Receiving DAB with a Raspberry Pi 3 and RTL-SDR

Over on his blog Michael Carden has produced a tutorial showing us how to use SDR-J on the Raspberry Pi 3 for receiving Digital Audio Broadcast (DAB) radio. DAB is a type of digital broadcast radio used in several countries outside of the USA for general broadcast radio programs. It usually provides clearer digital audio compared to FM broadcast.

His post starts from scratch, showing how to create a Raspberry Pi image file and configure the Pi, then shows how to install and use SDR-J.

SDR-J is also available for Windows and is compatible with the RTL-SDR and other radios such as the Airspy and SDRplay.

SDR-J Running on Windows.
SDR-J Running on Windows.

RTLSDR4Everyone Four New Posts: Janilab Preamp Review, Why Use a Preamp?, Small ADS-B Antennas Review, SDRUno User Guide

Akos from the RTLSDR4Everyone blog has recently posted three new articles. The first article reviews the Janilab LNA Preamp which has a frequency range of 1 MHz to 3 GHz and an adjustable gain. In the review he compares reception with and without the preamp at shortwave frequencies and at ADS-B frequencies. Finally he also compares it against the LNA4ALL and LNA4HF, and notes that they generally have better specs than the Janilab preamp, but the disadvantage is needing two to cover HF + VHF/UHF, meaning an increase in costs.

In his second post Akos explains when and why you should use a preamp. Basically he explains how the lower noise figure of the preamp can help improve SNR.

In his third post Akos does a review on small ADS-B antennas. These are small whip type antennas that are tuned for 1090 MHz. In his testing he found that a telescopic antenna gave significantly better results that the ADS-B whip, but recognizes that these are designed for pilots and light aircraft owners who need a small sturdy antenna.

Finally his fourth post he shows an updated beginners guide for SDRuno. SDRuno is the official software for the SDRplay RSP, but is compatible with the RTL-SDR.

The LNA4ALL and LNA4HF vs the Janilab Preamp
The LNA4ALL and LNA4HF vs the Janilab Preamp

Las Vegas CyberSpectrum: Streaming Live August 4

Every month SDR evangelist Balint Seeber hosts the Cyberspectrum Meetup in San Francisco, where many SDR fans come together to listen to various presentations. This months meetup is a special event that will be held in Las Vegas during the week of the big DEFCON and Black Hat conferences which are also being held in Las Vegas.

The talks will be presented at the SYN Shop Hackerspace in Las Vegas, and will also be live streamed via YouTube as usual (probably on balints YouTube Channel). The meetup begins on Thursday, August 4, 2016 at 6:30 PM Las Vegas time.

This month the talks include:

• “SlackRadio: Turning your Slack channel into a radio station” with Nate Temple

Slack is a popular real-time messaging system designed for team use. I will demo a small application built with GNU Radio and the Slack API that turns your Slack channel into a real radio station for your office.

slack_radio

• “Pothosware” with Josh Blum

Pothosware: An open-source software stack for the SDR community including the Pothos framework for creating interconnected topologies of processing blocks, Pothos GUI for graphical designing, controlling, and visualizing topologies, and SoapySDR – a SDR abstraction layer. The talk will present and overview of the software, cover the inner workings of the framework, and demonstrations with the GUI.

pothosware

• FPGA-based ADS-B SDR Receiver with Brian Padalino

Brian will discuss the design and implementation of an ADS-B receiver in the FPGA over the BladeRF.

bladerf_adsp_fpga

BIOS

Nate Temple:

I am software engineer, SDR Enthusiast, Maker and Amateur Radio operator. I previous presented the “Etch-a-SDR” at Cybserspectrum #11.

Josh Blum:

Josh has been crafting open source tools for the SDR community for over 10 years, starting with the GNU Radio companion back in 2006. He has been heavily involved in USRP FPGA and driver development, and now operates as an independent contractor.

Brian Padalino:

Brian has 11 years of experience working on signal processing in FPGA’s and has implemented multiple modems for real time performance. He is also the co-founder of Nuand and helped create the bladeRF.

Radio-Sky Spectrograph now supports the SDRPlay

Radio-Sky Spectrograph is a radio astronomy software program that integrates data over long periods of time and displays it as a waterfall. It is described by the author:

Radio-Sky Spectrograph displays a waterfall spectrum. It is not so different from other programs that produce these displays except that it saves the spectra at a manageable data rate and provides channel widths that are consistent with many natural radio signal bandwidths. For terrestrial , solar flare, Jupiter decametric, or emission/absorption observations you might want to use RSS.

