Once upon a time, there was a bit of a fad for fingerprint authentication in laptops and desktop computers. It has long since faded, but [superdog] wanted just such a device for Linux and Mac machines. Thus, it was time to build one.

[superdog] designed the device, nicknamed immurok, as a tool for people who use external keyboards, and do lots of terminal work on Mac and Linux machines. Repeat password requests can interrupt one’s flow when hustling at the keys, so immurok was designed to ease this pain.

The device is based on a WCH CH592F microcontroller, which comes with Bluetooth connectivity out of the box. This allows immurok to connect wirelessly to the machine of your choice, advertising itself as a standard Bluetooth HID keyboard device. Fingerprint-wise, scanning is done with an R559S capacitive sensor, which verifies the match locally so there’s no transmitting biometric data anywhere. On the computer side, Linux is setup to use a CLI/TUI app plus PAM integration to handle authorization for system logins and sudo in the terminal. On the Mac platform, it’s used with a menu bar app, with PAM integration for admin prompts. There’s also a separate helper path for using it with the lock screen.

If you’re sick of entering your password all the time and wish unlocking your PC was more like unlocking your phone, this might be the project for you. We’ve seen similar projects before, too. If you’re whipping up fun gear for biometric auth, don’t hesitate to let us know on the tipsline.

hackaday.com/2026/07/03/buildi…

Much like radio operators being encouraged to use the least possible amount of power to make a contact, chemists have a similar rule encouraging using the least amount of materials in experiments. Not only is this rooted in economics, but in safety as well; if something goes wrong it’s generally good if there’s not excess amounts of reactants. With modern techniques, though, it’s possible to bring experimental chemistry down to incredibly small scales, and [Marb’s lab] found that they needed a custom built still for these new, diminutive experiments.

The first step is to build the heating component of the still. This is provided with a few custom aluminum parts for the base and a pair of heaters originally meant for 3D printers, with the assembled unit wrapped in insulation. The heater accomodates a 25 mL round-bottom flask. Temperature control of the heating mantle is provided by a controller mounted to a DIN rail which receives power from a 24V power supply, and an additional temperature probe is added to measure the temperature of the distillate. A test run with water shows the small still quickly and efficiently evaporating the water up to a condenser.

Although building a still doesn’t have to be technically difficult, building something this small that’s effective and safe is a bit more challenging than a backyard moonshining operation. Scaling chemical reactions down can often be a challenge but is possible with the right mindset and equipment. We’ve seen miniaturization of many things that we might not have expected including hydrogen production, aluminum smelting, and even the construction of a microscope.

youtube.com/embed/PUDvvB-0ALw?…

hackaday.com/2026/07/03/microd…

Humans are odd creatures, and no two are exactly alike, which is likely why so many different methods exist for tracking the progress of tasks that must be accomplished. [Simone Giertz] has graced us with her own spin on task tracking that adds an element of chance.

[Giertz] tells us that she started with written lists that she tackled in dice-determined order to keep her from overthinking or cherry-picking tasks. While this worked fine, she longed for a more elegant solution. Approaching the UI first, unlike any Open Source project ever, she determined that a marker that could randomly point to a task on a vertical list would be most pleasant.

The bulk of the project was evaluating different mechanisms to make the marker pick tasks at random while not selecting a task that had already been completed. A set of magnetic toggles that could repel the marker proved ineffective, but a simpler solution involving moving the completed tasks past a divider won the day. The finished product has a satisfying selection mechanism that makes interacting with the chore chart a joy, which probably helps make it more likely things get done.

We’ve seen many productivity hacks over the years, including Arya’s Hacking the Self, this rotary time tracker, or this e-ink macropad.

youtube.com/embed/pNfgQ-KqHR4?…

hackaday.com/2026/07/03/a-new-…

qui nel #differxdiario :
noblogo.org/differx/ciao-insta…

#socialgeneralisti
#socialproprietari
#socialmedia
#instagram
#salvataggiodeicontenuti
#contenuti
#differx

If you asked us to build you a KVM last week, we’d likely have reached for a Raspberry Pi. Now, thanks to [JonathanRowny], we’d seriously consider an ESP32-P4, because his IP KVM seems pretty capable.

