Ah, the heady aroma of damp engineers! It’s raining in Silicon Valley, where the 2010 Embedded Systems Conference is getting off the ground at San Jose’s McEnery Convention Center.

ESC is primarily an industry event. In the past there’s been some lighter fare such as Parallax, Inc. representing the hobbyist market and giant robot giraffes walking the expo. With the economy now turned sour, the show floor lately is just a bit smaller and the focus more businesslike. Still, nestled between components intended to sell by the millions and oscilloscopes costing more than some cars, one can still find a few nifty technology products well within the budget of most Hack a Day readers, along with a few good classic hacks and tech demos…

(Is that a promise or a threat?)

First order of business was to follow up on a couple of products we’ve covered in the recent past…

We reviewed NXP’s mbed prototyping platform in November of last year. While there’s no stunning new revision, the good news is that the mbed community is going strong and economies of scale have made it possible to trim the starter kit price from $99 back down to the original early adopter cost of $59.

Additionally, they’ve thrown together a project in just a few days to demonstrate the prototyping ease of the mbed platform. Reading like a checklist of Hack a Day clichés, the demo brings together Twitter, the Logo programming language, live web streaming, servos and an Etch-a-Sketch. You can read more on the mbed blog, or watch the live stream and participate during ESC show hours.

We also liked this little breakout board which adds the most essential interfaces to mbed: MicroSD, Ethernet and USB host & client. This was something quickly made for an mbed workshop, and while there are no plans to officially productize it, we’re told the unpopulated board might be available through SparkFun’s BatchPCB service in the future.

Many readers were put off by the web-centric development approach used by mbed, as well as the lack of a debugger. Another NXP entry-level evaluation product called the LPCXpresso provides an affordable ARM development kit from a more traditional angle.

The $30 LPCXpresso boards are available in Cortex-M0 or -M3 varieties and include an integrated JTAG debugger. The downloadable Windows development environment is based around the Eclipse IDE and GNU toolchain. With headers installed the LPCXpresso is breadboard-friendly and in fact shares the same pinout as mbed, so there’s an existing ecosystem of hardware to work from.

STMicroelectronics’ STM8S-Discovery made a huge impact when we mentioned this $7 kit in November, clearing out distributors in a matter of days. At ESC, ST was showing their new ultra-low-power 8- and 32-bit MCUs with demos powered by a cactus (a variation on the classic lemon battery), a cup of warm water sitting atop a Peltier junction, and a modest induction charger. (What, no wind power?)

A new version on the STM8S-Discovery based on the new lower-power chip should be available within a couple of months, and is expected to be similarly affordable.

(Left: the original STM8S kit that created the ruckus. Right: the forthcoming STM8L kit.)

At the Texas Instruments booth, the BeagleBoard XM was being demonstrated, which improves upon its predecessor in nearly every regard.

We’re told BeagleBoard XM stands for “extra MIPS,” “extra memory,” (and “extra money,” they joked). The XM does not replace the original BeagleBoard, but will be sold alongside it at a premium price of $179 when it ships in June. The XM includes a faster processor (1 GHz), more RAM (512 MB, and a 1GB model may be forthcoming), Ethernet, more USB ports and improved power protection. The NAND flash is gone, replaced by a MicroSD slot on the underside. The new board is slightly larger but retains the same mounting holes, so it may fit as an upgrade into some existing BeagleBoard projects.

Microchip’s iPod/iPhone accessory development boards that we mentioned last month were on display. Unfortunately it appears one must be signed on with Apple’s “Made for iPod” developer program before these kits can even be ordered from Microchip, which really puts a damper on the fun for anyone who might just want to tinker.

Drifting further from product specifics and more into hacks and eye candy…

Product teardowns have become a staple of tech culture. “Zero-day” and live blog teardowns of new products are particularly exciting. ESC’s gone one better, making a show of ripping into a product (if a rather esoteric one) months before its official release: a high-end Zircon AC wire detector built around a Microchip dsPIC and a bevy of e-field sensors. It’s like engineer pr0n!

