Hackaday Links Column Banner

Hackaday Links: August 9, 2026

Bad news for anyone who was hoping for some relief from the memory shortage — Digitimes is reporting that the production capacity of major players such as Samsung, Micron, and SK Hynix has already been booked for 2027 due to record demand. Their industry sources indicate that what we’re experiencing currently is just a prelude to when things get really ugly, which is why customers are paying a premium to lock in their orders so far out.

Although there’s been no official word from either side of the transaction, the Digitimes article further points out that these sort of agreements are usually 3 to 5 year contracts. If that’s the case, and nothing changes in supply and demand equation, we could be in for a very rough ride. There’s a potential opportunity here for other manufacturers to step in and start producing DRAM, possibly even focusing on lower-performance offerings intended for the consumer market, but setting up those production lines isn’t going to happen overnight. It’s always possible the AI bubble could pop in the next couple of years, but we’re not sure we’d put money on it.

There’s a developing story this weekend about the breach of customer data over at Framework. The maker of modular and repairable computers has recently sent an email out to all customers that their names, email addresses, phone numbers, and physical addresses were leaked due to an upstream zero-day attack against database provider Metabase.

Metabase disclosed the breach on August 3rd, but we were mildly surprised to see that Framework doesn’t seem to have made any public acknowledgement of the event so far. As far as we can tell, the only reason there are copies of the email from them circulating online is because several customers posted it to social media. In their statements to sources such as TechCrunch, Framework reps were also hesitant to give hard details such as how many customers were impacted. While we’re fans of what Framework is trying to do in terms of hardware customization and repairability, we have to admit that being cagey about this sort of thing isn’t a good look.

Continue reading “Hackaday Links: August 9, 2026”

Inside Two-Factor Authentication Apps

Passwords are in a pretty broken state of implementation for authentication. People pick horrible passwords and use the same password all over the place, firms fail to store them correctly and then their databases get leaked, and if anyone’s looking over your shoulder as you type it in (literally or metaphorically), you’re hosed. We’re told that two-factor authentication (2FA) is here to the rescue.

Well maybe. 2FA that actually implements a second factor is fantastic, but Google Authenticator, Facebook Code Generator, and any of the other app-based “second factors” are really just a second password. And worse, that second password cannot be stored hashed in the server’s database, which means that when the database is eventually compromised, your “second factor” blows away with the breeze.

Second factor apps can improve your overall security if you’re already following good password practices. We’ll demonstrate why and how below, but the punchline is that the most popular 2FA app implementations protect you against eavesdropping by creating a different, unpredictable, but verifiable, password every 30 seconds. This means that if someone overhears your login right now, they wouldn’t be able to use the same login info later on. What 2FA apps don’t protect you against, however, are database leaks.

Continue reading “Inside Two-Factor Authentication Apps”

Every Tornado Siren In Dallas Hacked

Someone had some fun with the Dallas early warning tornado siren system on Friday, April 8th. All 156 tornado sirens were hacked to go off just before midnight until they were manually turned off individually, reports The Washington Post. Thousands of residents flooded 911 call centers asking if they were under attack, if there was a tornado or if the zombie apocalypse had begun. The sirens were blaring for at least an hour and was originally put down as a malfunction, however it was later revealed that it was a hack and the “hacker” must have had physical access to the siren control center.

This isn’t the first time Dallas has had problems with “hackers” breaking into their infrastructure, Only last year some unknown person/persons hacked electronic road signs (a prank we’ve seen before) in and around Dallas claiming “Work is Canceled — Go Back Home” and “Donald Trump Is A Shape-shifting Lizard!!”. Mayor Mike Rawlings claims the perpetrators will be found and prosecuted although we don’t share his confidence since last year’s attackers are still at large.

The video below is one of many on YouTube filmed by bemused Dallas residents.

UPDATE: This hack seems to have been accomplished via DTMF signals broadcast on radio frequency in the clear. Recognizing the vulnerability after the fact, the system is now using some form of encryption for the control messages. Thanks [Dan J.] for posting this in the comments below.

Continue reading “Every Tornado Siren In Dallas Hacked”