iiinova — where your digital self keeps evolving

ATC1441 @atc1441.bsky.social · 23/09/2026

To share a genuine AI state: (A)I Did just port DOOM onto the Saphe T Speedcam/Radar Warner in 2 Hours🤯😢 A quite nice 30€ nRF BLE gadget with: -High Res OLED -Full Touch -Lux Sensor -Battery -ACLL Impressive Flex PCB setup AI Trigger warning! Video: youtu.be/ETbbDJ1tk68

110

ATC1441 @atc1441.bsky.social · 08/08/2026

Another mandatory DOOM Port finished...😅 This time on an still unknown but fully reversed Chinese SoC. The 6€ 104 Games Action Console as well as the 13€ PacMan Nice Challenge and quite playable YouTube video: www.youtube.com/watch?v=jsV_... Full Source: github.com/atc1441/Acti...

010

ATC1441 @atc1441.bsky.social · 03/07/2026

Successfully reverse engineered the cloud bound 15€ OBI Energy Tracker to get it fully on local setup Either by using it via an custom ESP32 AP or by getting the stock AP to connect to your server🥳 Hack Video youtu.be/U4Vvf0kHnEk German howto video youtu.be/2jMEaRuSJ18

2100

ATC1441 @atc1441.bsky.social · 01/07/2026

Finished the latest hacking project🥳 A deep look inside of the AOHi 280W USB Desktop charger ended up in a replacing Custom firmware^^ 🎬Here: youtu.be/1UGUZloDsPU Source code: github.com/atc1441/AOHi... Fun challenge to 95% replicate the firmware and add extra features to it

391

ATC1441 @atc1441.bsky.social · 29/06/2026

Finally found the right Registers to toggle on the MiBand 9 / 10 and its BES2700iMP Best1503 SoC to enable the Quad-SPI and its 50mhz DMA transfer Allows up to 100 FPS Full screen at 212x510 RGB565 Pixel🥳 Doom round can start. Explanation video on YT🎥: youtu.be/oFswl8FKiRo

youtu.be

Fully Hacking DOOM onto the MiBand 9 / 10 Full Quad-SPI Display driving

YouTube video by Aaron Christophel

050

ATC1441 @atc1441.bsky.social · 20/06/2026

Finally hacked the MiBand 9 and 10 SoC The BES2700iMP was until now fully closed and without any public SDK/Hacks. By using the leaked IHC SDK I was able to run a full custom firmware to of course Play some DOOM on it! 🎬 www.youtube.com/watch?v=XdoP... GitHub: github.com/atc1441/MiBa...

0192

ATC1441 @atc1441.bsky.social · 06/06/2026

TL;DW: Claude One-shotted a python Video player for this mini 10€ Smartphone Viewfinder. Including the download of the needed Youtube video...

220

ATC1441 @atc1441.bsky.social · 23/05/2026

For sure the lately "trending" and super cheap Video Walkie Talkies are now also Doomed 🥳 Full video now on YouTube: youtu.be/5aRQLHLls0k Source code and Precompiled firmware is available here: github.com/atc1441/TXW8... When Multiplayer?😅

180

ATC1441 @atc1441.bsky.social · 23/05/2026

Fun fact, a web upload trigger gives you root read access on the Tolino Vision Color, but im not even sure if they are in general just more open for tinkering. 7" Full Color Linux eink reader for 200€ is anyway more on the expensive side

050

ATC1441 @atc1441.bsky.social · 16/05/2026

Just finished an new E-Paper firmware SoC port🥳 The long hated Realtek RTL8762ESL and RTL8752HJL now got a fully featured ATC_RTL_BLE_OEPL Firmware and so have full OpenEpaperLink Support Released on GitHub: github.com/atc1441/ATC_...

0152

ATC1441 @atc1441.bsky.social · 29/04/2026

Sadly a bit to simple to pull off^^ Doom running on the GL-iNet Slate 7 Pro Travel Router www.youtube.com/watch?v=9gOM...

youtube.com

Doom on the Slate 7 Pro Travel Router - GL-BE10000 GL-iNet

YouTube video by Aaron Christophel

010

ATC1441 @atc1441.bsky.social · 13/04/2026

Just finished Porting of Doom onto a toaster: www.youtube.com/watch?v=8Pfr...

youtube.com

Doom on a Toaster ...

