Are you over 18 and want to see adult content?
More Annotations
A complete backup of www.www.amkingdom.com
Are you over 18 and want to see adult content?
A complete backup of www.vintagemags.org
Are you over 18 and want to see adult content?
A complete backup of www.ls-models.gr
Are you over 18 and want to see adult content?
Favourite Annotations
A complete backup of https://etvnews.com
Are you over 18 and want to see adult content?
A complete backup of https://carnivoresreborn.com
Are you over 18 and want to see adult content?
A complete backup of https://advertisekc.com
Are you over 18 and want to see adult content?
A complete backup of https://ethicalconsumer.org
Are you over 18 and want to see adult content?
A complete backup of https://irest.us
Are you over 18 and want to see adult content?
A complete backup of https://talkingstickresort.com
Are you over 18 and want to see adult content?
A complete backup of https://nike-ru.com
Are you over 18 and want to see adult content?
A complete backup of https://evalpartners.org
Are you over 18 and want to see adult content?
A complete backup of https://capsugel.com
Are you over 18 and want to see adult content?
A complete backup of https://seotech.com.vn
Are you over 18 and want to see adult content?
Text
HACK CORRELATION
By Ligius November 08, 2019. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Steps: Identify the control units Buy the remote unit or reverse engineer the control signals Build a firmware for NodeMCU(ESP8266
BLINDS/SHUTTERS AUTOMATION WITH HOME ASSISTANT Blinds/Shutters automation with Home Assistant. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Buy the remote unit or reverse engineer the control signals. Build a firmware for NodeMCU (ESP8266) based onHACK CORRELATION
While it might sound easy, there are many steps involved: get hold of the service tool application, reverse engineer (RE) it, RE the service dongle, RE the machine protocol, write an IrDa implementation for Arduino, write the web app to serve the page - and coffee. Step 1 - .NET reverse engineering Ever since I've discovered JetBrains' DotPeek IKEA SKARSTA SIT/STANDING DESK HACK Ikea SKARSTA sit/standing desk hack. By Ligius September 20, 2015. Since I am lately doing contract work mostly from home I need to set up the environment just right. Sitting for 8-10 hours straight at a desk is unhealthy and a lot of my colleagues have motorized desks that go for 1700E (~2000USD) a pop. I just bought an Ikea SKARSTA desk that FIBERHOME AN5506-02-F ROUTER HACK I recently had to work with a home fiber router that was supplied by the ISP, the FiberHome AN5506-02-F. Compared to the previous internet access solution, which was based on a cable modem and required the user to use their own router, the new solution has both advantages anddisadvantages.
INSIDE STUFF
Inside stuff - teardown and repair of a Spy Pen. By Ligius March 30, 2014. This came out of a "box of things" that I regularly purchase on eBay. They consist of new items that are DOA (dead on arrival). It's a "Spy Pen" or "Spy Stick" - a USB stick with a 4GB capacity that also has a camera inside. The second line under the title makes DESIGNING A BETTER DIESEL TUNING BOX Designing a better diesel tuning box - part 3 - simplified design results. By Ligius May 23, 2016. As I wrote in the previous article, the barebones design has been through some basic testing - 500km mixed environment driving - and has been mostly successful so far. I had a suspicion that the output impedance of the circuit must somehow matcha
TOSHIBA REGZA TL868 FIRMWARE ANALYSIS Toshiba Regza TL868 firmware analysis. By Ligius October 16, 2013. My TV has a quite complex set of features, none of which work particularly well. Except perhaps using it as a PC display. Input latency is quite bad, ranging from over 200ms in normal mode to 100ms in "gaming" mode. The latency can easily be tested by going to thislink and
CONVERT A 27MHZ RC CAR TO 13.56MHZ greetings. I am looking for having 8 cars for a work of mine. unfortunately unknowingly i bought cheap 8 cars of 27mhz and suffering now. i want every car to be independently operated without interferring with any other. i have some confidence the chinese cheapish car something could be done. FLOUREON BYC17.GH3 THERMOSTAT TEARDOWN AND IMPRESSION Floureon BYC17.GH3 thermostat teardown and impression. I recently bought a Floureon thermostat for my electrical floor heating . and. took it apart. for your appreciation. Later edit: a lot of the users are complaining about the clock advancing a few minutes per day. You need to decide if you can live with that or ask the seller to providedetails.
HACK CORRELATION
By Ligius November 08, 2019. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Steps: Identify the control units Buy the remote unit or reverse engineer the control signals Build a firmware for NodeMCU(ESP8266
BLINDS/SHUTTERS AUTOMATION WITH HOME ASSISTANT Blinds/Shutters automation with Home Assistant. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Buy the remote unit or reverse engineer the control signals. Build a firmware for NodeMCU (ESP8266) based onHACK CORRELATION
While it might sound easy, there are many steps involved: get hold of the service tool application, reverse engineer (RE) it, RE the service dongle, RE the machine protocol, write an IrDa implementation for Arduino, write the web app to serve the page - and coffee. Step 1 - .NET reverse engineering Ever since I've discovered JetBrains' DotPeek IKEA SKARSTA SIT/STANDING DESK HACK Ikea SKARSTA sit/standing desk hack. By Ligius September 20, 2015. Since I am lately doing contract work mostly from home I need to set up the environment just right. Sitting for 8-10 hours straight at a desk is unhealthy and a lot of my colleagues have motorized desks that go for 1700E (~2000USD) a pop. I just bought an Ikea SKARSTA desk that FIBERHOME AN5506-02-F ROUTER HACK I recently had to work with a home fiber router that was supplied by the ISP, the FiberHome AN5506-02-F. Compared to the previous internet access solution, which was based on a cable modem and required the user to use their own router, the new solution has both advantages anddisadvantages.
INSIDE STUFF
Inside stuff - teardown and repair of a Spy Pen. By Ligius March 30, 2014. This came out of a "box of things" that I regularly purchase on eBay. They consist of new items that are DOA (dead on arrival). It's a "Spy Pen" or "Spy Stick" - a USB stick with a 4GB capacity that also has a camera inside. The second line under the title makes DESIGNING A BETTER DIESEL TUNING BOX Designing a better diesel tuning box - part 3 - simplified design results. By Ligius May 23, 2016. As I wrote in the previous article, the barebones design has been through some basic testing - 500km mixed environment driving - and has been mostly successful so far. I had a suspicion that the output impedance of the circuit must somehow matcha
TOSHIBA REGZA TL868 FIRMWARE ANALYSIS Toshiba Regza TL868 firmware analysis. By Ligius October 16, 2013. My TV has a quite complex set of features, none of which work particularly well. Except perhaps using it as a PC display. Input latency is quite bad, ranging from over 200ms in normal mode to 100ms in "gaming" mode. The latency can easily be tested by going to thislink and
CONVERT A 27MHZ RC CAR TO 13.56MHZ greetings. I am looking for having 8 cars for a work of mine. unfortunately unknowingly i bought cheap 8 cars of 27mhz and suffering now. i want every car to be independently operated without interferring with any other. i have some confidence the chinese cheapish car something could be done. FLOUREON BYC17.GH3 THERMOSTAT TEARDOWN AND IMPRESSION Floureon BYC17.GH3 thermostat teardown and impression. I recently bought a Floureon thermostat for my electrical floor heating . and. took it apart. for your appreciation. Later edit: a lot of the users are complaining about the clock advancing a few minutes per day. You need to decide if you can live with that or ask the seller to providedetails.
