Reverse-Engineering The Stadia Controller Bluetooth Switching Procedure

Ever since the demise of Google’s Stadia game streaming service, the associated Stadia controllers have found themselves in limbo, with the only way to switch them from the proprietary WiFi mode to Bluetooth by connecting to a special Google website. Yet as [Gary] found out, all this website does is flash a firmware file via WebUSB and WebHID over the original Stadia firmware with a generic Bluetooth controller firmware image. This is the reason why it’s a one-way process, but this wasn’t to [Gary]’s liking, so he figured out how to flash the controller himself, with the option to flash the original Stadia firmware or something else on it later, too.

[Gary]’s stadiatool follows the same procedure as the Google Stadia website, just implemented in Python and outside the control of Google. Although Google has recently announced that it will keep the Bluetooth switching website online one year longer – until December 31st 2024 – at some point this service will go away and only projects like [Gary]’s together with squirreled away firmware images can still save any stray Stadia controllers that will inevitably discovered in the back of a warehouse in the future.

Although we reported on the demise of Stadia when it happened in January of 2023, as Ars Technica notes it was common in 2022 to buy into Stadia and get a controller manufactured in the 2019 launch year, suggesting massive overproduction.

Stadia Says Goodbye With Bluetooth And Crap Game

In just a few days time, Google’s Stadia game streaming service will finally shut down for good. But not for any technical reason, mind you. Microsoft has managed to demonstrate that streaming modern games over home and even mobile Internet connections is viable with their immensely popular Game Pass Ultimate service, and NVIDIA is making similar inroads with GeForce Now. No, like so many of Google’s failed experiments, they’ve simply decided they don’t want to play anymore and are taking their proverbial ball home back with them.

But not all is lost for those who shelled out money for Stadia’s wares. Not only will Google be refunding any money players spent on games, but a company representative has also announced they will be releasing a tool to unlock the latent Bluetooth capabilities of the service’s custom controller — hopefully stemming a surge of e-waste before it starts.

Thanks for playing, chumps.

In a forum thread titled “A Gift from the Stadia Team”, Community Manager [DanFromGoogle] explains that information on how you can enable Bluetooth on the controller will be coming next week. In the meantime, he also announced the immediate release of “Worm Game”, a tech demo that staffers apparently used to test out capabilities of the streaming service before its public release.

That this ridiculously simple game, which looks all the world like something a kid would crank out during an after-school programming class, will be the final title to officially release on Stadia is a stunningly insulting epitaph for the fledgling service. But then, Google seems to have developed a special affinity for mistreating their most loyal cattle users over these last few years.

Enabling Bluetooth on a game controller might not seem like such a big deal, but in this case, it will potentially give the piece of hardware a second chance at life. The Stadia controller is unique in that it uses WiFi to communicate directly over the Internet to Google’s streaming service, so once those servers stop responding, the orphaned device will end up being little more than a curiosity. Although it does technically work over USB, being able to use it wirelessly will not only provide a more modern experience, but help justify its internal batteries.

The last time we mentioned the Stadia controller, it was to document one user’s attempt to rid it of an internal microphone they didn’t feel comfortable with. Now that the service is being put to pasture, we wonder if we’ll start to see more hacks involving the admittedly interesting peripheral. We’ll certainly be keeping an eye out for them, but if you see anything we miss, you know where to send it.

Careful Drilling Keeps Stadia From Listening In

Google’s fledgling Stadia service leverages the Chrome ecosystem to deliver streamed PC games on mobile devices, web browsers, and TVs. While not strictly required, the company even offers a dedicated Stadia controller that connects directly to the streaming servers over its own WiFi connection to reduce overall system latency. Of course, being a Google product, the controller has a tiny microphone that’s always listening in for interacting with the voice assistant.

[Heikki Juva] didn’t like the privacy implications of this, but unfortunately, there appears to be no way to turn off this “feature” in software. He decided the most expedient solution would be to simply remove the microphone from the controller, but it turns out there was a problem. By researching previous teardowns, he found out that it’s nearly impossible to take the controller apart without damaging it.

Getting close to the target.

So [Heikki] came up with a bold idea. Knowing roughly the position of the microphone, he would simply drill through the controller’s case to expose and ultimately remove the device. The operation was complicated by the fact that, from the teardown video he saw, he knew he’d also have to drill through the PCB to get to the microphone mounted to the opposite side. The only bright spot was that the microphone was on its own separate PCB, so physically destroying it probably wouldn’t take the whole controller out with it.

Now we don’t have to explain why drilling into a gadget powered by an internal lithium-ion battery is dangerous, and we’re not necessarily vouching for the technique [Heikki] used here. But when presented with a sealed unit like this, we admit there weren’t a lot of good options. The fact that the user should have to go to such ridiculous lengths to disable the microphone in a game controller is a perfect example of why we should try to avoid these adversarially designed devices, but that’s a discussion for another time.

In the end, with a steady and and increasingly larger bits, [Heikki] was able to put a 7 mm hole in the back of the Stadia controller that allowed him to extract the microphone in one piece. Removing the microphone seems to have had no adverse effect on the device as, surprisingly enough, it turns out that a game controller doesn’t actually need to listen to the player. Who knew?

As our devices get smarter, hidden microphones and cameras are unfortunately becoming more common. Thankfully a few manufacturers out there are taking the hint and including hardware kill switches for these intrusive features, but until that becomes the norm, hackers will have to come up with their own solutions.

Update 1/10/21: This article originally indicated that the microphone is always listening. While there is no hardware switch to disable the mic, there is a button which must be pressed to trigger the voice assistant functions. We have used strike through above to indicate the change to what was originally published.

Continue reading “Careful Drilling Keeps Stadia From Listening In”