Posted on Leave a comment

LINUX SAMBACRY

excellent news everyone, Windows is not the only operating system with remote code execution via SMB. Linux has likewise its own, seven-year-old version of the bug. /s

This Linux remote execution vulnerability (CVE-2017-7494) impacts Samba, the Linux re-implementation of the SMB networking protocol, from versions 3.5.0 onwards (since 2010). The SambaCry moniker was almost unavoidable.

The bug, however, has nothing to do on exactly how Eternalblue works, one of the exploits that the present version of WannaCry ransomware packs with. While Eternalblue is essentially a buffer overflow exploit, CVE-2017-7494 takes advantage of an arbitrary shared library load.  To exploit it, a malicious client needs to be able to upload a shared library data to a writeable share, later on it’s possible for the attacker to cause the server to tons as well as execute it. A Metasploit exploit module is already public, able to target Linux ARM, X86 as well as X86_64 architectures.

A patch addressing this defect has been published to the official website as well as Samba 4.6.4, 4.5.10 as well as 4.4.14 have been issued as security releases to correct the defect. patches against older Samba versions are likewise available. If you can’t apply the patch at the moment, the workaround is to add the parameter “nt pipe support = no” to the worldwide section of your smb.conf as well as restart smbd. note that this can disable some expected performance for Windows clients.

Meanwhile, NAS vendors begin to realise they have work on their hands. different brands as well as designs that utilize Samba for data sharing (a lot, if not all, of them provide this functionality) will have to problem firmware updates if they want to patch this flaw. If the firmware updates for these appliances take the exact same time they usually do, we will have this bug around for rather some time.

Posted on Leave a comment

HACKADAY LINKS: JANUARY 4, 2015

Chips as furniture is now a thing. It started off with a 555 footstool from Evil mad Scientist and moved on to an EPROM coffee table. now [msvm] over on the war Thunder forums has built a Nixie tube chauffeur table. It’s based on the K155, as well as as a neat bit addition, he’s included a genuine vintage chip under glass in the table.

Have some tongs, an anvil, as well as a blowtorch? Make some bottle openers out of framing nails. There’s a great deal of range right here in the shapes of the bottle openers.

[Stephen] utilized a solid specify relay he discovered on eBay to drive some Christmas lights. The SSR failed. That implied it was time to see inside of this relay looked like. The short response is, ‘a great deal of goop as well as epoxy’, however the traces look huge sufficient to support the present it’s rated for.

Imagine a part of your 3D printer breaks. That’s alright, just print another…. oh, yeah. Well, I assumption it’s time to make a bearing bracket out of wood.

The Electronica MK-54 as well as MK-61 (actually the Электроника МК-54) were extremely prominent Soviet programmable calculators. now there’s an emulator for them.

[Rue Mohr] discovered a extremely inexpensive TFT screen on an Arduino shield. The chip for the screen was an SPF5408, a chip that isn’t supported by the most typical libraries. He ultimately got it to work after emailing the seller, getting some libraries, as well as renaming as well as moving a lot of stuff. If you have one of these displays, [Rue] just saved you a lot of time.

Posted on Leave a comment

TOUCHING CONVERSATIONS: email SNIPPETS SCROLL BY ON ELECTRO-EMBROIDERY piece

[Wei Chieh Shih] truly moves the needle when it pertains to wearable technology. His textile style job entitled I Am extremely delighted I hope You Are Too is a striking marriage of masterful hand embroidery, delicate circuitry, as well as cautious programming.

[Wei] is utilizing an Arduino micro to drive a matrix of surface-mount LEDs in the Hello, world video, which is a ramp-up to the scrolling text version that’s in development now finished. That full version is part of his residency job at Arquetopia in Oaxaca, Mexico as well as screens snippets of emails from his past relationships. It’s huge, with several matrices as big as 8×25 pixels!

No develop notes might be discovered for this or any type of of [Wei]’s similar projects, such as this awesomely hazardous 200 laser diode jacket or this eerily lovely light installation on Taiwan’s north beach. based on the pictures, our conjecture is that he is utilizing normal 6-strand embroidery floss to make stem or half cross-stitches on all the paths. He then runs extremely thin, versatile conductor beneath the channel of stitches as well as solders the wires to the element pads.

If [Wei] wants one more method to wear his heart on his sleeve, he might check out these dynamic LED garments hacks.

Update: [Wei] has completed this project, as well as has a lot more info offered at his Behance site.

[via adafruit]

Posted on Leave a comment

AUTOMATED CHESS set DOES IT FROM below

You can get class credit history for the coolest things these days. Take for instance, this Automatic Chessboard that [Brian] as well as [James] developed for the final job in one of their classes this spring. We just looked at a robotic chess configuration on Monday that utilized a gripper mounted on a gantry to move the pieces. This one’s a great deal more easy to use as well as borders on magical. That’s since the moving parts are all found below the board as well as might be hidden from view if a appropriate situation were developed around the edges.

There are two primary elements to this build. The very first is a grid of reed switches that find the moves made by a human. This works since each piece the human player utilizes has a weak magnet glued to the bottom which is just strong sufficient to actuate the reed switch as well as let the computer sense what move was just made. On the robotic side of things this works like a plotter. Each of the computer’s pieces has a metallic disc glued to the base. What basically amounts to a plotter under the board utilizes rare-earth magnets to grab the computer’s piece as well as drag it to the next playing position.

The utilize of two separate magnetic systems provides some fascinating style challenges. You can see the gadget in action in the video after the break, as well as a full writeup as well as source code bundle is offered at the blog linked at the top of this feature. however for your convenience we’ve likewise mirrored the PDF whitepaper after the break which lays bare all of the juicy details.

[Final_Project]

Posted on Leave a comment

TRINKET EDC contest drawing #5 results

The final random drawing for Hackaday’s Trinket daily bring contest was held tonight, as well as the champion is [flaming_goat] with Trinket Pocket IR Analyser/Transmitter!

In addition to having an incredible username, [flaming_goat] likes IR protocols. Trinket Pocket IR Analyser/Transmitter is a standalone gadget to read, examine as well as transmit Infrared (IR) signals. The IR part of the job is handled by a Vishay TSOP38238 (PDF link) The 382 series is a 3 pin module. It is available in a number of variants, each tuned to a certain provider frequency. The 38238 will decode IR signals at 38 kHz.

The demodulated IR signals are fed into the Pro Trinket, where they can be analyzed. data is either sent with the serial terminal or displayed on the on-board 1.44″ TFT LCD. source code for the whole job is up on [flaming_goat’s] GitHub repo.

[flaming_goat] will be getting a Teensy 3.1 and an Audio+SD adapter from The Hackaday Store. If the pro Trinket is a gateway drug, then Teensy 3.1 is the hardcore stuff. Powered by a Freescale Kinetis ARM Cortex M4 processor in a small package, the Teensy 3.1 packs rather a punch. You may believe all that power would indicate complex tools, however Teensy 3.1 is still simple to program utilizing the Arduino IDE. The Audio+SD adapter board provides Teensy 3.1 the capability to produce some quite respectable audio, thanks to the Teensy Audio Library.

This was the last regular drawing for the Trinket daily bring Contest, however there is still time to go into as well as win the huge prizes! The deadline is January 3 at 12am PDT. That’s just about 3 days to go into – so procrastinators, get in the game!

Posted on Leave a comment

A closer looks helps YOU build YOUR own DIWIRE BENDER

Whether or not you’re actually going to build this CNC wire bender, we think you’ll love getting a closer look at how it’s put together. The team over at PENSA got such a strong reaction from a look at the original device that they chose to film a video (embedded after the break) showing how the thing was put together. They’ve also posted a repository with code, bom, etc.

In the image above [Marco] shows off the portion that actually does the bending. It’s developed to mount on the pipe through which the corrected wire is fed. The 3d printed mounting bracket really makes this a lot easier. The assembly offers a place to attach the solenoid which moves a bearing in and out of position. That bearing presses against the wire to do the bending, but should be moved from one side of the wire to the other depending on the direction of the next bend. This is a lot simpler to understand after enjoying the demo video which is also embedded after the break.

Posted on Leave a comment

DESIGNING YOUR project TO SCALE: crossing THE CHASM

Hackaday is all about the neat hacks and the repurposing of old components into new projects, but numerous people then try to take those projects and turn them into businesses. We’ve seen lots of people offer their stuff as kits and sell them on Tindie, with the rare few going on to develop a consumer electronic product at scale.

The Hackaday prize 2017 best product highlights this journey. “Scale” itself is a vague term, but essentially it implies to be able to produce enough to meet market demand. We hope that market demand is roughly 7 billion units, purchasing yearly, but the reality is that it is somewhere between 1 and a few hundred thousand, with very big differences in manufacturing at each purchase of magnitude. So how do you start with a proof of concept and design your product from the very beginning to be optimized to scale to meet whatever demand you can handle?

