De-Clouding IoT Devices: Local Control for Midea Air Conditioners and Tuya-Based Cat Feeders
A detailed technical guide demonstrates how to remove cloud dependency from consumer IoT devices by reverse engineering their hardware and replacing vendor firmware.
The author had long preferred Zigbee devices for a smart home to avoid vendor clouds but was compelled to purchase Wi-Fi-only appliances after adopting a cat. These included a Midea air conditioner paired with a Daichi controller and a Smart Life cat feeder, both built on Tuya platforms. The primary concern was lack of control over devices containing microphones and other sensors that phone home.
Hardware Toolkit and Initial Analysis
Essential tools included a multimeter, soldering iron, UART adapter supporting 3.3V/5V, flux, solder wick, and optional hot air station. The researcher emphasized practicing soldering on scrap boards first.
The Daichi DW23-B controller for the air conditioner contained a TYWE3S module based on ESP8266. The onboard USB port functioned as a UART interface, controlled by a physical switch. Firmware was backed up using esptool.py and replaced with ESPHome, enabling native climate control in Home Assistant.
Cat Feeder Reverse Engineering
The feeder used a WBR3 module on an RTL8720CF chipset communicating with an MCU via UART in the classic TuyaMCU architecture. After identifying UART pins with a multimeter and capturing traffic using TuyaMCUAnalyzer, the Wi-Fi controller was desoldered to access programming pins A_0 and A_15.
Firmware was read and written with ltchiptool. The device was then flashed with OpenBeken, which supports TuyaMCU protocol emulation. Configuration via autoexec.bat enabled drivers for TuyaMCU and NTP, mapped dpIDs to channels for battery level, feeding button, and scheduling, and exposed the device over MQTT for Home Assistant integration.
A custom automation script was created to simulate button presses for manual feeding, while schedule data structures were analyzed from raw protocol packets for potential future local implementation.
Related articles
Mozilla Adds Built-in Ad Blocker to Firefox for iOS Devices
Mozilla has integrated a native ad-blocking feature directly into its Firefox browser for iOS. The update allows iPhone and iPad users to block third-party advertisements and associated trackers before web pages load, eliminating the need for separate extensions. Apple’s App Store policies have long restricted the use of third-party content blockers on iOS compared to desktop and Android platforms. The new functionality targets intrusive elements such as pop-up windows, content-overlapping banners, and other advertising formats. By handling blocking at the browser level, Firefox for iOS improves user privacy and reduces exposure to tracking mechanisms without requiring additional software installation.
Russia Starts Blocking Encrypted DNS Protocols DoH and DoT Across Major ISPs
Since mid-August 2026, subscribers of Rostelecom, Dom.ru, Tattelecom, SkyNet and Beeline have reported sudden failures of encrypted DNS services from Google and Cloudflare. The blocking affects both DoT on port 853 and DoH on port 443, but the mechanisms differ: DoT connections receive TCP RST packets while DoH sessions are silently dropped after the TLS ClientHello. Analysis shows the interference originates from TSPU equipment performing DPI on SNI fields and known resolver domains. At the same time, ordinary UDP DNS queries are being intercepted and answered by the NSIDI infrastructure, returning NXDOMAIN for blocked domains. The changes indicate a centrally coordinated rollout of new filtering rules rather than isolated operator actions. Users are advised that encrypted DNS no longer provides reliable privacy or circumvention and that full VPN tunnels remain the only robust option.
Glassbox Tool Exposes Browser Fingerprinting Risks and Limitations of Incognito Mode
Developer and security researcher David Dale has released Glassbox, an open tool that runs over 30 browser fingerprinting checks to show how identifiable a user appears to trackers. The service evaluates Canvas, WebGL, installed fonts, WebAssembly functions, available APIs, third-party authentication state, and audio processing characteristics entirely in the browser. Results include raw test data and an identifiability score capped at roughly 33 bits, sufficient in theory to single out one person among the global population. Tests reported by The Register showed Chrome at 99 percent identifiability, Firefox at 89 percent, and Tor Browser at 56 percent, though these figures rely on a mathematical model rather than real-world visitor databases. Dale warns that overly hardened configurations can increase uniqueness and recommends using Tor or VPN together with WebRTC leak prevention to blend into larger anonymity sets.
Android 17 Adds Local Network Protection and Strengthens Wi-Fi Privacy Controls
Android 17 introduces Local Network Protection, requiring apps to obtain explicit permission before scanning or connecting to devices on the same Wi-Fi network. The feature limits unauthorized discovery of TVs, cameras, printers, consoles and other local equipment that could previously be used to build detailed user profiles. The update also enables Encrypted Client Hello by default to hide domain names during HTTPS handshakes from network observers. Certificate Transparency is now activated by default to detect fraudulent or mis-issued certificates that could enable interception attacks. Additional safeguards block forced downgrades to insecure 2G networks often exploited by fake base stations for SMS-based fraud. These changes collectively reduce passive tracking and man-in-the-middle risks without disrupting legitimate local network functions such as media casting.