Junkbox Confidential

Thomas Edison famously quipped “To invent, you need a good imagination and a pile of junk.” Amen, brother. My personal junk pile (ahem, collection of pre-owned electromechanical curiosities) is certainly a source of spare parts, but also a source of surprise and wonder. Sometimes the junk itself spurs the imagination, but sometimes junk is just junk.

There are pieces of used gear that I bought for some particular plan, maybe a decade ago?, and totally forgot. While it’s fun to rediscover them — I bought six used super-soaker pump assemblies, and summer is just around the corner — the sad truth is often that the forgotten pieces were forgotten for a reason. Whatever kooky idea I had at the time has faded, and the parts are all that’s left.

But among these miserable creatures, there are some absolute gems. Parts that continually call out to be used. Bits that would fire even Thomas Edison’s imagination. Unforgetable junk.
Mostly, it’s their physicality that calls out to me. I have a stack of old 5″ hard drive platters, gutted, and converted into essentially a rotary encoder. For years, I used it as a USB scroll wheel on my desk, but most recently it has made reappearances in other goofy projects — a music box for my son that played notes in a row depending on how fast you spun it, and most recently a jog wheel for a one-meter linear motion project that hasn’t really found its full expression yet, but might become a camera slider. Anyway, when I needed a nice physical rotary encoder knob, the hard drive was just sitting there waiting to be used. Continue reading “Junkbox Confidential”

Hackaday Podcast 114: Eye Is Watching You, Alien Art, CNC Chainsaw, And The Galvie Flu

Hackaday editors Elliot Williams and Mike Szczys marvel at the hacks that surfaced over the past week. An eye-popping webcam hack comes in the form of an animatronic that gives that camera above your screen an eyeball to look around, an eyelid to blink with, and the skin, eyelashes, and eyebrow to complete the illusion (and make us shudder at the same time).

Dan did a deep dive on Zinc Flu — something to avoid when welding parts that contain zinc, like galvanized metals. A robot arm was given a chainsaw, leading to many hijinks; among them the headache of path planning such a machine. And we got to hear a really awesome story about resurrecting a computer game lost to obscurity, by using one of the main tools of the copyright office.

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Direct download (~60 MB)

Places to follow Hackaday podcasts:

Continue reading “Hackaday Podcast 114: Eye Is Watching You, Alien Art, CNC Chainsaw, And The Galvie Flu”

This Week In Security: Pwn2own, Zoom Zero Day, Clubhouse Data, And An FBI Hacking Spree

Our first story this week comes courtesy of the Pwn2own contest. For anyone not familiar with it, this event is held twice a year, and features live demonstrations of exploits against up-to-date software. The one exception to this is when a researcher does a coordinated release with the vendor, and the update containing the fix drops just before the event. This time, the event was held virtually, and the attempts are all available on Youtube. There were 23 attacks attempted, and only two were outright failures. There were 5 partial successes and 16 full successes.

One of the interesting demonstrations was a zero-click RCE against Zoom. This was a trio of vulnerabilities chained into a single attack. The only caveat is that the attack must come from an accepted contact. Pwn2Own gives each exploit attempt twenty minutes total, and up to three attempts, each of which can last up to five minutes. Most complex exploits have an element of randomness, and exploits known to work sometimes don’t work every time. The Zoom demonstration didn’t work the first time, and the demonstration team took enough time to reset, they only had enough time for one more try.

BleedingTooth

We first covered BleedingTooth almost exactly six months ago. The details were sparse then, but enough time has gone by to get the full report. BleedingTooth is actually a trio of vulnerabilities, discovered by [Andy Nguyen]. The first is BadVibes, CVE-2020-24490. It’s a lack of a length check in the handling of incoming Bluetooth advertisement packets. This leads to a buffer overflow. The catch here is that the vulnerability is only possible over Bluetooth 5. Continue reading “This Week In Security: Pwn2own, Zoom Zero Day, Clubhouse Data, And An FBI Hacking Spree”

The $50 Ham: A Simple WSPR Beacon

I was having a chat recently with someone, and it surprised me that she had an amateur radio license. I suppose it shouldn’t have come as much of a surprise; after all, getting a ham radio license is a pretty common rite of passage in the life of a hardware hacker. I guess it surprised me because she’d never mentioned it in our past conversations, and as we talked about it, I learned why. “I got my license because I thought ham radio was about building radios, ” she said. “But it’s not.”

In a lot of ways, she is right about the state of ham radio. There was a time that building one’s own gear was as central to the hobby as getting on the air, and perhaps more so. Now, though, with radios as cheap as $30 and the whiz-bang gear that can make reaching out across the planet trivially easy, building your own radios has slipped down a few notches. But homebrewing is far from a dead art, and as we’ll see in this installment of “The $50 Ham”, a WSPR beacon for the HF bands is actually a fun and simple — and cheap — way for the homebrew-curious to get a taste of what it’s like to build your own transmitter.

Continue reading “The $50 Ham: A Simple WSPR Beacon”

History Of Closed Captions: The Analog Era

Closed captioning on television and subtitles on DVD, Blu-ray, and streaming media are taken for granted today. But it wasn’t always so. In fact, it was quite a struggle for captioning to become commonplace. Back in the early 2000s, I unexpectedly found myself involved in a variety of closed captioning projects, both designing hardware and consulting with engineering teams at various consumer electronics manufacturers. I may have been the last engineer working with analog captioning as everyone else moved on to digital.

But before digging in, there is a lot of confusing and imprecise language floating around on this topic. Let’s establish some definitions. I often use the word captioning which encompasses both closed captions and subtitles:

Closed Captions: Transmitted in a non-visible manner as textual data. Usually they can be enabled or disabled by the user. In the NTSC system, it’s often referred to as Line 21, since it was transmitted on video line number 21 in the Vertical Blanking Interval (VBI).
Subtitles: Rendered in a graphical format and overlaid onto the video / film. Usually they cannot be turned off. Also called open or hard captions.

The text contained in captions generally falls into one of three categories. Pure dialogue (nothing more) is often the style of captioning you see in subtitles on a DVD or Blu-ray. Ordinary captioning includes the dialogue, but with the addition of occasional cues for music or a non-visible event (a doorbell ringing, for example). Finally, “Subtitles for the Deaf or Hard-of-hearing” (SDH) is a more verbose style that adds even more descriptive information about the program, including the speaker’s name, off-camera events, etc.

Roughly speaking, closed captions are targeting the deaf and hard of hearing audience. Subtitles are targeting an audience who can hear the program but want to view the dialogue for some reason, like understanding a foreign movie or learning a new language.

Continue reading “History Of Closed Captions: The Analog Era”

Teardown: Linkimals Musical Moose

Like so many consumer products these days, baby toys seem to get progressively more complex with each passing year. Despite the fact that the average toddler will more often than not be completely engrossed by a simple cardboard box, toy companies are apparently hell-bent on producing battery powered contraptions that need to be licensed with the FCC.

As a perfect example, we have Fisher-Price’s Linkimals. These friendly creatures can operate independently by singing songs and flashing their integrated RGB LEDs in response to button presses, but get a few of them in the room together, and their 2.4 GHz radios kick in to create an impromptu mesh network of fun.

They’ll soon be back, and in greater numbers.

Once connected to each other, the digital critters synchronize their LEDs and sing in unison. Will your two year old pay attention long enough to notice? I know mine certainly wouldn’t. But it does make for a compelling commercial, and when you’re selling kid’s toys, that’s really the most important thing.

On the suggestion of one of our beloved readers, I picked up a second-hand Linkimals Musical Moose to take a closer look at how this cuddly pal operates. Though in hindsight, I didn’t really need to; a quick browse on Amazon shows that despite their high-tech internals, these little fellows are surprisingly cheap. In fact, I’m somewhat embarrassed to admit that given its current retail price of just under $10 USD, I actually paid more for my used moose.

But you didn’t come here to read about my fiscal irresponsibility, you want to see an anthropomorphic woodland creature get dissected. So let’s pull this smug Moose apart and see what’s inside.

Continue reading “Teardown: Linkimals Musical Moose”

New HackadayU Classes: Antenna Basics, Raspberry Pi Pico, And Designing Complex Geometry

Get ’em while they’re hot: a new session of HackadayU just opened with classes from three fantastic instructors and seats are filling up fast.

Introduction to Antenna Basics — Instructor Karen Rucker teaches the fundamentals of antenna design as if it were your first year on-the-job. She’ll cover the common types of antenna designs and the fundamentals of radio frequency engineering that go into them. Begins Thursday, May 6th.

Raspberry Pi Pico and RP2040 – The Deep Dive — Instructor Uri Shaked guides the class through the internals of the RP2040 microcontroller, covering system architecture, hardware peripherals, and dipping into some ARM assembly language examples. Begins Wednesday, May 5th.

Designing with Complex Geometry — Instructor James McBennett helps you up your 3D modelling game with a course on using complex geometries in Grasshopper3D (part of Rhino3D). Dive into Non-uniform rational B-spline (NURBS) and go from simple shapes to incredibly complex objects with a bit of code. Begins Tuesday, May 4th.

Each course includes five weekly classes beginning in May. Being part of the live class via Zoom offers interactivity with the instructor and other attendees. All tickets are “pay-as-you-wish” with a $20 suggested donation; all proceeds go to socially conscious charities.

For the benefit of all, each class will be edited and published on Hackaday’s YouTube channel once this session has wrapped up. Check out our playlists for past HackadayU courses, or watch them all in one giant playlist.

You might also consider becoming an Engineering Liaison for HackadayU. These volunteers help keep the class humming along for the best experience for students and instructors alike. Liaison applications are now open.

Continue reading “New HackadayU Classes: Antenna Basics, Raspberry Pi Pico, And Designing Complex Geometry”