< Back to JetLib.com

jetlib.sec

« Expand/Collapse

Recent items

Skip to page: 1 2 3 ... 909

July 20, 2019
19:01
Project Perceives Pondering, Prints Poetry
» ‎ Hack a Day

If poetry is your thing, this hack might convince you that your brain is more advanced than the rest of us poor sots. [Roni Brandini] designed a system that prints lines of poetry when you concentrate. The Mind Poetry project uses an EEG headset from Mattel’s Mindflex toy and pipes your brain’s signals to an Arduino Mega 2560. The system then looks for patterns of brain waves that indicate concentration. As you maintain your concentration, the system continues to print lines of poetry to a small display.

[Roni] follows the standard Mindflex hack process by tapping into the data transmission pin on the Mindflex board. Optoisolation is provided by a PC817 to make sure wall power can’t accidentally bleed over into your own wetware. You could get away with just using batteries, but isolation is still a best practice.

The Arduino Brain Library is used to decipher the signal. The Mindflex picks up brain waves from roughly 1 Hz to 50 Hz, which is enough bandwidth to approximately determine mental state. For example, Theta waves are in the 4 Hz to 7 Hz range and can indicate a relaxed, meditative state. Low Beta waves range from 13 Hz to 17 Hz and indicate an alert, focused mental state. The Mindflex system is also generous in that it provides derived meditation and attention scores, ranging from 0 to 100.

It’s difficult to get a high level of precision with this sensor and sampling system, so the code uses [Roni]’s custom recipe of meditation score, attention score, and Low Beta value. He finds it most effective to trigger actions based on a relationship of these scores instead of focusing on the readings themselves. For example, an uptick in both Low Beta waves and the attention score indicate concentration.

If the wearer is concentrating, the system prints lines of poetry to the display and charts the three values. As an added gamification, it’ll tell you how many times you broke concentration before you completed the poem. One can imagine a game that tries to break concentration by printing other phrases or even activating an array of mechanical distractions.

If poetry isn’t your thing, you’re in luck. The “Mind Poetry” project also makes some headway (pun intended) with processing the EEG headset’s signals and triggering actions This means you don’t have to be into the poetry scene to reap the benefits. You now have the bones of a hack that lets you control things with your brain muscles and without your muscle muscles.

For inspiration, check out some other Mindflex hacks that let you order drinks with your mind (recommended), shock the heck out of people (not recommended), or even move around your skirt (uh… you do you?).

Tags: arduino hacks
16:01
Breathing LED Done with Raw Logic Synthesized from a Verilog Design
» ‎ Hack a Day

Breathing LEDs are an attractive adornment on many electronic devices. These days they’re typically controlled by software but of course there were fading effects back in the days of analog too. [Pepijn de Vos] mixes a little of the new and the old by building a hardware-based fader from a Verilog design.

Rather than using a microcontroller and software, [Pepijn] wrote the logic required to make the LED “breathe” in the hardware description language, Verilog. You may be familiar with this for FPGAs, but using it to plan out a build with logic chips is just as apt a use. The Verilog was synthesized into a circuit using 74-series logic chips, with the help of work by [Dan Ravensloft] who has made a library for the Yosys Open Synthesis Suite. With the addition of a basic clock circuit, the LED is made to breathe and the rate can be controlled by changing the clock speed.

It’s a fun way to experiment with both Verilog and old-school logic, albeit one that may not scale well. An interesting side note from the Twitter thread, [Dan] estimates that with current settings the PicoRV32 CPU would require over 2000 chips to build. Regardless, it’s an interesting tool and one that likely has further scope for experimentation.

First patented by Apple way back in 2002, the breathing LED has been a popular project for those learning electronics. We’ve even seen it on motorbikes. Video after the break.

[Thanks to Morris for the tip!]

Tags: led hacks
13:01
A Multi-Layered Spin On Persistence Of Vision
» ‎ Hack a Day

By taking advantage of persistence in human vision, we can use modest bits of hardware to create an illusion of a far larger display. We’ve featured many POV projects here, but they are almost always an exploration in two dimensions. [Jamal-Ra-Davis] extends that into the third dimension with his Volumetric POV Display.

Having already built a 6x6x6 LED cube, [Jamal] wanted to make it bigger, but was not a fan of the amount of work it would take to grow the size of a three-dimensional array. To sidestep the exponential increase in effort required, he switched to using persistence of vision by spinning the slight source and thereby multiplying its effect.

The current version has six arms stacked vertically, each of which presents eight individually addressable APA102 LEDs. When spinning, those 48 LEDs create a 3D display with an effective resolution of 60x8x6.

We saw an earlier iteration of this project a little over a year ago at Bay Area Maker Faire 2018. (A demo video from that evening can be found below.) It was set aside for a while but has now returned to active development as an entry to Hackaday Prize 2019. [Jamal-Ra-Davis] would like to evolve his prototype into something that can be sold as a kit, and all information has been made public so others can build upon this work.

We’ve seen two-dimensional spinning POV LED display in a toy top, and we’ve also seen some POV projects taking steps into the third dimension. We like where this trend is going.

The HackadayPrize2019 is Sponsored by:

Tags: led hacks
10:00
Create A Low-Cost, High-Accuracy LCR Meter With An STM32 MCU
» ‎ Hack a Day

Having a good LCR meter was something which [Adil] had wanted for his personal lab, so as any good university student (and former Hackaday contributor) does, he ended up building his own. Using a Nucleo-F446RE board for the MCU side and a custom PCB for the side that does the actual measuring, he created a meter that reportedly comes pretty close to commercial meters, and for the low price of £55.

Running through some of the theory behind the design as well some design choices, the resulting product is then presented. The choice to not using a standard current shunt, but instead a transimpedance amplifier (TIA) is explained as well. Unfortunately there are no schematics or source code, and the text is somewhat unclear on some points, failing to explain some acronyms that’d make it hard for someone who is not active in this field to understand the full design.

We hope that [Adil] can address those points and provide design files and source code, as it does look like a very interesting project!

Tags: microcontrollers
7:00
Designing Compact Gasoline Generator Prototype for Drone Use
» ‎ Hack a Day

Lithium batteries and brushless motors helped make multirotor drones possible, but batteries only last so long. Liquid fuels have far greater energy densities, but have not been widely applied in these roles. [Tech Ingredients] has been experimenting with a compact gasoline-fueled generator, with the aim to extend drone flight times well beyond what is currently possible with batteries (Youtube link, embedded below).

The build began with a single-cylinder, four stroke engine. However, torque spikes and vibration made things difficult. After some iteration, the design settled on employing two single-cylinder two stroke engines, fitted with a timing belt to keep them 180 degrees out of phase. In combination with a pair of balanced flywheels, this keeps vibration to a minimum. Brushless motors are used as generators, combined with rectifier diodes and capacitors to smooth the voltage output. The generator is intended to be used in parallel with a lithium battery pack in order to ensure the drone always has power available, even in the event of a temporary malfunction.

This is a build with plenty of promise, and we can’t wait to see what kind of flight time can be achieved once the system is finished and flight ready. We’ve seen others experimenting with hybrid drones, too.

Tags: drone hacks
4:00
The Case Of The Vintage Computer, The Blown Fuse, And The Diode
» ‎ Hack a Day

If you are the operator of a vintage computer, probably the only one of its type remaining in service, probably the worst thing you can hear is a loud pop followed by your machine abruptly powering down. That’s what happened to the Elliott 803B in the UK’s National Museum Of Computing, and its maintainer [Peter Onion] has written an account of his getting it back online.

The Elliott is a large machine from the early 1960s, and because mains supplies in those days could be unreliable it has a rudimentary UPS to keep it going during a brownout. A hefty Ni-Cd battery is permanently hooked up to a charger that also serves as the power supply for the machine, ensuring that it can continue to operate for a short while as the voltage drops. A spate of fuses had blown in this power supply, so we’re taken through the process of fault-finding. Eventually the failure is found in a rectifier diode, the closest modern equivalent is substituted, and after testing the machine comes back to life.

We’re used to reading these stories from the other side of the Atlantic, so we welcome TNMOC saying that this is the first of a series of technical posts on their work. We visited the museum back in 2016, and also featured its famous recreated Colossus.

Tags: computer hacks
1:00
A Microwave Kiln, From Scratch
» ‎ Hack a Day

We are normally told that microwave ovens are strictly for food only, and that anything else will cause all sorts of bad things to come our way. There can be few readers who haven’t at some time seen the shower of sparks when an inadvertent metallic object finds its way onto the turntable.

A particularly useful non-food application for a microwave oven comes in the form of the small kilns sold for glass fusing. These are ceramic cylinders coated internally with silicon carbide, and [ShakeTheFuture] shows us how to make your own.

Key to the process is ceramic fibre insulation, which is bonded both to itself and to the fused silicon carbide grit by a cured solution of waterglass, sodium silicate. The result can easily reach the required temperature for fusing glass, but also has an application in burning out surplus wax or PLA from a plaster mould. It’s particularly interesting to see the technique with the waterglass in action, and you can see a run-down of the whole thing in the video below the break.

Tags: Hardware
July 19, 2019
22:00
Use A Digital Key To Deter Lockpicking
» ‎ Hack a Day

Spending an hour or two around any consumer-level padlock or house deadbolt lock with a simple lockpicking kit will typically instil a good amount of panic and concern about security. While it’s true that any lock can be defeated, it’s almost comically easy to pick basic locks like this. So, if you’re looking for a level of security that can’t be defeated in two minutes with a tiny piece of metal, you might want to try something a little more advanced.

This project stemmed from an idea to use a YubiKey, a USB hardware token typically used for two-factor authentication, for physical locks instead. The prototype was built around an Arduino UNO, and all of the code and build instructions are available on the project’s site. The creator, [rprinz08], does not have one built inside of a secure enclosure so that would remain an exercise for the reader, but the proof-of-concept is interesting and certainly useful.

While digital keys like this can have their own set of problems (as all locks do), this would be a great solution for anyone needing to lock up anything where physical keys are a liability or a nuisance, where logging is important, or where many people need access to the same lock. The open source code and well-known platform make it easy for anyone to build, too.

Tags: security hacks
19:00
Another Take On Harvesting Energy While Walking
» ‎ Hack a Day

Harvesting energy from the human body may sound scary, but fortunately a Matrix-style setup exists only as a cinematic fiction. Instead a typical path lies in external contraptions that use the body’s natural motions to drive a small generator, a bit of flexible piezo material, and so on. A popular target for harvesting the body’s kinetic energy is the knee joint, as this has a comparatively large range of motion and is fairly easy to use.

Thus a team from Hong Kong university opted to pick this part of the human anatomy for their experiment as well. While at first glance their results do not seem particularly impressive, with up to 1.6 mW of power generated, a look at their published results in the Applied Physics Letters journal showed their reasoning behind this setup. While one generator-based setup referenced produces on average 4.8 Watt of power, the device itself weighs 1.6 kg and increases the rate at which the person wearing it burns calories by a significant amount.

The goal for this device was to have a way to generate significant amounts of power without having the user exerting themselves more than usual. This led to them using flexible piezoelectric composites, resulting in a weight of just 307 grams, based upon two M8514-P2 pieces (Smart Materials Corp. manufacturer). Tests with volunteers on a treadmill show that users do not burn more calories than without.

As with all piezo materials, they can flex a bit, but not too much, so a lot of time and effort went into calculating the optimal bend radius in different usage scenarios. While around 1 mW of power is not massive, it is a reliable source of power for individuals who do any amount of walking during the day and doesn’t require any effort beyond strapping the device onto one’s legs.

Tags: science
16:00
Custom Bases Make LEGO Spacecraft Even Cooler
» ‎ Hack a Day

If you’re reading Hackaday, we’re willing to bet that you either own the LEGO Saturn V and Lunar Module models, or at the very least know somebody who does. Even if you thought you’d finally outgrown playing with little plastic bricks (a critical mistake, but one we’ll ignore for now), these two kits just have an undeniable appeal to them. You might never get a chance to work for NASA, but you can at least point to the Saturn V rocket hanging on your wall and say you built it yourself.

[Ben Brooks] thought these fantastic models deserved equally impressive stands, so he built “exhaust plumes” that both craft could proudly perch on. With the addition of some RGB LEDs and a Particle Photon to drive them, he added incredible lighting effects that really bring the display to life. There are also sound effects provided by an Adafruit Audio FX board, and for the Lander, an LCD display that mimics the Apollo Guidance Computer DSKY that astronauts used to safely navigate to the Moon and back.

In his write-up on Hackaday.io, [Ben] makes it clear that he was inspired by previous projects that added an illuminated column of smoke under the LEGO Saturn V, but we think his additions are more than worthy of praise. Playing real audio from the Apollo missions that’s synchronized to the light show honestly makes for a better display than we’ve seen in some museums, and he even rigged up a wireless link so that his neighbor’s kids can trigger a “launch” that they can watch from their window.

For the Lunar Module, he 3D printed an enclosure for the Photon and Adafruit quad alphanumeric display that stands in for the DSKY. There’s even lighted indicators for the 1201/1202 program alarms that popped up as Neil Armstrong and Buzz Aldrin descended to the lunar surface 50 years ago.

While many of us aren’t old enough to have our own first hand memories of the Moon landing, projects like this prove that the incredible accomplishments of the Apollo program never fail to inspire. Who knows? Those kids that are watching [Ben]’s Saturn V from next door might one day get to make the trip themselves.

Tags: led hacks
13:00
DIY Scintillation Detector Is Mighty Sensitive
» ‎ Hack a Day

Geiger counters are a popular hacker project, and may yet prove useful if and when the nuclear apocalypse comes to pass. They’re not the only technology out there for detecting radiation however. Scintillation detectors are an alternative method of getting the job done, and [Alex Lungu] has built one of his own.

Scintillation detectors have several benefits over the more common Geiger-Muller counter. They work by employing crystals which emit light, or scintillate, in the presence of ionizing radiation. This light is then passed to a photomultiplier tube, which emits a cascade of electrons in response. This signal represents the level of radioactivity detected. They can be much more sensitive to small amounts of radiation, and are more sensitive to gamma radiation than Geiger-Muller tubes. However, they’re typically considered harder to use and more expensive to build.

[Alex]’s build uses a 2-inch sodium iodide scintillator, in combination with a cheap photomultiplier tube he scored at a flea market for a song. [Jim Williams]’s High Voltage, Low Noise power supply is used to run the tube, and it’s all wrapped up in a tidy 3D printed enclosure. Output is via BNC connectors on the rear of the device.

Testing shows that the design works, and is significantly more sensitive than [Alex]’s Geiger-Muller counter, as expected. If you’re interested in measuring small amounts of radiation accurately, this could be the build for you. We’ve seen this technology used to do gamma ray spectroscopy too.

The HackadayPrize2019 is Sponsored by:

Tags: science
11:31
Hackaday Prize Mentor Session: Beau Ambur
» ‎ Hack a Day

Beau Ambur can often be found hosting hardware events and offering help all around the Bay Area. Now he’s turned it into a career and travels the west coast helping hackers and creators effectively leverage Kickstarter’s platform. Beau’s mentor session covers everything from, “is this project a good fit for venture capital?” to, “is open source a good fit for my project?”.

For this year’s Hackaday Prize we’ve found experts in a wide range of fields so you can take your entries to the next level regardless of the stage the project is in. The sessions are on a first come basis so sign up now for a chance to get some valuable feedback on your entry.
Your Robot Language Coach
The first project is a Personal English Trainer by the lonely programmer. As a student he noticed a need for a more interactive and portable language learning aid. Solutions do exist on the market but they are along the lines of a pocket dictionary, instructional phone app, or a full on translator. These break the flow of thought and conversation. The lonely programmer envisioned something that you can conversationally ask for help as you’re using a new language.

As many have discovered, the best way to see if there’s a need for something is to build a minimum viable product (MVP). The snips.ai platform offered the perfect foundation to quickly test out the idea. It’s working on a few words and he wants to get it ready for more people to play with the idea. The majority of the lonely programmer’s questions centered around making the project interesting for other hackers so that it could one day turn into a product.
Bolt-On Bike Assist
Rob and Shushanik are developing a project called BikeOn. It bolts to any bicycle and converts it to an electric assist bike without tools or replacing any components. BikeOn has already won some accolades such as Editors Choice at the last 2019 Makerfaire Bay Area. Rob had a few questions on how to transition a project from the proof of concept stage to the product stage. The discussion went over using open source as a tool for product promotion as well as getting funding for taking a hardware product to market.

He also wanted to know if there was anything the team could do to have a better shot at winning the prize. There were a few good tips such as directly focusing on the five categories the judges would be looking at: Concept, Design, Production, Benchmark, and Communication. It is also important to cover the development journey. Why did you make the choices you made when designing the project?
No-Spill Trash Can Concept
Rounding out this mentor session, Jeannie and her team of highschool students demonstrate SEAL. In the area around the Granada Hills Charter High School there are winds mighty enough to blow over full trashcans. This trash travels to the ocean and disrupts local ecosystems. The team is working on a device which can detect a tipping trashcan and keep the lid from opening.

Prototyping started with Arduinos, but they’ve already escalated to designing their own PCBs. Their hope is to produce a run of fifty devices and try them out with a local commercial partner. Beau recommended they look into the Micropython ecosystem. Not only would the students get the advantage of using the STM32 chips in their board layouts (reducing the number of support components they would need), micropython would make it easier for students to jump in and help rather than having to learn the nuances of C first.

The Hackaday Prize mentoring sessions continue through the summer so don’t forget to sign up and check out the list of mentors who are here to share their knowledge and experience.

