When all else fails, there’s radio. Hurricane Helene’s path of destruction through Appalachia stripped away every shred of modern infrastructure in some areas, leaving millions of residents with no ability to reach out to family members or call for assistance, and depriving them of any news from the outside world. But radio seems to be carrying the day, with amateur radio operators and commercial broadcasters alike stepping up to the challenge.
We regret to admit this, but we completely missed the fact that Windows 10 turned five years old back in March. Granted, things were a little weird back then — at least it seemed weird at the time; from the current perspective, things were downright normal then. Regardless, our belated congratulations to Microsoft, who, like anyone looking after a five-year-old, spends most of their time trying to keep their charge from accidentally killing itself. Microsoft has done such a good job at keeping Windows 10 alive that it has been installed on “one billion monthly active devices”. Of course, back in April of 2015 they predicted that the gigainstall mark would be reached in 2018. But what’s a couple of years between friends?
Of all the things that proved to be in short supply during the pandemic lockdowns, what surprised us most was not the toilet paper crunch. No, what really surprised us was the ongoing webcam supply pinch. Sure, it makes sense, with everyone suddenly working from home and in need of a decent camera for video conferencing. But we had no idea that the market was so dominated by one manufacturer — Logitech — that their cameras could suddenly become unobtainium. Whatever it is that’s driving the shortage, we’d take Logitech’s statement that “demand will be met in the next 4-6 weeks” with a huge grain of salt. After all, back-to-school shopping is likely to look vastly different this year than in previous years.
Speaking of education, check out the CrowPi2 STEM laptop. On the one hand, it looks like just another Raspberry Pi-based laptop, albeit one with a better level of fit and finish than most homebrew Pi-tops. With a Raspberry Pi 4b on board, it can do all the usual stuff — email, browse the web, watch videos. The secret sauce is under the removable wireless keyboard, though: a pretty comprehensive electronics learning lab. It reminds us of the Radio Shack “150-in-One” kits that so many of us cut our teeth on, but on steroids. Having a complete suite of modules and a breadboarding area built right into the laptop needed to program it is brilliant, and we look forward to seeing how the Kickstarter for this does.
Exciting news from Hackaday Superfriend Chris Gammell — he has launched a new podcast to go along with his Contextual Electronics training courses. Unsurprisingly dubbed the Contextual Electronics Podcast, he already has three episodes in the can. They’re available as both video and straight audio, and from the few minutes we’ve had to spend on them so far, Chris has done a great job in terms of production values and guests with Sophy Wong, Stephen Hawes, and Erik Larson leading off the series. We wish him luck with this new venture, and we’re looking forward to future episodes.
One of the best things about GoPro and similar sports cameras is their ability to go just about anywhere and show things we normally don’t get to see. We’re thinking of those gorgeous slo-mo selfies of surfers inside a curling wave, or those cool shots of a skier powder blasting down a mountain slope. But this is the first time we’ve seen a GoPro mounted inside a car’s tire. The video by the aptly named YouTuber [Warped Perception] shows how he removed the tire from the wheel and mounted the camera, a battery pack, and an LED light in the rim, then remounted the tire. The footage of the tire deforming as it contacts the ground is fascinating but oddly creepy. It sort of reminds us a little of the footage from cameras inside the Saturn V fuel tanks — valuable engineering information to be sure, but forbidden in some way.
Nicely timed to drop on the final day of Windows 7 support, Windows 10 received a fix to an extremely serious flaw in crypt32.dll. This flaw was reported by the good guys at the NSA. (We know it was the good guys, because they reported it rather than used it to spy on us.) It’s really bad. If you’re running Windows 10, go grab the update now. OK, you’re updated? Good, let’s talk about it now.
CVE-2020-0601 pic.twitter.com/8tJsJqvnHj
— Saleem Rashid (@saleemrash1d) January 15, 2020
The flaw applies to X.509 keys that use elliptic curve cryptography. We’ve discussed ECC in the past, but let’s review. Public key encryption is based on the idea that some calculations are very easy to perform and verify, but extremely difficult to calculate the reverse operation.
The historic calculation is multiplying large primes, as it’s unreasonably difficult to factorize that result by a conventional computer. A true quantum computer with enough qubits will theoretically be able to factorize those numbers much quicker than a classical computer, so the crypto community has been searching for a replacement for years. The elliptic curve is the solution that has become the most popular. An agreed-upon curve and initial vector are all that is needed to perform the ECC calculation.
There are potential weaknesses in ECC. One such weakness is that not all curves are created equal. A well constructed curve results in good cryptography, but there are weak curves that result in breakable encryption.
With that foundation laid, the flaw itself is relatively easy to understand. An X.509 certificate can define its own curve. The Windows 10 implementation doesn’t properly check the curve that is specified. A malicious curve is specified that is similar to the expected curve — similar enough that the checks in crypt32 don’t catch it. Continue reading “This Week In Security: Windows 10 Apocalypse, Paypal Problems, And Cablehaunt”
Microsoft seems to have an every-other-version curse. We’re not sure how much of this is confirmation bias, but consider the track record of releases. Windows 95 was game-changing, Windows 98 famously crashed during live demo. Windows 2000 was amazing, Windows ME has been nicknamed the “Mistake Edition”. XP was the workhorse of the world for years and years, and Vista was… well, it was Vista. Windows 7 is the current reigning champion of desktop installs, and Windows 8 was the version that put a touchscreen interface on desktops. The “curse” is probably an example of finding patterns just because we’re looking for them, but the stats do show a large crowd clinging to Windows 7.
Windows 10 made a name for itself by automatically installing itself on Windows 7 and Windows 8 computers, much to the annoyance of many unexpecting “victims” of that free upgrade. Several years have gone by, Windows 10 has gotten better, and support for Windows 7 ends in January. If you’re tied to the Windows ecosystem, it’s time to upgrade to Windows 10. It’s too bad you missed out on the free upgrade to Windows 10, right?
About that… It’s probably an unintended side effect, but all valid Windows 7 and Windows 8 keys are also valid Windows 10 keys. Activation is potentially another issue, but we’ll get to that later.
Continue reading “Updating To Windows 10 For Fun And Profit: Make Those OEM Keys Go Further”
Jibo, the adorable robot made by Jibo, Inc., was getting phased out, but that didn’t stop [Guilherme Martins] from using his robot companion for one last hack.
When he found out that the company would be terminating production of new Jibos and shutting down their servers, he wanted to replace the brain of the robot so that it would continue to live on even after all of its software had become deprecated. By the time the project started, the SDK downloads had already been removed the from developer’s site, so they looked at other options for controlling Jibo.
The first challenge was to not break the form factor in order to disassemble Jibo. They only managed to remove the battery from the bottom, realizing that the glass frame held the brain room. From within the robot, they were able to find the endless rotation joint for the head and the heart of the electronics. Jibo uses a DC motor, encoder, and IR sensor at each of three distinct levels to detect reference points.
They decided to use Phidgets modules to interface with these devices. While the DC motor controller handles 2A and has an encoder port, the Phidgets are able to provide software with the encoder and PID built-in. The 4x Digital Input Module was used for detecting the IR switch and connecting the modules to the computer.
[Martins] decided to use LattePanda, a hackable Windows 10 development board, for the brain of the new Jibo. The board was luckily able to fit inside the compartment for Jibo, but since it requires more power the unit is powered with 12V regulated to 5V in order to have less current passing through the wires. The DC motors, meanwhile, run at 12V and the IR switches and encoders at 5V.
A program developed in Unity3D plays the eye animations, and a C# program interfaces with the Phidgets. The final configuration was to fit Jibo onto a robotic arm to augment its behaviors. We previously wrote about Toppi, the robotic arm artist, that was used as the base for Jibo’s new home.
You can check out the result in the video below.
Continue reading “Long Live Jibo, Our Adorable Robot Companion”
We’re going to go out on a limb here and say that the controller for Steel Battalion on the original Xbox is the most impressive video game peripheral ever made. Designed to make players feel like they were really in the cockpit of a “Vertical Tank”, the controller features dual control sticks, three pedals, a gear selector, and dozens of buttons, switches, and knobs. Unfortunately, outside of playing Steel Battalion and its sequel, there’s not a whole lot you can do with the monstrous control deck.
But now, nearly 20 years after the game released, [Oscar Sebio Cajaraville] has not only developed an open source driver that will allow you to use the infamous mech controller on a modern Windows machine, but he’s part of the team developing a new game that can actually be played with it. Though gamers who are imagining piloting a futuristic combat robot in glorious 4K might be somewhat disappointed to find that this time around, the Steel Battalion controller is being used to operate a piece of construction equipment.
In his blog post, [Oscar] focuses on what it took to develop a modern Windows driver for a decades old controller. It helps that the original Xbox used what was essentially just a rewiring of USB 1.0 for its controllers, so connecting it up didn’t require any special hardware. Unfortunately, while the controller used USB to communicate with the console, it was not USB-HID compliant.
As it turns out, Microsoft actually provides an open source example driver that’s specifically designed to adapt non-HID USB devices into a proper game controller the system will recognize. This gave [Oscar] a perfect starting point, but he still needed to explore the controller’s endpoints and decode the data it was sending over the wire. This involved creating a HID Report Descriptor for the controller, a neat trick to file away mentally if you’ve ever got to talk to an oddball USB device.
In the end, [Oscar] created a driver that allows players to use the Steel Battalion controller in his game, BH Trials. Unfortunately there’s something of a catch, as drivers need to be signed by a trusted certification authority before Windows 10 will install them. As he can’t quite justify the expense of this step, he’s written a second post that details what’s required to turn driver signing off so you can get the device working.
Earlier this year we saw an incredible simulator built around the Steel Battalion controller, were an external “coach” could watch you play and give you tips on surviving the virtual battlefield. But even that project still used the original game; hopefully an open source driver that will get this peripheral working on Microsoft’s latest OS will help spur the development of even more impressive hacks.
Continue reading “Steel Battalion Controller Grows Up And Gets A Job”
Windows 10 — the operating system people love to hate or hate to love. Even if you’re a Linux die-hard, it is a fair bet that your workplace uses it and that you have friends and family members that need help forcing you to use Windows at least some times. If you prefer a command line — or even just find a place where you have to use the command line, you might find the classic Windows shell a bit anemic. Some of that’s the shell’s fault, but some of it is the Windows console which is — sort of — the terminal program that runs various Windows text-based programs. If you have the creator update channel on Windows 10, though, there have been some recent improvements to the console and the Linux system that will eventually trickle down to the mainstream users.
So what’s new? According to Microsoft, they’ve improved the call interface to make the following things work correctly (along with “many others”):
The changes to the console are mostly surrounding escape sequences, colors, and mouse support. The API changes included things like allowing certain non-administrative users to create symlinks. We’ve made X Windows work with Windows (using a third-party X server) and Microsoft acknowledges that it has been done. However, they still don’t support it officially.
