flipperzero-firmware icon indicating copy to clipboard operation
flipperzero-firmware copied to clipboard

Slix-L unlocking support is gone on firmware after NFC refactoring

Open d4g opened this issue 1 year ago • 37 comments

Describe the bug.

As mentioned, the Slix-L unlocking support from #2316 is gone. It probably needs to be refactored or reimplemented @g3gg0 . After watching your talk at 37c3 I found out that the merged pull request mentioned now is gone again.

Reproduction

  1. Try to find the Slix-L unlocking function in NFC Menu
  2. Don't find it ;)

Target

No response

Logs

No response

Anything else?

No response

d4g avatar Dec 29 '23 11:12 d4g

Working on it

gornekich avatar Dec 29 '23 12:12 gornekich

Anyone Progress? This is an Feature for me that keeps me away from updating tona newer Release as the october 2023 FW iam running atm

bluenazgul avatar Jan 24 '24 15:01 bluenazgul

Sorry for delay. Should be ready on next week.

gornekich avatar Jan 25 '24 18:01 gornekich

I stumbled across this issue after getting my Flipper Zero a few weeks ago, and trying to read/emulate my kid's Tonies figures. I'm hoping once this issue is resolved it will be working in the next firmware release. I didn't try the earlier release that had this feature as I didn't have my Flipper back then. If it does work I'll get a repo started with scanned Tonies figures, and hopefully others can contribute too for the benefit of all our kids.

nortakales avatar Feb 04 '24 22:02 nortakales

I stumbled across this issue after getting my Flipper Zero a few weeks ago, and trying to read/emulate my kid's Tonies figures. I'm hoping once this issue is resolved it will be working in the next firmware release. I didn't try the earlier release that had this feature as I didn't have my Flipper back then. If it does work I'll get a repo started with scanned Tonies figures, and hopefully others can contribute too for the benefit of all our kids.

you can just use an older firmware version, like unleashed 65, until it will be back in a newer version.

kurazli avatar Feb 05 '24 08:02 kurazli

Could you please test the PR #3425 and let me know if you have any problems with unlocking SLIX-L

gornekich avatar Feb 05 '24 17:02 gornekich

I was able to unlock and read some Tonies figures, and emulate them to the box successfully!

nortakales avatar Feb 05 '24 18:02 nortakales

Just encountered a crash that required a hard reboot while reading one of the figures. Let me see if I can reproduce...

nortakales avatar Feb 05 '24 18:02 nortakales

Could not reproduce the crash after reading 9 figures that I have. 🤷‍♂️

I am not very familiar with how these figures or SLIX-L work, but it seems like in order for the Tonies box to work with the Flipper's emulation, you need to place the figure back on the box again (after unlocking/reading with the Flipper) and only then will the Flipper's emulation work. Would be interesting to share some of these .nfc files and see if they work for anyone who doesn't own the corresponding figure. I'll put them in a git repo shortly.

Edit: I turned the box off and back on again, and the Flipper Zero's emulation does NOT work until the authentic figure was placed on the box at least once while it was on.

nortakales avatar Feb 05 '24 18:02 nortakales

The files for the 9 figures I have are here: https://github.com/nortakales/flipper-zero-tonies

They all emulate correctly on my box after placing the authentic figure on the box at least once while it is on. ~~Yet to see if a real figure is necessary at first, or if these files will work for anyone.~~ Once the box is off and on again the Flipper's emulation doesn't work until the corresponding figure is placed on the box first.

nortakales avatar Feb 05 '24 19:02 nortakales

Edit: I turned the box off and back on again, and the Flipper Zero's emulation does NOT work until the authentic figure was placed on the box at least once while it was on.

That sounds that the emulation isnt working as it should, the emulation should work like an authentic figure - thats how it worked before the NFC Refactoring

bluenazgul avatar Feb 06 '24 04:02 bluenazgul

That sounds that the emulation isnt working as it should, the emulation should work like an authentic figure - thats how it worked before the NFC Refactoring

I just gave firmware 93.0 a try, and you are right, it works right away (no need to put a figure on the box first). Seems like there is still a regression here.

I uploaded a couple files generated from firmware 0.93 here, you can compare to files generated by this PR if it helps debug at all.

nortakales avatar Feb 06 '24 05:02 nortakales

@nortakales @bluenazgul made some emulation fixes in #3425 . Please, retest emulation with the fixes and let me know if it works.

gornekich avatar Feb 06 '24 14:02 gornekich

Works like a charm now. Turned the box on for the first time this morning and the Flipper worked right away.

nortakales avatar Feb 06 '24 17:02 nortakales

confimed, SLIX-L is working again with Tonies like it was before the NFC refactoring

bluenazgul avatar Feb 07 '24 05:02 bluenazgul

@bluenazgul if you have some Tonies I haven't uploaded yet, send a PR! https://github.com/nortakales/flipper-zero-tonies

nortakales avatar Feb 07 '24 06:02 nortakales

All Tonies files are working @nortakales ! @bluenazgul Can you upload some german nfc tonies ?

CybGITHB avatar Feb 10 '24 00:02 CybGITHB

i just tried latest dev build and reading/unlocking is working, but emulation did not work

Edit: Tried to edit the NFC Files to Change the Privacy PW and Privacy Mode Bit still No Change

bluenazgul avatar Feb 10 '24 08:02 bluenazgul

@bluenazgul use https://github.com/RogueMaster/flipperzero-firmware-wPlugins/releases/tag/RM0208-2318-0.97.2-f563329 firmware

See: https://www.g3gg0.de/rf/flipper-zero-for-toniebox-figurines/ and use Unlock Slix-L !

CybGITHB avatar Feb 10 '24 10:02 CybGITHB

@bluenazgul use https://github.com/RogueMaster/flipperzero-firmware-wPlugins/releases/tag/RM0208-2318-0.97.2-f563329 firmware

See: https://www.g3gg0.de/rf/flipper-zero-for-toniebox-figurines/ and use Unlock Slix-L !

emulation with this RM FW is also not working, even with old NFC files and new NFC Files

bluenazgul avatar Feb 10 '24 10:02 bluenazgul

Some Tonies can not be read - Biene Maja (Flip) works, Benjamin Blümchen is not readable.

bofax avatar Feb 10 '24 11:02 bofax

Some Tonies can not be read - Biene Maja (Flip) works, Benjamin Blümchen is not readable.

Reading "Benjamin" is a Bit Tricky but working, only have Problems with emulation, also all old Files are Not working with emulation

bluenazgul avatar Feb 10 '24 11:02 bluenazgul

@bluenazgul can you upload .nfc to try ? I habe tried 5 tonies and all are working no problem reading and emulating!

CybGITHB avatar Feb 10 '24 14:02 CybGITHB

@bluenazgul what error do you get when trying to read ?

CybGITHB avatar Feb 10 '24 14:02 CybGITHB

Same for me. Reading seems to work very well, but emulation seems to do nothing to the box.

Am Sa., 10. Feb. 2024 um 12:17 Uhr schrieb Andre Schlüter < @.***>:

Some Tonies can not be read - Biene Maja (Flip) works, Benjamin Blümchen is not readable.

Reading "Benjamin" is a Bit Tricky but working, only have Problems with emulation, also all old Files are Not working with emulation

— Reply to this email directly, view it on GitHub https://github.com/flipperdevices/flipperzero-firmware/issues/3328#issuecomment-1936977484, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAP7L6L6L6NHIPXWGK4R5BDYS5JMXAVCNFSM6AAAAABBGQVFYCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMZWHE3TONBYGQ . You are receiving this because you are subscribed to this thread.Message ID: @.*** com>

jbouecke avatar Feb 10 '24 15:02 jbouecke

@bluenazgul can you upload .nfc to try ? I habe tried 5 tonies and all are working no problem reading and emulating!

Try this: `Filetype: Flipper NFC device Version: 4

Device type can be ISO14443-3A, ISO14443-3B, ISO14443-4A, ISO14443-4B, ISO15693-3, FeliCa, NTAG/Ultralight, Mifare Classic, Mifare DESFire, SLIX, ST25TB, EMV

Device type: SLIX

UID is common for all formats

UID: E0 04 03 50 16 EA B6 29

ISO15693-3 specific data

Data Storage Format Identifier

DSFID: 00

Application Family Identifier

AFI: 00

IC Reference - Vendor specific meaning

IC Reference: 03

Lock Bits

Lock DSFID: false Lock AFI: false

Number of memory blocks, valid range = 1..256

Block Count: 8

Size of a single memory block, valid range = 01...20 (hex)

Block Size: 04 Data Content: CE 51 03 52 C1 30 B6 2A FD E1 BA 21 35 2E B4 C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Block Security Status: 01 = locked, 00 = not locked

Security Status:

SLIX specific data

Passwords are optional. If a password is omitted, a default value will be used

Password Privacy: 7F FD 6E 5B Password Destroy: FF FF FF FF Password EAS: 00 00 00 00 Privacy Mode: false

SLIX Lock Bits

Lock EAS: false `

bofax avatar Feb 10 '24 19:02 bofax

Emulation was working perfectly on the gornek/3676_slix_fixes branch, but is not working once merged into dev

nortakales avatar Feb 10 '24 19:02 nortakales

Emulation was working perfectly on the gornek/3676_slix_fixes branch, but is not working once merged into dev

Good to know, so there are some Code conficts - got IT working sporadic in RM, but found another Feature Change, Emulation only Runs for 5min, Wish me an Option inside the NFC File to Change it from "normal" (5min) to "Long" (use as long as needed)

bluenazgul avatar Feb 10 '24 20:02 bluenazgul

Has anyone tried the roquemaster fw for flipper ? It seems to work just fine

CybGITHB avatar Feb 10 '24 21:02 CybGITHB

@CybGITHB this is the repo for the stock firmware. They had this feature working fine last week on a branch, there just seems to be an issue with the merge.

nortakales avatar Feb 10 '24 21:02 nortakales