The Piezoelectric Glitching Attack

Many readers will be familiar with the idea of a glitching attack, introducing electrical noise into a computer circuit in the hope of disrupting program flow and causing unexpected behaviour which might lead to hitherto unavailable access to memory or other system resources. [David Buchanan] has written a piece investigating glitching attacks on PC memory, and the tool he’s used is the ubiquitous piezoelectric lighter.

Attaching a short piece of wire to one of the lines on a SODIMM memory module, he can glitch a laptop at will with the lighter through the electromagnetic noise its discharge creates. It’s a cool trick, but the real meat of the write-up lies in his comprehensive description of how virtual memory works, and how a glitch can be used to break out of the “sandbox” of memory allocated to a particular process. He demonstrates it in a video which we’ve placed below the break, in which he gains root access and runs an arbitrary piece of code on a Linux laptop. It’s probable that not many of us have the inclination to do this for ourselves, but even so it’s fascinating to know how such an attack works.

Continue reading “The Piezoelectric Glitching Attack”

More Mirrors (and A Little Audio) Mean More Laser Power

Lasers are pretty much magic — it’s all done with mirrors. Not every laser, of course, but in the 1980s, the most common lasers in commercial applications were probably the helium-neon laser, which used a couple of mirrors on the end of a chamber filled with gas and a high-voltage discharge to produce a wonderful red-orange beam.

The trouble is, most of the optical power gets left in the tube, with only about 1% breaking free. Luckily, there are ways around this, as [Les Wright] demonstrates with this external passive cavity laser. The guts of the demo below come from [Les]’ earlier teardown of an 80s-era laser particle counter, a well-made instrument powered by a He-Ne laser that was still in fine fettle if a bit anemic in terms of optical power.

[Les] dives into the physics of the problem as well as the original patents from the particle counter manufacturer, which describe a “stabilized external passive cavity.” That’s a pretty fancy name for something remarkably simple: a third mirror mounted to a loudspeaker and placed in the output path of the He-Ne laser. When the speaker is driven by an audio frequency signal, the mirror moves in and out along the axis of the beam, creating a Doppler shift in the beam reflected back into the He-Ne laser and preventing it from interfering with the lasing in the active cavity. This forms a passive cavity that greatly increases the energy density of the beam compared to the bare He-Ne’s output.

The effect of the passive cavity is plain to see in the video. With the oscillator on, the beam in the passive cavity visibly brightens, and can be easily undone with just the slightest change to the optical path. We’d never have guessed something so simple could make such a difference, but there it is.

Continue reading “More Mirrors (and A Little Audio) Mean More Laser Power”

Piezo Transducers Could Turn Displays Into Speakers

Will piezoelectric-based speakers replace traditional speakers over the coming years in space-constrained devices? We have definitely seen the use of piezo transducers in e.g. high-end televisions that use the display’s surface not just for the visual content, but also as a highly dynamic speaker. If you extrapolate this principle to something like smartphones, tablets and laptops the advantages are clear: piezoelectric transducers are smaller, more power efficient and do not need any holes in the enclosure. These and other advantages are what [Vineet Ganju] argues in IEEE Spectrum will push the market to adopt this new technology.

When piezoelectric transducers vibrate the display itself to create sound waves, the sound seems to come directly from the image on the screen, a much more realistic effect. (Credit: James Provost)
Piezoelectric transducers vibrate the display itself to create sound waves. (Credit: James Provost)

[Vineet] is the Vice President and General Manager of the audio business unit of Synaptics — which is one of the companies pushing for these piezoelectric transducers to be used for speaker purposes — so there is definitely some bias involved. Even so, it’s undeniable that the speakers in portable devices as well as the average flat panel TV aren’t exactly amazing, with the limited space meaning that audio quality suffers, with lows being generally absent and the resulting audio sounding ‘tinny’. Generally this is where people get external speakers for their TV, and lug portable speakers along with their laptop and other mobile devices.

For TVs, Sony has pushed for its Acoustic Surface Audio technology that uses two or three piezoelectric transducers on their OLED panels, while Samsung sticks to traditional speakers, but places lots of them around the screen with its Object Tracking Sound technology.

Sony’s technology cannot be used with LCD panels, due to the backlight being in the way, so the interesting question here is whether the piezoelectric speaker revolution proposed by [Vineet] will be limited to devices that use OLED or similar backlight-less displays?

