![\"rasbperrypi-hacks\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/09\/rasbperrypi-hacks.jpg\")
<\/p>\nSince I’m still waiting for all the audio components I ordered for E.V.E’s voice recognition functionality, let’s try in the meantime to interface E.V.E with a first home device.<\/p>\n
The very first one that comes to my mind is of course a television set. Let’s try !<\/p>\n
<\/p>\n
Reverse-engineering an Orange Livebox Play set-top box I rely on Orange<\/a> quadruple-play offer for xDSL, phone, 4G and television services. Orange provides a set of two boxes:<\/p>\n These devices are completed by a remote control and iOS<\/a> \/Android<\/a> applications.<\/p>\n Unfortunately, Orange doesn’t publish any document on its API, or any information at all on how to interface with its devices. Which is a real shame.<\/p>\n But since Orange applications for smartphone and tablets are able to drive these equipment over Wifi (and hopefully HTTP), there is probably a way to reverse-engineer the protocol used.<\/p>\n The first thing is to identify the IP address of the set-top box. One can either use the router web administration interface (via the local URL Here, the IP address of my set-top box is: Then, since a lot of consumer-electronic devices use the UPnP<\/a> protocol, I fired up upnp-inspector<\/a>, which gave this :<\/p>\n It seems one can actually drive an Orange set-top box via HTTP requests on the 8080 port. Indeed the URL showing in the “Details” window gave:<\/p>\n Let’s move on, launch Orange application “TVcommande” (which turns a smartphone into remote control), and sniff out with kismet<\/a> the HTTP traffic.<\/p>\n Testing each functionalities of the “WiFi remote”, it appeared it is driving the set-top box via simple HTTP requests of the form:<\/p>\n Where YY stands for:<\/p>\n And XXX stands for:<\/p>\n Indeed, a simple HTTP request like this:<\/p>\n returns this message:<\/p>\n and powers on the device. Repeating this request will power off the device.<\/p>\n It turned out also that this request:<\/p>\n returns information about the state of the device. When the device is powered on, it returns:<\/p>\n When the device is powered off, it returns:<\/p>\n Now, let’s explore the “En direct” (i.e “live”) fonctionnality of the remote.<\/p>\n It first fires this HTTP request:<\/p>\n
\n<\/strong><\/p>\n\n
![\"photo-livebox-play\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/photo-livebox-play.jpg\")
<\/p>\nhttp:\/\/livebox<\/code>) or use the smartphone \/ tablet application “Ma Livebox” (my LiveBox):<\/p>\n![\"malivebox\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/malivebox.png\")
<\/p>\n192.168.1.10<\/code>.<\/p>\n![\"upnp-inspector\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/upnp-inspector.png\")
<\/p>\n![\"basicdevicedescription\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/basicdevicedescription.png\")
<\/p>\n![\"tvcommand\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/tvcommand.png\")
<\/p>\n\n
http:\/\/192.168.1.10:8080\/remoteControl\/cmd?operation=01&key=XXX&mode=YY<\/code><\/li>\n<\/ul>\n![\"orange_modes\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/orange_modes-300x93.png\")
<\/p>\n![\"orange_keys\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/orange_keys.png\")
<\/p>\n\n
http:\/\/192.168.1.10:8080\/remoteControl\/cmd?operation=01&key=116&mode=0<\/code><\/li>\n<\/ul>\n![\"orange-answer\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/orange-answer.png\")
<\/p>\n\n
http:\/\/192.168.1.10:8080\/remoteControl\/cmd?operation=10<\/code><\/li>\n<\/ul>\n![\"state-on\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/state-on.png\")
<\/p>\n![\"state-off\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/state-off.png\")
<\/p>\n
![\"orange-live\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/orange-live.png\")
<\/p>\n![\"epgid\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/epgid.png\")
![\"eve-tv-sketch\"](\"http:\/\/quantum-bits.org\/wp-content\/uploads\/2015\/10\/eve-tv-sketch.png\")
<\/p>\n