Posts Tagged ‘en’

Is there such a thing as “hackerspace burnout” ?

Saturday, January 28th, 2012

After the awesome Chaos Communication Camp 2011, i had some difficulties to get involved with projects in the space for about a month and half: it’s like i lost something.

To put in context, i’ve been co-driving the truck that carried the material and luggage of 3 belgian hackerspaces and one dutch space up to Finowfurt and back. My co-driver did all the paperwork for the truck, made the whole pickup schedule, did the initial loading at the starting point, and even did the cooking every day since we arrived at the camp, while also taking care of his son. Hats off to that guy that will certainly recognize himself when reading this. On my side, i was busy coordinating the set up of our party tent (we barely had enough hands to raise it), doing all the wiring and light setup, and helping installing the tables and the network. The weather was not friendly either. After the camp was the teardown, packing and filling the truck, Then the driving back and final delivery to the different spaces, all on a very compressed schedule.

Now i feel the same thing again: i’ve been working in the space over the last month on a quite regular basis: drink shopping, moving shelves, filling fridge, garbage collection, rebuilding the electric installation nearly from scratch and dealing with the sharp aspects of socializing.

I want to work on my own pet projects and stop working on infrastructure and janitorial stuff for a while. For the ByteNight, i already made it clear that i will not get involved in any aspect of it. I’ll be there as a customer, sipping my drink on the sofa.

Once i finish the last missing bits on the electric installation, i will freeze all infrastructure projects (Zoppas, Parallel port interface, last power circuit and relay board) for some time.

Reboot in March 2012 ?

Wall wart hunting

Tuesday, January 17th, 2012

I found in my apartment about 10 wall warts and two linear power supplies that give the same (or similar) voltage for my equipment.

Spools of red and black wire with a power supply

Let the hunt begin

I would like to get rid of those power bricks and have a more consistent and centralized setup. I hope to make some savings in the process by using a more efficient oversized switch mode power supply. Another advantage is that if i want an UPS on that line, i just need to connect a SLA battery.

My apartment will be wired with 6 mm² wires carrying 12VDC: one branch go to the networking area, the other two go to my desk.

Let’s lay down some wires !!

Today in the physical mail box

Thursday, July 14th, 2011
Package content

Package content

Today i received the GSM shield for Arduino from Open Electronics. I rushed to get a pre-paid SIM card to start playing with the new toy.

I just realised that i don’t have an arduino board yet in my personal toolbox, but i can borrow one from the hackerspace to start experimenting.

I have two projects in mind:

  • mailbox watcher: Since the mailbox is far from my apartment and not within my regular walking path, (and i am a lazy person ;-) ), i want the board to send me an SMS when a letter is landing in the mailbox. This is also a nice opportunity to experiment aggressive power saving and see how long can a set of fresh batteries last.
  • Hackerspace door opener: I am also building a motorized lock for the local hackerspace. I don’t know yet what kind of remote control we can use, but it has to be democratic enough. This is not the most original project: the Ghent hackerspace already did it.

Assembly

GSM shield assembled

GSM shield assembled

The shield come as a kit, some soldering is required, but nothing too serious (only through hole components, 2,54 mm pin spacing). In my case, only the switch SW1 was tricky to install.

That’s all for the moment, time to write code.

EPIC FAIL

Thursday, May 12th, 2011

Ce matin, à vélo, sur le chemin du travail (et pas loin de l’arrivée en plus).

This morning, on the bicycle, on the way to work (and very close to my destination).

Opening the Vasco Digipass 810

Thursday, February 24th, 2011
Vasco Digipass 810

Vasco Digipass 810

Many belgian and european banks are providing their customers with a device that look like a small calculator. This device, coupled with your bank card,  is used to secure and authenticate the transactions when using internet banking.

Since that device is fairly standard, there is nothing stopping you from using the reader from bank A with your card from bank Z and vice versa, because the crypto processing is happening on the chip of your card.

Knowing that the heavy crypto work is delegated to the bank card, it is safe to assume that the device is quite dumb: a keypad to feed data to the card, a screen to display the results and a micro-controller to do some simple housekeeping tasks, like update the screen, poll the keypad, clock the card and send/receive data.

I have no proof of what’s described above, but since mine had dead batteries after five years of use, it has become a prime candidate for exploration, so let’s open the case !! :-)

Ugh !!

Digipass cracked open

Opened !!

It was a tough nut to crack !!

There are no screws and no clips holding it closed: the two halves of the case are welded together !! This is another prime example of planned obsolescence and wasteful engineering. There is no way to open it cleanly, you need to break it apart as careful as possible to get access to the main PCB and the batteries. Your ability to close the box afterward will fully depend on how you open it in the first place.

The batteries are nothing exotic: just two CR-2032 button cells. They are wired in series on the PCB, because many smartcards require a 5V power supply to work properly.

