PDA

View Full Version : TV Hacking



zildan
10-02-14, 01:03
Deschid un topic dedicat modificarii televizoarelor.
Nu ne ocupam de cele deja "rezolvate".
Aici adunam date despre celelalte si purtam discutii pe aceasta tema.
Eu am un LG cu chipset MTK si vreo 7 vestel care majoritatea au MSTAR.
Seria de la Samsung care nu e "doborata" e bazata pe MSTAR.
Atasez o documentatie de LG bazat pe MSTAR.

zildan
14-03-14, 17:58
Nu am renuntat la proiect. Am avut mult de lucru (asta e bine la buzunar si .... la bugetu de stat).

zildan
02-02-15, 01:25
Intre timp lucrurile nu au stat pe loc. La televizoarele VESTEL s-a decriptat fisierul de setari.
La seriile din ultimii 5 ani de LCD-led Plasma de la Vestel puteai doar sa vevi setarile, mofificari se puteau face doar prin intermediul unor fisiere furnizate de producator.
In scurt timp voi prezenta metoda prin care intrii in consola pe tv, descarci din linuxul televizorului cele 2 file, le prelucrezi pe pc si le reincarci.
Viitorul suna bine. Eu am 2 LG-uri si vreo 10 Vestel (am mai dat si la parinti)
Pentru cei care nu stiu, pe televizoare nu scrie Vestel, de ex scrie toshiba , sharp, philips etc.

zildan
02-02-15, 04:58
Am reusit sa pornesc toate optiunile ascunse.
CEC merge mult mai bine decat pe LG !
Aveau toate televizoarele functia CEC disabled !
Am dezactivat si criptatea la inregistrare si multe altele.
Azi plec la Craiova ... am si acolo material de studiu !

zildan
02-02-15, 13:22
1194

Nu merge cu adaptor USB normal, am reusit cu cel cu care programez procesoarele Atmega.

Using a SCART <-> RS 232 cable to a CP2102 I could get to the console.

10 and 12 (RX / TX PIN SCART try out best ) And GND easy to chassis.

Thus, I was able to:
cp /apsettings/profile/median_swprofile.bin /mnt/usb/sda1/median_swprofile.bin

La loc se pot pune automat.
La versiunea asta de mainboard se copiaza in radacina stickului apoi Meniu 7425 > USB Operations si le preia automat televizorul.

save the file to USB and change:
cp /mnt/usb/sda1/median_swprofile.bin /apsettings/profile/median_swprofile.bin
chmod 0744 /apsettings/profile/median_swprofile.bin

Now I was able to successfully unlock the software. HDMI Switch works just like PVR! Thanks also to jufoda for the Java file.

Herewith I could also advance extract the software from the firmware:
https://github.com/jrspruitt/ubi_reader
apsettings:
ubi_reader-master> extract_files.py -s751714 upgrade.pkg

nv_backup:
ubi_reader-master> extract_files.py -s2717862 upgrade.pkg

(could be the most interesting since there was vestel.bin and then analyzed by IDA) basic_partition
ubi_reader-master> extract_files.py -s4684010 upgrade.pkg

Greetings and thanks again

zildan
02-02-15, 13:53
Momentan salvez pasaje aici. In final le pun cap la cap si le corectez.

---------- Post added at 12:26 ---------- Previous post was at 12:24 ----------

Here is jufodas Java program in a simplified variant: Vestl profile Readers V2 (http://www.smartredirect.de/redir/clickGate.php?u=DIx2FeR9&m=1&p=F58foZV760&t=ME84SHdC&st=&s=&splash=0&abp=1&url=http%3A%2F%2Fwww.mediafire.com%2Fdownload%2Fiw9mryt6m36zeye%2FVestl_profile_reader_V2.rar&r=https%3A%2F%2Ftranslate.googleusercontent.com%2Ftranslate_c%3Fdepth%3D1%26hl%3Dro%26rurl%3Dtransla te.google.ro%26sl%3Dde%26tl%3Den%26u%3Dhttp%3A%2F%2Fforum.digitalfernsehen.de%2Fforum%2Fplasma-lcd-projektor%2F276321-medion-md-30465-42-led-backlight-tv-life-x17006-33.html%26usg%3DALkJrhiSVui97RNUs3c9hck1qXo8v2nVFg)

You only have to unpack everything and put the sw_profile file into the folder "Vestel profiles Reader" and open the Vestel.bat. At the end of 4 text files are created of which the contents of the software profile shows in decrypted form of hex addresses.

