This Week In Security: Mysterious Mac Malware, An Elegant VMware RCE, And A JSON Mess

February 26, 2021 by Jonathan Bennett 10 Comments

There’s a new malware strain targeting MacOS, Silver Sparrow, and it’s unusual for a couple reasons. First, it’s one of the few pieces of malware that targets the new M1 ARM64 processors. Just a reminder, that is Apple’s new in-house silicon design. It’s unusual for a second reason — it’s not doing anything. More precisely, while researchers have been watching, the command and control infrastructure didn’t provide a payload. Silver Sparrow has been positively found on nearly 30,000 machines.

The malware also has an intentional kill switch, where the presence of a particular file triggers a complete removal of the malware package. Researchers at Red Canary point out that this package behaves very much like a legitimate program, difficult to pick out as malware. Ars Technica got an off-the-record statement from Apple, indicating that they are tracking the situation, and have revoked the developer’s certificate used to sign the malware. It’s not entirely clear whether this prevents the malware running on already compromised machines, or just stops new infections.

So who’s behind Silver Sparrow? The observed stealth mode and other complexities suggest that this is more than a simple adware or ransomware campaign. Since it was discovered before the payload was delivered, we may never know what the purpose is. It may have been a government created campaign, targeting something specific. Continue reading “This Week In Security: Mysterious Mac Malware, An Elegant VMware RCE, And A JSON Mess” →

Should I Use Wheels Or Tracks?

February 26, 2021 by Zoe Skyforest 32 Comments

When it comes to dominating offroad performance, many people’s first thought is of tracked vehicles. Bulldozers, tanks and excavators all use treads, and manage to get around in difficult terrain without breaking a sweat. Today, we’re exploring just what makes tracked vehicles so capable, as well as their weaknesses.

It’s All About Ground Pressure

The various parts of a tank’s propulsion system.

Let’s first look at how tank tracks work. There are a huge variety of designs, with differences depending on application. Different trends have been followed over time, and designs for military use in combat differ from those used for low-speed construction machines, for example. But by looking at a basic tank track design, we can understand the basic theory. On tanks, the track or tread itself is usually made up of individual steel links that are connected together with hinges, though other machines may use rubber tracks instead. The tracks are wrapped around one or more drive wheels, often cogged, which directly pull on the track. On the bottom of the vehicle are the road wheels, which ride on top of the track where it lies on the ground. The weight of the vehicle is carried through the road wheels and passed on to the tread, spreading out the load across a broader area. Outside of this, the track system may also have one or more idler wheels used to keep the track taught, as well as return rollers to guide the track back around without touching the road wheels.

Continue reading “Should I Use Wheels Or Tracks?” →

3D Printering: To Print Stainless, You Do Half The Work

February 25, 2021 by Al Williams 37 Comments

Everyone wants to print using metal. It is possible, but the machines to do the work are usually quite expensive. So it caught our eye when MakerBot announced a printer — armed with an experimental extruder — that can print stainless steel parts. Then we read a bit more and realized that it can only sort of do the job. It needs a lot of help. And with some reasonable, if not trivial, modifications, your printer can probably print metal as well.

The key part of the system is BASF Ultrafuse 316L Stainless Steel filament, something that’s been around for a few years. This is a polymer with metal incorporated into it. This explains the special extruder, since metal-bearing filament is hell on typical 3D printer nozzles. However, what comes out isn’t really steel — not yet. For that, you have to send the part to a post-processing facility where it is baked at 1380 °C in a pure hydrogen atmosphere using special equipment. This debinding and sintering produces a part that the company claims can be up to 96% pure metal.

Continue reading “3D Printering: To Print Stainless, You Do Half The Work” →

What If I Never Make Version Two?

February 25, 2021 by Kristina Panos 62 Comments

When you make something, what does version one look like? What I mean is, how much thought do you put into the design? Do you try to make it look nice as you go along, or do you just build something that functions and say screw the presentation? Do you try to solve for everything upfront, or just plow through it and promise to fix your mistakes in version two? What if you never make version two?

No matter what you like to make, there’s a first time for everything. And it doesn’t seem to matter if you need the thing you’re making or just want to have it around: it’s a given that version one will probably be a bit rough around the edges. That’s just how it goes. Even if you’re well-versed in a skill, when you try a new type of project or a new pattern, it will be a new experience. For example, I’ve sewn a dozen different purses, but when I took on a new challenge I found I was only somewhat prepared to make my first backpack.

