Slider

5158 Articles

This Week In Security: Zimbra, Lockbit 2, And Hacking NK

February 11, 2022 by 9 Comments

Unknown attackers have been exploiting a 0-day attack against the Zimbra e-mail suite. Researchers at Volexity first discovered the attack back in December of last year, detected by their monitoring infrastructure. It’s a cross-site scripting (XSS) exploit, such that when opening a malicious link, the JavaScript running on the malicious page can access a logged-in Zimbra instance. The attack campaign uses this exploit to grab emails and attachments and upload them to the attackers. Researchers haven’t been able to positively identify what group is behind the attacks, but a bit of circumstantial evidence points to a Chinese group. That evidence? Time zones. The attacker requests all use the Asia/Hong_Kong time zone, and the timing of all the phishing emails sent lines up nicely with a work-day in that time zone.

Zimbra has responded, confirming the vulnerability and publishing a hotfix for it. The campaign seems to have been targeted specifically against European governments, and various media outlets. If you’re running a Zimbra instance, make sure you’re running at least 8.8.15.1643980846.p30-1.

LockBit 2.0

Because security professionals needed something else to keep us occupied, the LockBit ransomware campaign is back for a round two. This is another ransomware campaign run in the as-a-Service pattern — RAAS. LockBit 2 has caught enough attention, that the FBI has published a FLASH message (PDF) about it. That’s the FBI Liaison Alert System, in the running for the worst acronym. (Help them figure out what the “H” stands for in the comments below!)

Like many other ransomware campaigns, LockBit has a list of language codes that trigger a bail on execution — the Eastern European languages you would expect. Ransomware operators have long tried not to poison their own wells by hitting targets in their own back yards. This one is being reported as also having a Linux module, but it appears that is limited to VMWare ESXi virtual machines. A series of IoCs have been published, and the FBI are requesting any logs, ransom notes, or other evidence possibly related to this campaign to be sent to them if possible. Continue reading “This Week In Security: Zimbra, Lockbit 2, And Hacking NK” →

China Loves Battery Swapping EVs, But Will They Ever Make It Here?

February 9, 2022 by 122 Comments

Electric vehicles promise efficiency gains over their gas-fuelled predecessors, but the issue of recharging remains a hurdle for many eager to jump on board with the technology. The problem is only magnified for those that regularly street park their vehicles or live in apartments, without provision to charge a vehicle overnight at home.

Battery swapping promises to solve that issue, letting drivers of EVs change out their empty battery for a freshly charged one in a matter of minutes. The technology has been widely panned and failed to gain traction in the US.

However, as it turns out, battery swapping for EVs is actually thing in China, and it’s catching on at a rapid rate.

Continue reading “China Loves Battery Swapping EVs, But Will They Ever Make It Here?” →

Industrial Sewing Machine: Acquired

February 8, 2022 by 106 Comments

Well, it’s done. After weeks of trawling Craigslist, an hour-long phone call with an intelligent stranger about a different machine that wasn’t going suit my needs, and a two-week delay while the seller and I waited out their unintentional COVID exposure, I am the proud new owner of a vintage Consew 206RB-3 industrial sewing machine.

So far, it is exactly what I wanted — at least a few decades old, in decent shape, built by a reputable maker, and it has a clutch motor that I can upgrade to a servo motor if I wish. I even like the color of the head, the table, and the little drawer hiding on the left side. Connie Consew is perfect!

Decidedly Not Portable

The internet was right — these things are heavy. According to the manual, the machine head alone weighs 25.5 kg (56 lbs). The motor probably weighs another 50-60 lbs. There’s a small wooden peg sticking up from the table that has the job of holding the head whenever it is tilted back for maintenance or bobbin changes. I’ll admit I didn’t trust the little peg at first, but it does a fine job of supporting all that weight on a single point of contact about an inch in diameter.

Continue reading “Industrial Sewing Machine: Acquired” →

Hair Today Gone Tomorrow: Four Men Go To Fix A Wafer Prober

February 8, 2022 by 43 Comments

I’ve had a fairly varied early part of my career in the semiconductors business: a series of events caused me to jump disciplines a little bit, and after one such event, I landed in the test engineering department at Philips Semiconductors. I was tasked with a variety of oddball projects, supporting engineering work, fixing broken ATE equipment, and given a absolute ton of training: Good times!  Here’s a story that comes straight off the oddball pile.

