Tap ‘N Ghost: A Novel Attack Against Smartphone Touchscreens

Researchers have demonstrated a new vulnerability in NFC, a feature built-in to many smartphones sold today. The vulnerability allows the attacker to to generate ‘ghost taps’ against a device, effectively allowing an attacker to tap your phone without you looking.

The 18-page paper released by a team of three researchers based out of Waseda University in Japan consists of two techniques: an attack against NFC-enabled smartphones and an attack against capacitive touchscreens. It should be noted that nearly all phones have NFC, and nearly every phone released in the last decade has a capacitive touchscreen. Vunlnerable devices include, but are not limited to the Xperia Z4, the Galaxy S6 Edge, the Galaxy S4, Aquos Zeta SH-04F, Nexus 9, and Nexus 7.

The experimental setup consists of a signal generator, high-speed bipolar amplifier, a small transformer (taken from a toy plasma ball), a copper sheet, oscilloscope with high-voltage probe, and an NFC card emulator. No other special equipment is required. When the victim places their smartphone on a table top, the phone is fingerprinted, giving the attacker the make and model of phone. A dialog box then pops up and the phone connects to a network.

This attack can be replicated by anyone, and the tools required are simple and readily available. The mitigation is to disable NFC on your phone.

Continue reading “Tap ‘N Ghost: A Novel Attack Against Smartphone Touchscreens”

No Keyboard Needed, This Laptop Is All Screens

If you have an eye for obscure Microsoft products, you may be aware of the Microsoft PixelSense, a table-sized horizontal touchscreen designed as a collaborative workspace. It’s a multi-user computer with no traditional keyboard or mouse, instead multiple users work with documents and other files as though they were real documents on a table. It’s an impressive piece of technology, and it was the first thing that came to mind when we saw [Anitomicals C]’s dual screen portable computer. It has a form factor similar to a large laptop, in which the touchscreen folds upwards to reveal not a conventional keyboard and trackpad, but another identical touchscreen. The entire surface of the computer is a touch display with a desktop propagated across it, and in a similar way to the Microsoft product the user can work exclusively in the touch environment without some of the limitations of a tablet.

He freely admits that it is a prototype and proof of concept, and that is obvious from its large size and extensive use of desktop components. But he has brought it together in a very tidy Perspex case serving as an interesting class in creating a portable computer with well-chosen desktop components, even though with no battery it does not pretend to fit the same niche as a laptop. We’d be interested to see the same interface produced as a less bulky desktop-only version with solely the two monitors, because the horizontal touch screen is what sets this machine apart from other home-made ones.

Home made laptops are a regular sight on these pages, but some of them are a little more rough-and-ready.

Continue reading “No Keyboard Needed, This Laptop Is All Screens”

Portable Photo Booth Named Buzz

We’re all used to posing for a picture — or a selfie — but there’s something about photo booths that make getting your photo taken an exciting and urgent affair. To make this experience a bit easier to tote about, Redditor [pedro_g_s] has laboriously built, from the ground up, a mobile photo booth named Buzz.

He needed a touchscreen, a Raspberry Pi, almost definitely a webcam, and a 3D printer to make a case — although any medium you choose will do — to build this ‘booth.’ That said, he’s built the app in a way that a touchscreen isn’t necessary, but carting around a mouse to connect to and operate your portable photo booth seems a bit beside the point. On the back end, he used Electron to code the photo booth app, React helped him build a touchscreen UI, and Yarn kept the necessary dependencies in order.

Operation is simple, and every time a photo is taken it is sent to and collated within a previously set-up email service. To set it up, [pedro_g_s] is here to guide you through the process.

Continue reading “Portable Photo Booth Named Buzz”

Upgrade Your Mac With A Touchscreen, For Only A Dollar

Imagine how hard it could be to add a touch screen to a Mac laptop. You’re thinking expensive and difficult, right? How could [Anish] and his friends possibly manage to upgrade their Mac with a touchscreen for only a dollar? That just doesn’t seem possible.

The trick, of course, is software. By mounting a small mirror over the machine’s webcam, using stiff card, hot glue, and a door hinge. By looking at the screen and deciding whether the image of a finger is touching its on-screen reflection, a remarkably simple touch screen can be created, and the promise of it only costing a dollar becomes a reality. We have to salute them for coming up with such an elegant solution.

They have a video which we’ve put below the break, showing a few simple applications for their interface. Certainly a lot less bother than a more traditional conversion.

Continue reading “Upgrade Your Mac With A Touchscreen, For Only A Dollar”

Crankshaft: Open Source Car Computer

Modern cars and head units are pretty fancy gadget-wise. But what if your car still has an 8-track? No problem. Just pick up a Raspberry Pi 3 and a seven-inch touchscreen, and use Crankshaft to turn it into an Android Auto setup.

The open source project is based on OpenAuto which, in turn, leverages aasdk. The advantage to Crankshaft is it is a plug-and-play distribution. However, if you prefer, you can build it all yourself from GitHub.

Continue reading “Crankshaft: Open Source Car Computer”

Hybrid Interface Brings Touchscreen To Rigol Scope

With pervasive smartphones and tablets, the touch interface is assumed for small LCD screens, and we’ve likely all poked and pinched at some screen, only to find it immune to our gestures. Manufacturers have noticed this and begun adding touch interfaces to instruments like digital oscilloscopes, but touch interfaces tend to be an upgrade feature. But thanks to this hybrid oscilloscope touchscreen interface, even the low-end scopes can get in on the action.

It only makes sense that [Matt Heinz] started with one of the most hackable scopes for this build, which was his Master’s thesis project. Using an Android tablet as an auxiliary interface, [Matt] is able to control most of the main functions of the scope remotely. Pinching and expanding gestures are interpreted as horizontal and vertical scaling, while dragging the displayed waveform changes its position and controls triggering. While it’s not a true touchscreen scope, the code is all open source, so can a true aftermarket Rigol touchscreen be far away?

Rigol hacks abound here — you can talk to them in Linux, increase the bandwidth, or just get a look at their guts.

Continue reading “Hybrid Interface Brings Touchscreen To Rigol Scope”

ESP8266 Adds Slick Touchscreen Controls To A Stretch Limo

The popularity of the ESP8266 WiFi module has a lot to do with its ability to inexpensively connect to the Internet. However, [hwhardsoft]’s stretch limousine environmental control system explores another use for these modules: a simple way to tie together disparate systems with a common user interface.

On a basic level, the problem is one we’ve all faced: multiple devices with multiple control interfaces create an awkward user experience. Have you ever worked in an office with 6 brands of air conditioner requiring 6 different remotes? Because of its low-cost, support for Wi-Fi, serial, and GPIO, ESP8266 boards are a reasonable candidate to create a unified control system for multiple devices. This is even more true for the ESP32, as it adds Bluetooth support.

[hwhardsoft]’s use case is fairly straightforward. The limousine (a Lincoln stretch) has multiple LED lighting controllers, climate control, and a laser projector. This was not exactly a smooth user experience, so [hwhardsoft] tied all the controls to two slick touchscreen interfaces (presumably one for the driver and one for the passengers).

Each touchscreen sends commands over Wi-Fi using UDP to a control board that switches relays to control the different devices, as we’ve seen previously.

While relays are arguably not the ideal solution here, these control boards already existed and were functional, so it would have been wasteful to throw them out. An easy improvement suitable for future projects would be to use NPN transistors to simulate button presses on the remote controls. This works quite well and lowers cost, power, and parts count, while being faster, more reliable, and quiet.

If you wanted to build something similar in your home or office, but want to use an Android smartphone instead of a touchscreen, the Kivy Python module allows you to do just that. It’s quite easy to set up a simple interface with buttons, dropdown lists, and text inputs that send data to an ESP8266 over UDP.