Motor Controller Reverse Engineering Releases Smoke

It may have been designed for a sewing machine, but [Haris Andrianakis] found his imported DC brushed motor was more than up to the challenge of powering his mini lathe. Of course there’s always room for improvement, so he set out to reverse engineer the motor’s controller to implement a few tweaks he had in mind. Unfortunately, things took an unexpected turn when plugging his AVR programmer into the board’s ISP socket not only released the dreaded Magic Smoke, but actually tripped the breaker and plunged his bench into darkness.

Studying how the Hall-effect sensors in the motor are wired.

Upon closer inspection, it turned out the board has no isolation between the high voltage side and its digital logic. When [Haris] connected his computer to it via the programmer, the 330 VDC coming from the controller’s rectifier shorted through the USB bus and tripped the Earth-leakage circuit breaker (ELCB). The good news is that his computer survived the ordeal, and even the board itself seemed intact. But the shock must have been too much for the microcontroller he was attempting to interface with, as the controller no longer functioned.

Now fully committed, [Haris] started mapping out the rest of the controller section by section. In the write-up on his blog, he visually masks off the various areas of the PCB so readers have an easier time following along and understanding how the schematics relate to the physical board. It’s a nice touch, and a trick worth keeping in mind during your own reverse engineering adventures.

In the end, [Haris] seems to have a good handle on what the majority of the components are up to on the board. Which is good, since getting it working again now means replacing the MCU and writing new firmware from scratch. Or perhaps he’ll just take the lessons learned from this controller and spin up his own custom hardware. In either event, we’ll be keeping an eye out for his next post on the subject.

Hands On With The Voltera V-One PCB Printer

Creating your own PC board is a rite of passage for many. These days, though, you can order super inexpensive boards and have them in very little time, so it doesn’t always make sense to build your own. Still, some people like the challenge, and others don’t want to wait even a few days. Probably everyone has dreamed of a 3D printer-like machine that would just crank out beautiful PCBs. The Voltera V-One isn’t quite at that level of sophistication, but it isn’t too far from it. [Great Scott] shows us how he built two different boards using the system in the video below. While the results were impressive, you can also see that there are several limitations, especially if you are not designing your board with the machine in mind.

One thing that is obvious is that the machine does need your help. In addition to aligning holes, you’ll need to install tiny rivets for vias and slightly less tiny rivets for through-hole components. The last time we looked at the machine, it didn’t do holes at all, but [Scott] shows the drill attachment which allows the machine to produce vias and support leaded components.

Continue reading “Hands On With The Voltera V-One PCB Printer”

Cooking Eggs With Hand Warmers

Handwarmers are great to keep your fingers functional in icy weather, but can they do more? [Greg] wondered if they could be put to good use cooking an egg, and got down to work.

The handwarmers in question are the HotHands brand, based on an iron chemistry. The warmers create their heat from the exothermic reaction between iron and oxygen that creates rust. Thus, these handwarmers need plenty of airflow to heat up. To enable this, [Greg] 3D printed a small crate with plenty of vents, into which he stacked six hand warmer sachets. An egg was nestled in the center – a perfect choice as it can be cooked in its own packaging. The pile reached temperatures of 160 F and was able to maintain that level for an hour, important as egg proteins tend to start coagulating and denaturing around 150 F. Once removed, [Greg] hoped to find a solid egg, but instead was rewarded with a somewhat gooey, semi-solid result instead. Regardless, the egg had reached an elevated temperature and shown some signs of cooking, and as [Greg] appears to be still putting out videos, we’ll assume he hasn’t yet died of salmonella.

We’d love to see this turn into an engineering competition, though, with prizes for the best cooked egg with the least amount of handwarmers. We’ve featured other egg cooking apparatus before, too. Video after the break.

Continue reading “Cooking Eggs With Hand Warmers”

Hacking Hardware Bitcoin Wallets: Extracting The Cryptographic Seed From A Trezor

It’s long been common wisdom that one of the safest places to keep your cryptocurrency holdings is in a hardware wallet. These are small, portable devices that encrypt your keys and offer a bit more peace of mind than holding your coins in a soft or web wallet.

But of course, as we know, nothing is totally secure.

And we were reminded of this fact by Kraken Security Labs, when they showed us how they bypassed all of the safeguards in a popular wallet, the Trezor, to dump and decrypt it’s seed.

It’s worth noting that the hack does require physical access to the wallet — albeit only about fifteen minutes worth. And by “physical access” we mean that the hack leaves the device thoroughly mutilated. The Kraken team started by desoldering the heart of the wallet, a STM32 processor. They then dropped it into a socket on an interface board, and got to glitching.

The hack relies on an attack known as voltage glitching. Essentially, at a precisely-timed moment during the device’s boot sequence, the supply voltage is fluctuated. This enables the chip’s factory bootloader, which can read out the contents of it’s onboard flash memory. The memory is read-protected, but can be accessed 256 bytes at a time through a second voltage glitch. Neither of these attacks work 100% of the time, so if the device fails to boot or the memory remains locked, the FPGA performing the attacks simply tries again. After enough iterations, the Kraken team was able to fully dump the chip’s flash memory.

Continue reading “Hacking Hardware Bitcoin Wallets: Extracting The Cryptographic Seed From A Trezor”

Bike Wheel Light Flashes Just Right

When it comes to safely riding a bike around cars, the more lights, the better. Ideally, these lights would come on by themselves, so you don’t have to remember to turn them on and off every time. That’s exactly the idea behind [Jeremy Cook]’s latest build — it’s an automatic bike light that detects vibration and lights up some LEDs in response.

The build is pretty simple — a coin cell-powered ATtiny85 reads input from a spring vibration sensor and flashes the LEDs. This is meant to complement [Jeremy]’s primary bike light, which is manually operated and always on. We especially like that form follows function here — the board shape is designed to be zip-tied to the spokes so it’s as close to the action as possible. He cleverly used cardboard and a laser cutter to mock up a prototype for a board that fits between the spokes. Pretty cool for your second professionally-fabbed PCB ever, if you ask us. Ride past the break to check out the build video.

If you don’t think fireflies on your spokes are enough to keep you safe, go full rainbow party bike.

Continue reading “Bike Wheel Light Flashes Just Right”

Twisted Tea Launcher Refreshes At 104 MPH

A few weeks ago, a video went viral on social media that depicted a rather unsavory individual receiving what could be described as a “percussive reminder” of social norms courtesy of a bystander armed with a can of Twisted Tea. The video served as inspiration for many a meme, but perhaps none more technically intricate than this air cannon that launches 24 ounces of hard iced tea at better than 100 miles per hour built by [Greg Bejtlich].

It’s all fun and games until somebody brings out the weaponized bead seater.

Technically we’re looking at two different hacks here. The first is the pneumatic launcher put together using a low-cost eBay tire bead seater. These tools are designed to unleash a large volume of air into a tire so it can be properly seated onto the rim, but it doesn’t take much more than a few pieces of PVC pipe from the hardware store to turn it into an impromptu mortar. It’s even got a convenient trigger and a handle to help control the recoil. Though as you can see in the video after the break, it still ends up being a bit too energetic for [Greg] to keep a grip on.

For the projectiles, [Greg] has 3D printed a nose cone and tail fin that snap onto the 24 oz cans in hopes of making them more aerodynamically stable. The slow motion video seems to indicate they aren’t terribly effective, but they certainly look impressive. Spring-loaded control surfaces that deploy after the can leaves the muzzle could be the answer, though at some point you have to ask yourself how far you’re willing to go for an Internet meme.

It probably goes without saying that you definitely shouldn’t try firing cans of alcoholic iced tea off in your backyard. But the launcher itself might be useful for lofting antennas or hurling the occasional potato.

Continue reading “Twisted Tea Launcher Refreshes At 104 MPH”

Reverse-Engineering An Elevator Control Panel Results In Clicky Goodness

We have to admit that in the hardware hacking universe, there aren’t generally too many chances to hack elevators. Well, at least not opportunities that don’t also include the risk of incarceration. But fortune favors the bold, and when he found the remains of an elevator control panel in an abandoned Croatian resort hotel, [Davor Cihlar] undertook an extensive and instructive reverse-engineering of the panel.

The video below highlights his efforts, which were considerable given the age and state of the panel. This is a relay-only control panel, after all, with most of the relays missing and a rat’s nest of wires connecting the sockets. So [Davor] put his “RevIng” concept to work. This uses a custom PCB with a microcontroller on-board that plugs into each relay socket and probes the connections between it and every other socket. Very clever stuff, and it presented him with the data needed to develop a ladder-logic diagram of the board, with the help of some custom software.

With the original logic in hand, [Davor] set about building a simulator for the panel. It’s a lovely piece of work, with buttons and lights to mimic the control panel inside the elevator car, as well as the call stations that would have graced each lobby of the hotel. Interestingly, he found logic that prevented the elevator from being called to some floors from anywhere but inside the car. The reason remains a mystery, but we suppose that a hotel built by Penthouse publisher [Bob Guccione] would have plenty of secrets.

We love the supremely satisfying clickiness of this build, and the reverse engineering prowess on display, but we can’t find much practical use for something like this. Then again, DIY elevators are a thing.

Continue reading “Reverse-Engineering An Elevator Control Panel Results In Clicky Goodness”