search for: chrysalis

...ot;Location" field would be good to have. You could tell whether a stream was in the US or the UK or whatnot, which would give you an idea of how good your connection to the server would be. - -- "Nothing's the same anymore." - Cmdr. Jeffrey Sinclair, Babylon-5, "Chrysalis" -----BEGIN PGP SIGNATURE----- Comment: For info see http://www.gnupg.org iD8DBQE7pY2ZAmwSMwnpLHgRAntOAKCnBJzolJ+WQb5FdUiP3Bb33FNnmACgvKoj kWU+JGUXCHlDqakJDF15QFA= =6ctl -----END PGP SIGNATURE----- --- >8 ---- List archives: http://www.xiph.org/archives/ icecast project homepage: http://...

...rates under "Modem", "DSL", etc. headings? This way you'd keep the bitrate field showing, but still be able to search for the streams appropriate for your connection speed. - -- "Nothing's the same anymore." - Cmdr. Jeffrey Sinclair, Babylon-5, "Chrysalis" -----BEGIN PGP SIGNATURE----- Comment: For info see http://www.gnupg.org iD8DBQE7phIhAmwSMwnpLHgRAlg9AKCxemTvtyGjbvJVI2boIzkwdcKCUQCgsfAx QdmAQDa/NUEmEse+kxYudk8= =ovMa -----END PGP SIGNATURE----- --- >8 ---- List archives: http://www.xiph.org/archives/ icecast project homepage: http://...

...though, that if that were the case, you'd be able to break things even if it was running over SSL. Sure, I'd rather have everything encrypted. Whether or not that's feasible, though... - -- "Nothing's the same anymore." - Cmdr. Jeffrey Sinclair, Babylon-5, "Chrysalis" -----BEGIN PGP SIGNATURE----- Comment: For info see http://www.gnupg.org iD8DBQE7pnMiAmwSMwnpLHgRAj0JAKCfwPVMqe3zJea+UzhFMtZRPUNycACdFAVq xzbqgDCHieyMTBwLQJF0mLk= =vRxC -----END PGP SIGNATURE----- --- >8 ---- List archives: http://www.xiph.org/archives/ icecast project homepage: http://...

...ypted connection would nearly eliminate the possibility of a man-in-the-middle attack either hijacking the session or surreptitiously switching bits mid-stream and changing the traffic on the fly. - -- "Nothing's the same anymore." - Cmdr. Jeffrey Sinclair, Babylon-5, "Chrysalis" -----BEGIN PGP SIGNATURE----- Comment: For info see http://www.gnupg.org iD8DBQE7zkMsAmwSMwnpLHgRAsu+AJ4zqAdOl/YvLINaOq0V/w10BWOL2wCgqzSY AfgoZN1otmDH7CTHcEfDU/k= =Rei/ -----END PGP SIGNATURE----- --- >8 ---- List archives: http://www.xiph.org/archives/ icecast project homepage: http://...

...rhead of even an SSL connection, much less some full key-exchange method. In the end, I'm just tossing out some ideas. I'm not the one who's actually going to code this, after all. :) - -- "Nothing's the same anymore." - Cmdr. Jeffrey Sinclair, Babylon-5, "Chrysalis" -----BEGIN PGP SIGNATURE----- Comment: For info see http://www.gnupg.org iD8DBQE7zlAsAmwSMwnpLHgRAmEQAJ9HO9FOIEHkYjTHGqYN+9oMpFP3ZQCaAxwL Dchd5fHXKvzMUzikXbS7+mc= =quuS -----END PGP SIGNATURE----- --- >8 ---- List archives: http://www.xiph.org/archives/ icecast project homepage: http://...

> My fear is the exploit-s'kiddie problem. Are there common exploits for man-in-the-middle? I've never seen one. I've seen rootkits, crackers, DoS tools, etc. But never anything as sophisticated as mitm. > I see no reason why anyone would constantly scan huge netblocks of cable > modem users, looking for the occasional target to haX0r. But that doesn't > stop the

> I'd love to see the backend connection to the directory server being > run through an SSL tunnel. Not being a programmer, though, I don't know of > the scope of effort it would take to implement that. Something for Jack to > answer. It would take a bit of effort. And it would also be totally useless. What benefit would it provide? You're publishing the information

Oddsock wrote: > how about instead of bitrate, something more generic like "Quality". > This should be a number, which (in the case of application/ogg) might be > 64 (as in kbps) or (in the case of audio/mpeg) might be 30 (as in FPS). > I would say, for most media types, it would be a bitrate, but not all. I think the bitrate is important, since the user is usually

Forgive the lack of antecendents. I just now joined the list, but will respond generally to what I saw in the list archives. I think jack's suggestion of distinguishing between static and time-depended data is a smart one. I would also suggest that many of the ranking issues people are concerned about can be addressed through the description field. Punting things like 'now

> A fully-encrypted connection would nearly eliminate the possibility of a > man-in-the-middle attack either hijacking the session or surreptitiously > switching bits mid-stream and changing the traffic on the fly. A man-in-the-middle attack is not easy to pull off. If you can show me why some person would be incented to attack someone like this, then maybe there is a case for it. As

So I've been doing some research and thinking here and there about what a _good_ directory service for icecast would be like. I'd appreciate some feedback and some discussion on this topic, before I start putting a lot of effort into developing it. First off, I think getting rid of # of listeners is a must. It just creates a self-fulfilling prophecy and encourages cheating. I think the