Server - Page 18 of 34

Lightspeed: New open source software for the complete live streaming package

A new open source tool appears under the name Lightspeed, with which users can set up a server for live streaming. The project should be characterized above all by the low latency of less than one second as well as the easy installation of the three necessary modules.

The basis is appropriate called Lightspeed Ingest, which carries out the FTL handshake with the clients involved. FTL is the Faster Than Light protocol, which puts the speed of transmission above its quality. It saw the light of day as part of Microsoft’s failed game streaming service Mixer.

Modular structure with three components Second The component is Lightspeed WebRTC, which plays out incoming RTP packets via WebRTC. The third module is a React website as a front end for the audience. At the start of the project, Lightspeed needs all three components, but developers should be able to write their own alternative modules in the future.

The requirement on the Windows, macOS or Linux streaming computer is the Open Broadcast Software (OBS) with the FTL SDK. Installation instructions can be found on GitHub. Lightspeed appears as open source software under the MIT license.

(fo)

heise + | Processor performance: Core-to-core latencies of modern CPU cores in detail

For the performance of processors, not only the speed of the CPU cores plays a role, but also how fast they communicate with each other.

(Image: Denis Fröhlich / c’t)

Processor performance: Core-to-core latencies of modern CPU cores in detail Ring-Bus versus Mesh Unequal core quartets Article in c’t 2 / 2021 read The construction of modern processors is currently undergoing a change. Until a few years ago, large “monolithic” chips were still popular, combining all CPU cores and functions on a single semiconductor die, but the trend is now towards several individual chips. For example, AMD uses so-called chiplets for the powerful processors of the Ryzen, Ryzen Threadripper and Epyc series, which are several separate silicon dies on a common carrier. The CPU cores, which are responsible for the actual computing work, are located in up to eight CPU core dies (CCD). AMD packs all other functional blocks, such as the memory controller, PCI Express Root Hub and I / O functions, on a separate I / O die.

The chiplet design increases the yield than ever before The larger the area of a semiconductor chip, the higher the probability that an error will creep in during manufacture. In addition, there is a maximum of chip area that can be exposed with today’s technology. It is approximately at 800 mm 2 .

Intel uses monolithic chips for the majority of its CPUs. This not only applies to the quad cores of the 09 – Nanometer mobile processors Core i – 1100 and the desktop CPUs Core i – 10000 up to 10 cores too, but also on the server chips of the Xeon series with up to 28 Cores.

Access to all contents of heise + exclusive tests, advice & background information : independent, critically founded c’t, iX, Technology Review , Mac & i, Make, c’t Read photography directly in the browser register once – read on all devices – can be canceled monthly first Month free, then monthly 9, 95 € Weekly newsletter with personal reading recommendations of the editor-in-chief Start FREE month Start the FREE month now heise + already subscribed?

Sign in and read Register now and read the article immediately More information about heise + Processor performance: Core-to-core latencies of modern CPU cores in detail Ring-Bus versus Mesh Unequal core quartets Article in c’t 2 / 2021 read

AMD Radeon: Chiplet-Based GPUs Like Ryzen CPUs?

After CPUs, AMD seems intent to drastically change the design of their GPUs. The company is studying an MCM project that will allow multiple graphics chiplets to work properly together. The idea is in a newly published patent.

by Manolo De Agostini published 04 January 2021 , at 11: 01 in the Video Cards channel

AMD Radeon RDNA

AMD was the first to believe and adopt a MCM project for its microprocessors, from Ryzen consumer models up to the EPYC server proposals. The US company has highlighted how to separately produce the components of a CPU, untying the cores from the memory controller and other interfaces, not only favors a landing on the market quickly and predictably , but it also has advantages in terms of performance and consumption.

The MCM (multi-chip module) design, where a processor is composed of different blocks, also produced with different processes and connected via high-speed bus, allows for a more innovative approach to design, and this has allowed AMD to recover the gap with Intel and surpass it in different sectors of market, thanks to the possibility of increasing the number of cores through the creation of dedicated chiplets with advanced production processes. There is also an advantage in terms of production yields , as producing chiplets with the most appropriate process allows have fewer defects.

It is clear how the time of monolithic chips , i.e. a highly integrated project that contains all the various aspects of a microprocessor on the same die, both at the drips : it is less and less functional to innovations future and this not only applies to CPUs, but also to GPUs . Both AMD and Nvidia have long toyed with the idea of moving to MCM design and this transition may be closer than we think .

A patent issued by AMD titled “ GPU Chiplets using high bandwidth crosslinks “exposes the idea, or at least one of the ideas on the table, that the company led by Lisa Su is stroking to make the project of a MCM GPU . In the documentation, AMD illustrates some of the reasons it has not taken that route so far : the high latency of communication between chiplets, programming models and the difficulty in implementing parallelism.

However, the company’s engineers think they can bypass these obstacles using an in-package interconnection called “ high bandwidth passive crosslink “, able to allow any “chiplet GPU” to communicate directly with the CPU and at the same time with the other chiplets. Each GPU, in addition to the cores, would have its own cache and the necessary to work autonomously: in short, each chiplet would represent a complete GPU, fully manageable by the operating system.

Unlike what we observe with AMD CPUs, where the company has crammed the cor ex 86 in a dedicated chiplet and everything else in an I / O die, in this case the idea looks more like making smaller GPUs and making them work together . One of the growing problems nowadays is that the most powerful graphics chips occupy such a large area that they require advanced and very expensive production processes, with yields not always exceptional.

Creating smaller GPUs would reduce production costs and have better yields, while the new interconnection would preserve performance and at the same time the software could make the most of the hardware, without particular modifications. At the moment it is not clear if and when this project will become a concrete reality, but it is rumored that this will happen after the solutions based on RDNA 3 architecture, expected between this year and next.

rC3: How the Corona Warning App is protected against hacker attacks

Thomas Klingbeil, senior developer at SAP, gave insights into the backend architecture of the Corona Warning App (CWA) at the remote Chaos Communication Congress (rC3). It basically consists of a CWA server with the diagnostic keys, a verification server and another server for transmitting the test results from the laboratory.

The app and the infrastructure behind it are generally designed for data economy and take into account the state of the art in IT security with a wide range of encryption methods and the exchange of hash values. When tracking contacts via Bluetooth, the responsible server knows, for example, which mobile phone the data is coming from, but cannot draw any conclusions about the user of the device.

A particularly critical data transfer occurs when the user is away Chosen to share a positive test result. Even in this case, only a collection of pseudonymous crypto keys is transmitted. It is therefore difficult to find out who the affected user is. Nevertheless, the developer companies, to which Deutsche Telekom belongs in addition to SAP, have also taken precautions against unauthorized data access and potentially possible analysis of the information at this level.

Secure connections alone are not enough A well-armed attacker could theoretically record the network traffic running through the infrastructure built in the background, stated Klingbeil in his lecture. Only secure connections are used, so that only the sizes of the data packets sent are recognizable, but not their content. This would also make it possible to understand whether a test had taken place and a TAN query took place.

The end point and thus the tested user remained unclear at first. executed the programmer. From the recognizable byte amounts, a hacker could also conclude that there are specific sizes for special requests. Furthermore, it can be seen in principle when the responsible CWA server is contacted for a TAN upload. Unless it is also clear that a user would have to be positive if diagnostic keys were transmitted. In the worst-case scenario, it could also be possible to link this key to an IP address and to determine the user behind it.

“We must therefore include plausible deniability,” said Klingbeil Model of “credible deniability”. Methods are used to hide confidential data or its origin. The CWA is a disturbing noise that is built into the data traffic: According to the insider, the app partially simulates the corresponding traffic in the backend and deliberately sends false or meaningless information to a “playbook” that functions as a “dummy”.

In addition to various encryption techniques, there is also “annoying Noise “is used in order to achieve a high level of data protection when transmitting positive test results.

As part of this automated process, determinable inquiries could be triggered by a real event, explained Klingbeil. But it is just as likely that it is a “fake”. Even if a test turns out negative, the dummy application asks for the diagnostic key and the TAN is also used. So you can no longer find out “if someone really warns”.

Filtering out incorrect packets A special field in the header informs the backend server at the same time that they should not enter the falsified packets into the relevant databases, but should otherwise behave and respond as usual. The additional traffic does not cause any increased costs for the users, since the mobile network operators generally do not count the volume caused by the CWA against the personal contingent (“zero rating”). Metadata would also be removed from a mediation server.

The CWA architecture also has an interface in the form of an “EU Federation Service” to upload national keys for “contact tracing” and foreign keys from member states with interoperable ones To be able to inquire about architectures. The responsible servers are informed about the upload of new keys via a callback mechanism. Klingbeil clarified that even if keys from other EU countries were ultimately treated as national ones, a so-called replay attack and the associated transmission of previously recorded data to trick authentication procedures would not be possible. The information would initially be embargoed for two hours and could only be used afterwards.

The appeal from the Chaos Computer Club (CCC), the CWA with an option for decentralized cluster recording, for example The SAP innovation expert did not want to comment on enrichment via the CrowdNotifier. This is outside of his scope, as the Federal Ministry of Health decides on new functions. Machine learning is currently not used to determine the risk of infection. Criticism from the hacker community that the interaction with the community in the open source project via the developer portal Github is often slow, he will bring to the team.

(pbe)

Server bugs at Apple: Big Sur recovery fails, App Store in Mojave broken

Users of macOS 11 alias Big Sur once again report problems restoring their computer. Were there with macOS 11. 0 recovery difficulties over a longer period of time on M1 Macs, for which Apple provided a whole list of workarounds, This time, Intel machines are specifically affected. A recovery can be useful if you have problems with your macOS installation.

This time it’s Intel Macs Like the blog Mr. Macintosh was the first to report, the so-called Internet Recovery is now on strike with Intel Macs. The latest version of macOS can be obtained via the network and installed immediately, as long as the machine can establish an Internet connection from recovery mode – via WLAN or Ethernet.

