Transponder Design
#211
Tech Apprentice
Joined: Jul 2014
Posts: 86
From: Sweden
I have a programming holder with a 8mhz oscilator where i program the chip with USBasp or Arduino with ISP software, then i move it to the real transponder hardware where it have a 20mhz crystal. And if i want to reprogram i just move the chip between.
#214
Tech Apprentice
Joined: Jul 2014
Posts: 86
From: Sweden
Yes that sounds correct. I have had some chip that didn't work with crystal during programming, that needed a real oscillator (not the same thing as a crystal), don't know what happen to that chip. But in normal situations it will work.
#215
Tech Apprentice
Joined: Mar 2013
Posts: 78
I've just tried programming another chip with the simple programming board. Same result as previous efforts, AVRDUDESS reports a success, but verification fails. And now the chip is not responding when I click "detect" (I did not write any fuses this time).
Guess I'll have to sit down and properly learn about these devices (or go down the PIC route, I've successfully programmed those in the past).
Guess I'll have to sit down and properly learn about these devices (or go down the PIC route, I've successfully programmed those in the past).
#216
Tech Rookie
Joined: Aug 2014
Posts: 2
From: Spain cartagena
Hello.
I Have being studing this post. I am from Spain and I Have built one transponder using the Condac's design, it works properly but I don't know how to solve the ghost id number. Has anyone solve this problem?
Does anyone find more unique id number apart from the 3 that are posted in this threat?
Thanks to all and congratulations to howardcano and condac. Great Job.
I Have being studing this post. I am from Spain and I Have built one transponder using the Condac's design, it works properly but I don't know how to solve the ghost id number. Has anyone solve this problem?
Does anyone find more unique id number apart from the 3 that are posted in this threat?
Thanks to all and congratulations to howardcano and condac. Great Job.
#218
Tech Rookie
Joined: Aug 2014
Posts: 2
From: Spain cartagena
I have found this picture. did anyone tryed the other numbers from the list?
The system says to me that I can not post URL to other sites because I need to made a certain number of post before doing that.
Please Excuse me. But this is the only way to do this with my user. If any admin can post this picture please help me to do this.
You only have to write h t t p / / before the next text to watch it.
k31.kn3.net/2/D/A/B/E/8/7AF.jpg
The system says to me that I can not post URL to other sites because I need to made a certain number of post before doing that.
Please Excuse me. But this is the only way to do this with my user. If any admin can post this picture please help me to do this.
You only have to write h t t p / / before the next text to watch it.
k31.kn3.net/2/D/A/B/E/8/7AF.jpg
#219
Tech Rookie
Joined: Dec 2014
Posts: 14
Hola yo estoy trabajando sobre un transponder AMB compatible para un cliente mío y quisiera compartir con todos mi experiencia hasta el momento.
Actualmente mi desarrollo aún no puede ser captado por el decoder pero espero que compartiendo mi desarrollo con ustedes pueda a la vez encontrar el problema
Actualmente mi desarrollo aún no puede ser captado por el decoder pero espero que compartiendo mi desarrollo con ustedes pueda a la vez encontrar el problema
#220
Tech Apprentice
Joined: Jan 2013
Posts: 61
From: Schoonebeek
Hi again, not sure to post my question here or in the Decoder-part...Let's see what comes out; I am in the process of building a same type of decoder as is used to decode the simple AMB-type transponders for which the whole threat was initiated: BSK-coded AMB-MX transponders used in motorcross events. I have my system operational for the regular AMB-transponders (see few posts of my implementation here as well as for my decoder in the other threat).
Using a Rohde&Schwarz FSIQ analyser and a AMB-MX transponder, we discovered a row of bits that appear in every burst. This seems to us as if it is the System-ID. The remaining bits in every burst is every time different. The FSIQ analyser can be programmed to trigger on this 'preamble', so we were able to log the complete burst. Sampling 10 bursts showed 10 different messages (but of coarse 10 times same preamble). We tried to match the transponderID to the 'message' bits, but did not succeed...
Our question is: In case an encryption is used, would the message be every time different despite the transponderID is every time the same? Is the coding probably the 'Convolution Code' that was meantioned earlier? If so, can someone share info how to decode the messages we have logged?
Thank you for taking time to answer, Gerrie
Using a Rohde&Schwarz FSIQ analyser and a AMB-MX transponder, we discovered a row of bits that appear in every burst. This seems to us as if it is the System-ID. The remaining bits in every burst is every time different. The FSIQ analyser can be programmed to trigger on this 'preamble', so we were able to log the complete burst. Sampling 10 bursts showed 10 different messages (but of coarse 10 times same preamble). We tried to match the transponderID to the 'message' bits, but did not succeed...
Our question is: In case an encryption is used, would the message be every time different despite the transponderID is every time the same? Is the coding probably the 'Convolution Code' that was meantioned earlier? If so, can someone share info how to decode the messages we have logged?
Thank you for taking time to answer, Gerrie
Last edited by PA3EXV; 12-09-2014 at 01:57 PM.
#221
Tech Initiate
Joined: Dec 2012
Posts: 48
And finally, i understood, how the mylaps encryption protocol works.
I'ts not 100%, i mean, what i can't make ANY 7-digit number.
At this moment i have list of 9000+ brutforced numbers, some of them are very cool (like 7707077 or 6668885).
Numbers was brutforced at decoder with 4.4 software on board.
I'ts not 100%, i mean, what i can't make ANY 7-digit number.
At this moment i have list of 9000+ brutforced numbers, some of them are very cool (like 7707077 or 6668885).
Numbers was brutforced at decoder with 4.4 software on board.
#223
And finally, i understood, how the mylaps encryption protocol works.
I'ts not 100%, i mean, what i can't make ANY 7-digit number.
At this moment i have list of 9000+ brutforced numbers, some of them are very cool (like 7707077 or 6668885).
Numbers was brutforced at decoder with 4.4 software on board.
I'ts not 100%, i mean, what i can't make ANY 7-digit number.
At this moment i have list of 9000+ brutforced numbers, some of them are very cool (like 7707077 or 6668885).
Numbers was brutforced at decoder with 4.4 software on board.
#224
And finally, i understood, how the mylaps encryption protocol works.
I'ts not 100%, i mean, what i can't make ANY 7-digit number.
At this moment i have list of 9000+ brutforced numbers, some of them are very cool (like 7707077 or 6668885).
Numbers was brutforced at decoder with 4.4 software on board.
I'ts not 100%, i mean, what i can't make ANY 7-digit number.
At this moment i have list of 9000+ brutforced numbers, some of them are very cool (like 7707077 or 6668885).
Numbers was brutforced at decoder with 4.4 software on board.
#225
Joined: Sep 2010
Posts: 3,569
From: My house.
And finally, i understood, how the mylaps encryption protocol works.
I'ts not 100%, i mean, what i can't make ANY 7-digit number.
At this moment i have list of 9000+ brutforced numbers, some of them are very cool (like 7707077 or 6668885).
Numbers was brutforced at decoder with 4.4 software on board.
I'ts not 100%, i mean, what i can't make ANY 7-digit number.
At this moment i have list of 9000+ brutforced numbers, some of them are very cool (like 7707077 or 6668885).
Numbers was brutforced at decoder with 4.4 software on board.



3Likes
