[ <- back-issue archive · live wire · issue #45 · RF 7D · 2026-11-15 05:04 UTC ]
 .-.                    .-. 
(: `--------------------' :)
 )   intel brief // #45   ( 
(: .--------------------. :)
 `-'                    `-'
> /var/archive/digest/45.intel :: [ 2026-11-15 05:04 UTC ]
  • Turk Telekom GNSS holdover failure -- Calnex ITSF 2026 field measurements show base-station timing rots the instant GNSS drops: no re-sync grace, holdover exhausts, sync degrades silently underneath. Treat GNSS loss as a hard operational kill, not a nuisance -- the exact failure mode a $30 L1 spoofer produces on demand [RNT Foundation].
  • Lima GNSS spoofing pushes fixes to Peru -- Ukraine's Lima system layers spoofing on top of jamming, feeding false position fixes so drones and guided weapons (Oreshnik included) place themselves an ocean away. Russian kit still leans on GNSS despite Chayka/eLoran fallbacks -- proof that constellation dependence is the soft underbelly [RNT Foundation].
  • KrakenSDR V2 suite rewritten in C++ -- The 5-channel coherent RTL-SDR direction finder shed its Python layer: real-time spectrum and audio demod now run concurrently with MUSIC DoA estimation, with a Mode selector carving up tuner allocation. Claimed big speedups on Pi 4/5 mean a battery-powered passive DF rig just got lighter [krakenrf].
  • PortaPack Mayhem nightly n_261115 -- 7756e195 fixes stale audio spectrum updates during modulation changes, extends PRALINE TX/RX clock sync to the HackRF Pro's internal 25 MHz TCXO, and kills SD write corruption by switching to single-beat SDIO IDMAC transfers. If you trusted the old spectrum display during sweeps, rerun them [portapack-mayhem].
  • Kismet ships userspace Wi-Fi drivers -- uwifi builds Linux USB 802.11 drivers unmodified in userspace on libusb, giving monitor-mode capture on macOS and other no-kernel-monitor platforms. Kismet-packages already vendors the usbwifi and mm8108 firmware blobs so adapters install straight from the package set [kismetwireless].
  • ESP32DualBandWardriver v2.4.1 -- ESP32-C5 wardriver promotes the WiFi Pineapple Pager 6 GHz recon payload to main, installable from the fork while the Hak5 library submission sits in review. 2.4/5/6 GHz capture with hashed MACs in exported logs -- pocket wardriving across three bands [justcallmekoko].
  • LG phone SDR does Meteor-M HRPT -- The D325f-SDR repurposes a Qualcomm cellular modem as a receiver, using the phone's Bluetooth TX as local oscillator for sub-800 MHz tuning; app 2.0 adds HRPT downlink reception and an SNR bench against the RTL-SDR Blog V4. A phone-as-SDR with a BT LO is a genuinely weird capture chain [RTL-SDR.com].
  • pluto-crpa two-element anti-jam prototype -- CRPA-style adaptive nulling on a PlutoSDR (AD9363 + Zynq-7010): weights combined in the PL, re-transmitted at GPS L1 into a COTS GNSS receiver, adaptive weights computed on the PS. A clean open recipe for testing whether nulling actually saves your fix under jamming [osqzss].
 .-.                      .-. 
(: `----------------------' :)
 )   possibilities // #45   ( 
(: .----------------------. :)
 `-'                      `-'
> /var/archive/digest/45.possibilities :: [ 143 sources ]
  • Bench a $30 L1 spoofer against holdover decay -- Replay the Calnex scenario locally: GPS-SDR-SIM on a HackRF, walk a u-blox and a cellular small-cell timing module off true time, and log 1PPS drift through holdover exhaustion. You now have a measurable kill-clock for any GNSS-dependent target.
  • Chain pluto-crpa nulling against a real jammer -- Point two antennas at your bench GPS spoofer, watch the PS-computed weights steer a null, and check whether the COTS receiver's reported C/N0 and position hold. Then try two jammers from different bearings and find where the two-element array folds.
