fwrret

fwrret

@firmware.blog

24 | 🇮🇨 | 🏳️‍🌈 | breaking things(reverse engineering) is fun more technical posts: https://firmware.blog/

83 followers160 following136 posts

You wouldn't download a printer. EPSON XP-442 custom SoC(realoid) emulated in QEMU running it's proprietary RTOS.

This was a really old project that I did (and abandoned) 3 years ago. Some day I should write about it. There are a lot of interesting things.

Lo que nunca me imagine es que llegaríamos al punto en donde SOLO te permitan imágenes de genIA. No BBVA, quiero poner una imagen chorra o una comm, no un AI slop generico.

fwrret reposted

Just filed an EU DMA complaint against Alphabet for gatekeeping against secure Android derivatives like @grapheneos.org via Play Integrity. TL;DR: not certified ≠ not secure. Google lacks a FRAND certification process for non-OEMs that comply with objective security requirements.

fwrret reposted

You heard right! We're working on getting .furry to be the next big TLD! We're backed by the non-profit @pawprintprototyping.org and will be by furries, for furries. ⚠️ But we need your help! ⚠️ Support us today to help make this a reality and to get a .furry domain of your own www.dotfurry.org

dotfurry.org.furry — A Top-Level Domain For Our Community$3,690 raised of $90,000 goal 4.1% funded Campaign ends August 1, 2026 at 00:00 -0700 59 days 08 hours 59 minutes 10 seconds Campaign closed

fwrret reposted

En su camino par eliminar la democracia, Trump quiere enturbiar el voto de noviembre para ganar, o rechazar los resultados si pierde. Un nuevo paso: una ley que dificulta el voto a las mujeres ya que su nombre de casadas no coincide con nombre nativo (!!!)

elpais.comLa Cámara de Representantes de EE UU aprueba una ley electoral que exige prueba de ciudadanía para votarLa ‘SAVE America Act’ además dificulta el voto a millones de mujeres que adoptaron el apellido de su esposo porque no coincide con el de su certificado de nacimiento

fwrret reposted

Tanta gente me ha preguntado por qué no me gustan los sistemas de verificación de indentidad/edad online que le he dedicado la POSTECNOCRACIA de hoy en RNE. En 15 minutos o menos. www.rtve.es/play/audios/...

rtve.esNo es un día cualquiera - Postecnocracia con Marta PeiranoEmisión del programa No es un día cualquiera titulado Postecnocracia con Marta Peirano: control digital. Todos los contenidos de RNE los tienes aquí, en RTVE...
Marta Peirano@minipetite.bsky.social

He visto las 5 medidas de Pedro Sánchez en Dubai. Estos son mis cinco centavos: 1. Prohibir las RS a menores me parece una solución pobre (prohibir siempre lo es), pero la herramienta de verificación de edad es una solución peligrosa e imperfecta. elpais.com/sociedad/202...

Random infodump: The BYD Dolphing surf (seagull) uses Zongmu parking & 360° Surround-view and SenseAuto Cabin driver monitoring system. The main tablet (which is Android based) run both of these systems. It is also running the cluster, which it is a native qt5 executable.

Now I have to rewatch it

Lorenzo Franceschi-Bicchierai@lorenzofb.bsky.social

NEW: The classic anime "Ghost in the Shell" turned 30 years old this week. Despite coming out at the dawn of the internet, it was incredibly prescient in terms of imaginig a future where governments use hackers for espionage, people use malware to spy on their loved ones, and much much more.

Just discovered that this trend is called "fast tech", like fast fashion but for consumers electronics

fwrret@firmware.blog

The phone industry release cycle is crazy. Like every year only the SoCs producer releases like 100 new, I cannot imagine how many phones models are released. with so many ones, that are also more complex and integrate and no technical info avalible, reusing or recycling them seems impossible.

The phone industry release cycle is crazy. Like every year only the SoCs producer releases like 100 new, I cannot imagine how many phones models are released. with so many ones, that are also more complex and integrate and no technical info avalible, reusing or recycling them seems impossible.

I'm the only one worried about the ewaste we are gonna produce? I dunno I wish there were a lot less models and they all had an amazing community behind doing crazy hacks and mods, and when they are EOL, they or their parts can be reused.

I know things like postmaeketos exists but the amount of effort to just support a little portion of devices produced that in 4 years nobody gonna remember seems frustrating at least.

fwrret reposted

i'm a tech admin of a minecraft smp which has a gimmick of starting on a mushroom biome and having no access to different biomes (apart from lush caves) given how most of the otherwise common resources are scarce now, almost all of the players have became the most greedy capitalists ever

Today, just by causality, I found that the devices reports the manufacturer to be "Shenzhen Lunci Technology Co., Ltd", that is the same as the microcontroller. And while it is obvious, I never looked at the manufacturer webpage (www.lenzetech.com), they clearly sold their MCU for this application.

lenzetech.com蓝牙6.1芯片支持Find My Network及其解决方案 | 伦茨科技伦茨科技,专业的蓝牙芯片及方案供应商,成熟的蓝牙方案开发团队,领先的蓝牙技术支持最全面的蓝牙方案和蓝牙APP开发,提供完整的软硬件设计。
fwrret@firmware.blog

