Archive for the ‘Hacking’ Category

Name that Ware January 2007

Thursday, February 1st, 2007

The ware for January 2007 is shown below. Click on the image for a much larger version.

It’s unusual that I would post something that is a prototype that I made for Name That Ware; I usually consider my home-built prototypes to be unfair for the competition because I can make it arbitrarily obscure because by definition nobody else has seen these. However, I have a bit of a bone to pick this month. I try to avoid using this blog as a platform for my (biased) opinions, so I apologize for the rant: I feel this strikes too close to home to be left alone.

Some of you may be aware of the bomb scare in Boston caused by a guy who simply put circuit boards with LEDs up around the city. Those of you who read my blog frequently can probably guess that I’m not only upset by this, I’d be positively incensed by the sheer idiocy of the city of Boston in handling this situation. To quote Massachusetts Attorney General Martha Coakley, the maker of these is charged with a felony for creating a device described as follows:

“It had a very sinister appearance,” Coakley told reporters. “It had a battery behind it, and wires.”

Oh. My. God. What in the hell is she thinking? My whole life is about making stuff that, by her definition, could be interpreted as sinister looking. Am I now a terrorist? Or am I just a hard-working, freedom-loving engineer who doesn’t bother to put a nice shiny case around everything I build? Should I be arrested for walking around in public with these devices? And perhaps even displaying them as works of art, carrying them around with me to raves and other public places with lots of people at them? I can’t tell you how many times I’ve hopped on an airplane with devices that probably look more sinister than the one above, but are just as benign. And then, if you only knew how dangerous the Lithium Ion batteries in every laptop was in comparison to the stuff I have built…

Here’s another choice quote from the article:

‘”Scaring an entire region, tying up the T and major roadways, and forcing first responders to spend 12 hours chasing down trinkets instead of terrorists is marketing run amok,” Markey, a Democrat, said in a written statement.”‘

Look. Who scared the region? The signs, or your reaction to the signs? Have you not forgotten the immortal words of FDR:

“The only thing we have to fear is fear itself.”

If Boston had simply looked at the signs and evaluated them, there would be no scare, and no impact. Some of you may argue that you would rather be safe than sorry. Caution is always a good idea, but you need to be educated in what you’re being careful about. Simply going after whatever Hollywood might portray as a bomb, or what an uninformed person may phone in to be a bomb, is the making of a witch-hunt society. If I have a score to settle with my neighbor, I could just make it even by calling in the terrorist squad on them for having several empty bottles of detergent around their house because bleach could be used to make bombs. You can pay all the money you want to a terrorist response team, but if they are uneducated, they are still ineffective, and all they do is propagate the sense of insecurity and terror. I’m scared because now I know idiots are looking after our cities.

How many terrosists have these people chased down, exactly? I think the problem is that everyone is looking for terrosists so hard that even a humble artist has now been turned into a terrorist because over-funded and terribly ineffective programs are turning out to be a waste of public money, and these programs need to find a raison d’etre. Don’t blame the incompetence of your team on the artist. Blame your incompetence on a total lack of knowledge on the part of your team. Anybody lightly trained in the art of electronics–every reader of this blog, in fact–could immediately recognize the fact that what was in Boston was not a bomb. Wires and a battery pack do not make a bomb. At worst, the artist could be accused of vandalism; at the best, the artist is exercising his right to Free Speech.

