Category: Other

The RFNM: A Next Generation SDR with 10 MHz to 7200 MHz tuning range, 12-Bit ADCs and up to 612 MHz Bandwidth

The RFNM is an upcoming software defined radio that has some impressive high end specifications only seen in SDRs costing thousands, and at the same time the creator claims that it will be priced at a steal. While no pricing has been set, the creator noted in a Reddit post that pricing will be "closer to $500", bringing it's price similar to SDRs like the HackRF, bladeRF, LimeSDR, PlutoSDR.

The RFNM will have eight 12-bit ADCs on board, and provide up to 612 MHz of real time bandwidth for receiving. For transmitting it has two DACs, with up to 153 MHz of TX bandwidth. The tuning range will be from 10 MHz up to 7200 MHz. They note that their front end also has 13 preselection filters and six different LNAs and programmable attenuators.

Pushing 12-bit 612 MHz bandwidth of the device would be difficult, so to help with processing all that data, there will be an onboard VSPA DSP processor, as well as built in ARM CPU cores, and a 16 GFLOPS GPU. Connectivity will be either through USB 3.0, or Ethernet.

The main baseband chip on the SDR is the Layerscape® Access LA9310 chip sold by NXP which provides I/Q ADCs and DACs. Those signals are sent to the RFNM Daughterboard Interface, where they are upconverted to the frequency range of interest. This lets the end user choose a different daughterboard for different applications.

The Granita daughterboard has tuning capability from 600 MHz to 7200 MHz. To get frequencies down to 10 MHz the RFNM is making use of the RFFC2071A mixer. There will also be a cheaper 'lite' version that does not use a mixer, and hence only provides tuning from 600 MHz to 7200 MHz.

In addition, the website states that they are pursing a version of their board that will make use of the LimeSDR LMS7002 chip that will cover 10 MHz to 3500 MHz. They are also looking into boards that may break out more ADC lanes, an oscilloscope add-on, and breakout board.

You can join the RFNM email waiting list, and find more details about it at rfnm.io. At the time of this post they state that the waiting list is "53% full". As of right now the project appears to have nothing concrete to show off, but the lead creator Davide Cavion was behind the FPV Blue HD Video system, so he appears to have the experience to take this project forward.

A render of the RFNM software defined radio board.

Amazon Bans the Flipper Zero

Just yesterday we posted about Linus Tech Tips review of the Flipper Zero. In related recent news, Flipper Zero was also banned from Amazon for being a "card skimming device". While the Flipper Zero reading the public NFC data from credit cards, it doesn't seem like it could do much more than what an Android phone could do with an NFC credit card reader app. Anyone skimming credit cards would still require the CVV code and other address details in order to put through a transaction.

This comes along from a bad string of events that has hit the Flipper Zero team. A while back PayPal froze 1.3M of its cash, requiring them to retain lawyers to force PayPal to partially release the funds. US customs then proceeded to seize its US bound shipment for inspection, then to throw salt in the wound, after releasing the goods they were billed $70,000 in storage fees for the pleasure of requiring inspection.

There are also reports of eBay banning the sale of Flipper Zero devices citing 'hacking' devices not being allowed on their platform.

The Brazilian National Telecommunications Agency has also begun seizing imports of Flipper Zero devices.

Flipper Zero is an affordable handheld RF device for pentesters and hackers. It is not based on SDR technology, however it uses a CC1101 chip, a digitally controlled RX/TX radio that is capable of demodulating and modulating many common digital modulations such as OOK/ASK/FSK/GFSK/MSK at frequencies below 1 GHz. 

The CC1101 chip has been around since 2007, and there are many similar devices making use of the chip. However, the Flipper Zero is specifically marketed as a pentesting and hacking device, and provides built in software for doing things like replay attacks. 

Part of the problem with the bans may also be the huge popularity that the device has received. The device has become exceedingly popular on social media sites like TikTok where users often show it being used mischievously.

Flipper Zero remains available for sale on its website flipperzero.one, for US$169.

Inside the Flipper Zero

Linus Tech Tips Reviews the Flipper Zero

The Flipper Zero is an affordable handheld RF device for pentesters and hackers. It is not based on SDR technology, however it uses a CC1101 chip, a digitally controlled RX/TX radio that is capable of demodulating and modulating many common digital modulations such as OOK/ASK/FSK/GFSK/MSK at frequencies below 1 GHz. 

What sets it apart from most of the other CC1101 devices is the high level of software support built into it, the enthusiastic community and of course the branding. 

Back in August 2020 we initially posted about the Flipper Zero starting its crowdfunding campaign on Kickstarter. Since then, despite major business problems like PayPal freezing 1.3M of its cash, and US customs temporarily seizing its shipments, then passing a $70,000 bill on to them for storage fees, Flipper has gained huge popularity through social media video sites like TikTok, where people show off its capabilities, often in ways that could be considered mischievous.

Recently over on YouTube, Linus from the most popular technology YouTube channel Linus Tech Tips reviewed the Flipper Zero. In the video Linus discusses the legally and morality of the Flipper Zero, and discusses some use cases around RFID and NFC.