Instead of offering the latest operating system version macOS 10. 1 alias Big Sur for download, only macOS has been released for a few days 10. 15 aka Catalina if you look at the internet – Want to initiate recovery on Intel Macs. Why this is happening is not yet clear – Mr. Macintosh speculates that this is a server-side problem. According to information in the MacAdmins forum, Apple has even unofficially communicated this to the outside world and announced that it is “working” on the problem. However, a deadline for a fix was not given. As mentioned, M1-Macs are not affected by the error because the recovery process takes place in a different way here.

App- Store error under Mojave Another server-side problem affects the Mac App Store. MacOS users 10. 14 aka Mojave can no longer use this permanently. When trying to update an application, the message appears – sometimes for weeks – that the system cannot “complete the purchase”. Below is a simple “canceled” (canceled). Developer Jeff Johnson was able to prove that the server “osxapps.itunes.apple.com”, which is necessary for the updates, simply disconnects – why is unclear.

Johnson speculates that Apple is definitely on the error his side and no – unlikely – update for Mojave is necessary. Especially annoying for developers: customers who cannot update their apps due to the bug contact the developer – and not Apple, although the Concentrate is responsible for the current problem. (bsc)

heise + | Network storage: operate NAS securely and protect it from attacks

Our reader Gunther J. only found a blackmail letter on his NAS instead of his data. We explain how it came about – and how you can protect yourself.

(Image: Photon photo / Shutterstock.com)

Network storage: operate NAS securely and protect it from attacks Ransom note instead of holiday photos Now it is your turn! Firmware updates turn off UPnP Configure router Read article in c’t 2 / 2021 When c’t reader Gunther J. wanted to browse his vacation photos, he had an unpleasant surprise : All files on the otherwise reliable NAS (Network Attached Storage) were deleted. Instead, he discovered a file called “DATA RECOVERY!! !!. Txt” that begins with: “YOUR REMOTE STORAGE WAS COMPROMISED. YOUR FILES ARE IN OUR POSSESSION.” J. had apparently become the victim of a cyber gang who had tampered with his vacation photos.

The perpetrators claimed that the files were safe, encrypted on a server. In order to free the vacation photos from the digital hostage, J. 0, 03 Bitcoin to the address 18 bvWVxx3KD3gaqkBoPSwShimUWkG1eZNL transfer, this corresponds to approximately 400 Euro. But there were two problems: On the one hand, the deadline of the blackmail group, which ironically calls itself “Data Recovery”, had long expired – J. had only discovered the misery after two months. On the other hand, it is always a bad idea to negotiate with blackmailers.

Together with his wife, Gunther J. looked for a way to save the holiday photos. Then she had an idea, which was implemented shortly afterwards: The two called the c’t editorial office. We are frequently contacted by victims of cyber extortion, but this case aroused our curiosity. Because it was completely a mystery how the perpetrators could access the NAS. It quickly became clear that the caller had carefully set up and configured his home network.

Access to all contents of heise + exclusive tests, advice & background: independent, critically sound c’t, iX, Technology Review, Mac & i, Make, c’t Read photography directly in the browser register once – on all devices read – can be canceled monthly first month free, then monthly 9 , 95 € Weekly newsletter with personal reading recommendations from the editor-in-chief Start FREE month Now start the FREE month heise + already subscribed?

Sign in and read Register now and read the article immediately More information about heise + Network storage: operate NAS securely and protect it from attacks Ransom note instead of holiday photos Now it is your turn! Firmware updates turn off UPnP Configure router Read article in c’t 2 / 2021

TechStage | TV-OS: strengths & weaknesses of Android TV & Co

Testing Tests overview Smartphone Huawei P Smart 2021: Budget model with room for improvement Asus Zenfone 7 Pro: Turbo smartphone with flip camera Samsung Galaxy Xcover Pro in the test: Hard but slow Oneplus Nord N 03 5G in the test: galloped in price Oppo Find X2 Pro in the test: performance bargain Asus ROG Phone 3 in the test: Perfect gaming smartphone LG Wing in the test: 1.5 displays and gimbal cam Smartwatch Samsung Galaxy Watch 3 in the T est: competition for Apple? Huawei Watch GT 2 Pro in the test: Smartwatch with cross-country battery Apple Watch: Smartwatch with contract from 15 € per month Apple Buy Watch 6: All generations in the price check Skagen Falster 3 in the test: Smartwatch with Wear OS Test Huawei Watch GT 2: Noble fitness tracker in watch form Huawei Watch GT in the test: record-breaking battery life Multiroom Ikea Symfonisk in the test: Sonos loudspeakers under 100 Euro Bose Portable Home Speaker in the test: battery, WLAN, Airplay 2 Sonos Move in the test: The robust all-rounder Musiccast: Multiroom from Yamaha in the test Denon Heos in the test: Versatile multi-room system Flat soundbar Teufel Sounddeck Streaming in the test Teufel Raumfeld in the test: rich multiroom sound Keyfinder Tile Slim (2019): Key finder in credit card format Bluetooth key finder Tile Pro in the test: 122 m range! Key finder Tile Pro in the test: the range champion Orbit Bluetooth tracker in the test: looking for wallet and keys Nonda iHere 3.0: smart key finder under test Chipolo Classic and Plus: Bluetooth key finder under test Musegear finder 2: Keyfinder without registration obligation Action-Cam DJI Pocket 2 in the test: Zoom and 64 – Megapixel sensor Actioncam Insta 360 One R: 1-inch image sensor in the test Gopro Hero 8 Black in the test: Back to the top Insta 360 One R in the test: The modular action cam Motorola Moto G8 Plus Review: Great smartphone, but … Insta 360 Go: Micro-GoPro in the test Motorola One Action Test : Good hardware, bad camera microSD In the test: Kingston UHS-I U3 microSDXC Kit MicroSD card for smartphone: Samsung Evo Plus 2017 Test report: Lexar Professional 1800 x microSDXC Kit Test report: Intenso Premium microSDXC card with 64 GByte Android Sonos Move in the test: The robust all-rounder Honor 20: Inexpensive high-end smartphone in the test Xiaomi Mi 9: top technology at a bargain price Doogee S 90 in the test: modular outdoor smartphone ZTE Axon 10 Pro in the test: high-end phone at a competitive price Motorola Moto G7 Power in the test: large battery, small price Sony Xperia 10: smartphone with 21: 9 display in Test Counselor Advisor overview Purchase advice The right cordless screwdriver for the home workshop t Bargain: Which Fire TV Stick from 19 € is the right one? Purchase advice: What good is a leaf blower with a battery for 45 Euro? True wireless headphones: How much do you have to invest? Buying advice water cooling: High-end PCs cool better Adviser: Air conditioning and fan against the heat wave Sony shows the Xperia 1: Is the predecessor XZ3 worth it now? Practice Caution, money away: Kickstarter & Co. are not shops Turn off Android notifications from annoying apps Here’s how: Install the new Android L keyboard now Tip: Use “Ok Google everywhere” in Germany In the test : Will the jailbreak work for iOS 7.1? Goder ma and mobile medicine: The doctor apps are coming! Instructions: Jailbreak for iOS 7 on iPhone 5S, 5, 4S and 4 Technology Importing technology from China, part 2: Customs, taxes and tricks Drones & copters: From toys to FPV Racer What does the end of an ecosystem mean? Smartphones with a flexible display: What’s the point? Overview of smartphone processors: Everything Snapdragon? Evolutionary dead ends: the very worst cell phones mpass: Pay with the NFC mobile phone – or the NFC toilet roll Display calculator Calculate pixel density, number and display proportion Best list Test winner Price comparison Price comparison overview Smartphones from Android 7.0 Phablets with stylus Fitness tracker with GPS Bluetooth headphones with ANR Drones with GPS Video TechStage Counselor TV-OS: Strengths & weaknesses of Android TV & Co beginning Android TV Tizen OS Web OS My Home Screen Loewe OS Metz VIDAA U3.0 Conclusion Comments by Jochen // 03. 01. 2021 11: 10 Clock

Does it matter which operating system the new Smart TV has? TechStage presents the most important OS for TVs in the guide and explains where they score.

Modern smart TVs no longer only differ in terms of appearance, equipment, and picture and sound quality. An essential feature is the operating system, which is largely responsible for ease of use. While the smartphone market is dominated by Android and iOS, several operating systems are competing for flat screen televisions. We will introduce you to all the important ones and address the respective strengths and weaknesses.

The article appears in our UHD TV theme world. There were other articles published there, for example our guide for really big TVs, tips for buying a next-gen TV or our constantly updated list of the cheapest TVs from all categories (e.g. OLED, HDMI 2.1 or just huge).

Android TV Not only on smartphones, but also on smartphones TVs are very popular with Android. In addition to Sony and Philips, TCL and Metz Blue rely on Android TV from Google. Corresponding televisions can not only be set up using the remote control supplied, but optionally using an Android smartphone.

Tile-like structure, clear structure and a lot of apps: that’s Android TV. #The start page has a uniform design on almost all Android TVs: Here you can find a list of the most important apps, streaming services and TV channels. All applications are arranged in tiles on the user interface; additional applications can be added in next to no time. While Android was still a bit sluggish and unstable to use in previous versions, these teething troubles have been resolved with Android 9.0 (Pie).

The gear wheel at the top right takes you to the most important system settings, the Google Assistant is lurking at the top left, for example to browse streaming services by voice or to call up current weather information or traffic reports.

The selection of apps under Android TV is generally huge and one of the best on the market. Thanks to the Google Play Store, you will find a varied portfolio in the areas of video, music, games and news. The integrated Google Chromecast ensures flexible compatibility with smartphones. While the standard interface is identical on all Android televisions, the individual manufacturers adapt their menus for picture and sound settings individually.

Overall, Android TV scores with a clear design, high operating speed and an extensive selection of apps. Smaller weak points in terms of performance can only be found on very inexpensive or older flat-screen TVs with an Android system. It is therefore important to check every now and then whether there is an update for your own TV.

