This Week In Security: BugTraq, AI Hacks, And Being Dumb On Planes

After a multi-year hiatus, the venerable BugTraq mailing list is back!

For decades, BugTraq was the place where vulnerabilities were disclosed, from the early days when nearly all vendors viewed all security research as a hostile force, through to the modern era of working with vendors to coordinate disclosing bugs. With the rise of bug bounty programs and other social changes, the mailing list slowly died: what started in 1993 ended in 2021 is returning. The new maintainer, Jonathan Brossard, says in his announcement “The mission is unchanged: full disclosure, researcher-first, no corporate filter.”

Don’t Be Dumb on Planes

In the unlikely event anyone here needs to be told: Don’t do dumb things on planes.

It seems that someone coming home from from the DEF CON hacker conference in Las Vegas decided to mess with the in-plane WiFi, and is likely now in the “find out” phase of doing something dumb. There hasn’t been any public followup beyond the original reports: a passenger on a Delta flight leaving Las Vegas brought up a fake WiFi hotspot named “Delta WiFi FAST” to trick other passengers into connecting, and attempted to disable the in-flight WiFi using a denial of service attack.

Continue reading “This Week In Security: BugTraq, AI Hacks, And Being Dumb On Planes”

ShieldFont: Bludgeoning AI Scrapers That Disrespect Robots.txt

In the more innocent days of the World Wide Web you could simply put a robots.txt file in the root of your website that search engine indexing bots and similar would consult for the indexing wishes of the site owner. In this brave new world of LLM training data indexing such pleasantries are however rarely respected, leaving site owners to resort to increasingly more involved ways to bludgeon so-called AI scrapers, with ShieldFont being one of the most recent methods.

Its basic functioning is detailed in the white paper, explaining their use of ligatures. These are normally used to join multiple graphemes or letters into a single glyph which are rendered in the final text. By substituting about a quarter of the words in a text with such ligature-based versions in an intelligent, dictionary-based manner, the HTML version – as typically parsed by a scraper – will read as grammatically valid but nonsensical text, while the rendered font version will look normal.

Naturally, there are some disadvantages to this, such as screen readers for the visually impaired needing to also use the rendered font version, and it’s just as effective on legitimate search engine indexing bots. That said, if you apply this to static, archived content, or content marked as ‘do not follow’ in said robots.txt, then it might just be one way to make ChatGPT and friends spit out really funny output in the future now that the novelty of wood glue on pizza and eating rocks has somewhat worn off.

While LLM scrapers can adapt to this by also parsing the rendered text, this makes the scraping effort significantly more expensive. Together with maze traps like Nepenthes and Cloudflare’s offerings that seek to keep these scrapers busy scraping dynamically generated content through infinite linked pages, the tools available to combat the menace of these scrapers keep developing.

Mauchly And Eckert’s Other Computers

If you ask a random person who [John Mauchly] or [J. Presper Eckert] were, you’d probably get a blank stare. Ask a Hackaday reader, and you have a better shot. People who know will tell you that the two were behind the famous ENIAC, which may or may not have been the first computer, but was certainly influential in kicking off the modern computer era. They worked at Penn, and now [Holly Mengel] of Penn’s Kislak Center for Special Collections, Rare Books, and Manuscripts wants to introduce us to the other computers they worked on after ENIAC.

We will admit that we knew about EDVAC and UNIVAC. But we’ll also confess we didn’t know about BINAC or Skeduflo, a computer in a rather large suitcase. BINAC can claim to be the first digital computer that was commercialized, although you could argue that since it was fairly limited and, reportedly, never worked after it was delivered. Supposedly, the customer disassembled it, shipped it to a secure facility, and hired a freshly graduated engineer to rebuild it, which didn’t go very well.

We couldn’t find much about Skeduflo, other than that it was a 75-pound analog computer made for critical path method (CPM) analysis. You set up the problem with a patchboard and potentiometers, and the result came out on an analog plotter. Those details are from a PMI interview with [Morgan Walker] and [Jim Kelley].

It makes sense that these inventors didn’t just finish off ENIAC and retire to a tropical island. While UNIVAC had a good bit of success and EDVAC was very influential, the others are arguably fairly obscure. UNIVAC even has a Disney connection.

Rare IBM PC Brought Back To Life

[Epictronics] happens to have a rather special machine in his possession. It’s a rare IBM PC prototype or concept machine from the late 1980s known as the IBM 7496 Executive Workstation. It’s a striking thing, with a rather enticing case design that has the monitor permanently attached on a nifty swivel mount. Only… the machine wasn’t working, so some repairs were in order!

