Category Archives: Energy

Binocular Night Vision Goggle II

One deep dark night on a dirt road on a remote mountain of an even more remote island, I rode swiftly downhill, passenger of a pickup truck. The driver shut our lights off. We sat in silence as the truck skidded and careened along the dusty road.

I barely could see the driver’s hands rolling quickly back and forth on the steering wheel to keep us from driving off the cliff ledge to our left. He didn’t slow down after lights-out, and when I turned my head more towards him he said warmly l’appel du vide or something like that and smiled broadly at the barely visible road ahead.

While the road itself is seen better with headlamps, by shutting them off we actually expanded our visibility further and were safer overall. And of course we revealed ourselves less dramatically (noise and dust still were emitted), which can reduce blindness in oncoming vehicles.

With so many experiences like this in the past, I often see lights as pollution and wonder how much longer we must accept theories of Victorian street-lamps as safer?

Apparently, the original lighting in London was so poor in 1763 that James Boswell was able to have sex with a prostitute on Westminster Bridge. The shadows and gloom of the pre-electrified world not just provided privacy for Mr Boswell’s actions but it was also a haven for crime.

To be fair I have seen couples having sex in the broad daylight on the eastbound platform at Charlton Station (CTN) in London, so it might not just be about visibility. Anyway, developing better vision integrated directly into the windshield, or our glasses seems like a much more sane and modern idea than trying to increase lumens everywhere. We wear sunglasses while driving, why not a night glass?

We save immense amounts of energy when we choose to leverage starlight and ambient heat, and reveal so much more…fortunately the US military is a big investor in technology along these lines and the latest iteration sounds quite nice:

The BNVD amplifies the small amount of existing light emitted by stars, the moon’s glow or other ambient light sources, and uses the light to clearly display objects in detail in very dark conditions. The COTI uses heat energy from the Marine’s surroundings to add a thermal overlay which allows the image to be viewed more clearly.

This seems light years ahead of driving with a common joint electronics Portable Visual Detecting or Range and Bearing, Search (AN/PVS)

Jaywalking is a Fantasy Crime

Brilliant comedy routine by Hannibal Buress

Humor helps underscore a very real problem with Jaywalking laws, which any historian should be able to tell you:

What sets jaywalking apart is that it never should have been against the law in the first place. City streets were meant for foot traffic and horses from ancient times until the early twentieth century. As a result, early automobiles found themselves alongside all sorts of pedestrians. To make way for cars, literally and figuratively, wealthy drivers and the U.S. auto industry set out to stigmatize lower-class pedestrians who crossed streets at will. Those who wouldn’t step aside for vehicles became known as “jay walkers”…

Or more exactly, clowns were repeatedly rammed by cars in public displays paid for by car manufacturers, to shame anyone walking on the street

Auto campaigners lobbied police to publicly shame transgressors by whistling or shouting at them — and even carrying women back to the sidewalk — instead of quietly reprimanding or fining them. They staged safety campaigns in which actors dressed in 19th-century garb, or as clowns, were hired to cross the street illegally, signifying that the practice was outdated and foolish. In a 1924 New York safety campaign, a clown was marched in front of a slow-moving Model T and rammed repeatedly.

I cover some of this history in my presentations on big data security, such as “Security in a World of Intelligent Machines

If you look carefully at that police notice from 1866 London it has two modes of operation for the red and green street lights:

  • CAUTION: all persons in charge of vehicles and horses are warned to pass the crossing with care, and due regard for the safety of foot passengers
  • STOP: vehicles and horses shall be stopped on each side of the crossing to allow passage of persons on foot; notice being given to all persons in charge of vehicles and horses to stop clear of the crossing

British railroad managers took ship right-of-way red/green lanterns and recommended using them to stop vehicles so pedestrians could walk safely.

American car manufacturers then took that street light concept and flipped it around completely, telling pedestrians to stay off roads, inventing a fantasy crime to shame and physically harm certain races of people for not driving.

