onkyo

Onkyo receivers, very insecure networked devices

I've been working now awhile on my Onkyo Qt ISCP library and there is one not so funny thing about the protocol. There is no authentication or authorization whatsoever. So basically if you happen to be on the same network as a networked Onkyo you can do whatever you like.

From the not-too-bad: Change radio channel, switch input
To the not-so-nice: Turn the volume up as high as it goes, stream something nasty

Even the device setup web interface is open to everyone.

Submitted version 1.0.3 of Onki for BB10 for QA just now. New features in this release include improved support for digital tuners, quick access to tuner presets. more keypad features, keyboard shortcuts to zones and keypad view. The digital tuner features are unfortunately not tested as DAB is not available here (and devices we have access to don't support it anyway). The update should be available soon in BlackBerry World.

Tags: 

Onki 0.0.4 is out!

Onki, my Onkyo remote app for Jolla, got a new release today. Available now in OpenRepos and in Jolla store as soon as QA is done with it.

Getting this one out took a bit more than expected, buying a house and other little projects can do wonders to development time...

Anyway, this version comes now with some nice new features. You can control network and USB playback sources, also track information with artwork is displayed. There are now more cover actions, some are input specific and for inputs with no controls the cover actions handle volume up/down.