GitHub真的越来越神奇了,刷到一个视频讲怎么刷机小米温度计的,

我之前买了几个用来测室内不同区域的温度的,虽然支持蓝牙和米家,但我一直没连接,怕额外耗电,毕竟那么大个屏幕 足够看了

不过让我没想到的是 这蓝牙也能hack进去无线刷机(OTA)?

ATC_MiThermometer

meet ATC_MiThermometer, 只需要一个浏览器 点点就能刷机了。

这还是我最近几年看到过很舒适的刷机体验。

刷机

  1. 打开chrome(or Edge)的实验功能chrome://flags/#enable-experimental-web-platform-features,根据提示重启浏览器
  2. 打开 https://pvvx.github.io/ATC_MiThermometer/TelinkMiFlasher.html
  3. 点击 connect,浏览器会跳出蓝牙列表,选择对应的设备(小米温度计2 就是 LYWSD03MMC)
  4. Do Acivation, 开始破解
  5. 点击 ATC_v43.bin,载入了这个自定义的固件
  6. 点击 Start Flashing 刷入固件

刷好之后蓝牙会断开连接

16:04:29: Searching for devices
16:04:29: NotFoundError: User cancelled the requestDevice() chooser.
16:04:29: Reconnect 1 from 5
16:04:35: Searching for devices
16:04:44: Connecting to: LYWSD03MMC
16:04:47: Hardware Revision String: B1.4
16:04:47: Software Revision String: 0106
16:04:47: Firmware Revision String: 1.0.0_0106
16:04:47: Detected Mi device
16:04:47: Connected
16:07:11: Activating now, please wait...
16:07:14: Registration successfull
16:07:14: Send Login, please wait...
16:07:15: Received device infos are correct
16:07:15: Login successfull
16:07:31: Load firmware file 'ATC_v43.bin'...
16:07:32: File: ATC_v43.bin
16:07:32: File size: 81540 bytes
16:07:32: Count: 5097
16:07:42: Load firmware file 'Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin'...
16:07:42: File: Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin
16:07:42: File size: 92868 bytes
16:07:42: Count: 5805
16:09:02: Load firmware file 'ATC_v43.bin'...
16:09:02: File: ATC_v43.bin
16:09:02: File size: 81540 bytes
16:09:02: Count: 5097
16:09:07: Start DFU
16:09:53: Update done after 45.066 seconds
16:09:59: Disconnected.

自定义固件

重新 connect,蓝牙名称会变更为 ATC_ 开头。

连接之后就可以看到丰富的自定义选项了。

小提示

得力有卖一个19块的温度计,不支持蓝牙,但功耗低很多。

小米温度计上点不亮的电池,放到得力的温度计上 还能接着用。