2022: As The Hardware World Turns

January 3, 2023 by Tom Nardi 30 Comments

Well folks, we made it through another one. While it would be a stretch to call 2022 a good year for those of us in the hacking and making community, the light at the end of the tunnel does seem decidedly brighter now than it did this time 365 days ago. It might even be safe to show some legitimate optimism for the year ahead, but then again I was counting on my Tesla stocks to be a long-term investment, so what the hell do I know about predicting the future.

Eh, my kids probably weren’t going to college anyway.

Thankfully hindsight always affords us a bit of wisdom, deservedly or otherwise. Now that 2022 is officially in the rearview mirror, it’s a good time to look back on the highs (and lows) of the last twelve months. Good or bad, these are the stories that will stick out in our collective minds when we think back on this period of our lives.

Oh sure, some might wish they could take the Men in Black route and forget these last few years ever happened, but it doesn’t work that way. In fact, given the tumultuous times we’re currently living in, it seems more likely than not that at some point we’ll find ourselves having to explain the whole thing to some future generation as they stare up at us wide-eyed around a roaring fire. Though with the way this timeline is going, the source of said fire might be the smoldering remains of an overturned urban assault robot that you just destroyed.

So while it’s still fresh in our minds, and before 2023 has a chance to impose any new disasters on us, let’s take a trip back through some of the biggest stories and themes of the last year.

Continue reading “2022: As The Hardware World Turns” →

Your Next Airport Meal May Be Delivered By Robot

December 23, 2022 by Lewin Day 26 Comments

Robot delivery has long been touted as a game-changing technology of the future. However, it still hasn’t cracked the big time. Drones still aren’t airdropping packages into our gutters by accident, nor are our pizzas brought to us via self-driving cars.

That’s not to say that able minds aren’t working on the problem. In one case, a group of engineers are working ton a robot that will handle the crucial duty of delivering food to hungry flyers at the airport.

Continue reading “Your Next Airport Meal May Be Delivered By Robot” →

Big Chemistry: Liquefied Natural Gas

December 21, 2022 by Dan Maloney 44 Comments

The topic of energy has been top-of-mind for us since the first of our ancestors came down out of the trees looking for something to eat that wouldn’t eat them. But in a world where the neverending struggle for energy has been abstracted away to the flick of a finger on a light switch or thermostat, thanks to geopolitical forces many of us are now facing the wrath of winter with a completely different outlook on what it takes to stay warm.

The problem isn’t necessarily that we don’t have enough energy, it’s more that what we have is neither evenly distributed nor easily obtained. Moving energy from where it’s produced to where it’s needed is rarely a simple matter, and often poses significant and interesting engineering challenges. This is especially true for sources of energy that don’t pack a lot of punch into a small space, like natural gas. Getting it across a continent is challenging enough; getting it across an ocean is another thing altogether, and that’s where liquefied natural gas, or LNG, comes into the picture.

Continue reading “Big Chemistry: Liquefied Natural Gas” →

Damaged Soyuz May Leave Crew Without A Ride Home

December 19, 2022 by Tom Nardi 54 Comments

Though oddly beautiful in its own way, it’s a sight no astronaut wants to see: their spacecraft, the only way they have to return to Earth, ejecting countless iridescent droplets of something into space.

When the crew of Apollo 13 saw their craft literally bleeding out on their trip to the Moon it was clear the mission, and ultimately their lives, were in real jeopardy. Luckily the current situation is not nearly as dire, as the leaking Soyuz MS-22 spacecraft docked to the International Space Station doesn’t pose any immediate danger to those aboard the orbiting laboratory. But it’s still an unprecedented situation, and getting its crew home will require engineers on the ground to make some very difficult decisions.

This situation is still developing, and neither NASA nor their Russian counterpart Roscosmos have released much in the way of specifics. But we can make some educated guesses from the video and images we’ve seen of the stricken Soyuz capsule, and from what’s been shown to the public so far, things aren’t looking good.

Continue reading “Damaged Soyuz May Leave Crew Without A Ride Home” →

This Week In Security: Scamming The FBI, In The Wild, And AI Security

December 16, 2022 by Jonathan Bennett 16 Comments

If you’re part of a government alphabet agency, particularly running a program to share information to fight cybercrime, make sure to properly verify the identity of new members before admission. Oh, and make sure the API is rate-limited so a malicious member can’t scrape the entire user database and sell it on a dark web forum.

Putting snark aside, this is exactly what has happened to the FBI’s InfraGuard program. A clever user applied to the program using a CEO’s name and phone number, and a convincing-looking email address. The program administrators didn’t do much due diligence, and approved the application. Awkward.

BSD Ping

First off, the good folks at FreeBSD have published some errata about the ping problem we talked about last week. First off, note that while ping does elevate to root privileges via setuid, those privileges are dropped before any data handling occurs. And ping on FreeBSD runs inside a Capsicum sandbox, a huge obstacle to system compromise from within ping. And finally, further examination of the bug in a real-world context casts doubt on the idea that Remote Code Execution (RCE) is actually possible due to stack layouts.

If someone messes up somewhere, go look if you messed up in the same or similar way somewhere else.

Sage advice from [Florian Obser], OpenBSD developer. So seeing the ping problem in FreeBSD, he set about checking the OpenBSD ping implementation for identical or similar problems. The vulnerable code isn’t shared between the versions, so he reached for afl++, a fuzzing tool with an impressive list of finds. Connect afl++ to the function in ping that handles incoming data, and see what shakes out. The conclusion? No crashes found in this particular effort, but several hangs were identified and fixed. And that is a win. Continue reading “This Week In Security: Scamming The FBI, In The Wild, And AI Security” →

Australia’s Soft Plastic Recycling Debacle

December 15, 2022 by Lewin Day 81 Comments

We’ve all been told to cut back on waste to help prevent environmental crisis on Earth. Reducing waste helps reduce the need to spend time and energy digging up fresh materials, and helps reduce the amount of trash we have to go out and bury in the ground in landfills. Recycling is a big part of this drive, allowing us to divert waste by reprocessing it into fresh new materials.

Sadly, though, recycling isn’t always as magical as it seems. As Australia has just found out, it’s harder than it sounds, and often smoke and mirrors prevent the public from understanding what’s really going on. Here’s how soft plastic recycling went wrong Down Under.

Continue reading “Australia’s Soft Plastic Recycling Debacle” →

NASA Aces Artemis I, But The Journey Has Just Begun

December 12, 2022 by Tom Nardi 51 Comments

When NASA’s Orion capsule splashed down in the Pacific Ocean yesterday afternoon, it marked the end of a journey that started decades ago. The origins of the Orion capsule can be tracked back to a Lockheed Martin proposal from the early 2000s, and development of the towering Space Launch System rocket that sent it on its historic trip around the Moon started back in 2011 — although few at the time could have imagined that’s what it would end up being used for. The intended mission for the incredibly powerful Shuttle-derived rocket changed so many times over the years that for a time it was referred to as the “Rocket to Nowhere”, as it appeared the agency couldn’t decide just where they wanted to send their flagship exploration vehicle.

But today, for perhaps the first time, the future of the SLS and Orion seem bright. The Artemis I mission wasn’t just a technical success by about pretty much every metric you’d care to use, it was also a public relations boon the likes of which NASA has rarely seen outside the dramatic landings of their Mars rovers. Tens of millions of people watched the unmanned mission blast off towards the Moon, a prelude to the global excitement that will surround the crewed follow-up flight currently scheduled for 2024.

As NASA’s commentators reminded viewers during the live streamed segments of the nearly 26-day long mission around the Moon, the test flight officially ushered in what the space agency is calling the Artemis Generation, a new era of lunar exploration that picks up where the Apollo left off. Rather than occasional hasty visits to its beautiful desolation, Artemis aims to lay the groundwork for a permanent human presence on our natural satellite.

With the successful conclusion of the Artemis I, NASA has now demonstrated effectively two-thirds of the hardware and techniques required to return humans to the surface of the Moon: SLS proved it has the power to send heavy payloads beyond low Earth orbit, and the long-duration flight Orion took around our nearest celestial neighbor ensured it’s more than up to the task of ferrying human explorers on a shorter and more direct route.

But of course, it would be unreasonable to expect the first flight of such a complex vehicle to go off without a hitch. While the primary mission goals were all accomplished, and the architecture generally met or exceeded pre-launch expectations, there’s still plenty of work to be done before NASA is ready for Artemis II.

Continue reading “NASA Aces Artemis I, But The Journey Has Just Begun” →