#261

[@svideodotorg]

Fun fact - each of your four tires with TPMS will broadcast a unique serial number/ID when asked to do so. The hardware to make this happen can be made cheaply. I know of a group that was working on using this for mass surveillance. The plan was to deploy (relatively expensive) license plate readers (ALPRs) at key choke points in a city, along with TPMS monitors. You'd read a plate, then ask for the TPMS IDs, and now you have 4 numbers that are tied to a license plate. Then, you can install TPMS readers (relatively cheap) all over the place, and monitor the comings and goings of every citizen in a widespread area for not a lot of money. To my knowledge the idea never got much traction, as prices on ALPR systems have gone down and cell phone tracking has become more accessible to law enforcement. If there's a moral to the story it's this: there are loads of really smart people working on a hundred different ways to sell solutions to your government to watch your every move.

[@AndreasSpiess]

I agree. I tried to explain why I think this is not a very good idea...

[@mrfrenzy.]

@@AndreasSpiess If you put a 125kHz LF antenna near a road intersection you can trigger each and every car to transmit their sensor ID.

[@cfeigel]

Also, almost all modern tires have an embedded RFID chip with a unique serial number. These can be read from 15 or 20 feet away. Manufacturers have been doing this for over 10 years. Intended for inventory and safety recall purposes. But, someone, somewhere, is probably using for surveillance

[@111chicane]

Many European-made cars have long range passive RFID imbedded in the dash, transmitting the VIN number. It's mainly used for car theft prevention. Readers are placed at check points, highways, toll boots, country borders and customs. I first heard of those over 10 years ago. Active long-range RFIDs are volunteerly placed in the vehicles all over the world by their owners for automatic toll collection.

[@AndreasSpiess]

Here we have a visual system called "license plates" which are readable even by humans from quite far away. So far, nobody found this as a security issue ;-)

[@TheRainHarvester]

This is useful! I want to measure tire pressure from inside my house so I know if they are low BEFORE I need to drive.

[@AndreasSpiess]

If the reach is long enough...

[@DavidGlaude]

@@AndreasSpiess Please, obviously this is a project for you where RF reach is not an issue. Just put an IoT device in the car, that connect to the home WiFi and report about the pressure. ESP8266 (or more) for the wifi part. Whatever you come up with for the RF part. The car device would charge a Lipo on the 12V from the car, when not powered by 12V, it assume the car is park... in that case, it wake-up from time to time, check if the home wifi is reachable... if not, goes to sleep, if present then send to an MQTT queue. Of course, we count on you to use the deep sleep mode of the ESP8266 (or was is on the ESP32?). You have a car, so you could use that project for yourself. Of course, if you are worried about your wife running flat while alone driving, you could make us a LoraWan (or another one you tested) so that it report to you at home (or on your mobile) whenever your car tire run flat. If you get that message, call your wife to tell her to go to the nearby station. While this might not be super interesting for your wife driving alone, imagine some truck company with a fleet that could remotely monitor the health of all the wheel from their trucks. ;-)

[@John_Ridley]

Not going to happen. The sensors shut off after a while and only reactivate when the car moves again.

[@lmamakos]

At the end, good to see your supervisory cat, as well as primary and backup calculators! Very interesting and, as always, well done. Thanks!

[@AndreasSpiess]

The backup is if I do not find the primary one under my mess ;-)

[@jasonmhite]

I love URH! Paired with an RTL-SDR has enabled so many radio projects without a lot of cost.

[@AndreasSpiess]

Digitalization at its best!

[@HelmutTschemernjak]

Great video again with a lot of interesting stuff I learned. So I can put a 433 Transmitter on a LoRa Board, plug the module under a foreign car, drive with a larger distance behind a car hand and to turn on tire alarms remotely to get the car stop. Interesting. I look forward to some ideas how to use the sensors for other IoT use cases.

[@aminabudahab]

You're evil !

[@AndreasSpiess]

Better than a bomb to stop a car...

[@DavidGlaude]

Forget about the Lora Board... you need a solution to get rid of a car driving too slowly in front of you were you cannot overtake it. So drive closer for one minute, then simulate a flat tire and wait for the car to go on the side to check. At that point, you pass the car and can start driving faster (while respecting the speed limit).

[@expert20valvehlx]

@@AndreasSpiess Can we use this to retrofit TPMS in cars that TPMS wasn't an option from factory ?

[@John_Ridley]

Wouldn't work in the US. People here seem to drive as long as the car keeps moving. I sometimes see people driving on rims after they've shredded the tires.

[@treelineresearch3387]

The thought occurred to me last night to install some OEM in-wheel TPMS monitors on my hooptee and build my own mini head unit that I can integrate into the gauge cluster, this is really helpful.

[@AndreasSpiess]

Good luck! These sensors still work every week...

[@DougKutyna]

Your videos are always great. This one was exceptional. Thanks!

[@AndreasSpiess]

You are welcome!

[@marcdraco2189]

My friend you never cease to amaze me! I've heard of Manchester encoding but never thought to look it up and now I don't have to!

[@AndreasSpiess]

I had to look it up ;-) Because I did not remember the details.

[@marcdraco2189]

@@AndreasSpiess Yeah, but you explain it so well. You would have been (assuming you're not) an amazing teacher in higher education. You, Bill (Dronebot), Great Scott and a few others put some of my lecturers in the day to shame!

[@zvpunry1971]

And now to learn something useful: Pause at 18:45 Always bypass the throttle-block if a soundcard or radio is involved. Bypass has the keyboard shortcut 'b' (or right click, bypass). The block is then shown in yellow and samples that would normally enter the input are instead copied to the input of the following block. The bypassed block can be re-enabled by pressing 'e' (or right click, enable). *Explanation:* If no clock is involved, digital signal processing will run as fast as possible. This is great if input and output are files (or data in memory) which need to be processed as fast as possible. It is no so great if you want to visualize something, then it will consume 100% CPU for a short time and everything is done before the first picture is rendered on the screen. If you want to visualize something (i.e. FFT plot) you want it to be slowed down to some normal speed. This is when gnuradio-users add a throttle-block just before the data is visualized. It uses the an timer from the operating system to slow down the flow of data as specified by the sample rate. If a soundcard or radio is involved, then you have some DAC (digital to analog converter) or ADC (analog to digital converter) that processes samples at the sample rate that is specified. This slows everything down to the speed of the hardware. The throttle-block is no longer needed. If more than one block is active that limits the speed of the data flows and their clocks aren't exactly synchronized, then you will run into a problem! *Further Explanation: Clock domains* The sample rate is set to 2000000 samples per second. This is used to setup the HackRF to consume that much samples. To know when it is time to consume a sample, it just counts its clock ticks. These clock ticks are derived from a small crystal oscillator that has some error (~ 20 ppm). The timer in the computer is locked to another crystal oscillator on the mainboard which has a similar error. These are different clock domains and they will definitely disagree with each other. So the throttle block might run slower than the radio. And then the throttle-block will cause all buffers in front of it to fill up and throttle the whole flowgraph while the radio consumes samples until its input is empty. Then you have a buffer underrun, then the radio stops and the buffers fill up again, the radio starts again until the next buffer underrun. If the radio is slower in consuming the samples, it becomes the "throttle-block" and starves the real throttle block. But this is no problem at all. The easiest solution is to disable/bypass the throttle block. *Worse problems: You are forced to have multiple clock domains.* A typical example is a FM receiver: radio (ADC) -> gnuradio fm-demod -> (DAC) soundcard+speaker If the soundcard is too slow, the radio is forced to throw samples away and then there are gaps in the signal. You will see overflow warnings from the radio and hear clicks from the speaker. If the soundcard is too fast, it will have buffer underruns, also with audible clicks. On the transmit side it is worse, because you don't hear the clicks but transmit them as broadband noise. Fortunately devices like HackRF have a relatively low transmit power ( < 10dBm). *Possible solutions:* 1. Synchronize all clocks. Most radios have inputs for a 10MHz reference clock and and some have an 10MHz output. Or the better solution, have a gps disciplined reference oscillator. Devices without reference input are harder to synchronize, but cheap USB-Soundcards are easy to modify. Many use a 24.576 MHz oscillator which can be removed and replaced by an external signal generator that is locked to the 10MHz reference. 2. Use software to detect the difference of the producer and consumer of samples and re-sample it.

[@zvpunry1971]

I just wanted to say: bypass the throttle block when transmitting. ;)

[@AndreasSpiess]

Thank you for your explanations. You are right. I forgot to disable it. It did not hurt, probably because the signal is very short (otherwise I would have discovered my mistake)

[@zvpunry1971]

I hope that this explanation is useful for every reader of this comment. :)

[@abcde-ji6md]

Excellent information, thank you!!!!

[@crayzeape2230]

Interesting project. I recall a time as a child when my parents messed up a brew. A little too much sugar in the bottles during the secondary fermentation phase, leading to what was effectively a room full of bottle bombs. The first one to go boom caused a chain reaction and the ALL went BOOOOOOOM!

[@AndreasSpiess]

Oh no! Must have been a mess.

[@gerhardamon5841]

Unglaublich vielfältig, swohl deine Interessen als auch deine Fähigkeiten! Toll! Habe viel über den URH aus diesem Video gelernt. Danke!

[@AndreasSpiess]

Bitte, gern geschehen. Du findest noch einige andere Videos in diesem Themenbereich auf dem Kanal...

[@rklauco]

This video was both useful AND interesting. Thanks! :)

[@AndreasSpiess]

You are welcome!

[@stefanu4359]

One of the best videos. Is like a summary of a 4 years university.

[@AndreasSpiess]

Thank you. Probably a little exaggerated;-)

[@CTCTraining1]

Another great video from my favourite ‘hacker’, many thx. Looking forward to the combination of electronics and beer!

[@AndreasSpiess]

Me too :-)

[@TheSadButMadLad]

I always thought the tyre monitor was wired into the wheel with a very very long wire. So you could only go so far before you had to reverse and wind up the loose wire again.

[@jimb032]

This is hysterical... Best used if you have a blonde wife. ;)

[@Nicksperiments]

I can confirm this. That’s what they call a tire rotation lol

[@111chicane]

I thought they use the brake pads as brushes. That's why you have 2 brake pads on each rotor. One for Vcc, the other one is Data and the ground comes through the axle. However, your theory sounds more convincing and I'll take it.

[@jimb032]

@@NicksperimentsIn lieu of the tire rotation, one can tell the wife she has to drive backwards from the grocery store once a week to rewind this wire. Now we are just being plain evil. :D Andreas' video brought out the worst in us! I don't think this is what he intended. But from what I hear, this would not work on his wife anyway.

[@rehleinklein7373]

That's also the secret technology behind electric cars no one tells you.

[@avatarteamultra]

You are the best "this kind of youtuber" i know.

[@AndreasSpiess]

Thank you!

[@ZaneDaMagicPufferDragon]

Awesome repurposing of a common sensor for a purpose that it was never intended for!!!! I'm excited to see how successful this "HomeBrew" project will be!!!!! ;) I just love coming here and finding all of the amazing 😉 stuff that you come up with from devices that have been repurposed into awesome projects!!!!

[@AndreasSpiess]

I am an engineer and we are usually quite creative people ;-)

[@WacKEDmaN]

awesome vid Mr Spiess..thanks... its always fun seeing whats out there on 433mhz..(and other frequencies!)

[@AndreasSpiess]

RF is becoming cheaper and cheaper...

[@rubenmalaga]

Andreas, your content is very good quality. Very good job. Thank you.

[@AndreasSpiess]

You are welcome!

[@miketony2069]

All set to watch another great Andreas video, Saw a delicious beer at 1:24s... went to get a beer...Have not returned to video.... thanks!

[@AndreasSpiess]

Bad luck for you ;-)

[@ThermaLTake94]

Awesome work mate,complicated but so understandable the same time,keep it up

[@AndreasSpiess]

:-)

[@domenicopalomba]

I think this is one of best ever made. You exceeded your own goals this time!!!

[@AndreasSpiess]

Thank you! :-)

[@maxd7228]

Beer and Electronics are synonymous. Very interesting video.

[@AndreasSpiess]

Thank you!

[@Aemilindore]

Pleeese do more videos on software defined radios..

[@AndreasSpiess]

No worries. I have plenty of receivers here. And an SDRplay in the mail...

[@Aemilindore]

yei! looking forwards towards those stuff. Thank you!! @@AndreasSpiess

[@evlo8059]

Awesome so I can finally send all good and get rid of bogus warnings, thanks so much

[@AndreasSpiess]

Glad I could help!

[@nitzkit]

Oh cool! I’ve been trying to research those exterior wheel pressure sensors with out any luck. This video is really interesting

[@AndreasSpiess]

I also did not find a lot of information...

[@einars899]

Both useful and interesting. And well timed too. I bought a charger for my car. And a remote device for measuring the current used at my intake. The charger can be parametrized to turn up/down or even off charging based on current used by the whole house. So if I can emulate this remote device, I can control the charger from my home automation system. You gave me pointers to some programs I can use to hack the protocol that I did not already know. Thank you.

[@AndreasSpiess]

Enjoy hacking!

[@manickn6819]

Interesting for sure. I have an interest in this for some time but was not sure where to start. Basically i was still at the bosh sensor you show at the beginning. Now I know a bit more. Thanks.

[@AndreasSpiess]

It is quite some work to get it hacked...

[@klassichd10]

Thanks for this lot of work and very interesting contribution. As far as I remember the first TPM sensors did not have this acceleration sensors/switches to activate by a turning wheel. But then, you got interference with your winter tires also sitting in your garage.....

[@AndreasSpiess]

Interesting. It should not happen because each has an ID and they must comply the 1% transmit time limit.

[@klassichd10]

@@AndreasSpiess Nowadays yes. But in the early days there were no external units to initiate the pairing. The car took what it got. There were several antennas in the car and the car tried to localize the senor by evaluating the field strength. The sensor had to be as simple as possible and the rest was in the car. Btw. the indirect systems worked very well except of common mode issues. They helped me by an useful warning. But the US laws forced the industriy to go in the direction of direct systems. This made the Systems more complex and expensive - unnecessarily as I think.

[@PhG1961]

Really awesome video ! Escpecially near the end... where your beer brewer friend is introduced ! Looks very promising !

[@enjibkk6850]

Yes, can't wait for that one... managing to combine iot and beer :)

[@PhG1961]

@@enjibkk6850 Finally... !!! I wonder why it took so long !

[@AndreasSpiess]

This combination was not my invention. It was his invention ;-)

[@robertparenton7470]

Thank You. Highly useful information! Like the HackRF example!

[@AndreasSpiess]

Glad it was helpful!

[@NicksStuff]

The indirect system works (too) well: it measures pressure differences sub-0.1 kg/cm²

[@AndreasSpiess]

That is very interesting to me. It is hard to believe that they get these small differences.

[@NicksStuff]

They do. What's annoying is that they could easily tell you *which* tire is flat (well, slightly deflating) but the ones I know simply don't. So stop the car and go round and round checking all four seeing no difference (100g that's not visibly discernible).

[@PedroRamirez-by9re]

Thanks Andreas, your videos make me happy every sunday!

[@AndreasSpiess]

You are welcome! :-)

[@MegaScott]

My cars, both Ford and Toyota have sensors in all of the wheels, they are all monitored, even the full size spare. Its quite nice to know that the spare has the correct pressure in it. Don't care? Get a flat tire then go change your tire on the side of the motorway, only to find that the spare is flat, not a good feeling.

[@AndreasSpiess]

I agree!

[@MarcHanbuerger]

Great video and a lot clearer than reading spec sheets! In a book 'the car hackers handbook' they describe how to read from these sensors, including sending a wake up signal to the sensor to get a response from vehicles driving by. You could use that for the beer pressure monitoring, just send a 125khz wake up signal when you want to read the pressure? Ps: I'm a home brewer myself, so looking forward to your next video!

[@AndreasSpiess]

I hope I will not need that signal as it would need a lot of additional circuits and power...

[@danieldecuyper]

I just added a comment relating same "car hacker handbook" we have same readings!

[@craigpeate8972]

Spray bottle for pressure is genius!

[@AndreasSpiess]

Thank you!

[@drelephanttube]

Thanks for another useful and interesting video. I'd like to see a video on the HackRF.

[@AndreasSpiess]

I have an SDR video in my planning.

[@MrBie]

Looking forward to part 2!

[@AndreasSpiess]

Next week.

[@tootalldan5702]

Another great effort for the details in your video. I was thinking of a project using the system for a household water pressure surge tank. It could be added to the weather station logs for water usage (as the well water pump starts and stops). Thanks for the cheap sensor idea!

[@AndreasSpiess]

I am not yet sure if these sensors are water proof.

[@tootalldan5702]

@@AndreasSpiess That's fine if they are not. They should be waterproof it they go on the tire stem. My surge air tank for the house is inside which makes fir the broadcast of the signal close to a receiver.

[@mnrobards]

Good subject. Have a TPMS on motorhome and noticed I would get a “no signal” alarm once parked and leave the monitor on. Now I understand why....

[@AndreasSpiess]

Just wait for an hour or so ;-)

[@Eman6240]

Just got one of those external ones from Banggood. Now i know how it works. Great job :)

[@AndreasSpiess]

Thank you!

[@asiw]

Absolutely fascinating. So much to learn and really useful.

[@AndreasSpiess]

It was the same for me. Lots of learning ;-)

[@majidnasr3329]

8:18 Naughty Andreas !!! She doesn't change the tire !!! she just tries to find someone to do it for her !!!

[@AndreasSpiess]

I do not care about how a problem is solved. It only has to be solved ;-)

[@zukjeff]

EXCELLENT video and information Andreas, but you have done all the puzzling work i would have done over 10 nights in the shed or when on holidays.. now i have to drink more good European beer.. thanks a lot ! ;-)

[@AndreasSpiess]

It also costed me some nights ;-) Cheers!

[@jasonpitts8395]

awesome video. You should look at TPIS as well

[@AndreasSpiess]

This video is not about cars :-(

[@jasonpitts8395]

True but TPIS sensors can add air if needed, like into your friends beer project. It probably wouldn’t be needed but you never know.

[@stompreaper]

This was a really nice piece of research and sharing. Thanks!

[@AndreasSpiess]

And it was quite hard and time consuming ;-)

[@shivastefan]

I have only seen the last 10sec. - and they made my day!

[@AndreasSpiess]

How do you start at the end ?

[@pontiacg445]

Thank you for the video! I bought the cheapest 433MHz sensors from china to try and adapt them to an old car using TI CC1101, of course I managed to select one with the strangest output format that's not anything like any of the decoders built into RTL433. It is for sure ASK OOK, I think it is a schrader clone based on FCC pictures because the board is not the same at all even though it has the same FCCID. It uses SNP205H, it has board space for an accelerometer but it's not populated. I feel the "tiring" joke, in my arms! What I wish I knew when buying the sensor, go look through RTL433 and find the FCCID of a sensor that someone else already put work in to decode!!

[@AndreasSpiess]

The Chinese devices sometimes do not have FCC certification 😔

[@pontiacg445]

@@AndreasSpiess This one probably isn't, I am pretty sure the FCC would want the product to be re-certified with a new ID if the PCB was changed as drastically as this was. I bet they are at least trying to copy the protocol of the original licensed schrader product they cloned. It at least appears to work, the FCC docs do say it's supposed to use ASK and manchester coding. What's really crazy is all the hardware someone here in the sates can order off amazon that clearly never had nor could have FCC certification. Baofeng radios, wifi jammers, GPS blockers, cellular/bluetooth jammers as examples. They are usually stocked and fulfilled from USA warehouses!

[@zerodegrekelvin2]

Nice hacking the tpms! You give me one good reason to get the HackRF 8-) very funny with the flat tire data...

[@AndreasSpiess]

You are right. SDR is a very interesting technology with many uses...

[@InnovasoftDe]

Great! Like your friend I'm also a Homebrewer and plan to monitor the pressure while bottle-fermentation / keg-fermentation over the internet. Hopefully you publish the results and part lists of your project soon. And yes. Your videos are useful and interesting. A must have Abo!

[@AndreasSpiess]

Welcome to the channel. Next beer video is next week

[@hypercube33]

Nevermind my previous comment I just should have watched more :) I have some pressure sensors on the way from Ali so I can see if there is a noticeable change on the pressure for the Pre and Post air filter on our central furnace when the filter gets dirty

[@AndreasSpiess]

I hope the measuring range fits...

[@MrSleepProductionsInc]

My 2018 Subaru Forester has a sensor in the spare tire. Got a tpms warning one morning and after checking all four tires, all were good. Thought one of the sensors was bad until I thought about the spare tire. Sure enough, it was low. Aired it up and tpms warning went off.

[@AndreasSpiess]

Thank you for your feedback. So some of the cars seem to have also one in the spare tire.

[@MartinPDanz]

Very interesting also the aspects about security. Thanks 🙏🏽

[@AndreasSpiess]

I thought the beer was a more interesting aspect. But obviously I was wrong ;-)

[@sachinpawar9950]

Thanks, very informative. I am trying to read tpms values to my arduino/esp. Currently checking possibility with Si4432 ISM TRANSCEIVER and my Esp8266 board.

[@AndreasSpiess]

Good luck. It is quite hard work to find the codes used.

[@avejst]

Wow, well done Andreas Very interesting stuff😀👍 Thanks for sharing 😀👍

[@AndreasSpiess]

You are welcome. This was one of the videos I had to put a lot of effort (a few additional nights) in...

[@sailingmarquise9742]

great video, congrat Andreas

[@AndreasSpiess]

Glad you enjoyed it

[@Mrcaffinebean]

There are definitely sensors in the spare wheel. Many a friend has told me that their sensors where bad when really the spare was low.

[@AndreasSpiess]

Thanks for the info.

[@Mrcaffinebean]

Andreas Spiess and thank you! This is great information!

[@sorin.n]

Excellent detective work! Thank you!

[@AndreasSpiess]

You are welcome!

[@Andology]

Great vid, some good nuggets of info there. I really wanted to get into OBD port data but my own vehicle has OBD 1 not OBD 2 which means you can’t do much with it. Also, always wondered how HUMVEE wheels have remote inflate / deflate tyre control from the dashboard which is cool :) thanks for sharing!

[@AndreasSpiess]

To inflate them is probably a little trickier...

[@Andology]

Andreas Spiess they do look like they have some kind of ‘canister’ mounted on the hub of the wheel? I’d thought that was where the air was controlled from.. and I’d considered having the wheel hub as a brushless motor, then you’d have power inside the spinning wheel (as dynamo) :)

[@electronic7979]

Very good and useful video 👍

[@AndreasSpiess]

Thank you!

[@christophbehrensdorf2588]

Hello Andreas, I found this TPMS hack from the bottle pressure video with HopfeNerd and it's very useful. Thanks for that! I am also a home brewer and was just looking for such kind of device that sends my bottle pressure to openHAB. But I am missing one point. How did you configure rtl_433 to receive the information from the TPMS sensors? I bought the same as you and don't receive anything. The rtl_433 tool is the newest right now. Thank you again! Regards Christoph (riegelbrau)

[@AndreasSpiess]

Maybe you have to go step-by-step and watch my videos about 433MHz hacking to see if your sensors work on 433MHz etc. etc.

[@steven1000000000]

I've been thinking about building a Raspberry Pi into a classic car and incorporating a number of features such as reversing camera, ttrip camera, media center, GPS, weather etc. and was thinking about what sensors I could include. Finding these tire pressure sensors on Amazon and seeing that they emmit at the given frequency, I was wondering whether I could read the data from them - This has been such an insightful view of the process. Thanks. I'm bookmarking this video to review again later.

[@AndreasSpiess]

Glad it helped also for the "original" purpose, not only to brew beer ;-)

[@ricky5176]

Wow can't wait to try it ;) thank you.

[@AndreasSpiess]

Hope you enjoy!

[@DD0ULQTC]

Thank you for this video and the links. I've always wanted to test that. After the first successful attempt with a replay attack on a thermometer, I noticed that my car does not have a tire pressure sensor. But the car key is remote ... hold my beer :-)

[@AndreasSpiess]

You are welcome! Unfortunately for the hacker (or fortunately for the owner), car keys use rolling codes and cannot easily be hacked...

[@loordimus]

Very interesting. Is there any indication what kind of components are used for the pressure measurement and are they available separately?

[@AndreasSpiess]

You can buy pressure sensors. You will see one in my next mailbag. But I plan to do a teardown of one of the sensors.

[@VcanseiV]

Hi, great work! I would like to share that I also tried to hack exactly this model of TPMS from Jansite using an Arduino with an RF module but unfortunately I have very little experience on RF so I was unable to get anything. I decided to take another approach opening the display and checking the PCB, and for my surprise I saw an empty space on the PCB saying "Bluetooth module BM-77 or compatible" with a few exposed contacts. On that moment I hoped one of those contacts could be a working serial port, so I found the datasheet of this BM77 and I discovered which contacts were the RX/TX, I soldered a wire and found a 115200 kpbs serial with 10 byte message for each sensor. The results of my tests are: the 5th byte is the sensor number (0 to 3) which the data corresponds, the 8th byte is the pressure (not bar nor PSI, needs to convert to them with an equation which I still working on it) and the 9th byte is the temperature in Fahrenheit. The other bytes I still don't know exactly what they mean, the first 4 bytes are fixed values, and the 6th, 7th and 10th vary. Probabily they created this PCB foresseing an smartphone app but as far I could see they didn't did it. As my objective is to integrate this TPMS on my Arduino trip computer I installed a simple HC06 bluetooth module on it and so far it is working fine.

[@AndreasSpiess]

Interesting idea. I have to look into it. Thank you!

[@starkmaximus4938]

were you able to interface your TPMS with arduino successfully?

[@VcanseiV]

@@starkmaximus4938 yes, I'm able to read the data from the sensors through the method I wrote in the last message. I achieved succesfully the equation to interpret the tire pressures but I was wrong about the temperature. Actually the temperature sent by the display is the temperature in Celsius plus 50, so in my case when I receive the byte I just need to subtract 50. My setup is working fine up through this years. Ideally I would like to make Arduino communicate directly with the sensors through RF, without the display, but I never achieved to do this way, so I hide the display in the glove box.

[@galinstan5603]

Andreas, do you have a video, or do you know of one, exploring the dongle you utilized? The FCC information has been a great help. I really appreciate it.

[@AndreasSpiess]

Not for the dongle itself. But video #286 explains SDR.

[@galinstan5603]

@@AndreasSpiess Thank you!!! It was a perfect fit for my need.

[@meinsda5983]

Nice, i hope we get some bottles of Bier ;)

[@AndreasSpiess]

At least me ;-)

[@chandrasekar3050]

Great video sir

[@AndreasSpiess]

Thank you!

[@ramsesr2847]

Hi Andreas! I hope you are doing great...so I followed your videos in regards to the 433 Mhz devices hacked and finally I am ready to complete the TPMS Hack, I bought the RTL-SDR, TPMS same model to make sure everything will match your video, then installed the rtl433 and pretty much everything is running as expected, but not with the TPMS sensors - for some reason they seem to be sending different information (data) when compared to yours. I have checked the 315Mhz band, but still no success...I still can't find what I'm missing, when I run URH I cannot see the same graph 19:56 , but when I run the command "rtl_433 -R 0 -X 'TPMS:FSK_PCM:50:50:1000' " I am able to see packages coming thru. Any suggestions ? Thanks!

[@AndreasSpiess]

I think you already got an answer from the developer. Github is the way to go.

[@gamestylerz]

Would this also be possible with a generic 433Mhz receiver? I am trying to find a way to do it without running on the cpu

[@SymphonyOnAsphalt]

Great video!! Let me ask you something about Jansite internal sensors. I have a RTL2838 DVB-T with the rtl_433. According to Github documentation there are two protocols for Jansite number 123 and number 180. But if I select them explicity -R 180 and -R 123 nothing happen. But if I launch rlt_433 the software sometimes recognize signals, it says Renault TPMS, Ford TPMS and several brands.

[@AndreasSpiess]

I do not know the project that well. Maybe you ask your question on their Github?

[@newburypi]

I love your imagination. Another great video.

[@AndreasSpiess]

Thank you!

[@brainfornothing]

Very interesting. Thanks for sharing !

[@AndreasSpiess]

You are welcome!

[@kissingfrogs]

Very interesting. I dont think we have that law (all new cars must have tpms) as yet. Pity, would have been a nice feature.

[@AndreasSpiess]

Even if you do not have the law in your country you might end-up with monitors in your car as they are produced for the world markets...

[@antoine___________________907]

Thanks a lot for this very interesting video

[@AndreasSpiess]

You are welcome!

[@thedavesofourlives1]

What I don't understand is why they aren't self powered via inertia. Remember the early 2000 LED blinking valve caps? they were powered via a tiny kinetic generator.

[@AndreasSpiess]

I am not sure if the (regular) movement of the tires would create any movement for a generator.

[@mcorriganuk]

Very informative thank you

[@AndreasSpiess]

:-)

[@ymisetz]

Interesting video as always. Have you ever thought to make a video about a capacitive measurement of a liquid's volume that is stored in a tank?

[@AndreasSpiess]

No. But maybe once with a pressure sensor.

[@ymisetz]

@@AndreasSpiess For a tank with 1 m height, when it is full of water, we have at the bottom a 9,810 Pa pressure. We also have the atmospheric pressure which is approximately 100,000 Pa so we have a total 109,810 Pa. So we need a sensor to measure the differential pressure with a resolution of 98.10 Pa/cm. If am I right, what type of pressure sensor can measure such values?

[@deangreenhough3479]

Great Video and more than useful and interesting

[@AndreasSpiess]

Thank you!

[@tomwilliam5118]

Some internal tire sensors do not need to be programmed to what position the vehicle the tire is mounted. Chrysler Jeep and Dodge and RAM are one example. After doing a tire rotation or replacing a tire sensor all you need to do is drive the vehicle at 15 miles an hour for a few minutes and this receiver will recalibrate and pick up that sensor. Buicks and GMCs you need to use the programmer like you showed in your video. vehicle needs to be put into learn mode most likely by pressing the lock and the unlock button at the same time. The Horn of the vehicle beep 3 times. then the driver side blinker will stay lit the indicate that's the tire you need to start programming first. then it moves to the passenger front passenger rear than driver rear. after all the tires have been relearn the horn will beep and it will exit the learning process.

[@AndreasSpiess]

Thanks for your information.I would be very interested how they detect the position after rotating all tires.

[@tomwilliam5118]

@@AndreasSpiess on some Vehicles the reciver is mounted up in the wheel well. Other vehicles would be by the wheel Hub. On vehicles that have to be program per Wheel there is one receiver and its position varies per manufacturer and all 4 tires transmitte to it.

[@quintinq6763]

Thank you for this video. Was looking for something like this a few weeks ago. Keep up the great work 😄😁🎊🎉👍🏻👍🏻

[@AndreasSpiess]

So you can start your project!

[@quintinq6763]

Yes. Definitely. Thanks. I found this video on youtube, maybe it can be of some help to you and community? Unfortunately it is in Spanish though. kzbin.info/www/bejne/Z2TZgaismsSVm5I

[@AndreasSpiess]

Interesting video. Thank you. Fortunately, he had one which sent in ASK and he could use the cheap ASK receiver...

[@Electronieks]

18:58 yes we are interested in a followup video

[@AndreasSpiess]

Thank you for your feedback. I did some hacking videos on this channel...

[@ricky5176]

I subd I love that you share this with us .. Was looking to get these sensors in my car + arduino uno. To integrated into a a oled screen and make it more OEM look. PS. I really like your accent lol

[@AndreasSpiess]

Welcome aboard the channel!

[@ThomasHaberkorn]

I need a pressure transducer for 400 bar (40 MPa). Any ideas?

[@Basement-Science]

Just checked, you can get one for about 28€ on aliexpress.

[@gr7480]

Yes, and you can control with pwm. I have one with a lorawan atmel, only 20 bars. I think in 400 bar you need one for industry signal 4-20mA or 0-10V. It s more expensive.

[@ThomasHaberkorn]

@@Basement-Science thanks from the message, I forgot to mention that is has to be very small (thread diameter

[@user-di8gk1rp8t]

Hello. I would really like to know how you were able to communicate with these sensors. I would like to be able to read both temp and pressure via Arduino for a project I am working on. Could you please help me with this?

[@AndreasSpiess]

Are you sure you watched the video? It was about reading these sensors ;-)

[@roelvb]

Great video! I'm really interested in the TPMS protocol, but there is not a lot of information about it.

[@AndreasSpiess]

There is not one. There are probably hundreds of protocols :-(

[@roelvb]

@@AndreasSpiess that's a shame

[@santorcuato]

Very good hacking Andreas. Thanks!

[@AndreasSpiess]

You are welcome!

[@gr7480]

Very good work. Thanks

[@AndreasSpiess]

:-)

[@notmyrealname3462]

where can I find a tps for 10$?, mine in a Toyota even aftermarket are like $40, from 80$ from Toyota. And might have been answered multiple time, but yes, the spare has a tpms as well.

[@AndreasSpiess]

I usually leave links in the description.

[@rinusdamen6436]

Hello Andreas, thanks to your tip on this feature i am using this almost every day to track my bottle fermentation pressure. It would be nice to track the data for a period of time, currently i write down the pressure value every day or serveral times a day, this is of course already great. It would however me even more professional to be able to create graphics of the proces. I am thinking of reverse engineering the receiving unit, figure out if there is a serical data stream which could be easily be transfered to e.g. an Arduino or other controller. I was wondering if you already dived in to the PCB of the receiver unit to figure out if this is possible. I guess this should be possible and it would make things easier for us.

[@AndreasSpiess]

Did you watch my video #270?

[@GlennHamblin]

Great video 👍

[@AndreasSpiess]

Thank you!

[@qwsa74]

good work

[@AndreasSpiess]

Thank you!

[@TheLucacomparato]

Hoi Andreas, supper Video wie immer! Meinst du, könnte man einen Direkt Sensor zu diese China-CU anlernen? Cheers from AG ;-)

[@AndreasSpiess]

Ich weiss leider nicht, was du meinst...

[@marcoskoller]

My friend, I would like to add on top of a video signal the osd of two tpms sensors. The idea would be to place a reverse camera on a trailer and transmit the video inside the vehicle. The camera part, transmission and reception, and reverse sensor, ok. I would like to add pressure information to the image. I'm thinking of using a "mini osd" for the interface between the signal and the video, my difficulty is in extracting this information from the tpms receiver and converting it to the miniosd. Do you know anything about it?

[@AndreasSpiess]

I would separate the two tasks as you describe: Extract the sensor data (which is covered in this video) and inserting into the OSD device (I have no knowhow there, but for sure you find the relevant info in the documentation of this device.

[@Usuaurio-kj1ym]

Hola gracias por el video, como podría usar el código del decoder schafler de rtl_433 para usar en la placa arduino y leer los sensores tpms ? Le agradezco la ayuda

[@AndreasSpiess]

RTL_433 only works on Raspberries :-(

[@TanayBhalani]

When can we expect the next video on this

[@EvenTheDogAgrees]

Depends on your budget.

[@AndreasSpiess]

I do not know. But in summer we should have some beer ;-)

[@EvenTheDogAgrees]

@@AndreasSpiess Careful with phrases like "we should have some beer", and always be specific as to who's buying. You really don't want the entirety of your subscriber base showing up at your door over the summer to collect on that offer. ;)

[@eddyfontaineyoutu100]

Super video ! 👍👍👍 Do you know what is the measurable pressure range ? Cheers, Eddy.

[@AndreasSpiess]

I assume it depends on the product. My external sensors measured from 0-4 bar

[@javiercuellar73]

Hi Andreas Congratulations for you excellent channel!. Will like a video on how to use trigger on oscilloscope to visualize voltage spikes when wifi goes on is ESP and how to visualize a complete AC IR transmission. Thanks!!!

[@AndreasSpiess]

You should find many videos if you search for "trigger oscilloscope"

[@NivagSwerdna]

The tyre sensors in my 2004 Renault Espace no longer work... assume their batteries have now worn out... must replace them one day... thanks for the info..

[@AndreasSpiess]

Well possible.