url-image VS opensesame

Samy Kumar did a project about 10 years back, where he worked out how to brute force a 12 bit garage door code in under 10 seconds, using a childs toy: http://samy.pl/opensesame/

My garage door opener uses a 12 but dip switch config (and my last place used an 8 dip switch config, and I'm pretty sure still does).

Re reading that OpenSesame post was fun. It reminded me of a few names I need to go find out what they're up to these days (Travis Goodspeed and Michael Ossmann are names I remember seeing doing/writing-up some really cool stuff), and that the Mattel IM-ME toy he was using uses that same CC1110 "sub gHz"

At this point let's just cite his site http://samy.pl/opensesame/

Yes, there are only 512 combinations for a 9 bit receiver like this. More switches adds more combinations, but all of these style openers are susceptible to a "replay attack" where you record the signal from the opener and play it back later. They are also at risk of more sophisticated brute force attacks (https://samy.pl/opensesame/) Modern openers use a "rolling code" system that is safer, but the truth of the matter is that it is very very rare for anyone to exploit these old openers.

Functionally anything that can be attacked by OpenSesame can be programmed in, but that list is pretty small these days.

Perhaps someone could create a flipper compatible file using this existing opensesame source code

Hey all! Well, my flipper has finally arrived, and I'm delighted. I'm interested in exploring some minor development on it, and in particular was looking at trying to get samyk's opensesame attack working. As the code is all there on github, and his device used the same RF chipset. I presume it should be a relatively simple matter to get it going on the flipper, but not quite sure how to start with it, as I guess the dev docs are still only in Russian...