Xiaomi has released new 2.1.1 firmware #298
Comments
|
Thank you for the hint. |
|
Not closed, but changed the "activation". + Changed the "advertising interval" to 2100 ms A piece of the activation log (sniffer + MiHome): |
|
Thanks Victor, I would expect them to sign the activation on the server side with an unknown private key but lets hope not |
|
Can i downgrade via Uart? With correct key/token cannot downgrade or change fw. Even if login is correct and OTA seems to work, it doesn't . |
|
I haven't clarified the whole process yet. It is quite possible that because of these "security worries" Xiaomi has changed the activation and "OTA": PS: I can't clarify because I adhere to the "user agreement" in "MiHome". It is forbidden to view their code and other manipulations with it. And no one wants to publish the binary file of the new official firmware for public access :) |
|
is this going to get fixed please? thank you |
|
And I just updated the firmware without checking in here 😞 |
|
I've made the same mistake by updating to the latest firmware. Hope this will be fixed soon. |
|
So for those of us who updated to the latest firmware, is there any way to downgrade when the flasher does not connect due to being on unsupported firmware? Catch 22 situation! |
|
I also can't flat on 2.1.1_0159 version, let me know please it if possible or not. Thanks! |
|
At the moment, you can only write another firmware using a hardware programmer. |
How would I go about doing that? |
|
damn, got it with the new firmware so cant install the custom also :( |
|
A hint may occur when a new version is released. When it will be possible to upgrade version 2.1.1_0159 in Mi Home to the next one. |
|
To go back to the old version (Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin );
|
|
I have no idea about this. https://github.com/atc1441/ATC_MiThermometer/blob/master/Mi_SWS_Connection.jpg |
|
The very name of the utility describes: TLSR825x USB-COM Flash Writer v0.4 (TX-SWS only!) :) The picture is from another version of the programmer - https://github.com/pvvx/TlsrComSwireWriter - does not work on FTDI chips! Comment edited: Fixed a link error. |
Are you saying that I am enough like this? |
Yes |
Why didn't this method work? https://pvvx.github.io/ATC_MiThermometer/USBCOMFlashTx.html This method worked. Thank you very much for your sharing. |
https://github.com/pvvx/TlsrComSwireWriter - does not work on FTDI chips! (Only Chinese USB-COM chips) On FTDI chips, reception is performed by checking bitwise synchronization with the removal of bad characters from the buffer with error generation, which does not allow emulating "Telink Swire". https://github.com/pvvx/TlsrComProg825x - this programmer uses a loader that switches to work with the RX and TX chip UART pins.
|
|
Hi, So, after sharing my disgrace... How hard is to get one of this USB-COM board and use it to downgrade? any link from Aliexpress? |
Hi. Downgraded using this ch340 usb to ttl rs232 converter: |
|
Maybe I can't differently, but flash by site only works on Windows "machine". On MacBook I bricked by flash. On Windows "machine" I recovery firmware without problems :) |
Hi Guys, However I didn't used the board referenced by @tharzo, I got with a Friend the FTDI 232 and followed the steps passed by tarzho. I did the downgrade of my firmware from v2 to v1 and then flashed it with the custom firmware v4.5 successfully!!
|
|
I'm not that familiar with soldering and boards, so I decided to buy a new one from Ali, from the same shop as my previous one. It was shipped very fast and fortunately the firmware version of the new device was still on v1.0. |
|
Is there any expected date when soft 2.1.1 will be supported by Telink Mi Flasher? I was not able to downgrade by Serial |
|
So far no one is doing this or it is unknown. Disassembling or otherwise viewing codes from Xiaomi is prohibited in the MiHome user agreement. For this reason, other methods that are not prohibited will be used. And this requires the next new version of OTA from MiHome. |
|
mais après quand je rallume le thermomètre plus rien a l'écran |
|
Guys, just successfully downgraded using ch340g (no jumper, or resistor. just 2 wires).
UPD UPD 2 Step-by-step
|
|
do your "Step-by-step" work for rev 1.5 ?
|
Yep. Downgraded one 1.4 and four 1.5 devices |
Had no luck on macOS. |
Awesome! Thank you very much! Works well. Edit: Edit2: |
|
Amazing, I received 10 unicorns today - hardware B1.5 and still on the 1.0.0_0130 firmware. Sticker on the box suggests 2024.01 manufacture date. They’re still out there, I guess! I was prepared to go this route - thanks for all the tips above. |
|
Hello, just in case someone is attempting flash the firmware with a ESP8266/ESP32, some feedback:
|
|
My pack of LYWSD03MMC came brand new with 2.11 installed, date code 2023.11. However, it is pretty easy to resolve, I saw some people flashing older OG firmware a few times then doing the custom OTA... not sure why. But I am able to just use a CH340 (worth just picking it up, 5 Pack for $10 USD on Amazon 2Day) and flash the ATC_v47.bin firmware directly, works first time (3 sensors done so far). I found just the 3 pins (3V, GND, P14) were all that I needed, I used clips on the 3V and GND since you can directly go to the battery leads, but I ended up soldering P14 since that was easier and less annoying then trying to keep it perfectly held on by hand. Flashed using the web flasher. In case someone just wants to flash a 2.1.1 sensor with the custom PVVX firmware, this is what I did:
Extra details: |
Hi, can you elaborate how to connect and flash esp32 to sensor? Thank you |
Not much else I can say really, short esp pins EN to a GND, TX to pin 14, connect via USB, web flasher, trial and error. Unless you have some specific doubt? |
This method has worked for me with B1.4, thank you. |
|
Can confirm this - flashing (atleast via web) bricks the device on MacOS (it works perfectly on Windows). Also like @pvvx mentioned only 3 wires are needed for flashing - Gnd to Gnd, Vcc to 3.3v and P14 to TX on serial adapter. Like someone else mentioned, I was able to pull this off without soldering but I had all types of dupoint connectors at my disposal. In hindsight this was easy enough to do (thanks to @pvvx @atc1441 and others), but the fact that it didn't work on Macbook made me spend a few hours trying to figure this out (somethings are just weird on Macs). |
I was waiting for @pvvx to release the version that support 2.1.1 devices, but it's been 9 months, I guess it's not possible. Therefore I decided to do it myself with ESPHome last month. Add AES decrypt function to extract the temperature, humidity and battery level from advertised data, then use MQTT to send the info back to HA. It works well, but the downside is the data update period is as long as 10 minutes. Well, from another point of view the battery will last longer, not bad at all. At least I don't have to flash with wire. |
https://www.home-assistant.io/integrations/xiaomi_ble
The thermometer with Xiaomi firmware still transmits every 1.6 or 2 seconds, but not temperature and humidity data, but registration information.
As described, I’m waiting for a new version to scan the new authorization protocol. MiHome's user agreement prohibits code reverse engineering. |
Will this be done with sniffing the bluetooth traffic in wireshark or what is the way to do this? |
Yes, in Wireshark, as version 2.1.1_0159 will update... |
|
Small reminder for people who have problems with flash on TLSR825x USB-COM Flash Writer tool wit. h a CH340 adapter: there are some serial to USB adapters where the TX pin is labled RX on the adapter. So you need to connect the RX pin of some of this adapters to P14. The Robotdyn USB to TTL UART is one of these. It works perfect is you just change the pin.
|
|
Looking at the datasheet for CH340 it states:
I'm not fully sure I understand this paragraph fully. It talks about 5V source power, since the chip is powered over USB this would be true or am I misunderstanding how to read "source power" and they mean if the 5V pin is used to source power from? I'm slightly confident it means I should short |
Thanks Bro!, this work for me |
|
Hi, I tried to change the firmware via UART, but unfortunately the attempt was unsuccessful. The sensor is dead (dark screen). While fighting it, I switched the jumper on the programmer to 5volt. Could I have damaged it? I use FTDI FT232RL but I also ordered and am waiting for CH340G. Maybe further attempts will bring some results. |
If you didn’t connect more than 3.6V to the power (battery) terminals, then nothing should have damaged. |
|
Hello, unfortunately I damaged the first sensor by powering it with 5 volts. However, in the other two I managed to change the software with the CH340G device without any problems. |
|
Flashing works perfectly, indeed flashing on macOS brick the device (ie: nothing on screen), but it can be re-flashed again on Windows just fine. |
|
Hi everyone. I tried to flash my temperature device without success. I bought sensors 1 month ago from Xiaomi european store. I read the whole thread carefully but i can't figure out what i am doing wrong. I am using Arduino UNO to transfer data to my sensor and here are my settings : GND <-> GND Baudrate : 460800 I plug TX pin while the activation time. I also tried resetting RST to GND on the device during activation time. Every attempt, i can reconnect to my sensor with Xiaomi Home by Bluetooth connexion and the version remains 2.1.1_0159. Any help ? ;) |
5V will kill the chip. |
|
Ok, i may assume i fried my device 😅 let me try again... |
|
Hi, I tried to flash with another sensor. this time I added a voltage divider to my pin 14 in order to limit the voltage to 3.3V. |
and others
It seems that the way to update firmware using telink flasher has been forbidden.
The text was updated successfully, but these errors were encountered: