Firmware Hacking On Behringer Midi Devices

A new project called the Unofficial Behringer Control Development Kit lets you tweak or completely replace the firmware on the popular devices. The proof of concept demo shows a custom message scrolling on the 4-character 7-segment display but you can do with the device is only limited by how well you can code for the ARM processor inside. Development takes place using the GNU ARM toolchain but don’t worry, you don’t have to crack the case open to program the chip. The BCR2000 and BCF2000 models supported by the project both run bootloaders that allow firmware updates via midi commands. There’s even a recovery mode if you screw something up. Just make sure you have a direct midi connection for recovery, the USB port won’t work for that purpose. If you need a shove to get you started there’s a nice little example file in the repository.

[Thanks Bjonnh]

Minimalist AVR Programmer Is Just Fab!

Whether you’re burning a new bootloader to an Arduino board, or doing away with a bootloader to flash Atmel chips directly, an in-system programmer (ISP) is an indispensable tool for working with AVR microcontrollers. If cost has held you back, it’s no longer an excuse: FabISP is a barebones USB-based AVR programmer that can be pieced together for about ten bucks.

FabISP was created by [David Mellis] as a product of MIT’s Fab Lab program, which provides schools with access to design and manufacturing tools based around a core set of fabrication capabilities, so labs around the world can share results. But the FabISP design is simple enough that you don’t need a whole fab lab. It’s a small, single-sided board with no drilling required; the parts are all surface-mounted, but not so fine-pitched as to require reflow soldering. Easy!

There’s still the bootstrap problem, of course: you need an AVR programmer to get the firmware onto the FabISP. This would be an excellent group project for a hackerspace, club or school: if one person can provide the initial programmer to flash several boards, each member could etch and assemble their own, have it programmed, then take these out into the world to help create more. We must repeat!

[Thanks Juan]

Zune Gets Hacked, OpenZDK

Here is one that really got some of us at the HAD offices excited (yes, we own Zunes). The introduction of the Open Zune Development Kit. Sure, there was XNA, and we even toyed around with it. But anyone will quickly realize just how limited XNA is, especially with older hardware.

OpenZDK is in its infancy, with only one application thus far (don’t worry, you can still use XNA apps too). But we wanted to give it a shout out and let the hacker community make this potential into a reality.

[Thanks Galen]

Add USB Playback To Some European LG Televisions

Here’s a pretty simple hack to enable playback from a USB drive on LG televisions. It only works on European hardware, the LH, LF, and some LU models. The hack consists of downgrading the firmware to version 3.15, then navigating through some service menus.

It’s not quite as hardcore as the Samsung firmware hacking, but the added functionality is really great.

[Thanks Jeton]

Update: Samsung TV Firmware Hacking

[Erdem] sent us an update on his work with the SamyGO project. You may remember this Samsung TV firmware hacking initiative from our post back in October. Since then many more TV models have been added to the compatible list. They have also worked out a way to defeat the AES encryption and RSA signature checking on the CI+ devices. Want to lend a hand? Take a look at the compatibility table on the main page and see if you have one of the TV models they need testers for. Otherwise, read the wiki, hit the downloads page, and unlock the hidden abilities of your boob tube.

Fix 0LBA And BSY HDD Errors

One of the worst moments almost every hacker has experienced is a hard drive inexplicably dieing. And of course, its at the most inopportune time and you’ve had no chance to backup!

Recently there has been an influx of Seagate hard drives (specifically the 2700.11s) kicking the bucket with firmware errors 0LBA and BSY. The good news is [Gradius2] has made guides to unbrick your drive without having to match serials.

The procedure is lengthy, complicated, can easily become expensive, and there is the possibility of losing your data so it’s not recommended if you’re only getting those pictures of Mr.Fluffykins back. In such a case, Thermite might be a bit better solution.

[Thanks Calvin]

Samsung TV Firmware Hacking

tv-firmware-hacking

[Erdem] is leading up the efforts to reverse engineer Samsung TV firmware with a project called SamyGo. Official Samsung firmware uses the Linux kernel, making it a familiar system to work with for many developers. So far they’ve implemented NFS and SAMBA for sharing files over the network, improved playback from USB devices, and unlocked the ability to use non-Samsung WiFi dongles.

In order to make changes to the system, you need to enable a telnet connection on the device. The SamyGo team accomplished this by changing an official version of the firmware in a hex editor to start the telnet daemon at boot time. This altered firmware is then flashed using Samsung’s built in upgrade system. Once telnet is enabled, non-official firmware can be manually flashed.

We’d love to see this project expand to other TV Brands in the future. In fact, we were looking for something like this back in June when we realized that our Sony Bravia runs a Linux kernel and can be updated via USB drive.  Be careful if you want to try this out. We can only imagine the fallout after telling your significant other that you bricked a high-priced LCD.