The Russians And The Americans Only Want The Moon

For the generations who lived through the decades of the Space Race, the skies above were an exciting place. Every month it seemed there was a new announcement of a new mission, a Lunar landing, new pictures from a planetary probe, or fresh feats of derring-do from astronauts or cosmonauts. Space was inspiring!

As we moved through the Shuttle, Mir, and ISS eras, the fascinating work didn’t stop. The Mars rovers, the Cassini probe, the Chang-e Lunar mission, or the Hubble telescope, to name just a very few. But somehow along the way, space lost the shine for the general public, it became routine, mundane, even. Shuttle missions and Soyuz craft carrying ISS astronauts became just another feature on the news, eventually consigned only to the technology section of the broadcaster’s website. The TV comedy Big Bang Theory derived humor from this, when a character becomes an ISS astronaut, yet is still a nobody on his return to Earth.

If you yearn for a bit of that excitement from the Space Race days you may just find it in another story tucked away in the tech sections, though it comes from a collaboration rather than a competition. NASA and the Russian space agency Roscosmos have announced a partnership to take what will be the next step towards a future of deep space exploration, to place a manned space station in a Lunar orbit. The idea is that it would serve first as a valuable research platform for missions in deeper space than the current relatively low orbit of the ISS, and then as a launch base for both lunar missions and those further afield in the Solar System.

Of course, there is no lunar-orbiting station, yet. There is a long and inglorious history of proposed space missions that never left the drawing board, and this one may yet prove to be the next addition to it. But what are real are the two indisputable facts, that NASA and Roscosmos have inked this partnership, and eventually there will have to be a replacement for the ISS. This project stands a good chance of being that replacement, which makes it of great interest to anyone with an interest in technology. It’s a little out of the world of usual Hackaday fodder, but if you are like us you will want to believe that one day it will be launched.

Even with a lunar orbiting space station, it will be a very long time indeed before we see manned missions going significantly further into the Solar system. Perhaps another approach is required to go further, a laser-driven silicon wafer aimed at a nearby star.

Moon image: 阿爾特斯 [CC BY-SA 3.0].

The Hackers And The Hurricane

When natural disasters strike, particularly if they are in some of the less remote parts of the world, we see them unfolding in real-time on our television screens. They become a 24-hour rolling news exercise in disaster titillation, each fresh horror ghoulishly picked over by breathless reporters live-telecasting from windswept streets, and endlessly rehashed by a succession of in-studio expert guests.

Then once the required image of a dusty child being pulled from the rubble or a tearful mother describing her daughter being swept away is in the can, a politician somewhere is found in bed with a model or a tinpot dictator rattles his sabre, and the world moves on. The BAFTA or the Emmy is a certainty for this one, did you see the anguish!

Meanwhile on the ground, the situation remains the same. There is no power, no sanitation, no communications, no food, and help seems very far away. In the wake of the recent hurricane season across the Caribbean, there are millions of people whose worlds have been wrecked, and several international governments have faced significant criticism for their lethargic response.

In our world of hardware hackers and makers, we are on the whole practical people. We exist to make, and do, rather than to endlessly talk. Seeing the plight of the victims of Irma, Jose, or Maria leaves us wanting to do practical things to help, because that’s what we do. But of course, we can do nothing, because we’re thousands of miles away and probably lack whatever skills or training are in demand on the islands.

It’s heartening then to hear of just a few moments when our wider community has managed to be in the right place at the right time to offer some help. We’ve had a couple in our tips line lately we’d like to share.

[Csp3r] writes about the Derbycon conference held in Louisville, at which [Carlos Perez] and [Jose Quinones Borreros], information security specialists from Puerto Rico, were in attendance. They mentioned a need for emergency radios, and the community at the conference came together to raise money for much more than just a few radios. $15,000 was raised in all, spent on radios, solar chargers, generators, flashlights, USB battery packs, and tools. This amounted to a significant bulk, so Hackers For Charity helped secure some space on an aid flight to the island.

Then [Bruce Perens, K6BP] writes about a request from the American Red Cross to the ARRL for 50 radio amateurs to help with their relief efforts in Puerto Rico. They will perform the role you might expect of enabling essential communications, as well as to quote the ARRL: “help record, enter, and submit disaster-survivor information into the ARC Safe and Well system”. This is a request unprecedented in its scale, and reflects the level of damage across the island.

For most of us, the best we can do when helping out with these events will be to drop coins into an OXFAM or Red Cross collecting tin and leave it to the experts. But as we’ve noted above, for just a few of us the opportunity to do something a bit more useful presents itself. If you find yourself in that position, make it count!

We’ve looked at the role of amateur radio in public service before, and we’ve even featured it in one or two projects. This emergency box for example has all you’d need to provide this type of service.

Cyclone Catarina image from the ISS, [Public domain].

