The Subway Never Sounded So Good

[youtube=http://www.youtube.com/watch?v=ivg56TX9kWI]

Reader [Philippe] tipped us off about this video showing a set of subway steps being turned into a piano keyboard (english translation). The creators wanted to make taking the stairs rather than riding the escalator a bit more fun. They added pressure sensors to each step, then covered them with white and black keys to resemble a keyboard. When a passenger puts their weight on a step, the corresponding pitch is played out loud.

We may have lied in the title as this doesn’t really compare to hearing Josh Bell play for pocket change at your train stop. But coming across this setup on an otherwise mundane commute would really brighten up our day.

MBTA Drops Lawsuit Against MIT Subway Hackers

The Massachusetts Bay Transit Authority (MBTA) has dropped its federal case against three MIT researchers, “the subway hackers”. This happened in October and now the EFF brings news that the students will be working with the MBTA to improve their system. The overall goal is to raise security while keeping expenses minimal.

This whole mess started in August when a gag order was issued against the students’ presentation at Defcon. It’s a shame no one ever saw it because it covers a lot of interesting ground. A PDF of the banned slides is still online. They performed several attacks against both the subway’s fare system and physical security. Our favorites by far were using GNU Radio to sniff the RFID card’s transaction and bruteforcing Mifare Classic with an FPGA.

Subway Hacker Speaks


Popular Mechanics has an interview with [Zach Anderson], one of the MIT hackers that was temporarily gagged by the MBTA. The interview is essentially a timeline of the events that led up to the Defcon talk cancellation. [Zach] pointed out a great article by The Tech that covers the vulnerabilities. The mag stripe cards can be easily cloned. The students we’re also able to increase the value of the card by brute forcing the checksum. There are only 64 possible checksum values, so they made a card for each one. It’s not graceful, but it works. The card values aren’t encrypted and there isn’t an auditing system to check what values should be on the card either. The RFID cards use Mifare classic, which we know is broken. It was NXP, Mifare’s manufacturer, that tipped off the MBTA on the actual presentation.

The Hobbes OS/2 Archive Will Shut Down In April

The Hobbes OS/2 Archive is a large collection of OS/2 software that has been publicly available for many years, even as OS/2 itself has mostly faded into obscurity. Yet now it would appear that the entity behind the Hobbes OS/2 Archive, the Information & Communication Technologies department at the New Mexico State University, has decided to call it quits — with the site going permanently offline on April 15th, 2024.

Fortunately, from a cursory glance around the comment sections over at Hacker News and other places, it seems that backup efforts have already been made, and the preservation of the archive’s contents should be secure at this point in time. Regardless, it is always a shame to lose such a central repository, especially since IBM’s OS/2 operating system is still anything but dead. Whether for hobbyist, industrial or commercial use, there is still a vibrant community around today, as we noted in 2019 already in relation to the NYC’s subway system.

Beyond downloaded copies and boxed CDs bought on EBay, you can even get a modernized version of OS/2 called ArcaOS, which even comes with commercial support. Whatever the fate is of the Hobbes OS/2 Archive’s data, we hope it finds a loving new home somewhere.

Books You Should Read: David Macaulay’s Architecture Series

For a lot of us, there’s a bright line separating the books we enjoyed as children from the “real” books of our more mature years. We all eventually age out of the thin, brightly illustrated picture books we enjoyed in our youth, replacing them with thicker, wordier volumes with fewer and fewer illustrations, until they become so dense with information that footnotes and appendices are needed to convey all the information, and a well-written index is a vital necessity to make use of any of it.

Such books seem like a lot less fun than kids’ books, and they probably are, but most of us adjust to the change and accept the fact that the children’s section of the library doesn’t hold much that’ll interest us anymore. But not all the books that get a “JUV” label on their spines are created equal. Some are far more than picture books, even if the pictures are the main attraction. The books of British-born American author David Macaulay come to mind, particularly the books comprising his Architecture Series.

