Electric Motorcycles Don’t Have To Be Security Nightmares, But This One Was

March 25, 2026 by Tyler August 30 Comments

Once upon a time, they told us we wouldn’t download a car, and they were wrong. Later, Zero Motorcycles stated in their FAQ that you cannot hack an electric motorcycle, a statement which [Persephone Karnstein] and collaborator [Mitchell Marasch] evidently took issue with. Not only can you hack an electric motorcycle, it is — in [Persephone]’s words — a security nightmare.

You should absolutely go over to [Persephone]’s website and check out the whole write-up, which is adapted from a talk given at BSides Seattle 2026. There’s simply way more detail than we can get into here. Everything from “what horridly toxic solvents would I need to unpot this PCB?” to the scripts used in de-compiling and understanding code, it’s all there, and in a lively and readable style to boot. Even if you have no interest in security, or electric motorcycles, you should check it out.

The upshot is that not only were Zero Motorcycles wrong when they said their electric motorcycles could not be hacked, they were hilariously wrong. The problem isn’t the motorcycle alone: it has an app that talks to the electronics on the bike, which take over-the-air (OTA) updates. What about the code linked to the VIN alluded to in that screenshot? Well, it turns out you just need a code structured like a VIN, not an actual number. Oops. By the end of it, [Persephone] and [Mitchell] have taken absolute control of the bike’s firmware, an so have them full control over all its systems.

Why cut the brake lines when you can perform an OTA update that will do the same thing invisibly? And don’t think you can just reset the bike to factory settings to fix it: they thought of this, and the purely-conceptual, never-deployed malware has enough access to prevent that. Or they could just set the battery on fire. That was an option, too, because the battery management system gets OTA updates as well.

To be clear, we don’t have any problem with a motorcycle that’s dependent on electronics to operate. After all, we’ve seen many projects that would meet that definition over the years. But the difference is none of those projects fumbled the execution this badly. Even this 3 kW unicycle, which has a computer for balance control, doesn’t see the need to expose itself. It’s horribly unsafe in very different ways.

A hotend equipped with the bd_pressure sensor. The nozzle is facing upwards.

Direct Pressure Advance Measurement For Fast Calibration

March 24, 2026 by Tyler August 12 Comments

Some people love fiddling with their 3D printers, others love printing. Some fiddle so they can spend more time printing, which is probably where this latest project comes in: an automated pressure advance calibration tool by [markniu].

Most of us don’t take enough care with pressure advance (PA). But if you want absolutely perfect prints, its something you should be calibrating for every type filament in your collection. Some would argue, ideally every individual spool. While that sort of dialing in can be fun, it takes away from actually running off prints. Bambu printers automate PA by scanning the usual sort of calibration print, but that’s still a very indirect measurement. Why not, just advance the filament, and measure the pressure at the nozzle directly? That is what PA is meant to account for, after all: the pressure of the plastic in the hotend causing oozing and blobbing at corners.

Did we mention it connects via USB-C? That’s helpfully broken out well away from the heat with a ribbon cable.

[mark]’s solution comes very close to a direct measurement. It uses a strain gauge that sits directly on top of the heatbreak, with the sound logic that the strain there experienced will be directly proportional to the pressure inside, at least along the axis of flow. Instead of filling half the bed with lines, the calibration process instead is a ‘printer poop’ style extrusion that doesn’t take nearly as long, and seems to save plastic, too. Since this puts a strain gauge in your hotend, you also get the bonus of being able to use it for bed leveling if you should so desire.

[mark] is claiming sub-90 second calibration — as you can see in the demo video embedded below — versus over seven minutes for the indirect calibration print. The value is plugged directly into Klipper, assuming you configured everything correctly, which should be easy enough looking at the instructions on the GitHub. Continue reading “Direct Pressure Advance Measurement For Fast Calibration” →

PicoZ80 Is A Drop-in Replacement For Everyone’s Favorite Zilog CPU

March 23, 2026 by Tyler August 25 Comments

The Z80 has been gone a couple of years now, but it’s very much not forgotten. Still, the day when new-old-stock and salvaged DIP-40 packaged Z80s will be hard to come by is slowly approaching, and [eaw] is going to be ready with the picoZ80 project.

