I walked out to my car from Bunnings, and there was a new HSW Maloo parked in front of me with the owner staring at his key fob and shaking his head.
I said “let me guess, car won’t open?” and he said yeah, and he’d been trying for about 5 minutes. I said that I’d had the same thing happen to me a few months back in the same spot, and then went to open my car.
Nothing. No beep, door stayed locked. Looked around and there was another couple trying to get into their car as well (late model C Class).
It took about 5 minutes of me trying the door every 20 seconds or so before it opened. HSV owner was still there when I left. The only thing he and I could think of causing it was the mobile phone tower in front of Aldi.
After reading the post, user u/riumplus decided to go out to the same spot with his Funcube dongle SDR and see if there was any interference that might explain the issues. But he found no such interference. However, when he pressed the wireless entry on his own keyfob he noticed reflections from the main transmission that were coming from the buildings walls. He wrote:
Cyberspectrum is a monthly software defined radio meetup that is held in San Francisco. During this meetup presenters show and discuss their SDR related work. The 12th Cyberspectrum meetup is occurring right now and this time there will be presentations from amateur radio astronomer Marcus Leech from Canada and wireless security researcher Tobias Zillner from Austria.
There is a live stream on YouTube shown below, and after it finishes it will also be available for viewing:
Edit: Stream is over. Marcus Leech gave a nice talk that gave an overview or amateur radio astronomy and explained some of his set up where he uses RTL-SDR dongles as the receiver.
Cyberspectrum: Bay Area Software Defined Radio #12 (Dec 2015)
The overview of today’s presentations are as follows:
• Marcus Leech from SBRAC: “An integrated proof-of-concept ‘all-digital’ feed for 21cm radio astronomy”
We show ongoing work in designing and building a proof-of-concept ‘all digital’ feed for 21cm radio astronomy experiments. While many professional radio astronomy observatories are using “digitize at the feed” techniques, amateur experiments (and successes) in this are very close to non-existent.
Digitizing at the feed carries many advantages, including overall system gain stability, and the ability to carry signals over cheap ethernet-over-fiber links.
We’ll show an example feed arrangement that uses a differential radiometry approach, and does much of the initial processing right at the feed, including radiometry and spectral calculations, sending summary data to an ordinary PC host over ethernet.
Challenges and pitfalls will be discussed.
• Tobias Zillner from Cognosec: “ZigBee Smart Homes – A Hacker’s Open House”
ZigBee is one of the most widespread communication standards used in the Internet of Things and especially in the area of smart homes. If you have for example a smart light bulb at home, the chance is very high that you are actually using ZigBee by yourself. Popular lighting applications such as Philips Hue or Osram Lightify and also popular smart home systems such as SmartThings or Googles OnHub are based on ZigBee. New IoT devices have often very limited processing and energy resources. Therefore they are not capable of implementing well-known communication standards like Wifi. ZigBee is an open, public available alternative that enables wireless communication for such limited devices.
ZigBee provides also security services for key establishment, key transport, frame protection and device management that are based on established cryptographic algorithms. So a ZigBee home automation network with applied security is secure and the smart home communication is protected?
No, definitely not. Due to “requirements” on interoperability and compatibility as well as the application of ancient security concepts it is possible to compromise ZigBee networks and take over control of all included devices. For example it is easily possible for an external to get control over every smart light bulb that supports the ZigBee Light Link profile. Also the initial key transport is done in an unsecured way. It is even required by the standard to support this weak key transport. On top of that another vulnerability allows third parties to request secret key material without any authentication and therefore takeover the whole network as well as all connected ZigBee devices. Together with shortfalls and limitations in the security caused by the manufacturers itself the risk to this last tier communication standard can be considered as highly critical.
This talk will provide an overview about the actual applied security measures in ZigBee, highlight the included weaknesses and show also practical exploitations of actual product vulnerabilities. Therefore new features in the ZigBee security testing tool SecBee will be demonstrated and made public available.
We’ve recently found what looks to be a new online video based course that uses the RTL-SDR to teach basic software defined radio topics. The course is not free, it is priced at $29.99, but the first three videos are free. Judging from the first three videos the content appears to be quite basic, but is presented in a very clear way that may be useful for beginners. Currently the lessons include:
Course Overview
Welcome to the exciting world of Software Defined Radio. In this video, we’ll discuss what SDR is, and why it’s such a hot button topic right now.
Setting up the environment
In this module, we’ll setup our environment for development. If you’re already very comfortable with Ubuntu, you might want to just follow the guide below.
Browsing the spectrum
In this module, we’ll cut our teeth on GRQX, and learn a little about the radio spectrum.
Signals Intelligence
In this module, we’ll learn how to find transmissions in the frequency domain, and capture them to disk for offline analysis.
Modulations
In this module, we’ll learn how to identify two types of basic digital transmissions, and talk a little about the history of radio.
Demodulation – Part 1
In this module, we’ll practice capturing signals in the wild, identifying the modulation, and demodulating the signal with GNU Radio.
Demodulation – Part 2
In this module, we’ll learn about clock recovery. And we’ll pull out packets from the garage door remote.
It also appears that they plan to have some live classes in the future.