YouTube video by Aaron Christophel

050

ATC1441 @atc1441.bsky.social · 24/02/2026

New toy, Pudu Food delivery Robot. Doom runs fine on its internal Android RK3399 NanoPC-T4 Basically an over engineered Hoverboard with two RealSense D435 3D Cameras and Lidar Longer video on YouTube: youtu.be/cBzTto2OIDQ

140

ATC1441 @atc1441.bsky.social · 09/01/2026

Finally there is DOOM on a Cooking Pot... Nice hacking challenge of a way over-engineered "Smart-device"! Inside we can find 4 SoC's from 4 companies: Heat control via STM32F031 Input button via PIC18F8.. Wifi via ESP32 Main FW Renesas 400Mhz ARM A9 Full video on YouTube: youtu.be/V5Jtc7wTbQ8

063

ATC1441 @atc1441.bsky.social · 05/01/2026

Crazy that the Smart BLE Ring with a Matrix Display is real🤪 But something is strange this claimed unknown PAR2860 SoC(If that is really inside the ring) looks very much like the firmware of the 7 Segment Ring (DA14585 SoC) but is still different. maybe a cloned DA14585?

172

ATC1441 @atc1441.bsky.social · 23/12/2025

What's better then a Smart Ring with 7 Seg Display? A Smart Ring with matrix Display! 20€ version on Aliexpress(Affilia) s.click.aliexpress.com/e/_c4aEitU1 Main BLE SoC PXI PAR2860 with 512KB Flash and 32KB RAM Still on order but excited to Hack it next! Previous Hacks in next comment

120

ATC1441 @atc1441.bsky.social · 05/12/2025

The Simple nRF52832 Spectrum Analyzer is now working on the Allmiibo LCD and OLED Variant🥳 Fully OTA Updateable from pixljs and back Find the Source Code of the pixlAnalyzer now here: github.com/atc1441/pixl... And a YouTube Explanation Video here: youtu.be/kgrsfGIeL9w

050

ATC1441 @atc1441.bsky.social · 17/11/2025

Just finished Hacking the Pill Camera that you'd swallow for an easy endoscopy Ti CC1310 SoC Glitched and Dumped which allowed to Reverse Engineer its firmware and RF Protocol up to full Image receiving🥳 No security included but short range. 📽️🎬 here: youtu.be/qEIW5gOLzIs

1213

Reposted by ATC1441

Larry the optimizer @fast-code-r-us.bsky.social · 14/11/2025

New idea - use the #Raspberrypi to directly drive parallel Eink displays. Pictured - Kindle 6" 1024x758 34pin panel driven by a RPIZ2W and (one of a kind) custom PCB. youtube.com/shorts/LwGyG... Benefits - the RPI (or any Linux SBC) can create/push the pixels faster than any ESP32. low cost SBC.

youtube.com

RPI fast Eink

YouTube video by tdfsoftware

5134

ATC1441 @atc1441.bsky.social · 03/11/2025

Lets take a look inside one of those Aliexpress "Smart" Car Keyfobs which you can retrofit your "Lame" Car Key with 😅 TLDR: It does not run Doom 😞 The internal RTL8762TD Hast sadly "only" 192KB of RAM Find the Teardown video here: youtu.be/oAmtu87EdYo

050

ATC1441 @atc1441.bsky.social · 13/10/2025

Lets take a look inside one of those tiny Pill Cameras that you swallow to check your innards😳 Video on YouTube: youtu.be/pf_eOLRd6B4

youtu.be

Pill Camera Teardown, Capsule endoscopy

YouTube video by Aaron Christophel

050

ATC1441 @atc1441.bsky.social · 09/10/2025

Finally there is code execution on this Shi**y Realtek RTL8752H and RTL8762ESL ARM SoC🥳 Full custom firmware goes Brrrrr These chinese vendors like Realtek Bluetrum and Jieli only care about copy protection and cribble down a perfectly fine ARM Core with their tooling🙄

050

ATC1441 @atc1441.bsky.social · 20/09/2025

Teardown of the Tuya KWS-303WF Wifi Power Meter including cut-off Relay Inside we can find: - Tuya CBU Modul with Beken BK7231N ARM SoC 2MB Flash 256KB RAM - Relay claimed 63A - Power Meter - LCD 60x160 Pixel - External NTC Temp Sensor aliexpress.com/item/1005008...

