Basic API Security Flaw Exposes Personal Information of Millions of Israelis

A political campaign application designed for the Likud party in Isreal has been found to include a basic API flaw that exposed the personal information of almost 6.5 million users. Likud, the party of Israeli prime minister Benjamin Netanyahu, designed the app to help users receive campaign news and updates.

The vulnerability was first discovered by Ran Bar-Zik, a developer for Verizon Media that was performing a security audit of Elector, the political party’s campaign application. Bar-Zik had grown concerned about the application’s security after hearing reports of errors that were allowing users to register other individuals for SMS notifications without their consent. Upon inspection, Bar-Zik noticed that the application’s source code included a reference to an unsecured API endpoint that was intended to authenticate the site’s administrators. By querying the API the researcher was able to attain enough information on the administrators that he was able to gain access to the application’s backend.

The application’s backend provided Bar-Zik with access to a database that included details on 6,453,254 Israeli citizens. The information in the database included full name, phone number, ID card numbers, home addresses, gender, age, and political preferences. The application has since been shut down and removed from the cache of search engines. 

Go to Source
Author: <a href="">KevinSundstrom</a>

IEEE Spectrum

Blue Frog Robotics Answers (Some of) Our Questions About Its Delayed Social Robot Buddy

In September of 2015, Buddy the social home robot closed its Indiegogo crowdfunding campaign more than 600 percent over its funding goal. A thousand people pledged for a robot originally scheduled to be delivered in December of 2016. But nearly three years later, the future of Buddy is still unclear. Last May, Blue Frog Robotics asked for forgiveness from its backers and announced the launch of an “equity crowdfunding campaign” to try to raise the additional funding necessary to deliver the robot in April of 2020.

By the time the crowdfunding campaign launched in August, the delivery date had slipped again, to September 2020, even as Blue Frog attempted to draw investors by estimating that sales of Buddy would “increase from 2000 robots in 2020 to 20,000 in 2023.” Blue Frog’s most recent communication with backers, in September, mentions a new CTO and a North American office, but does little to reassure backers of Buddy that they’ll ever be receiving their robot. 

Backers of the robot are understandably concerned about the future of Buddy, so we sent a series of questions to the founder and CEO of Blue Frog Robotics, Rodolphe Hasselvander.


MillRight CNC Launches Mega V CNC Machine and Plasma System

MillRight CNC has launched a new crowdfunding campaign for their Mega V, which is designed to be an affordable CNC machine situated at a middle point between the company’s bargain-based Carve King and the more expensive Power Route platforms. The Mega V also comes in three configurations depending on your needs, including as a CNC router, plasma table, or a hybrid that combines both in one package.

The Mega V was designed as an affordable high-performance CNC machine that comes as a CNC router, plasma table, or a hybrid of both. (📷: MillRight CNC)

“The MillRight CNC Mega V boasts the most substantial frame rail, fastest accelerations and traverse speeds, largest bearing wheels, and the most motor torque of any machine for a similar price. The MillRight CNC Mega V represents a breakthrough in affordable CNC that is unmatched by anything on the market.”

The Mega V router version features Hiwin MGN15 linear profile rails, a 40mm Acetron bearing wheel with dual 608–2RS bearings, a 1.25 horsepower DeWalt DWP611 router, digital stepper motor drivers, NEMA 23 motors, precision Cut 6.35mm steel bearing plates, and X/Y/Z homing switches. It also has a movement range of 485mm x 500mm x 95mm for the standard version, and 890mm x 890mm x 95mm for the XL model, and a resolution of .013mm on the X-axis, .013mm on the Y-axis, and .005 on the Z-axis.

The Mega V Plasma version offers the same characteristics as the Router; only it adds a plasma cutting torch with magnetic mount, along with an optional Proma Elektronika height controller, which provides a functioning Z-axis that allows for cutting curved materials and even corrugated metal. It also comes with a powder-coated water table and can be converted into the Router version using a table adapter (The Router version cannot be converted).

MillRight is currently crowdfunding the Mega V on Kickstarter with pledges starting at $1,249 for the Standard routing version (19” X 19”), $1,499 for the XL version (35” X 35”), and $2,199 for the Plasma version. Each price point comes with free extras as well, including an XYZ touch probe, carbide end mill, torch touch-off, magnetic breakaway mount, and more.

Go to Source
Author: Cabe Atwell


Add Increased Functionality to Your Arduino and Raspberry Pi with TinyCircuits’ Whiskers

Open source electronics maker TinyCircuits has launched a crowdfunding campaign to bring their tiny Whisker add-on boards to the market. The boards act in a similar fashion to Raspberry Pi HATs and Arduino shields, adding everything from sensors to 9-axis IMUs.

