typhoon day - Githubissues

changtimwu / changtimwu.github.com

Tim's testing/practice notes

7 stars 2 forks source link

typhoon day #8

Open changtimwu opened 9 years ago

changtimwu commented 9 years ago

swixcore js

[ ] account sync
[x] IP access support range
[x] fix UI mispelling

peridot

[ ] save initial script on EEPROM
[x] trace why no response on RMGMT
[x] create libperidot and put some C code of basic reg read/write

WLAN

take a look how tomato physicially works
need to buy a new AP?
glibc openwrt

GO & WEB & RPC

net/rpc is too cumbersome
anyway to avoid repack args on both sides?

changtimwu commented 9 years ago

Currently admin access restriction(aka IP security) has many design flaws.

default deny all

list of allowed hosts
list of allowed services -> only allowed hosts can access allowed ports

Allowed administration interfaces

[x] HTTP
[x] HTTPS
[x] SSH
[x] TELNET

Allowed Remote IP addresses

allow all or deny all
except lists/ranges

changtimwu commented 9 years ago

tomato general save technique https://bitbucket.org/pl_shibby/tomato-arm/src/2eb4a7ce93fe705d5a0db2adf6b32363ad6a5c75/release/src-rt-6.x.4708/router/www/tomato.js?at=shibby-arm#cl-225

tomato.cgi source code https://bitbucket.org/pl_shibby/tomato-arm/src/2eb4a7ce93fe705d5a0db2adf6b32363ad6a5c75/release/src-rt-6.x.4708/router/httpd/tomato.c?at=shibby-arm

when pressing Save button. It just normal string POST. It's even not json

2015-07-11 2 18 06

changtimwu commented 9 years ago

https://github.com/RMerl/asuswrt-merlin/wiki asus merlin is another tomato based firmware.