Tizen OS With Tizen, Samsung uses its own operating system; the sheer number of Samsung TVs alone makes it a major competitor to Android TV. With Tizen OS, all functions are packed into a horizontal menu bar. You can store the most important apps here, preview streaming content, switch sources, open TV recordings from USB sticks and jump to the picture and sound settings.

Tizen OS from Samsung offers a lot of information at a glance and likes it colorful. All of this succeeds quickly even if the selected Samsung television does not have the fastest processor. In contrast to its competitors Philips and Panasonic, Samsung has integrated a powerful media player into Tizen OS, which can play photos and videos as 360 Degree view. In addition, there is a function in “Ambient Mode” to display paintings, photos or infographics with news or weather data on the screen when not in use. Alternatively, this takes on the look of the wallpaper behind the flat screen TV.

Relatively new is the intelligent program guide, which combines content from television and streaming services. In terms of apps, Samsung is one of the leading manufacturers on the market. In addition to HD +, you can also find Disney +, Apple TV, DAZN, Sky Ticket, Netflix, Tidal, Amazon Music, Spotify and Deezer. Tizen OS supports Apple AirPlay 2 to stream photos, music and videos from iPhone or iPad wirelessly to the hip flask, as well as Google Chromecast and Bluetooth.

If you like control by voice, you will also get your money’s worth with Tizen OS. A recent software update makes Google Assistant available on Samsung smart TVs in addition to Bixby and Amazon Alexa. Together with WebOS from LG Tizen OS is one of the most user-friendly and versatile operating systems on the market.

Web OS LG uses the WebOS operating system in its OLED and LCD televisions, which is visually reminiscent of the keyboard of a piano. The latest version, WebOS 5.0, is extremely fast and clearly structured. The high level of operating comfort is also due to the fact that you can control a mouse pointer on the TV with the LG remote control. So you can move the so-called Magic Remote freely in the air and navigate to the desired window like with a laser pointer. This is surprisingly precise and you get used to it quickly.

LG’s WebOS provides apps and functions like on a keyboard. The individual tiles give access to the TV program, the most important apps (these are freely configurable), the home dashboard – an overview of all connected and networked devices – as well as the art gallery, the sports alarm and the fast media player for 360 – degree representations. The art gallery contains paintings, photos and drawings that transform the LG TV, including a wooden or metal frame, into a deceptively real work of art. The sports alarm provides timely information about when your favorite team is playing again, for example in football or basketball, and provides constantly updated results.

With AirPlay 2 and the support of Chromecast and Miracast, WebOS 5.0 is very communicative. The range of videos and games in the app area is plentiful, including Apple TV, Disney +, DAZN, Sky Ticket, Google Play Films, Netflix and Zattoo. However, music and news apps still have room for improvement. The already installed application “Reelgood”, a streaming guide that bundles content from Netflix, Disney +, Amazon Prime Video and Maxdome, is very useful.

LG has thought of the Amazon Alexa and Google Assistant for voice control. In terms of handling and clarity, WebOS 5.0 is currently ahead, closely followed by Samsung Tizen OS, Panasonics My Home Screen and Android TV.

My Home Screen Panasonic equips its current flat screen TVs with the My Home Screen 5.0 operating system. This is clearly laid out, almost spartan, and requires little space on a flat screen. In the horizontal bar you can find the app icons from Netflix, YouTube and the “HD +” platform as well as access to the complete range of apps and an overview of all connected devices.

My Home Screen from Panasonic is limited to the essentials and is therefore intuitive to use. The sorting of the symbols is flexible, other applications can be added. You can also assign a button on the remote control to start your favorite app with just one press of a button.

New in My Home Screen Version 5.0 is the preview of thumbnails with various cinematic content as soon as you navigate to the streaming apps from Netflix and YouTube. The Panasonic software works quickly and smoothly with barely noticeable waiting times when changing menus. In addition to a DLNA server, My Home Screen also has the TV> IP function. This allows the TV signal to be transported over the network to a television set in another room in which no programs are traditionally accessible via cable, satellite or DVB-T2.

At Panasonic, the app offer is still expandable. With Disney + and Apple TV, two industry giants are missing here. Even those who like to stream music are currently losing out with the Japanese. When it comes to voice control, Panasonic is also not up to date: Amazon Alexa and Google Assistant can only be used in conjunction with separate speakers.

Loewe OS The traditional Loewe brand, which after the takeover by the Skytech Group was able to avert its final end at the very last second, is building its high-priced television with the Loewe OS6.3 operating system. In contrast to earlier Loewe TVs, the current models are easy to operate thanks to their attractive user interface with rectangular symbols and a simple menu structure. However, you have to get used to some little things first, such as the fact that a longer press on the “Home” button leads to the picture and sound settings.

The Loewe OS is clear, but important streaming apps such as Netflix are missing. The start page gives you access to the TV recordings that land on the internal hard drive. With the apps, however, you have to do without industry giants such as Netflix. These are only accessible via a Fire TV Stick from Amazon, which Loewe makes available to its customers free of charge after registering online. All applications on the streaming stick can be accessed via the heavy Loewe remote control.

In the spring 2021 Loewe wants to significantly expand the range of apps with a new platform. Loewe OS6.3 works quickly overall, but like Panasonic only enables voice control via Amazon Alexa via separate speakers such as the Echo Dot. Multimedia files can be accessed from a smartphone or a Fritzbox, for example. Loewe OS 6.3 has caught up with the market leaders from LG, Samsung, Panasonic and the like, but cannot quite keep up in terms of appearance and comfort.

Metz While the cheaper smart TVs of the Metz Blue series are delivered with Android, some Metz televisions come with a Linux Operating system used. This offers a special feature: The user can decide for himself how complex the user interface should appear. In addition, the number of functions can be gradually adapted to your own needs (“Simple”, “Comfort”, “Expert”). The start page and the submenus are kept very factual with clear labeling, but dispense with colored frills. But you know immediately which function is where.

The Metz user interface is based on a Linux system and attaches great importance to sober objectivity. The Linux system promptly implements control commands via the remote control and works at a good speed. The heavy metal signaling device with a well-structured key arrangement has reserved three keys so that preferred functions can be freely assigned to them.

If apps are important to you, you should think twice about buying a Metz TV. Because Netflix, Disney +, Apple TV, YouTube, Rakuten TV or Amazon Prime Video are just some of the relevant applications that are not available here. You have to buy a Fire TV stick separately.

Instructions are stored in the operating system so that you can look up almost any important topic quickly if you have any questions. Bluetooth and Chromecast are supported for streaming. Overall, the Linux operating system is very tidy and quickly transparent, without setting optical highlights.

VIDAA U3. 0 At the steadily growing TV manufacturer Hisense, the operating system listens to the bulky and somewhat getting used to name VIDAA U3.0. Here memories of Android TV are immediately awakened. This is ensured by the large tiles on the user interface, which not only include apps, but also the entrances and the media player.

Reminiscent of Android, but is named VIDAA U3.0: the operating system from Hisense . The operating concept is well thought out, Hisense dispenses with a nested menu structure and also makes life easy for new customers who previously trusted a different TV brand. There is also an aluminum remote control, which is also clearly designed and has four direct selection buttons for the streaming portals Netflix, YouTube, Rakuten TV and Amazon Prime Video.

Hisense cannot keep up with the range of apps from Sony, Philips, Samsung or LG, but the most important streaming platforms are on board. Via the home network, VIDAA U3.0 allows access to multimedia files that are slumbering on a PC hard drive or a media server in the network. The media player is, however, quite simple and neither does 360 – Degree representations still zoom in on photos. Amazon Alexa can be used for voice commands via voice.

Overall, VIDAA U3.0 makes a very smooth impression, but you have to be patient when switching and starting recordings on USB Bring your hard drive. Because the remote control does not have its own record button. Rather, you first have to navigate to the TimeShift menu and from here to the record button. Top dogs like LG, Samsung and Panasonic are still ahead in the area of ease of use.

Conclusion The operating system of a TV may not seem essential at first glance. But it depends a lot on how you want to use the television in the future. Anyone who mainly watches traditional television or plays via a Blu-Ray player (guide) does not have to attach excessive weight to the TV OS. But if you use apps and streaming services, or stream video games from the cloud via a cloud service such as Shadow or Geforce Now, you should take a close look at what you are buying. Android TV is one step ahead here, and hardly any other manufacturer has app support.

The good news is that these functions can be upgraded if necessary. There are enough cheap streaming sticks, as our guide to streaming boxes shows in comparison. If you need a little more power, you should take a look at the Nvidia Shield TV (guide).

The article appears in our UHD TV theme world. There were other articles published there, for example our guide for really big TVs, tips for buying a next-gen TV or our constantly updated list of the cheapest TVs from all categories (e.g. OLED, HDMI 2.1 or just huge).

Permalink: https://techstage.de/ – 5000992

Tags

Android TV TV Smart TV UHD TV Smart home trainers – alone at home in a group cycling

How the CSU wants to make Germany more digital

According to its own statements, the CSU wants to make Germany more digital and has an agenda for 2021 formulated. The decision paper contains, among other things, demands for rapid network expansion, a fully digital identity card in the smartphone and a reduction in internet bureaucracy. The party also calls for a “minimum taxation” from US Internet companies such as Google or Amazon.

The 17 Point-comprehensive submission, which the CSU state group wants to resolve on January 6th and 7th at its retreat in Berlin, contains proposals that To make Germany a “pioneer of digitization”, as it says in it. The paper is available to the German Press Agency. First the “Frankfurter Allgemeine Zeitung” reported about it.

Google and Amazon tax According to the will the CSU is supposed to have a “Europe-wide regulation for a minimum taxation” of large digital corporations like Amazon or Google. The US corporations have been criticized for years for their business models. “We want to tax the Internet giants,” says the draft resolution. If Google and Facebook made money with personalized advertising and data from Germany, then they would have to “give something back to our community from this profit”. The time is ripe for a “Google and Amazon tax”, they say. The paper does not contain a specific number.

