A Virtual Tour Of The B-17

September 24, 2019 by Tom Nardi 98 Comments

The Boeing B-17 “Flying Fortress” is arguably the most recognizable aircraft of the Second World War. Made infamous by the daring daylight strategic bombing runs they carried out over Germany, more than 12,000 of these four-engined bombers were produced between 1939 and 1945. Thanks to the plane’s renowned survivability in battle, approximately 60% of them made it through the war and returned home to the United States, only to be rounded up in so-called “boneyards” where they were ultimately cut up and sold as scrap. Today there are fewer than 50 intact Boeing B-17s left in the world, and of those, only 11 remain airworthy.

One of them is Nine-O-Nine, a B-17G built in April 7, 1945. This particular aircraft was built too late to see any combat, although in the 1950s she was fitted with various instruments and exposed to three separate nuclear blasts for research purposes. It’s actually not the real Nine-O-Nine either, the original was scrapped after it completed eighteen bombing runs over Berlin. Without a combat record of its own, this bomber was painted to look like the real Nine-O-Nine in honor of its incredible service record of never losing a crewman.

Since 1986, Nine-O-Nine has been owned by the Collings Foundation, who operate her as a living history exhibit. The bomber flies around the United States with an entourage of similarly iconic WWII aircraft as part of the Wings of Freedom Tour, stopping by various airports and giving the public a chance to climb aboard and see the pinnacle of mid-1940s strategic bombing technology. History buffs with suitably deep pockets can even book a seat on one of the scheduled 30-minute flights that take place at every stop on the Tour.

I was lucky enough to have the The Wings of Freedom Tour pass through my area recently, and couldn’t pass up the opportunity to experience this incredible aircraft first hand. The fact that I’m equal parts a coward and miser kept me from taking a ride aboard the 74 year old Nine-O-Nine, at least for now, but I made sure to take plenty of pictures from inside this lovingly restored B-17G while it was safely on the ground.

Continue reading “A Virtual Tour Of The B-17” →

FIDO2: The Dream Of Password-Free Authentication On The WWW

September 23, 2019 by Maya Posch 29 Comments

Of all the things which are annoying about the modern World Wide Web, the need to create and remember countless passwords is on the top of most people’s lists. From dozens of passwords for everything from social media sites to shopping, company, and productivity-related platforms like Github, a large part of our day is spent dealing with passwords.

While one can totally use a password manager to streamline the process, this does not absolve you from having to maintain this list and ensure you never lose access to it, while simultaneously making sure credentials for the password manager are never compromised. The promise of password-less methods of authentication is that of a world where one’s identity is proven without hassle, and cannot ever be stolen, because it relies on biometrics and hardware tokens instead of an easily copied password.

The FIDO2 project promises Web Authentication that means never entering a password into a website again. But like everything, it comes with some strings attached. In this article, we’ll take a look at how FIDO2 plans to work and how that contrasts with the state of security in general.

Continue reading “FIDO2: The Dream Of Password-Free Authentication On The WWW” →

Solar System Wars: Walmart Versus Tesla

September 19, 2019 by Dan Maloney 61 Comments

It seems like hardly a day goes by that doesn’t see some news story splashed across our feeds that has something to do with Elon Musk and one or another of his myriad companies. The news is often spectacular and the coverage deservedly laudatory, as when Space X nails another double landing of its boosters after a successful trip to space. But all too often, it’s Elon’s baby Tesla that makes headlines, and usually of the kind that gives media relations people ulcers.

The PR team on the automotive side of Tesla can take a bit of a breather now, though. This time it’s Elon’s solar power venture, Tesla Energy Operations, that’s taking the heat. Literally — they’ve been sued by Walmart for rooftop solar installations that have burst into flames atop several of the retail giant’s stores. While thankfully no lives have been lost and no major injuries were reported, Walmart is understandably miffed at the turn of events, leading to the litigation.

Walmart isn’t alone in their exposure to potential Tesla solar problems, so it’s worth a look to see what exactly happened with these installations, why they failed, and what we as hackers can learn from the situation. As we’ll see, it all boils down to taking electrical work very seriously and adhering to standards designed to keep everyone safe, even when they just seem like a nuisance.

Continue reading “Solar System Wars: Walmart Versus Tesla” →

Tool Rolls, The Fabric Design Challenge That Can Tidy Up Any Workshop

September 18, 2019 by Kristina Panos 31 Comments

You’ve designed PCBs. You’ve cut, drilled, Dremeled, and blow-torched various objects into project enclosurehood. You’ve dreamed up some object in three dimensions and marveled as the machine stacked up strings of hot plastic, making that object come to life one line of g-code at a time. But have you ever felt the near-limitless freedom of designing in fabric?

I don’t have to tell you how satisfying it is to make something with your hands, especially something that will get a lot of use. When it comes to that sweet cross between satisfaction and utility, fabric is as rewarding as any other medium. You might think that designing in fabric is difficult, but let’s just say that it is not intuitive. Fabric is just like anything else — mysterious until you start learning about it. The ability to design and implement in fabric won’t solve all your problems, but it sure is a useful tool for the box.

