I serendipitously stumbled upon a great talk from last year’s CCC congress by Matt Knight. It delves into the PHY layer of LoRa and he explains how the protocol was reverse engineered. Impressive work, and very educational! It also means that I will probably be able to use an SDR for testing.