Incoming remote debugger connections do not identify the source.

RESOLVED FIXED

Status

Firefox OS
Developer Tools
RESOLVED FIXED
3 years ago
3 years ago

People

(Reporter: Jukka Jylänki, Assigned: jryans)

Tracking

({csectype-spoof, sec-low})

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

3 years ago
When initiating a connection with App Manager to a FFOS device, the device will display a prompt with the message

"An incoming request to permit remote debugging connection was detected. Allow connection?"

this message does not identify the source of the connection. It would be good to have some form of identification in the form of IP:PORT or a MAC address that tells the user where the connection is coming from.

See also bugs 1022692 and 1009521 .
Keywords: csectype-spoof, sec-low
That would be a useful feature to add, but not terribly important until WiFi debugging arrives. Since a physical connection with a USB cable is currently required, the origin of a debugging connection is pretty obvious.
(Assignee)

Updated

3 years ago
Blocks: 1027454
(Assignee)

Updated

3 years ago
Depends on: 1127004
(Assignee)

Updated

3 years ago
Group: core-security
Component: Developer Tools: WebIDE → Developer Tools
Product: Firefox → Firefox OS
Version: Trunk → unspecified
(Assignee)

Comment 2

3 years ago
Cleared the security flag accidentally... feel free to reset if you really feel this should be hidden still.

Anyway, the issue was fixed in bug 1127004, where FxOS now shows:

Allow USB debugging connection?

or

Allow remote debugging connection from {{host}}:{{port}}?

as appropriate.
Assignee: nobody → jryans
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.