Give A Man A Phish, And You Entertain Him For A Day

August 16, 2020 by 11 Comments

With millions of phishing attempts happening daily, we’ve probably all had our fair share of coming across one. For the trained or naturally suspicious eye, it’s usually easy to spot them — maybe get a good chuckle out of the ridiculously bad ones along the way — and simply ignore them. Unfortunately, they wouldn’t exist if they weren’t successful enough in the big picture, so it might be a good idea to inform the targeted service about the attempt, in hopes they will notify users to act with caution. And then there’s [Christian Haschek], who decided to have some fun and trying to render the phished data useless by simply flooding it with garbage.

After his wife received a text message from “their bank”, [Christian] took a closer look at the URL it was pointing to, and found your typical copy of the real login form at a slightly misspelled address. As the usual goal is to steal the victim’s credentials, he simply wrote a shell script that sends random generated account numbers and PINs for all eternity via cURL, potentially lowering any value the attackers could get from their attempt.

As the form fields limit the input length of the account number and PIN, he eventually wondered if the server side will do the same, or whether it would crash if longer data is sent to it. Sadly, he’ll never know, because after he modified the script, the site itself returned a 404 and had disappeared.

In the quest against phishing attacks, this should count as a success, but as [Christian] seemed to enjoy himself, he yearned for more and decided to take a look at a similar attempt he saw mentioned earlier on Reddit. Despite targeting the same bank, the server-side implementation was more sophisticated, hinting at a different attack, and he definitely got his money worth this time — but we don’t want to give it all away here.

Rest assured, [Christian Haschek] continues the good fight, whether by annoying attackers as he did with ZIP-bombing random WordPress login attempts or battling child pornography with a Raspberry Pi cluster. Well, unless he’s busy hunting down an unidentified device hooked up in his own network.

(Banner image by Tumisu)

Draw On Your Lawn With This Autonomous Mower And RTK-GPS

August 16, 2020 by 9 Comments

The rise of open source hardware has seen a wide variety of laborious tasks become successfully automated, saving us humans a great deal of hassle.  Suffice to say, some chores are easier to automate than others. Take the classic case of a harmless autonomous vacuum cleaner that can be pretty dumb, bumping around the place to detect the perimeter as it traverses the room blindly with a pre-programmed sweeping pattern.

Now in principle, this idea could be extended to mowing your lawn. But would you really want a high speed rotating blade running rampant as it aimlessly ventures outside the perimeter of your lawn? The Sunray update to the Ardumower autonomous lawn mower project has solved this problem without invoking the need to lay down an actual perimeter wire. As standard consumer grade GPS is simply not accurate enough, so the solution involves implementing your very own RTK-GPS hardware and an accompanying base station, introducing centimeter-level accuracy to your mowing jobs.

RTK-GPS, also known as Carrier Phase Enhanced GPS, improves the accuracy of standard GPS by measuring the error in the signal using a reference receiver whose position is known accurately. This information is then relayed to the Ardumower board over a radio link, so that it could tweak its position accordingly. Do you need the ability to carve emojis into your lawn? No. But you could have it anyway. If that’s not enough to kick off the autonomous lawnmower revolution, we don’t know what is.

Continue reading “Draw On Your Lawn With This Autonomous Mower And RTK-GPS” →

The Mask Launcher; Like An Airbag For Your Face

August 15, 2020 by 33 Comments

One of the most effective ways to slow the spread of pathogens like the novel coronavirus is to have individuals wear facemasks that cover the nose and mouth. They’re cheap, and highly effective at trapping potentially infectious aerosols that spread disease. Unfortunately, wearing masks has become a contentious issue, with many choosing to go without. [Allen Pan] was frustrated by this, and set out to make a launcher to quite literally shoot masks directly onto faces.

To fire the masks, Allan built a pneumatic system that gets its power from a compact CO2 canister. This is hooked up to a solenoid, which is fired by the trigger. The high-pressure CO2 then goes through a split to four separate barrels cleverly made out of brake line ([Allen] says it’s faster to get parts from the automotive supply than the home store these days). Each barrel fires a bola weight attached to one of the strings of the mask, in much the same way a net launcher works. The mask is then flung towards the face of the target, and the weights wrap around the back of the neck, tangling and ideally sticking together thanks to neodymium magnets.

Amazingly, the mask worked first time, wrapping effectively around a dummy head and covering the nose and mouth. Follow-up shots were less successful, however, but that didn’t deter [Allen] from trying the device on himself at point-blank range. Despite the risk to teeth and flesh, the launcher again fires a successful shot.

While it’s obviously never meant to be used in the real world, the mask launcher was a fun way to experiment with pneumatics and a funny way to start the conversation about effective public health measures. We’ve featured similar projects before, too. Video after the break.

Continue reading “The Mask Launcher; Like An Airbag For Your Face” →

Helmet Decal Charger Keeps Them Ready To Glow

August 15, 2020 by 9 Comments

When firefighters are battling a blaze, it’s difficult for them to find each other in the smoky darkness. To help stand out they wear glow-in-the-dark decals on their helmets, but since they spend so much of their down time stowed away in a dark locker, they don’t always have a chance to charge up.