National Instruments certainly had one of the most entertaining booths at the event. Rather than passively showing dry PowerPoint summaries and monitors running LabVIEW (their graphical programming environment for engineers and scientists), they instead presented physical demos and projects making use of the software. Some serious, others not-so-serious. Hacks!

Remember Waterloo Labs’ iPhone-controlled car hack? There it is! Rather, there it is minus the actual car, but with all the essential parts nicely laid out where we can observe the rig in action. At the other end of the booth, one can challenge “RockBot” to a round of Frets on Fire, not unlike prior hacks we’ve seen.

Hack a Day readers might be familiar with Digi International for their XBee wireless modules, such as used in Adafruit’s Tweet-a-Watt power monitor. Easily distracted by shiny things, we were initially smitten with this addressable LED matrix wrapped around their booth; not a product, just something to catch peoples’ interest:

As it turns out, there’s an added bonus hack behind the hack. Most of Digi’s booth displays could be controlled and monitored using their own custom web apps, so it was a simple matter of walking around with an iPod touch to run the show:

At the ARM pavilion, this “Speedcuber” was solving Rubik’s cubes in under half a minute. The camera and puzzle-solving logic comes from a Motorola Droid. Commands are issued over Bluetooth to a pair of LEGO Mindstorms NXT controllers to drive the motors that manipulate the cube.

Macraigor Systems produces a line of JTAG debuggers…but to be honest, we (and pretty much everyone else passing the booth) nearly missed that fact, as we were all so distracted by their demo application involving one spectacular and elegant Intel hexapod robot:

We similarly fanboyed over Cryptography Research’s German Enigma cipher machine, as it was our first time seeing one not under lock and key in a glass museum case:

ESC Silicon Valley runs through Thursday, April 29th, and last we checked one could still register for a free exhibits-only pass on the ESC web site.

The registration desk hasn’t opened yet at ShmooCon 2009, but we’re already running into old friends. We found [Larry Pesce] and [Paul Asadoorian] from the PaulDotCom Security Weekly podcast showing off their latest ShmooBall gun. ShmooBalls have been a staple of ShmooCon from the very beginning. They’re soft foam balls distributed to each of the attendees who can then use them to pelt the speakers when they disagree. It’s a semi-anonymous way of expressing your dismay physically. [Larry] has been building bigger and better ways to shoot the ShmooBalls for the last couple years. You may remember seeing the 2008 model. This year the goal was to make the gun part much lighter. The CO2 supply is mounted remotely with a solenoid valve and coiled air line. The pistol grip has a light up arming switch and trigger. The gun is fairly easy to transport: the air line has a quick disconnect and the power is connected using ethernet jacks.

November 1st means that registration for ShmooCon 2009 has opened. The DC hacker convention is entering the fifth year. They’re releasing the tickets in blocks; after today’s are gone the next won’t be available till December 1st. Today is also the closing of first round consideration for their call for papers, but you still have another month before the final deadline.

We’ve always enjoyed our time at ShmooCon. In 2008 we saw talks on cracking GSM encryption and recovering data from SSDs.

Maker Faire Austin is happening this weekend, October 18 & 19, 2008 at the Travis County Expo Center in Austin, TX. Maker Faire is a showcase of all things DIY. You’ll see robots, sculptures, live performances, and other wonders including many of the projects we cover here every day. We enjoyed our time in San Mateo earlier this year and the show keeps getting better and better. You can see photos from previous events on Flickr. If you’ve got a chance to go, take it.

Preregistration for ToorCon San Diego ends today. The current price is $100 and it will be $140. This is the 10th year for the San Diego hacker convention which will happen September 26th – 28th. The schedule for ToorCon X has already been posted. We highly recommend this convention. We’ve attended the last four years and it’s always been a favorite.

So, last week, I had the pleasure of being stabbed, scanned, physically simulated, and synthetically defocused. Clearly, I must have been at SIGGRAPH 2008, the world’s biggest computer graphics conference. While it usually conflicts with Black Hat, this year I actually got to stop by, though a bit of a cold kept me from enjoying as much of it as I’d have liked. Still, I did get to walk the exhibition floor, and the papers (and videos) are all online, so I do get to write this (blissfully DNS and security unrelated) report.

