Ambience Lamp Ripples Like Water

After the year humanity has endured, we could all use a little more relaxation in our lives. This atmosphere lamp is just the thing to set a relaxing ambience for work, studying, or hanging out. Just touch the surface and the light ripples to life, resembling the concentric circles that form on the surface of still water when it is touched. When the light settles, it looks like an inviting pool that’s ready for a nighttime swim.

There aren’t really any surprises inside — the lamp is operated via capsense by touching the center of the top. Three NeoPixel rings and an RGB LED strip provide the lighting, and an Arduino UNO runs the show. [Qttting_F] used an inexpensive ceramic bowl with a piece of acrylic for a lid, but this could just as easily be printed in white PLA or something. Check it out in action after the break.

Ambience is nice, but sometimes you need something more functional. Those types of lamps can be printed, too.

Continue reading “Ambience Lamp Ripples Like Water”

Cupcake Machine Makes Tasty, If Weird, Creations

Baking cupcakes is a fun pastime, and one which we imagine many people took up in this year of quarantine and lockdown. However, anything a human can do, a machine can certainly make an attempt at, as [Skyentific] shows with this roboticized cupcake machine.

The build will be familiar to anyone who has worked with 3D printers or DIY CNC machines before. A series of stepper motors move a carriage carrying a regulation-sized patty pan. This is filled with dough from a tube, squirted out by a modified electric caulking gun. The carriage then transports it to a small microwave chamber of custom construction. After a minute or so of cooking, it’s then removed, and topping is applied from a further two caulking guns. An Arduino is in charge of the operation, running the show with some stepper drivers, limit switches, and a bank of relays.

The final product isn’t the prettiest cupcake we’ve ever seen, but it’s perfectly edible. We can imagine with some small modifications the device could probably cook batches of four at a time without too much trouble. We’ve seen other baking robots before, too. Video after the break.

Continue reading “Cupcake Machine Makes Tasty, If Weird, Creations”

Remoticon Video: The Mechanics Of Finite Element Analysis

Hardware hacking can be extremely multidisciplinary. If you only know bits and bytes, but not solder and electrons, you’re limited in what you can build. The same is true for mechanical design, where the forces of stress and strain suddenly apply to your project and the pile of code and PCBs comes crashing to the ground.

In the first half of his workshop, Naman Pushp walks you through some of the important first concepts in mechanical engineering — how to think about the forces in the world that act on physical objects. And he brings along a great range of home-built Jugaad props that include a gravity-defying tensegrity string sculpture and some fancy origami that help hammer the topics home.

In the second half of the workshop, Naman takes these concepts into computer simulation, and gives us good insight into the way that finite-element analysis simulation packages model these same forces on tiny chunks of your project’s geometry to see if it’ll hold up under real world load. The software he uses isn’t free by any definition — it’s not even cheap unless you have a student license — but it’s nonetheless illuminating to watch him work through the flow of roughly designing an object, putting simulated stresses and strains on it, and interpreting the results. If you’ve never used FEA tools before, or are looking for a compressed introduction to first-semester mechanical engineering, this talk might be right up your alley. Continue reading “Remoticon Video: The Mechanics Of Finite Element Analysis”

This Week In Security: Deeper Dive Into SolarWinds, Bouncy Castle, And Docker Images

Merry Christmas and happy holidays! I took Christmas day off from writing the security roundup, coming in a day early with this week’s installment, dodging New year’s day. The SolarWinds story has continued to dominate the news, so lets dive into it a bit deeper.

Microsoft has published their analysis of Solorigate, and the details are interesting. The added code was carefully written to blend in with the rest of the code, using the name OrionImprovementBusinessLayer.Initialize, which sounds like a perfectly boring-yet-legitimate function. The actual backdoor is obfuscated using zip compression and base64 encoding.

Once this bootstrap code begins, it runs a series of checks before actually doing anything malicious. It waits 2 weeks after installation to do anything, and then checks the system domain name for any indication it’s running in a test environment. It then checks for certain security applications, like Wireshark, and refuses to run if they are detected. This series of checks all seem to be an effort to avoid detection, and to only run in a deployed environment. Even the Command and Control URL that the backdoor uses is constructed to appear benign. Beyond this, it seems that the malware simply waited for instructions, and didn’t take any automated actions. All the attacks were performed manually.

Continue reading “This Week In Security: Deeper Dive Into SolarWinds, Bouncy Castle, And Docker Images”

Amazon Halo Teardown Is Supremely Thorough

We rarely see teardowns this detailed. [txyzinfo] wanted to know what hardware was under the hood, and did an amazing Amazon Halo Teardown.

Sometime around the middle of 2020, Amazon jumped on to the health and fitness tracker space with the introduction of the Halo — a $100 device with an add on $4 monthly subscription service if you wanted additional features, which Amazon calls “labs”, many of which are third-party services. The device does not have any display at all, and any metrics that need to be displayed (heart rate, steps, calories, etc.) show up on the Halo phone app. Halo’s focus is more on health, rather than fitness. It helps monitor your active and sleep states, keeps track of body fat, and reports your emotional state.

