Lime SDR (and Pluto, Too) Sends TV

January 19, 2019 by 21 Comments

If you have experienced software defined radio (SDR) using the ubiquitous RTL SDR dongles, you are missing out on half of it. While those SDRs are inexpensive, they only receive. The next step is to transmit. [Corrosive] shows how he uses DATV Express along with a Lime SDR or a Pluto (the evaluation device from Analog Devices) to transmit video. He shows how to set it all up in the context of ham radio. An earlier video shows how to receive the signal using an SDR and some Windows software. The receiver will work with an RTL SDR or a HackRF board, too. You can see both videos, below.

The DATV Express software has plenty of options and since SDR if frequency agile, you ought to be able to use this on any frequency (within the SDR range) that you are allowed to use. At the end, he mentions that to really put these on the air you will want a filter and amplifier since the output is a bit raw and low powered.

Continue reading “Lime SDR (and Pluto, Too) Sends TV” →

CES 1996 Las Vegas Convention Center

Retrotechtacular: HGTV, The Place For Everything CES 1996

January 8, 2019 by 8 Comments

It’s January, and that means it’s time once again for the Consumer Electronics Show. CES is the place where electronic manufacturers from all across the globe to show off their future products and make promises they probably can’t keep. Of course there is no better indicator of a company’s future than looking at the past, and thanks to [Home & Garden Television] we have a comprehensive look at what CES was twenty three years ago. The cable channel aired a special, “Plugged In with Wil Shriner”, covering CES 1996 and it is certainly illuminating to see in hindsight. Plus it even comes complete with “cable money” tier mid 90s motion graphics.

Over on YouTube, user [videoholic] has uploaded the HGTV CES ’96 special into five separate segments (links provided below). Some of the highlights include:

Part 1 – Home Video

  • Canon introduces IR eye tracking (akin to the New 3DS) in their camcorder line
  • Dual recording VCR from Sharp on one VHS tape provided you can fix the tracking with the remote.
  • The term “I triple E 1394” may just have been said for the first (and last) time ever on cable television.

Part 2 – Audio

  • A digital alarm clock from Oregon Scientific (called the Time Machine) that will tell you the weather.
  • Magellan thought, “Who needs a cell phone when you can have a satellite phone for $8000”.
  • Soundtube, the fashionable beer cozy for your gigantic speakers as seen on MTV Beach House.

Part 3 – Games & Multimedia

  • Noise Cancellation Technologies INC wanted to turn your cars headliner into a big ol’ speaker.
  • Cyber Pong promised online multiplayer a full decade before Rockstar’s Table Tennis on Xbox 360.
  • The Simpsons Cartoon Studio helps create fan fiction on multimedia CD-ROM.

Part 4 – Home & Office

  • Compaq’s PC keyboard with an integrated fax machine.
  • Norris Communication’s handheld voice recorder full of flash memory to offload to your PDA.
  • Crestron’s idea of home automation involved a touchscreen to operate a light switch (some things never change).

Part 5 – Digital Video

Welcome To The Slow Death Of Satellite TV In America

December 17, 2018 by 131 Comments

During an earnings call on November 29th, CEO of AT&T Communications John Donovan effectively signed the death warrant for satellite television in the United States. Just three years after spending $67 billion purchasing the nations’s largest satellite TV provider, DirecTV, he made a comment which left little doubt about the telecom giant’s plan for the service’s roughly 20 million subscribers: “We’ve launched our last satellite.”

The news might come as a surprise if you’re a DirecTV customer, but the writing has been on the wall for years. When the deal that brought DirectTV into the AT&T family was inked, they didn’t hide the fact that the actual satellite content delivery infrastructure was the least of their concerns. What they really wanted was the installed userbase of millions of subscribers, as well as the lucrative content deals that DirecTV had already made. The plan was always to ween DirecTV customers off of their satellite dishes, the only question was how long it would take and ultimately what technology they would end up using.

Now that John Donovan has made it clear their fleet of satellites won’t be getting refreshed going forward, the clock has officially started ticking. It won’t happen this year, or even the year after that. But eventually each one of the satellites currently beaming DirecTV’s content down to Earth will cease to function, and with each silent bird, satellite television (at least in the United States) will inch closer to becoming history.

Continue reading “Welcome To The Slow Death Of Satellite TV In America” →

Hacking Your Way To A Custom TV Boot Screen

December 7, 2018 by 45 Comments

More and more companies are offering ways for customers to personalize their products, realizing that the increase in production cost will be more than made up for by the additional sales you’ll net by offering a bespoke product. It’s great for us as consumers, but unfortunately we’ve still got a ways to go before this attitude permeates all corners of the industry.

[Keegan Ryan] recently purchased a TV and wanted to replace its stock boot screen logo with something of his own concoction, but sadly the set offered no official way to make this happen. So naturally he decided to crack the thing open and do it the hard way The resulting write-up is a fascinating step by step account of the trials and tribulations that ultimately got him his coveted custom boot screen, and just might be enough to get you to take a screw driver to your own flat panel at home.

The TV [Keegan] brought was from a brand called SCEPTRE, but as a security researcher for NCC Group he thought it would be a fun spin to change the boot splash to say SPECTRE in honor of the infamous x86 microarchitecture attack. Practically speaking it meant just changing around two letters, but [Keegan] would still need to figure out where the image is stored, how it’s stored, and write a modified version to the TV without letting the magic smoke escape. Luckily the TV wasn’t a “smart” model, so he figured there wouldn’t be much in the way of security to keep him from poking around.

He starts by taking the TV apart and studying the main PCB. After identifying the principle components, he deduces where the device’s firmware must be stored: an 8 MB SPI flash chip from Macronix. He connects a logic analyzer up to the chip, and sure enough sees that the first few kilobytes are being read on startup. Confident in his assessment, he uses his hot air rework station to lift the chip off the board so that he can dive into its contents.

With the help of the trusty Bus Pirate, [Keegan] is able to pull the chip’s contents and verify its integrity by reading a few human-readable strings from it. Using the binwalk tool he’s able to identify a JPEG image within the firmware file, and by feeding its offset to dd, pull it out so he can view it. As hoped, it’s the full screen SCEPTRE logo. A few minutes in GIMP, and he’s ready to merge the modified image with the firmware and write it back to the chip.

He boots the TV back up and finds…nothing changed. A check of the datasheet for the SPI flash chip shows there are some protection bits used to prevent modifying particular regions of the chip. So after some modifications to the Bus Pirate script and another write, he boots the TV and hopes for the best. Finally he sees the object of his affection pop up on the big screen, a subtle change that reminds him every time the TV starts about the power of reverse engineering.

Rooting The Amazon Fire TV Cube With An Arduino

November 7, 2018 by 11 Comments

Amazon might not be happy about it, but at least part of the success of their Fire TV Stick was due to the large hacking and modification scene that cropped up around the Android-powered device. A quick search on YouTube for “Fire Stick Hack” will bring up a seemingly endless array of videos, some with millions of views, which will show viewers how to install unofficial software on the little media dongle. Now it looks like their latest media device, the Fire TV Cube, is starting to attract the same kind of attention.

The team at [Exploitee.rs] has recently taken the wraps off their research which shows the new Fire TV Cube can be rooted with nothing more than an Arduino and an HDMI cable you’re willing to cut apart. Of course, it’s a bit more complicated than just that, but between the video they’ve provided and their WiKi, it looks like all the information is out there for anyone who wants to crack open their own Cube. Just don’t be surprised if it puts you on the Amazon Naughty List.

The process starts by putting the device’s Amlogic S905Z into Device Firmware Upgrade (DFU) mode, which is done by sending the string “boot@USB” to the board over the HDMI port’s I2C interface. That’s where the HDMI cable comes in: you can cut into one and wire it right up to your Arduino and run the sketch [Exploitee.rs] has provided to send the appropriate command. Of course, if you want to get fancy, you could use an HDMI breakout board instead.

