The Postmortem Password Problem

September 1, 2021 by Eric Evenchick 82 Comments

Death and passwords: two things we just can’t avoid. With so much of our lives tied up in cloud services nowadays, there’s good reason to worry about what happens to these accounts if we drop dead tomorrow. For many of us, important documents, photos, financial information and other data will be locked behind a login prompt. Your payment methods will also expire shortly after you have, which could lead to data loss if not handled promptly. The most obvious way to address this is to give a trusted party access in case of emergency.

A Bad Solution

Let’s start with the simplest solution: using the same password everywhere. Great, all you need to do is put this on a Post-it note, stuff it in an envelope, and let someone know where to find it. Unfortunately, using a single password for many services is a terrible idea. Password breaches happen, and if you’re using a single password across the internet, they can be disastrous.

Password breaches are usually the result of an attacker finding a vulnerability that allows reading password data from an application’s database. Odds are high that your information has been leaked in one of these breaches. You can check if your email is on a list of known breaches with Have I Been Pwned. Don’t feel bad if you’ve been pwned, my email shows up on six different breaches, and this service only indexes publicly known breaches!

Depending on the competency of the company that was breached, your password may have been stolen in a few different formats. In the worst case, the passwords were stored as-is (i.e., cleartext), and the breach contains your actual password. Nowadays, storing passwords in cleartext is never considered acceptable. A hash of the password is stored instead. Attackers need to use a tool like hashcat to try to recover the passwords via brute force hash cracking. This is slow for complex passwords, but is always getting faster as GPUs improve.

So we really need to use different passwords everywhere, or our Tumblr account from 2013 could give access to our bank account. Given the large number of services we use and our inability to remember passwords, we’re going to need to use a password manager. Continue reading “The Postmortem Password Problem” →

Reporting From BornHack 2021: Hacker Camps Making It Through The Pandemic

August 31, 2021 by Jenny List 14 Comments

In a normal summer we would be spoiled for choice here in Europe when it came to our community’s events, with one big camp and a host of smaller ones near and far. Only the most hardcore of travelers manage to make it to all of them, but it’s usually possible to take in at least one or two over the season. But of course, this isn’t a normal summer. Many of us may now be vaccinated against COVID-19, but we remain in the grip of a global pandemic. The massive Dutch MCH camp was postponed until 2022, and most of the smaller camps have fallen by the wayside due to uncertainty. But one hacker camp carried on.

BornHack in Denmark was the world’s only in-person summer hacker event of 2020, and on its return last week made it the only such event in Europe for 2021. Having secured a ticket earlier in the year when they went on sale, I navigated the tricky world of cross-border European travel in a pandemic to make my way to the Hylkedam scout camp on the Danish isle of Fyn for a week in the company of hackers from all over Northern Europe. BornHack had achieved the impossible again, and it was time to enjoy a much-needed week at a hacker camp.

Continue reading “Reporting From BornHack 2021: Hacker Camps Making It Through The Pandemic” →

Fusion Ignition: What Does The NIF’s 1.3 MJ Yield Mean For Fusion Research?

August 30, 2021 by Maya Posch 37 Comments

Earlier this month, Lawrence Livermore National Laboratory (LLNL) announced to the world that they had achieved a record 1.3 MJ yield from a fusion experiment at their National Ignition Facility (NIF). Yet what does this mean, exactly? As their press release notes, the main advancement of these results will go towards the US’s nuclear weapons arsenal.

This pertains specifically to the US’s nuclear fusion weapons, which LLNL along with Los Alamos National Laboratory (LANL) and other facilities are involved in the research and maintenance of. This traces back to the NIF’s roots in the 1990s, when the stockpile stewardship program was set up as an alternative to nuclear weapons testing. Much of this research involves examining how today’s nuclear weapons degrade over time, and ways to modernize the existing arsenal.

In light of this, one may wonder what the impact of these experimental findings from the NIF are beyond merely ensuring that the principle of MAD remains intact. To answer that question, we have to take a look at inertial confinement fusion (ICF), which is the technology at the core of the NIF’s experiments.

Continue reading “Fusion Ignition: What Does The NIF’s 1.3 MJ Yield Mean For Fusion Research?” →

3D Printering: Is Hassle-Free Bed Leveling Finally Here?

August 30, 2021 by Donald Papp 72 Comments

3D printers have come a long way over the past several years, but the process of bed leveling remains a pain point. Let’s take a look at the different ways the problem has been tackled, and whether recent developments have succeeded in automating away the hassle.

Anycubic Vyper 3D printer, front view — Anycubic Vyper, with an auto-leveling feature we decided to take a closer look at.

Bed leveling and first layer calibration tends to trip up novices because getting it right requires experience and judgment calls, and getting it wrong means failed prints. These are things 3D printer operators learn to handle with time and experience, but they are still largely manual processes that are often discussed in ways that sound more like an art than anything else. Little wonder that there have been plenty of attempts to simplify the whole process.

Some consumer 3D printers are taking a new approach to bed leveling and first layer calibration, and one of those printers is the Anycubic Vyper, which offers a one-touch solution for novices and experienced users alike. We accepted Anycubic’s offer of a sample printer specifically to examine this new leveling approach, so let’s take a look at the latest in trying to automate away the sometimes stubborn task of 3D printer bed leveling.

Continue reading “3D Printering: Is Hassle-Free Bed Leveling Finally Here?” →

Who Owns The Machine Anyway?

