BillW
Joined: 14 Apr 2005
Posts: 2507
Location: in a tightly curled dimension
|
 Posted:
Tue Oct 11, 2005 3:56 pm |
  |
I thought I'd start a thread to try to capture everybody's contributions to the hack. I apologize in advance for anybody I've missed.
Only "first discoveries/successes" please, but feel free to reply with even extremely minor contributions, tangental discoveries, and first-use scenarios like "first rocket cam", "first 3d footage", "first naked gf footage", "first naked 3d gf footage", etc. (if you have the posts to back it up) .
When replying it would help if you could roughly approximate where in the list your addition should be.
-CVS releases the Saturn test-market cam (model 100), and finally the wide-release Saturn cam (model 200). [Pure Digital and CVS]
-First hardware disassembly pictures of the model 200 cam. [mconsidine]
-Morcheeba is sent a CVS camcorder [BillW]
-Command set scanned, with some interesting hits. [mconsidine]
-USB commands refined and explored [daBass, mconsidine, and brite_eye]
-Chip is pulled and soldered into reader. Flash contents are dumped. First movies are retrieved from flash! [morcheeba]
-Firmware analysis tools developed, followed by much analysis[morcheeba]
-USB command names/indexes documented [morcheeba and daBass]
-First success in unlocking camcorder [morcheeba]
-"last movie download" usb command decyphered, first movies transferred over USB. [daBass]
-Ops and SaturnDownload are released concurrently. [Ops - BillW] [SaturnDownload - Corscaria]
-ISDV camcorder software is made to work with the Saturn, and first 640x480 video is captured, proving that the camcorder can capture higher resolutions. [brite_eye]
-Full schematics for the camcorder are created and released. These play a key part in many hardware hack activities. [MUOTUC]
-"Movie Index" USB commands decyphered. SaturnDownload now can download all movies at once. (Ops to follow shortly after study of SaturnDownload source.) [Corscaria]
-"Format Storage" USB command decyphered. Ops can now erase the movies after downloading them. (SaturnDownload to follow shortly after study of Ops source.) [BillW]
-"Change Partition" USB command decyphered. [daBass]
-"Get/Set time" USB commands decyphered. [zapped]
-PureRead download program is created. [morcheeba]
-"Ops for Linux" created. [ygfperson]
-Ops and libusb are packaged with an easy "quickinstaller" [carpespasm]
-"Arbitrary File Upload/Download" USB commands are decyphered. Ops can provide access to any file on the camcorder, sometimes to destructive ends. [BillW]
-20 minute recording limit broken with hack. [zapped]
-Limited "Flash Upload/Download" USB commands are decyphered and added to Ops. Partitions can now be downloaded, edited with WinImage/loopback-mount, and restored to the Saturn. [BillW]
-USP.BIN decyphered, allowing changed to resolution, framerate, timelimit, cam ID, ready-to-recycle. [Corscaria, timelimits by CVSfan]
-First program to easily change USP.BIN is released. [GWRedDragon]
-FSP.BIN, the prototype for USP.BIN is discovered. [morcheeba]
-First Saturn macro-mod videos made [brite_eye]
-Hardware attack Version 1 developed, a risky technique for unlocking camcorders without the security hole. [BillW and brite_eye]
-ZbmConvert is created. [boodle]
-"extended pallette" for ZBM files is documented. [boodle]
-"Monitor" USB commands are confirmed and added to Ops. [BillW]
-"Mass Storage mode" monitor command hack. [CVSfan]
-"Flash Upload/Download" USB commands are hacked to allow complete access to flash. [CVSfan and BillW]
-Movie re-encoding for playback on camcorder perfected. [Maxwelll Smart, BillW, hDy, ahecht, startreker, michael1t, docwebhead]
-Hardware attack Version 2 developed. Appears to be safer than version 1![Gyro]
-Hardware attack Version 3 developed. Now the camera doesn't need to be fully disassembled, and all you need is a single strand of wire! [Captain Obvious]
-Newer cams get hardened 33.04 firmware and are shipped without reset keys, making the cams no longer vulnerable to Hardware attacks 1-3. Challenges can't even be retrieved! [Pure Digital]
-Flash is desoldered from a 33.04 cam and soldered into a pv2. Firmware is dumped, and new challenge mechanism is analyzed. Ops is updated to now work with the new challenge mechanism. [BillW]
-A pv2 cam is reprogrammed to use a user selected challenge when talking to a processing station, and stores the response told to it. The first 33.04 is unlocked via Ops with the retrieved response. [brite_eye]
-A new processing station hack is invented. The camcorder is coaxed to stay on despite unplugging from the processing station by applying battery power to the cam's USB circuit. As a result the cam retains it's unlocked status. [brite_eye, first verified by CamCam]
-"avidownload" camcorder download console app created [SaturnNiGHTS]
-USP.BIN modification to display battery/power information discovered [SaturnNiGHTS]
-09/08 challenges introduced [Pure Digital]
-Permanent mass storage hack created for 53.xx firmwares [brite_eye]
|
Last edited by BillW on Sat Feb 18, 2006 2:37 am; edited 15 times in total |
|
