Friday Hack Chat: All About Crypto

November 14, 2018 by Brian Benchoff 15 Comments

What is crypto? Crypto means ‘hidden’, and it’s meant ‘hidden’ since before the Greek alphabet was written, but don’t let that stop you from arguing. For this week’s Hack Chat, we’re going to be talking all about cryptography, a medium of exchange for secrets. If you need confidentiality, integrity, or authenticity, you need cryptography.

Our guest for this week’s Hack Chat will be none other than Nick Sayer. Nick is a frequent attendee of the Hackaday meetups and he’s been building gadgets and gizmos and selling them on Tindie for years now. He’s given talks on design for manufacturing. This year, he designed and developed the Orthrus, an appliance that creates a cryptographically secured USB volume from two microSD cards. Basically, it’s like the Captain Planet team, only instead of rings, you need all the SD cards, and instead of Captain Planet, you summon your data.

For this week’s Hack Chat, we’re going to sit down with and talk about all things cryptography, including understanding what you need, what you don’t, and picking the correct tools. Items of interest will include:

When cryptography is needed
Cryptography tools
The best practices for cryptography

You are, of course, encouraged to add your own questions to the discussion. You can do that by leaving a comment on the Cryptography Hack Chat and we’ll put that in the queue for the Hack Chat discussion.

Our Hack Chats are live community events on the Hackaday.io Hack Chat group messaging. This week we’ll be sitting down on Friday, November 16th, at noon, Pacific time. If time zones got you down, we have a handy time zone converter.

Click that speech bubble to the right, and you’ll be taken directly to the Hack Chat group on Hackaday.io.

You don’t have to wait until Friday; join whenever you want and you can see what the community is talking about.

Hack My House: Opening Raspberry Pi To The Internet, But Not The Whole World

November 14, 2018 by Jonathan Bennett 29 Comments

If you’ve followed along with our series so far, you know we’ve set up a network of Raspberry Pis that PXE boot off a central server, and then used Zoneminder to run a network of IP cameras. Now that some useful services are running in our smart house, how do we access those services when away from home, and how do we keep the rest of the world from spying on our cameras?

Before we get to VPNs and port forwarding, there is a more fundamental issue: Do you trust your devices? What exactly is the firmware on those cheap cameras really doing? You could use Wireshark and a smart switch with port mirroring to audit the camera’s traffic. How much traffic would you need to inspect to feel confident the camera never sends your data off somewhere else?

Thankfully, there’s a better way. One of the major features of surveillance software like Zoneminder is that it aggregates the feeds from the cameras. This process also has the effect of proxying the video feeds: We don’t connect directly to the cameras in order to view them, we connect to the surveillance software. If you don’t completely trust those cameras, then don’t give them internet access. You can make the cameras a physically separate network, only connected to the surveillance machine, or just set their IP addresses manually, and don’t fill in the default route or DNS. Whichever way you set it up, the goal is the same: let your surveillance software talk to the cameras, but don’t let the cameras talk to the outside world.

Edit: As has been pointed out in the comments, leaving off a default route is significantly less effective than separate networks. A truly malicious peice of hardware could easily probe for the gateway.

This idea applies to more than cameras. Any device that doesn’t need internet access to function, can be isolated in this way. While this could be considered paranoia, I consider it simple good practice. Join me after the break to discuss port forwarding vs. VPNs.

Continue reading “Hack My House: Opening Raspberry Pi To The Internet, But Not The Whole World” →

Mechanisms: Lead Screws And Ball Screws

November 13, 2018 by Dan Maloney 52 Comments

Translating rotary motion to linear motion is a basic part of mechatronic design. Take a look at the nearest 3D-printer or CNC router — at least the Cartesian variety — and you’ll see some mechanism that converts the rotation of the the motor shafts into the smooth linear motion needed for each axis.

Hobby-grade machines are as likely as not to use pulleys and timing belts to achieve this translation, and that generally meets the needs of the machine. But in some machines, the stretchiness of a belt won’t cut it, and the designer may turn to some variety of screw drive to do the job.

Continue reading “Mechanisms: Lead Screws And Ball Screws” →

Fail Of The Week: Leaf Blowers Can’t Fly

November 12, 2018 by Dan Maloney 31 Comments

Leaf blowers, the main instrument of the suburban Saturday symphony, are one of the most useful nuisances. It doesn’t take much work with a rake to convince even the most noise-averse homeowner to head to the Big Box Store to pick one up to speed lawn chores. Once you do buy one, and feel the thrust produced by these handheld banshees, you might wonder, If I let go of this thing, would it fly?

[Peter Sripol] had that very thought and set about building a couple of leaf blower powered planes to answer the question. It’s probably not a spoiler alert to report that the answer is no, but the video below is a fun watch anyway. The surprising thing is just how close both planes came to succeeding. The first plane was a stripped-down Ryobi two-stroke leaf blower suspended from a giant wing and tail section that very nearly got off the ground. Version 1.1 gained a retractable electric boost propeller – strictly for take-offs – and lost a lot of excess weight. That plane practically leaped into the air, but alas, servo problems prevented [Peter] from shutting down the electric and flying on Ryobi alone. Even a servo fix couldn’t save the next flight, which cratered right after takeoff. A version 2.0, this time using a brutally modified electric leaf blower, was slightly more airworthy but augured in several times before becoming unflyable.