And I have thanks to a helpful user found out from another forum how to activate Bildaufbesser function calling itself "Vestel Pixellence" is the name of the functional and forth with the "Bravia engine" of sony to compare is. See quote:
Quote:
First original Vestel integrated circuit, with genuine Vestel patented video processing algorithms, Entirely designed by Vestel R & D. Pixellence1 video processing algorithms includes color enhancement, skin tone detection and correction, sharpness and contrast enhancement technologies improvement. Pixellence1 technology had been presented to customer first in 2007 with the aim of Improving Vestel TV's picture quality level to the higher. Pixellence1 video processing algorithms Provides all details of the picture with high contrast, vivid and natural colors at high picture quality level.
Whether this can now keep up really high with the Sony would have to be tested.
and although you may have to adjust these values ​​as follows:
Code:

[0x74a4] PixellenceWorkingMode = 2 [0x2] - [0xa863b7c0] [0x305] [0x4] (default 0)
[0x74cc] PixellenceControlInvisible = 0 [0x1] - [0xec8082b6] [0x205] [0x4] (default value

---------- Post added at 12:53 ---------- Previous post was at 12:26 ----------

So this goes back up that way.
USB stick size matter, format it with FAT32.
On the Create stick to a file named -> DownloadProfile.mb95
This file must therefore be the only one in the root directory at the top without subfolders. Now plug in the stick and press the Menu key and go into Service mode switch 4-7-2-5 there to the point USB Operations go and confirm with OK waarten briefly and then lie on the stick 3 files (mb95_hwprofile.bin, mb95_langprofile.bin, mb95_swprofile.bin) secure it on the PC first, best in a folder name Profile. Then stick format and create the following file DownloadSpi.mb90 these are very, very important elementary files (edid.edid, mb90_credentials.bin,
mb90_ddr.bin, mb90_hdcp.bin, mb90_hdcp2.bin, mb90_mac.bin), this does not change but save on the PC in a SPI folder.
the replay of the amended mb95_swprofile.bin, goes like this. Create a folder on the stick profile name, therein lay the modified file and perform the same procedure as for the secure, the file size is copied back into the machine. This can also be done with the SPI files in case something should go wrong as MAC zerschossen or other important things, but to create a spi folder on the stick and lay all SPI files there, then save the same procedure as in.

The Internet portal Who does not like the rest, because it is the branding with Telefunken, or because it has too few apps that should have some variety for VESTEL portal, there is even an app store on TV. This can be set in the software profiles.

horatyu
02-02-15, 17:51
Am reusit sa pornesc toate optiunile ascunse.
CEC merge mult mai bine decat pe LG !
Aveau toate televizoarele functia CEC disabled !
Am dezactivat si criptatea la inregistrare si multe altele.
Azi plec la Craiova ... am si acolo material de studiu !

pentru clarificare CEC = " The CEC (http://en.wikipedia.org/wiki/HDMI#CEC) (Consumer Electronics Control) capability allows HDMI devices to control each other when necessary and allows the user to operate multiple devices with one remote control (http://en.wikipedia.org/wiki/Remote_control) handset.[5] (http://en.wikipedia.org/wiki/HDMI#cite_note-HDMI2006Specs6.3-5) "

zildan
02-02-15, 22:18
Merge telecomanda de la televizor ca si cum ar fi a receptorului !
Bomba bombelor ar fi acum, ca am ajuns la Craiova si am un orion care nu are NET !
Dar in service se vede ca decriptand fila de setari se poate activa prin stick wireless.
Evident ca am stick, sa vedem acum ! Va tin la curent.

zildan
04-02-15, 00:51
Am mai rezolvat un Oron la Craiova, dar unu fara net si smart ma tine in sah.
E musai sa intru in el pe seriala ca sa descarc cele 2 file de setari.
Maine ma mobilizez ! :)

horatyu
04-02-15, 12:32
deci vrei sa spui ca il poti face sa aiba si wi-fi ? ar fi ceva sa putem face si asa ceva, adica sa facem un tv SMART doar din setari

zildan
04-02-15, 20:35
Am reusit sa intru in consola pe TV.


testtool > cat /proc/cpuinfo
system command : 'cat /proc/cpuinfo'
Processor : ARMv6-compatible processor rev 4 (v6l)
BogoMIPS : 1402.47
Features : swp half thumb fastmult edsp java
CPU implementer : 0x41
CPU architecture: 7
CPU variant : 0x0
CPU part : 0xb76
CPU revision : 4
Cache type : write-back
Cache clean : cp15 c7 ops
Cache lockdown : format C
Cache format : Harvard
I size : 16384
I assoc : 4
I line length : 32
I sets : 128
D size : 16384
D assoc : 4
D line length : 32
D sets : 128

Hardware : MT5365
Revision : 0000
Serial : 0000000000000000
testtool >



testtool > uname -a
system command : 'uname -a'
Linux mt5391 2.6.27 #1 PREEMPT Mon Jan 28 12:32:39 EET 2013 armv6l GNU/Linux


---------- Post added at 19:35 ---------- Previous post was at 18:12 ----------

Imi trebuie drivere pentru adaptorul de net USB, adica trebuie sa le iau dintr-un televizor cu acelasi procesor care le are !
Am reusit sa ii fac sa inregistreze necodat ! Asta se poate face pe toate.

zildan
05-02-15, 16:38
Asta cu decodarea e obiectivul final !
Se pare ca se poate la modelul asta cu MTK.
Celelalte tv-uri de la am au MSTAR .
Momentan caut o versiune de soft care sa aiba driverele de net pe USB.
Am facut backup la tot televizorul.
Lipsesc cateva scripturi si driverul de stick wireless pe USB.

