I found an amazon basics color changing smart light bulb attached to a lamp my neighbor threw in the apartment dumpster.

[andres4ny@social.ridetrans.it]

@MLE_online Oooh that's handy!

[mle_online@social.afront.org]

Ok, it's controlling a BP1838 3 channel dimmable LED driver chip: https://datasheet4u.com/datasheets/BPS/BP1638CJ/1495890

If someone out there is smart and wants to try throwing some code together to see if it will work outside of the amazon ecosystem, let me know and I'll try loading it onto the ESP32

[scribblesonnapkins@mastodon.social]

@SnoopJ @MLE_online
They have on other processors but I don't know about this one.

[mle_online@social.afront.org]

@larrybiggs You can only call it that when you hammer on it. I just sawed the case open

[mle_online@social.afront.org]

I have no idea which pins of the esp32 those lines going to the LED driver are associated with, btw. They put a giant blob of very stiff silicone over all of that

[snoopj@hachyderm.io]

@scribblesonnapkins @MLE_online it looks like the kind of fault injection you're thinking of was performed on a cousin chip, I would guess the secure boot is pretty much the same across the family of chips and would be susceptible to the same attack:

Espressif ESP32: Bypassing Secure Boot using EMFI

Raelize provides top-notch embedded device security serrvices like consultancy, testing, research and training.

(raelize.com)

pretty neat, I like that write-up quite well

[ruenahcmohr@infosec.exchange]

@MLE_online oh easy, but I bet someone would beat me to it. so, I'll hold off trying.

[mle_online@social.afront.org]

@RueNahcMohr what if everyone says that and no one does it?

[johns_az@mastodon.social]

@MLE_online I remove conformal coating (which is usually silicone-based) with acetone. Maybe put some on the pcb and let it work its way under the blob?

[ruenahcmohr@infosec.exchange]

@MLE_online then there will still be someone who tips first and finishes before I do.
I would like to see the blob side of the pcb tho.

[mle_online@social.afront.org]

@RueNahcMohr here you go. I got most of the blob off

[botvolution@mastodon.sdf.org]

@MLE_online
Aside from everything else, it is simply utterly ridiculous to have a computer in a fucking lightbulb.

[mle_online@social.afront.org]

@botvolution that's because it's not a lightbulb. It's bezosnet spying device

[meaningfulbits@mastodon.social]

@MLE_online #Amazon is notorious for crippling products to force their walled garden.

[mle_online@social.afront.org]

It looks like it's specifically one of these

ACK Solution

Espressif offers an easy way for users to build Alexa-connected devices with Espressif’s Alexa Connect Kit (ACK) hardware and software.

Espressif Systems (www.espressif.com)

[steter@mastodon.stevesworld.co]

@MLE_online @RueNahcMohr That looks like a wireless card attached to a power supply. The blob may have the logic underneath. It might be a gate array, if they don't need to ever change the IP they talk to. Some companies hate paying programmers, and who needs a CPU, anyway? I haven't noticed anything to store the IP data yet, but I'm more software/firmware than hardware. It probably isn't socketed, because that would cost money in the form of pennies. Product numbers off of the stuff under the blob would be helpful.

[vxo@digipres.club]

@MLE_online @botvolution The EnshittiBulb

on that same note I'm planning on writing my state representatives about AB 2047 because that just sounds like an absolute License to Enshittify for the few 3d printer manufacturers who would jump through all those hoops and probably do it by tying their devices, including ones bought with public funding for schools, to a cloud service that can just Go Away and brick the printers, or force you to buy the manufacturer's own RFID tagged filament

[maehw@chaos.social]

@MLE_online dump its firmware.

[mle_online@social.afront.org]

@steter @RueNahcMohr It's an ESP32 pico v3 zero attached to a power supply

[mle_online@social.afront.org]

@maehw I don't know how to do that