[Mr. Carlson] has an old-style 1940-era radio tube tester, the kind that used to inhabit grocery and drug stores. It is in amazing condition and he was kind enough to tear it down for us. The tester is a Model X from the Radiotechnic Laboratory in Evanston Illinois and, like [Mr. Carlson], we were amused that one of the indicators on the device is a Ouija board-like “doubtful” reading. When it lights up, it looks amazing.
This is much older than the old “TV tube testers” we remember as a kid, but the idea is the same: you have a bad radio or TV with tubes in it, it is a fair bet that the problem is a tube. Even if you don’t know much about electronics, you can carefully remove the tubes, drive over to the drugstore, test your tubes and buy a replacement for any that are bad. Uniquely, this tester even had a speaker you could use to listen to the tube’s output while testing.
ATM skimmers are electronic devices designed to read financial card information, and they are usually paired with a camera to capture a user’s PIN. These devices always have to hide their presence, and their design has been a bit of an arms race. Skimmers designed to be inserted into a card slot like a parasite have been around for several years, but [Brian Krebs] shows pictures of recently captured skimmer hardware only a fraction of a millimeter thick. And that’s including the battery.
As hardware gets smaller, cameras to capture PIN entry are more easily hidden in things like fake panels.
The goal of these skimmers is to read and log a card’s magnetic strip data. All by itself, that data is not enough to do anything dastardly. That’s why the hardware is complemented by a separate device that captures a user’s PIN as they type it in, and this is usually accomplished with a camera. These are also getting smaller and thinner, which makes them easier to conceal. With a copy of the card’s magnetic strip data and the owner’s PIN, criminals have all they need to create a cloned card that can be used to make withdrawals. (They don’t this so themselves, of course. They coerce or dupe third parties into doing it for them.)
Some projects just take your breath away with their level of attention to detail. This scratch-built RC-controlled model excavator is not only breathtaking in its detail, but also amazing for the materials and tools used to create it.
We’ve got to be honest, we’ve been keeping an eye on the progress [Vang Hà] has been making on this build for a few weeks now. The first video below is a full tour of the finished project, which is painstakingly faithful to the original, a Caterpiller 390F tracked excavator. As impressive as that is, though, you’ve got to check out the build process that starts with fabricating the tracks in the second video below. The raw material for most of the model is plain gray PVC pipe, which is sliced and diced into flat sheets, cut into tiny pieces using a jury-rigged table saw, and heat formed to create curved pieces. Check out the full playlist for a bounty of fabrication delights, like tiny hinges and working latches.
We can’t possibly heap enough praise onto [Vang Hà] for his craftsmanship, but that’s not all we love about this one. There are tons of helpful tips here, and plenty of food for thought for more practical builds. We’re thinking about that full set of working hydraulic cylinders that operates the boom, the dipper, and the bucket, as well as the servo-operated hydraulic control valves. All of it is made from scratch, of course, and mostly from PVC. Keep that in mind for a project where electric motors or linear actuators just won’t fill the bill.
In the electronics world, even for the hobbyists, things have only gotten smaller over the years. We went from through-hole components to surface mount, and now we’re at the point where the experienced DIYers are coming around to the idea of using ball grid array (BGA) components in their designs. We’d wonder what things are going to look like in another couple decades, but frankly, it gives us the heebie-jeebies.
So while we’re pretty well versed these days in the hows and whys of tiny things, we see comparatively little large-scale engineering projects. Which is why we were excited to have Andy Oliver stop by this week for the Heavy Engineering Hack Chat. His day job sees him designing and inspecting the control systems for movable bridges — or what many would colloquially refer to as drawbridges.
Now you might think there’s not a lot of demand for this particular skill set, but we’re willing to bet there’s a lot more of these bridges out there than you realized. Andy kicked things off with the revelation that just between the states of Florida and Louisiana, there are about 200 movable bridges of various sizes. On a larger scale, he points out that BridgeHunter.com lists an incredible 3,166 movable bridges in their database, though admittedly many of those are historical and no longer standing. (There really is a site for everything!)
Andy Oliver
There’s also a huge incentive to keep the existing bridges functioning for as long as possible — building a new one these days could cost hundreds of millions of dollars. Instead, repairs and upgrades are the name of the game. Andy says that if it’s properly maintained, you should get about a century out of a good bridge.