Radio Sky Spectograph is compatible with the RTL-SDR via an intermediary program called RTL Bridge, and now it is also compatible with the SDRplay via another intermediary program written by Nathan Towne called SDRplay2RSS

In previous posts we showed how some amateur radio astronomers were able to capture noise bursts from the sun and from Jupiter with an RTL-SDR. In the SDRplay software release post and documentation that comes with the software Nathan shows how he was able to capture solar emissions and Jupiter bursts with the SDRplay.

SDRPlay2RSS
SDRPlay2RSS
Solar emissions received with the SDRplay and Radio-Sky Spectograph.
Solar emissions received with the SDRplay and Radio-Sky Spectograph.
Jupiter Noise Bursts with the SDRPlay and Radio-Sky Spectrograph.
Jupiter Noise Bursts with the SDRPlay and Radio-Sky Spectrograph.

Motherboard: How Hackers Could Wirelessly Bug Your Office

Online magazine Motherboard have recently uploaded a video on YouTube where a reporter interviews white hat hacker Ang Cui. Cui is the inventor of the Funtenna which is software malware that can infect any embedded device, turning it into an improvised RF transmitter. 

As an example of the type of devices the Funtenna can infect, Cui shows how he infected a desktop telephone, as well as a desktop printer. The malware running on the phone causes the phone to transmit an RF signal of the voices heard by the microphone, and the malware running on the printer causes the printer to emit a binary coded transmission of the text being printed. The malware is able to do this by forcing a GPIO, PWM or UART interface on the printer to modulate in a similar way to what is done with the Raspberry Pi FM transmitter project, rpitx. To receive and decode the signal Cui uses a software defined radio and a GNU Radio program.

Ang Cui previously presented his work on Blackhat 2015 and his slides can be found here, and we also show the video of his presentation below in the second video.

How Hackers Could Wirelessly Bug Your Office

Emanate Like A Boss: Generalized Covert Data Exfiltration With Funtenna

Building a DIY DC Block for Bias Tee’s

One handy thing about using our bias tee enabled RTL-SDR dongles is that you can easily power a remote LNA, such as Adam’s LNA4ALL. The bias tee sends DC power down the coax cable eliminating the need for a remote power supply. However, in our current iteration of the dongle the bias tee must be soldered on via a jumper, and once soldered it is permanently providing DC power down the coax cable. This is fine if you are always using a LNA, but if you want to one day remove the LNA and use a shorted antenna, you cannot. A shorted antenna is an antenna designed with the center and shield of the coax connected together creating a DC short (e.g. J-pole and QFH antennas). If you connected a dongle with the bias tee on to a DC shorted antenna you would short circuit the 5V bias tee. 

Over on his blog Adam shows that a solution is to create a simple DC block component. A DC block component is nothing more than a series capacitor. However Adam points out some important tips including the need to use a small 0603 sized SMD capacitor with 100pF of capacitance in order to ensure operation over the entire frequency range that the RTL-SDR covers.

A commercial DC block component (TOP) vs. Adams home made DC block component (BOTTOM)
A commercial DC block component (TOP) vs. Adams home made DC block component (BOTTOM)

NooElec RTL-SDR Giveaway on AmateurRadio.com

AmaateurRadio.com and NooElec are currently running a big competition to give away 50 of their new SMA RTL-SDR dongles (branded as NooElec SMArt). To enter simply go to the competition post on amateurradio.com and comment on their post (not ours!). The compeition closes on August 7 at 20:00 UTC.

They are giving away a total of 50 units: two bundles that come with their SMA RTL-SDR and Ham-It-Up Upconverter, one bundle with a Raspberry Pi and RTL-SDR dongle, three double pack RTL-SDR + antenna bundles, ten double packs of RTL-SDR dongles, ten RTL-SDR + antenna sets, and ten sets of just the RTL-SDR dongle itself.

The NooElec SMART is NooElec’s latest RTL-SDR variant which like ours comes with an SMA coax plug and metal enclosure.

NooElec SMArt giveaway on amateurradio.com
NooElec SMArt giveaway on amateurradio.com

GSM Sniffing: A Full YouTube Tutorial

Over on YouTube user Crazy Danish Hacker has been working on uploading an entire series on GSM Sniffing with an RTL-SDR. His series is explained in a slow and clear presenting style, and it starts at the very beginning from installing the RTL-SDR. The tutorial series is not yet complete, however he is uploading a new video almost daily. Presumably the series will end with showing you how to receive text messages and voice calls originating from your own cellphone.

So far he has shown how to install the RTL-SDR, identify GSM downlinks, install and use GQRX and kalibrate, locate nearby cell towers, install and use GR-GSM and how to extract the TMSI & KC keys from your cell phone. To obtain the TMSI & KC keys he shows us how to use an Android tool called usbswitcher which forces the phone to use its USB modem interface, from which the keys can be obtained.

The video below shows his teaser video on the series. Check out his GSM playlist to view the full series.

GSM Sniffing Teaser - Software Defined Radio Series!