Posts

Showing posts with the label Sub-GHz

Featured Post

ESP32 SDR: from failed 433 MHz experiments to live phone decoding

-
Image
An ESP32-S3 investigation, updated with live Android decoding and physical tests on 17 October 2026. An ESP32-S3 can expose real radio samples. The question is how far that capability carries toward useful applications. Conceptual illustration. I wanted to turn an ESP32 into something more ambitious than another Wi-Fi gadget: a small radio instrument that could capture a remote-control transmission, send the recording to a phone, decode it and eventually reproduce it. The starting point was the ESPARGOS esp-sdr project , which exposes raw radio samples from hardware already inside supported ESP32 chips. That is an exciting capability. It also raises an easy-to-misunderstand question: if software can ask the chip to tune to a frequency, can the chip actually receive useful information there? We tested that question through firmware changes, controlled radio transmissions, independent receivers and a Flutter phone app. We tried GPS, broadcast FM, 433 MHz remote-control signals, n...
Post a Comment
Read more

Cloning a CAME parking-gate remote with a Flipper Zero — why static Princeton codes are a security own-goal

-
Image
Cloning a CAME parking-gate remote with a Flipper Zero — why static Princeton codes are a security own-goal A surprising number of buildings hand each tenant a little plastic fob to open the parking barrier — and a surprising number of those fobs are not what you'd call secure. If the building installer cheaped out (or just picked the default jumper settings), the remote sends a fixed sub-GHz signal every single time. No rolling code, no challenge, no cryptography. Just the same packet, on the same frequency, every press. Which means anyone with a Flipper Zero and a few minutes can clone it. Here's a 90-second demo of doing exactly that on a CAME barrier — and the technical context for why it works. The setup The gate is a CAME -branded barrier, the kind you see at almost every apartment compound parking entrance. Every tenant is given a static remote — not rolling code. Why? Cheaper. Static encoders like Princeton's PT2262 (and the dozens of clones ...
1 comment
Read more