GSM Module Does More Than Advertised

March 25, 2020 by Bryan Cockfield 13 Comments

For many projects, a WiFi connection is overkill, too complicated, or too far away to work properly. Even though it’s relatively ubiquitous, sometimes the best choice for getting data to or from the real world is a connection to the cellular network, which can be done with the M590 module for about a dollar each. For that price, lots of people have had the opportunity to explore the module itself, and [marcrbarker] shows some of the extra, unadvertised, features it has.

Acting as a GSM module that can send and receive SMS messages is just the tip of the iceberg for this tiny device which we saw once before for a DIY GPS tracker. With a USB TTL serial data module, a lot more is on the table including answering voice calls and responding with DTMF tones, operate as a dial-up modem, connect with TCP, and even has some FTP capabilities. [marcrbarker] also suggests that it could do “call pranking” where it can send signals without being charged for a call.

There are a lot of details on the project site about all of this newfound functionality, and it reminds us of a time when it was discovered that not only was the ESP8266 a cheap WiFi module, but it could also run custom programs on its own. While the M590 probably can’t do all of that, it does seem to have a lot more locked away than most of us had thought before.

LIDAR System Isn’t Just A Rangefinder Anymore

March 24, 2020 by Bryan Cockfield 15 Comments

For any project there’s typically a trade-off between quality and cost,as higher quality parts, more features, or any number of aspects of a project can drive its price up. It seems as though [iliasam] has managed to avoid this paradigm entirely with his project. His new LIDAR system knocks it out of the park on accuracy, sampling, and quality, and somehow manages to only cost around $114 in parts.

A LIDAR system works by sending out many pulses of light in different directions, measuring the reflections of that light as it returns. LIDAR systems therefore improve with higher frequency pulses and faster control electronics for both the laser output and the receiving data. This system manages to be accurate to within a few centimeters and works up to 25 meters all while operating at 15 scans per second. The key was a high-powered laser module which can output up to 75 watts for extremely short times. More details can be found at this page (Google Translate from Russian).

Another bonus from this project is that [iliasam] has made everything available from his GitHub page including hardware specifications, so as long as you have a 3D printer this won’t take long to produce either. There’s even detailed breakdowns of how the laser driving circuitry works, and how there are safety features built in to keep anyone’s vision from accidentally getting damaged. Needless to say, this isn’t just a laser rangefinder module but if you want to see how you can repurpose those, [iliasam] can show you that as well.

Breaking Into A Secure Facility: STM32 Flash

March 24, 2020 by Bryan Cockfield 20 Comments

In a perfect world, everything would be open source. Our current world, on the other hand, has a lot of malicious actors and people willing to exploit trade secrets if given the opportunity, so chip manufacturers take a lot of measures to protect their customers’ products’ firmware. These methods aren’t perfect, though, as [zapb] shows while taking a deeper look into an STM microcontroller.

The STM32F0 and F1 chips rely on various methods of protecting their firmware. The F0 has its debug interface permanently switched off, but the F1 still allows users access to this interface. It uses flash memory read-out protection instead, which has its own set of vulnerabilities. By generating exceptions and exploiting the intended functions of the chip during those exceptions, memory values can be read out of the processor despite the memory read-out protection.

This is a very detailed breakdown of this specific attack on theses controllers, but it isn’t “perfect”. It requires physical access to the debug interface, plus [zapb] was only able to extract about 94% of the internal memory. That being said, while it would be in STM’s best interests to fix the issue, it’s not the worst attack we’ve ever seen on a piece of hardware.

This V8 Makes A Shocking Amount Of Power

March 20, 2020 by Bryan Cockfield 32 Comments

As a work of art, solenoid engines are an impressive display of electromagnetics in action. There is limited practical use for them though, so usually they are relegated to that realm and remain display pieces. This one from [Emiel] certainly looks like a work of art, too. It has eight solenoids, mimicking the look and internal workings of a traditional V8.

