Jump to content

Uploading Logs without compromising IPTV Information


Recommended Posts

EODCrafter
Posted

Hi, just joined the community a few weeks ago and I repeatedly see advice "Upload your Server Logs". I have done a quick NotePad++ search on my logfile and in plain text it contains my login information for my IPTV Service. Are people aware of this prior to uploading logs that everyone has access too?

 

How can you upload redacted logs if I ever have a need too?

 

Thanks, Great software BTW!

Posted

Yes, we are aware.

 

You need to sanitise your logs for your own needs before uploading.

  • Like 1
Posted

FYI - for the casual reader - your Emby login credentials will not be compromised in the logs.

 

However IP addresses (may be public) or things like external 3rd party app access may or may not be.  As CBers said, sanitize to your own needs.

 

Thanks.

EODCrafter
Posted

FYI - for the casual reader - your Emby login credentials will not be compromised in the logs.

 

However IP addresses (may be public) or things like external 3rd party app access may or may not be.  As CBers said, sanitize to your own needs.

 

Thanks.

 

Where is the login info redacted? Here is a snippet from my log that shows this info.....

2018-08-21 05:59:24.039 Info App: Profile: Android-Exo, Path: http://link to service I have redacted@[member="gmail"].com/password-redacted/55664.ts,

It's a human readable link and password.

ryandavidg
Posted (edited)

Can I just clarify something that I've wondered about, it's clear we have to sanitise the extracts that are posted as text in plain sight, but the full logs that are uploaded and attached to posts, are they accessible to anyone, or only devs/site admins? Just wondering as I've obviously never tried to access someone else's.

 

(It might be a good idea if this was explained in the 'How to report a problem' guide) - edit: as suggested above.

Edited by ryandavidg
  • Like 1
Posted

As a Newbie and not a computer programmer...Maybe it would be prudent to add a disclaimer in the Wiki https://emby.media/community/index.php?/topic/790-how-to-report-a-problem/

It already does on the last night.

 

Note: Your server log may contain sensitive information such as public IP addresses and/or external service login information (e.g. IPTV urls). Use a program like Notepad++ to obscure this information before posting if you wish.

 

  • Like 2
EODCrafter
Posted

It already does on the last night.

 

Note: Your server log may contain sensitive information such as public IP addresses and/or external service login information (e.g. IPTV urls). Use a program like Notepad++ to obscure this information before posting if you wish.

 

 

LOL, I just saw that...Thanks!

  • Like 1
EODCrafter
Posted (edited)

Can I just clarify something that I've wondered about, it's clear we have to sanitise the extracts that are posted as text in plain sight, but the full logs that are uploaded and attached to posts, are they accessible to anyone, or only devs/site admins? Just wondering as I've obviously never tried to access someone else's.

 

(It might be a good idea if this was explained in the 'How to report a problem' guide) - edit: as suggested above.

 

I just checked and there is over 200 instances of my login info in the server log...Hope I don't have any problems, that's a lot of editing...

 

I would rather see a secure area for uploading logs for just the Admins. Just a thought. (Probably why crappy Plex never added IPTV Support)

Edited by EODCrafter
Posted

FIND and REPLACE.

  • Like 2
Posted

Hi, you can always create your public issue report and then just PM us the associated log file. Thanks.

  • Like 1
Posted

Where is the login info redacted? Here is a snippet from my log that shows this info.....

2018-08-21 05:59:24.039 Info App: Profile: Android-Exo, Path: http://link to service I have redacted@[member="gmail"].com/password-redacted/55664.ts,

It's a human readable link and password.

 

Those are not Emby login credentials.

EODCrafter
Posted

Those are not Emby login credentials.

 

No, @@ebr...Those are my credentials to my Paid IPTV Service. With that login you could hijack my connection.

Spaceboy
Posted

No, @@ebr...Those are my credentials to my Paid IPTV Service. With that login you could hijack my connection.

yes and as stated it’s your responsibility to redact them. Takes a minute with find and replace
  • Like 1
EODCrafter
Posted

yes and as stated it’s your responsibility to redact them. Takes a minute with find and replace

@@Luke has already stated that the log file can be PM'ed...Thanks. 

Spaceboy
Posted (edited)

It can but then you are reliant on the person you want pm it to fixing it. There are many other helpful users that may chip in more timely if you post it to the open forum redacted. I’ve done the pm route and I’m back to making them publicly available. Personal choice

Edited by Spaceboy
  • Like 4

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...