You can probably guess where this is going: an RP2350B on a DIP-40 sized PCB can easily sit on the bus and emulate a Z80. It can do so with only one core, without breaking a sweat. That left [eaw] a second core to play with, allowing the picoZ80 to act as a heck of an accelerator, memory expander, USB host, disk emulator– you name it. He even tossed in an ESP32 co-processor to act as a WiFi, Bluetooth, and SD-card controller to use as a virtual, wirelessly accessible disk drive.

The onboard ram that comes with an RP2350B would be generous by 1980s standards, but [eaw] bumped that up with an 8 MB SPRAM chip–accessed in 64 pages of 64 kB each, naturally. If more RAM than a very pricey hard drive wasn’t luxury enough, there’s also 16 MB of flash memory available. That’s configured to store ROM images that are transferred to the RAM at boot– the virtual Z80 isn’t grabbing from the flash at runtime in [eaw]’s architecture, because apparently there are limits to how much he wants to boost his retro machines. Continue reading “PicoZ80 Is A Drop-in Replacement For Everyone’s Favorite Zilog CPU” →

Acoustic Drone Detection On The Cheap With ESP32

March 23, 2026 by Tyler August 16 Comments

We don’t usually speculate on the true identity of the hackers behind these projects, but when [TN666]’s accoustic drone-detector crossed our desk with the name “Batear”, we couldn’t help but wonder– is that you, Bruce? On the other hand, with a BOM consisting entirely of one ESP32-S3 and an ICS-43434 I2S microphone, this isn’t exactly going to require the Wayne fortune to pull off. Indeed, [TN666] estimates a project cost of only 15 USD, which really democratizes drone detection.

It’s not a tuba– Imperial Japanese aircraft detector being demonstrated in 1932. Image Public Domain via rarehistoricalphotos.com

The key is what you might call ‘retrovation’– innovation by looking backwards. Most drone detection schema are looking to the ways we search for larger aircraft, and use RADAR. Before RADAR there were acoustic detectors, like the famous Japanese “war tubas” that went viral many years ago. RADAR modules aren’t cheap, but MEMS microphones are– and drones, especially quad-copters, aren’t exactly quiet. [TN666] thus made the choice to use acoustic detection in order to democratize drone detection.

Of course that’s not much good if the ESP32 is phoning home to some Azure or AWS server to get the acoustic data processed by some giant machine learning model. That would be the easy thing to do with an ESP32, but if you’re under drone attack or surveillance it’s not likely you want to rely on the cloud. There are always privacy concerns with using other people’s hardware, too. [TN666] again reached backwards to a more traditional algorithmic approach– specifically Goertzel filters to detect the acoustic frequencies used by drones. For analyzing specific frequency buckets, the Goertzel algorithm is as light as they come– which means everything can run local on the ESP32. They call that “edge computing” these days, but we just call it common sense.

The downside is that, since we’re just listening at specific frequencies, environmental noise can be an issue. Calibration for a given environment is suggested, as is a foam sock on the microphone to avoid false positives due to wind noise. It occurs to us the sort physical amplifier used in those ‘war tubas’ would both shelter the microphone from wind, as well as increase range and directionality.

[TN] does intend to explore machine learning models for this hardware as well; he seems to think that an ESP32-NN or small TensorFlow Lite model might outdo the Goertzel algorithm. He might be onto something, but we’re cheering for Goertzel on that one, simply on the basis that it’s a more elegant solution, one we’ve dived into before. It even works on the ATtiny85, which isn’t something you can say about even the lightest TensorFlow model.

Thanks to [TN] for the tip. Playboy billionaire or not, you can send your projects into the tips line to see them some bat-time on this bat-channel.

