Exposing Computer Monitor Side-Channel Vulnerabilities With TempestSDR

Having been endlessly regaled with tales of side-channel attacks and remote exploits, most of us by now realize that almost every piece of gear leaks data like a sieve. Everything from routers to TVs to the power supplies and cooling fans of computers can be made to give up their secrets. It’s scary stuff, but it also sounds like a heck of a lot of fun, and with an SDR and a little software, you too can get in on the side-channel action.

Coming to us via software-defined radio buff [Tech Minds], the video below gives a quick tour of how to snoop in on what’s being displayed on a monitor for almost no effort or expense. The software that makes it possible is TempestSDR, which was designed specifically for the job. With nothing but an AirSpy Mini and a rubber duck antenna, [Tech Minds] was able to reconstruct a readable black and white image of his screen at a range of a few inches; a better antenna and some fiddling might improve that range to several meters. He also shares a trick for getting TempestSDR set up for all the popular SDRs, including SPRplay, HackRF, and RTL-SDR.

Learning what’s possible with side-channel attacks is the key to avoiding them, so hats off to [Tech Minds] for putting together this simple, easy-to-replicate demo. To learn even more, listen to what [Samy Kamkar] has to say about the subject, or check out where power supplies, cryptocurrency wallets, and mixed-signal microcontrollers are all vulnerable.

Continue reading “Exposing Computer Monitor Side-Channel Vulnerabilities With TempestSDR”

Hackaday Podcast 073: Betrayal By Clipboard, Scratching 4K, Flaming Solder Joints, And Electric Paper

Hackaday editors Mike Szczys and Elliot Williams review a great week in the hacking world. There’s an incredible 4k projector build that started from a broken cellphone, a hand-cranked player (MIDI) piano, and a woeful story of clipboard vulnerabilities found in numerous browsers and browser-based apps. Plus you’ll love the field-ready solder splice that works like a strike-on box match (reminiscent of using thermite to weld railroad rail) and we spend some time marveling at the problem of finding power cuts on massive grid systems.

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Take a look at the links below if you want to follow along, and as always, tell us what you think about this episode in the comments!

Direct download (60 MB or so.)

Continue reading “Hackaday Podcast 073: Betrayal By Clipboard, Scratching 4K, Flaming Solder Joints, And Electric Paper”

Boot-To-BASIC Box Packs A Killer Graphics Engine

In the early days of the home computer era, many machines would natively boot into a BASIC interpreter. This was a great way to teach programming to the masses. However on most platforms the graphics routines were incredibly slow, and this greatly limited what could be achieved. In 2020 such limitations are a thing of the past, with the Color Maximite 2. (Video, embedded below.)

The Color Maximite 2 is a computer based around the STM32H743IIT6 microcontroller, packing a Cortex-M7 32-bit RISC core with the Chrom-ART graphics accelerator. Running at 480MHz it’s got plenty of grunt, allowing it to deliver vibrant graphics to the screen reminiscent of the very best of the 16-bit console era. The Maximite 2 combines this chip alongside a BASIC interpreter complete with efficient graphics routines. This allows for the development of games with fast and smooth movement, with plenty of huge sprites and detailed backgrounds.

[cTrix] does a great job of demonstrating the machine, designed by [Geoff Graham] and [Peter Mather]. Putting the computer through its paces with a series of demos, it shows off the impressive visual and audio capabilities of the hardware. It serves as an excellent spiritual successor to BlitzBASIC from back in the Amiga days. Particularly enjoyable is seeing a BASIC interpreter that adds syntax highlighting – making parsing the code far easier on the eyes!

We’d love to see this become an off-the-shelf kit, as it’s clear the platform has a lot to offer the retro hobbyist. It’s certainly come a long way from the original Maximite of nearly a decade ago. Video after the break.

Continue reading “Boot-To-BASIC Box Packs A Killer Graphics Engine”

VGA Framegrabber Built From Scratch

Modern computers are replete with all manner of digital video interfaces. DVI, HDMI, DisplayPort are all examples of this. In the old days, VGA ruled the roost, sending video to monitors as an analog signal. However, it’s possible to convert this back into a digital format, and [vihapuu] has done just that with his Grabor project. (a demo video is also embedded below.)

The project relies on a Texas Instruments TVP7002 to do the hard work of converting VGA into a digital signal. The output of this chip is then picked up by a CPLD which clocks the resulting data into SRAM. An NXP microcontroller is then responsible for taking the data from SRAM and sending it out over a network interface, thanks to a Microchip ENC28J60 Ethernet controller.

We can imagine this kind of tool would come in handy for working with retro machines over a network. We’ve seen other interesting VGA hacks before too, like this EEPROM-based signal generator. Video after the break.

Continue reading “VGA Framegrabber Built From Scratch”

Bitluni Brings All The ESP-32 Multimedia Hacks To Supercon

Of all the people I was looking forward to meeting at Supercon, aside from my Hackaday colleagues with whom I had worked for five years without ever meeting, was a fellow from Germany named Matthias Balwierz. The name might not ring a bell, but he’ll certainly be familiar to Hackaday readers as Bitluni, the sometimes goofy but always entertaining and enlightening face of “Bitluni’s Lab” on YouTube.

I’d been covering Bitluni’s many ESP32 hacks over the years, and had struck up a correspondence with him, swapping ideas and asking for advice on the many projects I start but somehow never finish. Luckily for us, Bitluni is far better on follow-through than I am, and he brought that breadth and depth of experience to the Design Lab stage for that venue’s last talk of the 2019 Superconference, before the party moved next door for the badge-hacking presentations.

Continue reading “Bitluni Brings All The ESP-32 Multimedia Hacks To Supercon”

Living At The Close Of The Multiway Era

After over a decade of laptop use, I made the move a couple of months ago back to a desktop computer. An ex-corporate compact PC and a large widescreen monitor on a stand, and alongside them a proper mouse and my trusty IBM Model M that has served me for decades. At a stroke, the ergonomics of my workspace changed for the better, as I no longer have to bend slightly to see the screen.

The previous desktop PC was from an earlier time. I think it had whatever the AMD competitor to a Pentium 4 was, and if I recall correctly, its 512 MB of memory was considered to be quite something. On the back it had an entirely different set of sockets to my new one, a brace of serial ports, a SCSI port, and a parallel printer port. Inside the case, its various drives were served by a set of ribbon cables. It even boasted a floppy drive. By contrast the cabling on its successor is a lot lighter, with much less bulky connectors. A few USB plugs and a network cable, and SATA for its disk drive. The days of bulky multiway interconnects are behind us, and probably most of us are heaving a sigh of relief. Continue reading “Living At The Close Of The Multiway Era”

VGA Signal In A Browser Window, Thanks To Reverse Engineering

Epiphan VGA2USB LR VGA-to-USB devices

[Ben Cox] found some interesting USB devices on eBay. The Epiphan VGA2USB LR accepts VGA video on one end and presents it as a USB webcam-like video signal on the other. Never have to haul a VGA monitor out again? Sounds good to us! The devices are old and abandoned hardware, but they do claim Linux support, so one BUY button mash later and [Ben] was waiting patiently for them in the mail.

But when they did arrive, the devices didn’t enumerate as a USB UVC video device as expected. The vendor has a custom driver, support for which ended in Linux 4.9 — meaning none of [Ben]’s machines would run it. By now [Ben] was curious about how all this worked and began digging, aiming to create a userspace driver for the device. He was successful, and with his usual detail [Ben] explains not only the process he followed to troubleshoot the problem but also how these devices (and his driver) work. Skip to the end of the project page for the summary, but the whole thing is worth a read.

The resulting driver is not optimized, but will do about 7 fps. [Ben] even rigged up a small web server inside the driver to present a simple interface for the video in a pinch. It can even record its output to a video file, which is awfully handy. The code is available on his GitHub repository, so give it a look and maybe head to eBay for a bit of bargain-hunting of your own.