Spoofed Serial Number Unlocks Cricut Machine

[xssfox] recently found a Cricut Maker in an e-waste disposal. A quick scan over the device indicated it was in moderately good condition, with merely some perished rollers to contend with. The device was salvaged, with the awareness that Cricut is plenty good at disabling and locking down machines when it wishes. However, those measures didn’t stop [xssfox] from bringing it back to life.

The suspicion was that the machine had been locked out after the original owner received a warranty replacement or similar. Whatever the reason, the rollers would have to be repaired and the machine unlocked if it were ever to cut (Cricut?) again. Hooking the machine up to Cricut software showed that it was “deactivated”, so there was work to do.

The rollers were not a difficult replacement, but the hacking would take a little work. Examining the motherboard didn’t reveal any obvious EEPROMs, and the microcontroller was not one [xssfox] had the debugger to work with. Thus, attention turned to intercepting communications between the machine and the host PC over USB. This revealed the machine sending its serial number to the Cricut PC software in plain text with no checksums or encryption at all. Unlocking the machine was as easy as installing an RP2040 in between the Cricut Maker and the host PC. It was programmed to relay packets between the two and spoof the serial number in the process.

[xssfox] suspects a software-only solution may be possible, too, though hasn’t implemented one yet. We’ve featured her work before, too, like her efforts to spoof emergency traffic light preemption signals.

Self-Hosting Offline Websites

If there’s one thing that’s guaranteed in the tech world it’s that nothing is guaranteed. From AOL, Netscape, Yahoo, and MySpace, every tech empire seems to eventually fall to ruin. One method to reliably maintain information or online experiences that are lost to whims of computer users and markets is to backup, preserve, and host that information on one’s own computers, and the Kiwix project aims to help make offline backups of favorite websites.

The open-source tool started as a way for users to make their own offline backups of Wikipedia but eventually expanded into having the ability to backup many other sites as well. Wiki-type sites are generally the easiest, but it can also create backups of other sites like StackExchange so that when the Internet goes down or the site vanishes from the world, the information is preserved for use. There are plenty of guides online for setting up Kiwix as well, with it running easily on most Linux systems with or without the help of Docker, as well as versions available for Windows, Android, and Apple platforms.

Although the Kiwix software hosts the website backups, creating the backups needs to be done with another tool called Zimit to create the .zim files Kiwix uses. The Kiwix organization also hosts pre-downloaded .zim files of common websites so each user is not independently crawling Wikipedia on their own, a task that could take months on limited consumer hardware. As for what hardware to ultimately host it on, we might recommend an armageddon-proof machine like this one.

Running Zork On The Steam Controller

The Steam Controller is a device capable of many interesting feats. It’s intended to act simply as an input device, and yet, it can run games all on its own. As [Owen Feldman] has demonstrated, by having the Steam Controller play Zork.

[Owen] took quite an interesting route to get the there: he wrote a Rust program to emulate the Intel 8080 CPU and CP/M, as one does. This was ported to the Steam Controller, which emulates the CPU and memory on its own internal processor. I/O is streamed over USB, since the Steam Controller lacks a keyboard or screen. The CP/M disk lives in the controller, but the Zork disk data is streamed over USB as well.

If you’re wondering how [Owen] got all this running on the controller, he explains on his personal website. He used what appears to be an undocumented tool included with Steam that allows flashing firmware on the device. Helpfully, Valve also include the original firmware in the same folder, unsigned and only relying on a simple CRC checksum. [Owen] bricked his controller a couple times experimenting with this tool and loading his own firmware, but all came good in the end.

The Steam Controller is probably the oddest device to run CP/M for a while, but hey—it’s a neat party trick. Not much is going to top the auto-docking hack from a few months ago, though.

Continue reading “Running Zork On The Steam Controller”

Superconducting Temperature Record Set At Ambient Pressure

An interesting type of superconductors available to us today are the ones that achieve this property at room temperature, with only the small snag that they require crushing pressures that would render biological lifeforms into a very thin layer of molecules. What these however suggest is that something in these materials changes at these high pressures, and if we could retain that state upon releasing said pressure, we might be able to have our superconducting cake and eat it too.

This is effectively what researchers recently achieved, with a research article in PNAS Physics by [Liangzi Deng] et al. covering the pressure-quench protocol (PQP) that they used for this feat. There is also an associated easy-to-read press release by Argonne National Laboratory (ANL) as well as one by the University of Houston.

Target material was a cuprate, specifically HgBa2Ca2Cu3O8+δ, also known as the HBCCO series or Hg1223 for short. Hg1223 has been the subject of much research and experimentation since the 1990s, with it demonstrating a transition temperature (Tc) of 133 K (-140°C). With this quenching method – which sees the high pressures on the cooled sample suddenly released – this bumped the Tc up to 151 K, or -122°C.

While still a far cry from room temperature superconductors, managing to lock in these superconducting properties at an 18 K higher temperature using a straightforward procedure does raise the prospect of massively reducing the cooling needs for superconductors.

