Security

Link Encryption, Authentication, and Data Security

There are currently no forms of security, authentication, or encryption utilized in this development release.

Setting wireless and ethernet devices to promiscious or monitor mode requires root or administrator privileges on the respective device.

Servers are not expected to be run on exposed, external, or non-development machines, and use of pre-arranged key distribution and ssh forwarded links is encouraged.

Additionally, all information observed is transmitted then retained in a clear text JSON file, which may present privacy concerns. The responsibility for database file maintainence and access security are placed upon the user.

Other security concerns are with the message protocol used between sensors and servers, though it seems pretty unlikely.

GPS, Wifi, and other packet fuzzers or frame/tag exploits are also beyond the scope of this software.

Beware.