Reverse Engineering Snapchat Spectacles 2 to Build a Standalone iPhone App

说明与用途

作者通过构建 Malibu 应用，恢复了旧版 Snapchat Spectacles 2 的功能，能够直接配对、认证并本地导入视频，无需 Snapchat 账号。

问题

Spectacles 2 hardware remained functional but the official Snapchat app was unusable, preventing users from accessing recorded videos.

结果

Malibu enables users to pair Spectacles 2 glasses with an iPhone, authenticate, and import videos locally without needing a Snapchat account or cloud service, restoring functionality to older hardware.

工作流

• 1. Scan BLE advertisements to discover Spectacles 2 and capture GATT services.
• 2. Reverse‑engineer the pairing protocol (X25519 key exchange, proof exchange, AES‑GCM session).
• 3. Implement the protocol in Python for testing, then port to iOS.
• 4. Use AccessorySetupKit to pair and authorize the glasses as a Bluetooth/Wi‑Fi accessory.
• 5. Command the glasses to start their private Wi‑Fi network and join it from the iPhone.
• 6. Retrieve media catalogue, thumbnails, and MP4 data over the local Wi‑Fi connection.
• 7. Store imported videos in Malibu, optionally copy to Photos.
• 8. Resume interrupted transfers by re‑establishing an encrypted media session.

证据

The result is Malibu: an open‑source iPhone app that can pair directly with Spectacles 2 and import their videos without a Snapchat account or cloud service.

来源

The pairing process includes an X25519 key exchange, a proof exchange, and an AES‑GCM encrypted session.

来源

Spectacles create their own private Wi‑Fi access point. The iPhone joins that network and talks directly to a media service running on the glasses.

来源