---------- Post added at 14:46 ---------- Previous post was at 14:37 ----------

Mutam topicul la club?

---------- Post added at 15:38 ---------- Previous post was at 14:46 ----------

Asa imi vede linuxul adaptorul de net.
E adaptorul care il vinde oficial Vestel ! Wezy200
http://www.unex.com.tw/product/dnur-v72


T: Bus=01 Lev=02 Prnt=02 Port=03 Cnt=02 Dev#= 4 Spd=12 MxCh= 0
D: Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1
P: Vendor=148f ProdID=5572 Rev= 1.01
S: Manufacturer=Ralink
S: Product=802.11 n WLAN
S: SerialNumber=1.0
C:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=450mA
I:* If#= 0 Alt= 0 #EPs= 5 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
E: Ad=81(I) Atr=02(Bulk) MxPS= 64 Ivl=0ms
E: Ad=01(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms
E: Ad=02(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms
E: Ad=03(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms
E: Ad=04(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms

mondo
05-02-15, 20:22
Mutam topicul la club?

Afirmativ!

zildan
06-02-15, 03:02
De peste un an am sapat la metode de modificare aparate Vestel
Meniu 4725 iti confirma ca e facut de ei un TV.
Nu te iei dupa eticheta.
Trebuie sa desfac un firmware de Vestel cu MTK seria 81 cu net ca sa iau ce imi lipseste .
Dupa ce fac teste lansand de pe stick scripturile trec la rescrierea partiala flash.
Cea mai grea parte e DVB-API.
Sa reusesc sa adaptez oscamul !
MTK si Mstar deja sunt proprietatea MTK.
Mtk e pe LG si pe cateva serii de Vestel, Mstar e pe Samsungurile "nerezolvate" si pe seriile noi de Vestel.

Nu are rost sa incerc alte stickuri.
M-am uitat deja in linuxul televizorului si am vazut ca sunt sterse intentionat driverele !
Exista o parte comentata de wireles.

zildan
09-02-15, 18:44
Am reusit sa fac update la un tv de 50" din seria M95 de la Vestel cu un firmware beta.
S-a schimbat total si partea de SMART, acum are vreo 50 de aplicatii.
Studiez cum fac sa deblochez si opera TV store.
Am vazut ca se poate seta CI sa fie cu sau fara +
Pasul urmator ar fi emu!

---------- Post added at 17:44 ---------- Previous post was at 17:28 ----------

Are MSTAR procesor ca seriile SAMSUNG nerezolvate inca.
O sa fac cateva studii.

mirel
09-02-15, 23:23
la mstar-urile de la samsung, dupa cite am inteles, nu au reusit sa "desfaca" dvbapi...asta-i cauza nefuncionalitatii...
daca-i dai de cap....pfffff... dau o bere!!! .. :drinks:

zildan
10-02-15, 13:07
In imaginile de mai jos sunt mai multe versiuni de Smart pe acelasi televizor:
1195
1196
1197
http://sateliti.info/attachment.php?attachmentid=1198&d=1423562794
1198

zildan
10-02-15, 13:09
Continuarea:
1198

zildan
12-02-15, 19:42
Ieri am "pus in cap" la propriu un alt tv, care era agatzat pe smart.
Am facut update general cu un soft si difera panelul.
Am crezut ca restaurand filele de config (procedura e relativ simpla) il refac.
Nu e asa, exista driver de panel in fiecare model, separat de filele de cfg.
Acum negociez cu service-ul sa imi dea softul original, televizorul merge perfect, smartul la fel doar ca se vede cu capul in jos si e rezolutia un pic ciudata.
O sa studiez posibilitatea de a face update partial !
Inca nu am gasit o cale sa activez telnet pe ele.
Ar trebui adaugata o fila intr-un director si porneste singur la boot telnetul.
Nu ma las pana nu fac asta.
Nu a reusit inca nimeni la modelele astea sa faca asta.

---------- Post added at 13:53 ---------- Previous post was at 12:00 ----------

Atasamentele de mai sus sunt puse asa ca sa evit un bug de vbulletin.
Se pare ca nu ma lasa sa am mai mult de 3 imagini puse pe forum.
Am zis sa nu folosesc postimage .
A 4-a imagine nu vrea sa apara.

