Sony NEX/Axx Firmware hacking

I want to run kernel under qemu. Since the kernel sources already published it can be done by anybody. So run the kernel under emulator can help.
About the firmware. I need to find a way to modify it and pass all checksums test and internal integrity. I'd like to change a version first. No any code modification just a simple repacking with small text changes.
 
I'm not sure what state machine are you meaning. If you talking about whole firmware working model the answer is no.
About the specification. The only thing that i know is a kernel sources. Some of published sources not used in final firmware.
 
someone1.00 said:
I’ve finished with my investigations. At this point I have two ways. Modify the firmware for myself or share the algo and the key. In last case I want to try to decrypt a77 firmware. The algo I know is not compatible with it, nex5n, a57 and 65. I need to be donated to be able to buy nex 3 a77 and nex 5n. If any community will be able to support me I will share algo and key.It can decrypt any nex 3, nex 5 firmmwares, VG10, a33 and a55. I can create a windows executable that will take an updater files or an updater itself and extract firmware from it. I can prove my knowledge in any way. I can suggest to open a small middle part of a firmware (one means any) not less when 1K and not too big. But it’s only a suggestion.
Here is a short video https://rapidshare.com/files/2428685917/Video5.avi
fw.tar is a part of the firmware I’ve talked earlier. The end of archive warning is a 7z warning. The tar is pretty solid for me but probably not finished with proper empty spaces. I found this right now and don’t want to lose a time to investigate. I've browse some files structure (full listing is below) and extracted most interesting images. I’ve used some commercial software to assure it’s not a fake screen. And yes I can create such fake tar but content of the linux images looks pretty fine for me. You can see headers and different notes… I’ve searching for sony word inside it.
Below is a file/directory list from some firmware
usr2
usr2/data
usr2/data/sound
usr2/data/BEEPDATA.BIN
usr2/data/scenarios
usr2/data/scenarios/app_cwb_snr.esf
usr2/data/scenarios/app_rec_snr.esf
usr2/data/scenarios/app_uud_snr.esf
usr2/data/scenarios/app_eps_rsf.rsf
usr2/data/scenarios/app_repair_snr.esf
usr2/data/scenarios/app_palette_snr.esf
usr2/data/scenarios/app_movie_rec_snr.esf
usr2/data/scenarios/app_stg_snr.esf
usr2/data/scenarios/app_hdmi_snr.esf
usr2/data/scenarios/app_play_snr.esf
usr2/data/scenarios/app_dlg_snr.esf
usr2/data/scenarios/app_rhg_snr.esf
usr2/data/scenarios/app_dds_snr.esf
usr2/data/scenarios/app_usb_snr.esf
usr2/data/scenarios/app_top_snr.esf
usr2/data/scenarios/app_menu_snr.esf
usr2/boot
usr2/boot/initrd.img
usr2/boot/vmlinux.bin
usr2/boot/rootfs.img
usr2/ex_conf_223.h
avsys
avsys/av.bin
avsys/sa_srec.bin
avsys/ancy_ipl.bin
avsys/ancy.bin
boot
boot/GPS
boot/ACCY
boot/factory
boot/factory/Asys.bin
boot/factory/initreg.bin
boot/factory/Hsys.bin
boot/factory/ex_cnf.bin
boot/cas
boot/cas/CA_FROM.BIN
boot/cas/CA_FRAM.BIN
boot/cas/BRD.bin
boot/backup
usr
usr/log
usr/bin
usr/bin/mpr_monio
usr/bin/app
usr/bin/app/main.sh
usr/bin/app/deviceInfo.xml
usr/bin/app/main
usr/bin/app/haif.ko
usr/bin/app/serr.ko
usr/bin/app/main3.sh
usr/bin/debugio
usr/bin/mpr_viewLog
usr/bin/memtool
usr/bin/sen
usr/bin/usr_up
usr/bin/testcmd
usr/bin/debugio_core
usr/bin/ud_datcnv
usr/bin/av_conio
usr/bin/up
usr/lib
usr/lib/libadj30.so
usr/lib/libpro00.so
usr/lib/libadj33.so
usr/lib/libwtle.so
usr/lib/libSnr.so
usr/lib/libosal.so
usr/lib/libcmdcmm.so
usr/lib/libadj36.so
usr/lib/libBackupTable.so
usr/lib/libusbcmd.so
usr/lib/libul_debug.so
usr/lib/libadj32.so
usr/lib/libpro01.so
usr/lib/libadj31.so
usr/lib/libadj37.so
usr/lib/libul_xml.so
usr/lib/libpro11.so
usr/lib/libBackupCore.so
usr/lib/libusb.so
usr/lib/libdebugprintf.so
usr/lib/libgps.so
usr/lib/libadj34.so
usr/lib/libAppBackupApi.so
usr/lib/libupdatercommon.so
usr/lib/libsencore.so
usr/lib/libitype.so
usr/lib/libupdaterapi.so
usr/lib/libAppSenserApi.so
Click to expand...

