/images/profile.jpeg
Richard Audette's Projects, Problems, Solutions, Articles on Computing and Security

Should I get in this elevator? Could a $10 sensor inform my decision?

By Richard Audette, richard@hotelexistence.ca

Introduction

I first heard about measuring CO2 as a risk proxy for Covid-19 from a Radiolab podcast. Covid-19 can be transmitted through respiratory droplets produced during exhalation. CO2 is also exhaled. We can’t easily measure Covid-19 droplets in the air, but we can inexpensively measure CO2.

Inexpensive CO2eq Sensor on Prototype Board in Elevator

A CO2 measurement greater than atmospheric levels (400 ppm) is a sign of air that has recently been exhaled. If a person were infected with Covid-19, aerosols containing Covid-19 could be lingering in the air. Proper ventilation decreases the concentration of aerosols that may be suspended in the air, as well as the concentration of CO2. As such, measuring CO2 is potentially a useful proxy indicator for airborne infection risk. A “HIGH” CO2 reading doesn’t mean there are Covid-19 aerosols, but a “LOW” reading suggests a low probability of infectious aerosols.

Voice Assistant File Transfer Protocol: Encodes files verbally and transfer them through the Alexa voice assistant

By Richard Audette, richard@hotelexistence.ca

Introduction

I have created a Voice Assistant File Transfer Protocol for Alexa-powered voice assistants, like the Amazon Echo. The protocol uses verbal encoding to transfer the file through Alexa - it is not the control an external file transfer application. I have developed a proof of concept, which includes a client application, a server application, and an Alexa Skill. The client encodes a binary file as English words, launches an Alexa Skill and verbally sends the data through the PC’s speakers to an Amazon Echo device. The server decodes the words, saves the binary file, and makes it available on the Internet.

Protect Your Users from Credential Stuffing Attacks: Ensure they aren't using passwords known to be breached

By Richard Audette, richard@hotelexistence.ca

Introduction

Credential stuffing is a type of cyberattack where stolen account credentials typically consisting of lists of usernames and/or email addresses and the corresponding passwords (often from a data breach) are used to gain unauthorized access to user accounts through large-scale automated login requests directed against a web application.
from: https://en.wikipedia.org/wiki/Credential_stuffing

These attacks are pretty common. In August, the Canada Revenue Agency was the subject of an attack. Approximately 5500 taxpayers were impacted, including one of my friends:

Mesh network in my neighborhood. Not how I had envisioned it.

I got an email from Amazon today. I’m automatically opted-in to “Amazon Sidewalk”, unless I choose to opt out. Amazon Sidewalk allows devices participating their Sidewalk program to connect to the Internet through Amazon devices, like the Amazon Echo.

Amazon Sidewalk - a mesh network for Amazon devices to connect to the Internet:
https://www.amazon.com/Amazon-Sidewalk/b?ie=UTF8&node=21328123011

Not exactly how I’d envisioned a neighborhood mesh, but their “read the fine print to opt out” strategy will probably work better than my asking neighbors to build a network.

1-Click Passwords

I was recently presented with a situation where I would have to regularly enter a 48 random character password for a month or more to log in to a computer that was assigned to me. Given that I couldn’t possibly memorize this string, and the computer is reasonably physically secure, I decided to build a device to do this for me.

I had previously used an Arduino to emulate a gamepad for a homemade Dance Dance Revolution mat. This time, I needed to emulate a keyboard. A search for “HID Arduino” returned the Arduino HID page, which suggested an Arduino with an Atmel 32u4 microcontroller. A search for Arduino 32u4 on Amazon returned the KeeYees Pro Micro clone, which I ordered.

Bicycle Dashcam Part 4: New Hardware

I was reading an article about Oak Vision Modules on Hackaday, and thought, wow, this is the PERFECT platform for my bicycle dashcam. The Oak Vision module is a Kickstarter project with camera modules, depth mapping capability using stereo vision, and a processor (Intel Movidius Myriad X) designed to accelerate machine vision in 1 package for $149US - see https://www.kickstarter.com/projects/opencv/opencv-ai-kit/

At the 3:55 mark in the marketing video, I THEN see the board mounted to a bicycle saddle, which is EXACTLY what I want to do: