AlphaTheta Warns of Security Flaw in PRO DJ LINK
Security Vulnerability in Pioneer Rekordbox
AlphaTheta has disclosed a security vulnerability in the PRO DJ LINK feature used by rekordbox and certain CDJ/XDJ models. An attacker who gains unauthorized access to a PRO DJ LINK network could view data stored on a Windows PC or Mac, or on USB/SD cards connected to the network. The company is withholding technical details until a fix is ready, but advises users to update rekordbox, avoid sensitive data on USB/SD cards, and use secure Wi-Fi networks.
To prevent misuse, we are withholding technical details until a fix has been made available.
- j-scott
Rekordbox is one of the worst pieces of software I have to interact with regularly, and it reminds me of others descriptions of IoT software/firmware.
"PRO DJ LINK" enables you to access rekordbox libraries (and load music files) remotely from other devices, whether that be on a computer or dedicated Pioneer/AlphaTheta hardware.
The vulnerability in question requires the attacker to be on the same local network as the instance of rekordbox and for the remote library feature to be enabled. Interested in the full writeup once it's released
- hexfish
I am by no means a professional DJ but once I hooked up my DDJ-400 to Mixxx (https://mixxx.org/) I never looked back. It was suprisingly complete for me (but ymmv when actually being a pro DJ).
- bpp
Rekordbox is extraordinary in that it has completely captured the DJ market and absolutely everyone hates it.
AlphaTheta (nee Pioneer DJ) makes arguably the best club DJ equipment – CDJs and mixers. Audiophiles may disagree but it's good enough that it's standard in all clubs, and artist riders (contracts) will absolutely require Pioneer CDJs if not their mixers as well. They're well made and great to perform on, and are basically advanced musical instruments at this point. If you know how to really use the equipment, you will be a better performer, and it's helpful to have a standard platform in all clubs.
But Rekordbox, which is required for those same performers to load their music onto USB drives and have them read it back with metadata etc., is one of the worst pieces of software I've ever used. It's clunky, it's slow to load the music, it often corrupts libraries or misplaces files. You'll load a song only to find that it inexplicably doesn't play. It'll hang for hours transferring a playlist that should be written in seconds. And they've just made it that much more complex by having a second library format, which they load in parallel, which has basically no benefit to the performer.
I have a friend who's a touring DJ who avoided updating Rekordbox for YEARS because his version was stable and he didn't want to introduce any variance into prep, because Rekordbox is so bad. If you tell a fellow DJ "Rekordbox ate my library" they will just shake their heads slowly, knowin […]