The HackadayPrize2019 is Sponsored by:

Tags: hackaday Columns

10:51
Microsoft Windows Task Scheduler Local Privilege Escalation
» ‎ Packet Storm Security Exploits

Microsoft Windows Task Scheduler suffers from a local privilege escalation vulnerability. The Windows MMC auto-elevates members of the 'administrators' group via the GUI and MMC snap-ins (via mmc.exe) automatically elevate without prompting UAC potentially leading to unintentional elevation of privilege.
Tags:

10:51
Microsoft Windows Task Scheduler Local Privilege Escalation
» ‎ Packet Storm Security Recent Files

Microsoft Windows Task Scheduler suffers from a local privilege escalation vulnerability. The Windows MMC auto-elevates members of the 'administrators' group via the GUI and MMC snap-ins (via mmc.exe) automatically elevate without prompting UAC potentially leading to unintentional elevation of privilege.
Tags:

10:51
Microsoft Windows Task Scheduler Local Privilege Escalation
» ‎ Packet Storm Security Misc. Files

Microsoft Windows Task Scheduler suffers from a local privilege escalation vulnerability. The Windows MMC auto-elevates members of the 'administrators' group via the GUI and MMC snap-ins (via mmc.exe) automatically elevate without prompting UAC potentially leading to unintentional elevation of privilege.
Tags:

10:46
MAPLE Computer WBT SNMP Administrator 2.0.195.15 Buffer Overflow
» ‎ Packet Storm Security Exploits

MAPLE Computer WBT SNMP Administrator version 2.0.195.15 remote buffer overflow exploit with egghunter.
Tags:

10:46
MAPLE Computer WBT SNMP Administrator 2.0.195.15 Buffer Overflow
» ‎ Packet Storm Security Recent Files

MAPLE Computer WBT SNMP Administrator version 2.0.195.15 remote buffer overflow exploit with egghunter.
Tags:

10:46
MAPLE Computer WBT SNMP Administrator 2.0.195.15 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

MAPLE Computer WBT SNMP Administrator version 2.0.195.15 remote buffer overflow exploit with egghunter.
Tags:

10:45
fuelCMS 1.4.1 Remote Code Execution
» ‎ Packet Storm Security Exploits

fuelCMS versions 1.4.1 and below suffer from a remote code execution vulnerability.
Tags:

10:45
fuelCMS 1.4.1 Remote Code Execution
» ‎ Packet Storm Security Recent Files

fuelCMS versions 1.4.1 and below suffer from a remote code execution vulnerability.
Tags:

10:45
fuelCMS 1.4.1 Remote Code Execution
» ‎ Packet Storm Security Misc. Files

fuelCMS versions 1.4.1 and below suffer from a remote code execution vulnerability.
Tags:

10:44
Web Ofisi E-Ticaret 3 SQL Injection
» ‎ Packet Storm Security Exploits

Web Ofisi E-Ticaret version 3 suffers from a remote SQL injection vulnerability.
Tags:

10:44
Web Ofisi E-Ticaret 3 SQL Injection
» ‎ Packet Storm Security Recent Files

Web Ofisi E-Ticaret version 3 suffers from a remote SQL injection vulnerability.
Tags:

10:44
Web Ofisi E-Ticaret 3 SQL Injection
» ‎ Packet Storm Security Misc. Files

Web Ofisi E-Ticaret version 3 suffers from a remote SQL injection vulnerability.
Tags:

10:44
Web Ofisi Emlak 3 SQL Injection
» ‎ Packet Storm Security Exploits

Web Ofisi Emlak version 3 suffers from a remote SQL injection vulnerability.
Tags:

10:44
Web Ofisi Emlak 3 SQL Injection
» ‎ Packet Storm Security Recent Files

Web Ofisi Emlak version 3 suffers from a remote SQL injection vulnerability.
Tags:

10:44
Web Ofisi Emlak 3 SQL Injection
» ‎ Packet Storm Security Misc. Files

Web Ofisi Emlak version 3 suffers from a remote SQL injection vulnerability.
Tags:

10:43
Web Ofisi Emlak 2 SQL Injection
» ‎ Packet Storm Security Exploits

Web Ofisi Emlak version 2 suffers from a remote SQL injection vulnerability.
Tags:

10:43
Web Ofisi Emlak 2 SQL Injection
» ‎ Packet Storm Security Recent Files

Web Ofisi Emlak version 2 suffers from a remote SQL injection vulnerability.
Tags:

10:43
Web Ofisi Emlak 2 SQL Injection
» ‎ Packet Storm Security Misc. Files

Web Ofisi Emlak version 2 suffers from a remote SQL injection vulnerability.
Tags:

10:42
Web Ofisi Platinum E-Ticaret 5 SQL Injection
» ‎ Packet Storm Security Exploits

Web Ofisi Platinum E-Ticaret version 5 suffers from a remote SQL injection vulnerability.
Tags:

10:42
Web Ofisi Platinum E-Ticaret 5 SQL Injection
» ‎ Packet Storm Security Recent Files

Web Ofisi Platinum E-Ticaret version 5 suffers from a remote SQL injection vulnerability.
Tags:

10:42
Web Ofisi Platinum E-Ticaret 5 SQL Injection
» ‎ Packet Storm Security Misc. Files

Web Ofisi Platinum E-Ticaret version 5 suffers from a remote SQL injection vulnerability.
Tags:

10:41
REDCap Cross Site Scripting
» ‎ Packet Storm Security Exploits

REDCap versions prior to 9.1.2 suffer from a cross site scripting vulnerability.
Tags:

10:41
REDCap Cross Site Scripting
» ‎ Packet Storm Security Recent Files

REDCap versions prior to 9.1.2 suffer from a cross site scripting vulnerability.
Tags:

10:41
REDCap Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

REDCap versions prior to 9.1.2 suffer from a cross site scripting vulnerability.
Tags:

10:40
Web Ofisi Firma 13 SQL Injection
» ‎ Packet Storm Security Exploits

Web Ofisi Firma version 13 suffers from a remote SQL injection vulnerability.
Tags:

10:40
Web Ofisi Firma 13 SQL Injection
» ‎ Packet Storm Security Recent Files

Web Ofisi Firma version 13 suffers from a remote SQL injection vulnerability.
Tags:

10:40
Web Ofisi Firma 13 SQL Injection
» ‎ Packet Storm Security Misc. Files

Web Ofisi Firma version 13 suffers from a remote SQL injection vulnerability.
Tags:

10:40
Web Ofisi Rent A Car 3 SQL Injection
» ‎ Packet Storm Security Exploits

Web Ofisi Rent a Car version 3 suffers from a remote SQL injection vulnerability.
Tags:

10:40
Web Ofisi Rent A Car 3 SQL Injection
» ‎ Packet Storm Security Recent Files

Web Ofisi Rent a Car version 3 suffers from a remote SQL injection vulnerability.
Tags:

10:40
Web Ofisi Rent A Car 3 SQL Injection
» ‎ Packet Storm Security Misc. Files

Web Ofisi Rent a Car version 3 suffers from a remote SQL injection vulnerability.
Tags:

10:37
Web Ofisi Firma Rehberi 1 SQL Injection
» ‎ Packet Storm Security Exploits

Web Ofisi Firma Rehberi version 1 suffers from a remote SQL injection vulnerability.
Tags:

10:37
Web Ofisi Firma Rehberi 1 SQL Injection
» ‎ Packet Storm Security Recent Files

Web Ofisi Firma Rehberi version 1 suffers from a remote SQL injection vulnerability.
Tags:

10:37
Web Ofisi Firma Rehberi 1 SQL Injection
» ‎ Packet Storm Security Misc. Files

Web Ofisi Firma Rehberi version 1 suffers from a remote SQL injection vulnerability.
Tags:

10:35
Fed Sees Crypto Currencies Shifting U.S. Financial System
» ‎ Packet Storm Security Headlines

Fed Sees Crypto Currencies Shifting U.S. Financial System
Tags: headlinegovernmentprivacybankusacybercrimefraudcryptography
10:35
Microsoft Opens Dynamics 365 Bug Bounty With $20k Top Prize
» ‎ Packet Storm Security Headlines

Microsoft Opens Dynamics 365 Bug Bounty With $20k Top Prize
Tags: headlinehackermicrosoftflaw
10:35
Hackers Publish List Of Phished Discord Credentials
» ‎ Packet Storm Security Headlines

Hackers Publish List Of Phished Discord Credentials
Tags: headlinehackerdata lossfraudpasswordphish
10:35
Oakland Follows San Francisco's Lead In Banning Facial Recognition Tech
» ‎ Packet Storm Security Headlines

Oakland Follows San Francisco's Lead In Banning Facial Recognition Tech
Tags: headlinegovernmentprivacyusaspyware

10:26
Ubuntu Security Notice USN-4066-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4066-1 - It was discovered that libmspack incorrectly handled certain CHM files. A remote attacker could possibly use this issue to access sensitive information.
Tags:

10:26
Ubuntu Security Notice USN-4066-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4066-1 - It was discovered that libmspack incorrectly handled certain CHM files. A remote attacker could possibly use this issue to access sensitive information.
Tags:

10:26
Ubuntu Security Notice USN-4066-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4066-1 - It was discovered that libmspack incorrectly handled certain CHM files. A remote attacker could possibly use this issue to access sensitive information.
Tags:

10:01
Inside the Mysterious Global Navigation Outage You Probably Didn’t Notice
» ‎ Hack a Day

The entire world has come to depend on satellite navigation systems in the forty or so years since the first Global Positioning System satellites took to orbit. Modern economies have been built on the presumption that people and assets can be located to within a meter or better anywhere on, above, or even slightly under the surface of the planet. For years, GPS was the only way to do that, but billions have been sunk into fielding other global navigation systems, achieving a measure of independence from GPS and to putting in place some badly needed redundancy in case of outages, like that suffered by the European Union’s Galileo system recently.

The problem with Galileo, the high-accuracy public access location system that’s optimized for higher latitudes, seems to be resolved as of this writing. The EU has been tight-lipped about the outage, however, leaving investigation into its root cause to a few clever hackers armed with SDRs and comprehensive knowledge of exactly how a constellation of satellites can use the principles of both general and special relativity to point you to your nearest Starbucks.

Navigation and Then Some
The idea behind Galileo goes back to the late 1990s, when the powers that be within the European Union decided that a global navigation satellite system (GNSS) run primarily for the benefit of civilians and without the potential for disruption by foreign powers would be a smart idea. The basic structure of the system combined the space and ground elements needed to provide positional precision of 1 meter free to all users and without fear of military preemption short of large-scale conflict. Customers in need of high-resolution positioning would pay to have access to a 1-cm precision encrypted signal, making Galileo the most precise native GNSS by far. Other features were to include a search and rescue capability, wherein the satellite constellation listens for signals from emergency transponders from vessels at sea or backcountry hikers, dispatches emergency responders, and transmits an acknowledgment to the sender.
The Galileo constellation. Note the inclinations of the orbits, which are configured to ensure optimal coverage at higher latitudes. By Lukas Rohr CC BY-SA 3.0
The Galileo project was officially launched in 2003 but suffered from years of funding issues, squabbling with competitors like the USA over frequency sharing, and general governance woes. These issues were eventually resolved enough that two experimental satellites were launched, one in 2005 and another in 2008. These served as testing and validation platforms, and once all the boxes were checked, more satellites joined them, ground stations were built, and the infrastructure needed to run a modern GNSS was assembled.

By the end of 2016, Galileo reached its Early Operational Capability (EOC) phase, with about 18 of the planned constellation of 30 or so satellites aloft. The EOC was sort of a beta test, with early adopters offered only a weak signal. Even though more satellites have been launched — there are now 26 birds in orbit — and the signal strength has been increased, Galileo has not yet progressed to the Full Operational Capability stage, or FOC. That transition is planned for sometime in 2019.
It’s About Time A Galileo Full Operational Capability (FOC) satellite. About 19 m span across the solar arrays. Source: The indispensible Gunter’s Space Page
During its EOC phase, Galileo has suffered from more than one serious problem. In early 2017, problems with some of the high-precision clocks aboard four of the satellites surfaced, with some of the birds suffering an outage in both the rubidium atomic clock and the hydrogen maser time standard. This caused an understandable stir in that the clocks were supposed to have a 10-year on-orbit lifespan. The clock issues did not result in any service outages or degradations, since every satellite carries three backup clocks, but it did cause a shakeup and a review of yet-to-be-launched hardware.

While Galileo emerged from the clock issue relatively unscathed, it would not be so lucky the next time. On July 11 of this year, the Galileo system suffered a major outage, with 24 of the 26 satellites listed as “Not available” for reasons unknown, with the other two listed as “Testing”. While the GSA, the EU agency responsible for the Galileo system, at first issued advisories to customers that the system was to be used with caution, and later that the system was not to be used at all, they were not particularly forthcoming as to the root cause of the outage for at least four days following its start. Even now that they have announced that service has been restored, there has been no explanation of the issue beyond it being a “technical incident originated by an equipment malfunction in the Galileo ground infrastructure.”

With effective silence apparently being the policy of the GSA, it’s up to hackers to try to determine what happened with Galileo. Knowing that any GNSS is basically a set of really precise orbiting clocks that need to be carefully synchronized and updated, and with the admission by the GSA that the problem originated in the ground segment, it seems logical to go looking for the problem there.
Stuck in the Past
That’s what Daniel Estévez (EA4GPZ), a radio amateur and a GNSS engineer, did with a Lime SDR receiver and GNSS-SDR, an open-source platform for looking at data from navigation satellites. In an excellent write-up, Daniel details what he found. During the outage, the signals coming from the satellites were fine in terms of signal strength and modulation, and basic data, like the week number that has been the source of problems with the GPS system before, were all as expected. But in reviewing the ephemeris, or description of the orbit of each satellite, he discovered something strange: the satellites seemed to have the wrong idea of where they were in space.

All satellite orbits vary slightly over time, and since the position the satellite is in when it transmits a time signal is used by GNSS receivers to determine location, the ephemeris needs to be precisely known. By what Daniel was seeing, the ephemerides for the Galileo constellation hadn’t been updated since July 11 — pretty much when the degradation started. With the satellites unaware of where they were, the location solutions calculated by receivers got worse and worse as they drifted further and further from their positions on the 11th.

Daniel’s data agrees with what an anonymous source within Galileo who cited “a problem of the PTF [Precise Timing Facility] in Italy” as the root cause of the outage. The PTF is the source of ephemerides for the whole constellation, and if there was an issue there it would certainly manifest itself in just the way that we saw. There has been no official confirmation of this from GSA, but given that they’ve kept their cards close to the vest all during this last week, don’t hold your breath waiting for more information.

In the end, casual Galileo users probably never even noticed the outage, since most phones that support Galileo also support GPS and GLONASS. As long as everyone on the planet is getting along, each system serves as a backup for the others, which in cases like this failure is a welcome level of redundancy. And as GSA officials are quick to point out, Galileo is still officially in EOC testing, so things like this are expected to happen. Still, a little more transparency might be in order in the future, so that hackers like Daniel and the others who probed the mysteries of this outage can turn their talents to better pursuits.

[Featured images: European Global Satellite Navigation Systems Agency]

Tags: current Events
9:01
Hackaday Podcast 027: Confusingly USB-C, Glowey Displays, Logically VGA, Hackers Who Changed Gaming
» ‎ Hack a Day
Hackaday Editors Elliot Williams and Mike Szczys dive into the most interesting hacks of the week. Confused by USB-C? So are we, and so is the Raspberry Pi 4. Learning VGA is a lot easier when abstract concepts are unpacked onto a huge breadboard using logic chips and an EEPROM. Adding vision to a prosthetic hand makes a lot of sense when you start to dig into possibilities of this Hackaday Prize entry. And Elliot gets nostalgic about Counter-Strike, the game that is a hack of Half-Life, grew to eclipse a lot of other shooters, and is now 20 years old.

Take a look at the links below if you want to follow along, and as always tell us what you think about this episode in the comments!

Direct download (52 MB)
Places to follow Hackaday podcasts:
- Google Play
- iTunes
- Soundcloud
- Spotify
- Stitcher
- RSS
Episode 027 Show Notes: New This Week:
- The European Galileo satellite positioning was down last weekend. The culprit is likely to be a single point of failure on the clock synchronization system. Everyone just used GPS for a few days.
  - Europe’s satellite navigation system Galileo stops working completely after ‘technical incident’
- Alan Turing To Be The Face Of Fifty Quid
- You can put custom ROMs on Amazon tablets now:
  - LineageOS 14.1 Fire HD8 2018
  - LineageOS 12.1 Fire 7
Interesting Hacks of the Week:
- Lessons Learned From An Art Installation Build
- Pushing Pixels To A Display With VGA Without A PC
  - Low Res Video Card Is Still Amazing Since It’s Made Out Of Logic Chips
- Photochromic Screen Makes For An Interesting Clock
  - Great servo clock hack from the same person: A Word Clock, The Hard Way
  - Using IR to “erase” phosphorescent displays, explained in 1911: 1911ApJ….34..173I Page 173
  - Record Player Display Sans POV
  - Persistence Of Phosphorescence Clock Displays YouTube Stats Too
- A Power Bank For Soldering On The Go
- 3D Printed Prosthesis Reads Your Mind, Sees With Its Hand
- Jigsaw Motor Uses PCB Coils For Radial Flux
Quick Hacks:
- Elliot’s Picks:
- Mike’s Picks:
Can’t-Miss Articles:
- Counter-Strike At 20: Two Hackers Upend The Gaming Industry
- Exploring The Raspberry Pi 4 USB-C Issue In-Depth
Tags: Podcasts
8:30
Making Flexible Overmolded Parts With Urethane Resin
» ‎ Hack a Day

Resin casting videos have taken social media by storm of late. Everything from inlaid driftwood tables to fancy pens are getting the treatment. Pouring some nicely colored epoxy is straightforward enough, but it’s just the tip of the iceberg. [Eric Strebel] has some serious skills in resin casting, and has lately been working on some overmolded electroniics with urethane resin (Youtube link, embedded below).

The build starts with the creation of a silicone mold, using a 3D printed SLA master. The part in question is for a prototype medical device, and requires overmolding, in which a flexible PCB is covered in flexible urethane. Wooden pins are used to allow the flexible PCB to clip into the mold for accurate location, and a small shield is placed over the metal contacts of the PCB to avoid them being covered in silicone.

Initial tests are done with an empty mold to determine the correct material to use, before the actual parts are ready to produce. [Eric] takes great care with the final production, as any mistakes would waste the expensive prototype PCBs provided to him by the client. With the electronics placed in the mold, the resin is degassed and carefully injected, using a syringe to minimise the chance of any air bubbles. With some delicate cleanup by hand, the completed parts are ready for delivery.

It’s a process that covers the basics of overmolding for a prototype part, as well as showing off [Eric]’s skill at producing quality prototype parts. We’ve seen [Eric]’s work before, too – like his discussion of the value of cardboard in product design. Video after the break.

Tags: how-to
7:00
This Week in Security: Ransomware Keys, iOS Woes, and more
» ‎ Hack a Day

Remember the end of GandCrab we talked about a couple weeks back? A new wrinkle to this story is the news that a coalition of law enforcement agencies and security researchers have released a decrypter and the master decryption keys for that ransomware. It’s theorized that researchers were able to breach the command and control servers where the master keys were stored. It’s yet to be known whether this breach was the cause for the retirement, or was a result of it.
Apple’s Secure Enclave is Broken?
A Youtube video and Reddit thread show a way to bypass the iPhone’s TouchID and FaceID, allowing anyone to access the list of saved passwords. The technique for breaking into that data? Tap the menu option repeatedly, and cancel the security prompts. Given enough rapid tries, the OS gives up on the validation and simply shows the passwords!

The iPhone has an onboard security chip, the Secure Enclave, that is designed to make this sort of problem nearly impossible. The design specification dictates that data like passwords are encrypted, and the only way to decrypt is to use the Enclave. The purpose is to mitigate the impact of programming bugs like this one. It seems that the issue is limited to the iOS 13 Beta releases, and you’d expect bugs in beta, but a bug like this casts some doubt on the effectiveness of Apple’s Security Enclave.
URL Scheme Hijacking
Our next topic is also iOS related, though it’s possible the same issue could effect Android phones: URL scheme problems. The researchers at Trend Micro took a look at how iOS handles conflicting app URLs. Outside of the normal http: and https: URLs, applications can register custom URL schemes in order to simplify inter-process communication. The simplest example is something like an email address and the mailto: scheme. Even on a desktop, using one of these links will open a different application to handle that request. What could go wrong?

One weakness in using URL schemes like this is that not all apps properly validate what launched the request, and iOS allows multiple apps to use the same URL scheme. In the example given, a malicious app could register the same URL handler as the target, and effectively launch a man-in-the-middle attack.
Bluekeep, and Patching Systems
It has been five weeks since Bluekeep, the Remote Desktop Protocol vulnerability, was revealed. Approximately 20% of the vulnerable systems exposed to the internet have been patched. Bitsight has been running scans of the remaining vulnerable machines, and estimates about 800,000 remaining vulnerable systems. You may remember this particularl vulnerability was considered so problematic that even the NSA released a statement encouraging patching. So far, there hasn’t been a worm targeting the vulnerability, but it’s assumed that at least some actors have been using this vulnerability in attacks.

