The End Of Arduino 101: Intel Leaves Maker Market

July 25, 2017 by Elliot Williams 81 Comments

This looks like the end of the road for Intel’s brief foray into the “maker market”. Reader [Chris] sent us in a tip that eventually leads to the discontinuation notice (PCN115582-00, PDF) for the Arduino 101 board. According to Intel forum post, Intel is looking for an alternative manufacturer. We’re not holding our breath.

We previously reported that Intel was discontinuing its Joule, Galileo, and Edison lines, leaving only the Arduino 101 with its Curie chip still standing. At the time, we speculated that the first wave of discontinuations were due to the chips being too fast, too power-hungry, and too expensive for hobbyists. Now that Intel is pulling the plug on the more manageable Arduino 101, the fat lady has sung: they’re giving up on hardware hackers entirely after just a two-year effort.

According to the notice, you’ve got until September 17 to stock up on Arduino 101s. Intel is freezing its Curie community, but will keep it online until 2020, and they’re not cancelling their GitHub account. Arduino software support, being free and open, will continue as long as someone’s willing to port to the platform.

Who will mourn the Arduino 101? Documentation was sub-par, but a tiny bit better than their other hacker efforts, and it wasn’t overpriced. We’re a little misty-eyed, but we’re not crying. You?

[via Golem.de]

HP Laptops Turn Up Keylogger Where You Wouldn’t Expect It

May 12, 2017 by Lewin Day 58 Comments

Keyloggers are nasty little things that have the potential to steal the credit card numbers of you and everyone you care about. Usernames and passwords can be easily stolen this way, so they’re a useful tool for the black hats out there. One would generally expect to find a keylogger in a dodgy movie torrent or perhaps a keygen for pirated software, but this week a keylogger was found in an audio driver for an HP laptop.

The logger was found by Swiss security researchers modzero. The Conexant HD Audio Driver Package version 1.0.0.46 and earlier apparently logs keystrokes in order to monitor things like the laptop’s volume up and down keys. The real killer here is that it feels the need to log all keystrokes detected to a readily accessible file, for reasons we can’t possibly fathom. It’s a huge security risk, but it doesn’t stop there – the driver also exposes the keystrokes through an API as well, creating an even wider attack surface for malicious actors. One can in principle access the keystroke log remotely.

There’s no word from the company yet, but we really want to know – why save the keystrokes to a file at all? Code left over from debugging, perhaps? Speculate in the comments.

The Dubious Claim Of A World Helium Shortage

July 11, 2016 by Elliot Williams 76 Comments

If you’ve been reading the news lately, you doubtless read about the find of a really big new helium gas field in Tanzania. It’s being touted as “life-saving” and “game-changing” in the popular media, but this is all spin. Helium is important for balloon animals, scientists, and MRI machines alike, but while it’s certainly true that helium prices have been rising steadily since 2000, this new field is unlikely to matter all that much in the grand scheme of things.

The foundation of every news story on helium is that we’re running out of the stuff. As with most doomsday scenarios, the end of the world’s supply of helium is overstated, and we don’t just mean in light of the new Tanzanian field. Helium is the second-most abundant element, making up 24% of the total mass of the universe. And while the earth has a disproportionate amount of heavier elements, helium is in rocks everywhere. It’s just a question of getting it out, and at what price that’s viable.

So while we’re stoked that the era of (relatively) cheap helium can continue onwards for a few more years, we’re still pretty certain that the price is going to continue to rise, and our children’s children won’t be using the stuff for something so frivolous as blowing up party balloons — it’ll be used primarily, as it is now, where it’s more valuable: in science, medicine, and industry.

Let’s take this moment to reflect on the economics of second-lightest element. Here’s to you, Helium!

Continue reading “The Dubious Claim Of A World Helium Shortage” →

Premier Farnell Sold To Swiss Firm

June 15, 2016 by Elliot Williams 34 Comments

According to this article in the Guardian, Premier Farnell, the electronics parts distributor who is also a UK manufacturer of the Raspberry Pi, is going to be sold to Dätwyler. Their share price immediately rose 50%, closing at just under the Swiss firm’s offer price.

