Easy, Extensible, Open

I’m a huge DIY’er. I don’t like to buy things when I can build them myself. But honestly, that doesn’t always end up in the optimal allocation of my time, when viewed from a getting-stuff-done perspective. Sometimes, if you’ve got a bigger project in mind, the right way is the quick way, and the quick way is buying something that already works. But when that something is itself not hackable, you’d better be darn sure that it does what you need, and what you could reasonably expect to need in the future, out of the box. And that’s where extensibility comes in.

It’s rare to find products out there that are designed to be both easy to use for the newbie, but extensible for the advanced user. For one, it’s hard work to tick either one of these boxes alone, so it’s twice as hard to nail both. But my other sinking suspicion is that designers tend to have an end user in mind, and maybe only one end user, and that’s the problem. When designing for the newbie, convenience is king. Or if targeting the pro, you maximize flexibility, but perhaps at the expense of designed-in complexity.

There’s a way out, a cheat code, if you will. And that’s making the project open source. Go ahead and hide the complexity from the new user if you want — as long as the pro is able to dive into the schematics or the source code, she’ll figure out how to extend it herself. Openness frees the designers up to worry about making it easy to use, without compromising its flexibility.

I think that this blend of easy and extensible, through openness, is what fundamentally drove the success of Arduino. On the surface layer, there are libraries that just do what you want and drop-down menus with examples to access them. But when you needed to actually use the chip’s hardware peripherals directly, there was nothing stopping you. For the community at large, the fact that all of the code was openly available meant that extending the base was easy — and let’s not beat around the bush, the community’s libraries, tutorials, and example projects are the real reason for the success of the platform.

Look around you, and look out when you’re making that next non-DIY shortcut purchase. Is it easy to use? Can you make it do the things that it doesn’t yet do? Just two simple requirements, yet they seem to knock out so many products if you want both. Then look at those that are both simple and flexible — are they also open? At least in my little world, the answer is almost always “yes”.

The 2022 Hackaday Prize Hack Chat Kicks Things Off

The 2022 Hackaday Prize is on, and we’ve already seen some incredible submissions by folks who believe their idea just might have what it takes to make the world a better place. But as with all contests, it’s good to understand all the rules before you get too involved. We promise nothing’s hidden in the fine print, but we certainly don’t fault anyone who wants to make sure.

Which is why Majenta Strongheart, Head of Design and Partnerships at our parent company Supplyframe, stopped by this week’s Hack Chat to answer any and all questions the community had about this global hardware design challenge. A lot of ground was covered in an hour, with Majenta making sure everyone’s questions and concerns were addressed to their satisfaction. After all, with a residency at the Supplyframe DesignLab and a total of $125,000 in prize money up for grabs, we want to make sure everyone’s got the facts straight.

So what burning questions did the Hackaday community have about this year’s Prize? Several people wanted to know more about the themes of sustainability, circularity, and climate crisis resiliency. For example, what exactly does circularity mean in this context? While Challenge #2 “Reuse, Recycle, Revamp” most clearly exemplifies the idea, Majenta explained that this time around the judges will be giving particular consideration to ideas that limit the extraction of raw materials and the production of waste.

For a practical example, 2022 Hackaday Prize judge James Newton pointed to the direct granule extruder designed by Norbert Heinz. The project, which took 5th place last year, allows waste plastic to easily be repurposed in a desktop 3D printer. This includes objects which the printer itself produced, but for whatever reason, are no longer desired or needed. This “life-cycle” for printed objects, wherein the same plastic can be printed over and over again into new objects, is a perfect encapsulation of circularity within the context of this year’s prize.

Others were looking for clarification on the contest rules. Specifically, there was some confusion about entering existing projects into the competition. Did it have to be a completely new idea? What if you’d already been working on the project for years, but had never shown it publicly before? Not to worry — existing projects can absolutely be entered into the 2022 Hackaday Prize. In fact, even if the project had already been entered into the Hackaday Prize previously, it’s still fair game.

But there is an important caveat: to be eligible for this year’s Prize, the project MUST be documented on a new Hackaday.io page. Additionally, if it’s a project that has previously been entered into a Hackaday contest, you’ll have to show that it is “significantly different from when previously entered and show meaningful development during the course of the Contest“, as stated in the official rules. In layman’s terms, it means that anyone who tries to submit and old and outdated Hackaday.io page into the competition will find their entry disqualified.

