Retro: ASUS mimic CX200 JTAG hacking 

Back in my university years I have had some issues with an Asus MIMIC CX200 camera. One of them got broken after a firmware upgrade so I have decided to fix it with JTAG. I have successfully got to UrJTAG to read the IDCODE of the S3C4510B, but I was unable to detect the flash. Now I know that I have had to tweak the bus driver and reveng the board a bit.

Here are some pics (shot with my Nokia 6230 in VGA res) about the trick:


Thin albanian wires were soldered directly to the pins.


Live together cry together series 100 Ohm level shifter JTAG adapter to LPT port.


I have designed an addon board to expose the CPU's intresting interfaces (2 serial, USB, JTAG)



It is fun to look back to those pictures from now. After 5 years we got to a state when it is easier and cheaper to buy a Rpi to solve the same problem rather than fixing that board...
[ hozzászólás ] ( 14 megtekintés ) [ 0 trackbackek ] permalink kapcsolódó link ( 3.1 / 71 )
Compile urJTAG on Windows under cygwin 

Ingredients:
urJTAG source from SVN or Git.
Cygwin: install the packagelist from here: https://dl.dropboxusercontent.com/u/4295670/packagelist with the technology described here:
http://blag.nullteilerfrei.de/2014/01/3 ... -packages/

The python binding is broken so run the ./autogen.sh with --disable-python option.

Add

#define WINAPI_FAMILY 2
#define NOUSER

befor, and

#ifdef IN
#undef IN
#endif

#ifdef OUT
#undef OUT
#endif

fter the #include <windows.h> into the sysdep.h

Run
make -j 8 CFLAGS='-Wno-char-subscripts -Wno-unused-value'




[ hozzászólás ] ( 11 megtekintés ) [ 0 trackbackek ] permalink ( 2.9 / 45 )
IQP500 camera conclusions... 

I have started to play with ESP8266, and remembered to an IPQ500 S55 camera module got from a friend a few years ago.
I have started to dream about a 6USD Wifi IP camera, but my dreams shortly fallen to ashes.

I have started experimenting with the following python script:
http://mitschang.net/s55cam.py

The code assumes that you need to pull the RTS and CTS pins by hand to low.

Ah yeah... I used to be lazy, so after some patching the code was able to drive these two pins with my CP2101 based UART converter's RTS and DTR pins. But the code did not worked (nothing came at the serial port after the camera was activated). Let's check with logic analyzer! The camera's baud was not exactly 19200 but ~19100 which gives 0.6% error. The cheapy UART converter have not tolerated that! Lets hook to the good old FTDI! It works. Good.

I was able to take picture with the python code.
Conclusions:
Reopening a serialport in python will clear the RTS status, but changing baud rate on the fly does not have the same side effect.

The camera takes ~33K JPGs which is transferred ~3 seconds with the 115200. That would be poor for the video stream, so I thought that I will figure out how can the camera's baud rate increased. 921600 would fit well. But unfortunatelly the camera's protocoll is not documented and according to the other people reverse engineering results the camera does not have continous recording functionality.
So sad.

I have not given up the camera project I will look around for cellphone camera modules with SPI port with JPG encoder inside.


[ hozzászólás ] ( 4 megtekintés ) [ 0 trackbackek ] permalink ( 2.9 / 35 )
Siemens Gigaset C475IP base station disassembed 

At the local flea market I have found a box with an ethernet port and and a DECT logo. I have bought it just for fun hoping that I will found some kind of embedded Linux running hackable stuff inside. Well after opening it I had to became disappointed.
Just for fun and archiving puposes I post my findings here.

The board markings:
W30852-Q1813-B101-5 and





The board's heart is a PCD80725ELF ARM base microcontroller made by the NXP.

I have not found any relevant information on the web about it, so I have asked the Philips (NXP) support, and they said:

All DECT activities of Philips Semiconductors were transferred to DSP Group in 2007. http://www.dspg.com/English/ They may still have that data sheet archived.


I have contacted with the DSP Group's support but they have not answered.

The other notable parts on the board:
S29AL008 (1Mbit CMOS flash)
CY7C1041CV33 (512Kbit RAM)
Atmel AT45DB161D-SU (2 MByte SPI flash)
Atmel 24C265 EEPROM
CP2200 single chip ethernet controller by Silabs
An unidentified DECT module possibly made by the Siemens
[ 1 hozzászólás ] ( 40 megtekintés ) [ 0 trackbackek ] permalink ( 2.9 / 111 )
Geovision GV-800(S) under Linux 

One of my friends asked me to get working a Geovision GV-800(S) DVR card with zoneminder.
According to the google results several people succeed with this subject. For e.g.:
http://siripong-computer-tips.blogspot. ... linux.html

I have installed a n Ubuntu 12.04 server, and the necessary packages. This distribution shuiips with a relatively new kernel (3.5.0) which means that the necessary bttv modules were included fine. The device had shown up fine: I had 4 v4l2 devices with 4 channels per each (Composite0-4). I have added these channels as sources to the Zoneminder but I have not been able to get image from them. After several trials I have installed XFCE and XAWTV. I have not been able to get image with that tool too, and at the channel changes I got I/O errors and the software claimed about invalid framebuffer address on startup.

As final trying I have installed a Windows XP to the box, and installed the Geovision software. The device had shown up in the device manager fine, but there were a yellow exclamation points next to the devices with Device cannot started message. I have seen that card working in different computer.

As a last trial we have decided to try to upgrade the BIOS, and that solved the problem.
[ hozzászólás ] ( 12 megtekintés ) [ 0 trackbackek ] permalink ( 3 / 107 )

| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | Következő> >>

 
számláló