What Are Your Indispensable Software Skills?

Using tools properly takes skill, and this goes for software tools as well as hardware. You don’t just buy a paintbrush and on day one paint the Mona Lisa. Similarly, you can’t just open up a CAD program and whip out whatever 3D objects your heart desires, or fire up Vim and start typing. Software tools take a bit of learning before you can wield them efficiently, if even at all. And because you can’t be skilled at everything, no matter how hard we are all trying, it’s good to have at least some of the software tools you know do double duty.

Tom and I were watching [Clough42] design an electronics cabinet for a CNC machine. He does a lot of CNC machining and design work, so he’s no stranger to CAD software. So he downloaded all of the parts that he needed inside cabinet, slid them onto virtual DIN rails, modeled the hinges, and made sure that everything fit before buying anything.

Now I know that some of you out there do CAD modeling like this all the time, but for Tom and I, who are 3D printerers and PCB layouterers, doing the CAD without then following through and finishing up with the CAM seemed a bit novel. I never open CAD unless I’m going to have a machine make the thing – otherwise I’d just draw it out on paper, right? But [Clough42]’s point is that getting models of all of the subparts is so easy these days, you might as well model it.

If, and this is the big “if”, you know your way around the CAD tool of your choice. If you don’t yet, it’s going to be a couple of days’ worth of effort to get there. But once you reach CAD nirvana, you’ll find it’s useful for sketching up anything that has a third dimension to it, not just stuff you need to print out.

What other software tools are like CAD in that once you know them well enough, a wealth of applications opens up before you? Of was this just an instance of having a hammer and everything looking like a nail?

Hackaday Podcast Episode 387: Superhuman Clocks, CAN In USB-C, And The Joys Of Bare Metal

This week, Hackaday Editors Elliot Williams and Tom Nardi start the episode off by discussing the latest CircuitPython developments before covering some impressive reverse engineering efforts, the benefits of modeling your projects in 3D, and some of the most incredible timepieces that have ever graced the pages of Hackaday.

You’ll also hear about the fascinating potential of combing 3D and UV printing, Linux on the ESP32, and a virtual TV station that pulls from the Internet Archive. The episode wraps up with a Hackaday Europe double-feature: one talk extols the virtues of keeping things simple through bare metal development, while the other covers off-world hacks and fixes that will make you want to sign up for Space Camp.

Check out the links if you want to follow along, and as always, tell us what you think about this episode in the comments!

Direct download, the MP3 way.

Continue reading “Hackaday Podcast Episode 387: Superhuman Clocks, CAN In USB-C, And The Joys Of Bare Metal”

This Week In Security: Flock Cameras Are Old, Microsoft Patches Patches, And Researchers Attack SSH

Leak site Distributed Denial of Secrets has released a dump of the filesystems of a Flock camera, and Micah Lee has published a dive into the contents.  Apparently the Flock security model did not include “angry citizens with a hacksaw in the middle of the night” in the physical security category.

The first thing Micah notes is that the Flock hardware runs Android 8.1 (for those not keeping track, the current Android release is Android 17 released in June 2026).  The version of Android running on the Flock camera was last patched in June of 2018, and the Linux kernel (3.18.71) is over nine years out of date, and the 3.18 series went end-of-life in 2019.

You might assume “wouldn’t an operating system this old have known vulnerabilities?”, and you’d be completely right.  Micah calls out two in particular, one in the Qualcomm GPU which allows any program to manipulate kernel memory and gain root (similar, yet simpler, than the spate of kernel vulnerabilities this year that allowed manipulating memory via the disk IO cache), and the “WrongZone” vulnerability which allows a process to escalate to root via socket handling errors.  You might also guess both of these have been patched, and again, you’d be right, in 2021 and 2018 respectively.

