Author: Bryan Cockfield

1852 Articles

Take Security Up A Notch By Adding LEDs

January 12, 2020 by 14 Comments

All computers are vulnerable to attacks by viruses or black hats, but there are lots of steps that can be taken to reduce risk. At the extreme end of the spectrum is having an “air-gapped” computer that doesn’t connect to a network at all, but this isn’t a guarantee that it won’t get attacked. Even transferring files to the computer with a USB drive can be risky under certain circumstances, but thanks to some LED lights that [Robert Fisk] has on his drive, this attack vector can at least be monitored.

Using a USB drive with a single LED that illuminates during a read OR write operation is fairly common, but since it’s possible to transfer malware unknowingly via USB drives, one that has a separate LED specifically for writing operations will help alert a user to any write operations that might be trying to fly under the radar. A recent article by [Bruce Schneier] pointed out this flaw in USB drives, and [Robert] was up to the challenge. His build returns more control to the user by showing them when their drive is accessed and in what way, which can also be used to discover unique quirks of one’s chosen operating system.

[Robert] is pretty familiar with USB drives and their ups and downs as well. A few years ago he built a USB firewall that was able to decrease the likelihood of BadUSB-type attacks. Be careful going down the rabbit hole of device security, though, or you will start seeing potential attacks hidden almost everywhere.

Possible Spyware On Samsung Phones

January 9, 2020 by 118 Comments

[Editor’s note: There’s an ongoing back-and-forth about this “spyware” right now. We haven’t personally looked into it on any phones, and decoded Wireshark caps of what the cleaner software sends home seem to be lacking — it could be innocuous. We’re leaving our original text as-run below, but you might want to take this with a grain of salt until further evidence comes out. Or keep us all up to date in the comments. But be wary of jumping to quick conclusions.]

Samsung may have the highest-end options for hardware if you want an Android smartphone, but that hasn’t stopped them from making some questionable decisions on the software they sometimes load on it. Often these phones come with “default” apps that can’t be removed through ordinary means, or can’t even be disabled, and the latest discovery related to pre-loaded software on Samsung phones seems to be of a pretty major security vulnerability.

This software in question is a “storage cleaner” in the “Device Care” section of the phone, which is supposed to handle file optimization and deletion. This particular application is made by a Chinese company called Qihoo 360 and can’t be removed from the phone without using ADB or having root. The company is known for exceptionally bad practices concerning virus scanning, and the software has been accused of sending all information about files on the phone to servers in China, which could then turn all of the data it has over to the Chinese government. This was all discovered through the use of packet capture and osint, which are discussed in the post.

These revelations came about recently on Reddit from [kchaxcer] who made the original claims. It seems to be fairly legitimate at this point as well, and another user named [GeorgePB] was able to provide a temporary solution/workaround in the comments on the original post. It’s an interesting problem that probably shouldn’t exist on any phone, let alone a flagship phone competing with various iPhones, but it does highlight some security concerns we should all have with our daily use devices when we can’t control the software on the hardware that we supposedly own. There are some alternatives though if you are interested in open-source phones.

Thanks to [kickaxe] for the tip!

Photo from Pang Kakit [CC BY-SA 3.0 DE (https://creativecommons.org/licenses/by-sa/3.0/de/deed.en)]

All You’ve Ever Wanted To Know About Compilers

January 5, 2020 by 21 Comments

They say that in order to understand recursion, you must first understand recursion. Once you master that concept, you might decide that it’s time to write your own compiler that can compile itself as a fun side project. According to [Warren] aka [DoctorWkt], who documented every step of writing this C compiler from scratch, a true compiler will be able to do that.

Some of the goals for the project included self-compiling, focusing on a real hardware platform, practicality, and simplicity. [Warren] outlines a lot of the theory of compilers as well, including all the lexical, grammar, and semantic analysis and then the final translation into assembly language, but really focuses on making this compiler one for practical use rather than just a theoretical implementation. He focuses on Intel x86-64 and 32-bit ARM platforms too, which are widely available.

This project is a long read and very thoroughly documented at around 100,000 words, so if you’ve ever been interested in compilers this is a great place to start. There are a lot of other great compiler tools floating around too, like the Compiler Explorer which shows you generated code as you write in a higher level language.

[via Hackaday.io]

Simple “Computer” From The ’60s Now 3D Printed

December 17, 2019 by 11 Comments

Now is an amazing time to be involved in the hobby electronics scene. There are robots to build, cheap microcontrollers which are easy to program, and computers themselves are able to be found for very low prices. That wasn’t the case in the 1960s though, where anyone interested in “electronics” might have had a few books about ham radios or some basic circuits. If you were lucky though, you may have found a book from 1968 that outlined the construction of a digital computer made out of paperclips that [Mike Gardi] is hoping to replicate.

One of the first components that the book outlines is building an encoder, which can convert a decimal number to binary. In the original book the switches were made from paper clips and common household parts, but [Mike] is using a more reliable switch and some 3D prints to build his. The key of the build is the encoder wheel and pegs, which act as the “converter” between decimal and binary and actually performs the switching.

It’s a fairly straightforward build, but by working through the rest of the book the next steps are to build two binary encoders and hook all of them up to an ALU which will give him most of a working computer from long lost 1960s lore. He’s been featured recently for building other computers from this era as well.

Thanks to [DancesWithRobots] for the tip!

Controlling Tremors As They Happen

December 8, 2019 by 26 Comments

Some neurological disorders, like Parkinson’s disease, can cause muscle tremors which can get worse as time goes along. In the beginning it may not be too difficult to manage, but as the disease progresses the tremors get worse and worse, until day-to-day movements are extremely difficult. Even picking up a fork or pouring a glass of water becomes nearly impossible. Some helpful tools have been designed to limit the impacts of the tremors, but this new device seeks to dampen the tremors directly.

A research team from Fresno State has been developing the Tremelo, which is a hand stabilizer that straps onto the arm of a person suffering from tremors. It has sets of tuned mass dampers in each of two enclosures, which rapidly shift the weights inside to counter the motion of the wearer’s tremors. The device has already shown success in 36 trial patients and does an incredible job at limiting the amount of tremors the user experiences, and also has a bonus of being non-invasive for the wearer.

The team has successfully trialed the program, but is currently seeking funding on Indiegogo. The project seems worthwhile and is a novel approach to a common problem. In the past, devices (admittedly with a much cheaper price tag) try to solve the problem externally rather than in the direction that the Tremelo has gone, and it’s a unique idea that shows a lot of promise.

Continue reading “Controlling Tremors As They Happen” →

File Systems For Tiny Devices

December 7, 2019 by 11 Comments

Sometimes you build a computer and use it every day. Sometimes you build a different type of computer and it sits alone on a mountaintop for years. The design considerations for these two setups are remarkably different, right down to the type of file system used. For small computers like [Jo] is using, and for the amount of time they sit alone in remote locations, he decided to build his own file system for them.

Known as JesFs ([Jo]’s embedded serial File system), the file system is for SPI Flash and intended for use in scientific data logging. It can be used on the chip-scale processors found in many development boards, and is robust enough to use in applications where remoteness is a concern. It has a small RAM footprint, is completely open source, includes wear leveling, and has a number of security features built-in as well.

Some of the benefits of using a file system on such a tiny chip aren’t immediately obvious unless you’re doing a lot of data logging, but it does allow you to change virtually any aspect of the firmware much more easily if everything is accessible as a file, and not something you would have to change by reflashing the whole chip, for example. There are also a number of traps that you can easily fall into when working with file systems for tiny devices.

Build Your Own Tools For More Power

December 3, 2019 by 19 Comments

Building something on your own usually carries with it certain benefits, such as being in full control over what it is you are building and what it will accomplish, as well as a sense of pride when you create something that finally works just the way you want it. If you continue down that path, you may eventually start making your own tools to help build your other creations, and if you also have some CAD software you can make some very high quality tools like this belt grinder.

This build comes to us from [Emiel] aka [The Practical Engineer] who is known for his high quality solenoid engines. His metal work is above and beyond, and one thing he needed was a belt grinder. He decided to make a 3D model of one in CAD and then build it from scratch. The build video goes through his design process in Fusion 360 and then the actual build of this beast of a machine. The motor is 3.5 horsepower which, when paired with a variable frequency drive, can provide all of his belt grinding needs.

[Emiel]’s videos are always high quality, and his design process is easy to follow as well. We’re always envious of his shop as well, and it reminds us a lot of [Eric Strebel] and his famous designs.

Continue reading “Build Your Own Tools For More Power” →