There’s a lot that has to go on to coordinate this many cylinders. Like an internal combustion engine, it takes precise timing in order to make sure that the “pistons” trigger in the correct order without interfering with each other through the shared driveshaft. For that, [Emiel] built two different circuit boards, one to control the firing of each solenoid and another to give positional feedback for the shaft. That’s all put inside a CNC-machined engine block, complete with custom-built connecting rods and shafts.

If you think this looks familiar, it’s because [Emiel] has become somewhat of an expert in the solenoid engine realm. He started off with a how-to for a single piston engine, then stepped it up with a V4 design after that. That leaves us wondering how many pistons the next design will have. Perhaps a solenoid version of the Volkswagen W12?

Continue reading “This V8 Makes A Shocking Amount Of Power” →

Open-Source ARM Development Simplified

March 17, 2020 by Bryan Cockfield 12 Comments

The ARM series of processors are an industry standard of sorts for a vast array of applications. Virtually anything requiring good power or heat management, or any embedded system which needs more computing power than an 8-bit microcontroller is a place where an ARM is likely found. While they do appear in various personal computers and laptops, [Pieter] felt that their documentation for embedded processors wasn’t quite as straightforward as it could be and created this development board which will hopefully help newbies to ARM learn the environment more easily.

Called the PX-HER0, it’s an ARM development board with an STM32 at its core and a small screen built in. The real work went in to the documentation for this board, though. Since it’s supposed to be a way to become more proficient in the platform, [Pieter] has gone to great lengths to make sure that all the hardware, software, and documentation are easily accessible. It also comes with the Command Line Interpreter (CLI) App which allows a user to operate the device in a Unix-like environment. The Arduino IDE is also available for use with some PX-HER0-specific examples.

[Pieter] has been around before, too. The CLI is based on work he did previously which gave an Arduino a Unix-like shell as well. Moving that to the STM32 is a useful tool to have for this board, and as a bonus everything is open source and available on his site including the hardware schematics and code.

Powering Neon With A Joule Thief

March 14, 2020 by Bryan Cockfield 10 Comments

Joule thief are small, fun circuits which exploit a few characteristics of electronics and LEDs in order to “steal” virtually all of the energy stored in a battery. They can operate at incredibly small voltages and are fairly simple to make. With a few modifications to this basic circuit it’s possible to drive other things than an LED, though, like this joule thief that lights up a neon bulb.

The circuit from [suedbunker] aka [fuselage] is based on a pin from the Chaos Communication Camp which had a standard LED. To get a neon light to illuminate a few modifications to the standard joule thief are needed.

First, the windings have to be changed from 10:10 to 10:80 to increase the voltage across the bulb. Second, a transistor with slightly different characteristics was used than the original design. The capacitor was also replaced with a larger one.

While it might seem simple, the physics of how a joule thief works are anything but, and modifying the delicate circuit to work with something other than an LED is commendable. It also has a steampunk vibe which is a cool look even in projects that don’t involve steam at all.

Inside A CAN Bus Mileage Manipulator

March 13, 2020 by Bryan Cockfield 29 Comments

In the days of carburetors and leaf spring suspensions, odometer fraud was pretty simple to do just by disconnecting the cable or even winding the odometer backwards. With the OBD standard and the prevalence of electronics in cars, promises were made by marketing teams that this risk had all but been eliminated. In reality, however, the manipulation of CAN bus makes odometer fraud just as easy, and [Andras] is here to show us exactly how easy with a teardown of a few cheap CAN bus adapters.

We featured another project that was a hardware teardown of one of these devices, but [Andras] takes this a step further by probing into the code running on the microcontroller. One would imagine that basic measures would have been taken by the attackers to obscure code or at least disable debugging modes, but on this one no such effort was made. [Andras] was able to dump the firmware from both of his test devices and start analyzing them.

Analyzing the codes showed identical firmware running on both devices, which made his job half as hard. It looked like the code was executing a type of man-in-the-middle attack on the CAN bus which allowed it to insert the bogus mileage reading. There’s a lot of interesting information in [Andras]’s writeup though, so if you’re interested in CAN bus or attacks like this, it’s definitely worth a read.