since you didn't mention NEX-C3, so you are not gonna do a hack for C3?
I have a C3 and I really hope there will be AVCHD 1080 video recording on my C3..
Thanks
 
hi everybody
I've got a question for you
I just want to know if it is possible enable a contrast detection autofocus (as in the nex camera ) in my slt a33 camera
if it is possible it would be great...


​
 
marietto said:
hi everybody
I've got a question for you
I just want to know if it is possible enable a contrast detection autofocus (as in the nex camera ) in my slt a33 camera
if it is possible it would be great...
​
Click to expand...

Cannot see any reasons to disable more accurate phase autofocus.
 
Come on people help him lol
I'm a retard and don't know much about programming for me it's science fiction but will donate money for sure
 
You know what would be a great idea??
Getting this forum to the public eye.. and getting money while you are at it!
How?? simple!! KICKSTARTER!!
I've been investigating about what camera to buy next, and Sony is becoming a very clear alternative...
I think that if you offer a custom firmware with similar feautures offered by Magic Lantern.. JACKPOT..
Vectorscope.. Histogram... HDR video.. Bitrate control...

Here's my proposed Kickstarted dynamic...
You must offer "rewards" so people get what they pay for... so here are my suggestions:

- General donator: $1-$5
Just random people that would be donating for helping to the deveolpment of this project.
Would be given thanks and credits in the site.

- Camera owner : $25
This reward would give early access to betas and first releases and news, before anyone else.
This reward would be regarless of the camera model.

- Specific camera rewards: $10
This reward would be for people to "bid" to speed up the develompent of their particular camera model.
At the end of the funding, the camera model with the highest amount of donations will be the model with the highest priority in development.

The total amount of money to be raiesed by the kickstarter project should be AT LEAST the price of each camera planned for development, TIMES 2.
Why? because you might need to buy another camera if you break the first one accidentally, if you dont break it, well.. more money available to cover your personal expenses.... but it would be harder to ask for more money to buy a new one once the funding is over...
So, here's the math,
NEX-7 x2 = 2400
NEX-5N x2 = 1400
NEX-F3 x2 = 1200
SLT-A77 x2 = 2700
SLT-A65 x2 = 1700
SLT-A57 x2 = 1300
SLT-A37 x2 = 1200
SLT-A35 x2 = 1000

That adds up to ~ 13.000
Add to that reverse engeneering equipment, jtag's and who knows what else... lets say an exta 3000
Thats 16.000..
Add to that 4.000 for expenses.. thats 20.000
Substract the 5% kickstarter fee.. thats 1.000 less..
So you would have 19.000 to pull that stunt!
Enough?

You would only need 800 backers to get to the goal..
Thats 1/30th of the people that has viewed this thread..

Doable? HELL YES!
 
The kickstarter Idea isn't a bad one, as long as you could avoid heat from Sony ect. I would imagine you have to set up an account with some bank account attached for a deposit of the money, that's a perfect trail to you. Additionally idk if there's anything withhin kickstarter guidlines that would not allow this. Worth looking into though because it sure would help and it's a win win for everyone but Sony.
 
Well after reading kickstarer guidelines here's what I've come up with.
1. Hardware investigation is by no means forbidden in the kickstarter guidelines.
http://www.kickstarter.com/help/guidelines?ref=footer

2. Sony's source coude is based on Linux, under GNU licenses.

What woudl have to be done is as follows:

The project would have to be named after the persue of research.

