notpike / The-Fonz

TouchTunes Wireless Remote Sniffer/Transmitter for the Yard Stick One
Other
168 stars 24 forks source link

Testing on a live jukebox #4

Open nucleardreamer opened 6 years ago

nucleardreamer commented 6 years ago

I happen to.own a TouchTunes jukebox! I stumbled upon this repo looking for remote codes.

I would love to find out what features or functionality hasn't been tested yet because of being in a live environment. I also have the whole system accessible (USB ports, SATA, HDMI, etc) so there aren't physical limitations.

If it's helpful (and maybe this is kind of crazy) I could setup Travis or some other build system on LAN with my jukebox to execute as a test server with real hardware (for PRs and/or releases). Currently I own an airspy, hackrf and a few variations of RTL-SDRs.

Let me know what is helpful!

notpike commented 6 years ago

That would be freaking awesome! Thank you for offering your help! :D

This project is lacking good testing because I don't own a TouchTunes jukebox. I've only been able to work with the wireless remote and only had access to the jukebox a few times. This project has been mostly "Black Box" and I've only tested the transmissions with a 2nd YSO and RTL to see if the signal matched the remote.

Scanning: The most tested function but I haven't checked all 8192 possible transmission messages. There's a good possibility that there will be some miss reads and or I have not correctly recorded the signal from my reference remote.

Transmission: Tested with a 2nd YSO, RTL, and some basic functionality to a live jukebox. Have not tested all 8192 possible messages.

Brute Force TX: Tested with a 2nd YSO and RTL. The signal I captured with the RTL looked good but when I tried it with the YSO it would skip every other PIN. Not sure if it was the receiving YSO not able to keep up with the transmitted messages, the YSO is missing the message(may need to transmit same message mutable times), not enough cool down time in between each message, and or the message isn't correct.

Eletronic Warfare Mode: Tested on a closed circuit connection with a 2nd YSO and RTL due to the legality of using radio jammers. I've noticed that the time in-between jamming and transmission, the reviving radio may miss part of the message. I had to transmit the message 3 times in a row for it to receive 1. Need to research cool down time in between jamming and transmission on live jukebox.

This project is currently only being used with the CC1111 but it was ported over to the Portapack-Havoc. Furrtek actually figured out how the protocol and message structure works (Instead of using the raw 1's and 0's) and created a simple transmitter for the HackRF Portapack. When I have time I plan on expanding this project to the HackRF and USRP and use Furrtek's research to improve this project.
https://github.com/furrtek/portapack-havoc