Use your iPhone as an XBMC remote

XBMC, never thought of that one, I will have to test it with our coming really soon application, doesn't xbmc have a upnp server, if so we can access it and no further moding on the xbox.

http://mooncatventures.blogspot.com as seen on ehomeupgrade.com

I'm the Tom Robinson who wrote this thing. First of all, let me say thanks for posting this. I hope lots of people find it useful. It's open source (obviously since it's HTML, CSS, and JavaScript, but also it's released under the BSD license) so you're welcome to modify it, etc. Join us on the macrumors forums if you want to help out:

http://forums.macrumors.com/showthread.php?p=3980793

Second, simply installing XBMC iPhone Remote via EITHER manual installation or web installer will NOT open up any security holes that aren't already in the XBMC webserver. Enabling the web server in the first place WILL. In this respect, there's no difference between web install and manual install, except that web install takes advantage of those holes to perform a harmless installation.

I've written up a detailed summary of how web installer works and what the issue with the XBMC webserver is here:

http://tlrobinson.net/blog/?p=15

Thanks,

Tom

p.s. I didn't work on this alone, David Twelves has helped out, as well as some others on the macrumors.com forums. The web installer code is based on work by LiquidIce.

Mike, you also have the option of downloading a zip file and manually FTPing the files over. XBMC has the option of grabbing scripts off the Internet; that's basically all this script is doing, except in reverse - you point the script to the Xbox.

There are only security issues if you allow people from the Internet to access your Xbox's web console. You would have to go to significant effort to open that up.

Thus, it's only really a security problem if you're irresponsible about it or don't have any idea what you're doing. Chances are good that if you set up XBMC, you at least have some concept of networking and how to limit access to it.

XBMC just has a built in web server that can accept basic commands passed to it with a "?=" type of syntax. The built in web front end basically is a bunch of buttons with link formatted this way, I believe. It's secure in the sense that there isn't much you can do but destroy someones XBMC, which isn't particularly hard to restore, especially if the media is located on another server. You could gain access to their SMB login info, which I suppose could be of use. You would still need access to their LAn through the firewall or direct connection, though.

This makes me want an iPhone much more since I gave cable up last year and use XBMC for a few hours of TV a day.