Mastodawn

🧵 1/more

The fishbone felt so lonesome out there on the cold balcony, Always pointing to the Mountains of Hell, a qso now and then Austria wide or on the nearest repeaters. Such treatment is not appropriate

So I got her a companion, a discone 85 - 1.300 GHz, a submissive antenna on the receiving end.

Or a #SIGINT antenna if you wish.

Here is the fishbone thread again
https://chaos.social/deck/@harkank/113341901119327246

Erich M. (@[email protected])

Attached: 1 image #TechnischeRundschau #TechnicalReview #hamradio 🧵 1/more Knew I would be stuck on this same spot, I had run away from 50 years ago. Brought one of these 3 items with me , the other 2 are objets trouvés. Any ideas what I could be after with this poor setup around a fuqing swiffer pad?

chaos.social

Erich M.Dec 1, 2024

2/mehr

And there she is in the dizzy light of the winter sun. A stern, prickly beauty throning high above smalltown suburbia. As you might have noted there is this usb black stick in front.

A SMB-socket on one side, on the other USB, so this might well be called a transgender stick. Linguistic/psychoanalytic sidenote: Even phallic verticals are grammatically female in most languages.

What for a start? Humble nearfield #SIGINT in an environment, I had the displeasure to come of age.

Erich M.Dec 2, 2024

3/more #hamradio #sensor

This is my provisonal shack sporting the slimmest possible set up. A 5 Watt VHF /UHF handheld transceiver connected to OE5XFK in the Mountains of hell, as everybody should know meanwhile.
😎

The fat USB stick is an #rtlsdr, a tiny software defined radio attached to a laptop running #ubuntu #linux 24.04.

And now we go a-hunting, Nearfield #SIGINT starting with a humble bash proggie.

harkank@dellaxo3:~$ rtl_433

Erich M.Dec 2, 2024

4/more #sensor nearfield #sigint

<diabolic laugh>

ALL YOUR SENSORS ARE BELONG TO US!

</diabolic laugh>

well at least these shitbroadcasting on 433 MHz.

These are all weather stations and affiliated outdoor sensors all blaring out data on 433.920 MHz. No idea who owns these - yet.

Next we got to change this Fahrenheit mess to Celsius. And there are other sensors around, thankfully.

Erich M.Dec 2, 2024

5/more #sensor #rtlsdr #hamradio
and poor man's #SIGINT

Here comes Fordie. Tyre pressure monitoring says at least one of the tyres is okay. And: Fordie is on the move so we possibly won't be seeing him again.
Good luck to your other 3 tyre sensors and watch out on the road!

Btw the cmd to get only °c is

$ rtl_433 -C si

Erich M.Dec 3, 2024

6/ #sensor #rtlsdr #hamradio
nearfield #SIGINT

Fordie was not alone, here is a Toyota tyre plus three other tyres apparently belonging to two different Renaults.

Erich M.Dec 3, 2024

7/more #sensor #rtlsdr #hamradio
nearfield #SIGINT

Abarth tyre sensors. These are the type of sensors we see amidst the noise of these pesky weather stations. Need to rtfm how to exclude these.

Erich M.Dec 3, 2024

8/more #sensor #rtlsdr #hamradio
nearfield #SIGINT

Here is a flat tyre. Less than a bar. 88 KPa according to Abarth-124 Spider TPMS. Related car should be somewhere in a garage down here in suburbia.

And this is the first recorded example of sensor impostor syndrome. Renault -0345R claiming a vertical acceleration of 295m/s².

π x thumb this should be 30G if my estimate is correct. This is in Gargantuan if not Elonmuskian fraud dimensons.

Erich M.Dec 4, 2024

9/more

#sensor #rtlsdr nearfield #SIGINT

Enough of weather stations and flat tyres 433 MHz chickenshit. These are two different remote control sytems , each sporting more than one button.
Nice.

OK and they say things like "encrypted" and "tristate code". Need to look into this further, because

ALL YOUR FUQING SENSORS ARE BELONG TO US!

Erich M.Dec 4, 2024

10/more

#sensor #rtlsdr nearfield #SIGINT

This is the chip :

"Programmable 64-bit crypt key KeeLoq® code hopping technology, incorporating high + Each transmission is unique security, a small package outline and low cost.""

Righty right. There is this large logistics centre less than 1 Km in line of sight and the other 433 thingie should be a portable bar code machine.

We appreciate all of this and we close tonight's technoromance show ....

Erich M.Dec 4, 2024

11/more

#sensor #rtlsdr nearfield #SIGINT
... with a stern, prickly beauty and a sunset over a smalltown suburbia, where I had run away from 50 years ago.
Otherwise we need to descend a bit further down to the protocol level.

Erich M.Dec 25, 2024

12/ more

Nearfield #SIGINT
Until now we stayed rather on the surface with noisy temperature and tyre pressure sensors. Time to refine our commands a bit and seek to exclude some of the noisiest devices later.

Paradoxically this starts with increasing ouput verbosity and suddenly quite different thingies materialize: a marquee sensor, a water leak detector and a power meter.
And here are some codes yearning for analysis.

