
Security News
Research
Destructive npm Packages Disguised as Utilities Enable Remote System Wipe
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.
Supply Chain Security
Vulnerability
Quality
Maintenance
License
All software needed for a camera node in an environment. Includes pieces for both capture and delivery as well as proxy node that handles centralized processing of video, upload, and queuing in case of slow or down connectivity.
Flask service that receives data from all other camera nodes and feeds and internal queue and that sends data to honeycomb and optionally processes videos to pull out frames that are also sent to honeycomb.
Service that runs on nodes that have cameras. Captures video clips in short segments and sends them to their internal queue where workers send the to the proxy.
Celery service that performs tasks from the internal queue. Capture work is processed and sent to the proxy, unless it is a the proxy-node in which case it forwards the work to another task. Video segments are processes and sent to honeycomb. Processing includes tagging etc. Once uploaded the next set of processing happens, key frames are extracted at those are sent to honeycomb as child datapoint objects of the video.
If running on more capable hardware the keyframes could be evaluated for things like pose detection or object tracking. This is not planned yet but isn't out of scope specifically.
A python service that connects to a network of DWM1001 modules over BLE to collect data. That data is queued to be sent to honeycomb. It is expected that this service runs on the proxy node.
Leverages fluentd to move Ciholas sensor data to S3
Before deploying the service, update the Ciholas network config as follows:
IP | Port | Interface | |
---|---|---|---|
Config | 239.255.76.67 | 7671 | <> |
Input | 239.255.76.67 | 7667 | <> |
Output | 0.0.0.0 | 32222 | <> |
PS: In order to resolve an issue with the anchors disconnecting and not reconnecting, you may need to set the interface IPs of the Config and Input rows to the ethernet device's IP (Use ifconfig
)
make build-cuwb-stream
# Install envsubtr, on MacOS install through the gettext pkg
brew install gettext
brew link --force gettext
# Create a config and secrets file with S3 and AWS ENV keys
kubectl apply -f ./k8s/kube-logging.yml
kubectl apply -f ./private/aws-s3-write-auth-config.yml
kubectl apply -f ./private/aws-s3-write-auth-secret.yml
kubectl apply -f ./k8s/fluentd.yml
kubectl apply -f ./k8s/fluentd-s3-config.yml
kubectl apply -f ./k8s/fluentd-s3.yml
TIMEZONE=US/Pacific envsubst < ./k8s/fluentd-s3-scheduler.yml | kubectl apply -f -
kubectl apply -f ./k8s/cuwb-service.yml
See the cdp_player README
You can use the Makefile to build or run the cdp-player. You can also work with cdp-player directly.
make build-cdp-player REPO_NAME=<<Ciholas PPA Repository Name>>
make run-cdp-player REPO_NAME=<<Ciholas PPA Repository Name>>
First login and then copy creds into the cluster:
docker login
# Provide username and PAT (personal access token)
kubectl create secret generic regcred --from-file=.dockerconfigjson=/home/wildflowertech/.docker/config.json --type=kubernetes.io/dockerconfigjson
kubectl create namespace monitoring
kubectl create secret generic logzio-logs-secret \
--from-literal=logzio-log-shipping-token='<<REDACTED>>' \
--from-literal=logzio-log-listener='https://listener.logz.io:8071' \
-n monitoring
# fluentd-general-config.yml contains the CLASSROOM_ENVIRONMENT env var
kubectl apply -f ./private/fluentd-general-config.yml
kubectl apply -f ./k8s/fluentd-general-config.yml -f ./k8s/fluentd-general-monitoring.yml
FAQs
utilities for wildflower cameras and raspberry pi
We found that wf-camera-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.
Research
Security News
Malicious Ruby gems typosquat Fastlane plugins to steal Telegram bot tokens, messages, and files, exploiting demand after Vietnam’s Telegram ban.
Research
Security News
Socket uncovered four malicious npm packages that exfiltrate up to 85% of a victim’s Ethereum or BSC wallet using obfuscated JavaScript.