WoF? Fat quarter? How much is a yard of fabric, anyway?

To prove it, I’m going to take you through the process of designing something in fabric. More specifically, a tool roll. These two words may conjure images of worn, oily leather or canvas, rolled out under the open hood of a car. But the tool roll is a broad, useful concept that easily and efficiently bundles up anything from socket wrenches to BBQ utensils and from soldering irons to knitting needles. Tool rolls are the best in flexible, space-saving storage — especially when custom-designed for your need.

In this case, the tools will be pens, notebooks, and index cards. You know, writer stuff. But the same can just as easily organize your oscilloscope probes. It’s usefully and a great first foray into building things with fabric if this is your first time.

Continue reading “Tool Rolls, The Fabric Design Challenge That Can Tidy Up Any Workshop” →

India’s Moon Mission Is Far From Over

September 17, 2019 by Tom Nardi 19 Comments

India’s Chandrayaan-2 mission to the Moon was, in a word, ambitious. Lifting off from the Satish Dhawan Space Centre on July 22nd, the mission hoped to simultaneously deliver an orbiter, lander, and rover to our nearest celestial neighbor. The launch and flight to the Moon went off without a hitch, and while there were certainly some tense moments, the spacecraft ultimately put itself into a stable lunar orbit and released the free-flying lander so it could set off on its independent mission.

Unfortunately, just seconds before the Vikram lander touched down, an anomaly occurred. At this point the Indian Space Research Organisation (ISRO) still doesn’t know exactly what happened, but based on the live telemetry stream from the lander, some have theorized the craft started tumbling or otherwise became unstable between three and four kilometers above the surface.

Telemetry indicates a suboptimal landing orientation

In fact, for a brief moment the telemetry display actually showed the Vikram lander completely inverted, with engines seemingly accelerating the spacecraft towards the surface of the Moon. It’s unclear whether this was an accurate depiction of the lander’s orientation in the final moments before impact or a glitch in the real-time display, but it’s certainly not what you want to see when your craft is just seconds away from touchdown.

But for Chandrayaan-2, the story doesn’t end here. The bulk of the mission’s scientific goals were always to be accomplished by the orbiter itself. There were of course a number of scientific payloads aboard the Vikram lander, and even the Pragyan rover that it was carrying down to the surface, but they were always secondary objectives at best. The ISRO was well aware of the difficulties involved in making a soft landing on the Moon, and planned their mission objectives accordingly.

Rather than feel sorrow over the presumed destruction of Vikram and Pragyan, let’s take a look at the scientific hardware aboard the Chandrayaan-2 orbiter, and the long mission that still lies ahead of it.

Continue reading “India’s Moon Mission Is Far From Over” →

Hams In Space: Gearing Up For The Lunar Gateway

September 16, 2019 by Dan Maloney 12 Comments

Humanity had barely taken its first tentative steps into space with primitive satellites when amateur radio operators began planning their first satellites. Barely four years after Sputnik’s brief but momentous launch and against all odds, OSCAR 1 was launched as a secondary payload from an Air Force missile taking a spy satellite into orbit. Like Sputnik, OSCAR 1 didn’t do much, but it was a beginning.

Since then, amateur radio has maintained a more or less continuous presence in space. That first OSCAR has been followed by 103 more, and hams have flown on dozens of missions from the Space Shuttle to the ISS, where pretty much everyone is a licensed amateur. And now, as humans prepare once again to journey into deep space via the stepping stone of the proposed Lunar Gateway, amateur radio is planning on going along for the ride.

Continue reading “Hams In Space: Gearing Up For The Lunar Gateway” →

This Week In Security: Simjacker, Microsoft Updates, Apple Vs Google, Audio DeepFakes, And NetCAT

September 13, 2019 by Jonathan Bennett 20 Comments

We often think of SIM cards as simple data storage devices, but in reality a SIM card is a miniature Universal integrated circuit card, or smart card. Subscriber data isn’t a simple text string, but a program running on the smart cards tiny processor, acting as a hardware cryptographic token. The presence of this tiny processor in everyone’s cell phone was eventually put to use in the form of the Sim application ToolKit (STK), which allowed cell phone networks to add services to very basic cell phones, such as mobile banking and account management.

Legacy software running in a place most of us have forgotten about? Sounds like it’s ripe for exploitation. The researchers at Adaptive Mobile Security discovered that exploitation of SMS messages has been happening for quite some time. In an era of complicated and sophisticated attacks, Simjacker seems almost refreshingly simple. An execution environment included on many sim cards, the S@T Browser, can request data from the cell phone’s OS, and even send SMS messages. The attacker simply sends an SMS to this environment containing instructions to request the phones unique identifier and current GPS location, and send that information back in another SMS message.

It’s questionable whether there is actually an exploit here, as it seems the S@T Browser is just insecure by design. Either way, the fact that essentially anyone can track a cell phone simply by sending a special SMS message to that phone is quite a severe problem. Continue reading “This Week In Security: Simjacker, Microsoft Updates, Apple Vs Google, Audio DeepFakes, And NetCAT” →