Apple AirTags Hacked And Cloned With Voltage Glitching

July 14, 2022 by Lewin Day 34 Comments

Apple AirTags are useful little devices. They essentially use iPhones in the wild as a mesh network to tell the owner where the AirTag is. Now, researchers have shown that it’s possible to clone these devices.

The research paper explains the cloning process, which requires physical access to the hardware. To achieve the hack, the Nordic nRF52832 inside the AirTag must be voltage glitched to enable its debug port. The researchers were able to achieve this with relatively simple tools, using a Pi Pico fitted with a few additional components.

With the debug interface enabled, it’s simple to extract the microcontroller’s firmware. It’s then possible to clone this firmware onto another tag. The team also experimented with other hacks, like having the AirTag regularly rotate its ID to avoid triggering anti-stalking warnings built into Apple’s tracing system.

As the researchers explain, it’s clear that AirTags can’t really be secure as long as they’re based on a microcontroller that is vulnerable to such attacks. It’s not the first AirTag cloning we’ve seen either. They’re an interesting device with some serious privacy and safety implications, so it pays to stay abreast of developments in this area.

[Thanks to Itay for the tip!]

Cracking The MiFare Classic Could Get You Free Snacks

July 13, 2022 by Lewin Day 24 Comments

[Guillermo] started a new job a while back. That job came with an NFC access card, which was used for booking rooms and building access. The card also served as a wallet for using the vending machines. He set about hacking the card to see what he could uncover.

Initial scans with NFC Tools revealed the card was an Infineon MIFARE Classic Card 1k. These cards are considered fairly old and insecure by now. There’s plenty of guides online on how to crack the private keys that are supposed to make the card secure. Conveniently, [Guillermo] had a reader/writer on hand for these very cards.

[Guillermo] was able to use a tool called mfoc to dump the keys and data off the card. From there, he was able to determine that the credit for the vending machines was stored on the card itself, rather than on a remote server.

This means that it’s simple to change the values on the card in order to get free credit, and thus free snacks. However, [Guillermo] wisely resisted the urge to cash in on candy and sodas. When totals from the machine and credit system were reconciled, there’d be a clear discrepancy, and a short investigation would quickly point to his own card.

He also managed to successfully clone a card onto a “Magic Mifare” from Amazon. In testing, the card performed flawlessly on all systems he tried it on.

It goes to show just how vulnerable some NFC-based access control systems really are. RFID tags are often not as safe as you’d hope, either!

It’s A Bird! It’s A Plane! It’s… A Live Air Traffic Plane Spotting Simulation

July 12, 2022 by Ryan Flowers 5 Comments

Plane spotting has been a hobby of aviation enthusiasts for generations. Hanging out by the airport, watching aircraft come and go, maybe even listening to Air Traffic Control on a scanner from your local Radio Shack. Yep- we’ve been there, and it can be a lot of fun! But how can those of us who don’t live near a major controlled airport keep up on the action? As demonstrated by the [Information Zulu] YouTube channel’s Live Stream, seen below the break, the action may be closer than you think!

By using publicly available information, software, and some ingenuity, [Information Zulu] has created a live simulation of Los Angeles International Airport (LAX) for your simulated plane spotting pleasure. Aircraft positional data is gained through an ADSB receiver and piped into a the flight simulator software with a Traffic Injection Addon, and the simulator itself is used to properly place aircraft, set the weather, and even the correct aircraft types and liveries. Setting off the illusion of a real plane spotting adventure is the live Air Traffic Control radio chatter!

We love the creativity that went into not just making all of the software available, but in combining it into a cohesive product that can be viewed 24/7 on YouTube that, if you squint just right, could be mistaken for a view of the real thing.

If you’re not familiar with ADSB and how it’s used to track aircraft in such a way that anybody can receive it with the right equipment, check out this beginner’s course on ADSB from a few years back!

Continue reading “It’s A Bird! It’s A Plane! It’s… A Live Air Traffic Plane Spotting Simulation” →

Sneeze Into Your Hand, Not Your Elbow With This Nose-Shaped Sanitizer Dispenser

July 9, 2022 by Dan Maloney 7 Comments

You’ve got to love a language like German, where not only is it possible for a word or two to stand in for a complex concept, but you don’t even need to speak the language to make a good guess at what it all means. Of course when your project is a giant nose that mock-sneezes sanitizer into your hands, it doesn’t really matter that you call it Der niesende Desinfektionsmittelspender. Humor based on bodily functions is, after all, the universal language.

Working knowledge of German or not, figuring out exactly what [Nina] is doing here isn’t too difficult. Judging by the video below and the build log, the idea is to detect the presence of a hand underneath the dispenser with a simple IR reflective sensor hooked to some kind of microcontroller — an ESP32 in this case. Audio clips of sneezes are stored on an SD card and played back through a small speaker, while a hobby servo pushes the button on an atomizer. It seems as if selecting the proper dispenser was the hardest thing about the project; [Nina] finally settled on a battery-operated mister that was just the right size to fit into the nose. Oh, didn’t we mention the giant, pink, 3D-printed nose that houses the whole thing? Sorry about that — it’s quite subtle and easy to miss.

