Re: Firmware Downgrade D-Series (SamyGO Proof of Concept, BD
Posted: Fri Jun 22, 2012 7:28 am
BD-D5100 update:
The BD-D5100 requires a certain domain to resolve BEFORE the upgrade server is contacted. Here is the log of HTTP requests made using standard DNS:
[site blocked: http://www.samsungotn.net] from source 192.168.1.122, Thursday, June 21,2012 22:10:56
[site allowed: m.icq.com] from source 192.168.1.122, Thursday, June 21,2012 22:10:44
[site allowed: http://www.icq.com] from source 192.168.1.122, Thursday, June 21,2012 22:10:43
Note that the ICQ resolve is required before Samsung is contacted.
If ICQ is blocked, or down, the BD-D5100 tries another domain:
[site allowed: http://www.internic.net] from source 192.168.1.122, Thursday, June 21,2012 22:14:55
And if that is blocked:
[site allowed: www.yahoo.com] from source 192.168.1.122, Thursday, June 21,2012 22:24:28
(it also tries these in random order)
I believe
The BD-D5100 REQUIRES DOMAIN NAME RESOLUTION
before it attempts to contact http://www.samsungotn.net.
Therefore, arris69 (if possible) should modify his apache (using a simple .htaccess file, or firewall chain rule) config to resolve all DNS requests to his "www.samsungotn.net" server, OR, modify all requests BUT "www.samsungotn.net" to an empty HTML file/directory.
I am going to assume that more BD units in the future will work like this, resolving domains before allowing upgrades. Luckily, it's a simple fix.
Thanks again arris69!
The BD-D5100 requires a certain domain to resolve BEFORE the upgrade server is contacted. Here is the log of HTTP requests made using standard DNS:
[site blocked: http://www.samsungotn.net] from source 192.168.1.122, Thursday, June 21,2012 22:10:56
[site allowed: m.icq.com] from source 192.168.1.122, Thursday, June 21,2012 22:10:44
[site allowed: http://www.icq.com] from source 192.168.1.122, Thursday, June 21,2012 22:10:43
Note that the ICQ resolve is required before Samsung is contacted.
If ICQ is blocked, or down, the BD-D5100 tries another domain:
[site allowed: http://www.internic.net] from source 192.168.1.122, Thursday, June 21,2012 22:14:55
And if that is blocked:
[site allowed: www.yahoo.com] from source 192.168.1.122, Thursday, June 21,2012 22:24:28
(it also tries these in random order)
I believe
The BD-D5100 REQUIRES DOMAIN NAME RESOLUTION
before it attempts to contact http://www.samsungotn.net.
Therefore, arris69 (if possible) should modify his apache (using a simple .htaccess file, or firewall chain rule) config to resolve all DNS requests to his "www.samsungotn.net" server, OR, modify all requests BUT "www.samsungotn.net" to an empty HTML file/directory.
I am going to assume that more BD units in the future will work like this, resolving domains before allowing upgrades. Luckily, it's a simple fix.
Thanks again arris69!