ATC_MiThermometer from 2.1.1_0159 OTA Firmware upload exploit Xiaomi Thermometer

Поделиться
HTML-код
  • Опубликовано: 26 янв 2025

Комментарии •

  • @DerEchteAndreas
    @DerEchteAndreas 14 дней назад +4

    I've ordered 4 from aliexpress and they arrived today - your video is just in time!

  • @danielg9275
    @danielg9275 14 дней назад +9

    My right ear loves hearing about exploits, very cool!

  • @yimmay35734
    @yimmay35734 14 дней назад +2

    Woohoo, I just got one thermometer a week ago and could not flash the custom firmware. Now it's going to be useful, thank you for this!

  • @SomeoneBloodyRandom
    @SomeoneBloodyRandom 14 дней назад +2

    Idea: Allow pasting of the data from the extractor python script into the webapp.
    You would copy the block of text in the extractor, and when you paste in the first field it checks to see what you have pasted is multi-line, if so it iterates over the lines looking for the field ID string, if found it pastes it into the appropriate text box.
    But yeah, other than that, good job on keeping these thermometers flashable. I have a number of them dotted around the house all running the custom FW 🙂

  • @Sakistns
    @Sakistns 8 дней назад +2

    Tried multiple times but the device freezes after installing ATC exploit. Removing and re-inserting the battery shows nothing on display. Then, only way to make it work is to reverse to stock firmware. Any idea?

  • @jackjones6936
    @jackjones6936 6 дней назад +2

    Can I flash Zigbee firmware on this after the exploit firmware?

  • @Eiapopeia-f1e
    @Eiapopeia-f1e 14 дней назад

    please release the exploit, can't wait :D Thank you for your great work!

  • @dl8cy
    @dl8cy 12 дней назад

    Awesome job ... thanks for sharing..... DANKE

  • @erics836
    @erics836 4 дня назад

    Do I need to run this firmware before I flash it with open bluetooth/zigbee firmware or is it enough to log in with the keys and then run new firmware?

  • @Minionz
    @Minionz 11 дней назад +1

    Hello! Might it be advisable to dump your keys now. Is it not possible for Xiaomi to prevent the dumping of keys from the server in the future? Hopefully the exploit releases not too long in the future. I have purchased these for tracking the humidity of filament, and would like to add to HA in order to be notified when descant needs to be replaced. Thanks for all your work!

    • @atc1441
      @atc1441  11 дней назад

      Yes, best to have them then never 👍

  • @fairozjaffer8811
    @fairozjaffer8811 13 дней назад

    Wonderful news. Thanks for sharing

  • @diggie9598
    @diggie9598 14 дней назад

    Thanks for your work.
    I own 2 of these, but only 1 is getting recognized by home assistant via BTHome.
    The other one can integrate via the MI integratin, but temp and humidity are not available.
    May this flashing method be a way to get the other one on board?

  • @Pubiro
    @Pubiro 14 дней назад

    Good news for me. Thankd

  • @frowin2
    @frowin2 11 дней назад

    I do this update via Chrome/BLE since years, always worked. Does your video mean, that recent models from aliexpress didn't allow for this? So I was just lucky to had some old stock or ordered early enough?

    • @atc1441
      @atc1441  11 дней назад

      Yes, the newer ones with version 2.1.1_0159 added the signed OTA which is now bypassed :)

  • @flo0r1an
    @flo0r1an 13 дней назад

    hi there, thank you very much, this worked like charm. but how can i get zigbee on that custom firmware? a update to z03mm.bin didn't work?

  • @salmankama2702
    @salmankama2702 8 дней назад

    Servus mein lieber. Mal eine Frage. Ich habe nachdem ich meinen gebricked habe. Ihn wieder zum laufen gebracht dank deiner Anleitung.
    Aber ist es möglich die neueste Version irgendwie zigbee fähig zu machen ?
    Oder was bringt mir das Flashen des exploits ?

  • @mmisovic
    @mmisovic 14 дней назад

    Well done ! Good job !

  • @sunrunnernge560
    @sunrunnernge560 14 дней назад

    Great news!!

