Brutkey

1.3.6.1.4.1.61513
@xssfox@cloudisland.nz
1.3.6.1.4.1.61513
@xssfox@cloudisland.nz

Next time I'm just going to do a pitch drop experiment

1.3.6.1.4.1.61513
@xssfox@cloudisland.nz

More data. I don't like some of the data so i might just ignore that data. You can do that right?

1.3.6.1.4.1.61513
@xssfox@cloudisland.nz

The NDA should be revoked in 5 to ∞ days, so stay tuned

1.3.6.1.4.1.61513
@xssfox@cloudisland.nz

Now these points of data
Make a beautiful line.

1.3.6.1.4.1.61513
@xssfox@cloudisland.nz

Secret project is in a stage where i pretty much can only observe and it's not going exactly to plan but it's also not failing. Not succeeding either. It's uh, interesting. And I'm totally not nervous about it at all

1.3.6.1.4.1.61513
@xssfox@cloudisland.nz

There will always be people like Michaela who pour out nothing but destructive energy on humanity and then rejoice when they have once again destroyed something.

1.3.6.1.4.1.61513
@xssfox@cloudisland.nz

The 736263 passcode seems to allow setting the device name.

9999 is more scary and seems to set a lot of the BMS parameters. I'm not sure if these are sanity checked by the BMS but I don't think it would be hard to put the BMS into an unsafe state with this control.

1.3.6.1.4.1.61513
@xssfox@cloudisland.nz

after starting from 0, I worked my way up. 1, 2, 3,... 9998, 9999. Jackpot.

I kid, I just used apk2gold to decompile the app and searched for "password".

Two passwords exist. 9999 and 736263.

1.3.6.1.4.1.61513
@xssfox@cloudisland.nz

Bluetooth is done over BLE and no auth or pairing is done.

There is a little hamburger menu for some reason opens up an text input for "password".

Without knowing the password. It would be impossible to go any further.

1.3.6.1.4.1.61513
@xssfox@cloudisland.nz

So DCS (deep cell systems) sells Lithium batteries that are basically a drop in replacement for lead acids. They are really good and have built in BMS system.

Because they have a BMS, the BMS already knows all the details you'd want about your battery. These are exposed via bluetooth so don't need an external battery monitor to see battery state.