Anyway, the whole project is a lot of fun and brought a genuine laugh when we saw it. It’s a clever way to poke gentle fun at the germaphobes who came up with other, less whimsical methods of dispensing hand sanitizer. But let’s face it, they ended up being proven pretty much on the mark about things.

Continue reading “Sneeze Into Your Hand, Not Your Elbow With This Nose-Shaped Sanitizer Dispenser” →

DIY Chicken McMansion Is A Real Hen House

July 6, 2022 by Ryan Flowers 9 Comments

You might recognize [Robert Dunn] from his YouTube channel Aging Wheels, where he hacks on all sorts of automotive delights. On his other channel, Under Dunn, [Robert] tends to focus on building things. In this case, his nine chickens grew a bit, and he needs a new coop for his twenty chickens, three turkeys, and two geese. The build, the video, and the outcome are all typical of [Robert Dunn]’s videos- that is to say fun, informative, and easy to follow along with.

Rather than building on to his existing coop that was designed for less than a dozen chickens, [Robert] decided to start from scratch. Using CAD to overcomplicate matters at every possible step, the build flies together with impressive speed- but never quite takes off until the very last moment.

The video highlights all the things we want to see: The CNC’ing, the fails (including one very large fall-flat-on-your-face moment), the recovery from the fails, routed butt joints, and screen door handles. It’s also got all of the overengineered goodness we’ve all come to love. You’ll also enjoy his solution to moving, then fixing, then finally installing the coop.

If you enjoyed this, and watching people fail, check out [Robert]’s Fail Of The Week that we featured a while back.

Continue reading “DIY Chicken McMansion Is A Real Hen House” →

Ride DIY Or Die This Badge-Less Suzuki

July 3, 2022 by Kristina Panos 12 Comments

A few years ago, [Charles] picked up a sweet Suzuki motorcycle that checked all the boxen: it was in good shape, bore a few useful upgrades and a box of spare parts, plus the price was right. Though he assumed that he had pored over every picture on the classified site before buying, it wasn’t until later that [Charles] realized that something was indeed missing from the bike — a piece of chrome that does little more than to cover the tee in the brake line and bear the Suzuki brand. Once he saw the problem, he couldn’t un-see it, you know? And at that point, he just had to have that little piece, even if he had to make it himself.

That wasn’t the original plan, of course, but bike parts are expensive to begin with and only get worse as size, condition, and rarity increase. [Charles]’ quest to find this piece was halfway successful; he found a reasonable-but-rusty facsimile of the right part, although the emblem portion was long gone. Then he remembered the wife’s vinyl cutter.

Now, let’s stop right there. If you know anything at all about these vinyl cutters, you know that they are basically glorified 2D plotters with a knife attached where a pen would be. Send it any 2D file and you’re good? No, no; of course not. These things are locked down by the manufacturers.

Fortunately, [Charles] found inkscape-silhouette, which makes light work of sending SVGs to the machine. After much back and forth and maybe a bit of coin-flipping, [Charles] settled on the classy, stylized ‘S’ version rather than the full-on Suzuki badge. We think it looks great, and we’ll never tell anyone.

While this isn’t quite the type of badge we’d normally talk about, it’s a great project nonetheless, and it’s always nice to hear about projects that open up otherwise closed-source hardware.

Bluetooth 8-Track Adapters Are A Thing

July 3, 2022 by Lewin Day 33 Comments

When it comes to classic cars, the entertainment options can be limited. You’re often stuck with an old cassette deck and AM/FM radio, or you can swap it out for some hideous flashy modern head unit. [Jim] had a working 8-track deck in his Corvette, and didn’t want to swap it out. Thus, he set about building himself a simple Bluetooth to 8-track adapter.

The hack is straightforward, with [Jim] grabbing a Bluetooth-to-cassette adapter off the shelf. These simply take in audio over Bluetooth, and pipe the analog audio out to a magnetic head, which is largely similar to the head that reads the cassette. Pumping the audio to the magnetic coils in the adapter’s head creates a changing magnetic field essentially the same as the audio tape moving past the cassette reader head. It doesn’t really matter whether you’re working with an 8-track player or a regular cassette. Get the magnetic field in the right spot, and it’ll work.

The electronics from the cassette adapter are simply placed inside an old 8-track tape, with holes cut in the chassis for the charge port and on switch. Then, all you need to do is pop the adapter into the 8-track deck, pair with it over Bluetooth, and you can get the tunes pumping.

Others have had success with hilarious Rube Goldberg methods, too. [Techmoan] took a classic cassette-to-8-track adapter, which is actually self-powered by the deck, and simply popped a Bluetooth cassette inside. That worked surprisingly well, and it was interesting to see how it all worked on the inside. We even saw a 3D-printed device on TikTok.

Thus, if you’ve got an old Corvette, particularly of that era with the Doug Nash 4+3 transmission, this might just be the hack for you. Alternatively, you can hack Bluetooth in to just about any classic stereo; we’ve got a guide on how to do just that. Video after the break.

Continue reading “Bluetooth 8-Track Adapters Are A Thing” →