The video runs just under 6 minutes, and you can see it here: https://www.precisionfarmingdealer.com/articles/2650-deu
Security and the IoT
This event has been called the “Mirai botnet attack.” This is an extremely important event, because it used IoT devices to effectively bring the Internet to a stop for several hours on Friday, October 21. Even Ayrstone was affected: we use Zendesk for our customer support portal, and it was unavailable off and on on Friday.
This attack was innovative in two ways: first, it did not attack the affected sites directly, but rather attacked the Domain Name Servers (DNS, the servers that turn domain names like ayrstone.com into IP addresses like 104.24.21.15) of Dyn.com, making a huge number of websites, including Zendesk, Twitter, and others unreachable, even though they were working just fine.
But the most important innovation was the way the attack was done – using a Distributed Denial of Service (DDoS) attack from IoT devices. DDoS attacks work by sending a huge amount of data to a server from a large number of devices on the Internet, overwhelming the server and causing it to fail. Up until now, the “botnets,” as the devices sending the data are known, have mostly been personal computers infected with viruses that allow a remote user to control them and cause them to send out streams of data to the target server.
As I mentioned, however, this attack was different, because it used IoT devices – IP cameras, routers, wireless networking devices, and other little devices that people don’t see as being “computers.” But your router or IP camera has a lot more computing power than the powerful desktop computer you had just a few years ago.
Hackers were able to access these devices and install “botnet” software on them because – and this is THE IMPORTANT THING – the passwords were NEVER CHANGED from the defaults. For instance, many devices come with a default username of “admin” and a default password of “admin” or “password.” If those are not changed and they are exposed to the Internet, they are an open invitation to hackers.
Now, most of the devices on your network are NOT currently exposed to the Internet – they are safely hidden from the Internet by your router’s NAT firewall. But it is still important to change the default password on devices, and, if you have “port-forwarded” to any devices to make it accessible via the Internet, it is DOUBLY important to make sure it has a STRONG password to protect it.
Ayrstone products, of course, are protected because the username and password for each device is set from AyrMesh.com. The only way an AyrMesh device can have the default username and password is if you don’t have an AyrMesh.com account, and we regularly disable devices that are not checking into an active account. However, even at that, AyrMesh devices should always be used behind a router’s firewall and not exposed to the Internet.
These devices are incredibly useful when used properly, but you have to take some minimal precautions to keep them safe. More information about the Mirai botnet attack and security of IoT devices can be found in this article and elsewhere.
This attack is a good reminder of three things:
- Make sure you always use good passwords (long, not a quotation or word) on ALL devices and keep those passwords secret,
- Don’t expose devices to the Internet unless you have to, and
- Purchase networking/IoT products from reliable vendors who can update the firmware to close vulnerabilities, preferably automatically and over the network. If not, make they make new firmware available to close holes as they are discovered, and install it regularly.
AyrMesh devices have firmware that is updated over the network. We issue several updates per year, and you needn’t do a thing – they happen automatically.
If you have any questions, of course, just let us know – support@ayrstone.com.
Welcome Eero and Google to the world of Mesh
We have been able to recommend the fine Open-Mesh products for indoor and urban outdoor use, but some new products have recently entered the market.
Eero was the first in this space, with a very nice-looking product and very good technical specifications. Unlike Open-Mesh, they do not have any way to mount their units outdoors, and they only offer one model (available in a 1-, 2-, or 3-pack).
Then, this week, Google announced the new Google WiFi product, utilizing a very similar approach of very nice-looking indoor meshing access points for larger houses. The Google WiFi products will be available in November, but they can be pre-ordered.
It’s worth mentioning that there have long been WiFi Repeaters (also known as “boosters” and “extenders”) that connect to your WiFi router and create a new WiFi signal, and devices like the Apple Airport routers that use “Wireless Distribution System” (WDS). Although a single repeater can work well, and three Apple Airport routers using WDS (one connected to the Internet and two “extenders”) can work, they don’t have the routing “smarts” of a real mesh network, and they can cause more problems than they solve. For a large house, a real WiFi meshing product like these will provide much better results without running Ethernet cables… of course, for the absolute best WiFi, there is no substitute for just running Ethernet and putting separate Access Points in each location you need WiFi. If you were clever enough to run Ethernet to the far reaches of your house before the drywall, all you have to do is plug in some dumb access points in the Ethernet – no need to mess with the indoor mesh.
The new Eero and Google WiFi products use apps to configure and control the network – I don’t know if there is a website option available, but I get the impression that the apps are the only way to control them. I don’t know about you, but my poor phone is “full” of apps, and I really don’t want another one.
So my own view is that these new players are not quite as good as what already exists in Open-Mesh, but, of course, your mileage may vary, Of course, they are being marketed like crazy, so you’re going to see them in the press all over the place.
What I think is important is that meshing WiFi is becoming mainstream, and, if you live in a large house, you don’t necessarily have to run Ethernet to get WiFi throughout the house.
Getting started with the IoT on the farm with ezeio
A few months ago, I was approached by the folks at eze System, who wanted to know if their ezeio product would work with AyrMesh to help farmers measure conditions on farms and control equipment.
What is cool about the ezeio is that it is a complete package – hardware, firmware, and back-end software – completely integrated and ready to plug in and go. It includes connection points for up to 4 analog inputs (configurable for 0-10V, 4-20mA current loop, S0-pulse, or simple on/off), Modbus devices, Microlan (1-wire) devices, and up to two relay outputs (up to 2 amps). This makes it a very versatile unit for both detecting and controlling things on the farm.
The bottom line is that I was able to quickly and easily set up a system that checked the temperature continuously and, when the temperature dropped below a certain level, lit up an LED. Big deal, I hear you say, BUT – it could easily have been starting a wind machine or an irrigation pump or some other machine, and it could have been triggered by a tank level switch or a soil moisture sensor or some other sensor or set of sensors. It also enables me to control those devices manually over the Internet, using a web browser, without having to “port forward” on my router.
The ezeio is a very powerful yet easy-to-use device which, in conjunction with the web service behind it, enables you to very easily set up monitoring and automation on your farm. For the do-it-yourselfer, it is a great way to get started on employing the Internet of Things (IoT) on your farm. Even if you’re not inclined to take this on yourself, any decent networking technician can easily set up your AyrMesh network and the ezeio to help around the farm.
The Internet of Things (IoT) on the Farm – Part 2
What I’m talking about when I talk about the Internet of Things is a profusion of small devices that are all connected to the network and therefore to the Internet. Whereas most of the things in your home that are connected to the network have keyboards and screens and are meant for you to interact with, I’m talking about things that instead have sensors and relays and actuators. In most cases, you won’t interact with them at all. They’ll just work automatically in the background either gathering data for you or controlling equipment. Most of these things you’ll set up and never touch them again, but they’ll be working quietly in the background for you day and night.
The kinds of computers that we are talking about here are significantly smaller (typically the size of a credit card) and significantly less expensive (most under $100, many of them less than $10), even though they have 10-100x the computing power of those early personal computers. Instead of keyboards and screens, they have network ports and connections for various sensors and/or actuators; most can run for hours or days on a small battery – some can run for months. They can sit in in a tiny place, collecting data and transmitting it to the network, or waiting for a command to do something, for years.
There are also a wide variety of sensors available, from simple temperature or humidity sensors to weather sensors like anemometers and rain buckets to advanced soil sensors that can measure soil temperature, moisture, and electrical conductivity. There are even sensors for UV radiation, leaf wetness, and chemicals in air and water.
But these little devices can do more than just sit passively measuring conditions. Devices can also be connected to allow them to take action, from simply turning something on to controlling complex machinery automatically. For instance, it is fairly simple to use a simple, small relay to turn an electrical machine on or off.
Multiple relays can be used for multiple devices, and relays come from very small, low-power devices to very high-power solid-state relays for switching very heavy loads. Many of these computers, however, also have the ability to output Pulse-Width Modulated (PWM) signals to control variable-rate devices like valves (control pressure through a water valve for irrigation or a hydraulic valve for controlling machinery) and pumps.