Let me tell you what I worry about. The Spanish Flu was recently synthesized and tested on a primate population to study exactly how it managed to kill 2.5-5% of the world’s population in about one year, or 25 million people back in 1918 (see Nature vol 445, No 7125, pp237, “Concern as revived 1918 flu virus kills monkeys”). We’re still vulnerable to this strain, H1N1, of influenza, and it’s much more deadly than H5N1 (aka the dreaded “Avian Flu”). What of the terrorist who walks through Chicago O’hare on the Wednesday before Thanksgiving with a 4-oz spray bottle full of this or a similar virus, putting on his or her deadly “cologne” while waiting for their delayed connection in the crowded terminals? Extrapolating statistics, that would be 150 million people killed worldwide by the virus in 25 weeks. Remember that the US only has 300 million people. (Not a totally fair comparison, first because it is worldwide deaths vs. the US population only, and second because we have had great medical advances since 1918. However, the mechanism for killing by the virus is a Cytokine storm, which kills very rapidly and quickly–by the time you thought about going to see the doctor, you are probably about to die). Should we still research H1N1? We absolutely should. We need to understand this threat to combat it. Perhaps you say H1N1 is too esoteric for a terrorist to get ahold of. Well, last I checked, its less lethal “Avian Flu” friend (H5N1) that you have probably heard about is breeding in the poultry stocks of many third world countries. And even if its mortality rate is below 0.2%, consider the economic impact it would have if all the airports were shut down because it was reported that our busy travel and commerce system was being used as a conduit to spread the virus. Or, if you are worried about economic impact and not deaths, howabout global warming? There’s a problem that will impact generations to come and our leadership continues to bury its head in the sand about it. The Department of Homeland security will spend $35.6 billion next year searching for terrorists, but only $3 billion researching global warming. Do we have our priorities correct? We could lose double-digit percentages of Florida’s landmass as a result of global warming. And unlike terrorism, global warming is now pretty much a certainty. It’s not “if”, but “when”.

In the end, this “War on Terror” has done nothing but induce more terror on the population. The government introduced a whole new set of apropriations to deal with terrorism; now, these large, expensive organizations are looking for a reason to exist and they are justifying their existence by extending the reign of terror on the population and using innocent Americans as scapegoats. You want to know what really kills Americans? Smoking. Heart disease. Drunk driving. Lack of exercise. McDonald’s and Philip Morris has lead to the deaths of more Americans than any terrorist group, but I would never, ever, suggest that we ban such organizations. Choice is beautiful, even if it can be dangerous.

Don’t get me wrong–I’m not of the opinion that I think we should do nothing about a potential terrorist problem. Some measures were productive and effective, and probably good for us in the end. The point of this post is that despite the good things that have happened, I think that now things have gone just a little too far in the wrong direction and we are starting to lose the very thing we are trying to protect, our civil liberties and our peace of mind. We have scared ourselves into believing that ghosts are real, and this event shows us that it’s time to reconsider the reality of the situation.

I believe that fundamentally, the most effective way to deal with terror is to not be afraid of it. I say take it with a stiff upper lip, ignore it, and live life like you used to, as a free society with great liberties and tolerance for all walks of life. Travel. Express. Build. Innovate. Research. Be an Individual. Be smart about who you trust, but still be willing to trust. Even if you don’t understand someone right away, it doesn’t mean they are out to kill you. If you are afraid of terrorism to the point where you fear that a hack-job lighted sign could be a bomb, then you shouldn’t even be on the road. The more you try to look for terrorists, the more terrorists integrate into society and go under the radar, and the more successful they are at causing the population to terrorize itself.

Just because I live in a world of circuit boards and batteries, and because I’m not like you, doesn’t mean I’m a terrorist.

Thanks to those who read this post. I know there are those of you who will disagree with me, and I expect that you, too, will express yourself in my comments section. I apologize for this rather political and probably controversial message, but I feel if I don’t speak up about this, it may only be a matter of time before my rights are directly threatened:

Winner of Name that Ware December 2006!

Thursday, February 1st, 2007

I’m pleasantly pleased that this last ware took longer than a couple hours to guess. The winner of last month’s name that ware is Jeremy, for being the first to nail it fairly squarely: “I would guess this is something like a 5×7 LED character driver…”. This ware was a guest submission by echo, and I think I’ve learned something important about a Name that Ware that I haven’t been doing to date–I tend to include a full picture of the device, but echo just provided a small portion of it that was just sufficient to guess its function. I will endeavor to do this more after this month’s competition to add a little challenge factor. I was lucky to have guessed this myself when I saw it first; I only recognized it myself because I had looked at a similar version of this under a microscope many years ago and marvelled at the wire-bonded beauty of the LED array back when I was working on my thesis and I dropped one of these on a circuit board I was building at the time (see the lower of the two images shown at the link–it’s the glowing red display; some may recognize it from another hack that I did!). Jeremy, drop me an email to claim your prize!

