Hackaday Podcast 050: Counterfeit Chips, Servo Kalimba, Resistor Colors, Pi Emulation, And SED Maze Solver

January 17, 2020 by Mike Szczys 5 Comments

Hackaday editors Elliot Williams and Mike Szczys work their way through a dizzying maze of great hacks this week, bringing you along for the ride.

We take a look at simplifying home automation with Node-RED and marvel at the misuse of the SED — Linux’s stream editor for filtering and transforming text — to find your way through a maze. Have the hippest portable; grab your really old Apple laptop and stuff a not-so-old Apple desktop inside. We bring it on home with our love (or hate?) for the resistor color code.

Take a look at the links below if you want to follow along, and as always tell us what you think about this episode in the comments!

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Direct download (60 MB or so.)

Continue reading “Hackaday Podcast 050: Counterfeit Chips, Servo Kalimba, Resistor Colors, Pi Emulation, And SED Maze Solver” →

This Week In Security: Windows 10 Apocalypse, Paypal Problems, And Cablehaunt

January 17, 2020 by Jonathan Bennett 18 Comments

Nicely timed to drop on the final day of Windows 7 support, Windows 10 received a fix to an extremely serious flaw in crypt32.dll. This flaw was reported by the good guys at the NSA. (We know it was the good guys, because they reported it rather than used it to spy on us.) It’s really bad. If you’re running Windows 10, go grab the update now. OK, you’re updated? Good, let’s talk about it now.

CVE-2020-0601 pic.twitter.com/8tJsJqvnHj

— Saleem Rashid (@saleemrash1d) January 15, 2020

The flaw applies to X.509 keys that use elliptic curve cryptography. We’ve discussed ECC in the past, but let’s review. Public key encryption is based on the idea that some calculations are very easy to perform and verify, but extremely difficult to calculate the reverse operation.

The historic calculation is multiplying large primes, as it’s unreasonably difficult to factorize that result by a conventional computer. A true quantum computer with enough qubits will theoretically be able to factorize those numbers much quicker than a classical computer, so the crypto community has been searching for a replacement for years. The elliptic curve is the solution that has become the most popular. An agreed-upon curve and initial vector are all that is needed to perform the ECC calculation.

There are potential weaknesses in ECC. One such weakness is that not all curves are created equal. A well constructed curve results in good cryptography, but there are weak curves that result in breakable encryption.

With that foundation laid, the flaw itself is relatively easy to understand. An X.509 certificate can define its own curve. The Windows 10 implementation doesn’t properly check the curve that is specified. A malicious curve is specified that is similar to the expected curve — similar enough that the checks in crypt32 don’t catch it. Continue reading “This Week In Security: Windows 10 Apocalypse, Paypal Problems, And Cablehaunt” →

A SpaceX Falcon 9 Will Blow Up Very Soon, And That’s OK

January 16, 2020 by Tom Nardi 27 Comments

They say you can’t make an omelette without breaking a few eggs, and there are few fields where this idiom is better exemplified than rocketry. It’s a forgone conclusion that when you develop a new booster, at least a few test articles are going to be destroyed in the process. In fact, some argue that a program that doesn’t push the hardware to the breaking point is a program that’s not testing aggressively enough.

Which is why, assuming everything goes according to plan, SpaceX will be obliterating one of their Falcon 9 boosters a little after 8:00 AM EST on Saturday morning. The event will be broadcast live via the Internet, and thanks to the roughly 70% propellant load it will be carrying at the moment of its destruction, it should prove to be quite a show.

This might seem like an odd way to spend $62 million, but for SpaceX, it’s worth it to know that the Crew Dragon Launch Abort System (LES) will work under actual flight conditions. The LES has already been successfully tested once, but that was on the ground and from a standstill. It allowed engineers to see how the system would behave should an abort occur while the rocket was still on the pad, but as the loss of the Soyuz MS-10 dramatically demonstrated, astronauts may need to make a timely exit from a rocket that’s already well on the way to space.

In an actual emergency, the crewed spacecraft will very likely be speeding away from a violent explosion and rapidly expanding cloud of shrapnel. The complete destruction of the Falcon 9 that will be carrying the Crew Dragon during Saturday’s test will serve to create the same sort of conditions the spacecraft will need to survive if the LES has any hope of bringing the crew home safely. So even if there was some way to prevent the booster from breaking up during the test, it’s more useful from an engineering standpoint to destroy it.

Of course, that only explains why the Falcon 9 will be destroyed during this test. But exactly how this properly functioning booster will find itself being ripped to pieces high over the Atlantic Ocean in a matter of seconds is an equally interesting question.

