Giant-Scale Physical Pong

September 10, 2016 by Elliot Williams 14 Comments

At first, we thought we were having deja vu, but then we saw this video embedded below. [Thijs Eerens] is a creative technologist (dare we say, a “hacker”?) who builds giant-scale games for a living. For the Lowlands festival in the Netherlands, he contributed to the build of a huge Pong game that looks as big as a cinema screen.

The paddles appear to be controlled by pulling ropes, and the “ball” is driven around on a system of wires and stepper motors. Code running in the background tracks the player paddles, drives the ball, and keeps score. From the video, there seem to be sound effects involved. It looks like a lot of fun.

Continue reading “Giant-Scale Physical Pong” →

Nexmon Turns Nexus 5 (and RPi3!) Into WiFi Toolkit

September 8, 2016 by Elliot Williams 22 Comments

Back in the day, when wardriving was still useful (read: before WPA2 was widespread), we used to wander around with a Zaurus in our pocket running Kismet. Today, every cellphone has WiFi and a significantly more powerful processor inside. But alas, the firmware is locked down.

Enter the NexMon project. If you’ve got a Nexus 5 phone with the Broadcom BCM4339 WiFi chipset, you’ve now got a monitor-mode, packet-injecting workhorse in your pocket, and it looks a lot less creepy than that old Zaurus. But more to the point, NexMon is open. If you’d like to get inside what it took to reverse-engineer a hole into the phone’s WiFi, or make your own patches, here’s a great starting place.

But wait, there’s more! The recently released Raspberry Pi 3 has a similar Broadcom WiFi chipset, and has been given the same treatment, turning your RPi 3 into a wireless-sniffing powerhouse. How many Raspberry Pi “hacks” actually hack the Raspberry Pi? Well, here’s one.

We first learned of this project from a talk given at the MetaRhein-Main Chaos Days conference which took place last weekend. The NexMon talk (in German, but with slides in English) is just one of the many talks, all of which are available online.

The NexMon project is a standout, however. Not only do they reverse the WiFi firmware in the Nexus 5, but they show you how, and then apply the same methods to the RPi3. Kudos times three to [Matthias Schulz], [Daniel Wegemer], and [Matthias Hollick]!

Ducklings Raised By Remote

September 8, 2016 by Elliot Williams 22 Comments

We’re not sure that it’s absolutely necessary to raise ducks using a remote-control animatronic duck decoy, but people have stranger hobbies.

This YouTube video (embedded below) from [Imaginative Guy] chronicles an impressive feat of RC animatronics, sparing no effort to make the RC duck “parents” realistic. There’s a ton of detail in the videos, from the machining of small necessary bits to the liberal application of hot glue where necessary. Continue reading “Ducklings Raised By Remote” →

Run A RepRap On An ESP8266

September 6, 2016 by Elliot Williams 17 Comments

What can’t the little $5 WiFi module do? Now that [lhartmann] has got an ESP8266 controlling the motors of a 3D printer, that’s one more item to check off the list.

What’s coolest about this project is the way that [lhartmann] does it. The tiny ESP8266 has nowhere near the required number of GPIO pins, the primary SPI is connected to the onboard flash memory, and the secondary SPI is poorly documented and almost nobody uses it. So, [lhartmann] chose to use the I2S outputs.

I2S is most often an audio protocol, so this might at first seem like a strange choice. Although I2S sounds like I2C, it’s really essentially an SPI protocol with a fourth wire that alternates to designate the right or left channel. It’s actually just perfect for sending 16×2 bits of data at high data rates.

[lhartmann] takes these 32 bits and feeds them into four shift registers, producing 32 outputs from just the four I2S data lines. That’s more than enough signals to run the stepper motors. And since it updates at 192 kHz sample rate, it’s plenty fast enough to drive them.

The other side benefit of this technique is that it can work on single-board computers with just a little bit of software. Programming very complicated stepper movements then becomes just a matter of generating the right “audio” file and playing it out. [lhartmann] demonstrated this earlier with an Orange Pi. That’s pretty cool, too.

The code for turning the ESP8266 and a short handful of 74HC595s into a 3D printer controller are up on GitHub, so go check it out.

Thanks [CNLohr] for the tip!

