To me it would be best if a user could control it from another (guest) network. There is also a problem with location privacy from 2018, don't know if its fixed: The problem, but this has been disputed by experts. The two said that disabling Universal Plug and Play (UPnP) should fix With the famous attack playing PewDiePie, it is unclear whether disabling UPnP solves the issue (further links in article): There is some discussion here of being able to use it without UPnP (at the bottom): Here's a couple related links as references:

That's easier to do when turning on a Radio service stream from phone or casting a YouTube watch later playlist, than it is choosing songs or YouTube videos one by one. The article does a good job to describe how vulnerable UPnP (or more likely, the various implementations thereof) are, so you will have to weigh the risk of running a vulnerable protocol behind your firewall.Ī very slight improvement is to put it on its own network and switch to that network on whatever device is interacting with it temporarily. Once latched into a network, typical reconnaissance involves scanning for vulnerable devices like those running UPnP. However, you will still be prone to lateral movement from an attacker gaining entry into the network from another attack vector. Have been doing all along with your firewall is blocking every portĮxcept the ones, such as the Web's port 80/TCP, that you must use on a System from outside your LAN from accessing the ports 1900/UDP, and if Specifically, you need your firewall to block any

Later in that same article you linked:įirst, and foremost, you need to make sure you've blocked UPnP at your As long as you keep UPnP blocked at your gateway, you will be fine against any direct attacks against UPnP.

Upnp player chrome os