This Week In Security: Working From Home Edition

March 20, 2020 by Jonathan Bennett 8 Comments

As the world sits back and waits for Coronavirus to pass, the normally frantic pace of security news has slowed just a bit. Google is not exempt, and Chrome 81 has been delayed as a result. Major updates to Chrome and Chrome OS are paused indefinitely, but security updates will continue as normal. In fact, Google has verified that the security related updates will be packaged as minor updates to Chrome 80.

Chinese Viruses Masquerading as Chinese Viruses

Speaking of COVID-19, researchers at Check Point Research stumbled upon a malware campaign that takes advantage of the current health scare. A pair of malicious RTF documents were being sent to various Mongolian targets. Created with a tool called “Royal Road“, these files target a set of older Microsoft Word vulnerabilities.

This particular attack drops its payload in the Microsoft Word startup folder, waiting for the next time Word is launched to run the next stage. This is a clever strategy, as it would temporarily deflect attention from the malicious files. The final payload is a custom RAT (Remote Access Trojan) that can take screenshots, upload and download files, etc.

While the standard disclaimer about the difficulty of attribution does apply, this particular attack seems to be originating from Chinese intelligence agencies. While the Coronavirus angle is new, this campaign seems to stretch back to 2017.
Continue reading “This Week In Security: Working From Home Edition” →

Thousands Of Internet-Connected Satellites Above Us, What Could Possibly Go Wrong!

March 19, 2020 by Jenny List 55 Comments

Our skies are full of satellites, more full than they have been, that is, because SpaceX’s Starlink and a bevvy of other soon-to-launch operators plan to fill them with thousands of small low-earth-orbit craft to blanket the Earth with satellite Internet coverage. Astronomers are horrified at such an assault on their clear skies, space-watchers are fascinated by the latest developments, and in some quarters they’re causing a bit of concern about the security risk they might present. With a lot of regrettable overuse use of the word “hacker”, the concern is that such a large number of craft in the heavens might present an irresistible target for bad actors, who would proceed to steer them into each other can cause chaos.

Invest in undersea cables, folks, the Kessler Syndrome is upon us, we’re doomed!

Continue reading “Thousands Of Internet-Connected Satellites Above Us, What Could Possibly Go Wrong!” →

GitHub On The Go

March 18, 2020 by Al Williams 4 Comments

It is hard to find anyone that does any kind of software development that doesn’t have some interaction with GitHub. Even if you don’t host your own projects there, there are so many things to study and borrow on the site, that it is nearly ubiquitous. However, when you’ve needed GitHub on the run, you’ve probably had to turn to your phone browser and had a reduced experience. GitHub for Mobile is now out of beta and promises a more fluid phone-based GitHub experience.

In addition to working with tasks and issues, you can also review and merge pull requests. The app sends your phone notifications, too, which can be handy. As you might expect, you can get the app for Android or iPhone in the respective stores.

Continue reading “GitHub On The Go” →

Corona Cancels Cons

March 14, 2020 by Elliot Williams 32 Comments

As you read this, the Open Hardware Summit is taking place, but differently than in previous years. This year, it’s taking place in cyberspace! To what do we owe this futuristic development? Unfortunately, COVID-19, the corona virus.

And OHS isn’t alone. Vintage Computer Festival Pacific Northwest was cancelled outright. In Germany, where I live, the national health board has recommended cancelling all events with more than 1,000 attendees, and both the Maker Faire Berlin and the Chaos Computer Club’s 20th annual Easterhegg have been called off.

And just announced yesterday, our own Hackaday Belgrade event is going to be postponed and rescheduled for later this year. It’s truly sad, but we’re still looking forward to seeing you all a little bit later in the summer. If you can’t make the new date, tickets will of course be refunded. We’ll keep you informed when we get a new venue and time.

The best way to slow the spread of a global pandemic, according to the WHO who should know best, is washing your hands and avoiding contact with other people. “Social distancing” is the new catch-phrase, and that means keeping a few meters away from other folks whenever reasonable. And clearly, gathering people from all over the world, packing them into a single auditorium, and spending quality time together doesn’t meet this requirement.

So we’re all probably going to be laying low globally for a little while. On the positive side, this means more time for hacking here in the lab, and I’m excited to be able to watch the online version of the Open Hardware Summit. If you’re working from home, it’s that much easier to keep up to date with Hackaday. Still, I can’t wait to be on the other side of this thing, and it makes me appreciate the various social gatherings that much more.

And of course I have Isaac Newton in my thoughts, who developed the groundwork for his Calculus and laws of gravitation while at home because Cambridge was closed to stop the spread of the Great Plague. Wash your hands!

Honeywell May Pull Into The Quantum Computer Lead

March 14, 2020 by Al Williams 13 Comments

It has been a while since we thought about computers and thought about Honeywell. Sure, they had a series of computers they bought from General Electric and Computer Control Company in the 1970s. Even before that they joined with Raytheon and produced vacuum tube computers that later morphed into transistor-based computers. But in recent years, you are more likely to think of Honeywell for thermostats, air filters, and industrial controls. But now, Honeywell has come out of the computer shadows with some impressive quantum computer hardware and they clearly have big plans.

Comparing quantum computers is a bit dicey just as, for example, judging CPUs by instructions per second has its problems. In the past, vendors have jockeyed for the maximum number of qubits, but that’s misleading in some cases. Processing power depends on the number of qubits, their quality, and how they are connected. IBM introduced the idea of quantum volume and Honeywell claims their new machine will hit 64 by that measure, twice that of anyone else’s quantum computer that we know about.

Continue reading “Honeywell May Pull Into The Quantum Computer Lead” →

Hybrid Supercapacitors Are — Well — Super

March 14, 2020 by Al Williams 39 Comments

Kurt.energy is promoting a new line of hybrid supercapacitors. By itself, that wouldn’t be very newsworthy, but the company claims these graphene-based supercapacitors merge the best features of both supercapacitors and lithium-ion batteries. Based on technology from a company called Shenzhen Toomen New Energy, the capacitors are optimized for either high energy or high power. They can reportedly charge and discharge 10-20 times faster than lithium-ion batteries. Of course, we’ve heard wild claims surrounding graphene capacitors before and, so far, they haven’t seemed very credible.

In addition to high performance, the company claims the capacitors are safe from overcharging, short circuit, and other safety issues that plague batteries. The devices are said to operate — including charging — from -40C to 80C. You can see a video from the company, below.

Continue reading “Hybrid Supercapacitors Are — Well — Super” →

Hackaday Belgrade Conference Postponed

March 13, 2020 by Elliot Williams 11 Comments

Due to uncertainties about the progress of the spread of the novel corona virus, it’s with a sad heart that we announce that we’re postponing the 2020 Hackaday Belgrade conference.

We will be rescheduling for later in the year, but for now we’ll be refunding conference tickets. We received a record number of incredible presenter proposals, and once we’ve rescheduled, we’ll get in touch with everyone who entered a proposal to check up on your availability.

In the meantime, come and hang out with us virtually on Hackaday.io’s Hackaday Belgrade page.

We know how much you were all looking forward to Belgrade in May, and it pains us to have to take this step. When we get more details ironed out, we’ll be sure to let you know! See you all a little bit later in the summer?