HACK CORRELATION
By Ligius November 08, 2019. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Steps: Identify the control units Buy the remote unit or reverse engineer the control signals Build a firmware for NodeMCU(ESP8266
INSIDE STUFF
Inside stuff - teardown and repair of a Spy Pen. By Ligius March 30, 2014. This came out of a "box of things" that I regularly purchase on eBay. They consist of new items that are DOA (dead on arrival). It's a "Spy Pen" or "Spy Stick" - a USB stick with a 4GB capacity that also has a camera inside. The second line under the title makesI.ONIK CLOUD HUB
i.onik Cloud Hub. Currently (early 2017) selling for 15E, I think I paid 12E including shipping. This post will focus on basic features and some early data. Later posts will go into some reverse-engineering, featuring a great YouTuber, LiveOverFlow. If you A LOOK INSIDE THE SAMSUNG S7 CAMERA IMPLEMENTATION A look inside the Samsung S7 camera implementation. By Ligius August 15, 2017. This post is less of a guide and more of a collection of thoughts. It assumes some Java and camera operation knowledge. My S7 has become my main camera since it handles low-light, uploading, water and time zones very well. It does have a few big weakness though CONVERT A 27MHZ RC CAR TO 13.56MHZ greetings. I am looking for having 8 cars for a work of mine. unfortunately unknowingly i bought cheap 8 cars of 27mhz and suffering now. i want every car to be independently operated without interferring with any other. i have some confidence the chinese cheapish car something could be done.EZCAST M2 TEARDOWN
EZCast M2 teardown. The microUSB plug on my newly acquired EZCast / Miracast dongle came loose so, obviously, I had to take it appart. The system is based around a single chip: AM8251 - a single-core ARM9 system-on-chip built specifically for this purpose. The big chip on the other side is a Samsung NAND flash chip, probably this one(K9F1G08U0E).
INSIDE STUFF
Inside stuff - smoke/fire detector FireAngel ST-620. Update: if you came here looking for a fix to the annoying beep I might have one - if you are feeling handy: take the unit apart, desolder one wire from the battery terminal, discharge the capacitor (by touching the disconnected wire to the other wire) and solder it back on.INSIDE STUFF
Removing the shielding cloth beneath the microphone pads reveals a Goodix GT9113 capacitive sensing unit. According to the linked datasheet it's able to provide both an I2C and a USB interface, with Windows 8 drivers. While not high on English the datasheet describes in great detail how to interface the chip, including a referencedesign with
HACK CORRELATION: DSO5062B The same device is being sold under many different name and brandings: Tekway DST1062B, Voltcraft DSO5062B, Zhongce, Protek, PCE (like mine) but it's exactly the same thing save for the splash screen and printedlogo.
TOSHIBA 32TL868 LED 3D TV TEARDOWN Toshiba 32TL868 LED 3D TV teardown. By Ligius January 04, 2015. See last Toshiba posts for firmware reverse-engineering analysis. TL;DR version: it would take too long to come up with a useful firmware mod. I'm missing the toolchain, complete source code, compilation instructions, libraries, hardware architecture,HACK CORRELATION
By Ligius November 08, 2019. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Steps: Identify the control units Buy the remote unit or reverse engineer the control signals Build a firmware for NodeMCU(ESP8266
BLINDS/SHUTTERS AUTOMATION WITH HOME ASSISTANT Blinds/Shutters automation with Home Assistant. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Buy the remote unit or reverse engineer the control signals. Build a firmware for NodeMCU (ESP8266) based on HACK CORRELATION: 2019 It involves no complicated electronics and it might help other people figure out what to look for before buying an appliance. With another layer of failures stacked on top, this unit could have set the house on fire or shocked someone. Fortunately no damages were recorded, but the deep-dive might prove interesting to some people. Read more ».HACK CORRELATION
While it might sound easy, there are many steps involved: get hold of the service tool application, reverse engineer (RE) it, RE the service dongle, RE the machine protocol, write an IrDa implementation for Arduino, write the web app to serve the page - and coffee. Step 1 - .NET reverse engineering Ever since I've discovered JetBrains' DotPeek IKEA SKARSTA SIT/STANDING DESK HACKIKEA SKARSTA HACKIKEA SKARSTA REVIEWIKEA SKARSTA DESK SIT STANDIKEA SKARSTA SIT STAND DESKSKARSTA SIT STAND DESKSKARSTA IKEA ADJUSTABLE TABLE Ikea SKARSTA sit/standing desk hack. By Ligius September 20, 2015. Since I am lately doing contract work mostly from home I need to set up the environment just right. Sitting for 8-10 hours straight at a desk is unhealthy and a lot of my colleagues have motorized desks that go for 1700E (~2000USD) a pop. I just bought an Ikea SKARSTA desk that FIBERHOME AN5506-02-F ROUTER HACK I recently had to work with a home fiber router that was supplied by the ISP, the FiberHome AN5506-02-F. Compared to the previous internet access solution, which was based on a cable modem and required the user to use their own router, the new solution has both advantages anddisadvantages.
A LOOK INSIDE THE SAMSUNG S7 CAMERA IMPLEMENTATION A look inside the Samsung S7 camera implementation. By Ligius August 15, 2017. This post is less of a guide and more of a collection of thoughts. It assumes some Java and camera operation knowledge. My S7 has become my main camera since it handles low-light, uploading, water and time zones very well. It does have a few big weakness though NON-GENUINE BATTERY IN LENOVO X230 At the end of a discharge cycle, the designed capacity is reported as 6900mAh, full charged capacity as 6800mAh, it looks great! But unfortunately, after another recharge, the designed capacity is back to 5700mAh, full capacity to 5400mAh. FLOUREON BYC17.GH3 THERMOSTAT TEARDOWN AND IMPRESSIONFLOUREON CAMERA SYSTEMFLOUREON CAMERA SYSTEM INSTALLATIONFLOUREON DVR MANUALFLOUREON GPS INSTALLING DIRECTIONSFLOUREON H 264 INSTALLFLOUREON SECURITY APP Floureon BYC17.GH3 thermostat teardown and impression. I recently bought a Floureon thermostat for my electrical floor heating . and. took it apart. for your appreciation. Later edit: a lot of the users are complaining about the clock advancing a few minutes per day. You need to decide if you can live with that or ask the seller to providedetails.