In addition, the party calls for “a spaceport for Germany and Europe”. Up to 2028 would be up to 8500 small satellites launch into space to collect data on earth observation and environmental and climate research. They all needed a porter and a launch site. Germany should provide this spaceport. “We want to set up and operate a mobile launch platform in the North Sea together with industry,” says the draft resolution.

ID card in the app According to the will of the CSU, digitization in Germany is to be promoted at different levels. The newly founded mobile radio infrastructure company (MIG) is supposed to help, by no later than 2024 all white spots in the mobile network expansion “with stationary or mobile masts to eliminate”. Until 2025 the party wants according to the resolution proposal 15 provide billions of euros for gigabit networks. The goal is “a nationwide 5G network”.

If the CSU has its way, the identity card should in future only be available digitally, on the smartphone. The ID card has had electronic functions for around ten years. In order to use it, you previously needed a normal ID card in addition to a smartphone.

“We want the online ID card to be even easier to use in the future and the ID card to be displayed directly can be saved on your own smartphone, “says the CSU template. Administrative procedures should be digitized as completely as possible. Frequently used services should be as easy as ordering in an online shop. This should then also apply to other official documents such as the driver’s license.

Cookies as a burden Surfing the Internet should also become less bureaucratic. To this end, the CSU wants to abolish the general obligation to consent to so-called cookies. Cookies store data on the user’s hard drive when surfing the Internet and are also used to present consumers with individual advertising.

In its paper, the CSU demands that users stipulate by law “that users can use generally agree to cookies via a setting in your browser “. From the point of view of the CSU, the obligation to be asked for consent to cookies every time you visit a new website should be dropped. She is a “burden for fast surfing”.

School subjects “Programming” and “Digital Economics” The CSU in the Bundestag is also calling for educational reforms to make schools and pupils more fit for the digital world. “The subjects of programming and digital economy must be available throughout Germany,” says the draft resolution for the CSU regional group meeting on January 6th and 7th. In addition, every subject must also be able to be taught digitally.

A nationwide education platform should enable video conferences and digital learning management, it says. “The federal platform is an open offer to the federal states, which can be networked with federal infrastructures and is available for all educational areas.”

Röttgen: “System failure” of educational federalism A national education summit by the federal and state governments for digitization is necessary. “It doesn’t make sense for each country to develop its own server and cloud solution. It is right and necessary that the federal government support this,” says the paper. “But it is also true that a lot of things arrive too slowly or too little. We therefore want future federal funding to be linked to clear deadlines for implementation.”

The CDU presidency candidate Norbert Röttgen stated “a crisis in educational federalism that had become too clear in the pandemic”. The federal education system is not even able to spend the five billion euros from the federal budget on digitizing schools, he criticized in the newspapers of the Funke media group. “I don’t want to take away any competencies from the federal states, but this system failure is unacceptable. As a result, German schools are far from being able to give online lessons in all aspects.”

VR glasses and consoles for daycare centers The CSU does not want to start promoting digital education in schools . “We want to introduce children to the correct use of digital media as early as possible,” it says – already in daycare. To this end, the CSU wants to campaign for a funding program for daycare centers with a volume of one billion euros. “The aim is to fund the acquisition of cameras for the production of stop-motion pictures, tablets and apps, VR glasses and consoles that combine analog gaming and digital learning.”

(hob)

c't reveals: security gaps in the Dedoles shop

In the run-up to Christmas, online shops were booming and the corona lockdown just before Christmas should have given the virtual shops more popularity. But even those who stayed away from the city centers and shopped on the couch at home may have been exposed to a risk: the clothing shop Dedoles has not plugged security gaps on its website for months.

Dedoles mainly sells funny socks, Panties and boxer shorts. And very successfully, if you believe the company information: According to this, over a million customers have already ordered from Dedoles, the Slovak company is in 19 European countries active, also in Germany. The security expert Daniel Ruf was not interested in the colorful socks, but in the IT security of the shop.

Cross Site Scripting again Ruf promptly discovered several “Cross Site Scripting” (XSS) vulnerabilities in the shop system. He didn’t have to search long for it: He found the first one right away on the homepage, in a central function of the shop.

Funny socks, holey shop: Dedoles has been around for months Problems with XSS holes.

XSS vulnerabilities are one of the most common security problems for websites. If a server fails to check user input, for example if search terms have been typed in, an attacker has the chance to smuggle his own code into the website. This is then executed by the victim’s browser in the context of the site. The attacker can, for example, divert payment data or distribute malware.

Such gaps are dangerous, but also easy to fix. Only small changes to the source code are necessary in order to filter out potentially dangerous characters from user input and effectively prevent the infiltration of harmful content.

None Reaction Daniel Ruf dutifully informed Dedoles of his findings in the hope that the loopholes would be closed before they were discovered by cyber villains. But nothing happened: “So far there has been no response or reaction from Dedoles to my messages,” he told c’t. He therefore asked us to take over the case.

Many c’t investigative searches are only possible thanks to anonymous information from whistleblowers.

If you have knowledge of a grievance that the public should know about, you can send us information and material. Please use our anonymous and secure mailbox.

https://heise.de/ investigative

We then looked for a suitable contact person at the sock shop and contacted them on 20. October the company’s press office. Our email not only contained all of the information required to remedy the vulnerabilities, but also some standard questions: How long have the security vulnerabilities existed, have they been used by cyber villains, and so on.

The company did not respond to our mail either. About a month later, on 16. November, we contacted Dedoles again. This time, too, we waited a month for an answer – in vain. Our questions remained unanswered, the gaps unpatched.

2 / 2021 In c’t 2 / 2021 take a look into the crystal ball and shed light on the IT trends of the coming years. You will learn how you can surf privately and securely, and which browser supports this particularly well. In the IT salary report, we examine whether the pandemic is a good job engine. We test multifunctional printers for the home office, show you how to protect your NAS from hacker attacks and introduce a universal Windows boot stick. You can read this and much more in c’t 2 / 2021. The issue will be available from January 1st 2021 in the Heise shop and at the well-stocked newspaper kiosk.

(rei)

How to Stream with XSplit: Set Up, Scenes, VCam, More

XSplit is a broadcast application like OBS (Open Broadcast Software). There are a few differences in the features because there are paid and free versions of XSplit. XSplit Broadcaster has a professional feel and is not hard to set up because it easily integrates with all the major platforms, including Twitch.

What You Need to Stream on XSplit

XSplit Account

Livestream platform account on Twitch, Facebook, YouTube or Restream

A PC that can handle at least 720p, 30 fps

A capture card if you are streaming from a console.

Mic / webcam / headset: For recording yourself. Check out our lists of best webcams, best gaming headsets and best gaming microphones.

How to Set Up XSplit

1. Sign up for an XSplit account at www.XSplit.com.

(Image credit: Tom’s Hardware)

2. Download the Broadcaster software after you sign up for your account.

(Image credit: Tom’s Hardware)

3. When the software downloads it will ask if it can make changes to your computer, click Yes to continue. It will ask you this every time you open Broadcaster.

(Image credit: Tom’s Hardware)

(Image credit: Tom’s Hardware)

4. Click Broadcast in the left corner the select Set Up a New Output. To set up a new output means to connect your streaming platform like Twitch or YouTube. You can set up multiple accounts for multiple streaming platforms.

(Image credit: Tom’s Hardware)

5. Each platform will request authorization for XSplit to use it . Click Authorize XSplit to use Twitch (or whatever platform(s) you have).

(Image credit: Tom’s Hardware)

6. After you verify your Twitch account it will show up under Choose a Twitch Account. Once you see the account you want to stream to click on it. You can also have multiple Twitch accounts logged in on XSplit. But you can only stream to one account at a time.

(Image credit: Tom’s Hardware)

7. This is what authorizing XSplit to use your Twitch will look like. Click Next.

(Image credit: Tom’s Hardware)

XSplit will automatically determine your server and tell you what your recommended settings are for Twitch and the other platforms available. Just because there are recommended settings doesn’t mean that’s the highest setting you can stream on.

(Image credit: Tom’s Hardware)

XSplit Settings for 1920 x 1080 running 60 FPS on Twitch

Twitch Properties are for technical stream settings like your Bitrate and Codec. You don’t usually have to pay attention to these settings. The only thing I would change for a smooth stream with great graphics is the Video Encoding.

(Image credit: Tom’s Hardware)

Codec encodes or decodes a digital data stream or signal. Currently, it’s on H.264 and is using my graphics card the GTX 1060. I change my Codec to x264 because it has better quality, meaning it gives my stream a more polished look.

(Image credit: Tom’s Hardware)

Bitrate: The lower the Bitrate the choppier the stream can be. I recommend 5000 for 1080p streams. Running at a lower setting like 1280 x 720 at 30FPS the bitrate should be raised to 4000 maximum and 1500 minimum. And the Codec can still change x264.

That’s recommended bitrate for Twitch. Recommended setting for YouTube & Facebook are 4000 to 6000.

(Image credit: Tom’s Hardware)

How to Change the Resolution and Framerate on XSplit

1. Click on the resolution and framerate in the upper right corner.

(Image credit: Tom’s Hardware)

2. Scroll down to Resolution and select the resolution works for your stream. The two most common Resolution options are 1280 x720 (16:9) & 1920 x 1080 (16:9).

(Image credit: Tom’s Hardware)

3. Click on Resolution scroll down to Framerate to change your framerate. While streaming at 1920 x 1080 the framerate is usually 60 frames per second. Streaming at 1280 x 720 the framerate is 30 fps.

(Image credit: Tom’s Hardware)

How to Import OBS Scenes into XSplit

If you have scenes on OBS that you don’t want to recreate in XSplit, there’s a very easy way to port them over. Before importing your OBS scenes to XSplit you must save your scenes.

