Questions on nRF24L01+ - Githubissues

HyperC commented 8 years ago

Hi, I'm not sure if this is the right place to ask, but I found this blogpost http://blog.ptsecurity.com/2016/06/phd-vi-how-they-stole-our-drone.html?showComment=1465942106913#c5816700951199608274 and since I'm fairly new to the subject I have some questions:

Using the nRF24L01+ with an Arduino, can that be seen as SDR as well?
Halfway the post these values were found: uint64_t pipe = 0xa20009890fLL; byte addr_len = 5; But where do they come from? I can't seem to find out..

Thanks in advance! :)

chopengauer commented 8 years ago

@HyperC

Definitely no. nRF24L01 is an independent chip, with its own protocol, works through SPI bus. It use GFSK modulation for digitizing of data. datasheet SDR - a "universal" radio. wiki. You can digitize signal with your own way, not only GFSM modulation is possible. For digitizing we use gnuradio. And use a special scheme for it (*.grc). In our case we discuss both types of the device interception:
- With special chip, which used in the device (drone) - nRF24 compatible chip - BK2423. Arduino/Raspberry we use as SPI device for using with our chip.
- With SDR and GnuRadio for signal digitizing.
Almost all topic describes how to find address of the device. You can see it on picture with signal after demodulation in baudline. And in scanner screenshots... So, please read topic one more time.

HyperC commented 8 years ago

Ok thanks for the help. I'm trying to get the nRF24 transceiver to work with my Arduino, but it's not giving any output in the serial monitor. When I disconnect the 3v3 pin, it does show these empty results: 5556 ms: 164249 Ch: 13 Get data: 5557 ms: 164252 Ch: 13 Get data: 5558 ms: 164255 Ch: 13 Get data: ... But then the 'w' and 's' doesn't work. When I plug in the 3v3 pin, the serial monitor stops with the output BUT the channel switching does work..?! I'm sure I wired the thing up correctly, but it feels like it's making a bad connection somewhere. Do you know what could be wrong?

Also, the code in the blogpost is incomplete, the for loop just stops:

for (byte i=0; i ???

HyperC commented 8 years ago

Ok I changed the CE en CSN pin definitions, and it does keep outputting in my serial monitor now. But there's nothing behind the 'Get data:' part.. It should always show something right..? I'm getting the idea that the radio isn't working.

Also: 'w' and 's' input in serial monitor dont do anything while it's 'trying to collect data'.

HyperC commented 8 years ago

I think it's my board, so I'll try to fix it tomorrow. One more question for now: You say the nRF24L01 is an independent chip, with its own protocol. Can only drones using this chip (or the BK2423) be controlled by the nRF24L01 chip? The protocol differs per drone any way.. so why does it have to be compatible with the nRF24 chip? Or can I also control one of those random mini-drones (that operate on the 2.4GHz frequency)? Like this one: https://www.hobbyzone.com/hobbyzone/quadcopters/HBZ8300.html

chopengauer / nrf_analyze

Questions on nRF24L01+ #1