How a broken auto-updater left my blog open to a WordPress core RCE (wp2shell, CVE-2026-63030) and the boring IP rule that saved it anyway.
The patch that couldn’t install: a WordPress core exploit created an admin on this blog
Decoding the local Viber DB to extract messages
How an AI agent decrypted the local Viber database on my Mac in seven hours – a research experiment showing the technical barrier to hacking has collapsed.
3.5″ PiTFT as security camera monitor
Using a 3.5" PiTFT as security camera monitor with a ffmpeg one-liner #rtsp #raspberrypi ffmpeg -rtsp_transport udp -i rtsp://192.168.1.123:554/12 -pix_fmt rgb565le -s 480×320 -f fbdev /dev/fb1
The “S” in IoT stands for Security
Reminder: the "S" in IoT stands for Security
Provisioning ESP32 devices for mutual TLS authentication
Just recorded a new video: Provisioning ESP32 devices for mutual TLS authentication for MQTT using own PKI https://youtu.be/7qTT9EPCdCw #IoT #mTLS #MQTT #security #PKI #DIY #eclipse
How-to video on how to use self-created CA
Made a "how-to" video on how to use self-created CA to secure Node-RED installation with mutual TLS authentication in 12 minutes: https://www.youtube.com/watch?v=oRCpXEj236s&feature=youtu.be #IoT #nodered #tls #mtls #security
Basic PKI PoC
I need a node.js guru volunteer to work with me on creating basic PKI PoC that provisions #ESP32 devices with client certificates; node-forge looks right for the purpose. I have the complete solution architecture figured, just need a node.js guru that can code it for free 🙂 Couple volunteers already, thanks @eliofilipe and @MrQinEL ;…
mTLS to secure IoT solutions
Sharing some thoughts on using mTLS (mutual TLS authentication) to secure IoT solutions in a blog post: https://harizanov.com/2019/06/using-mtls-to-secure-iot-solutions/
Using mTLS to secure IoT solutions
Notes on securing IoT devices with mutual TLS (mTLS) – what it adds over one-way SSL and how I apply it in my own projects.
Thoughts on time/date management on IoT nodes
Why IoT nodes need accurate time: SSL certificate validation, scheduling, logs – and how I handle NTP, timezones and DST on mine.
Got featured on @hackaday
Got featured on @hackaday .. again 🙂 https://x.com/hackaday/status/976639868263542785
Ordinary security cameras with AI
New post: Enhancing my ordinary security cameras with AI https://harizanov.com/?p=4439 #IoT #AI
Enhancing my ordinary IP security cameras with AI
Adding AI object detection to my plain IP security cameras – how accessible AI has become for DIY IoT projects.
Ordinary IP security cameras with AI
Enhancing my ordinary IP security cameras with #AI, pumping recognized objects data to #MQTT .. isn't #IoT cool? Blog post soon ..
High security key fob project
Building a high security key fob around Atmel’s ATSHA204 – because rolling code fobs turn out to be quite hackable.
High security keyfob project
New post: High security keyfob project http://harizanov.com/?p=4362
BBoilRF
BBoilRF: my internet-connected relay actuator/gateway with battery powered wireless sensor support, designed primarily as a thermostat.
Security, Big Data and other challenges to the IoT
I will be doing a tech session on "#Security, Big Data and other challenges to the #IoT" at @ISTA_Conference 2017 https://www.istacon.org/Sessions/Session/12DCE70C-7085-4499-87DC-6D2954571FD5
Free signed SSL certificate for my blog
After the DDoS and daily hack attempts, this blog now runs on a free signed SSL certificate – how I set it up.
Some thoughts on security in terms of IoT
Some thoughts on IoT security: billions of records in transit daily, and most of the sensors sending them were never designed to be safe.
Interfacing with Paradox home security system attempt 2
Second attempt at decoding the Paradox alarm keypad bus – reading alarm state, PIRs and door/window sensors for home automation use.
Interfacing with Paradox home security system
Tapping into my Paradox home security system to read armed/disarmed state and zone statuses – free presence data for home automation.
Hacking Daikin split type air conditioner into air-to-water type heat pump
How I converted a Daikin split air conditioner into an air-to-water heat pump for heating, cooling and hot domestic water at my house.