Open Netdata? Spyware in a secure system?

NethSecurity
61

Man I’m sorry, but you don’t read what people say and your way is not aligned with our community values. I’m sorry but I need to silence you again

By configuration the enabled option is set to no by default,
you can disable the registry by editing the configuration files.

4 Likes
62

:water_pistol::cowboy_hat_face: :right_arrow: :headstone: :heavy_equals_sign: :+1:

@alefattorini, The Silencer - thank you again man.

63

Sorry for late reply, been offline for a while.

This is what I get when I follow your instructions on a default NethSecurity instance:

{

"action":"access",

"status":"ok",

"hostname":"registry.my-netdata.io",

"machine_guid":"XXXX",

"person_guid":"XXXX",

"urls":\[

    \["XXXX","https://registry.my-netdata.io/",1769011237000,10,"registry.my-netdata.io"\]\]

If I search for actual GUID’s, “AI“ identifies 4 characters in the person GUID as possible fault code for BMW engines, no actual search results. The machine GUID is part of a part number for a specific brand of batteries. 3 results total and only images.

I have to provide the machine GUID from my NetData instance to even get this result so I’m genuinely not getting your ire.

Maybe more enlightened heads could explain what could be used for targeted attacks on my system.

64

If you have to access a remote system to get your data then all your data is being sent to that remote location.
So they have all your data anyway…
They have your internal IP addresses and much more…

Look at the code, know servers, know what you can get from a tiny piece of information….

If you accessed my website, I would be able to find the basic details of you, then from there I would be able to use your IP address firstly to get all your internet activity from that IP, then from there that would give me email addresses and more.
Not that hard to do, but you have to realise that if you move your machine to a different IP, you then still have the same identifiers and are being tracked.

So relying on a THIRD PARTY for something that is meant to be a SECURE SYSTEM is an anathema.

I have since built my own system on my box that has all that information stored locally, where it is generated, and then I read and use that from the interface. So I have what you use a spyware third party for, and I have it in a system that works and doesn’t break like whatever NethServer uses too.

If you want to have all your information given to my-netdata information collection a, gathering, and sale of, location then that is up to you. If you decide to jeopardise your security to have that functionality, then I really don’t care about you people because you don’t care about your code, your software, or any form of security in the system that you are creating an interface for.

65

So what is your point? We got it the first time around…

66

Khulisa didn’t, that’s why I was replying to their message. I wasn’t talking to you directly anyway.

67

Nope, you did not. You simply added a reply to the thread.

Noted, have a nice day.