Build A Barebones 68000

July 30, 2021 by 32 Comments

The 68000 chip was ubiquitous in the computing world well past its heyday in the 1980s. It was used as the basis for many PCs and video game consoles, and even in embedded microcontrollers. Now, one of its niche applications is learning about the internal functions of computers. 68000 builds are fairly common when building homebrew computers from scratch, but projects like these can be complicated and quickly get out of hand. This 68000 project, on the other hand, gets the job done with the absolute minimum of parts and really dives into the assembly language programming on these chips. (Google Translate from Spanish)

[osbox68] built this computer by first simulating its operation. Once he was satisfied with that, the next step was to actually build the device. Along with the MC68008 it only uses two other TTL chips, a respectable 32 kilobytes of ram, and additionally supports a serial port and an expansion bus. A few 74-series chips round out the build including a 74HC574 used for debugging support. With a custom PCB to tie everything together, it’s one of the most minimal 68000 builds we’ve seen that still includes everything needed to be completely functional.

After all, including the TTL and 74XX chips the entire circuit board only uses 10 integrated circuits and a few other passive elements for a completely functional retro computer. [osbox68] also includes complete schematics for building a PCB based on these chips to make construction that much easier. Of course, emulating an old microcontroller instead of using TTL components can save a lot of real estate on a PCB especially if you’re using something like an FPGA.

Fresh Paint Or Patina Of Ages, That’s The Antique Question

July 30, 2021 by 46 Comments

The world of antique furniture and the world of hackers rarely coincide, and perhaps the allure of the latest tech is greater for most of us than that of a Chipendale cabinet. But there are times when there are analagous situations in both worlds, so it’s worth taking a moment to consider something.

This late-17th-century dressing box would not be of such value or interest were a restoration to strip it of its patina. Daderot, CC0.
This late-17th-century dressing box would not be of such value or interest were a restoration to strip it of its patina. Daderot, CC0.

Antique furniture has survived for hundreds of years before being owned by today’s collectors. Along the way it picks up bumps and scrapes, wear, and even the occasional repair. Valuable pieces turn up all the time, having been discovered in dusty attics, cowsheds, basements, and all sorts of places where they may have been misused in ways that might horrify those who later pay big money for them. Thus there is a whole industry of craft workers in the field of furniture restoration whose speciality lies in turning the wreck of a piece of furniture into a valuable antique for the showroom.

The parallel in our community if you hadn’t already guessed, can be found in the world of retrocomputers. They are the antiques we prize, they come to us after being abused by kids and then left to languish in a box of junk somewhere. Their capacitors are leaking, their cases may be cracked or dirty, and they often possess the signature look of old ABS mouldings, their characteristic yellowing. This is caused by the gradual release of small quantities of bromine as the fire retardant contained within the plastic degrades under UV light, and causes considerable consternation among some retrocomputing enthusiasts. Considerable effort goes into mitigating it, with the favourite technique involving so-called Retr0bright recipes that use hydrogen peroxide to bleach away the colour.

Continue reading “Fresh Paint Or Patina Of Ages, That’s The Antique Question” →

Hackaday Podcast 129: Super Clever 3D Printing, Jigs And Registration Things, 90s Car Audio, And Smooth LED Fades

July 30, 2021 by 2 Comments

Hackaday editors Mike Szczys and Elliot Williams have found a critical mass of projects this week that wouldn’t be possible without 3D printers. There’s an absolutely astounding model roller coaster that is true to the mechanisms and physics of the original (and beholden to hours of sanding and painting). Adding sheet material to the printing process is a novel way to build durable hinges and foldable mechanisms. Elliot picks out not one, but two quadruped robot projects that leverage 3D-printed parts in interesting ways. And for the electronics geeks there’s a server rack stuffed with Raspberry Pi, and analog electronic wizardry to improve the resolution of the WS2811 LED controller. We wrap it all up with discussions of flying boats, and adding Bluetooth audio to old car head units.

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Direct download (60 MB or so.)

Places to follow Hackaday podcasts:

Continue reading “Hackaday Podcast 129: Super Clever 3D Printing, Jigs And Registration Things, 90s Car Audio, And Smooth LED Fades” →

Mobile Sauna For On-The-Go Relaxation

July 30, 2021 by 6 Comments

While it might be nice to imagine owning a cabin in the woods to escape from society, complete with an outdoor sauna to take in the scenic views of nature, most of us will be satisfied with the occasional vacation to a cabin like that. For those trips, or even for long-term camping trips, [Schitzu] and a group of friends thought it would be nice to be able to ensure access to a sauna. For that, they created this mobile, timber-framed sauna that he can tow behind his car.

The sauna is built out of a combination of spruce and Douglas fir, two types of lumber with weather-resistant properties. For an additional layer of protection, the frame was varnished after assembly. The walls are filled with baked cork for insulation, and heat is provided by a small wood-fired oven placed in the corner of the sauna with a stove pipe plumbed through the roof. Performance of the sauna shows good design too, as it can heat up quickly and performs well in all of the tests so far. The final touch on the mobile sauna was to finish the roof with some solar panels in order to gather some energy for long-term camping trips and also to ensure that the roof was protected from rain and weather.

The sauna is designed for two adults to sit in, but it will also accommodate a single person to lay down and sleep (presumably when not using it as a sauna), so the entire trailer actually makes a fairly capable mobile camper too. With the addition of a panoramic window, anyone can take in the sights as well as someone with their own permanently-located sauna could, which is a win in all of our books. If you’re looking for a mobile sauna that’s a little more discrete though, be sure to check out this one which is built in the back of a white panel van.

