How to hack a theremin sensor - Revision history

Hd-onions: Hd-onions moved page DIY steps theremin sensor hacking to How to hack a theremin sensor

2015-12-16T10:41:26Z

Hd-onions moved page DIY steps theremin sensor hacking to How to hack a theremin sensor

← Older revision	Revision as of 12:41, 16 December 2015
(No difference)

Hd-onions at 08:56, 16 December 2015

2015-12-16T08:56:37Z

← Older revision		Revision as of 10:56, 16 December 2015
Line 1:		Line 1:
	==How to hack a sensor in 5 steps==		'''How to hack a sensor in 5 steps by [[James Bryan Graves]]'''
	~~'''~~by [[James Bryan Graves]]'''

	Due to lack of documentation for the theremin sensor output the following steps were employed to hack the protocol. Although details are specific to the theremin sensor, similar methods could be used to hack other protocols.		Due to lack of documentation for the theremin sensor output the following steps were employed to hack the protocol. Although details are specific to the theremin sensor, similar methods could be used to hack other protocols.

Hd-onions: Hd-onions moved page Hacking a theremin sensor to DIY steps theremin sensor hacking

2015-12-16T08:55:27Z

Hd-onions moved page Hacking a theremin sensor to DIY steps theremin sensor hacking

← Older revision	Revision as of 10:55, 16 December 2015
(No difference)

JBG at 10:20, 23 November 2015

2015-11-23T10:20:09Z

← Older revision		Revision as of 12:20, 23 November 2015
Line 1:		Line 1:
	==How to hack a sensor in 5 steps==		==How to hack a sensor in 5 steps==
	~~===~~by [[James Bryan Graves]]~~===~~		'''by [[James Bryan Graves]]'''

	Due to lack of documentation for the theremin sensor output the following steps were employed to hack the protocol. Although details are specific to the theremin sensor, similar methods could be used to hack other protocols.		Due to lack of documentation for the theremin sensor output the following steps were employed to hack the protocol. Although details are specific to the theremin sensor, similar methods could be used to hack other protocols.

Hd-onions: /* How to hack a sensor in 5 steps */

2015-11-22T14:55:10Z

How to hack a sensor in 5 steps

← Older revision		Revision as of 16:55, 22 November 2015
Line 1:		Line 1:
	== How to hack a sensor in 5 steps ==		==How to hack a sensor in 5 steps==
	~~'''~~by [[James Bryan Graves]]~~'''~~		===by [[James Bryan Graves]]===

	Due to lack of documentation for the theremin sensor output the following steps were employed to hack the protocol. Although details are specific to the theremin sensor, similar methods could be used to hack other protocols.		Due to lack of documentation for the theremin sensor output the following steps were employed to hack the protocol. Although details are specific to the theremin sensor, similar methods could be used to hack other protocols.

Hd-onions: Hd-onions moved page DIY hacking a theremin sensor to Hacking a theremin sensor

2015-11-22T14:54:33Z

Hd-onions moved page DIY hacking a theremin sensor to Hacking a theremin sensor

← Older revision	Revision as of 16:54, 22 November 2015
(No difference)

Hd-onions at 14:54, 22 November 2015

2015-11-22T14:54:24Z

← Older revision		Revision as of 16:54, 22 November 2015
Line 2:		Line 2:
	'''by [[James Bryan Graves]]'''		'''by [[James Bryan Graves]]'''

	Due to lack of documentation for the theremin sensor output the following steps were employed to hack the protocol. Although details are specific to the theremin sensor, similar methods could be used to hack other protocols.		Due to lack of documentation for the theremin sensor output the following steps were employed to hack the protocol. Although details are specific to the theremin sensor, similar methods could be used to hack other protocols.

	'''Step 1'''		'''Step 1'''

Hd-onions at 14:46, 22 November 2015

2015-11-22T14:46:52Z

← Older revision		Revision as of 16:46, 22 November 2015
Line 1:		Line 1:
	== How to hack a sensor ==		== How to hack a sensor in 5 steps ==
	'''by [[James Bryan Graves]]'''		'''by [[James Bryan Graves]]'''

	Due to lack of documentation for the theremin sensor output the following steps were employed to hack the protocol. Although details are specific to the theremin sensor, similar methods could be used to hack other protocols.		Due to lack of documentation for the theremin sensor output the following steps were employed to hack the protocol. Although details are specific to the theremin sensor, similar methods could be used to hack other protocols.

	~~===~~ Step 1 ~~===~~		'''Step 1'''

	The sensor was attached to a Arduino UNO, and the sensorReader5 sketch supplied by [[Andrey Smirnov]] and available on [https://github.com/hackersanddesigners/HDSA2015/tree/master/Theremin/scatch328v1%2B%2Bv105/sensorReader5 Github] was uploaded to the Arduino.		The sensor was attached to a Arduino UNO, and the sensorReader5 sketch supplied by [[Andrey Smirnov]] and available on [https://github.com/hackersanddesigners/HDSA2015/tree/master/Theremin/scatch328v1%2B%2Bv105/sensorReader5 Github] was uploaded to the Arduino.

