Retrotechtacular: A DIY Television For Very Early Adopters

By our very nature, hackers tend to get on the bandwagon of new technology pretty quickly. When something gee-whiz comes along, it’s folks like us who try it out, even if that means climbing steep learning curves or putting together odd bits of technology rather than waiting for the slicker products that will come out if the new thing takes off. But building your own television receiver in 1933 was probably pushing the envelope for even the earliest of adopters.

“Cathode Ray Television,” reprinted by the Antique Valve Museum in all its Web 1.0 glory, originally appeared in the May 27, 1933 edition of Popular Wireless magazine, and was authored by one K D Rogers of that august publication’s Research Department. They apparently took things quite seriously over there at the time, at least judging by the white lab coats and smoking materials; nothing said serious research in the 1930s quite like a pipe. The flowery language and endless superlatives that abound in the text are a giveaway, too; it’s hard to read without affecting a mental British accent, or at least your best attempt at a Transatlantic accent.

In any event, the article does a good job showing just what was involved in building a “vision radio receiver” and its supporting circuitry back in the day. K D Rogers goes into great detail explaining how an “oscillograph” CRT can be employed to display moving pictures, and how his proposed electronic system is vastly superior to the mechanical scanning systems that were being toyed with at the time. The build itself, vacuum tube-based though it was, went through the same sort of breadboarding process we still use today, progressing to a finished product in a nice wood cabinet, the plans for which are included.

It must have been quite a thrill for electronics experimenters back then to be working on something like television at a time when radio was only just getting to full market penetration. It’s a bit of a puzzle what these tinkerers would have tuned into with their DIY sets, though — the airwaves weren’t exactly overflowing with TV broadcasts in 1933. But still, someone had to go first, and so we tip our hats to the early adopters who figured things out for the rest of us.

Thanks to [BT] for the tip.

 

Hackaday Podcast 161: Laser Lithography, Centurion Hard Drive, And Mad BGA Soldering

Join Hackaday Editor-in-Chief Elliot Williams and Staff Writer Dan Maloney for an audio tour of the week’s top stories and best hacks. We’ll look at squeezing the most out of a coin cell, taking the first steps towards DIY MEMS fabrication, and seeing if there’s any chance that an 80’s-vintage minicomputer might ride again. How small is too small when it comes to chip packages? We’ll find out, and discover the new spectator sport of microsoldering while we’re at it. Find out what’s involved in getting a real dead-tree book published, and watch a hacker take revenge on a proprietary memory format — and a continuous glucose monitor, too.

Or Direct Download, like you’ve got something to prove!

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Continue reading “Hackaday Podcast 161: Laser Lithography, Centurion Hard Drive, And Mad BGA Soldering”

Unpicking The Hype Around Web 3, What’s The Tech?

The buzzword of the moment in the frothier portions of the technology press is inescapable: “Web 3”. This is a collective word for a new generation of decentralised online applications using blockchain technologies, and it follows on from a similar excitement in the mid-2000s surrounding so-called “Web 2” websites that broke away from the static pages of the early Internet.

It’s very evident reading up on Web 3, that there is a huge quantity of hype involved in talking about this Next Big Thing. If this were April 1st it would be tempting to pen a lengthy piece sending up the coverage, but here in January that just won’t do. Instead it’s time to peer under the hype and attempt to discern what Web 3 really is from a technology standpoint. Sure, a Web 3 application uses blockchain technology, often reported breathlessly as “the Blockchain” as though there were only one, but how? What is the real technology beneath it all?

Where Did All This Web 3 Stuff Come From Anyway?

"This machine is a server. DO NOT POWER IT DOWN!!" Tim Berners-Lee's famous sticker on the front of his NeXTcube, the first web server.
“This machine is a server. DO NOT POWER IT DOWN!!” Tim Berners-Lee’s famous sticker on the front of his NeXTcube, the first web server. Binary Koala CC BY-SA 2.0.

In its earliest days, the web could be found only in academia, from Tim Berners-Lee at CERN, and then from others such as the National Center For Supercomputing Applications at the University of Illinois. In the mid-1990s the vast majority of web sites were served by the NCSA’s HTTPD server software, which served as the basis for the later hugely popular Apache project. Sites from this era were later dubbed Web 1.0, and operated as static HTML pages which could be refreshed only by reloading a page.

The millennium brought us Web 2.0. This is generally taken to refer to a much slicker generation of sites that made use of user-generated content. Behind every such generational shift lies a fresh technology, and if it was the HTTP server for Web 1.0, it was the use of Javascript in the browser to refresh page content on the fly for Web 2.0. This was dubbed AJAX, for Asynchronous Javascript And XML, and though the data transfer is now much more likely to be JSON than XML it remains the way that today’s web sites blur the line between a web page and an app. Continue reading “Unpicking The Hype Around Web 3, What’s The Tech?”

Baby Steps Toward DIY Autonomous Driving: VW Golf Edition

Nice thermal design, but conformal coating and no ID marks make this tough to reverse engineer

[Willem Melching] owns a 2010 Volkswagen Golf – a very common vehicle in Europe – and noticed that whilst the electronic steering rack supports the usual Lane Keep Assist (LKAS) system, and would be theoretically capable of operating in a far more advanced configuration using openpilot, there were some shortcomings in VW’s implementation which means that it would not function for long enough to make it viable. Being very interested in and clearly extremely capable at reverse engineering car ECUs and hacking them into submission, [Willem] set about documenting his journey to unlocking openpilot support for his own vehicle.

