atc1441
@atc1441
Hack the planet! my biggest passion is to run a custom firmware on as many devices as possible
Unfortunately the latest Xiaomi Mi Band 10 does also use the same SoC BES 2700iMP as the Mi Band 9 🥲 Just did a quick teardown to find out its mainboard is 90% the same to the older version Video here: youtu.be/QmVwbeRdpVA No further hacking from my side these days.
Teardown of a few Aliexpress Hörmann Remote Clones Most interesting a Tuya WiFi Enabled one: s.click.aliexpress.com/e/_opwprH1 Which turns out to be just as simple as a standalone remote(4Buttons) connected to the Tuya CB3S Belkin BK7231N module and handled as just GPIOs
Another Heat cost Allocator looked into. This time an Ista non RF Variant. Decapped Blob turns out to be an MSP430C413 8KB ROM 256 Byte RAM Other than that its just: - Custom LCD - 2 Temp Sensor - CR2477 Battery - IRDA Interface Not much to "hack" on without RF and ROM based SoC
Teardown of an random LCD Temperature Logger which is used to export the history data a PDF CSV or TXT Powered by just an CR2450 and claim of 1 year lifetime s.click.aliexpress.com/e/_onjSQYR Inside we can find: - NTC Temp Sensor - STM32L073RBT6 ARM SoC - SPI Flash 25Q64 1 MB - Custom LCD
Custom firmware on an Heat cost Allocator... No use but funny to look into it and its WMBUS RF Packets Next step is to dump the stock firmware via the ages old Timing attack from @travisgoodspeed (MSP430F417)
ESP32 only WiFi / BLE Jammer Reverse Engineered the ESP32-S3 RF part good enough and found the right Registers and ROM Functions to make it a somewhat "Research purpose only device" Short video now online here: youtu.be/t4IfF0aUa-g
Call me impressed, Gemini helped a lot to create these 2 template designer tools. atc1441.github.io/oepl_json_desi… atc1441.github.io/oepl_yaml_desi… They allow to quickly create a Drag and Drop E-Paper dashboard for the OpenEpaperLink JSON Template and HomeAssistant plugin
Quick Teardown of the 10€ ZigBee Plant Humidity sensor s.click.aliexpress.com/e/_opby7T8 Insides: - Telink TLSR SoC Capable of BLE and ZigBee, very hackable - Moisture sensor via 555 Timer - Unknown SoC for Moisture measurement - 2xAAA Battery holder - LED - Button - Cheap NTC Sensor
Made a Shitty counter(and clock) out of the overpriced and locked down smiirl Flip subscriber counter🙌 Explanation video and teardown now on YouTube youtu.be/aBNShHO0Vgw
Finally implemented 4 Color support into the ATC_BLE_OEPL E-Paper Display Firmware together with a lot more features which I share in my newest video, including the how to flash "guide" in a one take: youtu.be/9oKWkHGI-Yk
New Smart Ring with LED Segment display are on Aliexpress,unfortunately seems like its RTL8762 based which is still not"Hackable"sadly. So not going to order it s.click.aliexpress.com/e/_okrFoRC Better stick to the SR08 if you want something hackable wit Display😅 youtu.be/xOw-6uMfOjc
Found a Smiirl Sub Counter for cheap on the flea market Damn that's just a very overpriced and unsecure OpenWRT Router with added I2C Interface to the FlipsFlaps running some basic Lua scripts.. 300 bugs for that is bogus! Easy to get SSH within the same network for good reuse
Maybe they took the codebase from an even earlier version for both variants and only the TC20 team thought about adding the hashing function But to make it short, "zebra_hawkeye" So the Zebra TC20 / TC200J is now also officially unlocked 🥳🥳
These Memor X3 bad Boys are too cute🥹 Just no use for them so they will end on ebay shortly Still wanted to share this nostalgic view
Created a Word Clock for the 9.7" E-Paper Display which utilizes the OpenEpaperLink Project The Python script creates the Word Clock image and does a post request to the OEPL AP which will upload it every 5 minutes to the display Code can be found here: github.com/OpenEPaperLink…
Someone must have had fun putting 80pcs ESP32 modules seperate in bags... I sure did unpacking it 🥲
