This is an old revision of the document!
The Linear remote control solution from the MegaCode series was used in the facility complex I was living for a short while, and I wanted to know how secure it is. Thus I reverse engineered it.
In episode #004 I presented how the transmitting part works, and how to clone the radio remote controls.
The main target is the ACT-34B from the Linear MegaCode series. The ACT-31B is the same as the ACT-34B but with only one button.
It uses a PIC12C508. The PICkit2 programmer does not support the PIC12C family because it's EPROM based and requires higher voltage. By accidentally reading the code it erased it. But code protection was probably used. This chip can also come as One Time Programmable, and might be factory programmed.
internal pictures:
The flashable alternative to the ACT-34B is the 318LIPW1K from the Transmitted Solution Monarch series.
It uses a PIC12F635. The PICkit2 programmer does support the PIC12F family because it's flash based. But code and data protection were.
internal pictures:
In episode #005 I presented how the receiving part works, so to record codes and analyze them.