And what a journey it was! The four-part blog series is beautifully written, showing every gory detail and all tools used along the way. The first part shows the Electronic Power Steering (EPS) ECU from a 2010 Volkswagen Golf Mk6 module (which rides on the back of the three-phase steering rack motor) being cracked open to reveal an interesting multi-chip module approach, with bare die directly bonded to a pair of substrate PCBs, that are in turn, bonded to the back of the motor casing, presumably for heat dissipation reasons. Clever design, but frustrating at the same time as this makes part identification somewhat tricker!

Entropy less the 1.0, and zero sections indicate no encryption applied

[Willem] uses a variety of tools and tricks to power up and sniff the ECU traffic on the CAN bus, when hooked up to a SAE J2534-compliant debug tool, eventually determining it speaks the VW-specific TP2.0 CAN bus protocol, and managed to grab enough traffic to check that it was possible to use the standard KWP2000 diagnostic protocol to access some interesting data. Next was a very deep dive into reverse engineering update images found online, by first making some trivial XOR operations, then looking at an entropy plot of the file using Binwalk to determine if he really did have code, and if it was encrypted or not, After running cpu_rec, it was determined the CPU was a Renesas V850. Then the real work started – loading the image into Ghidra to start making some guesses of the architecture of the code, to work out what needed patching to make the desired changes. In the final part of the series, [Willem] extracts and uses the bootloader procedure to partially patch the code configuration area of his vehicle and unlocks the goal he was aiming at – remote control of his steering. (OK, the real goal was running openpilot.)

In our opinion, this is a very interesting, if long, read showing a fascinating subject expertly executed. But we do want to stress, that the vehicular EPS module is an ASIL-D safety tested device, so any hacks you do to a road-going vehicle will most definitely void your insurance (not to mention your warranty) if discovered in the event of a claim.

Older ECUs are a bit easier to hack, if you can pull the EPROM, and people out there are producing modules for allsorts of vehicular hacking. So plenty to tinker with!

Mechanisms Behind Vaccine Side-Effects: The Science That Causes That Sore Arm

After receiving a vaccination shot, it’s likely that we’ll feel some side-effects. These can range from merely a sore arm to swollen lymph nodes and even a fever. Which side-effects to expect depend on the exact vaccine, with each type and variant coming with its own list of common side-effects. Each person’s immune system will also react differently, which makes it hard to say exactly what one can expect after receiving the vaccination.

What we can do is look closer at the underlying mechanisms that cause these side-effects, to try and understand why they occur and how to best deal with them. Most relevant here for the initial response is the body’s innate immune system, with dendritic cells generally being among the first to come into contact with the vaccine and to present the antigen to the body’s adaptive immune system.

Key to the redness, swelling, and fever are substances produced by the body which include various cytokines as well as prostaglandin, producing the symptoms seen with inflammation and injury.

Continue reading “Mechanisms Behind Vaccine Side-Effects: The Science That Causes That Sore Arm”

This Week In Security: Ghoscript In Imagemagick, Solarwinds, And DHCP Shenanigans

A PoC was just published for a potentially serious flaw in the Ghostscript interpreter. Ghostscript can load Postscript, PDF, and SVG, and it has a feature from Postscript that has been a continual security issue: the %pipe% command. This command requests the interpreter to spawn a new process — It’s RCE as part of the spec. This is obviously a problem for untrusted images and documents, and Ghostscript has fixed security vulnerabilities around this mis-feature several times over the years.

This particular vulnerability was discovered by [Emil Lerner], and described at ZeroNights X. That talk is available, but in Russian. The issue seems to be a bypass of sorts, where the pipe command appears to be working in the /tmp/ directory, but a simple semicolon allows for an arbitrary command to be executed. Now why is this a big deal? Because ImageMagick uses Ghostscript to open SVG images by default on some distributions, and ImageMagick is often used for automatically resizing and converting images for web sites. In [Emil]’s presentation, he uses this flaw as part of an attack chain against three different companies.

I was unable to reproduce the flaw on my Fedora install, but I haven’t found any notice of it being fixed in the Ghostscript or Imagemagick changelogs either. It’s unclear if this problem has already been fixed, or if this is a true 0-day for some platforms. Either way, expect attackers to start trying to make use of it.

Continue reading “This Week In Security: Ghoscript In Imagemagick, Solarwinds, And DHCP Shenanigans”

Permanent Artificial Hearts: Long-Sought Replacements May Not Be Far Away

The number of artificial prosthetic replacement parts available for the human body is really quite impressive. From prosthetic eyes to artificial hips and knees, there are very few parts of the human body that can’t be swapped out with something that works at least as well as the original, especially given that the OEM part was probably in pretty tough shape in the first place.

But the heart has always been a weak spot in humans, in part because of the fact that it never gets to rest, and in part because all things considered, we modern humans don’t take really good care of it. And when the heart breaks down past the point where medicine or surgery can help, we’re left with far fewer alternatives than someone with a bum knee would face. The fact is that the best we can currently hope for is a mechanical heart that lets a patient live long enough to find a donor heart. But even then, tragedy must necessarily attend, and someone young and healthy must die so that someone else may live.

A permanent implantable artificial heart has long been a goal of medicine, and if recent developments in materials science and electrical engineering have anything to say about it, such a device may soon become a reality. Heart replacements may someday be as simple as hip replacements, but getting to that point requires understanding the history of mechanical hearts, and why it’s not just as simple as building a pump.

Continue reading “Permanent Artificial Hearts: Long-Sought Replacements May Not Be Far Away”