Messages in hardware
[2017-07-07 16:09:03]
freaky123 :
@freaky123 has joined the channel
[2017-07-07 16:09:03]
freaky123 :
set the channel description: Hardware related stuff
[2017-07-07 16:09:22]
martinbogo :
@martinbogo has joined the channel
[2017-07-07 16:09:25]
martinbogo :
Thank you
[2017-07-07 16:09:32]
freaky123 :
np :slightly_smiling_face:
[2017-07-07 16:09:41]
darksimpson :
@darksimpson has joined the channel
[2017-07-07 16:09:42]
martinbogo :
So, yes .. something interesting already
[2017-07-07 16:09:52]
martinbogo :
The chip is -not- locked, or fused
[2017-07-07 16:09:59]
martinbogo :
That was the first thing I cheked.
[2017-07-07 16:10:01]
martinbogo :
checked
[2017-07-07 16:10:03]
freaky123 :
which chip? the Atmel?
[2017-07-07 16:10:05]
martinbogo :
The ARM
[2017-07-07 16:10:08]
martinbogo :
yes
[2017-07-07 16:10:12]
freaky123 :
woooow cool :smile:
[2017-07-07 16:10:27]
martinbogo :
I can run arbitrary code ( had to, in order to power it up with the analyzer + JTAG in place )
[2017-07-07 16:10:28]
hfman :
@hfman has joined the channel
[2017-07-07 16:10:33]
freaky123 :
can you also read out the ROM?
[2017-07-07 16:10:41]
martinbogo :
And since -that- is my goal ( replacing the firmware entirely ) that is good news
[2017-07-07 16:10:49]
freaky123 :
yes I also wanna do that
[2017-07-07 16:11:00]
martinbogo :
No, the ROM is past initial boot, which does use signed code
[2017-07-07 16:11:15]
hfman :
The Atmel on a Mavic, or Spark?
[2017-07-07 16:11:20]
the_lord :
@the_lord has joined the channel
[2017-07-07 16:11:25]
martinbogo :
Mavic .. don't have a spark
[2017-07-07 16:11:29]
guest :
@guest has joined the channel
[2017-07-07 16:11:37]
hfman :
slick...
[2017-07-07 16:11:55]
martinbogo :
I have ordered a spark ... not too excited about them. Too "cheap"
[2017-07-07 16:12:12]
martinbogo :
the functionality of a Spark can be found in other off the shelf COTS drones .. like the hubsan
[2017-07-07 16:12:25]
martinbogo :
but the Mavic is exciting, because it really is a very small P4
[2017-07-07 16:13:46]
martinbogo :
The MA2100A is also _fully_ open/unlocked
[2017-07-07 16:13:52]
martinbogo :
Got full JTAG back from it
[2017-07-07 16:14:13]
martinbogo :
So, once I can find a datasheet and some code examples, the vision processing of the Mavic is accessible
[2017-07-07 16:14:13]
knorren :
@knorren has joined the channel
[2017-07-07 16:15:14]
freaky123 :
I'm most interested in the atmel and the esc's since those were the two things I couldn't access yet
[2017-07-07 16:15:19]
martinbogo :
**nod**
[2017-07-07 16:15:30]
martinbogo :
Were you able to access the ACP RF SDR chip?
[2017-07-07 16:16:02]
martinbogo :
I think I may have to unsolder it, put a analysis wedge under it to tap the signals, and reball/resolder it
[2017-07-07 16:16:14]
martinbogo :
There are no good traces to tap to it
[2017-07-07 16:16:16]
freaky123 :
Haven't tried that yet.. but looking at all firmware stuff I guedd possible if theg didn't added a 4th layer of protection
[2017-07-07 16:17:24]
martinbogo :
The Ambarella SoC is also completely open
[2017-07-07 16:17:35]
martinbogo :
I don't think we would need to touch the camera firwmare, however
[2017-07-07 16:17:40]
martinbogo :
firmware
[2017-07-07 16:18:10]
darksimpson :
@martinbogo You mean Cortex A is unlocked (Leadcore one) or the FC Cortex M ATSAM chip?
[2017-07-07 16:19:52]
martinbogo :
Leadcore
[2017-07-07 16:20:04]
martinbogo :
I was able to load code
[2017-07-07 16:20:28]
freaky123 :
Jtag should have been dissabled on that one
[2017-07-07 16:20:36]
freaky123 :
Looking at the bootloader code
[2017-07-07 16:21:40]
darksimpson :
You mean FC Atmel?
[2017-07-07 16:21:52]
martinbogo :
Nope, 1-wire is working
[2017-07-07 16:22:03]
martinbogo :
I had to desolder and put a wedge under, but it's all there
[2017-07-07 16:22:29]
darksimpson :
1-wire on Atmel one?
[2017-07-07 16:22:59]
martinbogo :
I also have a leadcore datasheet and functional guide coming from a friend in HK ... massive amount of reading to do. A7 processor, 1.5 GHz, and a well used processor ( 2014 release date )
[2017-07-07 16:23:00]
darksimpson :
I think they use some king of SWD
[2017-07-07 16:23:26]
martinbogo :
1-wire on Leadcore LC1680C
[2017-07-07 16:23:30]
darksimpson :
Ah...
[2017-07-07 16:23:42]
martinbogo :
I have not yet instrumented the Atmel.. I will, but they are secondary to me
[2017-07-07 16:24:17]
darksimpson :
Are you allowed to share ds and um of Leadcore?
[2017-07-07 16:24:44]
darksimpson :
We have also some leadcore tools to communicate with rom boot code
[2017-07-07 16:25:23]
freaky123 :
Lol swd is not proyected by jtag efuse then
[2017-07-07 16:25:35]
martinbogo :
"allowed" ... ha! Like I asked permission
[2017-07-07 16:26:07]
martinbogo :
This is coming from the HK "grey market" phone production people :slightly_smiling_face:
[2017-07-07 16:26:15]
martinbogo :
It's all 'pirated' documentation
[2017-07-07 16:26:37]
darksimpson :
Oh, please upload it somewhere for us )
[2017-07-07 16:26:53]
martinbogo :
I .. won't upload it.. but I have a feeling that it will get uploaded :slightly_smiling_face:
[2017-07-07 16:27:05]
martinbogo :
:stuck_out_tongue:
[2017-07-07 16:27:09]
darksimpson :
I wasn't able to retrieve it all the time
[2017-07-07 16:27:29]
darksimpson :
Only got lc rom boot tools in my hands )
[2017-07-07 16:27:44]
darksimpson :
)
[2017-07-07 16:28:26]
martinbogo :
It's hard to get .. Xiaomi and a couple other companies are dependent on the LC 1860C and LC1160, and they haven't leaked the DS or UM... but now LC has sold chips into the Shenzhen and HK grey phone market, you can bet you'll see a lot more info
[2017-07-07 16:28:48]
martinbogo :
Also means that the new 6-core 2Ghz processor is in full production and the old part is probably being sunset'ed
[2017-07-07 16:29:13]
martinbogo :
**nod** The bootrom tools are a big deal
[2017-07-07 16:29:36]
darksimpson :
Do you need boot rom tools?
[2017-07-07 16:30:05]
martinbogo :
Eventually
[2017-07-07 16:30:13]
darksimpson :
I can upload it here when get to my pc, or will try to share link now
[2017-07-07 16:30:32]
martinbogo :
Right now, I'm working very low level ARM tools, and trying to clean-room the chip as much as possible
[2017-07-07 16:32:21]
darksimpson :
We just need to figure how it works as it now is targeted to xiaomi redmi 2a
[2017-07-07 16:32:35]
darksimpson :
But I think it will not be so hard
[2017-07-07 16:33:33]
asoka :
@asoka has joined the channel
[2017-07-07 16:40:23]
martinbogo :
i was pleasantly surprised to see I can clock in debug code, that's a start
[2017-07-07 16:40:44]
martinbogo :
But most ARM chips will allow execution of 16 bit thumb code at power-up
[2017-07-07 16:47:09]
hostile :
@hostile has joined the channel
[2017-07-07 16:47:51]
martinbogo :
Awesome .. just picked up another bricked mavic on eBay
[2017-07-07 16:48:04]
martinbogo :
Two boards to instrument, just in case.
[2017-07-07 16:48:52]
martinbogo :
It seems that with the latest firmware update pushed out, some people who have installed the superspeed and other patches are being bricked, on purpose
[2017-07-07 16:48:59]
martinbogo :
well, I can't really prove that last bit.
[2017-07-07 16:49:05]
martinbogo :
but it does seem suspicious
[2017-07-07 16:52:39]
kilrah :
@kilrah has joined the channel
[2017-07-07 16:53:31]
hostile :
@darksimpson "We just need to figure how it works as it now is targeted to xiaomi redmi 2a" via USB PID / VID combo in the driver?
[2017-07-07 16:53:49]
hostile :
what is the going rate for a bricked Mavic?
[2017-07-07 16:53:57]
hostile :
core boards are nice to work with too...
[2017-07-07 16:54:03]
hostile :
$90 and a LiPo is all you need
[2017-07-07 16:55:18]
darksimpson :
No, inside config files, you can downlpad and see it.
[2017-07-07 16:55:45]
darksimpson :
F.e. flash part descriptors, sizes, offsets
[2017-07-07 16:56:01]
darksimpson :
need to cange for mavic and try on a bricked one )
[2017-07-07 16:56:48]
darksimpson :
Vid/pid are the same for mavic and redmi 2a, it is a kind of low level stuff of LC chip itself
[2017-07-07 17:06:16]
martinbogo :
@darksimpson : So far, I've bought three 'damaged' mavics, two bricked, one crashed -- crashed $45, bricked $90, bricked $105
[2017-07-07 17:07:05]
martinbogo :
The bricked mavic board that I've currently instrumented was definitely from a manufacturing defect - DDR chip had bad connections
[2017-07-07 17:07:21]
martinbogo :
the crashed mavic board was cracked, and I couldn't salvage it
[2017-07-07 17:11:58]
yiqiangao :
@yiqiangao has joined the channel
[2017-07-07 17:12:38]
kilrah :
ouch
[2017-07-07 17:12:56]
kilrah :
hoped i could pick a crashed one locally but the guy wants waaaay too much for it
[2017-07-07 17:14:50]
kilrah :
like "I didn't crash it, but after a "bump" the camera doesn't work anymore" yeah right, official cam repair is half the price of the machine so you're not going to sell it for $200 less than a new one.... dorks
[2017-07-07 17:25:06]
martinbogo :
@freaky123 : What kind of electronic workbench do you have? Are you comfortable soldering alarm-wire gauge to BGA?
[2017-07-07 17:26:07]
martinbogo :
@freaky123 : I am going to probe out some points along the board... I think there are enough exposed testpoints that I can make a jig
[2017-07-07 17:29:24]
martinbogo :
I think the Vid/Pid is DJI being too cheap to swing for a custom Vid/Pid from the USB alliance
[2017-07-07 17:29:37]
martinbogo :
@darksimpson : So they are using the defaults
[2017-07-07 17:59:19]
freaky123 :
I can solder that, but don't have the best gear for it :wink: @martinbogo
But how do you wanna bypass the secure boot?
[2017-07-07 17:59:40]
martinbogo :
Already have
[2017-07-07 17:59:56]
martinbogo :
but it doesn't help with booting the _real_ firwmare, just loading whatever code I want on there
[2017-07-07 18:00:05]
freaky123 :
btw with root access you can also replace the bootloader etc. but prolly can't bypass the secure boot
[2017-07-07 18:00:07]
martinbogo :
Since I can't decrypt the real firmware
[2017-07-07 18:00:18]
freaky123 :
I can decrypt that for the LC
[2017-07-07 18:00:27]
martinbogo :
Oh! That's a start.
[2017-07-07 18:00:28]
rwijnhov :
@rwijnhov has joined the channel
[2017-07-07 18:00:38]
martinbogo :
Can you send me a decrypted bootloader?
[2017-07-07 18:01:07]
martinbogo :
right now, I'm just loading test thumbcode
[2017-07-07 18:01:18]
freaky123 :
this is btw a bootloader which comes really close: <https://github.com/GitHubZYX/uboot/>
[2017-07-07 18:01:19]
martinbogo :
To peek/poke and check registers and the memory map
[2017-07-07 18:01:27]
martinbogo :
I have that
[2017-07-07 18:01:39]
martinbogo :
<-- one of the authors of U-Boot and Uefi
[2017-07-07 18:02:29]
freaky123 :
uploading a bootarea now
[2017-07-07 18:02:33]
freaky123 :
not sure which version it is
[2017-07-07 18:02:54]
freaky123 :
not that you can't flash this in directly because of some IAEK key and efuse stuff
[2017-07-07 18:03:10]
freaky123 :
nice didn't know you worked on u-boot :slightly_smiling_face:
[2017-07-07 18:04:17]
freaky123 :
know that this bootarea contains like the signature upfront
[2017-07-07 18:04:44]
freaky123 :
like this signature: <https://github.com/fvantienen/dji_rev/blob/master/tools/sign_uboot.py> of the secure boot
[2017-07-07 18:05:10]
freaky123 :
how did you bypass that secure boot? you just executed some code through the swd?
[2017-07-07 18:07:42]
freaky123 :
btw do you have IDA pro?
[2017-07-07 18:08:01]
freaky123 :
then I can share you an boot image which I already worked on a lot
[2017-07-07 18:10:45]
freaky123 :
this is basically the most important stuff from the loader which is different
[2017-07-07 18:11:48]
freaky123 :
and in there you can see: `efuse_write(0x381, 1); // Disable JTAG` which you can prolly confirm in the datasheet what it does
[2017-07-07 18:12:16]
freaky123 :
as you already found out not the SWD, but then LC is failing extremely
[2017-07-07 18:14:17]
freaky123 :
this register `A0900008` I am also interested in, maybe @martinbogo you can give some info?
[2017-07-07 18:14:48]
freaky123 :
since that one is set differently in production vs. factory mode
[2017-07-07 18:21:19]
martinbogo :
Yes, I have IDA pro
[2017-07-07 18:21:44]
martinbogo :
Yep, that does write the efuse, and I can -erase- that fuse :slightly_smiling_face:
[2017-07-07 18:21:56]
martinbogo :
Which is kind of the point, this is all about destructive testing
[2017-07-07 18:22:00]
martinbogo :
I can ==undo== the fuse
[2017-07-07 18:22:13]
martinbogo :
but that automatically wipes the key and such ( as designed )
[2017-07-07 18:29:12]
freaky123 :
But the idea of an efuse is that it can only be written once.. did LC fail so hard?
[2017-07-07 18:29:47]
freaky123 :
I already have the efuse data if you want
[2017-07-07 18:32:32]
kilrah :
efuse is often a misused term
[2017-07-07 18:33:34]
kilrah :
it's rarely actually OTP... BUT resetting it casues loss of the data it's supposed to protect
[2017-07-07 18:34:48]
freaky123 :
Ok but in this boot they also set a disable programming if you look at my file
[2017-07-07 18:35:11]
freaky123 :
And they often call it otp as well
[2017-07-07 18:36:33]
kilrah :
i only have experience with simpler parts, but on some even write protect is often a "can't change what's on there UNTIL you do a full chip erase", then when you do that the chip is as new
[2017-07-07 18:36:48]
kilrah :
but all contents and config is lost obviously
[2017-07-07 18:36:57]
kilrah :
lots of miswording in this whole stuff
[2017-07-07 18:37:11]
freaky123 :
ok yeah you need the DS for that.. but @martinbogo prolly knows it
[2017-07-07 18:37:23]
kilrah :
yup
[2017-07-07 18:38:08]
freaky123 :
where do you need help with @martinbogo ?
[2017-07-07 18:39:01]
freaky123 :
because I know almost anything about the boot process etc. and could generate a new bootarea with a valid IAEK that can load the original kernel etc.
[2017-07-07 18:40:15]
freaky123 :
if you were right about the efuse @kilrah then I achieved the most difficult part by retrieving the efuse data
[2017-07-07 18:46:23]
martinbogo :
@freaky123 : **chuckle** The "disable programming" isn't a real efuse either -- you can wipe it with what's known as "HV" programming ( high voltage )
[2017-07-07 18:46:50]
martinbogo :
The efuse isn't a real fuse, it's more like what they use in ATmel chips... requires high voltage to reset
[2017-07-07 18:47:20]
freaky123 :
aha
[2017-07-07 18:47:44]
freaky123 :
I can help you with at least getting the original firmware back working if you can set the efuses
[2017-07-07 18:47:48]
martinbogo :
Yeah .. you end up with a clean chip, and you do have to reprogram some flags ( like PLL multipliers, and such )
[2017-07-07 18:47:55]
martinbogo :
yep!
[2017-07-07 18:48:11]
martinbogo :
what we -won't- be able to recover, is the secret key
[2017-07-07 18:48:16]
martinbogo :
once that's gone, it's gone
[2017-07-07 18:48:25]
freaky123 :
I have that one already
[2017-07-07 18:48:29]
martinbogo :
but I have an idea about that as well
[2017-07-07 18:48:48]
freaky123 :
I have all secret keys
[2017-07-07 18:48:55]
freaky123 :
I have a dump of the efuse
[2017-07-07 18:48:57]
martinbogo :
**blink** Only way I know how to recover the private key is to decap + send to chipworks for a micrograph scan
[2017-07-07 18:49:15]
martinbogo :
ah, you don't have the secret key then .. just the efuse settings
[2017-07-07 18:49:23]
martinbogo :
the real key is hiding behind the trustzone
[2017-07-07 18:49:38]
freaky123 :
in the truszone os?
[2017-07-07 18:49:41]
martinbogo :
unless you got very lucky?
[2017-07-07 18:49:51]
martinbogo :
in the memory map that the trustzone can get to, right
[2017-07-07 18:50:07]
martinbogo :
it going to be a programmed, NVram setting
[2017-07-07 18:50:07]
freaky123 :
what does that private key protect then?
[2017-07-07 18:50:21]
martinbogo :
it's the key the chip checks code against
[2017-07-07 18:50:29]
martinbogo :
when in trustmode
[2017-07-07 18:50:36]
martinbogo :
signed code key
[2017-07-07 18:50:46]
freaky123 :
so that is different then the secure boot?
[2017-07-07 18:50:49]
freaky123 :
another step?
[2017-07-07 18:50:57]
martinbogo :
Well, yes and no.
[2017-07-07 18:51:18]
martinbogo :
Depends on the architecture. But the key -has- to reside in NVram of some sort... I wouldn't expect it to be in the efuses
[2017-07-07 18:51:43]
martinbogo :
I'll know a LOT more in ~2-3 days, when I have the DS + UM
[2017-07-07 18:51:50]
freaky123 :
I can give you a decrypted TZOS (trustzone OS) didn't know where it was used for
[2017-07-07 18:52:28]
freaky123 :
yeah the DS would help a lot
[2017-07-07 18:53:06]
freaky123 :
but I thought that after you disabled the secure boot(which is set in efuse) you could just run anything from boot?
[2017-07-07 18:53:13]
martinbogo :
TrustZone is all secured mode -- it lives past a gatekeeper, and operates outside the interrupt and standard running context
[2017-07-07 18:53:44]
martinbogo :
think of it as a hypervisor, which handles all calls to hardware/operations that the OS needs to be trusted
[2017-07-07 18:54:01]
martinbogo :
phones use it to communicate to the baseband, to store and compare against keys, etc
[2017-07-07 18:54:23]
martinbogo :
Some light reading : <https://genode.org/documentation/articles/trustzone>
[2017-07-07 18:56:05]
martinbogo :
But basically -- there are registers and hardwarew you -cannot- reach outside of the TZ context
[2017-07-07 18:56:18]
freaky123 :
aha
[2017-07-07 18:57:13]
freaky123 :
didn't bother that much since with root you could access almost anything directly (except the efuses etc.)
[2017-07-07 18:57:35]
martinbogo :
I worked on the Smooth-Stone ( Calxeda ) quad-core cortex a9 processor .. I got to learn a LOT about trustzone
[2017-07-07 18:57:43]
martinbogo :
( it was the first ARM server processor, 32 bit )
[2017-07-07 18:57:49]
hostile :
martinbogo: so we are crowd sourcing the cost via PayPal? :wink:
[2017-07-07 18:58:11]
freaky123 :
I haven't worked with TZ, so didn't know that much about it
[2017-07-07 18:58:17]
martinbogo :
Naa .. chipworks are old and good friends. I'll just send them the chip, and they sell the reports for a profit to other people
[2017-07-07 18:58:21]
jan2642 :
@jan2642 has joined the channel
[2017-07-07 18:58:33]
freaky123 :
it has nothing todo with the tl420 image right?
[2017-07-07 19:00:26]
freaky123 :
Because I couldn't figure out where that was used fot... because it gets loaded and nothing is done with it
[2017-07-07 19:01:23]
martinbogo :
TI chip firmware load?
[2017-07-07 19:01:27]
martinbogo :
Send me the image?
[2017-07-07 19:01:35]
freaky123 :
I wanted to do that for the Atmel FC chip but they asked 7k for that one
[2017-07-07 19:01:45]
martinbogo :
That's about right :slightly_smiling_face:
[2017-07-07 19:02:02]
martinbogo :
Like I said -- it's different when you're friends ... I do a lot of security research on router chips and such
[2017-07-07 19:02:16]
martinbogo :
so we've .. um .. shared a lot of experiences and they have made pleeeeenty of money off me
[2017-07-07 19:02:34]
martinbogo :
I'll decap the chip from the crashed unit, and send it to them.
[2017-07-07 19:02:40]
martinbogo :
desolder rather
[2017-07-07 19:03:14]
martinbogo :
I can also send it to 3SCan instead .. I know the layout of the chip, and can very probably do some of that reverse engineering from photos they take
[2017-07-07 19:03:14]
freaky123 :
Nice to have such friends :)
[2017-07-07 19:03:25]
martinbogo :
they have a diamond microtome
[2017-07-07 19:05:00]
freaky123 :
It is inside the bootarea.. will extract it after my dinner
[2017-07-07 19:11:37]
hostile :
@diff you should probably be in here too...
[2017-07-07 19:11:40]
diff :
@diff has joined the channel
[2017-07-07 19:19:01]
martinbogo :
I'm honestly at a loss .. no idea what a "ti420" image is for
[2017-07-07 19:21:24]
diff :
woot woot
[2017-07-07 19:35:42]
martinbogo :
@freaky123 : Perhaps it's a chip firmware bootload?
[2017-07-07 19:35:50]
martinbogo :
i.e. firmware for the wifi?
[2017-07-07 19:36:25]
martinbogo :
Like what happens with the BCM chips?
[2017-07-07 19:40:32]
freaky123 :
Yeah could be.. just something I cannot place
[2017-07-07 20:07:56]
mingtao :
@mingtao has joined the channel
[2017-07-07 20:53:57]
dumdedum :
@dumdedum has joined the channel
[2017-07-07 21:36:55]
rulppa :
@rulppa has joined the channel
[2017-07-07 22:30:46]
versuher :
@versuher has joined the channel
[2017-07-08 12:17:19]
bin4ry :
@bin4ry has joined the channel
[2017-07-08 12:19:18]
rpouetpouet :
@rpouetpouet has joined the channel
[2017-07-08 21:53:47]
versuher :
copy from general:
I bricked my Mavic about a week ago trying to roll back from .800 to .700 using the DJI Assistant beta112 (windows). It provides the option for a module-by-module selection of firmware files. I was dumb enough to assume that it’s worth a try and was able to go one and a half modules down the list - “upgrade” of “FlightCtrl” (wm220_0306) was completed “successfully” (wm220_0306_v03.02.35.05_20170525.pro.fw.sig -> wm220_0306_v03.02.30.13_20170405.pro.fw.sig), the next failed ones were the wm220_0802 and maybe wm220_0801. After those failed, only three devices were responsive (according to Assistant log) - CPLD (wm220_0803), UltrasonicMO (wm220_0804) and 1860 (wm220_0801).
Assistant sees the Mavic, and believes the firmware version is 0.0.0.0. However, any attempt to upgrade to 0.800 fails.
Long story short – a few panicked attempts to roll back to .800 via DJI Assistant or to .400 via VM method, the three devices devices mentioned above are still detected by the Assistant. The wm220_0801 has a weird Loader/FW combo : “Lb_dm3xx_sky (8 :1) Ldr : 1.4.17.1 App : 0.0.0.0”.
I have already ordered the core board and flight controller, but I was wondering if it would be possible to root my way into the Mavic to maybe dump some logs? Assistant is able to successfully connect to RNDIS usbmodem1415 and read out SN and some other stuff, but I guess that the normal startup of the Mavic gets interrupted at some point and not all devs are starting. I've looked through the "System Startup" section at <https://github.com/kevinelliott/dji/wiki/Mavic:-Reverse-Engineering> , but can't really tell how far does the Mavic go down the list.
I have a vague hope that something can be done with it since the device is not 100% unresponsive. It’s a pity to look at it booting though - after what appears to be a normal gimbal calibration and motors test, it start beeping and the aft LED glows yellow.
[2017-07-08 21:56:56]
versuher :
@hostile ...after changing the interface settings in the root shell (El Capitan isn't that consistent with terminal commands and how results look like in System Profiler or Network Settings), the interface info shows up in the terminal as:
en6: flags=8823<UP,BROADCAST,SMART,SIMPLEX,MULTICAST> mtu 1536
ether mac address here
inet6 fe80::e8d5:60ff:fe11:a785%en6 prefixlen 64 scopeid 0x20
inet 192.168.42.3 netmask 0xffffff00 broadcast 192.168.42.255
nd6 options=1<PERFORMNUD>
media: autoselect (<unknown type>)
No luck with ping though:
PING 192.168.42.2 (192.168.42.2): 56 data bytes
ping: sendto: Network is down
ping: sendto: Network is down
Request timeout for icmp_seq 0
ping: sendto: Network is down
Request timeout for icmp_seq 1
[2017-07-08 22:01:18]
hostile :
yeah that is a proper brick =]
[2017-07-08 22:01:56]
hostile :
one of the folks here may be able to help ... scroll up... see the LeadCore tools mentioned and bug @darksimpson
[2017-07-08 22:02:08]
hostile :
he was looking for a brickee IIRC
[2017-07-08 22:11:43]
versuher :
Yeah, I’m afraid my soldering iron will warm up much sooner than I get the parts from the US to EU (no luck finding anything with “Buy now” option on Ebay other than a single option)
[2017-07-09 04:42:30]
martinbogo :
I use a nice Hakko 900 series... hot then not
[2017-07-09 04:43:12]
martinbogo :
I've been having some fun this afternoon... I >>definitely<< have control over the ARM cpu. I can reset the efuses, and program the chip ( losing the private key in the process )
[2017-07-09 04:45:10]
martinbogo :
@freaky123 : I have a uEFI shim running, which gives me a basic EFI shell to probe around with. The kernel for the LC 1860C is not properly open sourced. It's like the Mediatek chips, they have a lot of unpublished linux kernel patches (which is against the GPL, but China doesn't care )
[2017-07-09 04:45:37]
martinbogo :
freaky : AFAIK, this is a hardware-only solution, but it gets us a blank canvas to work with.
[2017-07-09 05:00:53]
hostile :
can you prove this?
[2017-07-09 05:01:01]
hostile :
we have a running GPL thread with DJI lawyers now
[2017-07-09 05:01:08]
hostile :
they "take IP claims very seriously"
[2017-07-09 05:01:36]
hostile :
any extra detail to pile on is welcome @martinbogo hit us up in PM if ya want
[2017-07-09 05:01:41]
hostile :
@freaky123 or I
[2017-07-09 05:02:38]
martinbogo :
hostile : Will confirm tomorrow morning. right now, I can't compile a working kernel, and I have the toolchain to do so.
[2017-07-09 05:03:22]
martinbogo :
I -have- a uEFI working, and the chip is fully open ... this should be as easy as "load kernel to mem location, then jump."
[2017-07-09 05:04:02]
martinbogo :
I don't think DJI are playing by the rules... but I don't think it's THEM not playing by the rules, but rather the chip provider.
[2017-07-09 05:04:11]
martinbogo :
Like I said, I think this is MediaTEK style shenannigans
[2017-07-09 07:45:28]
freaky123 :
I have a kernel which comes close
[2017-07-09 07:45:49]
freaky123 :
Like the u-boot repo
[2017-07-09 07:46:30]
freaky123 :
<https://github.com/1667450061/bak>
[2017-07-09 07:47:18]
freaky123 :
Searching and finding this dtuff was hard at first.. but eventually you find that these are 2 only 2 things available with the LC1860
[2017-07-09 07:48:32]
freaky123 :
But yeah this is more like a basic kernel for the lc1860, while prolly dji has added more kernel modules
[2017-07-09 07:50:16]
freaky123 :
And about the GPL it is prolly both, but DJI is responsible for providing the source code. Btw this linux kernel is not the only thing: busybox, u-boot, memutils etc.
[2017-07-09 07:51:23]
freaky123 :
Out of both the kernel and the u-boot image I found I was able to figure out some registers etc.
[2017-07-09 13:12:41]
martinbogo :
@freaky123 **nod**
[2017-07-09 13:13:34]
martinbogo :
@freaky123 This morning I'm working on getting a basic "stub kernel" working. LC1860C is supported by Wind River Systems RTPS
[2017-07-09 13:13:36]
martinbogo :
RTOS
[2017-07-09 13:14:13]
martinbogo :
If I can get this working, then I can work backwards a bit and get a basic linux kernel stubbed out
[2017-07-09 13:16:55]
martinbogo :
Because running a 3.4.x kernel is embarrasing
[2017-07-09 14:36:34]
hostile :
@freaky123 "but DJI is responsible for providing the source code." exactly. =]
[2017-07-09 15:42:44]
martinbogo :
(( <https://www.gnu.org/licenses/gpl-violation.en.html> ))
[2017-07-09 15:42:58]
martinbogo :
Well, if our research proves a GPL violation, EFF / Free Software Foundation it
[2017-07-09 15:43:36]
hostile :
they are already being CC'd
[2017-07-09 15:43:43]
hostile :
I proved it when I dropped the AES ftp reverse
[2017-07-09 15:44:01]
hostile :
<https://github.com/MAVProxyUser/DJI_ftpd_aes_unscramble>
[2017-07-09 15:46:19]
martinbogo :
**nod** There is a lot of FSF software in there.
[2017-07-09 15:48:23]
martinbogo :
Problem is -- GPL enforcement in China is laughably hard.
[2017-07-09 15:48:36]
martinbogo :
And US enforcement is still untested in court ( damnit )
[2017-07-09 15:48:42]
hostile :
Public shame in the US via Vice helps your sales lots
[2017-07-09 15:48:49]
martinbogo :
helps/hurts :slightly_smiling_face:
[2017-07-09 15:48:53]
hostile :
Freaky and I been waiting a month...
[2017-07-09 15:49:06]
hostile :
I'm sure you already saw the rumors of them getting kicked out of country...
[2017-07-09 15:49:16]
martinbogo :
Okay ... I have started walking the memory map, locating the peripherals
[2017-07-09 15:49:25]
martinbogo :
This is going to take a while. I hate how long hardware walking takes
[2017-07-09 15:49:43]
martinbogo :
the LC1860C peripherals are where they should be.. so that's good
[2017-07-09 15:49:44]
hostile :
this rumor has had legs for months now
[2017-07-09 15:49:51]
hostile :
oops
[2017-07-09 15:49:52]
hostile :
wrong one
[2017-07-09 15:50:09]
hostile :
<https://www.suasnews.com/2017/07/will-american-federal-agencies-ban-foreign-drones/>
[2017-07-09 15:50:33]
martinbogo :
Yes, this is true.
[2017-07-09 15:50:55]
martinbogo :
DJI's drones are persona-non-grata at SOCOM
[2017-07-09 15:50:58]
hostile :
headed AFK!
[2017-07-09 15:51:04]
martinbogo :
same. I need lunch
[2017-07-09 15:51:24]
martinbogo :
And this hardware scan is going to take between 2-6 hours
[2017-07-09 15:51:44]
martinbogo :
I hate HATE hate HATE that I have to keep the drone mainboard powered up with the intelligent battery
[2017-07-09 15:52:01]
hostile :
set that flag...
[2017-07-09 15:52:05]
martinbogo :
that I can't just hook up +V +Vcc GND and make it happy
[2017-07-09 15:52:13]
hostile :
on Mavic we use Lipo straight to core board
[2017-07-09 15:52:33]
martinbogo :
Wait, what?
[2017-07-09 15:52:41]
martinbogo :
Stay on keyboard a couple more miniutes.
[2017-07-09 15:53:00]
martinbogo :
You're directly powering the board, and it's staying alive?
[2017-07-09 15:53:05]
hostile :
$90 core board and a lipo and you are in the game
[2017-07-09 15:53:23]
hostile :
Thank @the_lord for that...
[2017-07-09 15:53:28]
martinbogo :
Hey, if that works, I'll copy.
[2017-07-09 15:53:40]
hostile :
There are 3 core boards tooled up on my desk
[2017-07-09 15:53:57]
martinbogo :
Actually, if that works -- I should be able to use my bench power supply.
[2017-07-09 15:53:59]
hostile :
watch the CPU... gets hot... so you know cool it and shit
[2017-07-09 15:54:08]
martinbogo :
give me 60-120 secs here
[2017-07-09 15:54:15]
martinbogo :
I have power clamps
[2017-07-09 15:54:28]
hostile :
depending on your revision + and - are labeled
[2017-07-09 15:54:33]
martinbogo :
they are.
[2017-07-09 15:54:41]
martinbogo :
but I traced 'em out ages ago anyway
[2017-07-09 15:54:41]
hostile :
3s
[2017-07-09 15:54:51]
hostile :
I gotta run tho before my wife shoots me
[2017-07-09 15:55:02]
martinbogo :
'kay.
[2017-07-09 15:55:03]
martinbogo :
It works :slightly_smiling_face:
[2017-07-09 15:55:06]
martinbogo :
Danke
[2017-07-09 15:55:23]
martinbogo :
11.1v ... and this simplifies my bench setup TREMENDOUSLY
[2017-07-09 15:56:31]
martinbogo :
Oh -- and @the_lord -- I replicated your success last night on OSX.
[2017-07-09 15:56:43]
martinbogo :
First thing this morning when the battery on the RC was charged
[2017-07-09 15:57:25]
martinbogo :
as soon as you have DUML for direct connection to mavic, we'll try that too
[2017-07-09 16:02:20]
freaky123 :
I can do direct usb communication
[2017-07-09 16:12:44]
the_lord :
@the_lord uploaded a file: [My cooling system](https://dji-rev.slack.com/files/the_lord/F66QHNEQ6/image_uploaded_from_ios.jpg)
[2017-07-09 16:14:25]
hostile :
DJIs counter to all of this should be fun too... they gonna have to re architect lots of shit
[2017-07-09 16:14:32]
martinbogo :
Well, yes and no
[2017-07-09 16:14:44]
martinbogo :
If they were smart, they would move to a closed source RTOS
[2017-07-09 16:15:04]
martinbogo :
Linux is _not_ the smart choice for realtime drones. This was learned back in the AR Drone 1.0 days
[2017-07-09 16:15:14]
hostile :
Given their track record... mistakes will be made :)
[2017-07-09 16:15:17]
martinbogo :
They should have done this a long time ago :slightly_smiling_face:
[2017-07-09 16:15:42]
the_lord :
I already have Mavic upgrade DUML
[2017-07-09 16:15:48]
martinbogo :
There are scheduler bugs like crazy ... and you could lose all control of the drone. as it is, I'm sure they have lots of watchdogs
[2017-07-09 16:15:57]
martinbogo :
@the_lord : AMEN to you :slightly_smiling_face:
[2017-07-09 16:16:05]
hostile :
Lol
[2017-07-09 16:16:12]
hostile :
The memes are dank
[2017-07-09 16:16:15]
the_lord :
They are almost same as the RC
[2017-07-09 16:16:21]
martinbogo :
They really, really are :slightly_smiling_face:
[2017-07-09 16:16:45]
the_lord :
But I'm outside now
Maybe 30 or 45 minutes later i can share them with you
[2017-07-09 16:17:03]
martinbogo :
Take your time -- I have HOURS to wait while I do memory walking and hardware scanning
[2017-07-09 16:17:12]
martinbogo :
The memory space is large, and probing for hardware takes a while
[2017-07-09 16:17:47]
martinbogo :
But -- I can clear the efuses now, and restore a sane set of them thanks to a Xiaomi phone "factory reset" procedure
[2017-07-09 16:18:01]
martinbogo :
There's just enough info on the LC1860C that I can do some interesting things
[2017-07-09 16:18:19]
martinbogo :
while I wait for the DS and UM
[2017-07-09 16:21:20]
hostile :
He Bogo can you post your jtag tooling pix?
[2017-07-09 16:21:42]
hostile :
Also have you found the LC uart?
[2017-07-09 17:22:10]
martinbogo :
Will do, as soon as I move it -out- of the place that I work :slightly_smiling_face:
[2017-07-09 17:22:26]
martinbogo :
I'm sure they wouldn't appreciate me posting pics of the lab :slightly_smiling_face:
[2017-07-09 17:31:21]
hostile :
Lol
[2017-07-09 17:31:35]
hostile :
Just need the pads!
[2017-07-09 17:31:37]
martinbogo :
i2c hardware located
[2017-07-09 17:31:41]
hostile :
Not the whole rig :)
[2017-07-09 17:31:49]
hostile :
Macro!
[2017-07-09 17:32:09]
martinbogo :
hostile : I bypassed the motherboard -- I'll trace down the JTAG pads, but what I did was unsolder the LC1860C, and put a shim under it
[2017-07-09 17:32:25]
martinbogo :
The LC1860C's pinout is already known
[2017-07-09 17:32:37]
martinbogo :
So, kind of cheated.
[2017-07-09 17:32:46]
martinbogo :
I'll trace out the pads after I finish this scan, and then post a photo
[2017-07-09 17:32:53]
martinbogo :
since that just needs a continuity tester
[2017-07-09 18:11:44]
hostile :
ebay...
[2017-07-09 18:11:56]
hotelzululima :
thanx
[2017-07-09 18:12:07]
hostile :
<http://www.ebay.com/itm/DJI-Mavic-Pro-NEW-Main-Core-Board-A-Downward-Vision-Sensors-VPM-VPS-Shell-/152571098639?hash=item2385f2360f:g:JBUAAOSwKytZMeJP>
[2017-07-09 18:12:15]
hostile :
I've seen em as low as %70
[2017-07-09 18:12:29]
martinbogo :
and I buy crashed drones as well .. people wrap Mavic's around trees .. a lot
[2017-07-09 18:12:59]
hotelzululima :
hmm.. thanx will drop a local craigslist ad also :slightly_smiling_face:
[2017-07-09 18:13:01]
freaky123 :
@hostile bought one really cheap which I found on ebay
[2017-07-09 18:13:08]
freaky123 :
after I bricked his mavic
[2017-07-09 18:13:18]
martinbogo :
he
[2017-07-09 18:13:18]
hostile :
<http://www.ebay.com/itm/Dji-mavic-pro-VPS-Board-/201969737093?hash=item2f06559d85:g:UWcAAOSwCkZZVV1F>
[2017-07-09 18:13:19]
martinbogo :
heh
[2017-07-09 18:13:39]
hostile :
<http://www.ebay.com/itm/DJI-Mavic-Pro-Main-Control-ESC-Board-GPS-Compass-Power-Module-Port-MC-Quad-Parts-/322560316940?epid=512988795&hash=item4b1a17d60c:g:Vv8AAOSwDrNZOb80>
[2017-07-09 18:14:00]
hostile :
I need to try to run P4 like this too... gutted and just the main board
[2017-07-09 18:14:14]
freaky123 :
but you can buy official replacement parts for that price almost
[2017-07-09 18:14:43]
hostile :
Yeh.. fuckers jack those up price wise...
[2017-07-09 18:14:44]
hostile :
<http://www.ebay.com/itm/DJI-MAVIC-CORE-BOARD-A-SPARE-BRAND-NEW-ORIGINAL-REPAIRS-IN-STOCK-FREE-SHIPPING-/182647760160?hash=item2a86a7a520:g:w5MAAOSwbtVZWUM8>
[2017-07-09 18:15:08]
martinbogo :
Well, they know they are useful now
[2017-07-09 18:15:10]
hotelzululima :
300 not a chance
[2017-07-09 18:15:28]
hotelzululima :
will try DJI first for the board..
[2017-07-09 18:15:31]
freaky123 :
I still want to have a cheap FC board
[2017-07-09 18:15:50]
hotelzululima :
have to develop a stock # for it though
[2017-07-09 18:16:13]
hotelzululima :
wondering if the DJI center in SF would have any in stock?
[2017-07-09 18:16:29]
hotelzululima :
as they supposedly are a repair center also
[2017-07-09 18:16:44]
hostile :
@the_lord can probably tell you the exact stock numbers
[2017-07-09 18:16:50]
martinbogo :
@freaky123 ... and this is why I buy crashed drones :slightly_smiling_face:
[2017-07-09 18:16:59]
hotelzululima :
makes much more sense than risking my work machine
[2017-07-09 18:18:31]
the_lord :
yes which part?
[2017-07-09 18:18:47]
hostile :
Mavic Core.
[2017-07-09 18:18:47]
the_lord :
core board or FC+ESC ?
[2017-07-09 18:18:56]
the_lord :
1 second
[2017-07-09 18:19:37]
hotelzululima :
both I think for now..
[2017-07-09 18:20:10]
hotelzululima :
hmm what about sensors(GPS/etc)
[2017-07-09 18:21:00]
the_lord :
you are making DIY mavic LoL
[2017-07-09 18:21:46]
hotelzululima :
actually first I just want it for the rooting help but my partial goal is to asses feasibility of porting Openpilot or paparazzi into the mavic
[2017-07-09 18:22:22]
hotelzululima :
since DJI isnt playing well with others at present
[2017-07-09 18:23:19]
hostile :
@hotelzululima be sure to talk to @freaky123 you just said one of his magic words... I think you two will find some things in common. =]
[2017-07-09 18:23:43]
freaky123 :
Hahaha indeed
[2017-07-09 18:26:17]
the_lord :
the front sensor they call it Mavic Front Vision
[2017-07-09 18:35:14]
martinbogo :
By the way -- if anyone is interested, the LC1860C is a TFBGA 359
[2017-07-09 18:35:20]
martinbogo :
So this is going to be a fun pinout to work with :disappointed:
[2017-07-09 18:41:45]
martinbogo :
almost half of those pins are ground :slightly_smiling_face:
[2017-07-09 18:42:04]
martinbogo :
six of them ... are UARTs :slightly_smiling_face:
[2017-07-09 18:43:04]
the_lord :
sent you the DUML
[2017-07-09 18:43:59]
the_lord :
UARTs will help in recovering bricked drones (start_dji_system.sh)
[2017-07-09 18:44:37]
martinbogo :
only if U-boot has any support at all for the UART
[2017-07-09 18:44:47]
martinbogo :
and if the UARTs are enabled properly
[2017-07-09 18:45:53]
the_lord :
i recovered many DJI boards (DM36x) from UART
[2017-07-09 19:32:30]
freaky123 :
What did you mean by send you the DUML? @the_lord
[2017-07-09 19:35:41]
the_lord :
i sent the upgrade DUML to martinbogo
[2017-07-09 19:35:57]
the_lord :
and just tested it to root the mavic with success
[2017-07-09 19:39:40]
freaky123 :
I thought that DUML was the protocol of dji.. but is it also a tool then?
[2017-07-09 19:40:24]
the_lord :
no its not a tool, i sent you earlier the DUML for RC upgrade
[2017-07-09 19:40:55]
the_lord :
but at that time i didn't know exactly what is each command is doing
[2017-07-09 19:41:01]
the_lord :
now i DID
[2017-07-09 19:42:16]
freaky123 :
Aha
[2017-07-09 19:42:39]
freaky123 :
Ohh yeah i can disect the duml commands
[2017-07-09 19:46:54]
the_lord :
can you help me identify this command
550E04662A28685740000C008820
its from assistant to Mavic within the upgrade process
[2017-07-09 19:47:34]
the_lord :
this one for the RC:
550E04662A2DEA2740000C002CC8
[2017-07-09 19:56:12]
freaky123 :
MSG[1001 -> 0801] Seq: 22376 Attrib: 40 Cmdset: 0 Cmd: 12 Size 1: 00
MSG[1001 -> 1301] Seq: 10218 Attrib: 40 Cmdset: 0 Cmd: 12 Size 1: 00
[2017-07-09 19:57:09]
freaky123 :
following my nice enum: `COMM_CMD_SET_GENERAL_REPORT_STATUS = 12,`
[2017-07-09 19:57:39]
freaky123 :
this basically enables the reporting of the upgrade status
[2017-07-09 19:58:08]
freaky123 :
:wink:
[2017-07-09 19:59:05]
freaky123 :
but the info you prolly want:
```
enter_upgrade_mode(7) size 9:
- 1B (unknown offset 69 in struct)
- 1B (upgrade_package_type, should be 0 or 1)
- 7B unused
accept_upgrade_data(8) size 13:
- 1B unused
- 4B image_size
- 6B unused
- 1B image_path (0, 1 or 2)
- 1B image_type (4 = dji_system.bin)
finish_upgrade_data(10) size 17:
- 1B unused
- 16B MD5 sum
```
[2017-07-09 19:59:36]
freaky123 :
these are the packets needed for upgrading
[2017-07-09 20:01:31]
freaky123 :
for example an upgrade:
```
MSG[1001 -> 0801] Seq: 15544 Attrib: 40 Cmdset: 0 Cmd: 7 Size 9: 000000000000000000
MSG[1001 -> 0801] Seq: 15548 Attrib: 40 Cmdset: 0 Cmd: 8 Size 13: 00000C7E060000000000000204
MSG[1001 -> 0801] Seq: 15867 Attrib: 40 Cmdset: 0 Cmd: 10 Size 17: 0013E53D1DBAF2C54A4F204AF21B840AF0
```
And between `enter_upgrade_mode` and `accept_upgrade_data` this reporting is enabled
[2017-07-09 20:03:55]
freaky123 :
hopefully you found this useful :wink: but I was busy with my own upgrade tool before so this is how I know
[2017-07-09 20:46:02]
the_lord :
@freaky123 WoW you forced the Chinese drone to speak English :joy:
amazing
[2017-07-09 21:28:13]
martinbogo :
Actually .. one of the first things I do when I'm debugging a bus or packet protocol is make a Computer->English translation
[2017-07-09 21:29:06]
martinbogo :
Since we aren't very good at reading 0x01 0x02 0x03 -- but we can sure as hell read an ENUM'ed map of 0x01 = "Program command packet", 0x02="Start payload", 0x03="End payload"
[2017-07-09 21:29:39]
martinbogo :
cmd 8, by the way, contains the file length in the middle :slightly_smiling_face: You can update the tool to read it :slightly_smiling_face:
[2017-07-09 21:32:44]
freaky123 :
yes but I know more packets data structure, but didn't want to add them all
[2017-07-09 21:32:56]
freaky123 :
wanted to make this open source so other people could do it
[2017-07-09 21:33:04]
martinbogo :
Eh, if you know it, add it
[2017-07-09 21:33:14]
martinbogo :
That's the essence of having open source -- making nice header files :slightly_smiling_face:
[2017-07-09 21:33:36]
martinbogo :
speaking of open -- tomorrow evening I'm taking the rig I've made back home to my own workbench
[2017-07-09 21:33:38]
freaky123 :
yeah just needed to clean stuff etc.
[2017-07-09 21:33:58]
martinbogo :
So I'll start taking pictures and doing an iFixit style teardown + step-by-step on how to hook up JTAG, UART, etc.
[2017-07-09 21:34:06]
martinbogo :
OH! I found UART1 by the way
[2017-07-09 21:34:12]
martinbogo :
Still looking for UART0's pins
[2017-07-09 21:34:16]
freaky123 :
nice :slightly_smiling_face:
[2017-07-09 21:34:27]
martinbogo :
UART1 is running at 115200 bps, 8N1
[2017-07-09 21:34:32]
freaky123 :
and does UART1 give a console or not?
[2017-07-09 21:34:36]
freaky123 :
ok that's strange
[2017-07-09 21:34:55]
freaky123 :
aha that's the UART going to the FC prolly
[2017-07-09 21:34:57]
martinbogo :
low voltage! We will need to make sure that people know NOT to use things like TTL->RS232 converters that are 3.3v
[2017-07-09 21:35:08]
martinbogo :
no console
[2017-07-09 21:35:24]
freaky123 :
yeah 115200 wasn't the correct baudrate
[2017-07-09 21:35:42]
martinbogo :
freaky123 : Do you PCB?
[2017-07-09 21:36:11]
martinbogo :
I'm going to put together an [upverter.com](http://upverter.com) project for a PCB to either pogo-pin or help people solder to the Mavic and/or P4 boards
[2017-07-09 21:37:24]
martinbogo :
So that we don't need to have umpteen-million cables on the table
[2017-07-09 21:37:28]
freaky123 :
I can do PCB design
[2017-07-09 21:37:42]
martinbogo :
I also do PCB design ... good.
[2017-07-09 21:39:00]
freaky123 :
haven't worked with upverter, but looks cool.. a while ago I searched for a collaborative PCB design program but couldn't find a nice one but this one seems promissing
[2017-07-09 21:40:26]
martinbogo :
email to collaborate? Or you can register on upverter and then share your username.
[2017-07-09 21:40:36]
martinbogo :
my email is [martinbogo@gmail.com](mailto:martinbogo@gmail.com)
[2017-07-09 21:40:46]
martinbogo :
( I'm pretty much martinbogo@<whatever> )
[2017-07-09 21:43:42]
the_lord :
@freaky123 i created the dji_system.bin from firmware signed files but i'm not getting the same size of the original
any idea how should i tar the FW signed files?
[2017-07-09 21:43:45]
freaky123 :
fvantienen is my username
[2017-07-09 21:44:00]
freaky123 :
you should zip them
[2017-07-09 21:44:18]
the_lord :
-a ?
[2017-07-09 21:45:10]
freaky123 :
not sure I know they use unzip on the drone
[2017-07-09 21:46:17]
the_lord :
maybe from extraction code you can tell how it was compressed
[2017-07-09 21:46:39]
the_lord :
i saw many busybox tar in the dji_sys strings but couldn't tell which one
[2017-07-09 21:48:07]
freaky123 :
I closed IDA because I'm gonna sleep will lookup tomorrow
[2017-07-09 21:49:12]
the_lord :
thanks
[2017-07-09 22:01:19]
martinbogo :
And a real pain the arse to work with
[2017-07-09 22:01:22]
martinbogo :
but they ARE handy
[2017-07-09 22:18:36]
the_lord :
don't worry @freaky123 i found it in the log
Start to extract firmware busybox tar -xf /ftp/upgrade/dji_system.bin -C /ftp/upgrade/upgrade/signimgs/
[2017-07-09 22:41:00]
hostile :
@the_lord you can snag the update file to examine it... while true do; cp /path/to/file /where/you/wantit; done
[2017-07-09 22:41:04]
hostile :
let it look while you upgrade
[2017-07-09 22:41:08]
hostile :
it will catch it
[2017-07-09 22:41:14]
hostile :
then you can get a closer look at it
[2017-07-09 22:41:20]
hostile :
this is how we caught the NFZ file .tar
[2017-07-09 22:42:07]
hostile :
@the_lord @freaky123 I assume you noticed the unsignesimgs folder too? What ever is she for?
[2017-07-09 22:46:21]
the_lord :
what i noticed is, its temporary place to extract the signed images
IIRC i copied files to this folder and deleted the back up (when downgraded from 1.2.9 to 1.2.8)
or vice versa i don't remember
what i remember when i deleted the files already in drone it panicked and rebooted :sweat_smile:
[2017-07-09 22:48:01]
the_lord :
i'm awake for 24 hours now
GN
[2017-07-09 23:05:10]
hostile :
@the_lord <https://twitter.com/thedjiproblem/status/884072826554155008>
[2017-07-10 01:14:34]
martinbogo :
~1.5v
[2017-07-10 01:14:39]
martinbogo :
You can use 1.8 safely
[2017-07-10 02:01:00]
hotelzululima :
k thanx
[2017-07-10 14:09:03]
martinbogo :
Will be a quiet day today ( Monday @work )... from what I can figure, I'm about nine hours behind everyone else here.
