How Best To Get Your Project On Hackaday

April 27, 2021 by Zoe Skyforest 34 Comments

We’re blessed to have such a great community at Hackaday. Our tipline often overfloweth with all manner of projects and builds of all stripes. We see it all here, from beginners just starting out with their first Arduino to diehard hackers executing daringly complex builds in their downtime, and everything in between.

If you’re sitting there in the grandstands, watching in awe, you might wonder what it takes to grace these hallowed black pages. In life, nothing is guaranteed, but I’ve been specially authorised to share with you a few tips that can maximise your chances of seeing your project on Hackaday.

Continue reading “How Best To Get Your Project On Hackaday” →

Review: Sequre SQ-D60 Temperature Controlled Soldering Iron

April 27, 2021 by Jenny List 38 Comments

Over the past few years a new class of soldering iron has arisen: a temperature controlled iron no longer tied to a bulky mains-powered base station, but using low-voltage DC power and with all electronics concealed in a svelte handle. First came the Miniware TS100, and then many more, with slightly different feature sets and at varying price points. We’ve reviewed a few of them over the years, and today we have the most recent contender in the Sequre SQ-D60. It follows the formula closely, but costs only £20 (about $26). This price puts it in an attractive budget category, and its USB-C power option makes it forward-looking over models with barrel jacks. Description over, it’s time to plug it in and put it through its paces.

What’s In The Box?

That's a lot of extra bits for a budget iron! — That’s a lot of extra bits for a budget iron!

In the box, aside from the handle containing the electronics, were a surprisingly comprehensive array of parts and accessories. The handle itself is similarly-sized to its competitors, being only slightly longer than that of Pine64’s Pinecil. The tip supplied was unexpectedly a slanted chisel, so I may have managed to order incorrectly, though since it shares the same tip design as both the TS100 and the Pinecil I have plenty of alternative tips should I need one. Otherwise there was a little bag of hex screws along with a key and a driver for them, a little stand with a sponge, a set of Sequre stickers, a USB-C to barrel jack cable, and a barrel jack-to-XT60 connector for use with LiPo battery packs. These last two cables are a particularly useful addition.

At first sight the tip doesn’t seem to have any means of being fixed into its socket, but a closer inspection reveals that there is a hex screw hiding underneath a silicone finger sleeve that holds it securely when tightened. The handle has a simple enough interface, with just two buttons and a 3-digit, 7-segment display. Powering it up from a 45 W USB-PD power supply, and it heats up to 300 °C in around ten seconds after pressing one of the buttons. My usual soldering temperature is 360 °C, and it has an interface involving long presses of one of the buttons before they become up and down buttons to select the temperature. In prolonged use the handle doesn’t become noticeably warm, and aside from a slight new-electronics-getting-hot smell there was no immediate concern that it might release magic smoke. Continue reading “Review: Sequre SQ-D60 Temperature Controlled Soldering Iron” →

Linux Fu: A Little Bit Of (Network) History Repeating Itself

April 26, 2021 by Al Williams 5 Comments

These days, embedded systems often have networks and that can make them significantly more complex. Networks are usually pretty nondeterministic and there are a variety of oddball conditions. For example, when your public-access pick and place machine gets written up on Hackaday and you suddenly get a 50X surge in traffic, how does your network stack handle it? While there’s no silver bullet for network testing, there are some tricks that can make it easier and one of those is the tcpreplay utilities that allow you to record complex network traffic and then play it back in a variety of ways. This has many benefits, especially if you manage to capture that one thing that triggers bad behavior sporadically. Being able to play it back on demand can speed up diagnostics considerably.

General Idea

You probably know that tcpdump allows you to grab packet captures from a network interface and save them to a file. If you prefer a GUI, you probably use Wireshark, which uses the same underlying library (libpcap) to grab the data. In fact, you can capture data using tcpdump and look at it with Wireshark, although there are other tools like tcptrace or Ngrep that can work with the output, also.

While the output of the command can be a little cryptic without tool support, a program called tcpreplay can take that data and feed it back in a variety of ways. Of course, you can modify the file first — there are tools to make that easier and — if you need to — you can craft your own network traffic by hand or using one of a variety of tools. This process is often called “packet crafting.”

Continue reading “Linux Fu: A Little Bit Of (Network) History Repeating Itself” →

Blocking Out The Sun: Viable Climate Countermeasure Or Absolute Madness?

April 26, 2021 by Zoe Skyforest 155 Comments

If there’s one thing humans hate, it’s exercising willpower. Whether its abstaining from unhealthy foods, going to bed early, or using less energy and reducing greenhouse gas emissions, we’re famously bad at it. Conversely, if there’s one thing humans love, it’s a workaround. Something that lets us live our lives as the carefree hedonists we are, and deals with the sticky consequences so we don’t have to.

