Tiny ESP32 Fits Inside USB-A Connector

The ESP32 was introduced a few years ago as an inexpensive way to outfit various microcontrollers with WiFi or Bluetooth. Since then it has been experimented with and developed on, thanks to its similarities to the ESP8266 and the ability to easily program it. Watching the development of this small chip has truly been fascinating as it continues to grow. Or, in this case, shrink.

The latest development in the ESP32 world comes from [femtoduino] who, as the name suggests, makes very small things. This one is a complete ESP32 which fits inside a USB-A connector. The brains of the projects is the ESP32-D2WD which is a dual core chip with 2 Mb of memory, making it more than capable. In fact, a big part of this project was [femtoduino]’s modifications to MicroPython in order to allow it to run on this chipset. For that alone, it’s cool.

This project is impressive for both reasons, both the size and the addition to the MicroPython libraries. If you need something really really tiny, for whatever reason, you might want to look into picking up one of these. Be careful though, and be sure to get the latest version of the SDK.

100 Year Old Atomic Clock

Precision time is ubiquitous today thanks to GPS and WWVB. Even your Macbook or smartphone displays time which is synchronized to the NIST-F1 clock, a cesium fountain atomic clock (aka the ‘Atomic Clock’) that is part of a global consortium of atomic clocks known as Coordinated Universal Time (UTC). Without precise timing there would be train collisions, markets would tumble, schools would not start on time, and planes would fall out of the sky.

But how was precision timing achieved in the 19th century during the era of steam, brass, and solenoids? One of the first systems of precision timing kept trains running safely and on time, rang the bells at school, and kept markets trading by using a special clock designed by the Self Winding Clock Company. Through measurements of celestial objects by the US Naval Observatory, and time synchronization pulses broadcast by the Western Union telegraph network, this system synchronized time across the United States in an era where the speed of our train system was out-pacing by the precision of our clocks.

Those clocks were designed so well that many of them are still around and functioning. One of these 100-year-old self-winding clocks made its way onto my workbench. I did what any curious hacker would do, figured out how the synchronization worked and connected it to a clock source with atomic precision. Let’s take a look!

Continue reading “100 Year Old Atomic Clock” →

Ask Hackaday: What Good Is A Robot Dog?

It is said that Benjamin Franklin, while watching the first manned flight of a hot air balloon by the Montgolfier brothers in Paris in 1783, responded when questioned as to the practical value of such a thing, “Of what practical use is a new-born baby?” Dr. Franklin certainly had a knack for getting to the heart of an issue.

Much the same can be said for Spot, the extremely videogenic dog-like robot that Boston Dynamics has been teasing for years. It appears that the wait for a production version of the robot is at least partially over, and that Spot (once known as Spot Mini) will soon be available for purchase by “select partners” who “have a compelling use case or a development team that [Boston Dynamics] believe can do something really interesting with the robot,” according to VP of business development Michael Perry.

The qualification of potential purchasers will certainly limit the pool of early adopters, as will the price tag, which is said to be as much as a new car – and a nice one. So it’s not likely that one will show up in a YouTube teardown video soon, so until the day that Dave Jones manages to find one in his magic Australian dumpster, we’ll have to entertain ourselves by trying to answer a simple question: Of what practical use is a robotic dog?

Continue reading “Ask Hackaday: What Good Is A Robot Dog?” →

Is A Cheap Inverter Welder Worth It?

We’ve all seen cheap welders for sale from the usual online sources, small inverter stick welders for a very tempting price. But are they any good? When my local supermarket had one in its offers aisle, I took the plunge and placed it in my cart alongside the usual week’s supply of Marmite. That was some time around the start of the year.

Does Your Supermarket Sell Welders?

My Workzone welder from the supermarket.
My Workzone welder from the supermarket.

What I’d bought from my local Aldi was a Workzone WWIW-80, an 80 A unit that had cost me somewhere just over £60 (about $75), and came with welding leads and a rather poor quality face shield. The German discount supermarket chains specialise in periodic offers on all kinds of interesting things, so a very similar unit has also been for sale with a Parkside brand from their competitor Lidl. These small inverter welders are fairly generic, so they can be found with a variety of brands and specifications at a lower price online if you don’t mind forgoing the generous Aldi 3 year guarantee. The cheapest I’ve seen was about £35, or $44, but that price included only the inverter, without welding leads.

