This Week In Security: Twilio, PongoTV, And BootHole

July 31, 2020 by 5 Comments

Twilio, the cloud provider for all things telecom, had an embarrassing security fail a couple weeks ago. The problem was the Amazon S3 bucket that Twilio was using to host part of their public facing content. The bucket was configured for public read-write access. Anyone could use the Amazon S3 API to make changes to the files stored there.

The files in question were protected behind Cloudflare’s CDN, but there’s a catch to Cloudflare’s service. If you know the details of the service behind Cloudflare, it can often be interacted with directly. In many cases, knowing the IP address of the server being protected is enough to totally bypass Cloudflare altogether. In this case, the service behind the CDN is Amazon’s S3. Any changes made to the files there are picked up by the CDN.

Someone discovered the insecure bucket, and modified a Javascript file that is distributed as part of the Twilio JS SDK. That modification was initially described as “non-malicious”, but in the official incident report, Twilio states that the injected code is part of an ongoing magecart campaign carried out against misconfigured S3 buckets.
Continue reading “This Week In Security: Twilio, PongoTV, And BootHole” →

Trick From 1903 Makes An Old Monochrome TV Spit Some Colours

July 28, 2020 by 26 Comments

Its safe to say that colour television is taken for granted nowadays. Consumed by the modern marketing jargon of colour dynamic range, colour space accuracy and depth, it is easy to overlook the humble beginnings of image reproduction when simply reconstructing an image with the slightest hint of colour required some serious ingenuity and earned you a well deserved pat on the back!

[anfractuosus] revisited an old gem of a technique, first patented in 1903 and used it to successful make an old monochrome TV produce a colour image. The idea in essence, is actually similar to what cheap image sensors and LCDs still use today. Rather than relying on true RGB colour generation by individually integrating colour sources as AMOLED does, we take an easier route: Produce a simpler monochrome image where each colour pixel is physically represented by four monochrome sub-pixels, one for each colour component. Now light up each of the sub-pixels according to the colour information of your image and rely on an external colour filter array to combine and spit out the correct colours.

He first used some image processing to convert a standard colour video into the aforementioned monochrome sub-pixel representation. Next, a Bayer colour filter array was printed on some acetate sheets using an inkjet printer (the original inventors used potato starch!), which when overlaid on top of the monochrome monitor, magically result in colour output.

There are some problems associated with this technique, mainly to do with the difficulty in measuring the size of the TV pixels and then producing and perfectly aligning a filter sheet for it. You should check out how [anfractuosus] went about solving those issues.

So now you know a bit more about colour image generation, but how about colour TV transmission? Check out an earlier piece to learn more.

Continue reading “Trick From 1903 Makes An Old Monochrome TV Spit Some Colours” →

3D Printed ESP8266 TV Is A Blast From The Past

July 23, 2020 by 16 Comments

We’ve often said that one of the best applications for desktop 3D printing is the production of custom enclosures, but you certainly aren’t limited to an extruded version of the classic Radio Shack project box. As [Marcello Milone] shows with this very clever retro TV enclosure for the Wemos D1 Mini, 3D printing means your imagination is the only limit when it comes to how you want to package up your latest creation.

As nice as the printed parts are, it’s the little details that really sell the look. [Marcello] has bent a piece of copper wire into a circle to make a faux antenna with vintage flair, and while the ESP is connecting to the WiFi network, it even shows an old school TV test pattern on its 1.8″ TFT display.

In the video after the break you can see the device go through its startup routine, and while displaying the Hackaday Wrencher at boot might not be strictly on theme…we’ll allow it.

While you could certainly use this little enclosure for whatever ESP project you had in mind, [Marcello] says he’s building a distributed environmental monitoring network using HTU21D temperature and humidity sensors. It sounds like he’s still working on the software side of things though, so hopefully he posts an update when the functionality is fully realized.

Continue reading “3D Printed ESP8266 TV Is A Blast From The Past” →

Grey Gear: French TV Encryption, 1980s Style

June 25, 2020 by 38 Comments

Who among us didn’t spend some portion of their youth trying in vain to watch a scrambled premium cable TV channel or two? It’s a wonder we didn’t blow out our cones and rods watching those weird colors and wavy lines dance across the screen like a fever dream.

In the early days of national premium television in America, anyone who’d forked over the cash and erected a six-foot satellite dish in the backyard could tune in channels like HBO, Showtime, and the first 24-hour news network, CNN. Fed up with freeloaders, these channels banded together to encrypt their transmissions and force people to buy expensive de-scrambling boxes. On top of that, subscribers had to pay a monthly pittance to keep the de-scrambler working. Continue reading “Grey Gear: French TV Encryption, 1980s Style” →

DIY TV-B-Gone Is A-OK

June 25, 2020 by 49 Comments

Where won’t they put a TV these days? We’ve even seen one creeping behind semi-transparent mirror film in the ladies’ room of a sports bar, though that one didn’t last long. Up until that moment, we had never wished so hard for a TV-B-Gone, especially one as small and powerful as this DIY version by [Shane].

The best thing about [Shane]’s DIY TV-B-Gone is the strength of signal, though the size is nothing to sneeze at. That’s a 10-watt array or IR LEDs out of a security camera, and you can see how much brighter it is than a single IR LED in the video after the break.

Packed inside this minty enclosure is an Arduino Nano, which holds all the TV power-off codes known to hackers and fires them off in quick succession. [Shane] salvaged a MOSFET from an electronic speed controller to drive that LED array, and there’s a voltage booster board to raise the 3.7V lithium battery to 5V. [Shane] hasn’t really had the chance to test this out in public what with the global pandemic and all, but was able to verify a working distance of 40 feet inside the house.

Don’t care for such a raw look? Hide your zapper inside a toy, like this sonic screwdriver version.

Continue reading “DIY TV-B-Gone Is A-OK” →

Arduino Music Box Turns Stuffed Animal Into TV Personality

June 11, 2020 by 1 Comment

Childlike imagination is a wonderful thing. The ability to give life to inanimate objects and to pretend how they’re living their own life is precious, and not for nothing a successful story line in many movies. With the harsh facts or adulthood and reality coming for all of us eventually, it’s nice to see when some people never fully lose that as they get older. Even better when two find each other in life, like [er13k] and his girlfriend, who enjoy to joke about all the mischief their giant dog-shaped plush toy [Tobias] might secretly get into in their absence. The good thing about growing up on the other hand is the advanced technical opportunities at one’s disposal, which gave the imagined personality an actual face, and have it live inside an old CRT screen.

The initial idea was to just build a little music box as a gift, which beeps out [er13k]’s girlfriend’s favorite song with an Arduino on a speaker he salvaged from an old radio. But as things tend to go when you’re on a roll, he decided to make the gift even more personal. The result is still that music box, built in a 3D-printed case with a little piano that lights up the notes it plays, but in addition the Arduino now also displays a cartoon version of [Tobias] through composite video on an old TV. You can see for yourself in the video after the break how he goes through the day gifting flowers and drawings, and ponders about work and alternative career plans — adult problems are clearly universal.

Sure, the music box sound is a bit one-dimensional, but it’s nevertheless a highly thoughtful gift idea that triumphs with a peak personalization factor. If [er13k] ever wants to change the sound though, maybe there’s some inspiration in this drum machine we’ve seen just a few weeks ago, or this pocket sampler.

Continue reading “Arduino Music Box Turns Stuffed Animal Into TV Personality” →

Relive The Glory Days Of Cable TV With This Retro Weather Feed

February 21, 2020 by 43 Comments

This may surprise younger readers, but there was once a time when the reality programming on The Weather Channel was simply, you know, weather. It used to be no more than a ten-minute wait to “Local on the Eights”, with simple text crawls of local conditions and forecasts that looked like they were taken straight from the National Weather Service feed. Those were the days, and sadly they seem to be gone forever.

Or perhaps not, if this retro weather channel feed has anything to say about it. It’s the product of [probnot] and consists of a simple Python program that runs on a Raspberry Pi. Being from Winnipeg, [probnot] is tapping into Environment Canada for local weather data, but it should be easy enough to modify to use your local weather provider’s API. The screen is full of retro goodness, from the simple color scheme to the blocky white text; the digital clock and local news crawl at the bottom complete the old school experience. It doesn’t appear that the code supports the period-correct smooth jazz saxophone, but that too should be a simple modification.

All jibing aside, this would be a welcome addition to the morning routine. And for the full retro ride, why not consider putting it in an old TV case?

Continue reading “Relive The Glory Days Of Cable TV With This Retro Weather Feed” →