@atc1441.bsky.social - ATC1441

16 May 2026 15:35 +0000

Just finished an new E-Paper firmware SoC port🥳 The long hated Realtek RTL8762ESL and RTL8752HJL now got a fully featured ATC_RTL_BLE_OEPL Firmware and so have full OpenEpaperLink Support Released on GitHub: https://github.com/atc1441/ATC_RTL_BLE_OEPL

29 Apr 2026 19:22 +0000

Sadly a bit to simple to pull off^^ Doom running on the GL-iNet Slate 7 Pro Travel Router https://www.youtube.com/watch?v=9gOM1M7YHbg

13 Apr 2026 16:34 +0000

Just finished Porting of Doom onto a toaster: https://www.youtube.com/watch?v=8PfrCpZKCSM

24 Feb 2026 18:03 +0000

New toy, Pudu Food delivery Robot. Doom runs fine on its internal Android RK3399 NanoPC-T4 Basically an over engineered Hoverboard with two RealSense D435 3D Cameras and Lidar Longer video on YouTube: youtu.be/cBzTto2OIDQ

09 Jan 2026 18:23 +0000

Finally there is DOOM on a Cooking Pot... Nice hacking challenge of a way over-engineered "Smart-device"! Inside we can find 4 SoC's from 4 companies: Heat control via STM32F031 Input button via PIC18F8.. Wifi via ESP32 Main FW Renesas 400Mhz ARM A9 Full video on YouTube: youtu.be/V5Jtc7wTbQ8

05 Jan 2026 22:22 +0000

Crazy that the Smart BLE Ring with a Matrix Display is real🤪 But something is strange this claimed unknown PAR2860 SoC(If that is really inside the ring) looks very much like the firmware of the 7 Segment Ring (DA14585 SoC) but is still different. maybe a cloned DA14585?

23 Dec 2025 20:51 +0000

What's better then a Smart Ring with 7 Seg Display? A Smart Ring with matrix Display! 20€ version on Aliexpress(Affilia) s.click.aliexpress.com/e/_c4aEitU1 Main BLE SoC PXI PAR2860 with 512KB Flash and 32KB RAM Still on order but excited to Hack it next! Previous Hacks in next comment

05 Dec 2025 23:18 +0000

The Simple nRF52832 Spectrum Analyzer is now working on the Allmiibo LCD and OLED Variant🥳 Fully OTA Updateable from pixljs and back Find the Source Code of the pixlAnalyzer now here: https://github.com/atc1441/pixlAnalyzer And a YouTube Explanation Video here: youtu.be/kgrsfGIeL9w

17 Nov 2025 21:13 +0000

Just finished Hacking the Pill Camera that you'd swallow for an easy endoscopy Ti CC1310 SoC Glitched and Dumped which allowed to Reverse Engineer its firmware and RF Protocol up to full Image receiving🥳 No security included but short range. 📽️🎬 here: youtu.be/qEIW5gOLzIs

03 Nov 2025 17:48 +0000

Lets take a look inside one of those Aliexpress "Smart" Car Keyfobs which you can retrofit your "Lame" Car Key with 😅 TLDR: It does not run Doom 😞 The internal RTL8762TD Hast sadly "only" 192KB of RAM Find the Teardown video here: youtu.be/oAmtu87EdYo

13 Oct 2025 17:55 +0000

Lets take a look inside one of those tiny Pill Cameras that you swallow to check your innards😳 Video on YouTube: youtu.be/pf_eOLRd6B4 https://youtu.be/pf_eOLRd6B4

09 Oct 2025 14:31 +0000

Finally there is code execution on this Shi**y Realtek RTL8752H and RTL8762ESL ARM SoC🥳 Full custom firmware goes Brrrrr These chinese vendors like Realtek Bluetrum and Jieli only care about copy protection and cribble down a perfectly fine ARM Core with their tooling🙄

20 Sep 2025 14:08 +0000

Teardown of the Tuya KWS-303WF Wifi Power Meter including cut-off Relay Inside we can find: - Tuya CBU Modul with Beken BK7231N ARM SoC 2MB Flash 256KB RAM - Relay claimed 63A - Power Meter - LCD 60x160 Pixel - External NTC Temp Sensor https://aliexpress.com/item/1005008429950501.html

20 Sep 2025 14:01 +0000

Teardown of an OBD Find My Adapter from Aliexpress https://aliexpress.com/item/1005007453952596.html As expected as simple as it could get, 3.3V Voltage Regulator with an currently unknown BLE SoC ESM412 2449XFD No connection to CAN and OBD just for power

20 Sep 2025 00:17 +0000

DOOM on a Vape via ScreenSharing and custom Firmware 😁 Source code on Github here: https://github.com/atc1441/Vape_DOOM_ScreenShare And find a full video on Youtube with more details: youtu.be/rVsvtEj9iqE

