0xreversed/with.ai
Firmware and hardwareWorks
Target: JMOWTO smart toilet

Turned a smart toilet's Bluetooth protocol into a Mac menu bar remote with Codex and REA

JMOWTO smart toilet: A smart toilet's lid, opened from the Mac menu bar.
Image: @thinkszyg on X

What was done

thinkszyg used Codex with REA to reverse engineer the Bluetooth protocol behind a smart toilet's WeChat mini program, and in about half an hour had a native Mac menu bar remote that opens the real lid.

thinkszyg put the smart toilet in his study into his Mac's menu bar. Working with Codex, he used REA to reverse engineer the Bluetooth protocol used by the toilet's WeChat mini program, then built a native remote control app in about half an hour. Clicking the lid button on the Mac moves the real lid.

How it was done

The toilet is normally controlled through a WeChat mini program over Bluetooth. Codex, with REA as its reverse engineering tool, worked out that protocol from the mini program, and the pair then wrote a small native macOS app that talks to the toilet directly. The screen recording shows a JMOWTO control panel that scans for and connects to the device, with buttons for the lid, seat, flush, washing and drying, temperature presets, water pressure and a night light with colour and brightness.

Results

The recording shows the app connected and the lid opening when the button is clicked. In a later reply he says he extended the same approach to bring the rest of his home devices into the Mac menu bar. The post shares no code.

From the source