He’s using the P4 hardware to its fullest, getting the supported 1080p graphics, and doing so in an interesting way– he’s got a commercial adapter board to try and translate HDMI signals to the camera input on his dev board. Conveniently enough, it’s the same ribbon-cable pinout as the RPi, which is not guaranteed by the CSI standard. Writing a driver to take that signal proved the hardest part– aside from the usual chip revision confusion that plagues this chip– and we can’t help but wonder if the client on the other side of the KVM-IP link might have an easier time doing the image processing that was required for a good image. Regardless, he’s got the code as it is now up on GitHub under the Apache license.

As of this this writing, there’s no audio, and ironically for an ESP32 project networking is wired-only– but much more importantly, there is no security. So it’s a work in progress, but great to see the P4 in the wild doing something other than emulation. Not that we haven’t seen the P4 at work before–the Tanmatsu handheld also makes use of Expressif’s most powerful chip for a handy little terminal. Between the KVM and the handhelds, we cannot help but wonder how many of the projects that were once the provenance of a Pi will get squeezed into these overpowered microcontrollers. Sure, they can’t even match the original Pi in horsepower, never mind a modern Pi5, but how many times have you seen a Linux SBC seriously under-taxed in a project like this?

If you’re swapping Pi for P4– or doing anything else interesting– please let us know on the tips line.

youtube.com/embed/f21f6RnW5Yc?…

hackaday.com/2026/07/03/this-k…

For some reason there’s heated debate around the topic of whether high current carrying wiring ought to use crimped or soldered connections, even though the industry standard is to crimp everything. As a practical demonstration of why this is the case, [Will Prowse] set up a test involving a rig capable of dispensing a few hundred amps through both a crimped and a soldered copper cable.

Prior to making things go spicy, [Will] made sure to check the resistance of the two cables, noting that the soldered version had significantly lower resistance than the crimped connectors. This could be one metric that proponents of soldered connectors can point to as a benefit.

Of course, the main benefit of crimping is that you create a cold weld if crimped properly, which is a sold-state welding process that effectively blends two metal surfaces together. This is also why wire wrap is generally considered to be so very reliable, as it creates a gas-free, solid connection that does not rely on a softer, dissimilar material like solder to hold things together. Of note here is also that the cold weld process tends to continue for a while, so this kind of connection is likely to get better over time.

In the subsequent testing this difference is demonstrated quite well, especially when both cables are subjected to the sort of mechanical abuse that would be expected in an installation, such as vibrations and direct impacts. Here the soldered connections quickly begin to fail, resulting in one soldered connector even unsoldering itself due to heat development. Ultimately cold welding is simply superior over relying on a flimsy and capricious interface of intermetallic compounds.

youtube.com/embed/4CgJ4Y1FGzs?…

hackaday.com/2026/07/03/settli…

Hackaday’s Elliot Williams and Al Williams were in a retro mood this week. There was a new ‘486 computer, a new mechanical TV, and a USB stick with a magnetic personality. Can you watch YouTube on a Game Boy? Maybe.

For the can’t miss articles, this week, Elliot and Al reflected on the awkward phase of 3D printers when they transformed from being expensive commercial machines, to where they are now. Meanwhile, Al was interested in how airplanes know how fast they are going. Along the way, there were musical hacks, precision machine tools, and a quantum 8 ball.

Check out the links if you want to follow along, and as always, tell us what you think about this episode in the comments! Or write or record something for our mailbag segment.

html5-player.libsyn.com/embed/…

Direct download in authentic retro DRM-free MP3.

Where to Follow Hackaday Podcast

Places to follow Hackaday podcasts:

• iTunes
• Spotify
• Stitcher
• RSS
• YouTube
• Check out our Libsyn landing page

Episode 376 Show Notes:

Mailbag:

• Thanks to Tom Lyons for calling [Elliot] out on the weather in the Garden State. Why don’t you write or record something? Send us your questions or comments, and you might hear them in a future show.

What’s that Sound:

• Congrats to [PostalPreacher] for correctly guessing last week’s sound. Be sure to drop in next week for your chance to win an exclusive Hackaday Podcast T-shirt.

