Slider

5115 Articles

This Week In Security: Adblock For Security, ProxyNotShell Lives, And CVSS 10 To Not Worry About

December 30, 2022 by 14 Comments

The ubiquity of ransomware continues, this time with The Guardian announcing they were partially shut down from an attack. Staff are working from home as the incident is being investigated and data is recovered. Publishing seems to be continuing, and the print paper ran as expected.

There have been a couple reports published recently on how ransomware and other malware is distributed, the first being a public service announcement from the FBI, detailing what might be a blindly obvious attack vector — search engine advertising. A bad actor picks a company or common search term, pays for placement on a search engine, and then builds a fake web site that looks legitimate. For bonus points, this uses a typosquatted domain, like adobe[dot]cm or a punycode domain that looks even closer to the real thing.

The FBI has a trio of recommendations, one of which I whole-heartedly agree with. Their first suggestion is to inspect links before clicking them, which is great, except for the punycode attack. In fact, there are enough lookalike glyphs to make this essentially useless. Second is to type in URLs directly rather than using a search engine to find a company’s site. This is great so long as you know the URL and don’t make a typo. But honestly, haven’t we all accidentally ended up at website[dot]co by doing this? Their last recommendation is the good one, and that is to run a high-quality ad-blocker for security. Just remember to selectively disable blocking for websites you want to support. (Like Hackaday!) Continue reading “This Week In Security: Adblock For Security, ProxyNotShell Lives, And CVSS 10 To Not Worry About” →

Wear Your Fave Cassette Tapes As A Necklace With This 3D Printed Adapter

December 29, 2022 by 47 Comments

While packing merch for a recent gig, I realised I had the opportunity to do something a little fun. I’d released an album on tape, and spent a little extra to ensure the cassette itself was a thing of beauty. It deserved to be seen, rather than hidden away in a case on a shelf. I wanted to turn this piece of musical media into a necklace.

Of course, cassette tapes aren’t meant to be used in this way. Simply throwing a chain through the cassette would lead to tape reeling out everywhere. Thus, I fired up some CAD software and engineered a solution to do the job! Here’s how I built an adapter to turn any cassette tape into a cool necklace.

Find the design on Thingiverse, and more details below!

Continue reading “Wear Your Fave Cassette Tapes As A Necklace With This 3D Printed Adapter” →

Supercon 2022: Mooneer Salem Goes Ham With An ESP32

December 28, 2022 by 10 Comments

After being licensed as a ham radio operator since the early 2000s, you tend to start thinking about combining your love for the radio with other talents. In a 20-minute talk at Hackaday Supercon 2022, [Mooneer Salem] tells the story of one such passion project that combined software and radio to miniaturize a digital ham radio modulator.

[Mooneer] works as a software developer and contributes to a project called FreeDV (free digital voice), a digital voice mode for HF radio. FreeDV first compresses the digital audio stream, then converts it into a modulation scheme sent out over a radio. The appeal is that this can be understandable down to very low signal-to-noise ratios and includes metadata and all the other niceties that digital signals bring.

Traditionally, this has required a computer to compress the audio and modulate the signal in addition to two sound cards. One card processes the audio in and out of your headset, and another for the audio coming in and out of the radio. [David Rowe] and [Rick Barnich] developed the SM1000, a portable FreeDV adapter based around the STM32F4 microcontroller. However, flash space was running low, and the cost was more than they wanted. Continue reading “Supercon 2022: Mooneer Salem Goes Ham With An ESP32” →

Linux Fu: Miller The Killer Makes CSV No Pest

December 28, 2022 by 27 Comments

Historically, one of the nice things about Unix and Linux is that everything is a file, and files are just sequences of characters. Of course, modern practice is that everything is not a file, and there is a proliferation of files with some imposed structure. However, if you’ve ever worked on old systems where your file access was by the block, you’ll appreciate the Unix-like files. Classic tools like awk, sed, and grep work with this idea. Files are just characters. But this sometimes has its problems. That’s the motivation behind a tool called Miller, and I think it deserves more attention because, for certain tasks, it is a lifesaver.

