Cracking A Bluetooth Credit Card

You might be surprised to find out that it’s actually not a good idea to put all of your credit card information on a little Bluetooth enabled device in your pocket. Oh, what’s that? You knew already? Well in that case you won’t find the following information terribly shocking, but it’s still a fascinating look at how security researchers systematically break down a device in an effort to find the chinks in its armor.

[Mike Ryan] of ICE9 Consulting has recently published an article detailing the work done to examine and ultimately defeat the security on the FUZE Card. From using an x-ray machine to do non-destructive reconnaissance on the device’s internals to methodically discovering all the commands it responds to over Bluetooth, it’s safe to say the FUZE Card is cracked wide open at this point.

To be clear, the attacker must still pair with FUZE, so physical access is required. But as pointed out by [Mike] in the blog post, handing your card over to a merchant is standard operating procedure in many cases. It isn’t as if it would be hard to get a hold of one of these FUZE cards for a minute or two without the owner becoming suspicious. Pairing FUZE to the Linux device to continue to the next step of the attack only takes a few seconds, as demonstrated in the video after the break.

Once paired, the attacker can simply send a BLE command to FUZE which disables the lock screen. It’s really that simple. The attacker can also send commands to dump credit card info over Bluetooth, meaning they could download your information even when the card is “safely” back in your pocket. The inherent failure in the FUZE design is that you don’t need to provide any sort of authentication to pair it to a new Bluetooth device. It makes the (very dangerous) assumption that the person holding it is entitled to do so.

Even if you know better than to ever buy a device like this, the post [Mike] has written up is really a must-read for anyone who’s ever looked at a device and tried to figure out what was going on in its little silicon brain. We especially liked his assertion that reverse engineering a device essentially boils down to: “staring, thinking, a little experimentation, but mostly staring and thinking.” We’re having an internal debate here at Hackaday HQ about making that the site’s tagline.

Incidentally, this is very similar to the Bluetooth gun “safe” that was cracked not so long ago. At this point, it might be wise to just stay away from anything with that little blue logo on it if you intend to trust it with your identity and/or deadly weapon.

Continue reading “Cracking A Bluetooth Credit Card”

Monitor Foot Traffic Using Radio

We talk a lot about information security around here, but in reality it’s not at the forefront of everyone’s minds. Most people are content to walk around with their phones constantly looking for WiFi or Bluetooth connections despite the dangers. But if you’re not a black hat sort of person, you can do something like [Verkehrsrot] did and use all of these phones to do something useful and harmless.

[Verkehrsrot]’s project involves building a radio listening device in order to get an estimate of the amount of traffic in a particular area. The device polls for and detects WiFi and Bluetooth devices nearby and tallies them. For the privacy-minded, it doesn’t persistently store any information about the people or the devices that it detects. The project also runs on a variety of platforms, although you can get the whole thing up and running with little more than an ESP32 and a small lithium-ion battery.

If you’re looking for a useful way to tally the number of people in a given area, this project could be the thing for you. Not everyone keeps their WiFi and Bluetooth turned on, but even so this is still a good way to estimate. But if you need to count everyone going into a room, for example, you’ll need another way to count them.

It Looks Like A Nintendo, But It’s Running A Pi: A Gamer’s Long-Sought Dream Handheld

[Christopher Foote] didn’t play quite as many games as he wanted to as a child. After years of catching up using the RetroPie and the PiGRRL 2, it was when he first picked up a Switch’s joy-cons that inspiration struck. Behold: the PiSwitch!

Realizing they operated on Bluetooth tech, [Foote] spent a fair chunk of time getting the joy-cons to properly pair to the Raspberry Pi 3 and function as one controller. Once done, he relied on Linux Joystick Mapper to manage the keybindings with some extra legwork besides to get the analog sticks working properly.

To make this console mobile, he’s packed a 6600mAh battery and Adafruit Powerboost 1000c into the device, added a second headphone jack and speaker for commuting and home enjoyment, and a Pi V2 camera module. A 3D printed case, encapsulating these components and a seven-inch touchscreen, also allows the joy-cons to be detached — though he plans on updating its design in the future.

The PiSwitch boots into a custom UI  that lets you select different services — RetroPie, Kodi, Debian, and the terminal — while the joy-cons seamlessly function together or individually regardless of the activity. Check out the quick intro tour for this project after the break!

