Just What Have We Become?

July 16, 2021 by 69 Comments

The world of open source software is one that often sees disputes between developers, some of which spawn lifelong schisms between devotees of different forks, and others mere storms in a teacup that are settled over a few beers. There are a couple of stories of late though that seem to show the worst in the online world, and which all of us should take a moment to think about.

Many of you may have heard two weeks ago of the passing of [near], the software developer and game translator whose bsnes emulator for the Super Nintendo was the go-to platform for retro Nintendo enthusiasts intent on the pursuit of the closest possible match to the original without possessing real Nintendo hardware. The details of their passing are particularly distressing, in that they committed suicide after numerous attacks over several years from users of Kiwi Farms, a website notorious for the worst kinds of trolling.

Hot on the heels of that distressing story comes news that [Cookie Engineer] is stepping down as maintainer of the project that’s now called Tenacity, a fork of the popular but now-controversial Audacity audio editor. They are doing so after being targeted by users of 4chan, the most well-known of online trolling websites, following an ill-advised Simpsons joke in a naming poll for the software. [Cookie Engineer] alleges that the harassers knocked on doors and windows where they live and a real-world knife attack followed.

Nobody deserves to be hounded to death, to suffer the sort of sustained harassment that [near] encountered, or to be confronted with knife-wielding strangers merely because they have stuck their head above the parapet as an open-source developer. There are no excuses to be made, no justifications for this.

All of us who read Hackaday are likely to be regular users of open-source software, many of us will have used bsnes and may yet use Tenacity, but we probably rarely stop for a moment to think of the real people behind them. Countless hours from innumerable highly-skilled people are what makes the open-source world tick, and aside from the immeasurable sadness of suicide or the horror of a knife attack there can only be harm done to open source software as a whole if to be a prominent developer or maintainer is to expose yourself to this.

The Internet will always have raucous communities at its margins and that’s something which still contributes to its unique culture, but when it jumps off the webpage and into damaging real people then perhaps it has become a monster. As a community we can do so much better, and we shouldn’t be prepared to accept anybody who thinks otherwise among our ranks.

We’d like to remind our readers that help exists for those who have reached the point of considering suicide, and that should you suffer from mental health problems you are not alone in this. Everybody, take care of yourselves, and keep an eye out for each other.

Hackaday Podcast 127: Whippletree Clamps, Sniffing Your Stomach Radio, Multimeter Hum Fix, And C64 Demo; No C64

July 16, 2021 by No comments

Hackaday editors Mike Szczys and Elliot Williams help you get caught up on a week of wonder hacks. We don’t remember seeing a floppy drive headline the demoscene, but sure enough, there’s a C64 demo that performs after the computer is disconnected. What causes bench tools to have unreliable measurements? Sometimes a poor crystal choice lets AC ruin the party. We dive into the ongoing saga of the Audacity open source project’s change of ownership, and talk about generator exciter circuits — specifically their role in starting grid-scale generators from shutdown.

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Direct download (60 MB or so.)

Places to follow Hackaday podcasts:

Continue reading “Hackaday Podcast 127: Whippletree Clamps, Sniffing Your Stomach Radio, Multimeter Hum Fix, And C64 Demo; No C64” →

Inside A 20-Watt Traveling Wave Tube Amplifier From Apollo

July 16, 2021 by 21 Comments

When the Apollo astronauts made their way to the Moon, their communication equipment had a transmission power of a mere 20 W, which the sensitive receivers back on Earth managed to pick up. But this isn’t just any amplifier, it’s a Traveling Wave Tube amplifier (TWT), as [Ken Shirriff] explains in a recent article.

The most fascinating thing about these TWTs isn’t just their role during the Apollo missions, but the fact that even today this type of vacuum tube is still among the most efficient and compact types of RF amplifier. As a result today’s high-tech satellites still commonly feature these devices.

As always, [Ken] entertains and enlightens us with how the TWT and the rest of the amplifier system worked.

 

This Week In Security: REvil Goes Dark, Kaseya Cleanup, Android Updates, And Terrible Firmware

July 16, 2021 by 16 Comments

The funniest thing happened to REvil this week. Their online presence seems to have disappeared.
Their Tor sites as well as conventional sites all went down about the same time Tuesday morning, leading to speculation that they may have been hit by a law enforcement operation. This comes on the heels of a renewed push by the US for other countries, notably Russia, to crack down on ransomware groups operating within their borders. If it is a coordinated takedown, it’s likely a response to the extremely widespread 4th of July campaign launched via the Kaseya platform. Seriously, if you’re going to do something that risks ticking off Americans, don’t do it on the day we’re celebrating national pride by blowing stuff up.

