Me smart sleep mask no bɔ wɔn a wɔde di dwuma no amemene asorɔkye kɔ MQTT broker a wɔabue mu

Smart nna akatasoɔ a ɛhwɛ amemene mu asorɔkye dwumadi so no reda ntini mu nsɛm a ɛyɛ mmerɛw adi akyerɛ obiara a ɔwɔ intanɛt so denam EEG nsɛnkyerɛnne a ɛde kɔma MQTT aguadifo a wonni ho adanse, a ɔmanfo betumi anya so. Eyi nyɛ asiane a ɛwɔ nsusuwii mu — ɛyɛ nhyehyɛe a wɔakyerɛw wɔ adetɔfo IoT yiyedi mfiri ahorow nyinaa mu a egyina hɔ ma data a ɛtwetwe a ɛbɛn sen biara wɔ abakɔsɛm a ɛfa mfiridwuma a wɔhyɛ ho no mu biako.

Dɛn Pɛpɛɛpɛ na Ɛrekɔ so Bere a Wo Dae Akataso Bɔ Amemene Mu Asorɔkye?

MQTT (Message Queuing Telemetry Transport) yɛ nkrasɛm nhyehyɛe a emu yɛ hare a wɔayɛ ama IoT mmeae a ɛwɔ bandwidth a ɛba fam. Ɛyɛ adwuma wɔ publish/subscribe model so: afiri bi tintim data kɔ "asɛmti" bi so wɔ broker so, na obiara a ɔkra no betumi akenkan saa asɛmti no wɔ bere ankasa mu. Architecture no yɛ adwuma yiye na ɛyɛ fɛ — nanso asiane kɛse wom bere a broker no nhia nokwaredi biara.

| Wɔde saa data yi kɔ cloud brokers so bere nyinaa. Sɛ wogyaw saa brokers no bue — username biara nni hɔ, password biara nni hɔ, TLS biara nni hɔ — obiara a onim anaasɛ ɔsusuw broker address no ho no betumi akyerɛw ne din wɔ asɛmti no mu na wanya obi foforo ntini tebea ho live feed. Nnwinnade te sɛ Shodan ne MQTT Explorer ma saa brokers a wɔabue yi a wobehu no yɛ ade ketewaa bi.

Data a wɔreda no adi no nyɛ abstract telemetry. Amemene mu asorɔkye nhyehyɛe betumi ada nna mu haw ahorow, dadwen dodow, adwene mu adesoa, ne wɔ nhwehwɛmu tebea horow bi mu no, nkate mu tebea horow adi. Ɛka ankorankoro biometric data a onipa yɛ ho.

Dɛn Nti na Saa Mmɔdenbɔ Yi Atrɛw Saa wɔ Consumer IoT Devices mu?

Nea ɛde ba no ntini ne nkɔsoɔ berɛ nhyehyɛeɛ a wɔahyɛ no den, ɛka a wɔbɔ, ne mmara mu nhyɛsoɔ a enni hɔ wɔ adetɔfoɔ yiedie hardware yɛfo so. Saa nnwumakuw yi mu pii de feature development ne bere a wɔde bɛto gua no di kan sen ahobammɔ nhyehyɛe. MQTT brokers yɛ nea ne bo yɛ mmerɛw na ɛnyɛ den sɛ wɔbɛbɔ mu, na sɛ wɔma kwan ma wotumi kɔ hɔ wɔ nkɔso bere mu a, ɛyɛ ɔkwan tiawa a wɔtaa fa so tra ase kɔ production builds mu.

• No authentication by default: MQTT broker nhyehyeɛ bebree de mena a wɔama anonymous access ayɛ adwuma, a ɛhwehwɛ sɛ developers hyɛ da siw no — anammɔn a wɔtaa gyae.
• No transport encryption: Wɔtaa de data fa port 1883 (wɔn encrypt) so de mena sen port 8883 (TLS), a ɛkyerɛ sɛ data stream no yɛ nea network observer biara betumi akenkan, ɛnyɛ broker subscribers nko ara.
• Asɛmti nhyehyɛe a ɛyɛ tratraa: Mfiri taa tintim kɔ asɛmti nhyehyɛe a wotumi hyɛ ho nkɔm so, na ɛma ɛyɛ mmerɛw sɛ wobɛkan na woakyerɛw wɔn din wɔ wɔn a wɔde di dwuma pii data mu bere koro mu.
• Mfiri no mu ahotosoɔ biara nni hɔ: Sɛ ɛnyɛ TLS anaa mfiri a egyina token so a, mfiri a wɔayɛ no atoro betumi de atoro data ahyɛ asuten no mu anaasɛ ayɛ sɛ mfiri a ɛfata koraa.
• Akontaabu logging biara nni hɔ: Open brokers taa nni ɔkwan biara a wɔfa so hu anaa wɔbɔ kɔkɔ wɔ subscription dwumadi a wɔmma ho kwan ho, enti nea ɔyɛe ne nea ɔde di dwuma no nyinaa ntumi nhu nea ɛda adi no.

a wɔde ahyɛ mu

"Data no mu abusuabɔ a emu yɛ den no ma saa mmara sobu kuw yi yɛ aniberesɛm soronko. Wobetumi asesa sikasɛm ho nsɛm. Ntini mu nsɛm ntumi. Amemene mu asorɔkye ho nsɛm a ɛretu no yɛ obi mu adwene mu tebea a ɛda adi daa, a wontumi nsakra no."

na ɛkyerɛ sɛ woayɛ

Dɛn ne Wiase Ankasa Nkyerɛkyerɛmu ma Nnwuma ne Wɔn Adwumayɛfoɔ?

