All articles tagged as: security

SaaS... Access Control?

There's in increasing tend towards SaaS, and indeed at work we use it extensively with services like Zendesk, Xero, Statuspage.io etc.. I've done a lot (including custom development, and quick hacks like access control notifications in slack) with Paxton's Net2 access control and was recently looking at other options for a new application. What I basically want is Paxton Net2, but with an API (ideally HTTP/JSON) to receive notifications of events and to be able to perform basic control operations This doesn't exist. Doorkeys in the Cloud More frustratingly several companies pushed me towards…

Read more »

Bizzby Privacy

Update 21st August Having spoken with Bizzby, I'm confident this is an isolated incident and that my concerns about how jobs are allocated to their service provider partners are unfounded. I expect a formal statement from Bizzby to be issued in due course. I received this eMail today (obviously, with some redaction to protect the individual's privacy) from the online "Handyman App" Bizzby which exists to match service providers with jobs that need done. There is just one (well, several) issues here. I am not registered on the Bizzby platform I'm not a plumber or electrician I live ab…

Read more »

When is withheld, not withheld?

I love Three's new WiFi Calling feature (well, it's an Apple feature, but Three finally decided to support it!) – ultimately it lets me use my phone (most of the time) at home for calls and SMS (think 2FA!) where there is no signal on Three. However, I recently discovered a big issue. With "Show My Caller ID" turned off calls I make are not withheld. That is the called party can see my, supposedly private, Caller ID. The Law Ofcom wrote to all UK CPs a number of years ago reminding them of their responsibilities, part of this eMail included; CPs must respect the privacy rights of consumers…

Read more »

SMS 2FA and the Modern Smartphone

SMS has been around for over 20 years now and yet this basic 160 character instant messaging service is still widely used for marketing, transactional messages and two-factor authentication ("2FA") This was just a random thought when trying to log into something for the third time today that requires an SMS OTP. When I'm staring at a form input box and my phone receives a message at that exact moment the chances are it's to fill that box in, it'd be nice if this was more streamlined! Imagine if, for example, an HTML form could listen for the message.. perhaps with something like the following…

Read more »

Alarm Monitoring (With Raspberry Pi)

I'm responsible for a commercial buildings that, as you would expect, have monitored alarms, access control and such like. However, commercial alarm monitoring is horrendously expensive, and most of them are stuck in the dark ages; I want to be able to monitor the condition of my alarm remotely, and get notifications in a useful way. Piece of cake pi My usual solution to these sorts of problems - Raspberry Pi. I've found use for this £30 mini Linux box in lighting control, information displays, presentations, video servers, phone systems and more... Connecting to the alarm Most alarms have a c…

Read more »