Russian Hacker Multiplies Value Of Boost Converter

September 4, 2016 by Elliot Williams 23 Comments

We have a love/hate relationship with LiIon batteries. They pack all this power in such a small and light package. But for running 3.3 V devices, they’re cumbersome. They need to be stepped down a little bit when they’re fully charged at 4.2 V, but then they need to be stepped up at the end of their charge around 3.0 V.

A simple boost or buck converter can’t do both jobs, although you’d be tempted because they can be purchased for peanuts online. So [Kirich] hacked cheap boost converters into the more capable SEPIC topology, which sell for nearly 10x as much. (Google translated version here.) The bottom line? With a little desoldering, a cut trace here and an extra inductor there, and [Kirich] had a very capable circuit that would maintain a constant 3.3 V output when the input swung between 1 V and 5 V.

If SEPIC power converters are foreign to you, have a read through Maxim’s white paper on the subject. Basically, it’s a boost converter with a capacitor in the middle that lets the output voltage drop below the input voltage. An extra inductor keeps the output side of this capacitor at ground potential (on average).

If you want more detail, [Kirich] doesn’t disappoint. He tested his modifications in multiple configurations on two different models of boost converter. As you’d expect with power circuitry, layout and trace length matters, and [Kirich] took good notes. This is a great read for the frugal hacker, or anyone who’s interested in boost/buck converters.

Speaking of boost/buck circuits, we’ve got some more links for you. This video from Sparkfun’s [Pete Dokter] is worth fifteen minutes, and if you want to get your hands really dirty in the construction of such circuits, this ATtiny-based boost converter circuit is fun to play with.

Thanks [kirillre4] for the great tip!

Tour De Force Battery Hacking

September 3, 2016 by Elliot Williams 23 Comments

Lithium-Ion batteries are finicky little beasts. They can’t be overcharged, overdischarged, overheated, or even looked at funny without bursting into flames. Inside any laptop battery pack, a battery charge controller keeps watch over all the little cells, and prevents them from getting damaged.

Of course, any “smart” device will sometimes make the wrong choices, and then it’s up to us to dig inside its brains and fix it. When [Viktor] got a perfectly good battery pack with a controller that refused to charge the batteries, he started off on what would become an epic journey into battery controllers, and the result is not just a fixed battery, but a controller-reprogramming tool, software, and three reversed controller chips so far.

Battery controller chips speak SMBus, and [Viktor] started out by building a USB-SMBus tool. It’s a clever use of a cheap eBay development board for a Cypress CY7C68013A USB microcontroller. Flashed with [Viktor]’s firmware and running his software on the host computer, a SMBus scan is child’s play.

The rest of the story is good old-fashioned hacking: looking for datasheets, reading industry powerpoints, taking wild guesses, googling for passwords, and toggling the no-connect pins while booting the controllers up. We’re not going to argue with results: the bq8030, R2J240, and M37512 controllers have all given up their secrets, and tools to program them have been integrated into [Viktor]’s SMBusb tool.

In short, this is one of the nicest hard-core hacks we’ve seen in a while. Kudos [Viktor]! And thanks for the SMBus tool.

Amazon Dash Button Finds Your Phone

August 31, 2016 by Elliot Williams 41 Comments

This scene replays quite often in our house: my wife has misplaced her cell phone so she asks me to call her. But where did I leave my cell phone? And the race is on! Who will find their phone first to call the other?

[Zapta] solves this problem with his Phone Finder. The system comes in two parts: a base station with WiFi that’s also connected to the house’s phone line, and an arbitrary number of Amazon Dash buttons that trigger dialing commands.

[Zapta] presses a Dash button, which connects over WiFi to the base station. The base station recognizes the MAC address of the button, looks up and dials the corresponding missing cell phone. This solves the need-a-phone-to-find-a-phone problem very neatly, and since Dash buttons are dirt cheap they can be scattered liberally around the house. They’re clearly marked “his” and “hers” suggesting a similar domestic dynamic.

If we were implementing the base station from scratch, we’d probably try to figure out how a single ESP8266 could do all of the heavy lifting, but browsing through [Zapta]’s GitHub and the included circuit diagram (PDF) demystifies the phone-line interface.

In the early days of cordless phones, we used to joke that a solution to losing them would be to attach a string and tie them to the wall. (Luddites!) We’re glad to see [Zapta] take this project in the opposite direction — using technological overkill to solve the unintended problems that arise from technological progress.