Dashboard Dongle Teardown Reveals Hardware Needed To Bust Miles

Progress and the proliferation of computers in automotive applications have almost made the shade tree mechanic a relic of the past. Few people brave the engine compartment of any car made after 1999 or so, and fewer still dive into the space behind the dashboard. More’s the pity, because someone may be trying to turn back the odometer with one of these nefarious controller area network (CAN bus) dongles.

Sold through the usual outlets and marketed as “CAN bus filters,” [Big Clive] got a hold of one removed from a 2015 Mercedes E-Class sedan, where a mechanic had found it installed between the instrument cluster and the OEM wiring harness. When the dongle was removed, the odometer instantly added 40,000 kilometers to its total, betraying someone’s dishonesty.

[Big Clive]’s subsequent teardown of the unit showed that remarkably little is needed to spoof a CAN bus odometer. The board has little more than an STM32F microcontroller, a pair of CAN bus transceiver chips, and some support circuitry like voltage regulators. Attached to a wiring harness that passes through most of the lines from the instrument cluster unmolested while picking off the CAN bus lines, the device can trick the dashboard display into showing whatever number it wants. The really interesting bit would be the code, into which [Clive] does not delve. That’s a pity, but as he points out, it’s likely the designers set the lock bit on the microcontroller to cover their tracks. There’s no honor among thieves.

We found this plunge into the dark recesses of the automotive world fascinating, and [Big Clive]’s tutelage top-notch as always. If you need to get up to speed on CAN bus basics, check out [Eric Evenchick]’s series on automotive network hacking.

Continue reading “Dashboard Dongle Teardown Reveals Hardware Needed To Bust Miles”

Just How Simple Can A Transceiver Be?

We’ve frequently talked about amateur radio on these pages, both in terms of the breadth of the hobby and the surprisingly low barrier to entry. It’s certainly the case that amateur radio does not have to mean endlessly calling CQ on SSB with an eye-wateringly expensive rig, and [Bill Meara N2CQR] is on hand with a description of a transceiver that’s so simple it only uses one transistor.

It’s a 40 meter (7 MHz) QRP or low power transceiver in which the transmitter is a simple crystal oscillator and the receiver is an equally simple regenerative design. What makes it so simple is the addition of a three-way switch to transfer the single transistor — a J310 FET — between the two halves of the circuit. It’s no slouch as QRP radios go, having clocked up real-world contacts.

This circuit shows us how a little can go a long way in the world of amateur radio, and we can’t help liking it for that. It’s worth saying though that it’s not without flaws, as a key click filter and another transistor would make for a much higher quality transmitted signal. But then it would no longer be a single-transistor rig, and thus would miss the point, wouldn’t it.

An SDR Transceiver The Old-School Way

Software-defined radios or SDRs have provided a step-change in the way we use radio. From your FM broadcast receiver which very likely now has single-application SDR technology embedded in a chip through to the all-singing-all-dancing general purpose SDR you’d find on an experimenter’s bench, control over signal processing has moved from the analogue domain into the digital. The possibilities are limitless, and some of the old ways of building a radio now seem antiquated.

[Pete Juliano N6QW] is an expert radio home-brewer of very long standing, and he’s proved there’s plenty of scope for old-fashioned radio homebrewing in an SDR with his RADIG project.  It’s an SDR transceiver for HF which does all the work of quadrature splitting and mixing with homebrewed modules rather than the more usual technique of hiding it in an SDR chip. It’s a very long read in a diary format from the bottom up, and what’s remarkable is that he’s gone from idea to working SDR over the space of about three weeks.

A block diagram of the N6QW SDR
A block diagram of the N6QW SDR

So what goes into a homebrew SDR? Both RF preamplifier, filters, and PA are conventional as you might expect, switched between transmit and receive with relays. A common transmit and receive signal path is split into two and fed to a pair of ADE-1 mixers where they are mixed with quadrature local oscillator signals to produce I and Q that is fed to (or from in the case of transmit) a StarTech sound card. The local oscillator is an Si5351 synthesiser chip in the form of an SDR-Kits USB-driven module, and the 90 degree phased quadrature signals are generated with a set of 74AC74 flip-flops as a divider.

Running the show is a Raspberry Pi running Quisk, and though he mentions using a Teensy to control the Si5351 at the start of his diary it seems from the pictures of the final radio that the Pi has taken on that work. It’s clear that this is very much an experimental radio as it stands with wired-together modules on a wooden board, so we look forward to whatever refinements will come. This has the feel of a design that could eventually be built by many other radio amateurs, so it’s fascinating to be in at the start.

If I and Q leave you gasping when it comes to SDR technology, maybe we can help.

Thanks [Bill Meara N2CQR] for the tip!

EBay Modules And Custom PCBs Make A Plug And Play Ham Transceiver

Many of us have fond memories of our introduction to electronics through the “200-in-1” sets that Radio Shack once sold, or even the more recent “Snap Circuits”-style kits. Most of eventually us move beyond these kits to design our circuits; still, there’s something to be said for modular designs. This complete amateur radio transceiver is a great example of that kind of plug and play construction.

The rig is the brainchild of [jmhrvy1947], who set out to build a complete transceiver using mostly eBay-sourced modules. Some custom PCBs are used, but those are simple boards that can be etched and drilled easily. The transceiver is only for continuous-wave (CW) use, which would normally mean you’d need to know Morse, but thanks to some clever modifications to open-source apps like Quisk and FLDigi, Morse can be received and sent directly from the desktop. That will no doubt raise some hackles, but we think it’s a great way to learn code. The rig is QRP, or low power, transmitting only 100 mW with the small power amp shown. Adding eBay modules can jack that up to a full 100 Watts, which also requires adding a 12-volt power supply, switchable low-pass filters, a buck-boost converter, and some bandpass filters for band selection. It ends up looking very experimental, but it works well enough to make contacts.