Tags: computer hacks
4:00
Farting Baseball; From the Makers of Self-Solving Rubik’s Cube
» ‎ Hack a Day

Some hackers have a style all their own that is immediately recognizable from one project to the next. For instance, you can tell a [Takashi Kaburagi] by its insides. The behavior of his Farting Baseball project (machine translation) is amusing, but the joke is only skin deep. Look inside and you’ll gain a huge appreciation for what has been done here. It’s not as mind-boggling as his work on the self-solving Rubiks cube robot, but the creativity and design constraints are similarly impressive.
Clever detail is the square of soft material used to cushion impact
This whimsical project is a curve ball no matter who throws it. While in flight, a jet of compressed gas can alter the trajectory at the press of a button. Inside is a small pressure vessel that is filled with HFC134A refrigerant commonly used on gas blowback pistols. It’s a non-combustible that lies in wait until a solenoid is activated to release the pressure in a powerful jet. The ball carries a CR2032 to power the wireless link for activation, but that solenoid needs more juice so capacitors are charged for this purpose.

It’s worth digging through the details on this one, including the article on measuring discharge time (machine translation). There are numerous nice touches, like the yellow Whoopee Cushion neck that directs the jet, the capacitor discharge materials so there is not an accidental activation when not in use, and clever and clean construction that make everything fit.

Another hacker with an equally iconic style is [Mohit Bhoite]’s work; make his flywire sculptures your next stop.

Tags: classic hacks
1:00
Hybrid Drones Could Have Massively Extended Flight Times
» ‎ Hack a Day

Multirotor drones truly took off with the availability of lithium polymer batteries, brushless motors, and cheap IMUs. Their performance continues to improve, but their flight time remains relatively short due to the limits of battery technology. [Nicolai Valenti] aims to solve the problem by developing a hybrid generator for drones.

The basic concept consists of a small gasoline engine, connected to a brushless motor employed as a generator. The electricity generated is used to run the main flight motors of the multirotor drone. The high energy density of gasoline helps to offset the added weight of the generator set, and [Nicolai] is aiming to reach a goal of two hours of flight time.

There are many engineering problems to overcome. Engine starting, vibration and rectification are all significant challenges, but [Nicolai] is tackling them and has already commenced flight testing. Experiments are ongoing with 500 W, 1,000 W, and 2,000 W designs, and work is ongoing to optimise the engine and electronics package.

It’s a project that holds the potential to massively expand the range of operation for medium to large multirotors, and should unlock certain capabilities that have thus far been limited by short battery runtimes. Gasoline powered drones aren’t a new idea, but we’ve seen precious little in the hybrid space. We look forward to seeiing how this technology develops. Video after the break.

The HackadayPrize2019 is Sponsored by:

Tags: drone hacks

0:00
Vuln: Mozilla Firefox and Firefox ESR Multiple Security Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Mozilla Firefox and Firefox ESR Multiple Security Vulnerabilities
Tags:
0:00
Vuln: Mozilla Firefox Multiple Security Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Mozilla Firefox Multiple Security Vulnerabilities
Tags:
0:00
Vuln: Squid CVE-2019-13345 Multiple Cross Site Scripting Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Squid CVE-2019-13345 Multiple Cross Site Scripting Vulnerabilities
Tags:
0:00
Vuln: GNOME gvfs CVE-2019-12795 Local Authorization Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

GNOME gvfs CVE-2019-12795 Local Authorization Bypass Vulnerability
Tags:

July 18, 2019
22:13
Re: local privilege escalation via CDE dtprintinfo
» ‎ Full Disclosure

Posted by Marco Ivaldi on Jul 18
Hi,

Just a quick follow-up to my original advisory. The CVE name CVE-2019-2832 has been assigned to the vulnerability and
Oracle has released a patch in its July 2019 CPU. Further information is available at:

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html#AppendixSUNS
https://support.oracle.com/epmos/faces/DocContentDisplay?id=2560938.1

Once again, I would like to thank Jon Trulson (maintainer of the open...

Tags:

22:00
Turning A Single Bolt Into A Combination Lock
» ‎ Hack a Day

In our search for big-box convenience, we tend to forget that locksmiths once not only copied keys but also created complex locks and other intricate mechanisms from scratch. [my mechanics] hasn’t forgotten, and building a lock is his way of celebrating of the locksmith’s skill. Building a combination lock from a single stainless bolt is probably also showing off just a little, and we’re completely fine with that.

Granted, the bolt is a rather large one – an M20x70 – and a few other materials such as brass rod and spring wire were needed to complete the lock. But being able to look at a single bolt and slice it up into most of the stock needed for the lock is simply amazing. The head became the two endplates, while the shank was split in half lengthwise and crosswise after the threads were turned off; those pieces were later turned down into the tubes and pins needed to create the lock mechanism. The combination wheels probably could have come from another – or longer – bolt, but we like the look of the brass against the polished stainless, as well as the etched numbers and subtle knurling. The whole thing is a locksmithing tour de force, and the video below captures all of it without any fluff or nonsense.

If working in steel and brass isn’t your thing, fear not – a 3D-printed combination lock is probably within your reach. Or laser cut wood. Or even plain paper, if you’re not into the whole security thing.

Tags: lockpicking hacks
19:00
A (Card) Table-Top Turing Machine Of Magic: The Gathering Cards
» ‎ Hack a Day

Within normal rules of collectible card game Magic: The Gathering a player may find themselves constrained to only a single legal course of action forward. It’s a situation players could craft to frustrate their opponents, though the victims usually break free after a few moves. But under a carefully crafted scenario, players would have no choice but to become the execution engine for a Turing-complete programming language written with Magic cards via techniques detailed in this paper.

One of the authors of this paper, [Alex Churchill], started working on this challenge in 2010. We covered an earlier iteration of his work here, and his own criticism that it was dependent on player cooperation. At various points, the game rules state a player “may” take certain actions and the construct falls apart if our player chooses the wrong thing. It would be as if a computer was built out of transistors that “may” switch as commanded or not, which would not be a very reliable method of computation.

To improve reliability of this particular Turing machine execution engine, the team combed through rules and cards to devise an encoding where the player is only ever presented with a single legal course forward. This ensures deterministic execution of the instruction stream, and now with proof of Turing-completeness in hand, we congratulate [Alex] on a successful conclusion to his decade-long quest.

We have a primer available for anyone who wants a refresher on Turing machines. They are utterly impractical but fun for hackers to build, and they are typically constructed of electronics and LEDs instead of ink on cardboard.

Via Ars Technica, who have presented their own analysis of this machine.

Main image: Unspecified set of Magic: The Gathering cards by [Robert] CC BY 2.0

Tags: toy hacks
16:00
Live Apollo 11 Transcript On eInk Display
» ‎ Hack a Day

There are few moments in history that have ever been recorded in more detail or analyzed as thoroughly as the Apollo 11 mission to the Moon. Getting three men to our nearest celestial neighbor and back in one piece took a lot of careful planning, and recording every moment of their journey was critical to making sure things were going smoothly. As we celebrate the 50th anniversary of man’s first steps off our world, these records give us a way to virtually tag along with Armstrong, Aldrin, and Collins.

As part of the 50th anniversary festivities at the Parkes Radio Telescope in Australia, [Andrew] created a badge that would let him wear a little piece of Apollo 11. Using an ESP32 and an eInk screen, it replays the mission transcript between the crew and ground control in real-time. It’s a unique way to experience the mission made possible by that meticulous data collection that’s a hallmark of the National Aeronautics and Space Administration.

[Andrew] was inspired by the “Apollo 11 In Real Time” website, but rather than pulling the content from the Internet, he’s loaded the mission transcripts onto the ESP32’s SPIFFS filesystem as a CSV file. Not that the badge is completely offline, it does need to connect to the Internet (via a hotspot on his phone) so it can keep its internal clock synchronized with NTP. Keeping everything local does reduce power consumption compared to streaming it from the Internet, but he admits that otherwise he didn’t give much thought to energy efficiency and there’s definitely some room for improvement.

The LILYGO TTGO board he’s using combines the ESP32 with a 2.13 inch eInk display, in a formfactor not unlike the Badgy we’ve covered previously. He was able to find a STL for a 3D printed case on Thingiverse which he modified to fit a battery. Unfortunately the original model was released under a license that prevents him from distributing his modified version, but it doesn’t sound too difficult to replicate if you’re interested in building your own running ticker of humanity’s greatest adventure.

Tags: microcontrollers
13:00
Put Those iPad Displays To Work With This eDP Adapter
» ‎ Hack a Day

Regardless of how you might feel about Apple and the ecosystem they’ve cultured over the years, you’ve got to give them some credit in the hardware department. Their “Retina” displays are a perfect example; when they brought the 2,048 by 1,536 panel to the iPad 3, the technology instantly became the envy of every tablet owner. But what if you want to use one of these gorgeous screens outside of Apple’s walled garden?

As it turns out, there are a number of options out there to use these screens on other devices, but [Arthur Jordan] wasn’t quite happy with any of them. So he did what any self respecting hacker would do, and built his own adapter for iPad 3 and 4 screens. Not that he did it completely in the dark; his design is based on the open source Adafruit Qualia driver, which in turn was based on research done by [Mike’s Mods]. A perfect example of the open source community at work.

The resulting board allows you to connect the Retina display from the iPad 3 or 4 to any device that features Embedded DisplayPort (eDP). Rather than put a dedicated port on his board, [Arthur] just left bare pads where you can solder up whatever interface method your particular gadget might use. In his case, he wanted to hook it up to an x86 UP Core SBC, so he even came up with a seperate adapter that breaks out that board’s diminutive display connector to something that can be soldered by hand.

So what’s different between the board [Arthur] developed and Adafruit’s Qualia? Primarily its been made smaller by deleting the DisplayPort connectors in favor of those bare pads, but he’s also dumped the backlight control hardware and 3.3V regulator that in his experience hasn’t been necessary with the eDP devices he’s worked with. So if space is a concern in your build, this version might be what you’re after.

We’ve seen other Retina display adapters in the past, and of course the iPad isn’t the only high-end device that’s had a screen good enough to reuse on its own. The lesson here is that if you put a must-have feature in your product, don’t be surprised when some hacker comes along and figures out how to liberate it for their own purposes.

Tags: parts

12:58
Ubuntu Security Notice USN-4065-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4065-1 - It was discovered that Squid incorrectly handled Digest authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. It was discovered that Squid incorrectly handled Basic authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.04. Various other issues were also addressed.
Tags:

12:58
Ubuntu Security Notice USN-4065-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4065-1 - It was discovered that Squid incorrectly handled Digest authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. It was discovered that Squid incorrectly handled Basic authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.04. Various other issues were also addressed.
Tags:

12:58
Ubuntu Security Notice USN-4065-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4065-1 - It was discovered that Squid incorrectly handled Digest authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. It was discovered that Squid incorrectly handled Basic authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.04. Various other issues were also addressed.
Tags:

12:03
Wireshark Analyzer 3.0.3
» ‎ Packet Storm Security Recent Files

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers.
Tags:

12:03
Wireshark Analyzer 3.0.3
» ‎ Packet Storm Security Tools

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers.
Tags:

12:03
Wireshark Analyzer 3.0.3
» ‎ Packet Storm Security Misc. Files

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers.
Tags:

11:59
Microsoft Windows RPCSS Activation Kernel Security Callback Privilege Escalation
» ‎ Packet Storm Security Exploits

On Microsoft Windows, the RPCSS Activation Kernel RPC server's security callback can be bypassed resulting in elevation of privilege.
Tags:

11:59
Microsoft Windows RPCSS Activation Kernel Security Callback Privilege Escalation
» ‎ Packet Storm Security Recent Files

On Microsoft Windows, the RPCSS Activation Kernel RPC server's security callback can be bypassed resulting in elevation of privilege.
Tags:

11:59
Microsoft Windows RPCSS Activation Kernel Security Callback Privilege Escalation
» ‎ Packet Storm Security Misc. Files

On Microsoft Windows, the RPCSS Activation Kernel RPC server's security callback can be bypassed resulting in elevation of privilege.
Tags:

11:58
WordPress OneSignal 1.17.5 Cross Site Scripting
» ‎ Packet Storm Security Exploits

WordPress OneSignal plugin version 1.17.5 suffers from a persistent cross site scripting vulnerability.
Tags:

11:58
WordPress OneSignal 1.17.5 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

WordPress OneSignal plugin version 1.17.5 suffers from a persistent cross site scripting vulnerability.
Tags:

11:58
WordPress OneSignal 1.17.5 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

WordPress OneSignal plugin version 1.17.5 suffers from a persistent cross site scripting vulnerability.
Tags:

11:58
Ubuntu Security Notice USN-4064-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4064-1 - A sandbox escape was discovered in Thunderbird. If a user were tricked in to installing a malicious language pack, an attacker could exploit this to gain additional privileges. Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass same origin restrictions, conduct cross-site scripting attacks, spoof origin attributes, or execute arbitrary code. Various other issues were also addressed.
Tags:

11:58
Ubuntu Security Notice USN-4064-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4064-1 - A sandbox escape was discovered in Thunderbird. If a user were tricked in to installing a malicious language pack, an attacker could exploit this to gain additional privileges. Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass same origin restrictions, conduct cross-site scripting attacks, spoof origin attributes, or execute arbitrary code. Various other issues were also addressed.
Tags:

11:58
Ubuntu Security Notice USN-4064-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4064-1 - A sandbox escape was discovered in Thunderbird. If a user were tricked in to installing a malicious language pack, an attacker could exploit this to gain additional privileges. Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass same origin restrictions, conduct cross-site scripting attacks, spoof origin attributes, or execute arbitrary code. Various other issues were also addressed.
Tags:

11:53
Skylight Cyber Bypasses Cylance AI
» ‎ Packet Storm Security Headlines

Skylight Cyber Bypasses Cylance AI
Tags: headlinehackerflaw
11:51
No, You Don't Need A Burner Phone At A Hacking Conference
» ‎ Packet Storm Security Headlines

No, You Don't Need A Burner Phone At A Hacking Conference
Tags: headlinehackerprivacyphoneconference
11:51
US Senator Asks FBI To Investigate FaceApp
» ‎ Packet Storm Security Headlines

US Senator Asks FBI To Investigate FaceApp
Tags: headlinegovernmentprivacyusarussiacyberwar
11:51
Microsoft Warns 10,000 Customers They're Targeted By Nation States
» ‎ Packet Storm Security Headlines

Microsoft Warns 10,000 Customers They're Targeted By Nation States
Tags: headlinehackergovernmentmicrosoftcyberwar
11:51
Slack Resets Passwords For 1% Of Its Users Because Of 2015 Hack
» ‎ Packet Storm Security Headlines

Slack Resets Passwords For 1% Of Its Users Because Of 2015 Hack
Tags: headlinehackerdata losspassword

11:30
Getting Hackers Excited about Cable Robots
» ‎ Hack a Day

Ever since he looked into them as a way to water and care for his plants, [Tom] has been fascinated with cable robots. These high-flying gadgets can move in three dimensions over huge areas, provided you’ve got the ability to string up the aforementioned cables. But despite their flexibility, there hasn’t been a whole lot of hobbyist level development with these unique systems.

With his entry into the 2019 Hackaday Prize, [Tom] is hoping to change that. He’s learned a lot by building his own cable robots, and now wants to take it to the next level. Ideally with collaboration from the community, if he can find other hackers looking to outfit their homes or workshops with their own miniature sky cranes.

So what can you do with a cable robot? In the video after the break, [Tom] shows one of his creations dutifully transporting beer cans across the room and stacking them into a pyramid. Admittedly this isn’t a particularly useful capability (unless you run a bar, perhaps), but it does show the speed and dexterity of the system even when crossing large distances. If you’ve ever wanted to play the home edition of “Automate the Freight”, this one’s for you.

The system uses a trio of 36 volt stepper motors powered by a homebrew SLA7078 driver that [Tom] designed himself. Each stepper turns a geared-down spindle to which a strong cable is attached. With some clever routing around the workspace, careful orchestration of these small winches can be used to move the point where all the cables meet in 3D space. All that’s left is mounting your gadget of choice to this central point, and away you go.

We’ve seen the concept used commercially, but as far as hobbyist projects go, the most activity we’ve seen in this space would have to be the various room sized 3D printers that have popped up over the years. It would be interesting to see what kind of interesting projects the community could come up with if they had something with a little more muscle.

The HackadayPrize2019 is Sponsored by:

Tags: robots hacks
10:00
Hacking Shelters and Swimming Pools
» ‎ Hack a Day

How would you survive in a war-torn country, where bombs could potentially fall from the sky with only very short notice? And what if the bomb in question were The Bomb — a nuclear weapon? This concern is thankfully distant for most of us, but it wasn’t always so. Only 75 years ago, bombs were raining down on England, and until much more recently the threat of global thermonuclear war was encouraging school kids to “duck and cover”. How do you protect people in these situations?

The answers, naturally, depend on the conditions at hand. In Britain before the war, money was scarce and many houses didn’t have basements or yards that were large enough to build a family-sized bomb shelter in, and they had to improvise. In Cold War America, building bomb shelters ended up as a boon for the swimming pool construction industry. In both cases, bomb shelters proved to be a test of engineering ingenuity and DIY gumption, attempting to save lives in the face of difficult-to-quantify danger from above.

Anderson and Morrison
If you are a well-funded construction company making a bunker for some General or politicians, setting up a bomb shelter isn’t that hard. Find some land, buy it, excavate, pour concrete, and spend what you want on things like air conditioning and furniture. The equation is different, though, if you need to make lots of shelters to fit in peoples’ modest yards using simple materials. Homes in the UK rarely have cellars or basements, and even so, basements became death traps in the aggressive bombing during the war.

Just before the UK joined WWII, Lord Privy Seal Anderson was in charge of preparing for air attack. He turned to two men, William Patterson and Karl Kerrison, to come up with a practical solution. The so-called Anderson shelter was little more than some corrugated steel panels. Of the fourteen panels, some were curved and some were straight. The shelters were very effective because they’d be covered with dirt or sandbags.

You can see they weren’t spacious. An Anderson was about six feet long, a bit over six feet high and about four and a half feet wide. If you didn’t make much money, you got one for free. Most people had to pay a nominal sum for one, though.

What you did with the inside of your shelter was up to you. As you might expect, there was quite a bit of variation.

One common problem with the shelters, though, was that they were cold. No shelter will protect a family that won’t go in it, so the British government had some advice about staying warm. Ultimately, though, they developed the Morrison shelter. Although only a few of the three million or so Anderson shelters went into homes with sandbags, the Morrison shelter was strictly an indoor affair.

The Morrison shelter looked like a table with a crawl space underneath. In fact, it could be used as a table. John Baker, the designer, knew it would be impossible to shield against a direct hit under his design constraints, so he focused on mitigating common bomb-related deaths, such as roof collapses. The shelter took its name from the Minister of Home Security, Herbert Morrison and — honestly — reminds us of a rabbit cage.

There were other shelter types, too, as well as people taking refuge in tunnels such as the Underground. Some people were saved, but there were many cases of people in shelters dying.
Across the Channel
The Germans learned that basements — a common feature in German homes — were not good places to wait out a bombing. So they built Hochbunkers — high rise bunkers completely above ground. These structures had very thick walls up to 1.5 m thick.

These shelters might seem unlikely, but they were pretty successful. Attempts to destroy them on purpose after the war proved difficult, so many of them are still around being used for schools, offices, and storage space. The video below shows a Hochbunker in Munich that now serves as an apartment complex.