Macaulay’s books were enormously influential in developing my engineering sensibilities, and are still a pleasure to thumb through these many years later. I still learn something about the history of construction and engineering when I pull one of these books off the shelf, which makes them Books You Should Read.

Continue reading “Books You Should Read: David Macaulay’s Architecture Series”

Modded See ‘N Say Teaches The Sounds Of City Life

The Fisher-Price See ‘n Say was introduced back in 1964, and since then has helped teach countless children the different sounds made by farm animals. But what about our urban youth? If they’re going to navigate a concrete jungle, why not prepare them to identify the sound of a jackhammer or the chime that plays before an announcement goes out over the subway’s PA system?

That’s the idea behind this hacked See ‘n Say [John Park] put together for Adafruit. Now we should note up front that no vintage toys were sacrificed during the production of this gadget — it seems Fisher-Price (predictably) dropped the tiny record player these toys used to use for a cheap electronic board sometime in the 90s. A quick check with everyone’s favorite A-to-Z megacorp shows you can pick up one of these new-school models for around $25 USD.

The modern electronic version of the toy is easy to mod.

Cracking open the electronic version of the See ‘n Say reveals a circular PCB with a series of membrane buttons that are pressed by the mechanics of the spinning pointer. As it so happens, there are handy test points next to each of these buttons, which makes it simple to wire up to a microcontroller.

In this case, it’s Adafruit’s KB2040, which is connected to a MAX98357A amplifier board over I2S. A small boost converter module is used to wring 5 volts out of the toy’s pair of AA batteries. The original speaker is repurposed, though [John] adds a physical power switch to keep the boost converter from flattening the alkaline batteries when not in use.

On the software side, all you’ve got to do is load the MCU with your sounds and write a bit of code that associates them with the button being pressed on the PCB. [John] gets his city sounds from Freesound, a community-maintained database of Creative Commons Licensed sounds, and provides the CircuitPython code necessary to tie everything together.

The last step is the artwork. For this project, [Brian Kesinger] provided some swanky vintage-looking imagery that perfectly fits the See ‘n Say style. The art is available under the NonCommercial-ShareAlike Creative Commons license, so you’re free to use it in your own version. Though naturally, that assumes you’ve decided to use the same sounds as [John] — the beauty of this project is that you could easily load it up with whatever sounds you’d like Hacker Junior to learn. Possibly a well-known Australian YouTuber?

If anyone feels inclined to build a Hackaday-themed See ‘n Say based on this project, we’ve love to see it.

Continue reading “Modded See ‘N Say Teaches The Sounds Of City Life”

IoT Archaeology Leads To API Resurrection

What happens when someone’s personal project is turned into a startup which becomes something of a publicity darling, then collapses with very little product shipped and takes all its customers’ money with it?

That’s the subject of a blog post from [Kevin Chung], who investigated the legacy of NYCTrainSign, a company whose product was an LED NYC subway sign and which has become a meme byword for a startup scam. Along the way he found himself reverse engineering its API, and eventually even purchasing the expired domain name to resurrect the API for any NYCTrainSigns that may still be out there.

Securing a second-hand NYCTrainSign, he dismantled it to see what made it tick. Inside the handmade wooden case was an array of LED panels, driven by a Raspberry Pi 3 and an Adafruit LED panel HAT. This gave pause for thought, as the component choice gives rise to a very high BoM cost which was unsustainable given their habit of steep discounts.

The software proves straightforward enough to reverse engineer, and since the original domain was for sale he bought it and set up a replacement API. Do you have one of the few signs that made it to customers? Now you can run it again.

The rest of the piece tells a tale that will be familiar to startup veterans: one of far too much marketing, too many bosses, and too little engineering to create a viable product. The founders remain tight-lipped about what happened and where the money went, but since there are few more efficient money pits than a badly-run startup, it’s more likely that ill-advised spending is to blame than someone running off with suitcases of cash.

If you’d like a public transit sign without the dodgy start-up, we’ve got you covered.