020

ATC1441 @atc1441.bsky.social · 20/09/2025

Teardown of an OBD Find My Adapter from Aliexpress aliexpress.com/item/1005007... As expected as simple as it could get, 3.3V Voltage Regulator with an currently unknown BLE SoC ESM412 2449XFD No connection to CAN and OBD just for power

110

ATC1441 @atc1441.bsky.social · 20/09/2025

DOOM on a Vape via ScreenSharing and custom Firmware 😁 Source code on Github here: github.com/atc1441/Vape... And find a full video on Youtube with more details: youtu.be/rVsvtEj9iqE

010

ATC1441 @atc1441.bsky.social · 18/09/2025

Teardown of the 2" LCD Screen Mirror device ~20€ From Aliexpress s.click.aliexpress.com/e/_oCyfENx Surprisingly packed - Unknown DH390D HT2522A SoC likely HiChip HC15xx 4MB SPI Flash - Battery Powered - Speaker - Realtek WiFi Chip - Jieli BLE SoC Similar to youtu.be/pFBn6lMJ7q8

040

ATC1441 @atc1441.bsky.social · 11/09/2025

Fun fact this 3€ USB-C to Headphone converter has more Flash and RAM then the first moon landing. de.aliexpress.com/item/1005009... The internal RISCV Bluetrum SoC AB136D got: 128 KB Flash 60 KB RAM Perfect USB Rubber Ducky, easy to reflash without opening via the USB DP Pin🤪

1213

ATC1441 @atc1441.bsky.social · 09/09/2025

Also got the OLED Amiibo Emulator😅 Sometimes for < 8€ in the combo offers! aliexpress.com/item/1005008... They are just too cute and a nice Hackable gadget with everything included in a small case. nRF52832 SoC SPI Flash LCD/OLED NFC Battery Arduino able x.com/atc1441/stat...

060

ATC1441 @atc1441.bsky.social · 09/09/2025

Teardown massacre of random 2€ Aliexpress Airpod clones 😅 80% Bluetrum (AB) and 20% Jieli

030

ATC1441 @atc1441.bsky.social · 08/09/2025

While not a full custom firmware you can find the current Bluetrum AB5682 SoC Hacking results here github.com/atc1441/Blue... This SoC Is used in the A9 Pro Airpod Clones and many more cheap BLE Gadgets. Quite Beefy for its price: RISCV 2MB Flash 162KB RAM 98KB ROM

110

ATC1441 @atc1441.bsky.social · 03/09/2025

Thats Code execution on the infamous AB5682B BLE SoC used in the cheap headsets and other BLE hardware🥳 This Bluetrum Chip series is ugly 😅 Debug via 1 Wire UART and a somewhat secured proto This code now runs from RAM since we next need a loader to dump an write to Flash

030

ATC1441 @atc1441.bsky.social · 29/08/2025

Why does this aspire PIXO Vape got a hidden BLE Chip inside? 🤔 Internals: Puya PY32F403 ARM SoC 256kb flash 64kb RAM 16MB External flash LCD with Full touch Unmentioned WS8000 BLE Module Full hackability with an USB Flash drive update not including any CRC or sign checking🙌

040

ATC1441 @atc1441.bsky.social · 28/08/2025

One more Doom port^^ This time on an Epaper Translator🥳 Running an XR872at SoC and an 296x152 BW E-Paper display with around 400ms of refresh time Find a teardown done some time ago here: x.com/atc1441/stat... Full Youtube video here: youtu.be/PvTJpbVPxUo

050

ATC1441 @atc1441.bsky.social · 27/08/2025

Lets take a closer look inside an 20€ Aliexpress Alarmo clone "Smart AI Kids clock" based on the XR872ats SoC And of course port Doom to it😅 Full Teardown Youtube video: youtu.be/QutpZBTJRDY Github repo with full source code: github.com/atc1441/XR87...

030

ATC1441 @atc1441.bsky.social · 24/08/2025

It had to be done 😅 DOOM on the Xiaomi Mi Band 8 Fitnessband Running super smooth on the Amoled Display and the custom firmware with toom on just 2MB of Flash Full video on Youtube: youtu.be/iqyR_LNp9vc

030

ATC1441 @atc1441.bsky.social · 18/08/2025

DOOM on the ANKER Prime Charging station😅 The internal SWM34S MCU is just way too nice! 8MB RAM + 16MB Flash directly mapped to memory goes brrrr Video on Youtube: youtu.be/MdOU8SqCqeY

0123

ATC1441 @atc1441.bsky.social · 16/08/2025

Quick teardown video of an Battery powered 4" LCD Screen Mirror device around 25€ from Aliexpress TLDR: Main SoC is an HCSEMI C3100 which is very similar to the one used in the 20€ Handheld Console SF2000 Video Here: youtu.be/pFBn6lMJ7q8

070

ATC1441 @atc1441.bsky.social · 14/08/2025

That's a success 🥳 Glitched and fully Dumped MSP430F417 in a non destructive way Doing a Read data CMD and glitching the check if the password was entered we can dump 240bytes at once By dumping the pass(vector) area we can read the full flash after one glitch bsky.app/profile/atc1...