What can we learn from all this? Not much other than it would take a lot of effort to make a leaf blower fly. We appreciate all of [Peter]’s hard work here, but we think he’s better off concentrating on his beautiful homebrew ultralight instead.

Continue reading “Fail Of The Week: Leaf Blowers Can’t Fly” →

New Part Day: A $6 Linux Computer You Might Be Able To Write Code For

November 12, 2018 by Brian Benchoff 81 Comments

The latest news from the world of cheap electronics is a single board computer running Linux. It costs six dollars, and you can buy it right now. You might even be able to compile code for it, too.

The C-Sky Linux development board is listed on Taobao as an ‘OrangePi NanoPi Raspberry Pi Linux Development Board” and despite some flagrant misappropriation of trademarks, this is indeed a computer running Linux, available for seven American dollars.

This board is based on a NationalChip GX6605S SoC, a unique chip with an ISA that isn’t ARM, x86, RISC-V, MIPS, or anything else that would be considered normal. The chip itself was designed for set-top boxes, but there are a surprising number of build tools that include buildroot, GCC and support for qemu. The company behind this chip is maintaining a kernel, and support for this chip has been added to the mainline kernel. Yes, unlike many other single board computers out there, you might actually be able to compile something for this chip.

The features for this board include 64 MB of DDR2 RAM, HDMI out (with a 1280 x 720 framebuffer, upscaled to 1080p, most likely), and a CPU running at just about 600 MHz. There are a few buttons connected to the GPIO pins, two USB host ports, a USB-TTL port for a serial console, and a few more pins for additional GPIOs. There does not appear to be any networking, and we have no idea what the onboard storage is.

If you want a challenge to get something compiled, this is the chip for you.

Hackaday Links: The Eleventh Day Of The Eleventh Month, 2018

November 11, 2018 by Brian Benchoff 23 Comments

For the better part of the last five years, the Great War Channel on YouTube has been covering the events of the Great War, week by week, exactly 100 years later. It’s hundreds of episodes designed for history buffs, and quite literally one of the most educational channels on YouTube. It’s the eleventh day of the eleventh month of the eighteenth year, which means the folks behind the Great War Channel are probably taking a well-deserved vacation. If you haven’t heard of this channel, it might be a good time to check it out.

Ikea is now selling NFC locks. [Mike] wrote in to tell us he found the new ROTHULT drawer deadbolts for $18 at Ikea. No, these aren’t meant for your front door, they’re meant for file cabinets. That’s a different threat model, and no lock is ever completely secure. However, there are some interesting electronics. You get a lock powered by three AAA batteries and two NFC cards for $18. Can’t wait for the teardown.

The biggest news from the United States this week is big. People gathered in the streets. Millions made sure their voices were heard. Journalists were cut down for asking questions. This is a week that will go down in history. The McRib is back for a limited time. It’s just a reconstituted pork patty, pickles, onions, and sauce on a hoagie roll, but there’s more to the McRib than you would think. McDonalds only releases the McRib when the price of pork is low, and in late October, pork belly futures hit their lowest price since the last time the McRib came to town. This has led some to claim the McRib is just a second lever for McDonalds in an arbitrage play on the price of pork. McDonalds is always buying pork futures, the theory goes, and when it looks like they’re going to lose money, McDonalds simply turns on the McRib production line, pushing pork consumption up, and netting McDonalds a tidy profit. With the volume you’re looking at, McDonalds will never lose money by betting on pork.

You can turn anything into a quadcopter. A dead cat? Yes, it’s been done. How about a quartet of box fans? That’s what the folks at Flite Test did, and while the completed article was wobbly and didn’t survive its first crash, it was a quadcopter made out of box fans.

X-Ray Vision For FPGAs: Using Verifla

November 9, 2018 by Al Williams 3 Comments

Last time I talked about how I took the open source Verifla logic analyzer and modified it to have some extra features. As promised, this time I want to show it in action, so you can incorporate it into your own designs. The original code didn’t actually capture your data. Instead, it created a Verilog simulation that would produce identical outputs to your FPGA. If you were trying to do some black box simulation, that probably makes sense. I just wanted to view data, so I created a simple C program that generates a VCD file you can read with common tools like gtkwave. It is all on GitHub along with the original files, even though some of those are not updated to match the new code (notably, the PDF document and the examples).

If you have enough pins, of course, you can use an external logic analyzer. If you have enough free space on the FPGA, you could put something like SUMP or SUMP2 in your design which would be very flexible. However, since these analyzers are made to be configurable from the host computer, they probably have a lot of circuitry that will compete with yours for FPGA space. You configure Verifla at compile time which is not as convenient but lets it have a smaller footprint.

Continue reading “X-Ray Vision For FPGAs: Using Verifla” →