This JSON request instructs the alarm clock on every “alarmSound” event to send a HTTP request to the coffee machine. Whilst this may seem a simple and effective way of implementing the Pub/Sub pattern in HTTP, this poses a significant security risk.
By not being able to validate if the receiver of the subscribed message wants the message or not, there is effectively a DDOS vulnerability. An attacker with the ability to set subscriptions on the alarm clock can effectively send HTTP messages to any device or internet property they want. If this is done across enough devices, a DDOS vulnerability is created.
Toast popping out of a toaster or a car driving across a road traffic sensor could be the trigger of a future large scale DDOS against a web property.
The Firefox extensions store removed four plugins from Avast/AVG, including two that are supposed to keep users safe from malicious activity because they appeared to be stealing browser histories and other user data.
Inspired by XKCD’s classic diceware strip, a programmer named Alice created an open-source algorithm to randomly generate secure passphrases in Welsh. As difficult as it would be for any human or computer to figure out a nonsense phrase like, “correct horse battery staple,” it would be even more difficult to guess, “stwffwl batri ceffyl cywir,” […]
So you missed Black Friday and Cyber Monday? Well, there’s one more holiday milestone coming up: Green Monday, on Dec. 16. It’s one of the busiest online shopping days for the simple reason that it will be 10 days before Christmas, which is when last-minute shoppers start to stress. Our advice? Don’t wait for that […]
Weighted blankets are officially a thing. And if you’ve ever tried one, you know there’s a reason for the fuss. Parents have known for generations that swaddling a baby has a profound calming effect, and the gentle pressure that blanket weights provide can have the same effect on restless sleepers. Pretty much all parts of […]
Walk through any office, and you will likely spot a few bobbleheads. These wobbly figurines are great fun to have around, although most celebrate people we will never meet. For something a little more personal, try Handmade Custom Bobbleheads. These mini caricatures are sculpted and painted by skilled artisans, based on any photo you provide. […]