150

ATC1441 @atc1441.bsky.social · 12/08/2025

DOOM on a Toothbrush? Sure! Info's to this, The Toothbrush contains an ESP32-C3 with 4MB Flash. With the codebase from Spritetm github.com/Spritetm/esp... and wad github.com/fragglet/min... I was able to get the complete size down to the 4MB🥳 (Reupload from you know where for the sake of history)

1151

ATC1441 @atc1441.bsky.social · 12/08/2025

Mendatory Dong DOOM ... In depth details in this Youtube Video: www.youtube.com/watch?v=rAE1... (Reupload from you know what platform for the sake of history)

040

ATC1441 @atc1441.bsky.social · 11/08/2025

Fun fact 50% of the (Latest)Firmware in the BLE Enabled Power Bank Anker Prime 27650mAh is just for OTA checking and encryption... Fw version prior to 1.6.2 do not verify OTA at all so better update😅 Did take a look inside and reverse engineered it github.com/atc1441/Anke...

181

ATC1441 @atc1441.bsky.social · 11/08/2025

Teardown of the nearly "All in One" Zigbee Sensor from Aliexpress: s.click.aliexpress.com/e/_opaf9hD Contains: - Telink TLSR Zigbee/BLE SoC 512KB/64KB - PHO XBR818 I2C 10G Move Sensor - WHT20 I2C Humidity Temp Sensor - Light Sensor - Led - Button Just missing a Door sensor to be perfect^^

040

ATC1441 @atc1441.bsky.social · 05/08/2025

Digged into the Gantner ECO NFC Lock The unlocked STM32L151 did give the Firmware and their Android MoLa App is nice to Reverse engineer still no Luck finding any holes😅 Learned a lot about NFC! The App will emulate an NFC Tag to configure incl. a both way Unique key Handshake

040

ATC1441 @atc1441.bsky.social · 30/07/2025

Interesting and relatively cheap Android Payment terminals (US Only 😔) available in masses on eBay Most likely locked to signed APKs so hacking needed☝️ www.ebay.com/itm/11591497... and similar in recommendations fccid.io/HFS-C300/Int...

110

ATC1441 @atc1441.bsky.social · 30/07/2025

DOOM runs fine on the 15€ 4G LTE Routers 😂 youtu.be/jung-yLB_Zs Turns out the MSM8916 is just running plain Android 4.4.4 which is even directly mapped to the 128x128 LCD... Basically a bad Android Phone with Hotspot turned on by default s.click.aliexpress.com/e/_okZ8ZXt

030

ATC1441 @atc1441.bsky.social · 28/07/2025

Unfortunately the latest Xiaomi Mi Band 10 does also use the same SoC BES 2700iMP as the Mi Band 9 🥲 Just did a quick teardown to find out its mainboard is 90% the same to the older version Video here: youtu.be/QmVwbeRdpVA No further hacking from my side these days.

020

ATC1441 @atc1441.bsky.social · 28/07/2025

Teardown of a few Aliexpress Hörmann Remote Clones Most interesting a Tuya WiFi Enabled one: s.click.aliexpress.com/e/_opwprH1 Which turns out to be just as simple as a standalone remote(4Buttons) connected to the Tuya CB3S Belkin BK7231N module and handled as just GPIOs

370

ATC1441 @atc1441.bsky.social · 27/07/2025

Another Heat cost Allocator looked into. This time an Ista non RF Variant. Decapped Blob turns out to be an MSP430C413 8KB ROM 256 Byte RAM Other than that its just: - Custom LCD - 2 Temp Sensor - CR2477 Battery - IRDA Interface Not much to "hack" on without RF and ROM based SoC

040

ATC1441 @atc1441.bsky.social · 26/07/2025

Teardown of an random LCD Temperature Logger which is used to export the history data a PDF CSV or TXT Powered by just an CR2450 and claim of 1 year lifetime s.click.aliexpress.com/e/_onjSQYR Inside we can find: - NTC Temp Sensor - STM32L073RBT6 ARM SoC - SPI Flash 25Q64 1 MB - Custom LCD

040