  • @girlmaya6818
    @girlmaya6818 11 дней назад

    What is the point? Is it cheaper than the price of its components?

  • @dandandroid
    @dandandroid 10 дней назад

    I get the error message that the firmware is not a telink bin file. Any idea what's wrong here? Downloaded everything via the Github repository linked here.

    • @atc1441
      @atc1441  10 дней назад

      You need to download the raw .bin file from github

    • @dandandroid
      @dandandroid 7 дней назад

      @@atc1441 haha... simple as that... thanks for your help!

  • @MrTubertub
    @MrTubertub 13 дней назад

    Did you also have found a cheap sensors that can also measure the air quality ?

    • @atc1441
      @atc1441  13 дней назад

      Most cheap air sensors are fake!
      Its best to get the IKEA one even if a bit more

    • @MrTubertub
      @MrTubertub 12 дней назад

      @atc1441 Thank you for your feedback. The Ikea Vindstyrka price is good but it is getting many bad reviews.

    • @frowin2
      @frowin2 11 дней назад +2

      Most sensors don't measure CO2 but CO2 "equivalents". These "equivalents" are gases exhaled by humans and sensor take a coefficient to estimate the CO2 produced by humans. Proper CO2 sensors (only sensor) start at like 15€ on aliexpress. That's atleast what I remember from lockdown times.

  • @WaschyNumber1
    @WaschyNumber1 14 дней назад

    Very cool, is it possible to get the token over android?

  • @SvenKillig
    @SvenKillig 14 дней назад

    Great 👍

  • @DaveBrown1
    @DaveBrown1 2 дня назад

    Hi, anyone got the link to the correct model on aliexpress Please.

  • @rgolab3174
    @rgolab3174 10 дней назад

    Is there any way to undo the update back to Xiaomi firmware? My thermometers worked fine with Xiaomi gate and software but out of curiousity I flashes a few of them so U could use them with my Zigbee gate. Zigbee ones just keep giving me problems, they keep disconnecting from gates but they worked fine with Xiaomi gate. Any way to flash customer firmware back to Xiaomi?.

    • @atc1441
      @atc1441  10 дней назад

      github.com/atc1441/ATC_MiThermometer?tab=readme-ov-file#usb-to-uart

  • @sigmuller8460
    @sigmuller8460 10 дней назад

    Kann ich auch zigbee auf die Sensoren flashen hab nämlich zigbee2Mqtt auf Homeassistant und würde gerne den Sensor so hinzufügen (bin noch relativ neu in dem Thema Homeassistant)

  • @CraigFryer
    @CraigFryer 11 дней назад

    I keep getting stuck at "Activating now, please wait..."

    • @atc1441
      @atc1441  11 дней назад +1

      Its the wrong activation key/token then

  • @Алексей-ч3д1г
    @Алексей-ч3д1г 10 дней назад

    It's too bad that neither the Smart Life app nor my Bluetooth hub sees this thermometer with your firmware.

    • @atc1441
      @atc1441  10 дней назад

      Hey, yes the custom firmware is made to get rid of those Apps 👍

    • @Алексей-ч3д1г
      @Алексей-ч3д1г 10 дней назад

      @@atc1441 I understood.Then the zigbee project will suit me better.✌

  • @pausecafe8533
    @pausecafe8533 14 дней назад

    Good job mate

  • @DaveBrown1
    @DaveBrown1 14 дней назад

    Thanks, another great video. All the best for 2025 dude

  • @abberoon572
    @abberoon572 13 дней назад

    Ok? But what it doing?

    • @atc1441
      @atc1441  13 дней назад

      ruclips.net/video/NXKzFG61lNs/видео.html

    • @Eiapopeia-f1e
      @Eiapopeia-f1e 13 дней назад

      you can flash it to Zigbee for example

  • @arjuna207
    @arjuna207 14 дней назад +1

    i remember i flashed the firmware without the middle step, from the telink flasher page. i connected to the device, activated it, flashed the custom 49 version of the firmware. why is this different?

    • @bednim
      @bednim 14 дней назад +4

      devices with new FW could not flash it

  • @everitt11
    @everitt11 9 дней назад

    interesting video, but struggling to login to token_extractor :(, not sure if it's just me though...
    Getting to the login, it's asking to 2FA for the account, so follow the link, 2FA then restart .py, but it's a constant loop
    Update: Managed to get 14 new LYWSD03MMC sensors which were stuck on the 2.1.1_0159 firmware, flashed with ATC, then converted over to being Zigbee nodes
    Initial fix is within my reply comments below

    • @atc1441
      @atc1441  9 дней назад

      Try to create a complete new account

    • @everitt11
      @everitt11 9 дней назад

      @atc1441 I have tried that 3 times with 3 different emails, I think it's because it's forcing me to GB_UK
      But that's not in the list?
      Even though I defaulted to DE, I have GB_UK on the end of my 2FA URL

    • @everitt11
      @everitt11 8 дней назад

      @@atc1441 Spent some time trying to figure it out, on one of the new accounts, I tried to disable the 2FA but it couldn't find that any more in the account section...
      But seen in one of the issues of the repo about using User ID and not email address, logged me straight in and recieved my keys and token, thanks many thanks again to both / all of you :)!!

    • @jackjones6936
      @jackjones6936 6 дней назад

      @@everitt11 How did you convert to Zigbee firmware? The Zigbee custom firmware github links to a different web flasher that doesn't connect to my thermometer after installing the exploit. Did you follow the github and flash ATC_ota_40000.bin and then z03mmc.bin via the OTA web flasher used in this video?

    • @everitt11
      @everitt11 6 дней назад

      @@jackjones6936 Yes that it correct, I have found though using this approach... zigbee2mqtt is complaining about "device is only compliant to revision 21" for the new LYWSD03MMC sensors I have flashed using this approach, so still umming and arring if I stay on zigbee, or push them back to bluetooth

  • @dvsur
    @dvsur 9 дней назад

    Loriswrld

  • @matteohoeren
    @matteohoeren 13 дней назад

    Unfortunately, it doesn't work for me. Followed the instructions in the video, Login is successful, however after flashing the Stock FW / the Exploit, the Firmware still seems to be the 2.1.1_0159 one (not costum). With another Thermometer i tried flashing via UART, also didn't seem to work, erased flash, now it doesn't show anything which means at least that worked. I'll try to flash the "empty" thermometer again via UART i guess. Thanks for all your work & investigations!

    • @atc1441
      @atc1441  13 дней назад

      Please redownload the stock firmware once more from the repo and reflash like before, i just changed that to a better version

    • @matteohoeren
      @matteohoeren 13 дней назад

      @@atc1441 Thanks! That worked! However my display is empty now. The Costum firmware is detected and the device shows up as ATC.

    • @atc1441
      @atc1441  13 дней назад

      If the display stays empty please use victors version of the firmware: github.com/pvvx/ATC_MiThermometer/blob/master/ATC_v49.bin
      The important part of removing any signing is done in any case :)

    • @Eiapopeia-f1e
      @Eiapopeia-f1e 13 дней назад

      @@matteohoeren reset the device by bridging the GND and Reset contact. I forgot how many seconds you need contact but the display is getting turned on and off by that, too

    • @SergiPolischuk
      @SergiPolischuk 12 дней назад

      in my case, it has been reflashed from the 2nd or 3rd attempt only. I am not sure if 2.1.1_0159c actually get there as Firmware Revision String: 2.1.1_0159 was without "C" after upgrade.

  • @Irilia_neko
    @Irilia_neko 14 дней назад +2

    It will be interesting to be able to adapt the sht45 sensor in place of the sht20 actually inside, also this thing is available unbranded for 1 or 2 € so in can open more opportunities I think 😉

    • @arizali_
      @arizali_ 14 дней назад +4

      I bought 6 of these unbranded one. Very low quality. Those contains a thermocouple for temperature measurement and resistive humidity sensor. Both sensors have low accuracy and reliability

    • @Irilia_neko
      @Irilia_neko 14 дней назад

      @arizali_ yes the sht20 is not really accurate.