3D Printed Wave Lamp Forecasts The Weather

January 6, 2018 by 4 Comments

While browsing Thingiverse, [Dushyant Ahuja] found a rather pleasing wave lamp, and since a mere lamp on its own would not quite be enough, he added a means by which his lamp could provide weather alerts by means of changing its color.

It’s fair to say that the wave lamp is not a print for the faint-hearted, and it took him 30 hours to complete. However, it has the interesting feature of not requiring a support or raft. There is also a base for the lamp designed to take a strip of addressable LEDs, and he modified its design to mount a small PCB containing an ESP8266 module and a level shifter chip. The code for the ESP relies on the OpenWeatherMap API, and changes the LED color based on the rainfall forecast.

Casting our minds back a decade, this lamp is reminiscent of the long-departed Nabaztag product, best described as an internet-connected plastic anthropomorphic rabbit that could keep you updated with information such as weather or stock market trends through lighting up and the movement of its ears. It was an overpriced idea tied into a proprietary online back end that was probably well before its time back in 2004. Perhaps repackaged for 2017 with a commodity microcontroller board Nabaztag has finally found its application.

There is a short video showing the color change and an LED animation, which we’ve put below the break.

Continue reading “3D Printed Wave Lamp Forecasts The Weather” →

The PlyPad: CNC Machine Yourself A Tiny House

January 6, 2018 by 58 Comments

The Maslow CNC project is a CNC mill for sheet woodwork that is designed to be as inexpensive as possible and to be assembled by the end user. They’ve dropped us a line to tell us about a recent project they’ve undertaken as part of a collaboration to produce the PlyPad, a tiny house for Kenton Women’s Village, a project to tackle homelessness among women in part of the City of Portland.

Their write-up is a fascinating look at the issues surrounding the design and construction of a small dwelling using CNC rather than traditional methods. As an example their original design featured an attractive sawtooth roofline with multiple clerestory windows, but sadly a satisfactory solution could not be found to the problem of keeping it waterproof and they were forced to adopt a more conventional look.

The walls of the building are a ply-foam bonded sandwich, and the house is constructed in 4 foot sections to match the width of a sheet of ply. There are several section designs with built-in furniture, for example containing a bed, or storage space.

This house was designed to be part of a community with central washing and sanitary facilities, so it does not incorporate the bathroom you might expect. However it is not impossible to imagine how sections could be designed containing these, and could be added to a full suite of construction choices. We are reminded of its similarity to the WikiHouse project.

We covered the Maslow project back in 2016, it is especially pleasing to see that it has been something of a success.

This Is The Last Weekend For The Coin Cell Challenge

January 6, 2018 by 6 Comments

This is it. This is the last weekend you’ll have to work on the most explosive battery-powered contest in recent memory. This is the Coin Cell Challenge, and it’s all ending this Monday. You have less than 48 hours to create the most amazing thing powered by a coin cell battery.

Joseph Primmer slapped a coin cell on a piezo and rickrolled a university

Right now, we’re looking at the entries to the Coin Cell Challenge, and there are some real gems here. Did you know the Rickroll Throwie maddeningly distributed around the dorms at Cornell is an entry? Yes, with just a coin cell, an ATtiny85, and a piezo, you can rickroll people for an entire year.

Need some more inspiration? Anthropomorphized pool noodles need love. CES is coming up next weekend, which means you too can get kicked out for life, just like Gizmodo reporters. The Northeast is suffering through a cold snap right now, so let’s try jumpstarting a car with a coin cell battery. There are a million and one things you can do with a coin cell battery, and we want to see what you can do with them.

The top twenty projects for this contest will each receive $100 in Tindie credit to pick up some fancy kits and cool gear. The three top winners will each receive a $500 cash prize. We’re looking for three things specifically — a Lifetime Award that keeps a project going longest, a Supernova Award that drains a coin cell in the blink of an eye, and a Heavy Lifting Award that demonstrates what shouldn’t be possible with a simple coin cell.

This is your last weekend to submit a project, and the contest ends Monday afternoon, Pacific time. Enter now!

Lowering JavaScript Timer Resolution Thwarts Meltdown And Spectre

January 6, 2018 by 35 Comments

The computer security vulnerabilities Meltdown and Spectre can infer protected information based on subtle differences in hardware behavior. It takes less time to access data that has been cached versus data that needs to be retrieved from memory, and precisely measuring time difference is a critical part of these attacks.

Our web browsers present a huge potential surface for attack as JavaScript is ubiquitous on the modern web. Executing JavaScript code will definitely involve the processor cache and a high-resolution timer is accessible via browser performance API.

Web browsers can’t change processor cache behavior, but they could take away malicious code’s ability to exploit them. Browser makers are intentionally degrading time measurement capability in the API to make attacks more difficult. These changes are being rolled out for Google Chrome, Mozilla Firefox, Microsoft Edge and Internet Explorer. Apple has announced Safari updates in the near future that is likely to follow suit.