[2017-07-10 14:09:17]
martinbogo :
I am taking my core boards that I have instrumented back home this afternoon.
[2017-07-10 14:09:36]
martinbogo :
Do we have a wiki or something to document on?
[2017-07-10 14:10:34]
hostile :
GitHub has been it... the info flow seems more word of mouth and peer based
[2017-07-10 14:11:24]
martinbogo :
I'm going to do an iFixit-style teardown and documentation on how to hook up JTAG and such
[2017-07-10 14:12:12]
martinbogo :
@freaky123 and I will work on a 2-sided PCB w/ level shifters and enough hardware onboard to do debugging. I have a design for a JTAG scanner that uses an ATmega chip ( arduino ) as it's core
[2017-07-10 14:13:26]
martinbogo :
(( Library -- <https://github.com/sowbug/JTAGWhisperer> )
[2017-07-10 14:13:43]
bin4ry :
oh wow that sounds awesome :slightly_smiling_face:
[2017-07-10 14:20:25]
freaky123 :
ok that sounds like a good idea :slightly_smiling_face:
[2017-07-10 18:17:40]
hotelzululima :
martinbogo: did you manage to enable JTAG on MAVIC somehow??
[2017-07-10 18:22:36]
martinbogo :
@hotelzululima I have reset the processor -- it clears the efuses, and effectively unlocks the CPU .. at the same time, this causes the loss of the secure keys
[2017-07-10 18:22:40]
martinbogo :
( as you'd expect )
[2017-07-10 18:22:51]
martinbogo :
However, with the CPU no longer locked down, I can do JTAG scans
[2017-07-10 18:23:54]
martinbogo :
So, I have effectively "bricked" it from a DJI standpoint, since I can't see what's in the secure area .. but at the same time, I can now play with the CPU and load my own unprivileged code, which is fine
[2017-07-10 18:26:03]
freaky123 :
and I can generate a new bootloader if needed to unbrick it
[2017-07-10 18:26:26]
freaky123 :
that doesn't require the specific IAEK of your UREK etc.
[2017-07-10 18:33:09]
martinbogo :
right
[2017-07-10 18:39:58]
freaky123 :
it would require only some small patches ^^
[2017-07-10 19:18:15]
martinbogo :
Okay, back to looking at the board
[2017-07-10 19:18:22]
martinbogo :
I've got the workbench up and running again
[2017-07-10 19:18:49]
martinbogo :
I'm going to keep trying a sidechannel attack to see if I can get arbitrary execution in TrustZone
[2017-07-10 19:23:24]
hotelzululima :
really cool!!
[2017-07-10 20:47:34]
freaky123 :
hopefully you can get it to work :slightly_smiling_face:
[2017-07-11 00:48:16]
hotelzululima :
hmm I wonder if ANY ONE has tried a “chipwhisperer lite” in a power based sidechannel attack to try and snake the private keys out of the trustzone.. (thought I was just reading about something like this?)
[2017-07-11 00:49:22]
hotelzululima :
ie this device <https://newae.com/tools/chipwhisperer/>
[2017-07-11 00:50:15]
hotelzululima :
ie I am not referring to the DJI private keys here just wondering if anyone has violated the integrity of the Trustzone in a similiar attack
[2017-07-11 00:50:37]
hotelzululima :
will look for known breaks
[2017-07-11 01:43:51]
martinbogo :
This chip is brownout protected. It will shutdown/halt
[2017-07-11 01:44:07]
martinbogo :
Almost all ARM chips will halt the PLL tree
[2017-07-11 05:14:54]
hotelzululima :
hmm BGA footprint.. sigh.. makes a HNO3 decap and playing games with UV light/masks a bit harder
[2017-07-11 05:15:31]
hotelzululima :
ie fault induction other than voltage supply variation
[2017-07-11 05:18:58]
hotelzululima :
found this <https://www.blackhat.com/docs/us-15/materials/us-15-Shen-Attacking-Your-Trusted-Core-Exploiting-Trustzone-On-Android-wp.pdf>
[2017-07-11 05:19:55]
hotelzululima :
supposedly rowhammer has has some limited success also <http://www.eshard.com/wp-content/plugins/email-before-download/download.php?dl=9465aa084ff0f070a3acedb56bcb34f5>
[2017-07-11 05:27:42]
hotelzululima :
finding nothing generalized/practical for our sitrep yet
[2017-07-11 14:11:10]
martinbogo :
The BGA is a POP too -- DRAM is sitting right on top of the other die.
[2017-07-11 14:12:06]
martinbogo :
correction -- SRAM, DRAM is external on the LC1860C
[2017-07-12 14:29:11]
martinbogo :
Today is "remove all components from core board #1, and do path tracing
[2017-07-12 14:29:16]
martinbogo :
I have a headache :slightly_smiling_face:
[2017-07-12 15:28:54]
martinbogo :
fuzzing, fuzzing, fuzzing ... it's slow, but it's not boring.
[2017-07-12 15:29:49]
martinbogo :
@freaky123 When you wake up and see this... I have bought a tray of LC1860C chips from HK, blank
[2017-07-12 15:30:19]
martinbogo :
@freaky123 : I have also ordered a steel stencil with the landings of most of the chips on the Mavic, as well as the Phantom 4
[2017-07-12 15:58:33]
hostile :
@martinbogo have you taken a stab at getting firmware dumped from an A3 flight controller?
[2017-07-12 15:58:54]
hostile :
**non** encrypted
[2017-07-12 15:59:07]
hostile :
as all the flight controllers in p3, mavic, etc are basically an A3 slimmed down
[2017-07-12 15:59:20]
hostile :
it would be excellent for @freaky123 to have a clean binary dump
[2017-07-12 16:02:50]
the_lord :
i have A3, N3 and m600 not upgraded for long long time
if you need me to do anything with them please let me know
[2017-07-12 16:15:01]
freaky123 :
I looked at the a3 but the firmware itself is encrypted evrn at the first version :(
[2017-07-12 16:15:34]
martinbogo :
What @freaky123 said
[2017-07-12 16:16:51]
freaky123 :
So I either need todo a side channel attack during upgrade (whuch I'm gonna do soon) or send it to a cracker
[2017-07-12 16:17:25]
freaky123 :
Or maybe some other tricks to get the jtag back working etc.
[2017-07-12 16:17:30]
martinbogo :
@freaky123 : BTW -- no luck getting trustzone DRAM to leak
[2017-07-12 16:17:43]
martinbogo :
Well, I know how to get the JTAG -working-
[2017-07-12 16:17:54]
martinbogo :
but it utterly disables efuses
[2017-07-12 16:18:02]
martinbogo :
that's ...kind of extreme :slightly_smiling_face:
[2017-07-12 16:18:19]
martinbogo :
I think I found JTAG TRST by the way
[2017-07-12 16:18:24]
freaky123 :
Yeah I was talking about the A3 FC ;) but yeah for the LC thats not nice
[2017-07-12 16:18:32]
martinbogo :
so after I finish fuzzing, I'm going to try again for a full boundary scan
[2017-07-12 16:18:47]
freaky123 :
Ok ;)
[2017-07-12 16:19:20]
martinbogo :
Any idea what they did in the ESC's?
[2017-07-12 16:19:26]
martinbogo :
I haven't torn that board apart yet
[2017-07-12 16:19:46]
freaky123 :
Same as the FC encrypted (at least the same header)
[2017-07-12 16:19:48]
martinbogo :
They are very "talky" on the bus
[2017-07-12 16:27:15]
hostile :
yeah @martinbogo I figured you had some sketchy place you could send the A3 and get the image dumped clean. =]
[2017-07-12 16:29:57]
martinbogo :
Yes, and no.
[2017-07-12 16:30:18]
martinbogo :
I have a place I could send an A3 ... but I don't think they would be any better that we are at dumping :slightly_smiling_face:
[2017-07-12 16:32:26]
hotelzululima :
hey @martinbogo you know bunnie?(Huang)?
[2017-07-12 16:34:15]
hostile :
heh someone call Tarnovsky! <https://gcn.com/Articles/2010/02/02/Black-Hat-chip-crack-020210.aspx>
[2017-07-12 16:34:28]
hotelzululima :
hear him mention the fact that some HK/Shanghai firms that do decapping and efuse bypass in the past in private conversations..
[2017-07-12 16:34:48]
hostile :
@martinbogo I assume you read this? naza bootloader hackaday article
[2017-07-12 16:34:55]
hostile :
<https://hackaday.io/project/19995-hacking-dji-naza-m/log/53751-big-dump>
[2017-07-12 16:35:43]
hotelzululima :
@hostile very interesting :slightly_smiling_face:
[2017-07-12 16:37:21]
martinbogo :
@hotelzululima : Yeah .. used to go to the same school :slightly_smiling_face:
[2017-07-12 16:37:29]
martinbogo :
@hotelzululima : Not surprisingly -- I'm a MITERS key-holder
[2017-07-12 16:38:11]
hotelzululima :
cool!
[2017-07-12 16:41:59]
martinbogo :
Bunnie is a little younger than I am, couple years... my favorite thing at MIT was his conversion of a shopping cart into a crazy little go-kart, using a car starter and a battery pack
[2017-07-12 16:42:01]
martinbogo :
Insane thing
[2017-07-12 16:43:48]
martinbogo :
my biggest regret in life ... being invited to join him @Chumby
[2017-07-12 16:43:54]
martinbogo :
... and saying NO
[2017-07-12 16:44:27]
martinbogo :
Even though my internal thought process ended up being right ( that Chumby didn't really have an audience .. it was too ahead of it's time as a toy/gadget ) ... I still regret not going on the adventure.
[2017-07-12 17:33:43]
hotelzululima :
yep I fondly remember chumber have several old ones burried around facility in oakland
[2017-07-12 17:33:48]
hotelzululima :
chumby
[2017-07-12 17:33:58]
hotelzululima :
yes indeed..
[2017-07-14 04:25:41]
hotelzululima :
chomping at the bit for da core board to arrive so I can join the party at the codeface while there are still virgin mavic codecaves to map
[2017-07-14 13:06:16]
freaky123 :
Does anyone know if you can use the main board in combination with the gimbal without all the other parts. Thus using it as vision systrm?
[2017-07-14 13:06:49]
freaky123 :
I know the main board works seperately.. but not sure about the gimbal
[2017-07-14 13:08:16]
freaky123 :
Btw gonna spend some time mapping out the hardware communications between parts. So if anyone is interested to help ;)
[2017-07-14 13:28:48]
freaky123 :
I gonna ad some debug lines to the board and record as much as possible
[2017-07-14 13:29:08]
freaky123 :
I hate the coating
[2017-07-14 13:54:01]
versuher :
An update on the unbricking status (I’m the one who bricked both core board and FC board) - installed the replacement core board today. Things got somewhat better - instead of only three devices (1860, CPLD and UltrasonicMO) assistant is now detecting all but the FC related ones (FlightCtrl, FlightCtrl_Loader, 4xESCs and the Battery). Waiting for the FC to arrive!
[2017-07-14 14:20:01]
freaky123 :
how did you brick your FC?
[2017-07-14 14:25:14]
freaky123 :
ok mapped out the battery TX/RX as well now
[2017-07-14 14:25:22]
freaky123 :
24 and 36
[2017-07-14 14:26:57]
versuher :
@freaky123 I was stupid enough to try the Assistant beta section with module-by-module FW flashing (willing to go 0.800 -> 0.700) and the first device I “upgraded” the fw on was wm220_0306 aka “FlightCtrl”. Surprisingly, assistant reported that it went successful. I then flashed either wm220_0802 (“2100”) or wm220_0801 (“1860") aaand it was all over
[2017-07-14 14:27:25]
freaky123 :
into the fc?
[2017-07-14 14:27:39]
freaky123 :
aha yes that is the encrypted and even signed file you upload
[2017-07-14 14:27:49]
freaky123 :
@the_lord also bricked his FC with that same trick
[2017-07-14 14:28:17]
freaky123 :
problem is prolly the option on there which lets you enable/disable encryption
[2017-07-14 14:28:47]
freaky123 :
when encryption is disabled it will also not check the firmware for validity
[2017-07-14 14:29:02]
freaky123 :
since there will be no header for it to check
[2017-07-14 14:29:07]
martinbogo :
@freaky123 : I thought SCL was on 16?
[2017-07-14 14:29:27]
freaky123 :
letme recheck ^^
[2017-07-14 14:29:41]
freaky123 :
@martinbogo you already got some more pins than this?
[2017-07-14 14:31:21]
freaky123 :
@martinbogo it is deffinately not on 16 but 14
[2017-07-14 14:33:06]
versuher :
well, the core board that has arrived was on 0.400. I tried to upgrade to .800 using the assistant, but mavic was obviously only able to upgrade devices what are responding
[2017-07-14 14:33:23]
freaky123 :
yes that is logical
[2017-07-14 14:33:55]
freaky123 :
there is basically almost no way except for flashing the firmware with jtag to get the FC back
[2017-07-14 14:34:09]
freaky123 :
it's either JTAG or getting it into bootloader mode somehow
[2017-07-14 14:34:28]
martinbogo :
@freaky123 : Updating my map
[2017-07-14 14:34:34]
freaky123 :
so it could be that you can quickly flash it at boot if it stays in bootloader for a while
[2017-07-14 14:34:48]
martinbogo :
@freaky123 : I'm still working on tracing out the LeadCore
[2017-07-14 14:35:11]
freaky123 :
ok np :wink:
[2017-07-14 14:36:05]
freaky123 :
btw there must be some special stuff between the tx/rx on the small pcb which connects to the battery..because the tx/rx pins don't connect directly
[2017-07-14 14:36:09]
freaky123 :
prolly some protection
[2017-07-14 14:38:16]
freaky123 :
@martinbogo btw the main board has 2 main UART lines
- ttyS1: B921600 to FC
- ttyS2: B460800 to camera/gimbal
[2017-07-14 14:38:56]
freaky123 :
could be that ttyS0: B115200 as ultrasonic
[2017-07-14 14:39:26]
martinbogo :
hmm .. maybe
[2017-07-14 14:39:51]
freaky123 :
this is what I read from their config files
[2017-07-14 14:40:00]
freaky123 :
dji.json contains all the internal connections
[2017-07-14 14:40:55]
martinbogo :
did you look for aca nomenclature?
[2017-07-14 14:41:34]
martinbogo :
correction -- ttyacm
[2017-07-14 14:43:06]
martinbogo :
I'm reasonably certain there are not abstract control model serial ports, but you never know
[2017-07-14 14:47:32]
freaky123 :
only ttyACM in there is the FC
[2017-07-14 14:56:21]
martinbogo :
OK
[2017-07-14 14:56:29]
martinbogo :
which is good to know, and a bit scary :slightly_smiling_face:
[2017-07-14 14:56:35]
martinbogo :
ttyACM is always some kind of USB device :slightly_smiling_face:
[2017-07-14 14:56:49]
freaky123 :
I think it they connected it to maybe both uart and usb
[2017-07-14 14:56:57]
freaky123 :
because you can also access the FC SD card
[2017-07-14 14:57:05]
freaky123 :
that is prolly done through usb
[2017-07-14 14:57:10]
martinbogo :
both are abstracted devices, yesh
[2017-07-14 14:57:33]
martinbogo :
which means the SD card may not be being accessed via SDIO, but rather USB->SDIO bridge
[2017-07-14 14:58:15]
freaky123 :
yes indeed.. since the FC must be able to read/write to it as well
[2017-07-14 14:59:04]
hostile :
lsof on the busybox and grep for ttys...
[2017-07-14 14:59:07]
hostile :
shows you all the ones in use
[2017-07-14 14:59:11]
hostile :
and what bins they go to
[2017-07-14 15:00:56]
freaky123 :
yeah but that is the fun part that dji.json even gives names of what they are.. and they all connect to the same type of bins, because of that
[2017-07-14 15:19:58]
freaky123 :
btw <https://fccid.io/pdf.php?id=3146173> comes in handy as well sometimes
[2017-07-14 15:20:04]
freaky123 :
since there most of the labels aren't removed
[2017-07-14 15:24:45]
freaky123 :
tada the final I have on the FC without any salea debugging etc.
[2017-07-14 15:25:11]
freaky123 :
dunno know which way the RX/TX is defined.. so these are as labeled
[2017-07-14 15:32:32]
freaky123 :
now actually waiting on some packet to arrive to got and get a saleae afterwards to analyze all the connections
[2017-07-14 15:33:07]
freaky123 :
can you actually connect 2 saleae's and record twice the amount of lines?
[2017-07-14 15:33:47]
freaky123 :
I should have like 2 pro 16's
[2017-07-14 15:36:09]
freaky123 :
btw @martinbogo should we also just make a pinout on the wiki of all the boards?
[2017-07-14 15:39:45]
freaky123 :
did someone already spends some time on tracing the gimbal? @channel
[2017-07-14 15:44:30]
hyprmtr :
@freaky123 I see the baro in that first photo. There seems to also be a baro on the wifi module in the rear of the Mavic under the GPS as well. Unless, I am mistaking that chip being a baro in the wifi module. Some have claimed to have removed the wifi PCB and flying ok without any issues under stock firmwares.
[2017-07-14 15:46:15]
hyprmtr :
A pin out would be excellent.
[2017-07-14 15:46:57]
freaky123 :
ok will check
[2017-07-14 15:47:06]
freaky123 :
in the front is no bary right? only a magneto?
[2017-07-14 15:48:39]
freaky123 :
checked front no baro
[2017-07-14 15:50:37]
freaky123 :
wifi chip could hold a baro, but don't have the tools here to remove the shielding properly
[2017-07-14 15:54:37]
freaky123 :
and when there is a baro on the wifi board it is connected to the main board.. thus indeed most likely not changing anything for the FC
[2017-07-14 15:55:18]
freaky123 :
yeah I saw that hole.. there indeed could be baro underneath it, but you need to remove the casing to see that
[2017-07-14 15:57:39]
hyprmtr :
I haven't removed my wifi module to test but some have claimed the copter works fine without the wifi module.
[2017-07-14 15:58:18]
freaky123 :
that is not a suspect.. that is a baro
[2017-07-14 15:58:27]
hyprmtr :
Yes the front small board is the compass/mag.
[2017-07-14 16:00:05]
hyprmtr :
Yes, I believe that is the primary baro on the main board as that is the same chip number as some of my other flight controllers.
[2017-07-14 16:00:23]
freaky123 :
a MS5611 or similar type to be precise
[2017-07-14 16:01:35]
freaky123 :
this FC board handles everything from flying, ESC's, GPS etc. so indeed this is the main barometer used by the FC
[2017-07-14 16:02:23]
freaky123 :
so all sensors are attached to this board
[2017-07-14 16:03:07]
freaky123 :
still have 1 question about the gimbal etc. does someone know if the gimbal has it's own sensors?
[2017-07-14 16:03:22]
hyprmtr :
Ok wonderful. I am going to test deleting the wifi board for myself in the next day or so. I want to know 100% sure it will function with out any trouble codes.
[2017-07-14 16:03:24]
freaky123 :
because else it would also have a connection to the gimbal.. but then it has to go through the main board
[2017-07-14 16:03:42]
freaky123 :
@hostile can sort of confirm it works without the wifi module ^^
[2017-07-14 16:05:52]
hyprmtr :
As for as the gimbal, have you inspected the gimbal PCB for it's own gyro? It would make sense to me to use the main FC gyro/acc for gimbal function also. Unless cycle time would be effected. Using the main gyro for gimbal function is similar to what one can do using an APM/Pix FC.
[2017-07-14 16:07:02]
the_lord :
<https://youtu.be/AtwvvXvHoNw>
This guy is flying without wifi module
[2017-07-14 16:08:00]
hyprmtr :
I have seen that @lord. I've asked him about it without response.
[2017-07-14 16:08:20]
hostile :
It does fly without it... I did not test POS hold.
[2017-07-14 16:08:28]
hostile :
myst obviously fly with switch set to SDR
[2017-07-14 16:08:43]
hostile :
I stabbed mine accidentally trying to access the DIKFER port
[2017-07-14 16:08:53]
hostile :
under the LED to get to AMbarella SoC TTY (over USB)
[2017-07-14 16:09:20]
freaky123 :
I confirmed that the fc must have some connection to the gimbal
[2017-07-14 16:09:34]
freaky123 :
so FC -> gimbal has direct connection
[2017-07-14 16:10:10]
the_lord :
as i understand the gimbal adjusts its angle based on FC feed back
[2017-07-14 16:10:24]
hyprmtr :
@hostile so you did not confirm gps mode without wifi module correct?
[2017-07-14 16:12:53]
hostile :
no
[2017-07-14 16:13:40]
freaky123 :
@hyprmtr I think it should work since the gps is connected to the fc directly
[2017-07-14 16:13:46]
freaky123 :
as can be seen in my figure
[2017-07-14 16:14:18]
hyprmtr :
Ok great. Thank you.
[2017-07-14 16:14:32]
hostile :
anyone here sniffed the FLYC param changes hit the UART to the FC yet? Can we use this? <https://github.com/mefistotelis/phantom-firmware-tools/tree/master/comm_dissector>
[2017-07-14 16:15:29]
freaky123 :
that should be possible @hostile but that uart is in the flex ribbon cable :disappointed:
[2017-07-14 16:15:36]
freaky123 :
I hate those cables
[2017-07-14 16:15:45]
hostile :
I mean MITM the comms from the linux side.
[2017-07-14 16:15:53]
hostile :
so we can write a native app
[2017-07-14 16:16:04]
hostile :
there is already a test script that talks to the UART of the FC
[2017-07-14 16:16:05]
freaky123 :
yes but the main board to fc board is a flex ribbon
[2017-07-14 16:16:40]
hostile :
I mean... Assistant.app clearly sends them... and they HAVE to be set from the linux side, right? sent via dji_flight, which we can strace, etc.
[2017-07-14 16:16:50]
hostile :
then we spoof the bytes natively on the drone
[2017-07-14 16:16:56]
hostile :
not **physical** connection
[2017-07-14 16:17:03]
freaky123 :
I'm gonna extend the parser from mefistotelis after I connected it to the fc and recorder the stuff
[2017-07-14 16:17:43]
freaky123 :
yes that can be done.. but is more difficult then expected.. since of the forwarding
[2017-07-14 16:17:57]
freaky123 :
best practice is to hook some functions of the duml framework so file
[2017-07-14 16:18:13]
hostile :
"since of the forwarding" what do you mean...
[2017-07-14 16:18:25]
freaky123 :
and changing it requires also to change the crc's etc.
[2017-07-14 16:18:38]
freaky123 :
because all the forwarding is set by the dji.json
[2017-07-14 16:18:42]
hostile :
or pre capturing what changes need to be =]
[2017-07-14 16:18:49]
freaky123 :
so in theory you can add your own program as mitm
[2017-07-14 16:18:49]
hostile :
"stop dji_flight"
[2017-07-14 16:18:56]
hostile :
aye
[2017-07-14 16:18:58]
hostile :
got ya
[2017-07-14 16:19:16]
freaky123 :
@kilrah where are those sensors?
[2017-07-14 16:19:24]
kilrah :
but that would likely be already processed info
[2017-07-14 16:19:24]
freaky123 :
and what does it need from the FC?
[2017-07-14 16:19:42]
kilrah :
on other less integrated DJI devices it goes throught he CAN bus
[2017-07-14 16:20:26]
kilrah :
I'd imagine much of the tech is reused here and there's a bus that connects all components with a similar low bandwidth link
[2017-07-14 16:20:56]
kilrah :
sensors would have to be in the innermost part i.e. same place as image sensor
[2017-07-14 16:21:04]
freaky123 :
yeah every A3 based device is basically the same
[2017-07-14 16:21:22]
freaky123 :
aha that explains the extra wires
[2017-07-14 16:21:54]
freaky123 :
so the my guess is: image sensor output = flex ribbon, sensors + motors = loose cables
[2017-07-14 16:22:00]
kilrah :
you have a full IMU in the FC, a full IMU in the gimbal and with that you can know the angle of one relative to the other
[2017-07-14 16:22:33]
freaky123 :
yes and prolly the stm32f0 on top handles the calculations
[2017-07-14 16:23:25]
hostile :
every time I hear the startup tone I wanna go "Got Ya Bitch" in the same rhythm.
[2017-07-14 16:23:42]
the_lord :
the gimbal's gyro is inside the cam itself along with the cam photo sensor
[2017-07-14 16:24:40]
freaky123 :
oke nice
[2017-07-14 16:24:56]
hans112 :
The loose cables are for the image I think ??
[2017-07-14 16:25:36]
freaky123 :
why are those the image?
[2017-07-14 16:25:56]
freaky123 :
most of the time they use flex ribbons for the image sensors
[2017-07-14 16:26:34]
hostile :
/system/bin/test_fc.sh
/system/bin/test_fc_status.sh
/system/bin/test_fc_usb.sh
[2017-07-14 16:26:39]
hostile :
those are the scripts I was mentioning btw
[2017-07-14 16:26:56]
hostile :
130|root@wm220_dz_ap0002_v1:/ # cat /system/bin/test_fc.sh
dji_mb_ctrl -S test -R diag -g 3 -t 6 -s 0 -c 1
root@wm220_dz_ap0002_v1:/ # dji_mb_ctrl -S test -R diag -g 3 -t 6 -s 0 -c 1
Send message, from 0807, to 0306, msg_id: 00000001, attrib: 00000040, len: 0, data:
Resp message, len = 31, data:
00 00 30 38 52 44 45 31 35 30 30 31 30 32 4c 38
00 00 17 00 04 22 10 0d 02 03 09 00 00 00 01
[2017-07-14 16:27:52]
the_lord :
in mavic the hair wire for the image and ribon for motors
[2017-07-14 16:27:53]
freaky123 :
aha @hans112 I think you're right.. because those go to the roll axis as well.. while the flex ribbon ends 1 before that
[2017-07-14 16:28:47]
hans112 :
I hope so... If not, I need to order the other cable to fix someones drone :joy:
[2017-07-14 16:28:53]
freaky123 :
@hostile those tests are just simple hello messages with a response
[2017-07-14 16:29:05]
freaky123 :
haha ^^
[2017-07-14 16:29:22]
hostile :
indeed... but show that we can speak to the FC from the linux side... which was my point
[2017-07-14 16:29:30]
hostile :
sans physical shit
[2017-07-14 16:29:40]
freaky123 :
aha oh that's easy
[2017-07-14 16:29:57]
hostile :
yeah so point was... we can adjust params sans assistant too
[2017-07-14 16:30:01]
freaky123 :
dji_mb_ctrl is a program which can basically send duml messages
[2017-07-14 16:30:06]
hostile :
for folks with root , with a simple compiled binary for the drone
[2017-07-14 16:30:17]
freaky123 :
btw I don't think this protocol is called duml, but MB
[2017-07-14 16:30:29]
hostile :
Mother Bitch?
[2017-07-14 16:30:40]
the_lord :
LoL
[2017-07-14 16:30:44]
freaky123 :
yes something like that ^^
[2017-07-14 16:30:49]
martinbogo :
Heh
[2017-07-14 16:31:12]
hostile :
Maybe Mother BRain is better... and we are like Samus in Metroid coming for her!
[2017-07-14 16:31:17]
the_lord :
there is command which disable NFZ but not persistent you need to send it each time before take off
[2017-07-14 16:31:31]
martinbogo :
damnit ... VIP project was just handed to me ... teardown + reverse of an unknown board
[2017-07-14 16:31:45]
martinbogo :
I'm going to have to put aside the tracing of the mainboard for a day or two
[2017-07-14 16:31:51]
martinbogo :
grrr
[2017-07-14 16:32:00]
martinbogo :
but .. it's what pays the bills
[2017-07-14 16:32:02]
hostile :
**salute**
[2017-07-14 16:32:04]
kilrah :
argh :grimacing:
[2017-07-14 16:32:27]
martinbogo :
That said, I just scanned the mainboard sans chips. when I get home this evening ( ~6 hrs ) I'll upload a high resolution scan to the channel
[2017-07-14 16:32:58]
martinbogo :
I put the board into a bath to dissolve away the solder mask.. so we'll have a naked board by the end of the day, and I'll do another scan
[2017-07-14 16:33:11]
martinbogo :
then do a high-contrast overlay of the traces
[2017-07-14 16:33:28]
kilrah :
yum
[2017-07-14 23:10:41]
hotelzululima :
headed south to my other facility to pick up deliveries and my core board A..
[2017-07-14 23:12:59]
hotelzululima :
It would be of extreme help as I will be moving quick if someone who has a core board A on the bench could post some high res photos of their power wire soldering job to the board so I can play monkey see monkey do :slightly_smiling_face: (and anything else you can think of that I should know?)
[2017-07-14 23:18:35]
hotelzululima :
Thanx so much @the_lord !!
[2017-07-14 23:19:21]
hotelzululima :
and looks like I can just use any 3S xt60 with that mod
[2017-07-14 23:20:31]
hotelzululima :
the photo is quite instructive will bring a cpu fan and HS back with me… thanx so much
[2017-07-14 23:39:34]
hotelzululima :
and YAY just checked with my SO
[2017-07-14 23:40:00]
hotelzululima :
and my core board A delivered down south !!
[2017-07-14 23:42:43]
hostile :
Pow
[2017-07-15 00:46:03]
hotelzululima :
fucking fingers
[2017-07-15 00:46:48]
hotelzululima :
leaving at sundown and trying to avoid pinging alerts on the car cpu have to be back at 9am for another smog test attempt
[2017-07-15 05:22:46]
hostile :
lawl
[2017-07-15 05:53:55]
hotelzululima :
and no spaghetti heat shrink was some around here before I left (damn I hate losing shit in this house!!)..
[2017-07-15 05:55:19]
hotelzululima :
or would have soldered leads on already and set on an ice pack for cooling in lieu of a fan and heat sink(CHOMPING AT THE FUCKING BIT HERE!!!)
[2017-07-15 15:41:59]
martinbogo :
Juuuuust a bit :slightly_smiling_face: I used a heatsink from an old 486 processor :slightly_smiling_face:
[2017-07-15 15:43:49]
hotelzululima :
All of that he long gone 850 square ft this entire house so periodic purges are in order sitting outside of [frys.com](http://frys.com) waiting for 900
[2017-07-15 15:44:21]
hostile :
lol and here I just run mine till it overheats with zero fucks
[2017-07-15 15:44:27]
hostile :
let it cool and then fire it back up
[2017-07-15 15:44:33]
hostile :
usually enough time in between git commits :wink:
[2017-07-15 15:44:42]
martinbogo :
@hotelzululima : Heh.. same here :slightly_smiling_face: I'm not a packrat ... just got lucky when passing by the Goodwill Computer ReStore
[2017-07-15 15:45:24]
martinbogo :
@hostile : Careful, even though the CPU does a fairly good job of protecting itself, I still reccomend a simple Penny-nickel-Penny heatsink
[2017-07-15 15:46:05]
martinbogo :
( sand one side of a penny flat, pre 1983 ( nearly pure copper alloy ) the rest you can stack using your favorite thermal compound
[2017-07-15 15:46:36]
martinbogo :
For the heat dissapation of the LC1860, I recommend an 8 coin stack
[2017-07-15 15:47:07]
hostile :
heh ZFG is a lifestyle…
[2017-07-15 15:47:47]
hostile :
been using mine like this since like June FWIW… **shrug**
[2017-07-15 15:48:05]
hostile :
=]
[2017-07-15 15:48:11]
martinbogo :
For EU -- 10c / 5c / 10c ( starting with the 10c because it's a copper alloy )
[2017-07-15 15:48:40]
martinbogo :
@hostile : I LOVE that one :slightly_smiling_face:
[2017-07-15 15:49:00]
martinbogo :
@hostile : I give fucks, but that's because for me -- Hardware is Life
[2017-07-15 15:49:38]
hostile :
very often Quick & DIrty!
[2017-07-15 15:49:39]
hostile :
=]
[2017-07-15 15:50:32]
martinbogo :
So, I've reached the limit of my ability to trace out some mystery pins on the LC1860 ... so, I've engaged Serious Help(tm)
[2017-07-15 15:51:30]
martinbogo :
I've asked Jeri Ellsworth if she wants to have some fun, with nitric acid ... and I've also asked Bunnie
[2017-07-15 15:51:33]
hostile :
thx for your work dude
[2017-07-15 15:51:34]
hostile :
really
[2017-07-15 15:51:35]
martinbogo :
Jeri is thinking about it.
[2017-07-15 15:51:38]
hostile :
invaluable
[2017-07-15 15:51:52]
martinbogo :
Bunnie just woke up ( he's in Singapore ) .... both kick ass in serious ways :slightly_smiling_face:
[2017-07-15 15:52:37]
hostile :
pow
[2017-07-15 15:52:41]
martinbogo :
HOWEVER -- I remain hopeful that the chip -can- be reset to "factory fresh" because there is a paragraph I translated in the summary datasheet that says so
[2017-07-15 15:52:50]
hostile :
well I know what your time CAN cost… so thanks for the donation brother
[2017-07-15 15:52:56]
martinbogo :
Bah, this is for fun.
[2017-07-15 15:53:09]
hostile :
indeed… that does not take away from the effort and time spent
[2017-07-15 15:53:13]
hostile :
and I appreciate it
[2017-07-15 15:53:17]
martinbogo :
AS LONG as nobody gets greedy, or stupid, and keeps this effort either open source or damned-close-to-freeware
[2017-07-15 15:53:38]
hostile :
I’d like to think it has been pretty open flowing! =]
[2017-07-15 15:53:43]
hostile :
dropping shit like it is hot
[2017-07-15 15:54:04]
martinbogo :
I :heart: UAV's, ROV's, and all things related to them .. it's what I did at MIT, it's what I've been doing for 20+ years now, and the stupidity/greed/etc around UAV's is hurting the whole community
[2017-07-15 15:54:31]
martinbogo :
If DJI had .. say .. licensed and used WindRiverSystems QNX, or come up with their own RTOS, then I wouldn't give a shit.
[2017-07-15 15:55:08]
martinbogo :
But they are using Linux, and taking advantage of the huge body of work of people who want Free Software and Open Source ... so, until they change their tune, I'm in it till they scream
[2017-07-15 15:55:44]
hostile :
aye
[2017-07-15 15:55:47]
hostile :
nailed it
[2017-07-15 15:56:11]
martinbogo :
and I am getting 80% sure at this point that the flight control system they wrote is ALSO based on open source, and that they took something that was being written as the next generation ARMpilot and used it as the base of the dji_monitor and other daemons
[2017-07-15 15:56:29]
martinbogo :
harder to prove, will require decompiling
[2017-07-15 15:57:27]
martinbogo :
@hostile : The github is up to date, and outside of protecting our core exploits ( and finding more to have 'just in case DJI gets clever' ) everything is published
[2017-07-15 15:57:53]
martinbogo :
even the 'secret sauce' is on a github ( thank you @freaky123 ) so that for sure, someone will benefit from it
[2017-07-15 15:59:23]
freaky123 :
Yeah thats why I wanna have the binaries of the fc
[2017-07-15 15:59:36]
freaky123 :
But thats a work in progress
[2017-07-15 16:00:01]
freaky123 :
Just went and get my saleae to get some more info out of it
[2017-07-15 16:02:19]
hostile :
@martinbogo in OpenPilot we always suspected this… now Ardu team also making claims… likely bits of both and PX4 mixed in TBH
[2017-07-15 16:02:51]
martinbogo :
Same here .. I have the leadcore mostly instrumented now
[2017-07-15 16:02:56]
martinbogo :
AAAAND .. here's some good news
[2017-07-15 16:03:11]
martinbogo :
I got LeadCore to SEND ME a LeadCore 1860C -- DEV KIT
[2017-07-15 16:03:17]
martinbogo :
Expected arrival ~8/1
[2017-07-15 16:03:39]
freaky123 :
Nice
[2017-07-15 16:03:56]
martinbogo :
This will get me a proper set of source code to U-boot, and they extracted a promise for me to port UEFI to LC1860
[2017-07-15 16:04:04]
martinbogo :
which I've already done a lot of work on
[2017-07-15 16:04:08]
martinbogo :
so, easy promise
[2017-07-15 16:06:14]
freaky123 :
Yes and U-boot you can share ;)
[2017-07-15 16:06:20]
freaky123 :
As of gpl ^^
[2017-07-15 16:10:49]
freaky123 :
Btw I guess you will also receive the documentation then of the LC :)
[2017-07-15 16:14:01]
freaky123 :
Btw @martinbogo if you're stuck with the main board tracing you can always help with the fc :stuck_out_tongue:
Btw did you already make the scans of the main pcb?
[2017-07-15 16:15:00]
martinbogo :
not yet ... the solder mask did not dissolve in the usual solution I use
[2017-07-15 16:16:10]
martinbogo :
So I've switched to methyl ethyl ketone
[2017-07-15 16:16:33]
martinbogo :
It was strangely impervious to LC8C
[2017-07-15 16:17:09]
kilrah :
Wow nice!
[2017-07-15 16:17:47]
freaky123 :
But you also made a scan with the solder mask right?
[2017-07-15 17:22:56]
martinbogo :
No .. too bumpy
[2017-07-15 17:23:08]
martinbogo :
Oh! Yes .. for reference .. not a scanner scan though
[2017-07-15 17:23:23]
martinbogo :
I took a 21 megapixel image, on a flat backround, with flat lighting
[2017-07-15 17:23:46]
martinbogo :
i'll merge the 1200 dpi scan with it, after ( thank you Gimp )
[2017-07-15 17:24:29]
freaky123 :
:)
[2017-07-15 18:21:46]
martinbogo :
That coin trick was taught to me yeaaaaaars ago by Ira Pohl ... he was my professor, then later my colleague after UCSC/MIT ... he's a smart cookie
[2017-07-15 18:22:05]
martinbogo :
"Almost the Worlds Cheapest Heatsink"
[2017-07-15 18:23:02]
martinbogo :
In truth, you probably only need four pennies, and four nickels... as long as there is some flow. Use a nice thermal paste, and remember to keep it thin. Paste is weird
[2017-07-15 19:46:03]
freaky123 :
Hahaa
[2017-07-15 19:46:10]
freaky123 :
Nice
[2017-07-15 20:56:30]
ender :
hehe, i love to go quick’n dirty, great stuff :slightly_smiling_face:
[2017-07-15 21:04:34]
hotelzululima :
actually since copper pennies hard to come by lately I was going to use the cladded quarters(if I cant find copper pennies) and grind down to the copper layer
[2017-07-15 21:06:07]
hotelzululima :
have to check oakland lab would have sworn I have a sheet of heat sink material around I can cut a chunk off of…
[2017-07-16 03:31:20]
vk2fro :
I have ordered a power meter so I can test the .DJI_config files for IOS to see if they work. I'll need to pull apart my TX and patch in behind the antenna and measure the power output.
[2017-07-16 06:53:15]
rulppa :
Configs works for mavic only atm, SDR related, measured and tested. Dji added something to go4 code to prevent working on other platforms. @v2fro
[2017-07-16 06:54:53]
hostile :
wrong room?
[2017-07-16 06:54:57]
rulppa :
Check first ”if” for product code 13 and 21
[2017-07-16 06:55:36]
rulppa :
21 is kumquat x, mavic. Other is kumquat L, idk what that is.
[2017-07-16 06:56:14]
rulppa :
Yeah wrong room but he kinda asked and i bave done the RF measuring
[2017-07-16 07:35:32]
vk2fro :
ok so the config file only boosts the power on the aircraft?
[2017-07-16 10:00:59]
freaky123 :
finally gonna instrument my board to listen in onto some of the FC communication
[2017-07-16 12:35:18]
ender :
Hi ! Just for your viewing pleasure 5 pics of my Antennae experiments for the Spark. Easy to mod and even elegant using the UFL2RP-SMA pigtails by maxuav… All Antennae are Dualband so i can work if Spark had a fallback to 5,8G. The two Omni costed 9,99 Euro for a pack of two, the Alfa APA M25 about 15 Euros each. If the Nanosync would be dualband i would **consider** but the way it is my most beloved setup is the mixed one with one Omni and one directional. All Antennae fit in my super tiny $12 chinese Spark bag.
[2017-07-16 12:36:51]
ender :
The boosters dont perform well and if i knew FCC is around the corner i would not have bothered. They mess up SNR. Maybe useful in really crowded area but i dont dig cities…
[2017-07-16 12:37:10]
ender :
I also have 2 better SunHans 5W but that somehow is BS for a tiny Spark :slightly_smiling_face:
[2017-07-16 12:37:47]
ender :
I am discussing Antenna things with Fredz and he asked for the fotos, i can remove them in a snap if you feel that is spam here…
[2017-07-16 12:46:10]
freaky123 :
aha.. now I know why there are also i2c lines going to the GPS.. there is a magneto there as well xD
[2017-07-16 12:46:16]
freaky123 :
so one up front and one in the back
[2017-07-16 12:47:14]
freaky123 :
it's not really spam.. all hardware stuff can be discussed here.. although generaly we're talking about some more low-level stuff
[2017-07-16 12:50:45]
ender :
yup
[2017-07-16 12:54:51]
freaky123 :
ok lest start with battery connection ^^
[2017-07-16 12:57:03]
ender :
I actually would prefer to kill a battery (Spark or Mavic) and add batteries on that side to keep smart battery stuff instead of going the “3rd party” way and loosing “smartness”…
[2017-07-16 12:59:30]
freaky123 :
I'm trying to reverse the protocol
[2017-07-16 12:59:40]
freaky123 :
to open up the market for self made batteries
[2017-07-16 13:02:54]
ender :
okay, so still using a small embedded thingy on the 3'rd party batteries… WOuld be nice to have the choice, not just for price but to have lighter / heavier packs for all purposes…
[2017-07-16 13:05:11]
martinbogo :
@ender polar coil antennas, tuned, would be better.
[2017-07-16 13:06:47]
martinbogo :
@ender : I have a design I've got PCB's ready for ... should increase sensitivity by 12dBi
[2017-07-16 13:06:57]
martinbogo :
sensitivity/gain
[2017-07-16 13:08:53]
ender :
@martinbogo as i play around with my Spark mostly the price / size should make sens in relation to the Spark of course :slightly_smiling_face: I am actually most astonished about the clearly improved performance of the 9,99 EU Dual Band Antennas. And they look smart as well :slightly_smiling_face:
[2017-07-16 13:09:48]
ender :
@martinbogo Dou you have plots for your pcb design ? The APA-M25 are a BIT too asymetrical for my taste. Have yet to find smaller & more forgiving Dual Band Antennae.
[2017-07-16 13:10:21]
ender :
probably i could use the PCB Antennae from the Bebop 2 craft :wink:
[2017-07-16 13:23:52]
freaky123 :
battery RX/TX is 3.3V logic
[2017-07-16 13:24:28]
freaky123 :
TX is clearly 115200 baud
[2017-07-16 13:24:46]
freaky123 :
but RX is something different
[2017-07-16 13:25:06]
freaky123 :
oh corrected.. both 115200 xD
[2017-07-16 13:25:12]
ender :
haha
[2017-07-16 13:25:12]
freaky123 :
failing.. left the autobaud button on
[2017-07-16 13:25:14]
freaky123 :
hahaha
[2017-07-16 13:26:37]
ender :
It blows my mind, you guys are expanding the borders of the known universe and i have to do some serious hedge cutting :wink: cya !
[2017-07-16 13:31:48]
freaky123 :
actually now need to write a saleae -> PCAP and then I can use wireshark to analyze it
[2017-07-16 13:32:55]
freaky123 :
I really need a new pc with a lot more memory xD
[2017-07-16 13:33:17]
freaky123 :
and disk space
[2017-07-16 13:34:22]
freaky123 :
but the new mac pro is a bit expensive.. :disappointed: maybe when I get my taxes back and earn some money
[2017-07-16 13:37:19]
freaky123 :
just to show how this is done
[2017-07-16 13:37:40]
freaky123 :
not the nicest way.. but it is weekend and my lab is closed
[2017-07-16 13:48:05]
freaky123 :
pin 21 contains data
[2017-07-16 13:48:11]
freaky123 :
my guess is SPI
[2017-07-16 13:49:25]
freaky123 :
wait.. incorrect UART
[2017-07-16 13:49:29]
freaky123 :
xD
[2017-07-16 13:49:33]
freaky123 :
failing really hard
[2017-07-16 13:52:41]
freaky123 :
B230400
[2017-07-16 13:52:45]
freaky123 :
3.3V logic
[2017-07-16 13:53:11]
freaky123 :
now lets see who it is talking to and where it is coming from ^^
[2017-07-16 13:57:58]
freaky123 :
0x12 -> 0x03
1800 -> 0300
Binocular(COMM_DEV_VISION_SS) -> FC
[2017-07-16 13:58:11]
freaky123 :
so from vision to FC
[2017-07-16 13:58:39]
freaky123 :
so for the FC it is an RX line
[2017-07-16 13:59:39]
freaky123 :
ok got to add some more debug wires now.. the others were not interesting and just low/high, so prolly some enable/disable GPIO lines
[2017-07-16 14:01:36]
freaky123 :
20 is low and 19 is NC
[2017-07-16 14:02:36]
freaky123 :
really need to buy a better soldering iron
[2017-07-16 14:03:55]
freaky123 :
@channel is someone advising something different then a HAKKO FX-888D? Or build one myself?
[2017-07-16 14:26:54]
freaky123 :
btw since 19 is NC(meant floating actually) it could well be that this can be used to put it into bootloader or something like that
[2017-07-16 14:27:16]
hostile :
boot0 jumper
[2017-07-16 14:27:22]
hostile :
for the stm32
[2017-07-16 14:27:52]
freaky123 :
but gonna instrument my board a bit more now and make full recording of all pins at the same time
[2017-07-16 14:54:10]
digital1 :
Boom that's the way :sunglasses:
[2017-07-16 14:59:12]
vk2fro :
You need to cut the orange wire to defuse it :wink:
[2017-07-16 14:59:48]
vk2fro :
or is it green, or white... I forget :wink:
[2017-07-16 15:11:42]
freaky123 :
^^
[2017-07-16 15:12:00]
freaky123 :
they got some funny baudrates xD
[2017-07-16 15:12:46]
martinbogo :
@freaky123 : I use a hakko 900 series, but the 888D is -amazing- with the right tips
[2017-07-16 15:13:07]
martinbogo :
@freaky123 : Yeah, the serial lines are funky.
[2017-07-16 15:13:27]
freaky123 :
B960000 ^^
[2017-07-16 15:14:13]
martinbogo :
@ender : I do have gerbers for my PCB ... waiting to get back the test board from @laen at OSHpark.
[2017-07-16 15:14:30]
martinbogo :
@ender : I also have a coil template, for the antenna winding.
[2017-07-16 15:17:50]
martinbogo :
@ender : It will be an FPVLR antenna -- it will require four pieces of FR4 ( or laser cut acrylic ) to hold the wound antenna
[2017-07-16 15:20:57]
freaky123 :
that high speed bus is with the camera :wink:
[2017-07-16 15:21:11]
freaky123 :
ahh fuck I forgot to power on my cam xD
[2017-07-16 15:21:13]
freaky123 :
^^
[2017-07-16 15:23:24]
freaky123 :
if I wanna make a complete log I need that
[2017-07-16 15:23:28]
freaky123 :
also add my gps again
[2017-07-16 15:25:43]
freaky123 :
already figured out some more pins by doing this ^^
[2017-07-16 15:25:49]
freaky123 :
so we're getting somewhere here
[2017-07-16 15:26:30]
freaky123 :
35 - RX CAM
32 - TX VISION_SS
21 - RX VISION_SS
[2017-07-16 15:28:08]
freaky123 :
funny that the cam messages also come with the gimbal off ^^
[2017-07-16 15:36:04]
ender :
@martinbogo soundy yummie :slightly_smiling_face: doyou have a size estimate for the finished product ?!
[2017-07-16 15:41:18]
martinbogo :
@ender : Should be just a little wider -- it extends 1cm wider than the top of the remote itself, with a hinge to help you align the antenna...
[2017-07-16 15:41:54]
ender :
great, if “we” manage to fix the Spark to 2,4G it would be nice for the little bird as well…
[2017-07-16 15:42:13]
martinbogo :
it's ONLY directional ... I am thinking of making a "double bunny" where one is a coil antenna ( directional +6dBi ) and the other is a wound omnidirectional pole antenna ( +8dBi )
[2017-07-16 15:42:25]
freaky123 :
@martinbogo you can update your map as well ^^ got some more stuff in there
[2017-07-16 15:42:37]
ender :
yes, mix of dir + omni is my > 67% setup
[2017-07-16 15:43:00]
martinbogo :
Updated. Thank you for tracing out the Tx/Rx
[2017-07-16 15:43:06]
martinbogo :
That makes my job easier
[2017-07-16 15:43:09]
martinbogo :
The LED's are nice :slightly_smiling_face:
[2017-07-16 15:43:28]
martinbogo :
Back in ~30min
[2017-07-16 15:43:39]
martinbogo :
need to fix my partner's car -- the AC is leaking into the passenger cabin
[2017-07-16 15:43:39]
freaky123 :
haha yes.. I was like what are these lines doing.. slowly on/off
[2017-07-16 15:44:03]
freaky123 :
and then thought the LED's and checked them and based on the pattern found the colors
[2017-07-16 15:44:07]
martinbogo :
@freaky : Took 24 hours for me to dissolve away the solder mask -- but it's done
[2017-07-16 15:44:13]
freaky123 :
nice :smile:
[2017-07-16 15:44:22]
martinbogo :
It's in the dryer now ( packed with dessicant ) and I'll scan it later this afternoon
[2017-07-16 15:44:24]
freaky123 :
np gl fixing the car
[2017-07-16 15:44:28]
martinbogo :
then do a high-contrast scan
[2017-07-16 15:44:29]
freaky123 :
:slightly_smiling_face:
[2017-07-16 15:46:05]
freaky123 :
this is like 5s view
[2017-07-16 15:46:42]
freaky123 :
some look like they have similar noise as some data pins and thus are prolly like voltage for that section etc.
[2017-07-16 15:48:40]
freaky123 :
thus pin 23 is picking up noise from pin 21 (RX Vision) so could be the power to that system or smthing like that
[2017-07-16 15:49:58]
freaky123 :
or could also be noise from closeby data
[2017-07-16 17:38:46]
hotelzululima :
back home and what did I find by the workbench.. a roll of heavy gauge copper foil I was using to fab GPS RF Shields for the failed 3DR IRIS…. heat sinks here we come after dog walks…
[2017-07-16 19:20:14]
hostile :
use a smaller wire as a jumper...
[2017-07-16 19:22:53]
hotelzululima :
thanx thinl I will rework with smaller conductors!
[2017-07-16 19:23:41]
hotelzululima :
or I could simply run it in the solder jig :slightly_smiling_face:
[2017-07-16 19:24:10]
hotelzululima :
glsad I had tha old heavy copper foil from IRIS->GPS shielding experiments…
[2017-07-16 19:24:23]
hotelzululima :
no pennies necessary!!
[2017-07-16 19:25:03]
hostile :
=]
[2017-07-16 19:31:36]
the_lord :
make the wires flat to the board to not make tension on soldering points
[2017-07-16 19:58:29]
gcbrent :
ahhh the iris
[2017-07-16 19:58:33]
gcbrent :
I had a dev one
[2017-07-16 20:02:15]
ender :
I had an Iris too, only for me it was a Large Format Proof printer :stuck_out_tongue:
[2017-07-16 20:02:34]
ender :
wouldnt fly even for a minute…
[2017-07-16 20:02:48]
gcbrent :
I modded the shit out of mine
[2017-07-16 20:03:07]
gcbrent :
had a 1W vtx on mine
[2017-07-16 20:03:09]
hotelzululima :
ITS frisbee time for da Doberman.. headed for da beach bbl…
[2017-07-16 20:03:31]
gcbrent :
front mounted gyro (when there really wasn't many around then!)
