This Week In Security: Android Malware, VOIP Hijack, Signal Contact Discovery, And TeamPCP Arrests

August 28, 2026 by 4 Comments

On GitHub, [AyaanB] details buying a cheap Android TV streaming device, looking for, and finding, baked-in malware.

Multiple warnings have been issued by the FBI and CISA regarding malware on media box Android devices. Many devices have been caught participating in botnets providing residential proxies, ad-click fraud, and DDOS services. [AyaanB] sets out to discover if a $30 set-top streaming box is pre-infected with malware, and extracting it – without ever letting the device talk to the Internet or access other devices on the local network.

Picking a device named in the advisories, [AyaanB] discovered that it was, indeed, preloaded with multiple app stores and applications that wouldn’t typically make sense on a set-top TV box. After identifying the serial port test pads and obtaining a low-voltage serial adapter, they were able to gain access to the bootloader and from there dump the contents of the MMC over TFTP.

With the entire filesystem accessible out-of-body, proving it was infected with malware at the factory becomes simple: the malware is signed as a system application, baked onto the system partition of the MMC, granted SELinux exceptions to mark it as a system binary with shell privileges, and has multiple launch scripts to make sure it is executed even if partially removed. With the malware identified, [AyaanB] continues to dig through to uncover the capabilities.

By installing hooks into the low-level Android process spawning system, the malware installs hooks into every application as it is launched: even if an application isn’t trojaned already, by the time it finishes executing, it’s definitely been subverted. The functions patched and the methods used match the Vo1d botnet, which is used for account takeovers, residential proxies, free “VPN” services, and other unfriendly behavior.

Further digging into the system showed hooks for ad-click fraud, where hidden browser windows are allowed to run unthrottled and display overlays are configured to obscure ads below where the user may click. Other included tools bid in real-time ad auctions, claiming to directly publish ads to the user which may or may not be visible. To cap it all off, a root level backdoor allows botnet operators to access the systems directly and install additional tools.

Be sure to check out [AyaanB]’s writeup for more details on exfiltration methods and other malware found on the devices. Continue reading “This Week In Security: Android Malware, VOIP Hijack, Signal Contact Discovery, And TeamPCP Arrests” →

RAM And EMMC Prices Are So High, Pine64 Has Stopped Linux Device Production

August 28, 2026 by 35 Comments

We all know that the price of RAM and storage has shot up due to demand from the AI industry and other factors. In most cases that means we grumble about the price, but if we really need the part we can fork out for it. [CNX Software] are reporting that rather than continue to push up their prices, Pine64 are responding to the crisis by halting production of their Linux boards for the time being.

We’ve seen online comment over the now-exorbitant cost of other boards such as a fully-loaded Raspberry Pi, and this follows in that vein. If we had to guess we’d speculate that the high prices have resulted in too little in the way of sales, which considering the knock-on impact on our community if other vendors follow suit, could be concerning.

If there’s one bright spot in the current situation, it’s that for many applications where a single-board computer might be used, a microcontroller might now be a better choice for the job than something running Linux. We’re in a very different situation from that we were in when cheap Linux boards appeared, the current generation of high-power microcontrollers have significantly closed the gap between the two. Given that microcontrollers have onboard memory and storage, their immunity from the price hikes makes them even more attractive. As to Pine64, we hope that sales of their other products make up for it.

Header image: BasilicumTree, CC0.

Panoramic Photography With A Linear Scanner

August 28, 2026 by 17 Comments

Although digital photography took a big bite of the film industry’s lunch, it wasn’t able to completely eliminate the need — or desire — for photographers to use film in some situations. But digital information from a camera sensor can be manipulated to augment the natural physical capabilities of a camera in ways not really feasible for film. High dynamic range images, focus and exposure stacking, and automatic panoramic stitching. This camera takes the latter example to the extreme.

[Philo]’s proof of concept was a smartphone camera set on a chair and rotated around a room. Some software grabbed a single column of pixels as it moved and stitched them all together to form an image. This came out well enough that the idea was refined a few times, but it wasn’t until a single-line digital camera meant for imaging assembly lines was found that this really took off. Using the camera and some custom software, [Philo] was eventually able to take some of the longest panoramic images we’ve seen, using things like railways and boats as the track the camera rides on, with accelerometer data to help stabilize the image.

The results speak for themselves. There’s a bit of wobble from the movement of the various vehicles despite the accelerometer data, but given that the image is coming from a sensor meant for examining conveyor belts, it’s hard to complain. Of course, if you want to stick to film, there are panoramic film cameras available too even if they don’t quite have the reach of this digital one.

A clear tank of gel is shown against a black background. In the gel, the shape of a white plastic boat is suspended. A coarse-tipped needle dips into the top of the gel bath.

Support Bath Enables An Epoxy Benchy

August 27, 2026 by 6 Comments

There’s plenty of substances that can theoretically be extruded from a nozzle, but only a regrettably small subset of them can actually be used for 3D printing. One limiting factor is the liquid range: too high a melting point and it’s hard to reliably extrude, too low and it tends to ooze and flow once extruded. Embedded 3D printing offers a way around this: it submerges the entire print in a shear-thinning support gel which keeps liquids in place until they solidify. [Riley] of Riley’s Lab recently built such a 3D printer and used it to print in silicone and epoxy.