Digging deeper, Micah discovers that API keys with access into the Flock infrastructure appear to be hard-coded into the binaries.  Each camera appears to request credentials from an authentication server, using the MAC address of the camera.  After obtaining the credentials from an Okta Auth0 sign-in service, the Flock stores them, in plain text.

Also stored on the camera unencrypted are logs and position data:  The camera dumped to Distributed Denial of Secrets came from a suburb of Milwaukee. Continue reading “This Week In Security: Flock Cameras Are Old, Microsoft Patches Patches, And Researchers Attack SSH”

FCC ISM Rules May Shatter Lora Mesh Communities

Although everyone has their own reasons for exploring a new hobby, one of the driving factors behind the popularity of Meshtastic and MeshCore has been the incredible accessibility offered by off-grid LoRa mesh networks. You don’t need any expensive hardware or a license to get on the air — armed with a $20 microcontroller dev board and open source software, you could be on the mesh in minutes. Then came the really exciting part, seeing who else was out there. The low barrier of entry and ad-hoc nature of these projects meant there was a good chance you’d soon find yourself exchanging messages with other like-minded folks in the area.

Or at least, that’s how it used to be. With the recent revelation that their default radio configurations have potentially been in violation of the Federal Communications Commission’s (FCC) regulations governing amateur usage of the 900 MHz industrial, scientific and medical (ISM) band, the users and developers of both Meshtastic and MeshCore have been sent scrambling. Getting in compliance isn’t necessarily a technical challenge. In fact, Meshtastic has already introduced changes aimed to address the issue and anyone running the latest alpha release can be sure that their initial radio configuration will meet FCC standards.

But unfortunately, this introduces a new problem. While it’s easy enough to get new installations of Meshtastic and MeshCore operating in a mode that keeps the FCC happy, doing so breaks compatibility with everything that’s already been deployed. The community will be fractured into distinct strata depending on when they first configured their hardware, with an added dash of confusion from the more rebellious users who will undoubtedly refuse to migrate over to the new settings.

What was once easy and accessible has just gotten a whole lot more complicated.

Continue reading “FCC ISM Rules May Shatter Lora Mesh Communities”

FLOSS Weekly Episode 882 With OSADL: Better Together

This week Jonathan chats with Jan Altenberg of the Open Source Automation Development Lab, a cooperative of nerds that care about Linux and Open Source! Jan and OSADL helped push Real Time Linux across the finish line, are looking at safety critical hardening, and general cooperating to make Open Source and Industry work better together.

Continue reading “FLOSS Weekly Episode 882 With OSADL: Better Together”

Heat Domes: Meet The Quiet And Oppressive Take On The Thunderdome

One of the nice things about the weather is that even if it’s bad right now, it’ll definitely be changing soon and maybe even for the better. There is one exception to this rule, however, and that comes in the form of heat domes, which are weather systems whereby a region of air becomes isolated from the surrounding systems. This creates effectively a greenhouse, with hot air remaining trapped and moisture unable to get in.

Although until recently not very common, this weather phenomenon poses a major challenge to any flora and fauna that finds itself trapped in a heat dome. With nights being about as hot and stifling as the days with their blue skies unbroken by any cloud cover and no rain for potentially weeks on end, it poses severe hydration, cardiovascular, and other challenges to any affected lifeforms.

Continue reading “Heat Domes: Meet The Quiet And Oppressive Take On The Thunderdome”

Hackaday Europe 2026: Bare Metal Made Easy

When we talk about programming in “bare metal,” it basically means writing software that runs right on the hardware with no operating system or abstraction layers in between. This gives the program the most direct possible access to peripherals and memory, with the tradeoff being that you don’t get the protection and ancillary features that come with an OS.

Sylvain Huet came down to Hackaday Europe 2026 to talk about making bare metal easy. Not just by ignoring operating systems and ever-bloating dependencies, but by rethinking the way we approach software development and by building a transparent platform from the ground up.

Continue reading “Hackaday Europe 2026: Bare Metal Made Easy”