Is My Password Safe? Practices For People Who Know Better

April 7, 2017 by Pedro Umbelino 75 Comments

A couple of weeks back a report came out where [Tavis Ormandy], a widely known security researcher for Google Project-Zero, showed how it was possible to abuse Lastpass RPC commands and steal user passwords. Irony is… Lastpass is a software designed to keep all your passwords safe and it’s designed in a way that even they can’t access your passwords, the passwords are stored locally using strong cryptography, only you can access them via a master-key. Storing all your passwords in only place has its downfalls. By the way, there is no proof or suggestion that this bug was abused by anyone, so if you use Lastpass don’t worry just yet.

But it got me thinking, how worried and how paranoid should a regular Internet user should be about his password? How many of us have their account details exposed somewhere online? If you’ve been around long enough, odds are you have at least a couple of accounts on some major Internet-based companies. Don’t go rushing into the Dark Web and try to find if your account details are being sold. The easiest way to get your paranoia started is to visit Have I Been Pwned. For those who never heard about it, it’s a website created by [Troy Hunt], a well-known security professional. It keeps track of all known public security breaches he can get his hands on and provides an answer to a simple question: “Was my account in any major data leak?” Let’s take a look.

Continue reading “Is My Password Safe? Practices For People Who Know Better” →

Propeller Backpack For Lazy Skiers

April 7, 2017 by Anool Mahidharia 21 Comments

At first glance, it looks eerily similar to Inspector Gadget’s Propeller Cap, except it’s a backpack. [Samm Sheperd] built a Propeller Backpack (video, embedded after the break) which started off as a fun project but almost ended up setting him on fire.

Finding himself snowed in during a spell of cold weather, he found enough spare RC and ‘copter parts to put his crazy idea in action. He built a wooden frame, fixed the big Rimfire 50CC outrunner motor and prop to it, slapped on a battery pack and ESC, and zip-tied it all on to the carcass of an old backpack.

Remote control in hand, and donning a pair of Ski’s, he did a few successful trial runs. It looks pretty exciting watching him zip by in the snowy wilderness. Well, winter passed by, and he soon found himself in sunny California. The Ski’s gave way to a bike, and a local airfield served as a test track. He even manages to put in some exciting runs on the beach. But the 10S 4000 mAH batteries seem to be a tad underpowered to his liking, and the motor could do with a larger propeller. He managed to source a 12S 10,000 mAH battery pack, but that promptly blew out his Aerostar ESC during the very first static trial.

He then decided to rebuild it from ground up. A ten week welding course that he took to gain some college credits proved quite handy. He built a new TiG welded Aluminium frame which was stronger and more lightweight than the earlier wooden one. He even thoughtfully added a propeller safety guard after some of his followers got worried, although it doesn’t look very effective to us. A bigger propeller was added and the old burnt out ESC was replaced with a new one. It was time for another static trial before heading out in to the wide open snow again. And that’s when things immediately went south. [Samm] was completely unaware as the new ESC gloriously burst in to flames (8:00 into the third video), and it took a while for him to realize why his video recording friend was screaming at him. Check out the three part video series after the break to follow the story of this hack. For a bonus, check out the 90 year old gent who stops by for a chat on planes and flying (8:25 in the third video).

But [Samm] isn’t letting this setback pin him down. He’s promised to take this to a logical finish and build a reliable, functional Propeller Backpack some time soon. This isn’t his first rodeo building oddball hacks. Check out his experiment on Flying Planes With Squirrel Cages.

We seem to be catching a wave of wind-powered transportation hacks these days. Hackaday’s own [James Hobson] spent time in December on a similar, arguably safer, concept. He attached ducted fans to the back of a snowboard. We like this choice since flailing limbs won’t get caught in these types of fans.

Continue reading “Propeller Backpack For Lazy Skiers” →

File Format Posters

April 7, 2017 by Lewin Day 28 Comments

It’s not uncommon for hackers to have a particular delectation for unusual interior decoration. Maybe it’s a Nixie tube clock, or a vacuum fluorescent display reading out the latest tweets from a favorite chatbot. If this sounds like your living room already, perhaps you’d like some of these file format posters to adorn your walls.

The collection of images includes all kinds of formats — GIF, ZIP and WAV are all represented, but it even gets into some real esoterica — DOLphin format executables are here if you’re a total GameCube fanatic. Each poster breaks down the format into parts, such as the header, metadata and descriptor sections, and come in a variety of formats themselves — most available in SVG, PDF and PNG.

If we’re totally honest, these aren’t all designed for hanging on your wall as-is — we’d consider putting some work into to optimize the color palettes and layouts before putting these to print. But regardless, they’re an excellent visual representation of data structures that you might find particularly useful if you need to do some reverse engineering down the track.

If you still have wall space available after seeing this, here’s the electronic reference poster that should fill it.

[Thanks to JD for the tip!]