeridianDSP5200HC 2 xMeridianDSP3100 +Rel Stadium 3 sub. Bedroom/Of

[SlimDevices: SqueezeCenter] All Squeezeboxes wakes up family at 00:23 at full volume!

2016-09-18 Thread Wictorsson
Hi! Last night, all family was woken up in shock at 00:23 by Adeles Rolling in the deep at full volume. Might sound a little fun but I assure you, it was not. :-/ I pressed the pause button on my nearest Boom player but after two seconds, it started again, from the beginning at full volume. I sta