XiOne – A RTL2832U based Portable Software Defined Radio: Indigogo Funding Campaign

A new funding campaign for an RTL2832U based software defined radio has gone up on Indiegogo. The new SDR is called the XiOne and is intended to be the first SDR that is easy to use with smartphones and open to the maker community.

With its 100 kHz to 1.7 GHz receiving range, the XiOne has a similar tuning range to the standard RTL-SDR dongles when an upconverter or the direct sampling mod is used. What makes the XiOne different is that it will have a built in MIPS processor, an internal rechargeable battery for portability and it will connect directly through WiFi to a smart device. They are also developing SDR GUI software for mobile devices including decoders for things like ADS-B, AIS and NOAA Satellites.

The IndieGoGo backer price for a XiOne is $179 USD, but if you act fast there are 100 units available at the promotional price of $139 USD. At the moment they have a working prototype with completed firmware, portable Java based SDR GUI, iPhone demodulation software, a MacOS ADS-B receiver, an iPad AIS receiver and an iPad spectrum analyzer. The fundraiser is to help them begin serial production.

There is a Reddit thread discussing the project here.

XiOne Prototype Internals
XiOne Prototype Internals
XiOne Casing
XiOne Casing

Hak5: ToorCamp Finale And More Fun With SDR

In this episode of Hak5 amongst other things presenter Shannon explores yet another SDR GUI alternative at around the 14 minute mark. This time she shows SDR-RADIO which is an RTL-SDR compatible alternative to SDR# and HDSDR. She shows how to install SDR-RADIO and how to use it. If you are interested in SDR-RADIO we also have installation instructions available on our Quickstart Guide.

ToorCamp Finale And More Fun With SDR, Hak5 1625

Brute Force Unlocking a Car with a USRP Software Defined Radio

Wired.com has posted an article showing how security researcher Cesare was able to use his USRP software defined radio to unlock a car with wireless entry. Essentially his hack involves brute forcing the rolling security code used by the wireless unlocking security protocol. Even with just a brute force attack he was able to unlock his car in just a few minutes. While this hack probably won’t work with newer cars which disable unlocking for a few minutes after a number of failed code attempts, Cesare notes that the hack will probably work for many similar cars of the 10 years or older generation.

This article goes along with their previous one discussing how thieves could hack into a home alarm system using a software defined radio.

The USRP is an advanced software defined radio that sells for around a thousand dollars but we note that the same attack could be performed with the cheaper and almost available HackRF SDR.

Hak5: Exploring With The PortaPack and HDSDR

In this Hak5 episode Darren discusses the HackRF PortaPack which is a portable LCD screen device that connects to a HackRF SDR and allows portable frequency spectrum visualization. The PortaPack is currently under development and in the future it will allow demodulation of multiple audio modes and possibly digital demodulation and recording capabilities as well.

Later in the episode Shannon presents a tutorial on HDSDR, an SDR GUI alternative to SDR#. She shows how to install and use the HDSDR program.

Updates on Keenerds RTL-SDR Improvement Project

If you didn’t already know Keenerd (aka Kyle Keen), author of rtl_fm, rtl_power, rtl_adsb and rtl_sdl is having a fundraiser to raise funds to pay for a month of RTL-SDR improvement programming. As of the time of this post we’re about halfway through the fundraiser’s 30 day time limit and it has already generated $2,260 USD out of the minimum desired $3000 USD. Keenerd has also written a report on the status of the fundraiser so far.

Remember that the more funds raised, the more time he will have to work on the software meaning a better RTL-SDR experience for everyone. (Note that the improvements are for Windows, Mac and Linux).

Having raised this much already Keenerd has begun work and has already made some improvements to the RTL-SDR drivers based on Teejeez’s work. A list is shown below.

  • dithering[3] – Possibly the secret sauce to phase aligned multiple dongles. I don’t have the setup to operate this or the math to confirm. rtl_sdr -N or rtlsdr_set_dithering() to access it.
  • IF freq and bandwidth filters[4] – Extend the HF range somewhat. Less out-of-band aliasing.
  • register caching[5] – Don’t re-send values that have not changed. Slightly modified the noise floor in my tests, which it should not have.
  • register batching[6] – Delay changing registers until a command finishes, then send them all.
  • cache i2c repeater[7] – Normally the i2c port is enabled and disabled between every single byte. Leave it open while its in use.
  • pll tweaks[8] – People smarter than me wrote these, and it didn’t seem to make anything worse. Might also extend the HF range.

See the original Reddit thread discussing these improvements here and here for a link to the GitHub download page. Note that at the moment you will need to compile the drivers yourself.

New Japanese HF Upconverter for the RTL-SDR

A new HF upconverter designed for the RTL-SDR has gone up on ttrftech’s Japanese language blog (use Google Translate). The upconverter is called the ‘SC-HFCONV-100’ and comes with 100 MHz oscillator, SMA connectors, USB mini-B power.

Currently the upconverter is only available for sale on the Japanese Amazon store, but it is possible to still order it through the jzool-agent Japanese shopping service.

Japanese HF Upconverter
Japanese HF Upconverter

RTL_POWER Heatmap Viewer

Back in June we posted about DE8MSH’s rtl_power based heatmap viewer which was automatically generated every day from a Raspberry Pi. The browser based heatmap display provides a way to view the frequency and time of where the mouse pointer is allowing you to easily identify signals.

Back then the code was unavailable but now DE8MSH has released his code on GitHub. An example heatmap generated by the code can be found here.

RTL_POWER Heatmap Viewer
RTL_POWER Heatmap Viewer

Triangulation of a VHF Signal with RTLSDR-Scanner

A few months back we posted about how the the RTLSDR-Scanner software had been updated to include signal triangulation capabilities. Now blogger Tobby has written a post about his attempt at triangulating the source of an encrypted police signal with RTLSDR-Scanner.

To do this he set up a laptop in his car with RTLSDR-Scanner installed and connected his RTL-SDR with stock antenna and a GPS receiver. After driving around for only 15 minutes he was able to get a triangulation heat map of reasonable accuracy.

RTLSDR-Scanner Signal Triangulation Heatmap
RTLSDR-Scanner Signal Triangulation Heatmap