Exploring The World Of Nintendo 3DS Homebrew

When Nintendo officially ended production of the 3DS in September 2020, it wasn’t exactly a surprise. For one thing, some variation of the handheld system had been on the market since 2011. Which is not to say the product line had become stagnant: the system received a considerable mid-generation refresh, and there was even a more affordable variant introduced that dropped the eponymous stereoscopic 3D effect, but nearly a decade is still a fairly long life in the gaming industry. Of course Nintendo’s focus on the Switch, a hybrid device that blurs the line between console and handheld games, undoubtedly played a part in the decision to retire what could effectively be seen as a competing product.

While putting the 3DS out to pasture might have been the logical business move, a quick check on eBay seems to tell a different story. Whether it’s COVID keeping people indoors and increasing the demand for at-home entertainment, or the incredible library of classic and modern games the system has access to, the fact is that a used 3DS in good condition is worth more today than it was when it was brand new on the shelf this time last year.

I’ve certainly made more expensive mistakes.

In short, this was the worst possible time for me to decide that I finally wanted to buy a 3DS. Then one day I noticed the average price for a Japanese model was far lower than that of its American counterpart. I knew the hardware was identical, but could the firmware be changed?

An evening’s worth of research told me the swap was indeed possible, but inadvisable due to the difficulty and potential for unexpected behavior. Of course, that’s never stopped me before.

So after waiting the better part of a month for my mint condition 3DS to arrive from the land of the rising sun, I set out to explore the wide and wonderful world of Nintendo 3DS hacking.

Continue reading “Exploring The World Of Nintendo 3DS Homebrew”

How Best To Get Your Project On Hackaday

We’re blessed to have such a great community at Hackaday. Our tipline often overfloweth with all manner of projects and builds of all stripes. We see it all here, from beginners just starting out with their first Arduino to diehard hackers executing daringly complex builds in their downtime, and everything in between.

If you’re sitting there in the grandstands, watching in awe, you might wonder what it takes to grace these hallowed black pages. In life, nothing is guaranteed, but I’ve been specially authorised to share with you a few tips that can maximise your chances of seeing your project on Hackaday.

Continue reading “How Best To Get Your Project On Hackaday”

Review: Sequre SQ-D60 Temperature Controlled Soldering Iron

Over the past few years a new class of soldering iron has arisen: a temperature controlled iron no longer tied to a bulky mains-powered base station, but using low-voltage DC power and with all electronics concealed in a svelte handle. First came the Miniware TS100, and then  many more, with slightly different feature sets and at varying price points. We’ve reviewed a few of them over the years, and today we have the most recent contender in the Sequre SQ-D60. It follows the formula closely, but costs only £20 (about $26). This price puts it in an attractive budget category, and its USB-C power option makes it forward-looking over models with barrel jacks. Description over, it’s time to plug it in and put it through its paces.

What’s In The Box?

That's a lot of extra bits for a budget iron!
That’s a lot of extra bits for a budget iron!

In the box, aside from the handle containing the electronics, were a surprisingly comprehensive array of parts and accessories. The handle itself is similarly-sized to its competitors, being only slightly longer than that of Pine64’s Pinecil. The tip supplied was unexpectedly a slanted chisel, so I may have managed to order incorrectly, though since it shares the same tip design as both the TS100 and the Pinecil I have plenty of alternative tips should I need one. Otherwise there was a little bag of hex screws along with a key and a driver for them, a little stand with a sponge, a set of Sequre stickers, a USB-C to barrel jack cable, and a barrel jack-to-XT60 connector for use with LiPo battery packs. These last two cables are a particularly useful addition.

At first sight the tip doesn’t seem to have any means of being fixed into its socket, but a closer inspection reveals that there is a hex screw hiding underneath a silicone finger sleeve that holds it securely when tightened. The handle has a simple enough interface, with just two buttons and a 3-digit, 7-segment display. Powering it up from a 45 W USB-PD power supply, and it heats up to 300 °C in around ten seconds after pressing one of the buttons. My usual soldering temperature is 360 °C, and it has an interface involving long presses of one of the buttons before they become up and down buttons to select the temperature. In prolonged use the handle doesn’t become noticeably warm, and aside from a slight new-electronics-getting-hot smell there was no immediate concern that it might release magic smoke. Continue reading “Review: Sequre SQ-D60 Temperature Controlled Soldering Iron”

Linux Fu: A Little Bit Of (Network) History Repeating Itself

These days, embedded systems often have networks and that can make them significantly more complex. Networks are usually pretty nondeterministic and there are a variety of oddball conditions. For example, when your public-access pick and place machine gets written up on Hackaday and you suddenly get a 50X surge in traffic, how does your network stack handle it? While there’s no silver bullet for network testing, there are some tricks that can make it easier and one of those is the tcpreplay utilities that allow you to record complex network traffic and then play it back in a variety of ways. This has many benefits, especially if you manage to capture that one thing that triggers bad behavior sporadically. Being able to play it back on demand can speed up diagnostics considerably.

