Hacking Toy RC Cars With The HackRF One

The origin story for many who’d call themselves a member of the hacker community usually starts with taking things apart as a child just to see how they worked. For [Radoslav], that trend doesn’t seem to have slowed down, and he’s continued taking toys apart. Although since it’s his daughters little radio controlled car, he stuck to a non-destructive teardown. The result? He’s able to control the car with his laptop through a HackRF One SDR transceiver as shown in the video below the break.

[Radoslav] is no stranger to reverse engineering embedded devices, IoT gadgets, and probably more. So he started with what information was publicly available about the radio control interface in use. Many electronic devices sold in the US must be certified by the FCC (Federal Communications Commission) and prominently display their ID number, and this toy was no exception. The FCC database gave [Radoslav] enough information to know that the communication protocol is modulated with GFSK, a type of Frequency Shift Keying.

He fired up his favorite radio signal analysis tool and and got to work on the protocol itself. Along the way he found that communication between the car and controller is bidirectional but also very easy to get around. The result is that he can drive the car around with his laptop- definitely a cool hack, but for this one, the journey was surely the goal, not the destination.

If hacking on RC cars really gets your wheels turning, you might like this little RC car that can driveĀ on the ceiling. Or if you’re feeling a bit hungry, check out how you can use the HackRF to nab a table at your local restaurant.

Continue reading “Hacking Toy RC Cars With The HackRF One”

Multiband Crystal Radio Set Pulls Out All The Stops

Most crystal radio receivers have a decidedly “field expedient” look to them. Fashioned as they often are from a few turns of wire around an oatmeal container and a safety pin scratching the surface of a razor blade, the whole assembly often does a great impersonation of a pile of trash whose appearance gives little hope of actually working. And yet work they do, usually, pulling radio signals out of thin air as if by magic.

Not all crystal sets take this slapdash approach, of course, and some, like this homebrew multiband crystal receiver, aim for a feature set and fit and finish that goes way beyond the norm. The “Husky” crystal set, as it’s called by its creator [alvenh], looks like it fell through a time warp right from the 1920s. The electronics are based on the Australian “Mystery Set” circuit, with modifications to make the receiver tunable over multiple bands. Rather than the traditional galena crystal and cat’s whisker detector, a pair of1N34A germanium diodes are used as rectifiers — one for demodulating the audio signal, and the other to drive a microammeter to indicate signal strength. A cat’s whisker is included for looks, though, mounted to the black acrylic front panel along with nice chunky knobs and homebrew rotary switches for band selection and antenna.

As nice as the details on the electronics are, it’s the case that really sells this build. Using quarter-sawn oak salvaged from old floorboards. The joinery is beautiful and the hardware is period correct; we especially appreciate the work that went into transforming a common flat washer into a nickel-plated escutcheon for the lock — because every radio needs a lock.

Congratulations to [Alvenh] for pulling off such a wonderful build, and really celebrating the craftsmanship of the early days of radio. Need some crystal radio theory before tackling your build? Check out [Greg Charvat]’s crystal radio deep dive.

The Apollo Digital Ranging System: More Than Meets The Eye

If you haven’t seen [Ken Shirriff]’s teardowns and reverse engineering expeditions, then you’re in for a treat. His explanation and demonstration of the Apollo digital ranging system is a fascinating read, even if vintage computing and engineering aren’t part of your normal fare.

The average Hackaday reader should be familiar with the concept of determining the distance of a faraway object by measuring how long it takes a sound or radio wave to be reflected, such as in sonar and radar. Going another step and measuring Doppler Shift – the difference in the returned signal’s frequency – will tell us the velocity of the object relative to our position. It’s so simple that an Arduino can do it. But in the days of Apollo, there was no Arduino. In fact, there were no Integrated Circuits. And Apollo missions went all the way to the moon- far too distant for relatively simple Radar measurements. Continue reading “The Apollo Digital Ranging System: More Than Meets The Eye”

A FET Oscilloscope Probe For Higher Frequencies

It’s a problem that has dogged electronic engineers since the first electrons were coaxed along a wire: that measuring instruments can themselves disrupt the operation of a circuit. Older multimeters for example had impedances low enough to pull resistor values, thus our multimeters today have high-impedance FET inputs. [Christoph] faced it with his oscilloscope probe, its input capacitance was high enough to put unacceptable load on a crystal oscillator and stop it oscillating. He thus built a FET input probe for higher RF frequencies, and its construction is an accessible view of wideband RF instrumentation design.

The circuit is a very simple one using a dual-gate FET, but the interest comes in the PCB and screening can design to ensure good RF performance. Off-the-shelf cans have four sides, so to accommodate the circuit one wall of the can had to be removed. The end result is a tiny PCB with miniature co-ax connectors for power and signal, which when characterised was found to have a 1.3 GHz bandwidth and a very low input capacitance.

If the language of RF design is foreign to you, may we recommend [Michael Ossmann]’s talk at a Superconference a few years ago.

A beige 1960s radio receiver, inset with vacuum tubes

Busted 1960s Vacuum Tube Radio Sings Again

Restoring a vintage radio receiver has the potential to be a fun weekend project, but it pays to know what you’re up against. Especially in the case of vacuum tube electronics, running down gremlins in the circuits isn’t always a straightforward process (also, please mind the high voltage that is present in old vacuum tube equipment). [Mr Carlson] has a knack for getting old radios humming once again, and his repair of a 1960s General Electric barn find radio receiver is a thorough masterclass in vintage electronics servicing.

