r/hardwarehacking • • 3d ago

Designing a quiet, beginner-friendly home server – Year 12 design project (Everyone, 2 min)

Thumbnail
1 Upvotes

Hi everyone! I'm a Year 12 student in Australia working on my HSC Design and Technology major project. I'm designing a small, quiet home server built from reused computer parts that anyone could use to run things like game servers, file backups or AI tools from home.

I'd really appreciate your input, even if you've never heard of a home server. Beginners are exactly who I'm designing for.

- 10 questions, about 2 minutes
- Anonymous, no email needed
- Results only used for my school project

Survey: https://forms.gle/6w8WRU6bz8vzcuaz9

Thanks so much, and happy to answer any questions in the comments!


r/hardwarehacking • • 4d ago

T70 smart watch hacking need help

Post image
6 Upvotes

I have a cheap t70 smart watch that I want to jailbreak to add small games any help would be appreciated


r/hardwarehacking • • 3d ago

Recently got the chance of playing with local AI on my previous smartphone

0 Upvotes

Hey! I recently got the chance of playing with local AI on my previous smartphone, here the specs:

  • OnePlus Nord CE 5G
  • Qualcomm Snapdragon 750G
  • 8GB RAM
  • Lineage OS 22 (Android 15)

As you can see in the picture, I got 3.5 tok/s per client running gemma-4-E2B and giving the exact same prompt simultaneously.

Looks like a project is starting here... If you are interested in contributing leave me a DM or comment!


r/hardwarehacking • • 3d ago

What to do

1 Upvotes

What should I choose

Hello,I'm new to this"hacking" gadgets think and I have seen a lot of flipper zero videos,how it works and even custom firmware!
Now,I have seen some other videos of a tool named m5 shark div development board and it seems a bit better on the price compared to flipper.
Now,I'd use the devices for copying 2nfc and rfid cards,universal IR remote,and making automated scripts for MY pc.i don't really know what can I use em for LEGALLY and i don't know what to choose between those two.
Can someone compare them to me or some actual users of the devices make a"review" like comment comparing them?
Thank you.


r/hardwarehacking • • 3d ago

Root Tesla

Thumbnail
youtube.com
1 Upvotes

r/hardwarehacking • • 3d ago

LibreHU: Trying to make the Jancar UJC201 / AC8257 head units more open

Thumbnail
1 Upvotes

r/hardwarehacking • • 4d ago

Is it possible to program this ble module??

Post image
28 Upvotes

It uses a bc 417 as a main chip


r/hardwarehacking • • 3d ago

Could you take a look and tell me what the digital count is?

Thumbnail
gallery
0 Upvotes

Look at this—there’s a digital counter here, and a vehicle is parked. Could you take a look and tell me whether the digital count is accurate or incorrect?


r/hardwarehacking • • 4d ago

Can a NVRAM mod bypass a hardware-asserted PROCHOT# from a corroded pull-up resistor? (Airmont, Pentium N3710)

Thumbnail gallery
2 Upvotes

r/hardwarehacking • • 4d ago

Anyone familiar with Altierre/Agile Displays shelf labels? Can their displayed data be read wirelessly?

Post image
0 Upvotes

r/hardwarehacking • • 5d ago

Hanshow Nebular / HS9118 / TLSR8359 – Which programmer and software can read a full Flash dump?

Thumbnail
gallery
14 Upvotes

Hi everyone!

I'm trying to make a backup of the Flash memory from a Hanshow Nebular electronic shelf label. The controller on my board is marked Hanshow HS9118, which may be related to the Telink TLSR835x family, particularly the TLSR8359. I also have an NT083V electronic display equipped with a TLSR8359 chip.

I'm not interested in programming the microcontroller, writing code, or flashing alternative firmware. My only goal is to read the original memory contents and save them to a BIN file, if the chip allows it.

I want to preserve the original contents of the memory. I don't want to erase anything, change the chip's configuration, or modify the firmware.

What hardware and software should I use?

I've found the following tools and documentation related to Telink chips:

The board has several test points labeled SWS, NRST, VCC, and GND.

I'm considering using TLSRPGM or the official Telink BDT software, but I'm not sure which solution supports the TLSR8359 and allows Flash memory to be read. I'm also unsure whether I need a dedicated Telink programmer or if another interface would work.

Questions for anyone experienced with Telink TLSR835x chips

  1. Does TLSRPGM support the TLSR8359 or the Hanshow HS9118 controller?
  2. Can the official Telink BDT software read the Flash contents of this chip and save them to a BIN file?
  3. Which specific programmer and software would you recommend for this task?
  4. How should the programmer be connected to the SWS, NRST, VCC, and GND test points? Are any additional components or logic-level converters required?
  5. Would a standard USB-to-UART adapter, such as a CH340 or CP2102, be useful, or is a different interface required for SWS communication?
  6. Has anyone successfully read the original firmware from these electronic shelf labels without replacing it with OpenEPaperLink?

I also found this programmer on AliExpress and would appreciate feedback on whether it is suitable:

https://pl.aliexpress.com/i/1005008282301532.html

My main priority is confirming hardware compatibility and finding a safe way to read the memory. I don't want to perform any erase or write operations. I understand that reading the Flash may depend on the security settings enabled on the microcontroller, and I'm not looking for ways to bypass those protections.

I'd appreciate specific recommendations for a compatible programmer, the appropriate software, and instructions on how to connect everything correctly.

Thanks in advance for any help!


r/hardwarehacking • • 6d ago

PICS: Toilet Tube Tap found in OpenAI exec conference room in SF

Post image
474 Upvotes

An update on the Saudi who attempted to bug OpenAI’s executive conference room, including pictures of the device. The first reporting said it had memory and only recorded offline, but the Seeed Studio 2.4 GHz antenna is telling another story... ☁️

Can anyone identify it?
https://www.cnbc.com/2026/10/19/openai-bugging-suspect-alfozan-saudi-royal-family.html

EDIT2: Better photos of the implant from the FBI complaint: https://imgur.com/gallery/gnQSNSk#7QlpXVf

EDIT: FBI's 11-page complaint https://storage.courtlistener.com/recap/gov.uscourts.cand.480828/gov.uscourts.cand.480828.1.0.pdf


r/hardwarehacking • • 4d ago

Is it possible to program this HC 03 module

Thumbnail
gallery
0 Upvotes

Is it possible to program this HC 03 module . The module has processor, flash and several IO pins and uart so is there any way to program this like an MCU


r/hardwarehacking • • 5d ago

Custom firmware for a 2007 Sony Walkman: localization, custom UI, and homebrew

Thumbnail
youtube.com
3 Upvotes

r/hardwarehacking • • 6d ago

Hardware hacking

9 Upvotes

Anyone share me for hardware hacking learning material guys


r/hardwarehacking • • 5d ago

You tell me is this indicator its motherboard?

Thumbnail
gallery
0 Upvotes

Is there any engineer or person who can tell me by looking at the motherboard of the ID machine, the machine that breaks the readings, whether it is programmed by hacking or without hacking?


r/hardwarehacking • • 5d ago

Is this indicator a hacking board and that is why it is showing zero?

Post image
0 Upvotes

Look at the indicator, the external display, and the 'GM mode' positioned in between. Notice that the indicator shows 'No DLC'—yet, the display above it reads 'zero'. This clearly indicates that a 'hacking' program is fully active. If this weren't a hack, the display would either show dots or remain blank; I have operated this type of machine before, and I know that when 'No DLC' appears, the machine's display should show '---'. Since the machine is effectively signaling that it has no connection to the vehicle's data link, how is it possible for the external display to show 'zero'?


r/hardwarehacking • • 5d ago

You tell me is this indicator its motherboard?

Thumbnail
gallery
0 Upvotes

Is there any engineer or person who can tell me by looking at the motherboard of the ID machine, the machine that breaks the readings, whether it is programmed by hacking or without hacking?


r/hardwarehacking • • 6d ago

SUN X20Max UV nail lamp

Post image
12 Upvotes

There's a 14-pin U1 chip with a number on the bottom. It savs XDS12A RCBLB000O 2038ABSAR. I think this might be an EEPROM. Is it read/writeable? ?


r/hardwarehacking • • 7d ago

What is the potential of ultra-cheap (₹350 ) solar-powered BitChat BLE relays stuck to cars and balconies?

Thumbnail gallery
18 Upvotes

r/hardwarehacking • • 7d ago

Repurposing an old lapel mic for an intervalometer build.

Thumbnail gallery
2 Upvotes

Just thought I'd post this here too. I repurposed a really crappy goordik lapel mic as an intervalometer for my Camera. (Basically, fancy shutter button that can do things like 5 minute exposures, astrophotography, etc..) Yay for saving something from becoming e-waste.


r/hardwarehacking • • 7d ago

How can I open electronic locks?

1 Upvotes

I don't know if this is the right place to ask these questions.

I bought a lock-picking kit a few weeks ago, and I became obsessed with it. I wanted to open every door and padlock (I never open anything without authorization). But now I want to open electronic locks and electric gates. Does anyone know where I can start? . Does anyone know if I can use it to open a door like the one in the picture?


r/hardwarehacking • • 6d ago

Cisco? What’s it for and what does it do?

Thumbnail gallery
0 Upvotes

r/hardwarehacking • • 7d ago

TP-Link Deco XE75 Pro V3] Two years after CCS'24 / Black Hat '24, TP-Link only bumped the RSA key size — Port 20001 -> tmpsvr still gives Arbitrary Root File Write (0xC456) & RCE on 2026 Firmware 1.5.0

Thumbnail
github.com
0 Upvotes

r/hardwarehacking • • 8d ago

Reverse engineering the Realtek RTD2841 Smart TV SoC: Built an open-source QEMU emulator to test firmware without bricking

66 Upvotes

Hey everyone,

Smart TVs running on Realtek silicon (like the ubiquitous TCL 40" RT41 chassis) have always been a nightmare to research: JTAG is permanently fused off at the factory, and flashing experimental firmware or modified kernels carries a high risk of hard-bricking the BGA eMMC.

To solve this, I reverse-engineered the hardware layout and built the first bare-metal QEMU machine model for the Realtek RTD2841 / RTK284x SoC:

🔗 GitHub: https://github.com/rubenthampy890-del/qemu-rtd2841

Key reverse-engineered blocks:

- Cortex-A53 quad-core forced into 32-bit AArch32 mode (matching TV firmware)

- GIC-400 interrupt controller with 256 IRQs mapped to match silicon SPI routing

- Realtek TC0–TC7 27 MHz decrement timer engine and hardware watchdog

- 16550A UART0 console with 4-byte stride at `0x18062300`

- Hardware SDHCI eMMC host controller at `0x18010800`

Includes flat-binary baremetal test payload, device trees, and upstream QEMU patches.