---------- Post added at 13:56 ---------- Previous post was at 13:53 ----------

1199
Asta ar trebui sa fie.
http://s9.postimg.cc/sczjmblu7/IMG_20150210_021444.jpg (http://postimg.cc/image/8v4w6dowb/full/)

---------- Post added at 15:30 ---------- Previous post was at 13:56 ----------

Televizoarele au U-boot ca la SH40.
Am reusit sa preiau controlul la U-boot, acum incerc sa bootez cu consola activa ca terminal.

---------- Post added at 15:41 ---------- Previous post was at 15:30 ----------

Intre timp am intrat in consola si am facut backup la tv. Prt asta e prea tarziu !

---------- Post added at 16:24 ---------- Previous post was at 15:41 ----------

Acum sap sa aflu parola de la telnet !

---------- Post added at 17:07 ---------- Previous post was at 16:24 ----------

Am root pe tv si telnet !


(none) login: root
# ps
PID USER VSZ STAT COMMAND
1 root 2848 S init
2 root 0 SW< [kthreadd]
3 root 0 SW< [ksoftirqd/0]
4 root 0 SW< [events/0]
5 root 0 SW< [khelper]
8 root 0 SW< [async/mgr]
45 root 0 SW< [kblockd/0]
65 root 0 SW [pdflush]
66 root 0 SW [pdflush]
67 root 0 SW< [kswapd0]
183 root 0 SW< [mtdblockd]
184 root 0 SW< [nftld]
221 root 0 SW< [ubi_bgt0d]
225 root 0 SW< [ubi_bgt1d]
227 root 0 SW< [ubifs_bgt1_0]
228 root 2912 S /bin/sh /etc/init.d/rcS
232 root 0 SW< [ubifs_bgt0_0]
235 root 0 SW< [ubifs_bgt1_1]
240 root 2912 R /bin/telnetd -l /bin/login
241 root 803m S ./vendor/aurora.elf
333 root 0 SW< [khubd]
477 root 0 SWN [RtmpTimerTask]
478 root 0 SWN [RtmpMlmeTask]
479 root 0 SWN [RtmpCmdQTask]
480 root 0 SWN [RtmpWscTask]
548 root 20160 S N /vendor/linux-mipsel-skypekit-voicepcm-videortp -f /c
755 root 0 SW< [scsi_eh_3]
756 root 0 SW< [usb-storage]
772 root 0 SW [scsi-polling th]
782 root 2912 R -sh
783 root 3408 R ps
#


---------- Post added at 17:10 ---------- Previous post was at 17:07 ----------

Nu am citit nimic despre asta.
Am facut de oftica de azi de dim !

---------- Post added at 17:14 ---------- Previous post was at 17:10 ----------

Daaca apare alcatel pe aici vreau si eu parola echivalenta la :

root:ypQ0ab9FhET1c:0:0:root:/root:/bin/sh

---------- Post added at 18:42 ---------- Previous post was at 17:14 ----------

la al 2-lea tv a durat 1 min sa ii pornesc telnet !!!!
Inca nu stiu daca e bine sa fac publica sau nu procedura !

zildan
12-02-15, 21:21
# uname -a
Linux (none) 2.6.28.10 #31 PREEMPT Wed Aug 14 18:55:38 CST 2013 mips GNU/Linux


# cat /proc/cpuinfo
system type : MStar Chip
processor : 0
cpu model : MIPS 34Kc V5.5 FPU V0.0
BogoMIPS : 415.74
wait instruction : yes
microsecond timers : yes
tlb_entries : 64
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0484, 0x0400, 0x0ff8]
ASEs implemented : mips16 dsp mt
shadow register sets : 1
core : 0
VCED exceptions : not available
VCEI exceptions : not available

zildan
13-02-15, 00:48
O sa iau de la service-ul autorizat firmware de reparatie oficial pe serie.
Deja am inceput tratativele.
La celelalte am asa ceva !

---------- Post added at 22:43 ---------- Previous post was at 22:35 ----------


top - 20:42:44 up 4 min, 0 users, load average: 0.17, 0.19, 0.09
Tasks: 32 total, 2 running, 30 sleeping, 0 stopped, 0 zombie
Cpu(s): 3.3%us, 2.6%sy, 0.7%ni, 92.1%id, 0.0%wa, 0.7%hi, 0.7%si, 0.0%st
Mem: 277072k total, 123664k used, 153408k free, 176k buffers
Swap: 0k total, 0k used, 0k free, 61920k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
241 root 20 0 799m 59m 35m S 5.6 22.0 0:29.18 aurora.elf
240 root 20 0 2912 912 752 R 0.3 0.3 0:00.04 telnetd
616 root 20 0 3056 1616 1296 R 0.3 0.6 0:00.10 top
1 root 20 0 2848 960 816 S 0.0 0.3 0:00.16 init
2 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 kthreadd
3 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ksoftirqd/0
4 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 events/0
5 root 15 -5 0 0 0 S 0.0 0.0 0:00.01 khelper
8 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 async/mgr
45 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 kblockd/0
65 root 20 0 0 0 0 S 0.0 0.0 0:00.00 pdflush
66 root 20 0 0 0 0 S 0.0 0.0 0:00.01 pdflush
67 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 kswapd0
183 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 mtdblockd
184 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 nftld
221 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ubi_bgt0d
225 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ubi_bgt1d
227 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ubifs_bgt1_0
228 root 20 0 2912 1168 976 S 0.0 0.4 0:00.04 rcS
232 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ubifs_bgt0_0
235 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ubifs_bgt1_1
340 root 15 -5 0 0 0 S 0.0 0.0 0:00.92 khubd
384 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 scsi_eh_0
385 root 15 -5 0 0 0 S 0.0 0.0 0:00.01 usb-storage
401 root 20 0 0 0 0 S 0.0 0.0 0:00.00 scsi-polling th
467 root 24 4 0 0 0 S 0.0 0.0 0:00.18 RtmpTimerTask
468 root 24 4 0 0 0 S 0.0 0.0 0:00.73 RtmpMlmeTask
469 root 24 4 0 0 0 S 0.0 0.0 0:00.00 RtmpCmdQTask
470 root 24 4 0 0 0 S 0.0 0.0 0:00.00 RtmpWscTask
554 root 24 4 20160 15m 0 S 0.0 5.7 0:02.90 linux-mipsel-sk
608 root 20 0 2912 1152 976 S 0.0 0.4 0:00.02 sh
614 root 20 0 2912 1152 976 S 0.0 0.4 0:00.02 sh


---------- Post added at 23:48 ---------- Previous post was at 22:43 ----------

Am uitat sa precizez ca sunt pe wireles conectat pe net!

# ifconfig
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:28105 errors:0 dropped:0 overruns:0 frame:0
TX packets:28105 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:6646500 (6.3 MiB) TX bytes:6646500 (6.3 MiB)

ra0 Link encap:Ethernet HWaddr 60:02:B4:5E:69:2D
inet addr:192.168.1.145 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1300 Metric:1
RX packets:110895 errors:0 dropped:0 overruns:0 frame:0
TX packets:7355 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:25660171 (24.4 MiB) TX bytes:2020910 (1.9 MiB)

#

zildan
13-02-15, 16:11
Merg aplicatiile mipsel perfect !
Am pus alt busybox, pentru ca cel original avea putine comenzi.


# ./busybox-mipsel
BusyBox v1.19.0 (2011-08-14 23:54:25 CDT) multi-call binary.
Copyright (C) 1998-2011 Erik Andersen, Rob Landley, Denys Vlasenko
and others. Licensed under GPLv2.
See source distribution for full notice.

Usage: busybox [function] [arguments]...
or: busybox --list[-full]
or: function [arguments]...

BusyBox is a multi-call binary that combines many common Unix
utilities into a single executable. Most people will create a
link to busybox for each function they wish to use and BusyBox
will act like whatever it was invoked as.

Currently defined functions:
[, [[, acpid, add-shell, addgroup, adduser, adjtimex, arp, arping, ash,
awk, base64, basename, beep, blkid, blockdev, bootchartd, brctl,
bunzip2, bzcat, bzip2, cal, cat, catv, chat, chattr, chgrp, chmod,
chown, chpasswd, chpst, chroot, chrt, chvt, cksum, clear, cmp, comm,
cp, cpio, crond, crontab, cryptpw, cttyhack, cut, date, dc, dd,
deallocvt, delgroup, deluser, depmod, devmem, df, dhcprelay, diff,
dirname, dmesg, dnsd, dnsdomainname, dos2unix, du, dumpkmap,
dumpleases, echo, ed, egrep, eject, env, envdir, envuidgid, ether-wake,
expand, expr, fakeidentd, false, fbset, fbsplash, fdflush, fdformat,
fdisk, fgconsole, fgrep, find, findfs, flock, fold, free, freeramdisk,
fsck, fsck.minix, fsync, ftpd, ftpget, ftpput, fuser, getopt, getty,
grep, groups, gunzip, gzip, halt, hd, hdparm, head, hexdump, hostid,
hostname, httpd, hush, hwclock, id, ifconfig, ifdown, ifenslave,
ifplugd, ifup, inetd, init, insmod, install, ionice, iostat, ip,
ipaddr, ipcalc, ipcrm, ipcs, iplink, iproute, iprule, iptunnel,
kbd_mode, kill, killall, killall5, klogd, last, less, linux32, linux64,
linuxrc, ln, loadfont, loadkmap, logger, login, logname, logread,
losetup, lpd, lpq, lpr, ls, lsattr, lsmod, lspci, lsusb, lzcat, lzma,
lzop, lzopcat, makedevs, makemime, man, md5sum, mdev, mesg, microcom,
mkdir, mkdosfs, mke2fs, mkfifo, mkfs.ext2, mkfs.minix, mkfs.vfat,
mknod, mkpasswd, mkswap, mktemp, modinfo, modprobe, more, mount,
mountpoint, mpstat, mt, mv, nameif, nbd-client, nc, netstat, nice,
nmeter, nohup, nslookup, ntpd, od, openvt, passwd, patch, pgrep, pidof,
ping, ping6, pipe_progress, pivot_root, pkill, pmap, popmaildir,
poweroff, powertop, printenv, printf, ps, pscan, pstree, pwd, pwdx,
raidautorun, rdate, rdev, readahead, readlink, readprofile, realpath,
reboot, reformime, remove-shell, renice, reset, resize, rev, rm, rmdir,
rmmod, route, rpm, rpm2cpio, rtcwake, run-parts, runlevel, runsv,
runsvdir, rx, script, scriptreplay, sed, sendmail, seq, setarch,
setconsole, setfont, setkeycodes, setlogcons, setserial, setsid,
setuidgid, sh, sha1sum, sha256sum, sha512sum, showkey, slattach, sleep,
smemcap, softlimit, sort, split, start-stop-daemon, stat, strings,
stty, su, sulogin, sum, sv, svlogd, swapoff, swapon, switch_root, sync,
sysctl, syslogd, tac, tail, tar, tcpsvd, tee, telnet, telnetd, test,
tftp, tftpd, time, timeout, top, touch, tr, traceroute, traceroute6,
true, tty, ttysize, tunctl, ubiattach, ubidetach, ubimkvol, ubirmvol,
ubirsvol, ubiupdatevol, udhcpc, udhcpd, udpsvd, umount, uname,
unexpand, uniq, unix2dos, unlzma, unlzop, unxz, unzip, uptime, users,
usleep, uudecode, uuencode, vconfig, vi, vlock, volname, wall, watch,
watchdog, wc, wget, which, who, whoami, whois, xargs, xz, xzcat, yes,
zcat, zcip