Interesting Hacks of the Week:

• Hackaday Europe 2026 – Building A Retro PC From Scratch
• Building A Micrometer-Level Displacement Sensor With 3D Printed Parts
• Hack Improves Cheap Speed Controllers
  
  • Running Four Brushless Motors With A Single Pi Pico
  • Motors Make The Best Knobs With SimpleFOC

  
  

• Watch YouTube On A Game Boy Color With A Special Cartridge
  
  • Dumping Game Boy Cartridges Via The Link Cable Port
  • GB Interceptor Enables Live Screen Capture From Game Boy
  • The Ultimate Game Boy Talk

  
  

• Mechanical TV, Without The Benefit Of New Parts

Quick Hacks:

• Elliot’s Picks:
  
  • Reflective LCD Slabtop Terminal Runs Homebrewed Solar OS
  • Fixing An Elgato Cam Link’s USB Current Draw Issue
  • GPU-Accelerated Autorouter Handles Monstrous PCB Designs
  • Piano Escapement Migrates To Drum Kit
  • Hard Drive Speakers Crank Out Classic Demo
  • Bite Into Strange Sounds With NOISFERATU

  
  

• Al’s Picks:
  
  • RF Hacking A Ceiling Fan Via The Remote
  • Accurate Split-Flap Display Can Be 3D Printed
  • A Quantum Magic 8-Ball

  
  

Can’t-Miss Articles:

• The Teenage Angst Of 3D Printing: Solidoodle, Printrbot, And Bridges
• How Airspeed Sensors Work
  
  • Tech In Plain Sight: Speedometers
  • Encyclopedia of Sensors

  
  

hackaday.com/2026/07/03/hackad…

When we think of 1960s synthesizers it’s usual to imagine instruments with vast arrays of controls and patch cables for configuring their many filters, oscillators, and other parameters. They created the templates for much of what we know today as electronic music.

In all the rush to look at full-blown synths though, it’s easy to forget their more mundane cousin, the electric organ. These instruments graced many a ’60s suburban home or church hall, and [Emma Repairs] has an interesting one. It’s a Philips Philicordia, and it’s sent us here at Hackaday down one of those rabbit holes when we should really be writing.

The instrument is a relatively straightforward single voice electric organ on the outside, but under the hood it’s a different matter. In an age when the transistor was revolutionizing electronic music, the folks in Eindhoven designed this one using tubes. There are a set of conventional enough tubes performing the role of amplifiers and oscillators, but the real party piece of this unit is the array of neon tube dividers. A neon bulb can be used as a switching element, and in those days when affordable digital logic chips were several years away, it made sense to use them in digital circuits.

The inside of the Philicordia is a feast of vintage Philips parts that will be instantly familiar to anyone who’s worked on Western European electronics of this era. The exterior design of the instrument screams understated early-1960s cool, and after she’s introduced it you can hear her playing it in the video below. Further down that rabbit hole we found that one of these instruments provided the distinctive organ sound on Chris Montez’s 1962 hit Let’s Dance, so they weren’t all uncool.

youtube.com/embed/nga80rzjm6Y?…

hackaday.com/2026/07/03/the-or…

Unsurprisingly to many of us, app stores for smart televisions are also trash. Perhaps even more full of trash than other app stores due to the smaller ecosystem and fewer reviewers.

Spur analyzed the LG smart TV app store, and found that almost half of the apps available contain proxy software, turning your TV into a node in their proxy network. Are these apps malware? Many of the analyzed apps provided a thin veneer of user consent: they offer you the tradeoff of seeing an ad every 15 seconds, or allowing their “occasional web indexing” to run permanently in the background. Watch the fishtank app for five minutes, join their proxy network for life.

Spur notes that the proxy SDK in use appears to block connections to private network ranges (internal IP ranges like 192.168.x.x and 10.x.x.x), but that the SDK restricting access to those ranges is the only protection against accessing whatever network the TV is connected to.

Amazon and Roku ban proxy apps on their devices. Samsung and LG do not.

Win 10 Security Updates Extended

Microsoft has added another year of security updates to Windows 10. Despite trying to kill the platform, so many users remain on Windows 10 that Microsoft likely has no choice.

The extended support program was previously due to end in October 2026 but has now been pushed to October 2027. The security updates will be available for free in the UI, but users in other regions must activate OneDrive and sync system settings, or pay 1000 Microsoft credits (about $30).