What ties it all together, of course, is two things: a network and software (both on the device and acting as some sort of “back end” to store and manage the data coming from these devices). Without software, any computer, even a $5 one, is just dead weight; without a network, it’s just sitting out in the field collecting data it can’t move to someplace it can be useful.
We know how to build the network – what Ayrstone does is give you the ability to build a strong, standards-based wireless network across your farm – and in part 3 we’ll consider the software part.
Sensor networks
Much has been written about the use of remote sensors in farming, with soil sensors leading the way. I think it’s worthwhile to understand how these sensors work and what options are available
We have highlighted some of these products (gThrive, Farmx, Edyn), and there are others coming up including Cropx and AgSmarts that we have not been able to evaluate in depth yet, although they are very promising and appear to be more focused on “mainstream” agriculture rather than specialty crops.
The soil sensor people understand that, to have soil sensors near the plants, you have to have sensors that are battery-powered (because you don’t get enough sun under the canopy to use solar). Because of that, most soil sensors use a low-power radio system; many use a “Personal-Area Network,” usually based on the 802.15.4 low-power, low-bandwidth meshing standard. These networks allow the sensors to use very little power so the batteries can last for months or even years. Additionally, the bandwidth (the amount of radio spectrum they use) is so low that they can transmit a very long distance with minimal power – frequently hundreds of yards – and the meshing capability means they can cover a very large area in a couple of hops. So these sensor networks actually ARE practical for gathering data from sensors, even in a very large field.
However, these systems, just like your home WiFi network, require a “gateway” device out in the field to connect them to the larger network (your AyrMesh network or the Internet). The Edyn sensor is an exception, because it connects directly to your WiFi network, but it is primarily aimed at gardeners, not commercial agriculture. Davis Instruments uses the weather station as the Gateway device, which makes it simple, but it does not use a meshing system, which limits how many sensors you can deploy. For almost all systems, sensors are not directly on your network or the Internet – the field network is a special network that only “talks” to the gateway device, and the gateway device “talks” to a normal Internet Protocol network – and that is usually a cellular modem connected to the Internet.
I generally discount analyst firms, but I have to reluctantly give kudos to Lux Research for hitting the nail right on the head: sensors are too expensive. With the exception of the Edyn, which you can buy at Home Depot (and connect to your AyrMesh network or other WiFi source), you have to buy:
- However many individual sensors you want,
- A Gateway device for your sensor network (possibly multiple gateway devices if you want sensors in multiple fields), and
- Cellular subscriptions for each gateway device.
This is a lot of “commitment” before you even figure out how to effectively use the sensors and the data that comes from them – thousands of dollars just to get started plus a monthly or annual commitment to get the data. These systems are being marketed primarily to folks growing wine grapes in California or vegetables in Arizona – high-value crops with severe water costs and restrictions.
There are changes coming, of course, but there are also ways to get started now with less commitment.
Second, Davis Instruments has a nice system that they don’t advertise much. Their Wireless Weather Envoy datalogger can be connected to any Ethernet network (e.g. a Remote AyrMesh Hub, an AyrMesh Receiver, or an AyrMesh Bridge) using their Weatherlink IP module. It can then connect to their Soil Sensor Station, which has up to four soil moisture and soil temperature probes. It will also connect to a Vantage Vue wireless weather station, which is a very high-quality, low-cost, integrated weather instrument cluster that you can put up in any field in a matter of minutes. There’s a small annual fee for their cloud-based Weatherlink service, but it makes the system VERY easy to use.
If you need more soil sensors, they also build an Envoy 8x, which has the ability to simultaneously “talk” to up to 8 stations – weather stations or soil stations – within about 1000 yards.
Third, if you do want to deploy many soil sensors using a system like gThrive or Farmx, you can connect the gateways in each field to an AyrMesh devvice to avoid exorbitant cellular fees for each gateway device. Their gateway devices have Ethernet ports, so they can be connected directly to an AyrMesh Remote Hub, Receiver, or Bridge unit, and you can skip the cellular bills.
We’ll have more on weather and soil sensors – if you have questions or comments, please leave them here (for public response) or contact us.