Duck and Cover in Your New Pool
If you think your Anderson shelter won’t survive a direct hit from a conventional bomb, imagine a direct hit from a nuclear one. However, during the Cold War, people were building fallout shelters. The idea is that you might survive a moderately nearby nuclear blast only to be killed by fallout up to a few weeks later. However, if you had a place to hang out for a few weeks, you might survive to rebuild civilization or destroy post-apocalyptic zombies or whatever.

It was so easy to build that even old Walt could do it — at least according to the concrete masonry industry in the film below. If you had a basement it was pretty easy to refit it and you could use the space as a bizarre guest room or a darkroom as the excited actors in that little drama continually point out.

If you want to read the books that Walt shows, there are quite a few copies of the Family Fallout Shelter guide floating around. We couldn’t find “Mr. Atom and his Sinister Blanket”, other than a few pictures from an auction and as a brief part of a historical video on the National Concrete Masonry Association (look around the 9:50 mark). We actually talked about Walt a few years ago.

In America as in Britain, in many parts of the country people don’t have basements. In that case, you need to dig out a fallout shelter, and that’s too much work for most people. The answer? Hire someone with an excavator to do it, so pool contractors got in on the act. Vice-versa, in other areas, contractors who set up to do excavations to capitalize on the fallout shelter craze turned to building pools once the shelter business started — no pun intended — drying up.

Of course, most people didn’t build their own shelters: they were going to go to the local Civil Defense shelter. According to experts, that wouldn’t have worked if there had been a real war. It is hard to remember just how afraid everyone was over a sudden and massive nuclear strike during the cold war. We had CONELRAD and bright yellow Geiger counters. Some of the things were maybe to make you feel better even if they weren’t totally effective.

Today we have preppers building bunkers against the upcoming collapse of society, which isn’t too different. Maybe our grandkids will be building bunkers against the alien hoard that is bound to show up at any time now. Of course, if you have a lot of spare cash, you could score a pretty sweet five-bedroom bunker with all the amenities.

Photo credit: Hochbunker photo Creative Commons SA 3.0 by [Stefan Kühn]

Tags: featured
8:30
Project Egress: The Hinges
» ‎ Hack a Day

A door’s hinges are arguably its most important pieces. After all, a door without hinges is just, well, a wall. Or a bulkhead, if we’re talking about a hingeless hatch on a spacecraft.

And so the assignment for creating hinges for Progress Egress, the celebration of the 50th anniversary of the Apollo 11 landing by creating a replica of the command module hatch, went to [Jimmy DiResta]. The hinges were complex linkages that were designed to not only handle the 225 pound (102 kg) hatch on the launch pad, but to allow extended extravehicular activity (EVA) while en route to the Moon. [Jimmy], a multimedia maker, is just as likely to turn metal as he is to work in wood, and his hinges are a study of 1960s aerospace engineering rendered in ipe, and extremely hard and dense tropical hardwood, and brass.

[Jimmy]’s build started with a full-size 3D-printed model of the hinge, a move that paid off as the prints acted both as templates for machining the wood components and as test jigs to make sure everything would articulate properly. Sheet brass was bent and soldered into the hinge brackets, while brass rod stock was turned on the lathe to simulate the hydraulic cylinder hinge stays of the original. The dark ipe and the brass work really well together, and should go nicely with [Fran Blanche]’s walnut and brass latch on the assembled hatch.

With [Adam Savage]’s final assembly of all the parts scheduled for Thursday the 18th, we’re down to the wire on this celebration of both Apollo and the maker movement that was at least in part born from it.

Note: the assembly started at 11:00 Eastern time, and there’s a live stream at https://airandspace.si.edu/events/project-egress-build.

Tags: space
7:01
Blacksmithing For The Uninitiated: Curves And Rings
» ‎ Hack a Day

You know the funny looking side of the anvil? That’s where the best curves come from. It’s called the anvil horn and is the blacksmith’s friend when bending steel and shaping it into curves.

The principle of bending a piece of steel stock is very easy to understand. Heat it up to temperature, and hammer it over a curved profile to the intended shape. A gentler touch is required than when you are shaping metal. That’s because the intent is to bend the metal rather than deform. Let’s take a look!

Basics of Curves
Light the fire on your hearth as before, and take a piece of steel stock. I suggest a smaller size if you can get it for easier working, 8mm (3/8″) if it is available and over 500mm (20″) long to give you plenty of space for experimentation. You’ll need to position it in the heat such that 150 to 200mm (6″ to 8″) is brought to the usual orange-yellow heat.

On the anvil, place the heated part of your steel across the horn at right angles to it and hammer it over the curvature about halfway along the horn’s length. Depth of curve is controlled by moving along the horn. Working closer to the face of the anvil gives a shallower curve, towards the point gives a sharper one.

When shaping metal you hammer right on the face of the anvil like we did last time. But with curves you aren’t hammering against the anvil because this will change the shape of your work piece. Instead hammer a little distance out from the horn where your steel is in free space. Pretty quickly you’ll start to form a curve, and unless you’re very lucky you’ll probably see it also start to form a spiral. This is straightforward to rectify, simply hammer the developing spiral flat again on the face of the anvil.

Once you’ve got the hang of curves, this is where you can start to experiment and have some fun. Have a go at S shapes, compound curves, and even scrolls if you like. It’s easy enough to undo your experiments and try something else, simply hammer them out flat again on the face of the anvil and start again. Take your time, get creative, and get a feel for how the steel works on the anvil.
Better Put a Ring On It At first your right angle will look more like a tight curve, you’ll need to put in some extra hammering to tighten it up.
Having mastered bending metal, have a go at making a ring on the end of a piece of straight steel stock. You’ll be familiar with the relationship between diameter and circumference of a circle being Pi. Estimate a length that is about 3.141 times your desired radius of the ring. This 3:1 ratio is much easier to estimate than trying to envision the length of a finished curve.

The first part of making your ring is to put a right-angle bend in the steel to make an “L” shape for the base of the ring.

Making a right angle is easy enough, simply heat up the area about 25mm (1″) either side of the position you want to see the bend, lay the piece of stock across the face of the anvil, and hammer it down over the side of the anvil. You’ll have to do some hammering flat around the bend to make it a sharp 90-degrees, as it will at first try to be a sharp curve rather than a point. It may also “pinch” outwards at the corners or even bend outwards slightly away from the right angle, simply hammer that flat on the face of the anvil.
A Trip Around the Horn Forming the loop on the horn of the anvil.
Heat up the foot of the “L”, and take care not to heat up the steel beyond the right angle. You may wish to carefully quench any other parts that have been heated up, leaving only the foot of the “L” at temperature. Then lay the hot part across the horn of the anvil with the cold side of the right angle at 90 degrees to the horn, and hammer a curve round the horn. Continue it round until it touches the right angle. You may have created an oval or a spiral, but that doesn’t matter. You can flatten any spiral tendencies out of the plane of the ring on the face of the anvil, and the next step will render it into a perfect circle.

Your imperfect ring should now be heated up again, once more as much as possible keeping the heat from going up the shaft. Then place it over the end of the horn and hammer it to a circle around it. You may need a few cycles of hammering any spiral tendencies flat, or gently hammering a gap closed if one opens up, but you should eventually be able to make a pretty good circular ring on the end of your piece of bar.
A pair of slightly rough-and-ready rings made in this way.
This should provide plenty of scope for experimentation with curves and rings, but it’s by no means the entire scope. You might for instance want to decrease the size of the stock in a taper over 100mm (4″) or so (See the previous piece on putting new profiles on a piece of stock or making a point for ideas how you might do that), and then create a decreasing radius curve with that. It’s not too difficult to create the traditional shepherd’s crook design in this way, for example, or to move towards the kind of decorative scrollwork you might see in blacksmith-made gates and railings.

There’s a wealth of interesting things to learn in the blacksmith’s shop and I plan to help demystify the craft and encourage readers to give it a go. Perhaps in a few decades some of you will be passing it on to a fresh cadre of interested hardware hackers. I’ll be back soon with another installment, I’m thinking of tackling the thorny subject of hardness, changing the properties of a piece of steel through heat. See you next time!

Tags: hackaday Columns

6:21
Nipe – Make Tor Default Gateway For Network
» ‎ Darknet

Nipe is a Perl script to make Tor default gateway for network, this script enables you to directly route all your traffic from your computer to the Tor network through which you can surf the internet anonymously without having to worry about being tracked or traced back.

Tor enables users to surf the internet, chat and send instant messages anonymously, and is used by a wide variety of people for both licit and illicit purposes.

Read the rest of Nipe – Make Tor Default Gateway For Network now! Only available at Darknet.

Tags: privacy

4:00
Torturing an Instrumented Dive Watch, for Science
» ‎ Hack a Day

The Internet is a wild and wooly place where people can spout off about anything with impunity. If you sound like you know what you’re talking about and throw around a few bits of the appropriate jargon, chances are good that somebody out there will believe whatever you’re selling.

Case in point: those that purport that watches rated for 300-meter dives will leak if you wiggle them around too much in the shower. Seems preposterous, but rather than just dismiss the claim, [Kristopher Marciniak] chose to disprove it with a tiny wireless pressure sensor stuffed into a dive watch case. The idea occurred to him when his gaze fell across an ESP-01 module next to a watch on his bench. Figuring the two needed to get together, he ordered a BMP280 pressure sensor board, tiny enough itself to fit anywhere. Teamed up with a small LiPo pack, everything was stuffed into an Invicta dive watch case. A little code was added to log the temperature and pressure and transmit the results over WiFi, and [Kristopher] was off to torture test his setup.

The first interesting result is how exquisitely sensitive the sensor is, and how much a small change in temperature can affect the pressure inside the case. The watch took a simulated dive to 70 meters in a pressure vessel, which only increased the internal pressure marginally, and took a skin-flaying shower with a 2300-PSI (16 MPa) pressure washer, also with minimal impact. The video below shows the results, but the take-home message is that a dive watch that leaks in the shower isn’t much of a dive watch.

Hats off to [Kristopher] for doing the work here. We always love citizen science efforts such as this, whether it’s hardware-free radio astronomy or sampling whale snot with a drone.

Tags: clock hacks

2:01
CVE-2019-13577 / MAPLE Computer WBT SNMP Administrator v2.0.195.15 / Unauthenticated Remote Buffer Overflow Code Execution 0day
» ‎ Bugtraq

Posted by apparitionsec on Jul 18
[+] Credits: John Page (aka hyp3rlinx)
[+] Website: hyp3rlinx.altervista.org
[+] Source:
http://hyp3rlinx.altervista.org/advisories/MAPLE-WBT-SNMP-ADMINISTRATOR-v2.0.195.15-REMOTE-BUFFER-OVERFLOW-CODE-EXECUTION-0DAY.txt
[+] ISR: Apparition Security

[Vendor]
www.computerlab.com

[Product]
MAPLE Computer WBT SNMP Administrator (Thin Client Administrator)
v2.0.195.15...

Tags:

1:00
The Arduboy, Ported To Desktop and Back Again
» ‎ Hack a Day

A neat little hacker project that’s flying off the workbenches recently is the Arduboy. This tiny game console looks like a miniaturized version of the O.G. Game Boy, but it is explicitly designed to be hacked. It’s basically an Arduino board with a display and a few buttons, anyway.

[rv6502] got their hands on an Arduboy and realized that while there were some 3D games, there was nothing that had filled polygons, or really anything resembling a modern 3D engine. This had to be rectified, and the result is pretty close to Star Fox on a microcontroller.

This project began with a simple test on the Arduboy to see if it would be even possible to render 3D objects at any reasonable speed. This test was just a rotating cube, and everything looked good. Then began a long process of figuring out how fast the engine could go, what kind of display would suit the OLED best, and how to interact in a 3D world with limited controls.

Considering this is a fairly significant engineering project, the fastest way to produce code isn’t to debug code on a microcontroller. This project demanded a native PC port, so all the testing could happen on the PC without having to program the Flash every time. That allowed [rv] to throw out the Arduino IDE and USB library; if you’re writing everything on a PC and only uploading a hex file to a microcontroller at the end, you simply don’t need it.

One of the significant advances of the graphics capability of the Arduboy comes from exploring the addressing modes of the OLED. By default, the display is in a ‘horizontal mode’ which works for 2D blitting, but not for rasterizing polygons. The ‘vertical addressing mode’, on the other hand, allows for a block of memory, 8 x 128 bytes, that maps directly to the display. Shove those bytes over, and there’s no math necessary to display an image.

This is, simply, one of the best software development builds we’ve seen. It’s full of clever tricks (like simply not doing math if you’ll never need the result) and stuffing animations into far fewer bytes than you would expect. You can check out the demo video below.

Tags: arduino hacks

0:00
Vuln: CKEditor CVE-2018-9861 Cross Site Scripting Vulnerability
» ‎ SecurityFocus Vulnerabilities

CKEditor CVE-2018-9861 Cross Site Scripting Vulnerability
Tags:

July 17, 2019
22:00
BornHack Tease Us With Their Badge
» ‎ Hack a Day

Every August for the past four years, there has been a summer hacker camp on the Danish island of Bornholm, that may be a relatively new kid on the block but is slowly evolving into one of the summer’s essential stop-offs. This year for the first time they are moving to a larger site in an easier-to-reach part of the country, and in the usual build-up to the event they have released a teaser image of their badge.

Of course, you will want to know a little more about it than the picture can convey, so the BornHack folks were kind enough to give us a few more details. At its heart is a Silicon Labs Happy Gecko EFM32HG322F64G microcontroller, the same 25 MHz ultra-low-power ARM Cortex M0+ part that has featured in the previous BornHack offerings. Power comes from a pair of AA cells, and it sports a 240 x 240 pixel colour IPS display and an SD card holder. Connectivity is via USB and an infra-red interface for badge-to-badge communication, and human interface is via a mini joystick switch. Finally, it has a six-way v1.69bis Shitty Addon connector.

By some standards this is a relatively modest offering, but by using an evolution of their hardware from previous years as well as the same proven Geckoboot bootloader they are far more likely to deliver a satisfactory user experience than had they opted for a more ambitious design. We’ll be attending the camp, so we’ll report on the finished article once we have it.

BornHack will run from the 8th to the 15th of August, on the Danish island of Funen. There are a range of tickets still available, from single day visits to the whole week for 1200 DKK (about €160, or $181). Compared to some other events on our community’s calendar, we think that represents a bargain.

Tags: cons
19:00
Art Meets Science In The Cold Wastelands Of Iceland
» ‎ Hack a Day

Although Iceland is now a popular destination for the day-tripping selfie-seeking Instagrammer who rents a 4×4, drives it off road onto delicate ecosystems and then videos the ensuing rescue when the cops arrive, there are still some genuine photographers prepared to put a huge amount of time and effort into their art. [Dheera Venkatraman] is one of the latter and produces composite photos using a relatively low resolution thermal camera and DIY pan and tilt rig.

Whilst we don’t have the exact details, we think that, since the Seek Reveal Pro camera used has a resolution of 320 x 240, [Dheera] would have had to take at least 20 photos for each panoramic shot. In post processing, the shots were meticulously recombined into stunning landscape photos which are a real inspiration to anybody interested in photography.

If you do go to Iceland you might find the traditional food a little challenging to those not raised upon it, nor would you go there for a stag night as beer is eyewateringly expensive. But if you enjoy uninhabitable, desolate, dramatic landscapes there is a huge range of possibilities for the photographer from rugged, frozen lava flows to extra terrestrial ‘Martian’ crater-scapes, if you know where to find them.

[Dheera’s] blog contains some more information about his Iceland photography and there’s a Github repsoitory too. And if you cant afford a $699 Seek Reveal Pro, maybe try building one yourself.

Tags: art
16:00
High-Tech Alms Collection With The ESP32
» ‎ Hack a Day

In an ideal world, shop space, tools, and components would be free. But until we get to that Star Trek utopia, hackerspaces will have to rely on donations from the community to help stay afloat. While asking for money, at least you can have some fun with it if you design and build an Internet-connected donation box.

Or at least that’s how [Goran Mahovlic] handled it for the Radiona hackerspace in Zagreb, Croatia. Not content with just cutting a slit in the top of a shoe box, he came up with a physical donation system that’s not only more informative for those donating, but more organized for those collecting the funds.

The key is a arcade-style programmable coin acceptor from SparkFun. When connected to a microcontroller, this allows the box to keep a running tally on how much money has been inserted. With the use of a RFM96 LoRa module, it can even report on the current haul while remaining mobile; perfect for when the hackerspace has events outside of their home base.

But counting quarters is hardly a task befitting a powerful microcontroller like the ESP32. So [Goran] gave the chip something to do in its spare time by adding a couple of buttons and an LCD. This allows the user to scroll through a list of various projects that are looking for donations, and decide which one they want to financially support. When the donation box counts how much money has been inserted, it records which project its been earmarked for.

Of course, if you’d rather the free market do its thing, we’ve seen this same coin acceptor used to build a locker-sized vending machine. Or if you’re feeling crafty, you could always try your hand at building one with cardboard.

Tags: microcontrollers
13:00
A Fruity Approach To CNC Design
» ‎ Hack a Day

[Frank Howarth] found himself in need of a lamp for his dining room. Being of the maker persuasion, store-bought simply wouldn’t do. With a serious wood shop at his disposal, [Frank] took a trip down to the supermarket for inspiration (Youtube link, embedded below).

Having picked out a particularly well-formed starfruit for his project, [Frank] didn’t want to spend an inordinately long time attempting to recreate the organic lumps and bumps in modelling software, Instead, Meshroom was used to create a model through photogrammetry. After several failed attempts, success was achieved by using a textured rotating table as a background, with the starfruit painted in matte grey and a final dusting of black speckle. This gave the software enough visual cues to accurately model the fruit’s geometry.

With a 3D model to hand, Fusion Slicer was then used to generate a model that could be constructed out of flat lasercut pieces. The cutting outlines were then generated and passed to Rhino for final tweaking. With everything ready, parts were cut out of plywood and a small mockup of a potential lamp design was created. [Frank] is currently workshopping the design with the inhabitants of the dining room, prior to the final build.

Photogrammetry and modern CAD tools make working with natural forms quick and easy. We’ve also seen the technology used for other purposes too, with [Eric Strebel] providing a great example on how to use it for reverse engineering.

The starfruit tag on Hackaday is pretty sparse, so if you’ve got a project, let us know. Video after the break.

