UPnP security issues.

[zeppelin]

I can't find any mention of this topic via the search box, so apologies if it has already been discussed.

I'm planning to get a Naim Unitiqute, for use with a laptop and external HDD.

Naim promote the use of a NAS and the UpnP system/facility/function/whatever you call it to stream music. However, there have been a lot of concerns raised by respected companies and individuals ( including the FBI) about serious security failings in UpnP providing a way into your computer for baddies.

I mentioned this to the company selling the Naim products locally and they didn't feel able to comment at all. They said I was the first person ever to raise this concern.

Frankly, I'm surprised. What do you think?

 

[AmDismal]

UPNP is a security disaster, as it has no authentication. This means that any command from anywhere is assumed to be legit. You therefore need to disable access via UPNP from outside your LAN - most routers do this by default nowadays. Then you may need to open up any specific ports that the Naim kit needs to work - this should be documented.

If you are not familiar with how all this works, start off by disabling external UPNP and seeing if it actually works. As long as you are all within your own network, it might. Deal with problems only if you get them!

 

[chris217]

You could run a port scan against your network to check for open ports, for example:

https://www.grc.com/Shieldsup!

 

[Chumpy]

Fine topic/I advise selecting the security-software-procedures you prefer - from successful empirical implementation.

Appalling that overpriced floggers cannot give best security-advice - try e.g. safe emails etc to manufacturers'/specialist Fora etc ...