The “Third Wave” of AgTech
This article in DTN/Progressive Farmer talks about how information technology is making a difference in farming and how that is likely to accelerate in the coming years.
There are a lot of unknowns in the “AgTech” field – most importantly, which vendors and technologies are going to be genuinely important and which will be forgotten. However, one thing is clear: the technology of agriculture, and particularly of agricultural data, is here to stay. And, where you have data, you HAVE to have a way to move it. And, finally, the way to move data is using networks.
So we are encouraged by this article (and others we have seen) that predict increasing importance for data on the farm – it just makes the AyrMesh network that much more valuable for our customers.
The Internet of Things (IoT) on the farm – part 1
The IoT is not a single thing or even a particular class of things; it refers to a new generation of devices that are connected to the Internet and perform some function, with little or no human interaction. There are already a LOT of good examples, from the Nest Thermostat to kid’s Arduino toys, from devices that can be handy almost everywhere like a network-connected lightswitch, to highly specialized devices like grain dryer controllers or irrigation controllers. I would argue that little of this stuff is new; the things we are seeing being touted as “IoT” devices are really the same as things we already have, just made smaller, smarter, and less expensive. Frequently a LOT smarter and a lot less expensive, which is important.
But the profusion of little, inexpensive, smart things all over the place is having effects we can’t fully understand or appreciate yet. The one thing we can predict with some certainty is that the people who understand these devices and put them to use intelligently will see tremendous gains, just as those who started using computers intelligently saw huge benefits. The question, of course, is, “How do I use these devices?”
Technical knowledge is much less important at this phase than imagination – in all honesty, the most technically competent people miss a lot because they are too invested in how things ARE, so they cannot understand how things COULD BE. So I pose this question to you: what on the farm could be made better (faster, cheaper, more profitable, or more enjoyable) by little computers with accurate little sensors (for light, heat, moisture, position,
We’ll explore this more in future blog posts, but I would like to hear what you have to say, as well.
You can find Part 2 here, as well as a good post about sensor networks.
Saving money with AyrMesh
AyrMesh was designed specifically to help save costs on the farm, so it provides increased profits no matter what happens to yields and crop prices. There are several ways in which AyrMesh helps you reduce costs, directly or indirectly:
- Reduce the cost to simply move data – your cellphone (and maybe your tablet and/or laptop) has a cellular radio for data, and you pay a premium for using more than a minimal amount of data per month. By using the AyrMesh network, however, you can be disconnected from the cellular data network and save money you would have to send to the cellular companies.
- Employ new technologies that can save money – because AyrMesh is a standard, Internet-Protocol (IP) network, you can avail yourself of off-the-shelf products that just connect to your network. Examples include things like networked weather stations and soil sensor systems, but also grain dryers and irrigation systems. As security becomes an increasing concern on the farm, having an AyrMesh network allows you to quickly and easily place IP cameras so you can keep an eye on distant parts of the farm
- Be prepared for the future – new, time-saving and money-saving products are coming up fast, and you can be ready to put them to work. New autonomous vehicles, remote sensors, and remotely-operated machinery will be able to magnify the effort you put in on the farm, just like tractors and combines did in the late 1800s, increasing the profitability of farms.
But be careful: a lot of products being sold come with a “small monthly fee” to pay for a cellular modem to move data from the device to the company’s cloud servers. It’s a business model that works and it makes it easy to install new products, because the vendor doesn’t have to worry about setting up a network. However, as you adopt more and more of those products, the number of small monthly fees is going to add up fast, and none of them will work in fields without cellular connectivity.
Look, electronics and data aren’t going to grow the crops. But the information they can provide you can help you make better decisions, both season to season and day to day, to save money and increase yields. Smart investment in AgTech begins with thinking about the data – what you can use, how you will use it, and, most importantly, how you will get it from where it is generated to where it is useful. We are here to help with that last bit.
A good quick interview from InfoAg
We were recently at the InfoAg show in St. Louis, MO, and Chuck Zimmerman interviewed Bill Moffitt about Ayrstone. If you have a few minutes, please listen.
Thank you to Chuck at http://agwired.com