Is there an ‘API’ (Either on the local node or the web) for getting info on an individual AllStar node, from the node number? E.G Call Sign / Location etc
Is there an ‘API’ (Either on the local node or the web) for getting info on an individual AllStar node, from the node number? E.G Call Sign / Location etc
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
_______________________________________________
App_rpt-users mailing list
App_rpt-users@lists.allstarlink.org
[http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users](http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users)
To unsubscribe from this list please visit [http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users](http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users)
and scroll down to the bottom of the page. Enter your email
address and press the “Unsubscribe or edit options button”
You do not need a password to unsubscribe, you can do it via
email confirmation. If you have trouble unsubscribing,
please send a message to the list detailing the problem.
–
Tim WD6AWP
_______________________________________________
App_rpt-users mailing list
To unsubscribe from this list please visit and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
Announcing this publicly breaks the security of ASL and opens us up to attack
again. This is why the jasondata.cgi was restricted in the first place. This
is just a copy to get around the restriction.
Can we think about security before we make a change? Anything we publish will
be exploited for nefarious purposes.
···
On 4/25/18 5:45 PM, Greg Thornwall wrote:
I have a test json scriptthat is available to the web:
whole node list not just one node. But if you cron it to run
once a day then you can parse the result often as needed.
_______________________________________________
App_rpt-users mailing list
App_rpt-users@lists.allstarlink.org
[http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users](http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users)
To unsubscribe from this list please visit [http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users](http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users) and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
_______________________________________________
App_rpt-users mailing list
App_rpt-users@lists.allstarlink.org
[http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users](http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users)
To unsubscribe from this list please visit [http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users](http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users)
and scroll down to the bottom of the page. Enter your email
address and press the “Unsubscribe or edit options button”
You do not need a password to unsubscribe, you can do it via
email confirmation. If you have trouble unsubscribing,
please send a message to the list detailing the problem.
The json cgi only outp ut strings, no args or system
calls are used.
Again?
What problem s were
you having with the stats server?
···
On 04/25/2018 05:52 PM, Bryan Fields
wrote:
Announcing this publicly breaks the security of ASL and opens us up to attack
again. This is why the jasondata.cgi was restricted in the first place. This
is just a copy to get around the restriction.
Can we think about security before we make a change? Anything we publish will
be exploited for nefarious purposes.
I believe the concern is that those strings contain the full list of AllStar nodes, their IP addresses, and their software versions. That’s a lot of sensitive information, and there’s no need to expose it all at once. A better way to do it would be an API that only gives the requested node and connected notes, and only relevant attributes for the current UI. This way all the unrelated nodes’ data are still private.
Tom
···
On Wed, Apr 25, 2018 at 7:15 PM Greg Thornwall thorn@myactv.net wrote:
The json cgi only outp ut strings, no args or system
calls are used.