Tags: classic hacks

12:07
Ubuntu Security Notice USN-4063-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4063-1 - Nils Emmerich discovered that LibreOffice incorrectly handled LibreLogo scripts. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to execute arbitrary code. Matei "Mal" Badanoiu discovered that LibreOffice incorrectly handled stealth mode. Contrary to expectations, bullet graphics could be retrieved from remote locations when running in stealth mode. Various other issues were also addressed.
Tags:

12:07
Ubuntu Security Notice USN-4063-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4063-1 - Nils Emmerich discovered that LibreOffice incorrectly handled LibreLogo scripts. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to execute arbitrary code. Matei "Mal" Badanoiu discovered that LibreOffice incorrectly handled stealth mode. Contrary to expectations, bullet graphics could be retrieved from remote locations when running in stealth mode. Various other issues were also addressed.
Tags:

12:07
Ubuntu Security Notice USN-4063-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4063-1 - Nils Emmerich discovered that LibreOffice incorrectly handled LibreLogo scripts. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to execute arbitrary code. Matei "Mal" Badanoiu discovered that LibreOffice incorrectly handled stealth mode. Contrary to expectations, bullet graphics could be retrieved from remote locations when running in stealth mode. Various other issues were also addressed.
Tags:

11:49
Oracle Siebel CRM 19.0 Cross Site Scripting
» ‎ Packet Storm Security Exploits

Oracle Siebel CRM version 19.0 suffers from a persistent cross site scripting vulnerability.
Tags:

11:49
Oracle Siebel CRM 19.0 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

Oracle Siebel CRM version 19.0 suffers from a persistent cross site scripting vulnerability.
Tags:

11:49
Oracle Siebel CRM 19.0 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

Oracle Siebel CRM version 19.0 suffers from a persistent cross site scripting vulnerability.
Tags:

11:46
Ubuntu Security Notice USN-4059-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4059-2 - USN-4059-1 and USN-3557-1 fixed several vulnerabilities in Squid. This update provides the corresponding update for Ubuntu 12.04 ESM. Louis Dion-Marcil discovered that Squid incorrectly handled certain Edge Side Includes responses. A malicious remote server could possibly cause Squid to crash, resulting in a denial of service. Various other issues were also addressed.
Tags:

11:46
Ubuntu Security Notice USN-4059-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4059-2 - USN-4059-1 and USN-3557-1 fixed several vulnerabilities in Squid. This update provides the corresponding update for Ubuntu 12.04 ESM. Louis Dion-Marcil discovered that Squid incorrectly handled certain Edge Side Includes responses. A malicious remote server could possibly cause Squid to crash, resulting in a denial of service. Various other issues were also addressed.
Tags:

11:46
Ubuntu Security Notice USN-4059-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4059-2 - USN-4059-1 and USN-3557-1 fixed several vulnerabilities in Squid. This update provides the corresponding update for Ubuntu 12.04 ESM. Louis Dion-Marcil discovered that Squid incorrectly handled certain Edge Side Includes responses. A malicious remote server could possibly cause Squid to crash, resulting in a denial of service. Various other issues were also addressed.
Tags:

11:45
MAPLE Computer WBT SNMP Administrator 2.0.195.15 Buffer Overflow
» ‎ Packet Storm Security Exploits

MAPLE Computer WBT SNMP Administrator version 2.0.195.15 suffers from a buffer overflow vulnerability that allows for code execution.
Tags:

11:45
MAPLE Computer WBT SNMP Administrator 2.0.195.15 Buffer Overflow
» ‎ Packet Storm Security Recent Files

MAPLE Computer WBT SNMP Administrator version 2.0.195.15 suffers from a buffer overflow vulnerability that allows for code execution.
Tags:

11:45
MAPLE Computer WBT SNMP Administrator 2.0.195.15 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

MAPLE Computer WBT SNMP Administrator version 2.0.195.15 suffers from a buffer overflow vulnerability that allows for code execution.
Tags:

11:44
Debian Security Advisory 4483-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 4483-1 - Two security issues have been discovered in LibreOffice.
Tags:

11:44
Debian Security Advisory 4483-1
» ‎ Packet Storm Security Recent Files

Debian Linux Security Advisory 4483-1 - Two security issues have been discovered in LibreOffice.
Tags:

11:44
Debian Security Advisory 4483-1
» ‎ Packet Storm Security Misc. Files

Debian Linux Security Advisory 4483-1 - Two security issues have been discovered in LibreOffice.
Tags:

11:30
3D Printed Prosthesis Tracks Objects, Moves Smoothly
» ‎ Hack a Day

Hobbyist electronics and robotics are getting cheaper and easier to build as time moves on, and one advantage of that is the possibility of affordable prosthetics. A great example is this transhumeral prosthesis from [Duy], his entry for this year’s Hackaday Prize.

With ten degrees of freedom, including individual fingers, two axes for the thumb and enough wrist movement for the hand to wave with, this is already a pretty impressive robotics build in and of itself. The features don’t stop there however. The entire prosthesis is modular and can be used in different configurations, and it’s all 3D printed for ease of customization and manufacturing. Along with the myoelectric sensor which is how these prostheses are usually controlled, [Duy] also designed the hand to be controlled with computer vision and brain-controlled interfaces.

The palm of the hand has a camera embedded in it, and by passing that feed through CV software the hand can recognize and track objects the user moves it close to. This makes it easier to grab onto them, since the different gripping patterns required for each object can be programmed into the Raspberry Pi controlling the actuators. Because the alpha-wave BCI may not offer enough discernment for a full range of movement of each finger, this is where computer aid can help the prosthesis feel more natural to the user.

We’ve seen a fair amount of creative custom prostheses here, like this one which uses AI to allow the user to play music with it, and this one which gives its user a tattoo machine for an appendage.
The HackadayPrize2019 is Sponsored by:

Tags: medical hacks
10:01
Tuning into Atomic Radio: Quantum Technique Unlocks Laser-Based Radio Reception
» ‎ Hack a Day

The basic technology of radio hasn’t changed much since an Italian marquis first blasted telegraph messages across the Atlantic using a souped-up spark plug and a couple of coils of wire. Then as now, receiving radio waves relies on antennas of just the right shape and size to use the energy in the radio waves to induce a current that can be amplified, filtered, and demodulated, and changed into an audio waveform.

That basic equation may be set to change soon, though, as direct receivers made from an exotic phase of matter are developed and commercialized. Atomic radio, which does not rely on the trappings of traditional radio receivers, is poised to open a new window on the RF spectrum, one that is less subject to interference, takes up less space, and has much broader bandwidth than current receiver technologies. And surprisingly, it relies on just a small cloud of gas and a couple of lasers to work.
Quantum Music using Rydberg Atoms
The term atomic radio seems a bit confusing at first. After all, aren’t all radios made from atoms? But in the context of differentiating traditional radio technologies from the newer approach, use of the term atomic makes sense. Atomic radio relies on Rydberg atoms, which are atoms of elements such as cesium and rubidium that have had their outer electrons coaxed into much, much higher quantum states than normal matter, using either laser light at exactly the right wavelength or other electromagnetic methods. The electrons are so far from the nucleus in Rydberg atoms that they are barely held in orbit, the orbits are nearly circular, and the atom approaches macroscopic size.

Because of the highly excited outer electrons, Rydberg atoms have interesting and useful properties. The spacing between electron levels that far out from the nucleus is extremely narrow, making it very easy to perturb electrons and make them change states. If, say, a passing radio wave hits a Rydberg atom, its outer electrons can be nudged to another level. What’s more, Rydberg atoms show the nonlinear optical property of electromagnetically induced transparency, or EIT. That means that a laser tuned to a specific frequency can saturate a gas of Rydberg atoms, rendering them optically transparent in a narrow slice of the spectrum. A second laser tuned to that optical window will shine right through the gas with little loss of intensity.

Atomic radio combines these two properties: a small cell full of excited cesium vapor is rendered transparent with a laser tuned to 852 nm. The cell also has a laser at 510 nm passing through it to a photodiode. When a microwave signal is transmitted through the cell, the vapor’s transparency is reduced proportionally to the strength of the incident radio wave, which results in a signal from the photodiode that can be amplified. This means that unlike conventional radio antennas that operate electromagnetically, atomic radio directly detects radio waves optically.
No Static at All A commercially available vapor cell, the business end of an atomic radio. Source: Rydberg Technologies, Inc.
In a way, atomic radio hearkens back to the aforementioned days of spark gap radios. The earliest radio receivers used coherers to detect passing radio waves. Coherers were simple glass tubes filled with iron filings that had metal contacts at each end. Under normal conditions, the iron filings would not be very conductive, owing to insulating oxides creating a high-resistance path through the loosely packed particles. But a passing radio wave would cause the filings to clump together, reducing the resistance through the coherer and causing it to conduct. The radio wave’s passage could be indicated with a bell or a light.

Of course, coherers need a device called a decoherer, which was essentially a solenoid to gently tap the tube and reset the iron filings to a loose, non-conductive state. An atomic radio receiver needs no such resetting, and as recent work by David Anderson, Rachel Sapiro, and Georg Raithel shows, it is capable of receiving modulated signals, both AM and FM, which coherers were not. Still, the analogy is apt.

The simplicity of atomic radio is attractive. There are no tuned circuits, no intermediate amplifiers, no RF mixers, and critically, no antenna in the traditional sense. Radio waves are detected directly based on how they interact optically with the Rydberg atoms. This means that the stages of a traditional radio receiver that are subject to picking up interference are not present in an atomic radio, resulting in a much lower tendency to pick up noise. And because the Rydberg atom vapor is sensitive to a wide range of radio frequencies, an atomic radio is a broadband receiver — the one demonstrated in the above paper had a four-octave range, from the C-band to the Q-band, or 4 GHz to 50 GHz.
Living in Stereo
More recently, Christopher Holloway et al at the National Institute of Standards and Technology demonstrated an atomic radio that can receive two signals at once. The vapor cell in this radio contained a mix of cesium and rubidium, and each channel required two lasers — one to saturate each species to transparency, and one to probe for RF. Two guitars were played into audio amps (the authors took pains to note that the amps had gain knobs that go to 11) which were used to modulate two microwave signal generators at different frequencies in the 20 GHz range. The probing lasers were directed through the cell and into two separate photodiodes using optical splitters, resulting in a stereo atomic radio.
A two-channel atomic radio receiver. A mixture of cesium and rubidium is excited to Ryberg states and probed for changes in optical transparency at two different frequencies with lasers of different wavelengths. Source: C.L. Holloway, M.T. Simons, A.H. Haddab, C.J. Williams, and M.W. Holloway, AIP Advances 9, 065110 (2019). https://doi.org/10.1063/1.5099036
Atomic radio is at once both simple and complex — simple in that it bypasses most of the traditional circuitry of radio receivers and detects radio waves directly, but complex because it takes a physics lab full of lasers and optics to make it work. So it’s not likely that rank-and-file hobbyists will be building their own atomic radios anytime soon, and hams won’t be tearing down their half-wave dipole antennas in favor of cesium vapor cells. But atomic radio has a lot of potential, especially in deep-space communications applications, and if it can be miniaturized sufficiently, we just might see another commercialization of quantum theory.

Tags: engineering
8:30
Flashing LEDs With MIDI, Note By Note
» ‎ Hack a Day

Musical keyboards that light up the correct notes to play have long been touted as a quick and easy way to learn how to play. They’re also fun to look at. [Shootingmaker] has developed a similar concept, with a keyboard lookalike, covered in LEDs (Youtube video, embedded below).

The project consists of a PCB, in which the design of the mask imitates the white and black notes of a piano. This makes it look like a keyboard, but as far as we can tell, it doesn’t actually work as one. All the notes are fitted with APA102 addressable LEDs, under the control of a Teensy 3.2 board, operating in USB-MIDI mode. The Teensy receives MIDI data, and then directs the individual LEDs to flash in different colors based on which MIDI channel fired the note.

It’s a fun way to visualise MIDI data, and we think it would be even more fun combined with a basic synthesis engine to make some noise. We suspect it wouldn’t be too hard to integrate the project into an existing instrument, either. Software is available on Github for those interested in replicating the project. You can use MIDI to control neon lights, too.

Tags: musical hacks
7:01
Counter-Strike at 20: Two Hackers Upend the Gaming Industry
» ‎ Hack a Day

Choices matter. You’ve only got one shot to fulfill the objective. A single coordinated effort is required to defuse the bomb, release the hostages, or outlast the opposition. Fail, and there’s no telling when you’ll get your next shot. This is the world that Counter-Strike presented to PC players in 1999, and the paradigm shift it presented was greater than it’s deceptively simple namesake would suggest.

The reckless push forward mantra of Unreal Tournament coupled with the unrelenting speed of Quake dominated the PC FPS mind-share back then. Deathmatch with a side of CTF (capture the flag) was all anyone really played. With blazing fast respawns and rocket launchers featured as standard kit, there was little thought put towards conservative play tactics. The same sumo clash of combatants over the ever-so inconveniently placed power weapon played out time and again; while frag counts came in mega/ultra/monster-sized stacks. It was all easy come, easy go.

Counter-Strike didn’t follow the quick frag, wipe, repeat model. Counter-Strike wasn’t concerned with creating fantastical weaponry from the future. Counter-Strike was grounded in reality. Military counter terrorist forces seek to undermine an opposing terrorist team. Each side has their own objectives and weapon sets, and the in-game economy can swing the battle wildly at the start of each new round. What began as a fun project for a couple of college kids went on to become one of the most influential multiplayer games ever, and after twenty years it’s still leaving the competition in the de_dust(2).

Even if you’ve never camped with an AWP, the story of Counter-Strike is a story of an open platform that invited creative modifications and community-driven development. Not only is Counter-Strike an amazing game, it’s an amazing story.

“When Half-Life was released I said, ‘okay, yeah this is a great engine. I’m going to make a mod for this.’…So, I started way before the SDK was released. Once the SDK got out, I just did the code, (and) that pretty much took about a month.”
– Minh Le, Counter-Strike Co-Creator
An Open Source Floods The Net with Creativity
Legendary FPS game creators John Romero [Doom, left] and Minh Le [Counter Strike, right].It’s been said that all great things in PC gaming come from Quake. Valve Corporation’s seminal release, Half-Life, was crafted using a modified version of the Quake engine they called Source. Upon the game’s release in 1998 it instantly resonated with PC game fans going as far to elevate the game to “instant classic” status. Valve would only endear themselves further with the hardcore PC crowd when they released a software development kit for Source the next year.

Among those that sought to take advantage of that SDK were Minh Le and Jess Cliffe, couple of university students deeply embedded in the Quake modding community. The duo may have been separated by the Canada-US border, but had found the right time to collaborate on an original project after working as part of the Action Quake 2 mod team. Le had a fascination with military special forces and sought to incorporate actual firearms in lieu of Half-Life’s alien tech. This project was to be a multiplayer affair the military team needed an opposition, and rather than pit country against country a generic “terrorist” team was used. The game mode in it’s simplest terms had the special forces team seeking to counter the objectives being carried out by the terrorists, and thus Counter-Strike was born.

In the early days of Counter-Strike, Le and Cliffe had to do a fair bit of begging for beta testers. However, after being featured as part of the Half-Life Mod Expo ’99 thousands of players across the Internet’s message boards took notice. Feedback came fast for the mod which turned into a number of beta releases, and along with that influx came hundreds of community made maps. The issue became disseminating updates as download mirrors could only serve so many requests. Counter-Strike was usurping games like Unreal Tournament at competitive PC gaming events across the world, but too many were being left out of the fun because after all 56k is only a theoretical speed on dial-up.

“When Counter-Strike first became a Valve property, one of the immediate tasks was to figure out what was going on with updates…That was really the genesis of the idea for Steam, (it) was to figure out how can we automatically update all these folks.”
– Doug Lombardi, VP of Marketing Valve Software
The Counter-Strike Culture Goes Corporate
Counter-Strike reached an official 1.0 release in November 2000. That milestone also codified that the game was no longer a mod, but a full release in it’s own right. The rag-tag Counter-Strike team of amateurs was now working under the professional banner of Valve Software, and Sierra Studios, the publisher of Half-Life, would soon fill retail shelves with the game now known as “Half-Life: Counter-Strike”. That name would not stick as Counter-Strike would continue to iterate until reaching it’s ultimate version 1.6 on PC. At that point Counter-Strike as a brand began to expand beyond it’s initial creator’s hands.

Counter-Strike: Condition Zero (better known as the one that fans don’t like to talk about) represented a break from the standard objective based multiplayer of the original. It was primarily a single player experience, though a multiplayer suite was eventually included. The game was considered to be a “tortured project” being passed between three separate game studios during its development. Counter-Strike: Condition Zero would eventually limp to release in 2004, but fans and critics agreed the game was decidedly behind the times. The original iteration of the Source engine had taken Counter-Strike as far as it could go.

That could have been the end of the series if it were not for Counter-Strike: Source being released the very same year. This game was merely a remake of Counter-Strike and a few of its most popular maps to Valve Software’s newly minted Source 2.0 engine, but the title would ultimately serve a higher purpose for the company. It was thrown in as a bundled item for purchasers of Half-Life 2, though secretly Counter-Strike: Source seeded the digital game libraries of PC gamers through Steam. The title’s ubiquity amongst Steam users meant that matches can be found even today, and the endless engagements between the terrorists and counter-terrorist teams still sees thousands of concurrent players daily.

Counter-Strike may have been a product of the last century, but its objective-based multiplayer format has stood the test of time. And it makes a great case study for open development: if Valve hadn’t made the Half-Life SDK available to coders everywhere, one of the most groundbreaking games of the last 20 years wouldn’t have been written.

Bonus Fact: Turtle Rock Studios, developers of Counter-Strike: Condition Zero, would go onto use their experience with creating Counter-Strike bots to serve as the AI for the zombies of Left 4 Dead.

Tags: featured

6:08
Unofficial Telegram App Secretly Loads Malicious Sites
» ‎ Packet Storm Security Headlines

Unofficial Telegram App Secretly Loads Malicious Sites
Tags: headlinemalwarephone
6:08
Bluetooth Exploit Can Track And Identify Mobile Device Users
» ‎ Packet Storm Security Headlines

Bluetooth Exploit Can Track And Identify Mobile Device Users
Tags: headlineprivacywirelessspyware
6:08
Elon Musk Reveals Brain Hacking Plans
» ‎ Packet Storm Security Headlines

Elon Musk Reveals Brain Hacking Plans
Tags: headlinehackerscience
6:08
JetBlue Bomb Scare Set Off With Apple AirDrop
» ‎ Packet Storm Security Headlines

JetBlue Bomb Scare Set Off With Apple AirDrop
Tags: headlineappleterror

4:00
3D Printed Snap Gun for Automatic Lock Picking
» ‎ Hack a Day

At a far flung, wind blown, outpost of Hackaday, we were watching a spy film with a bottle of suitably cheap Russian vodka when suddenly a blonde triple agent presented a fascinating looking gadget to a lock and proceeded to unpick it automatically. We all know very well that we should not believe everything we see on TV, but this one stuck.

Now, for us at least, fantasy became a reality as [Peterthinks] makes public his 3D printed lock picker – perfect for the budding CIA agent. Of course, the Russians have probably been using these kind of gadgets for much longer and their YouTube videos are much better, but to build one’s own machine takes it one step to the left of center.

The device works by manually flicking the spring (rubber band) loaded side switch which then toggles the picking tang up and down whilst simultaneously using another tang to gently prime the opening rotator.

The size of the device makes it perfect to carry around in a back pocket, waiting for the chance to become a hero in the local supermarket car park when somebody inevitably locks their keys in their car, or even use it in your day job as a secret agent. Just make sure you have your CIA, MI6 or KGB credentials to hand in case you get searched by the cops or they might think you were just a casual burglar. Diplomatic immunity, or a ‘license to pick’ would also be useful, if you can get one.

As mentioned earlier, [Peter’s] video is not the best one to explain lock picking, but he definitely gets the prize for stealth. His videos are below the break.

In the meantime, all we need now are some 3D printed tangs.