18 Sep 2025 16:52 +0000

Teardown of the 2" LCD Screen Mirror device ~20€ From Aliexpress s.click.aliexpress.com/e/_oCyfENx Surprisingly packed - Unknown DH390D HT2522A SoC likely HiChip HC15xx 4MB SPI Flash - Battery Powered - Speaker - Realtek WiFi Chip - Jieli BLE SoC Similar to youtu.be/pFBn6lMJ7q8

11 Sep 2025 14:24 +0000

Fun fact this 3€ USB-C to Headphone converter has more Flash and RAM then the first moon landing. http://de.aliexpress.com/item/1005009749926941.html The internal RISCV Bluetrum SoC AB136D got: 128 KB Flash 60 KB RAM Perfect USB Rubber Ducky, easy to reflash without opening via the USB DP Pin🤪

09 Sep 2025 19:43 +0000

Also got the OLED Amiibo Emulator😅 Sometimes for < 8€ in the combo offers! https://aliexpress.com/item/1005008755940254.html They are just too cute and a nice Hackable gadget with everything included in a small case. nRF52832 SoC SPI Flash LCD/OLED NFC Battery Arduino able https://x.com/atc1441/status/1775952887937483045

09 Sep 2025 13:56 +0000

Teardown massacre of random 2€ Aliexpress Airpod clones 😅 80% Bluetrum (AB) and 20% Jieli

08 Sep 2025 17:01 +0000

While not a full custom firmware you can find the current Bluetrum AB5682 SoC Hacking results here https://github.com/atc1441/Bluetrum_AB5682_Hacking This SoC Is used in the A9 Pro Airpod Clones and many more cheap BLE Gadgets. Quite Beefy for its price: RISCV 2MB Flash 162KB RAM 98KB ROM

02 Sep 2025 23:04 +0000

Thats Code execution on the infamous AB5682B BLE SoC used in the cheap headsets and other BLE hardware🥳 This Bluetrum Chip series is ugly 😅 Debug via 1 Wire UART and a somewhat secured proto This code now runs from RAM since we next need a loader to dump an write to Flash

29 Aug 2025 12:41 +0000

Why does this aspire PIXO Vape got a hidden BLE Chip inside? 🤔 Internals: Puya PY32F403 ARM SoC 256kb flash 64kb RAM 16MB External flash LCD with Full touch Unmentioned WS8000 BLE Module Full hackability with an USB Flash drive update not including any CRC or sign checking🙌

28 Aug 2025 21:54 +0000

One more Doom port^^ This time on an Epaper Translator🥳 Running an XR872at SoC and an 296x152 BW E-Paper display with around 400ms of refresh time Find a teardown done some time ago here: https://x.com/atc1441/status/1666128258918756353 Full Youtube video here: youtu.be/PvTJpbVPxUo

27 Aug 2025 15:22 +0000

Lets take a closer look inside an 20€ Aliexpress Alarmo clone "Smart AI Kids clock" based on the XR872ats SoC And of course port Doom to it😅 Full Teardown Youtube video: youtu.be/QutpZBTJRDY Github repo with full source code: https://github.com/atc1441/XR872_DOOM

23 Aug 2025 23:27 +0000

It had to be done 😅 DOOM on the Xiaomi Mi Band 8 Fitnessband Running super smooth on the Amoled Display and the custom firmware with toom on just 2MB of Flash Full video on Youtube: youtu.be/iqyR_LNp9vc

18 Aug 2025 19:23 +0000

DOOM on the ANKER Prime Charging station😅 The internal SWM34S MCU is just way too nice! 8MB RAM + 16MB Flash directly mapped to memory goes brrrr Video on Youtube: youtu.be/MdOU8SqCqeY

16 Aug 2025 15:28 +0000

Quick teardown video of an Battery powered 4" LCD Screen Mirror device around 25€ from Aliexpress TLDR: Main SoC is an HCSEMI C3100 which is very similar to the one used in the 20€ Handheld Console SF2000 Video Here: youtu.be/pFBn6lMJ7q8

14 Aug 2025 13:48 +0000

That's a success 🥳 Glitched and fully Dumped MSP430F417 in a non destructive way Doing a Read data CMD and glitching the check if the password was entered we can dump 240bytes at once By dumping the pass(vector) area we can read the full flash after one glitch https://bsky.app/profile/atc1441.bsky.social/post/3luqkr5ziyc2g [contains quote post or other embedded content]

12 Aug 2025 09:23 +0000

DOOM on a Toothbrush? Sure! Info's to this, The Toothbrush contains an ESP32-C3 with 4MB Flash. With the codebase from Spritetm https://github.com/Spritetm/esp32c3-doom-bauble and wad https://github.com/fragglet/miniwad I was able to get the complete size down to the 4MB🥳 (Reupload from you know where for the sake of history)