[2017-07-16 20:03:42]
gcbrent :
spot light, nav lights
[2017-07-16 20:03:48]
gcbrent :
all switchable
[2017-07-16 20:04:11]
gcbrent :
I a tech from way back
[2017-07-16 20:04:20]
gcbrent :
got my first soldering iron at 8yo
[2017-07-16 20:04:44]
gcbrent :
now I'm in venture cap
[2017-07-16 20:04:55]
gcbrent :
but still build IoT devices
[2017-07-16 20:05:05]
gcbrent :
good fun
[2017-07-16 20:05:53]
the_lord :
i have the threebond (white/black) which used in DJI repair centers
[2017-07-16 20:05:57]
hotelzululima :
as the analysis another pilot and I did on xcoptercalc showed when the IRIS kept failing to live up to claimed specs.. it was a VERY poorly thought out/calculated design is why it never met specifications
[2017-07-16 20:07:04]
gcbrent :
yeah it was a shame. had so much promise but so many issues
[2017-07-16 20:07:11]
hotelzululima :
I solder my first tube xmitter together in 1957 btw I was 6 at the time working under the tutlelage of my Geek dad(Sac pilot and all around nerd)
[2017-07-16 20:07:12]
gcbrent :
spent a fortune on that
[2017-07-16 20:07:24]
gcbrent :
lol
[2017-07-16 20:07:43]
gcbrent :
I have an ultra geek dad too
[2017-07-16 20:07:45]
hotelzululima :
oops 5 turning 6
[2017-07-16 20:07:59]
gcbrent :
made his own calc when they cost a fortune
[2017-07-16 20:08:57]
hotelzululima :
its the kid next door that was the genius at 10 yo.. he took down the entire BMEWS system from his basement with components salvaged from old radios and TVs.. would up at MIT when they stopped being pissed at him
[2017-07-16 20:09:21]
hotelzululima :
ie we were on Harmon SAC AFB Newfoundland
[2017-07-16 20:09:43]
gcbrent :
damn!
[2017-07-16 20:10:35]
gcbrent :
probably working for big corp now
[2017-07-16 20:10:37]
hotelzululima :
name was “danny” emory.. never have found any trace of him since.. his momma was a cilivilan jet test pilot for sac and his dad a b52 pilot like my dad
[2017-07-16 20:10:44]
hotelzululima :
heheheheheh
[2017-07-16 20:11:00]
gcbrent :
god
[2017-07-16 20:11:10]
hotelzululima :
knew that would get slackbot going.. really want to add midi file to that sucker
[2017-07-16 20:11:15]
hostile :
bawwahawhw
[2017-07-16 20:11:24]
gcbrent :
who da fuck programmed that...
[2017-07-16 20:11:28]
the_lord :
LoL
[2017-07-16 20:11:31]
hostile :
shhhh it was MEEEEEe
[2017-07-16 20:11:33]
hotelzululima :
one guess!!
[2017-07-16 20:11:39]
gcbrent :
of course it was
[2017-07-16 20:11:44]
hotelzululima :
can you add midi @hostile?
[2017-07-16 20:12:25]
hotelzululima :
wonder if da fucker knows he is so honored as a joke around here!!
[2017-07-16 20:14:41]
hotelzululima :
will add some hotmelt when I find my gun @the_lord as for soldering flat?? at 65 my hands shake enough even perpendicular in a jig was a struggle.. hot melt or/and a 3d printed case in da future I think not going to rework again unless comes loose
[2017-07-16 20:17:11]
hotelzululima :
(and I would have to install the new handset for my aged hakko at that..(cant wait till the TS-100 comes in as the cord on my ancient velleman causes part of my shake I am sure)
[2017-07-16 20:34:25]
martinbogo :
*and Chris Anderson were responsible for the now-ubiquitous three-note ESC motor startup tune*
[2017-07-16 20:34:43]
martinbogo :
There is a very cute pun hidden in those three notes :slightly_smiling_face:
[2017-07-16 20:37:59]
gcbrent :
really???
[2017-07-16 20:38:25]
gcbrent :
whats the pun?
[2017-07-16 20:39:52]
martinbogo :
Listen to the notes :slightly_smiling_face:
[2017-07-16 20:40:03]
martinbogo :
Most people just think it's three semi-random tones, but they aren't
[2017-07-16 20:41:10]
gcbrent :
I know the tones, but don't know the meaning
[2017-07-16 20:41:46]
martinbogo :
"Oh Susana"
[2017-07-16 20:43:01]
martinbogo :
It's the song of the Confederate Army, and a sign of resistance from the Civil War -- ESC's used to have proprietary firmware, just like UNIX used to be fully closed source
[2017-07-16 20:43:18]
martinbogo :
It was us, giving Futaba and other companies the middle finger :slightly_smiling_face:
[2017-07-16 20:44:39]
martinbogo :
The rest are pretty standard tones of the time ( mid 2005-6 ) .. four long tones, etc.
[2017-07-16 20:44:54]
martinbogo :
Because we didn't want to do anthing really REALLY wierd
[2017-07-16 20:45:14]
gcbrent :
why would the listen to chris? Didn't know he worked for DJI...
[2017-07-16 20:45:19]
martinbogo :
although later revisions of the firmware added some stupid little features for fun... like modulating the motors in-flight with little songs to annoy people.
[2017-07-16 20:45:29]
gcbrent :
he worked for wired then 3DR wasn't it?
[2017-07-16 20:45:33]
martinbogo :
Dude, this is SO before DJI
[2017-07-16 20:45:50]
martinbogo :
This was back before he and Jordi did 3DR even :slightly_smiling_face:
[2017-07-16 20:46:00]
martinbogo :
Poor 3DR. .. the solo killed 'em
[2017-07-16 20:46:14]
martinbogo :
just before they were able to launch the heavy lifter too
[2017-07-16 20:46:18]
gcbrent :
yeah didn't stand a chance against phantom
[2017-07-16 20:46:39]
gcbrent :
and had issues
[2017-07-16 20:46:47]
martinbogo :
Well they did have a good quad designed .. I'm sure it will come out eventually. DJI was able to out-grow them
[2017-07-16 20:47:42]
freaky123 :
But companies like DJI can spend an extreme amount of money in the vision stuff to make it really nice
[2017-07-16 20:48:24]
gcbrent :
Yeah 3DR even with all their funders didn't have enough at that stage to go against DJI
[2017-07-16 20:48:47]
freaky123 :
Btw @channel does someone has a bricked FC?
[2017-07-16 20:49:11]
martinbogo :
I think I still have a BlackBird prototype in my garage --- it was capable of lifting 3kg, and shared frame designs ( but much larger ) with the Solo
[2017-07-16 20:49:33]
martinbogo :
But it was a Octal .. new hardware, better CPU, absolutely bang-on correct GPS.
[2017-07-16 20:49:41]
martinbogo :
They learned the lesson of the Solo, but it was too late
[2017-07-16 20:50:16]
freaky123 :
Yeah the drone business is hard these days
[2017-07-16 20:50:31]
martinbogo :
No, it's -niched- ... you have to have the right drone, in the right space
[2017-07-16 20:50:43]
the_lord :
@freaky123 i have FC with damaged baro
[2017-07-16 20:50:53]
martinbogo :
Going against DJI in the photo/video market is suicide ( although eHang does have a lock on a different portion of that market )
[2017-07-16 20:51:45]
freaky123 :
@the_lord was searching for one that doesn't work anymore to remove the IC and trace the connections
[2017-07-16 20:52:31]
freaky123 :
Like @martinbogo is doing with the main board ;)
[2017-07-16 20:52:32]
martinbogo :
Oh, DEAD .. yes, I have one freaky
[2017-07-16 20:52:40]
martinbogo :
from the dead/crashed mavic... Can send it to you
[2017-07-16 20:52:52]
martinbogo :
PM me address, I'll send it to you tomorrow
[2017-07-16 20:53:00]
freaky123 :
Aha then you could do the same with the FC after the main board is done
[2017-07-16 20:53:15]
freaky123 :
Ok thats also fine
[2017-07-16 20:53:22]
martinbogo :
Heh .. "main board is done" ... there are a LOT more connections on the main board :slightly_smiling_face:
[2017-07-16 20:53:30]
martinbogo :
You do the FC, I'll stick to the core :slightly_smiling_face:
[2017-07-16 20:53:38]
freaky123 :
;)
[2017-07-16 20:53:55]
martinbogo :
especially once you remove all the components ... lots of traces going to decoupling capacitors and such
[2017-07-16 20:54:03]
martinbogo :
I'm building little wire bridges :slightly_smiling_face:
[2017-07-16 20:55:05]
the_lord :
it doesn't matter freaky you can brick it urself
[2017-07-16 20:57:03]
martinbogo :
You know .. I think the DSLogic may actually be better than the Saleae ... that's saying a lot
[2017-07-16 20:57:15]
martinbogo :
They claim 200MHz, and yeah .. 200 .. no probem
[2017-07-16 20:57:25]
martinbogo :
which means I am seeing transitions even on the high rate data lines
[2017-07-16 20:57:48]
martinbogo :
I wish it had a LITTLE more memory .. but since it supports triggers, that's okay
[2017-07-16 20:57:56]
freaky123 :
But @the_lord replacing a baro isn't that hard and you can reuse it
[2017-07-16 20:58:31]
freaky123 :
Saleae is a bit faster I think 400mhz
[2017-07-16 20:58:54]
martinbogo :
Yes, and no. I think they are two-edging to get 400MHz
[2017-07-16 20:59:16]
martinbogo :
Not sure if they cheat or not, when you only have 4 probe wires
[2017-07-16 20:59:18]
the_lord :
i don't have time to fix it, it doesn't worth it
[2017-07-16 21:11:30]
freaky123 :
if you aren't going todo anything with it you can always add it to the package :wink: I will probably use it to gain access to the code
[2017-07-16 21:12:02]
the_lord :
i can get you bricked one as well
[2017-07-16 21:12:21]
the_lord :
if the guys in the workshop didn't throw it
[2017-07-16 21:16:04]
freaky123 :
ok tnx :wink:
[2017-07-16 21:26:48]
freaky123 :
aha the CAM connection I showed in my picture is basically the Bottom/front vision system
[2017-07-16 21:27:27]
freaky123 :
and it is logical that these are connected to the FC, for making decisions
[2017-07-17 01:41:34]
dpitman :
>who da fuck programmed that...
>
>
>the_lord [1:11 PM]
>LoL
>
>
>hostile [1:11 PM]
>shhhh it was MEEEEEe
[2017-07-17 01:42:02]
dpitman :
Very funny! I was like...what the hell...
[2017-07-17 01:42:57]
dpitman :
Stupid question.. What is the goal of the hardware work. To be able to use alternate firmware maybe?
[2017-07-17 02:30:09]
martinbogo :
Correct.
[2017-07-17 02:30:21]
martinbogo :
Also to understand the interfaces ... hardware has as many exploits as software
[2017-07-17 02:30:46]
martinbogo :
and often ( as in the case with TrustZone ) if hardware is overly trusted, keys to the castle might just be "lying around"
[2017-07-17 02:30:59]
martinbogo :
... and in DJI's case, this is true :slightly_smiling_face:
[2017-07-17 13:42:09]
freaky123 :
ok lets get some work with the other side of the FC
[2017-07-17 13:42:19]
freaky123 :
and some tools to analyse all the stuff
[2017-07-17 13:45:37]
hostile :
=]
[2017-07-17 13:45:47]
hostile :
this bitch gonna run Paparazzi before ya know it
[2017-07-17 13:45:48]
hostile :
lol
[2017-07-17 14:32:36]
freaky123 :
lol motors are running pwm xD
[2017-07-17 14:32:52]
freaky123 :
PWM 400Hz
[2017-07-17 14:41:41]
freaky123 :
GPS runs at B115200
[2017-07-17 14:51:11]
freaky123 :
right side was easy as you can see.. only 1 missing ^^
[2017-07-17 14:51:50]
bin4ry :
good job!
[2017-07-17 14:52:30]
freaky123 :
so next to the PWM signal the ESC's are also connected to an UART.. which I think has multiple ESC's connected to it
[2017-07-17 14:52:46]
freaky123 :
for both firmware flashing and ESC information
[2017-07-17 14:54:10]
kilrah :
I imagine the "GPS SCL/SDA" are actually MAG, right?
[2017-07-17 15:01:27]
freaky123 :
yes indeed @kilrah
[2017-07-17 15:01:33]
freaky123 :
it's the mag at the GPS side
[2017-07-17 15:01:44]
kilrah :
secondary mag i guess then
[2017-07-17 15:01:46]
freaky123 :
and the C SCL/SDA is the front side
[2017-07-17 15:02:05]
kilrah :
well whichever is considered primary lol
[2017-07-17 15:02:14]
freaky123 :
indeed :wink:
[2017-07-17 15:02:53]
freaky123 :
didn't expect to see normal PWM to the ESC's
[2017-07-17 15:03:30]
freaky123 :
almost everything is digital.. they have made their own ESC's and then the comm between ESC and FC is analog:sweat:
[2017-07-17 15:03:44]
kilrah :
well, it's more deterministic than anything...
[2017-07-17 15:03:50]
hostile :
well I mean the SNAIL factory has to be useful afterall...
[2017-07-17 15:04:16]
kilrah :
could have been higher freq à la oneshot though
[2017-07-17 15:04:50]
freaky123 :
that's not really needed @kilrah frequency doesn't matter that much for a normal stable flight
[2017-07-17 15:05:03]
freaky123 :
precision is what matters.. thus having digital comm would make sense
[2017-07-17 15:05:36]
hostile :
I say factory reuse matters so they can help take over the FPV market. :wink:
[2017-07-17 15:05:37]
hostile :
no one is jerking off to "one shot" for DJI yet lol
[2017-07-17 15:05:57]
hostile :
^--- Full DJI snail power train in this...
[2017-07-17 15:06:03]
kilrah :
freq and low jitter do have some advantage as in having less effect on loop stability
[2017-07-17 15:06:14]
kilrah :
and pwm can be sent /read with very high resolution :slightly_smiling_face:
[2017-07-17 15:07:01]
freaky123 :
freq doesn't effect that much in stability.. only at really slow speeds, it's the delay that matters
[2017-07-17 15:07:36]
freaky123 :
I quad can still fly even at low frequencies as 100Hz
[2017-07-17 15:08:10]
kilrah :
sure, but visibly less "locked in"
[2017-07-17 15:08:37]
freaky123 :
"locked in" in terms of stability for a high res vision platform doesn't matter at all
[2017-07-17 15:09:32]
hotelzululima :
??
[2017-07-17 15:09:36]
freaky123 :
and what people claim with "locked in" is just a feeling and I think with proper control you can get the same effects with lower loop frequencies
[2017-07-17 15:10:09]
freaky123 :
@hotelzululima do you have any problems with the Mavic not flying good enough for your vision stuff?
[2017-07-17 15:11:27]
hostile :
come on freaky say "on rails"!
[2017-07-17 15:11:28]
freaky123 :
I fly racing qauds FPV s well.. but this race in having the fastest loop frequencies etc. is just plain stupid, these effects are so minimal humans can't even see/feel the difference
[2017-07-17 15:11:35]
hostile :
LOL
[2017-07-17 15:11:39]
hostile :
damn slack bot
[2017-07-17 15:11:44]
freaky123 :
Hahahaa
[2017-07-17 15:11:54]
freaky123 :
I knew this would come at a certain point :stuck_out_tongue:
[2017-07-17 15:15:59]
kilrah :
LOL
[2017-07-17 15:16:49]
freaky123 :
The sounds from the ESC's aren't event programmed in the ESC itself, they are send by the FC
[2017-07-17 15:17:26]
ender :
Let it play the Marseillaise, PLEASE
[2017-07-17 15:17:30]
ender :
will you :wink:
[2017-07-17 15:18:12]
freaky123 :
No the Imperial March
[2017-07-17 15:18:49]
ender :
Haha, that explains why they were pissed when i simply assumed the ESC’s are controlled digital :slightly_smiling_face:
[2017-07-17 15:19:00]
ender :
gave me a hard time with DJI reps…
[2017-07-17 15:19:12]
freaky123 :
first I need to get into the FC still :disappointed:
[2017-07-17 15:19:54]
freaky123 :
at least this now gives some other options, to solder my own Autopilot as FC ^^
[2017-07-17 15:20:08]
freaky123 :
you could sell that as kit and make it a racing quad
[2017-07-17 15:20:37]
kilrah :
indeed
[2017-07-17 15:21:20]
freaky123 :
but I still prefer to get access to the FC
[2017-07-17 15:22:05]
freaky123 :
flashing my own fw into the FC will be my goal
[2017-07-17 15:23:01]
ender :
ohh how i would (partially) love a pixhawk in this,Solo broke my heart…
[2017-07-17 15:23:52]
freaky123 :
you mean as replacement for the FC? would be nicer if we could just flash other FW into it?
[2017-07-17 15:24:24]
freaky123 :
already considered using the Mavic main board + Camera as vision patform
[2017-07-17 15:24:46]
ender :
of course, j/k :slightly_smiling_face:
[2017-07-17 15:25:12]
the_lord :
isn't the FC main SOC is ST30x?
[2017-07-17 15:25:20]
ender :
i used to fly a bebop barebone on top of my hexa :slightly_smiling_face: Bebop was streaming video and FLIR :wink:
[2017-07-17 15:26:12]
freaky123 :
@the_lord it is an Atmel ATSAME70Q21
[2017-07-17 15:26:58]
freaky123 :
@ender take a look at: <https://www.parrot.com/us/business-solutions/parrot-chuck>
[2017-07-17 15:27:44]
ender :
nice yet expensive !
[2017-07-17 15:28:14]
freaky123 :
yes but you can also fly your hex with it
[2017-07-17 15:28:45]
ender :
yes :slightly_smiling_face: but my hex is fine, i actually want to sell it, no use anymore for > 2kg crafts…
[2017-07-17 15:29:21]
ender :
building it & tuning it was much fun but nowadays i probably would be shot if someone sees & HEARS my Borg mothership…
[2017-07-17 15:30:26]
ender :
Argh if only i could sell my WiDV ;.)
[2017-07-17 16:13:44]
martinbogo :
Morining!
[2017-07-17 16:14:29]
martinbogo :
@freaky123 @hostile : I'm editing the scanned board images in Gimp this afternoon. Should I upload them into git?
[2017-07-17 16:14:44]
freaky123 :
that would be awsome :slightly_smiling_face:
[2017-07-17 16:14:57]
martinbogo :
I'm going to upload a PNG, as well as the source file so all of us can open/edit it in gimp in layers
[2017-07-17 16:15:10]
martinbogo :
I will start making image layers like "GND" "Vcc" etc
[2017-07-17 16:15:22]
martinbogo :
in the usual accepted colors ( black, red, etc )
[2017-07-17 16:16:30]
martinbogo :
@freaky123 : I <did> expect to see analog comms .. it makes sense! DJI has always been a "recycler" of ideas ... why change the way an ESC works?
[2017-07-17 16:16:51]
martinbogo :
@freaky123 : Makes me ***really*** happy to see you found that it's basically servo controlled.
[2017-07-17 16:17:14]
martinbogo :
does the PWM conform to expectations for a servo?
[2017-07-17 16:18:24]
freaky123 :
@martinbogo yes.. just plane 400Hz
[2017-07-17 16:18:44]
freaky123 :
and they make sounds at boot.. so just normal behaviour, haven't checked them turning
[2017-07-17 16:18:51]
freaky123 :
but seem like 100% normal pwm
[2017-07-17 16:18:53]
martinbogo :
So the pulses are between 500 and 1500 ms? WOOT
[2017-07-17 16:18:57]
freaky123 :
yes
[2017-07-17 16:19:03]
freaky123 :
and below 500 is sound
[2017-07-17 16:19:15]
martinbogo :
Now, lets take that a step further -- is >>programming<< those ESC's going to conform to one of the standards ... I bet yes
[2017-07-17 16:19:50]
freaky123 :
the programming of the ESC's happens through the UART I think
[2017-07-17 16:19:57]
martinbogo :
... below 500 is .. sound? Like, they are using any puse below 500ms to send a tone?
[2017-07-17 16:20:17]
martinbogo :
@freaky123 : That would conform to the Turnigy-style ESC
[2017-07-17 16:20:46]
freaky123 :
not below 500 I see now 500 is limit
[2017-07-17 16:21:08]
freaky123 :
940 is idle
[2017-07-17 16:21:15]
freaky123 :
below that is sound
[2017-07-17 16:22:19]
freaky123 :
so they send pulses of 850, 800, 700, 750, 500 etc. during sounds
[2017-07-17 16:22:31]
freaky123 :
850, 800, 700, 750 is one note for example on 4 ESC's
[2017-07-17 16:23:32]
martinbogo :
YES!
[2017-07-17 16:23:50]
martinbogo :
Does it also do the LOW->HIGH calibration dance?
[2017-07-17 16:24:35]
martinbogo :
I'm betting 700 is the lowest it can deal with
[2017-07-17 16:24:38]
martinbogo :
and 2000 is the highest
[2017-07-17 16:24:40]
freaky123 :
at boot it's direct 940 and don't seem they do that
[2017-07-17 16:25:04]
martinbogo :
Hmm .. there has to be something going in the UART then
[2017-07-17 16:25:14]
kilrah :
no, just hardcode
[2017-07-17 16:25:17]
martinbogo :
UART : "Tone mode"
[2017-07-17 16:25:30]
kilrah :
DJI escs have historically always been calibrated to the same standard
[2017-07-17 16:25:44]
martinbogo :
kilrah : So what is the usual table of PWM values?
[2017-07-17 16:26:14]
martinbogo :
How are they translating 850, 800, 700, 750 into a tone?
[2017-07-17 16:26:33]
martinbogo :
Without sending a UART command to differentiate between those, and an actual speed command?
[2017-07-17 16:26:39]
kilrah :
just saying the min/max for actuual moror running
[2017-07-17 16:26:43]
martinbogo :
OH! Gotcha
[2017-07-17 16:26:47]
kilrah :
tone stuff must be new and is below that range
[2017-07-17 16:26:52]
freaky123 :
940 is motor off
[2017-07-17 16:26:59]
freaky123 :
prolly 1000 is motor just running
[2017-07-17 16:27:02]
freaky123 :
2000 is full power
[2017-07-17 16:27:08]
freaky123 :
below 940 is tones
[2017-07-17 16:27:10]
martinbogo :
Freaky : So all the motor running is pushed into 940->2000?
[2017-07-17 16:27:10]
kilrah :
ie 940-2000 = run, <900 = tones
[2017-07-17 16:27:43]
freaky123 :
940 is still off, haven't turned them on yet
[2017-07-17 16:27:48]
freaky123 :
will do that as a test
[2017-07-17 16:28:59]
martinbogo :
Only 1060 steps ... well, at least that fits into 10 bits
[2017-07-17 16:29:29]
martinbogo :
So they are likely using 12 bit control
[2017-07-17 16:29:36]
martinbogo :
Er, 12 bits :slightly_smiling_face:
[2017-07-17 16:29:38]
freaky123 :
need to charge my tx.. I noticed it is 0% :disappointed:
[2017-07-17 16:30:56]
kilrah :
resolution of the pwm can be better than 1us...
[2017-07-17 16:32:17]
martinbogo :
@freaky123 : Well, there's only one thing to do.. you know it.
[2017-07-17 16:32:23]
martinbogo :
... I have to replicate what you're doing on the P4
[2017-07-17 16:32:31]
martinbogo :
Because there is no WAY they did anything different ...
[2017-07-17 16:32:51]
freaky123 :
P4 is like 99% the same
[2017-07-17 16:33:22]
freaky123 :
at least you now know how the FC is connected
[2017-07-17 16:47:41]
martinbogo :
Yep!
[2017-07-17 16:47:53]
martinbogo :
By the way -- I :heart: the DSlogic now
[2017-07-17 16:48:12]
martinbogo :
In 4 pin mode, it does 400Mhz, and seems to have all the functions the Saleae has -- PLUS one.
[2017-07-17 16:48:35]
martinbogo :
I was given the ocilloscope extension by the CTO ... and it's nice.
[2017-07-17 16:48:45]
martinbogo :
So I can do both analog and digital now.
[2017-07-17 16:48:53]
martinbogo :
They are working on a USB3 and a USB-C solution now
[2017-07-17 18:56:39]
martinbogo :
Back online
[2017-07-17 20:43:40]
hostile :
lol that price gouging tho...
[2017-07-17 20:52:38]
hostile :
Impressive...
[2017-07-17 20:52:39]
hostile :
<http://hackaday.com/2017/07/17/completely-owning-the-dreamcast-add-on-you-never-hadcompletely-owning-the-dreamcast-add-on-you-never-had/>
[2017-07-17 20:52:51]
hostile :
'We can’t do this hack justice in a short write-up, but the outline is that he starts out with the datasheet for the VMU’s CPU, and goes looking for interesting instructions. Then he started reverse engineering the ROM that comes with the SDK, which was only trivially obfuscated. Along the way, he wrote his own IDA plugin for the chip. Discovery of two ROP gadgets allowed him to dump the ROM to flash, where it could be easily read out. Those of you in the VMU community will appreciate the first-ever ROM dump.'
[2017-07-17 21:01:22]
kilrah :
wow, beautiful
[2017-07-17 21:06:25]
martinbogo :
Nicely done :slightly_smiling_face:
[2017-07-17 21:36:39]
freaky123 :
Nice to have the ossiloscope.. the saleae can't do live yet, but does analog
[2017-07-17 21:47:18]
kilrah :
I'd love the saleae to _finally_ do live
[2017-07-17 21:47:33]
kilrah :
they've said for what, 3 years that they'd add it?
[2017-07-17 21:47:41]
kilrah :
i have an analog discovery for that...
[2017-07-17 21:48:03]
kilrah :
and if i need "batch" LA (i.e. nearly never)
[2017-07-17 21:50:29]
martinbogo :
I can do live on the DSlogic .. which makes it INFINITELY valueable to me
[2017-07-17 21:50:47]
martinbogo :
But both are fantastic for triggers, etc
[2017-07-17 23:24:30]
martinbogo :
MUH-HA-HA-HA! I have control of the LC1860C's SPI bus!
[2017-07-17 23:25:35]
martinbogo :
It may not be doing anything particularly USEFUL at the moment ( just counting up to 255 and then looping again ) .. but this is the first full hardware control I've gotten on the P4
[2017-07-17 23:25:45]
martinbogo :
Now I need to take control of the PWM generator
[2017-07-17 23:32:56]
hotelzululima :
Fantastic!!!!
[2017-07-18 01:43:30]
martinbogo :
@freaky123 : PWM between FC/ESC confirmed on P4
[2017-07-18 01:44:17]
martinbogo :
Beautiful sight -- those pulses are ~ 940,500,850,600,400
[2017-07-18 01:45:16]
hostile :
btw... do we know what the Certificate Import screen does in the assistant?
[2017-07-18 01:46:46]
martinbogo :
Not a blessed clue
[2017-07-18 01:46:52]
martinbogo :
It's not hardware :slightly_smiling_face:
[2017-07-18 01:46:55]
martinbogo :
**hee hee hee**
[2017-07-18 01:48:34]
hostile :
I wasn't sure if was was some sort of signing certificate possibly
[2017-07-18 01:48:50]
hostile :
was wondering if we could replace it
[2017-07-18 01:49:04]
hostile :
the default listed was for "Advanced Radiometry"
[2017-07-18 01:49:12]
martinbogo :
??? no idea
[2017-07-18 01:49:32]
martinbogo :
Did I do an okay job with the git pull request?
[2017-07-18 01:49:42]
martinbogo :
I know I screwed up the first one a bit -- you'll have to merge to get it right
[2017-07-18 01:49:51]
martinbogo :
but the one for dropbear should be pretty clean
[2017-07-18 01:50:01]
martinbogo :
I am now working on getting apt/apt-get working
[2017-07-18 01:50:08]
martinbogo :
apt/dpkg/etc
[2017-07-18 01:50:34]
hostile :
yeah yo did! I just need to verify and pull it in!
[2017-07-18 01:50:39]
hostile :
wife just got home so AFK again
[2017-07-18 01:50:47]
hostile :
:confused: had about 30 - 45 miuntes to self today
[2017-07-18 01:51:20]
martinbogo :
Before I do that though -- any reason we shouldn't just use system APK's?
[2017-07-18 02:44:59]
hotelzululima :
btw is there separate and dedicated wifi hardware(ie the wifi board) separate and distinct from the SDR used for ocusync or is the WIFI board actually the system SDR board in other words do I have enough Hardware aboard to ifconfig the wlan up while ocusync is running??
[2017-07-18 02:52:09]
hostile :
Wifiboard is Atheros... located under the LED panel on back. SDR comes from some [new-acp.ch](http://new-acp.ch) I think
[2017-07-18 03:05:49]
hotelzululima :
Cool that means I can stick an RPI Zero-W on the back with Velcro to create a mission control computer soon as we achieve flight control over DJI code… think DroneCode but wireless..
[2017-07-18 03:07:53]
hostile :
in DJI land they call that "OnboardSDK" ; )
[2017-07-18 03:09:42]
hotelzululima :
ah yes but I dont think I want to run their shim.. would rather run android and the mobileSDK on the RPI is one possible
[2017-07-18 03:10:15]
hotelzululima :
as onboard SDK is only meant for their shite(and again is probably flat out stolen GPL code…
[2017-07-18 03:11:37]
hotelzululima :
I want to have 2-N control sources simultaneously (with mutexes) and control console handoffs
[2017-07-18 03:12:14]
hotelzululima :
unlike the problems in 3dr land when I tried this experiment(copter just fell out of the sky(race condition)…)
[2017-07-18 03:12:57]
hotelzululima :
this time will add my own code rather than believing some other incompetant dev…
[2017-07-18 03:14:16]
hotelzululima :
need to think about a more complete onboard rootkit giving us control over copter functionality…
[2017-07-18 03:14:24]
hotelzululima :
and cameras
[2017-07-18 03:31:04]
hotelzululima :
at least until replacement firmware is achieved….
[2017-07-18 05:18:53]
the_lord :
Yes straight 3S
[2017-07-18 05:21:20]
hostile :
@the_lord taught ME the technique @hotelzululima ...
[2017-07-18 05:36:05]
hotelzululima :
chatting with him
[2017-07-18 05:36:21]
hotelzululima :
switch inline bad slicing out
[2017-07-18 06:27:04]
hotelzululima :
ok switch bad board good having to check fan wiring.. like advertized on packaging as a 12Vdc fan.. 3 wires one solid black one with lettering and one with white strip on black.. white strip and black center with lettering went to another plug.. so assumed(wrong) was + and negative will experiment with
[2017-07-18 06:27:40]
hotelzululima :
hopefully the copper foil will heat sink it long enough to asses downgrade and root…
[2017-07-18 08:29:35]
freaky123 :
@martinbogo are you generating servo pulses with the LC?
[2017-07-18 12:23:01]
hotelzululima :
that copper foil working great.. dont think I will need to worry about the fan…
[2017-07-18 12:45:54]
freaky123 :
Nice
[2017-07-18 13:48:34]
martinbogo :
@freaky123 : YEP! Right out of the leadcore.
[2017-07-18 13:49:04]
martinbogo :
@freaky123 : Not the safest or best way to do it, but it means that the LC follows the "usual" spec for that arm core
[2017-07-18 13:49:16]
martinbogo :
right down to the GPIO lines and "undocumented" features
[2017-07-18 14:14:23]
martinbogo :
Oh those ... !%#$%@#^ bastards
[2017-07-18 14:23:46]
martinbogo :
Well ... radio command/control is definitely completely separate from the LC/core logic board
[2017-07-18 14:24:34]
martinbogo :
@freaky123 : All flight command/control is -definitely- in the FC. the LeadCore board effectively only handles async
[2017-07-18 14:24:52]
martinbogo :
I have disabled all dji_* binaries running ..
[2017-07-18 14:25:00]
martinbogo :
and the bird is still perfectly capable of flight
[2017-07-18 14:25:10]
martinbogo :
( once everything is initialized )
[2017-07-18 15:22:51]
freaky123 :
Yes thats why I want into the fc so much
[2017-07-18 15:45:25]
martinbogo :
@freaky123 : You are going to LOVE what I just did
[2017-07-18 15:47:04]
freaky123 :
What did you do?
[2017-07-18 15:51:38]
martinbogo :
:slightly_smiling_face: :slightly_smiling_face: :slightly_smiling_face:
[2017-07-18 15:51:39]
martinbogo :
Give me a sec
[2017-07-18 15:51:46]
martinbogo :
Video still uploading/encoding
[2017-07-18 16:33:39]
freaky123 :
:wink:
[2017-07-18 16:42:29]
hans112 :
I can drum....
[2017-07-18 17:01:57]
freaky123 :
Me also..
[2017-07-18 17:02:06]
freaky123 :
Taking a lot of time..
[2017-07-18 17:02:31]
hans112 :
Hehehe
[2017-07-18 17:10:01]
jan2642 :
Soon the suspense will actually start killing people...
[2017-07-18 17:13:01]
freaky123 :
This second is taking an eternity
[2017-07-18 17:13:59]
hans112 :
4th dimension stuff
[2017-07-18 17:13:59]
freaky123 :
Is the video 8k @martinbogo ?
[2017-07-18 17:14:07]
hans112 :
:laughing:
[2017-07-18 17:15:08]
martinbogo :
No .. .Google was just being an asshat
[2017-07-18 17:15:09]
martinbogo :
<https://photos.app.goo.gl/OLtCSMSVgBw87Fci2>
[2017-07-18 17:16:12]
martinbogo :
I apologize for the HORRIBLE narration :slightly_smiling_face:
[2017-07-18 17:20:40]
martinbogo :
I'm -damned- happy about this one
[2017-07-18 17:20:51]
martinbogo :
Course, I don't know how to STOP the motors ... still working that one out
[2017-07-18 17:20:55]
martinbogo :
but ... one thing at at ime
[2017-07-18 17:21:19]
martinbogo :
@freaky123 : Not quite as exciting as taking direct FC control ... YET ...
[2017-07-18 17:21:26]
martinbogo :
but a step in the right direction
[2017-07-18 17:21:57]
martinbogo :
I'll send you a diff for your repo, @freaky123 -- this is a test tool, and should exist there
[2017-07-18 17:24:00]
hotelzululima :
damn
[2017-07-18 17:24:41]
martinbogo :
@hotelzululima : Once I realized just how independent the LeadCore is from everything, this all started to make a lot of sense
[2017-07-18 17:24:55]
martinbogo :
The DJI drone is essentially an evolution/rip of the A.R. Drone
[2017-07-18 17:25:12]
hotelzululima :
ah hah..
[2017-07-18 17:25:14]
martinbogo :
A computer ( ARM ) hanging off a flight controller, connected to ESC's
[2017-07-18 17:25:34]
martinbogo :
The computer has access to things like the gimbal, and the cameras -- non-flight critical systems
[2017-07-18 17:25:36]
hotelzululima :
which begs the question of why did they stop there…
[2017-07-18 17:25:47]
martinbogo :
BUT -- it also shares connectivity with the FC, because debugging
[2017-07-18 17:25:52]
hotelzululima :
hmm
[2017-07-18 17:26:18]
martinbogo :
It means the drone is flyable EVEN WHEN THE OS CRASHES
[2017-07-18 17:26:40]
martinbogo :
all "critical" flight systems go between the RC and the FC
[2017-07-18 17:26:57]
martinbogo :
I could cut off the head, and the thing should still fly
[2017-07-18 17:27:01]
hotelzululima :
thats what it would presuppose.. except nav at that point is on the core board or the FC?
[2017-07-18 17:27:15]
martinbogo :
I believe -nav- is on the core, and stability is in the FC
[2017-07-18 17:27:35]
martinbogo :
also, the compile target for gcc is armeabi-v7a
[2017-07-18 17:27:58]
bin4ry :
awesome @martinbogo
[2017-07-18 17:28:02]
bin4ry :
:smiley:
[2017-07-18 17:28:13]
hotelzululima :
k that would make since and where we were going with paparazzi and gumstix much earlier.. ie mission computers as the SOLO later implemented…
[2017-07-18 17:28:25]
hotelzululima :
s/scince/sense/g
[2017-07-18 17:28:49]
hotelzululima :
this
[2017-07-18 17:28:54]
martinbogo :
Yep
[2017-07-18 17:29:47]
hotelzululima :
just it seems DJI stopped short on the mobileSDK to research that function for the onboardSDK… and their HW
[2017-07-18 17:30:03]
hotelzululima :
s/research/reserve/g
[2017-07-18 17:36:46]
martinbogo :
aaaaand here comes another bit of fun...
[2017-07-18 17:38:11]
hans112 :
Drums again.... ;)
[2017-07-18 17:39:35]
hotelzululima :
??
[2017-07-18 17:39:48]
hotelzululima :
all this suspense Martin!!
[2017-07-18 17:41:53]
digital1 :
Errr today :stuck_out_tongue_winking_eye:
[2017-07-18 17:43:43]
martinbogo :
root@wm330_dz_vp0001_v5:/system/etc # busybox microcom /dev/ttyACM0
?? 63206 [SWITCH][NS]req:fdi,0to0,reason:compass.over_large,result:fail for same index?iUM?
?? 63206 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault off, over_large??Ubq
?? 63208 [SWITCH][NS]req:fdi,0to0,reason:compass.disagree,result:fail for same index??Ud?
?? 63211 [SWITCH][NS]req:fdi,0to0,reason:compass.over_large,result:fail for same index?0UM?
?? 63211 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault off, over_large? [SWITCH][NS]req:fdi,0to0,reason:compass.disagree,result:fail for same index?\
?? 63215 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault on , over_large?WUM?
?? 63216 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault off, over_large?=
?? 63218 [SWITCH][NS]req:fdi,0to0,reason:compass.disagree,result:fail for same indexh8
?? 63234 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault on , over_large?`e,?
?? 63236 [SWITCH][NS]req:fdi,0to0,reason:compass.over_large,result:fail for same index?Ubq
?? 63237 [SWITCH][NS]req:fdi,0to0,reason:compass.disagree,result:fail for same indexͽUM?
?? 63244 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault on , over_largeZ?eason:compass.over_large,result:fail for same indexUM?
?? 63246 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault off, over_large?
?? 63248 [SWITCH][NS]req:fdi,0to0,reason:compass.disagree,result:fail for same index*?UM?
?? 63260 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault on , over_large?
?? 63261 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault off, over_large?sult:fail for same index?P][NS]req:fdi,0to0,reason:compass.disagree,result:fail for same indexyrge?\UM?
?? 63270 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault off, over_large???? 63271 [SWITCH][NS]req:fdi,0to0,reason:compass.over_large,result:fail for same index?x@?UM?
?? 63274 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault on , over_large??
?? 63275 [L-FDI][FDI][NS(0)][COMPASS(0)]: fault off, over_large7dsult:fail for same indext?][NS]req:fdi,0to0,reason:compass.disagree,result:fail for same indexj?
[2017-07-18 17:43:58]
martinbogo :
Hello FC .. nice to talk to you :slightly_smiling_face:
[2017-07-18 17:44:25]
hotelzululima :
heh heh heh !!
u found it!!
[2017-07-18 17:44:30]
martinbogo :
I did :slightly_smiling_face:
[2017-07-18 17:44:36]
martinbogo :
At least, I found the debug port
[2017-07-18 17:45:16]
hotelzululima :
indeed!! YAY!!!
[2017-07-18 17:45:23]
hotelzululima :
thats a big one!!
[2017-07-18 17:52:21]
martinbogo :
Still trying to figure out how to change the LED color
[2017-07-18 18:12:49]
hostile :
nice headshot on the FC...
[2017-07-18 18:13:04]
hostile :
that means assistantless and PYDUMLless flight params a cometh.
[2017-07-18 18:19:08]
digital1 :
would you start getting into CrystalSky to allow 3rd party apps ?
[2017-07-18 18:19:35]
martinbogo :
Umm .. how is that hardware?
[2017-07-18 18:20:08]
martinbogo :
Not to be picky or anything @digital1 ... we're just trying to keep subjects focused :slightly_smiling_face:
[2017-07-18 18:22:13]
hotelzululima :
thats amazing @martinbogo rootkit here we come!!
[2017-07-18 18:28:42]
digital1 :
@martinbogo Sorry was in wrong room
[2017-07-18 18:39:33]
kilrah :
@martinbogo NICE
[2017-07-18 18:39:43]
kilrah :
did you try seeing if the start command went through that uart?
[2017-07-18 18:52:23]
martinbogo :
No.. that UART is pretty much just the FC talking
[2017-07-18 18:52:48]
martinbogo :
I sent the motor_start commands the same way the code does -- I basically injected into dji_sys and asked it to do it
[2017-07-18 18:53:32]
kilrah :
ok
[2017-07-18 18:54:10]
kilrah :
wondering since the motor_init program mentions DBUS... so that could suggest the LC is relaying the controls through DBUS/SBUS to the FC from either wifi or SDR... which would make sense
[2017-07-18 18:54:55]
kilrah :
but if that's the case that would not satisfy what you say that that you keep RC control if the LC goes down
[2017-07-18 18:55:47]
kilrah :
when you started can you change motor speeds with the remote?
[2017-07-18 18:56:24]
kilrah :
if yes it would be interesting to intentionally halt/crash the LC and see if it's still the case, my guess is not
[2017-07-18 20:05:09]
martinbogo :
@kirah Just tested -- crash the LC, and the FC keeps on ticking -- the motors respond to the RC
[2017-07-18 20:05:28]
martinbogo :
by "crash" I mean "Stop all dji_* processes"
[2017-07-18 20:06:19]
martinbogo :
From what I can tell -- dji_sys on LC communicates with the FC two ways --- one via /dev/ttyACM0 ( debug messages? ) and also via GPIO/L2C
[2017-07-18 20:06:29]
martinbogo :
I2C rather ( 2wire )
[2017-07-18 20:08:36]
martinbogo :
okay, this is weird
[2017-07-18 20:08:39]
martinbogo :
I just lost dropbear/ssh
[2017-07-18 20:09:36]
hostile :
that is as I would expect... re: LC crashing, I mean this is an A3 we are talking about after all they CAN fly just fine on their own and do NAV.
[2017-07-18 20:19:14]
kilrah :
the question is what's the path for control data from the RC
[2017-07-18 20:19:25]
kilrah :
probably multiple
[2017-07-18 20:19:30]
martinbogo :
LightBridge for commands
[2017-07-18 20:19:39]
martinbogo :
It's going FPGA->FPGA for that one
[2017-07-18 20:20:05]
kilrah :
e.g. in WiFi mode it's pretty sure it'll go through the LC (assuming the WiFi interface is connected to it, maybe wrong?)
[2017-07-18 20:20:21]
martinbogo :
For P4, what Wifi interface :slightly_smiling_face:
[2017-07-18 20:20:45]
kilrah :
argh, keep forgetting you're on a P4 :sweat_smile:
[2017-07-18 20:22:33]
freaky123 :
Nice work @martinbogo
[2017-07-18 20:22:58]
vk2fro :
@martinbogo thats impressive - agreed nice headshot on the FC :slightly_smiling_face:
[2017-07-18 20:23:16]
freaky123 :
The fc also handles the nav commands.. the only thing the lc does is vision stuff so like the waving commands etc.
[2017-07-18 20:24:21]
freaky123 :
I knew I could get that to work as well @martinbogo but the lowest control you can get this way is rate.. and still all protective measures like rc check are done by the fc. So this is a bit limited, but sure is a way
[2017-07-18 20:24:23]
vk2fro :
so theoretically the drone would still fly in gps mode, even if the LC is crashed? or does that require the LC up and running (i.e. the drone would revert to atti mode
[2017-07-18 20:24:48]
freaky123 :
Another problem is the limited communication space between fc an lc
[2017-07-18 20:25:09]
freaky123 :
The baudrate is prety high but a high frequencies you get into trouble
[2017-07-18 20:25:30]
freaky123 :
Because you want the state info back and the motor commands to the fc
[2017-07-18 20:25:43]
kilrah :
FC does it all... really in the assistant with debug enabled you can see that the FC is "just a normal FC" with RC channel mapping and all the usual stuff, just hidden
[2017-07-18 20:25:57]
freaky123 :
The fc can fly with gps mode
[2017-07-18 20:26:19]
freaky123 :
Fc does all the flying stuff
[2017-07-18 20:26:34]
freaky123 :
Lc is for vision and control forwarding
[2017-07-18 20:26:56]
freaky123 :
So without LC you will loose control vut it still hovers in gps mode
[2017-07-18 20:40:59]
hostile :
<http://hackaday.com/2017/07/18/def-con-badgelife-someone-finally-did-it/>
[2017-07-18 20:43:38]
martinbogo :
heh .. only 25 made
[2017-07-18 20:43:44]
martinbogo :
It's the Whiskey Pirates
[2017-07-18 20:44:06]
martinbogo :
Last time I went, we brought a hell of a lot more than 25 fancy badges ( Ninja Networks )
[2017-07-18 20:45:12]
hostile :
25 made.. tells me first time with a fab shop. =]
[2017-07-18 20:45:14]
hostile :
shit ain't cheap!
[2017-07-18 20:45:25]
hostile :
probably had really grand ideas... then got slapped with reality
[2017-07-18 20:46:31]
hostile :
so... now we find out what RF chip they use...
[2017-07-18 20:50:14]
hostile :
I've got another friend designing boards now... doing his first group gets buy for a hand full of board sales
[2017-07-18 21:04:08]
martinbogo :
**nod** I think the ***minimum*** number of widgets I ever brought to Defcon was ~600
[2017-07-18 21:04:32]
martinbogo :
DC12, I brought the TV jammers
[2017-07-18 21:04:57]
martinbogo :
DC14, I brought the rainbow-table-on-a-USB-key
[2017-07-18 21:05:03]
martinbogo :
that was.. what, 1000 units?
[2017-07-18 21:06:25]
martinbogo :
DC20 was the NinjaPhones
[2017-07-18 21:06:39]
martinbogo :
That was .. um .. kind of insane and would have been impossible without help from facebook
[2017-07-18 21:07:51]
hostile :
yeh I was pretty good friends with the Flexilis folks...
[2017-07-19 15:41:34]
hotelzululima :
oh well thats one good idea down the drain.. seems the same antenna is used by the wifi board and the SDR interchangeably but not at same time as used in ./bin/antenna_switch.sh :disappointed:
[2017-07-19 15:42:16]
hotelzululima :
No Ocusync simultaneously with wifi unless HW is changed.. ie discrete wifi antenna ?? possible??
[2017-07-19 15:42:37]
hotelzululima :
man that core board starts to roast quick
[2017-07-19 15:52:34]
martinbogo :
@hotelzululima : We could add a USB-wifi dongle
[2017-07-19 15:53:02]
martinbogo :
@hotelzululima : If we ever get kernel sources, we could add it in as a kernel module
[2017-07-19 15:53:11]
martinbogo :
The USB bus is totally open
[2017-07-19 15:53:20]
hotelzululima :
yes that could be done.. was more thinking of another antenna
[2017-07-19 15:53:48]
martinbogo :
Interestingly enough -- there is no antenna_switch in the P4/P4P/P4P+
[2017-07-19 15:53:48]
hotelzululima :
we ever get kernel sources I am updating that fucker.. its older than the damn pyramids
[2017-07-19 15:53:58]
hotelzululima :
no wifi?
[2017-07-19 15:54:09]
martinbogo :
There is a reason they are on the older kernel -- this is KitKat, and there are interfaces that will break if you go to 4.4
[2017-07-19 15:54:49]
hotelzululima :
ah yes forgot about that 4.4 was the transition
[2017-07-19 15:55:03]
martinbogo :
And I >>know<< why they aren't using Marshmallow or Nougat --they haven't talked to Google, and haven't licensed the use of KitKat
[2017-07-19 15:55:05]
hotelzululima :
kitkat that is.. oops
[2017-07-19 15:55:42]
hotelzululima :
it just gets piled higher and deeper with these DJI folks on being code thieves…
[2017-07-19 15:56:00]
martinbogo :
These things should be using Android 7.1 ... and I find it hilarious that China is stuck, because companies like LeadCore haven't ported the kernel, and have hidden the kernel sources, so they CAN'T
[2017-07-19 15:56:39]
martinbogo :
LeadCore actively -avoids- attending Linux kernel events, and barely works with Linaro at all, effectively making the market they can be open to a lot smaller
[2017-07-19 15:57:14]
martinbogo :
I just went to the mobile linux conference in Dallas, TX ... and LeadCore sent one very junior person there, who was mostly there to "watch what other people are doing"
[2017-07-19 15:58:40]
andyca57 :
hey team a question my AC is P4Pro looking to boost the signal what booster range extender system can boost the 2.5 and 5.8 signal thnks
[2017-07-19 15:59:19]
martinbogo :
You just need to change or enhance your antennas
[2017-07-19 15:59:55]
martinbogo :
@andyca57 : You can't fly farther than LOS legally in any case. Are you looking for directional, or omnidirectional?
[2017-07-19 16:01:57]
andyca57 :
yes i know LOS legally to be honest not sure which is best
[2017-07-19 16:02:33]
hotelzululima :
@andyca57 full disclosure I am a customer of [MAXXUAV.com](http://MAXXUAV.com) nuff said
[2017-07-19 16:02:33]
martinbogo :
Well, what kind of range are you looking for, and why?
[2017-07-19 16:03:05]
martinbogo :
If you're looking for "more range in general" then go for a good omnidirectional antenna with ~6dBi gain
[2017-07-19 16:03:19]
andyca57 :
well I'm looking for distance
[2017-07-19 16:03:27]
hotelzululima :
and as @martinbogo said being US based unless you are Part 107 with a LOS waiver…(your time zone)
[2017-07-19 16:03:41]
martinbogo :
If you're looking for "better video streaming @4k" and don't mind pointing your transmitter at the drone at all times -- use a circular polarized antenna set
[2017-07-19 16:03:52]
andyca57 :
hotelzululima thanks
[2017-07-19 16:04:00]
hotelzululima :
np
[2017-07-19 16:05:12]
martinbogo :
e.g. an antenna like this one : <http://www.dronenerds.com/products/phantom4/phantom-4-pro/fpvlr-phantom-4-pro-circular-polarized-long-range-antenna-upgrade-kit-fpvlrp4pro-fpvlr.html>
[2017-07-19 16:05:12]
andyca57 :
yes video is a key too i stay bellow 500 ft
[2017-07-19 16:05:23]
hotelzululima :
ie I use gain antennas and power amps cause my flying area includes 200ft redwoods(which are a freaking signal fence stock)…
[2017-07-19 16:05:30]
martinbogo :
This antenna install REQUIRES MODIFICATION of the RC -- but it's a good one
[2017-07-19 16:05:50]
martinbogo :
@hotelzululima : Heh... the pacific northwest SUCKS that way :slightly_smiling_face:
[2017-07-19 16:06:08]
andyca57 :
yes but do they boost the 2.4 and 5.8
[2017-07-19 16:06:12]
martinbogo :
Then again, here in TX -- miles and miles of cow fencing. Just as bad
[2017-07-19 16:06:44]
andyca57 :
im in So fly very flat
[2017-07-19 16:06:48]
hotelzululima :
no only 2.4 on the SUnAMPS.. you can get 5.8 ghz models..
[2017-07-19 16:06:58]
andyca57 :
err so Flat
[2017-07-19 16:07:02]
hotelzululima :
btw BEST gain is pure antenna gain…
[2017-07-19 16:07:32]
andyca57 :
im in South Fla mainly flat
[2017-07-19 16:07:34]
martinbogo :
But there you go -- your ~hardware question answered. If you want more 'general' range, a pair of better standard antennas. If you want more 'video stream' range, invest in good circular polarized antennas. If you want 'insane range / high risk' as long as you stay within the power limits put forth by the FCC -- look into signal boosters and directional antennas with good gain.