SIGGRAPH brings in tech demos from around the world every year, and this year was no exception. Various forms of haptic simulation (remember force feedback?) were on display. Thus far, the best haptic simulation I’d experienced was a robot arm that could “feel” like it was actually 3 pounds or 30 pounds. This year had a couple of really awesome entrants. By far the best was Butterfly Haptics’ Maglev system, which somehow managed to create a small vertical “puck” inside a bowl that would react, instantaneously, to arbitrary magnetic forces and barriers. They actually had two of these puck-bowls side by side, hooked up to an OpenGL physics simulation. The two pucks, in your hand, became rigid platforms in something of a polygon playground. Anything you bumped into, you could feel, anything you lifted, would have weight. Believe it or not, it actually worked, far better than it had any right to. Most impressively, if you pushed your in-world platforms against eachother, you directly felt the force from each hand on the other, as if there was a real-world rod connecting the two. Lighten up a bit on the right hand, and the left wouldn’t get pushed quite so hard. Everything else was impressive but this was the first haptic simulation I’ve ever seen that tricked my senses into perceiving a physical relationship in the real world. Cool!

Also fun: This hack with ultrasonic transmitters by Takayuki Iwamoto et al, which was actually able to create free-standing regions of turbulence in air via ultrasonic interference. It really just feels like a bit of vibrating wind (just?), but it’s one step closer to that holy grail of display technology, Princess Leia.

Best cheap trick award goes to the Superimposing Dynamic Range guys. There’s just an absurd amount of work going into High Dynamic Range image capture and display, which can handle the full range of light intensities the human eye is able to process. People have also been having lots of fun projecting images, using a camera to see what was projected, and then altering the projection based on that. These guys went ahead and, instead of mixing a projector with a camera, they mixed it with a printer. Paper is very reflective, but printer toner is very much not, so they created a shared display out of a laser printout and its actively displayed image. I saw the effects on an X-Ray – pretty convincing, I have to say. Don’t expect animation anytime soon though (Side note: I did ask them about e-paper. They tried it – said it was OK, but not that much contrast.)

Always cool: Seeing your favorite talks productized. One of my favorite talks in previous years was out of Stanford – Synthetic Aperture Confocal Imaging. Unifying the output of dozens of cheap little Quickcams, these guys actually pulled together everything from Matrix-style bullet time to the ability to refocus images – to the point of being able to see “around” occluding objects. So of course Point Grey Research, makers of all sorts of awesome camera equipment, had to put together a 5×5 array of cameras and hook ‘em up over PCI express. Oh, and implement the Synthetic Aperture refocusing code, in realtime, demo’d at their booth, controlled with a Wii controller. Completely awesome.

Of course, some of the coolest stuff at SIGGRAPH is reserved for full conference attendees, in the papers section. One nice thing they do at SIGGRAPH however is ask everyone to create five minute videos of their research. This makes a lot of sense when what everyone’s researching is, almost by definition, visually compelling. So, every year, I make my way to Ke-Sen Huang’s collection of SIGGRAPH papers and take a look at the latest coming out of SIGGRAPH. Now, I have my own biases: I’ve never been much of a 3D modeler, but I started out doing a decent amount of work in Photoshop. So I’ve got a real thing for image based rendering, or graphics technologies that process pixels rather than triangles. Luckily, SIGGRAPH had a lot for me this year.

First off, the approach from Photosynth continues to yield Awesome. Dubbed “Photo Tourism” by Noah Snavely et al, this is the concept that we can take individual images from many, many different cameras, unify them into a single three dimensional space, and allow seamless exploration. After having far too much fun with a simple search for “Notre Dame” in Flickr last year, this year they add full support for panning and rotating around an object of interest. Beautiful work – I can’t wait to see this UI applied to the various street-level photo datasets captured via spherical cameras.

Speaking of cameras, now that the high end of photography is almost universally digital, people are starting to do some really strange things to camera equipment. Chia-Kai Liang et al’s Programmable Aperture Photography allows for complex apertures to be synthesized above and beyond just an open and shut circle, and Ramesh Raskar et al’s Glare Aware Photography evaded the megapixel race by filtering light by incident angle – a useful thing to do if you’re looking to filter glare that’s coming from inside your lens.