TOSHIBA REGZA TL868 FIRMWARE ANALYSIS Toshiba Regza TL868 firmware analysis. By Ligius October 16, 2013. My TV has a quite complex set of features, none of which work particularly well. Except perhaps using it as a PC display. Input latency is quite bad, ranging from over 200ms in normal mode to 100ms in "gaming" mode. The latency can easily be tested by going to thislink and
HACK CORRELATION
By Ligius November 08, 2019. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Steps: Identify the control units Buy the remote unit or reverse engineer the control signals Build a firmware for NodeMCU(ESP8266
BLINDS/SHUTTERS AUTOMATION WITH HOME ASSISTANT Blinds/Shutters automation with Home Assistant. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Buy the remote unit or reverse engineer the control signals. Build a firmware for NodeMCU (ESP8266) based on HACK CORRELATION: 2019 It involves no complicated electronics and it might help other people figure out what to look for before buying an appliance. With another layer of failures stacked on top, this unit could have set the house on fire or shocked someone. Fortunately no damages were recorded, but the deep-dive might prove interesting to some people. Read more ».HACK CORRELATION
While it might sound easy, there are many steps involved: get hold of the service tool application, reverse engineer (RE) it, RE the service dongle, RE the machine protocol, write an IrDa implementation for Arduino, write the web app to serve the page - and coffee. Step 1 - .NET reverse engineering Ever since I've discovered JetBrains' DotPeek IKEA SKARSTA SIT/STANDING DESK HACKIKEA SKARSTA HACKIKEA SKARSTA REVIEWIKEA SKARSTA DESK SIT STANDIKEA SKARSTA SIT STAND DESKSKARSTA SIT STAND DESKSKARSTA IKEA ADJUSTABLE TABLE Ikea SKARSTA sit/standing desk hack. By Ligius September 20, 2015. Since I am lately doing contract work mostly from home I need to set up the environment just right. Sitting for 8-10 hours straight at a desk is unhealthy and a lot of my colleagues have motorized desks that go for 1700E (~2000USD) a pop. I just bought an Ikea SKARSTA desk that FIBERHOME AN5506-02-F ROUTER HACK I recently had to work with a home fiber router that was supplied by the ISP, the FiberHome AN5506-02-F. Compared to the previous internet access solution, which was based on a cable modem and required the user to use their own router, the new solution has both advantages anddisadvantages.
A LOOK INSIDE THE SAMSUNG S7 CAMERA IMPLEMENTATION A look inside the Samsung S7 camera implementation. By Ligius August 15, 2017. This post is less of a guide and more of a collection of thoughts. It assumes some Java and camera operation knowledge. My S7 has become my main camera since it handles low-light, uploading, water and time zones very well. It does have a few big weakness though NON-GENUINE BATTERY IN LENOVO X230 At the end of a discharge cycle, the designed capacity is reported as 6900mAh, full charged capacity as 6800mAh, it looks great! But unfortunately, after another recharge, the designed capacity is back to 5700mAh, full capacity to 5400mAh. FLOUREON BYC17.GH3 THERMOSTAT TEARDOWN AND IMPRESSIONFLOUREON CAMERA SYSTEMFLOUREON CAMERA SYSTEM INSTALLATIONFLOUREON DVR MANUALFLOUREON GPS INSTALLING DIRECTIONSFLOUREON H 264 INSTALLFLOUREON SECURITY APP Floureon BYC17.GH3 thermostat teardown and impression. I recently bought a Floureon thermostat for my electrical floor heating . and. took it apart. for your appreciation. Later edit: a lot of the users are complaining about the clock advancing a few minutes per day. You need to decide if you can live with that or ask the seller to providedetails.
TOSHIBA REGZA TL868 FIRMWARE ANALYSIS Toshiba Regza TL868 firmware analysis. By Ligius October 16, 2013. My TV has a quite complex set of features, none of which work particularly well. Except perhaps using it as a PC display. Input latency is quite bad, ranging from over 200ms in normal mode to 100ms in "gaming" mode. The latency can easily be tested by going to thislink and
HACK CORRELATION: 2019 It involves no complicated electronics and it might help other people figure out what to look for before buying an appliance. With another layer of failures stacked on top, this unit could have set the house on fire or shocked someone. Fortunately no damages were recorded, but the deep-dive might prove interesting to some people. Read more ».I.ONIK CLOUD HUB
i.onik Cloud Hub. Currently (early 2017) selling for 15E, I think I paid 12E including shipping. This post will focus on basic features and some early data. Later posts will go into some reverse-engineering, featuring a great YouTuber, LiveOverFlow. If you DECODING VOYAGER GOLDEN RECORD IMAGES Data preparation. Load the sound file into Audacity, perform a normalization (Effect -> Normalize) to 0dB. Then click the black triangle above the track name and do "Split Stereo to Mono". Select one channel (entire width), File -> Export Selected Audio. I used WAV 16-bit PCM as I couldn't get MP3 to work properly in Java. A LOOK INSIDE THE SAMSUNG S7 CAMERA IMPLEMENTATION A look inside the Samsung S7 camera implementation. By Ligius August 15, 2017. This post is less of a guide and more of a collection of thoughts. It assumes some Java and camera operation knowledge. My S7 has become my main camera since it handles low-light, uploading, water and time zones very well. It does have a few big weakness though CONVERT A 27MHZ RC CAR TO 13.56MHZ greetings. I am looking for having 8 cars for a work of mine. unfortunately unknowingly i bought cheap 8 cars of 27mhz and suffering now. i want every car to be independently operated without interferring with any other. i have some confidence the chinese cheapish car something could be done.INSIDE STUFF
Inside stuff - teardown and repair of a Spy Pen. By Ligius March 30, 2014. This came out of a "box of things" that I regularly purchase on eBay. They consist of new items that are DOA (dead on arrival). It's a "Spy Pen" or "Spy Stick" - a USB stick with a 4GB capacity that also has a camera inside. The second line under the title makes DESIGNING A BETTER DIESEL TUNING BOX Designing a better diesel tuning box - part 3 - simplified design results. By Ligius May 23, 2016. As I wrote in the previous article, the barebones design has been through some basic testing - 500km mixed environment driving - and has been mostly successful so far. I had a suspicion that the output impedance of the circuit must somehow matcha
HACK CORRELATION
Zoom G1 I got this unit essentially for free a few years back after getting rid of my VooDu Valve which was too expensive/overkill. It's a nice little unit great for practicing guitar and has the added bonus of foot switches (the two big knobs at the bottom): This unit has seen better days and it kept switching itself off or resetting once in a while whenever the cables were moved.EZCAST M2 TEARDOWN
EZCast M2 teardown. The microUSB plug on my newly acquired EZCast / Miracast dongle came loose so, obviously, I had to take it appart. The system is based around a single chip: AM8251 - a single-core ARM9 system-on-chip built specifically for this purpose. The big chip on the other side is a Samsung NAND flash chip, probably this one(K9F1G08U0E).
