nickwhyte.com - Latest Comments

Re: Reverse Engineering a 433MHz Motorised Blind RF Protocol

nickw444 — Fri, 03 Nov 2017 08:24:08 -0000

Hey Mate, thanks for the comment. I actually built a hardware transmitter using an ESP8266 chip + a generic 433 MHz transmitter from ebay.

All of the work related can be found in my homekit monorepo (https://github.com/nickw444...
- The schematics https://github.com/nickw444..., - PCB: https://github.com/nickw444...,
- Homekit Bridge: https://github.com/nickw444...
- And other misc blind work here: https://github.com/nickw444...

Enjoy!

(p.s willing to accept pull requests)

Re: Reverse Engineering a 433MHz Motorised Blind RF Protocol

paulredmond — Fri, 03 Nov 2017 06:42:54 -0000

Hey, Great post! Really helpful as I am trying to do the exact same here! Did you get anywhere with the transmission of the codes?

Re: Reverse Engineering a 433MHz Motorised Blind RF Protocol

nickw444 — Sun, 13 Aug 2017 20:22:51 -0000

Wow awesome! Thanks

Re: Reverse Engineering a 433MHz Motorised Blind RF Protocol

Deon — Tue, 08 Aug 2017 03:40:15 -0000

and also corrects the checksum (no need for the +3)

Re: Reverse Engineering a 433MHz Motorised Blind RF Protocol

Tamer Çelik — Tue, 18 Jul 2017 14:51:12 -0000

Nice article and research!
You might want to take a look into this https://github.com/martyrs/...
It's my work to transmit OOK data using CC1101 module and you can find Arduino sketch in repo.
Tamer Celik - http://tamercelik.com

Re: Reverse Engineering a 433MHz Motorised Blind RF Protocol

Chip — Sun, 16 Jul 2017 15:54:22 -0000

Looking at the action values seems to suggest the bitstream should be inverted for analysis. That would give you action values of 1,2,3,128.

Re: Reverse Engineering a 433MHz Motorised Blind RF Protocol

nickw444 — Sun, 16 Jul 2017 14:04:26 -0000

Hey @Matthew Garrett, Funny you link to that library, that was actually my starting point for trying to communicate with the Broadlink RM Pro. I should have mentioned that in the write up.

Unfortunately I couldn't work with it for the following reasons:

1. The broadlink RM Pro talks to these blinds by generating its own codes. It does the full pairing sequence rather than just re-broadcasting the existing remotes. Attempting to do the standard "capture and replay" approach doesn't actually work for these blinds (and I have no clue why).

2. Even if it did work for these blinds, I still couldn't work out if the python library was instructing the RM Pro to capture RF or IR. In the broadlink app, you need to explicitly tell it if the device is RF or IR when adding it.

Re: Reverse Engineering a 433MHz Motorised Blind RF Protocol

Matthew Garrett — Sun, 16 Jul 2017 13:58:26 -0000

https://github.com/mjg59/py... has an implementation of the RM Pro protocol, if you ever end up wanting to go that way again

Re: Reverse Engineering a 433MHz Motorised Blind RF Protocol

James Skarzinskas — Sun, 16 Jul 2017 12:49:20 -0000

Excellent article - that's a neat trick with Audacity. Thank you for explaining how to identify the encoding of the waveform.

Re: Reverse Engineering a 433MHz Motorised Blind RF Protocol

stephennancekivell — Sun, 16 Jul 2017 09:24:52 -0000

Legend! Thats a great write up, and gives me some ideas.