The video is essentially teardown that gives a wonderful look at the internals of this oddball machine, which differs rather a bit from more mainstream IBM product of the era. The video is also about repairs and upgrades, too. The real work begins with pulling out the 720K double-density floppy drive, which has a number of faults preventing it from working reliably. Running a machine off floppies alone is as frustrating today as it was back then, so [Epictronics] goes further by adding in an XT-IDE card to allow the machine to interface with a hard drive. An AdLib clone soundcard completes the upgrades to make this unique unit as capable as you’d want it to be given those industrially good looks. The machine has the obscure, shortlived MCGA graphics subsystem, which really fits its oddball nature, but it will nevertheless play a fair few games of its era if such is demanded of it.

If you’re a fan of the early days of the IBM PC, or you just like watching retro computers pulled apart and delicately put back together, this is a great video to watch over lunch or dinner. If your tastes are more Commoderian, we’ve got some content more to your tastes as well. Video after the break.

Continue reading “Rare IBM PC Brought Back To Life”

Removing Microplastics From Soil With Tumbling Magnetic Flakes

While in aquatic environments microplastics can be filtered out relatively easily, in soil it’s much harder to get to these microscopic particles. While you can certainly strip mine an entire area to process its soil, a less invasive method would involve something like the magnetic flakes proposed and demonstrated by [Jeonghyo Kim] et al. in a recent article in npg asia materials.

The Ti3C2Tx flakes, referred to as MXene microparticles, were designed to attract target microplastics. These were then combined with ferromagnetic nickel nanoparticles to make structures that can be propelled through soil using an external magnetic field.

During tests under laboratory conditions the researchers managed to remove about 81% of polystyrene and 72% of PET particles this way from soil, with a correspondingly higher percentage in water. After having the flakes rummage about for a while through the target material, they are removed with a strong magnetic field, which should recover most of them.

Naturally, the question with any such system is how it’ll perform once exposed to real world conditions and its myriad of soil types and conditions.

Troubleshooting Video Delay On The Raspberry Pi

The Raspberry Pi line of single-board computers are great little devices, and they can do great things with cameras and video. However, there can be a fair bit of latency involved in these tasks depending on the board you’re using and just what you’re doing. You need to have things set up just so to get peak performance. [MattKC] has tangled with this issue in a personal project, and recently had somewhat of a breakthrough.

The issue came up during [MattKC’s] work on cloning the WiiU gamepad. The idea was to receive the video stream from the WiiU console and display it using a Raspberry Pi Zero 2W. He had some problems with latency, wherein there was a strange 3 frames of latency in the video pipeline that just wouldn’t go away. Even substituting in some dummy frames into the pipeline and ignoring them at output time didn’t work—the latency stuck around. Eventually, [MattKC] realized the delay wasn’t about a certain number of frames—it was about time. About 50 milliseconds, in fact.

Drilling down further revealed that there was a problem in the way frames were being fed into and received from the decoder. The first frame would take about 50 ms to decode, while later frames would take far less—as little as 5ms. However, [MattKC’s] code wasn’t set up to grab frames as soon as they were done, so the lag carried forward. The video explains it in greater detail, and how polling the decoder regularly helped solve the issue. The final result was a Raspberry Pi Zero 2W that could process and display the WiiU video feed as quickly as the original Nintendo WiiU gamepad.

If you dug this, it’s worth going back and checking out where the WiiU gamepad project started, too. Video after the break.

Continue reading “Troubleshooting Video Delay On The Raspberry Pi”

Tearing Down A Cheap Digital Caliper

Most hackers and makers end up with a cheap pair of calipers in the toolbox at some point or another. [DiodeGoneWild] decided to take a particularly cheap plastic pair and tear them down to see what makes them tick measure.

The electronics is, unsurprisingly, all contained inside the carriage which slides along the ruler. The ruler itself has an etched copper strip inside, underneath the scale sticker, with repetitive T-shaped sections. Meanwhile, the PCB in the carriage has a series of plates for capactive sensing. As the carriage slides along the copper strip inside the ruler, the capacitive sensing plates pick up varying capacitances which are directly proportional to how far the carriage has moved, allowing for precise measurement of relative position. Zeroing is a job for the user, via the ZERO button. We get to see how this works on the bare hardware level, and [DiodeGoneWild] even breaks out the oscilloscope to help show us what’s going on.

[DiodeGoneWild] also notes that these calipers are particularly frustrating for how quickly they discharge batteries while in storage. This may be down to the convenience feature, wherein moving the caliper switches the display on. There’s no hard off switch here—so the caliper is always drawing some juice even when it’s just in the cupboard. This is why these things are forever turning up dead when you need them.

If you’ve never pulled apart one of these cheap tools, this is a great way to see what’s actually going on under the hood. We’ve seen some other great teardowns lately, like this deep dive into a cheap pair of smartglasses. Video after the break.

Continue reading “Tearing Down A Cheap Digital Caliper”