boxee :: forums  

Go Back   boxee :: forums > boxee community > Boxee Box help

Reply
 
Thread Tools Display Modes
  #11  
Old January 31st, 2011, 05:51 PM
StevenR StevenR is online now
Senior Member
 
Join Date: Oct 2008
Posts: 418
Default

I expect that the requirement for apps to be signed will actually be to prevent unauthorised modifications of apps, rather than to allow Boxee to block certain apps.

Taking Netflix as an example, without signing it might be possible to get hold of the files for the Netflix app when released and edit it to do things that Netflix would not want. Requiring the app to be signed will prevent this (or at least make it very difficult) as the modifications would invalidate the signature which would stop it working on the Boxee Box.

If this is the case then this could result in more apps being developed for Boxee, as there may be content providers who would develop apps but are currently put off by the ease with which somebody else can modify their app.

I only hope that this doesn't make it more difficult for first time developers, as I'm sure that a lot of them will start off (like I did) by creating apps based on the source code of an existing app.
Reply With Quote
  #12  
Old January 31st, 2011, 06:04 PM
stottlem stottlem is offline
Member
 
Join Date: Jul 2010
Posts: 37
Default

Quote:
Originally Posted by StevenR View Post
I expect that the requirement for apps to be signed will actually be to prevent unauthorised modifications of apps, rather than to allow Boxee to block certain apps.

Taking Netflix as an example, without signing it might be possible to get hold of the files for the Netflix app when released and edit it to do things that Netflix would not want. Requiring the app to be signed will prevent this (or at least make it very difficult) as the modifications would invalidate the signature which would stop it working on the Boxee Box.

If this is the case then this could result in more apps being developed for Boxee, as there may be content providers who would develop apps but are currently put off by the ease with which somebody else can modify their app.

I only hope that this doesn't make it more difficult for first time developers, as I'm sure that a lot of them will start off (like I did) by creating apps based on the source code of an existing app.
This is most likely the case.
Reply With Quote
  #13  
Old January 31st, 2011, 06:17 PM
Ozpeter Ozpeter is offline
Senior Member
 
Join Date: Nov 2010
Posts: 370
Default

If this is a signing process for Boxee Box apps as opposed to Boxee PC apps, then perhaps part of the plan is to in effect weed out apps that simply do not work on the Box. If you are a newbie kind of Box user, and you try apps that simply do not work, you'll tend to blame Boxee and/or wonder what is wrong with your Box. Whether official or 3rd party, nothing should appear on the Box interface that doesn't work properly.
Reply With Quote
  #14  
Old January 31st, 2011, 06:29 PM
RobSpectre RobSpectre is offline
team boxee
 
Join Date: Jun 2009
Location: Brooklyn, NY
Posts: 117
Send a message via Yahoo to RobSpectre
Default

Hey guys,

This is Rob, your friendly neighborhood developer community guy - I wanted to step in to quell some of the concerns I've seen on the forums this afternoon about our app signing for all applications. We sent out an email to all our registered developers a while ago to let them know this was coming, but we were still a little light on details. I know this didn't get to everybody and may have gotten caught in some spam filters - if you didn't receive it, please email me so I can make sure I can get you the headsup when changes like these are coming down the pipeline.

The basics on this new change are as follows:

What:
We're rolling out a new security model for deploying apps on Boxee that introduces API keys for developers. These keys will be used to sign each of your apps.

Why:
We rolled this out to comply with security standards for our premium content providers. The goal here is to ensure that applications developed for Boxee provide access to new content / services, and are not designed to interfere with the Boxee Box, other Boxee devices or other Boxee applications.

We value the ability for anyone to build an application on Boxee, and think the diversity of third party apps help make the Boxee Box the platform we've always wanted. We are insistent on keeping that diversity and are proceeding with this signing mechanism solely to ensure that apps don't try to backdoor into places they shouldn't be (like the back of a Volkswagen).

