Thread: Web Tracking/Anti theft/loss Tool
View Single Post
benh_n900 is offline benh_n900
2010-09-01 , 18:50
Posts: 82 | Thanked: 44 times | Joined on Feb 2010
#39
Originally Posted by dannym View Post
Hi,
The only variable in "trackerconstants.py" that seems to warrant a configuration option is "c_password". What does that do? Having the login password *stored on the stolen device* with which you can log in to the tracking site and maybe delete the account or whatever seems like a really bad idea. Are there some safeguards against this?
Don't worry, that password is separate from the account password and used to authenticate just that device connecting to the service.

Originally Posted by dannym View Post
The ssh server's host name and account in "ssh.sh" warrants configuration, yes. Does that assume public-key authentication? If so, should that be set up automatically as well? Or does it work in some completely different way?
It does assume public-key authentication and it requires the user to have a server to connect to in the first place. I am looking at the possibilities of setting up a service for reverse ssh as I know not everyone has servers, but I am not worried about that for now.

Originally Posted by dannym View Post
Well, doing the actual configuration screen is easy, but what should be configured and how is the question :-)
Well I think there are four things:

1. c_password, which is the device specific password as defined in your account

2. a new constant, c_reverse_geocode_us which can be 0 or 1, which turns on and off geocoding for the US

3. c_debug (0 or 1 for off or on)

4. For reverse ssh (which could be completely separate) it could either be;

no configuration screen
the full string
or username, server IP (or domain) and port fields which generate the command and directly create or replace ssh.sh

For the public key I guess it would be nice to have an area in the gui to paste it and check/update the file/user permissions

I think that covers it!

Ben
__________________
http://www.whereismydevice.com - Recover your device if lost/stolen

http://jqueryinreallife.blogspot.com - Comedy jQuery blog