After these changes, the time stamp returned by performance.now will be less precise due to lower resolution. Some browsers are going a step further and degrade the accuracy by adding a random jitter. There will also be degradation or outright disabling of other features that can be used to infer data, such as SharedArrayBuffer.

These changes will have no impact for vast majority of users. The performance API are used by developers to debug sluggish code, the actual run speed is unaffected. Other features like SharedArrayBuffer are relatively new and their absence would go largely unnoticed. Unfortunately, web developers will have a harder time tracking down slow code under these changes.

Browser makers are calling this a temporary measure for now, but we won’t be surprised if they become permanent. It is a relatively simple change that blunts the immediate impact of Meltdown/Spectre and it would also mitigate yet-to-be-discovered timing attacks of the future. If browser makers offer a “debug mode” to restore high precision timers, developers could activate it just for their performance tuning work and everyone should be happy.

This is just one part of the shock wave Meltdown/Spectre has sent through the computer industry. We have broader coverage of the issue here.

Learn To Reverse Engineer X86_64 Binaries

January 6, 2018 by 16 Comments

Opening up things, see how they work, and make them do what you want are just the basic needs of the average hacker. In some cases, a screwdriver and multimeter will do the job, but in other cases a binary blob of random software is all we have to work with. Trying to understand an unknown binary executable is an exciting way to discover a system’s internal functionality.

While the basic principles of software reverse engineering are universal across most platforms, the details can naturally vary for different architectures. In the case of the x86 architecture, [Leonora Tindall] felt that most tutorials on the subject focus mostly on 32-bit and not so much on the 64-bit specifics. Determined to change that, she ended up with an extensive introduction tutorial for reverse engineering x86_64 binaries starting at the very basics, then gradually moving forward using crackme examples. Covering simple string analysis and digging through disassembled binaries to circumvent fictional security, the tutorial later introduces the Radare2 framework.

All example source code is provided in the accompanying GitHub repository, although it is advised to avoid looking at them to keep it more interesting and challenging. And in case you are looking for more challenges later on, or generally prefer a closer connection to the hardware, these MSP430 based capture the flag online challenges might be worth to look at next.

Tearing Down A Darkroom Relic For Buried Treasure

January 6, 2018 by 10 Comments

If your goal is to harvest unique parts from defunct devices, the further back in time you go, the better the pickings stand to be. At least that’s what [Kerry Wong] discovered during his tear-down of a darkroom color analyzer from the early 1980s.

For readers whose experience with photography has been solely digital, you need to understand that there once was a time when images were made with real cameras on real film, and serious amateurs and pros had darkrooms to process the film. Black and white processing was pretty straightforward in terms of chemistry — it was just developer, stop, and fixing. Color processes were much trickier, and when it came to enlarging your film onto color photo paper, things could get really complicated. [Kerry]’s eBay find, a Besler PM1A color analyzer, was intended to help out in the color lab by balancing the mix of cyan, blue, and yellow components in the enlarger.

The instrument, which no doubt demanded a princely sum back in the day, is actually really simple, with the object of [Kerry]’s desire, a PM1A photomultiplier tube and its driver, being the only real find.  Still, it’s an interesting teardown, and we’re eager to see what [Kerry] makes of the gem. A muon detector, perhaps? An X-ray backscatter machine? Or perhaps repeating his old speed of light experiments is on the docket.

Continue reading “Tearing Down A Darkroom Relic For Buried Treasure” →

Fallen Radiosonde Reborn As Active L-band Antenna

January 5, 2018 by 14 Comments

If your hobby is chasing radiosondes across vast stretches of open country, and if you get good enough at it, you’ll eventually end up with a collection of the telemetry packages that once went up on weather balloons to record the conditions aloft. Once you’ve torn one or two down though, the novelty must wear off, which is where this radiosonde conversion to an active L-band antenna comes from.

As it happens, we recently discussed the details of radiosondes, so if you need a primer on these devices, check that out. But as Australian ham [Mark (VK5QI)] explains, radiosondes are a suite of weather instruments crammed into a lightweight package with a GPS receiver and a small transmitter. Lofted beneath a weather balloon into the stratosphere, a radiosonde transmits a wealth of data back to the ground before returning on a parachute after the balloon bursts. [Mark] had his eyes on the nice quadrifilar helical antenna used by the Vaisla R92 radiosonde’s GPS receiver, with the aim of repurposing them. He had a lot of components to remove while still retaining the low-noise amplifier (LNA), but in the end managed to get a working antenna with 40 dB gain in the L-band, and with the help of an RTL-SDR dongle he picked up solid signals from Iridium satellites.

Want to score your own radiosonde to play with? First, you have to know how to listen in so you can find them. Or, you know – there’s always eBay.

[via RTL-SDR.com]