Who Is Responsible For Your Safety?

September 10, 2022 by Elliot Williams 182 Comments

We recently posted a video where some ingenious metal-shop hackers made a simple jig to create zig-zag oil grooves on the inside of a cylinder, and the comment section went wild. What ensued was a flood of complaints that the video displayed unsafe shop practices, from lack of safety glasses to wearing flip-flops while operating a lathe.

Where the comments went off the rails were people asking Hackaday to remove our discussion of the video, because the commenters thought that we were somehow implicitly encouraging open-toed footwear in the presence of machine tools. We certainly weren’t! We wanted you all to see the clever machining hack, and be inspired to build your own. We figure that you’ve got the safety angle covered.

Now don’t get me wrong – there were safety choices made in the video that I would not personally make. But it also wasn’t my shop and I wasn’t operating the machines. And you know who is ultimately responsible for the safety in my basement shop? Me! And guess who is responsible for safety in your shop.

But of course, none of us know everything about every possible hazard. (Heck, I wrote just that a few weeks ago!) So while we’re sympathetic with the “that’s not safe!” crew, we’re not going to censor inspiring hacks just because something done along the way wasn’t done in the way we would do it. Instead, it’s our job, in the comment section as in Real Life™, to help each other out and share our good safety tips when we can.

You’ll see some crazy stuff in videos, and none of it is to be repeated without thinking. And if you do see something dodgy, by all means point it out, and mention how you would do it better. Turn the negative example around for good, rather than calling for its removal. Use the opportunity to help, rather than hide.

But also remember that when the chips are flying toward your personal eyeballs, it’s up to you to have glasses on. We all do potentially hazardous things all the time, and it’s best to be thinking about the risks and their mitigation. So stay safe out there. Keep on learning and keep on hacking!

YouTube Like It’s 1970s France With This Minitel-VCR Mashup

August 27, 2022 by Dan Maloney 10 Comments

When it’s not just sticking fake gears on things and calling it a day, the Steampunk look is pretty cool. Imagining technology in a world stuck with Victorian aesthetics is a neat idea, and one that translates to the look of other time periods — Fallout, anyone?

But what if you try to create a technological aesthetic based on a more recent and less celebrated time? That’s what [ghettobastler] has attempted with this somewhat bizarre Minitel-YouTube-VCR mash-up. Taking inspiration from a webcomic’s take on “Formicapunk,” modern tech based on the aesthetic of the wildly successful French videotex service of the 70s and 80s, the system uses a very cool Minitel 1B terminal and a Raspberry Pi 3.

With the help of a level-shifting circuit, the Mintel and the Pi talk over serial, allowing the terminal to be used as, well, a terminal for the Pi. Videos are downloaded from YouTube by the Pi, which sends the video to the VCR from its composite output, and controls the VCR with an IR LED that emulates the original remote. Come to think of it, just watch the video below — it’s probably easier than trying to describe it.

It’s weird, true, but we love the look of that Minitel terminal. Something about it just screams cyberdeck; if anyone has a spare one of these, get busy and put something together for our Cyberdeck Design Contest.

Continue reading “YouTube Like It’s 1970s France With This Minitel-VCR Mashup” →

A 3D-printed device labelled "BlixTerm" plugged into the back of a Commodore PET

BlixTerm Brings Full-Speed YouTube Video To The Commodore PET

July 1, 2022 by Robin Kearey 13 Comments

If you’ve ever used a home computer from the late 1970s or early 1980s, you’ll no doubt be familiar with the slow speed of their user interfaces. Even listing the contents of a BASIC program from RAM could take several seconds, with the screen updating one line at a time. Video games were completely optimized for speed, but could still handle just a few slowly-moving objects at the same time. Clearly, playing anything resembling full-motion video on hardware from that era would be absolutely impossible – or so you might think.

