
Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
@hello.nrfcloud.com/proto-map
Advanced tools
Documents the communication protocol between devices, the hello.nrfcloud.com/map backend and web application
hello.nrfcloud.com/map
Protocols Documents the communication protocol between devices, the
hello.nrfcloud.com/map
backend and web application.
The lwm2m
folder contains the LwM2M objects that devices publish.
LwM2M object definitions are shared between models and can be re-used. Some
objects provide special behavior (for example object
14201
(Geolocation) will place the device's location on
the map).
Devices publish LwM2M objects using SenML directly, which needs to map to the defined LwM2M objects (example).
The SenML payload will be expanded to fully qualified LwM2M object representations which can then be processed further, e.g. stored in a database.
This allows the hello.nrfcloud.com/map
web application to visualize this data
in a meaningful way to users without the need for custom implementation.
LWM2MVersion
must be 1.1
14200
to 15000
(non-inclusively).urn:oma:lwm2m:x:
.ObjectVersion
must be appended if it is not 1.0
, which is the default.Time
property. Time is a signed integer
representing the number of seconds since Jan 1 st, 1970 in the UTC time zone.Multiple
instance.Optional
.RangeEnumeration
is only supported for Float
and Integer
and must be
specified as <min>..<max>
, where min
must be smaller than max
and both
must be a number.Objlnk
resource type is not supportedThe conformity to the rules is checked using the script
./lwm2m/check-lwm2m-rules.ts
.
bn
and n
fields are combined to form the unique identifier for a resource
in the form of /<object ID>/<object instance ID>/<resource ID>/0
. The
resource instance ID 0
is always appended, because multiple resource
instances are not supported right now.blv
to specify the object version, 1.0
is the
default and should not be specified.bt
and are
mapped to the LwM2M object's timestamp property and must not be send as a
property.kartverket-vasstandsdata
README.md
must be provided
that describes the modelThe conformity to the rules is checked using the script
./models/check-model-rules.ts
.
npm i --save-exact @hello.nrfcloud.com/proto-map
Install the dependencies:
npm ci
Install xmllint.
npm test
npx tsx generator/lwm2m.ts
npx tsx generator/models.ts
npx tsx generator/types.ts
FAQs
Documents the communication protocol between devices, the hello.nrfcloud.com/map backend and web application
The npm package @hello.nrfcloud.com/proto-map receives a total of 1,017 weekly downloads. As such, @hello.nrfcloud.com/proto-map popularity was classified as popular.
We found that @hello.nrfcloud.com/proto-map demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
Product
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
Product
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.