Month: October 2017

Large databreach, how to minimize online vulnerabilities, and improve responsetime

Last week I found a data breach in a large companies website, exposing over 2 million customer records (name, address, email, phone number)
It’s always a though choice, do I call it in and risk getting sued, or leave it? Since this was quite a big leak, which I more or less stumbled upon (think in the lines of ‘this looks odd, what happens if I try and change this’) , I just went ahead and stated my intensions very clearly in my messages, and hoped they would see it would benefit them to use my report, and fix the problem as soon as possible.

Large databreach, how to minimize online vulnerabilities, and improve responsetime

Last week I found a data breach in a large companies website, exposing over 2 million customer records (name, address, email, phone number)
It’s always a though choice, do I call it in and risk getting sued, or leave it? Since this was quite a big leak, which I more or less stumbled upon (think in the lines of ‘this looks odd, what happens if I try and change this’) , I just went ahead and stated my intensions very clearly in my messages, and hoped they would see it would benefit them to use my report, and fix the problem as soon as possible.

Push Notify Push notification API

 

I created an api for sending Push notifications to mobile phones, I use the API in an opencart extension, to send new order information, and give clients the ability to receive order updates, but I figured it might be usefull for other developers to have a quick way to add push notification functionality in their application.

I’m currently writing the API documentation, you can find the basic documentation here:
Swagger API Documentation

The basic workflow:

  • Create a user & receive an API key
  • Create a channel
  • Have mobile devices subscribe to channels
  • Send a message to channels

 

In the opencart extensions case I create one channel for the admin, and a unique private channel for each customer (after an order is placed) which they can use to receive order status updates (pending, complete, shipped, cancelled etc..)

To receive mobile notifications you will need the Iphone or Android app.