Falsified Photos: Fooling Adobe’s Cryptographically-Signed Metadata

November 30, 2023 by Adam Zeloof 34 Comments

Last week, we wrote about the Leica M11-P, the world’s first camera with Adobe’s Content Authenticity Initiative (CAI) credentials baked into every shot. Essentially, each file is signed with Leica’s encryption key such that any changes to the image, whether edits to the photo itself or the metadata, are tracked. The goal is to not only prove ownership, but that photos are real — not tampered with or AI-generated. At least, that’s the main selling point.

Although the CAI has been around since 2019, it’s adoption is far from widespread. Only a handful of programs support it, although this list includes Photoshop, and its unlikely anybody outside the professional photography space was aware of it until recently. This isn’t too surprising, as it really isn’t relevant to the casual shooter — when I take a shot to upload to Instagram, I’m rarely thinking about whether or not I’ll need cryptographic proof that the photo wasn’t edited — usually adding #nofilter to the description is enough. Where the CAI is supposed to shine, however, is in the world of photojournalism. The idea is that a photographer can capture an image that is signed at the time of creation and maintains a tamper-proof log of any edits made. When the final image is sold to a news publisher or viewed by a reader online, they are able to view that data.

At this point, there are two thoughts you might have (or, at least, there are two thoughts I had upon learning about the CAI)

Do I care that a photo is cryptographically signed?
This sounds easy to break.

Well, after some messing around with the CAI tools, I have some answers for you.

No, you don’t.
Yes, it is.

Continue reading “Falsified Photos: Fooling Adobe’s Cryptographically-Signed Metadata” →

300 Amps Through An Open Source Speed Controller

November 30, 2023 by Lewin Day 23 Comments

Sometimes, a little puny matchbox-sized electronic speed controller (ESC) won’t do the job. If you find yourself looking for something heftier, say, in the range of hundreds of amps, you might look towards a design like the MP2 ESC. [owhite] has built an example of the design that can deliver some serious power.

[owhite’s] build has some serious specs: it’s rated to offer up to 300 amps at up to 150 volts, though thus far, it’s only been tested at up to 100 V. Like the original MP2, which hails from the Endless Sphere forums, it’s designed to be compatible with VESC code using the STM32F405 microcontroller. It’s intended for driving high-powered traction motors in applications like e-bikes and electric scooters, as you might have guessed by its potential output power being well into the tens of kilowatts range.

If you’re eager to build your own, you can do so, with the design files on GitHub. Just note that you’ll need some hefty parts to handle the juice, including beefy MOSFETS and juicy capacitors rated at 160 V.

Open source motor controllers abound of late, and we’ve featured a few in recent times. Just remember that astute design and using parts within their means is the key to avoiding letting the smoke out! Continue reading “300 Amps Through An Open Source Speed Controller” →

Open Source Spacecraft Avionics With NASA’s Core Flight System

November 30, 2023 by Maya Posch 17 Comments

One thing about developing satellites, spacecraft, rovers and kin is that they have a big overlap in terms of functionality. From communication, to handling sensors, propulsion, managing data storage, task scheduling and so on, the teams over at NASA have found over the years that with each project there was a lot of repetition.

Block diagram of a simplified avionics system. (Credit: NASA)

Either they were either copy-pasting code from old projects, or multiple teams were essentially writing the same code.

To resolve this inefficiency NASA developed the Core Flight System (cFS), a common software framework for spacecraft, based on code and lessons from various space missions. The framework, which the space agency has released under the Apache license, consists of an operating system abstraction layer (OSAL), the underlying OS (VxWorks, FreeRTOS, RTEMS, POSIX, etc.), and the applications that run on top of the OSAL alongside the Core Flight Executive (cFE) component. Here cFS apps can be loaded and unloaded dynamically, along with cFS libraries, as cFS supports both static and dynamic linking.

There are a few sample applications to get started with, and documentation is available, should you wish to use cFS for your own projects. Admittedly, it’s a more complex framework than you’d need for a backyard rover. But who knows? As access to space gets cheaper and cheaper, you might actually get the chance to put together a DIY CubeSat someday — might as well start practicing now.