How:
We're still finalizing the process here, but the general idea is:
1) you tell us you want to develop apps for Boxee and give us a way to contact you
2) we give you an API-key
3) you use that key to sign your apps

... and that's pretty much it. We're setting up a website to automate most of this that will be up in a few days - we'll make another announcement here and email our developer list once that goes live. There will be how-to posted on the blog, linked here in the forums, tweeted on @boxee_api, and - if Avner has his way - tattooed on my back and featured as the next centerfold spread in Ink Magazine.

In the meantime if you've got any other questions, please feel free to reach out to me and I'll happily answer. I'm on email at rob [at] boxee [dot] tv, on IRC on FreeNode at #boxee, on Twitter @boxee_api and on Gtalk at rob.spectre.
__________________
web: boxee.tv
twitter: @boxee_api
boxee: RobSpectre
IRC: #boxee on FreeNode
Reply With Quote
  #15  
Old January 31st, 2011, 06:42 PM
Ozpeter Ozpeter is offline
Senior Member
 
Join Date: Nov 2010
Posts: 370
Default

Thanks for the clarification, Rob.
Reply With Quote
  #16  
Old January 31st, 2011, 06:49 PM
pbiancardi pbiancardi is offline
Senior Member
 
Join Date: Nov 2010
Posts: 166
Default

So if Navi-X asks for API-key, will they be given one and allowed to continue development on their app for the boxee box?
Reply With Quote
  #17  
Old January 31st, 2011, 06:55 PM
Bixiee Bixiee is offline
Senior Member
 
Join Date: Nov 2010
Posts: 232
Default

Quote:
Originally Posted by Ozpeter View Post
Quotes from elisemory Boxee developer



Don't panic...
Lets hope they have the strengths to stick to that if the going gets rough.
__________________
Wanna design a better interface for Boxee? Here is your chance: Job Application
Reply With Quote
  #18  
Old January 31st, 2011, 06:57 PM
darcilicious darcilicious is online now
Super Moderator
 
Join Date: Apr 2009
Location: Orbiting Venus
Posts: 5,923
Default

Quote:
Originally Posted by pbiancardi View Post
So if Navi-X asks for API-key, will they be given one and allowed to continue development on their app for the boxee box?
Already asked and answered.
__________________
Boxee beta 0.9.23.15885 on: HP TouchSmart 600xt/Windows 7 x64; HP dv6505/Windows 7 x86; and HP m8400f Vista x86 HTPC running Intelliremote, SageTV 7.0, Orb/MP-1, Audiogalaxy, and AirVideo, connected to Olevia 247 TFHD and Onyko TX-SR606 all controlled with a Harmony 550. Boxee Box v1.0.4.17443 connected to 32" Panasonic TC-L32X2; and last but not least, an HP EX490 MediaSmart Server (WHS) + MediaSonic for 12TB of storage.
Reply With Quote
  #19  
Old January 31st, 2011, 07:14 PM
Bixiee Bixiee is offline
Senior Member
 
Join Date: Nov 2010
Posts: 232
Default

Quote:
Originally Posted by RobSpectre View Post
What:
We're rolling out a new security model for deploying apps on Boxee that introduces API keys for developers. These keys will be used to sign each of your apps.
So does that mean Netflix will be delayed by 6 months?

Quote:
Originally Posted by RobSpectre View Post
1) you tell us you want to develop apps for Boxee and give us a way to contact you
2) we give you an API-key
3) you use that key to sign your apps
But what if I think i might be able to make an app, but i have to test it and it turns out i can't really make one after all - won't you end up with a lot of lost API keys?
__________________
Wanna design a better interface for Boxee? Here is your chance: Job Application
Reply With Quote
  #20  
Old January 31st, 2011, 07:16 PM
Bixiee Bixiee is offline
Senior Member
 
Join Date: Nov 2010
Posts: 232
Default

Quote:
Originally Posted by darcilicious View Post
I don't think Eli sees the big picture.
Oh well.
__________________
Wanna design a better interface for Boxee? Here is your chance: Job Application
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 08:46 AM.


skin based on greenzero from vBSkins.com

 
Powered by vBulletin® Version 3.7.5
Copyright ©2000 - 2011, Jelsoft Enterprises Ltd.