This Week In Security: USB Boom! Acropalypse, And A Bitcoin Heist

We’ve covered a lot of sketchy USB devices over the years. And surely you know by now, if you find a USB drive, don’t plug it in to your computer. There’s more that could go wrong than just a malicious executable. We’ve covered creative and destructive ideas here on Hackaday, from creative firmware to capacitors that fry a machine when plugged in. But what happened to a handful of Ecuadorian journalists was quite the surprise. These drives went out with a bang.

That is, they literally exploded. The drives each reportedly contained a pellet of RDX, a popular explosive in use by militaries since the second World War. There have been five of these hyperactive USB devices located so far, and only one actually detonated. It seems that one only managed to trigger half of its RDX payload. Because of this, and the small overall size of a USB drive, the explosion was more comparable to a firecracker than a bomb. Continue reading “This Week In Security: USB Boom! Acropalypse, And A Bitcoin Heist”

Combining Acoustic Bioprinting With Raman Spectroscopy For High-Throughput Identification Of Bacteria

Rapidly analyzing samples for the presence of bacteria and similar organic structures is generally quite a time-intensive process, with often the requirement of a cell culture being developed. Proposed by Fareeha Safir and colleagues in Nano Letters is a method to use an acoustic droplet printer combined with Raman spectroscopy. Advantages of this method are a high throughput, which could make analysis of samples at sewage installations, hospitals and laboratories significantly faster.

Raman spectroscopy works on the principle of Raman scattering, which is the inelastic scattering of photons by matter, causing a distinct pattern in the thus scattered light. By starting with a pure light source (that is, a laser), the relatively weak Raman scattering can be captured and the laser light filtered out. The thus captured signal can be analyzed and matched with known pathogens. Continue reading “Combining Acoustic Bioprinting With Raman Spectroscopy For High-Throughput Identification Of Bacteria”

Helmke-Part-Counter Dispensing Parts

Dispense 60 Bolts In 2.3 Seconds

We’ve covered a number of projects that assist makers who need to fill orders for their small businesses, or kitting. [Helmke] has sorted thousands of pieces of hardware that they include with 3D printed parts sold online. They have been developing an alternative, a modular system for sorting and packaging specific quantities of parts.

Animated GIF of Helmke-Part-Counter Sorting Parts

After the break, check out the latest video from their small but growing channel for a very clear walk-through of the counting system they’ve been iterating on. The 2nd video in the series explores solenoids, Geneva drives, and ultimately a sprocket to dispense a variable number of bolts from the sorting machine. The approach gives consistent results, easily to vary quantities, and is fast! These videos are also rich with lots of small details you might want to explore on your own like magnetic part feeding, discussions of different sensors for detecting and counting parts, 3D printed gear box designs, and we love the use of stackable crates for project enclosures.

We hope to see more videos from [Helmke] in the series as the project matures for deeper dives into the existing mechanisms and new features they develop next. Hungry for more? We’ve brought you everything from cutting and stripping wire, to SMD tape, to resistors, to laser-cut parts. Continue reading “Dispense 60 Bolts In 2.3 Seconds”

This Week In Security: Kali Purple, Malicious Notifications, And Cybersecurity Strategy

After a one-week hiatus, we’re back. It’s been a busy couple weeks, and up first is the release of Kali Purple. This new tool from Kali Linux is billed as an SOC-in-a-box, that follows the NIST CSF structure. That is a veritable alphabet soup of abbreviated jargon, so let’s break this down a bit. First up, SOC IAB or SOC-in-a-box is integrated software for a Security Operation Center. It’s intrusion detection, intrusion prevention, data analysis, automated system accounting and vulnerability scanning, and more. Think a control room with multiple monitors showing graphs based on current traffic, a list of protected machines, and log analysis on demand.