[2017-07-19 16:08:08]
martinbogo :
*agrees with @hotelzululima on this one -- invest in a good pair of antennas, and replace the stock ones*
[2017-07-19 16:08:19]
martinbogo :
That will be Enough(tm)
[2017-07-19 16:08:26]
hotelzululima :
:slightly_smiling_face:
[2017-07-19 16:08:41]
andyca57 :
thank for the information
[2017-07-19 16:37:30]
fyl88 :
Anyone knows what imaging sensor DJI spark uses vs DJI spark ?
[2017-07-19 16:40:37]
jan2642 :
I guess both the Spark and the Spark use the exact same sensor...
[2017-07-19 16:41:05]
hostile :
<https://blog.quarkslab.com/vulnerabilities-in-high-assurance-boot-of-nxp-imx-microprocessors.html>
[2017-07-19 16:41:35]
hostile :
Lol @jan2642
[2017-07-19 16:48:33]
jan2642 :
Interesting stuff... But is was called 'high assurance boot' and not 'secure boot'. Now it's just 'boot' I guess ;-)
[2017-07-19 16:50:14]
hotelzululima :
lmao
[2017-07-19 17:01:26]
hostile :
@martinbogo you see this? <https://github.com/digdat0/mavic_bat/blob/master/mavic_bat.ino>
[2017-07-19 17:08:27]
kilrah :
interesting
[2017-07-19 17:08:55]
hotelzululima :
I love it!!
[2017-07-19 17:12:13]
hostile :
@digdat0 I know you **were** here... tell us more?
[2017-07-19 17:14:45]
hfman :
Probably a way to run non DJI batteries yet still have full battery telemetry.
[2017-07-19 17:15:14]
hfman :
'simulate' an intelligent battery
[2017-07-19 17:18:14]
hostile :
that is what that code above is ...
[2017-07-19 17:36:25]
puckquentin :
could something like that also work with I2 or P4?
[2017-07-19 17:41:35]
fldatatek :
Now just find me a way around the SDK on the A3 so we are not limited to only their command set in the SDK.. :slightly_smiling_face:
[2017-07-19 17:49:29]
torneo :
With battery it would be great to design 3d printed case, put inside li-ion Sony VTC5 high current cells, current monitoring and arduino with some code. But this would be more great for Spark. On Mavic battery is good so no need to replace it.
[2017-07-19 17:56:06]
digdat0 :
@hostile im around, dealing with some family issues lately (daughter was attacked by neighbors dog). whatssup?
[2017-07-19 17:56:34]
hostile :
just wondering what you could share about mavic_bat... but do handle the fam first!
[2017-07-19 17:57:37]
digdat0 :
just waiting on a sheriff to show up so they can start investigation, so may be afk in few mins. For the battery, ive done several battery mods (to the AC, and the battery) and have been playing around with turning it to non-DJI
[2017-07-19 17:59:45]
digdat0 :
i tried soldering to all connections on the smartboard, this is what worked
[2017-07-19 17:59:51]
digdat0 :
there are UART spots though
[2017-07-19 18:00:03]
digdat0 :
forgive the bbq setup there
[2017-07-19 18:00:22]
digdat0 :
"Your file was uploaded — it’s safe and sound in Slack. Unfortunately your team doesn’t have any storage space left" .. lemme put that vid on TY
[2017-07-19 18:00:58]
digdat0 :
it will be here in few mins: <https://youtu.be/S9xhcVm5Ovc>
[2017-07-19 18:02:52]
digdat0 :
for the battery mod, there power clips (i dont like those as they dont make GREAT contact with the pins), the battery mod itself (still a WIP) or hardware mod
[2017-07-19 18:03:40]
digdat0 :
imgur album uploading here with more pics of modding the battery: <http://imgur.com/a/fVPL1> (give it a few mins)
[2017-07-19 18:05:37]
hostile :
nice
[2017-07-19 18:05:50]
digdat0 :
i did that spot cause i wanted it to fold up properly (i put in my backpack alot) and wanted clean. Most guys are doing a single power off the top, or out the holes in the arms. I didnt like that .. one time my OCD came in handy lol
[2017-07-19 18:06:00]
digdat0 :
and y
[2017-07-19 18:06:00]
digdat0 :
ty
[2017-07-19 18:06:27]
digdat0 :
i run 2 x 3000 mah multistar lihv batteries on it, i can get 30-35 min flight time
[2017-07-19 18:06:58]
digdat0 :
some guys are doing a single 4000mah, a 5200mah or 2x4000
[2017-07-19 18:07:08]
digdat0 :
the current Mavic distance record is with 2x4000
[2017-07-19 18:07:32]
digdat0 :
you gotta make sure the lipos are less volts than the mavic battery though, so i charge to 4.3v per
[2017-07-19 18:07:51]
digdat0 :
otherwise, it can turn off the mavic battery. one guy i know lost one cause of that, was few miles out and it fell into a river
[2017-07-19 18:07:57]
digdat0 :
great video, bad result :stuck_out_tongue:
[2017-07-19 18:10:36]
digdat0 :
the guy in China who used Lithium Ion used an Arduino board and a voltage regulator to send false voltage reading to the Mavic
[2017-07-19 18:11:00]
digdat0 :
<https://github.com/sincoder/mavic_bat>
[2017-07-19 18:11:14]
digdat0 :
i think sincoder is the same person who's been doing work in the config files
[2017-07-19 18:15:35]
torneo :
Need to ask for schematics
[2017-07-19 19:42:12]
martinbogo :
DAMNIT
[2017-07-19 19:42:15]
martinbogo :
smoked core board #2
[2017-07-19 19:42:21]
martinbogo :
AAAAAAAAAARRRRRGHHH!
[2017-07-19 19:42:39]
martinbogo :
At least this time, it wasn't because I was too tired... it was an honest mistake
[2017-07-19 19:42:52]
martinbogo :
Baking BGA's on is hard
[2017-07-19 19:47:17]
kilrah :
oops :cry:
[2017-07-19 19:48:49]
hostile :
Bogo... I have one that I have a bad chmod setting on dji_system_start.sh
[2017-07-19 19:48:55]
hostile :
would it be useful to you?
[2017-07-19 19:49:03]
hostile :
also the one freaky bricked writing to bootimg?
[2017-07-19 19:49:10]
hostile :
PM me an address I'll send em to you
[2017-07-19 20:10:54]
ender :
you guys DO know that you just need to add one sentence with a paypal account and would probably be able to buy a bunch of i2's with some coreboards, right ? Just sayin…
[2017-07-19 20:14:45]
hostile :
I don't wanna start getting funny by accepting any kinda money
[2017-07-19 20:14:49]
hostile :
been there with OpenPilot
[2017-07-19 20:14:54]
hostile :
$$ makes projects **weird**
[2017-07-19 20:15:05]
hostile :
I'd rather those that want to do i2 research... buy a board and dive in
[2017-07-19 20:15:15]
hostile :
and the rest of us can beg borrow and steal :wink:
[2017-07-19 20:25:55]
kilrah :
openpilot was all kinds of fucked up in many occasions...
[2017-07-19 20:26:22]
kilrah :
remember hanging around at some point, ambiance was more than weird indeed
[2017-07-19 20:38:16]
hostile :
caviar club is hard to be in =]
[2017-07-19 20:47:06]
freaky123 :
Nice that battery repo
[2017-07-19 20:47:23]
freaky123 :
He was faster than me :( I wanted to release something like this
[2017-07-19 20:49:44]
guest :
at the end of all this i want to buy you guys a beer...
[2017-07-19 20:50:29]
kilrah :
<https://beeroverip.org/>
[2017-07-19 21:07:38]
czokie :
Beer over IP - LOVE IT!
[2017-07-19 21:07:50]
czokie :
What is the encapsulation?
[2017-07-19 21:09:04]
kilrah :
the pipes, the pipes...
[2017-07-19 21:10:09]
czokie :
from beer to beer, and down the mountainside...
[2017-07-19 21:12:47]
gcbrent :
coder humour? :joy:
[2017-07-20 07:43:49]
czokie :
Team: Question regarding this...
[2017-07-20 07:43:51]
czokie :
comm_serial2pcap.py
DJI serial bus sniffer with pcap output format.
The script captures data from two UARTs and attempts to packetise the streams. Packets CRC is checked before the data is passed to the pcap file or fifo. Any tool with pcap format support can then be used to analyse the data (ie. Wireshark).
The utility requires two serial interfaces with RX lines connected to RX and TX lines within the drone.
Example of starting the capture from two UART-to-TTL (aka FTDI) converters:
./comm_serial2pcap.py -b 115200 -F /tmp/wsf /dev/ttyUSB0 /dev/ttyUSB1
[2017-07-20 07:44:05]
czokie :
What is the intent of two tty's ....
[2017-07-20 07:44:56]
czokie :
Assuming this is on a laptop/pc connected to aircraft via usb ... we've got one tty port - no?
[2017-07-20 07:53:27]
kilrah :
becasue you want to capture both TX and RX lines - needs 2 receivers
[2017-07-20 07:56:46]
czokie :
Yep - So are we assuming there is a need to build a custom cable splitting the tx and rx? Is that the intent?
[2017-07-20 07:58:32]
kilrah :
you take two usb->uart, and connect the RX line of each to both lines of the (3rd) uart you want to snoop
[2017-07-20 08:14:22]
czokie :
Sorry - was distracted...
[2017-07-20 08:15:21]
czokie :
But if I'm just doing an initial look @ the connection from laptop to aircraft (as opposed to anything internal)... do I still need to do that? Wouldn't I have access to both sides of that connection, or is the script only looking at input data?
[2017-07-20 08:16:51]
kilrah :
this script is if you've got hardware access
[2017-07-20 08:17:30]
kilrah :
in this case there is none (the logical "UART" is only a virtual one over USB)
[2017-07-20 08:17:55]
kilrah :
so you want a serial monitor program that intercepts->dumps the traffic on the software side
[2017-07-20 08:21:09]
czokie :
OK. After starting talking to you, I started googling on wireshark. I've used it for years in networking, but aparantly it can do usb natively - will see where that takes me
[2017-07-20 08:22:27]
kilrah :
yeah but I believe it does network interfaces only
[2017-07-20 08:22:43]
ender :
czokie, it makes the stuff a bit less readable with those additional layers. I am talking about similar in factory_mode_access channel right now
[2017-07-20 08:22:44]
czokie :
I found a page where it can do USB earlier today...
[2017-07-20 08:22:53]
kilrah :
the guys have mentioned the tools they were using, you can probably search the slack archives
[2017-07-20 08:23:05]
kilrah :
yes RNDIS = network over usb
[2017-07-20 08:23:24]
kilrah :
not VCP I believe
[2017-07-20 08:23:39]
ender :
if you listen to usb natively you get a wild mix of network rndis & virtual UART both also repacked --> weird
[2017-07-20 08:23:58]
ender :
maybe use wireshark for the rndis part and a com redirector / sniffer for the DUML part ?!
[2017-07-20 08:24:14]
czokie :
Earlier - for testing - I ran the script that was in git - and it looked like it was capturing relevant traffic.
[2017-07-20 08:24:28]
czokie :
when I used the script - I used the same port listed twice
[2017-07-20 08:24:35]
czokie :
and it was working - just havnt had a look at the pcap files yet
[2017-07-20 08:30:58]
kilrah :
ok, nice
[2017-07-20 08:31:36]
kilrah :
didn't you get the same stuff twice?
[2017-07-20 08:32:07]
czokie :
I was worried about that - and maybe I did - but if thats the case, it will be a quick tweak in the python to deal with that :slightly_smiling_face:
[2017-07-20 08:32:15]
czokie :
I just haven't done USB sniffing before
[2017-07-20 08:32:53]
czokie :
Maybe start again in a couple of hours - Some downtime for now for dinner and "Australian Ninja Warrior"
[2017-07-20 09:19:02]
jezzab :
Oh its on tonight? lol
[2017-07-20 12:26:24]
czokie :
Replay
[2017-07-20 12:26:28]
czokie :
foxtel
[2017-07-20 13:18:39]
ender :
woops, does someone have a spare gimbal PCB (and or ribbon cable) ? My friend did something stupid and he doesnt want to send his core board to Freaky :wink:
[2017-07-20 13:19:05]
ender :
No but if you have one for sale or know a good source, just let me know :slightly_smiling_face:
[2017-07-20 13:24:06]
aciid :
@ender theres some sellers on ebay, the products they sell have probably "fallen" off the manufacturing line
[2017-07-20 13:24:09]
aciid :
into theri backpacks
[2017-07-20 13:24:59]
aciid :
@ender <http://www.ebay.com/itm/Flex-Flat-Ribbon-Cable-Kabel-Kamera-Gimbal-Layer-Zubehor-fur-DJI-Mavic-Pro-RC540-/132151081395?hash=item1ec4d179b3:g:Q6wAAOSwAANY5n2m>
[2017-07-20 13:25:29]
aciid :
flew mine into a birch tree, luckily had the gimbal bulb on it, no damage
[2017-07-20 13:25:38]
aciid :
three props split tho
[2017-07-20 13:26:07]
ender :
yup the ribbon cable is the easier part i guess, saw a guy “thunderdrones” at MP selling the PCB…
[2017-07-20 13:26:19]
ender :
no serious source…
[2017-07-20 13:26:22]
aciid :
how bad is it? pictures?
[2017-07-20 13:27:02]
kilrah :
there are several chinese copies for the flex etc now
[2017-07-20 13:27:11]
the_lord :
<http://www.sdshobby.com/dji-series/flat-cable-repairing-cable-for-dji-mavic-pro-gimbal.html>
[2017-07-20 13:27:39]
kilrah :
thunderdrones buys tons of mavics both new and crashed and scavenges the parts so they're original
[2017-07-20 13:30:12]
ender :
thx ! need to find that PCB, he actually broke it when fingering on the cable, ARGHH
[2017-07-20 13:30:23]
ender :
yet need to see it maybe its not THAT bad…
[2017-07-20 13:30:38]
ender :
MAY also buy a defective Mavic for parts…
[2017-07-20 13:31:11]
aciid :
would also buy one in a heartbeat, these things are build like tanks. but theres a lot of parts you can use
[2017-07-20 13:39:11]
kilrah :
probs with buying spares for parts is you always break the same things, so it only works if you do large scale...
[2017-07-20 13:40:45]
ender :
You should see my hoarded stock :wink:
[2017-07-20 13:40:50]
ender :
cya guys !
[2017-07-20 17:08:23]
martinbogo :
WOO!
[2017-07-20 17:08:27]
martinbogo :
New hardware packages arrived today
[2017-07-20 17:08:56]
martinbogo :
aaaaand .. in one of the boxes is a brand-spanking-new cendence remote control
[2017-07-20 17:09:05]
martinbogo :
So, guess what I am going to do this weekend :slightly_smiling_face:
[2017-07-20 17:10:13]
the_lord :
rest in peaces Cendence
[2017-07-20 17:12:35]
martinbogo :
I'm -not- going to break it. I'm a pro when it comes to disassembly.
[2017-07-20 17:12:43]
martinbogo :
But I am going to very thoroughly analyze it
[2017-07-20 17:13:17]
martinbogo :
@the_lord : You know DJI does a really good job of boxing/packaging normally .. but the cendence controller comes in some SWANKY packaging.
[2017-07-20 17:13:26]
martinbogo :
No fluffy styrofoam here!
[2017-07-20 17:13:38]
martinbogo :
Solid all-plastic box, with water-tight seals, and a very nice padded interior
[2017-07-20 17:13:51]
the_lord :
that means its pre-production sample ??
[2017-07-20 17:14:01]
martinbogo :
for a US$1000 transmitter, they really package it nicely
[2017-07-20 17:14:33]
martinbogo :
I think this is final packaging. It has a UPC code on the side of the over-sleeve. That is a standard carton box, like the P4P comes in
[2017-07-20 17:15:05]
martinbogo :
Everyone here at work has been looking at it going "What's that? Why weren't we told we had a cool new project..."
[2017-07-20 17:15:08]
martinbogo :
**heh**
[2017-07-20 17:16:16]
the_lord :
ahh i see
[2017-07-20 17:16:24]
martinbogo :
I won't have time to look at more hardware till this weekend, but I DO have the lab at work to be in all weekend long... so more advanced hardware reverse engineering
[2017-07-20 17:17:05]
the_lord :
first thing you'll do is dump the system and take full backup
[2017-07-20 17:17:30]
martinbogo :
I can tell you one thing -- that android tablet sitting on top?
[2017-07-20 17:17:41]
martinbogo :
ABSOLUTELY near-stock Android
[2017-07-20 17:18:00]
martinbogo :
They customized the bootloading screen, and ( of course ) shut off adb
[2017-07-20 17:18:14]
martinbogo :
but it's going to be easy to root/hack
[2017-07-20 17:18:36]
martinbogo :
No play store ( of course ) and no direct support for 3rd party app installation
[2017-07-20 18:16:28]
kilrah :
wait, you have a screen on top? that's not supposed to be part of the remote... so you DID get a crystalsky?
[2017-07-20 18:17:42]
martinbogo :
Looks like it
[2017-07-20 18:17:46]
martinbogo :
It's in the box
[2017-07-20 18:18:00]
martinbogo :
it has a slot right next to the transmitter to live in
[2017-07-20 18:18:20]
martinbogo :
@kilrah : So, looks like you might get your wish ( partially )
[2017-07-20 18:18:44]
martinbogo :
But I won't be looking much at this transmitter combo _until_ we finish more rooting work on the mavic/p4/i2/etc
[2017-07-20 18:19:12]
martinbogo :
Top priority is still preserving root, and getting some sort of easy way to install apps on the bird
[2017-07-20 18:19:17]
martinbogo :
also, unlocking the root FS
[2017-07-20 18:19:38]
martinbogo :
because we aren't -quite- there yet .. it's still locked away where we can't modify the kernel, bootloader, etc
[2017-07-20 18:25:00]
kilrah :
sure
[2017-07-20 18:26:15]
hostile :
@martinbogo check the message in #core
[2017-07-20 18:26:23]
hostile :
the update re: Bruce Perens...
[2017-07-20 18:26:45]
hostile :
re: "we can't modify the kernel, bootloader,"
[2017-07-20 18:32:30]
martinbogo :
It will take time -- we should continue to attempt it on our own
[2017-07-20 18:32:48]
martinbogo :
Even with kernel sources, we have to unlock the processor -- DJI absolutely has -no- requirement to do so under any licenses
[2017-07-20 18:33:27]
martinbogo :
With the executable memory locked down, I don't think we can even do the chain-load-kernel trick
[2017-07-20 18:33:36]
martinbogo :
kerneld executing a new kernel
[2017-07-20 18:40:16]
hostile :
oh indeed... no plans to stop
[2017-07-20 21:00:46]
martinbogo :
@hostile : MOVIDIUS chip available from Intel!!!
[2017-07-20 21:00:47]
martinbogo :
<http://www.mouser.com/ProductDetail/Intel/NCSM2450DK/?qs=HXFqYaX1Q2wnBdnclDFUCw%3d%3d>
[2017-07-20 21:00:54]
martinbogo :
$79, to hack away
[2017-07-20 21:01:02]
martinbogo :
devkit :slightly_smiling_face:
[2017-07-20 21:01:23]
martinbogo :
<http://www.mouser.com/new/Intel/intel-movidius-stick/>
[2017-07-20 21:02:52]
martinbogo :
I see that they are obliquiely refering to Nest's new "gesture recognition" features with a nameless device in the video
[2017-07-20 21:02:59]
kilrah :
interesting
[2017-07-20 21:05:45]
aciid :
@martinbogo is this the thing google was developing 4 years back?
[2017-07-20 21:06:04]
martinbogo :
Nope
[2017-07-20 21:06:14]
martinbogo :
This is the next generation of Nest thermostat and home control
[2017-07-20 21:06:20]
martinbogo :
They are combining the Nest + Google Home Hub
[2017-07-20 21:06:31]
martinbogo :
so the Nest thermostat will have more do to with your home control
[2017-07-20 21:14:57]
martinbogo :
GAH
[2017-07-20 21:15:00]
martinbogo :
re-compileing
[2017-07-20 21:15:06]
martinbogo :
I forgot to make the buildtool chain static
[2017-07-21 01:03:21]
jezzab :
Is there some stop inside the camera gimbal? My P4 decided to attempt to mame me the other day testing Active Track on my P4. Dont crouch down btw, it will fly at you lol. and collided with a pole. No biggie but the camera got spun too far and I popped it back. On the POST it goes too far and stops so I give it a little encouragement an it comes back to where it should be
[2017-07-21 01:04:03]
hostile :
heh
[2017-07-21 01:04:13]
jezzab :
Bar that works fine but seems to have lost a touch of "strength" as when you accelerate it will dip for a moment
[2017-07-21 10:57:41]
ender :
Guys, do you know offhanded if the Ambarella SoC hosting the IMX377 is a A9SE ?
[2017-07-21 11:15:36]
ender :
Seems to be A9-A1-RH, like GoPro4 uhh so many variants…
[2017-07-21 13:24:42]
hostile :
a9 iirc
[2017-07-21 13:39:52]
ender :
@hostile thats for sure, i dont know if the variations “show” in the software interface…
[2017-07-21 13:45:15]
hostile :
cat /proc/cpuinfo after telneting in
[2017-07-21 13:50:26]
martinbogo :
Ambarella A9
[2017-07-21 13:51:01]
martinbogo :
@hostile : You've been able to say "hello" directly to the Ambarella?
[2017-07-21 13:51:06]
ender :
yeah yeah yeaj that A9 was known but thanks guys, i guess i narrowed it doen to the A1-RH whatever difference that may make
[2017-07-21 13:51:33]
hostile :
yeah I've telnetted into it via the dikfer port on the back
[2017-07-21 13:51:38]
hostile :
it is just RNDIS
[2017-07-21 13:51:44]
hostile :
with some known IPs and passwords
[2017-07-21 13:51:58]
ender :
i guess its the same with virtual USB client --> connect to osx :slightly_smiling_face: just less hassle…
[2017-07-21 13:52:09]
hostile :
@martinbogo get connected to the dikfer and PM me I can walk ya through it
[2017-07-21 13:52:13]
martinbogo :
Hmmm .. I wonder how that works on the P4P
[2017-07-21 13:52:22]
hostile :
I hear on p4 it is under the gimbal
[2017-07-21 13:52:34]
hostile :
BUT... also... we can send DUML command to open the internal IP route IIRC
[2017-07-21 13:52:38]
ender :
what vision SoC does the Sparky have ? someone knows offhand ?!
[2017-07-21 13:52:39]
hostile :
from looking at upgrade logs
[2017-07-21 13:53:22]
ender :
@hostile oh so there is no internal usb link vision <--->core like on Sparky ?
[2017-07-21 13:53:33]
martinbogo :
@hostile : I see that in start_dji_system.sh, it configures BOTH a 192.168.0.1 network on USB0, and the RNDIS network
[2017-07-21 13:53:43]
martinbogo :
does that mean the the usb0 device is the ambarella?
[2017-07-21 13:54:37]
ender :
i dont have my mavic here, why not just upload “vhusbdarm” and work on Desktop ?!
[2017-07-21 13:55:26]
martinbogo :
root@wm330_dz_vp0001_v5:/system/bin # ifconfig usb0 192.168.0.1
error: SIOCSIFADDR (No such device)
[2017-07-21 13:55:48]
ender :
330 is p4p ?
[2017-07-21 13:55:58]
martinbogo :
P4 standard
[2017-07-21 13:56:03]
ender :
okay, ouch
[2017-07-21 13:56:05]
martinbogo :
I have the P4P still wrapped up in it's original box
[2017-07-21 13:56:29]
martinbogo :
I'm starting to have quite a little collection of "never flown" DJI hardware now :slightly_smiling_face:
[2017-07-21 13:56:52]
martinbogo :
Especially since I convinced the company I contract with to get interested in DJI stuff :slightly_smiling_face:
[2017-07-21 13:57:17]
martinbogo :
Still waiting on a decision on my boss to get an Osmo, Spark, and a few others to complete "the set"
[2017-07-21 13:58:37]
hostile :
I think so... it is 192.168.41.1 IIRC
[2017-07-21 13:59:11]
martinbogo :
Right now, the list of hardware here ( outside of the mavic core boards ) is : Phantom 3, P4, Mavic(s), Cendence, CrystalSky, and an I2
[2017-07-21 13:59:53]
martinbogo :
Missing are the Osmo, any of the M series, any of the A series, Spark, and some other related hardware like Googles, boxes, etc
[2017-07-21 14:01:53]
martinbogo :
@hostile From -inside- the P4, what interface in linux should I expect the A9 to be on?
[2017-07-21 14:03:13]
martinbogo :
data/dji/log/upgrade08.log:I/DUSS&5a[ handle_dji_device_event: 335]:( 206): add network interface: usb0
data/dji/log/upgrade08.log:I/DUSS&5a[ handle_dji_device_event: 340]:( 206): Handle events for usb0 network plug in.
data/dji/log/upgrade08.log:I/DUSS&5a[sys_event_rt_control_by_: 975]:( 206): Enable Route table 0: dev name usb0
data/dji/log/upgrade08.log:I/DUSS&5a[sys_event_rt_control_by_: 975]:( 206): Enable Route table 1: dev name usb0
data/dji/log/upgrade08.log:I/DUSS&5a[sys_event_rt_control_by_: 975]:( 206): Enable Route table 4: dev name usb0
[2017-07-21 14:06:56]
hostile :
"From -inside- the P4, what interface in linux should I expect the A9 to be on?" unsure... I've only connected directly via Dikfer on Mavic. I am told under the gimbal is a USB port... that is the same
[2017-07-21 14:07:50]
martinbogo :
Hmm .. then it should be the usb0 that's referenced
[2017-07-21 14:08:48]
hostile :
I think you have to send some DUML to enable it though
[2017-07-21 14:08:54]
hostile :
check an upgrade00.log
[2017-07-21 14:08:54]
ender :
ugh
[2017-07-21 14:09:18]
ender :
need to run, damned, interesting subject here… cya !
[2017-07-21 14:11:15]
martinbogo :
@hostile : There has to be a way to manipulate that "route table" from inside the OS
[2017-07-21 14:11:20]
martinbogo :
Because the scripts do it
[2017-07-21 14:11:34]
martinbogo :
and at least with this .. I know that route table 0, 1, and 4 are "dev name usb0"
[2017-07-21 14:12:51]
hostile :
I suspect dji_sys holds the key
[2017-07-21 14:13:01]
hostile :
my bet.. would be on a mode stwitch for the usb
[2017-07-21 14:13:08]
hostile :
you know how "gadgets" work
[2017-07-21 14:13:16]
hostile :
they can be different things when you send em a certain packet
[2017-07-21 14:13:43]
martinbogo :
on property:dji.usbmuxd=1
start usbmuxd
[2017-07-21 14:14:46]
martinbogo :
<3>[ 34.069334] c1 531 (dji_vision) uart2 already has set quot! baud 9600, quot 60!
[2017-07-21 14:15:38]
martinbogo :
<6>[ 9.262653] c0 39 (khubd) usb 2-1.1: USB disconnect, device number 3
<6>[ 9.262858] c0 39 (khubd) cdc_ether 2-1.1:1.0 usb0: unregister 'cdc_ether' usb-comip-hcd.2-1.1, CDC Ethernet Device
[2017-07-21 14:16:04]
martinbogo :
It happens early in the boot sequence
[2017-07-21 14:16:40]
hostile :
modprobe cdc_ether?
[2017-07-21 14:16:54]
martinbogo :
We have to configure the switch to expose the device, first
[2017-07-21 14:17:03]
martinbogo :
I'm starting to understand the routing they are doing with the CPLD
[2017-07-21 14:20:02]
kilrah :
i have a 2nd set of goggles that I intended to sell… but nearly tempted to keep them to try and hack stuff
[2017-07-21 14:20:07]
martinbogo :
The HAL table in the dji json has the full "table of magic"
[2017-07-21 14:20:38]
kilrah :
I’d love to get a screen out and replace that with an adapter from whatever interface it has to hdmi
[2017-07-21 14:21:26]
martinbogo :
For example : "18": {"status": 0, "target": "camera", "index": 0, "channel": "ip", "distance": 0, "protocol": "v1",
"ip": {"interface": "usb0", "local_port": 20001, "remote_address": "192.168.1.3", "remote_port": 20001}}
[2017-07-21 14:31:07]
goof :
do the goggles accept a 2x1080p input in any way or is it purely 1080p only
as in, can you run any form of 3D signal from a DVR or PC GPU into them?
[2017-07-21 15:29:56]
kilrah :
it's supposed to be 2D only
[2017-07-21 15:30:25]
kilrah :
Pretty sure it could support 3D, and might be enabled later
[2017-07-21 15:30:30]
kilrah :
should try with a PC though
[2017-07-21 15:35:11]
aim120 :
Would be cool if it has support to watch videos/movies from a NAS .(don't own a goggles yet,so no idea how it is for movies)
[2017-07-21 15:38:04]
goof :
naww
[2017-07-21 15:38:28]
goof :
so the signal is internally mirrored to the two screens I guess
[2017-07-21 16:53:09]
hostile :
I go some detail on the Spark RC finally...
# ifconfig en1
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 8c:2d:aa:52:0b:cd
inet6 fe80::47a:59bd:acc2:49f%en1 prefixlen 64 secured scopeid 0x5
inet 192.168.1.20 netmask 0xffffff00 broadcast 192.168.1.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
# ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1): 56 data bytes
64 bytes from 192.168.1.1: icmp_seq=0 ttl=64 time=12.305 ms
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=12.876 ms
^C
# ftp 192.168.1.1
Connected to 192.168.1.1.
220 (vsFTPd 3.0.2)
Name (192.168.1.1:root): root
331 Please specify the password.
Password: Big~9China
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
229 Entering Extended Passive Mode (|||45587|).
150 Here comes the directory listing.
-rw-r--r-- 1 0 0 4 Jun 12 06:30 beat
-rw-r--r-- 1 0 0 22 Jun 12 06:27 fw_log.txt
-rw-r--r-- 1 0 0 21 Jun 12 06:27 fw_res.txt
drwxr-xr-x 2 0 0 40 Jan 01 1970 lock
drwxr-xr-x 2 0 0 60 Jan 01 1970 log
-rw-r--r-- 1 0 0 2625 Jun 12 06:30 log.txt
-rw-r--r-- 1 0 0 5 Jun 12 06:27 phy_name
-rw-r--r-- 1 0 0 724 Jun 12 06:27 rc002.cfg
drwxr-xr-x 4 0 0 200 Jun 12 06:27 run
-rw-r--r-- 1 0 0 0 Jun 12 06:30 scan_result
-rw-r--r-- 1 0 0 23 Jun 12 06:27 start
226 Directory send OK.
# cat rc002.cfg
<?xml version="1.0" encoding="utf-8"?>
<dji>
<device id="rc002">
<firmware formal="01.00.0100">
<release version="01.00.0100" antirollback="1" antirollback_ext="cn:1" enforce="0" enforce_ext="cn:0" enforce_time="2017-06-16T08:38:38+00:00" from="2017/06/16" expire="2018/06/16">
<module id="2700" version="01.00.00.12" type="" group="" size="7658336" md5="5a66d9578a76ff1d97da4176f00ccd2c">rc002_2700_v01.00.00.12_20170612.pro.fw.sig</module>
<module id="0600" version="03.01.01.16" type="" group="" size="25216" md5="5fc2722be94bcb4aa741fc53789e0b39">rc002_0600_v03.01.01.16_20170606.pro.fw.sig</module>
</release>
</firmware>
</device>
</dji>
Still don't have the .sigs collected tho.
[2017-07-21 17:00:52]
hostile :
Nmap scan report for 192.168.1.1
Host is up (0.0069s latency).
Not shown: 65532 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 3.0.2
19003/tcp open tcpwrapped
19005/tcp open tcpwrapped
MAC Address: 60:60:1F:64:80:CC (SZ DJI Technology)
Device type: general purpose
Running: Linux 3.X
OS CPE: cpe:/o:linux:linux_kernel:3
OS details: Linux 3.2 - 3.16
[2017-07-21 17:01:58]
hostile :
@the_lord Spark RC **may** be speaking DUML over port 19003 FWIW
[2017-07-21 17:03:56]
hostile :
ftp> ls run
229 Entering Extended Passive Mode (|||26258|).
150 Here comes the directory listing.
drwxr-x--- 2 0 0 60 Jun 12 06:27 hostapd
-rwxr-xr-x 1 0 0 239 Jun 12 06:27 hostapd_softap.conf
-rw-r--r-- 1 0 0 4 Jan 01 1970 klogd.pid
-rw-r--r-- 1 0 0 4 Jan 01 1970 syslogd.pid
-rw-r--r-- 1 0 0 4 Jun 12 06:27 udhcpd.pid
srw-rw-rw- 1 0 0 0 Jun 12 06:27 usbmuxd
-rw-r--r-- 1 0 0 3 Jun 12 06:27 usbmuxd.pid
drwxr-xr-x 2 0 0 40 Jun 12 06:27 vsftpd
[2017-07-21 17:04:50]
hostile :
LULZ
[2017-07-21 17:04:59]
hostile :
@martinbogo the chroot on Spark RC is borked
[2017-07-21 17:05:00]
hostile :
ftp> pwd
Remote directory: /tmp
ftp> ls /
229 Entering Extended Passive Mode (|||27849|).
150 Here comes the directory listing.
drwxr-xr-x 2 0 0 0 Jan 17 02:49 art
drwxr-xr-x 2 0 0 0 Jun 12 06:23 bin
drwxrwxrwt 5 0 0 1020 Jun 12 06:27 dev
drwxr-xr-x 11 0 0 0 Jan 01 1970 etc
drwxr-xr-x 11 0 0 0 Jun 12 06:23 lib
drwxr-xr-x 2 0 0 0 Jun 12 06:22 mnt
drwxr-xr-x 2 0 0 0 Jun 12 06:22 overlay
dr-xr-xr-x 43 0 0 0 Jan 01 1970 proc
drwxr-xr-x 2 0 0 0 Nov 16 2016 rom
drwxr-xr-x 2 0 0 0 Jun 12 06:22 root
drwxr-xr-x 2 0 0 0 Nov 16 2016 sbin
dr-xr-xr-x 11 0 0 0 Jan 01 1970 sys
drwxrwxrwt 5 0 0 260 Jun 12 06:27 tmp
drwxr-xr-x 2 0 0 0 Nov 16 2016 tx99
drwxr-xr-x 6 0 0 0 Jun 12 06:23 usr
lrwxrwxrwx 1 0 0 4 Jun 12 06:23 var -> /tmp
drwxr-xr-x 2 0 0 0 Jun 12 06:22 www
[2017-07-21 17:07:21]
hostile :
bash-3.2$ cat openwrt_release
DISTRIB_ID="OpenWrt"
DISTRIB_RELEASE="Barrier Breaker"
DISTRIB_REVISION="r4537"
DISTRIB_CODENAME="barrier_breaker"
DISTRIB_TARGET="ar71xx/generic"
DISTRIB_DESCRIPTION="OpenWrt Barrier Breaker 14.07"
DISTRIB_TAINTS="no-all no-ipv6 busybox"
[2017-07-21 17:08:53]
hostile :
$ cat vsftpd.conf
local_root=/tmp
background=YES
listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
check_shell=NO
[2017-07-21 17:08:57]
hostile :
fail!
[2017-07-21 17:19:32]
hostile :
wish me luck...
[2017-07-21 17:19:33]
hostile :
ftp> put rc.local /etc/rc.local
local: rc.local remote: /etc/rc.local
229 Entering Extended Passive Mode (|||38224|).
150 Ok to send data.
100% |****************************************************************************************************************************************************************************************| 931 14.79 MiB/s 00:00 ETA
226 Transfer complete.
931 bytes sent in 00:00 (81.35 KiB/s)
[2017-07-21 17:19:51]
hostile :
bash-3.2$ tail -n 4 rc.local
busybox nc -l -p 1234 -e /bin/sh&
exit 0
[2017-07-21 17:21:34]
the_lord :
i didn't try the Big~ password :slightly_smiling_face:
[2017-07-21 17:22:03]
the_lord :
i didn't expect them till now didn't change the password they used several years ago
[2017-07-21 17:29:03]
hostile :
no dice on the rc.local shell... but should be trivial to shell out on it
[2017-07-21 20:08:29]
jan2642 :
Barrier Breaker is way old... It could be that the rootfs is an initramfs. You can change whatever you want but all changes are lost when powering down... Just guessing here, based on OpenWRT experience from a time long gone.
[2017-07-21 20:08:58]
hostile :
changes stuck when I rebooted..
[2017-07-21 20:09:09]
hostile :
shell didn't fire for other reasons
[2017-07-21 20:09:11]
jan2642 :
That's good news
[2017-07-21 20:09:56]
jan2642 :
Maybe the busybox doesn't have nc ?
[2017-07-21 20:10:11]
hostile :
it does
[2017-07-21 20:10:18]
hostile :
I think it just was in exit condition
[2017-07-21 20:32:04]
ender :
btw is sparky RC also SDR or plain Wifi, do you guys know ?
[2017-07-21 20:36:18]
hostile :
<https://dl.djicdn.com/downloads/phantom_4_pro/20170307/GL300E_RC_v1130_20170307.zip>
[2017-07-21 21:15:28]
hostile :
01-01 00:20:03.202 243 408 I DUSS&63[ sys_usb_switch: 316]:: mode: 0, up_status 5, conn_pc 1, conn_app_timeout 0, cam_rt_mode 0, cam_mode 5
01-01 00:20:03.355 249 388 W DUSS&63[ tcp_async_connect: 311]:: [sys]EINPROGRESS in connect() - selecting,addr=192.168.41.2
01-01 00:20:04.356 249 388 W DUSS&63[ tcp_async_connect: 334]:: [sys]Timeout in select() - Cancelling, addr=192.168.41.2
[2017-07-21 21:15:28]
hostile :
@martinbogo this is refrencing the correct IP for teh ambarella SoC I think
[2017-07-21 21:27:15]
kilrah :
pushing update to camera on mavic seems to be `busybox ftpput -P 21 192.168.1.3 FC220_SEFw_receive.bin /cache/upgrade/unsignimgs//wm220_0100_v02.06.04.84_20170324_ca02.pro.fw`
[2017-07-21 21:28:37]
hostile :
once the route is up... we gotta figure the DUML to get the route enabled
[2017-07-21 21:29:03]
ender :
@kilrah, how did you guess that ?
[2017-07-21 21:30:16]
ender :
if those unsigned ambarella images are similar to the ones from Hero4 / yi4k / whatnot the guys in dashcam forum will rip it apart in a second…
[2017-07-21 21:31:02]
hostile :
they are...
[2017-07-21 21:31:09]
hostile :
all the gopro tools work on em...
[2017-07-21 21:31:15]
hostile :
extracting and such
[2017-07-21 21:31:16]
ender :
hehe
[2017-07-21 21:31:35]
ender :
did i ask before ?! is sparky also a cheaper ambarella ?!
[2017-07-21 21:31:42]
ender :
i should know by now…
[2017-07-21 21:32:50]
ender :
but at least i met my job deadline today so i can go on holidays, thats also nice :slightly_smiling_face:
[2017-07-21 21:36:46]
kilrah :
@ender from looking at @samd12 's log in ~firm_cache
[2017-07-21 21:37:01]
ender :
okay :slightly_smiling_face:
[2017-07-21 21:37:49]
kilrah :
seems we can extract the "unsigned" images during upgrade with root
[2017-07-21 21:38:04]
kilrah :
but I believe that's jsut stripping some bytes at beginning/end anyway
[2017-07-21 21:38:07]
hostile :
yeh using dji_verify -o
[2017-07-21 21:38:14]
ender :
yes, then let those tools ripit apart, change stuff and reflash via adb shell
[2017-07-21 21:38:37]
kilrah :
ah yeah nice, was thinking adb pull from /cache/upgrade/unsignimgs/
[2017-07-21 21:38:42]
hostile :
I think there is a rube goldberg situation to get unsigned images flashed...
[2017-07-21 21:38:57]
hostile :
we need a file in /cache to exist IIRC
[2017-07-21 21:39:05]
kilrah :
yes and no, becasue that log shows that at least for the cam it's the unsigned img that's sent to it!
[2017-07-21 21:39:16]
hostile :
ahh you specificially for that
[2017-07-21 21:39:17]
hostile :
got ya
[2017-07-21 21:39:36]
kilrah :
well that's ONE of the subsystems that looks pretty easy :smile:
[2017-07-21 21:40:04]
kilrah :
and since it's a rather interesting one...
[2017-07-21 21:40:10]
ender :
yup.
[2017-07-21 21:41:17]
ender :
the DJI VISON of the Mavic would present itself as a rndis device, right ? (if you use hidden USB)… Because Sparks DJI Vision does not seem to work as RNDIS :disappointed:
[2017-07-21 21:42:00]
kilrah :
dunno if we can write a modded file to /cache, change the perms to disallow writes so that unsigning the official file doesn't overwrite it...
[2017-07-21 21:42:18]
ender :
that would be nice, otherwise its timing…
[2017-07-21 21:42:27]
kilrah :
any way on linuxy OSs to redirect writes to a file that exists somewhere else transparently with symlinks or so?
[2017-07-21 21:42:53]
ender :
edit: SPARKS DJI Vision USB device seems not to be RNDIS above…
[2017-07-21 21:43:39]
kilrah :
send writes to /cache/xyz to /dev/null, while reads do actually come from /cache/xyz
[2017-07-21 21:46:10]
ender :
@kilrah, why do you need to listen in to the cam flashing, didnt you say its easy to get from the .sig to the unsigned one ?
[2017-07-21 21:46:48]
kilrah :
I'm just talking randomly about how to then inject a modded file in the normal upgrade process
[2017-07-21 21:47:33]
ender :
wouldnt you just be able to put that file there when drone is idling and to execute that said command ?
[2017-07-21 21:47:52]
kilrah :
yeh but we need to have access to whatever interface that is...
[2017-07-21 21:47:54]
ender :
oh no thats just PUSHING it, not upgrading execution…sry
[2017-07-21 21:48:27]
kilrah :
there's probably some command sent through an UART somewhere
[2017-07-21 21:48:47]
ender :
okay, so that route isnt up usually ? Then i get hostiles comments from above…
[2017-07-21 21:49:15]
ender :
and the other way round, using the telnet access to the ambarella and look if theres an upgrade shell script or something alike ?!
[2017-07-21 21:50:18]
hostile :
@ender "busybox chatter +i" will make a file immuatable... (can not be changed)
[2017-07-21 21:50:27]
kilrah :
no idea if it's up, no idea of what to send,...
[2017-07-21 21:51:01]
kilrah :
```[ sys_p1_verify_image:3740]:: ++++ id_idx = 0101, unsign_file_name /cache/upgrade/unsignimgs//wm220_0101_v02.06.04.84_20170324_ca02.pro.fw
[ sys_p1_unsign_img:1667]:: previously unsigned for /cache/upgrade/unsignimgs//wm220_0101_v02.06.04.84_20170324_ca02.pro.fw, file_size=59628, skip it```
[2017-07-21 21:51:12]
kilrah :
interesting, so possible that if a file is there it's used as is
[2017-07-21 21:51:28]
ender :
okay, to get some progress at the beginning, how would i remove sig from fw file ?!
[2017-07-21 21:51:41]
ender :
again from samd12 log ?
[2017-07-21 21:51:50]
kilrah :
yea
[2017-07-21 21:52:32]
kilrah :
@hostile but it will still send an error on a write attempt, yea? the upgrade would probably get interrupted then
[2017-07-21 21:52:37]
hostile :
ahh ender... you need to see my notes on remaking tar files...
[2017-07-21 21:52:56]
ender :
rebuilding the dji_system.bin ?
[2017-07-21 21:53:24]
hostile :
<https://github.com/MAVProxyUser/dji_system.bin/blob/master/README.md>
[2017-07-21 21:53:32]
hostile :
iMac:firm_cache hostile$ mkdir test iMac:firm_cache hostile$ cd test iMac:test hostile$ cp ../wm220_0305_v34.04.00.23_20161122.pro.fw.sig ../V01.03.0900_Mavic_dji_system/wm220.cfg.sig . iMac:test hostile$ tar cvf dji_system.bin *.sig a wm220.cfg.sig a wm220_0305_v34.04.00.23_20161122.pro.fw.sig
[2017-07-21 21:54:27]
hostile :
<https://github.com/MAVProxyUser/dji_system.bin/commit/c88b9d15261795907ab1a12341d8d0c21612f04d>
[2017-07-21 21:54:54]
ender :
ah now it makes sense :slightly_smiling_face:
[2017-07-21 22:03:00]
ender :
actually after reading it doesnt… That pushes around the sig files to create a new system.bin but it doesnt remove sigs or am i blind (that may very well the case) ?!
[2017-07-21 22:04:23]
hostile :
you are dealing with a failed update, right?
[2017-07-21 22:04:34]
hostile :
unpack the system_bin you are trying to use...
[2017-07-21 22:04:37]
hostile :
delete the camera bin
[2017-07-21 22:04:37]
kilrah :
you're all mixing stuff :smile:
[2017-07-21 22:04:39]
hostile :
tar it back up
[2017-07-21 22:04:41]
hostile :
and push it
[2017-07-21 22:05:12]
hostile :
I'd said like 30 times ... to remove .sig... "dji_verify -o"
[2017-07-21 22:05:13]
hostile :
lol
[2017-07-21 22:05:18]
hostile :
read the log files of an update
[2017-07-21 22:05:23]
hostile :
you can see the sigs getting removed
[2017-07-21 22:05:30]
hostile :
you need to know the module number
[2017-07-21 22:05:45]
hostile :
but IF pushing to camera... why not just make a dji_system.bin with ONLY the cam firmware in it
[2017-07-21 22:05:49]
hostile :
and let it go
[2017-07-21 22:05:58]
kilrah :
what the fuck, my PC just turned off
[2017-07-21 22:06:00]
hostile :
unless you insist on duplicating the manual steps I suppose
[2017-07-21 22:06:14]
kilrah :
we were talking of pushing a MODIFIED camera firmware
[2017-07-21 22:06:16]
hostile :
I've seen reboots cause serial drivers to et pissed @kill
[2017-07-21 22:06:37]
hostile :
you FIRST have to get it to talk to you...
[2017-07-21 22:06:45]
hostile :
the routes are not setup last I checked
[2017-07-21 22:06:56]
hostile :
you need the DUML to flip the interface on
[2017-07-21 22:07:07]
ender :
yes but last time you deleted it and then talked about tar stuff, that confuses a simple mind :slightly_smiling_face:
[2017-07-21 22:07:27]
ender :
and THAT comment was meant to be one line below :stuck_out_tongue:
[2017-07-21 22:07:41]
kilrah :
which is why I asked if we couldn’t hijack the upgrade procedure, and just replace the already unsigned .pro.fw in /cache
[2017-07-21 22:08:02]
hostile :
you could... as I mentioned above IF you can figure out the rube goldberg machine in /cache
[2017-07-21 22:08:06]
hostile :
there are a series of files written to
[2017-07-21 22:08:08]
hostile :
for status
[2017-07-21 22:08:09]
ender :
haha, its getting too late to mix two problems in one textstream :slightly_smiling_face:
[2017-07-21 22:08:15]
hostile :
you can see how it works in the upgrade logs
[2017-07-21 22:08:46]
kilrah :
yup, exactly what I said
[2017-07-21 22:08:53]
ender :
trying that §$%&§ -o now…
[2017-07-21 22:08:57]
kilrah :
and @ender started mixing things up
[2017-07-21 22:08:59]
kilrah :
lol
[2017-07-21 22:09:12]
ender :
ME ? I dare you… Well… PROBABLY :slightly_smiling_face:
[2017-07-21 22:09:38]
ender :
I just wanna remove friggin sig to look at Ambarella FW. Then LATER flash it but thats the NEXT step.
[2017-07-21 22:09:46]
ender :
So whos mixing up ? :slightly_smiling_face:
[2017-07-21 22:10:11]
kilrah :
we can see that all fw.sig are unsigned at the beginning of an upgrade, but the cam is the last thing to be upgraded - so if we do a full flash we likely have several minutes to replace the .fw in /cache before it’s pushed to the cam
[2017-07-21 22:10:27]
ender :
good !
[2017-07-21 22:10:35]
hostile :
OR... just figure out the DUML that flips the camera into IP mode...
[2017-07-21 22:10:38]
hostile :
and push the file.
[2017-07-21 22:10:40]
kilrah :
sure
[2017-07-21 22:10:51]
kilrah :
AND how to enable the different routes etc
[2017-07-21 22:10:58]
ender :
<--- hates elegant solutions :wink:
[2017-07-21 22:11:02]
hostile :
bogo was working on the routes earlier
[2017-07-21 22:11:06]
kilrah :
good
[2017-07-21 22:12:32]
kilrah :
That’s a piece of cake, but it was simply off topic in the current discussion
[2017-07-21 22:14:39]
ender :
hostile, did you USE dji_verify -o <output file> input file ? Its acting weird ?!
[2017-07-21 22:16:06]
jan2642 :
It needs a -n as well. If you grep you'll find some examples in the scripts, e.g. In_whitelist.sh
[2017-07-21 22:16:32]
ender :
ah it NEEDS, then the creator of the help output sucks :slightly_smiling_face:
[2017-07-21 22:16:34]
ender :
thx
[2017-07-21 22:17:50]
jan2642 :
It's not telling the full story no ;-)
[2017-07-21 22:18:32]
ender :
ah still get “ERROR failed to verify image header”
[2017-07-21 22:18:55]
ender :
well, trying later, need sleep, thx for bearing with me :slightly_smiling_face: night
[2017-07-21 22:19:02]
kilrah :
+1, night
[2017-07-22 01:30:12]
hotelzululima :
its NOT MAVIC but it could really help with disassembly and reassembly.. I have to admit this one caught me by surprise.. and comes with source code..
[2017-07-22 01:30:22]
hotelzululima :
<https://www.banggood.com/MINI-ES120-Mini-Motion-Control-Electric-Screwdriver-Smart-Repair-Tools-Built-in-STM32-Chip-p-1160943.html?rmmds=detail-left-hotproducts>
[2017-07-22 01:30:46]
hotelzululima :
ORDERED.. lusting after it too much after the TS-100 came in…
[2017-07-22 03:21:37]
gcbrent :
that's one hell of a screwdriver!
[2017-07-22 03:22:29]
jezzab :
wow
[2017-07-22 03:22:38]
jezzab :
i thought it was a vape pen first off lol
[2017-07-22 03:23:12]
gcbrent :
I have my shipment of vapes coming monday
[2017-07-22 03:23:16]
gcbrent :
cant wait
[2017-07-22 03:23:21]
hostile :
I was gonna say UT oh... you said the magic word
[2017-07-22 06:40:04]
kilrah :
neat screwdriver!! and it seems they finally got the TS100 price down, might finally get one
[2017-07-22 06:41:52]
hotelzululima :
they brought out a ts-100 upgraded model & the older model
[2017-07-22 06:42:28]
hotelzululima :
I LIKE having source code to my tools…
[2017-07-22 06:46:53]
kilrah :
would work well with my omnicharge on the move
[2017-07-22 16:11:33]
hotelzululima :
BTW after the order justifications.. an autoactivating torque limited mini screw driver is a no-brainer for those with RSI from doing fine screw work on laptops/smartphones and tablets.. as the shop models of electric screw drivers invariably have way too much torque for this kind of work ..also those of us with severe arthritis(live to be moi’s age and it will get you also :disappointed: )
[2017-07-22 18:05:55]
codeforge :
hi, do u know a way to switch spark led off totally without open it?