Eyi nyɛ adetɔfo kokoam asɛm ara kwa. Adwumayɛfo de mfiri a wɔde hwɛ apɔwmuden di dwuma kɛse — a nneɛma a wɔhyɛ a ɛma obi da yiye ka ho — sɛ nnwumakuw akwahosan nhyehyɛe ahorow no fã, na mpanyimfo binom de nnwinnade a wɔde wɔn adwene si so a egyina EEG so di dwuma wɔ adwuma bere mu. Sɛ brainwave data a efi saa mfiri yi mu no yɛ nea wotumi nya wɔ brokers a wɔabue so a, ɛma enterprise-level exposure.

Akansi nyansa a wonya fi ntini mu nsɛm mu no yɛ nsusuwii hunu nnɛ nanso ɛnyɛ nea wontumi nnye nni ɔkyena bere a nhwehwɛmu nnwinnade nyin no. Ntɛm ara, mmara kwan so asodi a wɔda no adi no yɛ nea ɛho hia. Wɔ GDPR, CCPA, ne biometric data mmara a ɛreba wɔ aman te sɛ Illinois ne Texas ase no, ntini mu nsɛm fata sɛ biometric nsɛm a ɛho hia. Adwuma bi a ɛkamfo anaa ɛboa afiri bi a ɛwɔ saa mmerɛwyɛ yi betumi ahyia mmara kwan so nhwehwɛmu sɛ wɔyi adwumayɛfo data fi mu a — sɛ mpo adwuma no nni kyɛfa biara tẽẽ wɔ mfiri no nhyehyɛe mu a.

Wɔ nnwumakuo a wɔreyɛ yiedie, HR, anaa adwumayɛfoɔ a wɔde wɔn ho hyɛ mu nhyehyɛeɛ mu no, data ahobanbɔ gyinabea a ɛwɔ mfiridwuma mu touchpoint biara mu nteaseɛ mprempren yɛ mfitiaseɛ ahwehwɛdeɛ, ɛnyɛ nsonsonoeɛ.

Ɛbɛyɛ dɛn na Ahyehyɛdeɛ Atumi Abɔ Wɔn Ho Ban afiri IoT Data a Wɔde Di Dwuma Ho Asiane Ho?

Sɛ wobɛbɔ wo ho ban afi saa mmerɛwyɛ kuw yi ho a, ɛhwehwɛ sɛ wɔde mfiridwuma sohwɛ ne ahyehyɛde nhyehyɛe nyinaa di dwuma. Wɔ mfiridwuma fã no, ɛsɛ sɛ wɔsɔ IoT mfiri biara a ɛdi biometric data a ɛho hia ho dwuma no hwɛ ansa na ahyehyɛdeɛ no agye atom: hwɛ sɛ broker nkitahodiɛ hwehwɛ sɛ wɔgye no tom, si so dua sɛ wɔahyɛ TLS so, na hwɛ sɛ ɔdetɔnfoɔ no tintim ahobanbɔ a wɔda no adi ho nhyehyɛeɛ anaa.

Wɔ dwumadie no fã no, ahyehyɛdeɛ hia sɛ wɔhunu no wɔ mfimfini wɔ nnwinnadeɛ ne nhyiamu a adwumayɛfoɔ de di dwuma no mu — titire deɛ ɛka ankorankoro data. Eyi ne baabi a adwumayɛ mu nsɛnnennen a ɛwɔ nnɛyi adwuma bi a wɔde di dwuma mu no ma asiane no yɛ kɛse. Sɛ enni nhyehyɛe a wɔaka abom a ɛbɛdi adetɔnfoɔ abusuabɔ, data dwumadie apam, ne ahobanbɔ nhwehwɛmu akyi a, nea wɔda no adi no boaboa ano komm wɔ nnwinnadeɛ ahodoɔ du du pii a wɔatwa mu.

Saa nsɛnnennen yi a wɔbɛhwɛ so no hwehwɛ sɛ wonya platform a ɛhyɛ adwumayɛ mu nhumu mu den a wɔmfa adwumayɛ ho ka nka ho — ɔhaw pɔtee a wɔayɛ nnɛyi adwumayɛ nhyehyɛe ahorow sɛ wobedi ho dwuma.

Dɛn na Ɛsɛ sɛ Mfiri Yɛfoɔ Yɛ de Siesie Open MQTT Broker Vulnerabilities?

