Thread: have stolen nokia "call home" with its ip address
View Single Post
Alan_Peery is offline Alan_Peery
2010-03-01 , 13:47
Posts: 247 | Thanked: 91 times | Joined on Jan 2008 @ London/M4 Corridor
#69
Originally Posted by CrashandDie View Post
I think you're all looking at it the wrong way.
Ahem, I was saying that scp without additional configuration was a bad idea for security reasons--something I think you (CrashandDir) and I agree on.

Originally Posted by CrashandDie View Post
No need for SCP, FTP anonymous is enough. Just configure ...
That's more work than people should have to do, and if we want anti-theft software to be reasonably available to people we can't
  1. depend on them having a Unix box at home up 7x24 and
  2. being able to follow the steps you have given.


Originally Posted by CrashandDie View Post
The problem is that a lot of shared wireless connections don't allow SSH or FTP access. In that case, i would recommend using wget to post the data to a webpage.
Exactly, WebDAV has the same advantage.


Originally Posted by CrashandDie View Post
Even if you go with the SCP route, this isn't a security issue. You can create a dedicated user account who can only go to /home/spy and doesn't have execution rights to anything, and also has disk quotas, etc. Even better, set the shell to /sbin/nologin.
Do we really think that all N900 users have the skill and the time to do this? Do we think they all have a spare 7x24 Unix box? Even both were true, it certainly won't be true for Maemo 6 -- and wouldn't it be nice to have a future proof solution?

We want a clean client app that runs on the N900, with a minimal set of external dependencies. At first glance, the Adonea app (http://talk.maemo.org/showpost.php?p...9&postcount=30) looked like a good model. Since there appears to be a bit of problem around the supporting OpenDHT storage (http://adeona.cs.washington.edu/faq.html, at the top), it takes a bit more thought. I'm guessing that running this OpenDHT storage doesn't take a lot of resources, but have not investigated.
__________________
--
If you don't know who the Eletronic Frontier
Foundation are, you should. Check out
http://www.eff.org.