---------- Post added at 14:39 ---------- Previous post was at 13:17 ----------


# ./oscam
12:38:34 0 s >> OSCam << cardserver started, version 1.20-unstable_svn, build r10458 (mipsel-unknown-linux-gnu)
12:38:34 0 s (main) System name = Linux
12:38:34 0 s (main) Host name = (none)
12:38:34 0 s (main) Release = 2.6.28.10
12:38:34 0 s (main) Version = #31 PREEMPT Wed Aug 14 18:55:38 CST 2013
12:38:34 0 s (main) Machine = mips
12:38:34 0 s (main) creating pidfile /tmp/.oscam/oscam.pid with pid 923
12:38:34 0 s (main) signal handling initialized
12:38:34 54B890 h (webif) webif: decompressed 152402 bytes back into 366512 bytes
12:38:34 54B890 h (webif) HTTP Server running. ip=0.0.0.0 port=8888
12:38:34 0 s (stat) loadbalancer: can't read from file /tmp/.oscam/stat
12:38:34 0 s (main) waiting for local card init
12:38:34 0 s (main) init for all local cards done
12:38:34 0 s (emmcache) can't read emmcache from file /tmp/.oscam/oscam.emmcache
12:38:34 0 s (emmcache) can't read emmstats from file /tmp/.oscam/oscam.emmstat
12:38:34 0 s (anticasc) anti cascading disabled
12:38:34 54EEC0 c (client) plain dvbapi-client granted (anonymous, au=off)
12:38:34 54EEC0 c (dvbapi) dvbapi channelcache can't read from file /var/tuxbox/config/oscam.ccache
12:38:34 54EEC0 c (dvbapi) ERROR: Could not detect DVBAPI version.


---------- Post added at 14:42 ---------- Previous post was at 14:39 ----------

Poti sa pui server de oscam si cccam pe tv. Ramane sa se gaseasca o cale de DVB-API !

---------- Post added at 15:11 ---------- Previous post was at 14:42 ----------

Am desasamblat executabilul !
Aurora se numeste softul .

mirel
13-02-15, 20:13
Ramane sa se gaseasca o cale de DVB-API

acolo-i buba... :D ...cum spuneam: dau o bere!!!.. :drinks:

zildan
14-02-15, 04:14
Am descoperit cateva functii noi, metode de a face autobackup.
O sa dureze sa inteleg din IDAPro.

