fttx / barcode-to-pc-server

Barcode to PC server
https://barcodetopc.com/
GNU General Public License v3.0
205 stars 84 forks source link

Security Suggestion, Add an optional Passcode #124

Open kNoAPP opened 6 years ago

kNoAPP commented 6 years ago

Your app works great! I've been using it to scan in asset tags at my job. However, the automatic wifi connecting does mean anyone can use the app to get into my computer. I'd highly recommend adding an option to pair a smartphone to the server by scanning a bar code on the server (if you don't already have this).

fttx commented 4 years ago

Server side

onHelo: 
    if (securityEnabled) {
        if (wrongPassword): send(loginFail)
        if (app.version < 3.11.0) kickDevice(app.deviceId)        
    }

App side

onLoginFail:
    disconnect()
gitschwarz commented 2 years ago

We use the device name for this: "userid user passwort" and then a simple check in the bash script (run-command) :-) To secure the connection we run barcode-to-pc with "connect bot" - a ssh port forwarding program. This work without wifi too.