TOSHIBA REGZA TL868 FIRMWARE ANALYSIS Toshiba Regza TL868 firmware analysis. By Ligius October 16, 2013. My TV has a quite complex set of features, none of which work particularly well. Except perhaps using it as a PC display. Input latency is quite bad, ranging from over 200ms in normal mode to 100ms in "gaming" mode. The latency can easily be tested by going to thislink and
HACK CORRELATION
By Ligius November 08, 2019. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Steps: Identify the control units Buy the remote unit or reverse engineer the control signals Build a firmware for NodeMCU(ESP8266
BLINDS/SHUTTERS AUTOMATION WITH HOME ASSISTANT Blinds/Shutters automation with Home Assistant. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Buy the remote unit or reverse engineer the control signals. Build a firmware for NodeMCU (ESP8266) based on HACK CORRELATION: 2019 It involves no complicated electronics and it might help other people figure out what to look for before buying an appliance. With another layer of failures stacked on top, this unit could have set the house on fire or shocked someone. Fortunately no damages were recorded, but the deep-dive might prove interesting to some people. Read more ».HACK CORRELATION
While it might sound easy, there are many steps involved: get hold of the service tool application, reverse engineer (RE) it, RE the service dongle, RE the machine protocol, write an IrDa implementation for Arduino, write the web app to serve the page - and coffee. Step 1 - .NET reverse engineering Ever since I've discovered JetBrains' DotPeek IKEA SKARSTA SIT/STANDING DESK HACKIKEA SKARSTA HACKIKEA SKARSTA REVIEWIKEA SKARSTA DESK SIT STANDIKEA SKARSTA SIT STAND DESKSKARSTA SIT STAND DESKSKARSTA IKEA ADJUSTABLE TABLE Ikea SKARSTA sit/standing desk hack. By Ligius September 20, 2015. Since I am lately doing contract work mostly from home I need to set up the environment just right. Sitting for 8-10 hours straight at a desk is unhealthy and a lot of my colleagues have motorized desks that go for 1700E (~2000USD) a pop. I just bought an Ikea SKARSTA desk that FIBERHOME AN5506-02-F ROUTER HACK I recently had to work with a home fiber router that was supplied by the ISP, the FiberHome AN5506-02-F. Compared to the previous internet access solution, which was based on a cable modem and required the user to use their own router, the new solution has both advantages anddisadvantages.
A LOOK INSIDE THE SAMSUNG S7 CAMERA IMPLEMENTATION A look inside the Samsung S7 camera implementation. By Ligius August 15, 2017. This post is less of a guide and more of a collection of thoughts. It assumes some Java and camera operation knowledge. My S7 has become my main camera since it handles low-light, uploading, water and time zones very well. It does have a few big weakness though NON-GENUINE BATTERY IN LENOVO X230 At the end of a discharge cycle, the designed capacity is reported as 6900mAh, full charged capacity as 6800mAh, it looks great! But unfortunately, after another recharge, the designed capacity is back to 5700mAh, full capacity to 5400mAh. FLOUREON BYC17.GH3 THERMOSTAT TEARDOWN AND IMPRESSIONFLOUREON CAMERA SYSTEMFLOUREON CAMERA SYSTEM INSTALLATIONFLOUREON DVR MANUALFLOUREON GPS INSTALLING DIRECTIONSFLOUREON H 264 INSTALLFLOUREON SECURITY APP Floureon BYC17.GH3 thermostat teardown and impression. I recently bought a Floureon thermostat for my electrical floor heating . and. took it apart. for your appreciation. Later edit: a lot of the users are complaining about the clock advancing a few minutes per day. You need to decide if you can live with that or ask the seller to providedetails.
TOSHIBA REGZA TL868 FIRMWARE ANALYSIS Toshiba Regza TL868 firmware analysis. By Ligius October 16, 2013. My TV has a quite complex set of features, none of which work particularly well. Except perhaps using it as a PC display. Input latency is quite bad, ranging from over 200ms in normal mode to 100ms in "gaming" mode. The latency can easily be tested by going to thislink and
HACK CORRELATION
By Ligius November 08, 2019. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Steps: Identify the control units Buy the remote unit or reverse engineer the control signals Build a firmware for NodeMCU(ESP8266
BLINDS/SHUTTERS AUTOMATION WITH HOME ASSISTANT Blinds/Shutters automation with Home Assistant. My apartment has the shutters/blinds controlled via a trio of wall-mounted button panels. Here's my experience of integrating them into Home Assistant for automation and remote control. Buy the remote unit or reverse engineer the control signals. Build a firmware for NodeMCU (ESP8266) based on HACK CORRELATION: 2019 It involves no complicated electronics and it might help other people figure out what to look for before buying an appliance. With another layer of failures stacked on top, this unit could have set the house on fire or shocked someone. Fortunately no damages were recorded, but the deep-dive might prove interesting to some people. Read more ».HACK CORRELATION
While it might sound easy, there are many steps involved: get hold of the service tool application, reverse engineer (RE) it, RE the service dongle, RE the machine protocol, write an IrDa implementation for Arduino, write the web app to serve the page - and coffee. Step 1 - .NET reverse engineering Ever since I've discovered JetBrains' DotPeek IKEA SKARSTA SIT/STANDING DESK HACKIKEA SKARSTA HACKIKEA SKARSTA REVIEWIKEA SKARSTA DESK SIT STANDIKEA SKARSTA SIT STAND DESKSKARSTA SIT STAND DESKSKARSTA IKEA ADJUSTABLE TABLE Ikea SKARSTA sit/standing desk hack. By Ligius September 20, 2015. Since I am lately doing contract work mostly from home I need to set up the environment just right. Sitting for 8-10 hours straight at a desk is unhealthy and a lot of my colleagues have motorized desks that go for 1700E (~2000USD) a pop. I just bought an Ikea SKARSTA desk that FIBERHOME AN5506-02-F ROUTER HACK I recently had to work with a home fiber router that was supplied by the ISP, the FiberHome AN5506-02-F. Compared to the previous internet access solution, which was based on a cable modem and required the user to use their own router, the new solution has both advantages anddisadvantages.
HACK CORRELATION: 2019 It involves no complicated electronics and it might help other people figure out what to look for before buying an appliance. With another layer of failures stacked on top, this unit could have set the house on fire or shocked someone. Fortunately no damages were recorded, but the deep-dive might prove interesting to some people. Read more ».I.ONIK CLOUD HUB
i.onik Cloud Hub. Currently (early 2017) selling for 15E, I think I paid 12E including shipping. This post will focus on basic features and some early data. Later posts will go into some reverse-engineering, featuring a great YouTuber, LiveOverFlow. If you DECODING VOYAGER GOLDEN RECORD IMAGES Data preparation. Load the sound file into Audacity, perform a normalization (Effect -> Normalize) to 0dB. Then click the black triangle above the track name and do "Split Stereo to Mono". Select one channel (entire width), File -> Export Selected Audio. I used WAV 16-bit PCM as I couldn't get MP3 to work properly in Java. A LOOK INSIDE THE SAMSUNG S7 CAMERA IMPLEMENTATION A look inside the Samsung S7 camera implementation. By Ligius August 15, 2017. This post is less of a guide and more of a collection of thoughts. It assumes some Java and camera operation knowledge. My S7 has become my main camera since it handles low-light, uploading, water and time zones very well. It does have a few big weakness though CONVERT A 27MHZ RC CAR TO 13.56MHZ greetings. I am looking for having 8 cars for a work of mine. unfortunately unknowingly i bought cheap 8 cars of 27mhz and suffering now. i want every car to be independently operated without interferring with any other. i have some confidence the chinese cheapish car something could be done.INSIDE STUFF
Inside stuff - teardown and repair of a Spy Pen. By Ligius March 30, 2014. This came out of a "box of things" that I regularly purchase on eBay. They consist of new items that are DOA (dead on arrival). It's a "Spy Pen" or "Spy Stick" - a USB stick with a 4GB capacity that also has a camera inside. The second line under the title makes DESIGNING A BETTER DIESEL TUNING BOX Designing a better diesel tuning box - part 3 - simplified design results. By Ligius May 23, 2016. As I wrote in the previous article, the barebones design has been through some basic testing - 500km mixed environment driving - and has been mostly successful so far. I had a suspicion that the output impedance of the circuit must somehow matcha
HACK CORRELATION
Zoom G1 I got this unit essentially for free a few years back after getting rid of my VooDu Valve which was too expensive/overkill. It's a nice little unit great for practicing guitar and has the added bonus of foot switches (the two big knobs at the bottom): This unit has seen better days and it kept switching itself off or resetting once in a while whenever the cables were moved.EZCAST M2 TEARDOWN
EZCast M2 teardown. The microUSB plug on my newly acquired EZCast / Miracast dongle came loose so, obviously, I had to take it appart. The system is based around a single chip: AM8251 - a single-core ARM9 system-on-chip built specifically for this purpose. The big chip on the other side is a Samsung NAND flash chip, probably this one(K9F1G08U0E).
