StarLink Terminal Unit Firmware Dumped

There’s a lot of expense in what telephone companies call “the last mile” — delivering service from the main trunks to your home or business. StarLink wants to avoid that cost by connecting you via an array of low-orbit satellites and some users are already using the service. In Belgium, [Lennert Wouters] managed to dump the terminal’s firmware and has some interesting observations.

The teardown is actually more than just a firmware dump. His “level 1” teardown involves exposing the board. This can be tricky because there are apparently different versions of the terminal out already, so advice from one source might not match your hardware, and that was the case here.

Continue reading “StarLink Terminal Unit Firmware Dumped”

Hackaday Links Column Banner

Hackaday Links: July 4, 2021

With rescue and recovery efforts at the horrific condo collapse in Florida this week still underway, we noted with interest some of the technology being employed on the site. Chief among these was a contribution of the Israeli Defense Force (IDF), whose secretive Unit 9900 unveiled a 3D imaging system to help locate victims trapped in the rubble. The pictures look very much like the 3D “extrusions” that show up on Google Maps when you zoom into a satellite view and change the angle, but they were obviously built up from very recent aerial or satellite photos that show the damage to the building. The idea is to map where parts of the building — and unfortunately, the building’s occupants — ended up in the rubble pile, allowing responders to concentrate their efforts on the areas most likely to hold victims. The technology, which was developed for precision targeting of military targets, has apparently already located several voids in the debris that weren’t obvious to rescue teams. Here’s hoping that the system pays off, and that we get to learn a little about how it works.

Radio enthusiasts, take note: your hobby may just run you afoul of authorities if you’re not careful. That seems to be the case for one Stanislav Stetsenko, a resident of Crimea who was arrested on suspicion of treason this week. Video of the arrest was posted which shows the equipment Stetsenko allegedly used to track Russian military aircraft on behalf of Ukraine: several SDR dongles, a very dusty laptop running Airspy SDR#, an ICOM IC-R6 portable communications receiver, and various maps and charts. In short, it pretty much looks like what I can see on my own desk right now. We know little of the politics around this, but it does give one pause to consider how non-technical people view those with technical hobbies.

If you could choose a superpower to suddenly have, it really would take some careful consideration. Sure, it would be handy to shoot spider webs or burst into flames, but the whole idea of some kind of goo shooting out of your wrists seems gross, and what a nuisance to have to keep buying new clothes after every burn. Maybe just teaching yourself a new sense, like echolocation, would be a better place to start. And as it turns out, it’s not only possible for humans to echolocate, but it’s actually not that hard to learn. Researchers used a group of blind and sighted people for the test, ranging in age from 21 to 79 years, and put them through a 10-week training program to learn click-based echolocation. After getting the basics of making the clicks and listening for the returns in an anechoic chamber, participants ran through a series of tasks, like size and orientation discrimination of objects, and virtual navigation. The newly minted echolocators were also allowed out into the real world to test their skills. Three months after the study, the blind participants had mostly retained their new skill, and most of them were still using it and reported that it had improved their quality of life.

As with everything else he’s involved with, Elon Musk has drawn a lot of criticism for his Starlink satellite-based internet service. The growing constellation of satellites bothers astronomers, terrestrial ISPs are worried the service will kill their business model, and the beta version of the Starlink dish has been shown to be flakey in the summer heat. But it’s on equipment cost where Musk has taken the most flak, which seems unfair as the teardowns we’ve seen clearly show that the phased-array antenna in the Starlink dish is being sold for less than it costs to build. But still, Musk is assuring the world that Starlink home terminals will get down in the $250 to $300 range soon, and that the system could have 500,000 users within a year. There were a couple of other interesting insights, such as where Musk sees Starlink relative to 5G, and how he’s positioning Starlink to provide backhaul services to cellular companies.

Well, this is embarrassing. Last week, we mentioned that certain unlucky users of an obsolete but still popular NAS device found that their data had disappeared, apparently due to malefactors accessing the device over the internet and forcing a factory reset. Since this seems like something that should require entering a password, someone took a look at the PHP script for the factory restore function and found that a developer had commented out the very lines that would have performed the authentication:

    function get($urlPath, $queryParams=null, $ouputFormat='xml'){
//        if(!authenticateAsOwner($queryParams))
//        {
//            header("HTTP/1.0 401 Unauthorized");
//            return;
//        }

It’s not clear when the PHP script was updated, but support for MyBook Live was dropped in 2015, so this could have been a really old change. Still, it was all the hacker needed to get in and wreak havoc; interestingly, the latest attack may be a reaction to a three-year-old exploit that turned many of these devices into a botnet. Could this be a case of hacker vs. hacker?

Not All SpaceX Software Goes To Space

SpaceX has always been willing to break from aerospace tradition if they feel there’s a more pragmatic solution. Today this is most visible in their use of standard construction equipment like cranes in their Starship development facility. But the same focus on problem solving can also be found in their software parts we don’t see. Recently we got two different views behind the scenes. First, a four-part series about “software in space” published by StackOverflow blog, followed quickly by an Ask Me Anything (AMA) session on SpaceX Reddit.

Some of the StackOverflow series cover ground that has been previously discussed. Mostly in the first part dealing with their workhorse Falcon and Dragon vehicles, and some in the second part discussing Starlink whose beta program is reaching more and more people. Both confirmed that spaceflight software has to meet very stringent requirements and are mostly close to the metal bespoke C++ code. But we receive fascinating new information in part three, which focuses on code verification and testing. Here they leverage a lot of open source infrastructure more common to software startups than aerospace companies. The fourth and final component of this series covers software to support SpaceX hardware manufacturing, which had been rarely discussed before this point. (Unfortunately, there was nothing about how often SpaceX software developers copy and paste code from StackOverflow.)

The recent Reddit AMA likewise had some overlap with the SpaceX software AMA a year ago, but there were new information about SpaceX work within the past year. There was Crew Dragon’s transition from a test to an operational vehicle, and the aforementioned Starship development program. Our comments section had a lot of discussion about the practicality of touchscreen interfaces in real spacecraft, and here we learn SpaceX put a lot of study into building something functional and effective.

It also showed us that essentially every Sci-Fi Movie Interface was unrealistic and would be unreadable under extreme conditions.

In the course of this research, they learned a lot of pitfalls about fictional touch interfaces. Though to be fair, movie and television spacecraft UI are more concerned about looking cool than being useful.

If the standard AMA format is not to your liking, one of the contributors compiled all SpaceX answers alongside their related questions in a much more readable form here. And even though there’s an obvious recruiting side to these events, we’re happy to learn more about how SpaceX have continued to focus on getting the job done instead of rigidly conforming to aerospace tradition. An attitude that goes all the way back to the beginning of this company.

Starlink: A Review And Some Hacks

I could probably be described as a SpaceX enthusiast. I catch their launches when I can, and I’ve watched the development of Starship with great interest. But the side-effect of SpaceX’s reusable launch system is that getting to space has become a lot cheaper. Having excess launch capacity means that space projects that were previously infeasible become suddenly at least plausible. One of those is Starlink.

Starlink is SpaceX’s satellite Internet service. Wireless and cellular internet have helped in some places, but if you really live out in the sticks, satellite internet is your only option. And while satellite Internet isn’t exactly new, Starlink is a bit different. Hughesnet, another provider, has a handful of satellites in geostationary orbit, which is about 22,000 miles above the earth. To quote Grace Hopper, holding a nearly foot-long length of wire representing a nanosecond, “Between here and the satellite, there are a very large number nanoseconds.”

SpaceX opted to do something a bit different. In what seemed like an insane pipe dream at the time, they planned to launch a satellite constellation of 12,000 birds, some of them flying as low as 214 mile altitude. The downside of flying so low is that they won’t stay in orbit as long, but SpaceX is launching them significantly faster than they’re coming down. So far, nearly 1,600 Starlink satellites are in orbit, in a criss-crossing pattern at 342 miles (550 km) up.

This hundred-fold difference in altitude matters. A Hughesnet connection has a minimum theoretical latency of 480 ms, and in reality runs closer to 600 ms. Starlink predicts a theoretical minimum of under 10 ms, though real-world performance isn’t quite that low yet. In the few weeks I’ve had the service, ping times have fallen from mid-60s down to 20s and 30s. The way Starlink works right now, data goes up to the closest satellite and directly back to the connected ground station. The long-term plan is to allow the satellites to talk directly to each other over laser links, skipping over the ground stations. Since the speed of light is higher in a vacuum than in a fiber-optic cable, the fully deployed system could potentially have lower latency than even fiber Internet, depending on the location of the endpoint and how many hops need to be made.

I got a Starlink setup, and have been trying out the beta service. Here’s my experience, and a bonus hack to boot.

Continue reading “Starlink: A Review And Some Hacks”

Google Loon’s Internet Balloons Come Back To Earth After A Decade In The Stratosphere

After a journey of a decade, what started as Project Loon by Google is no more. Promoted as a way to bring communications to the most remote parts of the globe, it used gigantic, high-altitude balloons equipped with communication hardware for air to ground, as well as air to air communication, between individual balloons. Based around LTE technology, it would bring multiple megabit per second data links to both remote areas and disaster zones.

Seven years into its development, Loon became its own company (Loon LLC), and would provide communications to some areas of Kenya, in addition to Sri Lanka in 2015 and Puerto Rico in 2017 after Hurricane Maria. Three years later, in January of 2021, it was announced that Loon LLC would be shutting down operations. By that point it had become apparent that the technology would not be commercially viable, with alternatives including wired internet access having reduced the target market.

While the idea behind Loon sounds simple in theory, it turns out that it was more complicated than just floating up some weather balloon with LTE base stations strapped to them.

Continue reading “Google Loon’s Internet Balloons Come Back To Earth After A Decade In The Stratosphere”

Starlink Satellite Dish X-Rayed To Unlock RF Magic Inside

When [Kenneth Keiter] took apart his Starlink dish back in November, he did his best to explain the high-level functionality of the incredibly complex device in a video posted to his YouTube channel. It was a fascinating look at the equipment, but by his own admission, he wasn’t the right person to try and explain the nuances of how the phased array actually functioned. But he knew who could do the technology justice, which is why he shipped the dismembered dish over to [Shahriar Shahramian] of The Signal Path.

Don’t be surprised if you can’t quite wrap your head around his detailed analysis after your first viewing. You’ll probably have a few lingering questions after the second re-watch as well. But that’s OK, as [Shahriar] still has a few of his own. Even after cutting out a section of the dish and putting it under an X-ray, it’s still not completely clear how the SpaceX engineers managed to cram everything into such a tidy package. Though there seems to be no question that the $500 price for the early-access hardware is an absolute steal, all things considered.

The layered antenna works on multiple frequencies.

Most of the video is spent examining the stacked honeycomb construction of the phased antenna array, which as expected, holds a number of RF secrets if you know what to look for. Put simply, there’s no such thing as an insignificant detail to the trained eye. From the carefully sized injection molded spacer sheet that keeps the upper array a specific distance from the RF4-like radome, to the almost microscopic holes that have been bored through each floating patch to maintain equalized air pressure through the stack up, [Shahriar] picks up on fascinating details which might otherwise seem like arbitrary design decisions.

But a visual inspection will only get you so far. Eventually [Shahriar] has to cut out a slice of the PCB so he can fit it into the X-ray machine, but don’t feel too bad, the dish was long dead before he got his hands on it. While he hasn’t yet completed his full analysis, an initial examination indicates that each large IC and the eight chips surrounding it make up a 16 channel beam forming module. Each channel is further split into two RX and TX pairs, which provides the necessary right and left hand polarization. That said, he admits there’s some room for interpretation and that further work would be necessary before any hard conclusions could be made.

Between this RF analysis and the initial overview provided by [Kenneth], we’ve already learned a lot more about this device than many might have expected considering how rare and expensive the hardware is. While we admit it’s not immediately clear what kind of hijinks hardware hackers could get into once this device is fully understood, we’re certainly eager to find out.

Continue reading “Starlink Satellite Dish X-Rayed To Unlock RF Magic Inside”

Literally Tearing Apart A SpaceX Starlink Antenna

While SpaceX’s constellation of Starlink satellites is nowhere near its projected final size, the company has enough of the birds zipping around in low Earth orbit to start a limited testing period they call the Better Than Nothing Beta. If you’re lucky enough to get selected, you have to cough up $500 for the hardware and another $100 a month for the service. Despite the fairly high bar for getting your hands on one, [Kenneth Keiter] decided to sacrifice his Starlink dish to the teardown Gods.

We say sacrifice because [Kenneth] had to literally destroy the dish to get a look inside. It doesn’t appear that you can realistically get into the exceptionally thin antenna array without pulling it all apart, thanks in part to preposterous amount of adhesive that holds the structural back plate onto the PCB. The sky-facing side of the phased array, the key element that allows the antenna to track the rapidly moving Starlink satellites as they pass overhead, is also laminated to a stack-up comprised of plastic hexagonal mesh layers, passive antenna elements, and the outer fiberglass skin. In short, there are definitely no user-serviceable parts inside.

The dish hides many secrets under its skin.

Beyond attempting to analyze the RF magic that’s happening inside the antenna, [Kenneth] also takes viewers through a tour of some of the more recognizable components of the PCB; picking out things like the Power over Ethernet magnetics, a GPS receiver, some flash storage, and the H-Bridge drivers used to control the pan and tilt motors in the base of the dish.

It also appears that the antenna is a self-contained computer of sorts, complete with ARM processor and RAM to run the software that aims the phased array. Speaking of which, it should come as no surprise to find that not only are the ICs that drive the dizzying array of antenna elements the most numerous components on the PCB, but that they appear to be some kind of custom silicon designed specifically for SpaceX.

In short, there’s still plenty we don’t know about how this high-tech receiver actually works. While [Kenneth] does a respectable job of trying to make sense of it all, and we admire the dedication required to rip apart such a rare and expensive piece of kit, it’s still going to be awhile before the hacker community truly masters the tech that SpaceX is putting into their ambitions global Internet service.

Continue reading “Literally Tearing Apart A SpaceX Starlink Antenna”