This Makes Hacking TOO Easy - Flipper Zero

Building a 315 MHz Jammer with an Arduino

Over on YouTube CiferTech has uploaded a video showing how to create a low cost 315 MHz jammer using an Arduino and a cheap 315 MHz transmitter circuit. The 315 MHz band is used in some countries by short range wireless devices such as garage door openers, tire pressure sensors, hone security systems and car keyfobs. Some wireless home security systems have been shown to be vulnerable to jamming, as jamming can stop an alarm activation signal being received by the base unit. 

We want to note that building a jammer in most countries is completely illegal and the use of a jammer can result in severe penalties such as jail time.

On a related note, we also wanted to point out this recent tweet by Naomi Wu (@realsexycyborg), a popular Technology YouTuber who is based in China. Her tweet pointed out that some local market scammers in China use rigged weighing scales which can force the scale to display an artificially high value by using a wireless handheld remote. To combat this handheld jammers are sold so that shoppers can prevent the scammer's remote control from communicating with the scale. Although jamming is still most likely illegal in China, this could be considered an ethical use of a jammer.

TechMinds: Reviewing the ANTSDR E200

A few days ago we posted about the upcoming crowdfunding campaign of the MicroPhase AntSDR E200, an SDR that is very similar to the PlutoSDR, but with a much larger FPGA and more stable TCXO. One interesting feature is that it can run PlutoSDR or USRP firmware, allowing it to work with software that supports either hardware.

Over on YouTube Matt from the TechMinds YouTube channel has received an early unit and uploaded a video review.

In the video Matt explains the features and specifications of the ANTSDR E200, shows how to set it up with either the PlutoSDR or USRP firmware, and then demonstrates it working in SDR Console and SDR Angel as an emulated PlutoSDR. He goes on to show how to install and run the USRP UHD firmware, where the ANTSDR emulates an USRP b205mini.

MicroPhase ANTSDR E200 UHD USRP & PLUTO SDR SUPPORT

ANTSDR E200 set to begin Crowdfunding on CrowdSupply soon

The AntSDR E200 is a software defined radio from Microphase which will come in two flavors. The first is the 'AD9363" version with 2x2 RX/TX and a 325 - 3.8 GHz tuning range, 20 MHz bandwidth and 12-bit ADC. The second is their higher end 'AD9361' version with 2x2 RX/TX, 70 MHz - 6 GHz tuning range, 56 MHz bandwidth and 12-bit ADC.

It is currently in the prelaunch phase on CrowdSupply.

The AntSDR E200 is is based on the AD9363 / AD9361 RF SDR chips which are used in many existing mid-range software defined radios like the PlutoSDR, bladeRF and Ettus USRP's.

The design itself is very similar to the PlutoSDR and Errus B205mini, and in fact the developer has ported firmware from PlutoSDR and the Ettus UHD that allows the device to work just like those devices. It is not yet known if the AD9363 frequency range extension hack available on the PlutoSDR, and the bandwidth overclock hack on the bladeRF will be possible with the AntSDR E200 as well.

Pricing is yet to be displayed on CrowdSupply, however the the AD9363 version appears to already be available for purchase on Aliexpress for US$364.25. Update: Microphase have explained that the units on Aliexpress are not officially authorized units and the Aliexpress price is much higher than what they will charge during the crowdfunding phase.

The AntSDR E200
ANTSDR-E200 demo video

Also, over on YouTube DragonOS creator Aaron has already been testing his AntSDR with srsRAN, which is an open-source program that can create 4G and 5G basestations with compatible SDRs like the USRP. Using the modified UHD firmware, Aaron was able to get up and running with the AntSDR E200 very quickly.

DragonOS FocalX E200 w/ Osmo-Nitb-Scrips, srsRAN, and SDRAngel Preview (ANTSDR, b205mini, R29+)

SOCORAD32 Now Crowd Funding: ESP32-based Walkie-Talkie with Data Communication

Back in May of 2022 we posted about SOCORAD32 which at the time was pre-announced for future crowd funding. A few days ago Crowd Funding begun and already it's goal has been reached.

The project is described as a "hackable, open source, ESP32 amateur radio board with walkie-talkie functionality and data communication". We note that this is not a software defined radio, rather it's a highly customizable software controlled radio.

The advertising claims that you can communicate between SOCORAD32 devices by voice and text for up to 5km at 2W of power. No commercial or amateur radio license is required to use this radio since it operates in the 400 - 470 MHz license free bands that are available in many countries. Although we note that these bands in many countries may have power restrictions well below 2W, which would restrict range.

In recent updates they note that they have been refining the PCB and now added a battery holder and moved the push to talk button to a new position.

During crowd funding the device is selling for US$80 + $8 US shipping / $18 worldwide shipping.

SOCORAD32 can communicate between devices by voice or text for up to 5km, via license free bands.
SOCORAD32 can communicate between devices by voice or text for up to 5km, via license free bands.

Tech Minds: Demonstrating RTL_433 Running on ESP32 Devices

Earlier in the month we posted about how rtl_433 has been ported to ESP32 devices that are combined with CC1101 or SC127X transceiver chips, such as the low cost LILYGO LoRa 32 boards available on Aliexpress.

Over on YouTube Matt from the Tech Minds channel has uploaded a video showing how to set up rtl_433 on an ESP32 device, and how to set it up with a home automation service like Home Assistant, Node Red or OpenHAB via an MQTT broker.

RTL 433 ON ESP32 DEVICE - MQTT HOME ASSISTANT