Mastering Internet of Things

Avoiding leaking data unintentionally

Many data leaks that occur in systems are unintentional. Developers publish data in an accessible format because they want it to be easy for them to access the data. It might not occur to them that their APIs or data sources will be found, and attempted, by others. Always add a layer of authentication and authorization to your data sources and APIs as well. It is not sufficient to add such layers in user interfaces. So much should be clear by now.

But there are other unintentional data leaks that are more difficult to find: do you use third-party services? Every time you call such a service, you leak information to them, through the parameters you use in your API calls. Whether it be position information ...