maemo.org - Talk
Page 12 of 130 « First 21011 12 131422 Last »
Show 40 post(s) from this thread on one page

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   [Announce] SMScon (control your device with SMS) (https://talk.maemo.org/showthread.php?t=60729)

byte_76 2010-09-05 17:25
Re: [Announce] SMScon (control your device with SMS)
 
I have read all the pages and would like to compliment digitalvoid on this great effort. This looks like a really nice application and it is good to see that you are welcoming Saturn into your project.
Good luck with the development and thank you for sharing!

knypek3 2010-09-05 17:34
Re: [Announce] SMScon (control your device with SMS)
 
@ Saturn, digitalvoid.
You can add option, that application is protected by password (you must type password to unlock it) and don't create icon in menu, but if you want to open this app you must go to terminal as a root and typ "run smscon" or something. I think it is a better solution, becouse if your n900 be stolen thieft can found this app and switch it off.

I think You understand my english ;p

digitalvoid 2010-09-05 17:46
Re: [Announce] SMScon (control your device with SMS)
 
Quote:
Originally Posted by knypek3 (Post 808002)
@ Saturn, digitalvoid.
You can add option, that application is protected by password (you must type password to unlock it) and don't create icon in menu, but if you want to open this app you must go to terminal as a root and typ "run smscon" or something. I think it is a better solution, becouse if your n900 be stolen thieft can found this app and switch it off.

I think You understand my english ;p
Password protection is needed indeed.

zimon 2010-09-05 19:11
Re: [Announce] SMScon (control your device with SMS)
 
Quote:
Originally Posted by digitalvoid (Post 808008)
Password protection is needed indeed.
Haven't read this thread couple of last days, so maybe this has been asked before also or maybe even applied:

The text messages which are used to control the SMScon remotely should have a password included also. There is unnecessary security risks if there is not.

(Maybe there already is, but haven't yet tried the program, because it is not yet in repositories.)

Saturn 2010-09-05 19:21
Re: [Announce] SMScon (control your device with SMS)
 
Quote:
Originally Posted by zimon (Post 808050)
Haven't read this thread couple of last days, so maybe this has been asked before also or maybe even applied:

The text messages which are used to control the SMScon remotely should have a password included also. There is unnecessary security risks if there is not.

(Maybe there already is, but haven't yet tried the program, because it is not yet in repositories.)
Could you please elaborate more on your thought?

Can't imagine any other protection other than:

- locking it to only one other device, i.e. accept commands only from a predefined device. The problem here is that you limit in some cases also the speed you can start tracking you phone in case it gets lost.

- renaming the commands to words only you know. That's there from the first version and will provide a gui later to make it easier.

zimon 2010-09-05 19:45
Re: [Announce] SMScon (control your device with SMS)
 
Quote:
Originally Posted by Saturn (Post 808057)
Could you please elaborate more on your thought?

Can't imagine any other protection other than:

- locking it to only one other device, i.e. accept commands only from a predefined device. The problem here is that you limit in some cases also the speed you can start tracking you phone in case it gets lost.

- renaming the commands to words only you know. That's there from the first version and will provide a gui later to make it easier.
Well, for example having the user defined password right after the command as a first parameter. If the password is wrong in a SMS, do nothing. If it is right, take it out from the SMS message and continue parsing the SMS normally and do what it asked.

I have a program similar to SMScon in N95 called PhoneGuard.
It can also be controlled remotely by SMS-commands, but they (correctly) require a predefined password.
See page 11 in this:
http://www.symbianguru.com/wp-conten...ser-manual.pdf

knypek3 2010-09-05 20:08
Re: [Announce] SMScon (control your device with SMS)
 
zimon. In phone guard sms'es are hidden. In this app isn't that possibility without hard sms programing (i think so)
You can change the commands like this - camera change to 1 remoteon change to 2 etc.
There is needed only password for open settings smscon and also i think Hidden icon - that might be running only from console.

zimon 2010-09-05 20:48
Re: [Announce] SMScon (control your device with SMS)
 
How about just requiring the first word in the SMS to be a predefined password, or SMScon would not parse the SMS futher nor do what the SMS-command would tell.

For example, I would configure a password "foobar". SMS-messages which would work would be something like:
foobar Remoteon
foobar Location

However, if someone tries to send a command with a wrong password "barfoo", the SMScon would ignore that SMS.

barfoo Remooff
barfoo Location


The security risk without this kind of password is in those countries where there is corruption. Someone working in an GSM operator you are using, can fake phone numbers, redirect SMS-messages and all kind of nasty stuff.

Right now if reply SMS and remote-ssh commands are done to only predefined addresses, it may not be a problem, but for example if remote-ssh-command can have a ssh-server's IP-address as a parameter, it is a huge problem already.

Also think if you had "Siren" command to SMScon. So when there is SMS with a command "Siren", the phone would max out the voice volume and make as much noice as it can. Could be usefull in some cases when the phone is just stolen few seconds or minutes ago or you do not remember where you have put it in some messy room. Someone sending "Siren" just to annoy would now work, as SMScon does not require password.

giecsar 2010-09-05 20:52
Re: [Announce] SMScon (control your device with SMS)
 
Hey digitalvoid, I just stumbled upon this thread. I haven't installed the app yet, but from the looks of it I'd like to say excellent work man!

Saturn 2010-09-05 22:17
Re: [Announce] SMScon (control your device with SMS)
 
Quote:
Originally Posted by zimon (Post 808114)
How about just requiring the first word in the SMS to be a predefined password, or SMScon would not parse the SMS futher nor do what the SMS-command would tell.

For example, I would configure a password "foobar". SMS-messages which would work would be something like:
foobar Remoteon
foobar Location

However, if someone tries to send a command with a wrong password "barfoo", the SMScon would ignore that SMS.

barfoo Remooff
barfoo Location


The security risk without this kind of password is in those countries where there is corruption. Someone working in an GSM operator you are using, can fake phone numbers, redirect SMS-messages and all kind of nasty stuff.

Right now if reply SMS and remote-ssh commands are done to only predefined addresses, it may not be a problem, but for example if remote-ssh-command can have a ssh-server's IP-address as a parameter, it is a huge problem already.

Also think if you had "Siren" command to SMScon. So when there is SMS with a command "Siren", the phone would max out the voice volume and make as much noice as it can. Could be usefull in some cases when the phone is just stolen few seconds or minutes ago or you do not remember where you have put it in some messy room. Someone sending "Siren" just to annoy would now work, as SMScon does not require password.
This functionality is already there.
Just go and rename the commands by prefixing your password.
The only limitation is to not enter spaces.

Cheers.


All times are GMT. The time now is 18:18.
Page 12 of 130 « First 21011 12 131422 Last »
Show 40 post(s) from this thread on one page

vBulletin® Version 3.8.8