1. Open OBS, click Profile in the upper left corner & select Export and choose a place to save them.

(Image credit: Tom’s Hardware)

2. Switch to XSplit.

3. Click Tools located in the upper left menu.

(Image credit: Tom’s Hardware)

4. Select Permissions.

(Image credit: Tom’s Hardware)

5. Check the box for OBS Scene Importer and click apply.

(Image credit: Tom’s Hardware)

6. Click Import from OBS Studio.

(Image credit: Tom’s Hardware)

7. Select the scenes you’d like to import and click open.

(Image credit: Tom’s Hardware)

(Image credit: Tom’s Hardware)

8. Click Import. Now your scenes and sources are available in XSplit.

(Image credit: Tom’s Hardware)

How to Create New Scenes & Sources in XSplit

If you are starting from scratch and want to build your scenes in XSplit, whether you’re using StreamElements, StreamLabs, or importing an overlay you made yourself, it’s very easy to use.

1. Click the + button to add more scenes.You can rename the Scene by clicking on the white bar toward the bottom.

(Image credit: Tom’s Hardware)

2. To add an overlay as an image, video, or GIF click Add Source at the bottom of the screen. Your File Explorer will open up and you can choose your overlay from there.

(Image credit: Tom’s Hardware)

How to add an Overlay from StreamElements to XSplit

Adding an overlay from StreamElements and StreamLabs is easy. These are free websites in which to create overlays.

1. Sign up for an account on StreamElements using a streaming platform or your email.

(Image credit: Tom’s Hardware)

2. Create your overlay.

(Image credit: Tom’s Hardware)

3. Click the link button to copy the URL to your clipboard.

(Image credit: Tom’s Hardware)

4. Switch back to the XSplit software and select paste.

(Image credit: Tom’s Hardware)

5. Grab the edges of your overlay to adjust it to the size you want.

(Image credit: Tom’s Hardware)

Using VCam with XSplit

VCam is an additional free program under the XSplit brand that allows any user to remove background without a green screen and create different effects without any additional software.

1. Download install and run VCam. You can get it on XSplit’s site.

(Image credit: Tom’s Hardware)

2. Click continue after Vcam launches and starts its calibration.

(Image credit: Tom’s Hardware)

You can blur your background by moving the slider up & down.

(Image credit: Tom’s Hardware)

You can remove your background.

(Image credit: Tom’s Hardware)

You can add a background from their collection of images or upload your own image, gif, video, or webpage by clicking Add Background.

(Image credit: Tom’s Hardware)

You can also change the brightness, contrast or move the image to the right or left by clicking the edit button near the blur bar.

(Image credit: Tom’s Hardware)

If you have multiple cameras you can select them from the list.

(Image credit: Tom’s Hardware)

Click 3 dots “…” to adjust your webcam settings.

(Image credit: Tom’s Hardware)

How to add your webcam or VCam to your Scene

1. Select Add Source ->Devices -> Video and then XSplit VCam or your Webcam.

(Image credit: Tom’s Hardware)

How to Use Your Phone or Tablet Instead of a Webcam

If you don’t have a webcam you can use XSplit Connect Webcam which allows you to use your smartphone camera as a webcam.

(Image credit: Tom’s Hardware)

2. Open XSplit VCam & select the ^ button.

(Image credit: Tom’s Hardware)

(Image credit: Tom’s Hardware)

3. Click Connect your mobile phone camera.

(Image credit: Tom’s Hardware)

It is supposed to connect because it’s on the same IP address. However, in my tests, it didn’t yet work because it’s in beta. You may have better luck.

How to add your Mic to your Scene in XSplit

1. Select Add Source ->Devices-> Audio, and then select the mic you want to use.

(Image credit: Tom’s Hardware)

Additional mic & audio settings are located in the bottom right corner.

(Image credit: Tom’s Hardware)

2. Click Settings underneath the mic button for advanced options like using Noise Gate.

(Image credit: Tom’s Hardware)

3. Use Noise Gate Threshold if you have a fan that your mic is picking up. Sliding the bar down lowers the gate and lets in more noise. Sliding the bar up raises the gate and let’s less noise in. Checking the Noise Suppression box helps lower all background noise.

(Image credit: Tom’s Hardware)

4. Clicking the settings button will open general and advance settings.

(Image credit: Tom’s Hardware)

5. In the Audio tab, you can adjust your system sound/headphones, microphone, and control if you’d like your audio to have a delay.

6. Use the Audio Preview section to monitor the final audio output from your stream. It may sound like an echo but the echo won’t show up in recordings or livestream.

7. Click the drop-down menu under System Sound allows to choose what audio your stream picks up, like audio from your entire PC, which might include, Discord notifications or YouTube audio. Or you can set it to just pick up your voice and the gameplay.

Due to latency, there may be a delay between the live feed of the game and when it reaches XSplit (particularly if you are using a capture card). The delay checkbox allows you to create a delay on video and audio sources, like your System sound, Webcam, and microphone.

(Image credit: Tom’s Hardware)

8. The white bars next to the microphone and speakerphone icon control the volumes of your mic and the PC sound. Click and hold the left button on your mouse to make the volumes go up or down.

(Image credit: Tom’s Hardware)

How to Set a Delay for a Source in XSplit

1. Find out how much the delay is by measuring it in seconds.

2. Convert that time it into milliseconds. For example, 2 seconds is 2,000 milliseconds.

3. Input that into the delay section and tes it. There will be a lot of fine-tuning to get the delays the sync up.

How to Set Up a Console and Capture Card in XSplit

If you are streaming with a console, you need a capture card to connect it with XSplit

1. Hook up your capture card to your console.

2. Turn on your console.

3. Click Add Source at the bottom of the screen, select devices -> video and select your capture card. You can resize the window by grabbing the edges of the box and pulling them outward or inward.

(Image credit: Tom’s Hardware)

(Image credit: Tom’s Hardware)

How to Set Up PC Game Streaming in XSPlit

If you are streaming PC Games you don’t need a capture card.

1. Open the game you’d like to play.

2. Select Add Source at the bottom of the screen then select Game Capture and the game will appear in the list under Auto-Detect.

(Image credit: Tom’s Hardware)

3. Resize the game display by grabbing the edges of the window and pulling them outward if you want to make it bigger or inward to make it smaller.

(Image credit: Tom’s Hardware)

How to Start a Livestream in XSplit

After your platform of choice, overlay and gameplay are added and your mic and camera settings are configured, you can start livestreaming.

1. Select the button on the top right above your preview window. If you only have one platform click the Stream button and your stream will startup.

(Image credit: Tom’s Hardware)

2. Select the platform where you’d like to go live if you have multiple platforms.

(Image credit: Tom’s Hardware)

3. Click the stream button and your stream is now live. The red button and the message in the bottom right corner confirm your stream is live.

(Image credit: Tom’s Hardware)

Saving Scenes

You can have multiple scenes for different platforms or games. Multiple scenes saved into one file is a Presentation.

1. To save these scenes select File in the upper left corner, Save Presentation, and choose where to save it.

(Image credit: Tom’s Hardware)

2. Select File, New Presentation to create another set of scenes You can even save, load, or add individual scenes by selecting File.

Adding Transitions in XSplit

Transitions are for moving from scene to scene. And XSplit comes with preloaded transitions, which you will find on the bottom right corner of the screen.

(Image credit: Tom’s Hardware)

(Image credit: Tom’s Hardware)

You are able to favorite them with the star button.

(Image credit: Tom’s Hardware)

And if you have a custom transition that you’ve made, feel free to upload it by selecting the transitions, scrolling to the bottom, and selecting Stinger or Luma.

(Image credit: Tom’s Hardware)

Express Video Editor

XSplit has its own video editor which is another program you can download from its website.

How to Get Persistent SSH Connections in Linux Using Eternal Terminal

An SSH connection is typically used to connect with remote machines. It works on a client /

server model, in that the machine being used to connect to a remote machine is called a client, while the latter is the server. To establish the connection with the remote machine, you must know its IP address, as well as the username/password to authenticate the connection.

Because the connection is based on IP address, any change in the IP address automatically breaks the SSH connection, turning even mild-mannered users into rage monsters.

Released under Apache license, Eternal Terminal can be used as a replacement for SSH. Its claim to fame is the ability to re-establish connection to a remote machine without user intervention. This is in sharp contrast to SSH connections, which once terminated have to be re-established manually.

Eternal Terminal relies on SSH to connect and authenticate with the remote machine. So you must have SSH installed and running to be able to connect the different machines with Eternal Terminal.

How to Install Eternal Terminal

The easiest way to install Eternal Terminal is with the Homebrew package manager. If you don’t already have it installed, you can do so with a single command:

bin/bash -c “$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install.sh)”

This command first downloads the install.sh script, and then executes it. Once the installation is complete, follow the instructions on the screen to add brew to your $PATH.

With all that done, you can now use Homebrew to easily install Eternal Terminal with the brew install MisterTea/et/et command. Because Eternal Terminal operates on the client/server principle, just like SSH you’ll also have to install it on the remote machine you

wish to connect with as well.

If you’re put off by the idea of having to use yet another package manager, fret not! Ubuntu users can install Eternal Terminal from a PPA while Arch and Fedora users can use the software repositories to install it.

Apart from instructions on installing it on these distributions, you’ll also find directions to install Eternal Terminal on Debian and openSUSE as well as building it from source on the project’s website.

On the server machine – that is, the remote host you wish to connect with – ensure that the Eternal Terminal service is active. Depending on your distro, you might have to run sudo systemctl enable –now et to activate the Eternal Terminal service on the remote machine.

How to Connect with Eternal Terminal

Once this is done, you can connect to the remote machine in much the same way as you would using ssh.

The syntax of the command is: et username@:{port] . By default, Eternal Terminal uses port 2022. The essential configuration, such as the port number, for Eternal Terminal are stored in the /etc/et.cfg file. See the section below on connection errors if you can’t connect to the remote machine and receive a Could not reach the ET server: :[port] error.

When connecting to a remote machine, you only need to provide the port number if you’ve changed the configuration and opted to use a different port number than the default. Additionally, if no username is provided, the tool uses the current username on the host machine to connect with the remote machine:

Eternal Terminal uses SSH for handshaking and encryption, and if you’ve ever used ssh to connect to a remote machine, the output generated by the et command would seem familiar.