We won’t delve much in to the pros and cons of the device, other than mention two features which have the potential to creep out most folks. The device has a pair of microphones, which listen to the “tone” of your voice and report on your emotional state. The other is its use of your phone via the companion app, to take photos of you, preferably dressed in your undergarments. Your front, back and side photos get uploaded to Amazon servers, get converted to a 3D model, and then downloaded back to your phone. Amazon mentions that the photos are never retained and deleted from their servers once your 3D model is transferred back to the phone. Amazon’s ML algorithms then calculate your body fat percentage. More worryingly, the app offers a slider which you can move to see how you will “look” if you have higher or lower body fat percentages.

Fortunately for us hardware hacker types, [txyzinfo] wanted to unlock all the secrets Amazon poured into this design. Even if the device in particular does not interest you, the techniques he uses are very educational and will prove a useful addition to your skills. The device does not have any external fasteners, with the back cover being held together with glue. [txyzinfo] starts off by applying a solvent around the back cover to soften the glue, then works with his spudger to pry it open. The back cover appears to have an antenna with touch-contact terminations without a connector. The main body holds the rest of the electronics, and can be easily removed by unscrewing the four corner screws. Using a combination of solvent to soften the glue at various points, and snips to cut off retaining plastic tabs, he manages to untangle the hybrid rigid-flex PCB assembly from its plastic-metal clam-shell.

He uses a hot-air blower to cleanly separate the flex PCB parts attached to the rigid PCB. With all the flex pieces removed, he is left with the main part of the device — the rigid PCB with most parts potted under a metal shield filled with what appears to be a soft, grey compound. At this point, we are not sure if the potting compound is for heat dissipation, or just to obfuscate reverse engineering. His next action gives us a severe case of the heebie jeebies, as he clamps the PCB to a milling machine, and mills away the sides of the metal shield. Next, he heats the whole assembly with the hot air gun to melt all the solder, applying some generous amounts of flux, using the spudger to pull apart the PCB from the components embedded in the potting compound. Check out the video after the break to see his tear down techniques in action.

His plan was to identify as many parts as he could, but he wasn’t very successful, and managed to identify just a few — the two MEMS microphones, two temperature sensors and the LED driver on the flex PCB, and the photo-diodes, 6-axis IMU, battery charger and flash memory on the main board. The board has an uncommon 5-layer stack up, with the centre layer being ground. PCB de-layering is a time consuming process and requires a lot of patience, but in the end, he was able to get a pretty good result. He found some oddities in the track layout and was able to identify some of the more common connections to the I2C bus and between the micro-controller and its memory. He also located several test points which seem promising for a second round of investigations. Sometime in the future, he plans to get another Halo and have a go at it using the JTAGulator and GoodFET.

Tear downs are a favourite for all hackers, as is evident by the regularity with which we keep seeing them. If this one hasn’t whetted your appetite, then check out this other Fitness Tracker Teardown which is a lesson in Design for Manufacture.

Continue reading “Amazon Halo Teardown Is Supremely Thorough”

Still Working After All These Years: The Voyager Plasma Wave Subsystem

NASA is always keen to highlight the space agency’s many successes, and rightly so — those who pay for these expensive projects have a right to know what they’re getting for their money. And so the news was recently sprinkled with stories of the discovery of electron bursts beyond the edge of our solar system, caused by shock waves from coronal mass ejection (CME) from our Sun reflecting and accelerating electrons in interstellar plasmas. It’s a novel mechanism and an exciting discovery that changes a lot of assumptions about what happens out in the lonely space outside of the Sun’s influence.

The recent discovery is impressive in its own right, but it’s even more stunning when you dig into the details of how it was made: by the 43-year-old Voyager spacecraft, each now about 17 light-hours away from Earth, and each carrying an instrument so simple and efficient that they’re still working all after this time — and which very nearly were left out of the mission’s science payload.

Continue reading “Still Working After All These Years: The Voyager Plasma Wave Subsystem”

A Novel Micro Desktop Display For Your Raspberry Pi

Since its debut back in 2012 there have been a variety of inventive displays used with the Raspberry Pi. Perhaps you remember the repurposed Motorola phone docks, or you have one of those little displays that plugs into the expansion port. Inevitably the smaller options become disappointing as desktop displays, because while the advert triumphantly shows them sporting a Raspberry Pi OS desktop the reality is almost unusable. Until now.

Along comes [igbit] with a solution in the form of a little SPI display with a different approach to displaying a desktop. Instead of displaying a matchbox-sized desktop over the whole screen it divides into two halves. At the top is a representation of the desktop, while below it is a close-up on the area around the mouse pointer.

Unexpectedly its mode of operation is very accessible to the non-Linux guru, because it works through a Python script that takes screenshots of both areas and passes them as a composite to the display. An area the size of the magnified window is drawn around the mouse pointer, allowing it to be easily located on the tiny desktop. It relies on the main display being pushed to the HDMI output, so if the Pi is otherwise headless then its configuration has to be such that it forces HDMI use. The result isn’t something that would help you with the more demanding desktop tasks, but it provides a neat solution to being able to use a Pi desktop on a tiny screen.

Of course, in a pinch you can always use your mobile phone.