The Great Search: Bluetooth LE Modules with nRF5 Chipset
This week we've been doing some more toy hacking on a 2017 edition Teddy Ruxpin (https://en.wikipedia.org/wiki/Teddy_Ruxpin) - this toy has a SONIX SN7001 plus an nRF51 module (https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/DEFCON-26-Amir-Etemadieh-Zenofex-Dissecting-Teddy-Ruxpin-Reverse-Engineering-the-Smart%20Bear.pdf) for the Bluetooth LE connectivity to an app. Why not an all-in-one BLE chipset? Well perhaps now-a-days you'd be able to run the whole thing off of an nRF52 or nRF53 but at the time the SONIX chip was probably a well-trod core for many toys, with…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.