3 ms·
The Apple TV doesn't have voice recognition. I wish it did, Siri to control it would be brilliant (and it's a lovely machine regardless). > Pre-authentication
by girvo 12y ago
The Apple TV doesn't have voice recognition. I wish it did, Siri to control it would be brilliant (and it's a lovely machine regardless).
> Pre-authentication seems insecure.
Do you mind explaining how? Because I can't see it.
- mschuster91 12y agoAll it needs is the postman confusing two packages (or the wrong phone in the correct parcel) and a stranger has total access to your account.
- maherbeg 12y agoDo you really think the password is on the device instead of using some sort of revokable token authentication mechanism?
- mschuster91 12y agoAnd tokens can be abused or stolen (given they're not stored or paired with other tokens/keys residing inside a TPM), we have seen numerous cases of people hijacking others' AWS accounts and using them for mining bitcoin, of all things.
- nailer 12y agoThat's done with an AWS secret key, which is effectively your password to the AWS API, and not a limited use token.
- mschuster91 12y agoI know that, still people have managed to commit their passwords, ssh keys and more to github.
- freehunter 12y agoJust because it's preconfigured with your account doesn't mean it doesn't need a password. My iPhone has my account on it but I still need to type in a code.
- function_seven 12y agoI suppose someone could steal your FireTV shipment from your doorstep and watch movies on your account. Personally I'll take that risk any day over having to type my password in using the remote.