Day: February 25, 2022

Grocery Store Rocket Fuel: Don’t Try This At Home!

February 25, 2022 by 29 Comments

It seems like whenever the topic of rocket science comes up, the conversation quickly shifts to that of rocket fuels. As discussed in the excellent [Scott Manley] video below the break, there are many rocket fuels that can be found in some way, state, or form at your local grocery or liquor store. The video itself is a reaction to some college students in Utah who caused an evacuation when the rocket fuel they were cooking up exploded.

[Scott] himself theorizes that the fuel they were cooking was Rocket Candy, a volatile mix of sugar and potassium nitrate that is known to go Kaboom on occasion. And as it turns out, the combination might not even be legal in your area because as much as it can be used as rocket fuel, it can also be used for other things that go boom.

So, what else at your local megamart can be used to get to orbit? [Scott] talks about different kinds of alcohols, gasses, cleaners- all things that can be used as rocket fuel. He also talks about all of the solid reasons you don’t want to do this at home.

If this type of things gets your molecules excited, you might enjoy a bit we posted recently about using another grocery store staple to save Martian colonists from being held back by gravity.

This Week In Security: Updraft, Termux, And Magento

February 25, 2022 by 7 Comments

One of the most popular WordPress backup plugins, UpdraftPlus, has released a set of updates, x.22.3, that contain a potentially important fix for CVE-2022-23303. This vulnerability exposes existing backups to any logged-in WordPress user. This bug was found by the guys at Jetpack, who have a nice write-up on it. It’s a combination of instances of a common problem — endpoints that lacked proper authentication. The heartbeat function allows any user to access it, and it returns the latest backup nonce.

A cryptographic nonce is a value that’s not exactly a cryptographic secret, but is only used once. In some cases, this is to mitigate replay attacks, or is used as an initialization vector. In the case of UpdraftPlus, the nonce works as a unique identifiers for individual backups. The data leak can be combined with another weak validation in the maybe_download_backup_from_email() function, to allow downloading of a backup. As WordPress backups will contain sensitive information, this is quite the problem. There are no known in-the-wild instances of this attack being used, but as always, update now to stay ahead of the game.

Continue reading “This Week In Security: Updraft, Termux, And Magento” →

Two revisions of Wenting's custom SSD board - earlier revision on the left, later, sleeker and more complete, on the right.

Custom SSD Gives New Life To Handheld Atom PC

February 25, 2022 by 12 Comments

People don’t usually go as far as [Wenting Zhang] has – designing a new IDE SSD board for a portable x86 computer made in 2006. That said, it’s been jaw-dropping to witness the astounding amount of reverse-engineering and design effort being handwaved away.

The Benq S6 is a small MID (Miniaturized Internet Device) with an Atom CPU, an x86 machine in all but looks. Its non-standard SSD’s two gigabytes of storage, however, heavily limit the OS choice – Windows XP would hardly fit on there, and while a small Linux distro could manage better, it’s, and we quote, “not as exciting”. A lot of people would stop there and use an external drive, or a stack of adapters necessitating unsightly modifications to the case – [Wenting] went further and broke the “stack of adapters” stereotype into shards with his design journey.

Tracing quite a few complex multi-layer boards into a unified and working schematic is no mean feat, especially with the SSD PCB being a host to two BGA chips, and given the sheer amount of pins in the IDE interface of the laptop’s original drive. Even the requirement for the SSD to be initialized didn’t stop him – a short fight with the manufacturer’s software ensued, but was no match for [Wenting]’s skills. The end result is a drop-in replacement SSD even thinner than the stock one.

This project is well-documented for all of us to learn from! Source code and PCB files are on GitHub, and [Wenting] has covered the journey in three different places at once – on Hackaday.io, in a YouTube video embedded down below, and also on his Twitter in form of regular posts. Now, having seen this happen, we all have one less excuse to take up a project seemingly so complex.

Hackers play with SSD upgrades and repurposing every now and then, sometimes designing proprietary-to-SATA adapters, and sometimes reusing custom SSD modules we’ve managed to get a stack of. If case mods are acceptable to you aesthetics-wise, we’ve seen an SSD upgrade for a Surface Pro 3 made possible that way.

Continue reading “Custom SSD Gives New Life To Handheld Atom PC” →

3D Printed Suncatcher Shines In The Light

February 25, 2022 by 9 Comments

Diffraction gratings create beautiful rainbow patterns when interacting with natural white light, and [audreyobscura] was familiar with their properties.  Thus, she set about producing an attractive 3D-printed suncatcher ornament that positively shines in the sun.

The design is straightforward, consisting of a 3D printed frame made of pieces glued together using QuickGrab glue. The pieces come together into a 7-segment star design, with a subtle 3D structure to it which helps add strength in addition to looking good.

Once assembled, sections of plastic diffraction grating are cut to size using a Curio desktop cutter. These are then glued into each segment of the star. While it’s possible to 3D print pieces with diffraction-grating like effects, using the film in this way allows light to pass through the suncatcher to create a more impressive effect.

On a cloudy day, the suncatcher looks almost entirely unassuming. However, when Earth’s nearest star shines, it projects glorious rainbows throughout the room, and letting it sway in the breeze lets the light play across the walls.

It’s a nice build, and a relatively easy ornament to make even if you’re new to 3D printing. We do like a good bit of decoration around here, especially if it’s a tiny version of a real TV. Video after the break.

Continue reading “3D Printed Suncatcher Shines In The Light” →