Echo was kind enough to provide me some photos of the ware itself:

It’s the HDSP 2003, as you can see, which was back then was made by HP; this was then spun off into Agilent. Agilent then spun or sold this group into Avago Technologies. I hope that not too many of the employees lost their jobs between all of these reorganizations.

Below are some “action shots” that echo sent me as well. Thanks a bunch, echo!

Akihabara, Eat Your Heart Out

Wednesday, January 31st, 2007

Ten years ago, Akihabara was the place to be for the latest electronics and knick knacks and components. I’m convinced the new place to be is the SEG Electronics Market in Shenzhen (although to be fair I heard there is a competing market in Korea that’s supposedly even better–the Japanese test-market their stuff there even before they try it in Akihabara!).

As I first step foot into the building, I am assaulted by a whirlwind of electronic components. Tapes and reels of resistors and capacitors, ICs of every type, inductors, relays, pogo pin test points, voltmeters, trays of memories, all crammed into tiny six-by-three foot booths with a storekeeper poking away at a laptop, sometimes playing Go, sometimes counting parts. Some booths are true mom-and-pop shops, with mothers tending to babies and kids playing in the aisles.

Other booths are professional setups with uniformed staff and work like a bar for electronic components, complete with bar stools.

And it’s not like, oh, you can get ten of these LEDs or a couple of these relays like you do in Akihabara. No, no. These booths specialize and if you see something you like, you can usually buy several tubes, trays or reels of it–you can go into production the next day. Over there, a woman sorting stacks of 1GB mini-SD cards like poker chips; here, a man putting sticks of 1 GB Kingston memory into retail packages, next to him, a girl counting resistors.

Stacks of power supplies, varistors, batteries; ROM programmers. Atmel, Intel, Broadcom, Samsung, Yamaha, Sony, AMD, Fujitsu, every variety of chip. Some of them clearly ripped out of used equipment and remarked, some of them in brand new laser-marked OEM packaging.

Chips that I couldn’t dream of buying in the US, reels of rare ceramic capacitors that I only dream about at night. My senses tingle, my head spins. I can’t supress a smirk of anticipation as I walk around the next corner, to see shops stacked floor to ceiling with probably a hundred million resistors and capacitors.

Oh my god! Sony CCD and CMOS camera elements, I couldn’t buy those in the US if I pulled teeth out of the sales reps–and behind the counter, the guy sometimes has a datasheet–ask for it. A stack of Micrel regulator chips–over there, a Blackfin DSP chip for sale. The smell, the bustle, the hustle. It’s the ultimate electronic component flea market. Over here, a lady counting 256 Mbit DRAM chips…trays of 108 components, stacked twenty high, a row of perhaps 10 of them–she has the equivalent of Digikey’s entire stock of DRAM chips sitting right in front of me.

And across from her is a half dozen more little shops packed with chips just like hers. A man standing proudly over a tray of 4 Gbit NAND FLASH. All of this available for a little haggling, a bit of cash, and a hasty goodbye. This is Digikey gone mad. It’s as if they let the monkeys into the warehouse at Thief River Falls, Minnesota and spilled it into a flea market in China, and then some.

And that’s just the first two floors. Six more floors of computer components, systems, laptops, motherboards, digital cameras, security cameras, thumb drives, mice, video cameras, high end graphics cards, flat panel displays, shredders, lamps, projectors, you name it. On weekends, “booth babes” dressed in outrageous Acer-branded glittery body suits are loitering around trying to pull you in to buy their wares. It’s got all the energy of a year-round CES meets Computex, except the point here is not to show off the latest technology–it’s to get you in to these booths to buy it. Trade shows always feel like a bit of a strip tease, with your breath making ghostly rings on the glass as you hover close over the unobtainable wares underneath. This is no strip tease. This is the orgy of consumer and industrial electronic purchasing, you can get your grubby paws on every piece of equipment for enough quai out of your wallet.