Towards the end of the Chat, Erin Kennedy, a Hackaday Prize veteran that readers may know better as “Erin RobotGrrl” brought up the subject of mentors. In previous years, hardware luminaries like Andrew “Bunnie” Huang and Mitch Altman were made available to offer advice and guidance to the individuals and teams behind the Prize entries. While very proud of this effort, Majenta explained that at least for now, Mentor Sessions are on hold until that aspect of the program can be retooled. The main issue is figuring out the logistics involved; planing video calls between several groups of busy folks is just as tricky as it sounds. That said, bringing the Mentor Sessions back for 2022 isn’t completely out of the question if there’s enough interest from the competitors.

We appreciate Majenta taking the time to directly answer questions from the community, and hope that those who had their questions or concerns addressed during the Chat will ultimately decide to toss their hat into the ring. With a worthy goal and plenty of opportunities to win, we sincerely want to see as many people as possible get their entries in before the October 16th deadline. If you’re ready to take the next step, head over to the Contest page and show us what you’ve got.


The Hack Chat is a weekly online chat session hosted by leading experts from all corners of the hardware hacking universe. It’s a great way for hackers connect in a fun and informal way, but if you can’t make it live, these overview posts as well as the transcripts posted to Hackaday.io make sure you don’t miss out.

Hackaday Podcast 164: Vintage NASA Soldering, Mouse Bites, ATTiny85 Graphics, And PVC Pontoons

Join Hackaday Editor-in-Chief Elliot Williams and Managing Editor Tom Nardi as they review the most interesting hacks and stories of the previous week. This time we’ll start things off by talking about the return of in-person events, and go over several major conventions and festivals that you should add to your calendar now. Then we’ll look at a NASA training film from the Space Race, an interesting radio-controlled quirk that Tesla has built into their cars for some reason, a very promising autonomous boat platform, and some high performance visuals generated by an ATtiny85. Stick around to find out what happens with an interplanetary probe looses its ride to space, and why the best new enclosure for your Raspberry Pi 4 might be a surveillance camera.

Check out the links below if you want to follow along, and as always, tell us what you think about this episode in the comments below!

Direct Download

Continue reading “Hackaday Podcast 164: Vintage NASA Soldering, Mouse Bites, ATTiny85 Graphics, And PVC Pontoons”

This Week In Security: OpenSSH, Git, And Sort-of NGINX 0-day

OpenSSH has minted their 9.0 release, and it includes a pair of security changes. Unlike most of the releases we cover here, this one has security hardening to prevent issues, not emergency fixes for current ones. First up, the venerable scp/rcp protocol has been removed. Your scp commands will now use SFTP under the hood. The more interesting security change is the new default key exchange, the NTRU algorithm. NTRU is thought to be quantum-hard.
Continue reading “This Week In Security: OpenSSH, Git, And Sort-of NGINX 0-day”

Remoticon 2021 // Jeroen Domburg [Sprite_tm] Hacks The Buddah Flower

Nobody likes opening up a hacking target and finding a black epoxy blob inside, but all hope is not lost. At least not if you’ve got the dedication and skills of [Jeroen Domburg] alias [Sprite_tm].

It all started when [Big Clive] ordered a chintzy Chinese musical meditation flower and found a black blob. But tantalizingly, the shiny plastic mess also included a 2 MB flash EEPROM. The questions then is: can one replace the contents with your own music? Spoiler: yes, you can! [Sprite_tm] and a team of Buddha Chip Hackers distributed across the globe got to work. (Slides here.)

[Jeroen] started off with binwalk and gets, well, not much. The data that [Big Clive] dumped had high enough entropy that it looks either random or encrypted, with the exception of a couple tiny sections. Taking a look at the data, there was some structure, though. [Jeroen] smelled shitty encryption. Now in principle, there are millions of bad encryption methods out there for every good one. But in practice, naive cryptographers tend to gravitate to a handful of bad patterns.