Am gasit si procedurile de CI, le zice ICE.
Se vad intre ele televizoarele !
Poti sa te uiti pe inregistrari intre ele.
Am pornit si WIFI-Direct.
Are suport si pt USB-Network.

zildan
15-03-15, 23:50
Azi am intrat intr-un vestel care are procesor Broadcom dual core:

# cat /proc/cpuinfo
system type : BCM97xxx Settop Platform
build target : 3548b0-smp-nand
processor : 0
cpu model : BMIPS4380 V4.4 FPU V0.1
cpu MHz : 402.43
BogoMIPS : 402.43 ( udelay_val : 201216 HZ = 1000 )
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : no
ASEs implemented : mips16
VCED exceptions : not available
VCEI exceptions : not available
RAC setting : Unknown
unaligned access : 7
rdhwr/brdhwr traps : 0 / 0
process migrations : 1414
processor : 1
cpu model : BMIPS4380 V4.4 FPU V0.1
cpu MHz : 404.48
BogoMIPS : 404.48 ( udelay_val : 202240 HZ = 1000 )
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : no
ASEs implemented : mips16
VCED exceptions : not available
VCEI exceptions : not available
RAC setting : Unknown
#

horatyu
18-03-15, 12:28
Asteptam mai multe stiri...cam ce se poate modifica, daca tot ai intrat in el , ceva noutati...

konstantine
04-09-15, 03:53
Un manual de service pentru 17MB35 gasim? Nu am nicio optiune "editabila" la panel.
In afara de resetarea "on time si st by time" nu are nimic important.
Finlux(vestel)
124012411242

zildan
07-09-15, 21:49
Se modifica din optiunea 7 da nu e public nimic.
Nu te sfatuiesc sa umblii.

konstantine
07-09-15, 21:56
Optiunea 7 + CEC :
1243

1244

zildan
27-11-15, 19:17
Pentru cei care nu stiau ce inseamna VESTEL:

https://www.youtube.com/watch?v=R9dUqpkMpkY

si in domeniul militar:


https://www.youtube.com/watch?v=MnCPY1eMXaU

zildan
14-12-16, 13:00
Am trecut la Vestel UHD, e mainboard 17MB100, prezent pe seriile 2015 final de an Panasonic.
Se poate face backup la setari, au schimbat insa codarea lor dupa ce au fost decodate.
Am activat logul prin interfata TTL-USB, nu merge insa decat in citire.
Ori am gresit ceva la fire, desi am sapat 3 ore aseara (am relevat cablu adaptor SCART-mufa TV, care e special) si am decodat corespondenta pinilor (nu mai merge combinatia 17MB95).

[AT][MBoot][Boot Nuttx][1980]
## Booting kernel from Legacy Image at 20400000 ...
Image Name: Linux-3.10.23
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 3280280 Bytes = 3.1 MiB
Load Address: 20208000
Entry Point: 20208000
Verifying Checksum ... OK


[CPU INFO] cpu openCPUIoctl - MDrv_CMD_CPU_QueryClock
## Software Version: V.0.1.33.17 SVN 192281
MBoot Version: MB100-068 PM ver: 1027
NAND Size: 0
DDR Freq: 0M
CPU Freq: 756M
DDR Size: 1536MB

E posibil sa lipseasca o rezistenta pe cablaj ca sa nu pot edita prin consola rcS sa pornesc telnet.
Nu il desfac inca televizorul.

Are tunere C, C2, T, T2, S2, merg UHD-urile in HEVC, si Youtube4k in Vp9, e 3D activ si merge BT cu orice device, am conectat o boxa externa la el si merge fb.

Nu stie decat diseq 1.0, nu muta HH, isi masoara cu mare grija curentul si da mesaje de eroare daca apare ceva scurgeri.

Am o noua jucarie :)

zildan
15-12-16, 17:32
Au rezolvat deja turcii cu mobile file. Acum studiez.

Sent from my Q6T7IN4G using Tapatalk

---------- Post added at 14:41 ---------- Previous post was at 13:03 ----------

Am activat DTS , Pvr necodat , iptv, epg html, si mai multe maruntisuri

---------- Post added at 16:11 ---------- Previous post was at 14:41 ----------

Cea mai tare faza e ca stie sa faca streaming catrere tablete telefoane etc, e o aplicatie pe market la Android si IOS care poate controla televizorul, si pe care poti sa vezi emisiunea, poti opri ecraul televizorului din ea.
Face streaming la canalele UHD ! Cred ca le reencodeaza in timp real.
Evident si functia asta era oprita cand l-am cuparat.

---------- Post added at 16:32 ---------- Previous post was at 16:11 ----------

Captura din telefon
1441

zildan
15-12-16, 20:32
Incredibil e ca face streaming de pe intrarile HDMI !

zildan
15-12-16, 23:58
Castile BT noname, schimba postul la tv.

konstantine
16-12-16, 00:11
Mai ai să-i pui aripi și elice... :)
In rest , l-ai cam făcut "cap de serie".

zildan
16-12-16, 00:34
Asta e pe BT:

zildan
18-12-16, 13:51
Am avansat cu televizorul. O sa deschid topic special.

zildan
18-12-16, 22:12
Pe interfata "backdoor" se pot da sute de comenzi, printre care si captura de imagine pe stick, captura pe care o salveaza 1080 indiferent ce rezolutie are postul.
https://s23.postimg.cc/v0o74aqu3/screen_0_capture_0.jpg (https://postimg.cc/image/rh29eho47/)

https://s23.postimg.cc/lheiau3bv/screen_8_capture_5.jpg (https://postimg.cc/image/ahtaz8cwn/)


https://s29.postimg.cc/8034h8h53/screen_8_capture_8.jpg (https://postimg.cc/image/ahevoi11f/)

https://s29.postimg.cc/5lb8wt0w7/screen_8_capture_9.jpg (https://postimg.cc/image/pfxaixg3n/)

zildan
30-12-16, 02:16
Saptamanile astea sunt la Craiova fara 4K.
Veste-lul de care am scris mai sus e identic cu : Panasonic-TX-55CRW434 (http://www.conrad.com/ce/en/product/1337496/LED-TV-140-cm-55-Panasonic-TX-55CRW434-EEC-A-DVB-T-DVB-C-DVB-S-UHD-Curved-3D-Smart-TV-WLAN-PVR-ready-CI-Chr#emptylink)

zildan
10-01-17, 17:59
Prin interfata secreta se pot da cateva sute de comenzi.

Am activat telnet si FTP, astfel ca pot copia captura de pe stick fara sa ma deplasez la tv.



capteaza meniurile

https://s23.postimg.cc/jr257zwiz/screen_0_capture_1.jpg (https://postimg.cc/image/8rgxwe63r/)

capteaza imaginea

https://s23.postimg.cc/ttlioh0tn/screen_8_capture_3.jpg (https://postimg.cc/image/abqv8j3vr/)

capteaza meniul Youtube !


https://s23.postimg.cc/hnrq0bwq3/screen_1_capture_0.jpg (https://postimg.cc/image/rl2qte4br/)



capteaza imaginea Youtube !

https://s23.postimg.cc/sq1ecig6j/screen_8_capture_0.jpg (https://postimg.cc/image/jv0k1zrdz/)

zildan
22-01-17, 16:19
Am facut din nou update la televizor.
Emotiile au fost mari din doua motive:
1) E update luat de la turci generic pentru acest sasiu si poate da eroare.
2) Riscul de a "dezavctiva" interfata testtool, caz in care pierd sute de comenzi de "service", printre care si captura de ecran.

Finalul a fost fericit:
https://s28.postimg.cc/xl540n6r1/Update2.jpg (https://postimg.cc/image/4vi8402qx/)

zildan
23-02-17, 10:16
Aseară am montat un ventilator la Vestel-ul UHD curbat.
Am folosit găurile din capac rezervate pentru subwoofer (nu are tv-ul). E alimentat din USB si prins cu 2 șoricei.
Riscul e sa imi bage praf in panel. E problema cunoscuta la Samsung asta cu praful intre lcd si plasticul de protecție (panelu e Samsung).


https://uploads.tapatalk-cdn.com/20170223/c1c985a28695128fd3102207834906e7.jpg

UMBRE
22-09-18, 18:14
am facut din nou update la televizor.
Emotiile au fost mari din doua motive:
1) e update luat de la turci generic pentru acest sasiu si poate da eroare.
2) riscul de a "dezavctiva" interfata testtool, caz in care pierd sute de comenzi de "service", printre care si captura de ecran.

Finalul a fost fericit:
https://s28.postimg.cc/xl540n6r1/update2.jpg (https://postimg.cc/image/4vi8402qx/)
salut.ajuta-ma si pe mine te rog din suflet.mi-am schimbat placa de baza la un qilive 55q461 si acum nu mai merge netflix.mentionez ca am service meniu(ronesans)(v.0.1.33.17)(svn:192281)

val
26-06-22, 17:24
Fara a avea legatura directa cu subiectul topicului, vreau sa va intreb cu ce editati lista de canale a TV-ului? In afara de telecomanda :)

Am folosit pentru a-mi face putina ordine in lista tv-ului (Samsung) un editor de canale pe care l-am gasit aici: https://github.com/PredatH0r/ChanSort . Interesant este ca pe langa tv-uri sunt suportate si Box-urile Enigma2. Tv-ul il am de putin timp, din cate banuiesc modulul CI de la operator isi va "face de cap" la prima actualizare a listei de canale; pentru orice eventualitate am salvat lista editata in calculator.

Asa se prezenta lista needitata:

https://i.postimg.cc/pV5KKQtS/44.png (https://postimages.org/)

Si dupa:

https://i.postimg.cc/FKKLz3ZD/55.png (https://postimages.org/)

Astept si parerile voastre.

fery21
26-06-22, 17:28
Nu poti lipi pe interior un filtru anti praf ?



Aseară am montat un ventilator la Vestel-ul UHD curbat.
Am folosit găurile din capac rezervate pentru subwoofer (nu are tv-ul). E alimentat din USB si prins cu 2 șoricei.
Riscul e sa imi bage praf in panel. E problema cunoscuta la Samsung asta cu praful intre lcd si plasticul de protecție (panelu e Samsung).

zildan
27-06-22, 01:34
Am combinat de 3 ani televizorul, fara ventilator.