Lo-Fi Fun: Beer Can Microphones

Sometimes, you just need an easy win, right? This is one of those projects. A couple months back, I was looking at my guitars and guitar accessories and thought, it is finally time to do something with the neck I’ve had lying around for years. In trying to decide a suitable body for the slapdash guitar I was about to build, I found myself at a tractor supply store for LEGO-related reasons. (Where else are you going to get a bunch of egg cartons without eating a bunch of eggs?) I  noticed that they happened to also stock ammo boxes. Bam! It’s sturdy, it opens easily, and it’s (very) roughly guitar body shaped. I happily picked one up and started scheming on the way home.

Having never built a cigar box guitar before and being of a certain vintage, I’m inclined to turn to books instead of the Internet, so I stocked up from the library. Among my early choices was Making Poor Man’s Guitars by Shane Speal, who is widely considered to be the guru on the subject. In flipping through the book, I noticed the beer can microphone project and was immediately taken by the aesthetic of some cool old 70s beer can with a 1/4″ instrument jack on the bottom, just asking for some dirty blues to be belted into it. I had to build one. Or twelve.

Continue reading “Lo-Fi Fun: Beer Can Microphones”

BBQ lighter fault injector

Blast Chips With This BBQ Lighter Fault Injection Tool

Looking to get into fault injection for your reverse engineering projects, but don’t have the cash to lay out for the necessary hardware? Fear not, for the tools to glitch a chip may be as close as the nearest barbecue grill.

If you don’t know what chip glitching is, perhaps a primer is in order. Glitching, more formally known as electromagnetic fault injection (EMFI), or simply fault injection, is a technique that uses a pulse of electromagnetic energy to induce a fault in a running microcontroller or microprocessor. If the pulse occurs at just the right time, it may force the processor to skip an instruction, leaving the system in a potentially exploitable state.

EMFI tools are commercially available — we even recently featured a kit to build your own — but [rqu]’s homebrew version is decidedly simpler and cheaper than just about anything else. It consists of a piezoelectric gas grill igniter, a little bit of enameled magnet wire, and half of a small toroidal ferrite core. The core fragment gets a few turns of wire, which then gets soldered to the terminals on the igniter. Pressing the button generates a high-voltage pulse, which gets turned into an electromagnetic pulse by the coil. There’s a video of the tool in use in the Twitter thread, showing it easily glitching a PIC running a simple loop program.

To be sure, a tool as simple as this won’t do the trick in every situation, but it’s a cheap way to start exploring the potential of fault injection.

Thanks to [Jonas] for the tip.

An acousto-optic tunable filter and laser

Acousto-Optic Filter Uses Sound To Bend Light

We all know that light and sound are wave phenomena, but of very different kinds. Light is electromechanical in nature, while sound is mechanical. Light can travel through a vacuum, while sound needs some sort of medium to transmit it. So it would seem that it might be difficult to use sound to modify light, but with the right equipment, it’s actually pretty easy.

Easy, perhaps, if you’re used to slinging lasers around and terms like “acousto-optic tunable filter” fall trippingly from your tongue, as is the case for [Les Wright]. An AOTF is a device that takes a radio frequency input and applies it to a piezoelectric transducer that’s bonded to a crystal of tellurium oxide. The RF signal excites the transducer, which vibrates the TeO2 crystal and sets up a standing wave within it. The alternating bands of compressed and expanded material within the crystal act like a diffraction grating. Change the excitation frequency, and the filter’s frequency changes too.

To explore the way sound can bend light, [Les] picked up a commercial AOTF from the surplus market. Sadly, it didn’t come with the RF driver, but no matter — a few quick eBay purchases put the needed RF generator and power amplifier on his bench. The modules went into an enclosure to make the driver more of an instrument and less of a one-off, with a nice multi-turn pot and vernier knob for precise filter adjustment. It’s really kind of cool to watch the output beam change colors at the twist of a knob, and cooler still to realize how it all works.

We’ve been seeing a lot of [Les]’ optics projects lately, from homemade TEA lasers to blasting the Bayer filter off a digital camera, each as impressive as the last! Continue reading “Acousto-Optic Filter Uses Sound To Bend Light”