Merged feed JSON rebroadcast leaks data if hidden from website

Is Virtual Radar Server not behaving itself? If so then please report it here.
Post Reply
Skibox
Posts: 123
Joined: Mon Apr 07, 2014 7:06 pm
Location: ESGG

Merged feed JSON rebroadcast leaks data if hidden from website

Post by Skibox » Mon Oct 30, 2017 11:59 am

The "hide from website" option in a merged feed causes the selection of receivers to be ignored and ALL data in the server is exported instead, at least when using JSON feed format.

When unchecked "hide from website", it works normally.

The counters of aircraft etc all show correct but the feed actually contains all the data, from all receivers.

This may cause unwanted leaks of data from sources that should not be shared, it also causes high load on servers and internet usage.

/M

Skibox
Posts: 123
Joined: Mon Apr 07, 2014 7:06 pm
Location: ESGG

Re: Merged feed JSON rebroadcast leaks data if hidden from website

Post by Skibox » Thu Jan 25, 2018 10:10 pm

Bump.

agw
Posts: 1938
Joined: Fri Feb 17, 2012 3:20 am

Re: Merged feed JSON rebroadcast leaks data if hidden from website

Post by agw » Sat Feb 03, 2018 11:56 pm

I'm not quite sure what you mean. Are you saying that when you tick "Hide from web site" in the merged feed options it ignores the selection of receivers that you're merging into the feed and it merges every receiver into the feed instead?

Skibox
Posts: 123
Joined: Mon Apr 07, 2014 7:06 pm
Location: ESGG

Re: Merged feed JSON rebroadcast leaks data if hidden from website

Post by Skibox » Sun Feb 04, 2018 8:22 pm

Yes. At least when the merged feed is offered in JSON format.

/M

agw
Posts: 1938
Joined: Fri Feb 17, 2012 3:20 am

Re: Merged feed JSON rebroadcast leaks data if hidden from website

Post by agw » Thu Feb 08, 2018 12:45 am

The feed format has no bearing on the receivers that are merged. The merging uses an internal format, the rebroadcast server just translates from that to the configured format.

I've not been able to reproduce the issue, when I tick off a couple of receivers and then tick the Hide from web site flag it just hides the merged feed from the web site. I don't get every receiver merged into the feed, just the ones that were ticked.

How are you figuring out that all receivers have been merged into the feed?

Skibox
Posts: 123
Joined: Mon Apr 07, 2014 7:06 pm
Location: ESGG

Re: Merged feed JSON rebroadcast leaks data if hidden from website

Post by Skibox » Wed Feb 14, 2018 8:18 am

agw wrote:
Thu Feb 08, 2018 12:45 am
How are you figuring out that all receivers have been merged into the feed?
I observe the feed on a second VRS server, using the merged feed as input. When I tick he "hide" and save, it gets all the traffic from server 1. When I untick it, it goes back to the intended feed.

The way it is set up there is a massive difference in the 2, so it's easy to see.

/M

Post Reply