Another approach is also doing well: Shai Avidan and Ariel Shamir’s work on Seam Carving. Most people probably don’t remember, but when movies first started getting converted for home use, there was a fairly huge debate over what to do about the fact that movies are much wider (85% wider) than they are tall. None of the three solutions – Letterboxing (black bars on the top and bottom, to make everything fit), Pan and Scan (picking the “most interesting” square of video from the rectangular frame), or “Anamorphic” (just stretch everything) – made everyone happy, but Letterboxing eventually won. I wonder what would have happened if this approach was around. Basically, Avidan and Shamir find the “least energetic” line of pixels to either add or remove. Last year, they did this to photos. This year, they come out with Improved Seam Carving for Video Retargeting. The results are spookily awesome.

Speaking of spooky: Data-Driven Enhancement of Facial Attractiveness. Sure, everything you see is photoshopped, but it’s pretty astonishing to see this automated. I wonder if this is going to follow the same path as Seam Carving, i.e. photo today, video tomorrow.

Indeed, there’s something of a theme going on here, with video becoming inexorably easier and easier to manipulate in a photorealistic manner. One of my favorite new tricks out of SIGGRAPH this year goes by the name of Unwrap Mosaics. The work of Microsoft’s Pushmeet Kohli, this is nothing less than the beginning of Photoshop’s applicability to video – and not just simple scenes, but real, dynamic, even three dimensional motion. Stunning work here.

It’s not all about pixels though. A really fun paper called Automated Generation of Interactive 3D Exploded View Diagrams showed up this year, and it’s all about allowing complex models of real world objects to be comprehended in their full context. It’s almost more UI than graphics – but whatever it is, it’s quite cool. I especially liked the moment they’re like – heh, lets see if this works on a medical model! Yup, works there too.

As mentioned earlier, the SIGGRAPH floor was full of various devices that could assemble a 3D model (or at least a point cloud) of any small object they might get pointed at. (For the record, my left hand looks great in silver triangles.) Invariably, these devices work like a sort of hyperactive barcode scanner, monitoring how long it takes for the red beam to return to a photodiode. But here’s an interesting question: How do you scan something that’s semi-transparent? Suddenly you can’t really trust all those reflections, can you? Clearly, the answer is to submerge your object in fluorescent liquid and scan it with a laser tuned to a frequency that’ll make its surroundings glow. Clearly. Flurorescent Immersion Range Scanning, by Matthias Hullin and crew from UBC, is quite a stunt.

So you might have heard that video cards can do more than just push pretty pictures. Now that Moore’s Law is dead (how long have we been stuck with 2Ghz processors?), improvements in computational performance have had to come from fundamentally redesigning how we process data. GPU’s have been one of a couple of players (along with massive multicore x86 and FPGA’s) in this redesign. Achieving greater than 50x speed improvements over traditional CPU’s on non-graphics tasks like, say, cracking MD5 passwords, they’re doing OK in this particular race. Right now, the great limiter remains the difficulty programming the GPU’s – and, every month, something new comes to make this easier. This year, we get Qiming Hiu et al’s BSGP: Bulk-Synchronous GPU Programming. Note the pride they have with their X3D parser – it’s not just about trivial algorithms anymore. (Of course, now I wonder when hacking GPU parsers will be a Black Hat talk. Short answer: Probably not very long.)

Finally, for sheer brainmelt, Towards Passive 6D Reflectance Field Displays by Martin Fuchs et al is just weird. They’ve made a display that’s view dependent – OK, well, lenticular displays will show you different things from different angles. Yeah, but this display is also illumination dependent – meaning, it shows you different things based on lighting. There’s no electronics in this material, but it’ll always show you the right image with the right lighting to match the environment. Weird.

All in all, a wonderfully inspiring SIGGRAPH. After being so immersed in breaking things, it’s always fun to play with awesome things being built.

We’re in the Defcon press room today and there’s still a buzz about these “sleazy” French reporters. We’re tunneling through our cell connection like any sane person at a security conference.

• Defcon 15, Las Vegas, NV
• ToorCon 9, San Diego, CA
• 24C3, Berlin, Germany
• ShmooCon 2008, Washington D.C.
  
• Notacon 5, Cleveland, OH
  
• LayerOne 2008, Pasadena, CA
  

[thanks, Dan]
[photo: ario_j]

REcon
June 13-15, 2008
Montreal, Canada

REcon has started posting information about their training sessions such as the Advanced Reverse Engineering session with Nicolas Brulez.

The Last HOPE
July 18-20, 2008
New York City

The Last HOPE just announced its speaker list. It includes the infamous Kevin Mitnick, Mythbusters co-host Adam Savage, and author Steven Levy to name a few.

DEFCON 16
August 8-10, 2008
Las Vegas

The DEFCON team also released the first batch of speakers for this year’s convention. Qualification starts tonight at 10PM EST for the capture the flag (CTF) contest so be sure to get registered. Check the txt for more information. We recently talked about the beverage cooling contraption contest, but you can find many other contests on the forums.

[I)ruid] opened with an explanation of his handle, since he catches a lot of flak for it being l33tsp34k (that’s supposed to be a capital ‘I’). The name has actually proven to be quite fun since it has broken a few systems that aren’t sanitizing input properly. Registering at Black Hat 2006 caused a database error. At the ShmooCon hacker arcade, he entered his player name and was dropped directly to a root shell. It’s also rather hellish on many webapps. His point was: why not choose a l33t name and have the fun of fuzzing all the time and breaking stuff even when you aren’t trying?

[nous] gave a quick plug for Ninja Network’s phreaking contest. Last year at Defcon was the first event they held. The first task was to use a butt set on a 25 pair block to find usable line. Once the random line was found they were dropped into a voice mail system to explore. The backend for the contest is Asterisk plus some custom Perl scripts. You can catch a preview version of this contest next month at LayerOne.

[jrandom] talked about how scratch-off cards can be gamed. Using a bright light or a resurfacing pen can help you with games that require a certain scratch order. Other cards can be identified by telltale signs they pick up during their production. Winners and losers are usually produced in two separate batches. Cards from each group will have the same cut quality, alignment flaws, printing color, and even the font could change. Sometimes the cards even have coding on them to indicate the winners (could be a simple as a W and L). All this is great, but the manufacturer might be doing this intentionally just to get attention.

[Travis Goodspeed] gave a brief introduction to reversing the Econolite ASC/3 traffic light controller for compatibility. It’s a PowerPC box running VxWorks 5.x and has snmp and FTP support. The FTP provides simple anonymous access. All of the control values are stored in the ASC3.DB binary file that’s checksummed. [Travis] built a way to describe a binary file structure as XML and generate libraries for reading the binaries natively in multiple languages.

We also thought [Dean Pierce]‘s network pentesting visualization framework was interesting. [Joel Voss] was attempting to write a softphone for the IAX2 protocol and ended up DOSing Asterisk. 30kB from the attacker could cause a massive amount of packets from Asterisk. He now has a framework for testing all aspects of the protocol.

• Notacon / Blockparty April 4-6 Cleveland, OH – This will be a first for us, but we’re definitely excited, especially for the demoscene madness at Blockparty (like Trixter’s MONOTONE PC speaker tracker).
• ToorCon Seattle April 18-20 Seattle, WA – In its second year, this small gathering is sure to be a blast just like last year.
• The Last HOPE July 18-20 New York, NY – Our first HOPE and the last one ever.. since the hotel is being torn down.
• Black Hat US August 2-7 Las Vegas, NV – If anything gets released this year, it’ll be here.
• DefCon August 8-10 Las Vegas, NV – The first con we ever went to. It’s not the best con, but it’s always interesting.
• SIGGRAPH August 11-15 Los Angeles, CA – SIGGRAPH is where you need to be if you want to see cutting edge graphics and interaction projects. It’s a favorite of ours and a nice break from computer security.

Anything we’re missing?

UPDATE: Maker Faire May 3-4 San Mateo, CA – Can’t believe we forgot it. Thanks [pt]!