Self-inflicted Denial of Service on GitHub (Disclosed)


I've found an interesting, but low severity, way for a malicious user to selectively deny access to specific GitHub issues and Pull Requests. This doesn't affect the whole site - just targeted pages. It doesn't require elevated permissions, nor any special skills. This is just GitHub punching itself in the face. Here's how it works. […] Read More

Introducing @FiverFun - silly things on Amazon for under £5


Screenshot of the fiverfun homepage showing a wide range of presents

It's nearly Christmas! That means Secret Santa time at work, and the need for little stocking-filler gifts. But where can you find such cheap treats? Aha! I have created a service just for you! https://fiverfun.tumblr.com/ is my new(ish) project. It scours Amazon for the best and/or weirdest things for under a fiver! At the moment […] Read More

Should you open your WiFi during a disaster?


There has been a terrible natural disaster in Italy. A huge quake has broken a city. Rescue teams race to the scene to try to save lives and stabilise the situation. During the rescue efforts, the Italian Red Cross sends this tweet: #Terremoto, per favorire comunicazioni e operazioni di soccorso vi invitiamo a togliere la […] Read More

Easy APIs Without Authentication


A pet cat typing on a computer keyboard

This is a curated list of APIs which do not require usernames, passwords, access tokens, signing, accept-headers, or anything more complicated than sticking a URL in a browser. (This is an update to my post from two years ago.) When I introduce people to the concept of using RESTful APIs, they immediately get how powerful […] Read More

Disclosed - Lifx Security Issue


I love my Lifx Bulbs. They're a quick and easy way to retrofit Internet connected goodies into a smart-home. One of the best things about them is their open API. Sure, you can use IFTTT if you want something easy - but us 1337 hax0rs want an API and Lifx provides it. The API is […] Read More

The absolute horror of WiFi light switches


I've just got a WiFi light switch. As I've explained previously, swapping out all my existing light bulbs with Smart Bulbs would be hugely expensive and has the disadvantage of not working when the switches are off at the wall. A WiFi light switch (theoretically) allows me to control the lights from my phone - […] Read More

Cheap BlueTooth Buttons and Linux


Selfie sticks - like most modern inventions - are utter tosh. But they've rapidly brought down the price of Bluetooth buttons. So who am I to complain? Let's take the venerable AB Shutter 3 - You can find it on Amazon for around £2 including postage - or around $2 on AliExpress. Frankly, that's stupidly […] Read More

3D Printed, Arduino Powered, Educational, Open Source, Micro-Robots!


Last week I was invited to attend a product launch by BQ. They're a small company based out of Spain who create some curiously innovative products - including smartphones which natively run Cyanogen. I'm particularly looking forward to reviewing their Ubuntu Tablet later in the year. The thing which really caught my eye was Zowi […] Read More

Reverse Engineering the BMW i3 API


I'm really enjoying driving the BMW i3. I'd love to have it tweet its driving efficiency, or upload its location to my server, or let me turn on its air-conditioning when the temperature gets too warm - there are a hundred interesting things to do with the car's data. The official app has some of […] Read More

Repairing the Sercomm RC8230 PTZ Camera


I've been busy writing the definitive Sercomm Camera API documentation. (No, you need a hobby!) While doing so, I noticed that I couldn't get my Pan/Tilt/Zoom camera to... well... pan! No lateral movement whatsoever. It'd move up and down - but its left and right movement was non-existant. I could hear the stepper motor whirring, […] Read More