https://community.element14.com/technologies/code_exchange/As embedded electronics continues to transform our lives, engineers around the globe are looking for ways to increase their coding chops. To help engineers meet this need, element14 has unveiled Code Exchange-- a place where engineers can help each other.en-USTelligent Community 12https://community.element14.com/technologies/code_exchange/f/forum/56776/its-all-the-same/234546Fri, 20 Mar 2026 18:37:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:72cbb11a-e022-4fb4-9344-038a52f34b1ekmikemooThere is so much old equipment control equipment in the world, it's crazy. I've run into manufacturers that run the gamut. Some simply disavow that they ever made the item. Some admit that they have no one that knows anything about the product anymore. A few will give you what little they have and wish you luck. None of them are able to provide any real support - unless you run into the unicorn (the old technician that still remembers a bit OR... the person that sees the pattern). I've worked on systems without manuals or prints but that used a similar wire numbering convention dating back to a small regional company in the 1960's. There are still elements of this numbering system in equipment produced today. ANYWAY... I think a sure-fire way to get the equipment upgraded is to figure out how to fix it. It's one of the Murphy's Laws kind of things. Once you know how to get past that road block, you'll never need to do it again - because you can make it past the road block. Instant obsolescence - since you know what to do. This is especially true if you document what you did and leave a copy in the machine. On a particular brand of controllers, I figured out how to determine the user selected unlock code from the reset code. A disgruntled, now former employee had changed the passcode and left the company. Now, no one could operate the equipment. The controller manufacturer was very unhelpful. I cracked the code. Made a spreadsheet to do the conversion. Put it all in a shared folder on a shared drive. How many times after that did we need to use that decode? ... None that I know of. Still... it kept Murphy from using that particular road block for the rest of my time at that company. What is impressive in all this is seeing the pattern or seeing the evolution. THAT is cool. As to some of the "intellectual property", many of the machines do the same thing that they did decades ago - they just do it with more modern variants of the same stuff they had when the machine was first created. Or they have additional "features" that may help in manufacturing but are ancillary to the core function of the machine. If you can make an old system work... that is engineering.https://community.element14.com/technologies/code_exchange/f/forum/56776/its-all-the-same/234525Thu, 19 Mar 2026 21:36:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:a15c6e13-2e92-407a-a688-e42ac8488e26dang74Nice post. I haven't used a PLC before but I've looked into them here and there... anyway I guess I have enough familiarity to get excited about what you are trying to accomplish... and I am not exaggerating when I say it's like reading the tech version of the DaVinci code. Good luck with this endeavor.https://community.element14.com/technologies/code_exchange/f/forum/56782/commanding-my-plc-from-my-phoneThu, 19 Mar 2026 16:10:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:440915fe-f2ee-4551-8e40-3a404c86d87bSensoredHacker0ITs a proof of concept, that instructions may be sent from a phone to control a PLC. The larger goal is to write debugging apps which make process control and analysis easier and more available, to technicians. Android app dev wanted? www.youtube.com/watchandroidplcindustrialprogrammingidecdevelopmentautomationkotlinhttps://community.element14.com/technologies/code_exchange/f/forum/56776/its-all-the-same/234521Thu, 19 Mar 2026 14:13:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:4d2e60d6-7a80-436f-8c14-180d3135551cgeraldsHi, What is your intention? A lot of intellectual knowledge leads to a lot of headaches. Who are you doing all this for? A hobbyist has no chance of achieving anything. Especially in areas where everything is very sensitive, -> "protocols" for data transmission. Well, back