Hands-On: The Pandemic DEF CON Badge Is An Audio Cassette

July 24, 2020 by Mike Szczys 29 Comments

My DEF CON Safe Mode badge just arrived in the mail this afternoon. The Vegas-based conference which normally hosts around 30,000 attendees every year has moved online in response to the global pandemic, and the virtual event spins up August 6-9. Known for creative badges, North America’s most well-known infosec con has a tick-tock cycle that alternates electronic and non-electronic badges from year to year. During this off-year, the badge is an obscure deprecated media: the audio cassette.

This choice harkens back to the DEF CON 23 badge which was an vinyl record — I have the same problem I did back in 2015… I lack access to playback this archaic medium. Luckily [Grifter] pointed everyone to a dump of the audio contents over at Internet Archive, although knowing how competitive the badge hacking for DEF CON is, I’m skeptical about the reliability of these files. Your best bet is to pull the dust cover off your ’88 Camry and let your own cassette roll in the tape deck. I also wonder if there are different versions of the tape.

But enough speculation, let’s look at what physically comes with the DEF CON 28 badge.

Continue reading “Hands-On: The Pandemic DEF CON Badge Is An Audio Cassette” →

RGB Minecraft Sign Isn’t Just For Looks

July 24, 2020 by Tom Nardi No comments

This laser cut and LED illuminated version of the Minecraft logo created by [Geeksmithing] looks good enough to occupy a place of honor on any gamer’s shelf. But it’s not just decoration: it can also notify you about your Minecraft’s server status and tell you when players are online by way of its addressable LEDs.

In the first half of the video after the break, [Geeksmithing] shows how the logo itself was built by cutting out pieces of white and black acrylic on his laser cutter. When stacked up together, it creates an impressive 3D effect but also isolates each letter. With carefully aligned rows of RGB LEDs behind the stack, each individual letter can be lit in its own color (or not at all) without the light bleeding into either side.

Once he had a way of lighting up each letter individually, it was just a matter of writing some code for the Raspberry Pi that can do something useful with them. Notifying him when the server goes down is easy enough, just blink them all red. But the code [Geeksmithing] came up with also associates each letter with one of the friends he plays with, and lights them up when they go online. So at a glance he can not only tell how many friends are already in the game, but which ones they are. Naturally this means the display can only show the status of nine friends…but hey, that’s more than we have anyway.

We’ve been seeing people connect the real world to Minecraft in weird and wonderful ways for years now, and it doesn’t seem like there’s any sign of things slowing down. While we recognize the game isn’t for everyone, but you’ve got to respect the incredible creativity it’s inspired in young and old players alike.

Continue reading “RGB Minecraft Sign Isn’t Just For Looks” →

Liquid Air Energy Storage: A Power Grid Battery Using Regular Old Ambient Air

July 24, 2020 by Kristina Panos 83 Comments

When you think of renewable energy, what comes to mind? We’d venture to guess that wind and solar are probably near the top of the list. And yes, wind and solar are great as long as the winds are favorable and the sun is shining. But what about all those short and bleak winter days? Rainy days? Night time?

Render of a Highview LAES plant. The air is cleaned, liquefied in the tower, and stored in the white tanks. The blue tanks hold waste cold which is reused in the liquefaction process. Image via Highview Power

Unfavorable conditions mean that storage is an important part of any viable solution that uses renewable energy. Either the energy itself has to be stored, or else the means to produce the energy on demand must be stored.

One possible answer has been right under our noses all along — air. Regular old ambient air can be cooled and compressed into a liquid, stored in tanks, and then reheated to its gaseous state to do work.

This technology is called Cryogenic Energy Storage (CES) or Liquid Air Energy storage (LAES). It’s a fairly new energy scheme that was first developed a decade ago by UK inventor Peter Dearman as a car engine. More recently, the technology has been re-imagined as power grid storage.

UK utility Highview Power have adopted the technology and are putting it to the test all over the world. They have just begun construction on the world’s largest liquid air battery plant, which will use off-peak energy to charge an ambient air liquifier, and then store the liquid air, re-gasifying it as needed to generate power via a turbine. The turbine will only be used to generate electricity during peak usage. By itself, the LAES process is not terribly efficient, but the system offsets this by capturing waste heat and cold from the process and reusing it. The biggest upside is that the only exhaust is plain, breathable air.

Continue reading “Liquid Air Energy Storage: A Power Grid Battery Using Regular Old Ambient Air” →

Hackaday Podcast 077: Secret Life Of SD Cards, Mining Minecraft’s Secret Seed, BadPower Is Bad, And Sailing A Sea Of Neon

July 24, 2020 by Mike Szczys 3 Comments

Hackaday editors Mike Szczys and Elliot Williams are deep in the hacks this week. What if making your own display matrix meant a microcontroller board for every pixel? That’s the gist of this incredible neon display. There’s a lot of dark art poured into the slivers of microSD cards and this week saw multiple hacks digging into the hidden test pads of these devices. You’ve heard of Folding@Home, but what about Minecraft@Home, the effort to find world seeds from screenshots. And when USB chargers have exposed and rewritable firmware, what could possibly go wrong?

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Direct download (60 MB or so.)

Continue reading “Hackaday Podcast 077: Secret Life Of SD Cards, Mining Minecraft’s Secret Seed, BadPower Is Bad, And Sailing A Sea Of Neon” →

USB-C Where It Was Never Intended To Be

July 24, 2020 by Jenny List 25 Comments

The USB-C revolution is well under way, as first your new phone, then your single-board computer, and now your laptop are likely so sport the familiar reversible round-cornered connector. We’re still in the crossover period of requiring to keep micro USB, proprietary laptop, and USB-C power supplies at hand, but the promise of a USB-C-only world is tantalisingly close. For [Purkkaviritys] that’s a little bit closer now, as he’s modified his Thinkpad T440s to take a USB charger instead of its proprietary Lenovo square-plug part. (Video, embedded below.)

At its heart is a USB-PD emulator module that does all the hard work of negotiation with the power supply, giving the laptop the DC voltage it needs. It’s not quite that simple though, because a resistor is required to reassure the laptop that it’s got a genuine power supply. The module is encased in a carefully-designed surround that neatly takes the space vacated by the original connector, and since this laptop has its internal power connector on a short cable it is made very straightforward to fit into the case. If you didn’t know it was a home-made upgrade, you could be forgiven for thinking that this laptop left the factory with a USB-C power socket.

The USB-C module used here is a versatile part. We’ve previously seen it in a soldering iron conversion.

Continue reading “USB-C Where It Was Never Intended To Be” →

This Week In Security: Iran’s ITG18, ProcMon For Linux, And Garbage Collection Fail

July 24, 2020 by Jonathan Bennett 4 Comments

Even top-tier security professionals make catastrophic mistakes, and this time it was the operators at Iran’s ITG18. We’re once again talking about the strange shadowy world of state sponsored hacking. This story comes from the IBM X-Force Incident Response Intelligence Services (IRIS). I suspect a Deadpool fan must work at IBM, but that’s beside the point.

A server suspected to be used by ITG18 was incorrectly configured, and when data and training videos were stored there, that data was publicly accessible. Among the captured data was records of compromised accounts belonging to US and Greek military personnel.

The training videos also contained a few interesting tidbits. If a targeted account used two factor authentication, the attacker was to make a note and give up on gaining access to that account. If a Google account was breached, the practice was to start with Google Takeout, the service from Google that allows downloading all the data Google has collected related to that account. Yoiks. Continue reading “This Week In Security: Iran’s ITG18, ProcMon For Linux, And Garbage Collection Fail” →

A Complete Raspberry Pi Power Monitoring System

July 24, 2020 by Tom Nardi 60 Comments

As the world has become more environmentally conscious, we’ve seen an uptick in projects that monitor or control home energy use. At a minimum one of these setups involves a microcontroller and some kind of clamp-on current sensor, but if you’re looking for resources to take things a bit farther, this Raspberry Pi energy monitoring system created by [David00] would be a great place to start.

This project includes provides software and hardware to be used in conjunction with the Raspberry Pi to keep tabs on not just home energy consumption, but also production if your home has a solar array or other method of generating its own power. Data is pulled every 0.5 seconds from a MCP3008 ADC connected to up to ~~five~~ six current sensors to provide real-time utilization statistics, and visualized with Grafana so you can see all of the information at a glance.

While [David00] has already done the community a great service by releasing the hardware and software under an open source license, he’s also produced some absolutely phenomenal documentation for the project that’s really a valuable resource for anyone who wants to roll their own monitoring system. He’s even offering hardware kits for anyone who’s more interested in experimenting with the software side of things than building the PCB.

Home energy monitoring projects are certainly nothing new, but the incredible advances we’ve seen in the type of hardware and software available for DIY projects over the last decade has really pushed the state-of-the-art forward. With so many fantastic resources available now, the only thing standing between you and your own home energy monitoring dashboard is desire and a long weekend.