Earth’s Final Frontier: Exploring The Alien Depths Of The Earth’s Oceans

Despite how hostile to life some parts of the Earth’s continents are, humanity has enthusiastically endeavored over the course of millennia to establish at least a toehold on each of them. Yet humanity has barely ventured beyond the surface of the oceans which cover around three-quarters of the planet, with human activity in these bodies of water dropping off quickly along with the fading of light from the surface.

Effectively, this means for all intents and purposes we have to this day not explored the vast majority of the Earth’s surface, due to over 70% of it being covered by water. As an ocean planet, much of Earth’s surface is covered by watery depths of multiple kilometers, with each 10 meters of water increasing the pressure by one atmosphere (1.013 bar), so that at a depth of one kilometer we’re talking about an intense 101 atmospheres.

Over the past decades, the 1985 discovery of Titanic’s wreck approximately 3.8 kilometer below the surface of the Atlantic, the two year long search for AF447’s black boxes, and the fruitless search for the wreckage of MH370 despite washed-up remnants have served as stark reminders of just how alien and how hostile the depths of the Earth’s oceans are. Yet with both tourism and mining efforts booming, will we one day conquer the full surface of Earth?

Continue reading “Earth’s Final Frontier: Exploring The Alien Depths Of The Earth’s Oceans”

Podcast Feedback: Be Careful What You Ask For

I had one of those experiences yesterday that seem so common these days: the arrival of a mystery Amazon package. You know the kind — you get a shipping notice from UPS with the faux-excited “Your package is arriving today!” message, but you’re sure you haven’t ordered anything in a while. You check your Amazon order history, find nothing pending, and puzzle over who could be sending you a package. What could it be? A gift from a secret admirer, perhaps?

And so it was with me as I waited for the UPS driver to make her rounds of our neighborhood and drop the package off on our front steps. Surprised at its size, I hurriedly brought it inside, zipped open the box, and pulled away the packing to reveal…

Continue reading “Podcast Feedback: Be Careful What You Ask For”

Wind-to-Heat: A Lot Of Hot Air?

Heating is one of the greatest uses of energy in human society today. Where we once burned logs to stave off the brutal winter chill, now we lean on gas and electricity to warm our homes and keep us safe and toasty. In some colder climates, like the UK, heating can make up 60-80% of total domestic energy demands.

However, there are alternative ways to provide heating. Using wind energy to directly provide heat could be key in this area, using a variety of interesting methods that could have some unique niche applications.

Continue reading “Wind-to-Heat: A Lot Of Hot Air?”

Desktop EDM Hack Chat

Join us on Wednesday, June 28 at noon Pacific for the Desktop EDM Hack Chat with Cooper Zurad!

Whether you know it or not, chances are pretty good you’ve run into the results of electrical discharge machining at some point. EDM is the go-to machining method for so many applications, from making complex injection molding tooling to putting impossibly small holes into hardened steel, EDM gets the jobs that make traditional machining techniques weep.

At its heart, EDM is really simple; it’s just making sparks to selectively erode metal. In practice, though, it’s way more complicated than that. There’s the CNC aspect to control the cutting tool, the dielectric to cool things and flush away the swarf, and the precision control of the electric discharge. It’s all just complicated and expensive enough that it’s hard to find anyone doing EDM on the hobbyist level.

join-hack-chatHard, but not impossible. Desktop EDM is doable, and to help us understand the challenges involved we’ve invited Cooper Zurad to the Hack Chat. Cooper has quite a bit of experience with the related and somewhat less energetic ECM, or electrochemical machining, and is now turning the knowledge gained there to desktop EDM. Make sure to join us with your questions about machining with electricity.

Our Hack Chats are live community events in the Hackaday.io Hack Chat group messaging. This week we’ll be sitting down on Wednesday, June 28 at 12:00 PM Pacific time. If time zones have you tied up, we have a handy time zone converter.

[Featured image by Qw5646, CC BY-SA 3.0]

Meshtastic For The Greater Good

Last week, my city was hit by a tornado. That’s not surprising here in Oklahoma, and thankfully this event was an F0 or possibly even an EF0 — a really weak tornado. Only a couple roofs collapsed, though probably half the houses in town are going to need roof repairs, thanks to the combination of huge hail and high winds. While it wasn’t too bad, power did go down in a few places around town, and this led to an interesting series of events.

Chat messages were coming in like this: “That was a [power] flicker, yeah. Even took down my Internet.” Followed by “Whee, [fiber Internet] got knocked out and now Starlink has too many clouds in the way.” And after ten minutes of silence, we got a bit worried to see “Time to hide under a bed. … Is cell service back?” It is a bit spooky to think about trying to help neighbors and friends after a disaster, in the midst of the communication breakdown that often follows. If he had needed help, and had no working communications, how long would it have taken for us to go check on him?
Continue reading “Meshtastic For The Greater Good”

Hackaday Links Column Banner

Hackaday Links: June 25, 2023

Is it really a dystopian future if the robots are radio-controlled? That’s what came to mind reading this article on a police robot out of Singapore, complete with a breathless headline invoking Black Mirror, which is now apparently the standard by which all dystopias are to be judged. Granted, the episode with the robo-dogs was pretty terrifying, but it seems like the Singapore Police Force has a way to go before getting to that level. The bot, which has been fielded at Changi Airport after extensive testing and seems to be completely remote-controlled, is little more than a beefy telepresence robot. At 5.5 feet (1.7 meters) tall, the bot isn’t terribly imposing, although it apparently has a mast that can be jacked up another couple of feet, plus there are lights, sirens, and speakers that can get the message across. Plus cameras, of course; there are always cameras. The idea is to provide extra eyes to supplement foot patrols, plus the potential to cordon off an incident until meatspace officers arrive. The buzzword game here is weak, though; there’s no mention of AI or machine learning at all. We have a feeling that when the robots finally rise up, ones like this will be left serving the drinks.

Continue reading “Hackaday Links: June 25, 2023”

This Week In Security: NOAuth, MiniDLNA, And Ticket To Ride

There’s a fun logic flaw in how multiple online services handle OAuth logins, that abuses Microsoft’s Azure Active Directory service to allow account takeovers. The problem is how a site handles the “Sign In With Microsoft” option, when there’s an existing account under the same email address. This is an irritating problem for an end-user, when a site offers multiple sign-in options. Trying to remember which option was used to set up an account is a struggle, so many services automatically merge accounts.

The problem is that the Microsoft Azure authentication information includes an email address, but Microsoft hasn’t done any verification that the account in question actually controls that address. And in fact, it’s trivial for the Azure admin to change that address at whim. So if the service accepts that email address as authoritative, and auto-merges the accounts, it’s a trivial account takeover. And it’s more than just a theoretical problem, as researchers at descope were able to demonstrate the attack, and have found multiple medium and large services that were vulnerable, as well as at least two authentication providers that themselves were vulnerable to this attack.

Microsoft has pushed updates to the Azure AD service to make the issue easier to avoid, though it seems that the unverified “email” field is still being sent on authentication transactions. There is a new flag, “RemoveUnverifiedEmailClaim” that eliminates the issue, and is enabled by default for new applications. Unfortunately this means that existing vulnerable applications will continue to be vulnerable until fixed on the application side. Continue reading “This Week In Security: NOAuth, MiniDLNA, And Ticket To Ride”