tag:blogger.com,1999:blog-3993498847203183398.post7286474561780513422..comments2024-03-19T09:14:24.926+00:00Comments on RevK<sup>®</sup>'s ramblings: HackingRevKhttp://www.blogger.com/profile/12369263214193333422noreply@blogger.comBlogger18125tag:blogger.com,1999:blog-3993498847203183398.post-57003962414632110912020-05-03T19:37:40.692+01:002020-05-03T19:37:40.692+01:00How did you get on with the G2? Any tutorials? How did you get on with the G2? Any tutorials? OptimusGREENhttps://www.blogger.com/profile/01814428755619853825noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-67230860085783270632018-01-03T18:49:05.159+00:002018-01-03T18:49:05.159+00:00I've some experience here, I've currently ...I've some experience here, I've currently got an arduino pulling keypad banners off the galaxy bus and interfacing using relays and potential dividers off the RIOs. Keen to be involved in this hack, have a working G60 and working G520 here ready for butchering. Drop me a line? whitebakecase@hotmail.comAnonymoushttps://www.blogger.com/profile/10641650932314766975noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-44914221243792331762018-01-03T18:46:37.249+00:002018-01-03T18:46:37.249+00:00I've some experience decoding the galaxy bus, ...I've some experience decoding the galaxy bus, I managed to find keypad banners in the stream. If this is still an ongoing thing I'm keen to be involved, I have a G60 at home which currently interfaces with an arduino using relays and potential dividers from the RIO. Drop me a line? whitebakecase@hotmail.comAnonymoushttps://www.blogger.com/profile/10641650932314766975noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-43827037545400328582017-07-27T12:20:44.768+01:002017-07-27T12:20:44.768+01:00As it happens I am just about to try a G2 panel, s...As it happens I am just about to try a G2 panel, so will be interesting to see any differences.RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-35736858875929161842017-07-27T12:17:36.384+01:002017-07-27T12:17:36.384+01:00I'd need to dig out my notes from about severa...I'd need to dig out my notes from about several years ago when I had this hooked up on my TDS. I recall the timing is slightly different on the G2 series, so the devices have quite a bit of tolerance. I never really had to worry about the master timing, as I was only ever emulating a slave. So for me, it was the detection of the last byte that was most important and also providing the response packet / enabling and disabling the RS485 write line in time.<br /><br />The panel controller does a round robin on the slave addresses with a request. The slaves can acknowledge the request with or without a payload. Some of the devices like the Ethernet take time to process the request to generate the reply payload. <br /><br />My starting point was taking the E080-2 Ethernet module and rewriting the firmware to provide a web based virtualkeypad for remote control over the web. I did that, but the 8 bit Rabbit 2000 micro was not powerful enough to provide a decent user experience and the latency between web keypress and the output being returned on the display was too great. The Rabbit processor supports serial in gap mode and when I compiled their sample code, the device worked perfectly with the Galaxy bus.<br /><br />I then went on to look at the event reporting to the Ethernet module and created SelfMon to process large volumes of alarm reports for anyone who wanted to switch away from dial-up TAP. This basically runs itself and the customer payments cover the servers and distributed databases at Amazon. It was never going to me a money making machine anyway...<br /><br />After creating SelfMon, it was clear that at £200, the Ethernet module was too expensive for the domestic market. The firmware on the module also doesn't emulate a keypad when plugged into the lower end G2 panel and that meant very limited remote control over the system. So, that drove me to develop something to fill the gap. I hunted high and low for a low cost Ethernet connected CPU at less than £30 (that was actually quite difficult a few years back) and found the Wiznet W7100 CPU. They even had a serial to Ethernet version Wiz108SR that supported RS485. I re-wrote the serial to Ethernet code to provide the same functionality as the E080 modules and that's been successful over the last few years.<br /><br />In the meantime, Ethernet based hardware costs have dropped and cheap CPU's are much faster. So, I'm now working with the Tiva TM4C1294 and have the keypad and Ethernet module emulated on that in the office. The K3 from USRiot implements the same CPU inside an Ethernet connector like the Lantronix XPort, but much cheaper at ~£15. Roll on the £35 Ethernet module.StuartMcGhttp://www.sm-alarms.co.uknoreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-40132471178332161032017-07-27T08:24:00.074+01:002017-07-27T08:24:00.074+01:00My measurements seem to be 10ms gap in most cases....My measurements seem to be 10ms gap in most cases. The Max readers can take 20ms to answer some times, and get upset if I make gaps too short before next poll.RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-40235102646022103432017-07-26T22:36:40.435+01:002017-07-26T22:36:40.435+01:00Hi, great to see your work so far. You've gone...Hi, great to see your work so far. You've gone down a path that I'd wanted to quite a few years ago when I started SelfMon - use all the low cost peripherals and drop or re-write the firmware in the Galaxy control panel.