TOSHIBA REGZA TL868 FIRMWARE ANALYSIS Toshiba Regza TL868 firmware analysis. By Ligius October 16, 2013. My TV has a quite complex set of features, none of which work particularly well. Except perhaps using it as a PC display. Input latency is quite bad, ranging from over 200ms in normal mode to 100ms in "gaming" mode. The latency can easily be tested by going to thislink and
HACK CORRELATION
Electronics and programming interspersed at various levels ofdifficulty.
SATURDAY, JUNE 9, 2018 QUICK "INSIDE STUFF" - BARDUSCH TEXTILE TOWEL DISPENSER This is an interesting piece of tech that gets a fair amount of usage. I think some everyday industrial objects hide a complex mechanical layer and present it as simplicity. To understand this piece, think of the single-use paper towel dispensers inside public toilets. This has been raised this to the next level, providing a continuous textile towel - which possibly gets afterwards washed and repaired - guessing around 50 meters in length. You pull the towel piece facing you, from the top, it allows about 30cm to be drawn out, after ~10 seconds it draws the slack (30 cm)back into the unit.
This has to be experienced in order to understand the mechanical clockwork hiding inside. There are no electronics involved here. Fortunately, there was a broken unit waiting for repair, complete with refill instructions. The upper roller supplies the towels. The lower roller is the take-up roller. The green cylinder, spring-loaded, flattens up the take-up so that it's as tightly packed as possible. The entier clockwork mechanism hides on the right side, a slightly complex arrangements of wheels and a timing / clock-escapement.Read more »
Posted by Ligius
at 12:53 AM
No comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
SUNDAY, JANUARY 14, 2018 INSIDE STUFF - SIEMENS DRESSMAN SHIRT IRONING ROBOT I recently got access to a broken Siemens Dressman TJ10500. It's a pro-sumer device that helps you straighten shirts without the tedious ironing. It looks like this: The unit was described as "not heating" or "cooling rapidly". The front panel and every other feature seemed to be functioning justfine.
I will describe how to tear down the unit, what can go wrong, what I did to repair mine and how well it works.TEARDOWN
To get inside the unit, there are many screws that need to be undone: around 5 at the back of the unit (except the air filter ones), two below (left side with the unit facing you). Then you need to carefully lift up the plastic trim that surrounds the LCD and controls, all around, you will have two more screws just next to the airbag. Most of the screws are Torx T20, some of them are Phillips (PH2 Ithink).
With those undone, you can remove the left panel, that gets you access to everything inside the unit. The main board and folding switch rest near the front-top side. In this case, the main board was hanging by some threads and the folding switch had an ugly fix. I suspect the unit was moved with the 'mannequin' in the raised position, which places stress on all the components and can bend the very thin metal frame.Read more »
Posted by Ligius
at 2:39 AM
1 comment:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
Labels: repair
, teardown
SUNDAY, NOVEMBER 19, 2017 NON-GENUINE BATTERY IN LENOVO X230 I wanted to refresh the battery in my travel laptop and decided that 70€+ might be a bit too much. So I've settled onto a 20€ battery, +1€ shipping, from Amazon. Here's the affiliate link: http://amzn.to/2AUSIUW - but READ BEFORE you decide to buy it. If you are ordering from outside Germany, returns will be difficult, as LiPo batteries fall under a special shipping clause. Second, the battery is suited for an X220 model, not X230. Third - and most importantly - the battery is a fake, with less than the advertised capacity. If you still decide to continue, then read on. Some nice people have managed to decrypt the EC firmware inside the Lenovo laptops and allow for a way to rewrite it: https://github.com/hamishcoleman/thinkpad-ec You can go through all the trouble of compiling it, but, to save you 5 minutes, here's the ready-built image that I've used myself: http://www74.zippyshare.com/v/DZPv6vPp/file.html The PATCHED.X230.IMGfile needs to be
written to a USB drive (or SD card with reader). If you are using Linux you might be already familiar with dd. Under Windows, you can use Win32DiskImager, the same tool that's used for writing RaspberryPI cards.
To boot it, you need to go into BIOS settings and disable EFI, enable "Legacy boot". Then you can start the flash process. While this has worked for me, I take no responsibility if anything happens to yourlaptop.
If you don't flash the image, the laptop will not charge the battery (as it's designed for X220) and will report "The battery installed is not supported and will not charge" and "Genuine Lenovo Battery Not Attached. The battery installed is not supported by the system andwill not charge".
Anyway, after flashing the EC (embedded controller) firmware the laptop will now recognize the X220 battery and will charge it as well. After inspection with BatteryInfoView the reported capacity is not 6600mAh but ~5700 instead: At the end of a discharge cycle, the designed capacity is reported as 6900mAh, full charged capacity as 6800mAh, it looks great! But unfortunately, after another recharge, the designed capacity is back to 5700mAh, full capacity to 5400mAh. To summarize, with this battery, BOTH THE DESIGNED CAPACITY AND THE CYCLE COUNT ARE FAKED. EDIT: THE ABOVE IS NOT REALLY ACCURATE, ONLY THE WINDOWS LENOVO SOFTWARE CAN SHOW THE CORRECT CYCLE COUNT. HOWEVER THE CAPACITY ISCORRECTLY SHOWN.
I could return the battery, but I guess a doubling of battery life is worth 21 EUR (to me). The previous battery, "44++", had a designed capacity of 5200mAh and reaches only 2800mAh at this time. For reference, I get around 7Wh consumption under Windows 10, "reading mode" and around 5Wh under Ubuntu 17, same conditions. I set a threshold for charging ("Lenovo Power Manager" / "Lenovo Companion") at 90-95%. This drastically increases cell longevity and allows me to achieve a theoretical 9.58h under Windows 10 and 13.42h under Ubuntu. The 9-cell battery is ugly and heavy, but I guess for "vintage" Lenovo users this does not matter too much. Still, a 9h+ battery life is asweet deal.
