H series region change

Here for general support for H series TVs, request and problem solve area.

sashita79
SamyGO Project Donor
Posts: 11
Joined: Sat Jan 25, 2014 4:15 pm

Re: H series region change

Post by sashita79 »

So for me game was over when I got TV, because I got it with this FW
mad_ady
SamyGO Project Donor
Posts: 268
Joined: Sun May 03, 2015 10:42 am

Re: H series region change

Post by mad_ady »

Regarding the auto-update process - surely it has to use the network to check for new firmwares. This means it can be intercepted at DNS level (and write a custom rule in dnsmasq (I assume most routers have the option of custom firmwares and give you the ability to change DNS responses), or at firewall level (drop all traffic to destination X).

The question would be - what's the destination that needs to be blocked? One way to do it would be to run packet capture on the router and catch the traffic that checks for a new firmware (I'm guessing if it finds it it also installs it, so that would be bad...)

I'm a noob with regard to this firmware, but, if you guys can get the latest firmware from samsung, can't you unpack it and get a list of strings that might point to an update URL (I'm guessing it's done over HTTP/HTTPS)?

If this information is located, then we can write some tutorials for users to block updates from DNS/Firewall instead.

What do you think?
H6400, firmware 2602.2 downgraded to 2130
sectroyer
Official SamyGO Developer
Posts: 6305
Joined: Wed May 04, 2011 5:10 pm

Re: H series region change

Post by sectroyer »

sashita79 wrote:So for me game was over when I got TV, because I got it with this FW
Disable auto-update in normal menu. Who knows. Maybe now samsung respect users choice...
I do NOT support "latest fw" at ALL. If you have one you should block updates on router and wait for it to STOP being "latest":)
If you want me to help you please paste FULL log(s) to "spoiler"/"code" bbcodes or provide link(s) to pasted file(s) on https://pastebin.com Otherwise "NO HELP"!!!
If you want root DISABLE internet access to your device!!!!
DO NOT EVER INSTALL FIRMWARE UPGRADE !!!!
sashita79
SamyGO Project Donor
Posts: 11
Joined: Sat Jan 25, 2014 4:15 pm

Re: H series region change

Post by sashita79 »

mad_ady wrote:Regarding the auto-update process - surely it has to use the network to check for new firmwares. This means it can be intercepted at DNS level (and write a custom rule in dnsmasq (I assume most routers have the option of custom firmwares and give you the ability to change DNS responses), or at firewall level (drop all traffic to destination X).

The question would be - what's the destination that needs to be blocked? One way to do it would be to run packet capture on the router and catch the traffic that checks for a new firmware (I'm guessing if it finds it it also installs it, so that would be bad...)

I'm a noob with regard to this firmware, but, if you guys can get the latest firmware from samsung, can't you unpack it and get a list of strings that might point to an update URL (I'm guessing it's done over HTTP/HTTPS)?

If this information is located, then we can write some tutorials for users to block updates from DNS/Firewall instead.

What do you think?
I was thinking in the same way, but unfortunately if TV did not reach the desire site, the smart functions are disabled.
I was discussing with friend of mine and according to him, TV is using ssl and trying to get a special certificate, so reaching the goal will be not so easy ;)
Till now I did not have any time, but I going to sniff the traffic from TV.
But since two days my TV is not updating and still remaining with "old" 1033.1 with announce that there is new 1034 FW
sectroyer wrote: Disable auto-update in normal menu. Who knows. Maybe now samsung respect users choice...
Hopefully yes :)
mad_ady
SamyGO Project Donor
Posts: 268
Joined: Sun May 03, 2015 10:42 am

Re: H series region change

Post by mad_ady »

Indeed, it will be trickier to spoof the result if the TV checks for a trusted certificate. I assume it would be difficult to add your own certificate as a trusted CA in your TV...

One more thing worth trying - maybe it checks for new firmwares only on startup and if you start with network unplugged it won't find a new firmware, but ***maybe*** when you plug networking back in, it skips checking for new firmwares... Just a hope...
H6400, firmware 2602.2 downgraded to 2130
sashita79
SamyGO Project Donor
Posts: 11
Joined: Sat Jan 25, 2014 4:15 pm

Re: H series region change

Post by sashita79 »

mad_ady wrote:... maybe it checks for new firmwares only on startup and if you start with network unplugged it won't find a new firmware, but ***maybe*** when you plug networking back in, it skips checking for new firmwares... Just a hope...
No, I already check this, as soon as internet (no network) is ON, TV is checking for FW ;)
mad_ady
SamyGO Project Donor
Posts: 268
Joined: Sun May 03, 2015 10:42 am

Re: H series region change

Post by mad_ady »

Bummer...
H6400, firmware 2602.2 downgraded to 2130
mssbid
Posts: 3
Joined: Mon Dec 29, 2014 8:43 pm

Re: H series region change

Post by mssbid »

mad_ady wrote:Regarding the auto-update process - surely it has to use the network to check for new firmwares. This means it can be intercepted at DNS level (and write a custom rule in dnsmasq (I assume most routers have the option of custom firmwares and give you the ability to change DNS responses), or at firewall level (drop all traffic to destination X).
I've already seen various requests going out to (probably hardcoded)
IPs without any corresponding DNS traffic before (and this was captured
over weeks so probably no TV internal cache has hit).

Build a real router using a real OS, run an intercepting squid and you
can filter quite comfortably using standard ACLs and bump/splice for
SSL. Speaking about SSL: I've found some sites to get their certs
checked (mostly the SmartHub shit which I don't use so no harm
is done). Fw updates themselves don't use SSL - last time I checked
it they wanted to do things like:

http://az43064.vo.msecnd.net/firmware/t ... Item_8.dat

But of course YOU CAN'T RELY on that it stays like this forever so
you're only on the safe side if you DENY EVERYTHING AS DEFAULT,
and only enable dests you can trust. As I said before this includes
disabling SSL or at least bumping it.
vera
Posts: 3
Joined: Tue May 26, 2015 12:22 pm

Re: H series region change

Post by vera »

Hi , I have a UE60H7000 , but I didn't enter the service menu ?!?! How can I enter ?
sectroyer
Official SamyGO Developer
Posts: 6305
Joined: Wed May 04, 2011 5:10 pm

Re: H series region change

Post by sectroyer »

vera wrote:Hi , I have a UE60H7000 , but I didn't enter the service menu ?!?! How can I enter ?
Yes. Disable OTN Support ASAP :)
I do NOT support "latest fw" at ALL. If you have one you should block updates on router and wait for it to STOP being "latest":)
If you want me to help you please paste FULL log(s) to "spoiler"/"code" bbcodes or provide link(s) to pasted file(s) on https://pastebin.com Otherwise "NO HELP"!!!
If you want root DISABLE internet access to your device!!!!
DO NOT EVER INSTALL FIRMWARE UPGRADE !!!!

Post Reply

Return to “[H] Support”