We needed to assemble a crack team of experts and high-tail it to deepest darkest Wales, and sort out an urgent production problem. The brief was that the wafer probe yield was disastrous and the correlation wafer was not giving the correct results. Getting to the punch line is going to require some IC fabrication background, but if you like stories about silicon, or red-bearded test engineers, it’s worth it. Continue reading “Hair Today Gone Tomorrow: Four Men Go To Fix A Wafer Prober” →

Crimping Tools And The Cost Of Being Cheap

February 7, 2022 by 113 Comments

Crimp connectors provide an easy and convenient way to connect electronics while still allowing for them to be removed and swapped without having to reach for a soldering iron and desoldering wick. While browsing one’s favorite cheap shopping site, you may get the impression that all one has to do to join the world of crimp-awesome is order a $20 crimp tool and some assorted ‘JST’ and ‘DuPont’ (a Mini-PV clone) connectors to go with it. After all, it’s just a bit of metal that’s squeezed around some stripped wire. How complicated could this be?

The harsh truth is that, as ridiculous as the price tag on official JST and Mini-PV crimping tools may seem at hundreds of dollars each, they offer precise, repeatable crimps and reliable long-term stability. The same is true for genuine JST, Mini-PV and Molex connectors. The price tag for ‘saving a buck’ may end up being a lot higher than the money originally saved.

Continue reading “Crimping Tools And The Cost Of Being Cheap” →

Pick and place reels

Pick And Place Hack Chat

February 7, 2022 by No comments

Join us on Wednesday, February 9 at noon Pacific for the Pick and Place Hack Chat with Chris Denney!

We in the hacker trade are pretty used to miracles — we make them all the time. But even the most jaded among us has to admit that modern PCB assembly, where components that could easily hide under a grain of sand are handled by robots, borders on witchcraft. The pick and place machines that work these wonders not only have to hit their marks accurately and precisely, but they also do it at blinding speeds and for days on end.

join-hack-chatLuckily, even those of us who design circuits for a living and depend on PCB assembly services to realize those designs can, at least to some degree, abstract the details of the pick and place phase of the process away. But making it “just work” isn’t a trivial task, and learning a little bit about what it takes to do so can make us better designers. Plus, it’s just plain cool to watch a pick and place do its thing. And to dive a little deeper into pick and place, Chris Denney, CTO of Worthington Assembly and co-host of “Pick, Place, Podcast” will stop by the Hack Chat. If you’ve ever wondered about the inner workings of PCB assembly and the role pick and place plays in it, or if you’re looking for tips on how to optimize your layouts for pick and place, this is one you won’t want to miss!

Our Hack Chats are live community events in the Hackaday.io Hack Chat group messaging. This week we’ll be sitting down on Wednesday, February 9 at 12:00 PM Pacific time. If time zones have you tied up, we have a handy time zone converter.

Continue reading “Pick And Place Hack Chat” →

Remembering The MIT Radiation Laboratory

February 7, 2022 by 32 Comments

Back in the late 80s, our company managed to procure the complete 28 volume MIT Radiation Laboratory (Rad Lab) series, published in 1947, for the company library. To me, these books were interesting because I like history and old technology, but I didn’t understand why everyone was so excited about the acquisition. Only a cursory glimpse at the volumes would reveal that the “circuits” these books described used vacuum tubes and their “computers” were made from mechanical linkages. This was the 1980s, and we worked with modern radar and communications systems using semiconductors, integrated circuits, and digital computers. How could these old musty books possibly be of any practical use? To my surprise, it turned out that indeed they could, and eventually I came to appreciate the excitement. I even used several of them myself over the years.

Radiation Lab? Nuclear Radar?

In the years leading up to WW2, the idea of a civilian organization of scientists that would operate independently of the military and government bureaucracies was being championed by Dr. Vannevar Bush. The military and scientists had not worked well together during the first World War, and it looked like science and technology would be playing a much bigger role in the future.

It seemed certain that America would enter the conflict eventually, and Dr Bush and others believed that a new organizational framework was called for. To that end, the National Defense Research Committee (NDRC), which later became the Office of Scientific Research and Development (OSRD) was pitched to President Roosevelt and he approved it in June of 1940.

Almost immediately, a gift fell in the lap of the new organization — the Tizard Mission which arrived in the states from the UK in Sep 1940. They brought a literal treasure chest of technical innovations from the British, who hoped that US industry’s cooperation could help them survive what looked like certain and imminent invasion. One of those treasures was the cavity magnetron, which our own Dan Maloney wrote about a few years ago.

Within a few weeks, under the guidance of young Welshman “Taffy” Bowen, they had reviewed the design and gathered up the necessary equipment to fire it up. A 10 kV anode power supply and a 1,500 gauss electromagnet were procured, and the scientists gathered at the Bell Radio Laboratories in Whippany New Jersey on Sunday, Oct. 6, 1940. They powered up the cavity magnetron and were blown away by the results — over 10 kW of RF at 3 GHz (10 cm) from something the size of a bar of soap. Continue reading “Remembering The MIT Radiation Laboratory” →