精华区文章阅读

发信人: zzn (爱你到内伤), 信区: Network
标题: mms协议英文资料(30)
发信站: 哈工大紫丁香 (2003年08月23日10:57:12 星期六), 站内信件

Your Personal Data Security Flaw (maybe)
This regards data sent from your computer while Media Player sends its 0x32
command to a streaming server. It has recently been discovered that the data
in this field can (but not always) reveal very personal information about
your computer and settings.
During a packet monitor test (using Media Player 7.1), data from a local
computer to server included the persons internet service provider ISP name,
personal user name for that account and account password!!! The password
information has only ever been detected once and may have been misleading
because the persons password was also a setting in the network logon
settings. It is unclear if password data is really sent or not. Usually the
data is your username and ISP name – that is bad enough. This seems to be a
gross invasion of privacy, this information in the wrong hands could be very
damaging indeed. All other information like your computer settings and
operating system is included in this transmission. Why does this level of
data need to be sent to a server?
*Latest news:
I have been assured that this data is actually harmless network data logging,
that maybe, but password and user ID data? Is this necessary. Decide for
yourself.
And the search goes on
We have only scratched the surface of what command specific data consists of,
in time there should be more discoveries made regarding the composition of
command packets. We do have enough information to write downloading and
viewer software, but with more information we can only improve the
functionality of the code.
Remember, if you have any information regarding MMS commands and protocol,
join our team and get in touch.
We are putting the MMS jigsaw puzzle together piece by piece
Acknowledgments:-
Thanks to Per for pointing out the 20 to client command.
Thanks to Tony for his explanation on IEEE 754-1985 64bit double precision
values used as Time Point values.
I would like to thank Dirk for his input and for pointing out observations in
the 06 command which then pointed to the whole error code section being
written and understood. And for his continued support.
Thanks to Lawrence for his great help with the 1A password command and
authentication.
Yanna with his own MMS document which did help the writing of this document.
The new ASFR+ recorder software is written by Yanna.
The anonymous writer of the document named ‘ Introduction to Advanced
Streaming Format version 1.0’ dated 19/04/01 – an inspiration sir! (from
the original ASF recorder project)
To Christian for his ideas on command 0x15 and 0x18 network timing.
Everyone who has emailed with bug report data and their own findings and
theories about MMS.
Not forgetting our excellent web host : sgk.
And everyone involved within the expanding SDP team. If we missed anyone,
sorry…
Disclaimer
Ok, this is not a complete protocol description. The information in this
document is NOT guaranteed to be accurate or even to work at all. These are
my personal findings only, using very basic com port monitoring software. No
reverse engineering or disassembly of MicroSoft ? software was carried out,
any protocol I have written in this document could be incorrect or
incomplete. But it works!
I take no responsibility for any software written by others using this
information to enable copyrighted streaming download. That could be illegal.
Thanks for reading.
--
在这里倾听夜暗的歌声/冥冥中谁奏响沉寂百年的古琴/我又看见夏日里美丽的黄昏/
白天奔忙于生活的人/傍晚就三三两两走到一起：/是南方这样的温暖时常发生

路草长满街道/幸与不幸从不同的着落点退出/他们错过记忆里的某件事/
仿佛一只只岩鹰/方向改变了身体仍在憧憬中/越过一座座灰色的城市

※ 来源:·哈工大紫丁香 bbs.hit.edu.cn·[FROM: 202.118.243.49]
※ 修改:·zzn 於 08月23日11:02:41 修改本文·[FROM: 202.118.243.49]

Network 版 (精华区)