Reverse Engineering a Module from a Vacuum Tube Computer

It’s best to admit upfront that vacuum tubes can be baffling to some of the younger generation of engineers. Yes, we get how electron flow from cathode to anode can be controlled with a grid, and how that can be used to amplify and control current. But there are still …read more

Continue reading Reverse Engineering a Module from a Vacuum Tube Computer

Rocket Lab Sets Their Sights on Rapid Reusability By Snagging Rockets in Mid-Air with a Helicopter

Not so very long ago, orbital rockets simply didn’t get reused. After their propellants were expended on the journey to orbit, they petered out and fell back down into the ocean where they were obliterated on impact. Rockets were disposable because, as far as anyone could tell, building another one …read more

Continue reading Rocket Lab Sets Their Sights on Rapid Reusability By Snagging Rockets in Mid-Air with a Helicopter

Cold Plasma Torch Produces a Cleansing Flame that Never Consumes

It’s basically a lightsaber. Except smaller. And with an invisible blade. And cold to the touch. But other than that, this homebrew cold plasma torch (YouTube, embedded below) is just like the Jedi’s choice in elegant weaponry.

Perhaps we shouldn’t kid [Justin] given how hard he worked on this project …read more

Continue reading Cold Plasma Torch Produces a Cleansing Flame that Never Consumes

[Ben Krasnow] Gasses MEMS Chips, for Science

Why in the world does helium kill iPhones and other members of the Apple ecosystem? Enquiring minds want to know, and [Ben Krasnow] has obliged with an investigation of the culprit: the MEMS oscillator. (YouTube, embedded below.)

When we first heard about this, courtesy in part via a Hackaday post on MRI-killed iPhones, we couldn’t imagine how poisoning a micro-electromechanical system (MEMS) part could kill a phone. We’d always associated MEMS with accelerometers and gyros, important sensors in the smartphone suite, but hardly essential. It turns out there’s another MEMS component in many Apple products: an SiT 1532 oscillator, a …read more

Continue reading [Ben Krasnow] Gasses MEMS Chips, for Science

“I too like to live dangerously”, Accidentally Finding RCE in Signal Desktop via HTML Injection in Quoted Replies

Remediation TL;DR If you’re a concerned Signal user please update to the latest version of Signal Desktop (fixed in version v1.11.0) which addresses all of these issues. Note that the mobile apps for Signal were not affected by this issue. Backgr… Continue reading “I too like to live dangerously”, Accidentally Finding RCE in Signal Desktop via HTML Injection in Quoted Replies

Security flaw in Electron impacts hundreds of desktop apps

A security flaw in Electron, an extremely popular web application framework, leaves vulnerable targets open to remote code execution attacks. Electron underlies widely used desktop apps like Skype and Slack. This is the second critical remote code execution vulnerability of the year for Electron, after a Microsoft Windows app bug was publicly unveiled in January. This latest flaw was discovered by Trustwave researcher Brendan Scarvell. Electron has already issued a patch addressing the flaw, but it’s up to developers to implement it. Versions below 1.7.13, 1.8.4 and 2.0.0-beta.3 are vulnerable. Apps using those versions are vulnerable to cross-site scripting (XSS) attacks due to a failure to sanitize user input. Due to some specifics within Electron — explained in great detail here by Scarvell — it’s a relatively small jump to escalate that to remote code execution, which could then lead to full ownership of a machine. “A default Electron application includes access to not only […]

The post Security flaw in Electron impacts hundreds of desktop apps appeared first on Cyberscoop.

Continue reading Security flaw in Electron impacts hundreds of desktop apps