Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
xro:rollohack_gw60 [2015-10-09 17:05] xro |
xro:rollohack_gw60 [2017-06-11 15:12] (current) xro |
||
|---|---|---|---|
| Line 64: | Line 64: | ||
| The ZB40 can select one of three or all three rollos and send commands UP, DOWN, STOP. Simplest minimum implementation would require at least 4 bits. So I could hope that one-byte bruteforcing might still yield results. Two byte bruteforcing while also guessing the bps would be impossible in the 60s pairing mode window of the GW60. Unfortunately: NO LUCK. | The ZB40 can select one of three or all three rollos and send commands UP, DOWN, STOP. Simplest minimum implementation would require at least 4 bits. So I could hope that one-byte bruteforcing might still yield results. Two byte bruteforcing while also guessing the bps would be impossible in the 60s pairing mode window of the GW60. Unfortunately: NO LUCK. | ||
| - | Status: grudgingly ordered a overpriced ZB40 with even more prohibitive 9,90 shipping costs from Germany. | + | Yes, at this point I could just a well have soldered something on the PCB and simulated button presses. But I was curious now, so I grudgingly ordered a overpriced ZB40 with even more prohibitive 9,90 shipping costs from Germany. |
| === Listening In === | === Listening In === | ||
| + | <WRAP right>{{:xro:superrollo_zb40.jpg?direct&400 |}}</WRAP> | ||
| Next step: Listening in on the ZB40 talking to the GW60 using my OpenBench Logic Analyzer. | Next step: Listening in on the ZB40 talking to the GW60 using my OpenBench Logic Analyzer. | ||
| + | |||
| + | {{:xro:rollo_gw60_zb40_signal.tar.xz|OpenBench LogicSniffer recorded signals, Sigrok format}} | ||
| + | |||
| + | Testing the included RF Remote as well as other 433MHz remotes, it would seem the ZB40 receiver just down-modulates the signal into the baseband and pipes the raw signal to the gw60. The actual signal sent by the remote look quite strange though. It's pulse-width modulation for sure. | ||
| + | Seems to me that the receive (not the remote) could easy be replaced by the contents of this [[http://www.pollin.de/shop/dt/MzIyODcyOTk-/Computer_und_Zubehoer/Hardware/Maeuse_Unterlagen_Joystick/PC_Funkfernbedienung_mit_USB_Empfaenger_X10.html|Remote's USB-Stick]] | ||
| + | |||
| + | ==== Update ==== | ||
| + | |||
| + | Finally resumed the project with a different approach. | ||
| + | |||
| + | Bought a second ZB35 remote and soldered the contacts to a ESP8266. | ||
| + | |||
| + | Fotos [[https://galley.realraum.at/index.php?/category/ZB35RemoteSuperrollo|here]] | ||
realraum Graz, Brockmanngasse 15, 8010 Graz, realraum - Verein für Technik in Kultur und Gesellschaft