Wɔte ɔkwan a wɔfa so siesie no ase yiye, sɛ mmofra a wɔfa wɔn sɛ wɔn mma no yɛ brɛoo mpo a. Ɛsɛ sɛ wɔn a wɔyɛ no hyɛ nokwaredi mu den wɔ MQTT broker nkitahodi nyinaa so, de TLS di dwuma wɔ data akwan nyinaa so, dannan mfiri pɔtee ho adansedi nkrataa daa, na wɔma wɔn a wɔde di dwuma no nkrataa a emu da hɔ na wotumi nya bi a ɛfa data a wɔboaboa ano, baabi a ɛkɔ, ne nea obetumi anya ho. Ɛsɛ sɛ asɛdeɛ a ɛfa nsɛm a wɔda no adi ho nhyehyɛeɛ ne nnipa foforɔ ahobanbɔ akontabuo yɛ adeyɛ a ɛyɛ gyinapɛn ma mfiri biara a ɛdi biometric data ho dwuma.

Mmara nhyehyɛe ahorow afi ase reyɛ nea ɛkɔ akyiri. EU Cyber ​​Resilience Act ne US Cyber ​​Trust Mark nhyehyɛe a ɛfa IoT mfiri ho no nyinaa yɛ nhyehyɛe mu nkannyan ma wɔn a wɔyɛ no ma wodi saa mmerɛwyɛ ahorow yi ho dwuma pɛpɛɛpɛ. Nanso gua so nhyɛso a efi adetɔfo ne nnwumakuw a wonim nimdeɛ hɔ no ne lever a ɛyɛ ntɛmntɛm.

Nsɛmmisa a Wɔtaa Bisa

So metumi ahu sɛ me smart sleep mask no rebɔ amanneɛ akɔ MQTT broker a wɔabue mu?

Wobɛtumi de network monitoring tools te sɛ Wireshark ahwɛ traffic a ɛfiri wo device no so wɔ wo local network so. Hwehwɛ nkitahodi ahorow a ɛkɔ port 1883 (MQTT a encrypted) so sen 8883 (TLS MQTT). Sɛ wo device no kɔ IP a ɛwɔ abɔnten so wɔ port 1883 so a, ɛda adi sɛ wo data stream no nni encrypted. Wubetumi nso ne nea ɔyɛe no adi nkitaho tẽẽ na woabisa wɔn MQTT broker nhyehyɛe ne nokwaredi nkrataa — wɔn mmuae no su ankasa yɛ nsɛm.

So wɔabɔ amemene mu asorɔkye data ho ban wɔ mmara kwan so sɛ biometric data?

Wɔ tumidi dodow a ɛrekɔ soro mu no, yiw. Sɛ nhwɛso no, Illinois Biometric Information Privacy Act (BIPA) ka "neural" data ho asɛm pefee. Texas ne Washington wɔ mmara ahorow a wɔde toto ho. Wɔ aban gyinabea wɔ U.S. no, wonni biometric kokoamsɛm ho mmara a edi mũ biara de besi nnɛ, nanso FTC ayɛ nhyehyɛe a wɔde hyɛ nnwumakuw so wɔ nnaadaa data nneyɛe a ɛfa biometric ho. Wɔ EU no, wobu EEG data sɛ akwahosan ho nsɛm wɔ GDPR ase na ɛhyɛ n’ahwehwɛde ahorow a ɛyɛ anohyeto sen biara a ɛfa dwumadie ho no ase.

Ɛbɛyɛ dɛn na adwuma bi a wɔde di dwuma wɔ nkabom kwan so no brɛ IoT ne data ahobammɔ ho asiane ase?

Adwumayɛ nnwinnade a wɔapaapae mu no yɛ data nniso a apaapae. Sɛ adwumayɛ, HR, adetɔnfoɔ sohwɛ, ne nkitahodiɛ tu mmirika fa nhyiamu du du pii a wɔatwa mu a, ahobanbɔ nhwehwɛmu no nhyia na akontaabuo mu nsonsonoeɛ yɛ nea wontumi nkwati. Adwumayɛ nhyehyɛe a wɔaka abom no yɛ ɔfa biako ma nhyehyɛe a wɔde di dwuma, adetɔnfo nhwehwɛmu, ne adwumayɛ sohwɛ — ɛtew ntua no so na ɛma nea ɛda adi sɛ ɛyɛ mmerɛw sɛ wɔbɛhwɛ so na wɔahwɛ so.

Adwumayɛ adwumayɛ a ɛyɛ mmerɛw, ahobammɔ wom, na ɛyɛ biako a wɔde tu mmirika no fi ase wɔ fapem a ɛfata so. Mewayz — 207-module adwumayɛ OS a nnipa bɛboro 138,000 de di dwuma — ma wo adwumayɛ mu pefee sɛ wobɛhwɛ w’adwuma no fã biara so wɔ beae biako, efi kuw adwumayɛ so kosi adetɔnfo abusuabɔ so, efi ase fi $19/ɔsram. Gyae sɛ wobɛma nneɛma a ɛyɛ den ama woada wo ho adi. Fi ase wo Mewayz adwumayɛbea nnɛ.