This Week In Security: Camera Feeds, Python 2, FPGAs

Networked cameras keep making the news, and not in the best of ways. First it was compromised Ring accounts used for creepy pranks, and now it’s Xiaomi’s stale cache sending camera images to strangers! It’s not hard to imagine how such a flaw could happen: Xiaomi does some video feed transcoding in order to integrate with Google’s Hub service. When a transcoding slot is re-purposed from one camera to another, the old data stays in the buffer until it is replaced by the new camera’s feed. The root cause is probably the same as the random images shown when starting some 3D games.

Python is Dead, Long Live Python

Python 2 has finally reached End of Life. While there are many repercussions to this change, the security considerations are important too. The Python 2 environment will no longer receive updates, even if a severe security vulnerability is found. How often is a security vulnerability found in a language? Perhaps not very often, but the impact can be far-reaching. Let’s take, for instance, this 2016 bug in zipimport. It failed to sanitize the header of a ZIP file being processed, causing all the problems one would expect.

It is quite possible that because of the continued popularity and usage of Python2, a third party will step in and take over maintenance of the language, essentially forking Python. Unless such an event happens, it’s definitely time to migrate away from Python2.
Continue reading “This Week In Security: Camera Feeds, Python 2, FPGAs”

Hackaday Podcast 049: Tiny Machine Learning, Basement Battery Bonanza, And Does This Uranium Feel Hot?

Hackaday editors Mike Szczys and Elliot Williams sort through all of the hacks to find the most interesting hardware projects you may have missed this week. Did you know you can use machine learning without a neural network? Here’s a project that does that on an ATtiny85. We also wrap our minds around a 3D-printed press brake, look at power-saving features of the ESP32 that make it better on a battery, and discuss the IoT coffee maker hack that’s so good it could be a stock feature. Plus we dive into naturally occurring nuclear reactors and admire the common, yet marvelous, bar code.

Take a look at the links below if you want to follow along, and as always tell us what you think about this episode in the comments!

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Direct download (60 MB or so.)

Continue reading “Hackaday Podcast 049: Tiny Machine Learning, Basement Battery Bonanza, And Does This Uranium Feel Hot?”

Living At The Close Of The Multiway Era

After over a decade of laptop use, I made the move a couple of months ago back to a desktop computer. An ex-corporate compact PC and a large widescreen monitor on a stand, and alongside them a proper mouse and my trusty IBM Model M that has served me for decades. At a stroke, the ergonomics of my workspace changed for the better, as I no longer have to bend slightly to see the screen.

The previous desktop PC was from an earlier time. I think it had whatever the AMD competitor to a Pentium 4 was, and if I recall correctly, its 512 MB of memory was considered to be quite something. On the back it had an entirely different set of sockets to my new one, a brace of serial ports, a SCSI port, and a parallel printer port. Inside the case, its various drives were served by a set of ribbon cables. It even boasted a floppy drive. By contrast the cabling on its successor is a lot lighter, with much less bulky connectors. A few USB plugs and a network cable, and SATA for its disk drive. The days of bulky multiway interconnects are behind us, and probably most of us are heaving a sigh of relief. Continue reading “Living At The Close Of The Multiway Era”

Fail Of The Week: Thermostat Almost Causes A House Fire

Fair warning: any homeowners who have thermostats similar to the one that nearly burned down [Kerry Wong]’s house might be in store for a sleepless night or two, at least until they inspect and perhaps replace any units that are even remotely as sketchy as what he found when he did the postmortem analysis in the brief video below.

The story begins back in the 1980s, when the Southern New England area where [Kerry] lives enjoyed a housing boom. Contractors rushed to turn rural farmland into subdivisions, and new suburbs crawled across the landscape. Corners were inevitably cut during construction, and one common place to save money was the home’s heating system. Rather than engage an HVAC subcontractor to install a complicated heating system, many builders opted instead to have the electricians install electric baseboards. They were already on the job anyway, and at the time, both copper and electricity were cheap.

Fast forward 40 years or so, and [Kerry] finds himself living in one such house. The other night, upon catching the acrid scent of burning insulation, he followed his nose to the source: a wall-mounted thermostat for his electric baseboard. His teardown revealed burned insulation, bare conductors, and scorched plastic on the not-so-old unit; bearing a 2008 date code, the thermostat must have replaced one of the originals. [Kerry] poked at the nearly combusted unit and found the root cause: the spot welds holding the wires to the thermostat terminal had become loose, increasing the resistance of the connection. As [Kerry] points out, even a tenth of an ohm increase in resistance in a 15 amp circuit would dissipate 20 watts of heat, and from the toasty look of the thermostat it had been a lot more than that.