Farnell itself had been on a binge, according to Wikipedia anyway, buying up electronics distributorships in Poland, India, and the US. In 2009, they bought Cadsoft, the makers of Eagle CAD software. Now they’re being sold to another distributor.

Bloomberg writes this up as being just more consolidation in an already consolidating market. What any of this will mean for the hacker on the street is anyone’s guess, but we’re putting our money on it amounting to nearly nothing. But still, now’s the time to stock up on your genuine UK-owned, made-in-UK Pis before they become Swiss-owned and made who knows where.

Bye-bye ATmega328P, Hello 328PB!

January 26, 2016 by Elliot Williams 114 Comments

We never have enough peripherals on a microcontroller. Whether it’s hardware-driven PWM channels, ADCs, or serial communication peripherals, we always end up wanting just one more of these but don’t really need so many of those. Atmel’s new version of the popular ATmega328 series, the ATmega328PB, seems to have heard our pleas.

We don’t have a chip in hand, but the datasheet tantalizes. Here’s a quick rundown of the new features:

Two more 16-bit timer/counters. This is a big deal when you’re writing code that’s not backed up by an operating system and relies on the hardware for jitter-free timing.
Two of each USART, SPI, and I2C serial instead of one of each. Good when you use I2C devices that have limited address spaces, or when you need to push the bits out really fast over SPI.
Ten PWM channels instead of six. This (along with the extra 16-bit timers) is good news for anyone who uses PWM — from driving servos to making music.
Onboard capacitive sensing hardware: Peripheral Touch Controller. This is entirely new to the ATmega328PB chip, and looks like it’ll be interesting for running capacitive sense buttons without additional ICs. It relies on Atmel’s QTouch software library, though, so it looks like it’s not a free-standing peripheral as much as an internal multiplexer with maybe some hardware-level filtering. We’ll have to look into this in detail when we get our hands on one of the chips.

So what does this mean for you? A quick search of the usual suspects shows the chips in stock and shipping right now, and there’s an inexpensive dev kit available as well. If you write your own code in C, taking advantage of the new features should be a snap. Arduino folks will have to wait until the chips (and code support) work their way into the ecosystem.

Thanks [Peter van der Walt] for the tip!

The $5 Raspberry Pi Zero

November 25, 2015 by Brian Benchoff 329 Comments

Rumors about a new Raspberry Pi have been circulating around the Internet for the past week or so. Speculation has ranged from an upgraded Model A or compute module to a monster board with Gigabit Ethernet, USB 3.0, SATA and a CPU that isn’t even in production yet. The time is now, and the real news is even more interesting: it’s a $5 Raspberry Pi Zero. It’s the smallest Pi yet, while still keeping the core experience.

Continue reading “The $5 Raspberry Pi Zero” →

A More Correct Horse Battery Staple

October 26, 2015 by Brian Benchoff 97 Comments

Passwords are terrible. The usual requirements of a number, capital letter, or punctuation mark force users to create unmemorable passwords, leading to post-it notes; the techniques that were supposed to make passwords more secure actually make us less secure, and yes, there is an xkcd for it.

[Randall Munroe] did offer us a solution: a Correct Horse Battery Staple. By memorizing a long phrase, a greater number of bits are more easily encoded in a user’s memory, making a password much harder to crack. ‘Correct Horse Battery Staple’ only provides a 44-bit password, though, and researchers at the University of Southern California have a better solution: prose and poetry. Just imagine what a man from Nantucket will do to a battery staple.

In their paper, the researchers set out to create random, memorable 60-bit passwords in an English word sequence. First, they created an xkcd password generator with a 2048-word dictionary to create passwords such as ‘photo bros nan plain’ and ’embarrass debating gaskell jennie’. This produced the results you would expect from a webcomic. The best ‘alternative’ result was found when creating poetry: passwords like “Sophisticated potentates / misrepresenting Emirates” and “The supervisor notified / the transportation nationwide” produced a 60-bit password that was at least as memorable as the xkcd method.

Image credit xkcd