Have Some Candy While I Steal Your Cycles

Distributed computing is an excellent idea. We have a huge network of computers, many of them always on, why not take advantage of that when the user isn’t? The application that probably comes to mind is Folding@home, which lets you donate your unused computer time to help crunch the numbers for disease research. Everyone wins!

But what if your CPU cycles are being used for profit without your knowledge? Over the weekend this turned out to be the case with Showtime on-demand sites which mined Monero coins while the users was pacified by video playback. The video is a sweet treat while the cost of your electric bill is nudged up ever so slightly.

It’s an interesting hack as even if the user notices the CPU maxing out they’ll likely dismiss it as the horsepower necessary to decode the HD video stream. In this case, both Showtime and the web analytics company whose Javascript contained the mining software denied responsibility. But earlier this month Pirate Bay was found to be voluntarily testing out in-browser mining as a way to make up for dwindling ad revenue.

This is a clever tactic, but comes perilously close to being malicious when done without the user’s permission or knowledge. We wonder if those ubiquitous warnings about cookie usage will at times include notifications about currency mining on the side? Have you seen or tried out any of this Javascript mining? Let us know in the comments below.

Photo by Todd Bakken

Sector67 Hackerspace Rocked By Explosion At New Location

Madison, WI hackerspace Sector67 is in a period of transition as they move from their current rented location to a new property that will be their permanent home a half mile away. Last Wednesday (September 20, 2017) an unfortunate propane explosion in the new building led to the injury of Chris Meyer, the founder and director of the hackerspace.

The structure has been stabilized and renovation is continuing, but Chris was seriously burned and will be in the hospital for at least a month with a much longer road to complete recovery. It is fortunate that nobody else was injured.

This accident comes at a time when Sector67 essentially has two spaces to maintain; the existing space is still running, but many of the members are focused on the construction of the new space. The building needs significant work before the move can take place. Currently the roof is being raised so that the building can go from one awkward-height story to two normal stories, doubling the size. An expiring lease and imminent demolition of the current location by developers means the clock is still ticking on the move, and this explosion means Sector67 will have to work even harder, and without the presence and constant effort of the person who has been leading the project.

A GoFundMe campaign for Sector67 has been started and is well on its way towards helping Chris and Sector67.

3D Printing Aluminum With Nanoparticles

We love our 3D printers. But sometimes we really wish we could print in metal. While metal printing is still out of reach for most of us, HRL Labs announced a powdered aluminum printing process that they claim is a breakthrough because it allows printing (and welding) of high-strength aluminum alloys that previously were unprintable and unweldable.

The key is treating the metal with special zirconium-based nanoparticles. The nanoparticles act as nucleation sites that allow the aluminum to form the correct microstructure. The full paper on the process appears in Nature.

Continue reading “3D Printing Aluminum With Nanoparticles”

FPGA Clocks For Software Developers (or Anyone)

It used to be that designing hardware required schematics and designing software required code. Sure, a lot of people could jump back and forth, but it was clearly a different discipline. Today, a lot of substantial digital design occurs using a hardware description language (HDL) like Verilog or VHDL. These look like software, but as we’ve pointed out many times, it isn’t really the same. [Zipcpu] has a really clear blog post that explains how it is different and why.

[Zipcpu] notes something we’ve seen all too often on the web. Some neophytes will write sequential code using Verilog or VHDL as if it was a conventional programming language. Code like that may even simulate. However, the resulting hardware will — at best — be very inefficient and at worst will not even work.

Continue reading “FPGA Clocks For Software Developers (or Anyone)”

OptionsBleed – Apache Bleeds In Uncommon Configuration

[Hanno Böck] recently uncovered a vulnerability in Apache webserver, affecting Apache HTTP Server 2.2.x through 2.2.34 and 2.4.x through 2.4.27. This bug only affects Apache servers with a certain configuration in .htaccess file. Dubbed Optionsbleed, this vulnerability is a use after free error in Apache HTTP that causes a corrupted Allow header to be replied by the webserver in response to HTTP OPTIONS requests. This can leak pieces of arbitrary memory from the server process that may contain sensitive information. The memory pieces change after multiple requests, so for a vulnerable host an arbitrary number of memory chunks can be leaked.

Unlike the famous Heartbleed bug in the past, Optionsbleed leaks only small chunks of memory and more importantly only affects a small number of hosts by default. Nevertheless, shared hosting environments that allow for .htaccess file changes can be quite sensitive to it, as a rogue .htaccess file from one user can potentially bleed info for the whole server. Scanning the Alexa Top 1 Million revealed 466 hosts with corrupted Allow headers, so it seems the impact is not huge so far.

The bug appears if a webmaster tries to use the “Limit” directive with an invalid HTTP method. We decided to test this behaviour with a simple .htaccess file like this:

Continue reading “OptionsBleed – Apache Bleeds In Uncommon Configuration”