Samsung Printer Is The Next Frontier Of Minecraft Servers

While DOOM remains the undisputed champion of ‘game you play on every piece of hardware’ it seems that the role of ‘game you play on everything just because you can’ is slowly being shifted to Minecraft, as we have yet another Minecraft server somewhere Minecraft has no business being served– in this case, a Samsung Printer.

The hack actually requires opening up the printer to get at the debug ports to bang your way in via serial, but as any security expert will tell you, once the black hats have physical access to a machine, they own it. That isn’t to say it’s easy– [vimpo] had to dump the firmware and find an exploit. Since it’s 2026 [vimpo] tried to get an LLM to do all that hard work for him, and while it helped with identifying functions in the dump, ultimately the hacking still fell upon [vimpo]’s human intelligence, though not before burning through millions of tokens.  Having found a good old fashioned UDP overflow exploit, he’s gets control of the printer and puts an improved version of his lightweight Minecraft server, UCraft, on it.  Like the server, the exploit is also on GitHub but you’ll very likely need the exact same printer to get it to work: a Samsung C410W with firmware V3.00.02.20, DEC-15-2015. One important caveat is that while you can still use the printer as intended after this hack, you cannot do so while playing Minecraft: it crashes the server if you try. Good to know.

In case you’re wondering, yes, this is the same guy who got a Minecraft server running on a light-bulb, which arguably more impressive. Where he might mine and/or craft next is anybody’s guess. Somebody else already did the ESP32-C3, and while we suspect nothing will ever beat the 1960s Univac implementation for sheer impracticality, we’re willing to be surprised.

Continue reading “Samsung Printer Is The Next Frontier Of Minecraft Servers”

Homebrew 68K Machine Has A PCI Bus

The Peripheral Component Interconnect (PCI) bus was first introduced all the way back in 1992. It quickly became the standard way to interface add-on cards on the PC platform, supplanting earlier buses like ISA and various other oddball standards. You wouldn’t expect to see a PCI bus on a Motorola-based machine, but [maniek86]’s homebrew rig offers just that. 

That’s a lot of soldering.

This computer is a beautiful piece of homebrew engineering, constructed out of protoboard and loose wires rather than any fancy PCB. At the heart of the build lies a Motorola 68000 running at 10 MHz. It’s got 1 MB of SRAM, 4 KB of ROM, and a MC68681P acting as a UART, timer source, and I/O controller. Where things get special, though, is in the inclusion of a Xilinx Spartan II FPGA (XC2S100), which acts as a PCI bridge. It provides the machine with two 32-bit 5-volt PCI slots which are interrupt capable, albeit with no bus mastering. A XC95144XL CPLD also sits present to act as glue logic to help lace everything together.

[maniek86] does a great job of explaining exactly why the PCI bus was hard to implement, and how it was pulled off in the end. The guide also covers how the system was able to interface various cards, from a PCI serial expansion to a Cirrus VGA adapter. It’s all good stuff.

We’ve featured other work from [maniek86] before, too, like this brilliant 486-based single-board computer. Video after the break.

Continue reading “Homebrew 68K Machine Has A PCI Bus”

Foldable OLED Displays And The Bane Of Dust

Much like Apple’s once vaunted super-slim butterfly keyboard, today’s range of portable devices featuring flexible OLED displays – which can fold said display into a much smaller form factor – are a marvel of engineering.

The foldable phone after a dusty encounter. (Credit: iFixit, YouTube)
The foldable phone after a dusty encounter. (Credit: iFixit, YouTube)

Unfortunately engineering can only do so much against fundamental flaws. In the case of both these flexible OLEDs and butterfly keyboards the main issue is that of dust intrusion, with a recent teardown by [iFixit] going over the reasons for this.

As test subject we got a Galaxy Z Fold 8, as an example of a modern-day foldable smartphone-tablet hybrid. This phone has an IP48 rating, meaning that it’s water-resistant, but not dust-resistant for particles smaller than 1 mm. To test this, [iFixit] used UV-reactive dust particles, making sure that they got literally everywhere inside the phone’s hinge mechanism.

After this treatment, trying to fold the phone caused the hinge mechanism to make absolutely horrific crunching noises, confirming that it’s reached dust-under-butterfly-keycap levels of unusable. During the subsequent teardown a quick pass with the UV lamp showed that not much of the dust had penetrated into the two halves of the device at least, but the hinge mechanism wasn’t as lucky.

Getting to the hinge is sadly rather destructive, as it involves removing the flexible OLED. Once the hinge was exposed and subjected to UV light the spectacle was something to marvel at, as can be seen in the above screenshot. With the dust caking literally every part of the mechanism, it was little wonder that the hinge had ceased to work.

Although this was obviously an extreme case of dust exposure, and the average flexible OLED screen’s hinge won’t see nearly as much dust, one can’t help but feel slightly disconcerted at that crunching noise, knowing that it’s just one big dust exposure away.

Continue reading “Foldable OLED Displays And The Bane Of Dust”