The Chasm

The hardware startup world calls it the retail chasm, and it’s the huge gap between making your first few units in your home, and mass producing tens or hundreds of thousands of units. This is where many startups fail, because they can’t get the benefit of large volume discounts on components, they can’t afford the injection molds, and assembly is expensive if they can find someone to take on the work at all.

But they can’t charge any much more than they would be able to sell it for in volume, so the margins are non-existent and it is really hard to grow. The trick to crossing this chasm is to design the product FOR the chasm. To use components that are easily acquired in low volume, and assembly methods that are still available without expensive tools.

Get comfortable with SMT

Surface mount components on circuit boards save cost, space, assembly time, and are much more readily available than through-hole counterparts. If you want to manufacture a product in volume, use SMT whenever possible. I’ve had enough connectors ripped off the board that I’m pleased to make an exception for components where mechanical stability is essential, but SMT makes everything better. There is a lot of worry about making the transition and the skills required, but the landscape for making circuit boards at home has gotten much better, with much more resources like OSH stencil and experimentation into reflow controllers like the Controleo.

When looking through the best product list of submissions, it is clear that products that are much more refined and scalable are all using SMT where possible. It’s common to start with breakout boards for various components and wire them together through a breadboard for the proof of concept, but then rapidly relocation to SMT for the first revision of the customized PCB. heartyPatch started with a development board wired through a breadboard and has refined to a small PCB with practically entirely surface mount components, and practically entirely on one side (the temperature sensor is on the back side and needs to be, but that will complicate assembly).

The heartyPatch can be put together on a hot plate.
Assembling PCBs at home is easy, and mostly just requires a pair of tweezers and a hot plate or toaster oven. Of course producers are set up to do SMT really well, so scaling is simple.

Use Existing Parts

It’s tempting to design a customized enclosure that is slick and tiny, or to source a transformer with limited suppliers, but that will only get you in trouble. In the short run it implies you’ll pay a lot for the parts and may have to purchase a minimum number that’s beyond your initial demand. start with an enclosure from Polycase or Hammond, then modify it as needed. numerous of the enclosure companies offer modification and printing in house, too, implying you can purchase your parts completely ready with very little up front cost.

Extruded aluminum cases are another popular option, because you can customize the length as well. The City Air quality project chose this route and ended up with a robust and good enclosure without needing to pay for tooling costs. They have built in scalability. The part cost may be higher, but the initial investment required is much lower, making it simpler to cross the chasm of manufacturing in small volumes until your demand grows enough to afford to invest in your own mold.

Another example is the USB TinyTracker, where [Paul] started with the enclosure and developed his USB TinyTracker to fit inside. If he scales up he can eventually design his own enclosure, but for the beginning he has all he needs.

The City Air quality project uses an aluminum extrusion for the enclosure.
Remove Parts

If you don’t need it, you don’t have to source or assemble it. It’s not unusual in some factories for an unobserved producer to try to save money by removing a component and if it still works they ship it. naturally you want to be in control of this, but the idea has merit.

At every opportunity, ask yourself if you need this component (or if you can remove it from the product and offer two different versions, like WiFi enabled or not). just as essential is trying to find opportunities for doubling up usefulness so you can eliminate a part or an assembly step or jig. For example, design your enclosure so that it snaps together, with bosses to hold the PCB in place. This eliminates a screwing step, sourcing screws, and possibly a gluing step as well. It is tempting to add parts and features to make your product much more appealing to much more people, but each one of those additions adds time and cost and failure points and complexity for the users.

Refine Assembly Time

Every minute of assembly time is multiplied by the number of units to manufacture, and it adds up quickly. In addition, setting up and taking down an assembly process can account for even much more than the process time, making batching of processes essential. It’s much better to assemble 100 PCBs and then program 100 PCBs than to assemble 1, program it, assemble another, program it, and repeat 100 times. Make your stations as easy to set up and take down as possible so that when it’s time to make another batch of units you don’t lose a lot of time on overhead.

Spend some time taking a look at what is slowing things down during the process, or what is causing inconsistency in production and thus quality controls. A few hours repairing that problem can easily save time and improve yield.

More importantly, though, is refining the design with assembly time in mind. eliminate parts where possible, use snaps instead of screws, and build in sanity checks and alignment pins so that parts can only go together one way. Make it easy to program the microcontroller, and don’t position parts so that they block other parts.

Conclusion

Crossing the chasm is really hard, but developing your project to scale from the beginning will save lots of pain. You can always swap out parts and make improvements in the future when you scale, but you ought to prepare in the beginning for lower volumes and much more time-consuming assembly using less expensive tools.

