2016-05-01, 19:20
If you haven't been around the other forums recently you might have missed the big fight over addons "stealing" other addons illegal content.
The victim addon developers have modified their addons to delete the offending addons completely.
https://www.reddit.com/r/Addons4Kodi/com...mpetitors/
This is pretty scary stuff from a user perspective as Kodi addons have full access to the user's computer with the same access privileges as Kodi is started with.
They have also been obfuscating their code to prevent further "stealing" but it means the user can't see what they are doing to your computer.
A simple bit of python could wipe your hard disk or steal your passwords. This is virus behaviour.
Have Team Kodi got any plans to increase security for third party content? Sandboxing, guest user privileges etc?
I know there is a forthcoming switch to disable third party addon installation.
edit:
I have started a Feature Request to discuss the implementation of Addon Sandboxing (or at least better Kodi user security in general) to prevent identity theft and malicious or unexpected addon behaviour.
http://forum.kodi.tv/showthread.php?tid=272361
The victim addon developers have modified their addons to delete the offending addons completely.
https://www.reddit.com/r/Addons4Kodi/com...mpetitors/
This is pretty scary stuff from a user perspective as Kodi addons have full access to the user's computer with the same access privileges as Kodi is started with.
They have also been obfuscating their code to prevent further "stealing" but it means the user can't see what they are doing to your computer.
A simple bit of python could wipe your hard disk or steal your passwords. This is virus behaviour.
Have Team Kodi got any plans to increase security for third party content? Sandboxing, guest user privileges etc?
I know there is a forthcoming switch to disable third party addon installation.
edit:
I have started a Feature Request to discuss the implementation of Addon Sandboxing (or at least better Kodi user security in general) to prevent identity theft and malicious or unexpected addon behaviour.
http://forum.kodi.tv/showthread.php?tid=272361