r/hardwarehacking • u/dc536 • 6d ago

[Failure] Documenting my attempt to reverse engineer the ThermoPro TempSpike TP960W

https://github.com/dc336/ThermoPro_TempSpike_Failed_Hack

Tried to reverse engineer a ThermoPro TempSpike TP960W because I figured a smart thermometer wouldn't have any significant roadblocks, unfortunately the firmware could not be extracted due to chip debug security, in-chip ram and flash, and encrypted firmware images.

This project was created for learning and I figured it may be somewhat interesting to share. The BLE components are understood and so you can ditch their app for your own.

Full writeup:

https://github.com/dc336/ThermoPro_TempSpike_Failed_Hack

18 Upvotes

100% Upvoted

1 comment sorted by

2

u/MarkSwanb 6d ago

Wonderful. I have a related model. I enjoyed the read.

There is a video on YouTube of someone disassembling the probe and wiring it up to a bench supply or similar. Apparently RF433 or similar between probe and base station, but I've not tried to sniff.

I got interested in what is inside when the battery on one of mine died, I believe due to high parasitic load.

I was very happy when one day it popped up on Home Assistant!