DJI DroneID Detection Running on the AntSDR E200 CPU

DJI is a major manufacturer of consumer drones and their drones implement an RF protocol called DroneID which is designed to transmit the position of the drone and operator to authorized entities such as law enforcements and operators of critical infrastructure. 

Recently the AntSDR team have managed to get DJI DroneID decoding working on the AntSDR's onboard ARM processor. The decoding software runs on board the AntSDR E200 and outputs decoded data via the serial or network port. The AntSDR E200 is an SDR that is based on the AD9361 chip and has a 70 MHz to 6 GHz tuning range, 56 MHz of bandwidth and 12-bit ADC. It has 2x2 full duplex TX/RX channels and has an onboard FPGA with ARM CPU core.

They make use of existing code on GitHub from  https://github.com/proto17/dji_droneid and https://github.com/RUB-SysSec/DroneSecurity, both of which implement reverse engineered decoders for DroneID.

The update from AntSDR shows how to install the firmware onto the device and get it up an running. They note that drones that use Occusync 2 or 3 like the Mini2 or Mini3Pro work best, because other models may be encrypted or have a slightly different protocol which doesn't work with these decoders.

Aaron, creator of DragonOS has also uploaded a video showing the decoder in action.

DragonOS FocalX Decoding DJI DroneID w/ AntSDR E200 (MicroPhase)

Modified RTL-SDR Source for SDR++ with Manual Controls for R820T/2/R828D Tuners and Harmonic Reception

Over on GitHub user Sultan-papagani has just released a modified RTL-SDR source for SDR++ that enables full manual control of the gain stages, filters and other features on R820T/2/R828D tuner based RTL-SDRs. This includes the Blog V3 and Blog V4. In the standard drivers many of these these features are automatically controlled.

Tweaking the individual LNA, Mixer and VGA gain stages manually can help you to maximize SNR, while adjusting the filters can help block out of band interference.

The modified source also enables the 'Hamonic reception' enhancement from the librtlsdr fork of rtl-sdr, which allows you to tune up to 6 GHz via harmonic mixing. Note that tuning above the standard maximum of 1.766 GHz will most likely require strong band pass filtering and an external LNA as the harmonic mode results in a lot of imaging and weak signals. 

A new RTL-SDR Source for SDR++ with Manual Gain/Filter and Harmonic Mixing Controls
A new RTL-SDR Source for SDR++ with Manual Gain/Filter and Harmonic Mixing Controls

RFNM End of December Update

The RFNM is an upcoming software defined radio that will have eight 12-bit ADCs, up to 612 MHz real time bandwidth, and two DACs for transmitting with up to 153 MHz bandwidth.

The standard board will support tuning from 600 - 7200 MHz, with tuning expanded down to 10 MHz available via an RFFC2071A mixer daughterboard called Granita or Lime tuner daughterboard. The board also has an onboard VSPA DSP processor, as well as built in ARM CPU cores, and a 16 GFLOPS GPU all of which can help process the massive bandwidth, as that full live bandwidth will be very difficult to transfer and use on a PC.

Recently the RFNM team posted their End of December update, noting that they are currently testing revision 2 of their motherboard with revision 3 to be the production version. They also note that the Lime daughter board is ready for manufacturing, but the Granita daughterboard will be delayed until April. Everything else is estimated to be ready to ship by March.

The board has also now been redesigned to have a heatsink and fan. And they have managed to implement a Quadrature Error Correction kernel in their VSPA DSP processor. Finally, they are also drafting a plan to ship power calibrated daughterboards.

The latest rev 2 of the RFNM Motherboard
The latest rev 2 of the RFNM Motherboard

Tech Minds: A Beginners Guide to the HackRF and Portapack with Mayhem Firmware

In one of his latest videos Matt from the Tech Minds YouTube channel has created a beginners guide to the HackRF and Portapack with the Mayhem Firmware. The HackRF is a popular affordable software defined radio with wide frequency range and transmit capabilities. An addon called the Portapack allows the HackRF to go portable, and custom firmware called 'Mayhem' significantly expands it's capabilities.

Matt uses a Chinese HackRF and Portapack clone set from Banggood which can be found very cheaply for around $200 shipped. The original Portpack can be found from the Sharebrained store for $200, and then original HackRF can be found form various resellers listed on the greatscottgadgets website.

In the video Matt unboxes the Portapack, shows an overview of the hardware and then goes on to show how to update the stock firmware to the Mayhem firmware. He then demonstrates a few of the capabilities of the Mayhem firmware.

Beginner's Guide To The HackRF & Portapak With Mayhem

The Biggest RTL-SDR and Related Stories from 2023

This year there were several interesting stories and product releases that we posted about on the blog and this post will be a brief end of year review of some of our most popular posts. We also wanted to wish everyone a Merry Christmas and Happy Holidays to every celebrating at this time of the year!

