UPnP, Vulnerability As A Feature That Just Won’t Die

UPnP — in a perfect world it would have been the answer to many connectivity headaches as we add more devices to our home networks. But in practice it the cause of a lot of headaches when it comes to keeping those networks secure.

It’s likely that many Hackaday readers provide some form of technical support to relatives or friends. We’ll help sort out Mom’s desktop and email gripes, and we’ll set up her new router and lock it down as best we can to minimise the chance of the bad guys causing her problems. Probably one of the first things we’ll have all done is something that’s old news in our community; to ensure that a notorious vulnerability exposed to the outside world is plugged, we disable UPnP on whatever cable modem or ADSL router her provider supplied.

Continue reading “UPnP, Vulnerability As A Feature That Just Won’t Die”

Fix Your Insecure Amazon Fire TV Stick

I recently spent a largely sleepless night at a hotel, and out of equal parts curiosity and boredom, decided to kill some time scanning the guest network to see what my fellow travelers might be up to. As you’d probably expect, I saw a veritable sea of Samsung and Apple devices. But buried among the seemingly endless number of smartphones charging next to their sleeping owners, I found something rather interesting. I was as picking up a number of Amazon-made devices, all of which had port 5555 open.

As a habitual Android tinkerer, this struck me as very odd. Port 5555 is used for Android Debug Bridge (ADB), a development tool used to control and perform various administrative tasks on an Android device over the network or (more commonly) locally over USB. The number of users who would have legitimately needed to enable network ADB on their devices is surely rather low, so to see a half dozen of them on the network at the same time seemed improbable to say the least.

Why would so many devices manufactured by Amazon all have network ADB enabled? I realized there must be a connection, and it didn’t take long to figure it out.

Continue reading “Fix Your Insecure Amazon Fire TV Stick”

Chromecast Vintage TV Is Magic

When [Dr. Moddnstine] saw a 1978 General Electric TV in the trash, he just had to save it. As it turned out, it still worked! An idea hatched — what if he could turn it into a vintage Chromecast TV?

He opened up the TV and started poking around inside. We should note that old TV’s are pretty dangerous to open up if you’re not familiar with the components inside — high-voltages that could kill you linger on some capacitors. [Dr. Moddnstine] didn’t go into too much detail, so do a little extra research before you open up a TV.

Part of his goal for this project was to keep everything self-contained within the TV so all you would have to do is plug it into the wall in order to use it. Since the TV is so old, it doesn’t even have an analog RCA connections for a video input — just a VHF input. Because of this he needed to use three separate connection adapters to get the video signal to the TV.

Continue reading “Chromecast Vintage TV Is Magic”

A Power Switch For The Chromecast

Chromecasts are fantastic little products, they’re basically little HDMI sticks you can plug into any monitor or TV, and then stream content using your phone or computer as the controller. They are powered by a micro USB port in the back, and if you’re lucky, your TV has a port you can suck the juice off. But what if you want to turn it off while you use a different input on your TV so that your monitor will auto-sleep? You might have to build a power switch.

Now in all honesty, the Chromecast gets hot but the amount of power it draws when not in use is still pretty negligible compared to the draw of your TV. Every watt counts, and [Ilias] took this as an opportunity to refine his skills and combine a system using an Arduino, Bluetooth, and Android to create a robust power switch solution for the Chromecast.

The setup is rather simple. An HC-05 Bluetooth module is connected to an Attiny85, with some transistors to control a 5V power output. The Arduino takes care of a bluetooth connection and uses a serial input to control the transistor output. Finally, this is all controlled by a Tasker plugin on the Android phone, which sends serial messages via Bluetooth.

All the information you’ll need to make one yourself is available at [Ilias’] GitHub repository. For more information on the Chromecast, why not check out our review from almost three years ago — it’s getting old!

Hackaday Links: December 13, 2015

So you’ve been rocking a tin foil hat for years now, and people have finally gotten used to your attire and claims that fluoridated water is a government mind control experiment. This holiday, how about something a little more stylish? Yes, it’s a Kickstarter for the World’s First Signal Proof Headwear. This fashionable beanie or cap protects you from harmful electromagnetic rays. Next time you shoot an eighteen minute long YouTube video of a wheezing rant about chemtrails, look fashionable with Shield – the world’s first stylish signal proof hat.

That last tip came to us from a Crowdfunding marketing agency. That means money was exchanged for the purposes of marketing a modern tin foil hat.

[Mike] has an old IBM 5155, the ‘luggable’ computer with design cues taken from the first Compaq. With an Ethernet adapter and a little inspiration, He was able to get this old computer to load the Hackaday retro edition.

[gyrovague] has a Chromecast that’s a bit janky. When it comes to electronics, strangeness means heat. The solution? A heat sink for the Chromecast. You don’t even need a proper heat sink for this one – just epoxy a big ‘ol transformer to the aluminum plate in the Chromecast.

This year, Keysight gave away a pile of test and measurement gear to the i3Detroit hackerspace. Keysight is doing it again, with a grand prize of around $60,000. Entries close on the 15th. Protip: you, personally, don’t want to win this for tax reasons. A non-profit does.

The Internet recently caught wind of a satellite modem being sold by Sparkfun. It’s $250 for the module, with a $12/month line rental, and each 340 byte message costs $0.18 to receive. Yes, it’s cool, and yes, it’s expensive. If you ever need to send a message from the north pole, there you go.

Need to remove the waterproof coating from LED strips? Don’t use a knife, use a Dremel and a wire brush.

An IPod Dock Converted Into Chromecast Speakers

CoQIKNJ

[easybakejake] figured out a way to fuse together an iPod speaker dock and a wireless Chromecast receiver. His method utilized a modified HDMI-to-VGA adapter. From the looks of it, apps like music for Google Play, Pandora, and Music All Access seem to able to be streamed through this device.

A few problems did come up with this project though when researching the functionality of this music hack. For one, there is little to no documentation since the tip came to us through a Reddit post. Another inconvenience had to do with supporting different monitor sizes. [easybakejake] confirmed in the comments of that post that he ran into an error where the input was not working; probably due to a resolution issue. Eventually, he got it working and dubbed the device the MusicBox. Now stick it on a roomba and get it to DJ a party (like this Parks and Recreation skit that follows after the break):

Continue reading “An IPod Dock Converted Into Chromecast Speakers”

Chromecast Is Root

Image from [psouza4] on the xda-developers forum

Chromecast is as close as you’re going to get to a perfect device – plug it in the back of your TV, and instantly you have Netflix, Hulu, Pandora, and a web browser on the largest display in your house. It’s a much simpler device than a Raspi running XBMC, and we’ve already seen a few Chromecast hacks that stream videos from a phone and rickroll everyone around you.

Now the Chromecast has been rooted, allowing anyone to change the DNS settings (Netflix and Hulu users that want to watch content not available in their country rejoice), and loading custom apps for the Chromecast.

The process of rooting the Chromecast should be fairly simple for the regular readers of Hackaday. It requires a Teensy 2 or 2++ dev board, a USB OTG cable, and a USB flash drive. Plug the Teensy into the Chromecast and wait a minute. Remove the Teensy, plug in the USB flash drive, and wait several more minutes. Success is you, and your Chromecast is now rooted.

Member of Team-Eureka [riptidewave93] has put up a demo video of rooting a new in box Chromecast in just a few minutes. You can check that out below.

Continue reading “Chromecast Is Root”