UHF | RFID for flipper

[maiden barn]

Not sure about standalone forked repos, but if you check the CFW bundled apps repos you'll find folders with compile-able code + minor changes

[vernal cape]

I'd kinda freak out if it happened to me

[maiden barn]

Definitely did a double take; the ad-serving algo was working overtime

[limber pelican]

That's oddly specific lol

[candid scarab]

pinged. hello

[maiden barn]

bonjour

[harsh igloo]

hola

[lime hull]

1

[vernal cape]

0

[next kelp]

Hello from the land of Wizard of Oz 🤣

I will say that one screw hole being super near the traces makes me weirded out a little lol, hopefully I don't ever fuck with the screws enough to wear through it and the traces and short it 😂

May have to locate myself some nylon washers or something

[vernal cape]

yep

thick nylon washers are nice to have for exactly those kinds of builds^^

[maiden barn]

Where in Seader is the multiple attempts? I can't seem to find it; was planning on emulating your approach for a PR to the UHF app

[harsh igloo]

let me find it

[teal laurel]

Just realized I never said a single word here, but got mine in the mail today looks great!
Time to start learning, I have no clue about uhf and sam yet lol
Still waiting on the yrm and sam chip themselves

[harsh igloo]

https://github.com/bettse/seader/blob/main/ccid.c#L13
search retries in that file, it's all there. The value is set to 3 and decremented; anywhere you see it being set to 3 is a reset.
IIRC the overall path starts with seader_ccid_check_for_sam which sends the initial message checking for the adapter and SAM.
Obviously if the add-on is missing there is no decrementation of retries, which is where the timeout provided by the UI component (https://github.com/bettse/seader/blob/main/scenes/seader_scene_start.c#L30) kicks you over to the "Y U NO NARD?" screen

[vernal cape]

start with UHF first, once you get the basics it's pretty easy for a while 🙂
SAM can come after, you probably won't have a use for it anytime soon 😉
(plus you actually need to have keys on the SAM, either from a vendor or by putting them in yourself, and if you can put them in yourself there's little use for the SAM anymore, ya got the keys!)

[harsh igloo]

plus you actually need to have keys on the SAM, either from a vendor or by putting them in yourself, and if you can put them in yourself there's little use for the SAM anymore, ya got the keys!)
This might be technically true for an arbitrary SAM, but almost everyone here says "SAM" and means "HID SAM", which already has the keys on it. And Seader only works with HID SAM.

@teal laurel did I give you an iClass SE or Seos? if so, if you get a HID SAM, Seader can read them

[vernal cape]

ah, didn't know that about seader ^^

[maiden barn]

With our powers combined… (no board, YRM only)

[teal laurel]

[harsh igloo]

does the app use the main uart that normally has logs? seader uses the 2nd uart (AKA LPUART) so I can watch logs for poor man's debugging

[teal laurel]

ill double check rn, i still have the card pile on my desk 😉

do they have any special marking?

[vernal cape]

the UHF app? normal UART, pins 13/14

:p

[harsh igloo]

Glad we got that clarified. There are some people who have bought rando SAM and didn't realized seader required that specific one 😦

[harsh igloo]

bottom back will say "HID seos" or "HID iClass .............. -SE"

[vernal cape]

is it just code limitations? as in support for other manufacturer SAMs hasn't been implemented/is impossible to do?

[teal laurel]

yep just found it

i see
1 hid iclass chonky boi
1 hid iclass dp
2 hid iclass dp se
1 hid desfire px
2 ioprox xsf
1 hid seos ip
3 cards with no markings

[harsh igloo]

i suspect one of the iclass dp will say "-SE" on the far end

[teal laurel]

ah yes

2 of them

1 dp and 2 dp se

ill order the HID SAM rn then, hotdog linked me this one https://www.ebay.com/itm/204533453585 is it ok?

[harsh igloo]

it is all about code, nothing about hardware, but you gotta keep in mind that a SAM is a mini computer and it's talking to it in an API that the computer has some control over. In the case of a HID SAM, HID defined that protocol and if you look at sam_api in seader, it is big.
Seader is incredibly tailored for HID credentials (UI, credential format, etc), so there wouldn't be any real value in adding support for some other SAM.
That said, someone could write their own app using the NARD or Flippermeister for some other SAM for whatever it's purpose was. I don't have any ideas though of any mini-SIM size SAM used by any other system that we'd find interesting

or you could literally put a phone SIM into it and talk to it 😁

[vernal cape]

there's some made by NXP for Mifare Desfire I've seen on their site, but I don't think it has any keys on it

[harsh igloo]

exactly, that's like blank hardware someone would customize for their product. lIke the Mifare AV3 that some people mistakenly bought (sold be vendors who also sold the HID SAM)

[vernal cape]

tried it while I was waiting for my SAM, the app did see it! I'd love to do that one day

[harsh igloo]

you know how we say that you should never use your flipper for U2F or anything secure because it can't store secrets securely? well, a SAM would change that

[vernal cape]

ooooh, interesting!

[harsh igloo]

you could write an app that would use an "empty" SAM and store secrets on it. As long as you keep the SAM safe (remove when not using), the data is safe. SAMs can even be programmed to generate things liek public/private keys on the chip, and then your flipper could be used to cryptographically sign stuff.

[vernal cape]

if I ever get that good at programming, I'll definetly do that, it's awesome

and it'll sell like hot cakes I'm sure! and I won't need a super special sim slot that time!

[harsh igloo]

imagine selling it as blockchain wallet on flipper?

[vernal cape]

exactly!

even just a proper 2FA add-on for flipper

[limber pelican]

Get a yubikey and attach the keyring to the flipper?

[harsh igloo]

dreamkiller 😉

[vernal cape]

for real

xD

[teal laurel]

was just reading up and saw this, yeah i remember hummusec had a fork updated for a while but it recently vanished, unsure why. i dont think theres any more updated fork around, except as you say the ones on all-the-plugins and our unnamed-Apps repo. i dont have a magspoof board yet (another thing i need to look into after uhf and sam) and didnt dig deep enough to know what the improvements hummusec had were in practice, but might be something worth porting back into your repo? on our unnamed-Apps repo we preserve the commit history when importing changes with subtrees, if maintaining authorship of the changes is a concern

[maiden barn]

Would be very happy to pull those changes back to my repo; happy to add you as having some control over the repo too

Do you know what the “read” changes (presumably hummusec’s) are meant to interface with?

I had done some loose exploring of making a USB-host board so one could plug in any normal mag reader, but that petered out with the internal TX stagnation + work getting extremely busy

[teal laurel]

all i heard was that it was meant to hook up to something else, not sure if a pc or another module, for read to work

[maiden barn]

Hm gotcha. I could keep that as debug-mode-only, same with the internal TX modes

I’ll pull this discussion to the side to keep from sidetracking this group, but looks like hummusec’s repo 404s / is private — could use your GitHub-guru-guidance on a proper way to integrate commit history from the missing repo / make sure any of their changes are properly credited

[teal laurel]

yep ill ping you in our unnamed server, but as i mentioned we keep commit histories when merging from remote repositories, so looks like the whole branch is preserved

_ _

@harsh igloo that link i mentioned for HID SAM doesnt ship to me, searching for Y7C07A i found just 2 links on the first google results page that seem to have it in stock:
https://www.serviceparts.uk/products/y7c07-67001
https://www.cdw.com/product/hp-printer-configuration-sim-card/4854794
theres a lot of mentions of HP printers while looking for it... am i on the right track? are there any other model numbers i could look for?

[harsh igloo]

theres a lot of mentions of HP printers while looking for it
yeah, these are sold for HP printers so they can read iclass se/seos (like so an office worker can auth and the big printer will start printing queued documents)

[teal laurel]

ahhh

[teal laurel]

i just realized that the cdw link i found on google is the same one you have on your repo, which also links rfideas-shop for EU, however that link seems to be dead? it only shows the featured products and so on, not a product in particular. searching for the model code gave no results on that website, searching for "seos" i found
https://www.rfideas-shop.com/en/kt-4ffsim-av2-nano-sam-card-mifare-secure-memory.html
https://www.rfideas-shop.com/en/kt-sim-av2-sim-card-mifare-and-ev1-secure-memory-f.html
which seem to have a similar pricepoint and formfactor to the pictures ive seen here, but not sure if its what im looking for

[limber pelican]

I think the AV2 ones are different

I don't believe anyone is selling them directly anymore

HID stopped that

[harsh igloo]

when the link 404s it usually means they're out of stock or stopped selling

[harsh igloo]

I think CDW is

[teal laurel]

its weird that the page shows no error, its simply missing the acual product itself xD but yeah got it

so then my options are seeing if cdw ships to uk, or trying this on serviceparts.uk and hoping its not a scam

[next kelp]

@vernal cape outkof curiosity are the tags you included with the board TID rewritable or no?
I'm assuming not

[vernal cape]

Nope, just bog standard Alien H9 tags.

Would have been a steal for only a buck if they were rewritable 😁

The tags I put in when people ordered them all have what they are marked on them I think?

Maybe?

[next kelp]

shit I woke you at 4am

[vernal cape]

Nah, still up ^^

[upbeat kettle]

for what it's worth I stumbled upon a video a couple of days ago of a guy demoing the app with the YRH module (he didn't have a board the loser) where turning on 5V was one of the steps so I played with that a little yesterday but I didn't find it to improve the module detection (likely due to the missing sleep I suppose) and the reading, if anythihng, was a bit more flaky. Can't say my testing was particularly thourough though, so take it with a grain of salt

[harsh igloo]

link?

the reading, if anythihng, was a bit more flaky.
separate problem

[next kelp]

modern problems require modern solutions
I didn't have any plastic M2 washers, so I just 3d printed em
Next step is to make a nice cover

[harsh igloo]

was I supposed to use washers?

[next kelp]

Well, there's exactly one hole that is very close to the traces of the board

So in effort not to just wear through the traces long term with me fucking around with the module, I added some plastic washers lol

Also seller just got back to me, don't know if anyone has the data sheet yet for the YRM1001, havent seen it float around anywhere

[harsh igloo]

if only someone could pin that

[next kelp]

good idea

But yeah, this particular spot was what made me decide to break out plastic washers lol

[upbeat kettle]

https://www.youtube.com/watch?v=O-iruKFoSOc at around 7:03. Before that he goes over the app repo and the schematic, then I suppose he explains some stuff but I didn't listen cause it's in Spanish xD

[upbeat kettle]

right! You just reminded me that I also have a case to print for the board

[harsh igloo]

so for him turning on the 5v made the detection work the first time (at least for a single sample size of that video), but when you did it, it didn't improve detection?

[upbeat kettle]

yeah, although the first 2 times I plugged in the board it was recognized without issues without switching to 5V. Then I had a few crashes while playing with the app and now it pretty much always shows the "No UHF Module found" message when opening the app regardless of the 5V setting but if I click on "Skip" it works fine

[harsh igloo]

keep track of if you have the flipper plugged into USB: that automatically enabled 5v

[upbeat kettle]

yeah, good point but I'm pretty sure I was never plugged in when playing with the board 🤔

btw @vernal cape did you end up uploading the model files for the case somewhere? Are they for sale perhaps

[vernal cape]

I.... probably not actually, I should do that huh!

wait, I did!

https://github.com/Didgitalpunk/UHF-RFID_SAM-interface_Board/tree/main/Case

there's both .3mf and .sldprt if you want to print or open back in solidworks 🙂

[upbeat kettle]

aha! Nice

[vernal cape]

tbh? I have no clue what those files are anymore

[next kelp]

ah yes, the enough time has passed and I sure hope past me knew what they were making moment 🤣

[limber pelican]

Ooh finally got a tracking update, it landed in Sydney! Now just another week because auspost are useless

[vernal cape]

Just saw that! 🙌

[vernal cape]

XDDD pretty much!

But also I worked a whole lot more on the v2 case since I made those two files, so I don't quite remember what I uploaded to GitHub back then ^^;

[stark bay]

Mine is apparently off on its own adventure

An error occurred in the routing of your shipment. We are making every effort to ensure that he resumes his journey and ask you to accept our apologies.

[vernal cape]

You know, Frodo, journeys, package deliveries.... There's some lesson in there somewhere

[true shadow]

For anyone who wants a SAM still I bought mine from this seller on ebay: https://www.ebay.com/itm/204533453585 came in official sealed HP packaging.. but i haven't tested it yet

[limber pelican]

Yeah eBay is the way to go

[true shadow]

i found it on some other "questionable" places online for a little cheaper but most places had the whole "out of stock, but we will get it for you if you just order it" note on them.

[vernal cape]

I had seen also something about extracting sams out of readers? I'm guessing there's only some very specific readers you can do that with?

[harsh igloo]

#1136167977708957737 message

[vernal cape]

so any reader that can interact with iClassSE?

do you know if they're soldered on, or still a SIM inside the potting?

[willow basin]

thanksss

[lime hull]

That might have been a comment by me. Yes, it's doable. They are soldered chips like the one on the adapter board.

(The blue pcb).

[vernal cape]

Interesting...
there's some cheap HID R10 readers on our french craigslist, 10 to 30 euros per... Could be worth it?

[lime hull]

Do you want to make adapter pcbs?

Do you want to invest in desoldering equipment?

[vernal cape]

I also saw some omnikey readers, would that be interesting?

[vernal cape]

Kinda ^^

[lime hull]

Those are easier to extract, but you can't use reader manager

[vernal cape]

Already have 😄

[lime hull]

And HID doesn't give that firmware out anymore

[vernal cape]

Reader manager?

Ah, ok

[lime hull]

https://www.hidglobal.com/products/reader-manager

Huh. I wonder if that was intentional on HIDs part to discourage SAM salvaging.

So basically, HID is anti legacy anymore.

When you reader manager a reader, it turns off config cards and tries to get you to turn off legacy.

To turn it on once it's off, you have to claim the reader by adding elite or mobile keys

If you scavenge readers, they will have unknown fw and unknown configs

It's a problem I deal with in my reader recycling.

[vernal cape]

Is there a way to test / upgrade /reset them?

[lime hull]

I'll essentially do a bad firmware update (specially corrupted) that puts reader manager into a recovery mode

It forces reader manager to install new firmware on a bricked sam. Have to be very careful doing it right or I perma brick.

There are basically 3 things that destroy a reader

[lime hull]

I can, but it takes special tooling and software, and even then isn't 100 percent effective. The alternative is a landfill, so it's worth it to me.

I have a bunch of phones set up to run reader manager, and some firmware cards that I remove at the wrong time.

Have to set a timer

[vernal cape]

XD

[lime hull]

-0-0000 sku readers are usually fine

And do all the things

[limber pelican]

Ooh only hours away apparently!

[vernal cape]

Yay!

[teal laurel]

Yrm has arrived

seeing a few issues with the app, first it crashes on app open if the module wasnt already enabled with 5v manually or with usb plugged in. second it seems to crash if the uhf tag is moved even slightly by accident. but plugging into usb and leaving the tag in place, got a successful read!

it really likes to malloc(0) apparently lol

ill try to dig into the app and see what i can come up with when i have some time

[vernal cape]

yeah, the app is still a wip, and the newer realease is very unstable.

if you want a more stable version, you'll have to go back all the way to ofw.... 94.1 ? I think?
still a lot of crashes but that time it's firmware related and not fap related for the most part

[limber pelican]

module get 😄

[limber pelican]

just checking @vernal cape the colours on the cable are meaningless right? (black is VCC) looks like the colour order as this pic

I've got one of the larger modules so just wanting to make sure the pinouts didn't get swapped between them lol

[teal laurel]

I went off of how the connector was shaped, getting it in like you see in that pic was tedious, getting it in the other way was impossible lol and it seems to work for me, but yeah better to check if colors are different for you

[limber pelican]

do you have the pinout of your module handy?

(mine is printed on the pcb)

actually nevermind, just realised I could trivially check by buzzing out the gnd and 5v lines on the connector and the flipper header

it matches, 5v is indeed the black wire on those cables 😄

[vernal cape]

yes! I realized/rememberd too late in production that the wire colors for the cables I sent out are all a load of BS

For V2 that will be corrected, the sample I sent out to [secret] has the correct colors, since I did that a few days after doing my whole batch for V1 shipping.

but just in case, let me pull up the pinout for y'all

seen from the top

like you see on the board.

it should be the same pinout on the modules (don't look at that usb adapter, the cable they send you is crossed)

[limber pelican]

yeah sweet

[limber pelican]

is https://github.com/frux-c/uhf_rfidthe most up to date uhf app for the flipper these days?

[vernal cape]

yep

[limber pelican]

lol bus fault or mpu fault every time I try to do a read, but it can talk to the module at least so hardware is working 😄

[teal laurel]

That's my experience aswell

I've found positioning matters

Try putting the tag in a spot before clicking read and keeping it there, if it crashes move it a bit and try again

Still I want to look into it when I have some time to get it fixed, hopefully tomorrow

[limber pelican]

my slightly larger module fits 😄

need some smaller screws (or maybe I'll just use a dremel)

used some nylon washers to lift it off the board a little since the connector is underneath and a little bit of foam (held to the flipper module with some double sided tape) I had laying around to support the rest of the board

M2 screw for the smaller hole and M3 for the larger

[vernal cape]

nice!

[stone hound]

I've experienced the same, reported that to the author, and they said it's unlikely related to position

[vernal cape]

yes and no. positioning is realted to tag pickup speed/reading speed, and reading the tag is related to the crashes.

[teal laurel]

I gotta say the read distance is kinda impressive for such a small module

Got it to pick up and successfully read at like 30-40cm distance with 20dbm

[vernal cape]

yep, it's not too bad!

[limber pelican]

The one I've got I read a tag at Defcon last year from about a meter away

[limber pelican]

https://www.jyl-world.com/wp-content/uploads/2023/06/JYL-Tech-Passive-UHF-LED-label-Flashing-Guidance.en_.pdf LED flashing UHF tags 😄

[vernal cape]

Yep, I got some as well, but I don't think the yrm1001 is powerful enough to activate it

Mine are Kiloway chips

[vernal cape]

Holy crap! They're the ones that made the inlays I had as an option!

[vapid basin]

Props for taking the time to figure it out and do it right 🙂 tons of people take shortcuts and it usually leads to bad experiences. That said I received mine the other day how to pick up a UHF module for it lol

[vernal cape]

Aww thanks! The link for the modules is pinned, just in case, but any yrm module should work (or M5 stack and clones, too)

[eager moss]

just finished my finals. time to pick up a little on this project

[next kelp]

but did you get passing grades

[eager moss]

i did😎

[vernal cape]

Fuck yeah, that rocks! Congrats!

[teal laurel]

I think that's the hid Sam

[teal laurel]

indeed it was!

@harsh igloo managed to successfully read the iclass SE cards and i think the seos IP one

though im struggling a bit. works fine on ofw, but crashes when i try to read on the unnamed firmware. the new TLSF allocator (not yet merged on ofw) complains a lot about memory mismanagement and causes busfaults. i suspect theres some use after free()s, or some double free()s. ive fixed 3 or 4 apps that had this issue thus far, seader is up next )

[limber pelican]

Seader? @harsh igloo

[teal laurel]

right maybe i should move to #1185787657268240394 ? this is for uhf afterall 😄

[vernal cape]

^^

[eager moss]

so i was debugging today, and it seems like i was sending the commands way too fast. I'm using my esp32 to see the incoming cmds

it would start cutting off

[teal laurel]

saw this shared on the flipper reddit, seems to require a m6e nano uhf rfid reader, as for emulate/write im not entirely sure, screenshots mention "internal" antenna, idk if internal as in somehow using flipper zero hardware, or internal to the m6e nano.
https://github.com/haffnerriley/Simultaneous-UHF-RFID-FlipperZero
they also mentioned they want to add support for YRM1001
https://www.reddit.com/r/flipperzero/comments/1d278i1/simultaneous_uhf_rfid_app/?rdt=38149

it mentions reading up to 150 tags per second

also it mentions requiring a rpi zero for the "ThingMagic mercury" api, which im not entirely sure if its necessary for regular usage

[eager moss]

i can contact him on dev for yrm modules, i need more brains on this😅. but i’ve not heard of the module hes using before

and this repo is new

2hrs ago

[teal laurel]

yep, shared as soon as i saw it

[stark bay]

Sweet, I have that one too

[stark bay]

This is odd

[next kelp]

Heh.
I guess if you want to run the Flipper, or a fleet of flippers as rapid UHF writers 😅

Although the github insinuates they're using it as an abstraction layer to the UHF hardware

[vernal cape]

Booooooooooooo!

Also just looking a bit at the price of those modules, it's almost at the point where making a board with these would turn the flipper into the add-on itself.

[vernal cape]

And good thing it's the nano version

It's at least using an Impinj chip inside, the M7e hecto uses an E310. So at least you know there's good documentation.

[modest canopy]

sup guys!
https://github.com/frux-c/uhf_rfid/commit/0e03ab5d41be874c5be1a763f430feac46309fed

really need that device, how and where can i buy this one?

[vernal cape]

how? with money of course?

https://tenor.com/bo3K0.gif

where? from my store! but for now I'm out of stock and parts are not available to buy for another few months (mid/end august iirc), so you'll have to wait a bit 🙂

[modest canopy]

Good! Where can i check your store?

[next kelp]

by clicking their profile picture and reading

[shy wadi]

Internal to the sparkfun simultaneous reader. Using an external antenna has different power requirements so I thought I would add a feature in the future to protect against overpowering anything.

Hey everyone, just joined and thought I would share the app I just made. I didn’t realize @eager moss ‘s app was a thing until I had gotten to the end of making mine. However, it works with the m6e nano module. I had trouble getting the flipper and m6e nano to communicate directly so that’s why I used the pi zero to intermediate. I plan on figuring out how to do this without the pi in the future and also wanted to add more support for other modules. Feel free to check it out and also provide any feedback, ideas, or concerns: https://github.com/haffnerriley/Simultaneous-UHF-RFID-FlipperZero

Also I would be interested in collaborating with anyone interested!

[eager moss]

Hi @shy wadi was planning on contacting you if you look earlier in the message. @teal laurel had mentioned you

[shy wadi]

Yea I just saw. Dm me and let’s talk!

[eager moss]

I’ll contact you later in the day. I work fulltime atm😅

[stark bay]

I had trouble getting the flipper and m6e nano to communicate directly
can you elaborate on this? I have an m6e I haven't played with yet.

[shy wadi]

Sounds good!

[shy wadi]

So the m6e requires the thing magic api which has a c api but I was overwhelmed by it and couldn’t quite figure out how to get it to compile correctly for the flipper zero 😅

[harsh igloo]

does it ultimately speak to the device over uart?

I was going to look at "ThingMagic Baremetal Interfacing Guide" on https://www.jadaktech.com/product/thingmagic-mercury-api/, but it's locked behind giving personal details

[next kelp]

Def seems to be just UART comms

the mercuryapi download also seems to have a stm32 based code example in the baremetal directory as well.

[lime hull]

Are you the guy from reddit?

[next kelp]

indeed they are

[shy wadi]

Yes I am from Reddit

And yea it does just use uart. So there is definitely a way to do it. Could definitely use all the help I can get

[lone turtle]

see you all in #1063477855482286154 momentarily

[lone turtle]

ah yeah it looks snapped in other pics too.

[lone turtle]

didn't turn out too bad

[teal laurel]

Noproto got a flippermeister? 👀

[lone turtle]

I've had it for a while but didn't want to risk losing it while I traveled in europe. I still need to find a SAM on eBay

truthfully I wanted a portable handheld QR code to the seader repository. great for rapidly pulling up the seader application source on a moments notice

[vernal cape]

That's not a bad idea actually... I could make a little pendant thing with art on one side and all three repos' QR codes on the other...

Now if only I could art.

[harsh igloo]

god I know that feeling...

[vernal cape]

We can sob together in our non-artisticness

[limber pelican]

If you're that bored I don't suppose you know a thing or two about PLLs? 😂

[maiden barn]

I’ve been running into PLL issues as well of late — can’t get the “pll/osc stabilized” IRQ to assert on the chip I’m trying to use for a F0 usb host

Pain

[limber pelican]

PLL internal to the USB host chip?

[maiden barn]

Indeed

[queen pelican]

Damn. I guess I'm 2 months late from ordering the custom board from Digits.

Anyone had success with copying their transcore gate tags?

[vernal cape]

nah, just three~ish months early for the V2!

[eager moss]

what could cause furi check failed?

here's the callstack?

this only happens when i run the app without power plugged in

this is the last part in my code base that raises the assert faliure

i think i figure it out. i had to enable 5v before initializing my app

[teal laurel]

It tells you the line number

778

You have the same callback for usart and lpuart

[eager moss]

oh i should set the other callback to null

[teal laurel]

Also init by app is weird, I suggest you do it all in there, what you're doing is reminiscent from before the serial refactor, dangerous to do like that now. And you're missing a furi check in the uart handle, the acquire could return null so you need to check it

[teal laurel]

No, you should find out what logic issue lead to them being the same

Don't overwrite callbacks if you don't need to, maybe the system is using lpuart

How we have it in an unnamed CFW

[eager moss]

@teal laurel here's my observation. the app with the original code didn't crash while plugged in to power

the app crashes while not plugged into power

[teal laurel]

do you use expansion_disable() at app start?

[eager moss]

when i debug it. it lands at that furi_check, as you mentioned because the callbacks are the same.

[eager moss]

i do not

[teal laurel]

why it thinks the callbacks are the same im not sure, but from

the app with the original code didn't crash while plugged in to power
the app crashes while not plugged into power
it soudns to me like if its already plugged, the module already started, so it doesnt output any data on serial when openin the app. instead, if its powered on by the app, it maybe outputs some data on serial. if you dont disable expansion, it will try to acquire serial as soon as any activity is on it, so your serial acquire is probably failing because the expansion service is fighting for it too. disable expansion, then acquire. i have a sneaky suspicion that this will help out, but not sure

[eager moss]

i see the docs now

let me try that out

[teal laurel]

yeah when these changes are introduced upstream us CFW devs usually go through all apps we include and quickly patch them for the new changes. its often too much to make PRs to the original repos, but authors are always welcome to check and backport the changes. ive been making an effort more recently to PR back most of my changes, but this serial stuff was months ago

[eager moss]

yea, i didn't have time to catch up on any changes.

i'm peeking at them as i go

[teal laurel]

as far as i recall, these serial init / expansion stuff are the only differences that CFW versions of your app have currently compared to your repo

but i can check in in a few minutes

[eager moss]

fosho. thanks again

so far i added disabling the expansion as well as furi check on the handle

all is good for now

if anyone wants to test the changes out it. it will be in this commit
https://github.com/frux-c/uhf_rfid/commit/e8633bd4e541b4badf16605c4895e31c6e60dfba

once i address the instability issues i can then work on the ui updates.

so far looking so good

[vernal cape]

👀

"no longer produced"

https://tenor.com/bv7lg.gif

[stuck nymph]

Oh shit

Well that’s not good…

Was that the part you were waiting for lol? Or what was the one out of stock

[vernal cape]

yeah. imma do a revision of this board after that to ensure better compatibility with other slots.

[vernal cape]

both!

I was waiting for it because it was out of stock, stated for back in stock in august

[stuck nymph]

Yeah but it’s still a pain in the ass

[vernal cape]

it is not august and I have not received an email saying they had it again

[vernal cape]

ye

[stuck nymph]

lol I can’t tell you how many times that’s happened

Surprise restock I guess

At least they have 1200 of them still

[vernal cape]

I'll also be working on a better sim-adapter-board thingy for those SAM cards that have the chip on them, so I can use a more normal socket

[vernal cape]

yeah. putting 200 in my basket

hurts to have to do that, but oh well

[stuck nymph]

I mean how many boards where you planning on dropping this time around?

[vernal cape]

got 30 boards already spun up, so at most 60 slots (2 per board), potentially less if people want to solder down their own chip instead of using a card

[stuck nymph]

Oh damn I guess 200 makes sense then it’s only about 3-4 boards drops I suppose

[vernal cape]

well, 29 actually, one already got assembled ans sent out as a demo unit 🤫

but maybe still 30, PCBway has a tendency to give you more boards than you ordered

[vernal cape]

exactly

[stuck nymph]

For you maybe. I’ve never received anything extra from them 😢

[vernal cape]

I got lucky then maybe

[stuck nymph]

They just don’t like me maybe

[vernal cape]

well, I mean, for sure I got lucky. on one of my orders I ordered 5 and got 11

matt black and yellow silk, but no enig

[stuck nymph]

Oh wow that’s not like an extra 1 or 2

They definitely like you then lol

Last few orders I got from them didn’t even have a sticker it was just packed without love in a little box

[vernal cape]

wait, they give stickers?!

[stuck nymph]

Yeah I got a few stickers with my first like 3 or 4 orders

Simple white ones and they just stopped afterwards

[vernal cape]

well, now I'm mad.

FREYA WANT STICKIES

[stuck nymph]

I love stickers and I don’t even put them on anything lol I have a bowl full of stickers I get with my orders

I guess putting them on something is too much commitment for me but I love having them

[vernal cape]

I have a little drawer cabinet with some stickers on it

[stuck nymph]

When I get home I’ll look for the pcbway stickers and show you

They are pretty plain and small but stickers nonetheless

[vernal cape]

actually, there is that green letter seal beside the MOTUL sticker that is from PCBway. was on a happy new year letter thing I got this year.

when no stickers you make do with what sticks!

[stuck nymph]

Wait you got a happy new year letter?

They are just playing with my feelings now

[vernal cape]

Yeah, it was in with one of my orders

Not even signed, just print and pack

I think I just ordered at the right time

But look at this lil guy! So cute! And holographic!

[vernal cape]

shitty trumpet noises
HEAR YE HEAR YE, GOOD PEOPLE OF THE [UHF | RFID FOR FLIPPER] PROJECT THREAD,
I have good, nay, fantastic news for ye!
V2.5.4 flippermeister boards will soon be available on redteamtools.com!
Page should go up by the end of the week if final assembly goes smoothly, which it should!

When I finally do get the SIM slots I need and I put my own boards up on Tindie, they'll very likely be the same price, so no need to wait!
Go get you a V2 board!

[stuck nymph]

Just the news I needed to hear!

[teal laurel]

apologies for not RTFMing, whats new in v2? 👀

[vernal cape]

You can all thank @lime hull for putting me in contact with the wonderful folks over there and enabling this 🙂

[harsh igloo]

That's awesome

They're also in the US, which is nice for some shipping

[stuck nymph]

I guess that would make it easier

[vernal cape]

Better layout, two Sam slots instead of one, 100% less bodges , ability to solder sam chips directly to the board, no more tiny switch to go between always on and software enabled for the UHF module, it devolved into a solder bridge, more text!, still all the original flippermeister logos and quote courtesy of @stuck nymph , better QR codes that scan more consistently (or at all) for some devices, and I'm sure more tiny details like that 🙂

[stuck nymph]

I love that the quote made it there

[vernal cape]

It had to, and, project evolution and feature creep willing, it'll stay there for every board revision in the future 🙂

[stuck nymph]

That makes me very happy

[vernal cape]

Make me very happy that it makes you very happy 😊

[harsh igloo]

ability to solder sam chips directly to the board,
hello

[stuck nymph]

Makes me even more happy that the fact that it makes me happy makes you happy

[vernal cape]

Hey there 😏

[lime hull]

Might need to reach out to RTA and see about 3d printing some cases.

[vernal cape]

that'd be dope. I have files they can use!

[lime hull]

For UHF?

[vernal cape]

for the case, I made one for me so the files are already done 🙂

[lime hull]

Would you be willing to send them over to Babak?

[vernal cape]

yeah, for sure

I'll do that tomorrow, I need to make sure the files are all good, I think I remember modifying them to work on the printer at work

[static jolt]

@vernal cape any update on board availibiity from redteamtools? Been keeping my eyes peeled but haven't seen anything yet and eager to get my hands on one 🙂

[vernal cape]

nope sorry, no final deadline for when it'll be up, but the gist of it is very_soon™️

[wicked wigeon]

They just launched their site redesign, so I imagine soon

[harsh igloo]

I saw something I think might be useful for anyone interesting in working on the UHF app + add-on. Rabbit labs has a USB UART/TTL adapter that can go in between the add-on and the flipper. Would allow you to monitor the UHF module serial (and maybe monitor the Flipper logs?): https://rabbit-labs.com/product/rabbit-labs-supercereal-usbc-to-ttl-ftdi-breakout-w-flipper-board-uart/

[eager moss]

i use an esp32 to redirect the uart for debugging but that looks handy

[stuck nymph]

Howdy! Any updates on the new batch of boards? or from red team tools?

[vernal cape]

No news, no, I'll shoot them a message to see what's up Monday

[vernal cape]

thanks to @stark bay for being so patient with the shipping on his order, it was an absolutely insane ride

THREE FUCKING MONTHS. TWO TRANS-ATLANTIC AIRPLANE TRIPS. Holy shit at the carbon emisions of a tiny package like that. if I ever want to get an 'eco-friendly' sticker for my store, I better start planting trees real quick

[stark bay]

It was a wild ride.

[next kelp]

JAMAICA
amazing lol

[maiden barn]

(P sure that's just the Jamaica in Queens, NY; still a wild trip though)

[vernal cape]

(yeah, it is, surprised me too at first though! ^^)

[limber pelican]

Hey @vernal cape did a schematic of the UHF board ever get published? Curious which pins are used for UHF vs NARD, contemplating making up a cable so I can plug my USB ttl adapter to it directly rather than having to disconnect the module from the board if I want to use it with my PC

[vernal cape]

hmmmm, yes and no. The whole kicad project is right there in the repo, but I never exported a pdf of the schematics! lemme pull up that info

[limber pelican]

Haha got a link to the repo? I did a quick google and couldn't even find that only the tinde page 😅

[vernal cape]

there we go. schematic won't completely match with the V1 boards that have shipped out, but the headers going to the flipper zero are unchanged

[limber pelican]

Yeah headers is what I'm after really

[vernal cape]

damn! https://github.com/Didgitalpunk/UHF-RFID_SAM-interface_Board

(it's fixed on the V2+ boards, got my repo on it :p )

[limber pelican]

Ah I was searching for digits not didgitalpunk

[vernal cape]

:p

[limber pelican]

On the v1 board is the EN connected to 3v3 or C3 header by default?

(EN on the picoblade)

[vernal cape]

neither, it goes to the mini switch between the headers, allows you to select either 🙂

changed it to a solder bridge on V2+ because odds are you'll set it once and leave it anyways, and that mini switch is very nice, but not exactly cheap

[limber pelican]

ahh

[vernal cape]

there's writing on the board on either side of the switch to tell you what's selected 😉

[limber pelican]

Yeah of course

[limber pelican]

Made up a quick cable before Defcon 😁

(that's red sharpie not blood)

[lime hull]

I need to get my m5stack hooked up USB to PC.

I have some personalization to do of some tags.

[true shadow]

Whats the current status of the v2 boards, haven't bin here in a while 🙂

[vernal cape]

still on hold for a bit, still need to pass the order for the sim slots.
I haven't had any news from RedTeamTools in a bit about their V2 batch, I'm guessing they've had their hands busy lately, and I've been too out of it to work on all this lately ^^;

[true shadow]

oof, gotcha. Thanks for the update!

[vernal cape]

thanks for asking! motivated me enough to pass the order for those darn slots!

[limber pelican]

lol I mixed up black and dark blue, didn't damage anything though at least

[vernal cape]

yeah, their color code is shit. and so is mine since I copied it ^^;

[lone turtle]

I really need to find out what screws you all used to mount the YRM to the FlipperMeister

When I get some time I'll use the FlipperMeister to research ValidFill tags. It's odd how popular it is, and yet nobody has cloned one to test it out 👀

There are posts online that say a UHF reader will cost me thousands of dollars lol. I guess they never heard about a YRM?

[harsh igloo]

Could be dated. When I got my uhf gun reader some years ago it was considered a steal if it was less than 100 USD.
Used to be you basically had to look for used industrial/commercial stuff.

[lone turtle]

Maybe? It was a 2 year old post

[vernal cape]

M2.5 screws, iirc I used 10mm long ones

unless you were looking for a link to the srews we bought ^^;

I'd suggest screw kits from aliexpress/amazon, or McMaster if you're in the US, or even mouser (https://www.mouser.fr/c/electromechanical/hardware/screws-fasteners/?q=M2.5)

[teal laurel]

long ago i got a roll of some thin double sided glue-tape thingy, saw it lying around so i just slapped some around the cutout and yrm stuck perfectly

precise one i bought back then https://www.amazon.co.uk/dp/B09MSTLH2R

but screws are probably better

[next kelp]

Am I gonna have to make a UHF mounting gore thread? 😂
Next some one is gonna use hot glue lol

[teal laurel]

#1136167977708957737 message tell me with a straight face that you can even tell theres some adhesive there... i know you cant

[next kelp]

Just because you hid the crimes doesnt mean they don't exist 😂 /s
But nah, your tape job is clean lol

[teal laurel]

ok fair you have a point xD

[harsh igloo]

no body no crime!!

[limber pelican]

My HID door simulator uses hot glue to stick on a boost converter and rs485 jigger

[vernal cape]

Rejoice! Things are moving slightly!

[vernal cape]

btw, is anyone here at defcon right now?

If you are, and can find Babak, ask them about the Flippermeister and how to get one!
Don't tell him I sent you 😏

[limber pelican]

Yes, a good chunk of the NFC lotr folk are

[lime hull]

Yeah, saw some of the boards. Look nice!

[potent orbit]

Don’t mind me, I’m here for the FlipperMeister

[vernal cape]

O.o

if this keeps up, imma run out of stock instantly again xD

[potent orbit]

Curious if V2 is still in the works?

[vernal cape]

yes, that's the one I have in pre-prod right now.

boards are made, components are had, I just need time and space to make'em

[potent orbit]

Exciting news!

[stuck nymph]

I can’t wait to get my hands on one!

[potent orbit]

So quick question: Will V2 be a separate listing on Tindie, or will my notification request still be valid from the V1 listing?

[vernal cape]

Separate listing. Technically it's already made, but not published.

Can't remember if I put pictures in it actually 🤔

[young prairie]

How screwed am I :)

Can’t tell if this is just UHF or UHF+HF

Was gonna pick up some modules to play around with it, can’t tell if this is beyond me yet haha

[lone turtle]

#nfc message

[mint egret]

is there an STL somewhere for a case for the board?

I feel like I saw one at one point

[vernal cape]

You definitely most probably did

There might be one in my repo? Not sure anymore, and not sure which version it is for either ^^'

[vernal cape]

Depends on what you want to do, what you have is a UHF parking tag.

[young prairie]

Make a duplicate

[vernal cape]

very unlikely to succeed, but you can try! you'll need a TID changeable tag to have any chance at all though, and those are kind of a black box at the moment.

[young prairie]

Gotcha, figured I’d need a TID changeable. Curious as to why those are a black box… thought TID is easily readable

Prob gonna go with Mr Key Fob online, one of those private guys that know what they’re doing

[vernal cape]

that's one way to do it, yep!

[vernal cape]

black box because we have 0 info on them. no datasheet, basic blurb, manufacturer, silicon photograph, anything. all the folks that sell it that have been contacted all seem to either juste recite the product page, or just tell you they don't have/ can't share anything. fairly infuriating ^^

[potent orbit]

Could he use one of these to make a duplicate? It is labeled as: “UHF Card RFID tracking Alien H3 Chip long Reading distance Card”

[vernal cape]

No clue, Mr key fob does his own thing, and iirc, is not very liked by the community because they don't share anything they find, but do use what the community find.

[vernal cape]

But from my (limited) perspective, no. The system probably checks the TID, which is completely unique for each tag, so you need a tag where you can change the TID, but possibly also need other features from the OG tag to be present.

If the system doesn't check the TID, then you're in luck and can try and copy all the rest to a similar tag. For that you'll need to scan your OG tag to determine what chip it uses

[young prairie]

Yeah I figured, I’m sure it’s super specific for commercial use too, I don’t doubt he’s in this server

He’s payed though so I’m sure he has decent incentive to research deeper and more expensive equipment.

[potent orbit]

Any experience with this device? found it on eBay. Don’t know much about it, looking forward to playing around with it.

[vernal cape]

not really, a lot of folks making actual discoveries aren't payed to do them, they just like tinkering with stuff and sharing knowledge 🙂

[vernal cape]

not at all, never seen or heard of it!

[vernal cape]

looks good!

xD

pass through cable be like

laughed my ass off for a good two minutes at that pass-through cable xD

[vernal cape]

maybe change the picture of the connector pin removal to one done with an X-acto blade, less chance to pry the plastic tabs off in my experience, since the tool is thinner

this one

looks like the person is using a super duper small screwdriver

[lime hull]

Got a better name for it?

[lime hull]

I included a picture of a cable with the wires color-coded for clarity.

[vernal cape]

I'm sure there's an even more specific name for cables where the connectors are oriented the same way and pinned to the same wires(1-1, 2-2, ...) but no clue on what that might be, and tbh pass-through cable is plenty descriptive enough

[vernal cape]

that's a very nice touch actually

cable schematics are usually pretty confusing even for super simple stuff, I'm still looking for a cable cad software that doesn't just output a crappy diagram, but is simple to use and set up

[shy wadi]

Just added support for the yrm100 reader. Supports locking and killing tags too. It is based on frux’s code. Check it out! https://github.com/haffnerriley/Simultaneous-UHF-RFID-FlipperZero

[stark bay]

Does it do direct connection or need the raspberry pi bridge?

Looks like no. The pi should be easy to remove for the spark fun board. Just need to interface the lower level commands.

[stone hound]

I checked that with YRM100 wired to gpio (no rpi or digits’ board) and it works, but crashes after reading a few tags. Errors are oom and mpu fault. Edit: can’t get oom anymore, only mpu fault, possible stack overflow

[shy wadi]

No pi needed for the yrm100! Yea. I can figure out removing the pi for the m6e and m7e readers later.

[shy wadi]

Yea it’s possible there are still some bugs. I will work on resolving them as they are found!

But yea any bugs that you all find please lmk and I will try to get them fixed when I have the time!

[vernal cape]

yeah, I'm sure Frux is working on that too when they got time, you two should work together!

[shy wadi]

Yea we’ve been in contact. He told me he’s a bit busy with work atm. But you’re right we should work together!

[potent orbit]

Tag for my neighborhood, looking for guidance on making a duplicate

[harsh igloo]

what have you tried so far?

[potent orbit]

Not much yet, I put my little Bluetooth reader on it and it just popped out “0058”. I’ll put my Mtools reader on it to see if it’ll spit out more data.

[harsh igloo]

what bluetooth reader is taht?

[potent orbit]

Tertium Blueberry HS. I love it. This is it in the video, scanning a different tag.

[vernal cape]

Iirc, AWID stuff can't be cloned

We talked (and tried) about it a bit of time ago

#1136167977708957737 message

[potent orbit]

Noo! For real? What is special about them so that they can’t be duplicated?
Could I just use one of their recommended cards/tags?

[vernal cape]

no, you couldn't, not without going to your access supervisor and enrolling the new tag in the system.

[lime hull]

MKF can

https://www.redteamtools.com/flippermeister/

[maiden barn]

Ordered!

[limber pelican]

Nice

[lime hull]

Nice. Those SAMs should be R8. R8.9.2.1 specifically.

[limber pelican]

Seader vulnerable to that CVE finally 😂

[lime hull]

Yep!

[vernal cape]

ah, good to know!

[vernal cape]

aaaawwwwwww sweet!

@eager moss ! they're here!

[maiden barn]

I'm naive to the SAM variants, bringing my own (Y7C07A). Cursory search on R8.9.2.1 / general SAM variant info not yielding results for me; any relevant distinctions across versions / reference materials on the versions out there?

[lime hull]

It doesn't make much difference beyond the auth bypass bug for iClass

[lime hull]

Seader can emulate it if @harsh igloo wants by just lying to the SAM and pretending everything is SR and using known legacy keys.

[vernal cape]

it's up!

[static jolt]

@vernal cape 🙏

[vernal cape]

was scrolling to try and find something and came across it, so hey!

[potent orbit]

Meister on the way! Pretty jazzed about it

[vernal cape]

Sweet! Thank you for the purchase!

[potent orbit]

I’m excited! What Flipper app does it interface with? What data from the UHF tags does it read? EPC, TID and user?

[vernal cape]

look in the pins for a link to Frux's repo, unfortunately it's not in the flipper store (yet!)
as for what it reads, it depends on what your tag has! some tags don't have user data for example. but whatever your tag has, it'll read it, provided it's not behind a password

[potent orbit]

Awesome, thanks. Got a feeling I’m about to have a lot of questions for y’all😂

[vernal cape]

wait what? what'd I miss?

[maiden barn]

Must’ve been the wind

[vernal cape]

guess so

[potent orbit]

lol, just a breeze

[potent orbit]

I got a little broad with a UHF question. Off-topic, if you will

[soft saddle]

Mine is on the way as well. Also purchased from RedTeamTools. Thanks @vernal cape looking forward to receiving it and putting it to use.

[vernal cape]

ah, ok

[vernal cape]

nice, ty!

[dire siren]

Mine as welL! 🙂 Got the shipping info late yesterday

[vernal cape]

Ty very much!

[lone turtle]

I needed that setup guide. Now I'll finally get the M2 bolts and nuts I need. Wasn't sure how to secure the YRM.

Looking forward to giving Seader a spin

(will order a SAM soon)

[fallen ice]

is the sam located in the board? i dont see it on the back of the motherboard

[harsh igloo]

You see where the SAM, or a SIM holder, can be soldered on, in the product photos: https://www.redteamtools.com/flippermeister/

[lime hull]

Depends on if you ordered with or without it

[vernal cape]

and the choice for without/with is only for normal SAMs, RTT does not offer a U90 SAM version

[fallen ice]

i see, i will obtain that myself

[dire siren]

Anyone come up with a 3d printed case for the flippermeister yet? I thought I remembered seeing links to an STL at one point, but I can't seem to find them now.

[potent orbit]

Flippermeister arrived today! Should I use the module that came with it or spice it up a bit?🤣🤣

[stuck nymph]

Well do you want to read tags across the damn parking lot? lol

[potent orbit]

Ideally

[vernal cape]

unless you have code to use with it, knowledge on how to extract the SAM from a U90 reader, and access to @lime hull 's mind, I doubt you will have any use for a +300$ chip 🙂

[vernal cape]

badabim badaboom
I got the link, my choom!

https://github.com/Didgitalpunk/UHF-RFID_SAM-interface_Board/tree/main/Case V2.0/case parts

Case options for days!

you can get the inserts specified (IUTB-M2-318-PennEngineering) on mouser, or find your own from other suppliers 🙂

[fallen ice]

well i got one to mess with and a giant antenna from it

[vernal cape]

nice then!

[fallen ice]

Thx for posting, case works good

[harsh igloo]

😮 how do you get that design? is that the filament?

[fallen ice]

its the Build plate that allows me to do that

[lime hull]

Neat

[dire siren]

You rock!!

[soft saddle]

Just received some cards from Ali. They are supposed to be dual rfid (T5577 and UHF).

[soft saddle]

What is the best software for using the YRM100 module via the USB PC connection?

[soft saddle]

Yes, I know I’m lazy I haven’t mounted my YRM module 😂. Do all these zeroes mean my AWID tag is locked?

[vernal cape]

what app is that?

[harsh igloo]

is ther a datsheet?

Have you already seen previous AWID conversations: #1136167977708957737 message

[soft saddle]

It's the Simultaneous UHF RFID app by Riley Haffner. I also tried the Frux varient with same results. As @harsh igloo mentioned, I was able to do some further research via the search on this group and there doesn't seem to be much success with AWID tags. I notice the information read from the tag literally changes upon every read.

[harsh igloo]

There doesn't seem to be much success with AWID tags
I'd read previous discussions of AWID

[soft saddle]

Yeah, I should of read as well. O well, at least I have a UHF module for future projects 🙂

[harsh igloo]

and MKF can do it, so someone with a UHF module might be the one who figures out how they do it and helps the community

[soft saddle]

Looking forward to this project gaining further traction and being able to provide what it needs for the community. MKF can make me a copy to an AWID keycard for $120. Seems like a lot but I guess when you're the sole source provider you can charge what you want lol

Does anyone know if there is a Windows program we can use in conjunction with the YRM100 module?

[vernal cape]

oh sweet! I didn't realize he had implemented Frux's code already!

well, Frux's code or any code that works with the YRM modules for that matter

[vernal cape]

I'll have to play with it a bit, lots of crashing for me for now

[soft saddle]

Yeah, it crashes here and there but not too bad honestly. I don't have other tags only my AWID. What I do notice is that everytime I read the tag it gets a differen't result

[vernal cape]

yeah, then it's like credit cards where the UID changes each time

[vernal cape]

does all the data chage every time?

[potent orbit]

Dang! Finally sat down to get started on this thing and realized that Red Team didn’t send me the connector cable for the full kit. Can I just cut and reverse order the rainbow colored wires that are on the current module wire harness?

[harsh igloo]

I thought their kid included the cable

and also has instructions about re-ordering (without cutting)

[potent orbit]

It was supposed to! Then I realized from looking at other pictures that they must’ve forgot to include that connector cable with my order. if I use the cable that came with it, I just need to reverse order everything except for the yellow wire in the middle?

[limber pelican]

Double check that, I think the one my module came with ages back didn't need reversing

[harsh igloo]

I don't think you have v2

[limber pelican]

Check the Vcc pin on the module and the board against the flipper header pinout

[harsh igloo]

I have v1 from Digits direct and didn't need to make an adjustment

[limber pelican]

Did they change the pinout on the board? Or was it the little black cable that's the issue?

I figured it was the little black cable that was the problem and the board pinout was the same

At any rate double checking the Vcc pin with a multimeter is cheap insurance against accidentally blowing up your UHF module 😅

[potent orbit]

I cut them and reversed them. It’s working great!

[potent orbit]

This one needed reversing, but I emailed red team tools to get the proper cable.

[harsh igloo]

yeah, if you bought it from RTT thats v2

[soft saddle]

Not every time, just every couple reads.

[vernal cape]

wierd

very wierd

[soft saddle]

I know. Any idea what these values mean? I noticed it’s the same between mine and @potent orbit AWID tags. I’m guessing it’s a proprietary reading to AWID cards.

[vernal cape]

you should read the EPC standard, it explains all the acronyms you'll encounter 🙂
in this case.... I forgor
I know CRC is just your checksum, you can dismiss that. If that changes, then it means the PC and EPC have changed.

PC iirc determines what size your EPC is, among other things.

you can configure your EPC to have a length of 0 for example

[vernal cape]

here ya go, found it

@soft saddle 👆

just ctrl+F the terms like EPC, PC, CRC, and they should take you to very clear explanations for them 🙂

[soft saddle]

Sweet. Thanks

[warm rampart]

Hi there, does the UHF Flipper Zero App (https://github.com/haffnerriley/Simultaneous-UHF-RFID-FlipperZero ) still support YRM100?

I’m asking it because after the install, I opened the app, but it is frozen

Flipper Zero Firmware 1.0.1

With other App UHF_RFID I successfully read the tags, but that App unfortunately doesn’t contains the same features

[warm rampart]

It supports the Firmware 1.0.1 ?

[shy wadi]

Yea it still supports it. I haven’t had the time to work on it recently because I just started a full time job a few months ago. If anyone is experiencing any bugs don’t hesitate to reach out [email protected]. I usually respond within a few hours. I don’t check discord as often

[warm rampart]

Actually, after I installed the App, it isn’t usable, there is a button but doesn’t works, I didn’t receive any kind of error

I used the Flipper Zero Official Version 1.0.1 and YRM100 module without any other device, I mean the YRM is connected directly to the to the F0

[shy wadi]

Did you toggle the connect setting in the configure menu?

Yea the setup you have sounds fine

[warm rampart]

Wait a sec

I will send a video

To be mentioned that using the other UHF App I was able to read the tags

[vernal cape]

This

Also If you back out of an app, generally, assume it loses settings.

Also GPIO apps enable 5V when you launch them usually

No need to do it in the GPIO menu beforehand

[shy wadi]

The external antenna setting is currently working in progress and may cause confusion so sorry about that. Just use the internal antenna selection and make sure you press the connect button before you change any of the reader settings.

The reader app settings will not persist across runs, so you’re corrected when it is closed out of the settings will not be saved. I have added that as a feature to work on for a future release so that the reader settings will be saved, and you can just open the app and start reading immediately but for now every time you open the app, you’ll have to enter the correct settings and make sure you’ve toggle the connect button in the configuration menu before you change any of those.

sorry if any of this is unclear, I’m currently driving and using speech to text

[warm rampart]

I reproduced the steps and this time something is changed, actually when I pressed start button the F0 is shut down

[shy wadi]

Hmm that’s strange. Try theses steps: make sure the module is plugged in. Open the uhf rfid app. Go to the config menu and first select the YrM100 module. Next select connect (should display Disconnect afterwards). Then toggle any other settings such as power, region, etc… then once you go to the read screen it should hopefully work. Once again there are certainly bugs that I need to hunt down so you may experience some crashing but hopefully those steps work.

I’ve gotten some emails from others who have had trouble getting the app working so I think I will make a tutorial video and update my documentation to be more clear and specific. Sorry if any of my instructions were unclear! Hopefully you get it working!

[warm rampart]

Some news, by respecting your steps the Flipper Zero LED is blinking, but still not able to read the Tag. For the last “power off” what I told you, I received the following error after the restart (maybe it could help you for your error fix - video)

Maybe there is a bug during the compilation process, if I remember I received an error - something about an Application List or Manifest which is missing

[vernal cape]

Do you have another UHF tag to test with?

[warm rampart]

Yes, I have cards and stickers too

Different tags

It fails and the F0 is automatically restarted

Works

The problem is that the F0 restarts more times until it’s able to read it

I’m not sure where is the bug actually

[harsh igloo]

the UHF app is quite unstable

[warm rampart]

I’m committed with a new question, is there a difference between YRM100 and Simultaneous UHF RFID Reader? I know the reading distance is a difference, but are sometimes else? Some additional protocols?

[vernal cape]

not quite sure what you mean, YRM100 is a reading hardware module, Simultaneous UHF RFID Reader is a piece of software?

[harsh igloo]

Simultaneous UHF is from Sparkfun (hardware)

[vernal cape]

wait, is the app just also named like that?!

[shy wadi]

Yes the app is named after the sparkfun board because it supports it as well

[shy wadi]

Yea sorry the app is unstable. I’m sure there are some underlying memory management issues that I need to fix up. If you find anything that is easy to recreate I would appreciate you opening up a GitHub issue so it is easier for me to track 🙂

[warm rampart]

👍🏻

[eager token]

What is the difference between getting the YRM1001 module and connecting it directly to flipper compared to buying something like https://www.tindie.com/products/didgitalpunk/flippermeister-v1/ (sold out) and attaching the YRM1001 to this?

[harsh igloo]

SIM card slot and SEC1210 chip on the back of the board (2nd photo)

I dunno if a run of v1 will be made again. v2 is here: https://www.redteamtools.com/flippermeister/

[eager token]

I am trying to use the YRM100 module to read my condo's garage fob and duplicate it. Would I still need something like flippermeister to achieve this or is the YRM enough?

[harsh igloo]

I would do further investigation before investing. Have you identified the system used? Search the server for AWID and you'll see an example of one that cannot be cloned by the flipper

[stark bay]

The YRM100 can be directly connected to the flipper. The board makes it a nice/easy connection

https://github.com/frux-c/uhf_rfid has pictures of such

[eager token]

And YRM100 (connected directly to F0) can write to a new tag as well assuming the card isn't locked?

[vernal cape]

I dunno if a run of v1 will be made again.
nope! V1 is dead and buried, V2 is already up at redteamtools, and will be up at some point on my tindie as well when I get time

[warm rampart]

Is there a possibility to use UHF module for frequency Analyse?

Does the UHF App support it?

[vernal cape]

Frequency analysis?

[warm rampart]

Yes, sorry for the mistake, the keyboard used other layout 🙂

[vernal cape]

nah, can't do that, the app has no option for it, and the readers don't either afaik

[coarse wasp]

If anyone is feeling generous, I'd love an ELI5 of why I can read and write using https://github.com/frux-c/uhf_rfid with a YRM100, but cannot emulate a saved tag? My dumb self just assumed "writing is surely more complicated than emulating"..

I tried reading and understanding all existing convos around UHF emulation, it just seems like the boulevard of broken dreams tho

[stark bay]

All of the RF is being done by the module and the code is just controlling it and displaying results. UHF tags work by reflecting transmitted power back to a receiver and the module is the transmitter and receiver and not set up to do the reflecting

[coarse wasp]

Interesting, thank you for the explanation

[stark bay]

More interestingly there are actually very few references around about emulation and based off my reading of the specifications a bad acting tag could cause a lot of trouble in a uhf reader environment

[coarse wasp]

I could see the longer range the tag the greater need for security

[dry jay]

Newbie question: I got a YRM-100 from Ali Express and it came with a USB-TTL. Can I connect it directly to the F0 through the usb port? I would also need to use a usb A to C adapter if that makes a difference.

[next kelp]

No, it has to communicate over gpio.

[dry jay]

Thanks. Bummer. That would have made it so much easier.

[dry jay]

Do you have any recommendations for a temporary no-solder, no-frills method of attaching it?

[next kelp]

You'd be looking for the board that is sold in this very thread when it's in stock

[dry jay]

Ah, thanks for the quick answer. I should have done my homework.

Well...this calls for a project that will be 3 times as expensive and require two modules (one to replace the one I burn out)!

[vernal cape]

what are you trying to do?

[dry jay]

Just trying to connect the YRM-100 module. It came with a USB-TTL and I wondered if I could connect through that instead of GPIO.

[harsh igloo]

You already got an answer to that

[dry jay]

Yup. Just responding Digits

[vernal cape]

then yep, you either need to buy my board ( horray for me!!!! :p) or you can scroll up a lot in this very channel to see what we were doing before we had the flippermeister 🙂

[dry jay]

I'm just going to solder some headers onto the module and connect it temporarily with jumpers when I need it. I'm actually just about to do that as soon as I get my shit set up. 🤷‍♂️

Any advice?

[vernal cape]

Yep, I have advice:
Don't use the onboard headers xD

They aren't a duplicate output of the onboard connector already present, found that out the hard way with my V1 board

[dry jay]

Lol. Okay why? I was just confirming the pinout before getting started.

[vernal cape]

Afair, they're used do the initial programing of the module's brains

[dry jay]

Oh. Well fuck.

[vernal cape]

yeah, apart from gnd an VCC, completely useless.

[dry jay]

Well that's good to know!

Okay, so this is what I have to work with. Micro JS something or other?

[vernal cape]

Molex picoblade

[dry jay]

Thanks. I assume adapters exist? Going to look now.

[vernal cape]

Never looked! I have the tools to crimp both Dupont clones and picoblade ^^

[dry jay]

I was just thinking about crimping them myself. I did find some premade:

https://a.co/d/3pkg2Gw

[vernal cape]

Good find!

[dry jay]

I guess I'll just get one of those.

Do you use picoblade connectors in your build or did I just order the module with the wrong configuration?

[dry jay]

Heyyyy, what about using these? 🙂 Think that would work?

[vernal cape]

Actually yes! That should work!

[dry jay]

Hell yes, this thing is going to be fugly. 😂

Thanks for the help. I'll report back.

[vernal cape]

Picoblade all the way, I make custom short-length cables for my customers

[dry jay]

Ugly as promised but F0 says no UHF module found.

BUT, if the square pad is 1 and I disregard the labels... here is what I find on github:

YRM100: 1 (VCC) -> FZ: 1 (5V)
YRM100: 2 (RXD) -> FZ: 13 or 15 (these are TX pins)
YRM100: 3 (TXD) -> FZ: 14 or 16 (these are RX pins)
YRM100: 4 (EN) -> FZ: 9 (3.3V)
YRM100: 5 (GND) -> FZ: 8 or 11 or 18 (GND)

Switch between UART Pins 13/14 and 15/16 setting in:
Flipper -> GPIO -> USB-UART Bridge -> LEFT -> UART Pins

Also make sure to enable 5V in Flipper -> GPIO

[vernal cape]

When in doubt, swap TX and RX pins

[dry jay]

Nope. I also switched them to 15,16 and tried that.

I notice that when I plug in 3V3 the blue led on the module lights up briefly, then goes out. Does that say anything to you?

[vernal cape]

Only connect +5V, you don't need 3.3v.
Connect module, then launch app

[dry jay]

Okay, I removed 3.3, connected module, then launched app- Blue lit briefly, then went out. No module found

Switched TX and RX - same thing.

Switched location of ground from 8 to 11, to 18 - all the same.

I'm going to check settings and retry everything.

Look at the labels on the USB-TTL. Are those correct?

[dry jay]

Thanks for all the help by the way. I really appreciate it.

This is the software I am using: https://search.app?link=https%3A%2F%2Fgithub.com%2Ffrux-c%2Fuhf_rfid&utm_campaign=aga&utm_source=agsadl1%2Csh%2Fx%2Fgs%2Fm2%2F4

I admittantly haven't read through it. It just occurred to me that we may not be talking about the same software. I'm going to do that next.

[vernal cape]

Spam retry, Frux's software has a delay issue between 5V_enable and detect_reader

I'm confidant at one point we'll have an app that works smoothly 😌

[vernal cape]

Also you can plug your flipper to charge while using peripherals, that forces the 5V to be always on, so no more delay problems 🙂

[dry jay]

Okay, I'll try spamming and charging.

I enabled 5V manually. The sofware doesn't just "toggle it" on/off I hope.

[vernal cape]

It does toggle it on and off automatically

So that you don't need to do it manually

[dry jay]

I'm at a loss. I even went back and resoldered.

It flashes blue momentarily, then back to red.

Maybe it's something with the USB-TTL?

[dry jay]

Well anyway, I ordered the picoblade to dupont adapter. That's my next step.

But, just to confirm, from top to bottom in the picture?:
5V
GND
RX
TX
3V

[dry jay]

I got the adapter. I get a solid blue light on the module now, so I take that as a good sign. The F0 still says no detector though. Even when I plug in to charge. I also tried swapping RX and TX. 🤔

Any other ideas?

[shy wadi]

Feel free to check out my app that also supports the YRM100 😄. https://github.com/haffnerriley/Simultaneous-UHF-RFID-FlipperZero

[vernal cape]

and it doesn't require a downgrade!

[eager moss]

i can’t keep up 😭, im a full time swe and a full time student. hopefully starting spring i can work on it again. im graduating this fall 🕺💃

[eager moss]

this spring 🙌 hopefully

[harsh igloo]

Take your time, this is a hobby

[dry jay]

Yeah man, no worries. It's awesome what you've done already.

[dry jay]

Alright, does anyone have other ideas for me to try to get this thing working? Are there settings in the F0 I might be missing?

Any ideas for testing to make sure the module is working correctly?

I'm out of things to try.

Sorry Riley, I haven't tried your app yet. Does it work with all the most common f-wares?

[stone hound]

Hey! I had similar problem. I’m not entirely sure why, but it seems yrm100 can’t be connected to usb-ttl (even if it’s not connected to pc) and flipper. Try to wire up your module with usb-ttl completely separated

[dry jay]

Thanks. I did. No luck.

[stone hound]

Just checked mine (the module is directly wired to flipper, without digits’ board) with a simultaneous rfid app. It crashes the flipper, so it must be still working😅. What app do you use? Frux’s app had issues detecting the module, simultaneous rfid just lights up the module and crashes.

I mean, you won’t be able to read tags on the first try (both apps are WIP), so you have to try multiple times. But if LEDs are glowing - it’s a good sign. When I was wiring the module I had like 3 success detections out of 10 and 2 successful reads out of 10.

[dry jay]

I'm wired direct too. I'm using Frux's app. I think I've ruled out the voltage detection bug. I can skip past the "module not found" and attempt to read anyway but haven't had any luck there. I have started the app many, many times in many ways and it's never detected the module either.

@frux.c What is the reason for the option to skip past the "module not detected" message? Will it attempt to read anyway?

[eager moss]

it will attempt to do so. however the original intention is incase you want to see the saved tags

[harsh igloo]

you could call it "offline mode"

[vernal cape]

and disable the read button as well

[dry jay]

Well gang, somehow I got it to work. I was messing with various setting in the F0 and it started working. I cant say for sure what I did. Under settings/system Log Device is set to USART, I changed Log Baud Rate to 9600 (I found that in the YRM100 specs). Also, under Settings/Expansion Modules I have Listen UART set to USART.

I also successfully read, saved, a wrote a tag. The new tag I wrote to didn't open my gate, but the reader did register that it read a tag. I'm going to look into that a bit.

[mint egret]

Did you read the new tag after wrote it and check that it has the new data on it?

Instead of just the original data it came with on it

[vernal cape]

also, your garage tag, is it any specific brand? like AWID for example?

[dry jay]

No, I didn't even think to check the new tag. I will.

[dry jay]

Yeah. Here are the specs on it and the reader.

[vernal cape]

Yes to AWID?

[dry jay]

Oh, sorry. The tag I read was an EMX TRES 900 Viper. The gate is an EMX TRES Patriot.

[dry jay]

I wrote to two tags. One was another EMX-TRES tag (not sure if it was actually writeable but the app said it was a successful write). The other tag was one that came with the module. I'm not sure if it's writeable either.

I'm going to check the tags to see if they match what I read off the original. I will also buy some tags that are for-sure writeable. I just haven't messed with it much since I was able to read a tag.

I also found, and started to read the Generation 2 UHF RFID communication protocol last night to try to make some sense of the data on the tag I read, but it's way out of my wheelhouse.

[vernal cape]

not sure if the app checks data after a write operation

alright, do a read to make sure the data is indeed what you wrote, and at the same time look at the TID and give me the first eight digits, should look like E2xx-xxxx

that should let us determine what chip is in there

[vernal cape]

because this is just the end of the chain, the chip inside that inlay is not made by them, and even the picture of the inlay on their website says Smartrac, which is yet another manufacturer.

nesting dolls of manufacturers

[dry jay]

Yeah, it does say Smartrac. It took some searching to figure out EMX TRES.

[dry jay]

Okay, I checked the written tag. The EPC bank (12 bytes) matches the original read.

However...This seems weird - when I look at the info of the original read on the Flipper, the TID is blank. But, when I look at the read info of the tag I wrote to, the TID is E2 80 11 00 20 00 72 45 A1 8D

[dry jay]

I'm wondering if I didn't get the TID on the original read, and when I wrote to a new tag it just left its TID as whatever it was when manufactured?

[dry jay]

I read 4 different blank tags repeatedly. Sometimes I didn't get a TID, sometimes I got 2 or 6 bytes. The longest I got was 10 on all of them.

[dry jay]

Okay, I got everything to work - gate opened! Yay!

I'll detail some observations a little later.

[dry jay]

Okay - so everything worked. Nice job @eager moss and thanks to @vernal cape for all the help.

I still have no idea how I got the module to start working, but it has ever since.

A few notes about the app: It does as promised, but crashes weren't uncommon. Sometimes it said the crash was memory related, sometimes something about a BUS error, but most of the time it said it may have been a stack overflow. It seemed to crash frequently when I used the back button to navigate back rather than the left arrow navigation option.

On "successful reads" for the tags I'm using, it always successfuly read the 12 bytes EPC Bank. It didn't always read the 10 Byte TID Bank. Sometimes it read nothing, sometimes just partial reads. Sometimes I had to read a tag several times before I got the entire TID. It also didn't always read the 2 byte User Bank (although it didnt seem to matter - the values were either absent or just 00 00).

It would be nice in the app if you could view the TID after a read without having to save first. It would also be nice to be able to view the PC and CRC values when selecting info from saved reads. Finally, it would be nice to be able to rename files.

I read a few consecutive tags if anyone is curious about what data they contained. Just ask. Also, if I can help in anyway with something just let me know. Thanks.

[shy wadi]

Yea it should be supported on most firmwares. It was designed with the official firmware so most firmwares are just forks of this.

[shy wadi]

Does it crash still on my app? I haven’t pushed out a release in a few months and there may be some new bugs. Will try to investigate next week. Love to get feedback!

[shy wadi]

My app displays all this info after a read :). Will take a look some of the crashing behavior soon. Similar to Frux I am a full time swe and have a lot of other projects going on so trying to balance it all 🙂

[vernal cape]

You're welcome!

Awesome that you got it to work!

[vernal cape]

Every time someone says I'm a full time swe my brain reads I'm a full time Swede

[dry jay]

I haven't tried it, but I will and get back to you.