We note that there are also alternative SDR training courses available such as Micheal Ossmanns lessons at greatscottgadgets.com/sdr.
To make it actually work as an SDR he also wrote some code to utilize the development board’s ARM processor which processes the ADC input into a radio signal, demodulates it and then turns it into audio via the boards DAC and speaker. The radio can tune from 8 kHz up to about 900 kHz.
The only real extra hardware in Alberto’s system is a low pass filter for anti-aliasing and impedance transformation, and a reconstruction filter to get sound to the speakers from the DAC. He also used the boards LCD screen to implement a full GUI tuning system.
The Free and Open Source Developers Meeting (FOSDEM) is looking for SDR presentations to give at this years conference in Brussels, Belgium which will be held on January the 80th & 31st of January.
Software Radio has become an important tool to allow anyone access the EM spectrum. Using free software radio libraries and applications and cheap hardware, anyone can now start hacking on wireless communications, remote sensing, radar or other applications. At FOSDEM, we hope to network all these projects and improve collaboration, bring new ideas forward and get more people involved.
The track’s web site resides at: http://gnuradio.org/redmine/projects/gnuradio/wiki/FOSDEM
Here, we will publish updates and announcements. The final schedule will be available through Pentabarf and the official FOSDEM website.
To suggest a talk, go to https://penta.fosdem.org/submission/FOSDEM16 and follow the instructions (you need an account, but can use your account from last year if you have one). You need to create an ‘Event’; make sure it’s in the Software Defined Radio track! Lengths aren’t fixed, but give a realistic estimate and please don’t exceed 30 minutes unless you have something special planned (in that case, contact one of us). Also, don’t forget to include time for Q&A. Typical slot lengths would be 30 Minutes including QA.
You aren’t limited to slide presentations, of course. Be creative. However, FOSDEM is an open source conference, therefore we ask you to stay clear of marketing presentations. Of course, we like nitty-gritty technical stuff.
We will reserve time for interactiveness, it won’t all be talks.
If you are qualified and interested in giving a talk the submission deadline is December 4th 2015.
Last week a reader of RTL-SDR.com wrote into us to let us know about some experiments that he had been performing with the telescopic stock antennas provided in our RTL-SDR dongle packages. The reader had built a corner antenna reflector in order to improve reception in one direction. We are posting his write up and results below:
This tutorial will discuss the use of a Corner Reflector with a monopole antenna, i.e. the stock RTL-SDR antenna. To keep this tutorial concise, the reader is encouraged to study the Wikipedia pages for details about Corner Reflector Antennas, Dipoles and Monopoles.
Corner Reflector Antennas are very easily constructed from 2 A4-sized cardboard panels, covered with tinfoil. This allows for a foldable and transportable external reflector to the built-in wifi antennas of a laptop, which are located on the upper corners of the display.
The reader is pointed to the fact that corner antennas are based on a Dipole, where the stock RTL-SDR antenna is a Monopole, so some adjustments will have to be made, which is discussed and explained later in this text. If there are real antenna specialists reading this, they are encouraged to do a more thorough writeup on the exact mechanism of a monopole-based corner reflector antenna, as there was little information to be found on the internet.
The experiment started as an attempt to receive a DVB-T signal centered around 506 MHz, from a mast about 10 miles away. Indoors. This should have given a clear and strong signal, but alas, the signal was very weak.
Initial reception of the DVB-T signal with the stock antenna and no modifications.
Reading up on Monopoles and their need for a ground plane, the magnetic base of the 14 cm long antenna was placed on a metal cooking pot. The signal was a lot stronger. (The middle part of the waterfall plot above.) Clearly a wooden table is not much of a ground plane.
Next a Corner Reflector was made from tinfoil and a cardboard box, much to the dismay of the resident Feline Overlord that had seized it. 🙂 A triangular piece was added for rigidity and as a ground plane. The Monopole antenna was placed on the ground plane triangle in the middle of the 90° corner and at the correct distance from the fold in the reflector. i.e. the Focal Axis, but the gain was less than the theoretical 10dB so this setup was unsuccessful. (Upper part of waterfall plot above.)
The breakthrough came when I wanted to study the effect of a larger ground plane. For this I put the corner reflector sideways and put the monopole on the outer edge to reduce possible reflections from the standing panel. There was only a slight effect compared to the cooking pot, so I decided to progressively move the monopole towards the back panel in order to see if the additional reflection would get some more gain. When I reached about 10 cm distance from the panel, the waterfall plot exploded with a very powerful signal! See the picture below for the transition from wooden table to the sideways configuration. (On top of the waterfall plot there is some residual from the ground plane cooking pot test.)
DVB-T signal with corner reflector.
The setup looks like this:
For a few days I was baffled as to why the corner reflector behaved this way. It had already dawned on me that the diagonal distance from the fold till the antenna tip was 14 cm in this configuration, so 1/4 WL. It was only after I visualized how a monopole works, that I understood: a 1/4 WL monopole is physically a quarter wavelength open ended resonator. i.e. at the base/feed point the electric current is maximum and the voltage minimum. At the tip it is reversed, with maximum voltage and zero current. See this page for details: http://www.radio-electronics.com/info/antennas/vertical-antennas/quarter-wavelength.php
Alternatively, the polar plot of a Corner Reflector Antenna also shows that the signal is weakest/zero in the direction of the panels, where the monopole base is located, while the maximum signal is along the center line between the 2 panels, which is where the tip of the monopole is located. Hence the signal *difference* over the monopole is thus maximized and this way it works best. As stated in the beginning, if an antenna expert can write up a better explanation, please contact the maintainer of the RTL-SDR Blog.
In retrospect, the original setup I tested could not work optimal since the entire monopole is irradiated equally if it is aimed along the Focal Axis. Moreover it was suspected that the mirror image antenna that makes a monopole work, was distorted because of the electrical contact between the triangular ground plane and the reflector panels. A test with an isolated triangular ground plane was planned but has now been permanently shelved.
For those who want to re-create the experiment, these are the reflector dimensions:
2 panels of 42*25cm, joined along the longest side.
36*25*25cm triangle at the bottom. This should give a 90° angle between the 2 largest panels.
The tinfoil can be wiped smooth and attached with some glue.
So to summarize;
Make sure you have a good ground plane!
A Corner Reflector Antenna can be constructed at frugal cost with a cardboard box and tinfoil. Larger reflectors are better, especially in the plane perpendicular to the Monopole, so it is better to have wide reflectors in stead of high reflectors.
Make sure the base of the stock monopole antenna is located in an area with low signal strength and the tip is located in an area of maximum signal, therefore maximizing the *difference* between base and tip of the Monopole. Usually this means perpendicular to the Focal Axis of the reflector panels.
Distances and Monopole lengths can easily be adjusted for various frequency ranges, making this a very versatile modification or enhancement to the stock antenna.
Speculation: Since there is a focal Axis rather than a Point (i.e. like a Parabolic Dish), the sideways configuration might be more suitable for tracking a moving satellite across the horizon, ideally at 45° azimuth.
Previously we posted about the Raspberry Pi’s ability to modulate one of its pins to produce FM transmissions with PiFM. A developer (F5OEO) has recently expanded on this idea, and now the Raspberry Pi is capable of modulating and transmitting FM, AM, SSB, SSTV and FSQ signals anywhere between 130 kHz to 750 MHz.
To transmit with the Raspberry Pi all you need to do is plug in a wire antenna to Pin 12 (GPIO 18) on the GPIO port and run the PiTx software by piping in an audio file or image for SSTV.
Important Disclaimer: While the output power is very small, you should still take great care as the carrier is a square wave, and there is no filtering on the antenna output. So any transmissions will cause harmonics all across the spectrum – possibly interfering with life critical devices. A filter *must* be used if you actually plan on transmitting with any sort of range further than your room. The predecessor PiFM has been reported to have a range of 10cm without an antenna, so it may be best to not connect an antenna to the pin if just testing. With a simple wire antenna the range is increased to 100m which could affect your neighbours. There are also strict laws and licences governing transmitting in most countries so make sure you follow them carefully. In short, get your ham licence and understand what you are doing before transmitting with any sort of amplification/range.
PiTX transmitting SSTV and received in HDSDR. From PiTX’s author’s Twitter @F5OEOEvariste
Over on YouTube the author of PiTx has also uploaded a video showing a wireless doorbell being replayed with PiTx. On the video description he writes:
PiTx is a software which permit to transmit HF directly through a pin of Raspberry Pi GPIO. Unlike PiFM which transmit only in FM, PiTx is able to perform multi modulation (FM,AM,SSB,SSTV,FSQ) : it has an I/Q input to be agnostic. The demonstration here is done in several steps : – Record an I/Q file from a doorbell transmitter on 434MHZ (first part) – Playing it with the Raspberry Pi using Pitx on HF on same frequency – Listen to the doorbell receiver which recognize the signal
Conclusion : Pitx is now a real TRANSMIT SDR at very low cost. Be aware that it generate lot of harmonics and never compete with USRP or HackRF. Goal is to popularize the transmission as rtlsdr popularize the reception.
Using the free AppCAD RF design assistant software, Anthony explains how the noise figure of a system increases with longer coax cable runs, and how it can be reduced by placing an LNA right next to the antenna. He also explains why the sensitivity of the radio won’t increase if the LNA is placed close to the radio instead.
In addition to this, he also explains why adding more LNA’s to a system decreases the linearity (IP3) of the system and that if the receiver has a built in LNA that the system linearity can be severely degraded by adding extra LNA’s, causing easy overloading and intermodulation. In conclusion Anthony writes the following:
In summary, a setup with a good antenna system connected to a receiver with a built in LNA:
May not benefit from having a preamp at the antenna.
The presence of a built in LNA is detrimental to the linearity and may degrade the signals.
So in conclusion:
Put the preamp as close to the antenna as possible.
Receivers with a built in LNA may not get the most out of an antenna system or preamp.
Proper gain distribution guarantees better performance than one-size-fits-all solutions, both in terms of sensitivity and strong signals handling.
Optimal Setup: Antenna -> LNA -> Coax -> ReceiverNF and Linearity Calculations in AppCAD