[Bin Sun]’s firefighter friend inspired them to build a portable charging system that can stuff those helmet decals full of photons in a matter of minutes. Although phosphorescent materials will charge in any light, they charge the fastest with ultraviolet light. This uses a pair of UV LED strips controlled by an off-the-shelf programmable timer, and powered with an 18-volt drill battery stepped down to 12 V. The timer makes it easy for [Bin Sun]’s friend to schedule charge times around their shifts, so the battery lasts as long as possible while keeping the decals ready to glow.

We love that [Bin Sun] seems to have thought of everything. The light strips are nestled into 3D-printed holders that also house small magnets. This makes it easy to position the lights on either side of the locker so both the front and back decals soak up the light.

Phosphorescent materials are great as a reusable display medium, especially when they’re designed to look like Nixie tubes.

Anything Becomes A Clock

August 15, 2020 by 5 Comments

Clocks are a popular project around here, and with good reason. There’s a ton of options, and there’s always a new take on ways to tell time. Clocks using lasers, words, or even ball bearings are all atypical ways of displaying time, but like a mathematician looking for a general proof of a long-understood idea this clock from [Julldozer] shows us a way to turn any object into a clock.

His build uses AA-powered clock movements that you would find on any typical wall clock, rather than reaching for his go-to solution of an Arduino and a stepper motor. The motors that drive the hands in these movements are extremely low-torque and low-power which is what allows them to last for so long with such a small power source. He uses two of them, one for hours and one for minutes, to which he attaches a custom-built lazy Suzan. The turntable needs to be extremely low-friction so as to avoid a situation where he has to change batteries every day, so after some 3D printing he has two rotating plates which can hold any object in order to tell him the current time.

While he didn’t design a clock from scratch or reinvent any other wheels, the part of this project that shines is the way he was able to utilize such a low-power motor to turn something so much heavier. This could have uses well outside the realm of timekeeping, and reminds us of this 3D-printed gear set from last year’s Hackaday prize.

Continue reading “Anything Becomes A Clock” →

Vintage Ammeter Becomes Plant Moisture Gauge

August 15, 2020 by 15 Comments

It’s not uncommon to happen across vintage measurement equipment at the local flea market or garage sale. Often with an irresistible aesthetic, and built to last decades, these tools nonetheless tend to be sidelined when modern multimeters are available. [Build Comics] had just such a piece on hand, and decided to repurpose it with some modern hardware instead.

The build begins with a Hartmann & Braun 60 amp ammeter. Replete in a nice wooden box, it’s the perfect candidate for a modern refit. The device uses an indicator of the moving iron type. Intending to turn the device into a soil moisture monitor, [Build Comics] began by removing the original heavy-wound coil. In its place, a custom coil was installed instead, wound on a 3D printed bobbin using a modified sewing machine. This allows the meter to be easily driven by an Arduino with little more than a transistor on a GPIO pin. To detect moisture, a Iduino ME110 moisture probe was used. Complete with cloth-covered wire to maintain the vintage look. The original meter plate was also photographed, modified, and reprinted, to read moisture levels instead of current.

If you’re interested in these gauge restoration techniques but don’t have a green thumb, no worries. [Build Comics] used similar tricks to put together a gorgeous weather station that would look great on your desk.

Continue reading “Vintage Ammeter Becomes Plant Moisture Gauge” →

Keycap Customizer Brings All Your Caps To The Board

August 15, 2020 by 9 Comments

With bright colors and often intricate designs, after the physical shape of a keyboard the most conspicuous elements are surely the keycaps. Historically dictated by the stem of the key switch it attaches to, keycaps come in a variety of sizes, colors, profiles, and designs. As they necessarily include small features with tight tolerances to fit the stem of their key switch, injection molding is the classic manufacturing technique for a keycap. But as hobbyist 3D printing matures and resin printers become more accessible, home keycap manufacturing is increasingly good option. Instead of designing each cap by hand, consider trying [rsheldiii]’s KeyV2 OpenSCAD script to create custom caps with ease.

To cover the basics, KeyV2 can generate full keycap sets with Cherry or Alps stems, in the SA, DSA, DCS profiles (and more!) for any typically sized keyboard. Generating a particular cap of arbitrary profile, position, and size is just a short chain of function calls away. But standard keycap sets aren’t the highlight of this toolset.

If you’re not an OpenSCAD aficionado yet, visit [Brian Benchoffs] great getting-started guide or our other coverage to get a feel for what the tool can do. Part of OpenSCAD’s attraction is that it is the the paragon of parametric modeling. It’s declarative part files ensure that no parameter goes undefined, which is a perfect fit for KeyV2.

The root file upon which all caps are based on has about 150 keycap parameters which can be tweaked, and that’s before more elaborate customization. Making simple “artisan” caps is a snap, as the magic of OpenSCAD means the user can perform any Boolean operations they need on top of the fully parameterized keycap. Combining an arbitrary model with a keycap is one union() away. See the README for examples.

For the prospective user of KeyV2 worried about complexity; don’t be, the documentation is a treat. Basic use to generate standard keycaps is simple, and there are plenty of commented source files and examples to make more complex usage easy. Thinking about a new keyboard? Check out our recent spike in clacky coverage.