As a working blacksmith my dad has had a high-quality inverter welder since the 1990s, so my frame of reference is based upon that. He tried one of the first tiny inverters when they originally came to market in the last decade, but it couldn’t take the demands of a professional welder and packed up. I thus didn’t have high expectations of this unit, but I needed one of my own and for the price it was worth the punt. I’ve used it for occasional general purpose heavy welding tasks, repairing bits of farm machinery and fittings, and rebuilding some steps on a narrowboat in 7 mm plate. It’s acquitted itself well in those tasks, in that I am not a skilled welder and my work isn’t the tidiest, but it’s allowed me to do a satisfactory job.

Continue reading “Is A Cheap Inverter Welder Worth It?” →

FIDO2: The Dream Of Password-Free Authentication On The WWW

Of all the things which are annoying about the modern World Wide Web, the need to create and remember countless passwords is on the top of most people’s lists. From dozens of passwords for everything from social media sites to shopping, company, and productivity-related platforms like Github, a large part of our day is spent dealing with passwords.

While one can totally use a password manager to streamline the process, this does not absolve you from having to maintain this list and ensure you never lose access to it, while simultaneously making sure credentials for the password manager are never compromised. The promise of password-less methods of authentication is that of a world where one’s identity is proven without hassle, and cannot ever be stolen, because it relies on biometrics and hardware tokens instead of an easily copied password.

The FIDO2 project promises Web Authentication that means never entering a password into a website again. But like everything, it comes with some strings attached. In this article, we’ll take a look at how FIDO2 plans to work and how that contrasts with the state of security in general.

Continue reading “FIDO2: The Dream Of Password-Free Authentication On The WWW” →

This Week In Security: Zeroconf Strikes Again, Lastpass Leaks Your Last Password, And All Your Data Is Belong To Us

VoIP cameras, DVRs, and other devices running the Web Services Dynamic Discovery (WSDD) protocol are being used in a new type of DDoS attack. This isn’t the first time a zeroconf service has been hijacked as part of a DDoS, as UPnP has also been abused in similar ways.

Feel like alphabet soup yet? A Denial of Service attack is one where the target is simply made unavailable, rather than actually compromised. The classic example of this is the SYN flood, where an attacker would open hundreds of connections to a web server at once, exhausting the server’s resources and interrupting legitimate use of that server. As mitigations for these attacks were developed (SYN Cookies, for example), DoS attacks were replaced by Distributed Denial of Service (DDOS) attacks. Rather than attack a weakness on the target machine, like available RAM or CPU cycles, a DDoS generally targets available network bandwidth by hitting the target website from many, many locations at once. No clever software tricks can help when your Internet connection is fully saturated with junk traffic. Continue reading “This Week In Security: Zeroconf Strikes Again, Lastpass Leaks Your Last Password, And All Your Data Is Belong To Us” →

Badge builder's meetup at DC27

Pictorial Guide To The Unofficial Electronic Badges Of DEF CON 27

DEF CON has become the de facto showplace of the #Badgelife movement. It’s a pageant for clever tricks that transform traditional green rectangular circuit boards into something beautiful, unique, and often times hacky.

Today I’ve gathered up about three dozen badge designs seen at DC27. It’s a hint of what you’ll see in the hallways and meetups of the conference. From hot-glue light pipes and smartphone terminal debugging consoles to block printing effects and time of flight sensors, this is a great place to get inspiration if you’re thinking of trying your hand at unofficial badge design.

If you didn’t catch “The Badgies” you’ll want to go back and read that article too as it rounds up the designs I found to be the craziest and most interesting including the Car Hacking Village, Space Force, SecKC, DC503, and Frankenbadge. Do swing by the Hands-On articles for the AND!XOR badge and for [Joe Grand’s] official DC27 badge. There was also a lot of non-badge hardware on display during Hackaday’s Breakfast at DEF CON so check out that article as well.

Enough preamble, let’s get to the badges!

Continue reading “Pictorial Guide To The Unofficial Electronic Badges Of DEF CON 27” →