Official Firmware Hacking Thread (new)

**kenkyusha** · 2009 February 11th, 19:00

Just in case anyone has the spare cash: this camera is posted as non-functioning (a problem with record). Hope someone is able to grab it.

Be well,
Jigme

**jmorton** · 2009 February 12th, 08:40

Originally Posted by _gl

You're incorrectly assuming that the firmware is only scanning buttons, and sending simple control signals. The firmware also controls the menus, draws its graphics, controls the LCD etc.

Whilst your method is feasible if you just want to get hard-wired hardware control, there would be no way to make any changes or get any visual feedback (other than LEDs blinking etc).

And the reason the HV20 isn't being hacked (which we would all like to see on hv20.com) is that no firmware has been released for it, and the hackers aren't yet able to read the existing firmware out. Canon have released HV30 and HF10 firmwares, so those are the ones being analyzed.

Obviously the HV30 is almost identical to the HV20, so a sucessful hack will make a HV20 hack likely.

(I did it again: lost my post and now I try to reconstruct it a day later.)

I was hoping someone would mention other factors.

Regarding the LCD display: if you look at the CHDK website you'll find that they can completely reprogram the LCD and what information is displayed on it. Even if you make a Zombie HV20 these same methods can be used to program the LCD display with whatever info you do have and chose to display.

This link could be a gateway to solving the HV20 hack:

http://camerahacks.10.forumer.com/

A fact of life: we can't do it all ourselves. Make friends and help each other.

I wonder if some of these hackers might want to give the HV20 hack a try for the money in the HV20 hack fund?

JM

**TequilaKez** · 2009 February 12th, 09:14

Somehow I really don't think you're going to get manual gain control out of a HV20 with a soldering iron.

Hey... at least we'll have lot's of broken cams to test new firmwares on though !

**TequilaKez** · 2009 February 12th, 10:25

You could do some pretty sweet mods though.

1 · 2009 February 12th, 10:32

HAHA, that's hilarious!

**Rumple** · 2009 February 12th, 10:52

I'd buy one...
^_^

**nxb** · 2009 February 12th, 22:22

I repair things for a living. Why are you getting a quote for service. Why not get a quote for a new mainboard and install it yourself? That's what I do with the stuff I service if I can't fix it on a component level or its BROKEN broken. Call canon with the part # of the mainboard with the flash chip on it and ask how much it is. You could probably look on ebay/google as it is a very popular camera. Buy it and then put it in yourself. The part is probably <$200. If someone is adventurous they can see what the flash chip is and see how much a programmer is. Then we have a direct image of the chip. You have $400, its probably enough for a mainboard AND a programmer. A mainboard for the HF10 is probably even cheaper. The software part is the hard part.

**jollyrogerxp** · 2009 February 12th, 23:50

The HV30 Firmware we are analyzing has several layers of code libraries and modules, all running on at least two completely different microprocessors, each using a real-time OS.
This could hardly be any further from the "button attached to simple gate connected to actuators" case, believe me.
By the way I live in Canada, I will try to see if I can find a 2nd hand HV30 for a reasonable price somewhere and if I find it I will buy it myself, at least I can try out a few things and if it bricks I am not the original owner who registered it

**CycleWriter** · 2009 February 13th, 13:50

Sorry, but I moved the latest attempts at comedy to the "Boondoggle" thread. Lets try to keep this thread focused on actual hack info and leave the entertainment for The Pub.

Oh, SDeming, not a penny has been received from anyone named Vic Olam or any of his aliases.

**sdeming** · 2009 February 13th, 13:57

Originally Posted by CycleWriter

Oh, SDeming, not a penny has been received from anyone named Vic Olam or any of his aliases.

Big surprise

.

**jmorton** · 2009 February 15th, 10:43

I suggested getting the help of a PhD electical engineer or some other highly qualified person to consult with the HV20 firmware hack.

Well, below is a link to a page at CHDK - Wiki that will give any who are interested a peek at what it takes to reverse engineer camera firmware. It doesn't look pretty.