A brisk walk down the street 3 blocks lies the Shenzhen bookstore. The first and most visible rack of books is a foreign book section, packed with classic books like Thomas Lee’s RF design book and several Razavi titles. I pick up Lee’s book…68 quai, or $8.50. Holy cow! Jin Au Kong’s book on Maxwell’s Equations…$5. Jin Au Kong taught me Maxwell’s Equations at MIT. I go on a spree…I pack my bag with six or seven titles, probably around $700 worth of books, and I go to the checkout counter and buy them for less than $35–complete with the supplemental CDs.That’s like an economy class ticket to Hong Kong right there!

Knowledge is cheap. Components are cheap. The knowledege in those books are the Real Deal, and the parts down the street are all there. And within an hours drive north is probably 200 factories that can take any electronics idea and pump them out by the literal boatload…and these are no backward factories. I saw with my own eyes name-brand 1550nm single-mode long-haul fiberoptic transcievers being built and tested out there. Shenzhen is fertile ground. You need to come here to see it to understand it. As a technologist from the US, I tremble in my boots, with terror and excitement–I get to be a part of this! This place has the pregnant feel of the swapfests in Silicon Valley back in the 80’s, when all the big companies were just being founded and starting up…except magnified by 25 years of progress in Moore’s Law and the speed of information flow via the Internet. In this city of 12 million people, most involved in tech or manufacturing, plenty of foreign influence, many learning English, all of them willing to work hard, there has to be a Jobs and Wozniak somewhere, quietly building the next revolution.

Okay, so this wasn’t a name that ware…it’s lame, but my dog ate my homework. I lost my digital camera on the way to Shenzhen in the plane somewhere, so now someone has a camera full of pictures from Christmas, factories, bachelor parties, and idiosyncratic amounts of close-up shots of electronics. The guy who found it has to think I’m a weirdo (I guess I can’t deny that!). I’ll find another ware and put it up soon–give me a couple of days!

Guts of my T60p

Saturday, January 13th, 2007

When I called in warranty service on my laptop to fix a problem with the LCD (can’t beat getting a new display for “free”), I thought it was a great opportunity to take some photos of the insides of the laptop as the tech did his thing. This black slab of hot silicon is a nice piece of work, so I thought it’d be neat to share the photos. Look at the heatsinks in this thing! No wonder it stays cool on my lap, unlike my old Dell which would get painfully hot. It’s also bristling with antennae…2 WiFi antennae, 2 cellular antennae, and one bluetooth module with integrated antenna in the display half of the laptop.

pwned

Thursday, January 11th, 2007

Tonight, this site was hacked by a fellow named c0rpman from Russia. Unclear on the exact mechanics of the hack, but there was a vulnerability in wordpress that I didn’t update to protect against right away, so I suspect that is a big part of what happened. There was a very interesting script left laying around; my passwords were changed. All the posts were deleted, and this message was left on my blog homepage:

D3FAcED!bY

..c0rp|mAn|...

D3fAcED bY hSw team--->#197297672

c0rpmAn

I had an interesting chat with c0rpman as well, as he contacted me via IM to tell me that my site was hacked. We discussed how he did it and why, and possible measures to prevent it from happening again. I suppose I am a target and there are other WordPress vulnerabilities that have yet to be disclosed. Fortunately, my web hoster (pair.com) has a backup of the database from about a week ago, and what you are seeing now is what they could piece together from the backup. I had some problems with very old posts–posts older than about March of 2006–not making it due to some MySQL database error, but I think it is fixed now. The pair.com techs have been very patient, helpful and responsive! I’m definitely not a PHP or MySQL expert, so this has been a learning experience on multiple axes. Comments and posts made within the last week are lost, but I’m willing to live with that.

For the record, I did try using a tool called warwick to recover some of my data from web caches, and many readers have offered their cached feeds and data to me. I really appreciate everyone’s help. It’s very supportive and touching in a time when I’m feeling vulnerable and definitely needing help. However, in the end it is better that my eyes are open, rather than ignorant. It’s not the first time I’ve been hacked, and it won’t be the last, but every time I learn something new and important. It is also comforting to know that there are so many helpful friends and strangers out there. Thanks to everyone for helping me sleep well tonight!