|
Post by progman on Sept 20, 2016 17:55:18 GMT
i dont have the command because i testing randomly command 63 bytes and i dont catches this. on the last test before broke my band i tested this command payload 8 bytes and the byte 5 or 6 fixing 0x80 and byte 2 fixing 0xDE, the band is blinking white. example command: 0x08:0x00:0xDE:0x00:0x00:0x80:0x00:0x00:0x00 or 0x08:0x00:0xDE:0x00:0x00:0x00:0x80:0x00:0x00 very becarefull ps: excuse me my english is very not good. best regard progman
|
|
|
Post by stefankrupop on Sept 20, 2016 18:05:48 GMT
0x08:0x00:0x00:0x00:0x00:0x80:0x00:0x00:0x00 Cool! Using this command I instantly could replicate it: For each packet, the band flashes once in white. Nice! Setting the 6th byte to 0x80 instead of the 5th had no effect, the band stayed dark. Thank you! Stefan
|
|
|
Post by progman on Sept 20, 2016 18:39:58 GMT
0x08:0x00:0x00:0x00:0x00:0x80:0x00:0x00:0x00 Cool! Using this command I instantly could replicate it: For each packet, the band flashes once in white. Nice! Setting the 6th byte to 0x80 instead of the 5th had no effect, the band stayed dark. Thank you! Stefan my experience is end now because my band is broken , i try to simulation of arduino SI4463 to remplacment the si part of brand it's very hard ..... and after it's possible to bypass sending command on air my projet is Arduino => ATSAMD20 directly
|
|
|
Post by progman on Sept 27, 2016 18:02:25 GMT
hi stefan,
do you have the news to your investigation ?
best regard
|
|
|
Post by stefankrupop on Sept 29, 2016 21:35:09 GMT
Sadly, there currently is little progress... I tried sending random 8-byte-packets to the band and checking for reactions using (primitive) computer vision. I let that setup run for a night (it sent these invalid "reset packets" [0x00 0x00] in regular intervals to keep the band from entering standby mode). I got only some reactions when the bit mentioned above was set. However, sending unknown packets seems (as you said) a little dangerous. For example I now got one band that does not flash on power-on anymore, but still reacts to the reset packet... I also tried to make a possible UART on J100 doing something by sending bytes from 0 to 255 with different Baud rates to each of the pins and monitoring the others for pin changes (with pull-ups enabled). Again, sadly, there was no reaction at all I thought there might be something listening as the Xylo5-c model has a dedicated place for an 3-pin UART connector... But possibly you would have to send a sequence of bytes to enter some configuration mode or bootloader, which of course I do not know. I have ordered some breakout boards for the footprint of the SAM D20. Maybe I will remove one from the Xyloband and put it on the adapter so I can inject my own signals. Who knows, maybe the controller is susceptible for voltage- or clock-glitching... However, as it has an internal core voltage regulator and clock, it might just do nothing. Kind regards, Stefan
|
|
rodders
New Member
Posts: 21
Xyloband type: Speaker Model
|
Post by rodders on Oct 2, 2016 13:13:58 GMT
Stefan (and fellow hackers), You have still done very well and managed to dedicate many more hours to this project than I have managed lately. I did something similar and ended up cycling through a 2nd frame of 1x byte and then 2x bytes with a slight pause inbetween - I started three but the cycle would have lasted days. I listened to the transmission on my RF scanner and it was like being inside a medical "MRI scanner". I could only run the Xyloband like this whilst it was in front of me so I could see any activity - just like you there was nothing . Your idea of using OpenCV to detect activity was a fantastic one - well done. I haven't completely given up though but must also start to spend some time working on my Chrsitmas light display + my daily work for money I'll post anything I manage to achieve on our Xyloband Hacking Forum; so hopefully you'll get an email notification. The only good news is that I have bought three more Xylobands from Ebay. best regards, Rodders.
|
|
|
Post by progman on May 29, 2017 2:07:19 GMT
hi all,
don't you have the file for dump boot 4362 MOSI and MISO ? but i want to compare my result and your result.
best regard
|
|