[ <- back-issue archive · live wire · issue #35 · RF 7D · 2026-11-15 03:06 UTC ]
 .-.                    .-. 
(: `--------------------' :)
 )   intel brief // #35   ( 
(: .--------------------. :)
 `-'                    `-'
> /var/archive/digest/35.intel :: [ 2026-11-15 03:06 UTC ]
  • KrakenSDR V2 suite rewritten in C++ -- The 5-channel coherent RTL-SDR DF rig dropped its Python layer entirely: real-time spectrum and audio demod now run alongside MUSIC DoA estimation, with a Mode selector carving up tuner usage and claimed big speedups on Pi 4/5. Coherent RTL phase calibration plus MUSIC on a Pi 5 is a bench-grade passive radar and foxhunt core [@krakenrf].
  • PlutoSDR two-element CRPA anti-jam prototype -- Fresh repo from the GPS-SDR-SIM author: AD9363 + Zynq-7010 with adaptive weights computed on the PS, combined in the PL, and re-transmitted at GPS L1 into a COTS GNSS receiver. A working null-steering breadboard against L1 jammers, not a paper mockup [@osqzss].
  • Lima GNSS spoofing pushes drones into Peru -- Ukraine's Lima layer combines wideband jamming with false position fixes so GNSS-dependent drones and guided weapons resolve to the wrong hemisphere. Russian kit still leans on GNSS despite Chayka/eLoran alternatives -- the dependency is the attack surface [@rntfnd].
  • GNSS loss at a base station is a hard failure -- Turk Telekom/Calnex ITSF 2026 measurements show holdover runs out and timing/sync degrades silently when GNSS drops at a site. No re-sync grace, no alarm theater -- just slow drift until the RAN eats itself [@rntfnd].
  • Mayhem firmware hardens TX/RX clocking and SD writes -- PRALINE TX/RX clock sync now extends to the HackRF Pro's internal 25 MHz TCXO, stale audio spectrum during modulation changes is fixed, and SD corruption was killed by switching to single-beat SDIO IDMAC transfers. Rerun any sweeps you trusted on the old display [@portapack-mayhem].
  • ESP32-C5 dual-band wardriver v2.4.1 ships 6 GHz recon -- The C5-based wardriver now bundles a WiFi Pineapple Pager payload for 6 GHz recon, installable from the fork while the Hak5 library submission sits in review. Sub-$20 hardware walking the 6 GHz band [@justcallmekoko].
  • SDRangel v8.2.0 rebuilds digital voice demod -- DSDcc and mbelib got ripped out for a new DSD demod/modulator covering DMR, D-Star, C4FM, M17 and dPMR off Airspy/HackRF/LimeSDR/RTL-SDR. Better decode on the modes that actually carry ops traffic [@f4exb].
  • LG phone modem as SDR, now with HRPT -- The D325f-SDR repurposes a Qualcomm cellular modem as a receiver, using the phone's Bluetooth TX as a local oscillator for sub-800 MHz tuning; app 2.0 adds Meteor-M HRPT reception plus an SNR bench against the RTL-SDR Blog V4 [@rtl-sdr].
 .-.                      .-. 
(: `----------------------' :)
 )   possibilities // #35   ( 
(: .----------------------. :)
 `-'                      `-'
> /var/archive/digest/35.possibilities :: [ 155 sources ]
  • Bench the CRPA null against real jammers -- Feed the PlutoSDR prototype a swept CW and a chirp jammer at L1 (1575.42 MHz) from a second Pluto or HackRF, log the C/N0 delta on the COTS receiver before/after weight adaptation, and probe how fast the PS-side weights track a moving interference angle.
  • Hunt KrakenSDR's coherent calibration drift -- Run the new C++ MUSIC stack against a fixed 433 MHz or 1090 MHz emitter, diff DoA output against the old Python build across hours of thermal drift, and check whether the Mode selector's tuner allocation breaks phase calibration between modes.
  • Fuzz SoapyRemote's newly bounded stream parser -- 0.5.4 added bounds on stream header bytes/elems in acquireRecv and RPC receive failure on mid-payload peer close -- feed truncated and oversized stream headers from a hostile peer and see if older 0.5.x daemons still misbehave.
  • Replay the GNSS holdover failure on your own bench -- Strap a GPSDO-equipped receiver to a simulator, yank the antenna mid-run, and measure how long holdover actually holds on cheap TCXO vs OCXO references -- most 'GNSS-backed' timing gear has no honest holdover spec.
  • Stress the mt76 monitor-mode path on MT792x -- With mt7996 firmware dropped from skip-picks, build the out-of-tree driver, hammer monitor mode plus frame injection on 6 GHz channels, and diff capture behavior against the in-kernel tree before your next wardrive.
  • Sweep 6 GHz with the C5 wardriver plus Kismet -- Pair the ESP32-C5 rig's 6 GHz logging with kismet's new baseline-transport rules and wigle 2.112's filter-state icon; verify the Pineapple Pager payload's channel dwell time doesn't miss short-beacon 6 GHz APs.
  • Probe rtl_433's newlib buffer shrink for regressions -- The MAXIMAL_BUF_LENGTH shrink and clean SDR reopen landed for ESP-IDF builds; run the full decoder suite against a captured ISM corpus on both glibc and newlib to catch any decoder that now truncates long frames.
 .-.                     .-. 
(: `---------------------' :)
 )   github brief // #35   ( 
(: .---------------------. :)
 `-'                     `-'
> /var/archive/digest/35.github :: [ code & repo tradecraft ]

Quiet week on the paper trail, loud one on the firmware front. The DF and anti-jam corners of the spectrum did the heavy lifting: KrakenSDR shed its Python skin for a C++ core, a PlutoSDR CRPA anti-jam prototype appeared out of nowhere, and Mayhem keepers spent their nights on TCXO clock sync and SDIO corruption. Meanwhile the wardriving toolchain kept grinding -- WiGLE fixed an IMS wedge, the ESP32-C5 wardriver grew a 6 GHz payload, and Kismet learned to baseline aircraft and ships. Nothing flashy, just the low-level plumbing that field rigs actually stand on.

  • krakenrf/krakensdr_suite -- Full C++ rewrite of the 5-channel coherent RTL DF stack: spectrum and audio demod run concurrently with MUSIC DoA, Mode selector allocates tuners, claimed big Pi 4/5 speedups. Pull it if you want a battery-powered passive DF rig that fits in a jacket.
  • osqzss/pluto-crpa -- Two-element CRPA anti-jam on AD9363 + Zynq-7010: adaptive weights on the PS, combination in the PL, re-transmit at GPS L1 into a COTS receiver. Textbook null-steering harness worth cloning tonight.
  • portapack-mayhem/mayhem-firmware -- PRALINE TX/RX clock sync extended to the HackRF Pro's internal 25 MHz TCXO, stale audio spectrum during modulation changes fixed, and SD write corruption killed via single-beat SDIO IDMAC transfers. Clean, practical hardening.
  • justcallmekoko/ESP32DualBandWardriver -- v2.4.1 ships a WiFi Pineapple Pager payload for 6 GHz recon on the ESP32-C5, installable from the fork pending Hak5 review. Cheap 6 GHz wardriving keeps getting cheaper.
  • wiglenet/wigle-wifi-wardriving -- Release 2.112 fixes an IMS wedge when toggling Wi-Fi and adds a filter icon showing display/logging/alert state. Small fix, but the IMS wedge was the kind of bug that kills a whole drive's logs.