Pick Up The Ball And Run With It

Once in a while we get to glimpse how people build on each other’s work in unexpected and interesting ways. So it is with the GateBoy project, a gate-level emulator built from die shots of the original Game Boy processor. The thing is, [Austin Appleby] didn’t have to start by decapping and taking photos of the chip. He didn’t even have to make his own schematics by reverse engineering those structures. Someone else had already done that and made it available for others to use. A couple of years back, [Furrtek] started manually tracing out the DMG chip and posted schematics to the DMG-CPU-Inside repo, kindly licensing it as CC-BY-SA 4.0 to let people know how they can use the info.

But playing Game Boy games isn’t actually the end game of [Austin’s] meticulous gate-level recreation. He’s using it to build “a set of programming tools that can bridge between the C/C++ universe used by software and the Verilog/VHDL universe used by hardware.” A new tool has been born, not for gaming, but for converting a meta language that assigns four-letter codes to gate structures (somewhat reminiscent of DNA sequences) and will eventually convert them to your choice of C++ or a Hardware Description Language for use with FPGAs.

The open source community is playing four-dimensional football. Each project moves the ball downfield, but some of them add an additional goal in an alternate hardware universe — advancing the aims of both (like finding and fixing some errors in [Furrtek’s] original schematics).

Of course the real challenge is getting the word out that these projects exist and can be useful for something you’re working on. For instance, [Neumi’s] depth sounding rowboat allows an individual to make detailed depth maps of lakes, rivers, and the like. It was in the comments that the OpenSeaMap project was brought up — a site working to create crowd sourced waterway charts. It’s the perfect place for [Neumi] to get inspiration, and help move that ball toward a set of goals.

How do we get the word out so more of these connections happen? We’ll do our part here at Hackaday. But it’s the well-document and thoughtfully-licensed projects that set the up playing field in the first place.

Hackaday Podcast 135: Three Rocket Hacks, All The Game Boy Gates, And Depth Sounding From A Rowboat

Hackaday editors Mike Szczys and Tom Nardi go over the best stories and hacks from the previous week, covering everything from sidestepping rockets to homebrew OLED displays. We’ll cover an incredible attempt to really emulate the Nintendo Game Boy, low-cost injection molding of rubbery parts, a tube full of hypersonic shockwaves, and how a hacked depth finder and a rowboat can help chart those local rivers and lakes that usually don’t get any bathymetric love. Plus, even though he’s on vacation this week, Elliot has left us with a ruddy mysterious song to try and identify.

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Direct download (52 MB)

Continue reading “Hackaday Podcast 135: Three Rocket Hacks, All The Game Boy Gates, And Depth Sounding From A Rowboat”

This Week In Security: Ghoscript In Imagemagick, Solarwinds, And DHCP Shenanigans

A PoC was just published for a potentially serious flaw in the Ghostscript interpreter. Ghostscript can load Postscript, PDF, and SVG, and it has a feature from Postscript that has been a continual security issue: the %pipe% command. This command requests the interpreter to spawn a new process — It’s RCE as part of the spec. This is obviously a problem for untrusted images and documents, and Ghostscript has fixed security vulnerabilities around this mis-feature several times over the years.

This particular vulnerability was discovered by [Emil Lerner], and described at ZeroNights X. That talk is available, but in Russian. The issue seems to be a bypass of sorts, where the pipe command appears to be working in the /tmp/ directory, but a simple semicolon allows for an arbitrary command to be executed. Now why is this a big deal? Because ImageMagick uses Ghostscript to open SVG images by default on some distributions, and ImageMagick is often used for automatically resizing and converting images for web sites. In [Emil]’s presentation, he uses this flaw as part of an attack chain against three different companies.

I was unable to reproduce the flaw on my Fedora install, but I haven’t found any notice of it being fixed in the Ghostscript or Imagemagick changelogs either. It’s unclear if this problem has already been fixed, or if this is a true 0-day for some platforms. Either way, expect attackers to start trying to make use of it.

Continue reading “This Week In Security: Ghoscript In Imagemagick, Solarwinds, And DHCP Shenanigans”

Teardown: Impassa SCW9057G-433 Alarm System

This series of monthly teardowns was started in early 2018 as an experiment, and since you fine folks keep reading them, I keep making them. But in truth, finding a new and interesting gadget every month can sometimes be a chore. Which is why I’m always so thankful when a reader actually sends something in that they’d like to see taken apart, as it absolves me from having to make the decision myself. Of course it also means I can’t be blamed if you don’t like it, so keep that in mind as well.

