A Matter of Security

[Stevie135s]

Since the Zgemma is connected to the internet, it is subject to the same cyber attack as any PC so here is a small list of things to do to make the box more secure.

Turn off the FTP server. Remove the settings to auto start and set to stop, until it is actually needed.
Before doing the same with the Telnet settings connect using a pc and change the root password using the passwd command.
Set the OpenWebif to off until it is actually needed.
As well as making your box more secure, it will free up some of the resources and should make the Zgemma run smoother.

Comments welcome.:)

 

[chenks]

the box isn't public facing though, so not sure your "tips" are really that justified.
yes, the box is connected to the internet, but it's not directly connected to the internet, it connects via your router, which is the only public facing device (unless you've opened up ports).

 

[manoflard]

Use a decent router with a decent firewall. Not whatever crud your ISP sent out (either it's one that was £5 in volume or you're paying over the odds for the 'free' router in your monthly fee)

Don't open any ports but use a VPN for external access.

The only thing I agree about is changing the password. Never ever leave anything default.

 

[tonyclifton]

it is subject to the same cyber attack as any PC

It really isn't, it is Linux based for starters.

If you don't make the zGemma public facing you'll be fine. No-one will be able to get in and do any damage unless you've gone into your router and forwarded ports to make it accessible - the likes of port 8001 for streaming for example. It is ALWAYS advisable to change the root password but I'd argue the zGemma is not 'internet facing' or IoT in the same way a webcam is for example.

Also, ISP routers get a lot of hammering from the public, but not all are bad. For example, BT's latest Hub is getting high reviews from a lot of respected PC mags, it just depends on what you need. For the average end user, a standard ISP router is fine. Many ports are blocked by default and there's a decent level of protection unless you go in there and start messing around.

Kind Regards, TC.

 

[Stevie135s]

So it seems your box is fairly safe from internet hackers. Maybe not so safe from anyone using the same router with nothing better to do than log into your zgemma H2s, that took an age to set up just how you like it, and mess it up.

 

[djgarf]

My wife wouldn't have a clue how to log into the router let alone access the zgemma on the network (and I intend to keep it that way) lol
I would be very impressed if my kids accessed it seeing as one is 3 and the other is 16 months
Anyone stupid enough to open ports on their router to access the box outside of there network without knowing how to properly secure it gets what they deserve

 

[tonyclifton]

So it seems your box is fairly safe from internet hackers. Maybe not so safe from anyone using the same router with nothing better to do than log into your zgemma H2s, that took an age to set up just how you like it, and mess it up.

I don't understand your logic - my family use the router - wouldn't it be easier for them to just pick up the zGemma remote control and mess it up that way? I'm legitimately the only one in the house that knows how to get to the router, let alone log into it...


Sent from my iPhone using Tapatalk

 

[manoflard]

Also, ISP routers get a lot of hammering from the public, but not all are bad. For example, BT's latest Hub is getting high reviews from a lot of respected PC mags, ...

Kind Regards, TC.

Cynical hat on: good reviews from magazines in which said ISPs pay to advertise regularly with full page ads - no conflict at all ever between the editorial & advertising departments, no siree.

 

[tonyclifton]

Also, ISP routers get a lot of hammering from the public, but not all are bad. For example, BT's latest Hub is getting high reviews from a lot of respected PC mags, ...

Kind Regards, TC.

Cynical hat on: good reviews from magazines in which said ISPs pay to advertise regularly with full page ads - no conflict at all ever between the editorial & advertising departments, no siree.

I agree to an extent manoflard but as I'm sure you'll relate to, I get asked to look at friends and family's IT issues all the time - the offering from most is basic but they aren't too bad. From personal experience the BT Hub ain't too shabby. The Sky hub could do without being limited to 100mbs Ethernet and has a mid-range WiFi. I do struggle with the TalkTalk offerings as their front end is quite cumbersome.

I do accept your point however,

TC.


Sent from my iPhone using Tapatalk