Unlock Your Demo Kindle Paperwhite

February 18, 2015 by Rick Osgood 26 Comments

If you’ve been holding off on upgrading your kindle, this project might inspire you to finally bite the bullet. [WarriorRocker] recently saved quite a few dollars on his Kindle upgrade by using a demo unit. Of course, it’s not as simple as just finding a demo unit and booting it up. There’s some hacking involved.

[WarriorRocker] found his Kindle Paperwhite demo unit on an online auction site for just $20. Kindles are great for reading but also make popular displays for your own projects. This used display model was much less expensive than a new unit, which makes sense considering it had probably received its share of abuse from the consumers of some retail store. The problem with a demo unit is that the firmware that comes with it is very limited, and can’t be used to sync up with your Amazon account. That’s where the hacking comes in.

The first step was to crack open the case and locate the serial port. [WarriorRocker] soldered a small three pin header to the pads to make it easier to work on his device as needed. He then connected the Kindle to his PC using a small serial to USB adapter. Pulling up the command prompt was as simple as running Putty and connecting to the correct COM port. If the wires are hooked up correctly, then it just takes a press of the enter key to pull up the login prompt.

The next step requires root access. The root password for each unit is related to the unit’s serial number. [WarriorRocker] obtained the serial number by rebooting the Kindle while the Serial connection was still open. The boot sequence will spit out the number. This number can then be entered in to an online tool to generate possible root passwords. The tool is available on [WarriorRocker’s] project page linked above.

Next, the Kindle needs to be rebooted into diagnostic mode. This is because root logins are not allowed while the device is booted to the system partition. To enter diagnostic mode, [WarriorRocker] had to press enter over and over during the boot sequence in order to kill the automatic boot process. Then he checked some environment variables to locate the memory address where the diagnostic mode is stored. One more command tells the system to boot to that address and into diagnostic mode.

The last step of the process begins by mounting the Kindle as a USB storage device and copying over the stock Kindle firmware image. Next [WarriorRocker] had to exit the diagnostic menu and return to a root command prompt. Finally, he used the dd command to copy the image to the Kindle’s partition bit by bit. Fifteen minutes and one reboot later and the Kindle was working just as it should. [WarriorRocker] even notes that the 3G connection still works. Not bad for $20 and an hour or two of work.

Great Scott! A Flux Capacitor Notification Light

February 17, 2015 by Rick Osgood 9 Comments

If you are into your social media, then you probably like to stay updated with your notifications. [Gamaral] feels this way but he wasn’t happy with the standard way of checking the website or waiting for his phone to alert him. He wanted something a little more flashy. Something like a flux capacitor notification light. This device won’t send his messages back in time, but it does look cool.

He started with an off-the-shelf flux capacitor USB charger. Normally this device just looks cool when charging your USB devices. [Gamaral] wanted to give himself more control of it. He started by opening up the case and replacing a single surface mount resistor. The replacement component is actually a 3.3V regulator that happens to be a similar form factor as the original resistor. This regulator can now provide steady power to the device itself, as well as a ESP8266 module.

The ESP8266 module has built-in WiFi capabilities for a low price. The board itself is also quite small, making it suitable for this project. [Gamaral] used just two GPIO pins. The first one toggles the flux circuit on and off, and the second keeps track of the current state of the circuit. To actually trigger the change, [gamaral] just connects to the module via TCP and issues a “TIME CIRCUIT ON/OFF” command. The simplicity makes the unit more versatile because an application running on a PC can actually track various social media and flash the unit accordingly.

A Raspberry Pi Garage Door Opener

February 15, 2015 by Rick Osgood 32 Comments

We can never seem to get enough garage door hacks around here. [Tanner’s] project is the most recent entry into this category. He’s managed to hook up a Raspberry Pi to his garage door opener. This greatly extends his range to… well anywhere with an Internet connection.

His hack is relatively simple. He started with the garage door opener remote. He removed the momentary switch that was normally used to active the door. He bridged the electrical connection to create a circuit that was always closed. This meant that as long as the remote had power, the switch would be activated. Now all [Tanner] had to do was remove the battery and hook up the power connectors to his Raspberry Pi. Since the remote works on 3.3V and draws little current, he is able to power the remote directly from the Pi. The Pi just has to turn its pin high momentarily to activate the remote.