NIST CSF is guidance published by the National Institute of Standards and Technology, a US government agency that does quite a bit of the formal ratification of cryptography and other security standards. CSF is the CyberSecurity Framework, which among other things, breaks cybersecurity into five tasks: identify, protect, detect, respond, and recover. The framework doesn’t map perfectly to the complexities of security, but it’s what we have to work with, and Kali Purple is tailor-made for that framework.

Putting that aside, what Purple really gives you is a set of defensive and analytical tools that rival the offensive tools in the main Kali distro. Suricata, Arkime, Elastic, and more are easily deployed. The one trick that really seems to be missing is the ability to deploy Kali Purple as the edge router/firewall. The Purple deployment docs suggest an OPNSense deployment for the purpose. Regardless, it’s sure to be worthwhile to watch the ongoing development of Kali Purple.

Continue reading “This Week In Security: Kali Purple, Malicious Notifications, And Cybersecurity Strategy”

Virgin Orbit Pauses Operations, Seeks Funding

It looks as though things may have gone from bad to worse at Virgin Orbit, the satellite carrying spin-off of Richard Branson’s space tourism company Virgin Galactic. After a disappointing launch failure earlier in the year, CNBC is now reporting the company will halt operations and furlough most employees for at least a week as it seeks new funding.

It’s no secret that company has struggled to find its footing since it was formed in 2017. On paper, it was an obvious venture — Virgin Galactic already had the White Knight Two carrier aircraft and put plenty of R&D into air-launched rockets, it would simply be a matter of swapping the crewed SpaceShipTwo vehicle for the LauncherOne orbital booster. But upgrades to the rocket eventually made it too large for the existing carrier aircraft, so the company instead purchased a Boeing 747 and modified it to lift their two-stage rocket out of the thick lower atmosphere. Continue reading “Virgin Orbit Pauses Operations, Seeks Funding”

Hackaday Berlin: Final Schedule, Last Call For Tickets, And More

Hackaday Berlin is just about a week away, and we’ve just put the finishing touches on our preparations. And that includes a snazzy landing page, the full schedule, details on the Friday night meetup, and more.

We’ll be meeting up Friday the 24th at 19:00 at DogTap / Brew Dog, Im Marienpark 23 for an ice breaker. This is a great time to unwind from your travels, catch up with old friends, and start getting into gear for the days ahead.

Saturday the 25th starts off at 9:30, you’ll get your badge and schwag bag, and have some breakfast. Then it’s talks, workshops, lightning talks, badge hacking, food and music until the wee hours.

Sunday morning starts up again at 11:00, but it’ll feel like 10:00 due to Daylight Savings time. We’ll have brunch, show off whatever cool hacks you’ve brought along, and just generally chill out into the afternoon. Some people are planning to go sightseeing around Berlin afterwards, so if that’s your thing, you’re in good company.

For any chat related to Hackaday Berlin, we have a not-so-cryptically named #Berlin channel over on the Hackaday Discord server.

There are still a few tickets left, so you procrastinators, now’s your time to snap them up. All the rest of you, put those finishing touches on whatever you’re bringing with you, and we’ll see you next week!

(Oh, and press the play button on the landing page.)

Enzymes Make Electricity From Thin Air

There’s an old magic trick known as the miser’s dream, where the magician appears to pull coins from thin air. Australian scientists say they can now generate electricity out of thin air with the help of some enzymes. The enzyme reacts to hydrogen in the atmosphere to generate a current.

They learned the trick from bacteria which are known to use hydrogen for fuel in inhospitable environments like Antarctica or in volcanic craters. Scientists knew hydrogen was involved but didn’t know how it worked until now.

The enzyme is very efficient and can even work on trace amounts of hydrogen. The enzyme can survive freezing and temperature up to 80 °C (176 °F). The paper seems more intent on the physical mechanisms involved, but you can tell the current generated is minuscule. We don’t expect to see air-powered cell phones anytime soon. Then again, you have to start somewhere, and who knows where this could lead?

Microbial fuel cells aren’t new, of course. If you just want lights, you can skip the electricity altogether.