Can you give an option to disable password protection of the webui (at least allow blank password and in that case do not prompt for it)?
I have many apps on my server which are all only accessible via VPN and i have a password before you can enter any of them already, so now i have a double-password protection. Also i don't think torrents are that important to even need a password protection anyhow.
Thanks.
Feature request (webui): No password
-
- Member
- Posts: 10
- Joined: Wed Sep 24, 2008 10:33 pm
Re: Feature request (webui): No password
It would open a critical security hole.
Imagine a bad guy starts an infected torrent on your machine and set up the System-Autostart-Directory of your OS as default DIR to move the completed torrent to. Thats why you should change the standard port and set up a password.
Don't ask who cares so much for other peolpe's downloads. A bot can be easily set up to hunt for torrent-clients that are known for such weaknesses and people who are not aware of it are going to get problems.
Cheers
Imagine a bad guy starts an infected torrent on your machine and set up the System-Autostart-Directory of your OS as default DIR to move the completed torrent to. Thats why you should change the standard port and set up a password.
Don't ask who cares so much for other peolpe's downloads. A bot can be easily set up to hunt for torrent-clients that are known for such weaknesses and people who are not aware of it are going to get problems.
Cheers
Re: Feature request (webui): No password
In 1.1 the sessions are persistent/saved.
So you would not have to login that much.
So you would not have to login that much.
dev: webui, core, labels | irc:vonck7 |