Bad pattern number one is XOR. Used correctly, XORing can be a force for good, but if you XOR your key with zeros, naturally, you get the key back as your ciphertext. And this data had a lot of zeros in it. That means that there were many long strings that started out the same, but they seemed to go on forever, as if they were pseudo-random. Bad crypto pattern number two is using a linear-feedback shift register for your pseudo-random numbers, because the parameter space is small enough that [Sprite_tm] could just brute-force it. At the end, he points out their third mistake — making the encryption so fun to hack on that it kept him motivated!

Decrypted, the EEPROM data was a filesystem. And the machine language turned out to be for an 8051, but there was still the issue of the code resident on the microcontroller’s ROM. So [Sprite_tm] bought one of these flowers, and started probing around the black blob itself. He wrote a dumper program that output the internal ROM’s contents over SPI. Ghidra did some good disassembling, and that let him figure out how the memory was laid out, and how the flow worked. He also discovered a “secret” ROM area in the chip’s flash, which he got by trying some random functions and looking for side effects. The first hit turned out to be a memcpy. Sweet.

[Neil555]’s Rosetta Stone
Meanwhile, the Internet was still working on this device, and [Neil555] bought a flower too. But this one had a chip, rather than a blob, and IDing this part lead them to an SDK, and that has an audio suite that uses a derivative of WMA audio encoding. And that was enough to get music loaded into the flower. (Cue a short rick-rolling.) Victory!

Well, victory if all you wanted to do was hack your music onto the chip. As a last final fillip, [Sprite_tm] mashed the reverse-engineered schematic of the Buddha Flower together with [Thomas Flummer]’s very nice DIY Remoticon badge, and uploaded our very own intro theme music into the device on a badge. Bonus points? He added LEDs that blinked out the LSFR that were responsible for the “encryption”. Sick burn!

Editor’s Note: This is the last of the Remoticon 2 videos we’ve got. Thanks to all who gave presentations, to all who attended and participated in the lively Discord back channel, and to all you out there who keep the hacking flame alive. We couldn’t do it without you, and we look forward to a return to “normal” Supercon sometime soon.

Noor III Solar Tower of the Ouarzazate Power Station, at dusk. (Credit: Marc Lacoste)

The Future Of Energy Storage On Both Sides Of The Meter

That energy storage is a hot topic is hardly a surprise to anyone these days. Even so, energy storage can take a lot of different forms, some of which are more relevant to the utility provider (like grid-level storage), while others are relevant to business and home owners (e.g. whole-house storage), and yet other technologies live in this tense zone between utility and personal interest, such as (electric) vehicle-to-grid.

For utilities a lot of noise is being made about shiny new technologies, such as hydrogen-based storage, while home- and business owners are pondering on the benefits of relying solely on the utility’s generosity with feed-in tariffs, versus charging a big battery from the solar panels on the roof and using the produced power themselves. Ultimately the questions here are which technologies will indeed live up to their promises, and which a home owner may want to invest in.

Continue reading “The Future Of Energy Storage On Both Sides Of The Meter”

Ask Hackaday: Is It Time For Waste Heat And Cold Area Heating To Shine?

It’s difficult to escape the topic of energy supply at the moment, with the geopolitical situation surrounding the invasion of Ukraine leaving the natural gas supply to an entire continent in jeopardy. Fortunately we’re watching the green shoots of an early spring here in the Northern hemisphere so the worst of the winter weather is behind us, but industrial customers can take no such solace from the season and will have to weather whatever price hikes are to come. Every alternative idea for energy supply is on the table, and with the parallel imperative of decarbonising the economy this goes beyond the short term into a future without so much need to rely on gas.

The Future is Cloudy

A district heating plant in Vienna, Austria.
A district heating plant in Vienna, Austria. Joadl, CC BY-SA 3.0 AT

A collaboration between a Finnish district heating network and Microsoft caught our eye because the location of a new data centre for the tech giant was chosen specifically to supply waste heat to the network, rather than releasing it to the environment. It’s not uncommon at all for European cities to use district heating networks but they are normally supplied by waste incinerators, boilers, or combined heat and power stations. The use of data centre waste heat is a novelty, as is in particular the siting of the data centre being dictated by the network.
Continue reading “Ask Hackaday: Is It Time For Waste Heat And Cold Area Heating To Shine?”