When you first connect to a remote machine with Eternal Terminal, the host machine gets a ECDSA key fingerprint. You’ll be asked to confirm if you wish to continue connecting to this remote machine. If you answer ‘yes’, this key is stored in the ~/.ssh/known_hosts file.

When connecting to a remote machine, Eternal Terminal consults this file as a way of identifying the remote machine. The key is also used to encrypt the data transmitted between the machines. You won’t be prompted to confirm the identity of the remote machine if its key is stored in the ~/.ssh/known_hosts file.

To check the ssh key on the remote machine, you must run the ssh-keygen command:

ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key.pub 256 SHA256:ovbASZs2/xb44fCzxiegocpF3ZYDL/ g3Agtmefh3G6k root@playground (ECDSA)

As you can see, this key is a match for the key fingerprint as provided by Eternal Terminal when trying to establish the connection with the remote host.

You can terminate the connection to the remote machine by typing exit or pressing Ctrl+D. This is yet another overlap in functioning between Eternal Terminal and SSH, but that’s to be accepted since we’ve already mentioned that Eternal Terminal relies on SSH to establish connection to remote machines.

Apart for the change in the bash prompt, Eternal Terminal itself doesn’t produce any output or otherwise inform you when it successfully establishes connection with a remote machine. It similarly doesn’t provide any information about poor connections, or even when the

connection is lost entirely, such as when the remote machine is disconnected or powered off.

As long as you’re connected to the remote machine, Eternal Terminal produces instantaneous results for all commands and operations you execute. However, if the connection is lost, such as when the remote machine’s IP address is changed or if the remote machine is hibernated, then whatever you type on the screen is no longer shown in the terminal. In fact, the terminal will appear to be non-responsive. However, Eternal Terminal remembers all the keystrokes made during this period, and executes them in order once the connection is re-established.

The project achieves this feat by implementing a special layer between the application and TCP layer. The ability to reconnect automatically only works if the connection is terminated at the remote machine.

If you restart the host machine while connected to the remote machine, the Eternal Terminal session isn’t killed automatically. Instead, such Eternal Terminal sessions are referred to as orphans, and there’s no way for you to connect with such orphan sessions. Your only recourse is to establish a new connection with the remote machine. When you make a new connection, the orphaned connections aren’t terminated automatically and will persist until you manually kill them. You can do so by using the -x command option:

et -x linuxlala@192.168.0.9

This command kills all orphaned sessions and establishes a new connection with the remote machine.

Eternal Terminal is often compared with alternatives such as Mosh. While the latter also boasts of the autoreconnect feature, Eternal Terminal additionally supports scrolling, which means that you’ll be able to go back and forth and review the generated output on the terminal screen.

How to Solve “Could Not Reach ET Server” Error

Depending on the distribution running on your remote machine, you might not be able to create an Eternal Terminal session when you first run the et command.

If you encounter a Could not reach the ET server: :[port] error, this means that the remote machine doesn’t allow incoming connection on the specified port.

You can either change the configuration to use a port, which is open for use, or alternatively open a port for Eternal Terminal. How you do this will depend on the distribution and the firewall utility. For instance, Fedora users can open a port with the sudo firewall-cmd addport=2022/tcp command. You can list all open ports with the sudo firewall-cmd –list-ports command.

If you’re using UFW however, such as on Ubuntu, you’ll have to run the sudo ufw allow command to open the specified port. You can then run the sudo ufw status verbose command to confirm that the specified port is now open.

Should you encounter any other problems with Eternal Terminal, you’ll likely find answers in the issues section of its GitHub page. It’s a popular project and many common issues, such as lack of colours in the output of ls command and X11 forwarding workaround have already been addressed and closed by the developer.

This article originally appeared in the November 2020 issue of Linux Format Magazine.

Review Qnap TVS 672N: fast, flexible and scalable cloud storage in-house

RESUME The Qnap TVS – 672 N is a NAS aimed at the true audio enthusiast. With the enormous amount of storage capacity, lovers of films and series will not complain. Support for Roon, Linn Audio and the possibility for virtualization are big pluses. The scalability of the hardware ensures that you are ready for years to come. The Qnap TVS – 743 N is (almost) a must have for the digital audio enthusiast.

PLUS POINTS Hardware Scalability Future proof Storage capacity Roon Virtualization MINUSES Price can deter You still need to buy hard drives With the exponential growth of streaming services, we would almost forget that not too long ago we provided our own streaming or still do. The NAS is an extremely suitable system for this. NAS systems have gone through many developments and are now able to accomplish a lot more. We’re going to enter the Qnap TVS 672 N and at the same time wondering if owning a NAS is still interesting.

Qnap TVS 672 N: Large amount of local self-managed storage

Netflix, Disney +, Amazon, Videoland, Tidal, Spotify, Deezer and Qobuz. Just a quick selection from the enormous range of streaming services. But many audio enthusiasts have already built up a huge library of music. And many film lovers also have a collection with films and series. Of course, it would be weird to pay a streaming service money to watch movies or listen to music you already own. So why not start your own streaming service at home on your own computer network?

We have received a heavyweight from Qnap: the TVS – 672 N NAS server. NAS stands for Network Attached Storage, or in plain English, storage capacity on the network. Perhaps an overkill for one person, a solution for another. We are curious what the Qnap TVS – 743 N us in the streaming era can offer.

Qnap TVS 672 N: Scalable Hardware for User (s)

Technology has an expiration date . You know from a smartphone that a faster and better model will be on the market in a year. A NAS server should be more aging-free. The Qnap TVS – 672 N therefore has a lot of functionality on board, which you can scale. We have the test model with 4 GB DDR4 RAM (RAM stands for Random Access Memory, that is working memory, not storage memory). The processor on board is a desktop processor and supports up to 32 GB RAM. So if the initial amount of RAM is not enough, you can just expand.

This also applies to the storage capacity. It is also easy to expand. Our test model TVS 743 N has six hard drive bays. These can easily be put in at the front. In addition, the device also has 2x m.2 NVMe ssd storage slots (Gen 3 x2.2 GB / s). This makes SSD caching possible, which can increase the overall speed considerably. There is also a USB connection on the front for easy and fast file transfer and a display for reading information.

The party really starts at the back. The first thing that strikes us are the two expansion options with Pcie. It is therefore possible to expand with, for example, a (small) video card. Or the Qm2 card for an extra SSD, if necessary. We also see three ethernet connections type RJ 45. These have different speeds. 5G / 2.5G / 1G network ports make it possible to work with large files over the network. There is also 1x a USB 3.2 Gen 1 port, 2x a Type C USB 3.2 Gen 2 port and 2x Type A USB 3.2 Gen 2 port. Because the Qnap TVS – 743 N equipped with a desktop I3 8100 T 3.1 GHz processor, you have access to Intel graphics. At the back we also find an HDMI connection that supports 4K. To make it complete also a 3.5 millimeter audio input and output.

On the Qnap TVS – 672 N runs Qnap’s own software. The Qnap operating system runs from 5 GB flash memory and that is nice and fast.

This is really just the hardware that we can see on the outside just as quickly. This gives you as a user, but also as a small company, an enormous amount of functionality. And we haven’t even looked at the software yet. It does indicate that this NAS is focused on the future.

Qnap TVS 672 N: Roon Ready

Connecting and installing is almost as easy as connecting a Sonos Five or Bluesound to the network. Qnap has paid attention to this in the right way to make it as easy as possible for the user (s). We set a password and end up in the Qnap environment of the NAS server. The first thing to do is add storage. We set a raid volume. This ensures that we significantly reduce the risk of data loss. Preference is given to large discs in sets of two. The support for a large amount of storage is of course available. Drives up to 18 TB are supported should it be needed now or in the future. Multiply that by a factor of six and we can get rid of quite a bit of music and movies, even with raid volumes configured.

There’s actually little you can’t do with the Qnap TVS – 672 N can do. You can set up the Nas for the office or for entertainment. And the latter is exactly what has our attention. Qnap has its own piece of software for music and movies. That works fine and for the average music and video enthusiast this is more than enough. Butâ ?? ¦â ?? ¦ there is something that we as audio enthusiasts attach a lot of value to. Roon! One app to rule them all! Roon does not need any further introduction (If you do, read our article about the Roon Labs software). But if you still want to read more about it, read all about how Qnap how Roon works enabled on the NAS. It can be downloaded and installed as an app. There is a small catch. To get Roon working properly, Roon has a few requirements. For example, Roon would run best from a separate SSD of at least 300 GB and 4 GB RAM to keep it running smoothly. The SSD can be both internal and external. 6 TB of storage is also not an unnecessary luxury. So if you want to do a lot on the Qnap TVS – 672 N, you can always upgrade the amount of RAM. Consider, for example, a mail and / or Ldap server, together with Roon and also Plex. Because Roon, as we know, is a demanding piece of software. Still, it’s nice to know that the Qnap TVS – 672 N is prepared for it.

However, the possibilities don’t stop there. We choose to install Roon on an external Samsung T7 SSD. The Samsung T7 SSD uses USB 3.2 Gen 2 and can therefore use speeds of until 1000 Get Mb / s. Plex is slightly less demanding and can be installed without Diva behavior.

Qnap also offers the possibility to run virtual systems. For this Qnap uses the software Container station. This gives you the option to run a Linux virtual machine or use Docker. Why can that be useful (and we think mainly in audio and video)? Because it gives you the option to set up a virtual machine that is purely focused on audio. Suppose you don’t have Roon but Linn. Qnap also provides this. But if you prefer to work with a different system, you can set up a virtual machine that serves as an audio streamer or database. Many people love to interact with a Raspberry Pi and try things out. On the Qnap you just create a virtual â ???? Raspberry Piâ ???? and you start working with it. Maybe you have a security camera around your house and you want the images for a few more days can look back. So there are a lot of possibilities and functionality that the Qnap TVS – 672 N us can offer.

Qnap TVS 672 N: work in your own cloud Today you cannot open the newspaper or newspaper app or there is a message about a data breach. Another company that has lost data or data that has ended up on the street. Working in â ???? the Cloudâ ???? is of course great and also offers many outcomes, but â ???? The Cloudâ ???? In short, is still someone else’s computer. And the use of someone else’s computer is usually not unlimited, nor is it free. Why not just your own cloud? That is not a bad idea at all in this special period, in which we all work more and more in different places from a distance.

