Hackaday Podcast 167: Deadly Art Projects, Robot Lock Pickers, LED Horticulture, And Good Samaritan Repairs

Join Hackaday Editor-in-Chief Elliot Williams and Managing Editor Tom Nardi for a review of all the tech that’s fit to print. Things kick off with an update about the Hackaday Prize and a brief account of the 2022 Vintage Computer Festival East. Then we’ll talk about an exceptionally dangerous art project that’s been making the rounds on social media, a smart tea kettle that gave its life so that others can hack their device’s firmware, some suspiciously effective plant grow lights, and the slippery slope of remote manufacturer kill switches. We’ll wrap things up with some thought provoking discussion about personal liability as it pertains to community repair groups, and a close look at what makes synthetic oil worth spending extra on.

Check out the links below if you want to follow along, and as always, tell us what you think about this episode in the comments below!

Direct Download link.

Continue reading “Hackaday Podcast 167: Deadly Art Projects, Robot Lock Pickers, LED Horticulture, And Good Samaritan Repairs”

This Week In Security: UClibc And DNS Poisoning, Encryption Is Hard, And The Goat

DNS spoofing/poisoning is the attack discovered by [Dan Kaminski] back in 2008 that simply refuses to go away. This week a vulnerability was announced in the uClibc and uClibc-ng standard libraries, making a DNS poisoning attack practical once again.

So for a quick refresher, DNS lookups generally happen over unencrypted UDP connections, and UDP is a stateless connection, making it easier to spoof. DNS originally just used a 16-bit transaction ID (TXID) to validate DNS responses, but [Kaminski] realized that wasn’t sufficient when combined with a technique that generated massive amounts of DNS traffic. That attack could poison the DNS records cached by public DNS servers, greatly amplifying the effect. The solution was to randomize the UDP source port used when sending UDP requests, making it much harder to “win the lottery” with a spoofed packet, because both the TXID and source port would have to match for the spoof to work.

uClibc and uClibc-ng are miniature implementations of the C standard library, intended for embedded systems. One of the things this standard library provides is a DNS lookup function, and this function has some odd behavior. When generating DNS requests, the TXID is incremental — it’s predictable and not randomized. Additionally, the TXID will periodically reset back to it’s initial value, so not even the entire 16-bit key space is exercised. Not great. Continue reading “This Week In Security: UClibc And DNS Poisoning, Encryption Is Hard, And The Goat”

A Minimal Motoring Manifesto

A couple of years ago, Hackaday published an article, “Electric Vehicles Continue the Same Wasteful Mistakes That Limit Longevity“, in which we took a look at the way the car industry, instead of taking the move to electric traction as an opportunity to simplify their products, was instead making their electric offerings far more complex. It touched a nerve and received a very large comment volume, such that now it is our 19th most commented story of all time.

It’s something brought back to the fore by seeing a The Drive piece bemoaning the evolution of the automobile as a software receptacle governed by end-user licenses rather than a machine under the control of its owner. In turn that’s posed the question: Just what do you really need for a car, and what is superfluous? Time to provide an answer to that question, so here it is: a minimal motoring manifesto. Continue reading “A Minimal Motoring Manifesto”

Healing Wounds With The Power Of Electricity

Once upon a time, even a simple cut or scrape could be a death sentence. Before germ theory and today’s scientific understanding of medicine, infections ran rampant and took many lives.

While we’re now well-armed with disinfectants, dressings, and antibiotics, scientists are continuing to investigate new and unique methods to improve the treatment of wounds. As it turns out, a little electricity might actually help wounds heal faster.

Continue reading “Healing Wounds With The Power Of Electricity”

Big Chemistry: Synthetic Oil

For as long as I’ve been driving, I’ve been changing oil. Longer than that, actually — before I even got my license, I did a lot of the maintenance and repair work on the family car. It seemed natural to do it back then, and it continues today, despite the fact that it would probably be cheaper overall to farm the job out. I keep doing it mainly because I like keeping in touch with what’s going on with my cars.

Oil changes require supplies, but the last few times I made the trip to BigBoxMart I came back empty-handed. I don’t know whether it’s one of the seemingly endless supply chain problems or something else, but the aisle that usually has an abundance of oil was severely understocked. And what was there was mostly synthetic oil, which I’ve never tried before.

I’ve resisted the move to synthetic motor oil because it just seemed like a gimmick to relieve me of more of my hard-earned money than necessary. But now that it seems like I might have little choice but to use synthetic oil, I thought I’d do what normally do: look into the details of synthetic oils, and share what I’ve found with all of you.

Continue reading “Big Chemistry: Synthetic Oil”

Hackaday Links Column Banner

Hackaday Links: May 1, 2022

We start this week with news from Mars, because, let’s face it, the news from this planet isn’t all that much fun lately. But a couple of milestones were reached on the Red Planet, the first being the arrival of Perseverance at the ancient river delta it was sent there to explore. The rover certainly took the scenic route to get there, having covered 10.6 km over the last 424 sols to move to a position only about 3.5 km straight-line distance from where it landed. Granted, a lot of that extra driving was in support of the unexpectedly successful Ingenuity demonstration, plus taking time for a lot of pit stops along the way at interesting features. But the rover is now in place to examine sedimentary rocks most likely to harbor the fossil remains of ancient aquatic life — as opposed to the mainly igneous rocks it has studied along the crater floor so far. We’re looking forward to seeing what happens.

Continue reading “Hackaday Links: May 1, 2022”

New Tech And The Old Ways

This week on Hackaday, we featured a project that tickled my nostalgia bone, and proved that there are cool opportunities when bringing new tech to old problems. Let me explain.

[Muth] shared a project with us that combines old-school analog photography printing with modern LCD screens. The basic idea is to use a 4K monochrome screen in place of a negative, making a contact print by placing the screen directly on top of photographic paper and exposing it under a uniform light source. Just like the old ways, but with an LCD instead of film.

LCD exposure animationBut what’s the main difference between a screen and film? You can change the image on the LCD at will, of course. So when [Muth] was calibrating out exposures, it dawned on him that he could create a dynamic, animated version of his image and progressively expose different portions of the paper, extending the available dynamic range and providing him the ability to control the slightest nuances of the resulting image contrast.

As an old photo geek, this is the sort of trick that we would pull off manually in the darkroom all the time. “Dodging” would lighten up a section of the image by covering up the projected light with your hand or a special tool for a part of the exposure time. With [Muth]’s procedure, he can dodge the image programmatically on the per-pixel level. We would have killed for this ability back in the day.

The larger story here is that by trying something out of the box, applying a new tool to an old procedure, [Muth] stumbled on new capabilities. As hackers, we’re playing around with the newest tech we can get our hands on all the time. When you are, it might be that you also stumble on new possibilities simply afforded by new tech. Keep your eyes open!