We really like the approach here, and the fact that the rig can be built in stages. That makes it a perfect project for our $50 Ham series, which just kicked off. Perhaps we’ll be seeing it again soon.

Continue reading “EBay Modules And Custom PCBs Make A Plug And Play Ham Transceiver”

Buy A Baofeng While You Still Can? FCC Scowls At Unauthorized Frequency Transmitters

There was a time when a handheld radio transceiver was an object of wonder, and a significant item for any radio amateur to own. A few hundred dollars secured you an FM walkie-talkie through which you could chat on your local repeater, and mobile radio was a big draw for new hams. Thirty years later FM mobile operation may be a bit less popular, but thanks to Chinese manufacturing the barrier to entry is lower than it has ever been. With extremely basic handheld radios starting at around ten dollars and a capable dual-bander being yours for somewhere over twice that, most licencees will now own a Baofeng UV5 or similar radio.

The FCC though are not entirely happy with these radios, and QRZ Now are reporting that the FCC has issued an advisory prohibiting the import or sale of devices that do not comply with their rules. In particular they are talking about devices that can transmit on unauthorised frequencies, and ones that are capable of transmission bandwidths greater than 12.5 kHz.

We’ve reported before on the shortcomings of some of these radios, but strangely this news doesn’t concern itself with their spurious emissions. We’re guessing that radio amateurs are not the problem here, and the availability of cheap transceivers has meant that the general public are using them for personal communication without a full appreciation of what frequencies they may be using. It’s traditional and normal for radio amateurs to use devices capable of transmitting out-of-band, but with a licence to lose should they do that they are also a lot more careful about their RF emissions.

Read the FCC statement and you’ll learn they are not trying to restrict the sale of ham gear. However, they are insisting that imported radios that can transmit on other frequencies must be certified. Apparently, opponents of these radios claim about 1 million units a year show up in the US, so this is a big business. The Bureau warns that fines can be as high as $19,639 per day for continued marketing and up to $147,290 — we have no idea how they arrive at those odd numbers.

So if you’re an American who hasn’t already got a Baofeng or similar, you might be well advised to pick one up while you still can.

UV5-R image via PE1RQM

An FM Transceiver From An Unexpected Chip

The Si47xx series of integrated circuits from Silicon Labs is a fascinating series of consumer broadcast radio products, chips that apply SDR technologies to deliver a range of functions that were once significantly more complex, with minimal external components and RF design trickery.  [Kodera2t] was attracted to one of them, the Si4720, which boasts the unusual function of containing both a receiver and a transmitter for the FM broadcast band and is aimed at mobile phones and similar devices that send audio to an FM car radio. The result is a PCB with a complete transceiver controlled by an ATmega328 and sporting an OLED display, and an interesting introduction to these devices.

The Si4720 internal block diagram, from its data sheet.
The Si4720 internal block diagram, from its data sheet.

A look at the block diagram from the Si4720 reveals why it and its siblings are such intriguing devices. On-chip is an SDR complete in all respects including an antenna, which might set the radio enthusiasts among the Hackaday readership salivating were it not that the onboard DSP is not reprogrammable for any other purpose than the mode for which the chip is designed. The local oscillator also holds a disappointment, being limited only to the worldwide FM broadcast bands and not some of the more useful or interesting frequencies. There are however a host of other similar Silicon Labs receiver chips covering every conceivable broadcast band, so the experimenter at least has a good choice of receivers to work with.

If you need a small FM transmitter and have a cavalier attitude to spectral purity then it’s easy enough to use a Raspberry Pi or just build an FM bug. But this project opens up another option and gives a chance to experiment with a fascinating chip.

An SSB Transceiver On Only One Type Of Transistor

There are a multiplicity of transmission modes both new and old at the disposal of a radio amateur, but the leader of the pack is still single-sideband or SSB. An SSB transmitter emits the barest minimum of RF spectrum required to reconstitute an audio signal, only half of the mixer product between the audio and the RF carrier, and with the carrier removed. This makes SSB the most efficient of the analog voice modes, but at the expense of a complex piece of circuitry to generate it by analog means. Nevertheless, radio amateurs have produced some elegant designs for SSB transmitters, and this one for the 80m band from [VK3AJG] is a rather nice example even if it isn’t up-to-the-minute. What makes it rather special is that it relies on only one type of device, every one of its transistors is a BC547.

In design terms, it follows the lead set by other simple amateur transmitters, in that it has a 6 MHz crystal filter with a mixer at either end of it that switch roles on transmit or receive. It doesn’t use the bidirectional amplifiers popularised by VU2ESE’s Bitx design, instead, it selects transmit or receive using a set of diode switches. The power amplifier stretches the single-device ethos to the limit, by having multiple BC547s in parallel to deliver about half a watt.

While this transmitter specifies BC547s, it’s fair to say that many other devices could be substituted for this rather aged one. Radio amateurs have a tendency to stick with what they know and cling to obsolete devices, but within the appropriate specs a given bipolar transistor is very similar to any other bipolar transistor. Whatever device you use though, this design is simple enough that you don’t need to be a genius to build one.

Via [G4USP]. Thanks [2ftg] for the tip.