Community discussions

MikroTik App
 
User avatar
anav
Forum Guru
Forum Guru
Topic Author
Posts: 19323
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Edit - Disregard, was using on Beta Firmware.............

Sat Aug 28, 2021 2:38 am

See title: /export hide-sensitive file=name, actually shows everything sensitive.
Until 3.29 is replaced, do not use for the purposes of showing your config......
Last edited by anav on Sat Aug 28, 2021 4:37 pm, edited 1 time in total.
 
User avatar
k6ccc
Forum Guru
Forum Guru
Posts: 1497
Joined: Fri May 13, 2016 12:01 am
Location: Glendora, CA, USA (near Los Angeles)
Contact:

Re: DO NOT POST WINBOX CONFIGS 3.29 GUI PHUCK-UP

Sat Aug 28, 2021 6:12 am

I'm not sure I have a good reference, but I just opened WinBox 3.29 under Windows 10 on my RB4011iGS+ running 6.48.3. Did an /export hide-sensitive file=test. I then did it again without hide-sensitive.
Then downloaded both files and opened both with Notepad ++ and am using the file compare function. Passwords are redacted in the hide-sensitive version.

What are you showing that should be hidden?
 
User avatar
mozerd
Forum Veteran
Forum Veteran
Posts: 891
Joined: Thu Oct 05, 2017 3:39 pm
Location: Canada
Contact:

Re: DO NOT POST WINBOX CONFIGS 3.29 GUI PHUCK-UP

Sat Aug 28, 2021 2:25 pm

Hi Anav
I just tried this using Winbox 3.29 export hide-sensitive file=name and my observation is that all SYSTEM passwords are not seen but any password in scripts are exposed. I do not currently remember if RoS also encrypts passwords in scripts .... but SYSTEM Passwords are not visible on my RSC file.
 
User avatar
Cha0s
Forum Guru
Forum Guru
Posts: 1142
Joined: Tue Oct 11, 2005 4:53 pm

Re: DO NOT POST WINBOX CONFIGS 3.29 GUI PHUCK-UP

Sat Aug 28, 2021 3:06 pm

What does Winbox version have to do with CLI?
 
User avatar
anav
Forum Guru
Forum Guru
Topic Author
Posts: 19323
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: DO NOT POST WINBOX CONFIGS 3.29 GUI PHUCK-UP

Sat Aug 28, 2021 4:36 pm

My bad possibly......... I just used it for my Wireguard router and all my Wireguard settings, were exposed including keys.......
Perhaps hide-sensitive doenst work on beta firmware and thus I was mistaken.
 
User avatar
k6ccc
Forum Guru
Forum Guru
Posts: 1497
Joined: Fri May 13, 2016 12:01 am
Location: Glendora, CA, USA (near Los Angeles)
Contact:

Re: DO NOT POST WINBOX CONFIGS 3.29 GUI PHUCK-UP

Sat Aug 28, 2021 8:38 pm

What does Winbox version have to do with CLI?
I was kinda wondering the same thing...
 
User avatar
k6ccc
Forum Guru
Forum Guru
Posts: 1497
Joined: Fri May 13, 2016 12:01 am
Location: Glendora, CA, USA (near Los Angeles)
Contact:

Re: DO NOT POST WINBOX CONFIGS 3.29 GUI PHUCK-UP

Sat Aug 28, 2021 8:40 pm

Hi Anav
I just tried this using Winbox 3.29 export hide-sensitive file=name and my observation is that all SYSTEM passwords are not seen but any password in scripts are exposed. I do not currently remember if RoS also encrypts passwords in scripts .... but SYSTEM Passwords are not visible on my RSC file.
I have a bunch of scripts, but off hand, I don't think any of them have passwords in them. Concur - all System and E-Mail password were redacted.

Who is online

Users browsing this forum: JohnConnett and 39 guests