The ability to toggle the state of your garage door from anywhere in the world also comes with paranoia. [Tanner] wanted to be able to tell if the door is up, down, or stopped somewhere in the middle while he was away from home. He also wanted to use as little equipment as possible. Since he already had an IP camera in the garage, he decided to use computer vision to do the detection.

He printed off two large, black shapes onto ordinary white computer paper. One was taped to the top of the door and one to the bottom. A custom script runs on the Pi that grabs the latest image from the camera and uses OpenCV to detect the shapes. If both shapes are visible, then the script can assume the door is closed. Otherwise, it’s likely open. This makes it easier for [Tanner] to know if the door is opened or closed without having to check the camera himself.

Can’t get enough garage door hacks? Try these on for size. Continue reading “A Raspberry Pi Garage Door Opener” →

Deleting Facebook Albums Without Permission

February 15, 2015 by Rick Osgood 17 Comments

[Laxman] was poking around Facebook looking for security vulnerabilities. Facebook runs a bug bounty program which means if you can find a vulnerability that’s serious enough, it can earn you cold hard cash. It didn’t take much for [Laxman] to find one worthy of a bounty.

The graph API is the primary way for Facebook apps to read and write to the Facebook social graph. Many apps use this API, but there are limitations to what it can do. For example, the API is unable to delete users’ photo albums. At least, it’s not supposed to be able too. [Laxman] decided to test this claim himself.

He started by sending a command to delete one of his own albums using a graph explorer access token. His request was denied. The application didn’t have the correct permissions to be able to perform that action. It seemed that Facebook was correct and the API was unable to delete photos. [Laxman] had another trick up his sleeve, though. He noticed that the wording of the response suggested that other apps would have the ability to delete the albums, so he decided to check the Facebook mobile application.

He decided to send the same request with a different token. This time he used a token from the Facebook for Mobile application. This actually worked, and resulted in his photo album being deleted. To take things a step further, [Laxman] sent the same requests, but changed the user’s ID to a victim account he had set up. The request was accepted and processed without a problem. This meant that [Laxman] could effectively delete photo albums from any other user without that user’s consent. The vulnerability did require that [Laxman] had permission to view the album in the first place.

Since [Laxman] is one of the good guys, he sent this bug in to the Facebook team. It took them less than a day to fix the issue and they rewarded [Laxman] $12,500 for his trouble. It’s always nice to be appreciated. The video below shows [Laxman] walking through how he pulled off this hack using Burp Suite. Continue reading “Deleting Facebook Albums Without Permission” →

Fixing A Toyota Camry Hybrid Battery For Under Ten Dollars

February 14, 2015 by Rick Osgood 185 Comments

[scoodidabop] is the happy new owner of a pre-owned Toyota Camry hybrid. Well at least he was up until his dashboard lit up like a Christmas tree. He did some Google research to figure out what all of the warning lights meant, but all roads pointed to taking his car into the dealer. After some diagnostics, the Toyota dealer hit [scoodidabop] with some bad news. He needed a new battery for his car, and he was going to have to pay almost $4,500 for it. Unfortunately the car had passed the manufacturer’s mileage warranty, so he was going to have to pay for it out-of-pocket.

[scoodidabop] is an electrician, so he’s obviously no stranger to electrical circuits. He had previously read about faulty Prius batteries, and how a single cell could cause a problem with the whole battery. [scoodidabop] figured it was worth testing this theory on his own battery since replacing a single cell would be much less expensive than buying an entire battery.

He removed the battery from his car, taking extra care not to electrocute himself. The cells were connected together using copper strips, so these were first removed. Then [scoodidabop] tested each cell individually with a volt meter. Every cell read a voltage within the normal range. Next he hooked up each cell to a coil of copper magnet wire. This placed a temporary load on the cell and [scoodidabop] could check the voltage drop to ensure the cells were not bad. Still, every cell tested just fine. So what was the problem?

