Tagged With "Upnp"

Topic

Vulnerabilities in uPNP

Richard Lord ·
"January 2013 the security company Rapid7 in Boston reported [24]  on a six-month research programme. A team scanned for signals from UPnP-enabled devices announcing their availability for internet connection. Some 6900 network-aware products from 1500 companies at 81 million IP-addresses responded to their requests. 80% of the devices are home routers, others include printers, webcams and surveillance cameras. Using the UPnP-protocol, many of those devices can be accessed and/or...
Topic

WAV or FLAC Lossless? And tags etc etc....

-goat- ·
Hi all. I think I remember some talk on here a while back about dbPoweramp now supporting lossless FLAC. FLAC is always lossless though is it not? My understanding is as follows: FLAC is lossless. It's a compression which is reversed when the FLAC...
Topic

UPnP server with Last.fm support?

Patu ·
I just pulled the trigger on pre-loved Naim NDX and am about to move to the world of streaming. For now, I've been using foobar2000 as my music player and media library on PC. It supports last.fm scrobbling through plugin. Now is there a way to get UPnP server (any of them?) to scrobble to last.fm? I will still use my PC as server so maybe some UPnP server would work with the last.fm desktop app or something? I'd seriously want to make this work. I've been scrobbling since 2005 and it's...
Topic

UPnP source not detected

PSH ·
I am running Logitech Media Server (aka Squeezebox) on a Raspberry Pi.  Apart from the proprietary protocols it also provides UPnP access. Does anyone know why it can be accessed / controlled using the Naim app but doesn't appear as a UPnP source on the front panel of a NaimUniti? Thanks 
Topic

Which upnp server?

jc_x_c ·
I recently bought a Mu-So, generally very pleased with this.   All my music lives on a server Macintosh which is remote from the Mu-So and while the combination of iTunes and Apple's Remote application does work it's cumbersome, so I want to use...
Topic

Which applications do you mostly use to control your UPnP renderer?

nbpf ·
The idea of this thread is to collect some feedback on applications that can act as control point for UPnP (DLNA, OpenHome, etc.) renderers. I am particularly interested in applications which are compatible with different renderers, are well supported and documented and have been ported at least to iOS and Android.
Reply

Re: ND5 XS Qnap Twonky streaming problem

Lebowski ·
I had this frequent rebuild of the Twonky database issue when I upgraded my TS109II to 7.0.9. I ran out of patience trying to debug it (auto rescan was disabled) and eventually rolled back to 6.0.39 which is fine. NDX running 3.16 btw. I can only suggest that you upload 6.0.39 as a QPKG and run that in preference to the built in version. I also cycled the NDX on and off and cleared the uPNP cache in n-Stream to reset the whole system. Worth checking that you dont have both the ND5 and n-...
Reply

Re: ND5 XS Qnap Twonky streaming problem

SteveMachine ·
Thanks so much for that, just trying 6.0.39 now, I didnt even know that I could upgrade Twonky anymore. I see that Naim still arent in the list of media receivers, how about for version 7? Anyway fingers crossed that one of the things you suggest work, or else I guess its time to upgrade my Nas, Steve
Reply

Re: Vulnerabilities in uPNP

PinkHamster ·
I would expect that the responding devices were parts of unsecured home networks. If you want to spare your neighbours the hassle of having to register their own internet access, this is the way to go.
Reply

Re: Vulnerabilities in uPNP

Guido Fawkes ·
I used to use UPnP - what a relief I don't use it any longer .... I'm now using a Stello U3 to create a U SB P erfect n aim P layer Those interested can read the White Paper by clicking here . There is also a tool HERE that will tell you if you are vulnerable (it is free, nobody is trying to make money out of this). It is only a matter of time before home networks are compromised, not by this, but basic flaws in the security technology inherent in home hubs etc., As PH says some people use...
Reply