EDIT 2018: AFTER LENOVO PUSHED A FIRMWARE/BIOS UPDATE, ASSUMING RELATED TO SPECTRE / MELTDOWN, THIS COMPATIBILITY MOD SURVIVED.Posted by Ligius
at 2:24 AM
16 comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
Labels: hack
, lenovo
SUNDAY, NOVEMBER 12, 2017 INSIDE STUFF: BATTERY-POWERED GLUE GUN I use a glue gun from time to time and was getting annoyed with the cable, finding a free power socket, was always in the way, ... So I bought a cheap battery-powered glue gun . It takes 7mm sticks instead of my old one - which takes 11mm ones. It also takes a little less space and has a better stand. The old one is rated at 15W while the yellow toy has 8W written on its label. No surprise in finding a standard 18650 cell in there. The glue stick feeds through a rubber o-ring. The only electronic intelligence can be found in the board at the bottom of the unit. The bottom of the board features a standard (90 degree) micro-USB socket and three LEDs. The LED diffuser is pictured bottom-left, while the hand-soldered "ON" switch is center. The bottom of the board has a TP4056 battery charger IC.
It can supply up to 1A of charging current (and it does) and is produced by the NanJing Top Power Corp. While it looks like the same part number and provides similar functionality it is completely different than the LTC4056.
The Linear part datasheet contains an application note where the same chip is used for charging NiMH and NiCd batteries. This hack can also be performed with this chip, if the Vbat pin is set to a voltage between 2.9 and 4.2V. But nobody wants to go back in time... The heating element has a rubber-like surround, probably to keep the stick pushing toward the front. That's all I know. The heating current is drawn directly from the battery, so the gun can theoretically be used while charging. However, theoretically, if the battery voltage drops under 2.8V, the IC will enter trickle-charge mode (for recovery) which will render the gun useless. In this case, you want to make sure that the battery is at least halfway-chargedbefore using it.
I haven't traced the board, but it seems the switch directly connects the heater to the battery, with a blue LED in parallel. This is why, when charging, both the red and green ones will light up. Out of the box, battery life seems decent. The gun stayed on for more than 60 minutes, even without a full charge. Once the battery voltage gets really low, the blue LED will start getting dimmer until it eventually shuts off. The green led will light up when the unit isfully charged.
It doesn't seem like there is any low-voltage protection, so FORGETTING TO TURN OFF THE GUN WILL PROBABLY KILL THE BATTERY. The charger resistor (R4) is marked 1201, that's 1.2kOhms, which means the charge current is set to 1A through the PROG pin. If deeply discharged, the battery will start charging at 100mA, after 2.8V it will switch to 1000mA. Unfortunately I haven't taken the battery out of the plastic wrap to check the markings and I haven't measured the heating element resistance or temperature behavior. Might do that when I will getreally bored.
Measured through a USB power meter, the battery takes 3.5 HOURS AND 2000 MAH FOR A FULL CHARGE. Some of that energy will go into heating the charger IC (0.5~1W in constant-current mode) so the battery is likely around 1800mAh. HEATING TIME, with a fully-charged battery, is around 5 minutes, comparable with my old 220V unit. In use, the gun works just fine, when left unused it drips only slightly. More than adequate for light uses, probably inadequate for large quantities in a short time. But that's the usual tradeoff withany 7mm glue gun.
The kickstand is a joy and the gun has a nice design detail: protrusions next to the glue stick, on which, those with large hands, can rest their thumb. Anyway, if you want to purchase one through an affiliate-link, here it is: http://amzn.to/2jlg7LV. It's currently priced at 18.99€.Posted by Ligius
at 8:23 PM
No comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
Labels: teardown
CTC / MIGHTYBOARD WIRELESS CONVERSION ATTEMPT This is not a "howto" as I couldn't get it to work. But if you want to know why, read on. I've been using MatterControl instead of MakerBot for my CTC Bizer (Dual) for a while know and have been really satisfied with it. However, the best results (and control) I got with a direct USBconnection.
Having a 2m-long USB cable dangling is not my style so I've searchedfor a solution.
TCP-SERIAL BRIDGE
There are several options here, but I've settled on ESP8266 (NodeMCU) and one of these projects: https://github.com/jeelabs/esp-link https://github.com/beckdac/ESP8266-transparent-bridge https://github.com/luc-github/ESP3D So basically the ESP8266 acts as a server which then forwards everything to and from the hardware serial connection. The first two projects work (probably) fine, but MatterControl has currently (Nov 2017) an issue with virtual serial ports. I've tried both com0com and VSPE. It runs fine for a few commands (2-5) and thenit fails.
ESP3D does not support s3g/x3g printers.OCTOPI
OctoPI bundles everything in a neat package. Just stick a Raspberry PI, maybe with a webcam, and upload files directly to it. It takes care of slicing, monitoring, control, ... However, it's excruciatingly slow (on rPI B+ and B2), printer profile is not correct (even when manually input), the slicer (Slic3r) outputs wrong commands. For example, the wrong extruder heater turns on. If you cancel a print, you have to restart OctoPrint, which takesminutes.
I love tinkering, but this is just too much, I've sunk too many hoursinto it.
RASPBERRY PI BRIDGE
Same as the above TCP bridge, this time the bridge was set with netcat, stty and other magic commands. It did not work, for the samereasons as above.
QUICK CONCLUSION
I want to jump to this and just say not to try it. Unless MatterControl fixes their protocol (seems improbable) just stick a cable inside your computer or export to SD. Upgrading the motherboard seems like a nice proposition, but the thermal sensors need to be exchanged as well, no easy task. I'd say you are better off keeping this printer USB-bound and hunting for a cheap G-code one to convert to wireless. At this point (Nov 2017) the 3D printers have gone down quite a lot in price, can be found for 100$ sometimes.Posted by Ligius
at 2:36 AM
No comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
Labels: 3d printing
, ctc
FLOUREON BYC17.GH3 THERMOSTAT TEARDOWN AND IMPRESSION I recently bought a Floureon thermostat for my electrical floor heating . and. took it apart. for yourappreciation.
LATER EDIT: a lot of the users are complaining about the clock advancing a few minutes per day. You need to decide if you can live with that or ask the seller to provide details. I couldn't test this, as my unit runs from an intermittent supply. Edit 2: see a hand-drawn schematic at the end to help you with wiring. The thermostat can switch both heating and cooling loads, but the product page does not list any instructions. Fortunately, I have a cell photo of those:OUTSIDE
In the box, the thermostat comes with the leaflet above, the unit, two drywall(?) screws and anexternal sensor.
The pinout is listed on the back and this is where you should payattention:
Read more »
Posted by Ligius
at 2:02 AM
67 comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
Labels: teardown
SUNDAY, OCTOBER 29, 2017 CTC / MIGHTYBOARD SERIAL WIFI CONVERSION FAIL This is just a quick post while I'm working on something bigger. I've tried to get a NodeMCU module to interface to the serial port on my CTC Dual/Bizer printer, which uses a Rev G(?) Mightboard motherboard. Unfortunately, the main serial port is not exposed, justUART1.