Yes, you read that right. Racism permeates America’s enforcement of this fantasy crime:

In cases like jaywalking, which often hinge on police discretion, blacks accounted for 95 percent of all arrests.

And just to make the point even starker, North Dakota lawmakers in 2017 actively promoted the concept of using vehicles as a weapon to murder pedestrians, awarding zero liability for drivers:

A bill introduced by an oil patch lawmaker would provide an exemption for the driver of a motor vehicle if they unintentionally injured or killed a pedestrian obstructing traffic on a public road or highway.

“It’s shifting the burden of proof from the motor vehicle driver to the pedestrian,” said Rep. Keith Kempenich, R-Bowman

Several months later, Kempenich’s campaign led to a federal civil rights investigation of a white nationalist for murder instead of the zero liability for killing people with cars, which he had promoted to them.

One person was killed and 19 were hurt when a speeding car slammed into a throng of counterprotesters in Charlottesville, where a “Unite the Right” rally of white nationalist and other right-wing groups had been scheduled to take place, the city tweeted on its verified account.

A 32-year-old woman was killed while walking across the street, Charlottesville Police Chief Al Thomas said. Police were still in the process of notifying her family.

[…]

Federal authorities said a civil rights investigation into the deadly crash was opened hours after it happened.

In related news, dozens of cities today are restoring pedestrian rights and looking at ways to ban cars from streets:

  • Oslo, Norway
  • Madrid, Spain
  • Chengdu, China
  • Hamburg, Germany
  • Copenhagen, Denmark
  • Paris, France
  • London, England
  • Brussels, Belgium
  • Berlin, Germany
  • Mexico City, Mexico
  • Bogoto, Colombia
  • San Francisco, USA
  • New York, USA

And while Jaywalking is a fantasy crime that produces little if any positive results, Pontevedra, Spain is being called a paradise after banning cars across most of the city. It is quite clearly the opposite of the city in the Buress comedy routine:

Lores became mayor after 12 years in opposition, and within a month had pedestrianised all 300,000 sq m of the medieval centre, paving the streets with granite flagstones.

“The historical centre was dead,” he says. “There were a lot of drugs, it was full of cars – it was a marginal zone. It was a city in decline, polluted, and there were a lot of traffic accidents. It was stagnant. Most people who had a chance to leave did so. At first we thought of improving traffic conditions but couldn’t come up with a workable plan. Instead we decided to take back the public space for the residents and to do this we decided to get rid of cars.”

The results they have reported are amazing. Can’t wait to hear what Buress has to say about it.


Update Oct 2019

A kind reader sent another comedy video of great relevance:

Think about it, a group of private businessmen coined an offensive slur to promote their product and it worked so well that today it’s a legal term…the streets went from a public place where everyone was welcome to a terrifying off-limits death trap.

Update Feb 2021

Orange County Sheriff’s deputies argued whether or not a Black man had jaywalked and if it was necessary to stop him, then taunted and forcibly detained him until shooting him to death.

Police Say Man Who Stole Tesla Model 3 Charged With Battery

Many moons ago you may remember this introduction to one of my car-hacking posts:

First, you need a Vehicle Identification Number (VIN). You can ask your friends or family for their VIN. You can walk into a parking lot, especially a Jeep dealer’s, and look at the VIN. Or you can search craigslist for a VIN. I used the SF bay area site but you can search anywhere using a simple URL modification…

The VIN is a token, a fairly important one, that requires manufacturers to use threat models to think about adversarial usage. Alas it sits in plain view both in person and online.

We interrupt this PSA about credential management to bring you a hot story about a brand new cutting edge technology Model 3 Tesla being stolen.

…a regular at the Trevls EV-only rent-a-car company in Minnesota was the key suspect in stealing a Model 3 rental car owned by the agency. According to the owner of Trevls, John Marino, the man simply walked up to the Model 3, opened it, got in, started it and drove off. Bloomington police are saying that “the man somehow manipulated the Tesla app to unlock and start the car, disabling the GPS before leaving town.”

