uSDR Updated to Version 1.6.0

Thank you to Viol for submitting news about the latest update of his uSDR software. uSDR (aka microSDR) is a lightweight general purpose multimode program for Windows that supports the RTL-SDR, Airspy, BladeRF, HackRF and LimeSDR radios. Viol highlights the latest features in the new update below: 

  • Airspy HF+ Discovery frontend support
  • ExtIO*.dll interface support. Copy ExtIO*.dll and all dependencies to the root folder and have a fun
  • ExtIO_USRP.dll and all dependencies for USRP B210 included. Just install Zadig libusb driver and go
  • LimeSDR multiple frontends switch fixed
  • FM demodulator with inverted audio spectrum
  • DCS decoder
  • additional C/C++ source examples for remote IQ passband processing TCP client
  • advanced IQ file playback options
  • display hold peak spectrum mode, zoomable and panable plot, customized colors

As always all descriptions, screenshots and binaries could be found on 

https://sourceforge.net/projects/u-sdr/

uSDR aka microSDR. A lightweight SDR receiver program for Windows.

tinySA Ultra Reviews: A 0.1 MHz – 6 GHz Spectrum Analyzer for $120

A few weeks ago the tinySA Ultra was released. This is a spectrum analyzer capable of operating between 0.1 - 800 MHz, or 0.1 MHz - 6 GHz with the 'Ultra' mode enabled. A spectrum analyzer is a tool that allows users to visualize signals on the radio spectrum.

Previously the standard tinySA was released back in 2020. The Ultra version brings enhancements to the frequency range, signal generator range, bandpass filter range as well as an optional 20dB LNA, and a larger 4 inch color display. 

The TinySA Ultra costs US$119 + shipping direct from the Aliexpress store in China, or $129.95 from R&L in the USA (currently out of stock). The full list of resellers can be found at https://tinysa.org/wiki/pmwiki.php?n=Main.Buying.

We wanted to thank RTL-SDR.com reader Ben for providing us with links to a bunch of reviews of the tinySA Ultra which we are posting below.

The tinySA Ultra
The tinySA Ultra

RTL-SDR Blog V3 Dongle Back in Stock at Amazon + Upcoming Cosmetic Changes in 2023

This is just a quick note to say that the RTL-SDR Blog V3 silver dongles are back in stock at Amazon USA after having taken a bit longer to arrive than usual. Currently only the individual dongle and separate multipurpose dipole antenna sets are in stock, and we expect the dongle+antenna bundled sets to be back in stock in January 2023. 

International customers can continue to order from our webstore and associated marketplaces via our store page at www.rtl-sdr.com/store.

RTL-SDR Blog V3 (Silver)

Upcoming 2023 Black RTL-SDR Blog V3 Dongles (Cosmetic Redesign)

We also want to give a heads up and note that in the next few months you might start seeing black RTL-SDR Blog V3 dongles in our stores, marketplaces and resellers. Going into 2023 we will be making a cosmetic change to our dongles (note that there is no changes to the highly tuned circuitry). There are two reasons for this cosmetic change.

The first is to try and better differentiate our original product from all the clones that have been popping up recently. Manufacturers of fake RTL-SDR Blog V3 clones have been getting closer and closer to copying our external design exactly. The internal circuitry of the clones however have often been poorly implemented, with broken features and poor performance. This results in a higher support burden, and damage to our brand when the clones inevitably perform poorly.

The second reason is for regulatory compliance with the FCC. Devices like this must have a FCC regulatory statement printed on the body, we have to add the UKCA logo for Brexit UK, and increase the size of the compliance logos as well. Moving forward this will eliminate any possible regulatory problems with Amazon or bulk imports, which are becoming stricter every year.

The new enclosure design uses a special black plating that like our silver models retains full electrical conductivity (normally electrical conductivity is not possible with most black plating's, but we investigated many solutions and finally found an appropriate one). Maintaining electrical conductivity ensures that shielding of the circuitry from interfering signals works properly. The text is also laser etched on, ensuring that it cannot be erased.

New black redesign of the RTL-SDR Blog V3 dongle. Coming in 2023. (Front)
New black redesign of the RTL-SDR Blog V3 dongle. Coming in 2023. (Rear)

DEF CON 30 RF Talks: Biohacking, Designing Antennas, Tracking Military Ghost Helicopters and More

DEF CON is a yearly conference with a focus on information security. At this years DEF CON 30 conference various talks on RF related topics were presented. In the past few weeks talks have been uploaded to YouTube for all to watch. Below we highlight a few we found interesting. The list of all main talks can be found on the Defcon YouTube channel, and talks from the RF Village can be found on the RF Hackers Sanctuary YouTube page

J9 - Biohacking Using SDR When You Don’t Know What You’re Doing

Security Researcher and BioHacker J9 presented an interesting and entertaining talk about how she used an SDR to listen in and decode a wireless pH sensor pill she ingested as part of a medical test.

What would you do if you were implanted with a medical device that broadcasts every 12 seconds?

Starting with loads of curiosity and very little knowledge about RF, how to use a software defined radio (SDR), and no knowledge of how to decode captured RF signals, I embarked on an adventure to teach myself something new. Jumping head first into the RF CTF helped greatly!

