Month: December 2019

Automatically created objects by a Philips Hue v1 App

These are the scenes that are created automatically by a Philips Hue v1 (bridge v1) App. They look suspiciously simple.

{
 "scenes": {
 "C2gX9ZsFSLMydOt": {
 "name": "Relax",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "cU9We_r01_d01"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:52",
 "version": 2
 },
 "R-tUrp2kHUfVJWS": {
 "name": "Read",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "W2dMg_r01_d02"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:54",
 "version": 2
 },
 "h-RPB4RxcyrQDCI": {
 "name": "Concentrate",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "Droce_r01_d03"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:54",
 "version": 2
 },
 "kWUGFVk5Gkg-XET": {
 "name": "Energize",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "tQhCU_r01_d04"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:54",
 "version": 2
 },
 "LnVW3KduPhXCJlU": {
 "name": "Bright",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "CoTkg_r01_d05"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:54",
 "version": 2
 },
 "fvS98qg-kFYxs2u": {
 "name": "Dimmed",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "AsAn0_r01_d06"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:54",
 "version": 2
 },
 "8kz7tFP9mqkRyg2": {
 "name": "Nightlight",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "zF0lY_r01_d07"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:54",
 "version": 2
 },
 "McJwqpyji8vD7OS": {
 "name": "Savanna sunset",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "jhaQr_r01_d15"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:54",
 "version": 2
 },
 "MMPiGjG4skqYWI1": {
 "name": "Tropical twilight",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "AEgR2_r01_d16"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:54",
 "version": 2
 },
 "eHtlKrxQ8QJY50C": {
 "name": "Arctic aurora",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "zWOx5_r01_d17"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:54",
 "version": 2
 },
 "kLbjwM-78e8Eawz": {
 "name": "Spring blossom",
 "lights": [
 "1"
 ],
 "owner": "xxx",
 "recycle": false,
 "locked": false,
 "appdata": {
 "version": 1,
 "data": "io4hD_r01_d18"
 },
 "picture": "",
 "lastupdated": "2019-12-16T17:33:54",
 "version": 2
 }
 }
}

as well as the rules created for a Philips Hue Tap

{
 "rules": {
 "1": {
 "name": "Tap 2.3",
 "owner": "xxx",
 "created": "2019-08-06T18:10:07",
 "status": "enabled",
 "recycle": false,
 "conditions": [
 {
 "address": "/sensors/2/state/lastupdated",
 "operator": "dx"
 },
 {
 "address": "/sensors/2/state/buttonevent",
 "operator": "eq",
 "value": "17"
 }
 ],
 "actions": [
 {
 "address": "/groups/1/action",
 "method": "PUT",
 "body": {
 "scene": "LnVW3KduPhXCJlU"
 }
 }
 ]
 },
 "2": {
 "name": "Tap 2.1",
 "owner": "xxx",
 "created": "2019-08-06T18:10:07",
 "status": "enabled",
 "recycle": false,
 "conditions": [
 {
 "address": "/sensors/2/state/lastupdated",
 "operator": "dx"
 },
 {
 "address": "/sensors/2/state/buttonevent",
 "operator": "eq",
 "value": "34"
 }
 ],
 "actions": [
 {
 "address": "/groups/1/action",
 "method": "PUT",
 "body": {
 "on": false
 }
 }
 ]
 },
 "3": {
 "name": "Tap 2.2",
 "owner": "xxx",
 "created": "2019-08-06T18:10:07",
 "status": "enabled",
 "recycle": false,
 "conditions": [
 {
 "address": "/sensors/2/state/lastupdated",
 "operator": "dx"
 },
 {
 "address": "/sensors/2/state/buttonevent",
 "operator": "eq",
 "value": "16"
 }
 ],
 "actions": [
 {
 "address": "/groups/1/action",
 "method": "PUT",
 "body": {
 "scene": "LnVW3KduPhXCJlU"
 }
 }
 ]
 },
 "4": {
 "name": "Tap 2.4",
 "owner": "xxx",
 "created": "2019-08-06T18:10:07",
 "status": "enabled",
 "recycle": false,
 "conditions": [
 {
 "address": "/sensors/2/state/lastupdated",
 "operator": "dx"
 },
 {
 "address": "/sensors/2/state/buttonevent",
 "operator": "eq",
 "value": "18"
 }
 ],
 "actions": [
 {
 "address": "/groups/1/action",
 "method": "PUT",
 "body": {
 "scene": "LnVW3KduPhXCJlU"
 }
 }
 ]
 }
 },
 "sensors": {
 "2": {
 "state": {
 "buttonevent": 34,
 "lastupdated": "2019-08-06T18:11:03"
 },
 "config": {
 "on": true
 },
 "name": "Living switch",
 "type": "ZGPSwitch",
 "modelid": "ZGPSWITCH",
 "manufacturername": "Philips",
 "uniqueid": "00:00:00:00:00:45:01:02-03"
 }
 }
}

Looking inside a Hue E27 bulb

I just stumbled upon this site, where fred27 have disassembled a White E27 bulb.

Part of his findings (everything below is his):

Onboard you’ll find the largest IC is a SAM21R21E18A. This is a nice 32-bit ARM microcontroller with built-in Zigbee. It’s the brains and communications for the device.

There are a number of test point accessible on the underside of the PCB. It took a fair bit of following traces, checking continuity with a multimeter and probing with an oscilloscope, but I managed to work out what many of these were for. This is what I found:

TP1 – Ground
TP2 – SWCLK
TP3 – SWDIO
TP4 – Serial TX
TP5 – Serial RX
TP6 – LED output (about 32V)
TP7 – Regulated 3.3V power to microcontroller
TP8 – RESET
TP11 – Ground
TP25 – power supply to LM2204 regulator

So there a number of interesting signal here. TP1 and TP11 are the signal ground for the microcontroller and logic circuitry. TP7 is the regulated supply voltage.

SWCLK (TP2), SWDIO (TP3) and RESET (TP8) are interesting. You’d need these if you want to load new firmware onto the microcontroller or debug it. Interesting stuff, but this is arguably starting to head over the ethical line of hacking. It’s more complicated than we need anyway.

The serial port (TP4 and TP5) are also interesting. You see some debug output on TP4 as the device powers up. Nothing as you use the device and switch the bulb on and off so not much use to us. Once again, more complicated than we need. If you want to take a look, it’s 3.3V TTL 115200 8N1.

I told you it was possible to play around with the device safely, and it is. NEVER power your device from the mains whilst poking around. If you have a clean 3.3V supply you can connect that to TP7 and power the device that way. Better still is to supply a slightly higher voltage to TP25. It’s usually at about 24V but even 5V (e.g. from a USB charger) will do the job. You might not be able to light up the LED board but it will connect to you Hue hub. At this voltage but you will be able to look at signals, but most importantly you’ll be able to do it safely.