August 28, 2021 by Elliot Williams 42 Comments

The story of the McDonalds’ frozen treat machine involves technology, trade secrets, inside business dealings, franchiser/franchisee friction, and an alleged NDA violation. In short: lots of money and lawyers. But it also involves something that matters to all of us hackers — what it means to own a machine.

The brief background is that McDonald’s requires its franchisees to buy a particular Taylor Soft Serve machine. The machine would enter pasteurizing mode and has opaque error codes that are triggered apparently without the owners or operators understanding, at which point Taylor service techs come in to fix them — and get paid for their service, naturally. A small hardware startup, Kytch, stepped into the mess with a device that man-in-the-middles the Taylor machine’s status codes, allowing the machine’s owners to diagnose and monitor it themselves. Heroes, right?

Taylor, naturally, wants to look at a Kytch device, but they’re locked up under NDAs that Kytch require users to sign in order to protect their trade secrets. So when Taylor gets their hands on one, Kytch takes them to court for, ironically, reverse engineering their device that they built to reverse Taylor’s protocols.

There are no good guys in this fight: it’s corporate secrecy fighting corporate secrets. None of which, by the way, is Hackaday particularly fond of. Why? Because these secrets rob the ostensible owners of the devices of their ability to inspect, fix, and operate their machines. This is akin to the “right to repair” idea, but it’s somehow even more fundamental — the right to know what your own devices are doing.

What this story needs is a Robin Hood. And as the devices we get sold become increasingly wrapped up in EULAs and NDAs, and full of secret sauce that’s out of our control, we’re going to need a lot more Robin Hoods. It’s McDonald’s frozen treat machines, but it’s also your smart thermostat and your inkjet printer and your — you name it. Have at it, Hackaday!

Robot Utopia

We see so many dystopian visions of automation, it’s time for us to do it right! The Redefine Robots round of the 2021 Hackaday Prize just started, and it’s your chance to build robots that respect the users. It doesn’t have to be the largest project in the world, but it does have to be automatic and helpful. Start your engines!

Hands-On: MNT Reforms The Laptop

August 26, 2021 by Kerry Scharfglass 122 Comments

When we met our contact from MNT in the coffee shop, he was quietly working away on his laptop. Jet black and standing thick it was like an encyclopedia that didn’t quite blend in with the sea of silver MacBook lookalikes on the surrounding tables. After going through all the speeds and feeds we eagerly got our 64 piece driver kit out to open it up and see what made this marvel tick, but when the laptop was turned over it became clear that no tools were needed. The entire bottom of the machine was a single rectangle of transparent acrylic revealing everything from sharp white status LEDs on the bare mainboard to individual 18650 LiFePO4 battery cells in a tidy row. In a sense that’s the summary of the entire product: it’s a real laptop you can use to get work done, and every element of it from design to fabrication is completely transparent.

a view of the inside of a MNT Reform laptop, showing screen and keyboard — The MNT Reform

The device pictured here is called the Reform and is designed and manufactured by MNT, a company in Berlin, Germany (note MNT stands for MNT, it’s not an acronym). The Reform is a fully open source laptop which is shipping today and available via distribution through Crowd Supply. If the aesthetic doesn’t make it clear the Reform is an opinionated product designed from the ground up to optimize for free-as-in-freedom: from it’s solid metal chassis to the blob-free GNU/Linux distribution running inside.

We’re here to tell you that we’ve held one, it’s real, and it’s very well built.

Continue reading “Hands-On: MNT Reforms The Laptop” →

As ISS Enters Its Final Years, Politics Take Center Stage

August 24, 2021 by Tom Nardi 40 Comments

There was a time when the idea of an international space station would have been seen as little more than fantasy. After all, the human spaceflight programs of the United States and the Soviet Union were started largely as a Cold War race to see which country would be the first to weaponize low Earth orbit and secure what military strategists believed would be the ultimate high ground. Those early rockets, not so far removed from intercontinental ballistic missiles (ICBMs), were fueled as much by competition as they were kerosene and liquid oxygen.

Space Shuttle docked to Mir space station in 1995. — *Atlantis* docked to *Mir* in 1995.

Luckily, cooler heads prevailed. The Soviet Almaz space stations might have carried a 23 mm cannon adapted from tail-gun of the Tu-22 bomber to ward off any American vehicles that got too close, but the weapon was never fired in anger. Eventually, the two countries even saw the advantage of working together. In 1975, a joint mission saw the final Apollo capsule dock with a Soyuz by way of a special adapter designed to make up for the dissimilar docking hardware used on the two spacecraft.

Relations further improved following the dissolution of the Soviet Union in 1991, with America’s Space Shuttle making nine trips to the Russian Mir space station between 1995 and 1997. A new era of cooperation had begun between the world’s preeminent space-fairing countries, and with the engineering lessons learned during the Shuttle-Mir program, engineers from both space agencies began laying the groundwork for what would eventually become the International Space Station.

Unfortunately after more than twenty years of continuous US and Russian occupation of the ISS, it seems like the cracks are finally starting to form in this tentative scientific alliance. With accusations flying over who should take the blame for a series of serious mishaps aboard the orbiting laboratory, the outlook for future international collaboration in Earth orbit and beyond hasn’t been this poor since the height of the Cold War.

Continue reading “As ISS Enters Its Final Years, Politics Take Center Stage” →