Tagged: rtl-sdr

Using a TV Dipole Antenna for NOAA Satellite Reception

Over on YouTube icholakov has uploaded a video showing how effective a simple old TV bunny ears antenna can be at receiving NOAA satellite images. The old TV antenna is telescoping so it can be adjusted to be resonant for many frequencies, and for NOAA satellites about 20 inches makes it resonant. Using the antenna as a V-Dipole and placing it in a North to South direction optimizes the radiation pattern towards the sky, allowing for good reception of the NOAA satellite. Using it this way also helps to null out strong vertically polarized stations. More information on the V-Dipole can be found on our previous post where we posted about Adam 9A4QV’s idea to use the V-Dipole for satellite reception.

2017: TV Antenna vs. NOAA Satellite

Also related to this post is a sneak preview on our new product: We’ve also caught onto the idea that TV antenna dipoles are extremely versatile, and are in the final stages of releasing a simple telescopic dipole product similar to the TV antenna used in this video. It will be released as an antenna set that comes with some portable mounting solutions like a suction cup and bendy tripod, and 3M of RG174 coax so that the antenna can be used anywhere. Target price is $10 -15 USD incl. shipping from China. This will probably also replace the stock telescopic whip antenna currently used in our dongle sets since the telescopic dipole is simply much more versatile.

Skylark Image for Outernet’s Dreamcatcher RTL-SDR

About two weeks ago we posted our review of the Dreamcatcher, a new RTL-SDR and full ARM based computing platform built onto a single PCB. Back then the only OS available for it was a standard Armbian build, and no Outernet decoder was available. So we reviewed the Dreamcatcher with the Armbian OS and tested to see how well it worked as a general purpose RTL-SDR and computing platform.

Recently the Outernet team released a new build of ‘Skylark’ for their Dreamcatcher board. Skylark is their customized Outernet signal specific operating system that was available on the C.H.I.P. Skylark is essentially turnkey as it is much easier to setup and use. Just burn the image to an SDcard, insert the card, connect to the automatically generated Outernet WiFi hotspot on a PC or mobile device, and then browse to outernet.is to see the Skylark interface.

Unfortunately it is unclear how long some of the high bandwidth features such as the nice weather app may last. The Outernet Inmarsat L-band signal runs at a bandwidth of almost 20mB a day and appears to cost quite a bit of money to operate, so Outernet appear to be considering moving to a lower bandwidth signal in the near future. This will probably reduce content to data like text articles (news/APRS/Wikipedia/books) only. But even if it is text only it will still continue to be a very useful and interesting service.

Using a TV Dipole Antenna for NOAA Satellite Reception

Over on YouTube icholakov has uploaded a video showing how effective a simple old TV bunny ears antenna can be at receiving NOAA satellite images. The old TV antenna is telescoping so it can be adjusted to be resonant for many frequencies, and for NOAA satellites about 20 inches makes it resonant. Using the antenna as a V-Dipole and placing it in a North to South direction optimizes the radiation pattern towards the sky, allowing for good reception of the NOAA satellite. Using it this way also helps to null out strong vertically polarized stations. More information on the V-Dipole can be found on our previous post where we posted about Adam 9A4QV’s idea to use the V-Dipole for satellite reception.

2017: TV Antenna vs. NOAA Satellite

Also related to this post is a sneak preview on our new product: We’ve also caught onto the idea that TV antenna dipoles are extremely versatile, and are in the final stages of releasing a simple telescopic dipole product similar to the TV antenna used in this video. It will be released as an antenna set that comes with some portable mounting solutions like a suction cup and bendy tripod, and 3M of RG174 coax so that the antenna can be used anywhere. Target price is $10 -15 USD incl. shipping from China. This will probably also replace the stock telescopic whip antenna currently used in our dongle sets since the telescopic dipole is simply much more versatile.

