Day: January 27, 2023

This Week In Security: GTA, Apple And Android, And Insecure Boot

January 27, 2023 by 11 Comments

When we first saw tweets about a security issue in Grand Theft Auto V, it sounded a bit like a troll. “Press ‘alt and f4’ to unlock a cheat mode”, or the hacker that claims to be able to delete your character. [Tez2]’s warning tweet that you shouldn’t play GTA Online without a firewall sounds like another of these online urban legends. But this one actually seems legit. NIST is even in on the fun, assigning CVE-2023-24059 for the exploit.

When playing an online game, other users send a “join request” to join the active session. This packets can contain malformed data which has been observed to crash the game client remotely. It’s believed, though not publicly confirmed, that it’s also a Remote Code Execution (RCE) vulnerability. It seems likely that this aspect will be added to some of the various cheat panels that are already widely used for this 10-year-old game. So now, rather than just giving your own character infinite ammo and health, you can inflict some havoc on other players, possibly up to corrupting their character files and getting them banned.

But why stop there? If we have code execution inside the game, what stops another player from launching a real attack? A video game isn’t sandboxed like a browser, and there’s nothing preventing a disk wiper attack or even a worm from compromising a bunch of players. The worst part is that it’s an old game, and even though there’s a large playerbase, it’s not guaranteed to get a fix. There’s at least one project aiming to be a firewall to prevent the issue. Continue reading “This Week In Security: GTA, Apple And Android, And Insecure Boot” →

Wolfenstein 3D, As You Never Imagined It.

January 27, 2023 by 21 Comments

When tracing the history of first-person shooting (FPS) games, where do you credit with the genesis of the genre? Anyone who played 3D Monster Maze on the Sinclair ZX81 might dare to raise a hand, but we’re guessing that most of you will return to the early 1990s, and id Software. Their 1992 title Wolfenstein 3D might not have been the first to combine all the elements, but it’s arguably the first modern FPS and the first to gain huge popularity. Back in 1992 it needed at least a VGA card and a 286 to run, but here in 2023 [jhhoward] has taken it back a step further. You can now slay virtual Nazis in 3D on an 8088 PC equipped with a lowly CGA card.

Whether the gameplay survives in the sometimes-bizarre CGA color schemes and whether it becomes too pedestrian on an 8088 remains as an exercise for the reader to discover, but it’s a feat nevertheless. The textures all need converting to CGA mode before they can be used and there are even versions for the shareware and paid-for versions of the game.  It’s possible that an 8088 may never be able to say yes to “Will it run DOOM?”, but at least now it can run the predecessor.

3D Printer Spool Roller Is Built For Giant Spools Of Filament

January 27, 2023 by 15 Comments

Most 3D printers come with a pretty basic filament holder — often little more than a bar to hang the spool on. [Ivan Miranda]’s 3D printers run bigger spools than most, though, so he had to craft an altogether more serious solution.

Unlike most of [Ivan]’s creations, the spool holder isn’t actually 3D printed. For this job, he turned to a laser cutter instead, cutting the parts out of 5 mm plywood. A handful of layers of wood bolt together to form the frame. The frame holds several bearings for the outer rims of the spool itself to ride on, allowing it to spin freely as the extruder tugs on the filament. Reducing the rolling resistance of the spool is key when working with such large, heavy spools, and reduces the chances of the filament not feeding properly.

It’s a tidy example of a tool built quickly and easily using a laser cutter. It pays to remember that while 3D printers are great, a laser cutter can often turn out parts in a short fraction of the time.

Continue reading “3D Printer Spool Roller Is Built For Giant Spools Of Filament” →