This Week In Security: Fail2RCE, TPM Sniffing, Fishy Leaks, And Decompiling

July 30, 2021 by 10 Comments

Fail2ban is a great tool for dynamically blocking IP addresses that show bad behavior, like making repeated login attempts. It was just announced that a vulnerability could allow an attacker to take over a machine by being blocked by Fail2ban. The problem is in the mail-whois action, where an email is sent to the administrator containing the whois information. Whois information is potentially attacker controlled data, and Fail2ban doesn’t properly sterilize the input before piping it into the mail binary. Mailutils has a feature that uses the tilde key as an escape sequence, allowing commands to be run while composing a message. Fail2ban doesn’t sanitize those tilde commands, so malicious whois data can trivially run commands on the system. Whois is one of the old-school unix protocols that runs in the clear, so a MItM attack makes this particularly easy. If you use Fail2ban, make sure to update to 0.10.7 or 0.11.3, or purge any use of mail-whois from your active configs. Continue reading “This Week In Security: Fail2RCE, TPM Sniffing, Fishy Leaks, And Decompiling” →

Streaming Video From A Mouse

July 30, 2021 by 21 Comments

The first optical mice had to be used on a specially printed mousepad with a printed grid that the four-quadrant infrared sensor could detect. Later, mice swapped the infrared sensor for an optoelectric module (essentially a tiny, very low-resolution camera) and a powerful image processing. [8051enthusiast] was lying in bed one day when they decided to crack the firmware in their gaming mouse and eventually start streaming frames from the camera inside.

Step one was to analyze the protocol between the mouse and the host machine. Booting up a Windows VM and Wireshark allowed him to capture all the control transfers to the USB controller. Since it was a “programmable” gaming mouse that allowed a user to set macros, [8051enthusiast] could use the control transfers that would normally query that macro that had been set to return the memory at an arbitrary location. A little bit of tinkering later, and he now had a dump of the firmware. Looking at the most abundant bytes, it seems to match a profile similar to the Intel 8051. In a fascinating blur of reverse engineering, he traced the main structure of the program back from the function that sets the LED colors for the scroll wheel (which is dependent on the current DPI setting). Unfortunately, the firmware prevented the same macro mechanism from writing to arbitrary locations.

Looking through the code, a good old buffer overflow exploit seemed possible, but it caused the system to reset via watchdog. So he took another approach, invoking recovery mode and loading an entirely new firmware on the device, which a set_report control transfer can invoke.

Next, he moved onto the ADNS-9800 optical sensor (pictured in the top image provided by JACK Enterprises), which had a large encrypted blob in the firmware. Some poking around and deduction lead to a guess that the optical sensor was another 8051 system. With some clever reasoning and sheer determination, [8051enthusiast] was able to crack the XOR stream cipher encryption with a program that showed him versions of the disassembled assembly and allowed him to pick the one that was the most likely. With the firmware decrypted, he was able to see the encryption code and confirm his deducted algorithm.

With the sensor now cracked open, it was onto the 30 x 30 240 fps video stream. The sensor communicates over SPI, and the USB controller has to bit-bang the connection as it doesn’t have the hardware. Putting two custom firmware images on with a few extra functions was easy enough, but the 7 fps was somewhat lacking. The first optimization was loop unrolling and removing some sleeps in the firmware, which bought it up to 34 fps. By measuring the cycle counts of individual instructions, he was able to find some alternatives such as a mov instead of a setb that took one less cycle. Going from a 17 cycle loop to an 11 cycle loop and some other optimizations gave him 54 fps. Not content to stop there, he modified the ADNS-9800 firmware to continuously sample rather than waiting for the USB controller to finish processing. While this yielded 100 fps, there was still more to do: image compression. At a whopping 230 fps, [8051enthusiast] decided to call it done.

However, there was one last thing he wanted to do: control the mouse with the video stream. Writing some image processing into his Python-based program that received the image files allowed him to use the mouse, however impractically.

All in all, it’s an incredible journey by [8051enthusiast], and we would highly recommend reading the whole journey yourself. This isn’t the first time he’s modified the firmware of 8051-based devices, such as modifying the firmware of the WiFi chipset in his laptop.

[Thanks to JACK Enterprises over at Tindie for the use of the image of an ADNS9000].

 

Here’s How To Sniff Out An LCD Protocol, But How Do You Look Up The Controller?

July 30, 2021 by 11 Comments

Nothing feels better than getting a salvaged component to do your bidding. But in the land of electronic displays, the process can quickly become a quagmire. For more complex displays, the secret incantation necessary just to get the things to turn on can be a non-starter. Today’s exercise targets a much simpler character display and has the added benefit of being able to sniff the data from a functioning radio unit.

When [Amen] upgraded his DAB radio he eyed the 16×2 character display for salvage. With three traces between the display and the controller it didn’t take long to trace out the two data lines using an oscilloscope. Turing on the scope’s decoding function verified his hunch that it was using I2C, and gave him plenty of data to work from. This included a device address, initialization string, and that each character was drawn on screen using two bytes on the data bus.

He says that some searching turned up the most likely hardware: a Winstar WO1602I-TFH- AT derived from an ST7032 controller. What we’re wondering is if there is a good resource for searching this kind of info? Our go-to is the LCD display and controller reference we covered here back in March. It’s a great resource, but turns up bupkis on this particular display. Are we relegated to using DuckDuckGo for initialization strings and hoping someone’s published a driver or a logic dump of these parts in the past, or is there a better way to go about this? Let us know in the comments!