The easiest way I've found to get to the TX/RX lines was to piggyback on the resistors just before the ATMega8U chip: The 8U is used as a serial to USB converter. 5V and ground can be picked up from the exposed UART header, picturedbottom middle:
I tried to use the ESP3D firmware but it only works with boards that support G-Code, not X3G. So I abandoned the project due to lack of time. The pictures above are from a few weeks ago but just yesterday I managed to put a hole in my 8U chip, no idea how that happened: So now I was forced to use my makeshift serial connection. I tried both possible solutions: https://github.com/beckdac/ESP8266-transparent-bridge https://github.com/jeelabs/esp-link Unfortunately neither of them worked, the data gets corrupted after a few commands sent to the printer and the printer does not respond to serial input anymore. HOWEVER, using a standard CH430 USB converter does the job, with thejumper set to 5V.
I could probably get the ESP8266 working, but need to check whether it needs some voltage converter (UART on ESP8266 is 3.3V, on Mightyboard it's 5V) or some resistors. In case you decide to try it yourself, to set up a transparent serial-TCP bridge on Windows, I've used com0com with the followingbatch file:
> com2tcp.exe --baud 115200 --ignore-dsr --telnet \\.\CNCB0 > 192.168.178.72 23pause Not sure if the ignore-dsr option is needed or if it does more harm than good, haven't experimented too much.Posted by Ligius
at 12:37 PM
No comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
Labels: 3d printing
, ctc
WEDNESDAY, OCTOBER 11, 2017 VOYAGER GOLDEN RECORD IMAGES - PROCESSING CONSIDERATIONS As you may have seen in my previous post, decoding the images on the "Golden Record" is not very difficult. The problems arise in timing and amplitude issues. I've talked about timing in my previous post: there "sample rate" varies throughout the record (slowly increasing speed) and it also "flutters" throughout a frame. The amplitude issues are caused by feeding digital signal into an unconditioned/untuned analog system (probably a recording needle). Let's analyze the circle image: I will use the scanline represented by the red dot as illustration for how a uniform background (constant color) shouldlook.
The blue trace is the actual waveform. My red line underlines the non-linearity of the recording. The yellow line signifies my expected value. So we have an inverse exponential gain that needs to be applied with respect to time, as well as a linear gain. The could be mixed into a single formula. For reference, the actual image on the recordshould be this one:
Remember that the signals are inverted, so white would actually be a very low signal, close to the minimum. Hence my interpretation on where the yellow line should sit. Back to the first image, analyzing the scanline next to the bluecircle:
Highlighted in red are the level differences: after meeting a peak, the signal recovers to a lower level than the background one. Lower level = lighter pixels. The opposite happens after a white portion (low signal level), exemplified in the following image: The portion below ("after", in time) the white text is darkened. Picking out a random scanline from the waveform: It's pretty hard to determine what difference is caused by the non-linear time-dependent gain distortion and what is caused by thepeak/dip recovery.
Another non-linear distortion, perhaps related to all of the above, can be seen in the lead-out (postamble) of the frame: After a wide peak (odd lines), the dip is more pronounced - longer recovery time with overshoot. After a narrow peak (even lines) the signal is more linear and with little overshoot. The analog recording system can be characterized using the data and a "reverse" system can be designed, which corrects for at least someerrors.
I can only speculate what the causes for those errors are: output vs input impedance (capacitance), needle bouncing, slow and non-linear amplifiers (remember this was the mid-70s). Whatever the cause should be, I have confidence that the engineers at that time did their best to create a signal as clean as possible. We also have to take into account that the digitization process might not have been perfect, itnever is.
That's as far as I will go with this today. As a "cookbook", in order to decode better images one needs to: * apply a multiplier to the grayscale signal, like: signal *= a^time + time/b - where a is between 0.5 and 0.999 and b < 0 * apply some sort of reverse impulse recovery: design a FIR filter that based on the slope of a positive/negative impulse it applies a proportional feedback. That is, a high-slope positive signal should provide positive feedback * take into consideration whether decoding an odd or even scanline Unfortunately the extent of my digital signal processing skills stops well ahead of a proper implementation. On an unrelated note, it would be interesting to find out if the encoded images carry some metadata: whether they are part of a color image, which channel, whether they are in portrait or landscape orientation, if they have an ID.Posted by Ligius
at 11:20 PM
No comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
Labels: voyager
DECODING VOYAGER GOLDEN RECORD IMAGES - IN JAVA My inspiration started when I first saw the associated video for this article: https://boingboing.net/2017/09/05/how-to-decode-the-images-on-th.html Without studying much further, I decided to download the sound files and try my hand at decoding the images - more as a programmingexercise.
I haven't studied the original article too much as I didn't want any spoilers. After struggling a bit with the data, I found that the article could not help anyway with the problems I was having. So there's the "cheater" disclaimer. Watch the end of this post for updates.DATA PREPARATION
Load the sound file into Audacity, perform a normalization (Effect ->Normalize) to 0dB.
Then click the black triangle above the track name and do "SplitStereo to Mono".
Select one channel (entire width), File -> Export Selected Audio. I used WAV 16-bit PCM as I couldn't get MP3 to work properly in Java. That's how the waveform should look. Get familiar with navigating around it (Ctrl+Wheel to zoom) and measuring milliseconds or sample duration. The switch can be done by clicking the small dropdowns where the selection start/end/length is listed. I will be using "Track 1" throughout this article (left channel) only, but the other channel can be analyzed in an identical way. I will use samples, milliseconds and seconds interchangeably. Since the data is sampled at 48000Hz: 0.001s = 1.0 ms = 48 samples = 1000Hz.COLD ANALYSIS
The sound file start off with a 33.63 seconds of silence, followed by what seems to be a square wave gone through a low-pass-filter. This lasts another 33s. Each square wave measures 399-400 samples in width, so the audible sound would be ~120Hz This is followed by 4.7 seconds of an almost pure square wave, with a width of 40 samples, so a frequency of 1920Hz The above data is a preamble for the whole disc (platter?), as we shall see. It allows the "aliens" to tune in on our frequencies and perhaps test the stability of their "vinyl player". THE FIRST FRAME OF DATA I - doesn't seem like something significant, it's just a burst of 40 samples followed by a repetition of a 400 sample signal. What's interesting is that the peaks at those 400 sample intervals vary in width: ~19 samples for each even peak, ~6 samples for each odd peak. This will be a recurring theme. II - a train of squarewaves, each 25 samples wide. They seem to be grouped into 16 "bits", with the last bit being higher in amplitude. In total there seem to be about 21x16 bits, but it's hard to recover more information from the audio sample I have access to. I will refer to this as the frame preamble. III - frame data, will detail later IV - frame postamble V - start of next frame The frame data is split into lines, I call them "scanlines", each 399-400 samples wide, so AROUND 8.315ms. Each scanline represents analog video intensity, from the lowest point (trough) up to the highest point (peak) into the waveform. Analyzing the peaks we can see that they follow the same pattern: each odd line has a 6-sample-wide trailing peak, each even line has a19-sample-wide one.
