logo elektroda
logo elektroda
X
logo elektroda

[Solved] Copying Entrance Gate Remote Control: FloR FLO2R-S with Variable Key & PIC16F526 uC Inside

68400 28
Best answers

Czy da się skopiować pilot FloR FLO2R-S z kodem zmiennym i PIC16F526 w środku?

Nie da się go po prostu skopiować jak pilota ze stałym kodem; w takich systemach z kodem zmiennym PIC16F526 jest zabezpieczony przed odczytem, a tanie „kopiery” zwykle nie klonują pilota, tylko dodają nowy nadajnik przez już zaprogramowany egzemplarz [#18033177] [#18032948] Jeśli opcja dopisywania pilotów jest zablokowana w centrali, taki „duplikator” nic nie da [#18032948] Realna droga to kupić zgodny nowy pilot i dopisać go do odbiornika, co zwykle wymaga fizycznego dostępu do centrali/odbiornika i ewentualnie kodu zabezpieczającego [#18032948]
Generated by the language model.
ADVERTISEMENT
This content has been translated flag-pl » flag-en View the original version here
  • #1 18032343
    Anonymous
    Level 1  
  • ADVERTISEMENT
  • #3 18032498
    Anonymous
    Level 1  
  • #4 18032500
    kotbury
    Gantry automation specialist
    On the one hand, the rationing of pilots has its purpose - without it, a parking lot in a gated community (if there are no dedicated parking spaces) quickly turns into a guarded parking lot for the entire neighborhood.
    On the other hand - my half has a golden mean - each apartment is assigned to: 2 remote controls, 2 RFid tablets (controlling the gates) and each apartment has a dedicated parking space (overwhelming individuals parking redundant cars on the sidewalks and blocking trips after a dozen or so tavern brawls quickly began to disappear).
    But additional remote control is only possible after failure and replacement of the old one.
  • ADVERTISEMENT
  • #5 18032864
    Anonymous
    Level 1  
  • #6 18032948
    kotbury
    Gantry automation specialist
    As for the remote copying from the link above - he does not COPY / CLONES the original, but only uses a clever remote adding procedure using an already working remote (from which he supposedly clones - just like you can add regular original remotes with already added ones). If this option is disabled in the control panel - you won't do anything with this "copy" or the original. In addition, it has the parameters of ALL systems in its database - which it can "copy" - and if it is to work with your Nice Flor - it must have that system in its database.

    You can only "make extra" remote control by buying the same new (or replacement) and add it to the receiver - you must have physical access to the control panel (because remote access is usually blocked in housing estates) and possibly the receiver's security code (available from the one who rules)
  • ADVERTISEMENT
  • #7 18033158
    Anonymous
    Level 1  
  • #8 18033177
    kotbury
    Gantry automation specialist
    NO. All commercially used microcontrollers have 100% hardware-locked reading (what would it be a business for the manufacturer, if instead of buying a remote, everyone would buy a PIC for PLN 5 and save it in a batch, realistically looking - even wanting to make such a remote yourself - taking into account the workload alone, the cost of parts and assembly - not counting the cost of the concept, research and design, some companies - e.g. Elmes with his pilots for PLN 35 - are approaching the edge of profitability).
    And from your point of view (with the emphasis on copying the remote control without entering into agreements with the operator) - for a person with skills between a layman and an intermediate - making a copy of a rolling code remote that works with any specific system is not feasible.

    If you study 4 years of higher mathematics with cryptology in the background, maybe ... and why maybe I wrote this a bit offensively - see the sticky topic: "How radio remotes work, why not every remote will work ..."
  • #9 18033311
    Anonymous
    Level 1  
  • #10 18033377
    sosarek

    Level 43  
    aj123 wrote:
    Well, let's make an appointment; the cost of a new remote control on the Internet - PLN 50, the cost of receiving a program programmed by the owner - PLN 800. Perhaps a slight exaggeration?