[2017-07-22 20:29:40]
ender :
duct tape comes to mind :slightly_smiling_face:
[2017-07-22 20:30:31]
hostile :
@codeforge at the bottom of the params menu are some buttons… there is duml you can sent to turn off the LEDS
[2017-07-22 20:30:38]
hostile :
I think also with root there are GPIOS
[2017-07-22 20:32:19]
ender :
BETTER then duct tape :slightly_smiling_face:
[2017-07-22 21:16:39]
codeforge :
ahhaha
[2017-07-22 21:22:57]
martinbogo :
@hotelzululima : That ES120 -- it's on AMAZON for $79!
[2017-07-22 21:23:09]
martinbogo :
@hotelzululima : I just snagged one, with Prime One-Day shipping
[2017-07-22 21:23:33]
martinbogo :
@hotelzululima : It's seldom that I add new hardware to my toolbox, but a motion control screwdriver? That didn't even require a thought.
[2017-07-22 21:37:05]
hotelzululima :
damn wish I had checked amazon.. would be here a lot quicker also..
[2017-07-22 21:40:13]
hotelzululima :
damn banggood took only 4hours to get prod into shipping.. unheard of.. WAS trying to cancel and reorde when I saw @martinbogo s note
[2017-07-22 21:40:57]
hotelzululima :
and no.. it didnt require thought at all.. been looking for a source archive since supposedly from the TS100 folk
[2017-07-22 21:46:46]
hotelzululima :
hmm thats a really good price but cheapest amazon offering without login is 95
[2017-07-22 21:47:07]
kilrah :
can't find the 79 either
[2017-07-22 21:51:33]
hotelzululima :
@martinbogo URL?
[2017-07-22 22:43:18]
martinbogo :
<https://www.amazon.com/dp/B073CPTS89/ref=cm_sw_r_cp_dp_T2_2t9CzbXPHFQPY>
[2017-07-22 22:43:28]
martinbogo :
I have Prime, might make a difference in the price you see
[2017-07-22 23:21:25]
hotelzululima :
indeed it does
[2017-07-24 03:04:01]
goof :
anyone know if the P4P and P4 gimbal arms / motors are interchangeable?
found a supplier nearby with cheap P4P part I want to try with the P4
[2017-07-24 03:05:18]
goof :
wait... they're advertised as P4P/advanced compatible
the P4A is basically the P4...
[2017-07-24 03:07:59]
jezzab :
got a link?
[2017-07-24 03:09:28]
the_lord :
could be interchangeable but the P4P/advance camera is bigger than P4 camera
[2017-07-24 03:12:00]
the_lord :
which arm you need?
[2017-07-24 03:14:08]
goof :
roll + yaw
[2017-07-24 03:14:20]
goof :
<http://www.riseabove.com.au/dji-phantom-4-pro-advanced-gimbal-replacement-roll>
[2017-07-24 03:16:16]
the_lord :
i just compared P4 to P4p gimbal
roll and yaw looks identical
i can't confirm unless i disassemble both and measure
[2017-07-24 03:17:37]
goof :
hmm
[2017-07-24 03:18:02]
goof :
I'd wager if they're advertising them for both the P4A and P4P they're identical
[2017-07-24 03:18:22]
goof :
might order a set, plus a known P4 part and compare them
[2017-07-24 03:18:27]
goof :
god knows I'm gonna need spares anyway :stuck_out_tongue:
[2017-07-24 03:18:45]
goof :
fairly sure the ribbon is different though
[2017-07-24 03:30:22]
goof :
ok comparing pictures the yaw arm is definitely different
[2017-07-24 03:30:34]
goof :
rear cover holes are in a different spot
[2017-07-24 05:48:16]
martinbogo :
For the record -- the guts of the Phantom 4 RC -- is a Phantom 3
[2017-07-24 06:06:45]
hotelzululima :
yep have p3p and p4 never really noticed the diff.
[2017-07-24 06:07:21]
hotelzululima :
thought they shared model numbers
[2017-07-24 06:11:17]
jezzab :
just wish i could "tighten" up my P4 gimbal and fix the problem where it goes too far on the init and gets stuck :disappointed:
[2017-07-24 06:16:58]
goof :
the mechanical limit for the pitch is in the bearing side
[2017-07-24 06:17:06]
jezzab :
oh
[2017-07-24 06:17:06]
goof :
opposite to the motor itself
[2017-07-24 06:17:10]
jezzab :
tell me more
[2017-07-24 06:17:32]
goof :
it's a 3/4 circle cut out of the roll arm
[2017-07-24 06:17:40]
jezzab :
it got "over extended" when it collided with a pole.......
[2017-07-24 06:17:43]
goof :
then a 1/4 circle in the camera housing
[2017-07-24 06:18:09]
goof :
might be able to get some steel putty or resin maybe and kinda fill in whatever's broken off in there
[2017-07-24 06:18:28]
goof :
also check the ribbon cable isn't getting caught up
[2017-07-24 06:19:24]
jezzab :
ribbon cable seems to be clear at the back but when its heading up to face the underside of the bird its over extending and gettin stuck
[2017-07-24 06:19:37]
jezzab :
have to manually slip it down and it continues to init fine
[2017-07-24 06:20:18]
jezzab :
thanks for that
[2017-07-24 06:21:03]
goof :
yeah some guys have had trouble with the ribbon
[2017-07-24 06:21:26]
goof :
have had to gently unstick it and restick it giving more or less slack in the cable to stop it binding
[2017-07-24 06:40:56]
jezzab :
Legend!
[2017-07-24 06:41:03]
jezzab :
Its somewhat improved. 95%
[2017-07-24 06:41:17]
jezzab :
the cable thats inside the ribbon cable cover was binding
[2017-07-24 06:41:33]
jezzab :
just removing the cover and putting it back on was enough to free it up
[2017-07-24 06:41:37]
goof :
nice
[2017-07-24 06:41:45]
goof :
I hate that sound it makes when it scrapes
[2017-07-24 06:41:51]
goof :
sounds worse than it is
[2017-07-24 06:42:20]
jezzab :
still a shadow of its former self. dips for a second when i nail it in P even oh well
[2017-07-24 06:42:35]
jezzab :
that started after... the incident lol
[2017-07-24 06:42:55]
jezzab :
yeah that sound is horrid
[2017-07-24 06:43:10]
goof :
naww
[2017-07-24 06:43:22]
goof :
might need a new pitch motor perhaps
[2017-07-24 06:43:31]
goof :
it's the easiest one to change
[2017-07-24 06:43:47]
jezzab :
you can buy it seperate?
[2017-07-24 06:43:54]
goof :
yeah
[2017-07-24 06:43:59]
jezzab :
in Oz lol?
[2017-07-24 06:44:06]
goof :
from ebay or other suppliers
[2017-07-24 06:44:23]
goof :
if you're in Aus [riseabove.com.au](http://riseabove.com.au) should have them
[2017-07-24 06:44:29]
jezzab :
sweet
[2017-07-24 06:44:34]
jezzab :
yeah in Melb
[2017-07-24 06:44:45]
goof :
they ship from NSW somewhere
[2017-07-24 06:45:35]
goof :
RE: the overextension problem: <https://imgur.com/a/ihqe8>
[2017-07-24 06:45:54]
jezzab :
They list P4 Pro/Adv but looks the same as P4 Standard?
[2017-07-24 06:46:08]
goof :
if you can manage to see past the ribbon cable, those 3/4 + 1/4 circle cutouts should look like that
relatively square edges
[2017-07-24 06:46:16]
goof :
as far as I can tell it looks the same
[2017-07-24 06:46:20]
jezzab :
yeah it was the ribbon
[2017-07-24 06:46:27]
goof :
the yaw motor is definitely different though
[2017-07-24 06:46:28]
jezzab :
i can feel the hard stops both ways now
[2017-07-24 06:46:32]
goof :
oh nice :smile:
[2017-07-24 06:46:38]
jezzab :
<http://www.riseabove.com.au/dji-phantom-4-pro-advanced-gimbal-pitch-motor>
[2017-07-24 06:46:40]
goof :
not sure about the roll motor
[2017-07-24 06:54:09]
goof :
if you replace the pitch motor:
1. Unscrew the 4 bolts holding the rear of the camera casing
2. Unscrew the 4 bolts holding the pitch motor to the camera and the roll arm.
3. Try and get that rubber plug out of the base of the camera. If you can't, no big drama. You can kinda force the rear cover off and the plug will come off by itself.
4. Take the rear cover off of the camera. It will require a little tug, it's plugged into the camera board itself. The pitch motor should come with it.
5. Lift the black tab next to the pitch motor cable and the cable should come free, releasing the motor + cable.
Installation is basically the opposite of these steps...
[2017-07-24 06:54:59]
jezzab :
Thanks for that
[2017-07-24 06:55:12]
jezzab :
I bascially had it off before just not the cam side
[2017-07-24 06:55:30]
jezzab :
sounds good
[2017-07-24 06:55:44]
goof :
:+1:
[2017-07-24 06:56:04]
goof :
I guess I'll find out when my parts turn up if the P4P pitch motor really is the same as the P4
[2017-07-24 06:56:12]
goof :
from photos I can't tell a difference
[2017-07-24 06:56:44]
jezzab :
Some sites see to list P4 or P4P/Adv hmm
[2017-07-24 06:57:17]
goof :
yeah
[2017-07-24 06:57:34]
goof :
I've seen sites list the yaw arm as universal across all P4s, but it's not
[2017-07-24 06:57:44]
goof :
the screw holes are different
[2017-07-24 06:58:04]
goof :
hard to find info on the other parts
[2017-07-24 07:06:25]
goof :
so far I've found one ebay listing that says the Pro motor is different to the P4
[2017-07-24 07:08:57]
jezzab :
Probably the one i saw lol
[2017-07-24 07:11:01]
goof :
I'll order one anyway, if it doesn't work I'm reasonably confident this old one still works anyway
[2017-07-24 07:11:11]
goof :
until I get a new ribbon cable I can't test though
[2017-07-24 07:33:31]
czokie :
Dumb question for everyone - I know people have been buying Mavic main boards. My primary aircraft is a P4P ... Is there any value in getting a board from wherever for a P4P for any analysis? Is anyone already doing work on P4P hardware?
[2017-07-24 13:02:33]
hostile :
we need someone to test that
[2017-07-24 13:02:35]
hostile :
i keep asking
[2017-07-24 13:02:38]
hostile :
should be yes
[2017-07-24 19:49:15]
martinbogo :
I am doing work on P4P and P4
[2017-07-24 19:49:18]
martinbogo :
As well as Mavic
[2017-07-24 19:49:22]
martinbogo :
still waiting on Spark
[2017-07-24 19:49:25]
martinbogo :
Have I2
[2017-07-24 19:49:39]
martinbogo :
However, I am not doing tear-down work on the P4P .. yet
[2017-07-24 19:56:45]
hostile :
=]
[2017-07-26 16:41:13]
hans112 :
Does anyone now where to get a gimball for the Mavic?
[2017-07-26 17:20:02]
kilrah :
some guys like thunderdrones in the usa
[2017-07-26 19:43:22]
the_lord :
PM me if you need help
[2017-07-26 19:46:39]
hans112 :
Thanks! Friend of mine crashed his Mavic today, I will probably pick it up tomorrow and see how bad the damage is :)
[2017-07-28 16:18:26]
hotelzululima :
hmm have to find my missing mavic battery BUT folks on [mavicpilot.com](http://mavicpilot.com) have been reporting 50 min flights piggybacking this <https://www.gettitanpower.com/collections/endurance/products/7-0ah-11-1v-120w-endurance> on a mavic and sometimes with a arduino nano and a buck converter(for when the li-ion goes way lower on discharge than a lipo so the MAVIC SW has to be told a convincing scaled lie…
[2017-07-28 16:22:28]
hotelzululima :
I am looking at designing 3dprinted adapter to use this in place of a MAVIC LIPO as the original piggyback resembled a very overloaded bird weightwise
[2017-07-28 16:24:44]
hans112 :
I would be interested to :)
[2017-07-28 16:24:48]
hans112 :
Sounds awesome
[2017-07-28 16:28:21]
hostile :
@martinbogo did you ever find the uart for the leadcore chip?
[2017-07-28 16:28:31]
hostile :
inside Mavic?
[2017-07-28 16:32:56]
martinbogo :
No .. but I know why now
[2017-07-28 16:33:16]
martinbogo :
You have to configure the switch, and I haven't discovered the dji_mb_crtl command to do it
[2017-07-28 16:33:52]
martinbogo :
the FPGA is acting as a kind of grand central switch, and ttyACM is a USB serial gadget
[2017-07-30 05:11:02]
hdnes :
Has anyone scoped the outputs to the gimbal?
[2017-07-30 05:11:23]
hdnes :
Is it standard 50hz pwm
[2017-07-30 13:36:24]
opcode :
Do i get that right, that this is the same as sending websocket commands known form Assistant2?
[2017-07-30 13:36:28]
opcode :
root@wm620_dz_pt0001_v4:/system/bin # dji_mb_ctrl
Illegal arguments
Usage:
dji_mb_ctrl [-h] [-i] [-b batchfile] [-J json_file] [-S service_in_json] [-R role_in_service][-g target_type] [-t target_idx] [-q seq_id][-s cmd_set] [-c cmd_id] [-a attrib] [-0][-1 u8_value] [-2 u16_value] [-3 u32_value] [-4 u32_value][-5 u64_value] [-6 u64_value] [-7 u64_value] [-8 u64_value][long_hex_data]
[2017-07-30 13:37:55]
hostile :
we just don't quite know how to use it yet
[2017-07-30 13:37:59]
hostile :
it is more like raw DUML
[2017-07-30 13:56:28]
opcode :
Hmm. Im just stepping through the "test" files, to find some analogy. i.e. test_ssd_link.sh fires this : dji_mb_ctrl -S test -R diag -g 1 -t 6 -s 0 -c 1
[2017-07-30 13:57:37]
opcode :
I guess dji_mb_ctrl is way more powerful, then the websocket commands, i.e. changing max altitude "500"
[2017-07-30 13:57:51]
opcode :
or at least i hope so :wink:
[2017-07-30 14:04:40]
hostile :
like I said... think RAW duml
[2017-07-30 14:05:26]
hostile :
I suspect the web interface has artificial limitations on certain things
[2017-07-30 14:29:56]
opcode :
Yes. And all is defined in dji.json
[2017-07-31 20:48:52]
codeforge :
mmm i downgrade my spark to .300 and now my rc doesn't take off... seems like throttle doesn't work... anyone with same problem?
[2017-07-31 20:49:18]
hostile :
rebind?
[2017-07-31 20:52:08]
codeforge :
aw.. now it's working... i recalibrate, unlink, relink change fw but nothing.... i change from mode2 to mode1, power off rc, restart ac and take off correctly, then changed again to mode2 and try to take off and all it's working... :sweat:
[2017-07-31 20:52:58]
hostile :
ahh yes, when I purchased mine the calibration was wrong out of the box
[2017-07-31 20:53:15]
hostile :
my roll axis was awful until recalibration. i thought it was not functioning
[2017-07-31 20:53:48]
codeforge :
dji's mysteries
[2017-07-31 20:54:09]
hostile :
lol a "chink" in the armor.
[2017-07-31 20:54:44]
czokie :
Speaking of hardware
[2017-07-31 20:54:56]
hostile :
<https://en.wikipedia.org/wiki/Chink_in_one%27s_armor>
[2017-07-31 20:54:59]
czokie :
On p4p - "gimbal flop"
[2017-07-31 20:55:16]
czokie :
Its happening to me from time to time..... and my bird is only a couple of months old.
[2017-07-31 20:55:37]
czokie :
Feels like power disconnect to gimbal - it goes totally limp
[2017-07-31 20:55:51]
czokie :
Any advice other than getting a blue pill for it?
[2017-07-31 20:57:01]
czokie :
DJI just said re-calibrate IMU and vision etc
[2017-07-31 21:01:08]
codeforge :
opening a p4 or p4 pro is very easy. U need a 1.5 allen screwdriver and remove 6 screws on magnesium base gimbal
[2017-07-31 21:01:36]
codeforge :
many times we get ph4 where gimbal power on but after a while fall down like without power
[2017-07-31 21:02:53]
codeforge :
is simply the internal cable (the flat biggest one) that is disconnected. i think for bad shippment or so. I simply reconnect it to solve... but i don't know if it's your case
[2017-07-31 21:03:49]
codeforge :
to reconnect the flat cable u need a mini cross screwdriver too for 2 screws
[2017-08-02 03:17:41]
zapf :
has anyone done a pinout of the i2 / m200 camera connector? Wondering if I can pull 5 or 12v out of it.
[2017-08-03 04:21:02]
rdm :
anybody want to be a guinea pig? <http://www.ebay.com/itm/2-4G-5-8G-DIY-Signal-Booster-High-Gain-16DBI-Refitting-Antenna-for-DJI-Mavic-etc-/253074625192?var=&hash=item3aec6c52a8:m:mrH0kMWEpIrHbeUjS_D7pYg>
[2017-08-03 04:50:29]
pure3d :
the people who have bought that said it's shit
[2017-08-03 04:52:59]
rdm :
Not really surprising at the price point, though I can't see myself spending the amount the maxx guys want
[2017-08-03 05:10:24]
pure3d :
the $329 solution?
[2017-08-03 05:13:00]
pure3d :
the amps are $80 each
[2017-08-03 05:13:28]
pure3d :
nanosync antenna is $109
[2017-08-03 05:32:13]
rdm :
Huh. Well. In that case just ordered one.
[2017-08-03 06:05:35]
pure3d :
which one did you order?
[2017-08-03 06:14:43]
rdm :
<https://www.amazon.com/gp/aw/d/B06Y1H3N9F/ref=pd_aw_sim_sbs_147_1/133-8628890-3510869?ie=UTF8&psc=1&refRID=M1FVJYYJD93Q08KPKFCS&dpPl=1&dpID=41LK-s0VZOL>
[2017-08-03 06:18:11]
pure3d :
nice
[2017-08-03 06:18:25]
pure3d :
the boosted solution is very pricey due to the amps being $80 each
[2017-08-03 06:18:43]
pure3d :
one seller on ebay in hong kong has it for $70 shipped
[2017-08-03 06:21:29]
pure3d :
I'm glad you didn't get the one which looked like a bad pair of tits
[2017-08-03 06:21:54]
czokie :
heheheheh
[2017-08-03 06:22:12]
czokie :
I've seen a few of those around. Was gonna ask my wife to sacrifice a bra to give to a mate who has one...
[2017-08-03 06:27:46]
goof :
can't gain 16dB without stripping it away from somewhere else :stuck_out_tongue:
at least not without boosters
[2017-08-03 10:35:02]
respectmyauthorti :
PWM OUTPUTS ANYONE?!?!?
[2017-08-03 10:36:26]
respectmyauthorti :
Basically id like to see an added button in the app that cam activate an unused pwm output
[2017-08-03 10:37:53]
respectmyauthorti :
Sure one could duct tape an arduino to the drone but much cleaner and liable of you could activate it from the remote without having to loose a feature. Dosent have to be digital
[2017-08-03 10:38:58]
the_lord :
so to understand you clearly you want to add extra channel and to be controlled by the app?
[2017-08-03 10:39:07]
the_lord :
like adding a servo for example?
[2017-08-03 10:39:10]
respectmyauthorti :
!!! Yea that would be awsome
[2017-08-03 10:39:50]
respectmyauthorti :
Without having to tap into an existing circuit. Dont want to have to cut the leds or anything
[2017-08-03 10:40:15]
respectmyauthorti :
Isbevery chip in the mavic a smd
[2017-08-03 10:40:32]
respectmyauthorti :
Maybe there is a sot chip that could be soldered too
[2017-08-03 10:41:07]
the_lord :
the mavic is not designed to achieve that
[2017-08-03 10:41:54]
the_lord :
you can add LDR and arduino nano and can control it with switching the front LED on/off
[2017-08-03 10:42:11]
respectmyauthorti :
The switching of the front led is what im trying to avoid
[2017-08-03 10:43:16]
respectmyauthorti :
Unless maybe one could change the output signal to the leds to send specufic freq to the arduino
[2017-08-03 10:43:39]
respectmyauthorti :
Say send 10hz 20hz 50 hz etc
[2017-08-03 10:44:05]
the_lord :
the signal to LED is binary and you can read it from arduino and do what ever with it
[2017-08-03 10:44:15]
czokie :
Dumb question - What do you want to do from a functionality perspective? Are we talking about a DROP payload style function?
[2017-08-03 10:44:29]
respectmyauthorti :
Dude czokie go away
[2017-08-03 10:44:41]
respectmyauthorti :
Dont answer unless you have somthing nice to say
[2017-08-03 10:44:47]
respectmyauthorti :
Didnt ur mom teach u manners
[2017-08-03 10:45:11]
bin4ry :
man, calm yourself why you always get aggressive ?
[2017-08-03 10:45:29]
bin4ry :
he asked a legitimate question, whats wrong with that ?
[2017-08-03 10:45:37]
respectmyauthorti :
Thats cool u figured thebled signal was in binary
[2017-08-03 10:45:37]
hans112 :
:joy: man
[2017-08-03 10:45:49]
respectmyauthorti :
No he said it was a dumb question
[2017-08-03 10:45:52]
hans112 :
Cartman ? Calm down
[2017-08-03 10:45:55]
bin4ry :
man
[2017-08-03 10:45:58]
czokie :
I am ASKING a dumb question - its a phrase!
[2017-08-03 10:46:03]
bin4ry :
he said he HAS a dump question , which followed
[2017-08-03 10:46:07]
bin4ry :
man
[2017-08-03 10:46:11]
respectmyauthorti :
Shit
[2017-08-03 10:46:13]
respectmyauthorti :
My bad man
[2017-08-03 10:46:21]
bin4ry :
if you don't understand english so well ok, but you should not get aggressive
[2017-08-03 10:46:25]
respectmyauthorti :
I thought that was towards me
[2017-08-03 10:46:25]
bin4ry :
think twice before you do that
[2017-08-03 10:46:29]
czokie :
I was asking - forget the tech - what are you trying to accomplish
[2017-08-03 10:46:45]
respectmyauthorti :
Okay maybe he should have said I HAVE A DUMB QUESTION
[2017-08-03 10:46:56]
bin4ry :
maybe you should not get aggressive
[2017-08-03 10:47:12]
bin4ry :
this is a simple term one says like he did
[2017-08-03 10:47:22]
bin4ry :
if you do not understand that phrase we cannot help you
[2017-08-03 10:47:25]
respectmyauthorti :
Why is the led in binary@
[2017-08-03 10:47:37]
bin4ry :
this is your mark now
[2017-08-03 10:47:44]
the_lord :
because its only on/off
[2017-08-03 10:47:46]
bin4ry :
a second time will not be tolerated!
[2017-08-03 10:48:23]
respectmyauthorti :
No not a drop payload
[2017-08-03 10:48:43]
respectmyauthorti :
Every question i have asked here has been ignored with smart ass remarks
[2017-08-03 10:48:49]
jezzab :
Chill
[2017-08-03 10:48:54]
jezzab :
What are you doing with it buddy?
[2017-08-03 10:48:59]
jezzab :
:slightly_smiling_face:
[2017-08-03 10:49:12]
bin4ry :
@respectmyauthorti no they were answered by getting the idea
[2017-08-03 10:49:25]
bin4ry :
thats the way things are done here, we ask stuff each other to get the idea and to form ideas
[2017-08-03 10:49:36]
the_lord :
yes we are trying to understand what do you want to do
[2017-08-03 10:49:46]
respectmyauthorti :
Idk if i had access to an open pwn possibilites endless lol
[2017-08-03 10:49:55]
czokie :
Give an example
[2017-08-03 10:50:04]
bin4ry :
so you want basically an AUX switch right ?
[2017-08-03 10:50:15]
respectmyauthorti :
Storbes, stepper motors, odk
[2017-08-03 10:50:25]
hans112 :
I see a lot of patience around here :slightly_smiling_face:
[2017-08-03 10:50:36]
respectmyauthorti :
Anything you can think to add to a drone really
[2017-08-03 10:50:43]
the_lord :
@respectmyauthorti short answer (NO there is no access to extra PWM)
[2017-08-03 10:51:06]
bin4ry :
you cannot do that YET
[2017-08-03 10:51:12]
respectmyauthorti :
Yea aux switch would be nice. I dont want to have to tap into an existing circuit like, leds or landing gear
[2017-08-03 10:51:19]
bin4ry :
you can however add an function to the app to control another device
[2017-08-03 10:51:40]
bin4ry :
one would be able to implement the control of an esp or such in the apk
[2017-08-03 10:51:47]
bin4ry :
but you would need a second wifi for that
[2017-08-03 10:52:10]
respectmyauthorti :
i know and thats thebproblem. Too bad you cant send the esp through the controller?
[2017-08-03 10:52:26]
bin4ry :
we are not there yet to do such things
[2017-08-03 10:52:29]
respectmyauthorti :
I got about 175 ft awaybwith an esp attached
[2017-08-03 10:52:32]
bin4ry :
in the future it maybe possible
[2017-08-03 10:52:44]
respectmyauthorti :
With no antenna
[2017-08-03 10:53:56]
respectmyauthorti :
Also, is the transmit power of fcc 1.5mw or does that exceed fcc
[2017-08-03 10:54:36]
jezzab :
I think someone said it was .9W for FCC
[2017-08-03 10:55:01]
jezzab :
boost was 1.5W from memory but would overheat the Mavic RC
[2017-08-03 10:55:12]
respectmyauthorti :
Watts i mean, and im talking about fcc ios
[2017-08-03 10:55:33]
respectmyauthorti :
Thats awsome that u guys figured that out
[2017-08-03 10:55:43]
respectmyauthorti :
No it needs a heatsink?
[2017-08-03 10:56:26]
jezzab :
Im not sure. P4 remote is fine
[2017-08-03 10:56:40]
respectmyauthorti :
I seen a video of someone flying with stock antennas at 5kft and had 80 percebt signal still
[2017-08-03 10:56:53]
jezzab :
But i believe there wasnt a lot of gain from people going from FCC to Boost.
[2017-08-03 10:57:20]
jezzab :
Where abouts are you from @respectmyauthorti ? You FCC or CE?
[2017-08-03 10:57:31]
respectmyauthorti :
Im smack dead center of usa
[2017-08-03 10:57:33]
respectmyauthorti :
Fcc
[2017-08-03 10:57:37]
jezzab :
ok
[2017-08-03 10:59:15]
respectmyauthorti :
This is exciting. Im going to have to get the mavic today. Had they figured out how to get the goggles to work on lower fw versions
[2017-08-03 11:01:23]
respectmyauthorti :
Keep up the good work guys
[2017-08-03 17:38:08]
umbr4 :
hey does anyone have the dmesg entries or more detail on the RC link hardware in the mavic? All I have been able to find is a teardown that shows the RC chip marked ACP ACPD4GD31D3
[2017-08-03 17:55:46]
hostile :
@umbr4 [www.newacp.ch/](http://www.newacp.ch/)
[2017-08-03 17:55:54]
hostile :
thats all we know
[2017-08-03 17:56:45]
hostile :
<https://www.linkedin.com/company-beta/9436442>
[2017-08-03 18:02:59]
martinbogo :
The radio link happens between the FC board and RC .. the main board doesn't participate at all
[2017-08-03 18:03:06]
martinbogo :
it just hangs off the side, more or less
[2017-08-03 18:03:48]
hostile :
SBUS right into the FC coming off the SDR?
[2017-08-03 18:08:20]
martinbogo :
I2C
[2017-08-03 18:08:26]
umbr4 :
no I read it is IP based, how does the video make it down to the remote and so on
[2017-08-03 18:08:27]
martinbogo :
and UART, afaik
[2017-08-03 18:08:48]
martinbogo :
Occusync .. it's transmitted in the IP layer, and that's video, yes
[2017-08-03 18:09:15]
martinbogo :
the thing is DJI has mish-mashed two protocols together, like they did with LightBridge
[2017-08-03 18:09:31]
martinbogo :
if you study the radio signals, you'll see two distinct things happening ...
[2017-08-03 18:09:56]
martinbogo :
a 20MHz wide swath of info ( that's the video ), and a lot of frequency hopping ( that's the control data )
[2017-08-03 18:11:05]
umbr4 :
humm interesting
[2017-08-04 14:17:43]
freaky123 :
Didn't know that
[2017-08-04 14:17:54]
freaky123 :
So more interest in decrypting the fc
[2017-08-04 14:47:17]
martinbogo :
There;s a lot going on in the FC
[2017-08-04 14:47:24]
martinbogo :
A lot more than I expected
[2017-08-04 22:58:47]
rdm :
how much of a difference do the amps make on the controllers? worth the buy?
[2017-08-04 23:00:19]
czokie :
so - @rdm ... Before we relegate brake_sensitive_gain to the "danger zone" ... can I ask you to talk to @digdat0 ... He has a video on all this shit, and they were in his video - I'd like to get him to comment. Sound fair?
[2017-08-04 23:00:47]
rdm :
sure, hes the guy whose settings i tested over on his website
[2017-08-04 23:01:30]
rdm :
have him message me
[2017-08-04 23:02:13]
czokie :
Whoops - wrong channel - sorry ~hardware
[2017-08-04 23:02:18]
rdm :
=p
[2017-08-05 08:03:13]
cherbini :
<https://www.thingiverse.com/thing:2454163>
[2017-08-05 08:09:14]
kilrah :
I bought / printed this <https://cults3d.com/fr/gadget/etui-pour-dji-spark>
[2017-08-06 17:18:21]
martinbogo :
Interesting
[2017-08-06 17:18:47]
martinbogo :
There is something similar on Thingiverse ... I'll print one out in Ninjaflex and see what it feels like
[2017-08-06 21:20:29]
rdm :
i really wish someone would create a third party camera/gimbal for the mavic
[2017-08-06 21:25:08]
oanerm :
I vote for something like Lepton 3 from FLIR :slightly_smiling_face:
[2017-08-06 21:26:15]
rdm :
oooooooooooh
[2017-08-06 21:26:20]
rdm :
i like.
[2017-08-06 21:27:13]
rdm :
mavic can lift up to 2.3 pounds though, so we have quite the range that could be possibly done
[2017-08-06 21:28:26]
oanerm :
The problem is not lifting IR camera, it is no big deal. For instance you can buy Flir E4 and Mavic will lift it easily. This can be also hacked to full resolution 320x420.
[2017-08-06 21:29:03]
rdm :
you could probably lift a nikon D3100 with a small lens on it is my point =p
[2017-08-06 21:30:12]
rdm :
there is TONS of room for upgrades
[2017-08-06 21:30:30]
oanerm :
I plan to make a test with Flir E8, flight video can be astonishing:grinning:
[2017-08-06 21:37:44]
oanerm :
Flir E8 is little bit heavier (580g, 500g without battery) than I expected. So much better will be Lepton dev kit with RPi <https://www.sparkfun.com/products/13233>
[2017-08-06 22:14:12]
oanerm :
For people interested in FLIR on drone ( RPI 0 + Lepton) <https://github.com/maxritter/DIY-Thermocam>
[2017-08-07 05:15:00]
hdnes :
Anyone have a Mavic Controller “Mech Err”
[2017-08-07 05:16:00]
hdnes :
looking for things to try. I added new antennas and not sure where to get feedback as to what’s not correct
[2017-08-07 05:19:52]
oanerm :
I saw errors when rotary knob is not in default position during power up sequence.
[2017-08-07 05:21:54]
hdnes :
interesting
[2017-08-07 05:22:21]
hdnes :
it’s calibrating correctly
[2017-08-07 05:31:42]
hdnes :
there is a constant offset left rudder… and calibration isn’t taking it out
[2017-08-07 05:33:39]
oanerm :
I will try compressed air to try remove particles inside.
[2017-08-07 05:33:58]
hdnes :
I think it’s a screw that got magnitized by my screwdriver
[2017-08-07 05:39:12]
oanerm :
I'm curious how you will solve it.I suppose it is optical:)
[2017-08-07 05:39:53]
hdnes :
no it’s hall effect
[2017-08-07 05:52:45]
hdnes :
Yeah it’s got to be the is no centering thing
[2017-08-07 06:20:06]
hdnes :
Ahh, I figured it out
[2017-08-07 06:20:27]
hdnes :
I removed the speaker and I bet theres a magnet in it
[2017-08-07 06:35:48]
hdnes :
yeah that was it. I put the speaker back in (not wired up) but physically back in place, did a re-calibration and everything works fine now. Strange that the re-calibration doesn’t actually re-calibrate then when the speaker is gone. I guess there are some min and maxes it’s allowed to move the calibration or something
[2017-08-07 06:36:29]
oanerm :
Congratz.Glad you fixed it.
[2017-08-07 07:06:38]
kilrah :
mine gets "stick emi2" everytime I give full stick input since it jsut fell down from my table :confused:
[2017-08-07 07:06:46]
kilrah :
calibration doesn't change a thing
[2017-08-07 07:07:34]
hans112 :
Did you try a big magnet ?
[2017-08-07 07:13:09]
kilrah :
I'd expect that to screw it up even more
[2017-08-07 07:17:13]
hans112 :
Nope. I fixed a Mavic controller with that error once...
[2017-08-07 07:17:35]
hans112 :
Try to make a circle around it with the backend of a descent speaker :smile:
[2017-08-07 07:17:47]
hans112 :
Or any other strong magnet
[2017-08-07 07:20:05]
kilrah :
OK...
[2017-08-07 13:19:52]
kilrah :
didn't change a thing, but I recalibrated for the 18532th time and it seems it stuck this time
[2017-08-07 13:20:25]
kilrah :
might be a difference where I cycled rc power before powering the mavic again this time
[2017-08-07 13:20:50]
kilrah :
previous times calibration would be ok at the end of the process but always revert to the bad one
[2017-08-07 13:36:14]
hostile :
@kilrah we need to sync up on Goggles
[2017-08-07 13:36:21]
hostile :
we need to like make a suite of tools
[2017-08-07 13:38:27]
kilrah :
yup, what do you have in mind
[2017-08-07 13:40:00]
hostile :
just that you and I seem to be the only ones talking about it... we need to do a brain dump
[2017-08-07 13:40:39]
hostile :
simple stuff: Change startup .wav, Background image, Startup Movie, add new Demo movies (how to split the .wav out), known supported movie / audio formats, etc.
[2017-08-07 13:41:12]
hostile :
@kilrah there is also an outstanding task to figure how to record the video... for @the_lord
[2017-08-07 13:41:51]
kilrah :
<http://dji.retroroms.info/howto/gogglevideos>
[2017-08-07 13:42:04]
kilrah :
recording videos would be cool
[2017-08-07 14:02:01]
hostile :
nice. I'll see what else can be added
[2017-08-07 14:02:12]
hostile :
like maybe some ffmpeg scripts to help with file conversions, etc
[2017-08-07 14:06:12]
the_lord :
i stopped working on goggles for a while coz i was busy with spark RC and the wifi region change
[2017-08-07 14:06:38]
kilrah :
note that the processor and/or storage on the goggles seems to be a lot less powerful than on the mavic, so it might be hard to do anything more than dumping raw streams
[2017-08-07 14:06:40]
the_lord :
many people here (in my region) are facing range problems because of this
[2017-08-07 14:07:25]
kilrah :
e.g. the creation of the ftp tmp files
[2017-08-07 14:07:48]
kilrah :
100MB worth of data takes like 10 secs on mavic, goggles more like a minute
[2017-08-07 14:08:42]
the_lord :
my idea for goggles is to make an application which can record the on screen to the SD card
[2017-08-07 14:09:01]
kilrah :
would be very nice to have the overlay indeed
[2017-08-07 14:10:02]
the_lord :
for the spark RC i could make the country persist to US regardless if you change the wifi settings from DJI go app
[2017-08-07 14:10:27]
kilrah :
cool
[2017-08-07 14:10:36]
the_lord :
what i noticed is the go app send the command to RC and the RC send it to drone
[2017-08-07 14:10:55]
kilrah :
been flying the other day and had trouble getting fcc to stick when switching to the goggles
[2017-08-07 14:11:05]
kilrah :
even though it had worked once before...
[2017-08-07 14:11:27]
the_lord :
so if its persist in the RC the drone won't change what you put it at
[2017-08-07 14:12:06]
the_lord :
do you mean your mavic is on FCC but the goggles are not??
[2017-08-07 14:13:13]
hostile :
we need to test simply replacing busybox with a new binary btw
[2017-08-07 14:13:17]
kilrah :
connect modded android app with otg, app asks for changing wlan settings, confirm, take off, confirm it works, unplug phone, plug goggles, crap range
[2017-08-07 14:13:21]
hostile :
without the AES
[2017-08-07 14:13:31]
kilrah :
yes, would make things easier
[2017-08-08 14:07:21]
martinbogo :
@hostile : New Busybox
[2017-08-08 14:07:39]
martinbogo :
@hostile : I just need to make sure I have all the utilities they have compiled in, and will dump binary here
[2017-08-08 14:07:55]
martinbogo :
Actually, I'll dump the binary in ~mavic_rooting
[2017-08-08 14:08:09]
martinbogo :
BBIAB -- meeting
[2017-08-08 16:26:50]
bin4ry :
@dkovar this channel is public anyone could join here. maybe better share it in private if you are concerned that this leaves the group ?
[2017-08-08 16:27:52]
hostile :
looks good Kovar
[2017-08-08 16:27:56]
dkovar :
I think the more eyes on it, the better. If it drifts off, no major issues. I'm planning on releasing it, I just want to flesh it out more first. THank you for the advice and warning.
[2017-08-08 16:28:07]
hostile :
I have a similar one for P3... I'll ask if I can share as it was D13 proprietary as it were.
[2017-08-08 16:28:44]
hostile :
but we can both recognize doing things for the better good of others, so I'll push to share what I can
[2017-08-08 16:29:14]
bin4ry :
@dkovar cool thanks :slightly_smiling_face:
[2017-08-08 16:30:52]
kilrah :
Board F you labelled as "Micro SD Card Board" is actually the whole flight controller, you missed the IMU sensors on the cutout part too
[2017-08-08 16:35:18]
kilrah :
Board G - Front
Gimbel Board
[2017-08-08 16:35:28]
kilrah :
that's actually sonar... and there's another "board G" further down
[2017-08-08 16:36:04]
kilrah :
funny they even brand their ESC mosfets lol
[2017-08-08 16:37:37]
dkovar :
Superb, thanks, will update!
[2017-08-08 16:38:39]
goof :
thumb shaped board = gimbal ESC
....why do they have both the QR code **_and_** the raw text on that sticker?
[2017-08-08 16:38:53]
goof :
or is that a production line thing?
[2017-08-08 17:20:52]
dkovar :
So, Board F, currently labelled "Micro SD Card Board" should be "Flight Controller Board" and chip #20 is the FC?
[2017-08-08 17:22:17]
hostile :
and @dkovar we have confirmed the Flight controller to be an A3 variant
[2017-08-08 17:22:18]
hostile :
FWIW
[2017-08-08 17:22:24]
hostile :
its like a slimmed down ghetto A3
[2017-08-08 17:27:40]
dkovar :
:slightly_smiling_face: Nice. Thanks.
[2017-08-08 19:35:51]
uavop :
Looks great @dkovar :+1:
[2017-08-08 19:38:54]
dkovar :
I'll share whatever microcode and other data we get when we get it.
[2017-08-09 08:13:56]
freaky123 :
@dkovar how are you gonna dump the fc?
[2017-08-09 08:14:28]
freaky123 :
Are you gonna crack the chip? Or let a company do it?
[2017-08-09 08:14:45]
freaky123 :
I'm really interested in the fc dump
[2017-08-09 08:17:21]
freaky123 :
And number 20 is identified already
[2017-08-09 08:18:18]
freaky123 :
<https://translate.googleusercontent.com/translate_c?act=url&depth=1&hl=en&ie=UTF8&nv=1&prev=_t&rurl=translate.google.com&sl=auto&sp=nmt4&tl=en&u=http://www.kanzhaji.com/%3Fp%3D31735&usg=ALkJrhj6UjfG8vstRUsDpzByrF-RcktK6A>
[2017-08-09 08:18:42]
freaky123 :
Thats the one I want a dump of
[2017-08-09 08:19:53]
freaky123 :
And that chip is responsible for all flight related matters
[2017-08-09 08:20:48]
freaky123 :
I have sort of a pinout from the fc board with indications on which pin is what if you are interested @dkovar
[2017-08-09 08:24:49]
freaky123 :
Although thw above is from a mavic my guess is that the fc will be the same
[2017-08-09 10:49:49]
dkovar :
I hired Teel to do it. They're going to start by identifying test leads and, if they can determine the protocol, dump it legitimately. If that does not work, then they'll crack the chip. I don't have the hardware or training to do this right so I contracted it out.
[2017-08-09 10:50:07]
dkovar :
I'll get the FC dumped for sure. If you have a pinout, I'd love to see it.
[2017-08-09 11:19:06]
freaky123 :
I have a pinout of the external pads going to the main board etc. thus not a full pinout yet... only some which were traced or recorded and analysed
[2017-08-09 11:20:05]
freaky123 :
@dkovar really nice that we for sure get the fc dump :) that is one of the last parts which I don't have access to yet
[2017-08-09 11:20:47]
freaky123 :
I am trying with sidechannel analysis to crack the update (which is encrypted with aes and decrypted by the fc loader)
[2017-08-09 11:20:55]
czokie :
If its helpful - My "other world" is "retroroms". I own that website for mame game dumping. The skills of dumping however are not mine.... I just enjoy mame and own the site - but I can track down others with dumping skills if required...
[2017-08-09 11:21:53]
freaky123 :
This is a very specific skillset and I don't think many people can do this (mostly companies can do this)
[2017-08-09 11:22:20]
czokie :
True - but mame rom dumpers have been doing it for years
[2017-08-09 11:28:56]
freaky123 :
@czokie feel free to ask :wink: but if @dkovar knows he's going to be succesfull I'm not sure if it's needed
[2017-08-09 11:29:26]
freaky123 :
ohh I see that this is an old FC numbering and doesn't have everything yet
[2017-08-09 11:29:53]
freaky123 :
will send you the newest one when I'm home @dkovar
[2017-08-09 11:31:31]
freaky123 :
I know a lot more pins
[2017-08-09 11:31:47]
freaky123 :
like 1->4 is PWM if i'm correct
[2017-08-09 11:35:12]
freaky123 :
@dkovar what is btw your interest in the dumps?
[2017-08-09 12:03:57]
anonslacker :
Does anyone know what roll drive board module is in phantom 4 pro?
[2017-08-09 12:50:47]
dkovar :
I do UAV forensics so I'm interested in all the data, anywhere, everywhere. I want to know what is stored where, how to get it, etc. And, in doing that work, if I can help this group out, life is good.
[2017-08-09 13:22:02]
hostile :
be aware there are some JTAG - SWD fuckery that is documented. Although JTAG is disabled on some of the phantoms, timing attacks can make it possible to catch SWD active IIRC. There was a recent paper outlining some of this (I've known about it in private for some time now)
[2017-08-09 13:23:45]
hostile :
described here IIRC <http://www.8ber.com/4446.html>
[2017-08-09 13:23:53]
hostile :
and also mentioned by Bogo... in this channel
[2017-08-09 13:24:33]
hostile :
@dkovar -^
[2017-08-09 13:29:45]
freaky123 :
And guessing by the amount of effort they did to protect the LC (and also the FC).. I think the chances of catching the jtag are low (without any exploits)
[2017-08-09 15:53:01]
martinbogo :
Yep, you have to utterly cripple the chip ( blow efuse writing, and DESOLDER the chip ) to get JTAG access
[2017-08-09 15:53:21]
martinbogo :
for now, it's not a thing .. until I can find out how LeadCore does the efuse erase/write
[2017-08-09 15:54:19]
martinbogo :
because I've confirmed with LeadCore that the 1860C does support erase and re-write. The efuses are not fuses, but rather XOR memory with mandatory erase-to-write required
[2017-08-10 04:04:45]
goof :
does anyone know how the angle sensing in the gimbal motors works?
on the P4, like is it in the motors or is there another IMU in the camera unit?
[2017-08-10 04:05:35]
goof :
the pitch motor finds its limits on startup, normal for a stepper motor I guess but the other two axis don't
[2017-08-10 07:02:50]
kilrah :
There’s an IMU in the gimbal
[2017-08-10 08:47:24]
goof :
in the camera I presume?
think mine's damaged :stuck_out_tongue:
[2017-08-10 08:47:54]
goof :
motors work fine in the other drone, but in this one they just wave around at random
[2017-08-10 08:48:06]
goof :
and heat up
[2017-08-10 08:49:04]
kilrah :
yeah should be at the same level as the sensor
[2017-08-10 08:49:21]
goof :
there's two boards in there
[2017-08-10 08:50:00]
goof :
I've not been able to find either board as a spare part though, just as the entire camera + gimbal assembly :confused:
[2017-08-10 08:50:21]
goof :
might need a dose of hot glue methinks
[2017-08-10 10:43:03]
goof :
interesting
[2017-08-10 10:43:31]
goof :
I can get this gimbal to work if I calibrate it, holding the roll arm to dampen the vibration
[2017-08-10 10:43:50]
goof :
once it jerks itself out of my fingers it appears to calibrate and run normally after that
[2017-08-10 10:44:00]
goof :
until I turn it off anyway
[2017-08-10 10:44:01]
goof :
rather odd
[2017-08-10 11:14:25]
freaky123 :
Btw @dkovar do you have an estimate of when the FC dump will be available? Then I know if it is still interesting to try to achieve it through other means
[2017-08-10 11:31:29]
dkovar :
"Soon"? Teel is working on it, but not as a priority. I'd guess in the next two weeks but I cannot promise anything.
[2017-08-10 11:52:52]
freaky123 :
Ok :+1:
[2017-08-11 13:48:36]
umbr4 :
Has anyone looked at the CineSSD device/model whitelist blacklist on inspire 2? I was wondering what it would entail to get arbitrary devices to work assuming they are fast enough.
[2017-08-11 13:52:26]
freaky123 :
can you explain a bit more @umbr4 since I don't own a Inspire 2 ^^ and don't know that much about it
[2017-08-11 13:54:51]
umbr4 :
so the inspire 2 will record video in proprietary high bit-rate formats to a SSD (they call CineSSD). But only certain models of the SSD are supported others just say invalid device. I happen to have a model that used to work but DJI seemed to drop support for it with a firmware upgrade.
[2017-08-11 14:00:38]
freaky123 :
that sucks
[2017-08-11 14:09:30]
hostile :
doesn't that also require a license?
[2017-08-11 14:17:19]
umbr4 :
@hostile yes
[2017-08-13 04:57:52]
zapf :
I think someone did a teardown and it was just a samsung nvme ssd and an adapter
[2017-08-13 04:58:51]
zapf :
<http://www.visionrouge.net/web/2017/02/whats-inside-a-cine-ssd-dji-can-you-use-a-simple-ssd-instead/>
[2017-08-13 05:00:50]
zapf :
might want to talk to that guy
[2017-08-13 05:01:01]
zapf :
@umbr4
[2017-08-14 13:55:38]
freaky123 :
@dkovar any progress with reversing the hardware?
[2017-08-14 17:18:33]
dkovar :
It'll be awhile. Someone is doing it for me at a discount in return for my not pressuring them on time.
[2017-08-14 19:45:41]
freaky123 :
Haha still nice that you get a discount
[2017-08-14 19:45:53]
freaky123 :
Then I will also not pressure you:stuck_out_tongue:
[2017-08-14 22:21:40]
dkovar :
No worries, happy to update!
[2017-08-17 10:47:25]
aak :
Greetings!
[2017-08-17 10:56:17]
aak :
Slack is awfully slow when trying to read old posts...
[2017-08-17 11:34:56]
freaky123 :
yes indeed
[2017-08-17 11:34:59]
freaky123 :
not the best
[2017-08-17 11:35:08]
freaky123 :
prolly need to document more on the wiki's
[2017-08-17 11:35:17]
freaky123 :
especially about the hardware layout etc.
[2017-08-17 11:35:37]
aak :
That would be great..
[2017-08-17 12:38:02]
czokie :
@freaky123 - I'd like to trouble you on the topic of duml sniffing - I've seen your code ... What are you doing at hardware layer to snif that - are you doing a USB to serial breakout and then back to USB to get to your PC, or are you jumping on the cables at the serial layer inside the aircraft?
[2017-08-17 12:38:14]
czokie :
I've just never got it working - and I am interested :wink:
[2017-08-17 12:41:27]
freaky123 :
which specific interface do you wanna listen to? @czokie
[2017-08-17 12:42:01]
freaky123 :
for analysing the pinout etc. I use a logic analyser (Saleae)
[2017-08-17 12:50:59]
czokie :
Just starting with Macbook to aircraft duml.
[2017-08-17 12:52:27]
czokie :
I understood that windoze people are able to sniff it natively - I was trying to work out how to do that in software but I failed. Others were going to do some dtrace stuff - but that seemed like a lot of work if there was a simple method like a USB -> Serial breakout -> 3 USB ports (1 in, 1 out, 1 normal tx/rx)
[2017-08-17 12:52:56]
jan2642 :
This is a perfect opportunity to ask @tylkologin if he had any success yet with dtrace :wink:
[2017-08-17 12:53:26]
czokie :
Reason to want to do it this way - I dont have a dedicated board... I am using my one and only aircraft to tinker with. I fly too often to think of pulling it apart.
[2017-08-17 13:11:15]
jezzab :
Is there no way to sniff a com port on OSX?? I've never tried. Surely
[2017-08-17 13:12:44]
jezzab :
Because that's all that's involved @czokie
[2017-08-17 13:13:58]
jezzab :
USB creates a RNDIS network device and a virtual COM port
[2017-08-17 13:14:52]
jezzab :
Network is for ftp. Serial is for DUML.
[2017-08-17 13:19:31]
jezzab :
If you can pull some nice Xon Xoff etc it will be smooth as butter. Windows is a bitch unless you use really old .net. I have to have a play still. @the_lord would probably be very interested if you do
[2017-08-17 13:40:41]
freaky123 :
@czokie sniffing with a serial board isn't possible since it is an ACM device
[2017-08-17 13:41:24]
freaky123 :
I only recorded using windows
[2017-08-17 13:41:47]
freaky123 :
but I rev. engineered the full protocol out of the update binaries
[2017-08-17 13:42:34]
freaky123 :
and now I don't really need to log any traffic anymore
[2017-08-17 13:43:05]
freaky123 :
since I'm not interested in the PC <-> aircraft communication
[2017-08-17 14:18:08]
ender :
Hehe, just for your viewing pleasure, i revived one of my old Bebop experiments to create a moble WiFi Repeater for the Sparky with faster & unlimited WiFi.
[2017-08-17 14:19:10]
ender :
Its a Battery powered “Hootoo Tripmate TM-01” flashed with OpenWRT.
[2017-08-17 14:19:28]
ender :
Added a small Amp & a very mildly directional Antenna.
[2017-08-17 14:20:02]
ender :
Rain keeps me from trying the range but i hope its good for several hundred meters but the AMp is very Bad (snr) so maybe i will be disappointed.
[2017-08-17 14:20:27]
ender :
I dont know why i did this but i have a thing for WiFi drones since ARDRONE 2.0 & Bebop times :slightly_smiling_face:
[2017-08-17 14:34:19]
ender :
BTW if there is anyone here having a black belt in OpenWRT config, may PM me, i got a question :slightly_smiling_face:
[2017-08-17 14:58:24]
hostile :
@ender do what do you do? go drop it mid field somewhere... then walk away from it and connect ?
[2017-08-17 14:59:06]
ender :
just put it to a high place nearby, let it connect to the sparky and connect your phone to the repeater.
[2017-08-17 14:59:16]
ender :
Just to enhance phones lousy performance.