While it's easy to determine where each frame starts and ends using our eyes, getting a computer to do that for us is a bit more difficult. Intuitively, the frame should start at the lowest value. However, this gets a bit complicated with images that have a highcontrast:
The number of scanlines seems to be pretty constant, around 500 for each frame, however the postamble (IV-V above) varies quite a bit. It MIGHT CONTAIN SOME EXTRA INFORMATION. It follows the same layout and spacing as the scanline and is ~665 lines in some frames and even 807lines in others
(7:30.370-7:37.095).Read more »
Posted by Ligius
at 2:47 AM
3 comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
Labels: voyager
FRIDAY, OCTOBER 6, 2017 ZOOM 9002 HARDCORE REPAIR - BASKET CASE Many years ago (circa 2004) I bought a used Zoom 9002. This worked fine for a while until the output became weaker and weaker. At some point it stopped amplifying completely. I looked online, there was at least one blog post mentioning that some electrolytic caps and the ICL7660 need to be replaced. I did that, nothing improved. I think the display also started failing. "Smart" as I was at the time, I decided that perhaps the board needed some reflowing, so I stuck it in an oven for a few minutes. Packed it good. Fast forward 10 years later:INITIAL CONDITION
This was literally a "basket case" - all the parts were in a basket, with no ideea what goes where.Read more »
Posted by Ligius
at 2:45 PM
5 comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
Labels: repair
THURSDAY, SEPTEMBER 21, 2017 BLACKVIEW A7 QUICK REVIEW This a departure from my normal topics as there seems to be little information online about the phone. Paid ~32€ (38 USD) for a shipped unit, so try to keep the price in mind. A unit with similar features would cost today at least 55€.IN THE BOX
Phone, TPU shell, charger, cable, small leaflet. No earphones, no extra screen protectors. Compared to a Motorola Razr XT910, it looks like a monster.PERFORMANCE
Read more »
Posted by Ligius
at 9:49 PM
No comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
TUESDAY, AUGUST 15, 2017 A LOOK INSIDE THE SAMSUNG S7 CAMERA IMPLEMENTATION This post is less of a guide and more of a collection of thoughts. It assumes some Java and camera operation knowledge. My S7 has become my main camera since it handles low-light, uploading, water and time zones very well. It does have a few big weakness though, oversharpening being one of them and over-confidence the other. By over-confidence I mean it will gladly lower the shutter speed to 1/4s, thinking OIS will take care of the shake. It can't. The Samsung camera app on Android Nougat has shed a lot of features in exchange of user-friendliness. Gone are the sharpness controls, OIS cannot be disabled, RAW mode is available only in the "Pro" camera mode. Quite a lot of artificial limitations which third-party apps don't seem to bring back.START
To analyze the application we need to take a look at some binaries: SamsungCamera6.apk, semcamera.jar and seccamera.jar. There are some other binaries but they are written in native C (libcamera_client.so) or even for FPGA (e.g. fimc_is_fw2_2l1.bin). For taking a look inside the jars I'm using dex-tools 2.1, jd-gui 1.4.0 and Eclipse. The classes.dex file is extracted from each app, sent to dex2jar, imported into jd-gui and saved as a zip collection of .java files, then imported into an Eclipse project. There's probably a better workflow for this. From those various jar files a structure emerges: SemCamera is the bridge between the native camera binary and Android/Java. FaceAreaManager seems to take care of face detection, HRMSensorFusion enables use of the HR sensor to take selfies. The camera modes are defined inside the application, even though they need to be downloaded in order to be used: Interestingly enough, there are a few camera modes which do not have an equivalent app in the Samsung App Store: Antifog, BurstPanorama, Night / NightScene, ProductSearch, ProLite, RichTone, TagShot. Antifog might be targeted towards the Asian market, as a mode that reduces smog smear. Night might be a sub-mode for the Auto. ProLite might be a Pro implementation for phones with less features (Samsung A7). RichTone might be a sub-mode for Auto+HDR. I find it both CURIOUS AND DISTURBING that features are being hidden from the user at the cost of a "purchase". Not sure if the idea was to monetize camera modes or to simplify camera usage. A simple checkbox list would've sufficed.Read more »
Posted by Ligius
at 2:32 AM
6 comments:
Email This
BlogThis!
Share
to Twitter
Share
to Facebook
Share
to Pinterest
Older Posts
Home
Subscribe to: Posts (Atom)BLOG ARCHIVE
* ▼ 2018 (2)
* ▼ June (1)
* Quick "inside stuff" - Bardusch textile towel disp... * ► January (1)* ► 2017 (20)
* ► November (4) * ► October (4)* ► September
(1)
* ► August (3)
* ► July (2)
* ► May (1)
* ► February (3) * ► January (2)* ► 2016 (20)
* ► October (1)* ► August (2)
* ► July (2)
* ► May (3)
* ► April (3)
* ► February (5) * ► January (4)* ► 2015 (25)
* ► November (1) * ► October (6)* ► September
(1)
* ► June (9)
* ► March (3)
* ► February (1) * ► January (4)* ► 2014 (15)
* ► December (3) * ► November (2)* ► May (2)
* ► April (1)
* ► March (3)
* ► January (4)* ► 2013 (27)
* ► December (3) * ► November (1) * ► October (2)* ► September
(2)
* ► August (4)
* ► July (15)
* ► 2012 (3)
* ► June (3)
POPULAR POSTS
*
Ikea SKARSTA sit/standing desk hack Since I am lately doing contract work mostly from home I need to set up the environment just right. Sitting for 8-10 hours straight at ades...
*
FiberHome AN5506-02-F router hack I recently had to work with a home fiber router that was supplied by the ISP, the FiberHome AN5506-02-F. Compared to the previousinterne...
*
Floureon BYC17.GH3 thermostat teardown and impression I recently bought a Floureon thermostat for my electrical floor heating . and. took it apart. for your appreciation. Later edit: alot of...
*
Zoom G1 guitar effects pedal repair Zoom G1 I got this unit essentially for free a few years back after getting rid of my VooDu Valve which was too expensive/overkill. ...*
Non-genuine battery in Lenovo X230 I wanted to refresh the battery in my travel laptop and decided that 70€+ might be a bit too much. So I've settled onto a 20€ battery,+...
*
Racechip tuning box - part 2 - reverse engineering See my first article for a short review and teardown: http://hackcorrelation.blogspot.de/2016/02/inside-stuff-racechip-car-tuning-thingie.h...*
Toshiba Regza TL868 firmware analysis My TV has a quite complex set of features, none of which work particularly well. Except perhaps using it as a PC display. Inputlatenc...
*
Inside stuff - teardown and repair of a Spy Pen This came out of a "box of things" that I regularly purchase on eBay. They consist of new items that are DOA (dead on arrival). ...*
Beginner 3D printing - CTC dual I've bought a CTC dual from ebay.de a couple of weeks ago, for significantly less than 400E, shipped from Germany. Here are myexperienc...
*
EZCast M2 teardown
The microUSB plug on my newly acquired EZCast / Miracast dongle came loose so, obviously, I had to take it appart. The system is basedaro...
ABOUT ME
* Ligius
View my complete profile Simple theme. Powered by Blogger .Details
Copyright © 2024 ArchiveBay.com. All rights reserved. Terms of Use | Privacy Policy | DMCA | 2021 | Feedback | Advertising | RSS 2.0