Modified E-ZPass Detects Reads Far From Toll Booths

September 16, 2013 by Adam Fabio 54 Comments

Def Con speaker [pukingmonkey] has spent quite a bit of time studying methods government and law enforcement use to track private citizens’ vehicles on the roads. One of the major tracking methods is E-ZPass, an electronic toll collection system used in several states around the country. [pukingmonkey] cracked open his E-ZPass tag to find a relatively basic circuit. In his DEF CON presentation (PDF), he notes you shouldn’t do this to your own tag, as tags are legally not the property of the user.

The tag uses a 3.6 volt long life battery to operate. When idle, the tag only draws 8 microamps. During reads, current draw jumps to 0.3 mA. Armed with this information, it was relatively simple to add a current detecting circuit that outputs a pulse on tag reads. Pulses are then fed into a toy cow, which lights up and “Moos” on each read.

Continue reading “Modified E-ZPass Detects Reads Far From Toll Booths” →

DIY Electricity And Internet For Burning Man

September 12, 2013 by Marsh 19 Comments

bmPowerInet

Despite this being [Kenneth Finnegan’s] first Burning Man, the guy came prepared and stayed connected by setting up a beefy electricity supply and a faint yet functional internet connection. If you saw [Kenneth’s] Burning Man slideshow, you know that the desert is but a mild deterrent against power, water, and even temporary runways.

He borrowed a 20V 100W solar panel from Cal Poly and picked up a bargain-price TSMT-20A solar charge controller off eBay. The controller babysits the batteries by preventing both overcharging and over-discharging. The batteries—two Trojan-105 220Ah 6V behemoths—came limping out of a scissor lift on their last legs of life: a high internal resistance ruled out large current draws. Fortunately, the power demands were low, as the majority of devices were 12VDC or USB. [Kenneth] also had conveniently built this USB power strip earlier in the year, which he brought along to step down to 5VDC for USB charging.

Internet in the desert, however, was less reliable. A small team provides a microwave link from civilization every summer, which is shared via open access points in 3 different camps. [Kenneth] pointed his Ubiquiti NanoStation at the nearest one, which provided a host of inconvenient quirks and top speeds of 2-20kBps: enough, at least, to check emails.

Bluetooth Low Energy Weather Lamp

August 30, 2013 by Mike Szczys 6 Comments

bluetooth_low_energy_ble_weather_lamp

This is a well-executed proof of concept which [Aaron Jeromin] threw together in a couple of hours. This lamp hosts a Bluetooth Low Energy weather display. The project was a way for him to get used to using the BLE module. But to make the most out of that hardware this should really be refined into an actual low energy circuit. We do think the timing is perfect to feature this project since we just looked at a BLE primer yesterday.

He’s using a BLE Mini board from RedBearLab. It uses a Texas Instruments CC2540 SoC. We’d love to see a follow-up that does away with the Arduino in lieu of code running on the TI chip. But we would have done the same thing (use the uC we were most familiar with) when testing the BLE board out for the first time. It gets weather data from an iPhone. The forecast is projected as one of three icons using an LED bulb and a stencil which is positioned by a hobby servo.

Other inanimate objects that can tell you if it’s storming include this color-coded umbrella stand.

Continue reading “Bluetooth Low Energy Weather Lamp” →

Primer On Bluetooth Low Energy

August 29, 2013 by Mike Szczys 14 Comments

We’re sure that, like us, you’ve heard at least something about Bluetooth Low Energy (BLE). Blutooth 4.0 is another name for BLE and it’s already available in some smartphones; starting with the iPhone 4S, BlackBerry 10, and with Android support added in 4.3 — Jelly Bean. Here’s your chance to get acquainted which what the specification brings to the table. The source material (which we’ll talk about below) provides a ton of background. But if you want a succinct overview check out [Gervasi’s] summary of Bluetooth Low Energy.

We won’t republish the technical details here as both articles do a great job of covering those. Here’s what you should take away from BLE: It’s meant for use with devices running off of a tiny power source. The one outlined in both articles is a coin-cell. But we prefer to think of the future that is energy harvesting. Peak current is limited to 15 mA. This does limit the throughput, but think sensors, not Bluetooth headsets. You just don’t need to push all that much data from these devices. A cleverly designed energy harvesting circuit should be able to implement BLE devices with no battery whatsoever.

We did mention a deeper exploration of the standard. The image above comes from this BLE Primer for Developers. Add it to your weekend reading.

[via Reddit]

Spoofing WiFi AP Based Geolocation

August 27, 2013 by Mike Szczys 39 Comments

[Pierre Dandumont] just finished up a little project that will give Google Maps’ location feature a run for its money. It’s a technique that spoofs WiFi networks in order to relocate the positional data reported via WiFi networks.

He starts with an explanation of the different ways modern devices acquire location data. GPS is the obvious, and mobile network triangulation is pretty well know. But using WiFi networks may be a new trick for you. We’re not 100% certain but we think Google is able to look up location data based on known IP addresses for WiFi access points (this would be a good comments discussion). To trick the system all you have to do is feed some captured AP data into the computer before Google Maps tried to lock onto a location. The video after the break shows Maps with the legit location displayed. After running a quick script whose output is shown above the map position is changed to the spoofed location.

Continue reading “Spoofing WiFi AP Based Geolocation” →

Wireless Marble Labyrinth Uses TI Dev Hardware

August 11, 2013 by Mike Szczys 3 Comments

wireless-marble-labrinth-using-ti-dev-hardware

There’s so much affordable dev hardware out there these days that you can do a lot without even touching a soldering iron. This is a prime example. Texas Instruments software Engineer [Jordan Wills] recently completed this wirelessly controlled marble labyrinth.

Marble mazes like this are a popular targets for electronic tinkering. We’ve seen smartphones used as the controller, and others that dispense chocolate candy. This time around [Jordan] stuck with the store-bought game to simplify the build. A coworker helped by swapping the two control knobs with servo motors. These interface with a Stellaris Launchpad that has a SensorHub booster pack (shield) and CC2533 radio transceiver module. The same hardware makes up the remote unit as well. This turns the remote into an air mouse by reading the gyroscope, accelerometer, and magnetometer from the booster pack.

He doesn’t specifically mention it in his project log, but we think the magnetometer is used to sync orientation between the base unit and the user remote. Even though the board for the base unit is mounted at 90 degrees compared to how you hold the remote, you should still be able to adjust for the readings in code, right?

Continue reading “Wireless Marble Labyrinth Uses TI Dev Hardware” →

Electric Imp As An Internet To RF Gateway

July 25, 2013 by Mike Szczys 7 Comments

a-little-automation-with-the-electric-imp

This project is a study in connecting several different families of hobby electronic hardware. The image above shows the Electric Imp side of things. It bridges its Internet connection with the RF connections of the rest of the project.

The Imp is a peculiar (intriguing?) piece of hardware. Take a look at [Brian Benchoff’s] hand’s on experience with the SD form factor hardware which is not an SD card at all. It’s an embedded system which uses light programming and a cloud-based software setup to bring wireless Internet to your projects.

In this case [Stanley Seow] started wondering if he needed multiple Imps to connect different parts of his setup. A bit of head scratching led him to the use of nRF24L01 modules which are cheap and easy to use Radio Frequency transceiver boards. He took a partially finished driver project and brought it home to play nicely with the Imp. Now he can use the system to communicate with other components which will eventually be used for home automation. Right now his proof of concept issues wireless commands to an Arduino driving a strip of LEDs.