Skylark Image for Outernet’s Dreamcatcher RTL-SDR

About two weeks ago we posted our review of the Dreamcatcher, a new RTL-SDR and full ARM based computing platform built onto a single PCB. Back then the only OS available for it was a standard Armbian build, and no Outernet decoder was available. So we reviewed the Dreamcatcher with the Armbian OS and tested to see how well it worked as a general purpose RTL-SDR and computing platform.

Recently the Outernet team released a new build of ‘Skylark’ for their Dreamcatcher board. Skylark is their customized Outernet signal specific operating system that was available on the C.H.I.P. Skylark is essentially turnkey as it is much easier to setup and use. Just burn the image to an SDcard, insert the card, connect to the automatically generated Outernet WiFi hotspot on a PC or mobile device, and then browse to outernet.is to see the Skylark interface.

Unfortunately it is unclear how long some of the high bandwidth features such as the nice weather app may last. The Outernet Inmarsat L-band signal runs at a bandwidth of almost 20mB a day and appears to cost quite a bit of money to operate, so Outernet appear to be considering moving to a lower bandwidth signal in the near future. This will probably reduce content to data like text articles (news/APRS/Wikipedia/books) only. But even if it is text only it will still continue to be a very useful and interesting service.

A Datasheet for our RTL-SDR.com V3 Dongles

A few people have been asking for a RTL-SDR.com V3 data/info sheet, so we have written one up here (PDF). The datasheet explains the improvements made to the V3, and how to use some of the special features like the direct sampling mode and the bias tee.

Most of the same information is available on the product release page, and the online V3 users guide as well.

Listening to and Tracking NXDN/IDAS Trunking Systems with two RTL-SDRs

Over on YouTube user radiosification has uploaded a video tutorial that shows how to decode, follow and listen to NXDN/IDAS trunking radio signals. NXDN/IDAS is a narrowband digital voice protocol commonly used with handheld radio terminals.

In the tutorial radiosification explains how to set up DSDPlus and its frequencies text file to automatically listen to and track conversations using the control channel. SDR# is initially used to find the NXDN control and voice channels, which are then entered into the text file. Using this method only DSDPlus and its corresponding receiver FMP is used. Trunking software like Unitrunker is not needed.

Radiosification also notes that the method he presents can also be used for other digital trunking systems such as P25 as well.

How to track NXDN trunking with RTL SDR & DSDPlus

Using an RTL-SDR and TEMPEST to attack AES

All electronic devices emit some sort of unintentional RF signals which can be received by an eavesdropping radio. These unintentional signals are sometimes referred to as TEMPEST, after the NSA and NATO specification which aims to ensure that electronic devices containing sensitive information cannot be spied upon through unintentional radio emissions, sounds or vibrations. TEMPEST can also refers to the opposite, which is spying on unsecured electronic devices by these means.

Recently the team at Fox-IT, a cybersecurity specialist company has released a paper showing how an RTL-SDR can be used as a TEMPEST attack device to help recover AES-256 encryption keys (pdf) from a distance by utilizing unintentional RF emissions. AES is an encryption standard commonly used in computing with protocols like HTTPS (e.g. with online banking) and for securing WiFi networks.

In their experiments they set up an AES implementation on an FPGA, and used a simple wire loop antenna and RTL-SDR to measure and record the RF emissions. By then doing some analysis on the recorded signal they are able to fairly easily extract the AES encryption key, thus defeating the encryption.

Further testing in an anechoic chamber showed that with a discone antenna they were able to recover the keys from up to a meter away. A directional antenna could probably reach even further distances.

In the past we’ve seen a similar attack using a Funcube dongle, which is an SDR similar to the RTL-SDR. In that attack they were able to remotely recover encryption keys from a laptop running GnuPC. Also, somewhat related is Disney’s EM Sense which uses an RTL-SDR to identify electronic devices by their RF emissions.

[Also seen on Hackaday]

Fictional scenario involving a hacker recording RFI from a remote PC.
Fictional scenario involving a hacker recording RFI from a remote PC.