In fact, [Thorbjörn Jemander] has managed to persuade a Commodore PET to play YouTube videos at a completely reasonable 30 frames per second. He describes the process of designing the “BlixTerm” hardware and software in his video (embedded below), along with lots of useful information on how to push digital systems to their absolute limits.

Naturally, the PET needs a bit of assistance from modern hardware, in this case a Raspberry Pi Zero 2 W hooked up to the “User” expansion port. The Pi connects to YouTube through WiFi and loads the requested video, then downconverts it to a 640×200 grayscale stream and transforms each frame to an 80×25 grid of characters, using those from the PET’s ROM that most closely resemble the pattern needed.

While it took quite some effort to squeeze enough performance out of the Pi to do all of this in real time, the trickiest bit was getting the resulting character stream into the PET’s video memory fast enough. To do this, [Thorbjörn] designed a special interface card with 2 KB of dual-port SRAM, which enabled the Pi to store its video frames as soon as they were ready on one side, and the PET to load them at its own pace from the other side. With just sixteen microseconds available to process each byte, the PET’s CPU can execute only four or five machine code instructions; barely enough to load and store a single character and jump to the next memory address.

The end result, as you can see in the video, is really impressive. Even within the constraints of the Commodore character set, the resulting image is clearly recognizable, while the frame rate seems to defy the hardware’s limitations.

If you’re a Commodore aficionado and wondering what the hell that weird PET 600 model is all about, [Thorbjörn] made a video about that too; it’s a rebadged 8296 aimed at the Swedish market. We’ve actually seen a project to generate live video on the PET before, although at a much lower frame rate. Thanks for the tip, [Keith Olson]!

Continue reading “BlixTerm Brings Full-Speed YouTube Video To The Commodore PET” →

Trenton Computer Festival Makes YouTube Debut

April 11, 2022 by Tom Nardi 9 Comments

While it doesn’t have the recognition of DEF CON or even HOPE, the Trenton Computer Festival (TCF) holds the record for the longest continually running computer convention, dating all the way back to 1976. TCF has offered vendor spaces, a swap meet, workshops, and keynote talks for almost as long as the personal computer has existed. But until now, all that knowledge was only available to those in the Northeast US that were willing to follow the itinerant event as its bounced between venues over the decades.

Or at least, that used to be the case. Like many events, TCF was forced to go virtual during the COVID-19 pandemic, which meant for the first time all the talks were actually recorded. Over the weekend, the organizers announced that all of the talks and demonstrations from 2020 and 2021 had been uploaded to a new YouTube channel, opening them up to a global audience.

Two years might not sound like much, especially given the fact that there’s still 40+ years unaccounted for. But thanks to the incredible amount of content that is squeezed into each year’s event, the TCF YouTube channel is currently playing host to more than 80 presentations that run the gamut from live musical performances to deep-dives on the Apollo Guidance Computer and quantum computing. Whatever you’re interests happen to be, there’s a good chance you’ll find a presentation or two that talks about it in this impressive collection.

When we made our last visit to this legendary convention, our only real complaint was the fact that none of the presentations were being recorded. With over 40 talks crammed into a six hour event, attendees couldn’t hope but to see more than a fraction of what was on the schedule. The nature of going virtual obviously made it much easier to preserve all this incredible content for later viewing, but it’s unclear if the organizers will be able to maintain that momentum in 2023 when it’s expected TCF will once again be in-person.

Python Web Proxy Convinces Sonos To Stream YouTube

February 4, 2022 by Dave Rowntree 22 Comments

[Maurice-Michel Didelot] owns a Sonos smart speaker, and was lamenting the devices inability (or plain unwillingness) to stream music from online sources without using a subscription service. YouTube Music will work, but being a subscription product there is a monthly fee, which sucks since you can listen to plenty of content on YouTube for free. [Maurice] decided that the way forward was to dig into how the Sonos firmware accesses ‘web radio’ sources, and see if that could be leveraged to stream audio from YouTube via some kind of on-the-fly stream conversion process.

What? No MP4 support for web radio? Curses!