<br /><br />I didn't see you mentioning the Galaxy peripherals run with 3.5char gap mode with a 1ms gap at 9.6kbaud? I suppose it doesn't matter as much when you're the controlling master? Some of the releases of the peripherals are more relaxed than others, again easier to control when you are the master. When designing a slave device to be compatible with the Galaxy panel, if you get this timing wrong, or if your CPU gets tied up servicing some higher priority process, then the panel will supply you with a missing device tamper. Most of the security panels are running RTOS. My original thoughts for a drop in control panel board was a Beagle bone board, using the PRU's to take care of all the realtime bus transactions and then Linux running on the main CPU abstracted from the bus traffic. I suppose it's all about keeping the timing intact, while scaling devices and having other services taking CPU time with a non RTOS. Looking forward to seeing how this progresses and nice to see names of many who I've talked to in the past.StuartMcGhttp://www.sm-alarms.co.uknoreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-21526897325312797042017-07-25T14:17:48.844+01:002017-07-25T14:17:48.844+01:00As per later blog post, on GitHub now.As per later blog post, on GitHub now.RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-50769047101937702072017-07-25T14:16:46.605+01:002017-07-25T14:16:46.605+01:00Do you plan the release any code or details of the...Do you plan the release any code or details of the protocol, you've worked out? I have a G2 panel which I'd like to link to a home automation system (https://home-assistant.io/). I've tapped into the RS485 bus, with a USB adaptor, but can't work out the protocol. I had hoped it was using OSDP, as this is well documented, but as far as I can tell it's not.Martin Hoodhttps://twitter.com/Yankeepapa_13noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-80778887250706914082017-07-06T09:08:41.716+01:002017-07-06T09:08:41.716+01:00I have some really silly things like - if the door...I have some really silly things like - if the door is closed (door close reed switch) but after 3 seconds the "lock engaged" input is not active then alert on the max reader with LED and beep so someone knows they have not quite shut the door properly, and text me if not sorted in one minute.RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-79194313990001682922017-07-06T09:03:29.712+01:002017-07-06T09:03:29.712+01:00The Texecom IP connectivity is awful. It's jus...The Texecom IP connectivity is awful. It's just a board with one of the standard serial <-> ethernet modules on it, and it only supports a single connection - if the unit is sending communication out, or someone else is connected, you're locked out. (Worse than that, they suggest exposing this port to the internet, so a DoS is trivial.) They mobile apps are (at best) naive and the notifications from their panel to email & mobile app notifications are ridiculously unreliable, something like 25% at least get 'lost' which is 'definitely not their fault'.<br /><br />Texecom are doing their connect system ( http://www.texe.com/uk/technology/connect/ ) which has been "coming soon" for years now, which should improve things a bit.<br /><br />In general, the Texecom hardware is better than the Honeywell (eg. they have a great range of style in their keypads that are IMHO nicer looking), and they have a nice mesh based wireless system (though for me it performs awfully, I'm fairly certain that's something 'odd' about my house). They also give good support to anyone (whereas honeywell support is relatively useless even if you're one of their approved installers).<br /><br />I'd be interested to potentially collaborate on something like this; the whole idea fascinates me and having all the alarm sensors available to trigger other behaviour would be a massive benefit. Things that are really pretty simple concepts ("if it's dark and I open the front door switch on all 3 outside lights") are ridiculously difficult to achieve right now.<br />Joseph Heenanhttps://www.blogger.com/profile/09814744420039144545noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-44845629568908243482017-07-06T08:04:49.931+01:002017-07-06T08:04:49.931+01:00I have a couple of G2/G3 panels, loads of RIO'...I have a couple of G2/G3 panels, loads of RIO's and some keypads if you need some to play with Adrian.Alexis Threlfallhttps://www.blogger.com/profile/11792447399167532389noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-55588556298196398052017-07-04T18:33:58.812+01:002017-07-04T18:33:58.812+01:00Basically, re-inventing the wheel is my thing :-) ...Basically, re-inventing the wheel is my thing :-) And fun.RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-79267628008646554322017-07-04T18:31:16.258+01:002017-07-04T18:31:16.258+01:00You’ve probably already come across https://www.s...You’ve probably already come across https://www.selfmon.co.uk/SelfMon/cpanel/ allows voice / sms / email / iOS notifications Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-14493541363156385322017-07-04T17:35:49.856+01:002017-07-04T17:35:49.856+01:00Have you thought about using a ESP8266 for the cen...Have you thought about using a ESP8266 for the central control and wifi connectivity etc...<br />You can get SIM900 modules to add GPRS/GSM connectivity and RS485 modules fairly easily. I don't know how many RS485 modules you could run on one though.<br />You could easily have more of them or Arduino's acting as an interface to multiple RS485 sets.Gareth Bladeshttps://www.blogger.com/profile/01109177395639328580noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-4604052672299595612017-07-04T17:22:29.671+01:002017-07-04T17:22:29.671+01:00Indeed, very versatile. I was having fun with RS48...Indeed, very versatile. I was having fun with RS485 years ago with PIC 16C84 using an HDLC style bit stuffing frame with CRC - same physical characteristics but much nicer message packet format.RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-76020309399808591872017-07-04T17:16:38.695+01:002017-07-04T17:16:38.695+01:00You might think RS485 is 'legacy', but eve...You might think RS485 is 'legacy', but even today it doesn't have much competition for low-rate connections once you get to any reasonable length (i.e. past the copper Ethernet length limitations). Hard to think of a better alternative for commercial alarm systems, really.Will Deanhttps://www.blogger.com/profile/15515078919433985452noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-46541672496967384392017-07-04T16:42:35.676+01:002017-07-04T16:42:35.676+01:00Texecom already has IP connectivity on their panel...Texecom already has IP connectivity on their panels, easy to do quite a lot of what you're suggesting with one of those, just saying ;)MattEustacehttps://www.blogger.com/profile/00556789794424936420noreply@blogger.com