Great is the enemy of good, and perfection is the enemy of progress. Shooting for a pristine prototype on the first go steep and rocky path that never leads to finishing the build. So our goal here is to decide what makes rev1 good enough that we still love it, even if rev2 never happens.

Continue reading “What If I Never Make Version Two?” →

Real-Time OS Basics: Picking The Right RTOS When You Need One

February 24, 2021 by Maya Posch 60 Comments

When do you need to use a real-time operating system (RTOS) for an embedded project? What does it bring to the table, and what are the costs? Fortunately there are strict technical definitions, which can also help one figure out whether an RTOS is the right choice for a project.

The “real-time” part of the name namely covers the basic premise of an RTOS: the guarantee that certain types of operations will complete within a predefined, deterministic time span. Within “real time” we find distinct categories: hard, firm, and soft real-time, with increasingly less severe penalties for missing the deadline. As an example of a hard real-time scenario, imagine a system where the embedded controller has to respond to incoming sensor data within a specific timespan. If the consequence of missing such a deadline will break downstream components of the system, figuratively or literally, the deadline is hard.

In comparison soft real-time would be the kind of operation where it would be great if the controller responded within this timespan, but if it takes a bit longer, it would be totally fine, too. Some operating systems are capable of hard real-time, whereas others are not. This is mostly a factor of their fundamental design, especially the scheduler.

In this article we’ll take a look at a variety of operating systems, to see where they fit into these definitions, and when you’d want to use them in a project. Continue reading “Real-Time OS Basics: Picking The Right RTOS When You Need One” →

Increasing The Resolution Of The Electrical Grid

February 24, 2021 by Matthew Carlson 68 Comments

As a society in the USA and other parts of the world, we don’t give much thought to the twisting vines of civilization that entangle our skies and snake beneath our streets. The humming electrical lines on long poles that string our nations together are simply just there. Ever-present and immutable. We expect to flick the switch and power to come on. We only notice the electrical grid when something goes wrong and there is a seemingly myriad number of ways for things to go wrong. Lighting strikes, trees falling on lines, fires, or even too many people trying to crank on the A/C can all cause rolling blackouts. Or as we found out this month, cold weather can take down generation systems that have not been weatherized.

We often hear the electrical grid described as aging and strained. As we look to the future and at the ever-growing pressure on the infrastructure we take for granted, what does the future of the electrical grid look like? Can we move past blackouts and high voltage lines that criss-cross the country?

Continue reading “Increasing The Resolution Of The Electrical Grid” →

Paul Taylor Opened The Lines Of Telecommunication For The Hearing-Impaired

February 23, 2021 by Kristina Panos 23 Comments

These days, nearly everyone communicates through some kind of keyboard, whether they are texting, emailing, or posting on various internet discussion forums. Talking over the phone is almost outmoded at this point. But only a few decades ago, the telephone was king of real-time communication. It was and still is a great invention, but unfortunately the technology left the hearing and speaking-impaired communities on an island of silence.

Paul and an early TDD. Image via Rochester Institute of Technology

Engineer and professor Paul Taylor was born deaf in 1939, long before cochlear implants or the existence of laws that called for testing and early identification of hearing impairment in infants. At the age of three, his mother sent him by train to St. Louis to live at a boarding school called the Central Institute for the Deaf (CID).

Here, he was outfitted with a primitive hearing aid and learned to read lips, speak, and use American sign language. At the time, this was the standard plan for deaf and hearing-impaired children — to attend such a school for a decade or so and graduate with the social and academic tools they needed to succeed in public high schools and universities.

After college, Paul became an engineer and in his free time, a champion for the deaf community. He was a pioneer of Telecommunications Devices for the Deaf, better known as TDD or TTY equipment in the US. Later in life, he helped write legislation that became part of the 1990 Americans with Disabilities Act.

Paul was diagnosed with Alzheimer’s in 2017 and died in January of 2021 at the age of 81. He always believed that the more access a deaf person had to technology, the better their life would be, and spent much of his life trying to use technology to improve the deaf experience.

Continue reading “Paul Taylor Opened The Lines Of Telecommunication For The Hearing-Impaired” →