Speaking of Kaseya, they have finished their analysis, and published a guide for safely powering on their VSA on-premise hardware. Now that the fixes are available, more information about the attack itself is being released. Truesec researchers have been following this story in real time, and even provided information about the attack back to Kaseya, based on their observations. Their analysis shows that 4 separate vulnerabilities were involved in the attack. First up is an authentication bypass. It takes advantage of code that looks something like this: Continue reading “This Week In Security: REvil Goes Dark, Kaseya Cleanup, Android Updates, And Terrible Firmware” →

Cracking A GBA Game With NSA Tools

July 16, 2021 by 1 Comment

[Wrongbaud] is a huge fan of Japanese kaiju-style movies, including Godzilla and King Kong. In honor of the release of a new movie, he has decided to tackle a few projects to see how both of these monsters can hold their own against other legendary monsters. In this project, he is using Ghidra, named after another legendary kaiju, against the password system of the Game Boy Advance game Kong: King of Atlantis.

Since this project is a how-to, [wrongbaud] shows how to search Ghidra for existing scripts that might already have the functionality needed for GBA analysis and emulation. When not, he also illustrates how to write scripts to automate code analysis, and then moves on to cracking the level password system on the game.

The key to finding the passwords on this game was looking for values in the code that were seven characters long, and after some searching [wrongbaud] is finally able to zero in on the code responsible for handling passwords. Once found a brute force method was automated to find viable passwords, and from there the game was officially pwned. For anyone interested in security, reverse engineering, or just the way that binaries work, it’s quite the detailed breakdown. Of course, it’s not the only example we have seen that uses this software tool to extract passwords.

Repair Hack Saves Tesla Owner From Massive Bill

July 16, 2021 by 74 Comments

As expensive as a new car is, it almost seems like a loss leader now to get you locked into exorbitantly expensive repairs at the dealership’s service department. That’s the reason a lot of us still try to do as much of the maintenance and repairs on our cars as possible — it’s just too darn expensive to pay someone else to do it.

Case in point: this story about a hapless Tesla owner who faced a massive repair bill on his brand new car. [Donald]’s tale of woe began when he hit some road debris with his two-wheel-drive Model 3. The object hit penetrated the plastic shield over the front of the battery pack, striking a fitting in the low-pressure battery cooling plumbing. The plastic fitting cracked, causing a leak that obviously needed repair. The authorized Tesla service center gave him the bad news: that he needed a new battery pack, at a cost of $16,000. Through a series of oversights, [Donald]’s comprehensive insurance on the car had lapsed, so he was looking at funding the repair, approximately half the cost of a new Model 3, out of pocket.

Luckily, he got in touch with [Rich Benoit] of The Electrified Garage, one of the few independent garages doing Tesla repairs and customizations. The video below is queued up to the part where they actually do the repair, which is ridiculously simple. After cutting off the remains of the broken fitting with a utility knife, [Rich]’s tech was able to cut a thread in both the fitting and the battery pack, and attach them together with a brass nipple from the plumbing section of the local home store. The total bill for the repair was $700, which still seems steep to us, but a far cry from what it could have been.

Hats off to [Rich] and his crew for finding a cost-effective workaround for this issue. And if you think you’ve seen his EV repairs before, you’re right. Of course, some repairs are more successful than others.

Continue reading “Repair Hack Saves Tesla Owner From Massive Bill” →

Analog Camera Goes Digital

July 15, 2021 by 33 Comments

The digital camera revolution swept through the world in the early 2000s, and aside from some unique situations and a handful of artists still using film, almost everyone has switched over to digital since then. Unfortunately that means that there’s a lot of high quality film cameras in the world that are gathering dust, but with a few pieces of equipment it’s possible to convert them to digital and get some more use out of them.

[befinitiv]’s latest project handles this conversion by swapping in a Raspberry Pi Zero where the film cartridge would otherwise be inserted into the camera. The Pi is attached to a 3D-printed case which mimics the shape of the film, and also houses a Pi camera right in front of the location where the film would be exposed. By removing the Pi camera’s lens, this new setup is able to take advantage of the analog camera’s optics instead and is able to capture images of relatively decent quality.

There are some perks of using this setup as well, namely that video can be broadcast to this phone over a wireless connection to a computer via the Raspberry Pi. It’s a pretty interesting build with excellent results for a remarkably low price tag, and it would be pretty straightforward to interface the camera’s shutter and other control dials into the Raspberry Pi to further replicate the action of an old film camera. And, if you enjoy [befinitiv]’s projects of bringing old tech into the modern world, be sure to check out his 80s-era DOS laptop which is able to run a modern Linux installation.

Continue reading “Analog Camera Goes Digital” →