This presentation starts with cocaine and ketamine (in a controlled medical setting) and includes a near-death experience and new skills attained by building on the work of those who came before me. The end result of this adventure led me to the US Capitol to sit down with Senate staffers about the security and exploitability of medical devices.

DEF CON 30 RF Village - J9 - Biohacking Using SDR When You Don’t Know What You’re Doing

Erwin Karincic - Have a SDR? - Design and make your own antennas

In this talk Erwin Karincic explains how to design and make custom PCB antennas using home based or low cost techniques.

Most Software Defined Radios (SDRs) process a wide range of frequencies usually ranging from few MHz to multiple GHz where different antennas are used to pick up signals in a specific subset of that range. All applications using SDR require antennas to operate efficiently at very specific frequencies. Most inexpensive commercial antennas are designed either for wider ranges with lower gain over the entire range or very specific known frequencies with higher gain. The problem occurs when the researcher performs an assessment of a device and requires the use of specific frequency for which an antenna with high gain is not readily available. Most security researchers within wireless domain have outlined that their specific attack or exploit could be executed at higher range if antenna had better gain at that specific frequency. This talk focuses on bridging that gap by providing a way for researchers to create their own patch antennas without deep electrical engineering experience.

DEF CON 30 RF Village - Erwin Karincic - Have a SDR? - Design and make your own antennas

Andrew Logan - Tracking Military Ghost Helicopters over Washington DC

In this talk Andrew explains how ADS-B receivers, combined with ATC communications, public announcements and crowd sourced visual identification have helped track the activity of military helicopters operating over the Washington DC area.  

There's a running joke around Washington D.C. that the "State Bird" is the helicopter. Yet 96% of helicopter noise complaints from 2018-2021 went unattributed: D.C. Residents can not tell a news helicopter from a black hawk. Flight tracking sites remove flights as a paid service to aircraft owners and government agencies; even in the best case these sites do not receive tracking information from most military helicopters due to a Code of Federal Regulations exemption for "sensitive government mission for national defense, homeland security, intelligence or law enforcement." This makes an enormous amount of helicopter flights untraceable even for the FAA and leaves residents in the dark.

What if we could help residents identify helicopters? What if we could crowd source helicopter tracking? What if we could collect images to identify helicopters using computer vision? What if we could make aircraft radio as accessible as reading a map? What if we could make spotting helicopters a game that appeals to the competitive spirit of Washingtonians? And what if we could do all of this... on Twitter?

DEF CON 30 - Andrew Logan - Tracking Military Ghost Helicopters over Washington DC

Maverick-603: An Affordable FT8 Receiver with an Open Source RF Chip

The Maverick-603 is a US$149 FT8 receiver based on an open source RF chip design which is capable of acquiring signals between 7 MHz and 70 MHz (technically 1 MHz to 100 MHz). It is currently undergoing Crowd Funding on Crowd Supply with 7 days left in the campaign. Shipping is expected to begin in April 2023.

FT8 is a popular weak signal propagation digital mode used by ham radio enthusiasts. FT8 signals can be received and decoded all over the world even with low transmit power and poor propagation conditions thanks to its highly error tolerant encoding. A dedicated FT8 receiver allows enthusiasts to set up a 24/7 FT8 monitor without dedicating more expensive ham radio equipment to the task. Note that a computing device like a PC or possibly a Raspberry Pi 4 will still be required to run the FT8 decoding software as this is a software defined radio.

The Maverick-603 is based on a custom open source RF chip design made possible by the company eFabless. It is now possible to cheaply design and produce custom ASIC chips (at least at the lower end of the technology scale), replacing more costly FPGA designs. The technical specs of the Maverick-603 are:

  • MCU: ATMEGA1608
  • Power Supply: 3.3 V / 10 mA
  • Operating Frequency Range: 1 to 100 MHz
  • Minimum Signal Strength: -25 dBm
  • Input Antenna Impedance: 50 Ohm
  • Data Interface: SPI
  • Board Size: 2" x 1.75"
  • Capable of receiving FT8 signals
  • 7 - 70 MHZ frequency range
  • Low-power operation (1.8 Volts) means no battery or outlet is required
  • USB Connection
  • A compact surface area
The Maverick-603 FT8 Receiver
The Maverick-603 FT8 Receiver

SDR Special Tool Kit: A Ruggedized Enclosure for two RTL-SDR V3 Dongles

Terminal Armament, one of our resellers of RTL-SDR V3 dongles in the USA has created a companion product called the SDR Special Tool Kit (SDR-STK) which is a tactical ruggedized enclosure for two RTL-SDR V3 dongles. The SDR-STK consists of a two port USB hub enclosed in a water-resistant housing, and a rugged screw on USB-A cable. Two SMA connectors protrude out the top. The design is open source with designs and software due to be released on their GitHub in time.

The SDR-STK is estimated to ship within 5-7 weeks, and is available for pre-order via the Terminal Armament website.

The RTL-SDR dongle has long been the standard for an entry-level software defined radio. And while we do love it, the USB dongle form-factor is simply not suited for rigorous outdoor use. This is why we've developed the SDR-STK.

The SDR-STK is a ruggedized two-port USB hub specifically designed to fit two standard RTL-SDR dongles, and provide a durable, water-resistant housing. Having two dongles also grants capabilities not available with just one; these go beyond simply increasing the bandwidth. With one receiver acting as a tuner, you can have the second one preforming other tasks such as wide-band scanning, listening to a trunked radio control channel, or simply receiving other information such as ADS-B packets.

The SDR-STK isn't just a one-off hardware product. In the coming weeks while the pre-order is active, we will be releasing various software utilities for the SDR-STK on our GitHub, as well as the PCB schematic files. We're firm believers in Open-Source hardware software, and we hope to use this launch to kickstart several other communication related products and projects such as better Android SDR applications, and other SIGINT tools.

The SDR-STK includes itself, and a custom 1.5 foot USB Type A Male cable. Antennas and RTL-SDR's are not included unless specified or ordered in conjunction with the SDR-STK.

The RTL-SDR Just Got Better - Terminal Armament SDR-STK

A Software Based VGA AGC Implementation for the RTL-SDR

Thank you to Chris G for writing in and sharing with us his software VGA ADC controller for the RTL-SDR. AGC or 'automatic gain control' is an algorithm that attempts to automatically adjust the gain on the RTL-SDR in order to maximize the signal to noise ratio. The built in hardware AGC's on the RTL-SDR are intended for wideband TV signals, and work poorly with the narrower signals that SDR users typically deal with. However, it's possible that a software AGC implementation could be used instead.

Initially, I wanted to see how well things would work if I could manually control the VGA gain to avoid A/D overload within the 2832 chip.

I liked how things worked so I said: let's make things automatic! I implemented two variants of my AGC. One variant (my favorite) is an implementation of an AGC by Harris and Smith. It is an LMS algorithm that has equal transient response to a sudden increase in input signal magnitude and a sudden decrease in signal magnitude.

Since I'm doing this stuff in software, I operate on blocks of IQ data rather than operating on a sample by sample basis.

Initially, I observed limit cycles for at least two reasons:

  1.  The (approximately) 3.5dB step size in VGA gain adjust.
  2. The fact that when I receive a block of IQ data, another block is in transit.

This resulted me adjusting the gain while a block of data was in transit.

For item 1, I allow the deadband go be settable.

For item 2, I allow a "blanking time" to be settable. For my use case, If the AGC just made an adjustment, I skip making an adjustment while the next black is in transit.

Here is output of my 'get agcinfo' command.

--------------------------------------------
AGC Internal Information
--------------------------------------------
AGC Emabled : Yes
AGC Type : Harris
Blanking Counter : 0 ticks
Blanking Limit : 1 ticks
Lowpass Filter Coefficient: 0.800
Deadband : 1 dB
Operating Point : -12 dBFs
IF Gain : 11 dB
/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
Signal Magnitude : 27
RSSI (After Mixer) : -24 dBFs
/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/

Note that my setpoint and gain adjustment works in decibels. That way, I treat the AGC as a linear system (it's actually uses an LMS algorithm) to simplify processing.

Now, I have used the same algorithm for my HackRF software.

I should mention that I implemented a pretty nice software squelch system for the rtl-sdr (and HackRF of course) if you have any interest in that.

I have a github repository at github.com/wizardyesterday/RtlSdrDiags.

I've thought about adding an I2C DAC whose output is connected to the VGA analog gain control line, but I really hate to butcher my v3 dongle. Having 1dB (or less) gain resolution would be nice though.

Another thing that I noticed is that, when writing to the tuner registers, the I2C repeater is enabled and you hear a spike in the demodulated audio. This may also occur (I haven't done that experiment) when disabling the repeater. Maybe not......

I have composed a report in, github.com/wizardyesterday/RtlSdrDiags/blob/master/doc/agcResearch/README.txt

If you get curious how I implemented my AGC, you can look at the file, github.com/wizardyesterday/RtlSdrDiags/blob/master/radioDiags/src_diags/AutomaticGainControl.cc.

The header file is in radioDiags/hdr_diags/AutomaticGainControl.h.

RTL-SDR Blog L-Band Patch, Bullseye, YouLoop Sale

This Black Friday we are offering a discount on our L-Band Patch, Bullseye and YouLoop antennas in our store and marketplace listings! The sale will run until the end of November.

Our L-Band patch is an active design for receiving L-band satellites such as Inmarsat, Iridium, GPS and other satellites that transmit between 1525 - 1660 MHz (please note that you cannot use it for weak signals that require a dish like HRPT or GOES).

The Bullseye LNB is a TCXO stabilized LNB for the QO-100 geostationary amateur satellite and other Ku-band satellites.

The YouLoop is a super portable passive HF/VHF loop antenna designed for super low NF/MDS receivers like the Airspy HF+ Discovery.

  • L-Band Patch Antenna: US $59.95 $49.95
  • Bullseye LNB: US $29.95 $24.95
  • YouLoop: US $39.95 $31.96

Pricing includes free shipping to most countries. Please note that pricing does not include VAT and/or taxes which may be added for your country.