Author Topic: Web Security Question  (Read 2213 times)

Offline MasterChi

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
Web Security Question
« on: March 07, 2012, 07:25:50 pm »
I'm thinking about purchasing a Veralite and as a contracted Network Security Professional I want to know what I'm opening my house up to before hand.  Number one question is.......what kind of security is in place on the sites that we'd visit to access our home system (i assume its findvera.com or cp.mios.com)?  What type of encryption is in place for our usernames and passwords that are stored on the MiCasaVerde servers?  I sure hope it isn't plaintext or easily unencrypted text which seems to be catching a lot of big name companies with their pants down in the news recently (symantec, panda, sony, foxnews, etc.).

I just want to ensure that there is at least a fairly educated attempt at securing our homes to ensure that a hacker doesn't steal our logins and then have full access to control our doors, thermostats, lights, etc.  Thanks for any info you can provide and i understand this is probably more information for staff rather than the normal users so.........
« Last Edit: March 07, 2012, 08:09:57 pm by MasterChi »

Offline Da_JoJo

  • Hero Member
  • *****
  • Posts: 1380
  • Karma: +16/-78
  • If something aint work, we can allways try n make
Re: Web Security Question
« Reply #1 on: March 07, 2012, 08:28:34 pm »
good point ..
so far i failed hacking it lol
you login to a https website which is secured over a tunnel so even if everything is plain text its kinda hard to decypher
the connection from mios to your device is over a ssh tunnel which is even harder to crack.
but hey .. nothing is impossible..  the chances someone steals your phone and be able to do the same is about as high i think
Vera lite (1.5.622), 2x an-158/2, dead usb pl2302 rs-232, 2x greenwave 6 port, 4x Fibaro FGD211 v1.6, FGBS001, few FGS - 221, etc. AuthomationHD 3 for android :-)
Dutch & German translator http://wiki.micasaverde.com/index.php/Special:AllPages http://support.micasaverde.com http://domotica-shop.nl

Offline mcvflorin

  • Administrator
  • Hero Member
  • *****
  • Posts: 1755
  • Karma: +11/-3
Re: Web Security Question
« Reply #2 on: March 08, 2012, 04:05:06 am »
What type of encryption is in place for our usernames and passwords that are stored on the MiCasaVerde servers?
I can assure you that the passwords are not in plain text, but are securely encrypted.

Offline Da_JoJo

  • Hero Member
  • *****
  • Posts: 1380
  • Karma: +16/-78
  • If something aint work, we can allways try n make
Re: Web Security Question
« Reply #3 on: March 08, 2012, 06:23:08 am »
What type of encryption is in place for our usernames and passwords that are stored on the MiCasaVerde servers?
I can assure you that the passwords are not in plain text, but are securely encrypted.
securely encrypted as in  twofish+AES ?
Vera lite (1.5.622), 2x an-158/2, dead usb pl2302 rs-232, 2x greenwave 6 port, 4x Fibaro FGD211 v1.6, FGBS001, few FGS - 221, etc. AuthomationHD 3 for android :-)
Dutch & German translator http://wiki.micasaverde.com/index.php/Special:AllPages http://support.micasaverde.com http://domotica-shop.nl