The corner-cutting of the 1980s was nothing new, of course – remember the aluminum wiring debacle? Electrical fires are no joke, and we’re glad [Kerry] was quick to locate the problem and prevent it from spreading.

Continue reading “Fail Of The Week: Thermostat Almost Causes A House Fire”

Commercial Circuit Simulator Goes Free

If you are looking for simulation software, you are probably thinking LTSpice or one of the open-source simulators like Ngspice (which drives Oregano and QUCs-S), or GNUCap. However, there is a new free option after the closing of Spectrum Software last year: Micro-Cap 12. You may be thinking: why use another closed-source simulator? Well, all the simulators have particular strengths, but Micro-Cap does have very nice features and used to retail for about $4,500.

The simulator boasts a multipage schematic editor, native robust digital simulation, Monte Carlo analysis, 33,000 parts in its library, worst-case and smoke analysis, Smith charts, and it can even incorporate spreadsheets. There’s a built-in designer for active and passive filters. Have a look at the brochure and you will see this is a pretty serious piece of software. And now it’s at least free as in beer.

Continue reading “Commercial Circuit Simulator Goes Free”

Choosing The Right Battery For Your Electric Vehicle Build

Many a hacker has looked at their scooter, bike, or skateboard, and decided that it would be even better if only it had a motor on it. Setting out to electrify one’s personal transport can be an exciting and productive journey, and one that promises to teach many lessons about mechanical and electronic engineering. Fundamentally, the key to any build is the battery, which has the utmost say in terms of your vehicle’s performance and range. To help out, we’ve prepared a useful guide on selecting the right battery for your needs.

One Chemistry To Rule Them All

Batteries come in all shapes and sizes, and a variety of different chemistries that all have their own unique properties and applications. When it comes to small electric vehicles, it’s desirable to have a battery with a low weight, compact size, plenty of current delivery for quick acceleration, and high capacity for long range.

30 years ago, options were limited to lead acid, nickel cadmium, and nickel metal hydride batteries. These were heavy, with low current output, poor capacity, and incredibly slow charge times. Thankfully, lithium polymer batteries have come along in the meantime and are more capable across the board. Offering huge discharge rates, fast charging, light weight and high capacity, they’re undeniably the ultimate choice for a high performance electric vehicle. They’re also wildly popular, and thus cheap, too!

There are some hangups, however. It’s important to keep all the cells in a pack at the same voltage in order to avoid cells back-charging each other. This can cause damage to the pack, or even explosions or fire. Maintaining the battery voltages to avoid this is called “balancing”. It can be handled in various ways, depending on the exact style of battery you’re using, as we’ll cover later.

Additionally, lithium batteries do not like being over-discharged. As a rule of thumb, it’s a good idea not to let your batteries drop below 3.0 V per cell. Failure to keep this in check can lead to ruining a pack, hurting its maximum capacity and ability to deliver current.

There are thankfully ways around these issues, and which ones you use depends on the battery you choose for your application. Continue reading “Choosing The Right Battery For Your Electric Vehicle Build”

Organic Audio: Putting Carrots As Audio Couplers To The Test

[Boltz999]'s carrot interconnect.
[Boltz999]’s carrot interconnect.
If there’s one thing that gives us joy here at Hackaday it’s a story of audio silliness. There is a rich vein of dubious products aimed at audiophiles which just beg to be made fun of, and once in a while we oblige. But sometimes an odd piece of audio equipment emerges with another purpose. Take [Boltz999]’s interconnects for example, which were born of necessity when there were no female-to-female phono adapters to connect a set of cables. Taking a baby carrot and simply plugging the phonos into its flesh delivered an audio connectivity solution that worked.

Does this mean that our gold-nanoparticle-plated oxygen-free directional audio cables are junk, and we should be heading for the supermarket to pick up a bag of root vegetables instead? I set out to test this new material in the secret Hackaday audio lab, located on an anonymous 1970s industrial estate in Milton Keynes, UK.

Continue reading “Organic Audio: Putting Carrots As Audio Couplers To The Test”