You are funding the research iniciative in rever engeneering of the sony camera's firmware...
That by no means is illegal.
It has to be VERY CLEAR that the result of this investigation is to be FREE FOR EVERYONE, and under GNU licenses.

Rewards will remain as I posted with slight aditions, given that every backer MUST receive something in return,
and that something CANT BE a the firmware,because that would count as if it was being sold.. thus, forbidden.
They are backing an INVESTIGATION, and the result of this investigation will be to KNOW what can be done to improve the camera's functionality.
The firmware is a BYPRODUCT of that investigation, that CANT be listed on the kickstarter iniciative...
The final product should be something like a PDF with the findings of the investigation.. Just to add a "physical" dimension to the "product".


The Rewards:
- General Supporter $1 or More:
Good will backers will receive credit as sponsors of the investigation.

- Owner Supporter $20 or More:
The above + Will receive access to the investigation progress, a subscription to the weekly newsfeed with update of its progress.

- Specific camera backers $30 or More:
The above + the posibility to be part of camera specific testing for the research process.
(also, it will count as a vote to determine the priority that each specific camera will bear in the research.)


Like that legal issues can be avoided, because reverse engeneering without a commercial purpose is completely legal. Take the Jailbreak for example..
the DMCA declared ir lega!

Anyway, let me know what you think.
 
Good researching! It's just a matter of whether or not he's willing to put himself out there then, for the sake of research. I really don't doubt that it would work and generate revenue. I think if raising money is the next course of action, and the chances of getting a custom firmware are improved a good bit, it should be the right course of action.
 
The idea sounds good for firmware developer who want to be famous like Geohot. I dont.
I can imagine somebody else implementing this idea. But the trust to this person should be really huge.
 
Last edited:
I have an NEX-VG10 and would gladly donate money if my camera could be hacked to produce greater than 25mbs image, allow manual audio control (or disable AGC) and enable 24p and 60p (since the VG10 is 30p in a 60i wrapper).

Dave
 
Don't you think there can (and will) be legal ramifications if a link is eventually posted that allows a download of a hacked firmware? I think even if the steps on how to do this were outlined in a 'write-up', it has to be illegal. Geohot's firmware hack was different, I believe, in that it allowed alternative uses of the Playstation 3 that were not intended by Sony.

Dave
 
Geohot opened secret algo and key for executables signing. That was a front dor for game piracy. And that was really bad for manufacturer.
What i hope to do is to modify an original firmware. I will not share any copyrighted content. Only my personal stuffs that will allow end user to patch an original firmware.
The manufacturer can open a case and prove that customized firmware slowed the selling of some new cameras. I dont know if it possible or not but dont like to check this personally.
 
someone1.00 said:
The idea sounds good for firmware developer who want to be famous like Geohot. I dont.
I can imagine somebody else implementing this idea. But the trust to this person should be really huge.
Click to expand...

Well, you dont necesarily need to become "famous"...
Geohot for example became pretty notorious because lets admit it.. the PS3 seemed UNHACKABLE... and it was in the sight of every
hacker at the time...
ALSO, it was a very much wanted hack to gain access to pirated games...

On the other hand.. sony has posted the sources of their cameras.. that speaks of their perspective on that aspect..

Look at the Magic Lantern iniciative... Trammel Hudson has managed to stay under the radar...

I think that if you dont want to be famous you dont have to.. keep it to yourself.. you dont even have to show your face! the video can be just a voice over some slides..

And once again... this cant be illegal in ANY way... remember, people would be funding a RESEARCH, and that under any means is a crime, specially when 1. You paid and own the item being investigated. and 2. the software that runs that item is under GNU licenses.

What has to be clear a ALL TIMES, is that when the resulting firmware is out, is out under NO CHARGE, and under GNU licenses... and if possible, NEVER to thank the people that made it possible.. to avoid making a connection between the funds and the development of the firmware.... because you only "charged" for the research...

Once again... Kickstarter is a very straightforward tool.. and there isnt much at stake there... If sony has something to say about that, they will before the funding is over... before the money is given to you.. HECK I would even sent then an email thanking them for releasing the sorces and point them to the Kickstarter page.. just to see what happens!

But its worth a try... and we all know this could throttle the develpment A LOT!

Give it some thought!
 
You must log in or register to reply here.
Back
Top