"Since late 2007 Digic-based cameras are shipped using Canon's own Operating System named DryOS. It replaces VxWorks from Wind River which has been used before on Digic II and some Digic III cameras. DryOS had existed before and was in use in other Canon hardware, such as digital video cameras and high-end webcams. The reason for the switch were most probably royalties Canon had to pay for VxWorks."

http://chdk.wikia.com/wiki/DryOS_Porting

(Great picture by TequilaKez. Do I get the credit for coining the name: "HV20 Zombie?")

JM

**HV20_Likeable** · 2009 February 17th, 10:20

if anyone's interested:

http://cgi.ebay.com/AS-IS-Canon-HV30...3A1|240%3A1318

**_gl** · 2009 February 17th, 10:24

Originally Posted by HV20_Likeable

if anyone's interested:

http://cgi.ebay.com/AS-IS-Canon-HV30...3A1|240%3A1318

... but unless it goes cheap: "NOTE: Unit will not power on". Could be fried

.

Good find though, keep 'em coming

.

**HV20_Likeable** · 2009 February 18th, 12:38

thanks, well price is still good, and only 2 days to go!

please someone here, like the hackers or moderators of this, please grab this chance, i very much want things moving on, AVC-Intra for 2K shooting!

**_gl** · 2009 February 18th, 12:41

Originally Posted by HV20_Likeable

thanks, well price is still good, and only 2 days to go!

please someone here, like the hackers or moderators of this, please grab this chance, i very much want things moving on, AVC-Intra for 2K shooting!

The thing is, if it won't boot then you can't try firmware mods on it (unless you want to gamble that it can be revived).

Hackers, is it any use to you?

**HV20_Likeable** · 2009 February 18th, 13:09

point given, however it only says it wont turn on, which is probably a simple thing to fix, maybe it wont boot from battery and will on a adapter.

either way, i believe it can be still of use.

**Rumple** · 2009 February 18th, 13:12

Well, maybe there should be a vote and then the treasurer can buy it if the voting goes that way. 'course we'd need a quick breakdown of the pro's and con's.

**HV20_Likeable** · 2009 February 18th, 13:14

i also suggest someone message the seller for a more detail description on the condition of the cam.

**Rumple** · 2009 February 18th, 13:19

Sounds like a plan.
I know precisely sweet FA about this so i'll let someone with the technical know how ask the seller.

**HV20_Likeable** · 2009 February 19th, 16:45

any luck on this equation??

only less than 20 hours left! is anyone going to take ahold of this?

personally i would, but i am from the UK and thats a US sale/auction, so it would be impractical, but i am resting on someone here can do it.

anyone at all?

**Wiesel** · 2009 February 19th, 19:09

Originally Posted by _gl

... but unless it goes cheap: "NOTE: Unit will not power on". Could be fried

.

Even if it doesn't boot, if it stays that cheap it would be a great occation and target to do some hardware analysis and get further insight in what hardware the firmware runs on among other interesting things.

**Ian-T** · 2009 February 19th, 19:17

Originally Posted by Wiesel

Even if it doesn't boot, if it stays that cheap it would be a great occation and target to do some hardware analysis and get further insight in what hardware the firmware runs on among other interesting things.

I'm thinking...andromatize it like the DVX,

....ok...that's a bit much...but...hmmmm...

**jollyrogerxp** · 2009 February 19th, 21:43

I agree with Wiesel on this, it's something that can be played with without too much fear...

**HV20_Likeable** · 2009 February 20th, 06:42

more or less 6 hours to go and on $50!

can we do it? and make a change?!

**Wiesel** · 2009 February 20th, 07:39

If they would offer shipping to Europe I'd bid on it right away! Soultrape is from the US, isn't he? (edit: I just found out he isn't)
Damn I guess it's too late already to organize something...

Thread: Official Firmware Hacking Thread (new)

Thread Tools

Display

Bricked camera on E-bay

Reverse Engineer DryOS: Canon's Own Operting System

Tags for this Thread

Posting Permissions