One such workaround for the issue of climate change is a doozy, though — blocking out the sun’s rays in order to cool our warming planet.

Continue reading “Blocking Out The Sun: Viable Climate Countermeasure Or Absolute Madness?” →

“Paper” Bottles For Your Fizzy Drinks (And Bottle Rockets)

April 23, 2021 by Jenny List 144 Comments

A story that passed almost unnoticed was that the Coca-Cola company plan to run a limited trial of paper bottles. Wait, paper for a pressurized beverage? The current incarnation still uses a plastic liner and cap but future development will focus on a “bio-based barrier” and a bio composite or paper cap tethered to the vessel.

Given that plastic pollution is now a major global concern this is interesting news, as plastic drinks bottles make a significant contribution to that problem. But it raises several questions, first of all why are we seemingly unable to recycle the bottles in the first place, and given that we have received our milk and juice in paper-based containers for decades why has it taken the soda industry so long?

Plastic soft drink bottles are made from Polyethylene terephthalate or PET, the same polyester polymer as the one used in Dacron or Terylene fabrics. They’re blow-moulded, which is to say that an injection-moulded preform something like a plastic test tube with a screw top fitting is expanded from inside in a mould by compressed gas. As anyone who has experimented with bottle rockets will tell you, they are immensely strong, and as well as being cheap to make and transport they are also readily recyclable when separated from their caps.

Continue reading ““Paper” Bottles For Your Fizzy Drinks (And Bottle Rockets)” →

This Week In Security: NAME:WRECK, Signal Hacks Back, Updates, And More

April 23, 2021 by Jonathan Bennett 9 Comments

NAME:WRECK is a collection of vulnerabilities in DNS implementations, discovered by Forescout and JSOF Research. This body of research can be seen as a continuation of Ripple20 and AMNESIA:33, as it builds on a class of vulnerability discovered in other network stacks, problems with DNS message compression.

Their PDF Whitepaper contains a brief primer on the DNS message format, which is useful for understanding the class of problem. In such a message, a DNS name is encoded with a length-value scheme, with each full name ending in a null byte. So in a DNS Request, Hackaday.com would get represented as [0x08]Hackaday[0x03]com[0x00]. The dots get replaced by these length values, and it makes for an easily parsable format.

Very early on, it was decided that continually repeating the same host names in a DNS message was wasteful of space, so a compression scheme was devised. DNS compression takes advantage of the maximum host/domain length of 63 characters. This max size means that the binary representation of that length value will never contain “1”s in the first two digits. Since it can never be used, length values starting with a binary “11” are used to point to a previously occurring domain name. The 14 bits that follow this two bit flag are known as a compression pointer, and represent a byte offset from the beginning of the message. The DNS message parser pulls the intended value from that location, and then continues parsing.

The problems found were generally based around improper validation. For example, the NetX stack doesn’t check whether the compression pointer points at itself. This scenario leads to a tight infinite loop, a classic DoS attack. Other systems don’t properly validate the location being referenced, leading to data copy past the allocated buffer, leading to remote code execution (RCE). FreeBSD has this issue, but because it’s tied to DHCP packets, the vulnerability can only be exploited by a device on the local network. While looking for message compression issues, they also found a handful of vulnerabilities in DNS response parsing that aren’t directly related to compression. The most notable here being an RCE in Seimens’ Nucleus Net stack. Continue reading “This Week In Security: NAME:WRECK, Signal Hacks Back, Updates, And More” →

Hands-On With PineCube: An Open IP Camera Begging For Better Kernel Support

April 22, 2021 by Maya Posch 27 Comments

When the PineCube was announced by the Pine64 project in 2020, it created a fair bit of interest. Most of this was due to the appeal of a single-board computer (SBC) in a network-based (IP) camera form factor with integrated camera module, for a mere $29.99. Add an enclosure to it, and you would have a neat little package combining a 5 MP camera module with 100 Mbit Ethernet and WiFi. As a bonus, the system could be powered either via an optional battery pack as well as passive PoE, in addition to MicroUSB.

A few weeks ago I bought two of these boards, as part of a client project, and set out to use it for a custom IP camera implementation. With existing Linux-on-SBC and MIPI (CSI) camera experience on my end ranging from the Raspberry Pi to the Odroid, Orange Pi and Banana Pi boards, I felt fairly confident that I could make it work with minimal fuss.

Unfortunately, my experiences were anything but positive. After spending many hours with the PineCube, I’m not able to recommend it for those seeking an IP camera. There are many reasons for this, which I’ll try to explain in this article.

Continue reading “Hands-On With PineCube: An Open IP Camera Begging For Better Kernel Support” →