[2017-08-17 14:59:38]
ender :
I have a much smaller setup somewhere with a smaller hootoo and a better yet smaller amp. But cannot find it ATM :slightly_smiling_face:
[2017-08-17 15:00:01]
ender :
All from ARDRONE & Bebop days. Never destroyed Prototypes :slightly_smiling_face:
[2017-08-17 15:00:17]
ender :
It ended up with a different setup but these were also nice…
[2017-08-17 15:00:59]
ender :
Its of course mostly senseless nowadays, but i have to give it a try anyways :wink:
[2017-08-17 16:13:42]
tylkologin :
@jan2642 tomorrow I should have working solution. still have some bugs. but working on :slightly_smiling_face:
[2017-08-17 16:14:53]
jan2642 :
@tylkologin :thumbsup: :thumbsup: :thumbsup:
[2017-08-17 16:15:21]
tylkologin :
@jan2642 have to sleep... sometimes :slightly_smiling_face:
[2017-08-19 18:20:47]
hdnes :
@freaky123 you've posted the C for the protocol right? Link?
[2017-08-19 18:21:34]
freaky123 :
No haven't done yet since it needs cleanup
[2017-08-19 18:43:53]
jan2642 :
You can try to convert the ruby I wrote, check DUMLrub on github.
[2017-08-19 19:14:56]
hostile :
yeah jan did a serious upgrade to DUMLRub
[2017-08-19 19:18:56]
hostile :
<https://github.com/MAVProxyUser/DUMLrub/pull/4>
[2017-08-19 19:49:36]
hdnes :
Yeah that's a solid pull!
[2017-08-19 19:50:15]
hdnes :
Lots of fish in that one for Mac users. Hate the workflow to get wireshark running on VM etc etc.
[2017-08-19 20:00:40]
hostile :
windows too
[2017-08-19 20:00:48]
hostile :
DUMLRub works fine on windows
[2017-08-19 20:00:57]
hostile :
see LogJammer.zip in Releases as an example
[2017-08-19 21:27:36]
hdnes :
Do DUML 0x40 packets have to have some special ACK sequence or something to get them to take?
[2017-08-19 21:29:16]
hdnes :
I'm seeing where you are sending 0x40 with some more logic than other packets in the send? But I'm not exactly following it. I can't get my param packets to send when I literally just send the one param packet. Doesn't take on the aircraft
[2017-08-19 21:47:19]
jan2642 :
40's get a reply with C0 and the same sequence number
[2017-08-20 06:22:01]
hdnes :
Cool thanks
[2017-08-20 06:22:40]
hdnes :
Are you essentially saying you have to ack the ack
[2017-08-20 06:22:59]
hdnes :
Three way handshake
[2017-08-20 06:26:45]
jan2642 :
No. A single 0x40 should be enough and the device should reply with 0xC0 to ack it.. Could it be that your CRC’s are wrong or maybe source/destination ? I guess parameters have to be sent directly to the FC.
[2017-08-20 06:27:41]
jan2642 :
Can you post the packet you’re trying to send ?
[2017-08-20 14:21:43]
hostile :
so @anonslacker aka Nvar... got a firmware from DJI for his p4a... it can flash the camera via SD care. Hw1camera.bim
[2017-08-20 14:21:47]
hostile :
I'm trying to obtain it now
[2017-08-20 15:28:05]
anonslacker :
Yeah @hostile but it is for p4p phantom 4 pro camera be careful!
[2017-08-20 15:33:25]
hostile :
the email will not allow it to make it to me for some reason
[2017-08-22 05:54:25]
aak :
are the DUML protocol specifications up somewhere?
[2017-08-22 06:04:01]
hostile :
nope
[2017-08-22 06:29:13]
aak :
Alright..
[2017-08-22 14:30:26]
the_lord :
@hostile i have the file and i'll uplaod it for you on google drive
[2017-08-22 17:44:22]
ericfaler :
I've been using a spec an to view communications between the Mavic and controller on RC, anyone else familiar with this topic?
[2017-08-22 17:55:44]
kilrah :
haven't seen much being talked about on that front
[2017-08-22 17:58:58]
hostile :
you gonna need LOTS more than basic SpecAn skills for that...
[2017-08-22 17:59:18]
hostile :
@ericfaler shall I assume you are a GNURadio man?
[2017-08-22 18:26:57]
jan2642 :
Do you really want to look at the RF or are you just interested in the protocol? That is TCP/IP based and can be sniffed with a cross-compiled tcpdump on a rooted mavic and/or RC
[2017-08-22 18:35:53]
dkovar :
CUAS is all about the RF....
[2017-08-22 18:43:30]
ericfaler :
ive got a handle on the rf except for two exceptions in transmissions. I wondered if you guys were just looking at the code or if someone else has zoomed in on a specan
[2017-08-22 18:43:36]
freaky123 :
@dkovar did you already hear something back from the company?
[2017-08-22 18:48:09]
dkovar :
Nope, they're very slow and overworked. I need to reach out to them with a semi-urgent matter later this week and will check on the status of this work as well.
[2017-08-22 18:49:02]
freaky123 :
ok np :wink:
[2017-08-22 19:50:56]
ender :
I have a camera list from within the APK:
[2017-08-22 19:50:57]
ender :
public static final enum CameraType DJICameraTypeCV600;
public static final enum CameraType DJICameraTypeFC1102;
public static final enum CameraType DJICameraTypeFC220;
public static final enum CameraType DJICameraTypeFC220S;
public static final enum CameraType DJICameraTypeFC260;
public static final enum CameraType DJICameraTypeFC300S;
public static final enum CameraType DJICameraTypeFC300X;
public static final enum CameraType DJICameraTypeFC300XW;
public static final enum CameraType DJICameraTypeFC330X;
public static final enum CameraType DJICameraTypeFC350;
public static final enum CameraType DJICameraTypeFC550;
public static final enum CameraType DJICameraTypeFC550Raw;
public static final enum CameraType DJICameraTypeFC6310;
public static final enum CameraType DJICameraTypeFC6510;
public static final enum CameraType DJICameraTypeFC6520;
public static final enum CameraType DJICameraTypeGD600;
public static final enum CameraType DJICameraTypeTau336;
public static final enum CameraType DJICameraTypeTau640;
[2017-08-22 19:51:19]
ender :
FC220 is Mavic, right ? ANyone knows which one could be Spark ? ANd what is FC220S ?
[2017-08-22 19:54:59]
ender :
Oh nevermind, finally found it in TIFF tags embedded in JPG, guess what: FC1102 = Spark
[2017-08-23 12:02:35]
stealhertz :
@jan2642 Can you expand on how to sniff the RF packets?
[2017-08-23 12:02:50]
stealhertz :
Has anyone actually demodulated the RF?
[2017-08-23 12:07:00]
jan2642 :
I guess you can sniff with a decent SDR but I don’t know if anyone already attempted to demodulate it. My point was that if you’re not necessarily interested in the RF but in the protocol spoken over RF, you can easily look at that from a rooted drone or RC. Since the protocol over the RF link is exposed as an ethernet connection you can use tcpdump on a rooted device to log it. (Haven’t done this myself but it was in the original reports by @p0v)
[2017-08-23 12:11:23]
stealhertz :
tcpdump would just tell you the data going OTA, not the format though. It could be encrypted or interleaved still.
[2017-08-23 12:16:09]
jan2642 :
Indeed. Like I said, if you’re interested in what the AC & RC exchange in information, you can use tcpdump on the devices. If you want to know how they exchange this information, then I guess you’re on (publicly) uncharted territory for the moment :wink:
[2017-08-23 13:10:38]
stealhertz :
Anyone know where the pictures/diagrams are for all the serial connections. I couldn't find them on the wiki and it seems like I'm the only one out of the loop
[2017-08-23 13:52:17]
hostile :
for which aircraft?
[2017-08-23 13:52:21]
ender :
Lots of things seem to be exchanged via DBI between the HW guys. (DBI == Direct Brain Interface) :slightly_smiling_face:
[2017-08-23 14:39:28]
stealhertz :
@hostile for the Mavic
[2017-08-23 14:41:44]
hostile :
@martinbogo has them... and we waiting on him being able to share them
[2017-08-23 14:42:41]
stealhertz :
I saw that back in July, was hoping I just missed the post
[2017-08-23 14:59:40]
martinbogo :
Nope. Very close to release. Mostly just waiting on Legal for two items, and giving our client the exclusivity time required by contract
[2017-08-23 14:59:59]
martinbogo :
( usually 14-20 days )
[2017-08-23 15:07:34]
stealhertz :
@hostile @martinbogo Where are you applying power to the PCB (mavic) for bench top testing. I'd like to gain access to both sides of the board outside of the chassis?
[2017-08-23 15:09:10]
martinbogo :
Same as everyone else here.. LIPO hack, but used a bench supply instead of an actual LIPO pack
[2017-08-23 15:23:34]
stealhertz :
I read through the last months posts but didn't see anyone specify where they were applying the power.
[2017-08-23 15:24:54]
the_lord :
@the_lord uploaded a file: [FC](https://dji-rev.slack.com/files/the_lord/F6S3K6NEM/image_uploaded_from_ios.jpg)
[2017-08-23 15:25:28]
the_lord :
@the_lord uploaded a file: [Core board](https://dji-rev.slack.com/files/the_lord/F6S02USRW/image_uploaded_from_ios.jpg)
[2017-08-23 15:25:46]
the_lord :
@stealhertz --^
[2017-08-23 15:29:28]
stealhertz :
Thanks man. That's the test pads I suspected.
[2017-08-23 15:30:01]
stealhertz :
I noticed one had a "-" next to it, assumed the other was power.
[2017-08-23 15:30:10]
stealhertz :
Testing seemed to indicate so.
[2017-08-23 15:30:38]
stealhertz :
I have noticed that some people's PCBs still have some silk screen on them while others (mine) have none.
[2017-08-29 08:48:41]
fyl88 :
Could the FC220S the Mavic Pro 2 ?
[2017-08-29 08:49:43]
ender :
I think so but of course i cannot be sure. It could also be a new revision or FLIR Variant or …
[2017-08-29 08:50:03]
ender :
One could search in the APK for actual differences, thats actually quite easy…
[2017-08-29 15:28:53]
zapf :
on newer dji craft, is there still a significant latency difference between hdmi out and a tablet connection
[2017-08-29 15:38:54]
ender :
which devices exactly and how do you define “significant” ?
[2017-08-29 15:39:29]
ender :
On Mavic & Spark there IS no HDMI out so you use the HDMI Out on the Android device…
[2017-08-29 15:39:50]
ender :
From start to end you can stay << 200ms
[2017-08-29 15:40:08]
ender :
I had typical TOTAL delays of approx 150ms.
[2017-08-29 15:40:19]
ender :
When i was using a wireless HDMI option i was about 300ms
[2017-08-29 15:40:25]
ender :
(numbers from Mavic)
[2017-08-30 08:40:31]
freaky123 :
@martinbogo did you find out how the LC is connected to the FC? Is that where the FPGA is in between?
[2017-08-30 08:47:40]
freaky123 :
because I'm failing hard identifying the upgrade protocol between the LC and FC
[2017-08-30 08:48:23]
freaky123 :
Only on certain pins I get data during the upgrade.. but even then I don't see the expected bytes
[2017-08-30 09:06:01]
freaky123 :
I feel like a total noob now that I can't even find the upgrade byte stream
[2017-08-30 11:51:35]
freaky123 :
btw for the Phantom 3 some good pictures and descriptions etc. are made: <https://github.com/mefistotelis/phantom-firmware-tools/wiki>
[2017-08-30 11:51:59]
freaky123 :
we should make something similar for the Mavic etc.
[2017-08-30 17:27:42]
nocommie :
Anyone know why prevents the Zenmuse XT (thermal) from being compatible with the Osmo? I read speculations that it is purposely disabled for this use either by DJI or FLIR. Any insight how difficult it would be to change that? Any links to any discussion related to this appreciated.
[2017-08-30 19:15:24]
stealhertz :
Seems like many of us are turning to the focus on the FC. Do you guys think we should start a dedicated channel for that?
[2017-08-30 19:22:15]
hostile :
this channel is likely good
[2017-08-30 19:22:20]
hostile :
too many polluted channels as it is
[2017-08-30 19:22:35]
hostile :
someone tries to micro focus a topic... no one goes... and the room gets stale
[2017-08-30 19:32:25]
stealhertz :
Good point. I just get lazy digging through the 6 billion messages a day in the general channel
[2017-08-30 20:18:50]
hotelzululima :
@stealhertz use the All Unreads in the slack client
[2017-08-30 20:44:26]
jan2642 :
Oh the FOMO...
[2017-08-31 16:08:02]
zapf :
@ender I was thinking more along the lines of inspire 1 and 2.
[2017-09-01 12:05:56]
freaky123 :
@dkovar no updates yet from the Teel?
[2017-09-01 12:07:06]
dkovar :
I'll ping them right now....
[2017-09-01 12:10:21]
freaky123 :
I guess they are either busy or it is a difficult target
[2017-09-01 12:11:30]
freaky123 :
I looked at some other companies notes on how difficult it is to extract code from a ATSAME7.. and it said like 5 layers down are the security bits
[2017-09-01 12:12:49]
freaky123 :
so no easy target
[2017-09-01 12:53:03]
freaky123 :
btw I thought that it was part of the deal that you shouldn't ping them ^^
[2017-09-01 13:34:19]
dkovar :
It was a gentle ping ....
[2017-09-06 09:51:17]
ender :
Guys, i cannot remember exactly but wasnt there somewhere (in the APK or in the FW) a list of ID’s that try to exclude illegylly cloned Mavic batteries ? I searched here and there but cannot seem to find it. IF there is such a list one may coukld edit it to ALLOW cloned batteries again without using that sledgehammer approach of allowing 3'rd party batteries via DJIA debug menu…
[2017-09-06 09:52:31]
bin4ry :
no
[2017-09-06 09:52:38]
bin4ry :
atleast in the app
[2017-09-06 09:52:46]
bin4ry :
there is an http request
[2017-09-06 09:52:56]
bin4ry :
which calls for invalidSN from batts
[2017-09-06 09:53:04]
bin4ry :
seem more like banned batt's
[2017-09-06 09:53:24]
bin4ry :
ah i see you asked for FW. for FW i am not sure
[2017-09-06 10:02:43]
kilrah :
I think there was a file on the aircraft filesystem
[2017-09-06 10:04:56]
ender :
ahh okay… SO probably the app can add banned SN’s via Internet to that file on the AC,,,
[2017-09-06 10:12:38]
kilrah :
yup... seems to have happened to few poeple where the battery went bonkers, heavily unbalanced etc
[2017-09-06 10:12:47]
kilrah :
then they got "battery authentication error"
[2017-09-06 10:13:08]
kilrah :
probably the app notices that battery is toast, sends the SN to servers, and it's added to the blacklist
[2017-09-06 10:15:20]
ender :
woah, quite some action to cope for a busted bat…
[2017-09-06 13:28:28]
hostile :
I think two specific battery sn's were associated with clone chinese batteries... so they black listed the SN (since it was duplicated across all batteries)
[2017-09-06 13:59:14]
opcode :
This happens every time, GO 4 gets fired up. an MD5 and 2 battery sn gets transfered.
[2017-09-06 14:12:32]
bin4ry :
yes
[2017-09-06 14:12:51]
bin4ry :
it has not changed like when i started
[2017-09-06 18:56:58]
ender :
thx for digging that out again ! People in my forum bought cheap Mavic batteries (65 Euro) and now wonder what to do if they turn out to be clones…
[2017-09-06 19:01:13]
hostile :
IIRC it was a result of this
[2017-09-06 19:01:14]
hostile :
<https://forum.dji.com/thread-8255-1-1.html>
[2017-09-06 19:11:48]
ender :
What do you guys think, could the Platinum Mavic really make “even better use” of the new props ? If so, might it be just different ESC Firmware that we might can apply to the Mavic as well ?
[2017-09-06 19:29:08]
hotelzululima :
@martinbogo @freaky123 did you see this yet? <http://ww2.cs.fsu.edu/~ychen/paper/downgradeTZ.pdf>
[2017-09-07 11:53:23]
hostile :
BootStomp: On the Security of Bootloaders
in Mobile Devices <https://www.usenix.org/system/files/conference/usenixsecurity17/sec17-redini.pdf>
[2017-09-07 12:26:00]
freaky123 :
Cool info
[2017-09-07 14:03:38]
umbr4 :
@opcode what app did you use to make those screenshots of the http request/response
[2017-09-07 14:04:46]
opcode :
built in screenshot app on CrystalSky 7.85
[2017-09-07 14:06:09]
opcode :
packet sniffer: packet capture by grey shirts
[2017-09-07 14:06:43]
umbr4 :
cool thanks
[2017-09-09 17:08:27]
dreadwing007 :
Hi, does anyone know the power output form the secondary internal USB port on the Mavic?
[2017-09-09 17:32:11]
hostile :
It's for the ambarella SoC what do you intend to do with it? It doesn't connect to the android subsystem
[2017-09-10 03:01:50]
dreadwing007 :
If so, then useless. I'll try to power my ext device via usb hub and use the normal port. Have to see if it shows up (dmesg)
[2017-09-10 07:20:06]
kilrah :
It's a device port, so it wouldn't supply power anyway...
[2017-09-10 14:42:34]
dreadwing007 :
Thanks that's what I wanted verified. :+1::skin-tone-2:
[2017-09-11 09:27:57]
ender :
i am also powering my Seek FLIR via “normal” USB port on an OTG adapter. No idea how much power it **could** spit out but Seek needs not much.
[2017-09-11 10:11:07]
kilrah :
an OTG port is not a "normal" port :slightly_smiling_face: it does explicitly support working as host and thus supply power
[2017-09-11 12:23:52]
ender :
normal meant the side port, i know better then most that it is OTG capaple :stuck_out_tongue:
[2017-09-11 22:56:56]
dreadwing007 :
I'll have to give that a try!
[2017-09-13 00:17:40]
jezzab :
What is the best way to recompile programs for the Mavic/RC etc? If we wish to add our own like what was done with dropbear etc
[2017-09-13 00:24:56]
jezzab :
nevermind. Search is your friend :slightly_smiling_face:
[2017-09-13 00:25:26]
jezzab :
I'll have a play in a few hours
[2017-09-22 09:12:35]
darksimpson :
Just received my goggles and of course the second thing I done after test fly is some teardown :wink:
[2017-09-22 09:16:31]
kilrah :
heh
[2017-09-22 09:16:33]
darksimpson :
One of the interesting things is that it looks like LVDS output from LC1860C fed to the LCMXO3LF-6900E-6MG256C FPGA for processing and splitting it in two separate LVDS streams for both screens.
[2017-09-22 09:16:38]
kilrah :
I've taken mine apart but not that far :slightly_smiling_face:
[2017-09-22 09:17:54]
darksimpson :
I think that logic loaded in FPGA now is simply shifting pictures for some pixels to align overall picture with eyes position.
[2017-09-22 09:17:56]
kilrah :
I wonder what the unpopulated connector next to the back LCD is... if only it was HDMI, but too many pins
[2017-09-22 09:18:38]
kilrah :
I'd love to make a DSI-HDMI adapter and connect it to one of the screen outputs
[2017-09-22 09:19:11]
darksimpson :
But I also think that it can be possible to split double pictured (in one frame) 3d stream to several pictures, one for one eye and it can be possible to watch true 3d
[2017-09-22 09:19:43]
kilrah :
pretty sure the current FPGA just implements a 1:1 splitter
[2017-09-22 09:19:52]
kilrah :
both screens get exactly the same image, and there's no adjustment
[2017-09-22 09:20:17]
darksimpson :
Exactly same, even without shifting?
[2017-09-22 09:21:14]
kilrah :
well the full screen area is used on both, so yes
[2017-09-22 09:21:24]
kilrah :
shifting is done mechanically
[2017-09-22 09:21:30]
kilrah :
witht he adjustment wheel
[2017-09-22 09:21:30]
darksimpson :
I do not want to disassemble optical part now, as I have a curvy hands with that kind of stuff and it will end up with a ton of dust inside )))
[2017-09-22 09:21:40]
kilrah :
+1 :smile:
[2017-09-22 09:24:46]
darksimpson :
So I think it is possible to make a logic for FPGA to split input stream to 2 different parts for 3d. Unfortunately there is no specific frame buffer to do that simply but I think it can be possible to split it line by line (interleaved) for examle, if timings of screens will allow to do that. Or some other hack.
[2017-09-22 09:29:14]
darksimpson :
Goggles is very interesting product and I think some time it will be possible to hack, dissect and recreate SDR protocol to use it in many open source projects, like streaming (may be even 3d) video wirelessly from PC to goggles :wink:
[2017-09-22 09:30:05]
darksimpson :
Looks like LVDS as on other side of PCB there are 5 ferrite beads indicating 5 diff lines.
[2017-09-22 09:32:29]
darksimpson :
It can be also a source LVDS from LC that is going to FPGA with some other signal lines, need to check.
[2017-09-22 10:06:34]
jezzab :
Thanks for sharing the info @darksimpson!
[2017-09-22 10:07:02]
jezzab :
We were talking a little about the 3D stuff in ~goggles_rooting. Feel free to jump in :slightly_smiling_face:
[2017-09-22 10:33:09]
darksimpson :
@jezzab thx
[2017-09-22 10:34:16]
jezzab :
Would love any input. Trying to cross compile for a start a media player. Play files that don't have to be demuxed
[2017-09-22 10:34:38]
jezzab :
ATM you can only play demuxed MP4 + wav
[2017-09-22 10:35:55]
jezzab :
@unusuario128 has compiled mplayer but is trying to put directfb in it. It played but about 2fps with no sound, no hardware accel
[2017-09-22 10:38:37]
unusuario128 :
DIrectFB is becoming a long travel...
[2017-09-22 10:39:07]
jezzab :
These goggles seem to be elusive with many dead ends :(
[2017-09-22 10:44:23]
darksimpson :
If some way will be found to play video with reasonable performance, it will be worth to see more deep how this all FPGA stuff works — where its logic binary data stored, how it is uploaded to chip, etc. And may be try to develop synthesize some thing to split input stream to watch 3d.
[2017-09-22 10:47:57]
jezzab :
Yup
[2017-09-22 10:48:13]
jezzab :
They use Hantro H1 and G1 encoder,decoders
[2017-09-22 10:49:15]
jezzab :
<http://www.verisilicon.com/IPPortfolio_14_58_2_HantroG1.html>
[2017-09-22 10:55:05]
darksimpson :
Where they use it? For me it looks that they use some LC acceleration features integrated in the silicone.
[2017-09-22 10:56:16]
darksimpson :
May be they just built hantro codecs for DSP integrated in LC? But it seems too much effort to do and looks useful at all.
[2017-09-22 11:12:40]
jezzab :
~goggles_rooting
[2017-09-22 12:52:15]
hostile :
@darksimpson damn you are a brave man!
[2017-09-22 12:53:09]
darksimpson :
Oh I just love to dip my hands in this kind of shit )
[2017-09-22 12:53:23]
hostile :
oh I do too!
[2017-09-22 12:53:29]
hostile :
I am rusty though… so hesitant.
[2017-09-22 12:53:40]
hostile :
my Crystal Sky is on deck for an autopsy soon.
[2017-09-22 12:54:30]
darksimpson :
crystalsky is good thing
[2017-09-22 12:54:49]
darksimpson :
Why you decided to sell your goggles?
[2017-09-22 12:54:54]
hostile :
time!
[2017-09-22 12:55:01]
hostile :
and I want a GoPro Karma to hack on I think
[2017-09-22 12:55:11]
hostile :
no one is really doing this yet
[2017-09-22 12:55:27]
darksimpson :
time?
[2017-09-22 12:55:32]
hostile :
not enough of it !
[2017-09-22 12:55:37]
hostile :
need more hours in the day
[2017-09-22 12:55:37]
darksimpson :
ah, see
[2017-09-22 12:55:50]
darksimpson :
yes, I too, but we have only what he have
[2017-09-22 12:58:02]
hostile :
hence why it may be best to sell the Goggles, instead of allowing them to fester on my bench
[2017-09-22 12:58:38]
darksimpson :
indeed
[2017-09-22 13:00:36]
darksimpson :
Anyway I will use mine (actually bought half by half with my friend) to fly FPV, it looks great. But will be glad to participate in hacking according to my free time )
[2017-09-24 17:28:59]
dreadwing007 :
On the Mavic Pro, has anyone been able to get their MP to recognize external USB devices via ADB Shell. cat /sys/bus/usb/devices/*/product
[2017-09-24 23:35:21]
hdnes :
I’m guessing you’d need an OTG cable for that to work, might be possible
[2017-09-25 00:07:13]
jezzab :
Pluggin in an old wireless USB stick I have laying around VID 148F PID 2573
[2017-09-25 00:07:17]
jezzab :
```<11>[ 870.224552] c1 83 (ueventd) init: remove network interface: rndis0
<11>[ 870.311498] c0 1 (init) init: untracked pid 13862 exited
<7>[ 870.549797] c1 930 (kworker/u10:3) bridge: drop 0x7918 packet due to buffer full
<4>[ 870.221646] c1 20378 (kworker/u10:0) u2d:E: comip_ep_dequeue:return ep:0 c057e27c:cf1f4b80:1:1!!
<6>[ 870.734058] c1 20378 (kworker/u10:0) unloading
<4>[ 870.751882] c0 20378 (kworker/u10:0) USB_OTG: set vbus power 0
<4>[ 870.852767] c0 20378 (kworker/u10:0) USB_OTG: set vbus power 1
<4>[ 870.954286] c0 20378 (kworker/u10:0) USB_OTG: comip_otg_start_host: 186, on = 1
<4>[ 870.966146] c0 20378 (kworker/u10:0) USB_OTG: comip_otg_start_host:host on......c0577360
<4>[ 870.966163] c0 20378 (kworker/u10:0) LZS comip_hcd_driver_start: 1251, enter
<4>[ 870.966177] c0 20378 (kworker/u10:0) enter comip_hcd_driver_start:id=0
<4>[ 870.966186] c0 20378 (kworker/u10:0) USB power should be on.
<7>[ 870.971332] c0 20378 (kworker/u10:0) hcd:I: comip_hcd_driver_start init_reg
<4>[ 870.972346] c0 20378 (kworker/u10:0) LZS set_usb_init_reg: 192, AP_PWR_PDFSM_ST1=0x00007000
<4>[ 871.074391] c0 20378 (kworker/u10:0) hcd:Using Descriptor DMA mode
<4>[ 871.074402] c0 20378 (kworker/u10:0) hcd:Periodic Transfer Interrupt Enhancement - disabled
<4>[ 871.074411] c0 20378 (kworker/u10:0) hcd:Multiprocessor Interrupt Enhancement - disabled
<4>[ 871.074420] c0 20378 (kworker/u10:0) hcd:OTG VER PARAM: 1, OTG VER FLAG: 1
<4>[ 871.074455] c0 20378 (kworker/u10:0) hcd:Init: Power Port (0)
<7>[ 871.092912] c0 20378 (kworker/u10:0) hcd:I: comip_hcd_driver_start end
<4>[ 871.337003] c0 27527 (kworker/0:1) USB power should be on.
<4>[ 871.381806] c0 39 (khubd) hcd:Indeed it is in host mode hprt0 = 00021501
<4>[ 871.394017] c0 20378 (kworker/u10:0) USB_OTG: state change not supported 2!
<4>[ 871.394036] c0 20378 (kworker/u10:0) USB_OTG: comip_otg_event: end last_id 0 last_state 1 curr_id 0 curr_state 1
<7>[ 871.439357] c0 0 (swapper/0) hcd:I: --Port Interrupt HPRT0=0x0000100d Port Enable Changed--
<6>[ 871.540785] c0 39 (khubd) usb 1-1: new high-speed USB device number 4 using comip-hcd
<4>[ 871.559483] c0 39 (khubd) hcd:Indeed it is in host mode hprt0 = 00001101
<7>[ 871.559503] c0 39 (khubd) hcd:I: --Port Interrupt HPRT0=0x00001109 Port Enable Changed--
<7>[ 871.640624] c0 27717 (grep) hcd:I: --Port Interrupt HPRT0=0x0000100d Port Enable Changed--
<4>[ 871.782032] c0 39 (khubd) usb 1-1: config index 0 lenght 32, result 9
<4>[ 871.782049] c0 39 (khubd) 09 02 20 00 01 01 00 80 96
<4>[ 871.815042] c0 39 (khubd) usb 1-1: config index 0 lenght 32, result 32
<4>[ 871.815059] c0 39 (khubd) 09 02 20 00 01 01 00 80 96 09 04 00 00 02 ff ff ff 00 07 05 81 02 00 02 00 07 05 01 02 00 02 00
<3>[ 871.878014] c0 39 (khubd) usb 1-1: device v148f p2573 is not supported
<7>[ 873.635760] c1 10651 (kworker/u10:1) bridge: drop 0x797c packet due to buffer full
<7>[ 876.547783] c0 10651 (kworker/u10:1) bridge: drop 0x79e0 packet due to buffer full
<7>[ 878.954766] c1 10651 (kworker/u10:1) bridge: drop 0x7a44 packet due to buffer full
<7>[ 881.709757] c0 20378 (kworker/u10:0) bridge: drop 0x7aa8 packet due to buffer full
<7>[ 884.398810] c1 20378 (kworker/u10:0) bridge: drop 0x7b0c packet due to buffer full
<7>[ 886.564766] c0 0 (swapper/0) hcd:I: --Port Interrupt HPRT0=0x00001008 Port Enable Changed--
<6>[ 886.749831] c0 39 (khubd) usb 1-1: USB disconnect, device number 4```
[2017-09-25 00:07:38]
jezzab :
So unplug USB cable and disconnected adb, plug in stick (with OTG cable), wait for log, remove stick
[2017-09-25 00:08:58]
jezzab :
`<3>[ 871.878014] c0 39 (khubd) usb 1-1: device v148f p2573 is not supported`
[2017-09-25 00:12:02]
jezzab :
Sandisk Extreme 32Gb USB stick:
[2017-09-25 00:12:07]
jezzab :
```<4>[ 1363.216509] c0 4707 (kworker/u10:2) u2d:E: comip_ep_dequeue:return ep:0 c057e27c:cb18bfc0:1:1!!
<6>[ 1363.726047] c0 4707 (kworker/u10:2) unloading
<4>[ 1363.755802] c0 4707 (kworker/u10:2) USB_OTG: set vbus power 0
<4>[ 1363.856775] c0 4707 (kworker/u10:2) USB_OTG: set vbus power 1
<4>[ 1363.957760] c0 4707 (kworker/u10:2) USB_OTG: comip_otg_start_host: 186, on = 1
<4>[ 1363.968666] c0 4707 (kworker/u10:2) USB_OTG: comip_otg_start_host:host on......c0577360
<4>[ 1363.968683] c0 4707 (kworker/u10:2) LZS comip_hcd_driver_start: 1251, enter
<4>[ 1363.968700] c0 4707 (kworker/u10:2) enter comip_hcd_driver_start:id=0
<4>[ 1363.968975] c0 4707 (kworker/u10:2) USB power should be on.
<7>[ 1363.976923] c0 4707 (kworker/u10:2) hcd:I: comip_hcd_driver_start init_reg
<4>[ 1363.977939] c0 4707 (kworker/u10:2) LZS set_usb_init_reg: 192, AP_PWR_PDFSM_ST1=0x00007000
<4>[ 1364.079984] c0 4707 (kworker/u10:2) hcd:Using Descriptor DMA mode
<4>[ 1364.079993] c0 4707 (kworker/u10:2) hcd:Periodic Transfer Interrupt Enhancement - disabled
<4>[ 1364.080002] c0 4707 (kworker/u10:2) hcd:Multiprocessor Interrupt Enhancement - disabled
<4>[ 1364.080012] c0 4707 (kworker/u10:2) hcd:OTG VER PARAM: 1, OTG VER FLAG: 1
<4>[ 1364.080047] c0 4707 (kworker/u10:2) hcd:Init: Power Port (0)
<7>[ 1364.096983] c0 4707 (kworker/u10:2) hcd:I: comip_hcd_driver_start end
<4>[ 1364.333055] c0 10529 (kworker/0:0) USB power should be on.
<4>[ 1364.397769] c0 4707 (kworker/u10:2) USB_OTG: state change not supported 2!
<4>[ 1364.397793] c0 4707 (kworker/u10:2) USB_OTG: comip_otg_event: end last_id 0 last_state 1 curr_id 0 curr_state 1
<4>[ 1365.103819] c0 39 (khubd) hcd:Indeed it is in host mode hprt0 = 00021501
<7>[ 1365.161569] c0 10529 (kworker/0:0) hcd:I: --Port Interrupt HPRT0=0x0000100d Port Enable Changed--
<6>[ 1365.262943] c0 39 (khubd) usb 1-1: new high-speed USB device number 5 using comip-hcd
<4>[ 1365.263298] c0 39 (khubd) hcd:Indeed it is in host mode hprt0 = 00001101
<7>[ 1365.263332] c0 39 (khubd) hcd:I: --Port Interrupt HPRT0=0x00001109 Port Enable Changed--
<7>[ 1365.330787] c0 10711 (sh) hcd:I: --Port Interrupt HPRT0=0x0000100d Port Enable Changed--
<4>[ 1365.443120] c0 39 (khubd) usb 1-1: config index 0 lenght 32, result 9
<4>[ 1365.443148] c0 39 (khubd) 09 02 20 00 01 01 00 80 64
<4>[ 1365.443292] c0 39 (khubd) usb 1-1: config index 0 lenght 32, result 32
<4>[ 1365.443306] c0 39 (khubd) 09 02 20 00 01 01 00 80 64 09 04 00 00 02 08 06 50 00 07 05 81 02 00 02 14 07 05 02 02 00 02 14
<3>[ 1365.443939] c0 39 (khubd) usb 1-1: device v0781 p5580 is not supported
<6>[ 1365.446273] c0 39 (khubd) usb-storage 1-1:1.0: USB Mass Storage device detected
<6>[ 1365.446512] c0 39 (khubd) scsi5 : usb-storage 1-1:1.0
<7>[ 1365.670762] c0 20378 (kworker/u10:0) bridge: drop 0xbf04 packet due to buffer full
<5>[ 1366.449233] c0 10529 (kworker/0:0) scsi 5:0:0:0: Direct-Access SanDisk Extreme 0001 PQ: 0 ANSI: 6
<5>[ 1366.450067] c0 10529 (kworker/0:0) sd 5:0:0:0: Attached scsi generic sg0 type 0
<5>[ 1366.450457] c1 4707 (kworker/u10:2) sd 5:0:0:0: [sda] 61282631 512-byte logical blocks: (31.3 GB/29.2 GiB)
<5>[ 1366.450793] c1 4707 (kworker/u10:2) sd 5:0:0:0: [sda] Write Protect is off
<7>[ 1366.450807] c1 4707 (kworker/u10:2) sd 5:0:0:0: [sda] Mode Sense: 33 00 00 08
<5>[ 1366.451096] c0 4707 (kworker/u10:2) sd 5:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
<6>[ 1366.463343] c0 4707 (kworker/u10:2) sda: sda1 sda2
<11>[ 1366.464516] c1 83 (ueventd) init: add usbstorage: sda1
<5>[ 1366.465876] c0 4707 (kworker/u10:2) sd 5:0:0:0: [sda] Attached SCSI disk```
[2017-09-25 00:12:32]
jezzab :
:wink:
[2017-09-25 00:17:08]
jezzab :
what are you trying to do @dreadwing007?
[2017-09-25 00:18:54]
dreadwing007 :
:wink:
[2017-09-25 00:36:11]
dreadwing007 :
Think the issue is when a device is attached to a usb hub for power, it's not detecting to USB device that's attached to the hub.
[2017-09-25 00:37:53]
dreadwing007 :
Will need to try to power the stick via an external source while the data ports are directly connected to the MP
[2017-09-25 00:39:45]
dreadwing007 :
@jezzab just a POC at the moment, will share once I can determine what I'm trying to do can be done
[2017-09-25 00:41:03]
dreadwing007 :
Does you know if DJI signs the kernel drivers?
[2017-09-25 02:01:42]
haloweenhamster :
Can't adb be done over wifi so you can monitor the USB data
[2017-09-25 02:09:42]
jezzab :
```C:\temp\adb>adb connect 192.168.2.20
unable to connect to 192.168.2.20:5555: cannot connect to 192.168.2.20:5555: No connection could be made because the target machine actively refused it. (10061)```
[2017-09-25 02:10:54]
haloweenhamster :
You have to enable it first using USB I think
[2017-09-25 02:11:09]
jezzab :
I did
[2017-09-25 02:11:39]
jezzab :
I jumped out of my USB adb connection and tested the IP ^^
[2017-09-25 02:11:59]
jezzab :
```C:\temp\adb>adb connect 192.168.2.20
unable to connect to 192.168.2.20:5555: cannot connect to 192.168.2.20:5555: No connection could be made because the target machine actively refused it. (10061)
C:\temp\adb>adb devices
List of devices attached
0123456789ABCDEF device
emulator-5660 host
emulator-5608 host```
[2017-09-25 02:12:55]
haloweenhamster :
O ok is your drone rooted?
[2017-09-25 02:13:16]
jezzab :
sure is
[2017-09-25 02:14:07]
haloweenhamster :
Not sure then it was a thought
[2017-09-25 02:25:21]
hostile :
use the “adb tcp” command
[2017-09-25 02:25:23]
hostile :
via usb
[2017-09-25 02:25:26]
hostile :
then connect via tcp
[2017-09-25 02:25:45]
jezzab :
I can connect via USB no worries
[2017-09-25 02:25:53]
hostile :
adb tcpip 5555
[2017-09-25 02:26:01]
hostile :
or alternate
[2017-09-25 02:26:02]
hostile :
su
setprop service.adb.tcp.port 5555
stop adbd
start adbd
[2017-09-25 02:26:11]
jezzab :
want to connect via wifi instead
[2017-09-25 02:26:20]
hostile :
yeah do what I just said
[2017-09-25 02:26:21]
jezzab :
then plug a device into the USB OTG
[2017-09-25 02:26:34]
hostile :
you have to FIRST start adb via usb… and switch it to tcp mode
[2017-09-25 02:26:38]
jezzab :
ok
[2017-09-25 02:26:44]
hostile :
then do what ever you want with the OTG port
[2017-09-25 02:26:49]
hostile :
<https://stackoverflow.com/questions/2604727/how-can-i-connect-to-android-with-adb-over-tcp>
[2017-09-25 02:29:28]
haloweenhamster :
Any luck?
[2017-09-25 02:30:43]
jezzab :
slow down turbo. Getting there
[2017-09-25 02:34:20]
haloweenhamster :
I'm at work sat waiting to move a train so I'm bored and can't do a lot
[2017-09-25 02:34:27]
jezzab :
:slightly_smiling_face:
[2017-09-25 02:37:36]
jezzab :
Hmm
[2017-09-25 02:40:17]
haloweenhamster :
I was thinking, if it works would it work whilst flying?
[2017-09-25 02:41:14]
jezzab :
You looking for more storage or something?
[2017-09-25 02:42:14]
haloweenhamster :
No Arduino
[2017-09-25 03:12:40]
haloweenhamster :
Does it have to be rooted to ADB because I'm kind of interested but don't want to root my wife's drone and mines out of commission until I can get a core board
[2017-09-25 03:14:17]
dreadwing007 :
Looking to connect other USB devices not necessarily storage. I found an OTG adapter that I can also use for power. Should help with the USB over hub power issue
[2017-09-25 03:15:52]
haloweenhamster :
Any way to load test the port to see it its capable of 500ma or more?
[2017-09-25 03:50:55]
jezzab :
oops deleted a wrong message there
[2017-09-25 03:51:34]
jezzab :
Anyway, YES you can do adb over wifi. I f'd up
[2017-09-25 03:51:50]
jezzab :
was using 192.168.2.20 for some reason not 192.168.2.1. My bad
[2017-09-25 03:52:02]
jezzab :
This was AFTER i got it to work with dropbear lol oh well. Sorry for the confusion
[2017-09-25 03:53:18]
jezzab :
```C:\temp\adb>adb connect 192.168.2.1
connected to 192.168.2.1:5555
C:\temp\adb>adb devices
List of devices attached
192.168.2.1:5555 device
0123456789ABCDEF device
emulator-5660 host
emulator-5608 host
C:\temp\adb>adb -s 192.168.2.1:5555 shell
root@wm220_dz_ap0002_v1:/ #```
[2017-09-25 04:11:54]
haloweenhamster :
Good to know
[2017-09-25 04:23:51]
haloweenhamster :
Googled it to see what it was and it came up with
Australian folklore featuring a predatory, carnivorous version of the koala
[2017-09-25 04:25:04]
jezzab :
HAHA yeah a dropbear
[2017-09-25 04:25:09]
jezzab :
Aussie joke
[2017-09-25 04:25:14]
jezzab :
but dropbear is also:
[2017-09-25 04:25:23]
jezzab :
<https://github.com/MAVProxyUser/dji_system.bin/tree/master/mods>
[2017-09-25 04:25:25]
jezzab :
ssh server
[2017-09-25 04:26:50]
jezzab :
Soooo much better coz you can use Control-C and Tab to finish filenames etc
[2017-09-25 04:30:11]
jezzab :
I gave putting a USB to Serial in too. Didnt like it. Would have been coooool
[2017-09-25 04:31:43]
haloweenhamster :
@hostile seems as if your a r&d man so you may know this, from memory for USB to go over 500ma it needs to handshake first is this still the case and applicable to otg?
[2017-09-25 04:32:51]
haloweenhamster :
wondering how much the mavic can supply
[2017-09-25 04:47:42]
hostile :
@jezzab yeah OpenPilot had a “Team Dropbear” back in the day…
[2017-09-25 13:35:26]
dreadwing007 :
Nice, that's what I wanted to know.
[2017-09-25 15:17:48]
ender :
right now i got that running on spark as my mavic is not rooted atm…
[2017-09-25 15:23:33]
hotelzululima :
TrustZone has been violated now? new? class of power fault attacks <https://www.usenix.org/system/files/conference/usenixsecurity17/sec17-tang.pdf>
[2017-09-25 15:36:31]
freaky123 :
I was never really interested in the tz.. seems like something they don't really usr
[2017-09-25 15:36:33]
freaky123 :
Use
[2017-09-25 16:44:01]
dreadwing007 :
Able to use my USB device using a OTH power hack. Device now is recognized!! :-))
[2017-09-25 16:45:07]
ender :
Power hack = Y cable ?
[2017-09-26 03:49:41]
dreadwing007 :
Can someone confirm how OccuSync works. Is it Layer 2 or Layer 3,4,7?Does the DJI controller do channel hopping? or is it just plain IEEE802.11?
[2017-09-26 04:01:50]
hostile :
I don’t believe there is any public info on that at this time @dreadwing007 let us know i fyou find anything!
[2017-09-26 20:02:24]
dreadwing007 :
Will do :+1::skin-tone-2:
[2017-09-26 21:02:34]
haloweenhamster :
just had a fan issue and my mavic lost power with no warning, luckily I was landing battery over 80%, powered it back up ok and it went off again after 30-40s picked it up and noticed how hot it was, took it inside after it had cooled I powered it up again and I lost power after 5m that's when I noticed the fan didn't kick in
The mavic must send a shutoff signal to the battery but nothing to the RC / phone
[2017-09-26 21:29:38]
carlcox89 :
:open_mouth:
[2017-09-26 21:29:43]
carlcox89 :
that's scary
[2017-09-26 21:30:50]
hostile :
@haloweenhamster did you have the little plastic thing on over the camera?
[2017-09-26 22:49:49]
haloweenhamster :
Nope never use the dome, fans dead
[2017-09-26 22:50:19]
haloweenhamster :
<https://youtu.be/9-O2XyM1ufg>
[2017-09-26 22:54:14]
haloweenhamster :
It just worried me that there's no warning but I learnt there is I kill switch command for the battery, wonder if there's a DUML command?
[2017-09-27 02:06:15]
hostile :
probably a command in linux that can check fan speed
[2017-09-27 04:05:12]
haloweenhamster :
2 wire fan, purely a temperature thing
did come to mind that device your working on, if its at an airport and knows where the planes are as well as drones and the proximity is close you could switch off the drone as a last resort
[2017-09-27 05:49:31]
b_hargis :
it could derive the fan speed with backEMF if they cared, but agree, likely just a chip going into thermal shutdown. Something is likely burn you hot.
[2017-09-27 08:36:58]
haloweenhamster :
Yeah couldn't touch the heat sink just ordered a fan £13
[2017-09-27 16:16:02]
cs2000 :
Scary! The fan isn’t caked in dust or anything, wonder why it failed like that, no warnings in GO4 is a bit odd too, I’m sure they could warm you that AC temp is too high....
[2017-09-27 17:22:26]
kilrah :
What app? the modded one may be preventing that from coming
[2017-09-27 17:23:04]
kilrah :
my experimentations caused some overheats, but the modded app I usually use never warned. Once I connected to ios app (obviously stock) I got the warning.
[2017-09-27 17:24:43]
kilrah :
or it's just a version question
[2017-09-27 17:24:53]
bin4ry :
@kilrah same version of the app? They added some maintenance stuff in the most actual versions
[2017-09-27 17:25:32]
bin4ry :
Since I never removed anything related, also could be an android Vs iOS problem. The functions differ sometimes
[2017-09-27 17:29:36]
kilrah :
nope definitely not, 413 on android and ios was probably 9 at that moment
[2017-09-27 17:32:38]
bin4ry :
Might be related then. But I would be happy if someone could test for real!
[2017-09-27 17:33:32]
kilrah :
I've hardwired a fan on my core board and shrinkwrapped everything now so might not be me :sweat_smile:
[2017-09-27 17:38:46]
haloweenhamster :
Mine was all stock with 1.4.0000 and 4.1.10 apk
[2017-09-27 17:42:44]
haloweenhamster :
What kind of tests? I can load any fw and install any apk, fan is still out on mine until replacement arrives
[2017-09-27 18:07:38]
kilrah :
just different versions of the original apk
[2017-09-28 01:47:35]
hostile :
wrekt
[2017-09-28 01:47:38]
hostile :
<https://blog.acolyer.org/2017/09/21/clkscrew-exposing-the-perils-of-security-oblivious-energy-management/>
[2017-09-28 02:35:18]
czokie :
Nice
[2017-09-28 06:44:14]
kilrah :
wow
[2017-09-28 14:42:41]
the_lord :
when i was working with core board and original battery it was switching the battery off when it over heats, for that i switched to LiPo and added heat sink
[2017-09-28 15:34:45]
hostile :
indeed
[2017-09-28 15:34:48]
hostile :
me too
[2017-09-29 02:46:22]
hotelzululima :
gold color mavic platinum props in stock(finally) .. <http://store.dji.com/product/mavic-low-noise-quick-release-props-platinum?utm_source=stock-reminder&utm_medium=email&utm_campaign=auto-email>
[2017-09-29 02:46:44]
hotelzululima :
15-20 day ship however
[2017-10-05 00:59:25]
vertigo :
Hi I have been asked to repair a mavic pro that suffered a slight crash but now will not fly. The error is no3 esc status error. I am looking for the best course of action. All motors twitch on startup. I will be opting for self repair would it be best to swap the arms and see if the error moves to no4 esc status error. If so this would prove the motor is faulty which tbh is cheaper than the esc board. Or would you just replace the motor then see if the esc needs replacing after. The other issue I have is the gimbal does its startup very fast (thrashing). The camera works and can be fully controlled it’s just the start issue. I do need to reseat one of the rubber dampeners so the gimbal obviously took a bit of shock. Or would you just live with it which may mean it fails at a later date.
Any help would be much appreciated. Thanks ps I will be replacing the arms anyway so really this question is about testing if the esc is ok.
[2017-10-05 02:58:05]
hostile :
pull it open yet? check the core board… check the ESC board…
[2017-10-05 02:58:12]
hostile :
tear it down first check for fuckery
[2017-10-05 07:08:16]
haloweenhamster :
If you put a2 into debug mode there's a motor / esc test tab
[2017-10-05 10:38:48]
vertigo :
Will tear it down later if I get chance. Take it I’m looking for burns etc on the board. If the esc is gone it’s strange that the motor twitches on its startup.
[2017-10-05 14:53:56]
vertigo :
Stripped it down. Can’t see any damage loose connections etc all solder joints look good. Checked resistance of all motors all are the same apart from back left which is slightly higher resistance. All resistors have correct resistance on esc board. Reassembled now I get a no3 moTor error instead of esc error. Don’t know why the error has changed as nothing has been changed unless there is a slightly loose connection which was disturbed by opening. Will replace the motors and see what happens. Thanks
[2017-10-06 14:04:22]
bobataylor13 :
There's two chips on the back of the P4 ESC labeled "DJI IESC10000 DC#JF475", does anyone have more info on these? Or at least the right terms to put in google
[2017-10-06 14:11:38]
hostile :
for what replacement? or trying to RE the board?
[2017-10-06 14:12:07]
hostile :
they are likely someone one elses chips… you need to try to connect to pins and read them if you want more detail
[2017-10-06 14:16:33]
bobataylor13 :
Right not I'm just auditing everything inside the drone. I figured they are made elsewhere, was hoping someone had already gone to the trouble of figuring it out for me.
[2017-10-06 14:19:45]
hostile :
I’ve not seen them documented
[2017-10-06 14:19:54]
hostile :
can you send me a picture of this part of the board
[2017-10-06 14:20:00]
hostile :
there may be some identifying pads, etc
[2017-10-06 14:23:25]
bobataylor13 :
My potato did its best to get these photos
[2017-10-06 14:35:22]
hostile :
those are too big to be SiLabs F330's
[2017-10-06 14:43:58]
hostile :
EFM32s….
[2017-10-06 14:43:59]
hostile :
<https://www.silabs.com/documents/public/application-notes/an0816-efm32-brushless-dc-motor-control.pdf>
[2017-10-06 14:44:08]
hostile :
that is my guess
[2017-10-06 14:44:42]
hostile :
I said Gecko earlier… but I think ‘Zero Gecko’ perhaps instead?
[2017-10-06 14:49:40]
bobataylor13 :
Thanks hostile! I'll see if I can confirm that at some point
[2017-10-06 14:49:52]
hostile :
that would be my best guess
[2017-10-06 19:37:34]
brd_gsm :
hi! new here, but definitely willing to help :slightly_smiling_face:
[2017-10-06 19:37:50]
brd_gsm :
did you guys manage to dump the emmc/flash of the DJI and/or remote?
[2017-10-06 19:40:13]
hostile :
we have root
[2017-10-06 19:40:29]
hostile :
<https://github.com/MAVProxyUser/dji_system.bin>
[2017-10-06 19:40:35]
hostile :
is where we keep most firmware
[2017-10-06 19:46:33]
brd_gsm :
so you know that dji updates are encrypted with AES128 cbc and that the key is Dji123 then?
[2017-10-06 19:48:21]
hostile :
which updates… in which context… that isn’t the **full** story. =] there is much more to it than that
[2017-10-06 19:48:41]
hostile :
but yes we are aware of that password being used
[2017-10-06 19:48:42]
hostile :
=]
[2017-10-06 19:48:46]
brd_gsm :
i have a physical dump from my inspire 1 remote, i can share it with you if you want
[2017-10-06 19:48:55]
brd_gsm :
full of scripts and stuff thats interesting :smile:
[2017-10-06 19:49:13]
brd_gsm :
also know how to get a shell on it, no matter what fw version
[2017-10-06 19:49:23]
hostile :
MOST of the guys here are on $currentgen hardware. Not many i1 Hackers here.