	~~===~~ Step 2 ~~===~~		'''Step 2'''

	Note the baud rate in the script was set to 57600. A script was created, in this case with [https://processing.org/ Processing] to read the a computer's serial port at the same baud rate. The next step was to print each incoming byte.		Note the baud rate in the script was set to 57600. A script was created, in this case with [https://processing.org/ Processing] to read the a computer's serial port at the same baud rate. The next step was to print each incoming byte.

	~~===~~ Step 3 ~~===~~		'''Step 3'''

	Look for repetitions. Here it was noticed on byte was repeated, 63, every 8 bytes. Therefore the assumption can be made the packet size is 8 bytes. So, every time a 63 is seen it can be assumed it is a new packet from the sensor.		Look for repetitions. Here it was noticed on byte was repeated, 63, every 8 bytes. Therefore the assumption can be made the packet size is 8 bytes. So, every time a 63 is seen it can be assumed it is a new packet from the sensor.

	~~===~~ Step 4 ~~===~~		'''Step 4'''

	What does the sensor do? Here, a theremin sensor, it is telling us about distance (capacitance) between a conductive body (you?) and the sensor. So, by moving closer and further away from the sensor we could look for highly dynamic bytes in the packets. In this case it turned out to be byte 5 and 7, indexes 4 and 6 in 0 based arrays. Since there are two dynamic values, we can assume they should be combined (16 bit integers), there are generally 2 ways to do this big and little endian. So we trid both. For the theremin sensor it turned out to be little endian.		What does the sensor do? Here, a theremin sensor, it is telling us about distance (capacitance) between a conductive body (you?) and the sensor. So, by moving closer and further away from the sensor we could look for highly dynamic bytes in the packets. In this case it turned out to be byte 5 and 7, indexes 4 and 6 in 0 based arrays. Since there are two dynamic values, we can assume they should be combined (16 bit integers), there are generally 2 ways to do this big and little endian. So we trid both. For the theremin sensor it turned out to be little endian.

	~~===~~ Step 5 ~~===~~		'''Step 5'''

	Do something "useful". Once we had the changing values, we could create an algorithm to utilize the values. In this Processing script we simply grow/shrink a text size.		Do something "useful". Once we had the changing values, we could create an algorithm to utilize the values. In this Processing script we simply grow/shrink a text size.

JBG: JBG moved page HACK Theremin Sensor to DIY hacking a theremin sensor

2015-11-22T14:41:21Z

JBG moved page HACK Theremin Sensor to DIY hacking a theremin sensor

← Older revision	Revision as of 16:41, 22 November 2015
(No difference)

JBG at 14:40, 22 November 2015

2015-11-22T14:40:59Z

← Older revision		Revision as of 16:40, 22 November 2015
Line 6:		Line 6:
	=== Step 1 ===		=== Step 1 ===

	The sensor was attached to Arduino UNO, and the sensorReader5 sketch supplied by [[Andrey Smirnov]] and available on [https://github.com/hackersanddesigners/HDSA2015/tree/master/Theremin/scatch328v1%2B%2Bv105/sensorReader5 Github] was uploaded to the Arduino.		The sensor was attached to a Arduino UNO, and the sensorReader5 sketch supplied by [[Andrey Smirnov]] and available on [https://github.com/hackersanddesigners/HDSA2015/tree/master/Theremin/scatch328v1%2B%2Bv105/sensorReader5 Github] was uploaded to the Arduino.

	=== Step 2 ===		=== Step 2 ===
Line 14:		Line 14:
	=== Step 3 ===		=== Step 3 ===

	Look for repetitions. Here it was noticed on byte was repeated, 63, every 8 bytes. Therefore the assumption can be made the packet size is 8 bytes. So, ~~everytime~~ a 63 is seen it can be assumed it is a new packet from the sensor.		Look for repetitions. Here it was noticed on byte was repeated, 63, every 8 bytes. Therefore the assumption can be made the packet size is 8 bytes. So, every time a 63 is seen it can be assumed it is a new packet from the sensor.

	=== Step 4 ===		=== Step 4 ===

	What does the sensor do? Here, a theremin sensor, it is telling us about distance (capacitance) between a conductive body and the sensor. So, by moving closer and further away from the sensor we could look for highly dynamic ~~values~~ in the packets. I this case it turned out to be byte 5 and 7, indexes 4 and 6 in 0 based arrays. Since there are two dynamic values, we can assume they should be combined, there are generally 2 ways to do this ~~BIG~~ and ~~Little Endian~~. So ~~try~~ both. ~~Here~~ it turned out to be ~~Little Endian~~.		What does the sensor do? Here, a theremin sensor, it is telling us about distance (capacitance) between a conductive body (you?) and the sensor. So, by moving closer and further away from the sensor we could look for highly dynamic bytes in the packets. In this case it turned out to be byte 5 and 7, indexes 4 and 6 in 0 based arrays. Since there are two dynamic values, we can assume they should be combined (16 bit integers), there are generally 2 ways to do this big and little endian. So we trid both. For the theremin sensor it turned out to be little endian.

	=== Step 5 ===		=== Step 5 ===

	Do something "useful". Once we ~~have~~ the changing values, we could create an algorithm to utilize the values. In this Processing script we simply grow/shrink a text size.		Do something "useful". Once we had the changing values, we could create an algorithm to utilize the values. In this Processing script we simply grow/shrink a text size.