Circuit board detail

All test pads are clearly labelled !

When you observe the PCB, there are a lot of interesting test points, all properly labeled. A hacker’s dream. :-)

Fried !!

Unfortunately, while groping at it with a multimeter set to continuity tester, i fried the microcontroller. Apparently, that kind of invasive measurement was enough to kill it.

I wanted to check the continuity between the SDATA test pad and the DATA line on the card connector, the SCLK and the CLOCK line of the card connector. There was no continuity between those points and the J2 pad is still a mystery of what the purpose could be. An optional eeprom maybe ?

I received a new reader to continue with my day to day banking operations, but i still want to see the data flowing between the card and the reader. My mistake is just a setback: i will change strategy and try to (ab)use the reader as-is, without opening the case. :-)

More to come later. In the meantime, here are the Manufacturer’s information

 

IPv6 mining exploitation (digging tunnels)

Tuesday, November 23rd, 2010

IPv6 in IPv4

This is the most common situation: you want your IPv6 connectivity on your road warrior through your VPN:

Debian/Ubuntu:

router: /etc/network/interfaces

auto tunv6
iface tunv6 inet6 v4tunnel
address 2001:cafe:babe:1::1
netmask 64
endpoint 192.168.255.10
local 192.168.255.1
ttl 64

road warrior: /etc/network/interfaces

auto tunv6
iface tunv6 inet6 v4tunnel
address 2001:cafe:babe:1::2
netmask 64
gateway 2001:cafe:babe:1::1
endpoint 192.168.255.1
local 192.168.255.10
ttl 64

Shell commands:

Machine A:

ip tunnel add v6tun mode sit remote 192.168.255.10 local 192.168.255.1 ttl 63
ip link set v6tun up mtu 1280
ip addr add 2001:cafe:babe:1::1/96 dev v6tun

Machine B:

ip tunnel add v6tun mode sit remote 192.168.255.1 local 192.168.255.10 ttl 63
ip link set v6tun up mtu 1280
ip addr add 2001:cafe:babe:1::2/96 dev v6tun

IPv4 in IPv6

The weirdest and most interesting one: suppose you have equipment that is not IPv6 compatible, yet you want to connect them through a v6-only link between the two endpoints

Machine A:

ip -6 tunnel add v4tun mode ipip6 local 2a00:ffde:4567:edde::4987 remote 2001:473:fece:cafe::5179
ip addr add 192.168.99.1/24 dev v4tun
ip link set dev v4tun up

Machine B:

ip -6 tunnel add v4tun mode ipip6 remote 2a00:ffde:4567:edde::4987 local 2001:473:fece:cafe::5179
ip addr add 192.168.99.2/24 dev v4tun
ip link set dev v4tun up

Sources:

http://linux-hacks.blogspot.com/2008/02/howto-ipv6-ipv6-tunnel-and-ip4-ipv6.html

(Work in progress: this page will be syncronized with this one)

Documenting projects

Sunday, February 21st, 2010

Documenting projects is not an easy task and can be quickly boring if you don’t have discipline.
It will go to the point that you slack with that important part and you end up with a project that is long done and not documented at all.

This is a pattern I noticed when and after building my first car computer. I took pictures of the assembly, put them online, then I waited until i would find some spare time to write a nice article about it.

Time was never found for that.

During the build of the version 2.0 of my car computer, I also took pictures, but this time i used twitter to detail the timeline of my progress. The computer hardware was completed about six months ago. Someday, i will re-read my early tweets and try to build a nice article about it.

Six months and still nothing… I doubt something will change. But there can be surprises.

At the moment i’m working on a project named The Wandering Star: this is an easy to carry suitcase-shaped server destined to be used into hacking conferences and provide massive storage and a VPN link from the conference site back to its home base. I’m not alone on this project and we try to make a decent documentation of the progress on a wiki page. I have a bunch of pictures here.

Could that be the start of a new way for me to deal with that kind of stuff ? I hope so !!

Windows and IPv6

Sunday, October 11th, 2009

This is something really nice about Windows that few people know about: anybody with a recent enough copy of Windows have an IPv6-ready network stack.

Windows XP

The IPv6 stack is disabled by default, but it is very easy to enable: you just need to open the command prompt as administrator (start->run, cmd),then run the following command

netsh interface ipv6 install

If you already have an IPv6-enabled network

(unlikely if you’re behind a consumer-grade router)
Windows will automatically build an usable address using the subnet sent by the router and the MAC-address of the selected interface.

If you’re behind a NAT box/router

Type the following command to enable Teredo tunnelling

netsh interface ipv6 set teredo client

Windows Vista ant up

You don’t have to do anything: what’s described here is (finally) enabled by default !!

Type ipconfig anytime to check your network configuration: a production-ready public address will usually start with 2001: