[mythtv-users] Tivo/Yahoo deal - How convenient!
Joseph A. Caputo
jcaputo1 at comcast.net
Mon Nov 7 13:43:54 EST 2005
On Monday 07 November 2005 12:37, James C. Dastrup wrote:
> From: mythtv-users-bounces at mythtv.org on behalf of Joseph A. Caputo
> Sent: Mon 11/7/2005 10:25 AM
> To: Discussion about mythtv
> Subject: Re: [mythtv-users] Tivo/Yahoo deal - How convenient!
>
>
>
> I'd say it's pretty likely that the lack of a web interface in
> 'canned'
> DVR appliances has more to do with security/liability issues. It's
> much more secure for the DVR to query a remote web site every hour
> than
> it is to have an open web server running on the DVR appliance. After
> all, the average consumer may not have a firewall, etc, etc...
>
> Imagine the negative publicity and possible lawsuits that would arise
> if
> a default web server configuration on a Tivo or MCE was found to have
> an exploitable security flaw?
>
> At least with MythWeb, the user has to set up & configure their own
> web
> server. It's not much of a hurdle, but at least any security issues
> are entirely the user's own responsibility.
>
> -JAC
>
>
> All these "average consumers" have a public web interface on their
> Linksys, Netgear, D-link routers already. Are Linksys and Netgear
> worried about the security risk? Now, because it's off by default
> on the public side and only advanced users know how to go in and
> turn it on. And if someone does turn it on and get hacked
> because they didn't change the default password, nobody blames
> Linksys. Plus, TiVo already has a network connection, and although
> it's not using port 80, it doesn't mean it's not hackable.
>
> Having a web interface on a home appliance isn't the problem, it's
> the $$. Like William said, they want to track what you're watching
> and have all that control.
Ah, sorry... I was thinking like a normal person; I forgot I'm supposed
to be thinking like a greedy corporation :-)
Still, you have to admit, they could supply a web interface to the
set-top box and *still* harvest your viewing habits remotely by having
the box "phone home" periodically. The security & technical issues
involved serve as additional reasons why a corporation would not want
to invest in developing a direct web interface. Plus, the ROI would be
minimal... after all, how many 'average' consumers have a static IP (or
a dynamic DNS setup) to be able to access their box from the 'net? How
many more are still on dialup or some other not-always-on connection?
There's just no benefit in it for them. The server-side implementation
is cheaper and less risky for them all around.
Of course, the point William made still holds... that's why we love OSS
& MythTV, because we can develop these features without having to worry
about ROI, profit, cost, or any other kind of commercial concern.
-JAC
More information about the mythtv-users
mailing list