Fun with Bluetooth

A presentation at DACHFest in November 2018 in Munich, Germany by Niels Leenheer

Slide 1

Slide 1

fun with bluetooth t s e t 5 l m t h @ m ’ I o l l e h

Slide 2

Slide 2

why?

Slide 3

Slide 3

Slide 4

Slide 4

why?

Slide 5

Slide 5

progressive web apps

Slide 6

Slide 6

pwa’s ! are great

Slide 7

Slide 7

but...

Slide 8

Slide 8

but...

Slide 9

Slide 9

Slide 10

Slide 10

Slide 11

Slide 11

bluetooth

Slide 12

Slide 12

bluetooth s k c su

Slide 13

Slide 13

classic bluetooth vs. y d o b y r h e t v o e o t n e o u s l a b e s r e t e th ha control dr on es and oth bluetooth low energy er cool shi t

Slide 14

Slide 14

bluetooth low energy also known as B l Bluetooth Smar t uetooth LE B l u e t o o t h 4 BLE

Slide 15

Slide 15

bluetooth low energy also known as B l Bluetooth Smar t uetooth LE B l u e t o o t h 4 and 5 BLE

Slide 16

Slide 16

10 million bluetooth devices shipping every day

Slide 17

Slide 17

m e n o h p e obil

Slide 18

Slide 18

computer

Slide 19

Slide 19

r o t i n o m e s o c u gl e m o s d n a h s ' y bod

Slide 20

Slide 20

activity tracker

Slide 21

Slide 21

u b y a pl s lb e r e h p b l u b y a l p

Slide 22

Slide 22

8 b b o i r e h p s

Slide 23

Slide 23

e n o r d i n parrot mi

Slide 24

Slide 24

r e n n i p s t fidge

Slide 25

Slide 25

the boring theoretical stuff

Slide 26

Slide 26

central peripheral

Slide 27

Slide 27

central

Slide 28

Slide 28

generic attribute profile

Slide 29

Slide 29

generic attribute profile ?

Slide 30

Slide 30

generic attribute profile a w p a g e s u a c e b , t t a g n e k a t y d a e r l a s

Slide 31

Slide 31

central peripheral client server

Slide 32

Slide 32

§ i device information light e c i v e d r e p s e c i v r e s e l p i t l mu

Slide 33

Slide 33

i device information battery flight control

Slide 34

Slide 34

i device information battery steering control

Slide 35

Slide 35

i device information battery heart rate

Slide 36

Slide 36

i device information battery heart rate

Slide 37

Slide 37

i device information battery heart rate

Slide 38

Slide 38

i device information manufacturer model number serial number hardware revision firmware revision software revision ... s c i t s i r e t c a r a h c e l e p c i i t v l r e s mu r e p

Slide 39

Slide 39

server service characteristic value array of objects object property value

Slide 40

Slide 40

services and characteristics are identified by uuid’s 16 bit or 1 28 bit

Slide 41

Slide 41

i device information 16 bit 128 bit 0x180A 0000180A-0000-1000-8000-00805F9B34FB

Slide 42

Slide 42

battery 16 bit 128 bit 0x180F 0000180F-0000-1000-8000-00805F9B34FB

Slide 43

Slide 43

steering control light still, ever y body does 16 bit 128 bit flight c this not recommended any UUID outside of the range xxxxxxxx-0000-1000-8000-00805F9B34FB

Slide 44

Slide 44

i device information manufacturer model number serial number hardware revision firmware revision software revision ...

Slide 45

Slide 45

i 0x180A 0x2A29 0x2A24 0x2A25 0x2A27 0x2A26 0x2A28 ... b good fo ad for rea r saving dability bandwi , dth

Slide 46

Slide 46

s t r o p p u s c i t s i r e t e c s a e r h a t h f c o each one or more read write write without response notify

Slide 47

Slide 47

every value is an array of bytes s e t y b st no d y c n fa u j , s e p y t a t a

Slide 48

Slide 48

pfew...

Slide 49

Slide 49

Slide 50

Slide 50

s t c a f g n i r o b t u o ab fun with bluetooth

Slide 51

Slide 51

fun with bluetooth

Slide 52

Slide 52

web bluetooth still not t he fun pa rt :-( api

Slide 53

Slide 53

connecting to a device

Slide 54

Slide 54

navigator.bluetooth.requestDevice({ filters: [ { namePrefix: 'PLAYBULB' } ], optionalServices: [ 0xff0f ] }) .then(device => device.gatt.connect()) .then(server => server.getPrimaryService(0xff0f)) .then(service => service.getCharacteristic(0xfffc)) t a h w r e s w o r b e h t l l e we t t n a w e w e c i v e d f o d kin .then(characteristic => { return characteristic.writeValue( new Uint8Array([ 0x00, r, g, b ); }) ])

Slide 55

Slide 55

s t c e l e s r e s u e th al device u t c a the

Slide 56

Slide 56

navigator.bluetooth.requestDevice({ filters: [ { namePrefix: 'PLAYBULB' } ], optionalServices: [ 0xff0f ] }) .then(device => { .... }) .then(device => device.gatt.connect()) .then(server => server.getPrimaryService(0xff0f)) .then(service => service.getCharacteristic(0xfffc)) 7 1 0 2 o s e r a .then(characteristic => e{ s s i m o r return characteristic.writeValue( p new Uint8Array([ 0x00, r, g, b ); ])

Slide 57

Slide 57

let device = await navigator.bluetooth.requestDevice({ filters: [ { namePrefix: 'PLAYBULB' } ], optionalServices: [ 0xff0f ] }); .then(device => device.gatt.connect()) .then(server => server.getPrimaryService(0xff0f)) .then(service => service.getCharacteristic(0xfffc)) .then(characteristic => { return characteristic.writeValue( new Uint8Array([ 0x00, r, g, b ); }) ])

Slide 58

Slide 58

let device = await navigator.bluetooth.requestDevice({ filters: [ { namePrefix: 'PLAYBULB' } ], optionalServices: [ 0xff0f ] }); r e v r e s e h t o ect t conn let server = await device.gatt.connect()); let service = await server.getPrimaryService(0xff0f)); let characteristic = await service.getCharacteristic(0xfffc)); e c i v r e s e get th .then(characteristic => { return characteristic.writeValue( new Uint8Array([ 0x00, r, g, b ); }) ]) c i t s i r e t c a r a h c e h get t

Slide 59

Slide 59

writing data

Slide 60

Slide 60

w s e t y b e m o s e rit let let let let device = await navigator.bluetooth.requestDevice({ ... }); server = await device.gatt.connect()); service = await server.getPrimaryService(0xff0f)); characteristic = await service.getCharacteristic(0xfffc)); characteristic.writeValue( new Uint8Array([ 0x00, r, g, b ); ])

Slide 61

Slide 61

reading data

Slide 62

Slide 62

e m o s d er a s e t y b let let let let device = await navigator.bluetooth.requestDevice({ ... }); server = await device.gatt.connect()); service = await server.getPrimaryService(0xff0f)); characteristic = await service.getCharacteristic(0xfffc)); let value = await characteristic.readValue(); let r = value.getUint8(1); let g = value.getUint8(2); let b = value.getUint8(3);

Slide 63

Slide 63

get notified of changes

Slide 64

Slide 64

add r e n e t s i l t n e v e let let let let device = await navigator.bluetooth.requestDevice({ ... }); server = await device.gatt.connect()); service = await server.getPrimaryService(0xff0f)); characteristic = await service.getCharacteristic(0xfffc)); characteristic.addEventListener( 'characteristicvaluechanged', e => { let r = e.target.value.getUint8(1); let g = e.target.value.getUint8(2); let b = e.target.value.getUint8(3); } ); don't forget to star t listen ing characteristic.startNotifications();

Slide 65

Slide 65

things you need to know: • the webbluetooth api • promises (or async await) • typed arrays d ! h u

Slide 66

Slide 66

browser support Chrome Opera Samsung Servo (soon)

Slide 67

Slide 67

browser support Chrome Opera Samsung Servo (soon) iOS

Slide 68

Slide 68

browser support Chrome Opera Samsung Servo (soon) iOS

Slide 69

Slide 69

browser support a d kin Chrome Opera Samsung s k r o w Servo WebBLE (soon) for iOS

Slide 70

Slide 70

and...

Slide 71

Slide 71

and... npm install node-web-bluetooth

Slide 72

Slide 72

and... npm install cordova-plugin-webbluetooth

Slide 73

Slide 73

and... espruino m m 8 2 x 8 1

Slide 74

Slide 74

custom characteristics. wtf!

Slide 75

Slide 75

writing a value: function(r, g, b) { return new Uint8Array([ 0x00, r, g, b } ]); reading a value: function(buffer) { return { r: buffer.getUint8(1), g: buffer.getUint8(2), b: buffer.getUint8(3) } } fro g n i d a e r d n a o t g writin c i t s i r e t c a r a h c e m a s e h t m

Slide 76

Slide 76

writing a value: function(r, g, b) { return new Uint8Array([ 0x01, g, 0x01, 0x00, 0x01, b, 0x01, r, 0x01, 0x00 ]); } t n e r r u c e h t g n i read e l b i s s o p t o n s i r colo

Slide 77

Slide 77

writing a value: function(r, g, b) { var buffer = new Uint8Array([ 0xaa, 0x0a, 0xfc, 0x3a, 0x86, 0x01, 0x0d, 0x06, 0x01, r, g, b, 0x00, 0x00, (Math.random() * 1000) & 0xff, 0x55, 0x0d ]); for (var i = 1; i < buffer.length - 2; i++) { buffer[15] += buffer[i]; } return buffer; } t n e r r u c e h t g n i read e l b i s s o p t o n s i r colo

Slide 78

Slide 78

writing a value: function(r, g, b, position) { let buffer = new Uint8Array([ 0x07, 0x02, position + 1, r, g, b ]); return buffer; }

Slide 79

Slide 79

writing a value: function(r, g, b, position) { let buffer = new Uint8Array([ 0x58, r, g, b, 0x01, position ]); ...

Slide 80

Slide 80

writing a value: function(r, g, b, position) { let buffer = new Uint8Array([ 0x58, r, g, b, 0x01, position ]); let payload = new Uint8Array(buffer.length + 4); payload[0] = payload.length - 2; payload[1] = payload.length - 2 >>> 8; payload.set(buffer, 2); let checksum = payload.reduce((a, b) => a + b, 0); payload[payload.length - 2] = checksum; payload[payload.length - 1] = checksum >>> 8; let extra = payload.filter(value => {

Slide 81

Slide 81

message[m] = 0x03; message[m + 1] = 0x05; m += 2; } else if (payload[i] === 0x03) { message[m] = 0x03; message[m + 1] = 0x06; m += 2; } else { message[m] = payload[i]; m++; } } message[0] = 0x01; message[message.length - 1] = 0x02; return message; }

Slide 82

Slide 82

adafruit bluetooth sniffer

Slide 83

Slide 83

log all bluetooth packets on your phone o t b d a e g s o l u e d n a nsfer th a r t

Slide 84

Slide 84

o t k r a h s a e t r a i d w e e s u k at th o o l

Slide 85

Slide 85

decompiling the apk t ' n do ! e n o y n a l tel

Slide 86

Slide 86

finally t he fun p ar t demo

Slide 87

Slide 87

warning experimental technology w o l g n i t set s n o i t a t c e p x e

Slide 88

Slide 88

warning wifi interference r e h t r u f n e v e m e h t g n loweri

Slide 89

Slide 89

Slide 90

Slide 90

fun with bluetooth !

Slide 91

Slide 91

questions? @htm l5test