This excellent content from the Hackaday writing crew highlights recurring topics and popular series like Linux-Fu, 3D-Printering, Hackaday Links, This Week in Security, Inputs of Interest, Profiles in Science, Retrotechtacular, Ask Hackaday, Teardowns, Reviews, and many more.
Have you heard about this One? At least three United States senators have, and they want to know what Amazon plans to do with all the biometric data collected by the Amazon One program. It’s their new contactless payment method that uses your unique palm print instead of cards or phones to make purchases, gain access to venues of work and play, and enter or pay in whatever other spaces Amazon can invade down the line. The idea is that one day, we’ll all be able to leave our homes without any form of money or ID of any kind, because we’ll all be stored away in Bezos’ big biometric file cabinet.
We tossed this one around in the writer’s room back when the Amazon One concept was nothing but a pile of buzzwords and a render or two, but these kiosks are now active in 50+ Whole Foods and Amazon 4-Star locations across the US. Here’s the deal: you can only sign up at a participating store that has a kiosk, because they have to scan your palms into the system. We were worried that the signup kiosk could easily take fingerprint scans at the same time, but according to the gifs in Morning Brew’s review, it just uses another of their point-of-sale palm scanners along with a touch screen and a card reader. But you still have to hover your entire hand over it, so who’s to say that the scan ends where the fingers begin?
Hackaday editors Mike Szczys and Elliot Williams wade into a week of wonderful hacks. There’s an acrylic lens that hides images in the network of caustics: the light rays that shine through it. Boston Dynamics is finally showing the good stuff; people wrenching on ‘bots, and all kinds of high-end equipment failure, along with some epic successes. Can you grow better plants by inferring what they need by accurately weighing them? In more turbulent news, a police drone slammed into a Cessna mid-flight, the ISS went for an unexpected spin, and McDonald’s not-ice-cream machines have a whole new layer of drama around them.
Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!
Windows security problems due to insecure drivers is nothing new, but this one is kinda special. Plug in a Razer mouse, tell the install dialog you want to install to a non-standard location, and then shift+right click the Explorer window. Choose a powershell, and boom, you now have a SYSTEM shell. It’s not as impressive as an RCE, and it requires hands-on the machine, but it’s beautiful due to the simplicity of it.
The problem is a compound one. First, Windows 10 and 11 automatically downloads and starts the install of Razer Synapse when a Razer device is plugged in. Note it’s not just Razer, any branded app that auto installs like this is possibly vulnerable in the same way. The installation process runs as system, and because it was started automatically, there is no admin account required. The second half of the issue is that the installer itself doesn’t take any precautions to prevent a user from spawning additional processes. There isn’t an obvious way to prevent the launch of Powershell from within the FolderPicker class, so an installer running as SYSTEM would have to go out of its way to drop privileges, to make this a safe process. The real solution is for Microsoft to say no to GUI installers bundled with WHQL signed drivers. Continue reading “This Week In Security: Through The Mouse Hole, Zoom RCE, And Defeating Defender”→
Had the pandemic not upended many of this summer’s fun and games, many of my friends would have made a trip to the MCH hacker camp in the Netherlands earlier this month. I had an idea for a game for the event, a friend and I were going to secrete a set of those low-power FM transmitters as numbers stations around the camp for players to find and solve the numerical puzzles they would transmit. I even bought a few cheap FM transmitter modules from China for evaluation, and had some fun sending a chiptune Rick Astley across a housing estate in Northamptonshire.
To me as someone who grew up with FM radio and whose teen years played out to the sounds of BBC Radio 1 FM it made absolute sense to do a puzzle in this way, but it was my personal reminder of advancing years to find that some of my friends differed on the matter. Sure, they thought it was a great idea, but they gently reminded me that the kids don’t listen to any sort of conventional broadcast radio these days, instead they stream their music, so very few of them would have the means for listening to my numbers stations. Even for me it’s something I only use for BBC Radio 4 in the car, and to traverse the remainder of the FM dial is to hear a selection of easy listening, oldies, and classical music. It’s becoming an older person’s medium, and it’s inevitable that like AM before it, it will eventually wane.
There are two angles to this that might detain the casual hacker; first what it will mean from a broadcasting and radio spectrum perspective, and then how it is already influencing some of our projects.
Computers in working order and with correct software don’t make mistakes. People, however, make plenty of mistakes (including writing bad software or breaking computers). In quality circles, there’s a Japanese term, poka yoke, which roughly means ‘error avoidance’. The idea is to avoid errors by making them too obvious for them to occur. For example, consider a SIM card in your phone. The little diagonal corner means it only goes in one way. If you put it in the wrong way, it is obviously wrong.
To be successful at poka yoke, you have to be able to imagine what a user might do wrong and then come up with some way to make it obvious that it is wrong. There are examples of this all around us and we sometimes don’t even know it. For example, what do your credit card number, your car’s VIN code, and a UPC code on a can of beans have in common?
You may have noticed that I neglected to write an introductory paragraph for the last one of these — I was just too excited to get into the keyboards and keyboard accessories, I guess. I can’t promise that I’ll always have something to say up here, but this week I definitely do: thank you for all the tips I’ve received so far! The readers are what make Hackaday great, and this little keyboard roundup column is no exception. Fabulous fodder, folks!
Kamina Chameleon
This is [deʃhipu]’s daily driver. Vroom!Like any keyboard enthusiast worth their soldering iron, [deʃhipu] keeps trying for the ultimate keyboard — ideally, one that runs CircuitPython and makes a great daily driver for high-speed typing.
The latest version is the Kamina, a one-piece split with a SAMD21 brain that is slim and narrow without being cramped. [deʃhipu] started by splitting the Planck layout, spreading it, adding a number row, and eventually, an extra column of Kailh Chocs on the right hand. One-piece splits are great as long as the split suits your shoulders, because everything stays in place. When you do move it around, both halves move as one and you don’t have to mess with the positioning nearly as much as with a two-piece. And of course, since he designed it himself, it fits.
The really cool thing here is the center module concept. It’s functional, it looks nice, and as long as it doesn’t get in the way of typing, seems ideal. So far, [deʃhipu] has made a couple different versions with joysticks, encoders, and buttons, and is currently working on one with a Home button made for cell phones to take advantage of their built-in optical trackpads.
Esrille NISSE Looks Nice
This is the Esrille NISSE keyboard and it comes in two sizes! Okay, the two sizes don’t look that different, but the key spacing specs say otherwise. To me, this looks like an Alice with a better and ortholinear layout. These bat-wing beauties are new to me, but they’ve been around for a few years now and are probably difficult to stumble upon outside of Japan. Although Esrille doesn’t seem to make any other keyboards, they do make a portable PC built on the Raspberry Pi compute module.
I love me a one-piece split when its done properly, and this one seems to be pretty darn close to perfect. How do I know? You can print out a paper-craft version to try out either of the two sizes. I didn’t take it quite that far, but you can bet that I opened the smaller size’s image in a new tab and put my hands all over the screen to test the layout.
I especially like the thumb clusters and the inside keys on this thing, but I think the innermost thumb keys would be too painful to use, and I would probably just use my index finger. I would totally buy one of these, but they’re a little too expensive, especially since the smaller one costs more. (What’s up with that?) The great news is that the firmware is open-source. Between that and the paper-craft models, a person could probably build their own. Check out [xahlee]’s site for a review and a lot more pictures of the NISSE and similar keebs.
As we’ve followed a trail through Hi-Fi and audio systems from the listener’s ear towards the music source, we’ve reached the amplifier. In our previous article we gave a first introduction to distortion and how some amplifier characteristics can influence it, and here we’ll continue along that path and look at the amplifier itself. What types of audio amplifier circuits will you encounter, and what are their relative merits and disadvantages?
A Few Amplifier Basics
Horowitz and Hill’s Transistor Man
If you know anything about a transistor, it’s probably that it’s a three terminal device whose output pin forms part of a potential divider whose state is dependent on what is presented to its input pin. The Art of Electronics had it as a cartoon of a man standing inside a bipolar transistor and adjusting a variable resistor between collector and emitter while watching an ammeter on the base.
Properly biased in its conducting range, a transistor can behave as a linear device, in which the potential divider voltage moves in response to the input in a linear relationship, and thus the voltage on the output is an amplified version of the voltage on the output. This is the simplest of transistor amplifiers, and because different types of amplifier are referred to by lettered classes, it’s known as a class A amplifier. Continue reading “Know Audio: Amplifier Nuts And Bolts”→
![[deshipu]'s DIY keyboard with various center modules](https://hackaday.com/wp-content/uploads/2021/08/deʃhipu-Kamina.png)