So let’s dig in to how [Maurice] chose to approach this. The smart speaker can be configured to add various streaming audio sources, and allows you add custom sources for those. The Sonos firmware supports a variety of audio codecs, besides MP3, but YouTube uses the MP4 format. Sonos won’t handle that from a web radio source, so what was there to do, but make a custom converter?

After a little digging, it was determined that Sonos supports AAC encoding (which is how MP4 encodes audio) but needs it wrapped in an ADTS (Audio Data Transport Stream) container. By building a reverse web-proxy application, in python using Flask, it was straightforward enough to grab the YouTube video ID from the web radio request, forward a request to YouTube using a modified version of pytube tweaked to not download the video, but stream it. Pytube enabled [Maurice] to extract the AAC audio ‘atoms’ from the MP4 container, and then wrap them up with ADTS and forward them onto the Sonos device, which happily thinks it’s just a plain old MP3 radio stream, even if it isn’t.

Sonos doesn’t have the best reputation, let’s say, but you can’t deny that there’s some pretty slick tech going on inside. Here’s a neat hack we covered last year, adding Sonos support to an old school speaker, and a nice teardown of a IKEA Sonos-compatible unit, which uses some neat design hacks.

Thanks [mip] for the tip!

Featured image by Charles Deluvio on Unsplash.

Getting Back That YouTube Dislike Button

January 2, 2022 by Jonathan Bennett 40 Comments

Ah, Google. Very few companies have mastered the art of creating amazing technology and products, and then so effectively abandoning and mishandling them. Case in point, YouTube. Citing “dislike attacks”, which are coordinated down-voting of particular videos, YouTube opted to hide the dislike counter on all videos. It could be pointed out that dislikes still impact the recommendation algorithm the same way they always have, and that creators still see their dislike counts on their own dashboard.

There might be something to the idea that YouTube doesn’t like the notoriety of their Rewind videos leading the dislike count, with 2018 at nearly 20 million. There may even be validity in the theory that corporate partners don’t like visible dislike numbers on their videos. Regardless, YouTube made the change, and people hate it. Their platform, so nothing you can do about it, right?

“Life, uh, uh, finds a way,” to quote my favorite fictional mathematician. Yes, a hacker, one of us, has figured out a workaround. [Dmitrii Selivanov] has put together the “Return YouTube Dislike” browser extension, which does a couple of things. First, it is pulling archived data about videos, taking advantage of the gap in time between the official announcement, and the removal of the dislike API.

But for new videos? That’s where things are harder. If you install the extension, your video likes and dislikes are tracked, and the combined user data is used to extrapolate an estimated dislike count on any given video. [Dimitrii] is also working on a way to allow individual channels to share their stats with the project, to give more official numbers for their videos.

The extension is open source, and the Chrome web store shows over a million users. Linus Tech Tips, along with a bunch of other channels, have covered this, so check out their videos for more.

Continue reading “Getting Back That YouTube Dislike Button” →

This Week In Security: The Apache Fix Miss, Github (Malicious) Actions, And Shooting The Messenger

October 15, 2021 by Jonathan Bennett 10 Comments

Apache 2.4.50 included a fix for CVE-2021-41773. It has since been discovered that this fix was incomplete, and this version is vulnerable to a permutation of the same vulnerability. 2.4.51 is now available, and should properly fix the vulnerability.

The original exploit used .%2e/ as the magic payload, which is using URL encoding to sneak the extra dot symbol through as part of the path. The new workaround uses .%%32%65/. This looks a bit weird, but makes sense when you decode it. URL encoding uses UTF-8, and so %32 decodes to 2, and %65 to e. Familiar? Yep, it’s just the original vulnerability with a second layer of URL encoding. This has the same requirements as the first iteration, cgi-bin has to be enabled for code execution, and require all denied has to be disabled in the configuration files. Continue reading “This Week In Security: The Apache Fix Miss, Github (Malicious) Actions, And Shooting The Messenger” →