De-Clouding IoT Devices: Local Control for Midea Air Conditioners and Tuya-Based Cat Feeders
A detailed technical guide demonstrates how to remove cloud dependency from consumer IoT devices by reverse engineering their hardware and replacing vendor firmware.
The author had long preferred Zigbee devices for a smart home to avoid vendor clouds but was compelled to purchase Wi-Fi-only appliances after adopting a cat. These included a Midea air conditioner paired with a Daichi controller and a Smart Life cat feeder, both built on Tuya platforms. The primary concern was lack of control over devices containing microphones and other sensors that phone home.
Hardware Toolkit and Initial Analysis
Essential tools included a multimeter, soldering iron, UART adapter supporting 3.3V/5V, flux, solder wick, and optional hot air station. The researcher emphasized practicing soldering on scrap boards first.
The Daichi DW23-B controller for the air conditioner contained a TYWE3S module based on ESP8266. The onboard USB port functioned as a UART interface, controlled by a physical switch. Firmware was backed up using esptool.py and replaced with ESPHome, enabling native climate control in Home Assistant.
Cat Feeder Reverse Engineering
The feeder used a WBR3 module on an RTL8720CF chipset communicating with an MCU via UART in the classic TuyaMCU architecture. After identifying UART pins with a multimeter and capturing traffic using TuyaMCUAnalyzer, the Wi-Fi controller was desoldered to access programming pins A_0 and A_15.
Firmware was read and written with ltchiptool. The device was then flashed with OpenBeken, which supports TuyaMCU protocol emulation. Configuration via autoexec.bat enabled drivers for TuyaMCU and NTP, mapped dpIDs to channels for battery level, feeding button, and scheduling, and exposed the device over MQTT for Home Assistant integration.
A custom automation script was created to simulate button presses for manual feeding, while schedule data structures were analyzed from raw protocol packets for potential future local implementation.
Related articles
pg_anon Open-Source Tool Receives Major Updates for PostgreSQL Data Masking and Partial Database Operations
Tantor Labs has released version 1.11.0 of pg_anon, an open-source utility designed to mask personal data in PostgreSQL databases while preserving structure and relationships. The update introduces packaging as a standard Python package, support for partial dumps and restores using whitelist and blacklist dictionaries, and improved handling of complex schema elements such as partitioned tables, generated columns, and custom types. Performance improvements include switching the dump engine to asyncio, single-query metadata collection, and on-the-fly gzip compression to reduce memory usage on large databases. New CLI options allow clean or drop operations on target databases, privilege ignoring, and passthrough of pg_dump and pg_restore flags. A REST API was added to enable integration into CI/CD pipelines and automated self-service systems for nightly masked database refreshes. The tool helps organizations comply with data protection requirements by creating pseudonymized copies suitable for development, testing, and contractor environments.
Pegasus Spyware Returns in Serbian Surveillance Campaign via Zero-Click iMessage Exploit
A Serbian student activist's iPhone was infected with the Pegasus spyware through a zero-click exploit in iMessage, allowing silent installation without any user interaction. The infection, confirmed by Citizen Lab in collaboration with the SHARE Foundation, showed indicators of compromise between December 2025 and January 2026. Apple later sent the target a notification warning of a mercenary spyware attack attempt. The exploit granted full access to photos, messages, files, and enabled covert microphone and camera activation. The vulnerability was addressed in the iOS 18.4.1 update released on April 16, 2025. The incident forms part of a wider surveillance wave in Serbia, with at least 14 individuals including students, activists, a parliament member, and a local political representative receiving similar Apple alerts. Additional targets were hit with Android spyware variants linked to NoviSpy.
Mozilla Adds Built-in Ad Blocker to Firefox for iOS Devices
Mozilla has integrated a native ad-blocking feature directly into its Firefox browser for iOS. The update allows iPhone and iPad users to block third-party advertisements and associated trackers before web pages load, eliminating the need for separate extensions. Apple’s App Store policies have long restricted the use of third-party content blockers on iOS compared to desktop and Android platforms. The new functionality targets intrusive elements such as pop-up windows, content-overlapping banners, and other advertising formats. By handling blocking at the browser level, Firefox for iOS improves user privacy and reduces exposure to tracking mechanisms without requiring additional software installation.
Russia Starts Blocking Encrypted DNS Protocols DoH and DoT Across Major ISPs
Since mid-August 2026, subscribers of Rostelecom, Dom.ru, Tattelecom, SkyNet and Beeline have reported sudden failures of encrypted DNS services from Google and Cloudflare. The blocking affects both DoT on port 853 and DoH on port 443, but the mechanisms differ: DoT connections receive TCP RST packets while DoH sessions are silently dropped after the TLS ClientHello. Analysis shows the interference originates from TSPU equipment performing DPI on SNI fields and known resolver domains. At the same time, ordinary UDP DNS queries are being intercepted and answered by the NSIDI infrastructure, returning NXDOMAIN for blocked domains. The changes indicate a centrally coordinated rollout of new filtering rules rather than isolated operator actions. Users are advised that encrypted DNS no longer provides reliable privacy or circumvention and that full VPN tunnels remain the only robust option.