In place of the extruder, [Riley] mounted a mostly 3D printed syringe pump, which allowed him to squirt out almost any liquid. For a test, he printed a tardigrade model out of cream cheese. This was a good test material for several reasons: it’s cheap, easy to extrude, and holds it shape well after extrusion. Silicone and epoxy, however, won’t hold their shape, which is where the support bath comes it. This was a mixture of mineral and vegetable oil, with some fumed silica added to make it thick yet shear-thinning. This lets it contain the extruded liquid, yet flow as the extrusion needle slices through it.

For the first test, [Riley] printed a Benchy out of Sylgard 184. The outcome looked good in the bath, bar some stringing, but it seemed to have limited adhesion between layers, and disintegrated upon removal from the bath. A second test with a two-part epoxy worked much better; it also had some stringing, but it held together while the bath was washed away in isopropyl alcohol, and even seemed decently shock-resistant afterwards.

It’s great to see a hacker working on this technology; we’ve previously covered a commercial take on it, as well as some of the research that led to it.

Continue reading “Support Bath Enables An Epoxy Benchy” →

Running Multiple Linux Kernels Without Hypervisor

August 27, 2026 by 15 Comments

In a move that’s no doubt going to trigger a lot of confusion and nostalgia, Mklinux is back, in a sense. As the announcement makes clear, this is multikernel Linux, not microkernel Linux, which is an experimental OS designed to run the Linux kernel as a user-space server running on top of OS X’s Mach kernel.

Naming overlap niggles aside, this neo-mklinux lets multiple independent Linux kernels run simultaneously on bare metal. There is still a host kernel which handles the carving up of hardware resources to the newly spawned kernels, but unlike with a hypervisor there are no abstraction or translation layers.

In theory this should mean basically perfect isolation between kernels, which is one of the main selling points along with increased performance. Compared to running KVM guests the provided benchmarks show much lower latency, at between parity to two times faster.

A website is provided with instructions to get started, along with architectural details if that’s your thing.

Rooftop Camper For Roofless Vehicle

August 27, 2026 by 45 Comments

The Honda Goldwing is one of the more famous motorcycles ever produced. It’s known for its reliability and comfort, but also for being one of the first motorcycles Honda rolls out new technology with. It was the first to have a factory-installed airbag as well as integrated GPS, and is now largely associated for being a sort of two-wheeled RV with how many creature comforts it supports for long-distance riders. [Matt] has a Goldwing of his own, and is taking that RV-like feeling to the extreme with a rooftop camper for this motorcycle.

Of course, motorcycles don’t have roofs, but if this Goldwing had one this camper would definitely be above that. Goldwings are already heavy enough without an enormous weight dramatically increasing the center of gravity, and [Matt] certainly had his problems with that along the way. But before this adventure he had modified it into a hill climber, removing a lot of the extraneous equipment from it. Attaching some metal frame and a lightweight camper shell to it didn’t seem like too much of a stretch from there, so he got to work with a welder. At the end he has a box that’s just barely big enough for him to sleep in but is more or less functional as a camper.

Perhaps unsurprisingly, [Matt] dropped this more than once on its maiden voyage, and one of those falls damaged a wiring harness that caused his battery to drain in the night. Luckily he was not too far from home on the test drive. We’d tend to think that this camper won’t be one that [Matt] keeps working on (although we’d imagine a tricycle kit might solve his center of gravity issues) but since he’s built some other interesting campers in the past we’re not too sure we’d count this one out just yet.

The Mactini: A Computer That Does Almost Nothing

August 27, 2026 by 12 Comments

Recently [Tucker Osman] brought to life what once was just a meme created by the BBC as it poked fun at Apple’s push for ever smaller devices that also dropped many features along the path towards questionable innovation. This ‘Mactini’ was a super-small laptop, with just a single button that did everything, befitting the overpriced more-money-than-sense status symbol vibe that [Jony Ive] brought to Apple.

The input method suggested in the BBC video involves convoluted patterns using the single button, which would be functional, albeit cumbersome. Even as [Tucker] set out on this mission to make the Mactini real, he had to answer a lot of questions, while sticking to the rules that it had to follow the rough form factor of the original and have the same features.

In lieu of overcomplicating things, he opted to use a 1.69″ ST7789V2-based SPI LCD along with a small RP2350-based board from Waveshare for the brains. Rather than just slapping the LCD example for the Pico board on it as firmware, he actually used DMA to do the screen data copying, freeing up a lot of CPU cycles.

The rest of the hardware was cobbled together from e-waste parts, including an iPad speaker and an audio amplifier from a scrap board. Video was handled using Motion JPEG decoding for a not-horrible-framerate. All of this was put into a 3D printed case that was designed in FreeCAD, to make the Mac that [Ive] could only have dreamed of back in the 2000s.

Continue reading “The Mactini: A Computer That Does Almost Nothing” →