Security Issues regarding GSMA eSIMs / eUICCs + Javacard

The independent security researcher Adam Gowdiak has published an extensive report on flaws he found in some eUICCs (the chips used to store eSIM profiles within the GSMA eSIM architecture). While the specific demonstrable exploit was in a product of one specific CardOS Vendor (Kigen, formerly part of ARM), the fundamental underlying issue is actually an architectural one.

The Oracle Javacard [memory] safety architecture relies on a so-called bytecode verifier which is a program that you run after compiling an application, but before executing the code on the Javacard. The specifications allow for both on-card and off-card verification. However,...

TIG сварка в домашней мастерской, знакомство. Часть 4. Настройка, присадка, включение

Мы решили приобщиться к такому замечательно полезному делу, как сварка неплавящимся (вольфрамовым) электродом в среде защитного газа, иначе — TIG, аргоно-дуговая сварка, и уже познакомились с минимальными мерами защиты и газобаллонным оборудованием процесса (Часть №1); сварочными аппаратами, горелками и расходными частями к ним (Часть №2); присоединили все кабели и шланги горелки к сварочному аппарату, подобрали, заточили и установили W электрод (Часть №3). Пора включать сетевое питание и попробовать наложить свои первые швы. Оговоримся — речь идёт о домашнем любительском применении, малыми силами и средствами, имея до этого только небольшой опыт сварки плавящимся покрытым электродом (MMA), да разнообразной пайки. Читать...

HackRF Pro Q+A

This post is a collection of some of the first questions asked by the community about HackRF Pro shortly after we announced it. Questions were asked by folks across our various social media accounts and in our Discord server. The answers given here are expanded versions of how the folks on our team responded to the public question we observed.

Why is it called HackRF Pro and not HackRF Two?

We felt that “Pro” expressed the idea that this is a refinement of the HackRF One design and that “Two” would more likely be interpreted as a revolutionary design. Our goal was...

Meet HackRF Pro

We’re thrilled to announce HackRF Pro, the newest addition to the Great Scott Gadgets family of Software Defined Radio (SDR) platforms!

Building on the legacy of HackRF One, HackRF Pro is an SDR peripheral that enables transmission or reception of radio signals from 100 kHz to 6 GHz. Like its predecessor, HackRF Pro is open source hardware and designed for versatility, whether you’re developing wireless tech, researching the security of wireless devices, tinkering as a hobbyist, learning or teaching about the RF spectrum, or building advanced custom firmware.

HackRF Pro takes everything users love about HackRF One and...

Turbine Transport Transformer

[Concept] Transforming turbine transport

Самодельный SDR приемник на Zynq

В этой статье я расскажу о том, как я делал предельно дешевый КВ Web-SDR приемник на SoC Zynq.

Основа приемника — Б/У плата Antminer S9. Фактически этот проект является форком уже существующего приемника WEB-888, который, в свою очередь, является продолжением приемника KiwiSDR.

Inside the Apollo "8-Ball" FDAI (Flight Director / Attitude Indicator)

During the Apollo flights to the Moon, the astronauts observed the spacecraft's orientation on a special instrument called the FDAI (Flight Director / Attitude Indicator). This instrument showed the spacecraft's attitude—its orientation—by rotating a ball. This ball was nicknamed the "8-ball" because it was black (albeit only on one side). The instrument also acted as a flight director, using three yellow needles to indicate how the astronauts should maneuver the spacecraft. Three more pointers showed how fast the spacecraft was rotating.

Since the spacecraft rotates along...

Baseliner: A Deep Dive into Wireless Sensor Networks for Conservation

Join us for this hands-on workshop at ICCB 2025. We'll deep dive into deploying and maintaining in situ wireless sensor networks for environmental monitoring and verification of conservation and restoration projects at scale.

The post Baseliner: A Deep Dive into Wireless Sensor Networks for Conservation first appeared on Freaklabs.

The post Baseliner: A Deep Dive into Wireless Sensor Networks for Conservation appeared first on Freaklabs.

Precision Clock Mk IV

[Hardware] GPS synchronised, millisecond precision, automatic timezones and more!

Reverse engineering the 386 processor's prefetch queue circuitry

In 1985, Intel introduced the groundbreaking 386 processor, the first 32-bit processor in the x86 architecture. To improve performance, the 386 has a 16-byte instruction prefetch queue. The purpose of the prefetch queue is to fetch instructions from memory before they are needed, so the processor usually doesn't need to wait on memory while executing instructions. Instruction prefetching takes advantage of times when the processor is "thinking" and the memory bus would otherwise be unused.

In this article, I look at the 386's prefetch queue circuitry in detail. One interesting circuit is the incrementer, which adds 1 to a pointer to step through memory. This sounds easy...