Continue reading “A SpaceX Falcon 9 Will Blow Up Very Soon, And That’s OK” →

New Part Day: Arduino Goes Pro With The Portenta H7

January 15, 2020 by Tom Nardi 92 Comments

The Consumer Electronics Show in Las Vegas is traditionally where the big names in tech show off their upcoming products, and the 2020 show was no different. There were new smartphones, TVs, and home automation devices from all the usual suspects. Even a few electric vehicles snuck in there. But mixed in among flashy presentations from the electronics giants was a considerably more restrained announcement from a company near and dear to the readers of Hackaday: Arduino is going pro.

While Arduino has been focused on the DIY and educational market since their inception, the newly unveiled Portenta H7 is designed for professional users who want to rapidly develop robust hardware suitable for industrial applications. With built-in wireless hardware and the ability to run Python and JavaScript out of the box, the powerful dual-core board comes with a similarly professional price tag; currently for preorder at $99 USD a pop, the Portenta is priced well outside of the company’s traditional DIY and educational markets. With increased competition from other low-cost microcontrollers, it seems that Arduino is looking to expand out of its comfort zone and find new revenue streams.

Continue reading “New Part Day: Arduino Goes Pro With The Portenta H7” →

Automate Your Life With Node-RED (Plus A Dash Of MQTT)

January 15, 2020 by Mike Szczys 54 Comments

For years we’ve seen a trickle of really interesting home automation projects that use the Node-RED package. Each time, the hackers behind these projects have raved about Node-RED and now I’ve joined those ranks as well.

This graphic-based coding platform lets you quickly put together useful operations and graphic user interfaces (GUIs), whether you’re the freshest greenhorn or a seasoned veteran. You can use it to switch your internet-connected lights on schedule, or at the touch of a button through a web-app available to any device on your home network. You can use it as an information dashboard for the weather forecast, latest Hackaday articles, bus schedules, or all of them at once. At a glance it abstracts away the complexity of writing Javascript, while also making it simple to dive under hood and use your 1337 haxor skills to add your own code.

You can get this up and running in less than an hour and I’m going to tackle that as well as examples for playing with MQTT, setting up a web GUI, and writing to log files. To make Node-RED persistent on your network you need a server, but it’s lean enough to run from a Raspberry Pi without issue, and it’s even installed by default in BeagleBone distributions. Code for all examples in this guide can be found in the tutorial repository. Let’s dive in!

Continue reading “Automate Your Life With Node-RED (Plus A Dash Of MQTT)” →

Habitable Exoplanets Hack Chat

January 13, 2020 by Dan Maloney 1 Comment

Join us on Wednesday, January 15 at noon Pacific for the Habitable Exoplanets Hack Chat with Alberto Caballero!

Many of the major scientific achievements of the last 100 years or so have boiled down to problems of picking out a signal from the noise. Think about analyzing the human genome, for instance: we each have something like two meters of DNA coiled up inside each cell in our body, and yet teasing out the information in a single gene had to wait until we developed sufficiently sophisticated methods like PCR and CRISPR.

Similarly, albeit on the other end of the scale, the search for planets beyond our solar system wasn’t practical until methods and instruments that could measure the infinitesimal affect a planet’s orbit on its star were developed. Once that door was unlocked, reports of exoplanets came flooding in, and Earth went from being a unique place in the galaxy to just one of many, many places life could possibly have gotten a foothold. And now, the barrier for entry to the club of planet hunters has dropped low enough that amateur astronomers are getting in on the action.

Alberto Caballero is one such stargazer, and he has turned his passion for astronomy into an organized project that is taking a good, hard look at some of our nearest stellar neighbors in the hope of finding exoplanets in the habitable zone. The Habitable Exoplanet Hunting Project is training the instruments in 33 observatories around the globe on ten stars within 100 light-years, hoping to detect the faint signal that indicates an orbiting planet. They hope to add to the list of places worthy of exploration, both from Earth via optical and radio telescopes, and perhaps, someday, in person.
Continue reading “Habitable Exoplanets Hack Chat” →

Why Do Resistors Have A Color Code?

January 13, 2020 by Al Williams 226 Comments

One of the first things you learn in electronics is how to identify a resistor’s value. Through-hole resistors have color codes, and that’s generally where beginners begin. But why are they marked like this? Like red stop signs and yellow lines down the middle of the road, it just seems like it has always been that way when, in fact, it hasn’t.

Before the 1920s, components were marked any old way the manufacturer felt like marking them. Then in 1924, 50 radio manufacturers in Chicago formed a trade group. The idea was to share patents among the members. Almost immediately the name changed from “Associated Radio Manufacturers” to the “Radio Manufacturer’s Association” or RMA. There would be several more name changes over the years until finally, it became the EIA or the Electronic Industries Alliance. The EIA doesn’t actually exist anymore. It exploded into several specific divisions, but that’s another story.

This is the tale of how color bands made their way onto every through-hole resistor from every manufacturer in the world.

Continue reading “Why Do Resistors Have A Color Code?” →