Erich M.Dec 25, 2024

13/more
Oh, a rain gauge and a pool thermometer . WTF a pool thermometer in mid winter? And TyreGuard 4000 complaining because he got ony 2 fuqing bits while demanding 88.

90 % of the noise on 433 are error messages, mostly prdouced by weather stations and tyre sensors. We need to get rid of these....

nearfield #SIGINT #sdr #rtlsdr

Erich M.Dec 25, 2024

14/ more

Alright and here is a Gasmate meat thermometer with the same connectivity problems and another water leak detector.

nearfield #SIGINT #sdr #rtlsdr

Erich M.Dec 25, 2024

15/more
nearfield #SIGINT #sdr #rtlsdr

Smalltown suburbia in Upper Austria is definitely a meat thermometer hotspot. Here are two more of these. I supect the Amazon product belonging to our balcony neighbour who owns a gas grill.

OK and "Security+ Keyfob" is rather not security plus but broadcasting an entire key. Most likely used as a garage door opener, cheap shit from China.

https://www.ebay.de/itm/296719242471?chn=ps&_ul=DE&var=594549956515&_trkparms=ispr%3D1&amdata=enc%3A1kjhz3oinQ4CZaPQqoQ03zg47&norover=1&mkevt=1&mkrid=707-168914-907737-8&mkcid=2&itemid=594549956515_296719242471&targetid=325425753764&device=c&mktype=pla&googleloc=1000818&poi=&campaignid=20354691798&mkgroupid=151907125395&rlsatarget=pla-325425753764&abcId=&merchantid=5447894517&gad_source=1&gclid=EAIaIQobChMI76uQ_tXDigMVCpSDBx0PdBhFEAQYAyABEgLAxvD_BwE

#sensor #rtlsdr nearfield #SIGINT

315MHz/433MHz Garage Door Gate Opener Universal Key Duplicator for Electric Gate | eBay

Es kann andere gewöhnliche Fernbedienungen mit derselben Frequenz kopieren. Es kann jederzeit Codes löschen und lernen. Es ist einfach und schnell zu verwenden. Es kann in der Autofernbedienung verwendet werden.

eBay

Erich M.Dec 26, 2024

16/more

nearfield #SIGINT #sdr #rtlsdr

This is the bus of a German home automation system somewhere down there. And the controller of a house alert system by Jasco/General Electric.

This is getting interesting now. After all these pesky tyre and weather sensors not to forget meat thermometers.

This the command to get a pretty verbose output as well as excluding the noisiest devices.

harkank@dellaxo3:~$ rtl_433 -vvv -R -139 -R -191 -R -236 -R -250 -R -228 -R -225 -R -111

Erich M.Mar 1, 2025

17/17 Latest episode from our popular series #nearfied_SIGINT

Here are the codes of an

oiltank gauge sensor,
a Ford car key,
2 temperature sensors, 1 delivering a wrong number of bits
a house alarm system
And if I had a wireless marihuana grow room watering system this would identify definitely as a "sensible living mini plant moisture sensor".

Next series will be #Russki_SIGINT v. 2.1 next week.

Here are two previews.
https://www.youtube.com/watch?v=CddUToKXZJ8

https://chaos.social/deck/@harkank/113115103774149785

Russia is spying from this roof in Vienna

YouTube

Urwumpe Dec 25, 2024

@harkank 30 g centrifugal acceleration sounds still realistic, if its really the proper label. The tyres of the Bugatti Veyron had to withstand over 5000g at the top speed of 400 km/h.

A = V² / r

With 30 cm radius for the wheels (60 cm diameter), 30 g means 115 km/h.

Mario Zechner Dec 2, 2024

@harkank OMG this is beautiful! No need to buy your own temp/pressure/humidity sensors anymore. Truly great ROI! :D

Erich M.Dec 2, 2024

@badlogic
Just wait for some other data coming up😎

Mario Zechner Dec 2, 2024

@harkank literally can't wait. This is the best thing I've seen over the past few weeks on social media.

Erich M.Dec 3, 2024

@badlogic
dead easy companero. My only prob is now how to pipe the bash output to a file. To analyse it later in GVIM.
I

Mario Zechner Dec 4, 2024

@harkank those color ANSI escapes sure look fun to get rid of :p

Rigo Wenning Dec 2, 2024

@harkank car keys are also 433MHz

Erich M.Dec 2, 2024

@rigo
Just wait 😎

md4nt Dec 3, 2024

@harkank interessant. welche tools nimmst du fuers endcoden?

Erich M.Dec 3, 2024

@md4nt
RTL_433 kann das bis zu einem gewissen Grad. Kommt eh noch im Thread.

md4nt Dec 3, 2024

@harkank ahja seh schon. danke!

guntbert Dec 3, 2024

@harkank wo hast du die gekauft? Oder diy?

Erich M.Dec 3, 2024

Kriegst überall von ebay und WIMO angefangen um ~ 100 €. Diese Discones können alle weitgehend dasselbe.