In January we saw that the popular ADS-B Exchange (ADSBx) ADS-B aggregation platform was sold to a private equity firm called JETNET. This caused quite a bit of outrage as many involved with the development of the platform were blindsided by the owner's sudden decision to sell. ADS-B Exchange is a popular ADS-B aggregator that uses RTL-SDRs and is known for it's hard no censorship policy, allowing it to be used in projects like "Dictator Alert" and to uncover immoral use of aircraft in policing and military "kill chains". Many of the original team have since started a new service at https://airplanes.live.

ADSBExchange.com interface
ADSBExchange.com interface

Next in February at the height of the "Chinese Spy Balloon" scare we ran a story about how the US air force had shot down an amateur radio 'pico balloon' called K9YO-15  , on the assumption that it could have been another Chinese spy balloon. Pico balloons are party sized helium balloons with a solar powered amateur radio transmitter attached. The fun of the hobby is seeing how far and long around the world they can travel for. A typical pico balloon could circumnavigate the globe several times over several months, all whilst transmitting it's position.

Rough trajectory overlay
Rough trajectory overlay

In April we saw the Flipper Zero go mainstream when it was reviewed on the Linus Tech Tips YouTube channel. The Flipper Zero is a small RF hacking device that gained high popularity on social media sites like TikTok. 

Linus Tech Tips Reviews the Flipper Zero
Linus Tech Tips Reviews the Flipper Zero

In June we saw a video from a YouTuber that appeared to show a Flipper Zero being used to wirelessly 'let the smoke out' and self-destruct an electricity meter which raised major infrastructure security concerns. However, this video appears to have since been removed, and there was speculation that the video was faked, or at least staged in some way.

In July we showed a video demonstration of how our KrakenSDR could be used to track down a low power FM transmitter station. In August we showed the KrakenSDR tracking down multiple GSM base station transmit towers simultaneously.

Later in August we also released the RTL-SDR Blog V4 dongle, a limited edition RTL-SDR that makes use of existing stockpiles of R828D tuner chips. It has improved HF performance thanks to an upconverter, and improved filtering on the VHF and UHF bands.

In September we saw crowd funding start for the RFNM, a device that promises to be a next generation software defined radio.

Finally in November we saw the release of the crowd funding campaign for our Discovery Dish project, a low cost and easy way to get into reception of L-band satellites, as well as Hydrogen Line radio astronomy.

Later in November we also saw a great technical overview of the Watch Duty wildfire monitoring project which uses multiple RTL-SDRs in their system.

The Discovery Dish
The Discovery Dish

A WSPR Monitor Running on an old Android TV Box with OpenWebRX and RTL-SDR

Thank you to Joseph IT9YBG for writing in and sharing with us his experience in getting Armbian and OpenWebRX running with an RTl-SDR V3 smoothly on an old A95X Android TV Box. These TV Boxes have an AMlogic S805 chip and Joseph writes that he is quite impressed by the performance of the chip.

To install the Armbian Linux operating system Joseph used the instructions from i12bretro and installed OpenWebRX after. Then together with his RTL-SDR Blog V3 dongle he turned the device into a cheap dedicated WSPR (Weak Signal Propagation Reporter) monitor allowing him to free up his Raspberry Pi 3 which was used for the task previously.

IT9YBG's Android TV Box converted into a WSPR monitor with an RTL-SDR Blog V3 and OpenWebRX
IT9YBG's Android TV Box converted into a WSPR monitor with an RTL-SDR Blog V3 and OpenWebRX

A 3D Printed Enclosure for RTL-SDR Blog V3/V4 Units

Thank you to Dave D. for submitting his 3D printed enclosure for RTL-SDR Blog V3 and V4 units. The enclosure is designed to protect and support the dongle. It includes an optional hole for a heatsink to keep the unit cool. Dave writes:

I've designed a 3D printed case for the RTL-SDR Blog V3 & V4. The reason for the case is to use a USB extension to move the weight of the device from the PC USB port to make portable laptop use less likely to fall out or break.
 
Additionally, there is an opening in the case top to accommodate an optional heat-sink, which may be beneficial with the V3 at higher frequencies.
 
Here's the link to the 3D print files free on Prusa's Printables website. Anyone can download and print this. Creative Commons applies
 
Dave's 3D printed enclosure for RTL-SDR Blog V3/V4 units with optional heatsink.
Dave's 3D printed enclosure for RTL-SDR Blog V3/V4 units with optional heatsink.

A Great Introductory Video to RTL-SDR

Over on YouTube user sn0ren has posted a well produced introductory video to RTL-SDR. If you're already familiar with software defined radios and RTL-SDR, this video won't be of any use to you, but if you are just starting out, or have friends that might be interested, this is a great video to show.

Sn0ren's video goes over basic concepts like the history behind RTL-SDR, what an SDR is, what radio is, and then goes on to explain and demonstrate reception of the various different types of  signals that can be received with an RTL-SDR and compatible software.

The Cheapest Radio Receiver For Beginners / RTLSDR v4