With the board in DFU mode in you gain read and write access to the device’s eMMC flash, but that doesn’t exactly get you in because there’s still secure boot to contend with. But as these things tend to go, the team was able to identify a second exploit which could be used in conjunction with DFU mode to trick the device into disabling signature verification. Now with the ability to run unsigned code on the Fire TV Cube, [Exploitee.rs] implemented fastboot to make it easier to flash their custom rooted firmware images to the hardware.

As with the Fire TV Stick before it, make sure you understand the risks involved when you switch off a device’s security features. They’re often there to protect the end user as much as the manufacturer.

Continue reading “Rooting The Amazon Fire TV Cube With An Arduino” →

Circuit Bending A TV For Better Input

October 15, 2018 by 54 Comments

If you haven’t noticed, CRTs are getting hard to find. You can’t get them in Goodwill, because thrift stores don’t take giant tube TVs anymore. You can’t find them on the curb set out for the trash man, because they won’t pick them up. It’s hard to find them on eBay, because no one wants to ship them. That’s a shame, because the best way to enjoy old retrocomputers and game systems is with a CRT with RGB input. If you don’t already have one, the best you can hope for is an old CRT with a composite input.

But there’s a way. [The 8-Bit Guy] just opened up late 90s CRT TV and modded it to accept RGB input. That’s a monitor for your Apple, your Commodore, and a much better display for your Sega Genesis.

There are a few things to know before cracking open an old CRT and messing with the circuits. Every (color) CRT has three electron guns, one each for red, green, and blue. These require high voltage, and in CRTs with RGB inputs you’re looking at a circuit path that takes those inputs, amplifies them, and sends them to the gun. If the TV only has a composite input, there’s a bit of circuitry that takes that composite signal apart and sends it to the guns. In [8-bit guy]’s TV — and just about every CRT TV you would find from the mid to late 90s — there’s a ‘Jungle IC’ that handles this conversion, and most of the time there’s RGB inputs meant for the on-screen display. By simply tapping into those inputs, you can add RGB inputs with fancy-schmancy RCA jacks on the back.

While the actual process of adding RGB inputs to a late 90’s CRT will be slightly different for each individual make and model, the process is pretty much the same. It’s really just a little bit of soldering and then sitting back and playing with old computers that are finally displaying the right colors on a proper screen.

Continue reading “Circuit Bending A TV For Better Input” →

MTPO HDTV on Wall Lag Fix

Mike Tyson’s Punchout Patch Gives HDTV Lag A K.O.

October 12, 2018 by 12 Comments

They just don’t make them like they used to. Digital televisions have rendered so many of the videogames designed in the days where CRTs ruled the earth virtually unplayable due to display lag. Games that were already difficult thanks to tight reaction time windows can become rage inducing experiences when button presses don’t reflect what’s happening onscreen. A game that would fall into the aforementioned category is Mike Tyson’s Punchout for the NES. However, NES homebrew developer [nesdoug] created a patch for the 31 year old classic that seeks to give players playing on modern displays a fighting chance.

MTPO Poster 1980s

The lag fix patch for Mike Tyson’s Punchout seeks to alleviate some of the display lag inherent in digital displays by adjusting the gameplay speed. Some of the early stages aren’t altered very much, but the later fights incur more significant slowdown to compensate for modern display lag. It’s evident that [nesdoug] is a longtime fan of the game as he also uploaded a remix patch that mixes up the stages and color palettes.

The patch itself comes in the form of an IPS file. To apply the lag fix patch you’ll need an IPS patching tool, like Lunar IPS, along with your own personal backup ROM of Mike Tyson’s Punchout. A checksum value is provided on the lag fix patch download site to ensure you have a usable ROM file. Do note that the ROM file is overwritten in the process of applying the patch, so make sure to put the original file in a safe place. After patching is complete the fun can be had using your favorite NES emulator, or using a flashcart if you’re seeking to play on original hardware.

If you’re looking to dump your own NES cartridges without the plug and play convenience of devices like the Retrode, there is a tutorial in the video below the  break:

Continue reading “Mike Tyson’s Punchout Patch Gives HDTV Lag A K.O.” →