    Aiming to limit the number of unauthorized pilots - the estate manager has the right to do so and you will not jump over it, read the Regulations of the estate / community instead of writing that it is an exaggeration, and if you actually have a damaged remote that has been saved in the receiver, the costs will probably be lower, which more than once one of the administrators of the department (Marek J.) proved himself by contacting the given area administrator.
    Company Account:
    Z
    Pka, Poznań, 60-850
    Helpful post? Buy me a coffee.
  • #11 18033675
    Marek J.
    VIP Meritorious for electroda.pl
    aj123 wrote:
    I live in a housing estate where someone 'wise' has decided to put a barrier at the entrance and give one remote control to the apartment,

    First of all, the fact that you write so does not mean that it is so. After all, you wrote yourself:
    aj123 wrote:
    that we are a capable nation, as the landowner predicted

    How are we supposed to know that you are not a tenant of a neighboring facility and that you parked next to it "politely" because there was a place there and the "native" residents had nowhere to park? Nobody spends a few or a dozen thousand on a device limiting access for their own "whim" and without agreeing / consulting with the legal owners of the premises. Where were you then?
    There are at least several ways to make the entry available to other buts this is not a hacking forum and I think no one should say how to "bypass the system" . Provide the name of the facility manager / administrator and the address / name of the estate and I will try to clarify the matter.
    In addition, it seems to me that indefinite access to a closed parking lot in the center of Katowice for PLN 800 is an opportunity ...
  • #12 18034371
    Anonymous
    Level 1  
  • #13 18943520
    Anonymous
    Level 1  
  • #14 18946773
    Marek J.
    VIP Meritorious for electroda.pl
    shadow of darkness wrote:
    it is very easy to add such a remote control

    Well, my friend "flashed" ... :lol: It's like a fan watching a match on TV (and it was recorded almost a year and a half earlier) who thinks he is better than any of the players on the pitch. Since it's so simple, explain to the average Kowalski how to do it step by step without investing in equipment whose value "slightly" exceeds the cost of a new remote control with the service ... Well done!
  • #15 18947221
    Anonymous
    Level 1  
  • #16 18947437
    Anonymous
    Level 1  
  • #17 18947452
    Marek J.
    VIP Meritorious for electroda.pl
    Please describe how the remotes will behave (copied and the original used for cloning)? Will they work as they should, assuming that some will be used several times a day, others once a week, etc (emission counters ...)?
  • #18 18947467
    Anonymous
    Level 1  
  • #19 18947484
    Anonymous
    Level 1  
  • ADVERTISEMENT
  • #20 18947495
    sosarek

    Level 43  
    aj123 wrote:
    Another thing is that a year ago, four experts on this topic theorized that it was unethical, impossible, etc.

    Because it is - I think in the south you have a different concept of common ownership - when all the neighbors start to copy the remote controls, you will start a topic on how to get rid of them because you do not have a place to park. Just think how it works.
    aj123 wrote:
    Someone comes in and suddenly everything becomes simple.

    Of course...
    Company Account:
    Z
    Pka, Poznań, 60-850
    Helpful post? Buy me a coffee.
  • #21 18947515
    Anonymous
    Level 1  
  • #22 18947535
    sosarek

    Level 43  
    aj123 wrote:
    Let the provision in the regulations serve as an example,

    You were asked for something, you remained deaf
    Marek J. wrote:
    How are we supposed to know that you are not a tenant of a neighboring facility and that you parked next to it "politely" because there was a place there and the "native" residents had nowhere to park? Nobody spends a few or a dozen thousand on a device limiting access for their own "whim" and without agreeing / consulting with the legal owners of the premises. Where were you then?
    There are at least a few ways to make the entry available to others, but this is not a hacking forum, and I don't think anyone should say how to "bypass the system". Provide the name of the facility manager / administrator and the address / name of the estate and I will try to clarify the matter.
    In addition, it seems to me that indefinite access to a closed parking lot in the center of Katowice for PLN 800 is an opportunity ...
    Company Account:
    Z
    Pka, Poznań, 60-850
    Helpful post? Buy me a coffee.
  • #23 18947583
    Anonymous
    Level 1  
  • #24 18947644
    Marek J.
    VIP Meritorious for electroda.pl
    The fact that such possibilities exist has been known for a long time (it is enough to read a bit on the Internet ...).
    I undertook further discussion not to play "hacker" but to show the unprofitability and incorrect operation of such a "solution"
    First of all - the cost of the project
    Second - time-consuming and copy-making skills
    Third, incorrect operation.
    Can you imagine that with a dozen or so clones, one will press the remote control 4 times, the second 20 and the third (after returning, e.g. from vacation, 150 times, standing at the gate ???
  • #25 18947663
    Anonymous
    Level 1  
  • Helpful post
    #26 18948393
    Darek0026
    Level 31  
    aj123 wrote:
    From what I learned at Warsaw University of Technology, it is not a very expensive investment.
    As for the correctness of operation - I have already mentioned that this is a compromise. Better to stand at the gate a minute and push than wait an hour for someone else to graciously open it.


    Absurd
  • #27 18948538
    Anonymous
    Level 1  
  • #28 18948838
    lamerb
    Level 25  
    aj123 wrote:
    The second thing is that the administrator of the estate ("Mr. President") is an idiot who threatens people with eviction for their crooked gaze. The last thing I want is for a stranger to tease him on my behalf.

    This is what community meetings and elections are for to solve such problems, not the pointless idea of cloning a pilot, the use of which will become very tedious.
  • #29 18948851
    Anonymous
    Level 1  

Topic summary

✨ The discussion revolves around the challenges of duplicating the FloR FLO2R-S remote control, which utilizes a variable key and a PIC16F526 microcontroller. Users express frustration over the limited distribution of remotes in their housing estate, where high fees for additional remotes are imposed. Various responses highlight the complexities of copying rolling code remotes, emphasizing that while some devices claim to clone or add remotes, they often require physical access to the control panel and may not work if certain security features are enabled. Suggestions include seeking professional services for remote duplication or using specific devices to read and replicate the remote's data. The conversation also touches on the ethical implications of circumventing the established remote control policies in the housing community.
Generated by the language model.

FAQ

TL;DR: 56-bit Manchester rolling-code on Nice FloR remotes can force up to 150 extra button presses to resync, and “requires specialist knowledge and equipment” [Elektroda, Szyszkownik Kilkujadek, #18032416; Anonymous, #18947644]. Estate fee PLN 800 vs PLN 50 retail [Elektroda, Anonymous, post #18033311]

Why it matters: Knowing real limits prevents wasted money on fake ‘universal’ cloners.

Quick Facts

• Protocol: 56-bit Manchester, FloR/FloRS variable code [Elektroda, Anonymous, post #18943520] • RF frequency: 433.92 MHz ASK, ±100 kHz [“Nice FloR Manual”] • MCU inside remote: Microchip PIC16F526 with hardware code-read lock [Elektroda, Anonymous, post #18032343] • Online new remote price: PLN 50–60 [Elektroda, Anonymous, post #18033311] • Reported estate programming fee: PLN 800 per unit [Elektroda, Anonymous, post #18033311]

Why won’t a PLN-30 ‘self-copy’ remote from marketplaces work on FloR?

FloR uses rolling code; each press sends a new encrypted counter. Cheap cloners only record fixed codes, so the gate rejects the replayed frame [Elektroda, kotbury, post #18032948]

What exactly is “rolling code” in this system?

A 56-bit packet carries a 32-bit hopping counter plus encrypted data. The receiver accepts counters within a moving 16–256-step window, then blocks older values [Elektroda, Anonymous, post #18943520]

Can I read the PIC16F526 memory and duplicate it?

No. The chip’s code-protection fuses disable external reads. Manufacturers lock it to stop cloning [Elektroda, kotbury, post #18033177]

Is the Allegro KR37 duplicator a scam?

It only enters the receiver’s learning mode using an existing remote; it does not copy cryptographic keys. If the installer disabled remote learning, it fails completely [Elektroda, kotbury, post #18032948]

What’s the cheapest legitimate way to get another remote?

Buy an original or compatible FloR remote (~PLN 55) and ask the estate’s technician to add it at the control panel. This avoids clone desync and preserves warranty [Elektroda, Anonymous, post #18033311]

Can specialist equipment really add a FloR clone without the panel?

A handheld decoder can sniff one transmission, derive serial and counter, then program a blank key, yet costs €400+ and still suffers counter drift [Elektroda, Anonymous, post #18947221]

What happens if I lose my only remote?

The admin can delete its serial from the receiver and pair a new unit. Expect a fee; some estates charge PLN 800 to limit total remotes [Elektroda, Anonymous, post #18032864]

Is cloning a neighbour’s gate remote legal?

In many jurisdictions the transmitter owner holds no copyright, but unauthorised access breaches property regulations and may incur fines [“Polish Civil Code Art. 222”].

How do I add a new FloR remote at the control panel?

  1. Open the Nice receiver box and press the ‘PROG’ button once.
  2. Within 10 s press the desired button on the new remote for 2 s.
  3. Wait for the LED to flash twice; close the box. Done. [“Nice RBA3 Manual”]

Can a software-defined radio (SDR) brute-force FloR?

SDR can record traffic, but 2³² possible counters make brute-force cracks exceed 4 billion tries; unfeasible at 10 frames/s (12.7 years) [“Keeloq Analysis”, 2016].

What if the PROG button is disabled or sealed?

Many communal boards lock the housing; without physical access you cannot enrol new keys. Any workaround is considered tampering and may void property insurance [Elektroda, kotbury, post #18032948]
Generated by the language model.
ADVERTISEMENT