November 2015

A while ago i bought an old variac on ebay, it was in good shape but lacked any meter, originally that model had a analog voltmeter or something. That was missing, some cut wires sticking out of where it was. As i got it it also had a 6.5Amp fuse in a fuse holder marked as 4A and its output wires connected straight bypassing the fuse.
When i bought it my plan was to stick a cheap digital meter to it, which is what i did and also a modern and correct “fuse”.
The meter i found and got supported 80-250VAC, i failed to find one supporting AC voltages down to 0V. I originally had not planed to modify it, as it didnt seem a big issue, but it was just annoying that around 70V it dropped out and displayed junk and then went dark.
Inside it looks like this:
I saw 2 obvious ways to make this work with lower voltages, first is to make its AC->5vdc supply work with a wider range of AC voltages, the other is to split the voltage sensing off the supply. As my variac provides around 250VAC in addition to the variable and isolated output, using that seemed to be the easier solution.
But before i continue, a warning, do NOT try this unless you understand what you are doing, mains voltage can be dangerous and can injure or kill. Also not all similar looking such meters are neccessary identical and this modification might result in undefined behaviour in that case.
The voltage is sensed through R3 which is 1Mohm, removing it:
Results in a working amp meter with 0V:
Next we need an additional connector for the separate AC power and AC sense input, to get that we just need to clear 2 from solder and cut the 2 connected pins on the other side using a file. Note, if you try this modification double check that the new freed up pin is not connected to anything else by some tracks below, it wasnt in the meter i had but that doesnt imply its not in yours.
Now its tempting to use the same or a new 1meg ohm resistor for the new sense wire added below (and i did and it worked) but this is probably not safe, first you should clear the conductive parts of the logo which are below, off the board and use 2 resistors in series as there is about 230VAC over it, yes it was already before any modifications but still.
You can also slightly adjust the value of this resistor to adjust/finetune the volt-meter.
The other side of the resistor is connected with a mod wire to the newly freed up pin on the other side. Again using a file to make some cut in the board to nicely route the wire around.
The new connector is then connected like this:

  1. Variac secondary tap 1
  2. Variac secondary tap 2 and Load/Output connection A
  3. Variac secondary tap 3
  4. Load/Output connection B

Testing, works:

A while ago in coverity while fixing FFmpeg bugs there was a some kind of Nominate a bug, win a prize thing, i didnt ever nominate one but this was when i learned about the existence of tile which would have been the prize one could win. A BLE device that can be attached to something valuable and that can then be searched and found with a recent android or iPhone, or the other way around using the device to find your phone.
This seemed potentially useful to me, though i personally have never lost my keys or phone for more than a few seconds, i know someone who does have that problem. So i thought buy a tile or 2 they might come in handy for something but then i saw the price, non replaceable, non rechargable battery and thought ok, didnt expect someone would be that lame. I guess one should not expect any company not to attempt to rip its customers off to the maximum extend possible.

Lucky there are many similar devices, so the goal was to find the cheapest that works and is not just tied to a ridiculous business model. So i bought some of the cheapest i could find (they of course all have user replaceable batteries …)
First is something that identifies itself as


The above one is one example of these, they come in many different shapes, cost less than 5$ with free shipping. The first i got had a different shape and came with a dead battery and also ate a new battery within a day. The second i got is the one pictured above, which worked more or less.
When Off, A long press on its large surface switches it on with 2 beeps.
When On or connected a long press switches it off with a long beep (this renders it useless as its easy to press by mistake)
When on but not connected its led also continuously blinks, draining the battery but making finding easier, it also at least once hanged and required the battery to be disconnected for a moment to function again.
On the BT protocol side setting immedeate alert to 2 results in 30 beeps and led blinks, setting link loss to 0 or 2 has no effect, the device always beeps on unintentional connection losses as far as i could figure out. pressing the button results in a notify with value 0x01 on 0000ffe0-0000-1000-8000-00805f9b34fb / 0000ffe1-0000-1000-8000-00805f9b34fb.
To make the itag only blink and not beep on immedeate alert, 0000fff0-0000-1000-8000-00805f9b34fb/0000fff1-0000-1000-8000-00805f9b34fb can be set to 0x00, this is remembered over disconnects but not over switching the tag off. All other values seem to cause blinking and beeping.
To identify it this may be helpfull:

  • 0x2A29: CEVA
  • 0x2A24: BT 4.0
  • 0x2A25: 12x07x2012
  • 0x2A27: SM-1
  • 0x2A50: Bluetooth SIG Company: Ceva, Inc. (formerly Parthus Technologies, Inc.)
    Product Id:13330
    Product Version: 26369

Smart Finder

The above is another sub 5$ tag, which appears identical (minus the logos) to tags on amazon from chirotronix and ikee.
The official software for android (“small lovely”) has a rather long list of unneeded permissions like for the previous tag (“iTracing”) but for this theres also no inofficial sw i could find for android which supports these tags, which is why i reverse engeneered the protocol
When off a long press switches it on with a long beep, to switch it off again 5 rapid short presses are needed (resulting in 3 beeps).
When in On mode pressing the button results in 2 beeps this also causes the “#255 Manufacturer Specific Data” to change from 0x58,0x48,0x52 to 0x58,0x48,0xFF for a few seconds, apparently to identify which of potential several devices one wants to connect to. Switching the device off also seems not possible while it is connected. On connect and disconnect its led flashes once.
Protocol wise neither “link loss” nor “immedeate alert” have any effect that i could identify. To make the device beep and blink a command must be written to 0000fff0-0000-1000-8000-00805f9b34fb / 0000fff1-0000-1000-8000-00805f9b34fb. A single 0xAA results in some short beeps and blinking. Its also possible to write a 5 byte command 0xAA 0x03 count duration1 duration2. The count is the number of beeps, the 2 durations are the beep and non beep durations in milli seconds, i dont know what the 0x03 does or if there are other interesting commands.
To detect button presses the device can send notifies on 0000fff0-0000-1000-8000-00805f9b34fb / 0000fff1-0000-1000-8000-00805f9b34fb with a 3 byte value, it is either (0x01 xx 0x00) xx = number of short button presses or (0x02 0x00 xx) xx = number of seconds button is hold
To identify it this may be helpfull:

  • 0x2A29: SIGNAL
  • 0x2A24: BT A8105
  • 0x2A25: 00001
  • 0x2A26: F4F5V02
  • 0x2A27: A8105F4
  • 0x2A28: 1030627

The name of teh device is “AMIYJ_5B68”, i dont know if this is true for all these devices, google seemed not to have any hits on that.
It seems using a A8105, (the ITAG seems using a BK3431) datasheets can be found with google.
Interestingly theres also a entry for “Heart rate” on the bluetooth level, so i guess this shares some code with some other devices.


Hope something above is useful to someone

Update: 2015-11-09: corrected itags link loss behavior
Update: 2015-11-10: Added names of the official apps
Update: 2015-11-14: Added itag blink only info (found by and thanks to Joachim Schäfer)