Category: Development

Large databreach, how to minimize online vulnerabilities, and improve responsetime

Last week I found a data breach in a large companies website, exposing over 2 million customer records (name, address, email, phone number)
It’s always a though choice, do I call it in and risk getting sued, or leave it? Since this was quite a big leak, which I more or less stumbled upon (think in the lines of ‘this looks odd, what happens if I try and change this’) , I just went ahead and stated my intensions very clearly in my messages, and hoped they would see it would benefit them to use my report, and fix the problem as soon as possible.

Large databreach, how to minimize online vulnerabilities, and improve responsetime

Last week I found a data breach in a large companies website, exposing over 2 million customer records (name, address, email, phone number)
It’s always a though choice, do I call it in and risk getting sued, or leave it? Since this was quite a big leak, which I more or less stumbled upon (think in the lines of ‘this looks odd, what happens if I try and change this’) , I just went ahead and stated my intensions very clearly in my messages, and hoped they would see it would benefit them to use my report, and fix the problem as soon as possible.

Push Notify Push notification API

 

I created an api for sending Push notifications to mobile phones, I use the API in an opencart extension, to send new order information, and give clients the ability to receive order updates, but I figured it might be usefull for other developers to have a quick way to add push notification functionality in their application.

I’m currently writing the API documentation, you can find the basic documentation here:
Swagger API Documentation

The basic workflow:

  • Create a user & receive an API key
  • Create a channel
  • Have mobile devices subscribe to channels
  • Send a message to channels

 

In the opencart extensions case I create one channel for the admin, and a unique private channel for each customer (after an order is placed) which they can use to receive order status updates (pending, complete, shipped, cancelled etc..)

To receive mobile notifications you will need the Iphone or Android app.

 

Philips Hue motion sensor Teardown

I’m using my hue sensor in openhab and really like them, I was looking for some nice teardown pictures of the hue motion sensor, but could only find the Hue dimmer switcch dissection & Hue tap Dissection

Since I’m pretty curious what’s inside, and how they get this good batterylife I will dissassemble one of my hue motion sensors in the name of science to see what’s in there, I hope I can help someone else out with these.

I’ll try to compile a list of the items I find on the board, if you have any additions please let me know 🙂
– Atmega M2564RFR2-ZU
– 4mb serial flash 25fu406c
– Some type of Pir motionsensor

p6200154

ESP8266 & DHT22 Lowpower MQTT Sensor

For my project where I control my remote via pnps I want to create a low power sensor which will be able to send humidity & temperature data to my openhab server which is running mosquitto

Since I have some esp8266 chips laying around, this would be great to setup as a wifi mqtt sensor with the dht22, which will periodically (every 10 minutes) send new sensor data to my mqtt broker.

A quick video how to get a basic breadboard setup:

I will need it to be pretty energy efficient, so whenever the esp is done sending data, it will go into deepsleep for 10 minutes, and then wakeup and send again…