[How-To] Hacking C series TV. Models with Internet@TV only

[juusso]

You are lucky. Why you don`t create /mtd_rwarea/start.sh and tell us results?

[timoo]

result = it runs
idea: we can kill init script ,remount filesystem to our own,run own init scripts and run own exeDSP (run.sh is started before exeDSP)

[juusso]

That`a great! It means, we need to roll-back to earlier version that contains /start.sh!

[bastler0815]

What is the reason for the start.sh ?! or for what could it be useful ? *probably stupid question" ^^

[timoo]

for running our programs withou inserting usb disks , start.sh is calling on every boot, but usb_hotplug.sh only on usb plug (imho) another idea we can run latest firmware from chrooted path or mount bind . from mtd_rwcommon (i prefer this place because there is much moore place then mtd_rwarea and mtd_rware could by accidenly erased anytime)

[bastler0815]

Ah Ok ... that code could be executed from there was clear ... I meant what kind of stuff

But running actual firmware would be a nice option ... cause if they change something in fact of the Hack to close the posiibilitys for the hack it?s a sure way to run ... but before this could be done the AES and XOR keys were needed to decrypt the firmware so that the updated MTD?s could get used, or am I wrong now ?!

Does anyone know if the "leak" has been closed with the latest updates from Samsung ?? thjey have version T-VALDEUC_3000.6.exe for download at the moment....

Regards

Bastler

[Denny]

Bastler , 100% right, they just need to change API call and they can close it by new SW.

so it is most importiant to get decrypted image to check did they change something before updating to new sw release.

Denny

[bastler0815]

So the safest way is not to update at the moment !

Or just to a software version which was before the Hack was public so that they weren?t able to react (if they probably have it done yet).

Another qeustion is ... as I wrote ... I build a serial cable from VGA to 9Pin PC-connector with a TTL converter inbetween (Max232). My question now is if the TTL level converter is absolutely needed ... cause in this or at the UE40C6700 thread was posted that cable without TTL level converter was used and worked (if I didn?t understand this wrong). Would be good to know to probably get the Wiki up2date in fact of the Ex-Link cable for the C-Series

Does anyone arround here have acces to the Service Manual or schematics of the UEXX6XXX Series, if yes would be interesting to have some info?s if there also is a ZigBee chip inclueded at the mainboard ... as in fact his would be nice to know in fact of playing arround with 3D stuff (if we somtimes know how to enable it or other stuff like PVR which normally is only for higher Models/Series).

Regards, Bastler

[bastler0815]

Hi,

where did you find the "key" ?!

It seems like something is missing ...

When you look at the old key it is longer than the one you found:

Code: Select all

Old B-Series Key:
A435HX:d3e90afc-0f09-4054-9bac-350cc8dfc901-7cee72ea-15ae-45ce-b0f5-611c4f8d4a71

ed29e9fe-4225-418c-88ee-2f1bc01e6a8e-2ad7f3ce-23c0-4cdb-afff-d1481531f1bb

Seems like something is missing at the beginning .

Regards

[timoo]

imho > its only otn key ,each otn upgrade have its own key :/