Re: Vulnerabilities in uPNP

Guido Fawkes ·
Re: Vulnerabilities in uPNP
Reply

Re: Vulnerabilities in uPNP

Guido Fawkes ·
Please note ... this vulnerability has NOTHING to do with Naim kit .... it is down to your Internet router and vendors including Cisco’s Linksys, Belkin, D-Link, and Netgear produce routers that make themselves and their connected devices susceptible to software bugs. At least 23 million types of connectible devices could be hijacked and permanently disabled, while others would face temporary incapacitation. The vendors are already working on a fix.
Reply

Re: Vulnerabilities in uPNP

Richard Lord ·
Originally Posted by Guido Fawkes: Please note ... this vulnerability has NOTHING to do with Naim kit .... it is down to your Internet router and vendors including Cisco’s Linksys, Belkin, D-Link, and Netgear produce routers that make themselves and their connected devices susceptible to software bugs. At least 23 million types of connectible devices could be hijacked and permanently disabled, while others would face temporary incapacitation. The vendors are already working on a fix. I knew...
Reply

Re: Vulnerabilities in uPNP

Hook ·
Richard and Guido - Thanks for posting this article -- it is a great reminder to all of us who use home routers to access the Internet that care must be taken at setup time. IMO, it is outrageous that any router manufacturer would ship their product with UPnP enabled through an external port. Everyone who owns a router should disable this setting immediately. My Cisco/Linksys E4200 arrived with UPnP enabled as well, and I turned it off at install time. But TBH, I was not even thinking of...
Reply

Re: Vulnerabilities in uPNP

Richard Lord ·
That is such good sense. Thank you, Hook. Richard
Reply

Re: Vulnerabilities in uPNP

Guido Fawkes ·
Agree totally with Hook. For informstion neither Juniper nor a BT Home Hub 3 seem to have these services open by default and neither can host UPnP daemons. So you should be OK. UPnP was not written with security in mind as it doesn't seem to authenticate. Sonos seems far more secure to me. The main problem here is external access to a home server, which you may want to do. I think it is easier to use an iPod, but that's me that is. I do not want anybody to access my NAS from outside my home...
Reply

Re: Vulnerabilities in uPNP

BigH47 ·
I see no mention of uPNP on BT HH3 of this even being an option, does it have another name? Is this a Windows only problem, as the scanny link earlier is for MS not OSX
Reply

Re: Vulnerabilities in uPNP

Guido Fawkes ·
No it is not there ... Don't worry if you have HH3 with its firewall switched on and haven't fiddled with it. i tested one earlier today and it was fine. It is a Windows and possibly NAS problem .. It is only a Mac problem if you have installed a UPnP server like Playback and enabled UPnP access from the Internet through your HH3. Those affected are ones like Hook suggested who have a router like the Linksys which comes with insecure defaults. I advise reading the cover of the first...
Reply

Re: Vulnerabilities in uPNP

Guido Fawkes ·
Howard Please CLICK HERE The first option does an external scan, I expect it to say you're OK. "Congratulations! Your router did not respond to a UPnP discovery request" Guy
Reply

Re: Vulnerabilities in uPNP

BigH47 ·
"Congratulations! my router did not respond to a UPnP discovery request"
Reply

Re: Vulnerabilities in uPNP

Simon-in-Suffolk ·
Indeed UPnP was designed as far as I can tell for internal domestic LANs, it apears to have little if any security as it is not relevant for it and so I would not expose it externally using a DMZ or port mapping on your LAN unless YOU KNOW what you are doing - if not dont. Most consumer internet routers close most things down (and Guy has identified two) from the outside and you have to enable the DMZ or port mapping function - which I guess for anyone who doesn't understand this would not...
Reply

Re: Vulnerabilities in uPNP

Bart ·
Many thanks to all who contributed to this thread. You've kept it very informative and factual as to where the "risk" originates and resides, and what it does NOT entail. The latter is equally important. Cheers!
Reply

Re: Vulnerabilities in uPNP

Jan-Erik Nordoen ·
Tre bona rimarko Phil.
Reply

Re: Vulnerabilities in uPNP

Phil Harris ·
Originally Posted by Jan-Erik Nordoen: Tre bona rimarko Phil. There had to be one! :hehe:
Reply

Re: Vulnerabilities in uPNP

pcstockton ·
Agree wholeheartedly with Phil on the "scare mongering" statement. This is a router issue, NOT a UPNP issue. -p
Reply

Re: Vulnerabilities in uPNP

Peter_RN ·
For anyone wanting to test their network further, I have always used this site to test for general vulnerabilities setting up a router, firewall etc. It will check the state of the first 1056 ports on a router for Open, Closed or Stealth conditions; you should select the ‘All Service Ports’ button. You will need to click though a page or two to start the test and hope for/expect a sea of green for most secure result. Advice is usually offered should you have vulnerable ports. Scroll down the...
Reply

Re: Vulnerabilities in uPNP

Richard Lord ·
Thanks to all. I feel much more secure after trying Peter's test. There is much more to this networking than I will ever be able to master. So I am especially grateful to Guido, Hook and of course Peter for their help. i have recently changed over to BT with their Home Hub. It was very easy to install, just a few mouse clicks and I was up and running. I just wish my HP wireless printer was as easy. I have given up on it and have had to connect via a USB lead. Richard
Reply

Re: Vulnerabilities in uPNP

Bart ·
Originally Posted by Richard Lord: Thanks to all. I feel much more secure after trying Peter's test. There is much more to this networking than I will ever be able to master. So I am especially grateful to Guido, Hook and of course Peter for their help. i have recently changed over to BT with their Home Hub. It was very easy to install, just a few mouse clicks and I was up and running. I just wish my HP wireless printer was as easy. I have given up on it and have had to connect via a USB...
Reply

Re: Vulnerabilities in uPNP

spartacus ·
Thanks Peter for reminding me of GRC and Shields Up!!! I have used it a lot in the past when I had Windows PC's. I also set up my Mac and firewalls some years ago so I decided to use GRC to check if I missed anything. Phew... luckily nothing missed and my computers and router does not respond to anything unsolicited. It's amazing how many so called "Stealth mode" connection attempts I see in my system logs. Thanks and stay safe...
Reply

Re: Vulnerabilities in uPNP

Phil Harris ·
Originally Posted by Richard Lord: The above is very clear, it suggests it is a vulnerability which may affect any uPNP-enabled device (not just routers) which are available for Internet connection. This may or may not affect Naim. My thoughts are it is simply one more reason to avoid uPNP. Now that Naim are about to embrace Asynchronous USB, I will certainly (subject to an audition) be embracing it as well. Richard Hi Richard, This research was brought to my attention some time ago and I...
Reply

Re: Foobar2000 Configuration with SuperUniti

thb ·
Hi Adam, first time I read à post on this subject, you are still using this configuration? Thiers
Reply

Re: Foobar2000 Configuration with SuperUniti

AdamSU ·
No I am no longer attempting to use Foobar to control the SuperUniti, though remain on the lookout for a reliable alternative solution to n-Stream.
Reply

Re: Streaming only works in UPnP Compatibility Mode

Scooot ·
Hi, I can't really give you the help you need to fix your problem but it may be squeeze server. I used a squeezebox touch with squeeze server running on my qnap with out any problems at all.when I got a nd5xs on home dem I phoned my qnap dealer as I had read somewhere that squeeze server was now upnp.i was told that It won't work very well and may be unreliable.they talked me through how to enable twonky wich according to them was a better match for the naim streamers. It may not be the case...
Reply

Re: Streaming only works in UPnP Compatibility Mode

garyi ·
What is a HP NAS servicer? Do you mean proliant? I ran windows on a proliant and it was not a good experience, I moved to OMV, which is a very good experience.
Reply

Re: Streaming only works in UPnP Compatibility Mode

SteveSticks ·
Hi, Thanks for your replies, I forget the HP model, but it is device that has four drive bays, been used for streaming Squeezebox with no issue for 2 years. I have seen other posts with "similar posts" but no solutions. One that saw one suggested that you need a Naim server to get the other features workng. I have email Naim support for a view also. If anyone knows for sure please reply. Thanks.
Reply

Re: Foobar2000 Configuration with SuperUniti

PinkHamster ·
1.2.5 is a beta version as of yet. I am using foobar but not as upnp server and/or controller. So just guessing what might not be perfect.
Reply

Re: Which upnp server?

adca ·
As was said before, asset is reliable and the setup is straightforward. If you have a large collection of classical music, you should have a close look at minimserver which is as reliable as asset, but much more flexible. adca
Reply

Re: Which upnp server?