Are you working on your own product journey best now? enter it in the Hackaday prize best product category. It’s a chance for you to connect with the early adopters that make up the Hackaday community and generate early buzz for your product release. There are cash prizes (twenty finalists each awarded $1000 with one best product prize of $30,000) and there’s a substantial multiplier that comes from being a beloved hardware producer within our community.

The HackadayPrize2017 is Sponsored by:

Posted on Leave a comment

LINUX picture frame serves AS WIRELESS RASPBERRY PI display

Here’s a novel method to adding a display to your Raspberry Pi. instead of using a wired display — either via the HDMI (which can feed a DVI port with a simple hardware adapter) or the composite video out — [Chris Bryden] decided to use Bluetooth to provide a wireless display. This really depends on the hardware that you have available. He snapped up a hackable digital picture frame for a song and used the 320×240 display for this project.

You can see the USB nub plugged into the RPi in the image above. It’s a Bluetooth dongle and there’s with a matching one on the digital frame. With the two networked in such a way [Chris] got to work setting up a VNC that would let him pull up the X desktop over the network.

This ends up being one of the best uses we’ve seen for the Bluetooth protocol, and the small screen offers a substantial advantage over the use of a simple character display.

Posted on Leave a comment

CHRISTMAS TREE ANALYZES YOUR TWEETS

It’s Christmas time. You have a string of 50 individually addressable RGB LEDs, what would you do? Well, [Barney] made a decision to try something different. He’s made a Christmas tree that shows Twitter’s current beliefs about the holiday.

Wait, what? We admit, it’s a type of odd concept, but the software application behind it is pretty cool. As it turns out Stanford University’s natural Language Processing group released the source code for their sentiment analyzer. Unlike a normal sentiment analyzer which assigns points to positive words and negative points for negative words, this actually utilizes a deep learning model which develops up a representation of entire sentences based on their structure — only problem? It was created and trained to examine motion picture reviews, not Christmas tweets.

Regardless, it still does the technique (kind of), but, it’s pretty slow. [Barney] has his fastest computer running four instances of the analyzer, which pulls Christmas tweets that have been sorted by the Twitter API — it then analyzes them, assigns the sentiment, and locations them in a second queue. He’s utilizing beanstalkd for the queuing and a Raspberry Pi to manage the lights. The result is a pretty light display whose colors represent the beliefs of incoming tweets — it’s hard to state if it’s actually successful in reflecting the opinion of the tweets, but it’s a pretty amazing concept.

Stick around after the break to see the Christmas Tweet Analyzing Tree in action — state that 5 times fast!

Posted on Leave a comment

FRIDAY HACK CHAT: best PURPLE PCBS

Every Friday, we gather ’round the hot air gun over on Hackaday.io, invite some cool people over, and get them to talk about what they do. This is the Hack Chat. It’s become a tradition, and already we’ve had a ton of awesome people walk through our doors.

This Friday, we’re going to sit down with the purveyors of best purple PCBs. Over the last decade or so, a lot has changed in the space of small-run PCB production. ten years ago, PCBs were expensive, and it wouldn’t be abnormal to spend hundreds of dollars on a small run of tiny boards. Now, The DEF con 24 badge, in a panel are more affordable than ever, giving industrious hardware creators access to professional quality manufacturing at a fraction of the price seen just a few years ago.

For the last few years, OSH Park has been a mainstay of low-volume PCB fabrication. Their web site is as basic as it gets: publish some Gerbers, an Eagle board file, or a KiCad PCB, press a few buttons, and in a week or so you’ll have a best purple PCB in your mailbox.

This week, we’re inviting [Drew Fustini] and [Dan Sheadel] to talk about what OSH Park does, how they became the first place that pertains to mind when you need a PCB. They’ll describe why the boards are purple, environmental guidelines for PCB manufacturing in the US, shared projects and ideas and tricks for creating the best board.

What would you like to see from a PCB supplier? would you like to see OSH Park expand additionally into their burgeoning Pog business? how about a sticker club? who would win in a fight, a blue robot pet dog or a purple robot shark? All these questions and a lot more will be answered; if you have a question for the OSH Park team, drop it in this spreadsheet.

Here’s how To Take Part:

Our Hack Chats are live community events on the Hackaday.io Hack chat group messaging. This hack chat will take place at twelve noon Pacific time on Friday, June 23rd. Confused about where and when ‘noon’ is? Here’s a time and date converter!

Log into Hackaday.io, visit that page, and look for the ‘Join this Project’ Button. once you’re part of the project, the button will change to ‘Team Messaging’, which takes you directly to the Hack Chat.

You don’t have to wait until Friday; join whenever you want and you can see what the community is talking about