Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Enhancement: Hide connection string (which may include username / password) in main screen #34

Open
nagatsoul opened this issue Feb 20, 2024 · 1 comment

Comments

@nagatsoul
Copy link

nagatsoul commented Feb 20, 2024

The connection string in the IP Cameras main screen (when the app starts) can be seen. This reveals the IP / Port and any needed Username / Password for the connection to occur.

It would be nice to remove the connection string from the main screen and leave only the Camera name. The string should be seen only when editing is required. Also allowing the editing / viewing of a Camera connection string should require a password.

This password should also be changeable after the old password has been given.

This change will secure all the IP Cameras access details when the OJO app is installed for monitoring purposes (e.g in a Tablet) and is used from people other than the Cameras owner

@alpenblauwtje
Copy link

+1.

Especially the password should be obscured with bullets or stars. Showing the IP address or port number is not really a security problem, these are visible many apps like these.
I do not fully agree the password should be seen when editing, it would be still very easy to reveal the password. When editing a password in eg. TinyCam, the password is still obscured with bullets, that is far more secure. It might require separation into several fields (like IP address, username, password, etc.) but that would be a good enhancement of the app anyway.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants