Just received the new mini Smart Control panel and tried to integrate it in HA but unfortunately without success.
I tried with Tuya, Tuya Local and LocalTuya integration. In Tuya integration it is visible but under bracket clearly written “unsupported”.
It works well in Smart Life app, recognized immediately.
This is the product:
BTW, the product looks nice, great design, changes pages is fast (no lag). Seems promising.
I have also a NSPanel Pro and consider to sell it as it is by far to low end product (slow, no responsive etc), just for your information.
One more comment: I just realized that in the we link I shared it appears that the product is compatible with Zigbee which is not true at all. Maybe there is another model that is Zigbee compatible but not the one I have.
Hi,
No idea, I did not try to open it.
I have two versions of this panel, one is labelled Moes and the other with no specific brand but it is exactly the same.
The non branded version is visible in Tuya app.
I have recently got one of these but noticed it wasn’t supported. I have a PR open for adding support to the Tuya integration but until that’s approved I’ve created a custom fork of the old Smartlife integration here on my Github.
Also I tried poking around the device and while the device has ADB access, the ADB Shell is locked with credentials that the manufacturer refuses to provide, maybe someone can figure out a way to get into the device even without those. There was a previous revision where you could install HA onto it (as it runs Android underneath)
That display is super nice. I’m searching something to use in a home-made HVAC system, and after seen that the NSpanel Pro is laggy, I think that this could be nice.
Maybe you could help me before order one:
Is it possible to control each button and relay from home assistant? (Switch you mean as relay or as button?)
Is it possible to personalize the screens?? Or they are realy closed?
You can control each of the 3 relays in home assistant. Doesn’t appear to be a way to directly use the buttons in home assistant - but you could add them to tuya plugs in their eco system and monitor their status to then control the actual device you want to. Its going to be a pain to control none tuya devices with this. Hopefully ADB or an alternative firmware gets worked out on it so we can make full use of it as the hardware seems really nice.
Things I’ve tried so far and notes:
Using flipper zero sending USB keyboard and mouse commands gets no reaction. Neither does sending HID media commands (home, back etc).
Every 3 guesses of the “Tuya login:” when you connect via “adb shell” causes the device to stop responding to adb until you reboot.
You can adb shell, take two guesses exit adb reconnect and take two more guesses without getting locked out and needing a reboot.
Weirdly it shows to adb as a Nexus 4.
• adb pull doesn’t work but can be used to discover file names on the device. It will tell you when a file/folder doesn’t exist. For example “adb pull /bin/adbd .” Will return you straight to command line indicating that exists on the device. If you name a folder it will tell you it’s building file list… if the folder exists.
• adb push does nothing
• adb install, adb logcat - just says waiting for devices
• any of the adb reboot commands do reboot the device but doesn’t appear to go into recovery
Couple more updates regarding this. Connecting to the labeled points rx0 and tx0 gives you a console. Offers to skip booting if you press any key but just causes it to loop and boot again. Lots of messages - once its up drops you into the same “Tuya login:” as ADB but without the 3x limitation.
Next plan is to remove the flash chip and try to get a complete dump.
Which begs the question what is dtb_b, kernel_b, rootfs_b, oem_b? And if they’re for another device and we can eliminate them we could potentially claw back 43.75mb of storage which would be significant given the limited storage available. The data partition is only 38.5mb.
[ 1.106990] rc rc0: GPIO IR Bit Banging Transmitter as /devices/platform/ir_tx0/rc/rc0
[ 1.117503] rc rc0: lirc_dev: driver gpio-ir-tx registered at minor = 0, no receiver, raw IR transmitter
[ 1.197117] akgpio-keys gpiokeys: find mic mute: 19
[ 1.204069] input: gpiokeys as /devices/platform/gpiokeys/input/input0
[ 4.218868] input: goodix-ts as /devices/virtual/input/input1
Couple of interesting hardware bits there regarding the IR transmitter, mic mute(?) and the touchscreen input.
Now dumped the NAND flash. Pulled some password hashes and ran through hashcat to get the passwords. One password was the same as I pulled from the 4" switch and I’d already tried and failed to login using that. The other login is user: root password: 6b7835db will reassemble tonight if I have time and test but if anyone tries in the meanwhile please let me know.
bonus: haven’t carved out the partitions and mounted yet but I came across a log. This thing seems to be using mqtt
Same firmware version. I did think that myself but no obvious correlation between the serial on the sticker and the code. If that doesn’t work then will have to go down the route of trying to modify stuff in flash.
I’ll probably end up doing a factory reset and dumping it again so I can post the dump - current one has WiFi credentials in there
any chances on cracking this ?