The key here for the key suspect, puns intended, seems to be that this Tesla was rented before. The suspect had the VIN associated with his account and used the application, so was a temporary valid driver. A VIN has to be associated with an account to run the application, and I think most Tesla owners would not want any path for their public VINs to be “matched” to someone else’s account.

Alas, a rental company does exactly that, putting a VIN in random people’s accounts. The rental company claims they remove the VIN from a customer account after their rental, thus denying any further authorization. However, this driver likely realized since he was authenticated as a driver of that car at least once he probably could contact Tesla support and somehow convince them to add the VIN back to his account without authorization of the rental company. Or maybe the removal process wasn’t clean. Deprovisioning is notoriously hard in any credential system.

I’m going to go out on a limb here and say the Tesla application and driver support system wasn’t sufficiently threat modeled for the kind of VIN use that rental companies require, let alone social engineering talent of rental customers.

It reminds me once of sitting down with an automobile manufacturer and telling them while I enjoyed hacking cars I wasn’t about to start inserting USB into my rentals…and they interrupted me with a disgusted look on their face to say “WHY NOT?” I meekly explained I thought a lab was more appropriate as it would be dangerous for others to be renting cars I had been hacking on, especially when rental use wasn’t in the threat models (it wasn’t).

Police were scrambling for clues when this Tesla disappeared because, after the suspect reportedly disabled GPS, all the usual tracking signals (e.g. NFC/RFID scanning) on Interstate roads weren’t being helpful. The Tesla owner (rental company), on the other hand, noticed the stolen car being connected to the charging network and 1,000 miles from the scene of the crime (Minnesota to Texas in two days). Police simply went to the charging station and there they found the lazy thief, who despite noticing a loophole in authorization and means to disable GPS failed to think about other ways he could be charged.

And yes I wrote this entire thing just for the puns. You’re welcome.

Update Sept 15: Telsa has pushed an update (2018.34.1) that offers a “PIN to drive” security option to limit use of a key.

No word yet on the “forgot PIN, enter credentials to drive” flow resilience to social engineering. More to the point this update does not seem to leverage PIN to drive when using the mobile application with “keyless driving”…perhaps because if you can enter credentials for keyless driving you could start the car with the same credentials in the forgot PIN screen.

Harley-Davidson Moves Research to Northern California

Well I have to say I was wrong twelve years ago about diesel motorcycles. No matter how patient I was for those Kawasaki to arrive, in the back of my head it was clear that hackers around me loved the zero-power-curve of electric bikes more than the long-distance of diesel.

At one point many years ago I was stuck in a long car ride around rural France (ask me another time about war-driving) with an aeronautical engineer and to kill time I opined about the benefits of light motorcycles with batteries easily outperforming gasoline. Only a few months later, back stateside, I received an email thanking me because he had built one himself and now was commuting effortlessly and with a smile.

I was gruntled, yet still awaited news of a diesel. Something about the plug-in/range didn’t suit my sense of riding.

With Harley, king of the long-haul open-road bikes, making a major electric research announcement like this, I officially give up on diesel bikes making it to civilian life:

Harley-Davidson, Inc. (NYSE: HOG) announced today it will establish a new research and development facility in Northern California to support its future product portfolio, including the company’s first complete line of electric vehicles.

Many, many years ago I worked on Cabletron switches, which in a bizarre twist led me to Milwaukee, WI. Unbeknownst to many, if not most, Harley was at that time doing cutting edge IT deployments. Also I attended wedding parties there of Harley workers that ended with the couple describing Harleys they would ride to California. I mean high-tech Harleys in California does make sense, in spite of their oil-splattered tinkering owners group heritage.

Until now my heart still ached for that Kawasaki diesel dual-sport we were promised. Oh well. The time has come to say diesel bikes aren’t going to make headlines. Perhaps electric range soon will be less of an issue as Harley clearly thinks about that spectrum. But will HOGs be able to keep their tinkering ways or is DRM also coming?