Rooting A NeoTV Set Top Box From The Couch

October 25, 2012 by 19 Comments

The NeoTV is a set top box built by Netgear to compete with the likes of Roku. It streams video from the usual Internet sources like Netflix, Hulu Plus, and YouTube. [Craig] recently cracked his unit open, and in the process discovered that the NeoTV can be rooted using nothing but the remote control.

He starts with a hardware overview. The box houses a single-board ARM design with a 128MB of NAND and 256MB of RAM. The serial port is easy to find, but it does not provide a root shell (which often is one of the easiest ways to root a device). He next turns to poking around the unencrypted firmware update to see what he can learn. That’s how he discovered that the SSID value when connecting to WiFi is fed into a system() command. This glaring security hole lets you run just about anything you want on the device by issuing commands as fake SSID names. It’s just a matter of a little Linux know-how and [Craig] now has root access on his device.

Decades Old TV Gets Sleep Function Thanks To 7400 Family Of Chips

October 2, 2012 by 12 Comments

[Viktor] dredged up a hack he pulled off years ago. His grandfather likes to end the day in front of the TV, but he falls asleep soon after sitting down. Rather than tick away the electricity meter all night, [Viktor] built an automatic shutoff which is akin to a modern TV’s sleep feature.

At the time microcontrollers were not as easy to source as they are now. So [Viktor] used a circuit based on the 7400 family of logic chips. It uses a multivibrator to feed some binary counter chips. These are used to divide the oscillations to establish the desired timing. He tuned the system to be about 15 minutes, but that can be adjusted using a potentiometer built into the multivibrator. When time is about the run out an LED next to the TV comes on. This way if [Viktor’s] grandfather is still awake he can press a button next to his chair to reset the counter. But if he’s already snoozing the counter will eventually switch off the television.

Automatic Speaker Control Via TV

August 15, 2012 by 5 Comments

[Jon] wanted his speakers to come on and off along with his TV. The speaker heats up if left on so he didn’t want to do that. But killing the power also resets the volume level (this is an old set of PC speakers and the remote is wired, not IR) so using one of those switched power strips was out as well. He thought a bit about trying to use the power LED on the TV to build his own circuit when it dawned on him. It’s possible to monitor the USB port on the TV and use it to switch on the speakers.

The circuit above uses a couple of opto-isolators to protect both the television and the speakers. The 5V line from the USB port on the back of the TV is monitored by an XNOR gate (which helps to filter out some of the toggling at power-on). When that gate latches it activates a 555 timer which in turn fires up the speakers. Presumable this happens when power is cut as well, but we’ll let you work through the circuit logic yourself.

MythTV Library On Apple TV Without A Jailbreak

August 2, 2012 by 16 Comments

[Dan] wrote in to share a link to his MythTv to Apple TV setup. He found a way to make the recordings he made on his Linux box available on the 2nd Generation Apple TV. Our first thought is that he would use XBMC on a jailbroken device  but that is not the case. The secret is to roll iTunes into the mix.

Take a look at the diagram above. The system starts with an Arch Linux box that runs MythTV, an open source program which allows you to record from tuner or encoder hardware. But actually watching those recordings on an iOS device is difficult for a couple of reasons. First, Apple likes to keep their devices locked up tight in hopes that you buy your entertainment rather than watching over-the-air records. Second, if you’re recording ATSC channels the files may be 1080i or 1080p, neither of which can be handled by the Apple TV 2. [Dan] gets around this by first using the command line version of Handbrake to transcode the recordings to an h264 format. He then uses iTunes running on an Windows 7 virtual machine (on the Linux box) to host the transcoded files in a library the Apple TV can access.

Digital TV Converter Reverse Engineering

August 1, 2012 by 15 Comments

Back when broadcast television was first switching over from analog to digital most people needed to get a converter box to watch DTV broadcasts. Remember that abomination that was “HD-Ready”? Those TVs could display an HD signal, but didn’t actually have a digital tuner in them. Nowadays all TVs come with one, so [Craig] found his old converter box was just gathering dust. So he cracked it open and reverse engineered how the DTV hardware works.

The hardware includes a Thompson TV tuner, IR receiver for the remote control, and the supporting components for an LGDT1111 SoC. This is an LG chip and after a little searching [Craig] got his hands on a block diagram that gave him a starting place for his exploration. The maker of the converter box was also nice enough to include a pin header for the UART. It’s populated and even has the pins labeled on the silk screen. We wish all hardware producers could be so kind. He proceeds to pull all the information he can through the terminal. This includes a dump of the bootloader, readout of the IR codes, and much more.

Viewing CCTV On Every Street Corner

July 20, 2012 by 27 Comments

2.4 GHz video transmitters are everywhere these days, in many, many products ranging from baby monitors to CCTV setups. Surprisingly, most owners of these video devices don’t realize they’re transmitting an unencrypted video signal, a belief [Benjamin] hopes to rectify.

[Ben]’s project started with him driving around cities recording unencrypted 2.4GHz video feeds. His idea has since expanded to include building metal boxes with an LCD display and attaching them to light poles. Think of it as an education via technology; most people don’t know these devices are receivable by everybody, and showing them it is possible is the first step in learning.

If you’re looking for something a little more creepy than a metal box attached to a lamp-post, [Ben] is also the brainchild behind the Surveillance Video Entertainment Network, an installation (also in van form) that exposes unencrypted 2.4 GHz video transmissions in cities around the world.

You can check out a few intercepted surveillance videos after the break.

Continue reading “Viewing CCTV On Every Street Corner” →

Use Your TV Remote As An HID Mouse

July 19, 2012 by 17 Comments

[Vinod’s] latest project lets him use a TV remote control as a mouse. It may not sound like much, but he did it with a minimum of hardware and packed in the maximum when it comes to features.

He’s using an ATmega8 to read the remote control signals and provide USB connectivity. With the V-USB stack he enumerates the device as an HID mouse. One note of warning, he used the PID/VID pair from the USBasp programmer project. If you use that programmer you’ll need to uninstall the drivers to get this to work (we think this is only necessary on a Windows box).

The cursor can be moved in eight directions using the number pad on the remote. The numeral five falls in the center of the directional buttons so [Vinod] mapped that to the left click, with the zero key serving as right click. He even included the scroll wheel by using the volume buttons. The firmware supports cursor acceleration. If you hold one direction the cursor will move slowly at first,then pick up speed. Fine adjustments can be made by single clicking the button. Check out his demonstration embedded after the break.

Continue reading “Use Your TV Remote As An HID Mouse” →