Reverse Engineering Snapchat Spectacles 2 to Build a Standalone iPhone App

Описание и применение

Автор восстановил работу устаревших Snapchat Spectacles 2, создав приложение Malibu, которое напрямую подключается к очкам, аутентифицируется и импортирует видео без аккаунта Snapchat.

Задача

Spectacles 2 hardware remained functional but the official Snapchat app was unusable, preventing users from accessing recorded videos.

Результат

Malibu enables users to pair Spectacles 2 glasses with an iPhone, authenticate, and import videos locally without needing a Snapchat account or cloud service, restoring functionality to older hardware.

Рабочий процесс

• 1. Scan BLE advertisements to discover Spectacles 2 and capture GATT services.
• 2. Reverse‑engineer the pairing protocol (X25519 key exchange, proof exchange, AES‑GCM session).
• 3. Implement the protocol in Python for testing, then port to iOS.
• 4. Use AccessorySetupKit to pair and authorize the glasses as a Bluetooth/Wi‑Fi accessory.
• 5. Command the glasses to start their private Wi‑Fi network and join it from the iPhone.
• 6. Retrieve media catalogue, thumbnails, and MP4 data over the local Wi‑Fi connection.
• 7. Store imported videos in Malibu, optionally copy to Photos.
• 8. Resume interrupted transfers by re‑establishing an encrypted media session.

Доказательства

The result is Malibu: an open‑source iPhone app that can pair directly with Spectacles 2 and import their videos without a Snapchat account or cloud service.

Источник

The pairing process includes an X25519 key exchange, a proof exchange, and an AES‑GCM encrypted session.

Источник

Spectacles create their own private Wi‑Fi access point. The iPhone joins that network and talks directly to a media service running on the glasses.

Источник