[2017-10-06 19:49:31]
brd_gsm :
oh, i see
[2017-10-06 19:49:34]
hostile :
more i2, Spark, Mavic, P4, etc
[2017-10-06 19:49:42]
hostile :
we do have some intel on previous gen hardware though
[2017-10-06 19:49:47]
hostile :
@mefisto is here for example
[2017-10-06 19:50:58]
brd_gsm :
well, to be honest i did not spend too much time with it, but i was able to find really quick the remote serial console (already logged in as root), and then use dd and the usb port to do physical dump of the entire firmware, which i can share with you guys if you are interested
[2017-10-06 19:51:10]
kilrah :
If you have a lead how to unbrick the large number of I1 RCs around that would be awesome lol
[2017-10-06 19:51:24]
brd_gsm :
well, i can have some ideas, yes
[2017-10-06 19:51:30]
kilrah :
had to send one back again the other day... guess it's the third for us
[2017-10-06 19:51:44]
brd_gsm :
what do you mean by bricked, completely non-responsive?
[2017-10-06 19:51:45]
kilrah :
these things are crazy unreliable
[2017-10-06 19:51:59]
brd_gsm :
or just doesnt do what its supposed to?
[2017-10-06 19:52:10]
kilrah :
powers on, but either doesn't link to aircraft or does but USB is dead so no mobile device connection
[2017-10-06 19:52:21]
brd_gsm :
easy then
[2017-10-06 19:52:36]
brd_gsm :
i can definitely help, even right now if you want
[2017-10-06 19:52:42]
brd_gsm :
should we talk in pm or here?
[2017-10-06 19:56:45]
hostile :
I encourage folks to talk in the open
[2017-10-06 19:56:50]
hostile :
so more can benefit from it
[2017-10-06 19:57:04]
hostile :
time zones here are a bitch… I think most of the euros are sleeping ATM
[2017-10-06 19:57:14]
brd_gsm :
I am in spain :D
[2017-10-06 19:57:19]
hostile :
and EST folks just hitting dinner / fam time soon.
[2017-10-06 19:57:43]
brd_gsm :
Oki, then i will tell you guys how to get a shell
[2017-10-06 19:58:17]
brd_gsm :
From there you can trigger scripts manually for fw update or pairing and much more
[2017-10-06 20:00:38]
hostile :
now… if you say you have a file system dump of an i1… I’d be keen to see it
[2017-10-06 20:00:43]
hostile :
sure some of the other guys would too
[2017-10-06 20:00:52]
hostile :
we’ve kinda enabled the upgrade / downgrade scene here
[2017-10-06 20:00:59]
hostile :
just not many gen1 users
[2017-10-06 20:02:53]
brd_gsm :
Sure, i will
[2017-10-06 20:03:19]
hostile :
I’ve got one of those on my bench in same state lol
[2017-10-06 20:03:23]
brd_gsm :
So to get the shell, you need to remove the 4 screws of the hdmi cover and pop it out
[2017-10-06 20:03:38]
hostile :
GLB588?
[2017-10-06 20:03:41]
brd_gsm :
Then, inside the white shit you pulled out, there's another pcb
[2017-10-06 20:04:08]
brd_gsm :
Dont know what that is :(
[2017-10-06 20:05:06]
brd_gsm :
Now, in that pcb that was inside the white shit, there are three pins on the bottom called "tx1", "rx1" and "gnd"
[2017-10-06 20:05:08]
hostile :
mine looks like this
[2017-10-06 20:05:14]
brd_gsm :
They are self explanatory
[2017-10-06 20:05:42]
brd_gsm :
You are missing the board
[2017-10-06 20:05:55]
brd_gsm :
Its the one with hdmi
[2017-10-06 20:06:27]
hostile :
yeah there are a few variants
[2017-10-06 20:06:31]
hostile :
this is an 858A
[2017-10-06 20:06:34]
hostile :
early model
[2017-10-06 20:06:43]
brd_gsm :
The pins are the ones with solder on this photo
[2017-10-06 20:07:48]
hostile :
you have the B model
[2017-10-06 20:07:50]
hostile :
I have the A model
[2017-10-06 20:07:52]
hostile :
=]
[2017-10-06 20:08:15]
brd_gsm :
And once you get the shell, type "stop" so all the torrent of bs stops and you have a plain shell
[2017-10-06 20:08:19]
brd_gsm :
Mmm
[2017-10-06 20:08:21]
hostile :
nice. Shelling out on P3s controller is similar
[2017-10-06 20:08:25]
brd_gsm :
So no hdmi?
[2017-10-06 20:08:31]
hostile :
different design
[2017-10-06 20:08:50]
hostile :
look for more variants here on @mefisto’s github <https://github.com/mefistotelis/phantom-firmware-tools/wiki/GL300-Main-board>
[2017-10-06 20:09:10]
hostile :
most of the TX / RX have variants
[2017-10-06 20:09:14]
hostile :
this is for GL300…
[2017-10-06 20:09:27]
hostile :
we both now are talking about the 858 series…
[2017-10-06 20:09:38]
hostile :
but this highlights manufacturing run differences.
[2017-10-06 20:09:42]
brd_gsm :
Mine says MFI368
[2017-10-06 20:10:23]
brd_gsm :
On the hdmi
[2017-10-06 20:10:33]
brd_gsm :
Down, it says gl658b
[2017-10-06 20:11:05]
hostile :
ahh yours is a 658… even earlier than mine … 858.
[2017-10-06 20:11:34]
brd_gsm :
Well, trust me dji will have left the backdoor
[2017-10-06 20:12:01]
brd_gsm :
If you can, send me a hi-res pic of the pcb for the hdmi board from both sides
[2017-10-06 20:12:34]
hostile :
we are WELL aware of their many orifices… hehe no need to ensure us of it!
[2017-10-06 20:12:51]
hostile :
I’ll maybe put this board back together later. It is in a pile of other todos
[2017-10-06 20:14:24]
brd_gsm :
So, where should i upload my remote dump?
[2017-10-06 20:15:51]
brd_gsm :
Or i'll just upload it to a temp service and paste link
[2017-10-06 20:16:09]
hostile :
google [mega.nz](http://mega.nz) where ever
[2017-10-06 20:16:25]
hostile :
we host lots of shit on github
[2017-10-06 20:16:50]
brd_gsm :
Awesome
[2017-10-06 20:17:07]
brd_gsm :
Will play some starcraft in the meantime :D
[2017-10-06 20:20:40]
kilrah :
nice
[2017-10-06 20:21:59]
mefisto :
@brd_gsm Did I got this right - in Inspire1 RC HDMI Module, the DM365 firmware is encrypted with pass "Dji123" ?
I want to be sure, because in Ph3 Pro the pass is a bit longer: <https://github.com/mefistotelis/phantom-firmware-tools/wiki/Firmware-m0800#structure>
[2017-10-06 20:52:43]
brd_gsm :
It might extend to 123456, but its in the rc dump
[2017-10-06 20:52:55]
brd_gsm :
I did all this two years ago
[2017-10-06 20:53:04]
brd_gsm :
So i'm pulling it off my head
[2017-10-06 20:53:23]
brd_gsm :
But it was awesome to find this group, so i joined :)
[2017-10-06 20:58:18]
hostile :
I must go to dinner with my family now! sorry.
[2017-10-06 21:10:45]
brd_gsm :
Enjoy!
[2017-10-07 06:12:22]
the_lord :
no USB connection is an easy fix, all what you need to do is flash the DM368 i've been doing it for more than a year now :slightly_smiling_face:
[2017-10-07 06:14:59]
the_lord :
as i wrote in your repo, the DM36x FW password is D123456
[2017-10-07 06:26:56]
the_lord :
@kilrah to fix the RC USB not seeing the mobile you'll need the following:
1- @mefisto phantom tools to extract the DM35x FW
2- openSSL to decrypt the FW using the password Dji123456
3- extract the ubl.img and u-boot.img
4- USB-TTL to connect your PC to DM36x PCB make sure its on 3.3V not 5V
5- sfh_DM36x.exe to flash the ubl.img and u-boot.img
sfh_DM36x.exe -nandflash -v -p "COM4" ubl1.img u-boot.img
the above can fix both RC USB and the cameras X3, X5 and P3P with device not detected (modules 0800 and 1500)
****you need to remove the first 0x800 bytes from ubl.img and u-boot.img files before flashing them***
[2017-10-07 06:42:48]
kilrah :
Thanks, keeping that somewhere for the next occurrence which will no doubt happen one day... still have to support a few customers with I1s and I still have mine even if it's mostly seeing darkness in its box since the Mavic came out...
[2017-10-07 12:30:03]
brd_gsm :
<https://expirebox.com/download/ed9c65aa6a1f25b63f5024709f111243.html>
[2017-10-07 12:30:18]
brd_gsm :
password is: pooppooppooppooppooppoop!
[2017-10-07 12:30:29]
brd_gsm :
link will expire in 48h, so please download it before then
[2017-10-07 12:31:02]
brd_gsm :
its from a version from 2 years ago, but i can dump the latest as well
[2017-10-07 12:32:05]
brd_gsm :
@the_lord your method writes to the mtd device, or is it a flasher using an API/boot mode in the RC?
[2017-10-07 12:52:35]
hostile :
thanks @brd_gsm yeah dump the latest too
[2017-10-07 14:00:19]
brd_gsm :
K, will do
[2017-10-07 19:05:04]
the_lord :
i forgot to mention that you need to remove the first 0x800 bytes from ubl.img and u-boot.img files before flashing them
[2017-10-07 19:05:43]
the_lord :
@brd_gsm i flash the DM36x directly
[2017-10-07 19:06:09]
the_lord :
today i went to work shop to take photos and screen shoots
[2017-10-08 06:45:26]
the_lord :
@kilrah --^
[2017-10-08 06:47:02]
the_lord :
sfh_DM36x.exe -nandflash -v -p "COM4" ubl1.img u-boot.img
[2017-10-08 06:48:42]
kilrah :
Thanks, will keep all of that in a folder :slightly_smiling_face:
[2017-10-08 06:49:48]
the_lord :
you should flash it twice
[2017-10-08 06:50:17]
the_lord :
sfh_DM36x.exe doesn't flash it in one round
[2017-10-08 14:21:39]
hostile :
nice work @the_lord
[2017-10-08 15:18:52]
the_lord :
Sorry Dji123456
[2017-10-08 20:18:26]
anonslacker :
Hello
[2017-10-08 20:20:29]
anonslacker :
Does anybody know what is this part?
[2017-10-08 20:20:32]
anonslacker :
I have p4p
[2017-10-08 20:20:35]
anonslacker :
I sent it to a guy to fix it for me
[2017-10-08 20:21:15]
anonslacker :
I think he stole some parts from me
[2017-10-08 20:41:25]
kilrah :
could be a bracket that holds a cable/connector in place
[2017-10-10 08:02:39]
brd_gsm :
@the_lord thats how i connect to it :smile:
[2017-10-10 08:03:01]
brd_gsm :
the remote is now asking for a login, which it didnt ask for before
[2017-10-10 08:03:25]
brd_gsm :
i tried root 123456 and 12345678 but they didnt work, any idea of what the password might be?
[2017-10-10 08:05:05]
jan2642 :
Does root/Big~9China work ?
[2017-10-10 08:05:50]
bin4ry :
we should put this on the wiki, it seems like the usual pwd they use IF they use any
[2017-10-10 11:47:47]
freaky123 :
Maybe make a password list
[2017-10-10 12:06:36]
brd_gsm :
nope @jan2642
[2017-10-10 12:10:32]
brd_gsm :
any other ideas?
[2017-10-10 12:10:47]
jan2642 :
That’s the only one I know :laughing:
[2017-10-10 12:11:24]
brd_gsm :
now worries hehe
[2017-10-10 12:11:49]
brd_gsm :
since the memory is an eMMC, i would rather not have to desolder it to dump it, but we'll see
[2017-10-10 12:12:13]
brd_gsm :
will give it a week to see if more pw suggestions come up
[2017-10-10 12:18:00]
kilrah :
maybe try the different known keys that have been used for other things, like the string encryption in the android app? wouldn't be surprised if they reused some :smile:
[2017-10-10 14:58:55]
mefisto :
Just wanted to show my recent drawings:
<https://github.com/mefistotelis/dji-hardware-schematics/blob/master/phantom_3_pro_gimbal_top_board/phantom_3_pro_gimbal_top_board.pdf>
<https://github.com/mefistotelis/dji-hardware-schematics/blob/master/phantom_3_pro_gimbal_top_board/phantom_3_pro_gimbal_top_board_pcb_f.pdf>
<https://github.com/mefistotelis/dji-hardware-schematics/blob/master/phantom_3_pro_gimbal_top_board/phantom_3_pro_gimbal_top_board_pcb_b.pdf>
Still working on them.
[2017-10-10 15:05:40]
joker_x3 :
Insane!
[2017-10-10 15:23:56]
hostile :
nice work dude!
[2017-10-10 15:36:33]
martinbogo :
Very nice!
[2017-10-10 15:37:38]
martinbogo :
@mefisto: If I send you my notes, and a top & bottom board scan of the Mavic LC board, would you be willing to give kicad-ing up that schematic a try?
[2017-10-10 15:38:20]
martinbogo :
@mefisto: My normal 9-to-5 work has meant I had to backburner my own project to do so, and I had ~80% of the board traced out.
[2017-10-10 15:50:29]
mefisto :
@martinbogo sure, send me everything. Not sure whether I'll be able to turn it all into schematic, but at least we will have a initial project to expand.
[2017-10-10 17:07:52]
martinbogo :
Will do.
[2017-10-10 17:36:48]
freaky123 :
That would be awesome:+1:
[2017-10-10 18:49:28]
the_lord :
yes @brd_gsm
you are unable to login now coz in latest FWs they are replacing the passwd and initab files after the RC finishes the update
in older initab file the auto login was enabled
but in latest FWs it is like this:
#ttyS0::respawn:/sbin/autologin
if you want to know the password you can crack the passwd file or you can craft custom FW bin with uncommenting the auto login in initab file
[2017-10-11 01:24:03]
czokie :
@has anyone ever got into p4p rc? What os is it running?
[2017-10-11 08:12:00]
brd_gsm :
I am currently cracking another password, will crack this one once i finish
[2017-10-11 08:12:11]
brd_gsm :
I have 2x 1080ti
[2017-10-11 08:12:30]
brd_gsm :
And thats a descrypt hash
[2017-10-11 08:15:08]
ender :
@brd_gsm is that YOU ? Ender / Nils here ?!
[2017-10-11 08:33:22]
brd_gsm :
Yes, thats me :D
[2017-10-11 08:37:31]
ender :
Great :slightly_smiling_face:
[2017-10-11 13:23:22]
hostile :
I love how small this world is @brd_gsm and @ender =]
[2017-10-11 19:55:08]
hostile :
anyone here prefer a specific set of micro grippers over another? <https://sigrok.org/wiki/Probe_comparison#Mechano_Japan_FP-2S>
[2017-10-11 21:26:09]
hotelzululima :
Those be the ones I use
[2017-10-12 00:27:45]
hostile :
great talk by goodspeed. <https://www.youtube.com/watch?v=ZmZ_tvbhJ0I>
[2017-10-12 07:57:24]
brd_gsm :
ok, i just put the password to crack it, lets hope there are no special symbols and then we can have it in less than 3 days
[2017-10-12 08:00:49]
brd_gsm :
@czokie busybox
[2017-10-12 10:25:14]
brd_gsm :
password is Rc123456
[2017-10-12 10:30:47]
brd_gsm :
if there are any other hashes that you guys would like me to crack just let me know
[2017-10-12 10:42:42]
freaky123 :
Lol that is fast
[2017-10-12 10:52:33]
brd_gsm :
2x 1080ti
[2017-10-12 12:53:31]
kilrah :
:joy:
[2017-10-12 13:40:40]
hostile :
<https://www.youtube.com/watch?v=_JNGI1dI-e8>
[2017-10-12 15:55:08]
pure3d :
:heart: Mel Brooks
[2017-10-12 16:10:41]
martinbogo :
@hostile Dude, I :heart: Travis. Cant' wait to catch up with him next month.
[2017-10-12 16:12:32]
hostile :
I haven’t seen him since Recon MTL a few years back
[2017-10-12 16:12:41]
hostile :
MAYBE a quick derbycon lobby chat
[2017-10-12 16:19:42]
martinbogo :
You need to come to ToorCamp next year. Bring kiddos.
[2017-10-12 16:20:21]
martinbogo :
Well, bring kiddos AND wife. Lots of hacking, camping, stuff for everyone not-geeky to do .. although you may need to moderate your kid's experiences a bit :slightly_smiling_face:
[2017-10-12 17:28:26]
hostile :
heh yeah wife is like NOPE on ANYTHING =] Ian is just now getting into a good state with his Autism where he is more portable.
[2017-10-12 17:28:41]
hostile :
she’s not keen around hacking peeps
[2017-10-12 19:56:58]
coldflake :
I have not paid attention today, password for what?
[2017-10-14 05:18:23]
joker_x3 :
@brd_gsm Password for what please?
[2017-10-14 07:21:01]
brd_gsm :
@coldflake @joker_x3 for i1 remote on 1.8
[2017-10-14 17:00:19]
nocommie :
@vertigo I have that same joystick and throttle and have used it to fly fixed wing and multirotor but didn't like it. A traditional handheld TX is more precise for me. Even the large UAV I flew in conflict zones for the military used a traditional TX although they were connected to a different C2 system. So yeah, while cool, I don't see it as practical. Maybe for those with nothing but full scale experience?
[2017-10-14 17:47:35]
vertigo :
I have multi rotor experience and Microsoft flight sim. Don’t really have rc plane experience so was really sticking with what I know lol.
[2017-10-16 13:38:16]
joker_x3 :
Has anyone used mefistotelis‘s comm_serial2pcap.py script to record serial traffic?
[2017-10-16 13:40:12]
joker_x3 :
I stuck at „waiting for fifo to be opened ...“ on my MacBook.
[2017-10-16 13:50:30]
jan2642 :
It’s for live capturing. You need to open the fifo with wireshark or use cat fifo > /tmp/foo.pcap to write to a file. Once the fifo is open it will continue.
[2017-10-16 15:40:10]
joker_x3 :
Thanks a lot @jan2642 !!
[2017-10-18 22:08:47]
brd_gsm :
Does anyone know if there is an uart shell on the i1 (not the remote) and how to connect to it? (Location)
[2017-10-19 02:02:36]
czokie :
Most of the people here play with the current generation - i1 is a different architecture
[2017-10-19 02:30:06]
hostile :
Open the remote and take us some pictures
[2017-10-19 12:55:31]
dreadwing007 :
Has anyone in here compiled any kernel modules for the mavic?
[2017-10-19 12:59:41]
freaky123 :
I did
[2017-10-19 12:59:50]
freaky123 :
What do you wanna do?
[2017-10-19 12:59:56]
freaky123 :
@dreadwing007
[2017-10-19 16:56:15]
dreadwing007 :
awesome
[2017-10-19 16:57:52]
dreadwing007 :
@freaky123 Have examined existing kernel modules on the MP, their vermagic is "3.10.62 SMP preempt mod_unload modversions ARMv7" I will need to cross-compile the usbserial stuff
[2017-10-19 16:59:02]
freaky123 :
isn't that already loaded?
[2017-10-19 17:03:36]
dreadwing007 :
Usb serial from another Linux device. Need to cross compile a usbserial.ko to work on the MP.
[2017-10-20 09:39:38]
brd_gsm :
@hostile i already did 10 days ago :)
[2017-10-20 13:34:35]
hostile :
ahh I missed the pictures @brd_gsm link?
[2017-10-25 00:06:14]
haloweenhamster :
on a mavic I changed a core board from one to another
with the board in the original, flight logs worked,
in the new one, flight logs didn't and PC didn't mount storage but it did before the core died
Do I need to do anything when changing a core board?
fw 1.4.0000
[2017-10-25 00:43:46]
hostile :
mine worked fine.
[2017-10-25 00:44:05]
hostile :
I hear there are some flight log access changes in newer versions
[2017-10-25 00:44:08]
hostile :
just downgrade it
[2017-10-25 00:54:41]
haloweenhamster :
Ok cheers, did update it after changing it over, hopefully get my bird operational next week then I can start playing, core board in post & just ordered Titan Atlas, been reading through go 4 apk code today, not found anything interesting yet but code is starting to make a little sense
[2017-10-25 09:04:39]
kilrah :
yup logs in 1000 and later are a mess
[2017-10-25 09:05:15]
kilrah :
can’t access the sd card way anymore, only through assistant “data upload” (and needs assistant 1.1.6, and it still doesn’t work most of the time…)
[2017-10-25 10:08:38]
haloweenhamster :
That explains it still on 1.1.2
[2017-10-25 11:23:41]
dkovar :
@kilrah Thanks for confirming that. I was pretty certain it wasn't just me. And, if you use the data upload, it strips a lot of records out of the file.
[2017-10-25 12:42:54]
kilrah :
@dkovar yep... and actually I just had to try and get the log form a crashed mavic on 0000 and no chance lol.
[2017-10-26 03:30:52]
b_hargis :
Hmn, wonder if it's processing out the data in the AC , backend or in the JS front-end. I'll take a look when I have time or is this known?
[2017-10-26 03:34:32]
b_hargis :
They added encryption keys that I found that weren't used, but at the time I didn't have a mavic to test with. Curious if the log is encrypted to force it to only be retrievable with 1.1.6
[2017-10-26 03:35:19]
b_hargis :
Or, when I say weren't used, I mean, I didn't see them used while I had no hardware. I may revisit
[2017-10-26 05:41:33]
hdnes :
@b_hargis Where were the keys?
[2017-10-26 05:42:06]
hdnes :
got me curious… @dkovar what behavior were you seeing exactly
[2017-10-26 12:20:03]
dkovar :
I tried both Assistant and various DUMLs to send the SD mount command. The command seemed to go through but the card did not appear. If the camera SD card was mounted it went away, as normal. The front light, which was flashing, went out.
This occurred on the two recent versions of the FW, on Windows and OSX, and was still happening even with Kilrah's guide to work around it.
Assistant can still list the files. If you select those files, it will upload them to the laptop and then "compress" them. Compression seems to include stripping out a lot of data.
So there is still a channel to the card, it just isn't allowing direct access to it.
---
On the FTP side, you can see it creating a local tmp file and then you get that file in response to the request. This is encrypted, as noted many times. If the transfer fails, both the original and incomplete .tmp file are on the card. If the DAT file is above a certain file something breaks on the server, the connection times out, and it will forever retry on that file.
Files that successfully download can be decrypted with the tool.
---
It occurs to me that maybe the encryption process is -also- stripping data out, i.e., this occurs on the FC rather than in Assistant.
[2017-10-26 12:20:08]
dkovar :
@hdnes
[2017-10-26 12:21:59]
dkovar :
When I say "stripping the data out", I had two flights that appeared to be missing GPS data that would normally be used for flight tracks. There are other records that may contain enough GPS data, but the ones people normally look at were missing. The flights were flown with full GPS lock using waypoints so lack of GPS was not an issue during flight.
[2017-10-26 12:25:01]
b_hargis :
@hdnes I think it was utils.js, but I need to go back this weekend when I have time and look. I only just got my mavic and didn't realize how it used to be, or that the new firmware only allows access through 1.1.6. Now that I have hardware to test with I'll go see if I can trace the logs through to the front end. However, @mefisto has been working on the log format, and frankly this weekend I was planning to build a reader based on his work in javascript. I'm not sure if what he has done accounts for what the latest firmware is doing to the log files or not, I haven't had time to sit down with it.
[2017-10-26 12:28:27]
b_hargis :
I believe he is working with a P3, but hopefully there is a high degree of overlap.
[2017-10-26 12:44:19]
b_hargis :
Okay, so in mixed module (FC 400, eveything else 0000) I have no obvious logs on my SD card
[2017-10-26 12:47:24]
b_hargis :
I'm looking at it via the usb connected mavic. I can't find my sd card reader so I will have to wait to see if they are on the card when read directly. This may not be helpful at all, I've never seen where the logs are kept but just as a reference.
[2017-10-26 12:50:02]
haloweenhamster :
Go into a2 and click flight data the mounted drive will change
[2017-10-26 12:53:45]
haloweenhamster :
I've got the same mix and logs work as normal
[2017-10-26 12:54:03]
dkovar :
@b_hargis I think @mefisto was working with "complete" logs. P3 logs (and I2) logs are V1 and P4 and I2 are V3 logs. They're close, but different.
[2017-10-26 15:28:41]
hdnes :
Strange that they would remove lat lng in the “compression” stage. Feel like that’s definitely some of the top 10 items everyone is going to want to pull.
[2017-10-26 15:31:41]
dkovar :
I think they are aiming for a walled garden. If you want the data, you need to upload it to us and then get it back from us.
[2017-10-26 15:32:42]
dkovar :
The logs via FTP look a lot like the logs via Assistant 2 with the latest FW. I've not done any work to determine exactly what is removed. I suspect Assistant is just FTPing logs over now.
[2017-10-26 15:48:57]
hostile :
that is what “blackbox” was for originally
[2017-10-27 18:49:20]
haloweenhamster :
Just wondered if the 905 fw file does anything if the fc is on 400?
[2017-10-27 18:53:59]
kilrah :
@dkovar need to investigate more about how that log is retrieved, dump DUML and network traffic while getting it from assistant
[2017-10-27 18:54:27]
kilrah :
it's bound to either send it through DUML, or create some temp file on the ftp (would vote for the latter given transfer speed...)
[2017-10-27 18:54:33]
dkovar :
FWIW - I downgraded the firmware and can now mount the SD card using the DUML command again.
[2017-10-27 18:54:41]
kilrah :
yes that works
[2017-10-27 18:54:50]
kilrah :
i.e. the dat is there and good
[2017-10-27 18:55:03]
kilrah :
and stripped later
[2017-10-27 18:55:50]
haloweenhamster :
Only the fc needs to be older
[2017-10-27 18:55:55]
dkovar :
I think that Assistant is just FTPing the files over. I suspect the FTP server is stripping them, not Assistant, because the files look similar when I use either FTP or Assistant.
[2017-10-27 18:56:12]
dkovar :
Yep, only downgraded the FC.
[2017-10-27 18:58:59]
kilrah :
or some process that copies them from the FC's internal card to the location that is FTP-accessible
[2017-10-27 19:14:46]
dkovar :
Yep.
[2017-10-27 19:20:00]
kilrah :
someone who has root on current FW could check if the DATs are now accessible on the android filesystem at all times like on the spark and not only after sending the mount command
[2017-10-27 19:21:33]
hostile :
you both should have access to Tar and Feather… if not let me know
[2017-10-27 19:22:07]
kilrah :
nope
[2017-10-27 19:22:33]
hostile :
dm me your github name again
[2017-10-27 19:53:52]
dkovar :
Yep, thank you.
[2017-10-27 19:57:58]
haloweenhamster :
Tar and Feather your developers only section?
[2017-10-27 19:58:38]
hostile :
yeah currently OGs only and those that have contributed other exploits
[2017-10-27 19:59:08]
hostile :
we are running thin on exploits that dice the entire product line as they move forward and fix more and more stuff.
[2017-10-27 19:59:45]
haloweenhamster :
how many OGs are there?
[2017-10-27 20:02:03]
haloweenhamster :
you jezzab & bin4ry are the only ones i interact with really
[2017-10-27 20:02:27]
hostile :
inner core has about 8 people… outer core has about 15
[2017-10-28 17:45:21]
hdnes :
I’ll be taking a quick look at this today and will report back
[2017-10-28 17:50:43]
dkovar :
I'm around, on and off, if I can help in some way.
[2017-10-31 13:31:07]
cubacan :
<https://www.dedrone.com/en/dronetracker/drone-detection-hardware>
[2017-10-31 13:48:57]
hostile :
@cubacan I personally prefer MESMER :wink: <https://www.youtube.com/watch?v=KaQWHPvxt60>
[2017-10-31 14:24:11]
digital1 :
<https://dji-rev.slack.com/archives/C64R5L1HN/p1509457737000078> lol I wonder why haha
[2017-10-31 20:46:14]
haloweenhamster :
Didn't see you in the video
[2017-10-31 20:48:31]
hostile :
I stay low. work from home office
[2017-10-31 21:10:44]
haloweenhamster :
that so you don't have to wear the uniform?
if I want to pull a log off the RC can I use logjammer by changing the IP?
[2017-10-31 21:14:00]
hostile :
lol “uniform” no
[2017-11-01 17:49:32]
carlcox89 :
Anyone knows a way to avoid RC charging the phone? I knowcthat simply cutting the VCC line doesn't work
[2017-11-01 17:54:45]
nocommie :
I "think" I recall someone saying you have to cut only the ground wire.
[2017-11-01 17:55:10]
nocommie :
Not sure where I heard that or if it was confirmed so test at your own risk
[2017-11-01 17:56:35]
kilrah :
depends on the phone
[2017-11-01 17:56:51]
kilrah :
some can be prevented with tools once rooted
[2017-11-01 17:57:07]
kilrah :
with some a resistor in the VCC line can work
[2017-11-01 22:34:05]
b_hargis :
Just make sure to leave the shield so that you don't put a large common-mode voltage across the signal lines by static build-up. That can kill them.
[2017-11-01 22:57:22]
carlcox89 :
I have an S7 edge... If someone already tried to mod , could please share ?
[2017-11-01 23:09:04]
haloweenhamster :
<https://youtu.be/xw0seY4t2dM>
[2017-11-01 23:15:58]
arrvodesign :
@carlcox89 use bottom USB to connect to your phone and use DJI battery with USB adapter to charge the remote
[2017-11-01 23:17:18]
arrvodesign :
I use 15% DJI battery to get some juice in the remote either during or after flight
[2017-11-06 22:02:41]
phuqt :
Any way to check individual motor rpms need to see if I have a motor failing
[2017-11-06 22:08:24]
kilrah :
the dat logs
[2017-11-06 22:10:55]
phuqt :
Thanks
[2017-11-15 18:39:46]
brd_gsm :
<https://www.google.nl/amp/s/www.theverge.com/platform/amp/2017/11/14/16634572/dji-aeroscope-drone-detection-interception-tech-next-level-lauren-goode>
[2017-11-15 18:40:35]
brd_gsm :
So all dji drones are backdoored
[2017-11-15 18:53:42]
arrvodesign :
@brd_gsm we already read it … yes email is what they get from your drone SN
[2017-11-15 19:10:54]
hostile :
Only via api.
[2017-11-15 19:17:21]
brd_gsm :
My concern is more like, each drone is supposed to have:
-hidden ssid
-unique wpa2 pw
This means that they will check mac addres and generate password and ssid from it, then connect to it and retrieve data from it
[2017-11-15 19:18:05]
brd_gsm :
As a security guy, i say thats totally uncool
[2017-11-15 19:21:15]
freaky123 :
I can tell you that the mac address and ssid can be derived easily based on your drone id
[2017-11-15 19:21:44]
freaky123 :
The password is based on another key which is stored in a database at dji
[2017-11-15 19:22:34]
freaky123 :
Or could maybe be derived from the drone id.. but my best guess is that it is random and stored in a database together with your drone id
[2017-11-15 19:22:56]
freaky123 :
So 100% sure that wifi pass can be determined by DJI
[2017-11-15 19:23:07]
freaky123 :
Even based on ssid or mac
[2017-11-15 20:03:18]
brd_gsm :
Well, based on a flying drone that is not broadcasting its drone id in plaintext, and that the only thing visible is the aes128 encrypted traffic (and macs) from the link between the remote and the drone, i assume thats how they do it
[2017-11-18 08:26:16]
brd_gsm :
<https://arstechnica.com/information-technology/2017/11/dji-left-private-keys-for-ssl-cloud-storage-in-public-view-and-exposed-customers/>
[2017-11-20 17:24:19]
versuher :
Got some time to play with my bricked Core Board. The DJI device is present, the RNDIS interface is up but fails to get a proper IP config (apparently, boot fails before the DHCP goes up on the drone, although at least 4 devices are able to get enumerated according to A2 log). Some comm is still possible between the core board and A2 - probably, DUML works on a lower abstraction level than IP needed for FTP access etc. Attempt to perform the FW upgrade in A2 fails as it cannot upload anything on the “drone”. Is there a DUML command to config the drone-side of the network interface?
[2017-11-20 17:25:09]
hostile :
@martinbogo is the only person to repair a board form this state, and unfortunately you need access to a private exploit that is not being shared atm. :confused:
[2017-11-20 17:39:06]
martinbogo :
@versuher: I do offer an "unbricking" service if you needed it. No charge, you pay shipping here and back.
[2017-11-20 17:40:08]
martinbogo :
@verusher : I can unbrick -most- boo-boo's now. Either by using the private exploit, or by doing a rework on the board to remove the chip, fix the filesystem, and then replace and test.
[2017-11-20 17:40:43]
martinbogo :
Although, depending on how much shipping costs between where you are and me? Might be worth it to just buy a replacement core board.
[2017-11-20 17:40:51]
martinbogo :
<-- Austin, TX
[2017-11-20 17:42:05]
martinbogo :
really depends where in the boot state you ended up. I can fix a lot of things by kicking the drone from "factory" mode into "run"mode
[2017-11-20 17:44:35]
versuher :
@martinbogo Thanks Martin, I have already replaced both Core Board and FC Board back in July (talented me bricked both with one shot, lol). The old boards are waiting for their chance of resurrection, but I don’t think it is worth your time and effort (shipping from DE to US and back would be like $30 with snail mail).
[2017-11-20 17:46:15]
martinbogo :
Yep
[2017-11-20 17:46:34]
martinbogo :
and for ~130 Euro, you could have a whole new core board anyway ..
[2017-11-20 18:09:03]
haloweenhamster :
If it fails flashing 801 and then sits with no fan running for a while what do you think the chances are of it being recoverable? @martinbogo
[2017-11-20 18:16:06]
martinbogo :
Well, like I said, I can recover -anything- by desoldering the chip and putting a fresh load on the machine
[2017-11-20 18:16:15]
martinbogo :
but It comes down to "is it worth it?"
[2017-11-20 18:21:58]
kilrah :
the case above is potentially physical damage though
[2017-11-20 18:23:27]
kilrah :
@versuher did you try assigning the ip manually? Some recent "thing" casued DHCP not to auto assign an address anymore on a config that hasn't changed for months, only potentially relatad thing was windows fall creators update...
[2017-11-20 20:57:22]
freaky123 :
Some stuff I can also repair remotely.. so if DUML work I can almost always repair it remotely ;)
[2017-11-20 20:57:37]
freaky123 :
Same way I repaired bogos board:stuck_out_tongue:
[2017-11-20 21:01:42]
hostile :
just gotta be semi trusted
[2017-11-20 21:01:47]
hostile :
cuz some exploits aren’t worth burning
[2017-11-20 21:01:55]
hostile :
for a $100 broken board
[2017-11-20 21:06:26]
freaky123 :
Indeed ;)
[2017-11-20 21:08:02]
haloweenhamster :
understandable
[2017-11-20 21:13:19]
haloweenhamster :
To bad there isn't a bigger crowd from the UK, any OGs in the UK?
[2017-11-20 21:14:44]
freaky123 :
Don't think so... but The Netherlands is very closeby
[2017-11-20 21:15:25]
haloweenhamster :
Think I've driven there in 4-5 hours
[2017-11-20 21:15:45]
freaky123 :
You can basically swim to the Netherlands
[2017-11-20 21:16:51]
freaky123 :
Flying is less than an hour.. and as bonus you will land on the exact same time as you take off:+1:
[2017-11-20 21:18:24]
haloweenhamster :
Takes me an hour to fly to Dusseldorf
[2017-11-20 21:21:32]
haloweenhamster :
well if the European group get together it would be good to meet people like you and @bin4ry
[2017-11-20 21:30:44]
czokie :
Og meet ups!
[2017-11-20 21:56:04]
versuher :
@freaky123 I could ship you the core board (and FC as well, but one needs a flex cable or two to connect it to the core board) if you wanna try playing with it :slightly_smiling_face:
[2017-11-21 00:05:11]
vo :
I'll fly in too!
[2017-11-21 06:59:42]
bin4ry :
I just moved from the Düsseldorf area to Berlin. Berlin is a nicer place to meet anyway :wink: I'm all in for a meeting and some nice drinks. I only cannot take vacations yet since my new job just starts and it is not allowed to take days off in the first 6 month
[2017-11-21 07:52:49]
hdnes :
@martinbogo, is that rework of the LC1860 specifically and not the DDR
[2017-11-21 07:53:16]
haloweenhamster :
Work sometimes sends me to Wegberg-Wildenrath, its a nice area but more people speak English in Berlin :slightly_smiling_face:
[2017-11-21 07:55:46]
bin4ry :
ah siemens
[2017-11-21 07:56:11]
bin4ry :
yeah in berlin you can get along with english pretty well. there are even restaurants speaking better english as german etc :wink:
[2017-11-21 07:57:43]
jezzab :
Good coz my German is limited to: Wonderful, Faster, Good Day, Women, Shit
[2017-11-21 07:59:00]
jezzab :
Hmm reading that it, doesnt sound good :confused:
[2017-11-21 07:59:16]
bin4ry :
even worse as it is still english :wink:
[2017-11-21 08:00:14]
bin4ry :
all you need is "noch ein bier bitte"
[2017-11-21 08:01:35]
jezzab :
oh yes! i will remember that
[2017-11-21 08:02:23]
jezzab :
oh and i remember one more. had to look up the spelling. when your hangin off a statue and a cop says to you:
[2017-11-21 08:02:25]
jezzab :
das ist verboten
[2017-11-21 08:02:46]
bin4ry :
hahaha
[2017-11-21 08:30:05]
haloweenhamster :
only thing I learnt was ich liber es & ich liber dick
[2017-11-21 08:31:02]
haloweenhamster :
Bis spater
[2017-11-21 08:47:47]
bin4ry :
"ich liebe es" "ich liebe dich"
[2017-11-21 08:47:57]
bin4ry :
dick = fat
[2017-11-21 08:48:03]
bin4ry :
dich = you
[2017-11-21 08:49:44]
haloweenhamster :
o didn't learn to write anything, guess it shows
[2017-11-21 08:50:13]
bin4ry :
hehe
[2017-11-21 08:52:04]
haloweenhamster :
Is please wait correct?
[2017-11-21 08:54:14]
bin4ry :
there is no please wait on your 3 things
[2017-11-21 08:54:34]
bin4ry :
bis später = see you later
[2017-11-21 09:38:09]
haloweenhamster :
O yeah bitten warten I think it was, never learnt German at school and struggle to understand anything when I'm over there
[2017-11-21 09:38:48]
freaky123 :
I had german at school :stuck_out_tongue: I even needed todo a final exam in it.. but I suck at languages
[2017-11-21 09:41:07]
bin4ry :
@freaky123 come on, German should be easy for you :wink: I can read and understand dutch "pretty good" if it is spoken slow. Only thing with written dutch is that i need to speak it out loud to understand it, as the writing is "strange" for me :wink:
[2017-11-21 09:41:27]
bin4ry :
@haloweenhamster one just cannot speak every language on earth
[2017-11-21 09:44:40]
freaky123 :
yes reading, speaking and hearing german is easy
[2017-11-21 09:45:29]
freaky123 :
writing sucks :stuck_out_tongue: with all the 'namfalle'
[2017-11-21 09:46:09]
bin4ry :
haha, ok i give you that :wink:
[2017-11-21 09:46:47]
bin4ry :
good thing we can all speak english :wink:
[2017-11-21 09:50:56]
freaky123 :
true that :slightly_smiling_face:
[2017-11-21 09:53:05]
bin4ry :
@freaky123 fun fact and offtopic. We love joppiesaus, back in my old home in NRW (which was very near to the NL border) we could buy it in alsmost every supermarket. Here in berlin i was not able to find it anywhere :cry: i think i need to google a NL store to get some and pay double for it ... really frustrating
[2017-11-21 09:55:11]
freaky123 :
haha :wink:
[2017-11-21 09:55:35]
bin4ry :
i am going cold turkey here :smile:
[2017-11-21 09:57:37]
bin4ry :
if you check [ebay.de](http://ebay.de) they sell it for 7€ for one 500ml sauce
[2017-11-21 16:06:39]
dpitman :
Guys, Is there anyone out there with the skill set, or know who to contact, that could help with something like this project.
<https://www.dropbox.com/s/tom3tysgz4g3yjz/MEP-PPK.pdf?dl=0>
[2017-11-21 16:17:14]
kilrah :
Purpose? Data's already in the file...
[2017-11-21 16:19:21]
dpitman :
Yes, but only with meter(s) accuracy. This device would create a log file of cm accurate gps data in order for the drone to be part of a ppk survey system.
[2017-11-21 16:20:29]
dpitman :
It's not nearly as difficult with a pixhawk FC. But determining the MEP on a RTF dji craft is the crux.
[2017-11-21 16:23:14]
kilrah :
good luck
[2017-11-21 16:23:38]
dpitman :
Thanks.
[2017-11-21 16:54:09]
mefisto :
@dpitman If you want high accuracy position data, you need assisted gps.
If you want to log coordinates with more precision and timestamps, just read DAT logs from the drone.
If you want coords with more precision and timestamp in real time, tap a device which sniffs communication between FC and GPS.
What you propose in this document... well I will comment it like @kilrah: good luck.
[2017-11-21 17:00:55]
dpitman :
@mefisto you are correct. The Emlid Reach (<https://emlid.com/shop/reach-rtk-kit/>) would be handling the gps. My problem is detecting the milisecond the image is captured and reporting that to the Emlid Reach board. I suggested the SD bus sniffing approach as that is being done now. However, I would not be opposed to opening the shell and sniffing directly either. Kits that do this are available now but they are very overpriced for the hardware involved. That is why I am reaching out here. Surely one of these guys would know how to do this. I'm not asking for free services. :slightly_smiling_face:
[2017-11-21 17:09:33]
mefisto :
SD-card is controlled by Ambarella. There is probably an info on Ambarella UART console when a photo is taken. But it would be even better to capture the packet which triggers Ambarella to take a photo.
[2017-11-21 17:22:03]
dpitman :
The kits I mentioned use the SD bus route because it is plug and play. It would probably be best to monitor the shutter control sent to the camera and use that if possible. I'd still need help with that.
[2017-11-21 17:23:30]
dpitman :
The Reach is designed to use the hot shoe on a camera to determine the MEP. We don't have that on a RTF DJI model.
[2017-11-21 17:42:45]
kilrah :
I doubt you have any way to get "millisecond" timing without internal access. On current systems both shutter command and write to card will have have a varying amount of lag that likely can't be predicted to that level.
[2017-11-21 17:43:31]
kilrah :
it's one of those situations where you can't know whether the approach is viable or not before having done the whole job.
[2017-11-21 18:20:31]
dkovar :
For what it is worth, we see clock drift in the log files and adjust for it as we go. I don't remember how far off it gets, but it was enough that we wanted to correct for it.
[2017-11-21 19:09:39]
dpitman :
The time stamp is not too critical. It would just be used to tie the emlid gps location to the photo. Since images are not captured closer than 2 sec. apart. It should be relatively easy to match an emlid gps coordinate with the proper image even if the time stamp on the gps coordinate and the image are not exactly the same. Unless you are saying they are whole seconds off in which case that could be a problem.
[2017-11-21 21:25:40]
kilrah :
I would not expect a lot more precision than the second you have in the exif. But as said, until you implement it and run stats you won't know.
[2017-12-10 08:43:24]
luckfish1985 :
@freaky123i did a update with my mavic with wrong sig file ,LC1860 modle ,but internal fan doesnt start up and core board cant connect the pc , when another usb nearby the led connect pc ,the pc display com port. any idea:disappointed_relieved:
[2017-12-10 09:32:36]
jezzab :
How did you flash it with the wrong sig file @luckfish1985 ?
[2017-12-10 09:35:35]
lolo780 :
I'm trying to delete a firmware module but 7zip says X not implemented.
[2017-12-10 09:35:52]
lolo780 :
But it worked before.
[2017-12-10 09:36:18]
jezzab :
Upgrade 7zip version but this is ~hardware
[2017-12-10 09:37:16]
luckfish1985 :
use DJI Assistant2 Beta112 developer tool upload a sig file to the modle LC1806,then the A2 freezing and later the fan stop to run .
[2017-12-10 09:38:19]
jezzab :
You used the Internal Upgrade section in Assistant2?
[2017-12-10 09:39:35]
jezzab :
If so it’s dead. No one knows how that truely works and it’s not a normal sig file upload. Is it encrypted, decrypted, somthing els, no one knows.Everyone who has played with it has broken something
[2017-12-10 09:40:15]
lolo780 :
@jezzab I tried to recreate the RC disconnect at 59k ft by starting the motors and driving the mavic away. Used GPS emulator to spoof RC position at the home point. No luck. Tried again by driving 58k away then flying the mavic through. No disconnect.
[2017-12-10 09:43:22]
lolo780 :
Is there any advantage to doing it that way?
[2017-12-10 09:44:28]
luckfish1985 :
@jezzab the ui i choose LC1860 modle,later the drone dead
[2017-12-10 09:45:24]
jezzab :
Yes, it’s dead. Read my post ^^^
[2017-12-10 09:46:00]
jezzab :
Big mistake. Buy a new core board
[2017-12-10 09:51:11]
luckfish1985 :
@jezzab Big mistake ,but i think i just choose a 4mb file ,it maybe did not do anything during update ,just like flash the m 305 modle the the fc lock , but if reflash all the model ,the fc can be alive,maybe there are other way to bring it back
[2017-12-10 09:52:55]
luckfish1985 :
i try go in to the recovey ,but failed
[2017-12-10 09:53:35]
haloweenhamster :
Recovery?
[2017-12-10 09:57:28]
haloweenhamster :
At least core boards are more readily available in America
[2017-12-10 11:34:12]
mingtao :
I successeful use this INRUP tool
[2017-12-10 11:34:49]
mingtao :
very useful for recovery bricked RC or A3 M600 or other equip
[2017-12-10 11:35:31]
mingtao :
also sometimes flash Mavic camera or ESC for fun and test
[2017-12-10 15:09:59]
haloweenhamster :
INRUP?
[2017-12-10 15:11:17]
haloweenhamster :
Internal upgrade?
[2017-12-10 15:13:33]
hostile :
@luckfish1985 LOL famous last words. <https://dji-rev.slack.com/files/U8A4FSPKQ/F8BMKQJ56/002_internal_20upgrade_20list.png>
[2017-12-10 15:13:52]
hostile :
<https://dji-rev.slack.com/archives/C64R5L1HN/p1512899160000028>
[2017-12-10 15:13:56]
hostile :
:joy:
[2017-12-11 02:48:40]
luckfish1985 :
how can I go in to the core board with fastboot mode
[2017-12-16 18:01:25]
david :
@hostile @jezzab @dkovar and other OGs... just curious: Why Ruby for so much stuff? Not a problem, just curious. I'm having to learn it. Being 163 years old, I'm more of a javascript, pearl, etc. kinda guy. Is it just 'cause Ruby's what you know, or is there something that makes it a good fit for what we're doing here?
[2017-12-16 18:26:36]
hostile :
@david my history with ruby comes from the Month of Apple bugs... I’ve used it ever since <http://projects.info-pull.com/moab/LMH> corrupted me, so I’ve corrupted some of you... @jan2642 has helped in said corruption
[2017-12-16 18:28:38]
david :
Damn Apple... :laughing: Hard to walk sometimes, they've crapped so much all over the place
[2017-12-16 18:29:26]
david :
no big deal, but having to learn another language to basically to exactly the same things we've been doing in other languages since, well, the paleozoic
[2017-12-16 18:32:57]
david :
meant to post this stuff to general, need more coffee
[2017-12-16 19:06:21]
dkovar :
@david I'm a Python guy, I've not learned Ruby yet.
[2017-12-16 19:43:18]
hostile :
@david feel free to fork DUML into C or your language of choice. Those that complain have the pleasure of using what ever others create. Creators have the pleasure of generating complaints :) the pyduml and dunlrub trees have plenty of info for programmers that prefer other flavors. By all means... bring us more foo !
[2017-12-16 19:48:27]
david :
Thanks hostile. these situations are not a pain in my mind but am opportunity. I was more just curious if there was some technical reason Ruby was being used. I've been needing to mess with it for some time anyway.
[2017-12-16 22:24:02]
hostile :
oh indeed… @david you are just seeing folks work with the tools they are familiar iwth, and in proxy working with the sub tools that work best
[2017-12-19 20:36:24]
torneo :
Just a question. I have this idea to buy spare parts of Mavic on ebay and assemble a drone from it. But what about serial number then and activation? Is the #serial saved on main board or what?
[2017-12-19 22:24:17]
kilrah :
yup
[2017-12-19 22:24:45]
kilrah :
shouldn’t be a problem, many people replaced their core boards and other parts, never heard anything about an activation issue
[2017-12-20 00:26:48]
hotelzululima :
404 on the url
[2017-12-21 08:44:23]
evgeniychuiko :
Flash memory, for android is inside cortex chip?
[2017-12-21 09:01:35]
jezzab :
External. Its a LeadCore LC1860 SoC
[2017-12-21 09:01:58]
jezzab :
You wont find a ARM Cortex chip with 80+MB of internal flash
[2017-12-21 09:12:48]
evgeniychuiko :
I just think about reballing memory chip from mechanical broken board to bricked board
[2017-12-21 09:13:16]
evgeniychuiko :
Sec625 chip is flash memory?
[2017-12-21 15:16:43]
hostile :
@evgeniychuiko it can be done…
[2017-12-22 17:15:37]
jabulonboaz :
Question: Is there a way ether an Assistant debug mode param or a patch for the apk or anyother SW based way that switches off the front and rear Spark LEDs please? (Not interested in HW solutions such as black tape or rewiring thx)
[2017-12-22 17:44:34]
evgeniychuiko :
You can send command for disable all LEDs, but only until restart. Available commands are in bottom of parameter list
[2017-12-22 17:46:32]
evgeniychuiko :
Oh, I don't know if it will work in Spark.
[2017-12-22 20:12:58]
kilrah :
g_config_misc_cfg_forearm_led_ctrl=0 will turn off the front leds
[2017-12-22 20:13:10]
kilrah :
nothing for the back status leds though
[2017-12-23 15:39:49]
jabulonboaz :
Thank u both
[2017-12-23 15:41:01]
jabulonboaz :
I assume this is for the Mavic tough?
[2017-12-23 17:40:21]
kilrah :
no, spark
[2017-12-25 15:10:24]
evgeniychuiko :
Does anybody have a LC1860 and Micron emmc datasheet?
[2017-12-25 15:57:18]
hostile :
@evgeniychuiko the LC1860 stuff is hard to come by! Let me know what ya find
[2017-12-25 17:26:56]
evgeniychuiko :
@hostile Checked all crystal oscillators on core board. There is no oscillator for LC1860... I have to stop cpu, for trying emmc onboard connection.
[2017-12-28 14:50:19]
evgeniychuiko :
I've unwelded emmc chip from core board, and successful connect it to pc. Now I have raw dump of my bricked board...
[2017-12-28 14:51:33]
evgeniychuiko :
Can anyone with rooted mavic make a dump for working system?
[2017-12-28 15:16:16]
hostile :
@jcase --^
[2017-12-28 15:16:28]
jcase :
@jcase has joined the channel
[2017-12-28 15:18:20]
fallengod :
@evgeniychuiko any chance u can post a how-to on dumping the mavic firmware?
[2017-12-28 15:19:49]
evgeniychuiko :
You mean software or hardware method?
[2017-12-28 15:25:35]
fallengod :
Hardware
[2017-12-28 15:29:57]
evgeniychuiko :
It's not so big deal. Just unweld it with IR or hot air rework station... then you can use SD card reader in one bit mode. Later I will try to trace pinouts on board. Maybe it's possible to have access without unwelding chip
[2017-12-28 15:31:26]
fallengod :
Which chip is it ... I try to take a dump of my mavic before but I can't find anything resembling an emmc chip
[2017-12-28 15:31:58]
evgeniychuiko :
But you need some experience, and I strongly not recommend do it on working board)
[2017-12-28 15:32:37]
evgeniychuiko :
Emmc chip, close to CPU
[2017-12-28 15:34:52]
evgeniychuiko :
It can be samsung or micron emcp chip (ram+flash), depends on boards batch
[2017-12-28 15:46:26]
fallengod :
Ohhh
[2017-12-28 15:46:45]
fallengod :
No wonder I couldn't find it
[2017-12-29 06:14:56]
jezzab :
@evgeniychuiko did you back trace the eMMC and see if it has test points in the PCB?