Bart ·
The evidence here puts Asset and Twonky at opposite ends of the spectrum. Much love for Asset. There is an Asset for OS X; folks here will chime in with their experiences with it. It's much newer than the Windows version.
Reply

Re: Which upnp server?

Simon-in-Suffolk ·
Never had any problems with Asset, recommend it. Straightforward to setup and use. Simon
Reply

Re: Which upnp server?

vince hl ·
Using both Asset and Minim on a Mac mini core 2 duo with Lion OSx. CDs ripped as flac and transcoded to wav with both. I prefer Asset with the old Naim app and Minim with the new. Tried Twonky but found it less stable on my system than either Asset or Minim. Vince PS Streaming to a 2011 Uniti.
Reply

Re: Which upnp server?

bartve ·
Well, I like Twonky (hiding behind the couch now...) on my Qnap NAS: serves everything very reliable, mp3/flac to my Uniti (and smartphones, tablets, and the like) and all those pesky video formats to my TV (and again, smartphones, tablets, etc.).
Reply

Re: Which upnp server?

jc_x_c ·
Yes, the Naim tech support guys recommended Asset. I have downloaded Asset but I've had problems with it miss naming albums and artists What specifically are the reasons Twonky is at the 'opposite end of the spectrum'? Many thanks! Originally Posted by Bart: The evidence here puts Asset and Twonky at opposite ends of the spectrum. Much love for Asset. There is an Asset for OS X; folks here will chime in with their experiences with it. It's much newer than the Windows version.
Reply

Re: Which upnp server?

jc_x_c ·
Actually I quite like Twonky too, I prefer the UI on the server computer and the naming of artists and albums in the Naim server seems more reliable. and it's also a tiny bit cheaper than Asset Thanks! Originally Posted by bartve: Well, I like Twonky (hiding behind the couch now...) on my Qnap NAS: serves everything very reliable, mp3/flac to my Uniti (and smartphones, tablets, and the like) and all those pesky video formats to my TV (and again, smartphones, tablets, etc.).
Reply

Re: Which upnp server?

Arthur Geraerts ·
Tried them all. Asset the is best and most stable. Don't think Plex works with flac.
Reply

Re: Which upnp server?

The Meerkat ·
Originally Posted by Arthur Geraerts: Tried them all. Asset the is best and most stable. Don't think Plex works with flac. I use it on a Qnap NAS, and on a iMac. It definitely works and plays on my iMac and ND5 XS.
Reply

Re: Which upnp server?

Bluetorric ·
Originally Posted by Arthur Geraerts: Tried them all. Asset the is best and most stable. Don't think Plex works with flac. Oh yes it does..........
Reply

Re: Which upnp server?

Damon ·
Asset is floating to the top of the list, almost as the last server standing. I have it but I do not like it much; albums do go missing, the lists (artist / album) do not make it easy to just select an album and play it without going through a fairly long series of thumb selections. I also have Playback, which is sadly defunct, but it is still better; it finds all the albums, presents them in a more intuitive and attractive manner, and gets you where you want to go with fewer steps. I tried...
Reply

Re: Which upnp server?

garyi ·
Run Plex. It plays very well on mac and works well to naim devices. Oh and its free.
Reply

Re: Which upnp server?

jc_x_c ·
Thank you all for the help, information and advice...it's greatly appreciated!
Reply

Re: Which upnp server?

The Meerkat ·
Originally Posted by garyi: Run Plex. It plays very well on mac and works well to naim devices. Oh and its free. +1
×
×
×
×