TiVo Community Forum banner

I.TV app no more remote

4858 Views 17 Replies 9 Participants Last post by  morac
I upgraded to I.TV V3.0 app for iphone and the virtual remote function is gone.. Any other apps have a remote function for the iPhone?
1 - 18 of 18 Posts
The Peanut app is a good TiVo remote control that includes a qwerty keyboard feature.
tre74 said:
The Peanut app is a good TiVo remote control that includes a qwerty keyboard feature.
Thanks great app. Saves me $80 on not buying a TiVo slider remote. Will put to my iPhone5 fund... :)
Hi there! This is Justin from i.TV. TiVo remote capabilities will be coming back to our app. If you have any questions, please feel free to contact support[at]i.tv.
Too late for me ... I realized I didn't use anything else in i.TV except for the remote (and even that was only on occasion) so now I've got TiViPeanut for those situations.
Why take them away in the first place?
Looks like they entirely rewrote the app. The good news is that they no longer retain our tivo.com password in the clear - which was totally unnecessary as TiVo issues a token for online scheduling.

Too late for me ... I realized I didn't use anything else in i.TV except for the remote (and even that was only on occasion) so now I've got TiViPeanut for those situations.
I assume TiVo will eventually provide their own iPhone app, given the iPad one.
davezatz said:
I assume TiVo will eventually provide their own iPhone app, given the iPad one.
odd thing was I found out about the I.tv app from TiVos site... Even has instructions on how to use....
odd thing was I found out about the I.tv app from TiVos site... Even has instructions on how to use....
Yah, they have a relationship. Which is why the cleartext password was even more silly. TiVo should have caught it or revoked i.TV's access until it was fixed. The security risk was tiny, but it was bad form - an emphasizes why we might consider not providing passwords to third parties.
Does the peanut app remember where you are? Even though I'm the one that mentioned BuddyTV, I only use it *rarely* for the keyboard... and IIRC, it's always a several step process to get back to the keyboard from app launch.
mattack said:
Does the peanut app remember where you are? Even though I'm the one that mentioned BuddyTV, I only use it *rarely* for the keyboard... and IIRC, it's always a several step process to get back to the keyboard from app launch.
The peanut app is a remote only. So as soon as you open there I the remote. Turn rotate and you have full keyboard. Works with S3-S4 TiVos. It does remember what TiVo Set to control last...

Try the free version...
Free Peanut app seems to work fine with my TiVo HD.

(On the TiVo HD), Just be advised the keyboard only works for Search by Title and Wish Lists, not for TiVo Search or entering custom RSS feeds. IIRC this is limited by the TiVo system itself.
I've found that once I link my TiVo account to my i.TV account (logged in via Facebook), that there's no way to unlink it. If I go in and click unlink, it doesn't unlink. The next time I go to the TiVo setting screen it shows I'm logged in again.

Another issue I noticed is that when I logged in using my TiVo account credentials, rather than seeing a SSL connection to tivo.com, I saw an unencrypted (port 80) connection to a cloud-ips.com server. Actually all the data passed back and forther between i.TV appears to be unencrypted (including the TiVo login token used later).

TiVo really needs to add a way for users to revoke 3rd party web sites' and apps' access to your account. Other companies (Google, Twitter, Facebook, Yahoo, etc) allow generation of oAuth tokens so 3rd party entities can access your account, but they also list all the currently valid tokens as well as add a way to revoke them. TiVo needs to do the same thing since currently the only way to "revoke" a token is for the 3rd party app/site to delete it. Changing your TiVo password does not revoke the tokens either. That's not very secure.
See less See more
Looks like they entirely rewrote the app. The good news is that they no longer retain our tivo.com password in the clear - which was totally unnecessary as TiVo issues a token for online scheduling.
But now it looks like they may send it in the clear instead. :eek:
But now it looks like they may send it in the clear instead. :eek:
On my blog post, i.TV has responded to Morac and I with some positive info based on our concerns:

we want to thank you for bringing this to our attention.

Today we are submitting an update to the App Store that will increase the security regarding the TiVo login. Because this is our highest priority, we won't have time to add an unlink option for TiVo accounts today. However, if you send an email to [email protected], we will be more than happy to manually unlink your TiVo account. (Be aware that this unlink will occur, even though it will not be reflected graphically in the app. We will send you a confirmation email.)
But we'll need Morac to validate their work once the update hits. ;)
But we'll need Morac to validate their work once the update hits. ;)
My current home setup doesn't allow me to easily sniff data traffic going from my iPad out to the web, but I am running a version of the Tomato firmware on my router. This lets me log going connections to see what ip addresses and ports my iPad is connecting to.

It actually looks like it is possible to capture packet data using Tomato, but I've never tried it.
davezatz said:
On my blog post, i.TV has responded to Morac and I with some positive info based on our concerns:

But we'll need Morac to validate their work once the update hits. ;)
Well I upgraded to the new version and have good news and bad news. The good news is that the TiVo account credentials no longer appear to be sent unencrypted when first logging into the TiVo account. I haven't verified this yet by sniffing packets, but the app is now communicating over TCP port 443 (which is the default SSL https port) when logging into the TiVo account. The bad news is that the account info is still sent to i.TV rather than TiVo itself. This means users have to trust that i.TV is solely using the TiVo username and password to get the login token from TiVo and not storing or caching them on their servers afterwards.
1 - 18 of 18 Posts
This is an older thread, you may not receive a response, and could be reviving an old thread. Please consider creating a new thread.
Top