It will probably come as little surprise to find that keeping things as simple as possible is key to making sure a movable bridge can withstand the test of time. While we might imagine that all sorts of high-tech automation systems are at work, and they probably would be if any of us were in charge, Andy says that most of the time it’s old school relay logic.
Even controlling the speed of motors is often down to using beefy relays to switch some additional resistance into the circuit. But when reliability and ease of repair are top priorities, who’s to argue against a classic? Andy recalled a time when a government client made it clear that the only tool you should need to maintain a particular bridge’s control system was a hammer.
Of course, when moving around a million pounds of steel, there’s more than just electrical considerations at play. You’ve also got to take into account things like wind forces on the bridge, specifically that your gears and motors can handle the extra load without tearing themselves apart. The bridge also needs an emergency stop system that can arrest movement at a moment’s notice, but not damage anything in the process.
A lot of fascinating details about these motorized behemoths were covered in the Chat, so we’d invite anyone who’s ever watched a bridge slowly reconfigure itself to peruse through the full transcript. Special thanks to Andy Oliver for stopping by and sharing some of the details about his unique career with the community, and remember that if you’ve got your own engineering stories to tell, we’d love to hear them.
The Hack Chat is a weekly online chat session hosted by leading experts from all corners of the hardware hacking universe. It’s a great way for hackers connect in a fun and informal way, but if you can’t make it live, these overview posts as well as the transcripts posted to Hackaday.io make sure you don’t miss out.
This week, Editor-in-Chief Elliot Williams and Managing Editor Tom Nardi start off by talking about the chip shortage…but not how you think. With a list that supposedly breaks down all of the electronic components that the Russian military are desperate to get their hands on, we can see hackers aren’t the only ones scrounging for parts. If you thought getting components was tricky already, imagine if most of the world decided to put sanctions on you.
We’ll also talk about kid-friendly DIY stereoscopic displays, the return of the rotary cellphone, and using heat to seal up 3D printed parts for vacuum applications. Join us as we marvel over the use of rubbery swag wristbands as tank treads, and ponder an array of AI-created nightmares that are supposed to represent the Hackaday writing crew. Finally we’ll talk about two iconic legacies: that of the 3.5 inch floppy disk, and astrophysicist Frank Drake.
Check out the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!
Sorting out pills is a mildly tedious task, and one that’s ripe for a bit of automation. It’s a task that [Mellow] has taken on enthusiastically, with the result of an extremely well-designed dispenser that has a stack of hoppers with servos controlled by an ESP8266 that dispense the pills required on time.
There are a series of videos of which we’ve put the latest below the break, showing the various iterations of this project. Earlier versions used multiple microcontrollers rather than the single ESP, and his sensor choice is both simple and ingenious. A single vibration sensor detects the pills falling upon it, resulting on an extremely compact electronics set-up and the base of the 3D printed stack.
We’re struck by this design, by its simplicity, ingenuity, and its pleasing aesthetics with the use of a piece of perfboard and a load of heatshrink to make an extremely tidy wiring loom. We’re not sure we’ll ever need a pill dispenser like it, but if we did we don’t think we could come up with a better design.
Automated Tank Gauges (ATGs) are nifty bits of tech, sitting unseen in just about every gas station. They keep track of fuel levels, temperature, and other bits of information, and sometimes get tied into the automated systems at the station. The problem, is that a bunch of these devices are listening to port 10001 on the Internet, and some of them appear to be misconfigured. How many? Let’s start with the easier question, how many IPs have port 10001 open? Masscan is one of the best tools for this, and [RoseSecurity] found over 85,000 listening devices. An open port is just the start. How many of those respond to connections with the string In-Tank Inventory Reports? Shodan reports 11,113 IPs as of August of this year. [RoseSecurity] wrote a simple Python script that checked each of those listening IPs came up with a matching number of devices. The scary bit is that this check was done by sending a Get In-Tank Inventory Report command, and checking for a good response. It seems like that’s 11K systems, connected to the internet, with no authentication. What could possibly go wrong? Continue reading “This Week In Security: 11,000 Gas Stations, TrustZone Hacks Kernel, And Unexpected Fuzzing Finds”→