Seriously, if you’ve got a spare ninety minutes, the video (after the break) is a thorough and unabridged start-to-finish diagnosis and repair of a vintage radio, and an absolute must for anyone interested in doing the same. This barn find radio was certainly showing its age, and it wasn’t long before in-circuit testing found an open filament in one of several vacuum tubes, but the radio was still stubbornly silent. Further testing revealed that the IF transformers were out of spec, requiring servicing and alignment. After fine tuning both the IF and RF sections of the radio, things were definitely looking (and sounding) better.

Fine tuning the various components in the radio went a long way to living up to its “long range” claims, and by the end of the video, it’s almost impossible to find dead air on the AM dial of this radio. If you’ve never had to make fine adjustments to a receiver, especially of this vintage, this video has all the details you’ll need. With the board exposed, [Mr Carlson] also took care of some preventative maintenance, including replacing the original filter capacitor with newer components, as well as replacing the mains safety capacitor with an even safer modern alternative.

We can’t get enough of these restorations, so make sure to check out our detailed write-up of restoring a WWII aircraft radio.

Continue reading “Busted 1960s Vacuum Tube Radio Sings Again”

The insides of a tube-based noise source

Using A Vacuum Diode To Make The Cleanest Noise Source You’ve Ever Seen

Noise is an annoying but unavoidable part of any engineering project. Fixing noise issues is hard enough, but even just measuring how much noise an amplifier adds to your signal is tricky without proper equipment like a spectrum analyzer. One other thing that makes noise measurements easier is a good, stable noise source that can serve as a reference: you first measure your amplifier without any input, and then measure it again with the noise source connected. Using a few simple formulas you can then calculate how much noise the amplifier produced.

Building a source that generates exactly the amount of noise that you want, no more and no less, is quite a challenge in itself. Several techniques exist, but [Wolfgang] over at the Electronic Projects for Fun blog decided to go for the classic method of using a vacuum diode. He describes the design and analysis of a noise source based on a 2D3B tube in a detailed article.

The tube in question is a special vacuum diode designed to be operated in saturation, meaning at a current high enough to draw away all the electrons generated by the hot filament. When running in this mode, the output current has a noise spectrum that is almost perfectly white, meaning its power level remains constant across the frequency band. [Wolfgang]’s measurements show a deviation of no more than 0.2 dB between 200 kHz and 200 MHz. This is about as close to perfect as you can get, and covers most of the frequency bands of interest to radio amateurs.

The whole project is built up inside a sturdy metal box, with extensive shielding and line filtering to keep undesired signals from contaminating the clean noise signal. A limiter is also an essential component: should the diode’s filament break, the limiter will prevent the sudden transient from reaching the spectrum analyzer and destroying its (very expensive) input stage.

[Wolfgang] has made a few other noise sources based on various components, which he compares on a separate page, although the 2D3B based one is by far the most stable. We’ve also featured a simple pink noise source, which is useful for audio measurement, as well as white noise sources designed to generate random numbers or simply to help you sleep.

The cluster of HackRFs described in the article, boards on top of each other, plugged into two 1x4 RF power splitters that are in turn plugged into a 1x2 RF power splitter. An LNA is connected to the input of the final splitter, and a cable goes off the frame from there.

A Gang Of HackRFs Makes For A Wideband SDR

[Oleg Kutkov] decided to build a wideband SDR – for satellite communication research and monitoring, you know, the usual. He decided on a battery of HackRF boards – entire eight of them, in fact. Two 1×4 and one 1×2 RF splitters and an LNA on their combined RF input made for a good start to the project, and from there, it only got more complex.

HackRF boards can be synchronized with a separate clock source, but you can’t just pull a single clock line to all of them in a star configuration. Thus, he’s built a clock distribution and amplifier board, with 4 ns propagation delay at 1 PPS, and only 10 ns delay at 10 MHz. Then, he integrated that board with the HackRF setup, adding a case, wiring up a purpose-built cable and dealing with the reflections that occurred.

HackRF boards are USB 2.0 and able to generate a stream of data up to 320 MB/s, and there’d be no viable way to aggregate eight 2.0 links into one. To solve that, he’s used eight separate PCI-E to USB 3.0 cards, each of them with one HackRF plugged in, all connected to an AMD Ryzen 9-powered PC through PCI-E risers we typically see used for mining purposes. To tie it all together, he created a gnuradio flowgraph and patched the osmocom source block to enable the external clock synchronization mechanisms he decided to use.

Each HackRF is connected to its own PCIe USB card.

In the end, [Oleg] shows us some promising results – two DVB-S transceivers visible on the waterfall display of the spectrum capture. The work is not over here, to be clear – he’s ran into a few roadblocks. The gnuradio flowgraph doesn’t lend itself well to multi-threading, even on a Ryzen 9 machine, and [Oleg] pledged to rewrite the capture mechanisms in C++ which can be nicely allocated to separate physical CPU cores, something gnuradio is apparently not quite good at.

More importantly, the spectrum captured is not continuous, and [Oleg] questions whether it can be demodulated properly. He had to resort to frequency overlaps due to upsampling, and he’s not quite sure how to compensate for that. Overall frequency stability is also in question. However, from here, seems like most of the work towards building a wideband receiver is done!

[Oleg] is typically seen on Twitter, lately doing some heavy tinkering with Starlink – as Kyiv, the city he’s currently in, is under bombardment of Russian Armed Forces. We can only respect and appreciate the dedication. In January, we’ve covered his work on an USA-imported Tesla LTE modem replacement to fix LTE band incompatibilities in Ukraine, and his blog is a treasure trove of experiments that we are yet to properly comb through, from astrophysics and satellite work to RS485 networks and Linux driver writing.