Remove Developer Code Pt. III (console_sniffer)

Status: Investigating
by ‎06-22-2012 05:52 AM - edited ‎09-10-2012 01:37 AM

On 2012-02-29 I wrote an email to trademarks@wdc.com and PressRelations@wdc.com but never received a reply so I re-ask the questions here:
(console_sniffer is a program which stores all console input/output to (encrypted) logfiles)

"1. Part of all published firmwares for this device (and the Live Hub) is a script called 'console_upload.sh' which seems to upload encrypted logfiles to the FTP server ftpext2.wdc.com.
Why is Western Digital shipping such a script to consumers ?

2. Included in the afformended script is a username and password combination which allows access to the mentioned FTP server.
At a first glance the ftp server seems to be empty but if one changes to the '/WDTVLiveHub' directory some 80 subdirectories are accessible.
These subdirectories include mostly encrypted logfiles and other files. The creation of files and directories is possible."

It has come to my attention that the console_sniffer + console_upload.sh are still being shipped with the most recent firmware (1.09.10).
The console_sniffer program is running on the wdtv live smp and stores logfiles in /usrdata/app/console.

I urge you to remove this developer code portion from the next firmware release.

---

Firmware: 1.09.10 and lower (tested: 1.05.18)
What hardware and media were you using? WDTV Live SMP (european)
Does it happen every time? sure.
Does it happen with previous firmware? yes.
Does power cycling the unit solve it? of course not.
Does resetting to factory defaults solve it? of course not.
Have you tried this on other devices? WDTV Live Hub

 

 

update 2012-08-02:
same same with 1.10.13

 

update 2012-09-10:

unchanged in firmware 1.11.14

Status: Investigating
Comments
by Moderator on ‎06-26-2012 07:52 AM
Status changed to: In Review
 
by Moderator on ‎07-28-2012 12:43 PM
Status changed to: Investigating
 
by on ‎12-08-2012 12:46 PM

Thanks for the heads-up.

 

Blocked at the firewall (don't know if this will impact my firmware updates, though)

 

Kudos for not posting the login info to 4chan :smileyhappy:

Announcements
The Live Streaming Issue Reporting is a variation of our idea exchange being used for the purpose of reporting issues with your WD TV Live Streaming Media Player.

In order to effectively report an issue you are experiencing with your WD TV, please make sure you include:

- Which firmware?
- What happened?
- What were you doing?
- Does this happen every time?
- What hardware and media were you using?
- Did this happen with previous firmware?
- Does power cycling the unit solve this?
- Does resetting to factory defaults solve this?
- Have you tried this on other devices?

Our goal is to try to address the issues that are the most important to you. Use the kudos arrow to say "Me too!" if you see an issue that affects you.

Issue Statuses explained here.
Issue Statuses
Top Kudoed Authors
Forums | Ideas | News and Announcements | Register | Sign in | Help | Forum Guidelines
Copyright © 2001 - 2010 Western Digital Corporation, All rights reserved. | Trademarks | Privacy | Terms of Service | Terms of Use | Copyright | Contact WD