Tags: printer hacks

3:11
WinMPG iPod Convert 3.0 Denial Of Service
» ‎ Packet Storm Security Exploits

WinMPG iPod Convert version 3.0 Register flow denial of service proof of concept exploit.
Tags:
3:11
Huawei HG530 Reboot / Restore Authentication Bypass
» ‎ Packet Storm Security Exploits

Huawei HG530 suffers from unauthenticated remote reboot and restore vulnerabilities.
Tags:

3:11
WinMPG iPod Convert 3.0 Denial Of Service
» ‎ Packet Storm Security Recent Files

WinMPG iPod Convert version 3.0 Register flow denial of service proof of concept exploit.
Tags:
3:11
Huawei HG530 Reboot / Restore Authentication Bypass
» ‎ Packet Storm Security Recent Files

Huawei HG530 suffers from unauthenticated remote reboot and restore vulnerabilities.
Tags:

3:11
WinMPG iPod Convert 3.0 Denial Of Service
» ‎ Packet Storm Security Misc. Files

WinMPG iPod Convert version 3.0 Register flow denial of service proof of concept exploit.
Tags:
3:11
Huawei HG530 Reboot / Restore Authentication Bypass
» ‎ Packet Storm Security Misc. Files

Huawei HG530 suffers from unauthenticated remote reboot and restore vulnerabilities.
Tags:

1:00
Pushing Pixels To A Display With VGA Without A PC
» ‎ Hack a Day

[Ben Eater] is back with the second part of his video series on building a simple video card that can output 200×600 pixels to a display with nothing but a VGA connection, a handful of 74-logic chips and a 10 MHz crystal. In this installment we see how he uses nothing but an EEPROM and a handful of resistors to get an image onto the screen.

The interesting part is in how the image data is encoded into the EEPROM, since it has to be addressable by the same timing circuit as what is being used for the horizontal and vertical timing. By selecting the relevant inputs that’d make a valid address, and by doubling the size of each pixel a few times, a 100 x 75 pixel image can be encoded into the EEPROM and directly addressed using this timing circuit.

The output from the EEPROM itself not fed directly into the monitor, as the VGA interface expects a 0 V to 0.7 V signal on each RGB pin, indicating the brightness. To get more than three colors out of this setup, [Ben] builds up a simple 2-bit DAC that allows for two bits per channel, meaning four brightness levels per color channel or 64 colors effectively.

See the video after the link for the full details. While pretty close to perfect, a small issue remains at the end in the forms of black vertical lines. These are caused by a timing issue in the circuit, with comments on the YouTube video suggesting various other potential fixes. Have you breadboarded your own version yet to debug this issue before [Ben]’s next video comes out?

Tags: classic hacks

0:00
Vuln: libpng CVE-2019-7317 Use After Free Denial of Service Vulnerability
» ‎ SecurityFocus Vulnerabilities

libpng CVE-2019-7317 Use After Free Denial of Service Vulnerability
Tags:
0:00
Vuln: Apache WSS4J CVE-2015-0226 Information Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

Apache WSS4J CVE-2015-0226 Information Disclosure Vulnerability
Tags:
0:00
Vuln: Novell NetIQ Sentinel CVE-2016-1000031 Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Novell NetIQ Sentinel CVE-2016-1000031 Remote Code Execution Vulnerability
Tags:
0:00
Vuln: Apache HTTP Server CVE-2019-0211 Local Privilege Escalation Vulnerability
» ‎ SecurityFocus Vulnerabilities

Apache HTTP Server CVE-2019-0211 Local Privilege Escalation Vulnerability
Tags:
0:00
Vuln: OpenSSL CVE-2019-1559 Information Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

OpenSSL CVE-2019-1559 Information Disclosure Vulnerability
Tags:
0:00
Vuln: cURL/libcURL Multiple Buffer Overflow Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

cURL/libcURL Multiple Buffer Overflow Vulnerabilities
Tags:
0:00
Vuln: OWASP AntiSamy CVE-2017-14735 Cross Site Scripting Vulnerability
» ‎ SecurityFocus Vulnerabilities

OWASP AntiSamy CVE-2017-14735 Cross Site Scripting Vulnerability
Tags:
0:00
Vuln: FasterXML Jackson-databind CVE-2018-12023 Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

FasterXML Jackson-databind CVE-2018-12023 Remote Code Execution Vulnerability
Tags:
0:00
Vuln: FasterXML Jackson-databind Deserialization Multiple Remote Code Execution Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

FasterXML Jackson-databind Deserialization Multiple Remote Code Execution Vulnerabilities
Tags:
0:00
Vuln: Apache Struts ClassLoader Manipulation CVE-2014-0114 Security Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Apache Struts ClassLoader Manipulation CVE-2014-0114 Security Bypass Vulnerability
Tags:
0:00
Vuln: Perl Multiple Buffer Overflow Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Perl Multiple Buffer Overflow Vulnerabilities
Tags:
0:00
Vuln: Apache Batik CVE-2018-8013 Information Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

Apache Batik CVE-2018-8013 Information Disclosure Vulnerability
Tags:
0:00
Vuln: Oracle MySQL Server Cpujul2019 Multiple Security Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Oracle MySQL Server Cpujul2019 Multiple Security Vulnerabilities
Tags:
0:00
Vuln: Multiple Dell EMC Products CVE-2018-11058 Buffer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

Multiple Dell EMC Products CVE-2018-11058 Buffer Overflow Vulnerability
Tags:
0:00
Vuln: Apache CXF CVE-2018-8039 TLS Hostname Verification Security Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Apache CXF CVE-2018-8039 TLS Hostname Verification Security Bypass Vulnerability
Tags:
0:00
Vuln: Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability
Tags:
0:00
Vuln: Apache Tomcat CVE-2018-1305 Security Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Apache Tomcat CVE-2018-1305 Security Bypass Vulnerability
Tags:
0:00
Vuln: Apache HTTP Server CVE-2019-0190 Denial of Service Vulnerability
» ‎ SecurityFocus Vulnerabilities

Apache HTTP Server CVE-2019-0190 Denial of Service Vulnerability
Tags:
0:00
Vuln: Spring Security and Spring Framework CVE-2018-1258 Authorization Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Spring Security and Spring Framework CVE-2018-1258 Authorization Bypass Vulnerability
Tags:

July 16, 2019
22:47
CVE-2019-2107 a.k.a "Hevcfright" Proof of Concept exploit (Denial of Service PoC)
» ‎ Full Disclosure

Posted by Marcin Kozlowski on Jul 16
Hi list,

Maybe you find this interesting. In July 2019 Android fixed several
critical bugs, including this one. I think "Hevcfright" (in reference to
Stagefright) is quite possible, with lot of effort, I guess. This video
will crash stock VideoPlayer in Android 7-9 without July 2019 Patch (
https://source.android.com/security/bulletin/2019-07-01). More here:
https://github.com/marcinguy/CVE-2019-2107/

Thanks,
Marcin

Tags:
22:45
CVE-2019-13577 / MAPLE Computer WBT SNMP Administrator v2.0.195.15 / Unauthenticated Remote Buffer Overflow Code Execution 0day
» ‎ Full Disclosure

Posted by hyp3rlinx on Jul 16
[+] Credits: John Page (aka hyp3rlinx)
[+] Website: hyp3rlinx.altervista.org
[+] Source:
http://hyp3rlinx.altervista.org/advisories/MAPLE-WBT-SNMP-ADMINISTRATOR-v2.0.195.15-REMOTE-BUFFER-OVERFLOW-CODE-EXECUTION-0DAY.txt
[+] ISR: Apparition Security

[Vendor]
www.computerlab.com

[Product]
MAPLE Computer WBT SNMP Administrator (Thin Client Administrator)
v2.0.195.15

https://www.computerlab.com/index.php/downloads/category/27-device-manager...

Tags:
22:45
Re: Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity
» ‎ Full Disclosure

Posted by hyp3rlinx on Jul 16
[** CORRECTION Fixed Port Typo]

[+] Credits: John Page (aka hyp3rlinx)
[+] Website: hyp3rlinx.altervista.org
[+] Source:
http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-HTML-HELP-UNCOMPILED-CHM-FILE-XML-EXTERNAL-ENTITY-INJECTION.txt
[+] ISR: ApparitionSec

[Vendor]
www.microsoft.com

[Product]
Microsoft Compiled HTML Help "hh.exe"

Microsoft Compiled HTML Help is a Microsoft proprietary online help format,
consisting of a...

Tags:

22:00
Hardware Notifications For ISS Flybys
» ‎ Hack a Day

Since Sputnik launched in the 1950s, its been possible to look outside at night and spot artificial satellites orbiting with the naked eye. While Sputnik isn’t up there anymore, a larger, more modern satellite is readily located: the International Space Station. In fact, NASA has a program which will alert anyone who signs up when the ISS is about to fly overhead. A better alert, though, is this ISS notifier which is a dedicated piece of hardware that guarantees you won’t miss the next flyby.

This notifier is built around the Tokymaker, a platform aimed at making electronics projects almost painfully easy to learn. Connections to various modules can be made without soldering, and programming is done via a graphical interface reminiscent of Scratch. Using these tools, [jaime_lc98] designed a tool which flips up a tiny paper astronaut whenever the ISS is nearby. The software side takes advantage of IFTTT to easily and reliably control the servo on the Tokymaker.

The project pages goes into detail about how to set up IFTTT and also how to use the block-style language to program the Tokymaker. It’s pretty straightforward to get it up and running, relatively inexpensive, and looks like a great way to get the miniature hackers in your life excited about space. If they happen to learn a little something in the proces, well, we won’t tell them if you won’t. It might also be a good stepping stone on the way to other ISS-related hacks.
The HackadayPrize2019 is Sponsored by:

Tags: microcontrollers
19:00
Neural Network In Glass Requires No Power, Recognizes Numbers
» ‎ Hack a Day

We’ve all come to terms with a neural network doing jobs such as handwriting recognition. The basics have been in place for years and the recent increase in computing power and parallel processing has made it a very practical technology. However, at the core level it is still a digital computer moving bits around just like any other program. That isn’t the case with a new neural network fielded by researchers from the University of Wisconsin, MIT, and Columbia. This panel of special glass requires no electrical power, and is able to recognize gray-scale handwritten numbers.

The glass contains precisely controlled inclusions such as air holes or an impurity such as graphene or other material. When light strikes the glass, complex wave patterns occur and light becomes more intense in one of the ten areas on the glass. Each of those areas corresponds to a digit. For example, here are two examples of the pattern of light recognizing a two on the glass:

With a training set of 5,000 images, the network was able to correctly identify 79% of 1,000 input images. The team thinks they could do better if they allowed looser constraints on the glass manufacturing. They started with very strict design rules to assist in getting a working device, but they will evaluate ways to improve recognition percentage without making it too difficult to produce. The team also has plans to create a network in 3D, as well.

If you want to learn more about traditional neural networks, we have seen plenty of starter projects. If TensorFlow is too much to swallow, try these 200 lines of C code.

Tags: Software hacks

17:44
[SECURITY] [DSA 4483-1] libreoffice security update
» ‎ Bugtraq

Posted by Moritz Muehlenhoff on Jul 16
-------------------------------------------------------------------------
Debian Security Advisory DSA-4483-1 security () debian org
https://www.debian.org/security/ Moritz Muehlenhoff
July 16, 2019 https://www.debian.org/security/faq
-------------------------------------------------------------------------

Package : libreoffice
CVE ID : CVE-2019-9848 CVE-2019-9849...

Tags:

16:00
Hacking This Smart Bulb Is Almost Too Easy
» ‎ Hack a Day

The regular Hackaday reader no longer needs to be reminded about how popular the ESP8266 is; they see the evidence of that several times a day. But what might not be quite so obvious is that it isn’t just us hacker types that are in love with the inexpensive IoT microcontroller, it’s also popping up more and more frequently in commercial products.

As [Majenko] demonstrates, one of those ESP-powered devices is the LOHAS Smart LED Bulb. Upon cracking one open, he found that these relatively low-cost bulbs are little more than a standard ESP8266 chip and a couple of LED drivers. He wanted to see how hard it would be to get his own code running on the bulb, and by the looks of it, it took longer to get the thing open then it did to load it up with a custom firmware.

The bulb’s PCB features the aforementioned ESP8266, a 1MB 25Q80 flash chip, and MY9231 LED drivers. Whoever put the board together was nice enough to label the RX, TX, and GPIO test points, though [Majenko] notes that what’s labeled as 3.3 V appears dead. With a ESP-01 programmer wired up to the board and the appropriate board settings (which he provides), you can use the Arduino IDE to upload whatever you like to it.

Running “Hello World” on a smart bulb is fun and all, but what about kicking on those LEDs? [Majenko] found a library that works with the MY9231 drivers, and it didn’t take long to figure out which of the ESP’s pins were used to communicate with them. All in all, he said it was far easier than he expected.

You’ll probably want to put this bulb back into service after reprogramming, so [Majenko] advises caution when cracking open the shell. There are clips holding on the diffuser which he assures us are going to break no matter what you do, plus some silicone adhesive. He suggests super glue to hold it together when you’re done programming it, and using an OTA firmware so you don’t need to get back in there.

In the past we’ve shown how some hackers are rolling their own smart bulb hardware, but with cheap commercial offerings that are so easily hackable, it frankly doesn’t seem worth the effort. On the other hand, an influx of cheap ESP-powered bulbs isn’t all good news.

Tags: led hacks

13:37
Falco 0.16.0
» ‎ Packet Storm Security Recent Files

Sysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about falco as a mix between snort, ossec and strace.
Tags:

13:37
Falco 0.16.0
» ‎ Packet Storm Security Tools

Sysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about falco as a mix between snort, ossec and strace.
Tags:

13:37
Falco 0.16.0
» ‎ Packet Storm Security Misc. Files

Sysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about falco as a mix between snort, ossec and strace.
Tags:

13:36
FANUC Robotics Virtual Robot Controller 8.23 Path Traversal
» ‎ Packet Storm Security Exploits

FANUC Robotics Virtual Robot Controller version 8.23 suffers from a path traversal vulnerability.
Tags:

13:36
FANUC Robotics Virtual Robot Controller 8.23 Path Traversal
» ‎ Packet Storm Security Recent Files

FANUC Robotics Virtual Robot Controller version 8.23 suffers from a path traversal vulnerability.
Tags:

13:36
FANUC Robotics Virtual Robot Controller 8.23 Path Traversal
» ‎ Packet Storm Security Misc. Files

FANUC Robotics Virtual Robot Controller version 8.23 suffers from a path traversal vulnerability.
Tags:

13:34
FANUC Robotics Virtual Robot Controller 8.23 Buffer Overflow
» ‎ Packet Storm Security Exploits

FANUC Robotics Virtual Robot Controller version 8.23 suffers from a stack-based buffer overflow vulnerability.
Tags:

13:34
FANUC Robotics Virtual Robot Controller 8.23 Buffer Overflow
» ‎ Packet Storm Security Recent Files

FANUC Robotics Virtual Robot Controller version 8.23 suffers from a stack-based buffer overflow vulnerability.
Tags:

13:34
FANUC Robotics Virtual Robot Controller 8.23 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

FANUC Robotics Virtual Robot Controller version 8.23 suffers from a stack-based buffer overflow vulnerability.
Tags:

13:34
Red Hat Security Advisory 2019-1799-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-1799-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.8.0. Issues addressed include cross site scripting and use-after-free vulnerabilities.
Tags:

13:34
Red Hat Security Advisory 2019-1799-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-1799-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.8.0. Issues addressed include cross site scripting and use-after-free vulnerabilities.
Tags:

13:34
Red Hat Security Advisory 2019-1799-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-1799-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.8.0. Issues addressed include cross site scripting and use-after-free vulnerabilities.
Tags:

13:32
Microsoft Windows NtUserSetWindowFNID Win32k User Callback
» ‎ Packet Storm Security Exploits

An elevation of privilege vulnerability exists in Microsoft Windows when the Win32k component fails to properly handle objects in memory. This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This Metasploit module is tested against Windows 10 v1703 x86.
Tags:

13:32
Microsoft Windows NtUserSetWindowFNID Win32k User Callback
» ‎ Packet Storm Security Recent Files

An elevation of privilege vulnerability exists in Microsoft Windows when the Win32k component fails to properly handle objects in memory. This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This Metasploit module is tested against Windows 10 v1703 x86.
Tags:

13:32
Microsoft Windows NtUserSetWindowFNID Win32k User Callback
» ‎ Packet Storm Security Misc. Files

An elevation of privilege vulnerability exists in Microsoft Windows when the Win32k component fails to properly handle objects in memory. This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This Metasploit module is tested against Windows 10 v1703 x86.
Tags:

13:20
Linux PTRACE_TRACEME Broken Permission / Object Lifetime Handling
» ‎ Packet Storm Security Exploits

Linux suffers from broken permission and object lifetime handling for PTRACE_TRACEME.
Tags:

13:20
Linux PTRACE_TRACEME Broken Permission / Object Lifetime Handling
» ‎ Packet Storm Security Recent Files

Linux suffers from broken permission and object lifetime handling for PTRACE_TRACEME.
Tags:

13:20
Linux PTRACE_TRACEME Broken Permission / Object Lifetime Handling
» ‎ Packet Storm Security Misc. Files

Linux suffers from broken permission and object lifetime handling for PTRACE_TRACEME.
Tags:

13:12
Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity Injection
» ‎ Packet Storm Security Exploits

Microsoft compiled HTML Help and uncompiled .chm files can be leveraged for XML external entity injection attacks.
Tags:

13:12
Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity Injection
» ‎ Packet Storm Security Recent Files

Microsoft compiled HTML Help and uncompiled .chm files can be leveraged for XML external entity injection attacks.
Tags:

13:12
Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity Injection
» ‎ Packet Storm Security Misc. Files

Microsoft compiled HTML Help and uncompiled .chm files can be leveraged for XML external entity injection attacks.
Tags:

13:11
Ubuntu Security Notice USN-4062-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4062-1 - Rohan Padhye discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service.
Tags:

13:11
Ubuntu Security Notice USN-4062-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4062-1 - Rohan Padhye discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service.
Tags:

13:11
Ubuntu Security Notice USN-4062-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4062-1 - Rohan Padhye discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service.
Tags:

13:11
Ubuntu Security Notice USN-4060-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4060-2 - USN-4060-1 fixed several vulnerabilities in nss. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Henry Corrigan-Gibbs discovered that NSS incorrectly handled importing certain curve25519 private keys. An attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly obtain sensitive information. Various other issues were also addressed.
Tags:

13:11
Ubuntu Security Notice USN-4060-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4060-2 - USN-4060-1 fixed several vulnerabilities in nss. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Henry Corrigan-Gibbs discovered that NSS incorrectly handled importing certain curve25519 private keys. An attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly obtain sensitive information. Various other issues were also addressed.
Tags:

13:11
Ubuntu Security Notice USN-4060-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4060-2 - USN-4060-1 fixed several vulnerabilities in nss. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Henry Corrigan-Gibbs discovered that NSS incorrectly handled importing certain curve25519 private keys. An attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly obtain sensitive information. Various other issues were also addressed.
Tags:

13:11
Red Hat Security Advisory 2019-1797-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-1797-01 - Red Hat JBoss BPM Suite is a business rules and processes management system for the management, storage, creation, modification, and deployment of JBoss rules and BPMN2-compliant business processes. This release of Red Hat JBoss BPM Suite 6.4.12 serves as a replacement for Red Hat JBoss BPM Suite 6.4.11, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include code execution and deserialization vulnerabilities.
Tags:

13:11
Red Hat Security Advisory 2019-1797-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-1797-01 - Red Hat JBoss BPM Suite is a business rules and processes management system for the management, storage, creation, modification, and deployment of JBoss rules and BPMN2-compliant business processes. This release of Red Hat JBoss BPM Suite 6.4.12 serves as a replacement for Red Hat JBoss BPM Suite 6.4.11, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include code execution and deserialization vulnerabilities.
Tags:

