Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
This package enables the wearable device Tactigon Skin to connect to your python project using Bluetooth Low Energy.
Tactigon Gear environment has the following architecture:
Server is located on the cloud and it is manteined by Next Industries s.r.l. Server has a web interface where you can handle your profile and your data (models and gestures)
Provided Tactigon Gear SDK is the implementation of Tactigon Gear environment client side
Tactigon Gear SDK is used for collecting new raw data, send the data to server, ask server to train a model using the raw data, and download the model from server. Finally use the model for testing real-time gesture recognition.
In order to use the Tactigon Gear SDK the following prerequisites needs to be observed:
Install and update using pip:
pip install tactigon-gear
import time
from tactigon_gear import TSkin, TSkinConfig, Hand, OneFingerGesture
def main():
TSKIN_MAC = "change-me"
tskin_cfg = TSkinConfig(TSKIN_MAC, Hand.RIGHT) # Hand.LEFT if the TSkin is wear on left hand.
tskin = TSkin(tskin_cfg)
tskin.start()
i = 0
while True:
if not tskin.connected:
print("Connecting..")
time.sleep(0.5)
continue
if i > 5:
break
a = tskin.angle
t = tskin.touch
acc = tskin.acceleration
gyro = tskin.gyro
print(a, t, acc, gyro)
if t and t.one_finger == OneFingerGesture.TAP_AND_HOLD:
i += 1
else:
i = 0
time.sleep(0.02)
tskin.terminate()
if __name__ == "__main__":
main()
In order to perform new training and download them you need to register on following web side:
https://www.thetactigon.com/ai/web/
Once registration is done you can go to Profile section and click on Json File
button to download file user_data.json
The use of this file is described later in this doc.
FAQs
Tactigon Gear to connect to Tactigon Skin wereable platform
We found that tactigon-gear demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.