Coming our way from the tropical paradise of Eastern Pennsylvania, this month’s subject is an ADT branded Impassa SCW9057G-433 alarm system that was apparently pulled off the wall when our kind patron was moving house. As you might have guessed from the model number, this unit uses 433 MHz to communicate with various sensors and devices throughout the home, and also includes a 3G cellular connection that allows it to contact the alarm monitoring service even if the phone line has been cut.

Diagram of Impassa home security setup
The alarm can connect to a wide array of 433 MHz devices.

From how many of these are on eBay, and the research I’ve done on some home alarm system forums, it appears that you can actually pick one of these up on the second-hand market and spin your own whole-house alarm system without going through a monitoring company like ADT. The extensive documentation from Impassa covers how to wire and configure the device, and as long as the system isn’t locked when you get it, it seems like wiping the configuration and starting from scratch isn’t a problem.

If it’s possible to put together your own homebrew alarm system with one of these units at the core, then it seems the least we can do is take it apart and see what kind of potentially modifiable goodies are waiting under that shiny plastic exterior.

Continue reading “Teardown: Impassa SCW9057G-433 Alarm System”

Books You Should Read: Bil Herd’s Back Into The Storm

It’s a morning ritual that we guess most of you share with us; before whatever work a new day will bring to sit down with a coffee and catch up with the tech news of the moment on Hackaday and other sites. Most of us don’t do many exciting things in our everyday lives, so reading about the coolest projects and the most fascinating new developments provides us with interest and motivation. Imagine just for a moment then that by a twist of fate you found yourself taking a job at the epicentre of the tech that is changing the world,  producing the objects of desire and pushing the boundaries, the place you’d give anything to work at.

This is the premise behind our Hackaday colleague Bil Herd’s autobiographical chronicle of time in the mid 1980s during which he worked at Commodore, maker of some of the most iconic home computers of the day. We follow him through the three years from 1983 to 1986 as hardware lead on the “TED” series of computers including the Commodore 16 and Plus/4, and then the Commodore 128, a dual-processor powerhouse which was arguably the last of the big-selling 8-bit home computers.

It’s an intertwined set of narratives peppered with personal anecdotes; of the slightly crazy high-pressure world of consumer videogames and computing, the fine details of designing a range of 8-bit machines, and a fascinating insight into how the culture at Commodore changed in the period following the departure of its founder Jack Tramiel.

Continue reading “Books You Should Read: Bil Herd’s Back Into The Storm”

New Engines Could Propel The B-52 Beyond Its 100th Birthday

First taking to the skies in April 1952, and introduced into the US Air Force in 1955, the B-52 Stratofortress has since become a mainstay of American air power. Originally developed as a nuclear bomber to carry out the critical deterrence role, changing realities saw it delivering solely conventional munitions in actual operations.

Of 744 B-52s originally built, 76 remain in service with the Air Force and Air Force Reserve. This fleet is set to go on flying beyond the type’s 100th birthday, into 2050 and beyond. To reach that milestone, a new engine package will be key to keeping these birds in the air.

Continue reading “New Engines Could Propel The B-52 Beyond Its 100th Birthday”

Industrial Design Hack Chat

Join us on Wednesday, September 8 at noon Pacific for the Industrial Design Hack Chat with Eric Strebel!

At Hackaday, we celebrate all kinds of hardware hacks, and we try not to judge based on appearance. After all, every product starts out on the breadboard, or as a prototype built with hot glue and tape. What’s important is getting it to work, at least at first. But there comes a time when you’ve got to think about how to make your project look like something people want to use, how to position controls and displays in a logical and attractive way, and how to make sure your thing can actually be built.

Turning a project into a product is the job of an industrial designer. Pretty much everything you use, from the toothbrush by your sink to the car you drive to work in bears the marks of industrial design, some more successfully than others. Eric Strebel has been doing industrial design for years, and he keeps feeding us a steady diet of design tips and tricks through his popular YouTube channel. He’ll stop by the Hack Chat to get a little more in-depth on industrial design principles, and how you can make your projects look as good as they work.

join-hack-chatOur Hack Chats are live community events in the Hackaday.io Hack Chat group messaging. This week we’ll be sitting down on Wednesday, September 8 at 12:00 PM Pacific time. If time zones have you tied up, we have a handy time zone converter.