“Whiskers are tiny, low-cost, and to top it all off — they are compatible with TinyCircuits boards, standard Arduino boards, and Raspberry Pi boards. Over 30 Whisker boards have been developed with many more planned in the future!”

The Whiskers connect to the Pi/Arduino/TinyDuino via a 5-pin cable, which means there is no soldering required, making it easy to attach to new or existing projects. Of course, to use the Whiskers with those boards, they need a HAT/shield adapter, which is outfitted with the necessary jacks to add up to four additional boards. They are also equipped with a 4-channel multiplexer, RTC, and onboard voltage regulation and level shifting.

TinyCircuits state they have developed over 30 Whisker boards — including a myriad of sensors (accelerometer, 9-axis IMU, color, VOC, etc.), Hall effect switch, Hall effect sensor, IR receiver, I/O expansion, LRA vibration motor, various-sized displays, and rotary switch. There is even a MEMS microphone board, audio amplifier, NFC reader, breakout board, pulse oximeter, and a host of others in the arsenal.

Beyond Whisker boards, TinyCircuits offers a pair of processor platforms that were designed for low-cost Whisker projects, such as the WhiskerZero, which features a Microchip SAM D21 MCU, USB connectivity port, power management, and battery charger. Tiny Circuits’ other processor board, the RobotZero, was designed for robotic projects and features four Whisker connectors, two motor ports, an IMU, as well as a SAM D21 MCU.

TinyCircuits is currently crowdfunding their Whiskers on Kickstarter with pledges starting at $25 for the Basic Kit, which comes with your choice of Pi HAT, Arduino shield, or WhiskerZero adapter boards, digital Hall sensor board, RGB LED board, rechargeable battery, 0.42-inch display, light sensor, buzzer, programmable button, and six Whisker cables.

Go to Source
Author: Cabe Atwell


What’s New on GroupGets

Thanks to our secretive friends over at SparkX, we have a brand new campaign for the A111 Breakout Board. This incredible board was designed around the Acconeer A111, a 60GHz pulsed coherent radar (PCR) chip. Complete with an integrated antennae, and an SPI interface capable of up to 50MHz clock speeds, this board is ready to work hard.

Primarily designed for precise distance sensing, the A111 is can be used to add gesture, motion, material, and speed detection to your next project.

This breakout board for the A111 includes a 1.8V regulator, voltage-level translation between 1.8V and either 3.3V or 5V, and, of course, it breaks out all the pins of the pulsed radar sensor to both 0.1-inch and Raspberry Pi-friendly headers.

Finally, the search for a WiFi-streaming thermal camera is over. Built around the PureThermal Mini — Pro w/ FLIR Lepton, and Onion Omega 2+, the NetThermal is a tony, DIY, WiFi-enabled camera.

Developed by Percept Systems, the NetThermal is easy to assemble and extremely versatile. Whether you are using it for drones, as a home security camera, or integrating it into your next DIY project, NetThermal is ready to work.

Introducing the all new PureThermal Mini Pro, a more versatile and well, “pro” version of the smallest Lepton breakout board available. So, what did we change to make this already great board a pro?

We ditched the micro USB connector for a more robust and lower-profile Molex connector and added through-holes in case you like your cables terminated with flying leads and solder. All of these improvements were made possible thanks to the feedback we received from the awesome Lepton development community. Keep giving us your great feedback so we can keep making great Lepton boards.

Let’s talk about home security, and how our newest campaign is making it easier without a costly monthly subscription. Inspired by the original open-source HKCam created by Matt Hochgatterer that we stumbled upon via Appleinsider, our slightly upgraded version is here to keep a vigilant eye over your home.

Equipped with a 130° night vision camera, 3D-printable case, infrared lights, and a 64GB SanDisk Micro SD card, the HKCam Advanced will stand guard day and night. Using ffmpeg to access and publish the camera stream to your desired HomeKit app such as Matt Hochgatterer’s Home 3 app, you are able to access the data from almost any device.

Greenwaves Technologies is making their grand entrance on to GroupGets with the GAPDUINO Combo Kit, sporting the new groundbreaking GAP8 processor. Focusing on ultra-low power consumption, the GAP8 processor is able to run AI and IOT applications on battery power alone.

Built around the new RISC-V architecture, GAP8 is an extremely versatile processor that would be an incredible addition to anyone’s development arsenal. Check out the GAPDUINO combo kit which includes a GAP8 processor, development hardware, and an incredibly versatile SDK to start prototyping with this piece of bleeding edge technology.

Go to Source
Author: GroupGets