This Week In Security: Mysterious Mac Malware, An Elegant VMware RCE, And A JSON Mess

February 26, 2021 by Jonathan Bennett 10 Comments

There’s a new malware strain targeting MacOS, Silver Sparrow, and it’s unusual for a couple reasons. First, it’s one of the few pieces of malware that targets the new M1 ARM64 processors. Just a reminder, that is Apple’s new in-house silicon design. It’s unusual for a second reason — it’s not doing anything. More precisely, while researchers have been watching, the command and control infrastructure didn’t provide a payload. Silver Sparrow has been positively found on nearly 30,000 machines.

The malware also has an intentional kill switch, where the presence of a particular file triggers a complete removal of the malware package. Researchers at Red Canary point out that this package behaves very much like a legitimate program, difficult to pick out as malware. Ars Technica got an off-the-record statement from Apple, indicating that they are tracking the situation, and have revoked the developer’s certificate used to sign the malware. It’s not entirely clear whether this prevents the malware running on already compromised machines, or just stops new infections.

So who’s behind Silver Sparrow? The observed stealth mode and other complexities suggest that this is more than a simple adware or ransomware campaign. Since it was discovered before the payload was delivered, we may never know what the purpose is. It may have been a government created campaign, targeting something specific. Continue reading “This Week In Security: Mysterious Mac Malware, An Elegant VMware RCE, And A JSON Mess” →

Hackaday Podcast 107: FTDI Plays Music, LED Dimming Ain’t Easy, Measuring Poop Calories, And Sketchy Laser Cutters

February 26, 2021 by Mike Szczys No comments

Hackaday editors Mike Szczys and Elliot Williams gab about all of the geeky things. We had a delightful time watching NASA bring Perseverance down to the Red planet. In Kristina’s words, we pour one out for Fry’s Electronics. And then we jump into a parade of excellent hacks with a magnetic bearing for crooked ball screws, a science-based poop-burning experiment, and the music hack only microcontroller enthusiasts could love as an FTDI cable is plugged directly into a speaker. Smart circuit design is used to hack a dimmer into non-dimmable LED fixtures, and an octet of living clams are the early warning sensors for water pollution.

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Direct download (~60 MB)

Places to follow Hackaday podcasts:

Continue reading “Hackaday Podcast 107: FTDI Plays Music, LED Dimming Ain’t Easy, Measuring Poop Calories, And Sketchy Laser Cutters” →

3D Printering: To Print Stainless, You Do Half The Work

February 25, 2021 by Al Williams 37 Comments

Everyone wants to print using metal. It is possible, but the machines to do the work are usually quite expensive. So it caught our eye when MakerBot announced a printer — armed with an experimental extruder — that can print stainless steel parts. Then we read a bit more and realized that it can only sort of do the job. It needs a lot of help. And with some reasonable, if not trivial, modifications, your printer can probably print metal as well.

The key part of the system is BASF Ultrafuse 316L Stainless Steel filament, something that’s been around for a few years. This is a polymer with metal incorporated into it. This explains the special extruder, since metal-bearing filament is hell on typical 3D printer nozzles. However, what comes out isn’t really steel — not yet. For that, you have to send the part to a post-processing facility where it is baked at 1380 °C in a pure hydrogen atmosphere using special equipment. This debinding and sintering produces a part that the company claims can be up to 96% pure metal.

Continue reading “3D Printering: To Print Stainless, You Do Half The Work” →

Real-Time OS Basics: Picking The Right RTOS When You Need One

February 24, 2021 by Maya Posch 60 Comments

When do you need to use a real-time operating system (RTOS) for an embedded project? What does it bring to the table, and what are the costs? Fortunately there are strict technical definitions, which can also help one figure out whether an RTOS is the right choice for a project.

The “real-time” part of the name namely covers the basic premise of an RTOS: the guarantee that certain types of operations will complete within a predefined, deterministic time span. Within “real time” we find distinct categories: hard, firm, and soft real-time, with increasingly less severe penalties for missing the deadline. As an example of a hard real-time scenario, imagine a system where the embedded controller has to respond to incoming sensor data within a specific timespan. If the consequence of missing such a deadline will break downstream components of the system, figuratively or literally, the deadline is hard.

In comparison soft real-time would be the kind of operation where it would be great if the controller responded within this timespan, but if it takes a bit longer, it would be totally fine, too. Some operating systems are capable of hard real-time, whereas others are not. This is mostly a factor of their fundamental design, especially the scheduler.

In this article we’ll take a look at a variety of operating systems, to see where they fit into these definitions, and when you’d want to use them in a project. Continue reading “Real-Time OS Basics: Picking The Right RTOS When You Need One” →

Paul Taylor Opened The Lines Of Telecommunication For The Hearing-Impaired

February 23, 2021 by Kristina Panos 23 Comments

These days, nearly everyone communicates through some kind of keyboard, whether they are texting, emailing, or posting on various internet discussion forums. Talking over the phone is almost outmoded at this point. But only a few decades ago, the telephone was king of real-time communication. It was and still is a great invention, but unfortunately the technology left the hearing and speaking-impaired communities on an island of silence.

Paul and an early TDD. Image via Rochester Institute of Technology

Engineer and professor Paul Taylor was born deaf in 1939, long before cochlear implants or the existence of laws that called for testing and early identification of hearing impairment in infants. At the age of three, his mother sent him by train to St. Louis to live at a boarding school called the Central Institute for the Deaf (CID).

Here, he was outfitted with a primitive hearing aid and learned to read lips, speak, and use American sign language. At the time, this was the standard plan for deaf and hearing-impaired children — to attend such a school for a decade or so and graduate with the social and academic tools they needed to succeed in public high schools and universities.

After college, Paul became an engineer and in his free time, a champion for the deaf community. He was a pioneer of Telecommunications Devices for the Deaf, better known as TDD or TTY equipment in the US. Later in life, he helped write legislation that became part of the 1990 Americans with Disabilities Act.

Paul was diagnosed with Alzheimer’s in 2017 and died in January of 2021 at the age of 81. He always believed that the more access a deaf person had to technology, the better their life would be, and spent much of his life trying to use technology to improve the deaf experience.

Continue reading “Paul Taylor Opened The Lines Of Telecommunication For The Hearing-Impaired” →

Hands On With The Ortur Laser Cutter

February 23, 2021 by Al Williams 63 Comments

I couldn’t write very much without a computer. Early in my career, I wrote with a typewriter. Unless you are pretty close to perfect — I’m not — it is very frustrating to make edits on typewritten stuff. The equivalent in the real world, for me, has been 3D printers and CNC machines. I can visualize a lot of things that I’m not careful enough to build with normal tools. Despite my 7th-grade shop teacher’s best efforts, everything I did turned out to be a toothpick or a number 7. But I can get my ideas into CAD and from there the machines do the rest. That’s why I was excited to get a laser cutter this past Christmas. You might wonder why I’d need a laser cutter if I have the other tools. Then again, if you read Hackaday, you probably don’t need me to explain why you need a new gadget. I’ve had my eye on a laser for a good long time, but recent developments made it more attractive. I thought I’d share with you some of what I’ve found getting started with the Ortur laser cutter. The cutter is easy to put together and costs somewhere in the $200-$400 range depending on what you get with it. I thought I’d take some time to share what I’ve learned about it.

Why a Laser?

If you haven’t had experience with a laser cutter or engraver before, you might think it is a very specific instrument. Sure, the Ortur is good at engraving some things (but not all things). It can cut some things, too, but not as many things as a big serious laser cutter. However, creative people find lots of ways to use cutting and engraving to produce things you might not expect.

Continue reading “Hands On With The Ortur Laser Cutter” →