TEMPEST: A Tin Foil Hat For Your Electronics And Their Secrets

October 19, 2015 by Elliot Williams 38 Comments

Electronics leak waves and if you know what you’re doing you can steal people’s data using this phenomenon. How thick is your tinfoil hat? And you sure it’s thick enough? Well, it turns out that there’s a (secret) government standard for all of this: TEMPEST. Yes, all-caps. No, it’s not an acronym. It’s a secret codename, and codenames are more fun WHEN SHOUTED OUT LOUD!

The TEMPEST idea in a nutshell is that electronic devices leak electromagnetic waves when they do things like switch bits from ones to zeros or move electron beams around to make images on CRT screens. If an adversary can remotely listen in to these unintentional broadcasts, they can potentially figure out what’s going on inside your computer. Read on and find out about the history of TEMPEST, modern research, and finally how you can try it out yourself at home!

Continue reading “TEMPEST: A Tin Foil Hat For Your Electronics And Their Secrets” →

Spherical Robot Rolls Then Walks Into Action

October 19, 2015 by Dan Maloney 10 Comments

download — Droideka [Source: Wookieepedia]

If ever any sci-fi robot form-factor made more sense than the Droideka of the Star Wars franchise, we’re not sure what it could be. Able to transform from a spheroid that rolls quickly onto the battlefield into a blaster-bristling tripodal walker, the Hollywood battle droid showed a lot of imagination and resulted in a remarkably feasible design. And now that basic design is demonstrated in a spherical quadrupedal robot that can transform from rolling to walking.

Intended as a proof of concept of a hybrid rolling-walking locomotion system, the QRoSS robot from Japan’s Chiba Institute of Technology is capable of some pretty amazing things already. Surrounded by a wire roll cage that’s independent of the robot’s legs, QRoSS is able to roll into position, unfurl its legs, and walk where it needs to go. Four independent legs make it sure-footed over rough terrain, with obvious applications in such fields as urban search and rescue; a hardened version could be tossed into a collapsed building or other dangerous environment and walk around to provide intelligence or render aid. The robot’s self-righting feature would be especially handy for that use case, and as you can see in the video below, it has a powered rolling mode that’s six times faster than its walking speed.

For a similar spherical transforming robot, be sure to check out the MorpHex robot with its hexapod design.

Continue reading “Spherical Robot Rolls Then Walks Into Action” →

How To Control Siri Through Headphone Wires

October 19, 2015 by Brian Benchoff 7 Comments

Last week saw the revelation that you can control Siri and Google Now from a distance, using high power transmitters and software defined radios. Is this a risk? No, it’s security theatre, the fine art of performing an impractical technical achievement while disclosing these technical vulnerabilities to the media to pad a CV. Like most security vulnerabilities it is very, very cool and enough details have surfaced that this build can be replicated.

The original research paper, published by researchers [Chaouki Kasmi] and [Jose Lopes Esteves] attacks the latest and greatest thing to come to smartphones, voice commands. iPhones and Androids and Windows Phones come with Siri and Google Now and Cortana, and all of these voice services can place phone calls, post something to social media, or launch an application. The trick to this hack is sending audio to the microphone without being heard.

The ubiquitous Apple earbuds have a single wire for a microphone input, and this is the attack vector used by the researchers. With a 50 Watt VHF power amplifier (available for under $100, if you know where to look), a software defined radio with Tx capability ($300), and a highly directional antenna (free clothes hangers with your dry cleaning), a specially crafted radio message can be transmitted to the headphone wire, picked up through the audio in of the phone, and understood by Siri, Cortana, or Google Now.

There is of course a difference between a security vulnerability and a practical and safe security vulnerability. Yes, for under $400 and the right know-how, anyone could perform this technological feat on any cell phone. This feat comes at the cost of discovery; because of the way the earbud cable is arranged, the most efficient frequency varies between 80 and 108 MHz. This means a successful attack would sweep through the band at various frequencies; not exactly precision work. The power required for this attack is also intense – about 25-30 V/m, about the limit for human safety. But in the world of security theatre, someone with a backpack, carrying around a long Yagi antenna, pointing it at people, and having FM radios cut out is expected.

Of course, the countermeasures to this attack are simple: don’t use Siri or Google Now. Leaving Siri enabled on a lock screen is a security risk, and most Androids disable Google Now on the lock screen by default. Of course, any decent set of headphones would have shielding in the cable, making inducing a current in the microphone wire even harder. The researchers are at the limits of what is acceptable for human safety with the stock Apple earbuds. Anything more would be seriously, seriously dumb.