Figure 1 from the paper: the apparatus and a disintegration fingerprint.

IDing Counterfeit Drugs Might Be Easier Than You Think

March 22, 2026 by Tyler August 34 Comments

Odds are, you’ve taken pills before; it’s a statistical certainty that some of you reading this took several this morning. Whenever you do, you’re at the mercy of the manufacturer: you’re trusting that they’ve put in the specific active ingredients in the dosage listed on the package. Alas, given the world we live in, that doesn’t always happen. Double-checking actual concentrations requires expensive lab equipment like gas chromatography. It turns out checking for counterfeit pills is easier than you’d think, thanks to a technique called Disintegration Fingerprinting.

Continue reading “IDing Counterfeit Drugs Might Be Easier Than You Think” →

Arduino Code? On My 8051? It’s More Likely Than You Think

March 22, 2026 by Tyler August 28 Comments

The 8051 was an 8-bit Harvard-architecture microcontroller first put out by Intel in 1980. They’ve since discontinued that line, but it lives on in the low-cost STC8 family of chips, which is especially popular in Asia. They’re cheap as, well, chips — under 1$ — but lack compatibility with modern toolchains. If you’re happy with C, then you’re fine, but if you want to plus-plus it up and use all those handy-dandy shortcuts provided by the Arduino ecosystem, you’re out of luck. Or rather, you were, until [Bùi Trịnh Thế Viên] aka [thevien257] came up with a workaround.

The workaround is delightfully Hack-y. One could, conceivably, port a compiler for Arduino’s Wiring to the 8051, but that’s not what [Viên] did, probably because that would be a lot of work. There isn’t even a truly modern toolchain to put plain C on this chip. Instead, [Viên] started with rv51, a RISC-V emulator written in 8051 assembly language by [cryozap]. RISC-V is a lot easier to work with and, frankly, a more useful skill to build up.

Continue reading “Arduino Code? On My 8051? It’s More Likely Than You Think” →

Resin Injection CRT Cataract Surgery On Macintosh Monitor

March 21, 2026 by Tyler August 10 Comments

Nothing lasts forever, but you’d think the leaded-glass face of a CRT would not be a place you’re likely to see Father Time causing failures. Alas, the particle accelerators we all lovingly stared at were very often not unitary pieces of glass: in case of implosion, safety glass was glued onto the front of the CRT. That glue will inevitably fail, as happened to the 20″ Mac-branded Triniton [Epictronics] had with a PowerPC 6100 that needed a few other repairs.

His version of cataract surgery was the most interesting. Usually cataracts are an issue for much older CRTs than the 90s-era Macintosh display featured here, but this particular display was literally pulled out of the trash and not stored well before that, so that’s probably what accounts for its accelerated aging. Usually what people do with CRT Cataracts is use heat to remove the safety glass and failing adhesive. [Epictronics] has a safer technique, however: inject fresh adhesive into the gap that’s forming around the edge of the display.

With a syringe and UV cure resin, he slowly and laboriously goes around the edge of the display to fill in the bubbles that can be reached. Luckily, the delamination on this CRT doesn’t extend very far beyond the edges, so a standard syringe tip could reach all the problem areas.

It looks good now, but if it doesn’t hold, [Epictronics] points out he can still remove the glass with the traditional hot-air technique. We hope it holds up; this is a nice technique to try if you have a CRT with the early stages of cataract delamination. For future reference, it took about one milliliter of resin to fill each square centimeter of affected area, which implies the cataract gap is quite small indeed.

Having repaired the monitor by about fifteen minutes into the video, [Epictronics] spends the remaining seventeen minutes getting the Mac running with its original CD-ROM drive (that needed recapped) and a DOS compatibility card.

We’ve featured [Epictronics] repairs here before, like when he tore down and rebuilt an IBM Model F keyboard.

Continue reading “Resin Injection CRT Cataract Surgery On Macintosh Monitor” →