13:11
Red Hat Security Advisory 2019-1797-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-1797-01 - Red Hat JBoss BPM Suite is a business rules and processes management system for the management, storage, creation, modification, and deployment of JBoss rules and BPMN2-compliant business processes. This release of Red Hat JBoss BPM Suite 6.4.12 serves as a replacement for Red Hat JBoss BPM Suite 6.4.11, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include code execution and deserialization vulnerabilities.
Tags:

13:11
Ubuntu Security Notice USN-4061-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4061-1 - It was discovered that Redis incorrectly handled the hyperloglog data structure. An attacker could use this issue to cause Redis to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags:

13:11
Ubuntu Security Notice USN-4061-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4061-1 - It was discovered that Redis incorrectly handled the hyperloglog data structure. An attacker could use this issue to cause Redis to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags:

13:11
Ubuntu Security Notice USN-4061-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4061-1 - It was discovered that Redis incorrectly handled the hyperloglog data structure. An attacker could use this issue to cause Redis to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags:

13:10
Red Hat Security Advisory 2019-1793-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-1793-01 - Vim is an updated and improved version of the vi editor. Issues addressed include a command execution vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1793-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-1793-01 - Vim is an updated and improved version of the vi editor. Issues addressed include a command execution vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1793-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-1793-01 - Vim is an updated and improved version of the vi editor. Issues addressed include a command execution vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1791-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-1791-01 - The libssh2 packages provide a library that implements the SSH2 protocol. Issues addressed include an out of bounds write vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1791-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-1791-01 - The libssh2 packages provide a library that implements the SSH2 protocol. Issues addressed include an out of bounds write vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1791-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-1791-01 - The libssh2 packages provide a library that implements the SSH2 protocol. Issues addressed include an out of bounds write vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1792-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-1792-01 - The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server kernel module providing layer-4 load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol to achieve high availability with director failover. Issues addressed include buffer overflow, code execution, and denial of service vulnerabilities.
Tags:

13:10
Red Hat Security Advisory 2019-1792-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-1792-01 - The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server kernel module providing layer-4 load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol to achieve high availability with director failover. Issues addressed include buffer overflow, code execution, and denial of service vulnerabilities.
Tags:

13:10
Red Hat Security Advisory 2019-1792-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-1792-01 - The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server kernel module providing layer-4 load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol to achieve high availability with director failover. Issues addressed include buffer overflow, code execution, and denial of service vulnerabilities.
Tags:

13:10
Red Hat Security Advisory 2019-1790-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-1790-01 - Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Issues addressed include a buffer overflow vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1790-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-1790-01 - Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Issues addressed include a buffer overflow vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1790-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-1790-01 - Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Issues addressed include a buffer overflow vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1789-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-1789-01 - 389 Directory Server is an LDAP version 3 compliant server. The base packages include the Lightweight Directory Access Protocol server and command-line utilities for server administration. Issues addressed include a denial of service vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1789-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-1789-01 - 389 Directory Server is an LDAP version 3 compliant server. The base packages include the Lightweight Directory Access Protocol server and command-line utilities for server administration. Issues addressed include a denial of service vulnerability.
Tags:

13:10
Red Hat Security Advisory 2019-1789-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-1789-01 - 389 Directory Server is an LDAP version 3 compliant server. The base packages include the Lightweight Directory Access Protocol server and command-line utilities for server administration. Issues addressed include a denial of service vulnerability.
Tags:

13:10
Ubuntu Security Notice USN-4060-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4060-1 - Henry Corrigan-Gibbs discovered that NSS incorrectly handled importing certain curve25519 private keys. An attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly obtain sensitive information. Hubert Kario discovered that NSS incorrectly handled PKCS#1 v1.5 signatures when using TLSv1.3. An attacker could possibly use this issue to trick NSS into using PKCS#1 v1.5 signatures, contrary to expectations. This issue only applied to Ubuntu 19.04. Various other issues were also addressed.
Tags:

13:10
Ubuntu Security Notice USN-4060-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4060-1 - Henry Corrigan-Gibbs discovered that NSS incorrectly handled importing certain curve25519 private keys. An attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly obtain sensitive information. Hubert Kario discovered that NSS incorrectly handled PKCS#1 v1.5 signatures when using TLSv1.3. An attacker could possibly use this issue to trick NSS into using PKCS#1 v1.5 signatures, contrary to expectations. This issue only applied to Ubuntu 19.04. Various other issues were also addressed.
Tags:

13:10
Ubuntu Security Notice USN-4060-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4060-1 - Henry Corrigan-Gibbs discovered that NSS incorrectly handled importing certain curve25519 private keys. An attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly obtain sensitive information. Hubert Kario discovered that NSS incorrectly handled PKCS#1 v1.5 signatures when using TLSv1.3. An attacker could possibly use this issue to trick NSS into using PKCS#1 v1.5 signatures, contrary to expectations. This issue only applied to Ubuntu 19.04. Various other issues were also addressed.
Tags:

13:09
Red Hat Security Advisory 2019-1782-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-1782-01 - Red Hat JBoss BRMS is a business rules management system for the management, storage, creation, modification, and deployment of JBoss Rules. This release of Red Hat JBoss BRMS 6.4.11 serves as a replacement for Red Hat JBoss BRMS 6.4.10, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include code execution and deserialization vulnerabilities.
Tags:

13:09
Red Hat Security Advisory 2019-1782-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-1782-01 - Red Hat JBoss BRMS is a business rules management system for the management, storage, creation, modification, and deployment of JBoss Rules. This release of Red Hat JBoss BRMS 6.4.11 serves as a replacement for Red Hat JBoss BRMS 6.4.10, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include code execution and deserialization vulnerabilities.
Tags:

13:09
Red Hat Security Advisory 2019-1782-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-1782-01 - Red Hat JBoss BRMS is a business rules management system for the management, storage, creation, modification, and deployment of JBoss Rules. This release of Red Hat JBoss BRMS 6.4.11 serves as a replacement for Red Hat JBoss BRMS 6.4.10, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include code execution and deserialization vulnerabilities.
Tags:

13:09
Ubuntu Security Notice USN-4059-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4059-1 - It was discovered that Squid incorrectly handled certain SNMP packets. A remote attacker could possibly use this issue to cause memory consumption, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that Squid incorrectly handled the cachemgr.cgi web module. A remote attacker could possibly use this issue to conduct cross-site scripting attacks. Various other issues were also addressed.
Tags:

13:09
Ubuntu Security Notice USN-4059-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4059-1 - It was discovered that Squid incorrectly handled certain SNMP packets. A remote attacker could possibly use this issue to cause memory consumption, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that Squid incorrectly handled the cachemgr.cgi web module. A remote attacker could possibly use this issue to conduct cross-site scripting attacks. Various other issues were also addressed.
Tags:

13:09
Ubuntu Security Notice USN-4059-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4059-1 - It was discovered that Squid incorrectly handled certain SNMP packets. A remote attacker could possibly use this issue to cause memory consumption, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that Squid incorrectly handled the cachemgr.cgi web module. A remote attacker could possibly use this issue to conduct cross-site scripting attacks. Various other issues were also addressed.
Tags:

13:09
Ubuntu Security Notice USN-4058-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 4058-1 - It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and execute any command.
Tags:

13:09
Ubuntu Security Notice USN-4058-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 4058-1 - It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and execute any command.
Tags:

13:09
Ubuntu Security Notice USN-4058-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 4058-1 - It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and execute any command.
Tags:

13:00
Jigsaw Motor Uses PCB Coils For Radial Flux
» ‎ Hack a Day

Electric motors are easy to make; remember those experiments with wire-wrapped nails? But what’s easy to make is often hard to engineer, and making a motor that’s small, light, and powerful can be difficult. [Carl Bugeja] however is not one to back down from a challenge, and his tiny “jigsaw” PCB motor is the latest result of his motor-building experiments.

We’re used to seeing brushless PCB motors from [Carl], but mainly of the axial-flux variety, wherein the stator coils are arranged so their magnetic lines of force are parallel to the motor’s shaft – his tiny PCB motors are a great example of this geometry. While those can be completely printed, they’re far from optimal. So, [Carl] started looking at ways to make a radial-flux PCB motor. His design has six six-layer PCB coils soldered perpendicular to a hexagonal end plate. The end plate has traces to connect the coils in a star configuration, and together with a matching top plate, they provide support for tiny bearings. The rotor meanwhile is a 3D-printed cube with press-fit neodymium magnets. Check out the build in the video below.

Connected to an ESC, the motor works decently, but not spectacularly. [Carl] admits that more tweaking is in order, and we have little doubt he’ll keep optimizing the design. We like the look of this, and we’re keen to see it improved.

Tags: misc hacks

12:44
CentOS Control Web Panel 0.9.8.838 User Enumeration
» ‎ Packet Storm Security Exploits

CentOS Control Web Panel version 0.9.8.838 suffers from a user enumeration vulnerability.
Tags:

12:44
CentOS Control Web Panel 0.9.8.838 User Enumeration
» ‎ Packet Storm Security Recent Files

CentOS Control Web Panel version 0.9.8.838 suffers from a user enumeration vulnerability.
Tags:

12:44
CentOS Control Web Panel 0.9.8.838 User Enumeration
» ‎ Packet Storm Security Misc. Files

CentOS Control Web Panel version 0.9.8.838 suffers from a user enumeration vulnerability.
Tags:

12:32
Deutsche Telekom CERT Advisory DTC-A-20170323-001
» ‎ Packet Storm Security Advisories

FRITZ!OS versions 6.83 and 6.80 (AVM DSL Router Fritz!Box 7490) suffer from an information leakage vulnerability.
Tags:

12:32
Deutsche Telekom CERT Advisory DTC-A-20170323-001
» ‎ Packet Storm Security Recent Files

FRITZ!OS versions 6.83 and 6.80 (AVM DSL Router Fritz!Box 7490) suffer from an information leakage vulnerability.
Tags:

12:32
Deutsche Telekom CERT Advisory DTC-A-20170323-001
» ‎ Packet Storm Security Misc. Files

FRITZ!OS versions 6.83 and 6.80 (AVM DSL Router Fritz!Box 7490) suffer from an information leakage vulnerability.
Tags:

11:34
CentOS Control Web Panel 0.9.8.836 Authentication Bypass
» ‎ Packet Storm Security Exploits

CentOS Control Web Panel version 0.9.8.836 suffers from an authentication bypass vulnerability.
Tags:

11:34
CentOS Control Web Panel 0.9.8.836 Authentication Bypass
» ‎ Packet Storm Security Recent Files

CentOS Control Web Panel version 0.9.8.836 suffers from an authentication bypass vulnerability.
Tags:

11:34
CentOS Control Web Panel 0.9.8.836 Authentication Bypass
» ‎ Packet Storm Security Misc. Files

CentOS Control Web Panel version 0.9.8.836 suffers from an authentication bypass vulnerability.
Tags:

11:32
CentOS Control Web Panel 0.9.8.836 Privilege Escalation
» ‎ Packet Storm Security Exploits

CentOS Control Web Panel version 0.9.8.836 suffers from a privilege escalation vulnerability.
Tags:

11:32
CentOS Control Web Panel 0.9.8.836 Privilege Escalation
» ‎ Packet Storm Security Recent Files

CentOS Control Web Panel version 0.9.8.836 suffers from a privilege escalation vulnerability.
Tags:

11:32
CentOS Control Web Panel 0.9.8.836 Privilege Escalation
» ‎ Packet Storm Security Misc. Files

CentOS Control Web Panel version 0.9.8.836 suffers from a privilege escalation vulnerability.
Tags:

11:30
Artificial Intelligence Powers A Wasp-Killing Machine
» ‎ Hack a Day

At the time of publication, Hackaday is of the understanding that there is no pro-wasp lobby active in the United States or abroad. Why? Well, the wasp is an insect that is considered incapable of any viable economic contribution to society, and thus has few to no adherents who would campaign in its favor. In fact, many actively seek to defeat the wasp, and [TegwynTwmffat] is one of them.

[Tegwyn]’s project is one that seeks to destroy wasps and Asian Hornets in habitats where they are an invasive pest. To achieve this goal without harming other species, the aim is to train a neural network to detect the creatures, before then using a laser to vaporize them.

Initial plans involved a gimballed sentry-gun style setup. However, safety concerns about firing lasers in the open, combined with the difficulty of imaging flying insects, conspired to put this idea to rest. The current system involves instead guiding insects down a small tube at the entrance to a hive. Here, they can be easily imaged at close range and great detail, as well as vaporized by a laser safely contained within the tube, if they are detected as wasps or hornets.

It’s an exciting project that could serve as a good model of how to deal with invasive insect species in the wild. We’ve seen insects grace our pages before, too. Video after the break.

The HackadayPrize2019 is Sponsored by:

1

Tags: the hackaday prize
10:00
Say it With Me: Bandwidth
» ‎ Hack a Day

Bandwidth is one of those technical terms that has been overloaded in popular speech: as an example, an editor might ask if you have the bandwidth to write a Hackaday piece about bandwidth. Besides this colloquial usage, there are several very specific meanings in an engineering context. We might speak about the bandwidth of a signal like the human voice, or of a system like a filter or an oscilloscope — or, we might consider the bandwidth of our internet connection. But, while the latter example might seem fundamentally different from the others, there’s actually a very deep and interesting connection that we’ll uncover before we’re done.

Let’s have a look at what we mean by the term bandwidth in various contexts.

Digital Bandwidth
Perhaps the most common usage of the term bandwidth is for the data bandwidth of digital channels, in other words, the rate of information transfer. In this case, it’s measured in bits per second. Your ISP might provision you 50/10 Mbps internet service for example, meaning you have 50 million bits per second of download capacity and 10 million bits per second of upload. In this case you would say that the download bandwidth is 50 Mbps. Measuring the digital bandwidth of a network channel is as easy as sending a fixed number of bits and timing how long it takes; this is what those broadband speed test sites do.

We’ll come back to digital bandwidth in a little while, to see how it’s connected to the next concept, that of signal bandwidth.
Signal Bandwidth
The term bandwidth is also used to describe the frequency range occupied by a signal. In this case, the bandwidth of the signal is defined as the maximum frequency contained in the signal minus the minimum frequency. If a signal has frequency components between 100 Hz and 300 Hz, we would say that the signal has a bandwidth of 200 Hz. As a concrete example, consider the medium-wave (aka AM) broadcast band in the US: each signal occupies a bandwidth of 20.4 kHz. So, a transmitter operating on the 1000 kHz channel should only output frequencies between 989.8 kHz and 1010.2 kHz. It’s interesting to note that an AM-modulated RF signal takes up twice the bandwidth of the transmitted audio, since both frequency sidebands are present; that 20.4 kHz RF bandwidth is being used to send audio with a maximum bandwidth of 10.2 kHz.

While the definition of bandwidth seems very straightforward, sometimes the application to common signals can be confusing. Consider an ideal square wave at 1 kHz. This signal repeats at a frequency of 1 kHz, so we might assume that it has a bandwidth of 1 kHz. In fact, an ideal square wave contains components at all odd multiples of the fundamental frequency, in this case at 3 kHz, 5 kHz, 7 kHz, etc. The practical upper limit, which determines the bandwidth of the signal, depends on how “ideal” the square wave is — in other words, the sharpness of the edges. While the amplitude of these components falls with increasing order, they’re important for properly constructing the original waveform. In fact, a common way to generate a sine wave is to filter out the higher-order components of a square wave signal.

Given a signal, how do we determine its bandwidth? The plain old telephone service (POTS) of my youth, for instance, passed frequencies between 300 Hz and 3000 Hz, which was found to be sufficient for voice communications; we might say signals passing through this system were limited to a bandwidth of 2700 Hz. While this would be true if the POTS system had sharp frequency edges, in reality, the signals passing through will have some small components below 300 Hz and above 3000 Hz. Because of this, it’s more common to define a non-zero threshold for the edges of the band. For instance, in measuring the highest and lowest frequencies in a signal, we might use the frequencies where the signal power is half of it’s peak value, or – 3 dB, corresponding to 70.71% in amplitude terms. While 3 dB is by far the most common value, you’ll find others used as well.
System Bandwidth
A third use of the term bandwidth is to describe the range of frequencies passed by a system, such as a filter, amplifier, or the telephone system described above. While a particular signal passing through the system may have a quite narrow bandwidth — a nearly-pure sine wave at around 2600 Hz with a bandwidth of just a few Hz, for instance — the system itself still has a bandwidth of 2700 Hz. As with signal bandwidth, system bandwidth can be measured at 3 dB points (where the signals passed by the system have dropped to half power), or using other thresholds — 6 dB and 20 dB might be used for certain filters.

As an example, I measured the response of a 1090 MHz filter for receiving ADS-B transmissions. The 3 dB response of this filter extends from 927.3 MHz to 1,181.8 MHz, for a 3 dB bandwidth of 254.5 MHz. On the other hand, if measured at the -20 dB points, the filter has a 312 MHz bandwidth.

For another practical example, consider an oscilloscope — the “X MHz” in the scope specifications refers to the bandwidth, and this is almost always measured at the -3 dB point. The front-end amplifier of a 100 MHz oscilloscope will pass frequencies between 0 Hz (DC) and 100 MHz with 3 dB loss or less. This means that a 100 MHz sine wave may only show 71% of its actual amplitude, but also that frequencies somewhat above 100 MHz can be viewed — they’ll just be reduced in amplitude even more. The other consequence is that a 100 MHz square wave will look like a sine wave on a 100 MHz scope; to get an accurate picture of the square wave, the scope must have a bandwidth greater than about five times the square wave fundamental frequency. The 100 MHz oscilloscope is best used for observing square waves of 20 MHz or less.

Oscilloscope bandwidth is commonly assessed by measuring the rise time of a very fast edge. Assuming the signal edge is much faster than the rise time of the oscilloscope, the bandwidth of the scope is BW = 0.35/t_rise, with bandwidth in Hz and rise time in seconds. A scope with a rise time of 1 ns, for example, has a bandwidth of 350 MHz. The 0.35 factor assumes that the frequency-limiting elements in the scope’s front end produce a Gaussian filter shape, although the result is almost identical for a first-order RC filter; scopes with a sharper “brickwall” response may have factors of 0.45 or more. For more information about oscilloscope bandwidth, check out this article by Jenny List.
Information Capacity
At the beginning of this article, I mentioned a connection between digital bandwidth and signal bandwidth: it turns out that the relationship between them is a cornerstone of information theory. Consider the question of what you can do with a channel of 1 Hz bandwidth. What’s to limit the amount of information that can be sent over this link? Claude Shannon was the first to solve this problem for an abstract communication system where symbols are sent over the channel. He came up with the Noisy-channel coding theorem, which showed that the maximum possible information rate depends on probability that a symbol gets corrupted in transmission. Channels which create more errors during transmission limit the rate that data can be transmitted, no matter how clever we get with error-correcting codes.

Later, the Shannon-Hartley theorem extended this result to less abstract signal channels where the error is due to additive white Gaussian noise (AWGN). The net result is the same: it’s noise in the channel that ultimately limits the rate of information that can be transmitted. In the case a channel corrupted with AWGN, we have the following result.

The channel capacity, C, in bits/second, depends on the bandwidth, B, in Hz, and the ratio of the signal power, S, to the noise power, N, in the channel. This is the theoretical limit of the channel, and we may have to work very hard coming up with clever error-correcting codes to approach this limit in practice, but we can never exceed it.