I figured out why I had such a hard time getting the module to work. I wired it incorrectly. I assumed the pinout based on wire color and the order they are shown on the USB-TTL. That was totally wrong. I finally got it working when I referenced the correct pinout I found online. I didn't notice at the time it was different than what I had been doing. 🤦‍♂️

So, for those who may follow, may these pictures save you heartache and headache.

[shy wadi]

Also I would love to hear if people have been using the locking and killing features on my app.

[vernal cape]

<@&932724996210573333> could you pin this?

[vernal cape]

I haven't unfortunately, 90% of my tags are from clothes I bought, so I don't have the passwords for them.
Though I could try anyways, maybe the password is still all zeros 🤔

@dry jay the 3.3v line is the Enable line, it's hard wired on YRM1001, but not on the other sizes !

[shy wadi]

Haha yea it’s possible!

I’ve read online that some people forget to lock the actual reserved bank after writing to it so if you’re lucky maybe you’ll get a tag that isn’t locked for reading 😂

[vernal cape]

I'll try it as soon as I'm back in the metro/train, got a couple on me

[cerulean marten]

Done.

[vernal cape]

Ty!

[vernal cape]

damnit, my app's out of date ><

[shy wadi]

If you are on the latest flipper firmware then you can update.

[vernal cape]

That's wierd

Damnit, don't have my flipper with me

[vernal cape]

OH

I'm just an idiot.
I put your and Frux's apps in a seperate UHF folder, and so of course it doesn't recognise them as installed

[dry jay]

Okay Riley, I'll install your app tomorrow and give it a shot.

[vernal cape]

@shy wadi I have some remarks for UX, the scrolling on the tag data is really annoying, if there was a way to pause it, say by holding down the middle button, that'd be nice

[shy wadi]

Yea thanks for the feedback! I can certainly add that in!

[vernal cape]

noice, tyvm!

[dry jay]

I've got it installed. I confirmed the module was working using Frux's.

No luck for me. I first tried just hitting read. It takes me to the Read Menu. It doesn't appear to have read anything and Prev, Start, and Next buttons don't work.

I backed out and checked Configure. Ah. I selected YRM100. Backed out, hit read, nothing. Took me to the Read Menu. No buttons work. Backed out and went back to configure. Power Level? Not sure what YRM100 wants. I believe Baud rate is ideally 9600 so I went to change that. It crashed "Null pointer deferference". I repeaded that a couple times andngot the same result.

Thoughts on troubleshooting?

Comments thus far: Can the App detect what reader module is attached? That would be nice. Also, it would be great if the power level and Baud rate adjusted automatically based on the reader you select.

[vernal cape]

baud and power, you don't need to touch.
what your missing is in that same menu, at the very top, Connection Connect>

switch it to Connection <Disconnect

the < and D are mushed together

then go back to your read menu, and it should work 🙂

[shy wadi]

Yea sorry for the confusion with getting this connected. Seems like I should fix this so it is more straightforward

Any suggestions on UX/UI for connecting to the reader? Do I need to reword my instructions in the readme/about screen? Or would changing the wording of the actual configure menu be better? Wanted to do auto connect but didn’t get to it. Any thoughts or feedback is greatly appreciated! 😄

[dry jay]

Ah, yes. That's not at all clear. Maybe require connection before being able to go to the read screen (with simple direction). Or, on the read screen, provide some sort of dialog if there isn't an active connection?

Anyway. One step closer for me but It won't read (even though it seems to be trying). I tried switching TX and RX just to make sure I didn't switch them. That crashes the flipper hard. I notice that the blue LED on the module flashes on briefly when I start the app but doesn't come on again after that (even when It's attempting to read). Os that meaningful in any way?

[dry jay]

Meh, I did have TX and RX switched. I got them right, then restarted the app from the beginning. It attempted to read. I got the blue light on the module. Then the app crashed. I'll try a few more times.

...annnnd got it.

It crashes a lot - "MPU Possibly stack overflow".

I also find the scrolling annoying. Also, the Next> button didn't work for me the time it didn't crash. 🙂

[vernal cape]

blue light is, I think, initialization and reading

[shy wadi]

Thanks for the feedback, I will be trying to add these changes in as soon as I can and find the time. The last month has been quite busy with work and the holidays so trying my best to work on it when I can.

Is anyone else having issues reading with my app?

[vernal cape]

I figured out why the scrolling bothered me much, its because once it ends scrolling to the left, the text doesn't reappear from the right and keeps scrolling, it just snaps back to the beginning, making the first ~4 characters impossible to read

[shy wadi]

Makes total sense. Will fix it asap!

[vernal cape]

Oh btw, if you want to use my Json file for chip recognition, it's there for that of course!

https://github.com/Didgitalpunk/UHF-tag-and-IC-database/blob/main/Digits'_mdid_list.json

[dry jay]

Where do you find that info - tmnHex etc?

[stone hound]

Omg chip type recognition would be sooo awesome

[vernal cape]

First eight characters of the TID !
Should look something like E280 6984 for example.
Grossly meaning:
E28 is not much to worry about,
0 6 corresponds to the manufacturer NXP
984 corresponds the the chip id, in this case Ucode8 iirc

I say grossly because the delimitation is done in pure binary and not interpreted characters.

[dry jay]

Hmmm. Interesting.

[eager hatch]

Hi can someone help me guide me on how to install the github files to the flipper zero?

[dry jay]

What are you trying to install?

[vernal cape]

what are you trying to do? which app are you trying to install?

[eager hatch]

Thanks for replying, I am trying to install this

https://github.com/frux-c/uhf_rfid

[eager hatch]

This https://github.com/frux-c/uhf_rfid

[eager hatch]

This https://github.com/frux-c/uhf_rfid

[dry jay]

There are easier ways. Install the mobile app and/or the desktop app. When the F0 is connected, there are installation tools for many, many apps.

You might the one you want here: https://lab.flipper.net/apps

[vernal cape]

Wrong person 😛

[vernal cape]

I suggest you don't try and install this one. Go for simultaneous UHF RFID reader in the app store.

[dry jay]

Whoops

[eager hatch]

hello anyone knows how to configure the simultaneous UHF RFID reader app? i dont seem to get it work 😦

[vernal cape]

make sure you go in the settings, choose the reader you have plugged in, and then at the top make sure the thing says 'connected'

[dry jay]

Describe the problem in detail please.

Do you get a blue light on the module?

Check to make sure it's wired properly. See my post from 11-21-24 above.

[eager hatch]

Yup, the blue light goes on for a few moments and then it turns off, is that ok? Only the red light keeps lighting on. After that, I go to configure the settings, and select the YRM100 option in UHF mode, leave the other settinga as it comes. But when I go back to Read mode, and push the circle button (start) nothing happens. Am I missing a step or something else?

[vernal cape]

yes. topmost setting. click the right arrow so it says 'disconnect'

[dry jay]

Blue light is good. See Digits' post above. The modules are not "Connected" by default.

Just select the module and then above, use the right arrow button to "Connect".

[eager hatch]

Finally got it working! thanks a lot, I had to set the Connection to Disconnect to be able to get it work. However, is it normal that it only reads one time and the second time it gets stucked? I have to restart everytime after this.

[vernal cape]

No, it's not normal, but might already be a known bug

[next kelp]

Seems for now Frux's is still the most complete, as for the YRM100 its still the only way to be able to save tags and write tags.
also simultaneous UHF RFID reader is quite unstable and seems to MPU fault my flipper even trying to read.

Here is Frux's UHF_RFID compiled fap for firmware 1.1.2 for the YRM100.
for those using it, you may need to hit connect a few times for it to register the reader.

[eager hatch]

this is way more stable, thanks for the update! @next kelp, Have you found difficult to write?

[next kelp]

Write works fine, however you'll need a full charge on your Flipper's battery

[vernal cape]

or have it plugged in

[shy wadi]

I am going to start working on bug fixes in the coming months and will be opening some GitHub issues. I would appreciate it if you could add to it with steps recreating the bug if possible! This will help me identify and fix anything faster! Thanks! Sorry that my app isn’t as stable! It worked well for me when initially testing but I assume some things have been buggy since firmware updates or because I missed it.

https://github.com/haffnerriley/Simultaneous-UHF-RFID-FlipperZero

This would be super helpful though! I would appreciate it if any bugs could be added and documented in a new GitHub issue! I will get on it asap! Work has been busy and trying to get and Aws SA cert so been busy! 😅

[fluid isle]

Hi guys, do you know if the YRM100 can potentially be capable to emulate UHF tag as well?

[vernal cape]

It can't

[vernal cape]

No system can. To do that you'd need to make a low level reader that does not exist for now.

To be clear, what I mean by "does not exist" is that no one sells one. There are however research papers on the web to that end, using this you might be able to make one yourself.

[fluid isle]

Thanks @vernal cape . What about implementing the protocol over the builtin CC1101 like the sub-ghz?

[vernal cape]

Yes, that's one way to do it but you need two CC1101 for that, one for Rx and one for TX

[fluid isle]

@vernal cape I'm not sure yet why I can't have it on one module but If I understand correctly, the FZ has a builtin cc1101 and the external module has another one, correct? (like this one https://www.aliexpress.com/item/1005007374133823.html)

[vernal cape]

reason you need two is that you need full duplex communication at those speeds. one CC1101 module isn't capable of that, only half duplex. so you set one up as RX and one as TX.
And yes, of course, you could use the one inside the flipper, but personally I'd chose two external ones so I can make sure my antennas are tuned to UHF RFID frequencies

[tender estuary]

Can this project be used to write on UHF RFID cards as well?

[tender estuary]

Is there any differences between chips from the uhf cards? For example, mine chip sn starts with AZ, but i can`t find a similar one.

[vernal cape]

Yes

[vernal cape]

Yes, it can vary a lot. A few if them have very advanced security features, though most just have varying memory sizes.
Some chips also have sensors on them, but that's another can of worms.

Continued from this, you'd need to give us more info, and pictures, of your tag if you want us to help you

[vernal cape]

@tender estuary ⤴️

[tender estuary]

Until the YRM1001 arrives and I can incorporate it into FZ, I tried using a friend's UHF reader. The card I read from has the series AZ-H4A, and a 2.1 also appears when I use a flashlight. Using his reader, I extracted a 24-character payload (12 bytes), which I then wrote onto another card that has a chip with the series A12028B. Comparing the specifications, the two cards seem identical. Subsequently, I conducted a series of tests on the parking barrier and noticed that the green LED lights up, just like with the original card, but the barrier does not lift. What would you recommend I do? Have you encountered such situations before?

[harsh igloo]

was the payload you got the EPC, or the User Memory?
What brand is the reader?

[tender estuary]

I think that was the EPC, 300833B2DDD9014000000000 was the value extracted. Searching for it i find that is kind of popular

[vernal cape]

Sure looks like EPC data with the 3008 at the start

[vernal cape]

Can you get us a picture of both of the original card's sides? Also of what you see when shining a light through if that's at all possible.

Can you share the original card's data with us? I'm mostly interested in the TID, as that'll tell us what chip is in there, and therefore what chip you're most likely to need if you want to try and make that copy work.

[tender estuary]

Here seems to be a datasheet from the original one: https://www.usmartcards.co.uk/index.php?route=product/product/download&pdf=1466&document_id=631

[vernal cape]

Yeah, very common practice, usually you have to ask if you want randomized or series'd default EPC numbers on the chips.

That means it's probably not using the EPC to validate access, but any of the other fields on the chip (TID, User)

[vernal cape]

Ah, sweet! Datasheet says Alien H3, so no fancy security, that's good

I guess check to make sure your copy card is also an Alien H3.
To do that, check the TID, it should start with E280 3412

[tender estuary]

that`s awesome! In this case i will try tomorrow to play around with the TID and User Memory. Thanks!

[vernal cape]

Just as a heads up, TID is read only, so don't worry if your attempts at copying it fail 🙂

[tender estuary]

Actually the user memory is empty, 00 bytes. Can be password protected?

Can be authentification based on TID?

[vernal cape]

not on alien H3 chips (I'm assuming your read parameters are correct, since we don't know what reader/software you're using)

[tender estuary]

The reader is ru5102

I will try to write the TID as epc and user memory

[vernal cape]

it certainly can, and definetly should, TIDs are absolutely unique, and magic tags don't really exist for UHF

[vernal cape]

that won't work

[limber pelican]

There are definitely TID changeable UHF tags

Fairly basic ones though

[vernal cape]

yeah, there is that one from PiSwords, but what with the 0 info they're willing to spare....

[tender estuary]

Do you have any link or reference on that tag?

[vernal cape]

https://www.aliexpress.us/item/3256801619681844.html?gatewayAdapt=4itemAdapt

PiSwords aliexpress store

[limber pelican]

PiSwords*

[vernal cape]

Holy crap I've been calling that seller Pi's world for so long xD

corrected my messages

[tender estuary]

😂 Thanks a lot! I will give it a try.

[vernal cape]

finished asking chatGPT to make me a little search engine for my MDID list. god I hate how dumb he is sometimes.

https://github.com/Didgitalpunk/UHF-tag-and-IC-database/blob/main/MDID_Search_Engine

[eager moss]

okay i graduated, moved and settled. what has been happening here

i saw vscode copilot has a RAG extension, might come in handy to catch up on this

[vernal cape]

Wow, GG!

[vernal cape]

I guess for one, I've been slowly making a little python code to decode TID data and spew out what it means, as well as check my database to find tag manufacturers and models

[eager moss]

i saw your repo with all the models

[eager moss]

has anyone seen chips that support iSO 18000-6B UHF protocol?

[vernal cape]

Not that I know of, but I've never looked for them either. Apparently they're not compatible with 6C readers?

[knotty oyster]

will there be a magician who will tell me whats going on? XD
at the beginning, when checking the connection of the soldering points with the connector, i came to the conclusion that rx is black and tx is yellow - but it doesnt matter because i checked both ways
i tried connecting f0 to the soldering points, and also by unplugging it from the USB module (i read above that it may not work with this) and plugging it directly into the module - anyway, it doesn't want to cooperate at all - even if i ignore the message, it doesnt read the card
i tried changing baudrate, region, power, settings as capta1nnem0, nothing helps.
LEDs flash, f0 is silent
interestingly, under windows it works, reads and writes normally
do you have any idea? ;c;c;c

[vernal cape]

Yes. You're not supposed to use that test header to connect

[knotty oyster]

😮 thanks for the tip, i'll check it out

[vernal cape]

I made a few posts about this very thing a long time ago in this channel, search for "header" , pretty sure you'll find it

Probably around two years ago if I had to guess

[harsh igloo]

pin worthy?

[vernal cape]

Yeah probably actually.

Yrm modules are the most affordable ones out there, so people are probably gonna go for those to tinker with

[vernal cape]

finished doing the ground work for the TID decoder!
https://github.com/Didgitalpunk/UHF-tag-and-IC-database/blob/main/MDID_Search_Engine.py

there might be a bug/decoding error with the latest commit, I might have reversed the bit order (LSB instead of MSB).

[knotty oyster]

works great, thanks again! about tid changeable tags, nothing cheaper than this $9.99 from mtoolstec?

[vernal cape]

nope, unfortunately. I heavily suspect mtoolsec and pisworld tid changeable tag are the same chip.

tags with such special functions are usually expenseive, same is true in NFC

https://github.com/klks/UHF_RFID_Notes/blob/main/TAGS-ANTENNA.md#tid-changeable-tags here's some info on those tid changeable tags

well, actually, that's all the info I could find

[knotty oyster]

funny thing is that in my city someone advertises that he can clone uhf with tid for $10, I have to ask where he buys it if it's profitable for him

[vernal cape]

clone what? UHF RFID is used in a lot of different systems and applications

[knotty oyster]

in this case a parking card

[vernal cape]

ah, yeah. mrkeyfob?

[knotty oyster]

just private person, nothing fancy

he doesn't want to say where he got it from, i asked him :(:(

[vernal cape]

interesting

[harsh igloo]

someone advertises
...
private person
These seem at odds, or maybe they're just running a lowkey business?

[knotty oyster]

exactly, small offer on the sales portal

[harsh igloo]

sales portal?

[knotty oyster]

website where you can list your services and new/used equipment, something like ebay(?) idk

nvm dead end

[harsh igloo]

link?

[knotty oyster]

pv

[harsh igloo]

https://www.olx.pl/d/oferta/dorabianie-kart-zblizeniowych-uhf-CID628-ID10XcYz.html

[vernal cape]

more like craigslist then

[tender estuary]

Silly question, epc is rw, tid just r. Is there any way to modify the entire area of memory from EPC? I mean the PC and CRC.

[vernal cape]

CRC no, it's dependant on the PC+EPC. PC can be changed

[harsh igloo]

which isn't to say the CRC doens't change, just that what it will be is not freeform, it is, well...a crc

[tender estuary]

I bought a tid rw tag from piswords and a reader as well. Tried to modify the exact pc 16 bits but I did not managed to succeed. Tried with other tags and the same. I was thinking that is a kind of a protection for the tag or something but maybe is just a problem with the software and I will have to write my own program abusing the sdk

[vernal cape]

Rewriteable TID tags are a league of their own and do not necessarily obey standards (certainly not GS1 xD) . PC might be locked. Since there's no datasheet, there's no way of knowing without trying

[vernal cape]

@eager moss @shy wadi , do you remember how you implemented the commands for the apps?
I'm trying to make sense of some custom commands for temperature sensing tags, but it just doesn't add up in my brain

EM4325 chips

page 36

[eager moss]

mine is in the uhf_modules i think

i’ll have to go back to it

[vernal cape]

ah yeah, found it.
https://github.com/frux-c/uhf_rfid/blob/master/uhf_module_cmd.h
yeah it just reinforces my lostness, how tf are you supposed to encode a single bit as a word?? just zfill with zeros??

[vernal cape]

yeah, idk how this shit works

plus the docs for the M100 module seems poorly translated

[shy wadi]

Yea the docs are poorly translated.

I plan to get some of those bug fixes completed in the next month or two. Work has been extremely busy but glad help whenever I can.

[vernal cape]

That's awesome to hear! Take it easy, what you and frux have accomplished is already a lot, bugs or not!

[vernal cape]

BAM!

happy first of march!

https://github.com/Didgitalpunk/UHF-tag-and-IC-database/blob/main/TID encoder.py

TID encoder, for your TID encoding needs!

please make issues with anything you find could use work, and any bugs that might arise!

even stupid shit!

[vernal cape]

bugfix update!
https://github.com/Didgitalpunk/UHF-tag-and-IC-database/blob/main/MDID_Search_Engine.py

[shy wadi]

Planning on getting to some bug fixes in the next few weeks after I am done traveling. Life has been chaotic recently between work and dealing with family stuff 😅. If there are any other bugs/feature requests that you have please open up a GitHub issue here so that I can properly track it. https://github.com/haffnerriley/Simultaneous-UHF-RFID-FlipperZero Thanks so much and sorry for the delay with the app.

[vernal cape]

feature update on the TID encoder! you can now pair it with digits'_MDID_list.json to be able to select manufacturers and chip models through two drop-down menus!
https://github.com/Didgitalpunk/UHF-tag-and-IC-database/blob/main/TID encoder.py

[shy wadi]

Working on debugging/fixes a little right now. Was wondering if others have more success using 384000 as the baud rate. I am able to read much more consistently with this baud rate. If you have the time please check out using 38400 as the baud rate and let me know if it works. I am pushing a new release that allows you to pause the EPC value that scrolls on the read screen (press and hold the up arrow). Also changed the name for the connection to show Disconnected and Connected (hopefully that is clear). Will be working on fixes to reading with 9600, and 115200 baud rates. 38400 seems to work just fine for me.

[vernal cape]

all of that sounds wonderful!

[vernal cape]

I think you might be the only one who can test the baud rate change, as the YRM modules are locked to 115 200 afaik

[shy wadi]

I was able to read with the yrm100 using different baud rates. 384000 worked the best for me

Just released the changes to epc scrolling and connection setting labels. Feel free to try it out (should make its way into the flipper app catalog later today/tmrw). https://github.com/haffnerriley/Simultaneous-UHF-RFID-FlipperZero

[shy wadi]

Update was just released in the flipper App Store

[shy wadi]

FYI: If you are using this app and having issues with reading please see these steps:

In order to change any reader settings, you must have connected to the reader first. For instance, to change the baud rate, ensure the reader is connected and you have toggled the connection from the configure menu. Next, change the baud rate, region, power, etc...

I still need to adjust reading settings with the baud rate but in my recent testing 384000 should be working with minimal crashing. It appears to work for others as well.

As always, feel free to reach out with questions/concerns/comments. I monitor for new GH issues so that is the ideal place to track bugs! Thanks!

[stone hound]

This worked for me. I was able to read multiple tags without a single crash after following those steps.

[vernal cape]

<@&932724996210573333> could someone pin this pretty please?

[next kelp]

[vernal cape]

noice, thank you

❤️

[dry jay]

It's entirely possible. The gate I use is UHF.

[vernal cape]

wrong post 🙂

[dry jay]

Yeah... I just noticed that. I'm a little behind too. It's been a few months. Jeez.

[vernal cape]

^^

[vernal cape]

Good news for the future flippermeister modules I'll sell on tindie: there will (most likely) be 3d printed cases available as an option!
No color defined for now (though at least black, would love white and transparent, we'll see) and no pricing just yet as I still need to calculate material and time costs.

[wicked wigeon]

1 would that also fit the modules already sold
2 if so can we get an stl to print one ourselves?

[vernal cape]

1 - it wouldn't because the PCB layouts have changed
2- uuuuuh.... I might have already posted the 3D files for the V1 version you have in my git, I'll check

yep, had done so!
https://github.com/Didgitalpunk/UHF-RFID_SAM-interface_Board/tree/main/Case

[wicked wigeon]

Thank you! I somehow missed it lol

[vernal cape]

no worries!

[vernal cape]

I can probably offer it as an add-on if asked, though I figure most folks who bought my module are the tinkering type with the 3d printers

[wicked wigeon]

Normally, yes. I lack the space for one myself, so rely on bugging the kindness of my friends

[vernal cape]

^^

[vernal cape]

First two need rework on the picoblade connectors

[vernal cape]

Only through holes left in this first batch of 15, but that's for tomorrow

[stark bay]

Your setup looks much more legitimate than mine 🤪

[vernal cape]

🤭 Now you have to show us, you know that!

[stark bay]

I looked through both times I did a build and I don’t have photos. But I had no part holder or part suction placer. I had to use tweezers and a tiny hot plate.

[vernal cape]

Aww, shame on the no photos!
Yeah, the part holder is the best addition, it's actually right off of the Lumen PNP repo. Tiny hot plate is an improvement on me, mine is literally a toaster I picked up off the curb xD

Suction placer is really nice, and you can whip one up with very few parts which is nice

[stark bay]

The little hot plat was really fun to watch it all melt but also scary as I was balancing stuff on this super hot thing.

[vernal cape]

heheh, I changed my operating procedure with my toaster because the plastic neon indicator cover started melting xD