Werte Mithacker,

leider mussten wir zum wiederholten Male feststellen, dass nicht
alle Mithacker ihrem kEHrwochendienst Folge leisten.
Darum fordern wir mit Nachdruck alle Mithacker auf, zur jährlichen
kEHrwoche vom 18. bis 21. April 2014 in Stuttgart zu erscheinen.

Datenrückstände sind in den dafür vorgesehenen Behältern zu sammeln.

Wir bitten die Trennung in die Kategorien Vorträge, Workshops
und Sonstiges strikt zu befolgen.
Die Leerung der Behälter erfolgt letztmalig zum 01.03.2014.

Mit freundlichen Grüßen,
gez. die Hausverwaltung


Für alle, die solche Aushänge im Hausgang nicht kennen: Das Easterhegg 2014 (Codename kEHrwoche) sucht Vorträge!
Bitte reicht eure Talk- und Workshop-Vorschläge bis 01.03.2014 direkt im frab ein.
Wir freuen uns auf eure Einreichungen!

flattr this!

pic2Auch ohne Bohnen-Cafe war das RepairCafe letztes Wochenende – das erste, welches ebenfalls über repaircafe.de bzw. repaircafe.org angekündigt war – eine klasse Aktion und voller Erfolg!

Es galt, mehrere LC-TV, Stromversorgungen, Audio-Verstärker, sowie einen Mixer, einen Beamer, ein Notebook, ein DECT-Fon, einen Mac, sowie diverse weitere Dinge zu reparieren, was in vielen Fällen zu reanimierter Funktion führte.
Auch in Fällen in denen keine Reparatur möglich war, hatte die Sache natürlich einen Lerneffekt für alle Beteiligten und es wurde zumindest versucht ein Stück Hardware vor der Müllhalde zu retten.

Wer den Termin verpasst hat muss nicht bangen: Das RepairCafe findet jeden ersten Sonntag im Quartal statt. Der nächste Termin ist der 6. April 2014.

flattr this!

IMG_20140104_165009Since exco is not big on baking cookies for Christmas, he invested his time in a project he was thinking about doing for some time: Building an electrified kickboard.

The ingredients are:

It’s a pretty bare-metal job. Instead of adding a microcontroller and programming some firmware he opted for a simple push potentiometer to control the motor speed (video of first motor test)

A first try to build a belt tensioning mechanism by sliding the motor mount looked nice enough but didn’t manage to hold up to the torque and had to be re-designed.

Once that was sorted out it was time for a test ride. Impromptu as always the two battery packs went into his trouser pockets (don’t try this at home) and were connected via a long Y-cable to the motor controller. He’s currently in the process of building a new battery pack from used Makita battery packs with 18650 cells.

Check out the video of the first test drive:

If you’re planning to built your own e-something, Maedler has a nice online calculator for dimensioning the drive train.

For this build the no-load RPM was measured at 1285 rpm which would yield a theoretical maximum speed of 26.85 km/h. Actual measured speed was 22 km/h using 6S Li-Po cells or around 25 km/h using 7S cells.
Mind you, on a kickboard this is scary fast and quite literally brings tears to your eyes from the cold winter wind draft.

There’s also a more detailed build log over at the Endless Sphere forum and a whole bunch of extra photos.

flattr this!

shackspace at 30c3

Allgemein Dezember 26th, 2013


December 27th to 30th, 2013
CCH Congress Center Hamburg, Germany, Earth, Milky Way

The 30th Chaos Communication Congress (30C3) is an annual four-day conference on technology, society and utopia. The Congress offers lectures and workshops and various events on a multitude of topics including (but not limited to) information technology and generally a critical-creative attitude towards technology and the discussion about the effects of technological advances on society.

This year as well, shackspace is present with an even larger assembly than last year. Drop by at congress and say hello!

For those of you who can’t make it this year, there will be live streaming of most lectures.

flattr this!

ubnt_logo_basic_flat_colorOver a year ago shackspace migrated its Wifi infrastructure to an all-Ubiquiti setup because our previous setup made up of consumer grade TP-Link access points was neither stable nor could it cope with enough clients to cover 30+ visitors to the space. We’ve decided to pick up a few UniFi access points and were really happy with the ease of installation as well as management capabilities.

However, this wouldn’t be a hackerspace if there wasn’t someone applying a bit more scrutiny than usual to the new toys.
In this case it was shackspace hacker momo who soon discovered a serious flaw in the UniFi controller management web interface.

After following the best practice of responsible disclosure, now, a year later, momo can talk about the details behind the issue.
A fix for the bug discovered has already made its way into updates quite a while ago so if you kept your infrastructure up to date, you’re already safe from that particular bug.

The bug in question allowed an attacker to forge a special DHCP hostname (e.g. containing HTML and Javascript code) and inject this information into the UniFi controller web interface where it was then executed.

The issue was assigned CVE-2013-3572 and was just now released. If you’re still running UniFi 2.3.5 or older, now’s a good time to update ;)

flattr this!