The Flipper Zero is great, and could handle all of the hacking/investigation part by installing custom firmware. The original product understandably arrives with heavily-restricted firmware (I imagine to reduce the amount of flak the company receives). However, it is incredibly easy to install Flipper Unleashed or similar, which removes all said restrictions and adds a lot of additional functionality. Possessing the…
> Possessing the tools that could be used to commit a crime is not necessarily a crime in and of itself! While I do agree 1000%, I also want people to be careful with this thinking since I have gotten in some minor trouble in the past. Always assume the authority questioning you can and will create whatever narrative they wish, that it will be accepted, and that your own reasoning will likely be used against you. I w…
Attacking My Landlord's Boiler
111–120 of 232 posts
Re: Attacking My Landlord's Boiler
#112> I also have it so the heating turns off when I go into town and turns back on when I'm just a few train stops away so my place is nice and toasty for me getting home! If your goal is saving energy/money, you don’t want a system capable of going from cool to toasty in 20 minutes. Instead, you want a system that runs (much) lower water circulation temperatures (giving lower losses in the unconditioned spaces and more…
I've read that it's always more efficient to turn heating off when you're not home and then turn it back on when you return. Is the reason for it being on 22-24 hours here that it takes a very long time to get back to the desired temperature, meaning you'd actually be cold for quite a while as it returned to the desired temperature?
50 years ago this was _always_ the case, but condensing boilers and especially heat pumps muddy the waters a little. Condensing boilers can be close to 100% efficient (vs ~70-80% for ye olde gas boilers), but generally only at a fairly specific operating temperature, which may be lower than you'd need to get a rapid rise in temperature. Heatpumps are >100% efficient (that is for every joule of electricity you put in they move more than one joule), but are even more fussy about operating temperature.
The answer now is going to be a solid 'it depends', based on behaviour of the heating system, outside temp, desired inside temp, insulation...
Re: Attacking My Landlord's Boiler
#113It's an awesome hack! It seems like the easier hack would be to put a peltier heater/cooler under the thermostat then control that remotely to assume control over what temperature the thermostat sees. The link to the exact model of thermostat isn't working, so I don't know how amenable its design is to this approach, but the thermostats I've used are generally wall-mounted and putting a heat/cool source under them wo…
Re: Attacking My Landlord's Boiler
#114I haven’t done this since 2014 but the google nest API used to (hopefully still does?) let you see and or set the thermostats status with curl commands.
My use case was to run one shell script that got my burglar alarms status, and if it was “armed/away” to simply set my nest thermostat as away, too.
But it can also be hooked up to a dummy load or a relay and just used as an indoor temperature sensor.
And the curl commands OP is relying on can be tied in to indoor and outdoor temperatures , such as scraping local weather with curl/wget and based on that integer, turning the boiler to a minimum when it’s a certain temperature outside.
Or turning it completely off when it’s warm outside.
I’m about to revisit this again just because I have an ancient gas pig of a furnace that uses microvolt and is too cold when it’s cold outside, and too hot when it’s warm outside.
So I need one thermostat in place to turn it on no matter what at 40F, but then some conditional logic to kick that thing on and off on different cycles based on outdoor temps. The whole systems too crude to implement one off the shelf without adding a zone controller, so I just want a Linux box at home to be the zone controller….
where I differ is that I’m not sending an RF signal to the boiler, I just have to close an NO contact to engage mine (and I’m lazily going to use the nest for that.)
If anyone knows of a better thermostat that has its own API I can set, read sensors, turn hvac on and off without using google/nest account or having a dependency on the goodwill of their API existing forever , I’ll come back and glean any responses thanks in advance.
As an afterthought, hm I can just attach temperature probes and a GPIO for a relay and indoor/outdoor temps and do away with google/nest altogether…. Thanks for jogging my brain a bit I might do exactly that.
(The nest was cool , and educational, I guess, 12 years ago when I didn’t know how to really do anything but run and fire off curl commands on someone else’s hardware for temp sense and closing a relay and I don’t have anything bad to say about it as a starting point.)
Where I was going with this , though, was that , you could use an off the shelf nest , and run
1) one command against API to get thermostat status (system thinks it’s on or off , even though it’s factually not directly controlling anything) and then based on that,
2) another command to your RF board to transmit a matching signal.
…
(However you could also do the same with a temperature probe that can be read on board or over WiFi , and then manage your setpoints in the script and or by other means: eg scraping a weather site for the local outdoor temp in your case where the landlord probably wouldn’t let you attach or connect an outdoor probe.)
Bonus with the nest approach is you get a dial, can mount it on anything , doesn’t have to be the wall of your unit… and it “sort of works” like a normal thermostat as well, as soon as the shell script reconciles the two states manually.
Long winded rant but the original use case was an apartment where the thermostat was proprietary and serialized data and I didn’t have any option to integrate a smart thermostat other than turning it to its maximum set point and then using the nest with a massive 220V/50A HVAC relay to just chunk the AC power line on and off on demand.
Re: Attacking My Landlord's Boiler
#115Re: Attacking My Landlord's Boiler
#116> I also have it so the heating turns off when I go into town and turns back on when I'm just a few train stops away so my place is nice and toasty for me getting home! If your goal is saving energy/money, you don’t want a system capable of going from cool to toasty in 20 minutes. Instead, you want a system that runs (much) lower water circulation temperatures (giving lower losses in the unconditioned spaces and more…
Re: Attacking My Landlord's Boiler
#117> I also have it so the heating turns off when I go into town and turns back on when I'm just a few train stops away so my place is nice and toasty for me getting home! If your goal is saving energy/money, you don’t want a system capable of going from cool to toasty in 20 minutes. Instead, you want a system that runs (much) lower water circulation temperatures (giving lower losses in the unconditioned spaces and more…
Re: Attacking My Landlord's Boiler
#118Re: Attacking My Landlord's Boiler
#119Earlier quoted context omitted.
My wife and I worked a six-week shift work schedule for a long time. We got second-gen nest thermostats when they first came out (2012) thinking they were neat. Nope! The smart learning feature was the biggest pain in the ass. You’d be sleeping during the day for a night shift, only to find yourself freezing because it decided no one was home.
You can turn off the feature that changes temp based on presence. Or disable dynamic scheduling altogether.
Re: Attacking My Landlord's Boiler
#120Instead of attacking a radio controlled relay, the author should have read up on how their heating system works. All they need is a relay controlled by an internet connected thing to replace the thermostat receiver. I could understand if the receiver was locked away but the video clearly shows they have access to the boiler.
That leaves very visible evidence that things have been hacked. Any time the landlord comes around you'd want to remove that. And if there's some sort of infrastructure emergency (plumbing problem, heat goes out, fire in the building) it could be very challenging to get there and remove all traces before the landlord is stomping around.
That's a level of paranoia I would never have. You can easily conceal them in a way that is almost imperceptible.