Sync logins between devices

[crusher11 1245]

I have an NVIDIA Shield running the universal Android app, a UGOOS AM6B+ running EmbyCon, and Home Assistant.

Is there a way I can set it up so that whenever a user logs in on the Shield, that same user is logged in on the UGOOS? I only need it to work for accounts that already have their passwords saved on both devices.

[RanmaCanada 568]

AFAIK that is not possible as the user must physically log in. This is like asking if you can log into multiple PC's at the same time while not physically accessing them.

But I'm not a dev. It might be possible to script something like this through home assistant, but it could potentially open you up to security issues.

[crusher11 1245]

As I said, the passwords are already saved on the devices, so there are no security implications here.

[ebr 16595]

20 minutes ago, crusher11 said:

so there are no security implications here.

There would be a security implication by what he suggested because it would open an attack vector that isn't currently there.

[crusher11 1245]

1 hour ago, ebr said:

There would be a security implication by what he suggested because it would open an attack vector that isn't currently there.

If you're in my theater room in order to log into the Shield, you can just as readily log in to the UGOOS directly . It just takes an appalling number of button clicks and deep knowledge of the menus, plus waiting for it to reboot. 

[ebr 16595]

2 hours ago, crusher11 said:

If you're in my theater room in order to log into the Shield, you can just as readily log in to the UGOOS directly . It just takes an appalling number of button clicks and deep knowledge of the menus, plus waiting for it to reboot. 

I'm not sure how that is relevant to the security issue but, in any case, this is such a niche situation that something custom will need to be created and it may be possible with HA as Ranma suggested.

[crusher11 1245]

20 hours ago, ebr said:

I'm not sure how that is relevant to the security issue

If the only way to log in to the Shield is to be physically present, and the only way to log in to the UGOOS is to be physically present, and they're in the same room, there's no change in security if I get the logins synced.

[ebr 16595]

35 minutes ago, crusher11 said:

If the only way to log in to the Shield is to be physically present, and the only way to log in to the UGOOS is to be physically present, and they're in the same room, there's no change in security if I get the logins synced.

The suggestion was to create an integration with HA.  That has no "physically present" requirement and no automation that you could create in that regard would.

[RanmaCanada 568]

8 hours ago, crusher11 said:

If the only way to log in to the Shield is to be physically present, and the only way to log in to the UGOOS is to be physically present, and they're in the same room, there's no change in security if I get the logins synced.

Their potentially is as you could be giving HA complete and utter access to your devices with potentially zero oversight. Granting this access could potentially open you up to an unknown vulnerability which could allow an attacker to gain unfettered access to your devices and your home network.

The fact you don't seem to understand the implications is mind numbing. It's like saying "Can i link my back door and my front door together so that when I open one the other does as well" while not knowing who, or if anyone is probing the door in an attempt to get in.

This is not something I would ever allow.

You're free to try it on your own, but it is obviously something the dev team would not condone, nor help you with. If your system becomes compromised, it's 100% on you. There is zero real world need for this.

You're 100% on your own for this.

[crusher11 1245]

5 hours ago, RanmaCanada said:

Their potentially is as you could be giving HA complete and utter access to your devices with potentially zero oversight.

HA already runs a bunch of automations on my home theater devices.

5 hours ago, RanmaCanada said:

Granting this access could potentially open you up to an unknown vulnerability which could allow an attacker to gain unfettered access to your devices and your home network.

How would syncing two Emby logins make this any more true than it already is?

5 hours ago, RanmaCanada said:

It's like saying "Can i link my back door and my front door together so that when I open one the other does as well" while not knowing who, or if anyone is probing the door in an attempt to get in.

But if someone manages to get in my front door, I'm already screwed, whether the back door also unlocks or not. They don't need the back door to unlock, they're already in the house, and can simply unlock it from inside. If my media server's security is so thoroughly compromised that someone manages to get access to my Shield and sign in, then dozens of earlier security measures have failed so badly that someone being able to log in on the UGOOS is the least of my problems. And being able to log in to the UGOOS, with a non-admin account that already has the password saved to the device, is not particularly threatening anyway. What are they going to do, use some of my electricity and internet bandwidth? If they're that far inside my network there are way worse things they could be doing.

You're basically saying I should put my TV in a safe overnight, in case someone breaks into the house. As though there aren't many other much more portable things they could get their hands on that will get them plenty of value, or are impossible to replace either for sentimental reasons or because you simply can't get them anymore. And as though I don't have locks and alarms on all my doors and windows.

[ebr 16595]

It was just something to be aware of.  You're free to try and accomplish it but, this is such a niche need I think you are probably on your own.

GL