in the day, people played around with this in their garages; today, you'd be charged with intellectual property theft. Licenses are very expensive, and some decisions are made with a hammer. Especially in these areas, contracts need to be watertight. Another problem: time. Technological progress will surely overtake you. By the time you've finished solving one problem, the major global players will have already solved many more. And you'll have to chase after them again, researching these new developments so you can incorporate them into your tinkering. Ugh... nobody can keep that up. Almost 50 years of experience, both employed and privately as a hobby, and with my own companies in technology, electronics, electrical engineering, and physics have taught me a lot. I wish you all the best! Gerald ---https://community.element14.com/technologies/code_exchange/f/forum/56776/its-all-the-same/234520Thu, 19 Mar 2026 13:22:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:dcd679b6-6330-47ec-a078-459385b5a929robogaryAh-ha. You've discovered big business ! .......OEM owning multiple brands, brand label agreements, business and technology acquisition, joint ventures, buying and selling of intellectual properties.......and creative marketing.https://community.element14.com/technologies/code_exchange/m/managed-videos/151053Thu, 19 Mar 2026 12:11:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:f3314537-3759-4cce-9574-5af209dfd15dSensoredHacker0I am stupid excited to get this working, if only for the reprieve to my sanity. The app: https://play.google.com/store/apps/details?id=de.kai_morich.serial_usb_terminal&hl=en_US What I really want to make is debugging tools for PLC systems, where ...makerplcHey Bangorelement 14idecBangor Makerspacehttps://community.element14.com/technologies/code_exchange/f/forum/56776/its-all-the-same/234517Thu, 19 Mar 2026 11:01:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:cd1eba07-94b2-4633-8a53-8e22ed25c7b8shabazAt least in Europe, it's generally considered to be valid to reverse-engineer a protocol at a device interface, for the purposes of interworking their own products. That was also part of EU legislation in the early 2000's, although now I believe it's changed to an extent, presumably at the pressure of manufacturers unfortunately, but I'm not sure. Some manufacturers didn't like the legislation because it exposed their proprietary stuff (not just the protocol, but anything else that got revealed through the process of reverse-engineering). The ones who thought about it more, simply offered the protocol for free or for a fee, since that eliminated the justification to reverse-engineer and the proprietary stuff exposure risk. Telecoms firms were interesting, every country wanted to protect their manufacturing base, so they all slightly tweaked the international standards. I had a job once re-tweaking things back, in a system that would attach to their equipment. Say if a telecom customer came along from any random small country or large, I'd have to look through their documentation to try to find the closest matching variant that I already had, and then tweak that one to create the new one. I wish I'd thought of drawing a tree diagram of them at the time.. would have been interesting from a history perspective, to see how they evolved.https://community.element14.com/technologies/code_exchange/f/forum/56778/android-app-dev-wantedWed, 18 Mar 2026 21:43:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:aab691a9-a995-458a-9c42-0206c624e6dcSensoredHacker0Trapped at work! wouldn't even care, but I need an adapter to go from USB-C to usb-a and I only know of one at my local makerspace. Ive been struggling with creating my own Andriod app. I dont know how folks put up with it, I wrote 3 files, built the thing and ended up with 1877+ files, and meaningless directory structures. /... and my app doesn't work. :( well anyway, the app I want to write would send my PLC IO control commands to a PLC via USB. which commands formatted in hex? The commands below for IDEC series PLCs. This app: https://play.google.com/store/search?q=usb%20serial&c=apps&hl=en_US has macros, and I am really ansy to test it. I wrote an arduino echo back program: void setup() { Serial.begin(115200); while (!Serial) { } // wait for a