Armed with this equation, we can return to the original question: how much information can we send over a 1 Hz channel per second? If the channel is noise-free, the signal-to-noise ratio (SNR) is infinite, and we can send data at an unlimited rate — of course, this never happens. In the case of equal signal and AWGN noise powers, or a 0 dB SNR, however, the result shows that we can only send a maximum 1 bit per second. That’s a big drop from infinity! On the other hand, if we have a channel of 60 dB SNR, we can theoretically send a maximum of 19.9 bps in our 1 Hz bandwidth. Of course, if the noise level remains the same, we need to increase the signal power by 60 dB — a million times — to achieve this. And, the reality is that we can only approach these rate limits, and the codes which do so comprise a large body of research.
Bandwidth = Bandwidth = Bandwidth
Even though the term is used in different ways in different contexts, the concepts of bandwidth are very simple. In a nutshell, signal bandwidth is the amount of frequency occupied by a signal, system bandwidth is the range of frequencies passed by the system, and digital bandwidth is the rate at which information flows over a channel. But, connecting these simple concepts are some very interesting fundamental principles of information theory. We’ve only been able to scratch the surface of this fascinating area in this article; sound off in the comments below if you’d like to see more articles about information theory.

Tags: hackaday Columns
8:30
A Baby’s First Year In Data, As A Blanket
» ‎ Hack a Day

New parents will tell you that a baby takes a few months to acquire something close to a day/night sleep pattern, and during that time Mom and Dad also find their sleep becomes a a rarely-snatched luxury. [Seung Lee] has turned this experience into a unique data visualisation, by taking the sleep pattern data of his son’s first year of life and knitting it into a blanket.

The data was recorded using the Baby Connect app, from which it was exported and converted to JSON. This was in turn fed to some HTML/Javascript which generated a knitting pattern in a handy format that could be displayed on any mobile or portable device for knitting on the go. The blanket was then knitted by hand as a series of panels that were later joined into one, providing relief as the rows lined up.

The finished product shows very well the progression as the youngster adapts to a regular sleep pattern, and even shows a shift to the right at the very bottom as a result of a trip across time zones to see relatives. It’s both a good visualisation and a unique keepsake that the baby will treasure one day as an adult. (Snarky Ed Note: Or bring along to the therapist as evidence.)

This blanket was hand-knitted, but it’s not the first knitted project we’ve seen. How about a map of the Universe created on a hacked knitting machine?

Tags: art
7:01
Exploring The Raspberry Pi 4 USB-C Issue In-Depth
» ‎ Hack a Day

It would be fair to say that the Raspberry Pi team hasn’t been without its share of hardware issues, with the Raspberry Pi 2 being camera shy, the Raspberry Pi PoE HAT suffering from a rather embarrassing USB power issue, and now the all-new Raspberry Pi 4 is the first to have USB-C power delivery, but it doesn’t do USB-C very well unless you go for a ‘dumb’ cable.

Join me below for a brief recap of those previous issues, and an in-depth summary of USB-C, the differences between regular and electronically marked (e-marked) cables, and why detection logic might be making your brand-new Raspberry Pi 4 look like an analogue set of headphones to the power delivery hardware.

A Trip Down Memory Lane The Raspberry Pi 2, with the camera shy U16 IC in the lower left.
Back in February of 2015, a blog post on the official Raspberry Pi blog covered what they figured might be ‘the most adorable bug ever‘. In brief, the Raspberry Pi 2 single-board computer (SBC) employs a wafer-level package (WL-CSP) that performs switching mode supply functionality. Unfortunately, as is the risk with any wafer-level packaging like this, it exposes the bare die to the outside world. In this case some electromagnetic radiation — like the light from a xenon camera flash — enter the die, causing a photoelectric effect.

The resulting disruption led to the chip’s regulation safeties kicking in and shut the entire system down, fortunately without any permanent damage. The fix for this is to cover the chip in question with an opaque material before doing something like taking any photos of it with a xenon flash, or pointing a laser pointer at it.

While the Raspberry Pi 2’s issue was indeed hard to predict and objectively more adorable than dangerous, the issue with the Power over Ethernet (PoE) HAT was decidedly less cute. It essentially rendered the USB ports unusable due to over-current protection kicking in. The main culprit here is the MPS MP8007 PoE power IC (PDF link), with its relatively sluggish flyback DC-DC converter implementation being run at 100 kHz (recommended <200 kHz in datasheet). Combined with a lack of output capacity (41% of recommended), this meant that surges of current were being passed to the USB buffer capacitors during each (slow) power input cycle, which triggered the USB chipset’s over-current protection.
Raspberry Pi board fitted with a PoE HAT
The solution here was a redesign of the PoE HAT, which increased the supply output capacitance and smoothed the output as much as possible to prevent surges. This fixed the problem, allowing even higher-powered USB devices to be connected. The elephant-sized question in the room was of course why the Raspberry Pi team hadn’t caught this issue during pre-launch testing.
USB Type-C is Far More Than Just a Connector
The new Raspberry Pi 4 was just released a few weeks ago, and is the biggest overhaul of the platform since the original Model B+ that defined the ‘Raspberry Pi form factor‘. But in less than a week we started hearing about a flaw in how the USB-C power input was behaving. It turns out the key problem is when using electronically marked cables which include circuitry used by the USB-C specification to unlock advanced features (like supplying more power or reconfiguring what signals are used for between devices). These e-marked cables simply won’t work with the Pi 4 while their “dumb” cousins do just fine. Let’s find out why.

The USB-C specification is quite complex. Although mechanically the USB-C connector is reversible, electrically a lot of work is being performed behind the scenes to make things work as expected. Key to this are the two Configuration Channel (CC) pins on each USB-C receptacle. These will each be paired to either the CC wire in the cable or (in an e-marked cable) to the VCONN conductor. A regular USB-C cable will leave the VCONN pin floating (unconnected), whereas the e-marked cable will connect VCONN to ground via the in-cable Ra resistor as we can see in this diagram from the USB-C specification.

It’s also possible to have an e-marked USB-C cable without the VCONN conductor, by having SOP ID chips on both ends of the cable and having both the host and the device supply the cable with VCONN. Either way, both the host and device monitor the CC pins on their end measure the resistance present through the monitored voltage. In this case, the behavior of the host is dictated by the following table:

The Analog Raspberry Pi 4
Now that we have looked at what a basic USB-C setup looks like, it’s time to look at the subject of this article. As the Raspberry Pi team has so gracefully publicized the Raspberry Pi 4 schematics (minus the SoC side for some reason), we can take a look at what kind of circuit they have implemented for the USB-C sink (device) side:

As we can see here, contrary to the USB-C specification, the Raspberry Pi design team has elected to not only connect CC1 and CC2 to the same Rd resistor, but also shorted CC1 and CC2 in the process.

Remember, the spec is looking for one resistor (Rd) on each of the two CC pins. That way, an electronically marked cable connecting the Pi 4 board and a USB-C charger capable of using this standard would have registered as having the appropriate Rd resistance, hence 3A at 5V would have been available for this sink device.

Since this was however not done, instead we get an interesting setup, where the CC connection is still established, but on the Raspberry Pi side, the resistance doesn’t read the 5.1 kOhm of the Rd resistor, as there’s still the Ra resistor in the cable on the other CC pin of the receptacle. The resulting resistor network thus has the values 5.1k and 1k for the Rd and Ra resistors respectively. This circuit has an equivalent circuit resistance of 836 Ohm.

This value falls within the range permitted for Ra, and thus the Raspberry Pi 4 is detected by the source as Ra + Ra, meaning that it is an audio adapter accessory, essentially a USB-C-to-analog audio dongle. This means that the source does not provide any power on VBUS and the Raspberry Pi 4 will not work as it does not get any power.

In the case of a non-electronically marked cable, this would not be an issue as mentioned earlier, as it doesn’t do this form of detection, with no Ra resistor to get in the way of making the Raspberry Pi 4 do its thing.
Testing is More Important than Developing
Much like with the PoE HAT issue, the question was quickly raised: why wasn’t this issue with the Raspberry Pi 4’s USB-C port found much sooner during testing. Back with the Pi 2 PoE HAT, the official explanation from the Raspberry Pi team was that they had not tested with the appropriate devices, had cut back on testing because they were late with shipping and did not ask the field testers the right questions, leading to many scenarios simply not being tested.

In a response to Tech Republic, the CEO of Raspberry Pi Ltd, Eben Upton has admitted to the Pi 4 USB-C error. And a spokesperson for Raspberry Pi Ltd said in a response to Ars Technica that an upcoming revision of the Raspberry Pi 4 is likely to appear within the “next few months”.

It seems obvious how this error managed to sneak its way into production. Much like with the PoE HAT, a design flaw snuck in, no one caught it during schematic validation, the prototype boards didn’t see the required amount of testing (leaving some use cases untested), and thus we’re now seeing another issue that leaves brand new Raspberry Pi hardware essentially defective.

Sure, it’s possible to hack these boards as a workaround. With the PoE HAT one could have soldered on a big electrolytic capacitor to the output stage of the transformer’s secondary side and likely ‘fixed’ things that way. Similarly one could hack in a resistor on the Raspberry Pi 4 after cutting a trace between both CC pins… or even simpler: never use an e-marked USB-C cable with the Raspberry Pi 4.

Yet the sad point in all of this is undoubtedly that these are supposed to be ready-to-use, fully tested devices that any school teacher can just purchase for their classroom. Not a device that first needs a trip down to the electronics lab to have various issues analyzed and bodge wires and components soldered onto various points before being stuffed into an enclosure and handed over to a student or one’s own child.

The irony in all of this is that because of these errors, the Raspberry Pi team has unwittingly made it clear to many that testing hardware isn’t hard, it just has to be done.
Compliant USB-C is Not Easy
In the course of writing this article, yours truly had to dive deep into the USB-C specification, and as a point of fairness to the Raspberry Pi design team, the first time implementing USB-C is not a walk in the park. Of all specifications out there, USB-C does not rank very high in user-friendliness or even conciseness. It’s a big, meandering, 329 page document, which does not even cover the monstrosity that’s known as USB-C Power Delivery.

Making a mistake while implementing a USB-C interface during one’s first time using it in a design is not a big shame. The USB-C specification adds countless details and complexities that simply do not exist in previous versions of the USB standard. Having this mess of different types of cables with many more conductors does not make life easier either.

The failure here is that the USB-C design errors weren’t discovered during the testing phase, before the product was manufactured and shipped to customers. This is something where any team that has been involved in such a project needs to step back and re-evaluate their testing practices.

Tags: engineering

6:53
MyDashWallet Compromised For Two Months, Wallet Keys Taken
» ‎ Packet Storm Security Headlines

MyDashWallet Compromised For Two Months, Wallet Keys Taken
Tags: headlinecybercrimedata lossfraudcryptography
6:53
Office 365 Declared Illegal In German Schools Due To Privacy Risks
» ‎ Packet Storm Security Headlines

Office 365 Declared Illegal In German Schools Due To Privacy Risks
Tags: headlinegovernmentprivacymicrosoftflawgermany
6:53
Amadeus Airline Check-In Bug Exposed Boarding Passes
» ‎ Packet Storm Security Headlines

Amadeus Airline Check-In Bug Exposed Boarding Passes
Tags: headlineprivacydata lossspywareterror
6:53
Sprint Says Hackers Breached Customer Accounts Via Samsung Website
» ‎ Packet Storm Security Headlines

Sprint Says Hackers Breached Customer Accounts Via Samsung Website
Tags: headlinehackerprivacyphonedata losssamsung

5:33
DameWare Remote Support 12.0.0.509 Buffer Overflow
» ‎ Packet Storm Security Exploits

DameWare Remote Support version 12.0.0.509 Host SEH buffer overflow exploit.
Tags:

5:33
DameWare Remote Support 12.0.0.509 Buffer Overflow
» ‎ Packet Storm Security Recent Files

DameWare Remote Support version 12.0.0.509 Host SEH buffer overflow exploit.
Tags:

5:33
DameWare Remote Support 12.0.0.509 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

DameWare Remote Support version 12.0.0.509 Host SEH buffer overflow exploit.
Tags:

4:00
Raspberry Pi Cyberdeck Inspired by Rare MSX
» ‎ Hack a Day

When we see these cyberdeck builds, the goal is usually to just make something retro-futuristic enough to do William Gibson proud. There’s really no set formula, but offset screens coupled with large keyboards and a vague adherence to 1980s design language seem to be the most important tenets.

Granted the recent build by [lewisb42] still leans heavily on those common tropes, but at least there’s a clear lineage: his Raspberry Pi retro all-in-one is styled after a particularly rare bright red variant of the MSX that Sony released in Japan. Known as the HIT-BIT HB-101, some aficionados consider the circa-1984 machine to be the peak of MSX styling. Since getting his hands on a real one to retrofit wasn’t really an option, he had no choice but to attempt recreating some of the computer’s unique design elements from scratch.

The faceted sides were 3D printed in pieces, glued together, and then attached to a 1/4″ thick backplate made out of polycarbonate. For the “nose” piece under the keyboard, [lewisb42] actually used a piece of wood cut at the appropriate angles with a table saw. The top surface of the computer, which he calls the FLIPT-BIT, is actually made of individual pieces of foamed PVC sheet.

If all this sounds like a big jigsaw puzzle, that’s because it basically is. To smooth out the incongruous surfaces, he used a combination of wood putty, body filler, spot putty, and more time sanding then we’d care to think about. For the 3D printed surface details such as the screen bezel and faux cartridge slots, he used a coat of Smooth-On’s XTC-3D and yet more sanding. While [lewisb42] says the overall finish isn’t quite as good as he hoped, we think the overall look is fantastic considering the combination of construction techniques hiding under that glossy red paint job.

As for the electronics, there’s really no surprises there. The FLIPT-BIT uses a keyboard and touchpad from Perixx, a seven inch TFT display, and of course the Raspberry Pi 3. The display runs at 12 V so [lewisb42] used a combination of a generic laptop-style power supply and a 5 V step-down converter to keep everyone happy. While it doesn’t currently have a battery, it seems like there’s more than enough room inside the case to add one if he ever wants to go mobile.

If this build doesn’t properly scratch your Neuromancer itch, never fear. Just take a look at this decidedly less friendly-looking build that even includes a VR headset for properly jacking yourself into the matrix.

Tags: raspberry

3:33
R 3.4.4 (Windows 10 x64) Buffer Overflow
» ‎ Packet Storm Security Exploits

R version 3.4.4 (Windows 10 x64) SEH buffer overflow exploit with DEP/ASLR bypass.
Tags:

1:15
Deutsche Telekom CERT Advisory [DTC-A-20170323-001]
» ‎ Bugtraq

Posted by cert on Jul 16
Deutsche Telekom CERT Advisory [DTC-A-20170323-001]

Summary:
Information leakage found in FRITZ!OS 6.83 & 6.80 (AVM DSL Router Fritz!Box 7490)

Recommendation:
Update to the newest Version of FRITZ!OS

Details:
a) application
b) problem
c) CVSS
d) detailed description
e) credits...

Tags:
1:12
[**Fixed Typo] Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity
» ‎ Bugtraq

Posted by apparitionsec on Jul 16
[+] Credits: John Page (aka hyp3rlinx)
[+] Website: hyp3rlinx.altervista.org
[+] Source:
http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-HTML-HELP-UNCOMPILED-CHM-FILE-XML-EXTERNAL-ENTITY-INJECTION.txt
[+] ISR: ApparitionSec

[Vendor]
www.microsoft.com

[Product]
Microsoft Compiled HTML Help "hh.exe"

Microsoft Compiled HTML Help is a Microsoft proprietary online help format, consisting of a collection...

Tags:
1:09
Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity
» ‎ Bugtraq

Posted by apparitionsec on Jul 16
[+] Credits: John Page (aka hyp3rlinx)
[+] Website: hyp3rlinx.altervista.org
[+] Source:
http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-HTML-HELP-UNCOMPILED-CHM-FILE-XML-EXTERNAL-ENTITY-INJECTION.txt
[+] ISR: ApparitionSec

[Vendor]
www.microsoft.com

[Product]
Microsoft Compiled HTML Help "hh.exe"

Microsoft Compiled HTML Help is a Microsoft proprietary online help format, consisting of a collection...

Tags:

1:00
Building A Development Board For The STM32 G0 Series
» ‎ Hack a Day

When [Andy Brown] recently tripped over ST’s new G0 series of MCUs, he figured after some research that the best way to learn everything there’s to know about the STM32G0xx by making his own development board based around the STM32G081. The result is a Nucleo-style board, breaking out all pins to convenient 2.54 mm headers, and with a number of niceties, such as an on-board coin cell and 32.768 kHz LSE oscillator for RTC use and three different power supplies (3.3 V, 2.5 V, and 1.8 V) for the MCU.

The board is programmed with an external ST-Link programmer that connects to the SWD interface on the MCU, with a 20-pin programming header provided. While by no means small or compact, it makes for very easy breadboarding and prototyping, with all 2.54 mm headers accessible from the bottom and top.

As for the STM32G0 series itself, the jury is still out on its performance compared to the F0. The former swaps the Cortex-M0 core for an M0+, with a reduced pipeline length (3 stages in the G0) but increased frequency (64 MHz versus 48 MHz). The G0 has a little bit more SRAM, but so far less Flash storage. According to ARM, this MCU range is designed to remove any need to still use an 8-bit MCU. Big claims, indeed.

The biggest issue which [Andy] had while developing this board was probably with the CH340 USB-UART chip. Ordering them from AliExpress as is common, the CH340G ICs he got just wouldn’t work on the first board revision, forcing him to switch to the CH340E and requiring a board respin. This version has an internal oscillator and as a bonus even came in the original tape packaging when it arrived, instead of in a plastic baggy like with the CH340G parts.

See a video of [Andy] going through the design after the break.

Now that the board is up and running, it’ll be interesting to see what kind of performance can be extracted from this new MCU range and whether it lives up to the hype. On [Andy]’s blog you can find the design files, gerbers and a complete BOM for the board, so that you can easily make your own.

Tags: microcontrollers

0:00
Vuln: Mozilla Firefox and Firefox ESR Multiple Security Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Mozilla Firefox and Firefox ESR Multiple Security Vulnerabilities
Tags:
0:00
Vuln: Schneider Electric Floating License Manager ICSA-19-192-07 Multiple Security Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Schneider Electric Floating License Manager ICSA-19-192-07 Multiple Security Vulnerabilities
Tags:
0:00
Vuln: Linux Kernel 'crypto/af_alg.c' Use After Free Arbitrary Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Linux Kernel 'crypto/af_alg.c' Use After Free Arbitrary Code Execution Vulnerability
Tags:

Skip to page: 1 2 3 ... 909

Feeds

Recent items

Tags: arduino hacks

Tags: led hacks

Tags: led hacks

Tags: microcontrollers

Tags: drone hacks

Tags: computer hacks

Tags: Hardware

Tags: security hacks

Tags: science

Tags: led hacks

Tags: science

Tags: hackaday Columns

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags: headlinegovernmentprivacybankusacybercrimefraudcryptography

Tags: headlinehackermicrosoftflaw

Tags: headlinehackerdata lossfraudpasswordphish

Tags: headlinegovernmentprivacyusaspyware

Tags:

Tags:

Tags:

Tags: current Events

Tags: Podcasts

Tags: how-to

Tags: computer hacks

Tags: classic hacks

Tags: drone hacks

Tags:

Tags:

Tags:

Tags:

Tags:

Tags: lockpicking hacks

Tags: toy hacks

Tags: microcontrollers

Tags: parts

Tags:

Tags:

Tags:

Tags:

Tags:

Tags: