B1.6 - After flashing still old firmware inside

[Easyrunner]

Hi there,

I have two LYWSD03MMC where after "successfull" flashing still the old firmware is in.

They have this Fw_version: 2.1.1_0159 flashed.

First I add the devices into my Xiaomi account.
Then I use the token extractor to get the ID, token and key which I inserd at Telink flasher after connection.

It says Login successfull.

Then I load the needed "ATC_Exploit.bin" and start flashing. Flasing shows also successfull, but nothing happen. No "ATC..." in the Screen like other devices.
It has still the old original firmwar flashed.

Here the Log:

Log: 20:25:52: Searching for devices 20:26:12: Connecting to: LYWSD03MMC 20:26:18: Detected Mi Thermometer 20:26:18: Fw_version: 2.1.1_0159 20:26:18: Connected 20:26:58: Received device infos are correct 20:26:58: Login successfull 20:27:06: File was selected, size: 69680 bytes 20:27:06: Count: 4355 20:27:08: Start DFU 20:28:16: Update done after 66.403 seconds 20:28:22: Disconnected.

I tried it sveral times. Always the same.

[timbrd]

Same behavior here...

[CodeStrix]

Same behavior here.... :/

[timbrd]

I got the sensors running.

These are the steps to update the sensors:

• Flash the two firmwares via the TeLink Flasher:
  • Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin.zip
  • ATC_Exploit.bin
• Then use the TelkinMiFlasher and flash the three firmware as described here: Firmware via OTA for version 2.1.1_0159 pvvx/ATC_MiThermometer#602 (comment)

I have 8 sensors running the zigbee firmware which are integrated into homeassistant.

[CodeStrix]

I got the sensors running.

These are the steps to update the sensors:

• Flash the two firmwares via the TeLink Flasher:

  • Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin.zip
  • ATC_Exploit.bin

• Then use the TelkinMiFlasher and flash the three firmware as described here: Firmware via OTA for version 2.1.1_0159 pvvx/ATC_MiThermometer#602 (comment)

I have 8 sensors running the zigbee firmware which are integrated into homeassistant.

This unfortunately does not work for me. When I try to load the ATC_Exploit.bin in the TeLink Flasher I get this error: "Select file is no telink firmware .bin". This the prevents me to propably do the following steps. I used this bin: https://github.com/atc1441/ATC_MiThermometer/blob/master/ATC_Exploit.bin

Any thoughts?

[timbrd]

I got the sensors running.
These are the steps to update the sensors:

• Flash the two firmwares via the TeLink Flasher:

  • Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin.zip
  • ATC_Exploit.bin

• Then use the TelkinMiFlasher and flash the three firmware as described here: Firmware via OTA for version 2.1.1_0159 pvvx/ATC_MiThermometer#602 (comment)

I have 8 sensors running the zigbee firmware which are integrated into homeassistant.

This unfortunately does not work for me. When I try to load the ATC_Exploit.bin in the TeLink Flasher I get this error: "Select file is no telink firmware .bin". This the prevents me to propably do the following steps. I used this bin: https://github.com/atc1441/ATC_MiThermometer/blob/master/ATC_Exploit.bin

Any thoughts?

Thats really odd. The flasher is the right one for the exploit and the firmware you referenced is the same that I have used to flash my sensors.
Did you check the file?

❯ shasum ATC_Exploit.bin
ae8608c58a3c9a38db1f3f94adbbf54ad95e20c1  ATC_Exploit.bin

[Easyrunner]

These are the steps to update the sensors:

• Flash the two firmwares via the TeLink Flasher:

  • Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin.zip
  • ATC_Exploit.bin

That I can do, but after that, I don't know what to do, because I don't want Zigbee. I just want it at BLE ATC

After repowering the sensor I tried with TelinkMiFlasher the ATC_V53.bin. I can flash it but after repowering, no ATC flashed. Just the old ones.

[CodeStrix]

I got the sensors running.
These are the steps to update the sensors:

• Flash the two firmwares via the TeLink Flasher:

  • Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin.zip
  • ATC_Exploit.bin

• Then use the TelkinMiFlasher and flash the three firmware as described here: Firmware via OTA for version 2.1.1_0159 pvvx/ATC_MiThermometer#602 (comment)

I have 8 sensors running the zigbee firmware which are integrated into homeassistant.

This unfortunately does not work for me. When I try to load the ATC_Exploit.bin in the TeLink Flasher I get this error: "Select file is no telink firmware .bin". This the prevents me to propably do the following steps. I used this bin: https://github.com/atc1441/ATC_MiThermometer/blob/master/ATC_Exploit.bin
Any thoughts?

Thats really odd. The flasher is the right one for the exploit and the firmware you referenced is the same that I have used to flash my sensors. Did you check the file?

❯ shasum ATC_Exploit.bin
ae8608c58a3c9a38db1f3f94adbbf54ad95e20c1  ATC_Exploit.bin

I'll check for the file when I get back from vscation. As further hints: ordered the devices 2 months ago. Tried several devices to flash using edge.

[CodeStrix]

@timbrd @Easyrunner

So - I checked the SHA checksum:

SHA256-Hash von ATC_Exploit.bin:
5de60f69e4cd4cfc528f3ab70f46b50f06cc372d121b9414f414527ebd14d023

It surely is a different checksum. Then I downloaded it again and got this:

SHA256-Hash von ATC_Exploit.bin:
81409c517e0c2c26d0cbb8ec5c00ccf6307b4d4cc7f328540f5c52b2ca0b58fa

Then I tried it again - no change. Even after flashing with the "Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin.zip", in the log it still says version 2.1.1_0159. Then after reconnect and login, the error still appears: "Select file is no telink firmware .bin"

[timbrd]

@timbrd @Easyrunner

So - I checked the SHA checksum:

SHA256-Hash von ATC_Exploit.bin: 5de60f69e4cd4cfc528f3ab70f46b50f06cc372d121b9414f414527ebd14d023

It surely is a different checksum. Then I downloaded it again and got this:

SHA256-Hash von ATC_Exploit.bin: 81409c517e0c2c26d0cbb8ec5c00ccf6307b4d4cc7f328540f5c52b2ca0b58fa

Then I tried it again - no change. Even after flashing with the "Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin.zip", in the log it still says version 2.1.1_0159. Then after reconnect and login, the error still appears: "Select file is no telink firmware .bin"

You need to make sure the checksum matches, otherwise the firmware is corrupt.

[timbrd]

Btw: You used sha256 to calculate the checksum, I have used sha1.

This is the correct sha256 checksum:

❯ shasum -a 256 ATC_Exploit.bin
edcdff86ebe8251a8d61bd59d53a4ccc491333e82b31a59877dffa62de5d3b33  ATC_Exploit.bin

[CodeStrix]

@timbrd @Easyrunner
So - I checked the SHA checksum:
SHA256-Hash von ATC_Exploit.bin: 5de60f69e4cd4cfc528f3ab70f46b50f06cc372d121b9414f414527ebd14d023
It surely is a different checksum. Then I downloaded it again and got this:
SHA256-Hash von ATC_Exploit.bin: 81409c517e0c2c26d0cbb8ec5c00ccf6307b4d4cc7f328540f5c52b2ca0b58fa
Then I tried it again - no change. Even after flashing with the "Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin.zip", in the log it still says version 2.1.1_0159. Then after reconnect and login, the error still appears: "Select file is no telink firmware .bin"

You need to make sure the checksum matches, otherwise the firmware is corrupt.

Then I do wonder, how the checksum changed - where did you get the ATC_Exploit.bin from? I got mine from here. I did redownload it several times - still the same checksum (81409c517e0c2c26d0cbb8ec5c00ccf6307b4d4cc7f328540f5c52b2ca0b58fa).

This also is the second step - flashing it with the Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin does not have an effect - still version 2.1.1_0159 in the logs.

Btw. your effort is highly appreciated here - thanks ;)

[Easyrunner]

Still the same problem. After flashing ATC_Exploit.bin same behaviour like before the flashing.
I took the file from
https://github.com/atc1441/ATC_MiThermometer/blob/master/ATC_Exploit.bin

I tried also Original_OTA_Xiaomi_LYWSD03MMC_v1.0.0_0130.bin

No success!

With which console/tool/plattform we should check the file?
❯ shasum ATC_Exploit.bin
ae8608c58a3c9a38db1f3f94adbbf54ad95e20c1 ATC_Exploit.bin_

[CrazyVaclav]

I have the same Problem
1.) I got my BLE KEY, TOKEN, ID from the Python Script Wrapper "token_extractor.exe" that connects to my Xiaomi Account.
2.) I used https://atc1441.github.io/TelinkFlasher.html
2.1) I flashed https://github.com/atc1441/ATC_MiThermometer/blob/master/Stock_fw_2.1.1_0159.bin
2.2) I flashed https://github.com/atc1441/ATC_MiThermometer/blob/master/ATC_Exploit.bin

3.) As the other people say no reboot and still the old firmeware

[ehafizoglu]

Same problem. Is there anybody that can solve this problem?