connection Serial.println("READY"); } void loop() { // connect phone and see if you get transmission interactions if (Serial.available()) { String input = Serial.readStringUntil('\n'); Serial.print("ECHO: "); Serial.println(input); } } which works great! but I want to talk to the PLC now! 05 FF 30 57 79 30 30 30 30 31 2F 0D 05 FF 30 57 79 30 30 30 31 31 2E 0D 05 FF 30 57 79 30 30 30 32 31 2D 0D 05 FF 30 57 79 30 30 30 33 31 2C 0D 05 FF 30 57 79 30 30 30 34 31 2B 0D 05 FF 30 57 79 30 30 30 35 31 2A 0D 05 FF 30 57 79 30 30 30 36 31 29 0D 05 FF 30 57 79 30 30 30 37 31 28 0D 05 FF 30 57 79 30 30 30 30 30 2E 0D 05 FF 30 57 79 30 30 30 31 30 2F 0D 05 FF 30 57 79 30 30 30 32 30 2C 0D 05 FF 30 57 79 30 30 30 33 30 2D 0D 05 FF 30 57 79 30 30 30 34 30 2A 0D 05 FF 30 57 79 30 30 30 35 30 2B 0D 05 FF 30 57 79 30 30 30 36 30 28 0D 05 FF 30 57 79 30 30 30 37 30 29 0D So i wrote some macros to send commands. but I'm stuck until 5 because I don't have some adapter. implication of functional test: I can write code to conduct system debugging from a cell phone... the thing every service tech has. no more climbing on ladders with a laptop, only to connect and data collect, and still not have a network to dial out on. this is an every day problem for many technicians. There's no internet in the building, no place to plug in, no cellular, no way to get the data off the laptop on to a phone, the tech has a laptop, but can't install programs (ok i have solved most of that) but, its the same issue, the service reps aren't computer programmers, or IT specialist, and the sites they go to might not have reliable network connectivity. you're in a dense industrial building, that acts like shielding from every service signal, then you want to link out, but your laptop needed to run some proprietary BS software still has to connect to your phone ... its stupid, and unnecessary, and I'll Fkn fix it myself if I can ever figure out how to write a GD Android App. in the meantime, i want to test this program for functionality. it should work.technichianplcsprogrammingusbphoneappsservicecellularhttps://community.element14.com/technologies/code_exchange/f/forum/56776/its-all-the-same/234486Fri, 06 Mar 2026 17:27:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:e8111210-8045-4735-b2a3-6d50557bc0abkmikemoo@SensoredHacker0 When it comes to the video... give yourself some grace. I used to have to do a monthly Safety video for work and I wasted a TON of emotional energy chasing perfection - which I never achieved. Along the way, I learned that it's okay to be human. It makes you more relatable - and therefore trustworthy. ☺ We're all here for the nerdy stuff anyway.https://community.element14.com/technologies/code_exchange/f/forum/56776/its-all-the-same/234485Fri, 06 Mar 2026 13:13:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:0ee6060e-2e9a-4911-b785-fa7fec4ee2b3SensoredHacker0yeah, Ive read a lot of manuals. My ""code base is a whole bunch of fragments. Im trying to organize into a usable API. in all the tinkering, Ive made arduinos program PLCs, and projects in 10 languages. Some of those languages have caveates, and this is influencing my choices in making an API. it might go: plc = API(vendor.interface) well then anyways, Ill make proper videos, which isnt a skill Ive developed. This plc isnt programed. I run the app on my phone. The plc is now programed. seems conceptually simple, but how to make the video is confusing. Well Ive managed to convince a few folks, and have a brand new pile of PLCs to perform confirmations and proofs on.https://community.element14.com/technologies/code_exchange/f/forum/56776/its-all-the-same/234484Sat, 28 Feb 2026 16:20:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:5163dcbe-c915-4eb2-bbdc-99b96974050dkmikemooVery cool. That's a lot of manual to review. I'll just have to trust you.https://community.element14.com/technologies/code_exchange/f/forum/56776/its-all-the-sameSat, 28 Feb 2026 09:27:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:f7030a8b-cfc7-485f-a3db-cdc70b986b14SensoredHacker0Some internet jerk made a snide comment today about someone else’s light-hearted Linux install project. It shouldn’t have stuck with me, but it did. It woke me up hours later with a thought I couldn’t shake: They’re all the same. For the