Ranco ETC-211000 uses AVR Atmega16L8
The Ranco ETC-211000 uses an Atmega16L8. The chip is initially protected so if you want to develop some code you will have to erase the chip first. The design is terrible, quit possible the worst i`ve ever seen in my reverse engineering time.  Mind you i have 20+ years experience.
Reverse engineering the Elco heating protocol
First step is always to look around on the internet. After some searching, I found out that the QAA75-sensor is actually made by Siemens. This broadened my search a bit. Turns out that Siemens refers to the communication as a “Boiler System Bus (BSB)”. This is the first interesting piece: a bus. In contrast with the OpenTherm protocol, which is point-to-point, this name seems to indicate it’s a bus (which is point-to-multipoint). There are a lot of implications: 1) data is most probably transmitted in the voltage, not in the current, and certainly not both. 2) it should be possible to passively listen in on the conversations. 3) it should be possible to act as an additional device on the bus and transmit messages, without changing the bus wiring...
Reverse Engineering
We are using reverse engineering for pedagogy and for resistance to the tendency to ignore the material reality of machinery and the tendency to rely solely on information represented in patterns of symbols rather than the actual material objects that constitute the thing itself being discussed..
preverse engineering an evap system
Reverse Engineering an EVAP System - Part 1 My friend/coworker has a 1997 Volkswagen Jetta (I4) that throws an EVAP SYSTEM Countless mechanics have attempted to diagnose it; none have ..
Hacking an alarm clock
We will bypass the mechanical snooze switch on top, and instead turn the alarm clock off in a much more fun way: punching it! Hopefully along the way I will be able to teach you some techniques that are useful in reverse engineering, so you can apply them to future projects. This project is aimed at intermediate electronics enthusiasts, who have mastered the art of the multimeter and are comfortable
working principles of motor control
After dismantling chinese copy of segway I wanted to check how the controller is made. After a couple of hours of work with multimeter, pen, a sheet of paper and Kicad I came up with a block diagram and schematic of motor controller. This motor controller is made in a cheap and a very simple way. Reverse engineering and analysing this unit is a ve
Reverse Engineering an Electric Fence Charger
This product includes some logic circuitry used to control the timing of the output pulses, which will be discussed in a later step.  The logic circui..
Reverse Engineering a 1.5 inch Photoframe
These little devices had a 1. 5 inch 128x128 colour TFT as well as USB, batteries and 16 Mbytes of storage for around 140 pictures. Best of all they were very cheap, so I purchased a few to see if they could be re-purposed into something useful. Looking on ebay it seems these devices are common-place and it wouldn`t surprise me if most are internally identical
Reverse engineering an MB Electronic Simon game
The MB Electronics Pocket Simon game has a very simple circuit thanks to the inclusion of a custom MB Electronics processor (the MB4850) which performs nearly all of the functions for the game. The only other significant piece of electronics is a SN75494N chip which interfaces the processor to the light bulbs and the built in piezo buzzer. The a