Android App Aerial TV Banned from Google Play – Now Available on Amazon

Aerial TV is an Android app that allows you to watch DVB-T TV with an RTL-SDR on a mobile device. We posted about Aerial TV back in April and it was available on the Google Play store back then. Unfortunately Aerial TV has recently been banned from the Google Play store as apparently the app can be used to display copyrighted material from TV. The author writes the following on a Facebook post:

Google Play has suspended Aerial TV due to “[Aerial TV] claims to provide copyrighted contents from TV channels”. According to Google apps that display live TV are of “questionable nature”. I am trying to clarify what they mean. I would like to apologize to all affected users. If you have any concerns, feel free to get in touch with Google directly.

This is quite odd and probably a mistake. But if you are looking for Aerial TV it is now available on the Amazon app store with a current 35% discount. If you bought the app on the Google Play store then to get new updates you will need to uninstall it, contact the developer for a refund, and then purchase it again on the Amazon store. More info about that is available on the Facebook page. Updates about it’s availability will always be provided on the official website at aerialtv.eu.

Asking an Amazon Echo to Spot Planes with help from an RTL-SDR and Raspberry Pi

Amazon Echo is a smart home device which is essentially a hands free speaker that responds to voice commands in a similar way to ‘Okay Google’ and Siri does on your phone. With voice commands you can ask it to do things like play music, make a call or send a message, answer any question, control smart home devices like fans and locks and order items from Amazon.

Over on his blog Nick Sypteras has written about teaching his Amazon Echo a new ‘skill’ which allows it to automatically detect and read out what aircraft is flying outside his window, and where it is going. A skill is basically a plugin that you can code up to give your Amazon Echo new voice command functions and behavior.

The Echo skill gathers the live local ADS-B plane data via dump1090’s json output which runs on a networked Raspberry Pi with RTL-SDR dongle attached. The data is loaded into a database, which is then queried for the closest plane to the Echo’s location. Finally the program scrapes the closest flights departure and arrival data from FlightRadar24 before speaking it through the Echo’s speaker. Nicks code is freely available over on his GitHub page.

Alexa Plane Spotting Skill

This project reminds us of a previous post where we posted about Simon Aubury’s work in creating a Raspberry Pi and RTL-SDR based aircraft camera tracking system. Simon’s system used live ADS-B data to point a camera directly at aircraft as they passed over his house.

It also reminded us of this British Airways video billboard that was popular a few years ago. The ad featured a young boy who would point directly at passing aircraft with text displaying the flight information. They used a commercial networked ADS-B device to gather live ADS-B data (internet based ADS-B data from sites like flightradar24.com has a time lag, so it is not suitable for time sensitive applications like this), and whenever a passing British Airways aircraft was detected the ad would play.

Cannes Lions Grand Prix 2014 Direct Lion British Airways Magic of Flying Ogilvy One, London

Video Tutorials: Setting up an RTL-SDR and HackRF with SDR-Console V3, Using the HackRF to find your Cellphone Signal and more

Over on his YouTube channel user Corrosive has uploaded a set of videos that show how to install and get started with an RTL-SDR or HackRF with SDR-Console V3.  The video series starts from the very beginning with installing the drivers via zadig, and then goes on to show how to download, install and use SDR-Console V3.

In one of his later videos Corrosive also shows how to optimally configure the settings in SDR-Console V3 and SDR# for optimal reception and viewing.

In a newer video he also shows how he uses the HackRF as a spectrum analyzer to find his cellphone signal. Regarding this video, Corrosive wrote in to us and said the following:

For a while now I’ve been trying to find the frequency of my cell phone, looking frequencies up online and trying to find an app that would tell me my current frequency. None of these things seem to work and scanning the band manually I always came up dry because I wasn’t 100% sure where I needed to look.

Further videos on his channel also show how to receive ADSB data with an RTL-SDR and Android phone, and how he repurposed a rabbit ears antenna into a V-dipole antenna for receiving Satcom pirates.

Corrosive has done a good job putting out SDR and radio related videos over the past couple of weeks so it may be a channel to subscribe to if you are interested in this type of content.