Posts by darkside40

Hi there,

i just want to give a reminder to all people using TVHeadend on their LibreElec or CoreElec Box to have an eye on securing the Webinterface of this service, because the TVHeadend installation wizard does not inforce that.

Yesterday i heard about a case where a member of our Kodinerds community was hacked and it seems that the entry to his network maybe was its Armlogic Box. The attacker at least gathered access to the TVHeadend Server but we cannot exclude the possibility that the attacker has gone deeper into the network.

What was the problem? It seems that the victim has had the unprotected TVHeadend Admin Panel forwarded in its router. I know that is not clever, on the other hand the TVHeadend Installation Wizard does not enforce setting a password for the admin user.

The real problem is that TVHeadend seems to be running as user root. That means that all commands run by TVHeadend are run by root.

And that is the problem. If i can gather access to the admin panel i can set a preprocessor command in the record tab which will be run as root when a recording starts.

So what i can do with it? I could spawn a reverse shell which gives me root on the victim machine in its network. It is not neccessary that SSH is activated nor do you need an portforwarding (besides that one for the TVH Webif) for it to work.

I leave it to your phantasy what is possible from that point on.

Till yesterday i didnt think about this possibility. Rendering this attack vector useless, is easy. Make sure the TVH Webif is secured by a good password and only trustwothy users have access to it.

If you need to access TVHeadend from outside your network use a VPN or at least a reverse proxy. That way it is not so easy to find your TVHeadend Server.

I can tell you it is not hard finding open TVHeadend Server via Shodan etc.

Tried that using a CoreElec box i had laying around here but i think that problem is the same on LE.

Strange, it even works on my extremely old Baytrail DN2820.

Just apply the workaround in this thread and the stuttering is gone: Video stutter 25Hz Videoplayback with Hardwaredecoding Libreelec 9.0

And it is not a Kodi issue, it is a Kernel issure afaik. And to be honest i would not switch to Kodi 19, its okay for testing but far away from a "daily driver" system.

Yeah the Shield is cool buts not the point für me to spend 200€ extra if i have enough hardware already here.

I got a NUC7PJYH

I have a simliar setup, a quite modern Intel NUC as HTPC and a small Gaming PC.

But being a Geek i would like to have both in one machine which does not seem to be easy if you dont want to go the Microsoft way.

An Intel Card would only be an option if it had the same performance like a current 200€ AMD or Nvidia card.

My setup should be suitable as HTPC and for Gaming, so a GPU which is just as powerful as Intels iGPU is no option.

So to be honest if i now have a NVidia Card and want to go the AMD way in the future, the Windows way seems more appealing.

Nvidia simply sucks when it comes to open source, thats not new.

The PC has an AMD CPU. Of course using Windows would be an alternative. The last time i tried that the disadvantage was that there was no good Hyperion Grabber for Windows, also i simply dont like Windows

But maybe HDR would be supported there,

Okay so Nvidia seems a nogo. What about AMD?

Hi there,

approx two years ago i tried to combine my Gaming Rig and mit HTPC in a single machine. Back than the problem was that the drivers for the NVidia 1050TI i used were not really optimized. If i recall it right there was no support for the Video decoding engines at these Nvidia cards, so i abonded that idea quite fast.

Okay two years have passed away now and i want to give it another shot. Because i plan to switch to an AMD GPU in the next couple of months i liked to asked how good the support for NVidia and AMD GPU's is today, also regarding 4K and HDR.

novalis Yes something like this also was my first though, also it only is a workaround.

Thanks for sharing this.

I have been very glad that Wireguard was added into Libreelec, but the fact that it is not possible to use a FQDM instead of the IP is really a big showstopper for everybody hosting the Wireguard server on a home network.

I hope there will be a way to address this issue.

Unbelievable, i poked around since months with different values for allowed resolutions etc. till i finally found that fix for my NUC.

You are correct that solves the issue that i can not switch to 1080p, but if i turn the "enhanced" HDMI Mode back on the Screen goes black again with Full HD.

There are people that run an OpenVPN Client on there devices which should use more ressources than the Wireguard client.

And carrying around a separate router all the time is no solution.

chewitt thanks for the guide.

I have a similiar problem with my NUC. At some point i have set LE to the 4k resolution of my TV and realized than that this is totally pointless.

But it is not possible for me to go back to 1080p via the GUI. When i set the Kodi resolution to 1080p the screen gets blank till it goes back to 4k.

I will try if that fixes my problem.

Edit:

Unfortunately not working for me. I think i will have to reinstall LE.

That was not what i am saying. But if i am experienced enough to setup a VPN Server /Client infrastructure i dont necessarily need a gui for that.