Jump to content
Security Installer Community

GX Remote


Recommended Posts

3 hours ago, SecureAlarms said:

Ah ok thanks. Not had anything emailed. I will try this again with another email account maybe.

 

Sorry, it's actually given as part of the registration part.

Screenshot_20200208-112215__01.thumb.jpg.fd149154791d9c9df077b35c7a658b3a.jpg

 

Link to comment
Share on other sites

16 minutes ago, Logan said:

Seems that @al-yetiand me found a panel we both like

 

It's interesting that Eaton don't seem to state what their app encryption actually is.  "Market Leading" and "Internally tested by their own experts" means nothing.   At least Honeywell's app states that it uses AES. It does also perform per session RSA key exchange too, but for some reason they don't mention that. The only thing that lets it down security wise is that there's no certificate, so the connection is susceptible to a man in the middle attack.

 

I know that Texecom hastily added AES, but they generate a fixed key and that's not good either.

 

Yeti, do you have more info as to the actual encryption used by Eaton ?  

Link to comment
Share on other sites

1 hour ago, GalaxyGuy said:

 

It's interesting that Eaton don't seem to state what their app encryption actually is.  "Market Leading" and "Internally tested by their own experts" means nothing.   At least Honeywell's app states that it uses AES. It does also perform per session RSA key exchange too, but for some reason they don't mention that. The only thing that lets it down security wise is that there's no certificate, so the connection is susceptible to a man in the middle attack.

 

I know that Texecom hastily added AES, but they generate a fixed key and that's not good either.

 

Yeti, do you have more info as to the actual encryption used by Eaton ?  

Data fusion has that info

 

 

And I am 100% the Eaton man scantronic is reading this 

Link to comment
Share on other sites

Latest V6 Eaton firmware is all about security, security, security, there must have been a major encryption change of some kind as all app users have to reregister, this has not happened with previous incremental updates.

So, I've decided to take my work back underground.... to stop it falling into the wrong hands

 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.