Here are some internal pics of the PCB of the cheap AliExpress Apple tag "Sualio tag" (FindMy-001)

fwrret reposted

the youtube vs yt-dlp arms race is hilarious, because of how lopsided it is. on the one hand, you've got a company with the GDP of Denmark who has about a manhattan-project's worth of developers they can assign to this. but on the other end, you've got every bored or annoyed javascript hacker.

fwrret reposted

Por enésima vez la UE está resucitando #ChatControl ⛔️ el proyecto europeo para monitorizar masivamente conversaciones privadas. Y vuelve con una versión más radical. 📅 Este 12 de septiembre los países deben fijar su postura. Es un día crucial 📢 1/3👇

xnet-x.netStop #ChatControl, la monitorización automatizada de conversacionesUna regulación que olvida el abuso sexual a menores y es solo excusa para desmantelar un Internet democrático. Stop #ChatControl CSAR.

fwrret reposted

✨ Luck Plushie Giveaway! ✨ To enter: 🔁 RT this post 👤 Follow me 💬 Comment below (Will ship only if we hit 100 pledges!) ⭐️ Bonus: Commission raffle for everyone who supports the plushie pledge 💖 More platforms = more chances! 🔥 ⏳ Ends this Friday!

Con la tontería llevo más de una semana archivando wplace de Tenerife y partes de canarias (También lo estoy expandiendo a otras partes de la península!). Que bonito que se ve! Cuando tenga tiempo, pongo los datos accesibles pa todos y un visualizador.

Look I don't dislike LLMs but there is a little reflection I always do. Watching Fieren there was a conversation I really like where they said humans develop language to communicate, demons develop language to hunt For what purpose we are developing language on LLM? To please use? To convince us?

My motorbike (Zontes GK350) has an instrument panel that can do a bunch of things, including screen mirroring through an app (Carbit ride). How did they make it?

View full thread

Why we should use tasks if we have a counters and switch cases? Really, see this shit. The different cases do different subtasks. What I have identified so far is one for the TPMS stuff, another for updating all the global attrs, one for the LCD and another for comm with the other MCU.

My motorbike (Zontes GK350) has an instrument panel that can do a bunch of things, including screen mirroring through an app (Carbit ride). How did they make it?

View full thread

Why we should use tasks if we have a counters and switch cases? Really, see this shit. The different cases do different subtasks. What I have identified so far is one for the TPMS stuff, another for updating all the global attrs, one for the LCD and another for comm with the other MCU.

This is what I have done so far, I don't think there is nothing more interesting here as the rest of the magic happens on the other MCU and analyzing how all the data is passed is very painful. I'm very tempted to you know, replace some boot and assets images, but this thing cost +400€.

My motorbike (Zontes GK350) has an instrument panel that can do a bunch of things, including screen mirroring through an app (Carbit ride). How did they make it?

View full thread

The software stack is an FreeRTOS plus + awtk (GUI) + FSC-Blueware (BT) + EC-SDK (screen mirror). The "architecture" is basically the awtk GUI obtains the all the information that it needs from a list of "global attributes" or communicating directly to the BT and EC sdk.

There are a lot of task running normally, most of them are from the different sdks and libs. Where all "the magic" happens is in the Mainboard task.

My motorbike (Zontes GK350) has an instrument panel that can do a bunch of things, including screen mirroring through an app (Carbit ride). How did they make it?

View full thread

These last two components communicates to the MCU via SOFTWARE SPI. Crazy. Maybe they cannot use the main spi bus of the MCU because it was already used for the MMC?.

And of course for the BT and WIFI it uses the Feasycomm FSC-BW121 (it uses the RTL8821CS). Fun fact, I was unable to find the fcc id and the MAC address of both BTs (le and normal) and Wi-Fi are fake/not registered! (34:FA:4A C0:FA:4A 34:C6:4A).

My motorbike (Zontes GK350) has an instrument panel that can do a bunch of things, including screen mirroring through an app (Carbit ride). How did they make it?

View full thread

So the main MCU is the Amt630hV100. There is little to nothing online about it. I found something on CSDN, but I was not able to download it. Besides the LCD, it seems that to this mcu is connected an MMC mem for the fw, an CMT2300A (for TPMS?) and another mcu that communicates to the rest of the 🏍️

My motorbike (Zontes GK350) has an instrument panel that can do a bunch of things, including screen mirroring through an app (Carbit ride). How did they make it?

The ref of this dashboard is 1164300-002000. It seems to be also used on the 350 T, R and X. The firmware is called AJ_B3-03, and internally it seems they called it "ZT350_IP_5". We are going to analyze the OTA firmware image I managed to obtain. How I obtained it is a story for another 🧵.

The image is 8mb long and contains the application code, the boot animation (BANI) and the "ROMA" which are the resources files. There is not a fancy FS like littleFS, there is basically a superblock the contains the file path, address and length. Boot anim are concatenated jpg images.