Kodi Community Forum

Full Version: How to hide password on ftp
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
FTP Password is visible.
Is it possible to hide

Edit source

http://i55.tinypic.com/295s278.jpg
http://i55.tinypic.com/1ya43q.jpg
Nothing Sad
What plugin
I don't know of any way to hide the password. Whether this is a big problem is debatable. FTP is an inherently insecure protocol because it sends the credentials unencrypted. The usual way round this is to use an FTP account that only has read access, and only to the directories that are safe to see.

JR
jhsrennie Wrote:Whether this is a big problem is debatable. FTP is an inherently insecure protocol because it sends the credentials unencrypted. The usual way round this is to use an FTP account that only has read access, and only to the directories that are safe to see.JR

Xbox can only play movies
If someone has your password you can use ftp client and download movies
It is not good No
Do you plan on having many friends over that will go through your sources.xml?
BigSandy Wrote:Xbox can only play movies
If someone has your password you can use ftp client and download movies
It is not good No

If your FTP server is available through the Internet then this is fundamentally insecure. The solution is to use a VPN to the server or if you have a static IP address use a firewall on the server that restricts access to your home IP address.

JR
That is by design - else how would you possibly know you entered the correct password?

If you don't want folk to be able to see it if they are using your XBMC, then enable Masterlock.
Not problem in sources.xml
My Xbox package VMware ThinApp.
1 file.
Not visible sources.xml
The problem is here http://i55.tinypic.com/1ya43q.jpg
Should be a way to kick it into kiosk mode and disable editing of sources. If nothing else manually edit the skin so that you physically can't get to the panel.
Well, what you store as the source we need to save always I guess. However we should have a general keyring so you would only store the url with user and we lookup the password on connect. We have something like this in place for smb but we would need to have this for all protocols really. I have pushed a keyring implementation to my fork which could be used to implement said feature (and couple it with gnome keyring) then the secrets would be encrypted and such also.
My skin Confluence.
What MyVideo.xml to delete from this window was not visible
New version XBMC 11, FTP password is visible Confused
I have to admit, I've never been a big fan of the fact that we store passwords of any kind in plain text documents.