General Idea

You probably know that tcpdump allows you to grab packet captures from a network interface and save them to a file. If you prefer a GUI, you probably use Wireshark, which uses the same underlying library (libpcap) to grab the data. In fact, you can capture data using tcpdump and look at it with Wireshark, although there are other tools like tcptrace or Ngrep that can work with the output, also.

While the output of the command can be a little cryptic without tool support, a program called tcpreplay can take that data and feed it back in a variety of ways. Of course, you can modify the file first — there are tools to make that easier and — if you need to — you can craft your own network traffic by hand or using one of a variety of tools. This process is often called “packet crafting.”

Continue reading “Linux Fu: A Little Bit Of (Network) History Repeating Itself”

Blocking Out The Sun: Viable Climate Countermeasure Or Absolute Madness?

If there’s one thing humans hate, it’s exercising willpower. Whether its abstaining from unhealthy foods, going to bed early, or using less energy and reducing greenhouse gas emissions, we’re famously bad at it. Conversely, if there’s one thing humans love, it’s a workaround. Something that lets us live our lives as the carefree hedonists we are, and deals with the sticky consequences so we don’t have to.

One such workaround for the issue of climate change is a doozy, though — blocking out the sun’s rays in order to cool our warming planet.

Continue reading “Blocking Out The Sun: Viable Climate Countermeasure Or Absolute Madness?”

“Paper” Bottles For Your Fizzy Drinks (And Bottle Rockets)

A story that passed almost unnoticed was that the Coca-Cola company plan to run a limited trial of paper bottles. Wait, paper for a pressurized beverage? The current incarnation still uses a plastic liner and cap but future development will focus on a “bio-based barrier” and a bio composite or paper cap tethered to the vessel.

Given that plastic pollution is now a major global concern this is interesting news, as plastic drinks bottles make a significant contribution to that problem. But it raises several questions, first of all why are we seemingly unable to recycle the bottles in the first place, and given that we have received our milk and juice in paper-based containers for decades why has it taken the soda industry so long?

Plastic soft drink bottles are made from Polyethylene terephthalate or PET, the same polyester polymer as the one used in Dacron or Terylene fabrics. They’re blow-moulded, which is to say that an injection-moulded preform something like a plastic test tube with a screw top fitting is expanded from inside in a mould by compressed gas. As anyone who has experimented with bottle rockets will tell you, they are immensely strong, and as well as being cheap to make and transport they are also readily recyclable when separated from their caps.

Continue reading ““Paper” Bottles For Your Fizzy Drinks (And Bottle Rockets)”

This Week In Security: NAME:WRECK, Signal Hacks Back, Updates, And More

NAME:WRECK is a collection of vulnerabilities in DNS implementations, discovered by Forescout and JSOF Research. This body of research can be seen as a continuation of Ripple20 and AMNESIA:33, as it builds on a class of vulnerability discovered in other network stacks, problems with DNS message compression.

Their PDF Whitepaper contains a brief primer on the DNS message format, which is useful for understanding the class of problem. In such a message, a DNS name is encoded with a length-value scheme, with each full name ending in a null byte. So in a DNS Request, Hackaday.com would get represented as [0x08]Hackaday[0x03]com[0x00]. The dots get replaced by these length values, and it makes for an easily parsable format.

Very early on, it was decided that continually repeating the same host names in a DNS message was wasteful of space, so a compression scheme was devised. DNS compression takes advantage of the maximum host/domain length of 63 characters. This max size means that the binary representation of that length value will never contain “1”s in the first two digits. Since it can never be used, length values starting with a binary “11” are used to point to a previously occurring domain name. The 14 bits that follow this two bit flag are known as a compression pointer, and represent a byte offset from the beginning of the message. The DNS message parser pulls the intended value from that location, and then continues parsing.

The problems found were generally based around improper validation. For example, the NetX stack doesn’t check whether the compression pointer points at itself. This scenario leads to a tight infinite loop, a classic DoS attack. Other systems don’t properly validate the location being referenced, leading to data copy past the allocated buffer, leading to remote code execution (RCE). FreeBSD has this issue, but because it’s tied to DHCP packets, the vulnerability can only be exploited by a device on the local network. While looking for message compression issues, they also found a handful of vulnerabilities in DNS response parsing that aren’t directly related to compression. The most notable here being an RCE in Seimens’ Nucleus Net stack. Continue reading “This Week In Security: NAME:WRECK, Signal Hacks Back, Updates, And More”