past few years I’ve been building my own PLC communication libraries — serial, USB, TCP — in Python, C/C++, JavaScript, PHP. In the last 24 hours I’ve been writing Kotlin because I want a field tech to be able to debug a PLC from their phone, even if the PLC doesn’t have Bluetooth. No PhD. No formal CS background. Just me, a hex editor, and the habit of staring at binaries until the patterns start to move. I’ve got a small collection of PLCs to experiment with — mostly IDEC, plus a few Siemens, Keyence, Mitsubishi. When I want to understand something, I don’t wait for permission. I open the firmware, trace frames, XOR checksums by hand, and squint until the Matrix resolves. That’s how I dug into IDEC’s Maintenance Protocol. I’ve mapped most of it. I still haven’t fully cracked firmware writing or compiled bytecode translation, but I’m close. Then something weird happened. I was experimenting with a Keyence KV series PLC my employer provided. By accident, I ran some IDEC code against it. The LEDs toggled. That shouldn’t be possible. So I ran it again. There it was: IDEC’s Maintenance Protocol responding on a Keyence KV-1000. That sent me digging. I looked for documentation. Nothing useful. Every OEM wants you locked into their bloated, feature-starved software. So I asked ChatGPT what PLC communication protocols are linguistically similar to “Maintenance Protocol.” The answer? All of them. Mitsubishi MELSEC. IDEC Maintenance. Keyence KV. Siemens S7. Schneider Electric. And probably the rest. I haven’t tested the GE units yet — the ones I have are temperamental — but I’m not expecting surprises anymore. The structures match. The framing matches. The checksums match. Even the command semantics echo each other. And here’s the funniest part: there’s a typo. A small framing typo that has survived for roughly forty years. It appears in every document from every vendor. Same sentence. Same mistake. Never corrected. It’s like a fossil record of copying. Near as I can tell, someone named Petr John, defined a protocol that was likely meant to be open. Over time, industrial OEMs cloned it, rebranded it, redistributed it, and quietly erased source attribution. Every one of them claimed it as thier own uniqe protocol. The memory mappings might differ, but the language is the same. What’s fascinating is that nobody fixed the typos. Four decades. Dozens of manufacturers. Identical typologcal error. They’re all the same. I started this because I wanted to build tools that help techs in the field. I don’t want to drive out for service calls just to flip a bit. I want clean, simple, useful software anyone can use. I didn’t set out to reverse engineer the entire industrial controls ecosystem. But once you see it, you can’t unsee it. n The protocols are the same. The framing is the same. The semantics are the same. Even the typos are the same. When I finally finish mapping byte-code to instructions and build an open instruction compiler, It’ll just be the same thing running everywhere else. Find the TYPO! dl.mitsubishielectric.com/.../sh080008ab.pdf docs.galco.com/.../fc4a_protocol_im.pdf ### Good docs are hard to come by, but when i find the other again Ill post them.plcshttps://community.element14.com/technologies/code_exchange/f/forum/56717/help-wanted-native-idec-plc-compiler-wantedWed, 25 Feb 2026 20:10:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:c4263d68-2ec6-47c6-886f-a7a66b1089c3SensoredHacker0I work with IDEC PLCs, and from a hardware perspective I think they are pretty good. from a software perspective I think they could do better.. I think I could do better. and so I am working on it. I would love to be able to write node-red, and run native IDEC PLC code. (my current method involves writing code that doen't execute natively) Ive run this in Bash, C, C++, JS,PHP, Python... any language is feasible. The final piece Is a means to convert instructions into their raw compiled instructions. I haven't figured that part out yet, and want help figuring it out. i asked IDEC for support doing this. Ill write all the language support if I can just get an API to do the language conversion from instruction to binary instruction. Loathsome alternatives: I guess all the mnemonics, and figure out how to run the ladder compiler dll in