This actually happened organically for us. We had the Qnap TVS – 672 N fully equipped for entertainment. But slowly we started to use more functionality. We started working on the Qnap with text files and photos that we want to be able to share. More and more the Qnap started to become a digital partner in our daily use. With the Boxsafe app you can link the suite from Google or that of Microsoft Office 400.

But if there are more information is put on the Qnap, another aspect becomes important. Especially if the server can also be accessed from the internet. We are referring to information security. This is a subject to which complete books and training courses are devoted. Telling it in one paragraph how this should and works is simply not possible. Nevertheless, we would like to give a few tips. Make sure you have good passwords, but preferably a passphrase. Create separate users, other than Admin and do not give those users the admin rights. This separates the powers / rights. If you want to use third party software, make sure you can validate the origin of the software. It should preferably be a reliable source and maker. It’s safer to use Qnap’s app center itself, but in some cases it’s no different.

Qnap TVS 672 N: Final Verdict

The Qnap TVS – 672 N is a fairly heavyweight. With a price of 1. 599 euro is the Qnap TVS – 672 N not suitable for everyone. The price of one or more hard drives is in addition to that, but the user can start with one or two drives and expand later if necessary. But for the digital audio and video enthusiast, the Qnap TVS 672 N one solution and offers more than enough possibilities to provide storage. The Qnap is also highly scalable and you will always be able to upgrade in the coming years. Think of more RAM, an M.2 SSD or even a video card. And as an audio enthusiast, you don’t have to purchase a separate Roon server, you just install it on the Qnap. An Intel Nuc that functions as a server can easily cost around 365 a 599 euro (without storage or memory), but can expire when using a Qnap NAS.

Our initial question “Is it interesting to own a NAS?” we can answer with “yes”. Qnap also has smaller models and also more extensive models. Should the Qnap TVS – 743 If you are a heavy overkill or even fall short, then there is certainly a Qnap model that suits your personal needs.

Qnap TVS 672 N: c inclusion

The Qnap TVS – 672 N is a NAS aimed at the true audio enthusiast. With the enormous amount of storage capacity, lovers of films and series will not complain. Support for Roon, Linn Audio and the possibility for virtualization are big pluses. The scalability of the hardware ensures that you are ready for years to come. The Qnap TVS – 672 N is (almost) a must have for the digital audio enthusiast.

Hifi rating: five stars

Price 1. 599 euro

rC3: Mastodon, Matrix & Co. – Building blocks and hurdles for decentralized online systems

Internet users spend a lot of time in the central silos of Google, Amazon, Facebook, Apple and Microsoft. The US giants benefit from network effects that are driving more and more users to the platforms. A wide range of technical initiatives have set themselves the goal of combating the resulting monopoly structures in online services and building decentralized alternatives. Even proponents of such projects admit that most of them are still emulating the central figures: they have to catch up or develop their own killer apps.

Far from a breakthrough Web hacker Will Scott gave an overview of the current state of affairs at the remote Chaos Communication Congress (rC3). According to him, 2020 have both federated communication networks like the messenger service Matrix and decentralized platforms like the social network Secure Scuttlebutt (SBB) , the InterPlanetary File System (IFPS) and – in a broader sense – cryptocurrencies have become more widespread. But most of them are still far from a breakthrough and are confronted with many big questions about growth options.

BitTorrent is one of the experts in censorship-resistant web Applications with three to four million users a day to one of the largest decentralized entities. The peer-to-peer network (P2P) offers around 2.5 million active torrents. In order to keep an eye on these and to download them in a resource-saving manner, there are around 400 special open tracker applications. There are distributed hash tables (DHT) with over four million torrents for searching.

Good year for Twitter alternatives (Image: rC3 media.ccc.de, CC BY 4.0)

Mastodon also had a “good year” according to Scott. The Twitter alternative now contributes around three million active users and about 5000 busy servers to the social media world “Fediverse”. 70. 000 Members regularly post content themselves, the rest is limited to reading along. The number of Matrix users was said to have risen to 2.5 million at the same time, which the server on 2500. The significant increase is due, among other things, to the fact that the Bundeswehr and parts of the German education system had decided to switch to the open communication protocol. In addition, Matrix is also subsidized by the government in France.

IPFS, which works similarly to BitTorrent, has exceeded two million users, of whom 20 Percent operated their own desktop nodes, said the computer scientist happily. It includes a total of 5000 guaranteed DHT nodes and around eight million daily CIDs (Content Identifiers) for recognizing content. Planetary.social has also expanded a special SBB protocol to the mobile Internet. The self-hosted, mesh-networked social media system SBB itself comes to around 10. Members, several hundred of whom posted content and pushed the underlying P2P protocol .

Bitcoin has around one million active accounts and 11 . “Full Nodes”, which generated new blocks for the production of the digital coins, performed Scott. There is a big gap between users and servers here. This is due to the fact that a complete node alone requires around 70 gigabytes for the blockchain. Basically, the scientist also counted about six million SMTP and good 500. 000 WordPress server and 20 Millions of Jitsi users to the decentralized network.

Problems of growth While some of the offers still require a critical mass of users, the more successful of them are already suffering from growing pains. The goal of federated network services was to externalize and better balance the heterogeneity of resources between clients and servers, explained Scott. Some of the connected instances have more storage space and are more available. How much all members benefit from it depends heavily on the heuristics used and the algorithms created with them.

The different models

(Image: rC3 media.ccc.de, CC BY 4.0)

In mesh networks, messages and content often spread like rumors, which required additional synchronization efforts, clarified the hacker. Often there is no catchy concept for the structure of the network, so that its properties are also difficult to implement. DHT, on the other hand, grow massively quickly with the number of users who bring data and resources with them, so they scale poorly and, in abstract form, can be compared with a central database. The achievability of the goal of getting content as close as possible to the location of one’s own computer again depends on the quality of the algorithms.

According to Scott, broken nodes also lead to crashes and delays. There must therefore be incentives not to do anything “bad” in the network. However, this approach also leads to more centralization, since individual units that acted in an exemplary manner received more power. If you wanted to identify individual users, this could be done via an external authority. However, this raises data protection problems. Even now, metadata such as IP addresses are not protected by some decentralized service providers. Advanced encryption and at least pseudonymization solutions are required here.

Decentralization against the power of the great The researcher identified bandwidth as a further problem, especially for P2P networks: uploads are still designed for only half the capacity of downloads on most Internet connections. The latency between neighboring nodes is comparatively low, but connections between end users are usually not well developed. For Scott there is still no doubt: “We need decentralization, otherwise the power of the big ones will increase.”

(mho)

rC3: Massive vulnerabilities in apps from mobile network providers

Florian Schweitzer presented his personal collection of vulnerabilities in the area of Cross Site Request Forgery (CSRF) in web applications of Austrian mobile phone providers at the remote Chaos Communication Congress (rC3). The hackers described the security gaps, also known as “session riding” or “sea surf”, and the attacks based on them as “particularly dramatic” because they were “very easy to exploit”.

Simple attack, difficult to detect Unlike attacks on the Signaling System 7 (SS7) used in 3G, there are no CSRF Access to a gateway and no know-how about network operation required, the hacker explained. Sea surfing attacks could start with a “boring, annoying newsletter”. A click on an allegedly redeeming “Unsubscribe” link contained therein is often sufficient for an intruder to set up a call diversion for a target person. This also enables the passwords of e-mail accounts with providers such as Google, Yahoo or Microsoft that are linked to the phone number to be reset and the accounts to be adopted.

When unsubscribing from a newsletter, only a website appears on the user’s screen, after which one has successfully unsubscribed, Schweitzer explained the procedure. If you then try to log into your e-mail inbox, you are locked out. Anyone who then connects to the called up link can possibly see a form with two invisible fields in the source code of the page that pops up.

One of them is directed to the site of the mobile phone provider, where a new telephone number is automatically entered and the call diversion is set in the background, the activist reported. An invisible iframe is loaded and automatically sent when the link is opened. Google and other e-mail providers also persuade users to supposedly store a mobile phone number to protect their account in order to prevent forgetting a password. Such an account can also be reset.

No new problem According to Schweitzer, CSRF in itself is nothing new and has already been described as a “confused deputy” problem in the 1980 er. In principle, one program with fewer privileges will get a second with more rights to do something. The authentication can also be done with IP addresses. The attacker sends a link and thus induces the user to visit a compromised page. This sends a get request and receives the payload back in the form of a form. This is sent to another site where the target person is already authenticated. The server then believes that the victim has sent the command or the request and is taking the desired action.

In demos, the security expert demonstrated how relevant loopholes at Austrian providers can be exploited. Ventocom, a provider that enables third parties to operate their own mobile phone brand, has proven to be vulnerable. Rapid Mobile, a Linz cable operator and Aldi-Süd subsidiary Hofer Telekom (HoT) make use of this offer. The latter alone has issued over a million SIM cards in Austria and around a hundred thousand in Slovenia.

The customer login to hot.at is password-free using a PuK code, which can be sent by e-mail can leave. All kinds of changes can be made in the internal area, including the customer password. For this you have to enter the old one. If you enter a new e-mail address or set up call diversion, this is not necessary. The attacker can use a fake newsletter with the problematic link to enter an electronic mailbox controlled by him and receive an access link there.

Improved protection in Chrome Schweitzer also showed the next steps with call diversion, changing the password on Google over the phone and taking over a Gmail account. For hot.at, there is already a valid session cookie in the target person’s browser that opens access to the customer account. The post request running in the background via an iframe works with Safari, Firefox, Samsung Internet, Opera and Internet Explorer, where even phone calls can then be completely recorded. Chrome have introduced stricter rules for cookies in Mitte 2019 with the “SameSite attribute” and thus significantly improved protection against CSRF.

With the provider “Drei” the hacker came across a comparable vulnerability, which affected 3.9 million accounts in Austria. Anyone who accesses the Internet via the provider’s cellular network is immediately identified by their number and can always log into their account automatically. This leaves the choice between a valid session cookie and the default activated auto-login for the further procedure. A permanent account takeover and eavesdropping are not possible here, however, since logging in only works with a current click due to an implemented function against “clickjacking”.

Even with the A1 subsidiary Yesss, which operates as a Schweitzer found such gaps to act as a service provider for ten virtual mobile phone providers, such as the newspapers Kurier and Krone, as well as an energy supplier. This affected over 5.4 million customers. Since he – in contrast to the other providers – has found a contact person for IT security here, the weaknesses have since been remedied after a hint from him. An attacker was even able to set a customer password for an entire number porting and, for example, read SMS and reset Twitter accounts. The web app from T-Mobile Austria (Magenta) was “safe”.

Dozens of million devices in Europe are vulnerable Schweitzer estimates that a total of 40 percent of Austrian citizens were (were) affected by the gaps. Across Europe there are likely to be tens of millions, as things look hardly any better there. Vulnerable endpoints could be identified in a short amount of time. Actually, it is forbidden in the EU to offer such attack surfaces in important infrastructures. Apparently the sanctions are too low and nobody is checking whether security standards are being met. A heise online reader recently noticed a vulnerability on the Vodafone Germany website that allowed a similar attack via “Reflected Cross-Site-Scripting”.

The expert recommends developers to use anti-CSRF To implement tokens, to set a strict “SameSite” rule and to require a password for important changes to account data. The “same-origin policy” of browsers does not offer any remedy. Users should not use their phone number to restore accounts, as mobile operators are “the weakest link in the security chain.” You should not log into important accounts with the standard browser, deactivate auto-logins and actively log out.

(mho)

Blazor WebAssembly, Part 3: Authentication and Authorization

Already when creating a Blazor WebAssembly project in Visual Studio or on the command line with dotnet new there are options to configure an authentication. With the option ASP.NET Core Hosted in connection with Individual Accounts | Store user accounts in-app you get a mixture of a Blazor WebAssembly application with a user login and administration implemented in ASP.NET Core Razor (as a server-side solution). Alternatively, you can connect to an OIDC provider (Open ID Connect).

The third of the tutorial shows how you can use any WebAPI backend for authentication, even if it is not OIDC compatible. The MiracleList backend implements its own authentication mechanism based on user names and passwords for logging in, which then provides an authentication token (as a character string) for subsequent WebAPI calls. In the first part of the tutorial, the AuthenticationManager class was implemented, which enables this mechanism in the Login () encapsulates. So far it was called in the component Index.razor . This should now be shifted to a separate login page.

Login page for the front end Figure 1 visualizes the login page to be created in the MiracleList Blazor front end with input for user name and Password and a button. Listing 1 shows the associated Razor template page Login.razor and Listing 2 the matching code-behind file.

Login page generated from the Razor component “Login.razor” (Fig. 1)

using Microsoft.AspNetCore.Components; using Microsoft.AspNetCore.Components.Authorization; using System.Threading.Tasks; namespace Web {public class LoginModel: ComponentBase { public NavigationManager NavigationManager {get; set; } AuthenticationStateProvider asp {get; set; } = zero; #region properties for data binding public string Username {get; set; } public string Password {get; set; } public string Message {get; set; } #endregion protected override async System.Threading.Tasks.Task OnInitializedAsync () {// response to this URL if (this.NavigationManager.Uri.ToLower (). Contains (“https://www.heise.de/logout” )) {await ((AuthenticationManager) asp) .Logout (); }} /// /// Reaction to user action /// protected async Task Login () {Message = “Logging in …”; bool ok = await (asp as AuthenticationManager) .Login (Username, Password); if (ok) this.NavigationManager.NavigateTo (“https://www.heise.de/main”); else Message = “Login Error!”; }} // end class Login} Listing 1: Razor template for the login page (Login.razor)

@ page “/” @page “https://www.heise.de / Logout “@inherits LoginModel; User login MiracleList is a sample application for a single-page web application (SPA) with ASP.NET Core Blazor Webassembly (@ System.Runtime.InteropServices.RuntimeInformation.FrameworkDescription) for task management. Author: Dr. Holger Schwichtenberg, www.IT-Visions.de, 2018 – @ DateTime.Now.Year
Enter the combination of your e-mail address for user login and any password. If there is not yet a user account for this e-mail address, a new user account is automatically created with a few sample tasks.
E-mail address: Password Register @ ErrorMsg MiracleList Tutorial v @ System.Reflection .Assembly.GetExecutingAssembly (). GetName (). Version.ToString () Listing 2: Code-behind file for the login page (Login.razor.cs)

In the program code, readers will see for the first time in this tutorial how to redirect from one URL to another. To do this, you can create an instance of the Blazor class NavigationManager

public NavigationManager NavigationManager {get; set; } inject and then use the method NavigateTo () specifying the relative destination URL:

this.NavigationManager.NavigateTo (“https://www.heise.de/abc/def”); You can also use the NavigationManager to check the current Query URL. Listing 1 shows two different routes with @ page for the Razor Component Login.razor Directives defined. That is permitted in Blazor; it is up to software developers to give this meaning. In the program code in the life cycle event OnInitializedAsync () (Listing 2), a distinction is made between the fact that when the call is made with the relative address / logout a deregistration takes place and then the registration form appears again. This is an elegant solution that allows you to call up the URL http: // server / logout can execute the registration.

So that the revised program code of the code-behind file Login.razor.cs recompiled, is in AuthenticationManager a routine Logout () to supplement the operation / Logoff calls in the server (see Listing 3).

using System.Threading.Tasks; using system; using System.Security.Claims; // NEW in Part 3 using Microsoft.AspNetCore.Components.Authorization; // NEW in Part 3 using MiracleListAPI; namespace Web {/// /// Authentication for debugging /// public class AuthenticationManager: AuthenticationStateProvider // Inheritance NEW in part 3 {MiracleListAPI.MiracleListProxy proxy {get; set; } public AuthenticationManager (MiracleListAPI.MiracleListProxy proxy) {this.proxy = proxy; } public const string ClientID = “2018 – 1111 – 1111 – 1111 – 111111111111 “; public LoginInfo CurrentLoginInfo = null; public string Token {get {return CurrentLoginInfo? .Token; }} /// /// Login to be called by Razor Component Login.razor /// public async task Login (string username, string password) {bool result = false; CurrentLoginInfo = null; var l = new LoginInfo () {Username = username, Password = password, ClientID = AuthenticationManager.ClientID}; try {CurrentLoginInfo = await proxy.LoginAsync (l); if (String.IsNullOrEmpty (CurrentLoginInfo.Token)) {Console.WriteLine (“Login NOT successful:” + this.CurrentLoginInfo.Username); } else {result = true; Console.WriteLine (“Login successful:” + this.CurrentLoginInfo.Username); }} catch (Exception ex) {Console.WriteLine (“Login error:” + ex.Message); } Notify (); return result; } /// /// Logout to be called by Razor Component Login.razor /// public async Task Logout () {Console.WriteLine (“Logout”, this.CurrentLoginInfo); if (this.CurrentLoginInfo == null) return; var e = await proxy.LogoffAsync (this.CurrentLoginInfo.Token); if (e) {// Remove LoginInfo in RAM for clearing authenticaton state CurrentLoginInfo = null; Notify (); } else {Console.WriteLine (“Logout Error!”); }} /// /// NEW in part 3: Notify Blazor infrastructure about new Authentication State // / private void Notify () {Console.WriteLine (“Notify:” + CurrentLoginInfo? .Username) ; this.NotifyAuthenticationStateChanged (GetAuthenticationStateAsync ()); } // NEW in part 3 public override async task 111111111111 GetAuthenticationStateAsync () {if (this.CurrentLoginInfo! = Null &&! String.IsNullOrEmpty (this.CurrentLoginInfo.Token) &&! String.IsNullOrEmpty (proxy.BaseUrl)) {const string authType = “MiracleList WebAPI Authentication”; var identity = new ClaimsIdentity (new [] {new Claim (“Backend”, proxy.BaseUrl), new Claim (ClaimTypes.Sid, this.CurrentLoginInfo.Token), // use SID claim for token new Claim (ClaimTypes. Name, this.CurrentLoginInfo.Username),}, authType); var cp = new ClaimsPrincipal (identity); var state = new AuthenticationState (cp); Console.WriteLine (“GetAuthenticationStateAsync:” + this.CurrentLoginInfo.Username); return state; } else {Console.WriteLine (“GetAuthenticationStateAsync: no user”); var state = new AuthenticationState (new ClaimsPrincipal (new ClaimsIdentity ())); return state; }}}} Listing 3: Extended class AuthenticationManager

In addition, the Login () method to be redesigned: Instead of using the static login data, this now requires two parameters for user name and password that can be set by the caller:

public async task Login (string username, string password) { var l = new LoginInfo () {Username = username, Password = password, ClientID = AuthenticationManager.ClientID}; …} Calling Login () in Index.razor.cs must be completely omitted. Off

protected override async Task OnInitializedAsync () {// TODO: Must be done later in the login screen if (await am.Login ()) {await ShowCategorySet (); }} becomes

protected override async Task OnInitializedAsync () {await ShowCategorySet (); } With this the application compiles again, but at the start it immediately runs into a runtime error: The error message “System.InvalidOperationException: The following routes are ambiguous: ‘/’ in ‘Web.Pages.Login’ ‘/’ in ‘Web.Pages.Index'” is meaningful: Each route can only be assigned to exactly one component. However, two root components have been defined for starting the application. It is therefore important to set the route in the file Index.razor change from

@ page “/” in

@ page “https://www.heise.de/main” Now developers are directed to the registration form when the application is started and after successful registration via NavigationManager with this .NavigationManager.NavigateTo (“https://www.heise.de/main”) to the main component index. razor . But unfortunately nothing prevents the user from being directly http: // server / main call and bypass the login.

Posts navigation

Older posts
Newer posts