https://mjg59.dreamwidth.org/47803.html
Ikea recently launched their Trådfri smart lighting platform in the US. The idea of Ikea plus internet security together at last seems like a pretty terrible one, but having taken a look it’s surprisingly competent.
It’s running the Express Logic ThreadX RTOS, has no running services on any TCP ports and appears to listen on two single UDP ports. As IoT devices go, it’s pleasingly minimal.
That single port seems to be a COAP server running with DTLS and a pre-shared key that’s printed on the bottom of the device.
There is some more info on COAP and TRÅDFRI here:
https://bitsex.net/software/2017/coap-endpoints-on-ikea-tradfri/
4 Comments
Tomi Engdahl says:
Ikea ottaa uusilla lampuillaan ison riskin – testasimme saman tien
http://www.is.fi/digitoday/testit/art-2000005161057.html?ref=rss
Tomi Engdahl says:
Ikea Tradfri Hacking
http://hackaday.com/2017/06/14/ikea-tradfri-hacking/
Smart lighting is all the rage right now. Sure, Phillips Hue is the giant player in the market, but there are plenty of ZigBee, Bluetooth, and WiFi light bulbs out there. Ikea–known for cheap furniture, meatballs, and waffles–is a recent addition to the field with their Tradfri system. Like most things from Ikea, they are effective and inexpensive. [Andreas] takes a Dremel to the controller and shows how to hack the system to use MQTT. You can check out the video below.
Once he had the device opened, the used the German Make magazine article we talked about earlier, to help understand what he had. Armed with the pinout, he was able to solder a wiring harness to the controller. He then connected a WeMos board. A little Arduino code later, and he was controlling the light with MQTT.
#140 IKEA Tradfri IOT Smart Lighting System Hack
https://www.youtube.com/watch?v=olxPqiJcUAQ
In this video, I will hack the Tradfri remote control and enable it to be used with MQTT
Tomi Engdahl says:
Hacking the IKEA Trådfri Light Bulb
https://hackaday.com/2017/11/17/hacking-the-ikea-tradfri-light-bulb/
[BasilFX] wanted to shoehorn custom firmware onto his IKEA Trådfri light bulb. The product consists of a GU10-size light bulb with a LED driver as well as IKEA’s custom ZigBee module controlling it all. A diffuser, enclosure shell, and Edison-screw base give the whole thing the same form factor as a standard A-series bulb. The Trådfri module, which ties together IKEA’s home automation products, consists of an ARM Cortex M4 MCU with integrated 2.4Ghz radio and 256 Kb of flash — not bad for 7 euros!
Coincidentally, [BasilFX] had just contributed EFM32 support to RIOT-OS (“the friendly OS for IoT”) so he was already halfway there. He used a JTAG/SWD-compatible debugger to flash the chip on the light bulb while the chip was still attached.
Custom firmware on an IKEA TRÅDFRI light bulb (Tradfri hacking)
https://www.youtube.com/watch?v=yi_Z2WtmdDU
Tomi Engdahl says:
Ikea Tradfri LED power supplies with wireless receiver are cheap and easily modifiable. Some of them have accessible SWD programming headers allowing openocd to debug and modify the firmware.
https://trmm.net/Ikea