  • Stress the new KrakenSDR C++ DoA core on a Pi 5 -- Run MUSIC DoA and audio demod concurrently while streaming spectrum, then feed it a handheld 2.4 GHz source on a known bearing grid. Log angular error vs CPU load to see whether the C++ rewrite holds calibration under full tuner allocation.
  • Fuzz uwifi's libusb 802.11 path on macOS -- Grab an RTL8812AU and an mt76xx adapter, push malformed bulk URB sequences and hot-unplug mid-capture against the userspace driver, and diff crash behavior against the kernel mac80211 path. New capture surface means new parser bugs.
  • Hunt 6 GHz with the ESP32-C5 Pager payload -- Strap the wardriver to a bike, sweep Wi-Fi 6E neighborhoods, and verify hashed-MAC log sanitization actually holds across reboots. Cross-correlate captures against a KrakenSDR bearing to triangulate WDS backhauls.
  • Replay IRis-style learned bursts over RF -- Capture raw IR burst timings off a target remote with a photodiode into a Flipper or PortaPack, then rebroadcast the same codes through a 433 MHz OOK flowgraph to hit IR-to-RF bridge receivers that never authenticate anything.
  • Rerun PortaPack sweeps after the spectrum fix -- Flash nightly n_261115, redo any sweep captures you made on older builds, and verify the single-beat SDIO IDMAC path stops card corruption during long logging sessions. Then check whether the 25 MHz TCXO PRALINE sync tightens your TX frequency error on HackRF Pro.
 .-.                     .-. 
(: `---------------------' :)
 )   github brief // #45   ( 
(: .---------------------. :)
 `-'                     `-'
> /var/archive/digest/45.github :: [ code & repo tradecraft ]

Kismet just moved the monitor-mode goalposts by building Linux USB Wi-Fi drivers unmodified in userspace on libusb, which means 802.11 capture on macOS and every no-kernel-monitor platform without waiting for driver mainlining -- and kismet-packages already vendors the usbwifi and mm8108 firmware blobs so the whole chain installs from one package set. Meanwhile KrakenSDR ripped the Python out of its 5-channel coherent DF stack and rebuilt spectrum, audio demod, and MUSIC DoA in C++ with a tuner Mode selector, PortaPack Mayhem killed SD corruption with single-beat SDIO IDMAC transfers while syncing PRALINE TX/RX clocks to the HackRF Pro's 25 MHz TCXO, and osqzss dropped a two-element CRPA anti-jam prototype that combines weights in the PlutoSDR's PL and re-transmits at GPS L1 into a COTS receiver.

  • kismetwireless/userspace-wifi -- Linux USB Wi-Fi drivers built unmodified in userspace on libusb for monitor-mode capture where kernel drivers can't go. Brand-new attack surface for anyone who wants to fuzz an 80211 stack without root in the kernel.
  • krakenrf/krakensdr_suite -- Full C++ rewrite of the coherent RTL-SDR DF stack: real-time spectrum and audio demod concurrent with MUSIC DoA, Mode selector for tuner allocation, big claimed speedups on Pi 4/5. A battery passive-radar and foxhunt core, lighter than ever.
  • osqzss/pluto-crpa -- Two-element CRPA anti-jam prototype on PlutoSDR (AD9363 + Zynq-7010): PL-side weight combination, PS-side adaptive weights, re-transmit at GPS L1 into a COTS GNSS receiver. Textbook open anti-jam harness worth diffing against your jammer bench.
  • portapack-mayhem/mayhem-firmware -- Nightly n_261115 (7756e195) fixes stale audio spectrum during modulation changes, extends PRALINE TX/RX clock sync to the HackRF Pro's internal 25 MHz TCXO, and switches to single-beat SDIO IDMAC transfers to kill SD write corruption. Tight fix set; rerun old sweeps.
  • justcallmekoko/ESP32DualBandWardriver -- v2.4.1 promotes the WiFi Pineapple Pager 6 GHz recon payload to main on the ESP32-C5, with Wardacted log sanitization documented -- hashed MACs across 2.4/5/6 GHz exports. Three-band wardriving in a pocket-sized board.