Posts

Showing posts from June, 2026

Featured Post

ESP32 SDR: from failed 433 MHz experiments to live phone decoding

Image
An ESP32-S3 investigation, updated with live Android decoding and physical tests on 17 October 2026. An ESP32-S3 can expose real radio samples. The question is how far that capability carries toward useful applications. Conceptual illustration. I wanted to turn an ESP32 into something more ambitious than another Wi-Fi gadget: a small radio instrument that could capture a remote-control transmission, send the recording to a phone, decode it and eventually reproduce it. The starting point was the ESPARGOS esp-sdr project , which exposes raw radio samples from hardware already inside supported ESP32 chips. That is an exciting capability. It also raises an easy-to-misunderstand question: if software can ask the chip to tune to a frequency, can the chip actually receive useful information there? We tested that question through firmware changes, controlled radio transmissions, independent receivers and a Flutter phone app. We tried GPS, broadcast FM, 433 MHz remote-control signals, n...

Cloning a CAME parking-gate remote with a Flipper Zero — why static Princeton codes are a security own-goal

Image
Cloning a CAME parking-gate remote with a Flipper Zero — why static Princeton codes are a security own-goal A surprising number of buildings hand each tenant a little plastic fob to open the parking barrier — and a surprising number of those fobs are not what you'd call secure. If the building installer cheaped out (or just picked the default jumper settings), the remote sends a fixed sub-GHz signal every single time. No rolling code, no challenge, no cryptography. Just the same packet, on the same frequency, every press. Which means anyone with a Flipper Zero and a few minutes can clone it. Here's a 90-second demo of doing exactly that on a CAME barrier — and the technical context for why it works. The setup The gate is a CAME -branded barrier, the kind you see at almost every apartment compound parking entrance. Every tenant is given a static remote — not rolling code. Why? Cheaper. Static encoders like Princeton's PT2262 (and the dozens of clones ...

From unboxing a touchscreen dev board to vibe-coding a full WiFi auditor

Image
From unboxing a touchscreen dev board to vibe-coding a full WiFi auditor A parcel landed at my door from Nextion Systems : the new Open Nextion — an ESP32-based board with a built-in capacitive touch display. Came in two flavors (3.5" and 2.8"), plus a speaker, a dual-microphone board, and an IO adapter. The kind of package that's begging to be turned into something it was never meant to do. So, naturally, I did exactly that. What's actually in the box Before any of the fun started, here's what the Open Nextion package shipped with: Two Open Nextion boards — 3.5" and 2.8" variants Onboard speaker Dual-microphone board (for stereo capture / wake-word work) IO adapter for breaking out the rest of the GPIO The board itself is generous on connectivity: USB-C , a battery connector with a real RTC , I2C, UART , a camera interface, SD card , plus mic and speaker pins. It's basically a tiny computer with a touchscreen bol...