An Intel Atom CPU In The Raspi Form Factor

October 18, 2015 by Brian Benchoff 133 Comments

For years now, people have been trying to stuff an Intel processor on a credit card sized board. An x86 board that can fit in your pocket is an intriguing device – after all, that’s what Gumstix, the forerunner of the Raspberry Pi, were. Efforts to put x86 on a dev board have included the Minnowboard, the Intel Galileo and Edison, and even the Intel Compute Stick. These have not seen the uptake you would expect from a small x86-powered board, but that tide may soon turn. The UP board is exactly what you would expect from a Raspberry Pi-inspired board with a real Intel processor.

The feature set for the UP board is impressive for a credit card sized board; it’s powered by a quad-core Intel Atom x5-Z8300 CPU running at 1.84 GHz. The board comes equipped with 1GB of RAM, 16GB of eMMC Flash, Gigabit Ethernet, five USB 2.0 ports (one on a pin header) and one USB 3.0 port. Up also includes a real-time clock, HDMI, the same 40-pin GPIO pin connector found in the Raspberry Pi Model B Plus, and DSI and CSI connectors for the Raspberry Pi camera and touch screen.

To be fair to all the previous attempts at making a board built around an x86 chip that borrows heavily from the Raspberry Pi, there haven’t been many chips out there that have been suitable for credit card-sized applications. Only in the last year or so has Intel released chips suitable for an x86 single board computer, and the growing market of Windows 10 tablets bears this out. While it remains to be seen if the UP board will be a success, more than a few people will pick one of these up for a miniature Skype box.

Open Source Tracked Robot Supports STEM In Africa

October 18, 2015 by Al Williams 16 Comments

A lot of hacker projects start with education in mind. The Raspberry Pi, for example, started with the goal of making an affordable classroom computer. The Shrimp is a UK-based bare-bones Arduino targeted at schools. We recently saw an effort to make a 3D printed robotic platform aimed at African STEM education: The Azibot.

Azibot has 3D printed treads, a simple gripper arm, and uses an Arduino combined with Scratch. Their web site has the instructions on how to put together the parts and promises to have the custom part of the software available for download soon.

Continue reading “Open Source Tracked Robot Supports STEM In Africa” →

Hackaday Links: October 18, 2015

October 18, 2015 by Brian Benchoff 9 Comments

We have our featured speakers lined up for the Hackaday Supercon, one of which is [Fran Blanche]. We’ve seen a lot of her work, from playing with pocket watches to not having the funding to build an Apollo Guidance Computer DSKY. In her spare time, she builds guitar pedals, and there’s a biopic of her in She Shreds magazine.

Halloween is coming, and that means dressing children up as pirates, fairies, characters from the latest Marvel and Disney movies, and electrolytic capacitors.

There’s a new movie on [Steve Jobs]. It’s called the Jobs S. It’s a major upgrade of the previous release, featuring a faster processor and more retinas. One more thing. Someone is trying to cash in on [Woz]’s work. This time it’s an auction for a complete Apple I that’s expected to go for $770,000 USD.

Hackaday community member [John McLear] is giving away the factory seconds of his original NFC ring (think jewelry). These still work but failed QA for small reasons and will be fun to hack around on. You pay shipping which starts at £60 for 50 rings. We’ve grabbed enough of them to include in the goody bags for the Hackaday Superconference. If you have an event coming up, getting everyone hacking on NFC is an interesting activity. If you don’t want 50+, [John] is also in the middle of a Kickstarter for an improved version.

Your 3D printed parts will rarely come out perfectly. There will always be some strings or scars from removing them from the bed. There’s a solution to these problems: use a hot air gun.

Everyone has a plumbus in their home, but how do they do it? First, they take the dinglebop, and smooth it out with a bunch of schleem. The schleem is then repurposed for later batches.

The Practical Potato Cell

October 18, 2015 by James Hobson 32 Comments

Potato batteries, lemon batteries, they’re all good fun for the classroom — but is there a way of making them better? [Marcel Varallo] decided to give it a shot — and we gotta admit, it’s a pretty cool idea!

Normally for these fruit and vegetable batteries you poke some leads into the battery, connect it to a clock, and bob’s your uncle. But what if we made them resemble batteries? [Marcel] took some copper pipe, cut it down to size, and poked it through a potato. Now he had a potato-cored, copper tube. Stick a zinc nail in the middle, and you’ve got yourself a battery cell! Or as [Marcel] likes to put it.. a Mar-Cell. Or the more scientific term.. the Solanum tuberosum based electron differencer V1.0.

Each potato cell produces approximately 0.8V, so if you throw eight in series, you’ll have the equivalent of a 6V battery, just maybe not the same mAh rating.

For another cool way to demonstrate electricity to youngsters, we love this lemon battery hack — it’s actually quite elegant.