Continue reading “It Looks Like A Nintendo, But It’s Running A Pi: A Gamer’s Long-Sought Dream Handheld”

A Well-Chronicled Adventure In Tiny Robotics

Some of us get into robotics dreaming of big heavy metal, some of us go in the opposite direction to build tiny robots scurrying around our tabletops. Our Hackaday.io community has no shortage of robots both big and small, each an expression of its maker’s ideals. For 2018 Hackaday Prize, [Bill Weiler] entered his vision in the form of Project Johnson Tiny Robot.

[Bill] is well aware of the challenges presented by working at a scale this small. (If he wasn’t before, he certainly is now…) Forging ahead with his ideas on how to build a tiny robot, and it’ll be interesting to see how they pan out. Though no matter the results, he has already earned our praise for setting aside the time to document his progress in detail and share his experience with the community. We can all follow along with his discoveries, disappointments, and triumphs. Learning about durometer scale in the context of rubber-band tires. Exploring features and limitations of Bluetooth hardware and writing code for said hardware. Debugging problems in the circuit board. And of course the best part – seeing prototypes assembled and running around!

As of this writing, [Bill] had just completed assembly of his V2 prototype which highlighted some issues for further development. Given his trend of documenting and sharing, soon we’ll be able to read about diagnosing the problems and how they’ll be addressed. It’s great to have a thoroughly documented project and we warmly welcome his robot to the ranks of cool tiny robots of Hackaday.io.

HairIO: An Interactive Extension Of The Self

Most of what we see on the wearable tech front is built around traditional textiles, like adding turn signals to a jacket for safer bike riding, or wiring up a scarf with RGB LEDs and a color sensor to make it match any outfit. Although we’ve seen the odd light-up hair accessory here and there, we’ve never seen anything quite like these Bluetooth-enabled, shape-shifting, touch-sensing hair extensions created by UC Berkeley students [Sarah], [Molly], and [Christine].

HairIO is based on the idea that hair is an important part of self-expression, and that it can be a natural platform for sandboxing wearable interactivity. Each hair extension is braided up with nitinol wire, which holds one shape at room temperature and changes to a different shape when heated. The idea is that you could walk around with a straight braid that curls up when you get a text, or lifts up to guide the way when a friend sends directions. You could even use the braid to wrap up your hair in a bun for work, and then literally let it down at 5:00 by sending a signal to straighten out the braid. There’s a slick video after the break that demonstrates the possibilities.

HairIO is controlled with an Arduino Nano and a custom PCB that combines the Nano, a Bluetooth module, and BJTs that drive the braid. Each braid circuit also has a thermistor to keep the heat under control. The team also adapted the swept-frequency capacitive sensing of Disney’s Touché project to make HairIO extensions respond to complex touches. Our favorite part has to be that they chalked some of the artificial tresses with thermochromic pigment powder so they change color with heat. Makes us wish we still had our Hypercolor t-shirt.

Nitinol wire is nifty stuff. You can use it to retract the landing gear on an RC plane, or make a marker dance to Duke Nukem.

Continue reading “HairIO: An Interactive Extension Of The Self”

Interactive Plant Lamps For Quiet Spaces

If you’ve spent any serious time in libraries, you’ve probably noticed that they attract people who want or need to be alone without being isolated. In this space, a kind of silent community is formed. This phenomenon was the inspiration [MoonAnchor23] needed to build a network of connected house plants for a course on physical interaction and realization. But you won’t find these plants unleashing their dry wit on twitter. They only talk to each other and to nearby humans.

No living plants were harmed during this project—the leaves likely wouldn’t let much light through, anyway. The plants are each equipped with a strip of addressable RGB LEDs and a flex sensor controlled by an Arduino Uno. Both are hot glued to the undersides of the leaves and hidden with green tape. By default, the plants are set to give ambient light. But if someone strokes the leaf with the flex sensor, it sends a secret message to the other plant that induces light patterns.

Right now, the plants communicate over Bluetooth using an OpenFrameworks server on a local PC. Eventually, the plan is use a master-slave configuration so the plants can be farther apart. Stroke that mouse button to see a brief demo video after the break. [MoonAnchor23] also built LED mushroom clusters out of silicone and cling wrap using a structural soldering method by [DIY Perks] that’s also after the break. These work similarly but use force-sensing resistors instead of flex-sensing.

Networking several plants together could get expensive pretty quickly, but DIY flex sensors would help keep the BOM costs down. Continue reading “Interactive Plant Lamps For Quiet Spaces”