3 ms·
It just so happens that I met Issac Kelly (the author of the post) three or four years ago at a coffeeshop in Columbus, nearby the Short North I think. Spoke m
by codewright 14y ago
It just so happens that I met Issac Kelly (the author of the post) three or four years ago at a coffeeshop in Columbus, nearby the Short North I think.
Spoke mostly about entrepreneurship, .NET, and Python. Nice guy.
I'm mostly tinkering with Clojure these days, but the day job so to speak is Python. No more .NET anymore :)
I moved to the bay area too!
About the post:
You mentioned that you were disappointed in the security of their straightforward HTTP/REST implementation, what do you think would've been more secure?
- izak30 14y agoThe security issue is that they're sending my data back to their sites (phone homes) via HTTP not HTTPS. Schedules, on/off status and device hashes. At that point if you had the traffic it would be fairly trivial to pretend you were one of my registered devices locally (this is how I did initial testing), possibly even over the internet back to Hue (not tested, as their webservice hasn't quite worked for me in normal circumstances) Also, reintroduce yourself! Coffee in Columbus talking shop doesn't narrow it down enough for me.