Showing posts with label IoT. Show all posts
Showing posts with label IoT. Show all posts

Tuesday, December 13, 2016

Google’s Internet of Things platform: Android Things and Weave

Google announced updates to Google’s Internet of Things platform: Android Things and Weave, to know the details, refer Announcing updates to Google’s Internet of Things platform: Android Things and Weave


To get started, check out Google's IoT developer site, or go directly to the Android Things, Weave, and Google Cloud Platform sites for documentation and code samples. You can also join Google's IoT Developers Community on Google+ to get the latest updates and share and discuss ideas with other developers.


Tuesday, March 22, 2016

An Introduction to Brillo, the OS for IoT


The vision with Brillo is to bring the simplicity and speed of software development to hardware by joining together three things. First, an OS based on Android. Second, core services that enable a great getting started experience and allow you to operate at scale. Third, a developer kit with tools to build, test, and debug your solution. Watch this video for a quick overview of these major components and how they work together to quickly move from prototype to production, and manage at scale with over the air (OTA) updates, metrics, and crash reporting

Learn more about Brillo - http://developers.google.com/brillo

An Introduction to Weave, the communications platform for IoT


Weave helps you focus on adding intelligence into your IoT user experience in two ways. First, by giving you all the building blocks you need for communicating with your devices directly or through the cloud. Second, by providing a common language for your app or service to use across all of a user’s devices. Watch this video to get an overview of the Weave components and how they fit together to help make it the easiest way to connect all the things

Learn More about Weave - http://developers.google.com/weave


Saturday, March 19, 2016

Free from O'reilly Media: Evaluating And Choosing An Iot Platform

O'reilly Media: Evaluating And Choosing An Iot Platform

With the push for IoT-enabled solutions comes the need for reliable IoT platforms, especially for companies that require industrial-grade IoT capabilities. This O’Reilly report examines various features that heavy-equipment B2B industries should expect in an IoT platform, as well as the key attributes you should be looking for when choosing a platform vendor.

Up to this point, much of the effort in developing an IoT solution has gone into platform building. But if you are to gain a competitive advantage in the marketplace, you can’t afford to build technology stacks from scratch to accommodate hardware, firmware, software, edge computing, analytics, business systems integration, and many other components.

In this report, author Matthew Perry explains what an industrial-grade IoT platform ideally should include, from bidirectional connectivity and distributed computing to availability, scalability, and reliability. You’ll also learn how to assess your IoT strategy and find a vendor that can fulfill your specific needs.

Matthew J. Perry is a writer and editor with a particular interest in how the Internet of Things can make cities smarter. He has written for Cisco Systems and collaborated on ten published books. He lives in New York City.

link: http://www.thingworx.com/white-papers/oreilly-media-evaluating-and-choosing-an-iot-platform

Saturday, December 5, 2015

6.1 Million smart devices at risk from 3 year old flaw


According to Trend Micro up to 6.1 million smart devices, including this smart TV and routers haven’t patched a software vulnerability dating from 2012.

Millions of smart TVs, routers and phones are at risk due to a presence of a 3-year-old vulnerability in a software they use. According to the experts at Trend Micro, the security flaw hasn’t been patched by many vendors despite the availability of a patch since 2012.

“A total of 6.1 million devices – smart phones, routers, smart TVs – are currently at risk to remote code execution attacks due to vulnerabilities that have been fixed since 2012.” wrote Veo Zhang, a mobile threats analyst at Trend Micro. “The vulnerabilities exist in the Portable SDK for UPnP™ Devices, also called libupnp. This particular library is used to implement media playback (DLNA) or NAT traversal (UPnP IGD). Apps on a smartphone can use these features to play media files or connect to other devices within a user’s home network.”
Trend Micro discovered that 547 apps that use an unpatched version of the software component, 326 are available in Google’s Play app store and most of the apps are very popular and used by million users. One of the affected apps is QQMusic that is distributed by Tencent, the company promptly released an update for the Android app on Nov. 23 after the disclosure of the news.
“These are very popular apps that put millions of users in danger; aside from mobile devices, routers, and smart TVs are all at risk as well,” he added.
We discussed several times about smart devices, aka IoT devices, and their capability to gather and share huge quantities of information, including sensitive data, raising serious concerns in term of privacy.
Our surface of attack is enlarging as never before, both in workplace and in the private life, experts in the security industry sustain that the majority of IoT vendors doesn’t adopt a security by design approach. It is quite common to find smart objects poorly configured or affected by critical security flaws.
In this specific case emerges the inability of manufacturers to implement an efficient patch management. Million of vulnerable devices, such as routers and smart TVs, are exposed on the Internet.
The experts at Trend Micro confirmed that threat actors are already attacking these vulnerable devices, exploiting the flaws the attackers would take complete control of the targeted system.
Once identified a vulnerable device, an attacker can send a specially crafted packet to trigger a buffer overflow. In the code below, the TempBuf buffer can overflow and cause a crash.
smart devices scan
“With further research an exploit could be used not just to cause a crash, but to run arbitrary code on an affected device. The ability to run arbitrary code would give the attacker the ability to take control of the device, as on a PC.” continues the post. “We have seen exploits in the wild targeting devices that do not use mitigation protections such stack canaries, DEP, and ASLR. For well protected systems, we do not know of exploits that are currently capable of remote code execution.”

The security vulnerability affects the ‘libupnp’ code library inside the Portable SDK for UPnP Devices, it is used to playback media and also for NAT functionalities.
Below a list of the most popular affected apps:
Common NamePackage Name
AirSmartPlayercom.gk.airsmart.main
Big2Smallcom.alitech.dvbtoip
CameraAccess plusjp.co.pixela.cameraaccessplus
G-MScreenmktvsmart.screen
HexLink Remote (TV client)hihex.sbrc.services
HexLink-SmartTV remote controlcom.hihex.hexlink
Hisense Android TV Remotecom.hisense.commonremote
Netflixcom.netflix.mediaclient
nScreen Mirroring for Samsungcom.ht.nscreen.mirroring
Ooredoo TV Omancom.ooredootv.ooredoo
PictPrint – WiFi Print App –jp.co.tandem.pictprint
qa.MozaicGO.AndroidMozaic GO
QQMusiccom.tencent.qqmusic
QQ音乐HDcom.tencent.qqmusicpad
Smart TV Remotecom.hisense.common
Wifi Entertainmentcom.infogo.entertainment.wifi
モバイルTV(StationTV)jp.pixela.px01.stationtv.localtuner.full.app
에브리온TV (무료 실시간 TV)com.everyontv
多屏看看com.letv.smartControl
海信分享com.hisense.hishare.hall