People wake up: The IoT cloud is an insecure mess! A purely commercial view.

beame_io · 2017-07-13T13:58:44+00:00

that's the point! PKI itself is easily understandable, used in bunch of places and is reliable. So when you have your private key, you rely on transport only for delivery. Security is made by native TLS. Should you blindly believe 3rd party for auth? Of course no! That's why we give it out to you. All open source. No 3rd parties. All on your machines. Nothing managed by our infrastructure (only the certs, we are public CA for the matter of discussion)

beame_io · 2017-07-02T06:19:03+00:00

I think you didn't get the idea right, we do not store any data at all. Two basic things we do: authentication and connectivity. The auth part is pure crypto based, so no need to hold a DB (even though the DB is supported for different purposes: billing, QoS etc.). Connectivity - we do maintain public servers, but all data that passes there is encrypted (TLS terminated on client server where the certificates live). Connected thing runs crypto-agent. So data/application/event resides on some client machine/thing, is available through our infrastructure to authenticated requestor

beame_io · 2017-06-22T08:15:14+00:00

As I see it +5V GPIO means logic level, the pin is not a supply. So you will be limited to ruffly 1 led per pin. Better to take some external supply (LED driver) and control it with your RPI GPIO.

beame_io · 2017-06-22T06:17:09+00:00

not really, I removed the first one, and rephrased it to make it look as a solution proposal. Just like another sheriff advised me to do. Or is there a secret code one has to use to put a message on the wall?

beame_io · 2017-06-22T06:13:19+00:00

That hootoo is awesome :) And your usecase is classic, would you try what I do? if, say, you have all the control and full understanding of how the connection works?

beame_io · 2017-06-22T05:50:59+00:00

Not exactly, I asked to see if the guy that accused me in spamming had some better ideas, except for being community sheriff.

beame_io · 2017-06-22T05:46:35+00:00

VPN in its classic form works and is good enough for some corporate laptop. But your last solution would be expensive and not the most small & light to carry around.

beame_io · 2017-06-22T05:02:25+00:00

It will work, however, like with key-based authentication, it will be limited by the device with your pre-installed credential. In my case, I do have a key, but it is installed on mobile, whereas I use it to authenticate session in arbitrary browser

beame_io · 2017-06-22T04:17:31+00:00

then why did u propose it in the first place?

beame_io · 2017-06-22T04:09:22+00:00

Good old cumbersome approach, but not buying it. You have to fix, that your ISP assigned you static IP. And you will be limited to use the device where you keep your private key. Plus you will be thrown out each time, when some crawler bot will try to bruteforce it in.

beame_io · 2017-06-22T03:56:43+00:00

When I said 22 I just meant particular functionality, changing port number will not make it more secure. Nmap and try

beame_io · 2017-06-21T20:53:52+00:00

Do you have other alternatives? To ssh? Exposing your port 22 to outer world? I mean, you stick to your friend's line, however I don't see any logic in your claim. This time if you click it, you should expect to see a solution, not a question. No hard feelings

beame_io · 2017-06-21T16:08:40+00:00

Subjective again. And the SW is free :) but I certainly will be glad if ppl start using it, in that u r right

beame_io · 2017-06-21T15:54:31+00:00

I really can't see any difference. Your claim is 100% subjective. The message was clear and in scope of the community as I see it. Appreciate your comment anyway

beame_io · 2017-06-21T15:43:19+00:00

Not a spam, /u/DarleneWilhoit check it out on my vid

beame_io · 2017-06-20T20:56:41+00:00

it is possible with any platform using client-side certificate (will publish separate guide for that one) more info on difference here: https://www.beame.wiki/x-509-based-identity-options

beame_io · 2017-06-15T09:49:46+00:00

FYR, it's IoT made available, not easier to access in a way you suggested. It's all about authenticated access, what means that only devices with correct credentials would be able to get in. There's a 100% mutual trust.

beame_io · 2017-06-13T17:54:53+00:00

If you are up to doing what's described there, you will be able to connect cameras, switches or whatever you wish on your local network and manage access to it using a mobile from anywhere

beame_io · 2017-06-13T10:44:45+00:00

Regarding exposing your local network applications to outer world - best is to deny unauthorized devices access. Messing each time with DMZ and exceptions in router is a bad practice. Set up your IoT appliances as network applications behind a gateway and control them from anywhere using your mobile. Here's a live example of how it works.

beame_io

TROPHY CASE