hashking710/focusv-ble-research

[Hardware] Logic analyzer — help wanted 20 days ago

help wanted hardware needed

0

Independent reverse-engineering of the BLE protocol and firmware for Focus V Carta 2 / Aeris / Carta Sport dab rigs

HTML

#bluetooth-low-energy#dab-rig#firmware#focus-v#ghidra#iot#reverse-engineering#telink

[Hardware] Passive BLE sniffer — help wanted 20 days ago

help wanted hardware needed

hashking710/focusv-ble-research

0

Independent reverse-engineering of the BLE protocol and firmware for Focus V Carta 2 / Aeris / Carta Sport dab rigs

HTML

#bluetooth-low-energy#dab-rig#firmware#focus-v#ghidra#iot#reverse-engineering#telink

A handful of protocol-level fields with unconfirmed exact meaning 20 days ago

help wanted research

hashking710/focusv-ble-research

0

Independent reverse-engineering of the BLE protocol and firmware for Focus V Carta 2 / Aeris / Carta Sport dab rigs

HTML

#bluetooth-low-energy#dab-rig#firmware#focus-v#ghidra#iot#reverse-engineering#telink

Two unexplained 4-byte fields in the 40-byte firmware header 20 days ago

help wanted research

hashking710/focusv-ble-research

0

Independent reverse-engineering of the BLE protocol and firmware for Focus V Carta 2 / Aeris / Carta Sport dab rigs

HTML

#bluetooth-low-energy#dab-rig#firmware#focus-v#ghidra#iot#reverse-engineering#telink

Physical button-gesture detection — no GPIO-read primitive located 20 days ago

help wanted research hardware needed

hashking710/focusv-ble-research

0

Independent reverse-engineering of the BLE protocol and firmware for Focus V Carta 2 / Aeris / Carta Sport dab rigs

HTML

#bluetooth-low-energy#dab-rig#firmware#focus-v#ghidra#iot#reverse-engineering#telink

The 0x40000 → 0x0 finalize/copy step for firmware updates 20 days ago

help wanted research hardware needed

hashking710/focusv-ble-research

0

Independent reverse-engineering of the BLE protocol and firmware for Focus V Carta 2 / Aeris / Carta Sport dab rigs

HTML

#bluetooth-low-energy#dab-rig#firmware#focus-v#ghidra#iot#reverse-engineering#telink

Locate the real OTA-receive GATT write callback 20 days ago

help wanted research hardware needed

hashking710/focusv-ble-research

0

Independent reverse-engineering of the BLE protocol and firmware for Focus V Carta 2 / Aeris / Carta Sport dab rigs

HTML

#bluetooth-low-energy#dab-rig#firmware#focus-v#ghidra#iot#reverse-engineering#telink

Boot-time firmware bank/validity selection — where does it actually happen? 20 days ago

help wanted research

hashking710/focusv-ble-research

0

Independent reverse-engineering of the BLE protocol and firmware for Focus V Carta 2 / Aeris / Carta Sport dab rigs

HTML

#bluetooth-low-energy#dab-rig#firmware#focus-v#ghidra#iot#reverse-engineering#telink

Where is the heating-element output actually driven? 20 days ago

help wanted research hardware needed

hashking710/focusv-ble-research

0

Independent reverse-engineering of the BLE protocol and firmware for Focus V Carta 2 / Aeris / Carta Sport dab rigs

HTML

#bluetooth-low-energy#dab-rig#firmware#focus-v#ghidra#iot#reverse-engineering#telink

Open Issues Need Help