The death of Windows 10 is near, but for those unwilling or unable to let go, it shuffles along.

Signal Phishing Attempts

Bleeping Computer has an article about increased phishing attempts from hacker groups in Russia targeting Signal users.

The phishing messages target politicians, government officials, military, and other high-profile intelligence targets, and claim that Signal is introducing mandatory two-factor authentication, before prompting the target to enable remote Signal backups. A second follow-up phishing attempt then prompts the user to copy the backup authentication tokens from Signal and provide them to the attacker.

Signal remote backups are a relatively recent addition to the messenger, making a backup on the Signal servers of a users messages and images, encrypted with a key known only to the user. While convenient, and likely fundamentally secure given the track record of the Signal team, this phishing campaign highlights a major weakness: once private content is accessible somewhere else, an attacker simply needs to obtain the keys to access it, which is significantly simpler than obtaining the message content directly from the victims phone.

Payloads in WiFi and LoRa

Sasha Romijn presented an excellent talk at OrangeCon on embedding attack payloads in unusual places.

Sasha found poor input handling of content from DNS servers, TLS certificates, server headers, DHCP host names, LoRa Mesh node names, WiFi network names, and more. In many cases, it seems to be as simple as embedding JavaScript or CSS inside a string; many sites and utilities don’t sanitize against escaped HTML, and the standards allow it.

They then go on to demonstrate more serious impacts, such as compromising the management accounts of two Europe-based hosting providers by injecting content into TLS certificates, and gaining root on some OpenWRT devices via a WiFi SSID which loads a hostile JavaScript into the LUCI web management interface, which then uses the web management system to install a backdoor root shell.

Sasha continues the tour-de-exploits by demonstrating multiple cross-site scripting injections into the Ripe NCC database which then allow browser manipulation of users on the RIPE website. This has enormous implications, because Ripe NCC is the Internet allocation organization for Europe and the Middle East: the company who assigns and manages IP address blocks.

Be sure to check out the full presentation, and let this be a lesson to always treat all data as hostile, even from what would seem to be your own services!

Collecting Boot Console Info

One of the first steps in getting access to an embedded device is to look for a serial port, or serial port test points. Often this can give an idea what sort of code is running on the system, and in some cases, give direct access via the boot loader or a Linux login console.

Boot Intel is a web-based tool to automate scraping boot messages from embedded devices, looking for exposed logins and vulnerable services. Boot Intel can take pasted boot logs, or directly connect to the device via WebSerial.

While Boot Intel is a paid service, there is a free version for hackers to explore devices.

CitrixBleed, again

watchTowr Labs is back with another excellent write-up on CitrixBleed, continuing the trend of memory leaks in Citrix Netscaler devices.

This collection of vulnerabilities allow leaking internal memory from the Citrix servers, which can expose logs, customer data, encryption keys, or anything else found in server memory. Netscaler devices offer SSL offloading, application acceleration, VPN and remote access, and load balancing; all installations where leaking memory is likely very bad.

The watchTower write-up maintains their trend of providing entertaining reads about highly technical topics. Do yourself a favor and be sure to give it a look!

Bits and Bytes

LastPass marketing partner Klue was compromised this week, impacting the customer data of multiple companies. Customer data such as email, phone numbers, addresses, and support tickets were exposed, however the LastPass vaults themselves were not impacted. While LastPass has revoked access to the impacted partner, the stolen data could assist phishing attacks against customers.

The open source self-hosted video sharing platform PeerTube has released an emergency update which addresses multiple vulnerabilities. While the release notes quote “medium to high severity” vulnerabilities, there are no specific details. If you run a PeerTube server, upgrade now!

Both Apple AirDrop and Google Quick Share have new vulnerabilities reported this week, with fixes coming soon. Both protocols are designed to allow file sharing to nearby devices, and accordingly, the issues found on them can be triggered on nearby devices. Researchers were able to find six vulnerabilities in macOS, iOS, Windows, and Android implementations of the sharing protocols. All of the discovered vulnerabilities led to crashes, but not full exploit and code execution. Sustained denial of service attacks were possible however, with nearby attackers able to keep the services unreachable and unusable for the duration.

hackaday.com/2026/07/03/this-w…