wine.plccompilersprogrammingidecembeddedlinuxhttps://community.element14.com/technologies/code_exchange/m/managed-videos/151010Wed, 25 Feb 2026 19:47:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:77d6be14-339d-4c8f-887d-161fef0fb338SensoredHacker0I Really like IDEC PLCs, the language, and interface is what sucks. the hardware is actually really decent. Optoisolated I/O. decent features. But I'm a linux user. This is another step in my effort to make it some I can Use whatever platform I wa...Programinplcpythonidecautomationlinuxhttps://community.element14.com/technologies/code_exchange/b/blog/posts/now-possible-to-deploy-idec-plc-code-from-server-of-choiceWed, 25 Feb 2026 19:46:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:8401a1c2-5893-43f0-ac20-323830c93a8eSensoredHacker0Ok The Docs arent great, and I literally just figured this out 2 days ago. but if you have a ZLD file (the raw instruction files for IDEC PLC Code) it is now possible to deploy native instructions from the server of your choice. This includes Linux, Unix, Mac, any number of Micro controllers, including arduinos and Esp32s. I work at a company, and that company sends techs to deploy new code to hundreds of units yearly. meanwhile most of our hardware contains a cellular enabled embedded linux server. So now we can deploy updates remotely. Actually, there is a lot of things we could do. but this project isn't something my work place has seen fit to pay me to do, so ive been figuring it out on my own, and making it open source as I go. https://www.youtube.com/watch?v=xpOqsFhH-bQ ok I don't like making videos, but i should make some better ones. some other spin-off tools: * instant debugger, plug in a device that tells you exactly what is wrong with your PLC. * Remote controlled PLC * mass deployments * bulk reconfiguration * Multi system monitoring * easy reprogramming/ provisioning. * an avenue to a more secure remote deployment system, based on standard server systems. What it doesn't do yet: Compile Native Code. For that you still need WindLDR. I asked IDEC for an instructions compiler, but they don't see the point. hell. IDEC I think is just making wheels now. which I am very curious.... I think the FC6A library will work on. ah lets see, there is also a serial (USB) library now, and some other tools, when I get around to posting them.plcpythonCode Exchangecontrolsidecembeddedautomationlinuxhttps://community.element14.com/technologies/code_exchange/b/blog/posts/more-fc6a-library-usesFri, 23 Jan 2026 17:18:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:1f05586b-f6b8-4f62-b509-0236fb305a81SensoredHacker0Yesterday I wanted to reconfigure all the PLCs in my lab with settings for a specific use case. This involves changing the values of 3 registers to make the PLCs listen to a server over DHCP. my lab has 12 FC6A plcs. and loading windLDR on all of them would have been a pain. So i wrote this python script using FC6A python library to configure all the PLCs automatically. #!/usr/bin/env python3 from fc6a import FC6AMaint from time import sleep # Configure every PLC on the subnet to be MCPLA comatable. # Remote mode M2031 def confPLC(plc): setMCPLA_lock = 7077 # 1=mcpla on 0=mcpla off setDHCP = 1330 # DHCP setting setRmote = 2031 plc.write_word(setMCPLA_lock, 1) plc.write_word(setRmote, 0) plc.write_word(setDHCP, 0) masq = "192.168.1." for i in range(1, 255): ip = masq + str(i) plc = FC6AMaint(ip) try: confPLC(plc) print("OK", ip) except Exception: pass Sure, the code is a bit hap hazard, Im literally sending the PLC register configuration to every device in the class D subset of the lab. but only the PLCs will respond to the Maintenance protocol on port 2101, so its low risk even if its substandard code.plcpythonprogrammingautomationhttps://community.element14.com/technologies/code_exchange/m/managed-videos/150861Thu, 18 Dec 2025 18:28:00 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:09342301-7cc0-4e4f-9d5d-b6faccb6ec33SensoredHacker0Using this open-source project, we read some IDEC FC6a microsmart PLC registers with the nifty command line too called multiReg.py https://github.com/Makerspace-Bangor/fc6a/tree/main/examples This is not sponsored content, Im just a fan of all the...plcopen-sourcepythonMaineHey BangorgithubprogrammingidecBangor Makerspacelinux