←back to thread

409 points andreock | 1 comments | | HN request time: 0.285s | source
Show context
HWR_14 ◴[] No.41854888[source]
The big advantage of the FlipperZero is the community developing software. This seems to be a based on a different chip. Does the Flipper software run natively on this, or do we need to port everything?
replies(2): >>41855142 #>>41855580 #
bigiain ◴[] No.41855142[source]
I find my FlipperZero is a super fun tool for exploring stuff I'm even vaguely curious about, which I can then use to design/build things I want.

Both my motorcycles now have about $8 worth of AliExpress parts including a CC1101 rf module hooked top to the high beam globe, so I can just flash my hi beams at the garage door and it opens via 433MHz magic. It was super easy to know how to build that when I'd experimented with "listening" to the keychain garage door opener with the FZ, and playing back the signal at the garage door. To get from there to a first prototype with a CC1101 module and an Arduino, then a second prototype with a CC1101 and an AT-Tiny installed on a bike was so obviously just going to work that it was a heap of fun. Without the "instant gratification" of being able to record the garage door opener key fob with the FZ and play it back to open the door, and the knowledge that the FZ did that just by using a inexpensive microcontroller driving a CC1101 module itself, I'd probably never even done more than wonder about how to do it.

replies(1): >>41855179 #
sedatk ◴[] No.41855179[source]
> “listening" to the keychain garage door opener with the FZ, and playing back the signal

That would only work with older garage doors that don’t use rolling codes, wouldn’t it?

replies(3): >>41855315 #>>41855724 #>>41856152 #
bigiain ◴[] No.41856152[source]
Yep. Non rolling code garage doors seem to be ubiquitous in rental properties here (Sydney Australia).

Rolling codes are better. But if you haven't seen it, Samy Kamkar has a device called Roll Jam, take a look at the last ~5 mins of this Defcon23 talk: https://www.youtube.com/watch?v=UNgvShN4USU

(The TL;DR of the trick there is: Jam the radio signal a key fob sends so a car/garage fairly wide band receiver can't hear it. At the same time listen with a better tuned receiver. Wait for someone to press their key fob and record the code, then wait for them to press it again and record the second code - then stop jamming and replay the 1st code you captured. Door opens and person goes through. But you now have a valid second rolling code that will work. You can do this with a Teensy3 and two CC1101 modules, about $40 worth of hardware.)

replies(2): >>41857916 #>>41858979 #
1. buescher ◴[] No.41858979[source]
> But you now have a valid second rolling code that will work.

Once. Note also that the same technique will work on other OTP schemes that are not time-based.