The Problem

Consider trying to process a comma-delimited file, known as a CSV file. There are a lot of variations to this type of file. Here’s one that defines two “columns.” I’ve deliberately used different line formats as a test, but most often, you get one format for the entire file:

Slot,String 
A,"Hello" 
"B",Howdy 
"C","Hello Hackaday" 
"D","""Madam, I'm Adam,"" he said." 
E 100,With some spaces!
X,"With a comma, or two, even"

Continue reading “Linux Fu: Miller The Killer Makes CSV No Pest” →

Lo-Fi Fun: Beer Can Microphones

December 27, 2022 by 16 Comments

Sometimes, you just need an easy win, right? This is one of those projects. A couple months back, I was looking at my guitars and guitar accessories and thought, it is finally time to do something with the neck I’ve had lying around for years. In trying to decide a suitable body for the slapdash guitar I was about to build, I found myself at a tractor supply store for LEGO-related reasons. (Where else are you going to get a bunch of egg cartons without eating a bunch of eggs?) I  noticed that they happened to also stock ammo boxes. Bam! It’s sturdy, it opens easily, and it’s (very) roughly guitar body shaped. I happily picked one up and started scheming on the way home.

Having never built a cigar box guitar before and being of a certain vintage, I’m inclined to turn to books instead of the Internet, so I stocked up from the library. Among my early choices was Making Poor Man’s Guitars by Shane Speal, who is widely considered to be the guru on the subject. In flipping through the book, I noticed the beer can microphone project and was immediately taken by the aesthetic of some cool old 70s beer can with a 1/4″ instrument jack on the bottom, just asking for some dirty blues to be belted into it. I had to build one. Or twelve.

Continue reading “Lo-Fi Fun: Beer Can Microphones” →

All About USB-C: Illegal Adapters

December 27, 2022 by 107 Comments

Let’s be clear – it’s not enough to have USB-C to USB-C cables. There’s a lot of cables that we might want to acquire for our day-to-day use, perhaps, for a transition period while we still own some amount of devices not adorned with a USB-C connector. However, the USB-C specification only accounts for a limited amount of kinds of cables, explicitly or implicitly excluding a range of cables that you might want to buy or make.

It’s my firm belief that, as a hacker, you should be able to buy any USB-C contraption that you could ever need. Hackers don’t need restrictions driven by marketing – they need understanding of how a piece of tech can or cannot be used, based on how it operates internally. I would like you to provide with such understanding, so that you can make informed decisions.

On the other hand, USB-C is designed to be used by less-than-skilled people, even if it often fails at that. (Cable labelling, anyone?) Clear definitions of what complies to a standard can help enforce it. Here’s the notorious story of a USB-C cable that killed a Chromebook, and launched a career of explaining USB-C specifics online for [Benson Leung]. There’s many such failure stories, in fact. Today, we’ll go through USB-C contraptions which might or might not fail you, depending on how you use them. Continue reading “All About USB-C: Illegal Adapters” →

Hackaday Links Column Banner

Hackaday Links: December 25, 2022

December 25, 2022 by 21 Comments

Looks like it’s lights out on Mars for the InSight lander. The solar-powered lander’s last selfie, sent back in April, showed a thick layer of dust covering everything, including the large circular solar panels needed to power the craft. At the time, NASA warned that InSight would probably give up the ghost sometime before the end of the year, and it looks like InSight is sticking to that schedule. InSight sent back what might be its last picture recently, showing the SEIS seismic package deployed on the regolith alongside the failed HP3 “mole” experiment, which failed to burrow into the soil as planned. But one bad experiment does not a failed mission make — it was wildly successful at most everything it was sent there to do, including documenting the largest marsquake ever recorded. As it usually does, NASA has anthropomorphized InSight with bittersweet sentiments like “Don’t cry, I had a good life,” and we’re not quite sure how we feel about that. On the one hand, it kind of trivializes the engineering and scientific accomplishments of the mission, but then again, it seems to engage the public, so in the final rinse, it’s probably mostly harmless.

Continue reading “Hackaday Links: December 25, 2022” →