[scoodidabop] noticed that the copper strips connecting the cells together were very corroded. He thought that perhaps this could be causing the issue. Having nothing to lose, he soaked each and every strip in vinegar. He then wiped down each strip with some steel wool and placed them into a baking soda bath to neutralize the vinegar. After an hour of this, he reassembled the battery and re-installed it into his car.

It was the moment of truth. [scoodidabop] started up his car and waited for the barrage of warning lights. They never came. The car was running perfectly. It turned out that the corroded connectors were preventing the car from being able to draw enough current. Simply cleaning them off with under $10 worth of supplies fixed the whole problem. Hopefully others can learn from this and save some of their own hard-earned money.

Wireless Water Level Sensor From PVC Pipe

February 13, 2015 by Rick Osgood 25 Comments

[Bob] was having trouble keeping up with his water troughs. He had to constantly check them to make sure they weren’t empty, and he always found that the water level was lower than he thought. He decided it was time to build his own solution to this problem. What he ended up with was a water level sensor made from PVC pipe and a few other components.

The physical assembly is pretty simple. The whole structure is made from 1/2″ PVC pipe and fittings and is broken into four nearly identical sensor modules. The sensors have an electrode on either side. The electrodes are made from PVC end caps, sanded down flat at the tip. A hole is then drilled through the cap to accommodate a small machine screw. The screw threads are coated in joint compound before the screw is driven into the hole, creating its own threads. These caps are placed onto small sections of PVC pipe, which in turn connect to a four-way PVC cross connector.

On the inside of the electrode cap, two washers are placed onto the screw. A stranded wire is placed between the washers and then clamped in place with a nut. All of the modules are connected together with a few inches of pipe. [Bob] measured this out so it would fit appropriately into his trough, but the measurements can easily be altered to fit just about any size container. The wires all route up through the pipe. The PVC pipe is cemented together to keep the water out. The joint compound prevents any leaks at the electrodes.

A piece of CAT 5 cable connects the electrodes to the electronics inside of the waterproof controller box. The electronics are simple. It’s just a simple piece of perfboard with an XBee and a few transistors. The XBee can detect the water level by testing for a closed circuit between the two electrodes of any sensor module. The water acts as a sort of switch that closes the circuit. When the water gets too low, the circuit opens and [Bob] knows that the water level has lowered. The XBee is connected to a directional 2.4GHz antenna to ensure the signal reaches the laptop several acres away. Continue reading “Wireless Water Level Sensor From PVC Pipe” →

Animated LED Valentine Heart

February 13, 2015 by Rick Osgood 3 Comments

With only a week left until Valentine’s day, [Henry] needed to think on his feet. He wanted to build something for his girlfriend but with limited time, he needed to work with what he had available. After scrounging up some parts and a bit of CAD work, he ended up with a nice animated LED Valentine heart.

[Henry] had a bunch of WS2812 LEDs left over from an older project. These surface mount LED’s are very cool. They come in a small form factor and include red, green, and blue LEDs all in a single package. On top of that, they have a built-in control circuit which makes each LED individually addressable. It’s similar to the LED strips we’ve seen in the past, only now the control circuit is built right into the LED.

Starting with the LEDs, [Henry] decided to build a large animated heart. Being a stickler for details, he worked out the perfect LED placement by beginning his design with three concentric heart shapes. The hearts were plotted in Excel and were then scaled until he ended up with something he liked. This final design showed where to place each LED.

The next step was to design the PCB in Altium Designer. [Henry’s] design is two-sided with large copper planes on either side. He opted to make good use of the extra copper surface by etching a custom design into the back with his girlfriend’s name. He included a space for the ATMega48 chip which would be running the animations. Finally, he sent the design off to a fab house and managed to get it back 48 hours later.

After soldering all of the components in place, [Henry] programmed up a few animations for the LEDs. He also built a custom frame to house the PCB. The frame includes a white screen that diffuses and softens the light from the LEDs. The final product looks great and is sure to win any geek’s heart. Continue reading “Animated LED Valentine Heart” →