Thank you, I would love to do Cobra and Firetek but don't have the units. I do have some Cobra but they have sticky foam stuck to the PCB, if I removed it it would pull off the conformal coating and open my module up to moisture damage - so I don't really want to damage a good working module just for a teardown.

I did a follow-up about this here, I found mine didn't respond to pressing the two buttons, but did if I injected the binary equivalent: kzfaq.info/get/bejne/qt6GaJV207TSoZc.htmlsi=gBQYMsL2qjqAt0QV

Hi Frank, The DB04r uses a chipset called EV1527. This has a 20bit identifier which is hard coded at the factory, which means 2^20 = 1,048,576 possible sequential combinations. After these 20bits is another 4 data bits which identifies which number you have pressed on the remote. The company would like you to believe that it would be impossible for you to accidentally trigger this device because the 20bit identifier would have to be the same as the one programmed into the remote.....but, if you look around you there must be more than 1 million devices worldwide using this chip, most simple Chinese products use this chipset. So you have to question, did the EV1527 factory stop making these chips after they ran out of the 20bits? No, which means there has to be multiple chipsets out there which have the same 20bit identifier. They mention in their datasheet the 20bits 'reduce code repetition rate' , so they are not guaranteeing this code to be unique, they have reused codes. To make matters worse, there are also equivalent chipsets which can be set up the same way as the EV1527, such PT2262, 74C922, HT12E to name a few - which increases the chances even more of a repeated 'unique' address code. In terms of firing all channels at once, this is possible with single code in a single message. The modules have some secret codes which can be accessed outside of the remote (i cover them here: kzfaq.info/get/bejne/qt6GaJV207TSoZc.html). These can be different with the generations but the numbers above 12 are the special functions. On my units, code 14 will fire all channels. These are hardcoded in the firmware and will not be in the EEPROM as they are not user changeable. Not all 433MHz devices are equal, they would need to use the same encoding standard. The fact your friend could use the their remote to turn on the light shows they both had the same 'unique' code. Did pressing any button on the remote turn the light on? It may be that the light would accept any data bits and only cares about the 20bit code, then by chance the on/off button that came with the light just happens transmit 14. That seems a little odd as that is 1110 in binary, a very weird decision to use that code. They may have used 1111 instead, which would also be a special code for the DB04r which is sequence fire mode. That fires about a second apart, which might have looked like an all fire depending on what was connect to the DB04r. I have some remote main switches which use 1111 as an on command and 1110 as an off command. So, as I have alluded too, your friend is very likely telling the truth. The chance of it happening is remote but no where near impossible. It is a shame they didn't record it or show the remotes as this is the first possible story I have heard. One was told to me about someone using a car keyfob to fire the unit, but these use completely different coding standards and it would be impossible for this to happen on DB04r, so I feel someone is stretching the truth on the car keyfob one. Hope that all makes sense!

Yes, its driven from the microcontroller directly.

Yeah they should be the same part

Thanks great vid by the way