[2017-12-29 06:16:44]
evgeniychuiko :
@jezzab Yes, it has some points, but we need to stop CPU. No chance to interrupt data line
[2017-12-29 06:17:00]
jezzab :
And the raw bin you said was wm330, are you sure it wasn't the wm330_0000.xml? As this file is on all drones. Weird but true
[2017-12-29 06:17:09]
jezzab :
Ahh ok damn
[2017-12-29 06:17:42]
evgeniychuiko :
And I'm stuck now, because no external oscillator for LC1860
[2017-12-29 06:17:57]
jezzab :
So you can't just power VCC of eMMC via a test point and leave the MPU unpowered?
[2017-12-29 06:18:13]
jezzab :
Probably shared?
[2017-12-29 06:20:32]
jezzab :
Or there is no eMMC VCC test point?
[2017-12-29 06:21:00]
evgeniychuiko :
There two power lines for emmc, and I think if you power it... need to try
[2017-12-29 06:23:26]
evgeniychuiko :
Yes, power lines are traced out. I will share it when I will have enough data
[2017-12-29 06:24:07]
jezzab :
That's cool. Just curious and enjoying watching your progress. Hope you fix it :)
[2017-12-29 06:49:51]
evgeniychuiko :
In this dump, all modules in upgrade folder starting with wm330. And serial number is like 07ELD2Mxxxxxxx
[2017-12-29 06:56:40]
jezzab :
Ah yup. P4
[2017-12-29 15:56:20]
jcase :
morning
[2017-12-29 15:56:22]
jcase :
what
[2018-01-01 18:25:45]
david :
slack is tripping on me... everything from 12/19 on has just disappeared
[2018-01-01 19:27:47]
kilrah :
in what channel? i see back to 12/10 here (click "more")
[2018-01-01 19:27:53]
kilrah :
rest is gone becasue free plan
[2018-01-01 20:20:18]
w4t3r :
Has anybody looked into modifying the mavic camera yet? It'd be really nice to get it record with higher bitrate
[2018-01-01 20:20:38]
w4t3r :
Does the mavic also have an ambarella chip as the p3's?
[2018-01-04 21:36:18]
jcase :
@evgeniychuiko hostile was sending me a board that i was just going to do this on
[2018-01-04 21:36:26]
jcase :
the mapping out mmc
[2018-01-04 21:42:14]
evgeniychuiko :
I've already mapped it, but need some board for testing
[2018-01-04 21:43:47]
evgeniychuiko :
My emmc chip was broken with soldering back to board. So tiny contacts, bga 221
[2018-01-04 21:45:01]
evgeniychuiko :
Some guy from other city will send me one broken board for testing, I hope
[2018-01-04 21:49:51]
evgeniychuiko :
@jcase And I already made "inboard" programmer. If you will have working board, wait few days, I will share this points
[2018-01-04 21:50:08]
evgeniychuiko :
Just want to check it first
[2018-01-04 21:52:19]
jcase :
well he is sending a dead one
[2018-01-04 21:52:27]
jcase :
pin out would be enough
[2018-01-04 21:52:28]
jcase :
if you have it
[2018-01-04 21:52:43]
jcase :
i do extraction semi regularly for business purposes
[2018-01-04 21:54:42]
evgeniychuiko :
Ok, I will send it for you, but tomorrow. It's midnight here...)
[2018-01-04 21:56:21]
evgeniychuiko :
1-bit connection. It give us 2,8 mb/sec reading. 23 minutes for full dump
[2018-01-04 22:04:15]
jcase :
thanks
[2018-01-04 22:04:16]
jcase :
no rush
[2018-01-04 22:04:19]
jcase :
28min?
[2018-01-04 22:04:22]
jcase :
geez
[2018-01-04 22:04:25]
jcase :
i use a emmc adapter
[2018-01-04 22:04:27]
jcase :
friend of mine designed
[2018-01-04 22:04:47]
jcase :
<https://shop.exploitee.rs/>
[2018-01-05 03:50:24]
hdnes :
@evgeniychuiko what do you mean by inboard progammer?
[2018-01-05 03:50:38]
hdnes :
meaning you don't have to flow the emmc off the board?
[2018-01-05 03:51:13]
hdnes :
I've got a good board and a bad board, if I can make the bad board good with the dump from the good board, that would be nice!
[2018-01-05 03:51:34]
hdnes :
my soldering skills are pretty damn good if you've got the treasure map
[2018-01-05 03:53:52]
jcase :
@hdnes i can probably do that for you
[2018-01-05 08:47:00]
evgeniychuiko :
Yes, exactly, without flow off. But I have no board to test it...(
[2018-01-05 08:47:43]
evgeniychuiko :
Jcase, I've sent you a pictures with pinout
[2018-01-05 12:12:41]
jcase :
thank you
[2018-01-06 03:07:44]
jcase :
@evgeniychuiko hey i havent opened my mavic, but i was looking at some board pics, is there a secondary usb port inside?
[2018-01-06 03:08:38]
jezzab :
for the Ambarella SoC afaik
[2018-01-06 03:10:15]
jcase :
is that running the camera?
[2018-01-06 03:10:41]
jezzab :
yeah
[2018-01-06 03:10:44]
jcase :
easy to get access to?
[2018-01-06 03:10:49]
jcase :
jsut curious
[2018-01-06 03:12:52]
jcase :
ok thanks
[2018-01-06 03:12:53]
jezzab :
<https://mavicpilots.com/threads/whats-the-internal-usb-port-for-the-one-behind-the-status-led.1693/>
[2018-01-06 03:13:05]
jcase :
this is the main camera right
[2018-01-06 03:14:27]
jezzab :
ask @hostile
[2018-01-06 03:14:30]
jezzab :
he knows all about it
[2018-01-06 03:14:39]
jcase :
ill ope mine up
[2018-01-06 03:14:43]
jcase :
just curious
[2018-01-06 03:14:48]
jcase :
i bug him enough
[2018-01-06 03:17:10]
jezzab :
read the bottom:
[2018-01-06 03:17:11]
jezzab :
<https://github.com/kevinelliott/dji/issues/5>
[2018-01-06 03:18:00]
jcase :
neat
[2018-01-06 05:00:14]
hostile :
@jcase you can’t get to it sans full tear down and removal of core board (or drilling a hole)
[2018-01-06 05:00:34]
hostile :
that post above was censored, but has the basic detail in it
[2018-01-06 05:03:48]
jcase :
ok
[2018-01-06 06:51:07]
lolo780 :
Dikfer port :joy:
[2018-01-06 07:09:36]
jezzab :
Yeah lol ie "We have no idea what it is lol"
[2018-01-06 07:55:43]
evgeniychuiko :
Its ambarella port, you can telnet it 192.168.1.3, if you have a password.
[2018-01-06 09:27:03]
lolo780 :
Got one of my sparks back from the DJI warranty center and they can't unbrick it.
Is the core board of any use or trash it?
[2018-01-06 15:37:30]
hdnes :
@evgeniychuiko if you send me the pics I can try it also
[2018-01-06 16:07:04]
jcase :
@lowellfoo780 are you in hte US?
[2018-01-06 16:07:14]
jcase :
I could actuallyprobably use it for research
[2018-01-06 18:40:25]
lolo780 :
Canada
[2018-01-06 18:44:01]
jcase :
they wont replace it?
[2018-01-06 18:51:26]
lolo780 :
No warranty on it, I bought it used.
[2018-01-06 18:57:25]
jcase :
if you are going to trash it
[2018-01-06 18:57:26]
jcase :
i would like it
[2018-01-06 18:57:31]
jcase :
if i can repair it
[2018-01-06 18:57:35]
jcase :
you can have it back
[2018-01-06 18:57:39]
jcase :
otehrwise i can use it for research
[2018-01-06 19:14:01]
lolo780 :
@jcase sounds good
[2018-01-06 19:15:08]
jcase :
if you want to figure out cheapest shipping cost to Port Angeles wa 98363 ill gladly payfor it, if i get it working i'll ask that you pay for return shipping
[2018-01-06 19:15:12]
jcase :
only if you want
[2018-01-06 19:15:24]
jcase :
do you know what happened to it
[2018-01-06 20:37:40]
lolo780 :
Ok I'll remove it and figure it out.
[2018-01-08 22:00:45]
david :
@jcase has got the bug. The fever is rising.
[2018-01-09 04:27:57]
hostile :
I tricked him by sending him a Crystal Sky
[2018-01-09 04:28:03]
hostile :
it was a viral 0day for his brain.
[2018-01-09 04:33:17]
jcase :
CS is boring
[2018-01-09 20:05:12]
oanerm :
Does anybody tried DJI Go 4 on Amazon Fire HD 8/10? It is decent tablet for $50.What do you think? Thanks
[2018-01-09 20:53:08]
nocommie :
check with @quad808 I think he has.
[2018-01-11 17:55:30]
brian964 :
@jcase trying to see how one would hook it up to a ps
[2018-01-11 17:56:28]
jcase :
thx
[2018-01-11 18:26:15]
jcase :
@brian964 i think uart is used for communication between various hw parts
[2018-01-11 18:33:46]
brian964 :
Pin 1, not sure about? Could be used to send shutdown signal when battery low or battery charge level
[2018-01-11 18:34:47]
brian964 :
Only connections out of the board are the large BAT&GND, the RX&TX, and the plug on the back
[2018-01-11 18:37:06]
kilrah :
the ends are the 2 comms pins
[2018-01-11 18:37:07]
evgeniychuiko :
Its battery communication bus
[2018-01-11 18:37:55]
evgeniychuiko :
for battery controller
[2018-01-11 18:39:11]
kilrah :
anyone remember the url for that repo with the battery protocol implementation? have tried to find it again for quite a while with no success :disappointed:
[2018-01-11 18:44:17]
w4t3r :
nope, there's one guy in the issues of phantom-firmware-tools that claims to have implemented the p3 batt protocol IIRC, but he didn't release it
[2018-01-11 18:45:20]
brian964 :
@channel?
[2018-01-11 18:45:26]
w4t3r :
@brian964 as the other's said, it's the serial communication of the battery with the FC - RC and TX.
[2018-01-11 18:45:33]
w4t3r :
3.3v I think
[2018-01-11 18:45:52]
w4t3r :
you can hook two usb to serial up to them and analyze the protocol if you want
[2018-01-11 18:46:27]
brian964 :
Oh right
[2018-01-11 18:46:46]
brian964 :
Gotta put our saleae to use
[2018-01-11 18:47:02]
jcase :
I wish i could find a guide on using the saleae to find unmarked uart
[2018-01-11 18:47:08]
hostile :
@brian964 probably SMBUS for the battery
[2018-01-11 18:47:19]
brian964 :
You can try with a ohmmeter first
[2018-01-11 18:47:24]
w4t3r :
@brian964 you want to hook it up to a power supply? then change the battery type to non dji battery in assistant, so that it ignores the UART communication lanes, then just power with 12v, haven't tried it but it should work
[2018-01-11 18:47:33]
hostile :
@jcase attach to all the things... click start
[2018-01-11 18:47:38]
hostile :
done
[2018-01-11 18:47:38]
hostile :
add analyzer to channel
[2018-01-11 18:47:40]
hostile :
its not hard
[2018-01-11 18:47:55]
jcase :
@hostile finding vulns istn hard either, but if you havent done it
[2018-01-11 18:47:56]
jcase :
...
[2018-01-11 18:48:16]
jcase :
i mean it took me months to find my first one, today i would have spotted it winith first 10 minutes
[2018-01-11 18:49:12]
brian964 :
Jcase wanted to
[2018-01-11 18:50:33]
w4t3r :
@jcase ^
[2018-01-11 18:51:20]
jcase :
well i have some dead boards coming
[2018-01-11 18:51:29]
hostile :
@jcase you should be getting hella RTs
[2018-01-11 18:51:46]
hostile :
**sigh** core boards still on my desk too , next to christmas presents I need to ship.
[2018-01-11 18:53:35]
jcase :
@lowellfoo780 sent me a couple
[2018-01-11 18:53:50]
jcase :
i'd like to power it without taking my mavic apart if possible
[2018-01-11 18:54:00]
jcase :
will dig in a bit
[2018-01-11 18:54:36]
w4t3r :
I'm pretty sure it should even power up without changing battery type, just won't take off
[2018-01-11 18:56:30]
hyprmtr :
Turning the battery to “non DJI battery” does work. I don’t remember where I read or which video I saw but it was someone experimenting with 18650 batteries on a long range setup. It allows maximum battery drain also.
[2018-01-11 18:57:42]
hyprmtr :
I will dig around for it in a little while.
[2018-01-11 19:05:42]
zapf :
People have been pigggybacking official batteries for a while. There’s not much they can do to stop you from changing the lithium behind the electronics
[2018-01-11 19:09:52]
dev :
maybe this one: <https://github.com/sincoder/mavic_bat> ??
[2018-01-11 19:14:18]
zapf :
Any updates on the dji ssd stuff?
[2018-01-11 20:05:48]
hostile :
@jcase I can tell you teh power points on the core boards. regular lipo works fine. <https://dji-rev.slack.com/archives/C64R5L1HN/p1515696830000779>
[2018-01-11 21:31:24]
jezzab :
This one?
<https://github.com/sincoder/mavic_bat>
[2018-01-11 22:05:03]
kilrah :
YES that was it, thanks!
[2018-01-12 17:00:50]
jcase :
lots of test pins on mavic
[2018-01-12 17:00:52]
jcase :
any activate atll
[2018-01-13 16:08:39]
hostile :
put your Saleae on them ... click start already!
[2018-01-13 16:08:45]
hostile :
@jcase --^
[2018-01-13 16:10:45]
jcase :
im waiting for the boards @lowellfoo780 sent
[2018-01-13 16:30:43]
mefisto :
My dissectors have a partial support of battery protocol:
[2018-01-13 16:30:44]
mefisto :
<https://github.com/mefistotelis/phantom-firmware-tools/blob/master/comm_dissector/wireshark/dji-p3-batuart.lua>
[2018-01-13 17:24:50]
kilrah :
yup it was the sincoder repo I was thinking of, @jezzab pointed me to it already - want to do the opposite, little adapter to get dji battery data on a common RC transmitter telemetry system
[2018-01-14 00:40:10]
jezzab :
If its UART then the Saleae auto detect even should nail its straight up
[2018-01-14 16:12:21]
jcase :
eitehr i didnt have auto detect on or it didnt work, but i got it just fine
[2018-01-14 16:12:29]
jcase :
disapointed i cant stream data with it
[2018-01-15 16:14:15]
hostile :
show me your graph
[2018-01-15 16:14:19]
hostile :
zoom out all the way
[2018-01-16 19:21:00]
evgeniychuiko :
Is anyone here experienced in DDR hardware?
[2018-01-16 19:22:28]
evgeniychuiko :
I try to unbrick @binomu mavic core board. But u-boot output looks strange
[2018-01-16 20:00:03]
aholtzma :
looks like the wheels have come off
[2018-01-16 20:00:19]
aholtzma :
check vddr, vddr_t supplies to see if they’re alive
[2018-01-16 20:02:18]
aholtzma :
there might be something corrupted in the uboot env
[2018-01-16 20:03:00]
aholtzma :
do a printenv to see if that looks ok
[2018-01-16 20:03:09]
aholtzma :
holy old uboot
[2018-01-16 20:05:33]
jcase :
@evgeniychuiko how was it bricked? I remotely unbricked CFork's sunday
[2018-01-16 20:06:01]
jcase :
his was just stuck in recovery howeer
[2018-01-16 21:39:25]
hostile :
@evgeniychuiko where are you connected, to get the uBoot output from Mavic core board? can you show me the pins you are connected to?
[2018-01-17 00:20:14]
jcase :
@hostile with a real uboot prompt
[2018-01-17 00:20:20]
jcase :
if you can get it booting altered bootimages
[2018-01-17 00:20:28]
jcase :
then we could hash it togethere with that ucmd blind shit
[2018-01-17 00:20:36]
jcase :
and get some custom stuff booting
[2018-01-17 01:55:13]
hostile :
@evgeniychuiko when you get back, let us know the pins you are tapping...
[2018-01-17 04:45:49]
evgeniychuiko :
@aholtzma there is no possibility to print something. This errors mean hardware problems, or I should rewrite boot partitions?
[2018-01-17 04:48:45]
evgeniychuiko :
@jcase nice! It was issue with my board. It stuck in recovery boot... Can you explain me how you did it?
[2018-01-17 04:51:59]
evgeniychuiko :
@hostile the pins is biggest pins on board. But there is only diagnostic short output, till kernel started
[2018-01-17 04:52:02]
jcase :
@evgeniychuiko yes, used an exploit of minte that gives code execution in recovery
[2018-01-17 04:52:06]
jcase :
to clear the boot mode
[2018-01-17 04:52:51]
evgeniychuiko :
Through com port?
[2018-01-17 04:53:14]
jcase :
not exactly
[2018-01-17 04:53:56]
evgeniychuiko :
because, when board stuck in recovery, there's no ip interfaces
[2018-01-17 04:56:05]
jcase :
ah yes, but the kernel does have some interaction with usb
[2018-01-17 04:57:09]
evgeniychuiko :
With @binomu 's board something other. Kernel not starting at all.
[2018-01-17 04:59:48]
jcase :
how were you sure
[2018-01-17 04:59:51]
jcase :
uart?
[2018-01-17 05:00:27]
evgeniychuiko :
you can see it in u-boot uart
[2018-01-17 05:01:48]
evgeniychuiko :
in normal or recovery booting, u-boot output ends with "starting kernel at 0x1f800000..."
[2018-01-17 05:02:11]
jcase :
and his?
[2018-01-17 05:02:17]
jcase :
wait he had teh fried board right
[2018-01-17 05:03:19]
jcase :
did you get your's out of recovery
[2018-01-17 05:03:33]
evgeniychuiko :
nobody knows... previous owner said - just switched it off, and the mavic never started after
[2018-01-17 05:03:41]
jezzab :
Might have cooked a vreg?
[2018-01-17 05:04:29]
evgeniychuiko :
No, my board died when reflowing emmc chip back
[2018-01-17 05:05:18]
evgeniychuiko :
vreg is in emmc controller? or in boot partitions?
[2018-01-17 05:07:07]
evgeniychuiko :
his u-boot output you can see ^^
[2018-01-17 05:08:49]
evgeniychuiko :
In normal cases, ddr size is 512MiB. In this board is showing 7EiB... wtf?))?
[2018-01-17 05:22:34]
hostile :
@evgeniychuiko can you take a photo by chance? Is this the row of three pins on one side of the board?
[2018-01-17 05:32:19]
evgeniychuiko :
yep
[2018-01-17 05:33:44]
evgeniychuiko :
first one is u-boot output. second one maybe rx, because fc send many information to this pin
[2018-01-17 05:40:23]
hostile :
these, correct?
[2018-01-17 05:44:56]
evgeniychuiko :
Yes
[2018-01-17 05:45:24]
evgeniychuiko :
first means right in your pic
[2018-01-17 05:49:42]
binomu :
@binomu has joined the channel
[2018-01-17 12:04:22]
arrvodesign :
@evgeniychuiko forgot to ask ... is there any serial number printed on the board anywhere or it's totally programmable like you see in the Assistant?
[2018-01-17 12:51:24]
evgeniychuiko :
I have 5 boards now. One with sticker on sdcard slot with serial number. One with printed sn over board itself, and 3 without any seral numbers at all
[2018-01-17 12:53:17]
evgeniychuiko :
Why do you need it?
[2018-01-17 13:16:34]
haloweenhamster :
Guessing he's asking if its got a hardware SN or just programed
[2018-01-17 13:19:35]
haloweenhamster :
I have 3 one had sticker on SD reader other 2 didn't, they both had multi colour pen marks on SD reader
[2018-01-17 13:37:13]
arrvodesign :
@evgeniychuiko @haloweenhamster thanks … I am just wondering as it seems Camera, Board, and Mavic serial numbers are programmed … stickers are just that … stickers ))
[2018-01-17 13:40:29]
evgeniychuiko :
its programmed and can be changed. In scripts you can see some factory script for programming sn
[2018-01-17 14:03:09]
jcase :
@arrvodesign i got the serial number changing working
[2018-01-17 14:03:13]
jcase :
but dont see a point to it tbh
[2018-01-17 14:03:37]
aholtzma :
where do they store the sn?
[2018-01-17 14:03:52]
jcase :
it is also possibly a felony state side, I need to read the laws, im not sure how the drones are classified
[2018-01-17 14:04:30]
jcase :
hold let me look again
[2018-01-17 14:05:17]
jcase :
it should be /amt/board/id.txt i believe
[2018-01-17 14:05:36]
jcase :
you can change it using root
[2018-01-17 14:05:55]
jcase :
just edit that file
[2018-01-17 14:07:01]
evgeniychuiko :
for raw dump scan I see two places with board sn, and two places with wi-fi settings
[2018-01-17 14:07:23]
aholtzma :
huh, usually it’s tucked away in a protected sector on spi flash
[2018-01-17 14:07:32]
jcase :
it could be as well
[2018-01-17 14:07:37]
jcase :
i dont think they are doing it here
[2018-01-17 14:07:38]
jcase :
tho
[2018-01-17 14:08:22]
aholtzma :
is changing SN generally illegal in us? I know imei is not allowed under fcc regs
[2018-01-17 14:08:34]
jcase :
possibly, i would need to go back and look
[2018-01-17 14:08:34]
aholtzma :
maybe under CFAA?
[2018-01-17 14:08:40]
jcase :
not under CFAA no
[2018-01-17 14:08:52]
jcase :
realistically who cares
[2018-01-17 14:08:55]
jcase :
but possibly
[2018-01-17 14:09:08]
arrvodesign :
@jcase nah not really need to change it … but yeah I saw it in AMT there is a board folder and BT (bluetooth) #, as well as product folder with Mavic Serial
[2018-01-17 14:09:11]
jcase :
but there are other identifiers on teh device that are burned in
[2018-01-17 14:09:25]
jcase :
@arrvodesign that one i pointed to is what they changed in refurbishment
[2018-01-17 14:09:37]
jcase :
like if they are refurbishing a product, they change that text file
[2018-01-17 14:11:26]
arrvodesign :
@jcase I just found it surprising that they store TXT file with such data right there on device
[2018-01-17 14:11:39]
jcase :
could be elsewhere, but that is what they change
[2018-01-17 14:11:45]
jcase :
they also have some things blown into the fuses
[2018-01-17 14:11:53]
jcase :
taht are effectively serial numbers as well
[2018-01-17 14:12:09]
arrvodesign :
yeah Assistant / Factory does the same 3 fields can be changed there as well
[2018-01-17 14:12:26]
jcase :
the fused ones cant be changed
[2018-01-17 14:12:42]
evgeniychuiko :
and rpmb partition on emmc
[2018-01-17 14:12:50]
jcase :
rpmb can be changed
[2018-01-17 14:13:15]
jcase :
just pita
[2018-01-17 14:13:25]
jcase :
ive not seen leadcore's rpmb implementation yet however
[2018-01-17 14:13:30]
jcase :
just messed qith qcom's
[2018-01-17 15:44:18]
jcase :
@lowellfoo780 i think i got the boards, i thought it was a work package so i didnt open it yesterday
[2018-01-17 15:44:29]
jcase :
but i see canada onlabel now
[2018-01-20 23:21:04]
pawelsky :
OK, so I've started sniffing the battery communication protocol and it is 3.3V serial at 11520 baud, the general message format is the following:
55 LL ID ID SR TR DATA CS CS, where
0x55 - start of the message
LL - length of the whole message
ID ID - ??? two bytes identifying the message
SR - one byte identifying source of the message
TR - one byte identifying the target of the message
DATA - bytes of message data (probably contains sequence number, command set and command similar to P3 messages)
CS CS - two bytes of checksum
[2018-01-20 23:23:39]
pawelsky :
Here is an example message carrying the cell voltages (data is little endian)
55 15 04 A9 0B 09 03 00 00 0D 03 00 03 F1 0E F1 0E F2 0E BD 10
0x55 - start of message
0x15 - length of the message (21 bytes)
0xA904 - message ID
0x0B - source (battery)
0x09 - target (???)
0x0300000D030003 - ???
0x0EF1 - Cell 1 voltage (3825 mV)
0x0EF1 - Cell 2 voltage (3825 mV)
0x0EF2 - Cell 3 voltage (3826 mV)
0xBD01 - checksum
[2018-01-20 23:35:35]
jezzab :
Actually there is more too it than that. for example the 0xA9 is the header checksum CRC8. You should check @mefisto's repo for a description of the protocol. We call it DUML here but he has another name for it. Same thing
[2018-01-20 23:36:37]
pawelsky :
Yes, indeed, similar to P3
[2018-01-20 23:37:15]
jezzab :
Yes. v1 of the protocol. Thats what the 04 designates
[2018-01-20 23:39:07]
pawelsky :
That makes things easier, I'll be able to reuse my old decoder code :slightly_smiling_face:
[2018-01-20 23:47:48]
pawelsky :
Here is another interesting message that carries battery factory data (in ASCII)
55 48 04 57 0B 03 24 00 40 0E 23 64 65 73 69 67 6E 43 61 70 3A 33 38 33 30 09 63 79 63 6C 65 3A 38 09 64 65 73 69 67 6E 56 6F 6C 3A 31 31 34 30 30 09 6D 61 6E 75 66 44 61 74 65 3A 32 30 31 37 2D 36 2D 32 09 00 F4 B2
55 48 04 57 0B 03 24 00 40 0E 23 - all the msg header stuff
64 65 73 69 67 6E 43 61 70 3A 33 38 33 30 - "designCap:3830" string
09 - ??? tab
63 79 63 6C 65 3A 38 - "cycle:8" string
09 - ??? tab
64 65 73 69 67 6E 56 6F 6C 3A 31 31 34 30 30 - "designVol:11400" string
09 - ??? tab
6D 61 6E 75 66 44 61 74 65 3A 32 30 31 37 2D 36 2D 32 - "manufDate:2017-6-2" string
0x09 - ??? tab
0x00 - ??? null terminator
0xF4B2 - checksum
[2018-01-20 23:51:13]
pawelsky :
And another
55 3F 04 8F 0B 03 2E 00 40 0E 23 73 65 72 69 61 6C 4E 75 6D 3A 32 34 35 31 09 6C 6F 61 64 65 72 56 65 72 3A 33 2E 33 2E 30 2E 32 09 61 70 70 56 65 72 3A 31 2E 30 2E 37 2E 33 32 09 00 4E C7
55 3F 04 8F 0B 03 2E 00 40 0E 23 - all the msg header stuff
73 65 72 69 61 6C 4E 75 6D 3A XX XX XX XX - "serialNum:XXXX" string
0x09 - ??? tab
6C 6F 61 64 65 72 56 65 72 3A 33 2E 33 2E 30 2E 32 - "loaderVer:3.3.0.2" string
0x09 - ??? tab
61 70 70 56 65 72 3A 31 2E 30 2E 37 2E 33 32 - "appVer:1.0.7.32" string
0x09 - ??? tab
0x00 - ??? null terminator
0x4EC7 - checksum
[2018-01-21 00:01:36]
pawelsky :
And yet another one
55 40 04 21 0B 03 1A 00 40 0E 23 62 61 72 63 6F 64 65 3A XX XX XX XX XX XX XX XX XX XX XX XX XX XX 09 63 65 6C 6C 4E 75 6D 3A 33 09 70 72 6F 74 6F 63 6F 6C 56 65 72 3A 30 78 31 30 09 00 74 51
55 40 04 21 0B 03 1A 00 40 0E 23 - all the msg header stuff
62 61 72 63 6F 64 65 3A XX XX XX XX XX XX XX XX XX XX XX XX XX XX - "barcode:XXXXXXXXXXXXXX" string
0x09 - ??? tab
63 65 6C 6C 4E 75 6D 3A 33 - "cellNum:3" string
0x09 - ??? tab
70 72 6F 74 6F 63 6F 6C 56 65 72 3A 30 78 31 30 - "protocolVer:0x10" string
0x09 - ??? tab
0x00 - ??? null terminator
0x7451 - checksum
[2018-01-21 09:54:08]
pawelsky :
Some more info for sincoder, regadring the message he is decoding in his mavic_batt repo
55 2C 04 36 0B 03 20 00 40 0D 02 00 1E 2C 00 00 68 E9 FF FF F2 0E 00 00 4E 06 00 00 02 01 03 2A 00 00 00 00 00 00 00 00 10 01 E9 67
55 2C 04 36 0B 03 20 00 40 0D 02 - all the msg header stuff
0x00 - ??
0x2C1E - battery voltage (UINT16, mV)
0x0000 - ??
0xFFFFE968 - current (INT32, mA, negative means discharging)
0x00000EF2 - total capacity (UINT32, mAh)
0x0000064E - current capacity (UINT32, mAh)
0x0102 - temperature (INT16, 10ths of degree Celsius)
0x03 - ???
0x2A - percentage of charge (UINT8, %)
0x00000000 - ???
0x00000000 - ???
0x0110 - ???
0xE967 - checksum
[2018-01-21 12:31:02]
kilrah :
I didn't look at it again, I needed to tackle a spark battery which I expected to be the same but in fact it happens to be completely different from mavic battery :confused:
[2018-01-21 12:33:16]
kilrah :
managed to reverse what i needed though - need to make a wiki page or something when I find time
[2018-01-22 15:02:38]
haloweenhamster :
I was wondering if the camera on the mavic was a standard camera?
I was wondering if I could get something that will record the image on an SD card
thought it might be good for say a car cam
[2018-01-22 15:03:40]
hostile :
define "standard camera"?
[2018-01-22 15:06:42]
haloweenhamster :
Standard interface, attachable to other devices
[2018-01-23 04:27:23]
lolo780 :
If you're thinking of running it without the gimbal, I'm having problems with the camera crashing, and need to reboot to reset it.
[2018-01-23 05:41:34]
haloweenhamster :
Think the cameras I'm using at the moment in my car are 700tvl & to me the quality isn't good enough so I was thinking of upgrading, I need it to be small to fit where I have them and thought the mavic camera would be ideal, I know lvds is standard for displays but haven't seen any other lvds cameras
[2018-01-23 05:42:46]
haloweenhamster :
I was just going to use the camera barrel not gimbal
[2018-01-23 08:40:10]
kilrah :
there is no "standard" there
[2018-01-23 08:41:06]
kilrah :
your analog thing will know nothing of a digital sensor without heavy processing inbetween
[2018-01-23 13:58:43]
kilrah :
completely different
[2018-01-23 14:30:47]
hostile :
you could in theory map out the pins...
[2018-01-23 14:31:04]
hostile :
the @mingtao guys sell alternative cameras for other birds IIRC.
[2018-01-23 14:49:36]
evgeniychuiko :
I've successfully upload boot partitions to @binomu core board. U-boot release was changed in output
[2018-01-23 14:50:13]
evgeniychuiko :
But errors still the same
[2018-01-23 14:53:02]
evgeniychuiko :
Is there some emmc parameters stored outside flash? I mean something like factory parameters for emmc chip itself
[2018-01-23 14:54:33]
evgeniychuiko :
I've found nothing about u-boot errors
[2018-01-23 14:58:38]
hostile :
nice work @evgeniychuiko how did you upload? Via JTAG?
[2018-01-23 14:59:09]
kilrah :
the connector he was mentioning on the I1 is just a CAN bus connector, won't take a camera lol
[2018-01-23 14:59:12]
hostile :
the emmc has a key, doesn't it @freaky123?
[2018-01-23 15:04:48]
evgeniychuiko :
@hostile I used raspberry SDIO interface with modified kernel for undercloking the bus speed
[2018-01-23 15:07:14]
evgeniychuiko :
Because interferences
[2018-01-23 15:08:42]
evgeniychuiko :
And logic level translator
[2018-01-23 15:10:42]
evgeniychuiko :
I need someone u-boot experienced, so many noob questions)
[2018-01-23 15:16:08]
freaky123 :
Which platform?
[2018-01-23 15:21:25]
evgeniychuiko :
@freaky123 mavic
[2018-01-23 15:21:52]
freaky123 :
and you flashed the `bootimage` partition?
[2018-01-23 15:22:03]
freaky123 :
and do you have a backup of this partition?
[2018-01-23 15:22:57]
evgeniychuiko :
Yep. boot0 and boot1
[2018-01-23 15:23:11]
freaky123 :
you flashed both? and backed up both?
[2018-01-23 15:23:20]
evgeniychuiko :
yes
[2018-01-23 15:23:34]
freaky123 :
ok the only way back is through that backup...
[2018-01-23 15:24:10]
freaky123 :
in the `bootimage` specific keys are defined which decrypt the `kernel`
[2018-01-23 15:24:29]
freaky123 :
these specific keys are bound to the device itself.. as they are generated per device
[2018-01-23 15:25:06]
freaky123 :
and with what exactly did you flash the `bootimage` partition? someone else's `boot0`?
[2018-01-23 15:28:01]
evgeniychuiko :
@freaky123 It was not my question. @binomu had bricked mavic and send me a board for experiments
[2018-01-23 15:28:28]
freaky123 :
at `0x21000` is this specific key in the `bootimage` partition.. the size of this key is `4096` bytes.. so in order to flash another bootloader (from the mavic which is signed) you need to have this original key and copy it to the new bootloader.
[2018-01-23 15:29:31]
freaky123 :
```
partition rlpart_table_cont[26] =
{
{ 3817472u, 0u, 14u, "userarea\x01" },
{ 256u, 0u, 4u, "bootarea" },
{ 0u, 0u, 0u, "" },
{ 0u, 0u, 0u, "" },
{ 0u, 0u, 0u, "" },
{ 0u, 0u, 0u, "" },
{ 0u, 0u, 0u, "" },
{ 0u, 0u, 0u, "\x01" },
// bootarea.img
{ 0u, 128u, 2u, "bootloader\x01" }, // E003FA00
{ 128u, 4u, 2u, "pli\x01" }, // E005FA00
{ 132u, 4u, 3u, "key\x01" }, // E0060A00
{ 136u, 64u, 2u, "tl420" }, // E0061A00
{ 0u, 4096u, 3u, "gpt" },
{ 4096u, 4096u, 1u, "ddr" },
{ 8192u, 4096u, 0u, "env" },
{ 12288u, 4096u, 0u, "panic" },
{ 16384u, 16384u, 3u, "amt" },
{ 32768u, 8192u, 3u, "factory" },
{ 40960u, 8192u, 3u, "factory_out" },
{ 49152u, 16384u, 2u, "recovery" }, // recovery.img
{ 65536u, 16384u, 1u, "normal" }, // normal.img
{ 81920u, 131072u, 1u, "system" },
{ 212992u, 65536u, 1u, "vendor" },
{ 278528u, 262144u, 0u, "cache" },
{ 540672u, 2097152u, 0u, "blackbox" },
{ 2637824u, 1179648u, 0u, "userdata" }
};
```
is the partition table
[2018-01-23 15:29:31]
evgeniychuiko :
u-boot of this board give me some errors and wrong dram size ^
[2018-01-23 15:30:22]
freaky123 :
I fully disassembled an old version of the `u-boot` partition previously.. but don't have the time now to look into detail
[2018-01-23 15:31:32]
freaky123 :
what did he originally do with his board?
[2018-01-23 15:32:16]
freaky123 :
all information is stored in flash.. as can be seen above
[2018-01-23 15:32:35]
evgeniychuiko :
Nobody knows. Previous owner bricked it without any comments)
[2018-01-23 15:32:37]
freaky123 :
only 3 things are stored outside flash and are EFUSED
[2018-01-23 15:33:18]
evgeniychuiko :
Ok. It means in this case DDR is broken?
[2018-01-23 15:33:28]
freaky123 :
<https://github.com/fvantienen/dji_rev/wiki/LC1860#boot-process>
[2018-01-23 15:33:33]
freaky123 :
this is what U-Boot does
[2018-01-23 15:36:04]
freaky123 :
looks indeed like broken DDR
[2018-01-23 15:36:31]
freaky123 :
you can resolder a new DDR chip on it and if you have backed up the bootimage you will be able to reconstruct a fully functioning board
[2018-01-23 15:38:14]
evgeniychuiko :
Good to know! But how u-boot can start itself with brocken ddr? Lc1860 has some memory for starting u-boot?
[2018-01-23 15:39:58]
freaky123 :
nope that should also come from the DDR
[2018-01-23 15:40:08]
freaky123 :
but maybe I can take a better look later at those errors..
[2018-01-23 15:40:34]
freaky123 :
but what exactly did you flash on it @evgeniychuiko?
[2018-01-23 15:41:12]
evgeniychuiko :
This errors was before I did anything
[2018-01-23 15:41:28]
w4t3r :
@freaky123 sorry for bothering you, but where should I look to get 100mb/s video capture on the mavic? Is there a way to get into the ambarella shell?
[2018-01-23 16:08:45]
freaky123 :
@w4t3r haven't looked at that stuff yet
[2018-01-23 16:09:48]
w4t3r :
Ok, thanks anyway
[2018-01-23 16:12:53]
aholtzma :
@evgeniychuiko did you check v_ddr? maybe the reg is toast
[2018-01-23 16:18:41]
evgeniychuiko :
@aholtzma I'll check it tomorrow, thx! @freaky123 there is one strange thing, u-boot detect Dram size like 3 or 7 or 7,5 EiB... from boot to boot. Do you know how u-boot recognizes dram size?
[2018-01-23 16:21:38]
aholtzma :
ddr size is usually baked into uboot
[2018-01-23 16:22:27]
aholtzma :
since it’s soldered to the board. modules (dimms) will have a little eeprom with the size.
[2018-01-23 16:26:50]
aholtzma :
so since you re-flashed uboot, the code should be ok
[2018-01-23 16:27:05]
aholtzma :
did you read it back to verify it?
[2018-01-23 16:28:04]
aholtzma :
if only we had the uboot source :slightly_smiling_face:
[2018-01-23 16:30:17]
evgeniychuiko :
@aholtzma not yet, but I pretty sure flash part is ok. There is some error about zq_select and ddr training...
[2018-01-24 09:41:15]
evgeniychuiko :
I've found two more uart interfaces. One for ambarella, and second one for intel maybe...
[2018-01-24 09:46:16]
evgeniychuiko :
<http://imgur.com/NLira3K>
[2018-01-24 09:46:31]
evgeniychuiko :
115200
[2018-01-24 14:02:58]
hostile :
@evgeniychuiko I'm glad all of these work for you! I actually tried tapping these ports long ago, and got nothing from them! I wonder what changed!
[2018-01-24 14:04:47]
evgeniychuiko :
@hostile There's only startup messages, after few seconds output closed
[2018-01-24 14:05:20]
hostile :
probably why... I didn't start traces soon enough.
[2018-01-26 15:37:00]
evgeniychuiko :
I've uploaded full emmc dump from one board to another. It can't start, because some keys stored in LC1860, and u-boot compared it with images on emmc.
[2018-01-26 15:38:28]
evgeniychuiko :
It means you can't reflow emmc chip from one board to another, and for emergency unbricking you need dump from your board
[2018-01-26 15:42:16]
evgeniychuiko :
<http://imgur.com/jHxTRlu>
[2018-01-26 15:45:01]
hostile :
@evgeniychuiko yeah this is because of the per device keys I would assume, eh @freaky123
[2018-01-26 15:48:45]
evgeniychuiko :
Finally I have fully unbrickably board on my desktop and ready for next steps)
[2018-01-26 15:49:32]
evgeniychuiko :
Next goal is transferring data from RC to AC
[2018-01-26 15:49:34]
jan2642 :
The original emmc is broken ? The device-specific part is somewhere at the beginning, if you can transfer that it might work
[2018-01-26 15:50:56]
hostile :
the key to the MMC changes doesn't it?
[2018-01-26 15:51:39]
evgeniychuiko :
I have few boards for researching. No questions for community, I just share my experiments
[2018-01-26 15:52:09]
hostile :
got ya, yeah mate try to transplant the key off the other one
[2018-01-26 15:53:32]
evgeniychuiko :
I think @freaky123 knows more about this verification
[2018-01-26 16:30:46]
evgeniychuiko :
If someone has a idea for trying on android, we can do it with my board. Without worries about bricking)
[2018-01-26 19:39:22]
fred756 :
Hi Chaps, Been a long time since I was here, trying to catch up on everything. Has any one working been working on the hard distance limit that appears to originate from the RC? Currently there is a disconnect at around 59,000ft.
[2018-01-26 19:40:13]
hostile :
lol may be a physics problem?
[2018-01-26 19:40:34]
djislack :
like horizon issue or fresnel ?
[2018-01-26 19:40:55]
nocommie :
lol
[2018-01-26 19:40:57]
hostile :
I mean 11 miles... on a signal what was meant to go 7?
[2018-01-26 19:41:03]
hostile :
I mean... we are pushing some limits here
[2018-01-26 19:41:20]
fred756 :
Yes indeed, I like to push the limits.
[2018-01-26 19:41:33]
djislack :
Well, limits maybe in the protocol but not in 2.4 or even 5.8 ghz distances
[2018-01-26 19:41:36]
fred756 :
There are a bunch of us wanting to get past that limit
[2018-01-26 19:41:42]
djislack :
power output of 100MW should go 100miles
[2018-01-26 19:41:59]
djislack :
(with the right antenna on both ends and power output on both ends)
[2018-01-26 19:42:22]
hostile :
but you only have right antenna on ONE end
[2018-01-26 19:42:23]
hostile :
=]
[2018-01-26 19:42:31]
fred756 :
batteries and signal will allow but there is something in the RC that prevents it. 5 bars of signal instantly gets cut and RTH occurrs
[2018-01-26 19:42:58]
djislack :
Look at this guys efforts:
[2018-01-26 19:42:59]
djislack :
Ermanno Pietrosemoli
[2018-01-26 19:43:04]
fred756 :
Moving towards the bird allows further distance
[2018-01-26 19:43:16]
djislack :
hmm
[2018-01-26 19:44:32]
fred756 :
<https://mavicpilots.com/threads/official-mavic-range-leaderboard.1211/page-121#post-384976>
[2018-01-26 19:44:39]
fred756 :
<https://mavicpilots.com/threads/official-mavic-range-leaderboard.1211/page-121#post-383187>
[2018-01-26 19:45:51]
fred756 :
I'd happily pay someone to take a look. I know it's not what drives this group but...
[2018-01-26 19:45:56]
mefisto :
Without the DAT flight log, I don't think anyone here will be able to tell you what happened.
[2018-01-26 19:50:09]
fred756 :
Well I haven't hit it myself yet but will ask a few of the chaps that have. Not sure why DJI would put something like that in...
[2018-01-26 22:42:51]
lolo780 :
The RC drops signal until the ac turns around and comes back across the limit.
[2018-01-26 22:43:36]
lolo780 :
On the ac .dat file, rc signal goes from 100 to zero and back.
[2018-01-26 22:44:40]
lolo780 :
The rc knows how far away the ac is, even with no device connected.
[2018-01-26 22:44:52]
nocommie :
Wouldnt it be the AC that drops signal? Otherwise, how would the RC know the AC is back within the limit?
[2018-01-26 22:47:49]
lolo780 :
<https://i.imgur.com/y6Gs7bF.jpg>
Normally the limit is 17,9xx m but I walked forward a bit. Limit extends proportionately and I'm flying with no device attached to the RC.
[2018-01-26 22:48:51]
nocommie :
I dont think anyone is saying there needs to be a device attached. In fact that points even more to the AC being the one that initiates the signal loss.
[2018-01-26 22:49:05]
nocommie :
Or, maybe it is using rssi only?
[2018-01-26 22:49:25]
nocommie :
There isn't a GPS in the RC so....
[2018-01-26 22:49:41]
lolo780 :
Can't be rssi
[2018-01-26 22:49:56]
lolo780 :
Limit is same boosted or unboosted
[2018-01-26 22:50:12]
lolo780 :
I think it's time based
[2018-01-26 22:50:26]
nocommie :
well the RC has no way to know that you walked 10 steps closer to the AC if no device is attached
[2018-01-26 22:51:54]
lolo780 :
Time
[2018-01-26 22:52:03]
nocommie :
What do you mean time?
[2018-01-26 22:52:15]
lolo780 :
Speed of light
[2018-01-26 22:52:21]
nocommie :
You mean it cuts the signal after 15 minutes for example
[2018-01-26 22:52:58]
nocommie :
again, how would it know when it is back within the limit to turn it back on if there is no communications?
[2018-01-26 22:53:01]
lolo780 :
If there's too much delay getting signal back
[2018-01-26 22:53:49]
lolo780 :
Same as powering up the RC.
[2018-01-26 22:54:34]
lolo780 :
Need an rf delay box.
[2018-01-26 22:54:55]
lolo780 :
Adjustable in .5 nanosecond increments
[2018-01-26 22:57:36]
nocommie :
is this you? <https://mavicpilots.com/threads/official-mavic-range-leaderboard.1211/>
[2018-01-26 22:57:42]
lolo780 :
Or the RC firmware taken apart to see what's actually going on
[2018-01-26 22:58:13]
lolo780 :
Yes, I'm the Mavic distance world record holder
[2018-01-26 22:59:31]
nocommie :
You own <https://www.maxxuav.com/>?
[2018-01-26 23:00:13]
lolo780 :
No, that's Kyle and Jake
[2018-01-26 23:10:39]
jezzab :
I still wanna know if the RC is silently rebooting, ,because if you kill dji_sys or what ever the name is from root shell while it’s running you notice nothing on the screen. Also if you reboot from the command line you see no change either
[2018-01-26 23:11:37]
jezzab :
Haven’t looked at this is ages. Still a mystery
[2018-01-26 23:12:02]
jezzab :
Wanna see the kernel log files
[2018-01-26 23:13:57]
lolo780 :
How do I get those
[2018-01-26 23:14:35]
jezzab :
What ver of fw in AC and RC?
[2018-01-26 23:14:40]
jezzab :
Early I’m guessing
[2018-01-26 23:14:47]
lolo780 :
4.1000
[2018-01-26 23:14:52]
lolo780 :
With .700 fc
[2018-01-26 23:15:00]
lolo780 :
But it does it with every version
[2018-01-26 23:15:01]
jezzab :
Oh ok
[2018-01-26 23:17:40]
lolo780 :
The rc sits there with the connecting message until the ac flies back
[2018-01-26 23:18:13]
lolo780 :
AC acts like rc was shut off
[2018-01-26 23:18:54]
lolo780 :
Could it be something with the Occusync protocol not liking more than a certain time delay?
[2018-01-26 23:18:55]
jezzab :
the log files are at `/data/upgrade/dji/log/`
[2018-01-26 23:19:17]
lolo780 :
AC or rc?
[2018-01-26 23:20:02]
lolo780 :
I'll find them and Google drive link them to you
[2018-01-26 23:20:35]
jezzab :
both
[2018-01-26 23:20:40]
lolo780 :
Ok
[2018-01-26 23:20:41]
jezzab :
they are rolled though
[2018-01-26 23:21:03]
jezzab :
`kernel00.log` is the latest
[2018-01-26 23:21:14]
lolo780 :
Got it
[2018-01-26 23:21:43]
jezzab :
I just tried it then on the bench again
[2018-01-26 23:21:58]
jezzab :
`reboot` from shell and nothing changes on the remote
[2018-01-26 23:22:28]
lolo780 :
So must be the rc?
[2018-01-26 23:22:31]
jezzab :
I still have the theory that the RC is hitting and over flow in one of the processes and rebooting or restarting the process
[2018-01-26 23:22:49]
jezzab :
Its just my theory ive had from the start lol I could be wrong
[2018-01-26 23:23:12]
jezzab :
I jsut find it interesting that you wouldnt know if it rebooted just lose signal
[2018-01-26 23:23:13]
lolo780 :
If that's true, would it be fixable?
[2018-01-26 23:23:30]
jezzab :
Dunno about that
[2018-01-26 23:24:19]
lolo780 :
I'm waiting on amps for a second rc and going to fly with two linked rcs
[2018-01-26 23:27:55]
nocommie :
How do you know it is actually losing signal and not initiating RTH and cutting disabling control until it gets back within the limit?
[2018-01-26 23:28:07]
nocommie :
even it it shows "connecting", it may be BS
[2018-01-26 23:28:47]
jezzab :
¯\_(ツ)_/¯
[2018-01-26 23:29:05]
nocommie :
IKR
[2018-01-26 23:29:30]
nocommie :
maybe that is just one more way that DJI says you are flying too far?
[2018-01-26 23:36:50]
lolo780 :
More likely just a bug. Like the height flipping negative at 3276.8m. They never tested it.
[2018-01-26 23:45:49]
mefisto :
I agree this is the most likely reason. Ph3 computes in which direction the radio is, and switches antennas to transmit to that side only - Mavic likely does the same, If something overflows, it may switch antennas to wrong direction.
[2018-01-27 01:02:39]
lolo780 :
Interesting. The Mavic only really needs 1 antenna on each end. I fly with the left antenna relocated to the rear. On the RC I have a 14dbi panel on the left side only.
[2018-01-27 01:04:52]
jcase :
an overflow perhaps?
[2018-01-27 01:49:47]
hostile :
yeah their code is riddled with integer overflows IIRC
[2018-01-27 05:13:42]
evgeniychuiko :
You can check your theory about RC rebooting and about real connection state. Connect your RC to adb, go into shell and busybox ping 192.168.41.1
[2018-01-27 05:14:05]
evgeniychuiko :
And go flying)
[2018-01-27 08:00:46]
evgeniychuiko :
Any experience with stick position data? I guess core board transfer stick position to FC.
[2018-01-27 08:05:51]
lolo780 :
Only what I see in the .Dat files
[2018-01-27 08:09:22]
evgeniychuiko :
Sure. I mean in flight, how core board send it to FC? UART string, or maybe additional hardware channel, like ppm
[2018-01-27 09:56:02]
mefisto :
@evgeniychuiko what do you mean by "core board"?
[2018-01-27 09:56:57]
mefisto :
The one I named "Encoder, VPS and Tcx"?
<https://github.com/mefistotelis/phantom-firmware-tools/wiki/DJI-Hardware#mavic-pro>
[2018-01-27 10:01:47]
evgeniychuiko :
Core board is official name of this board with android and ambarella
[2018-01-27 10:02:03]
mefisto :
ah, didn't know that.
[2018-01-27 10:04:21]
mefisto :
so it is named that on some Dji page?
[2018-01-27 10:04:23]
mefisto :
btw, the stick positions in Ph3 are transfered within DUPC/DUML packet "Rc Params" - cmdset=0x06, cmd=0x05
[2018-01-27 10:05:46]
mefisto :
Here's the LUA definition:
<https://github.com/mefistotelis/phantom-firmware-tools/blob/master/comm_dissector/wireshark/dji-p3-fcuart.lua#L4366>
[2018-01-27 10:08:58]
evgeniychuiko :
It's name for board as spare part. Thank you for info!
[2018-01-27 14:52:04]
hostile :
@mefisto "so it is named that on some Dji page?" yes indeed, and on P4 it is called the "3-in-1" IIRC
[2018-01-27 15:56:34]
mefisto :
ok then, since it is official name I renamed it on the wiki.
[2018-01-27 16:16:38]
hostile :
costly fire!
[2018-01-27 16:26:13]
kilrah :
:flushed:
[2018-01-27 17:38:49]
hyprmtr :
Yeah it was a mistake on my part. Almost 30yeRs in this hobby and I never had this happen. I for got I had a 2s battery still plugged in my squid and then I started charging a 3s battery. The 2s battery lit up soon afterward causing a small fire on my bench were the Mavic batteries were sitting.
[2018-01-27 17:39:17]
hyprmtr :
The boards are claimed already.
[2018-01-27 17:43:37]
hyprmtr :
On the bright side the Mavic cells are a perfect fit for one of my planes. The Mavic 3s pack weighs the same as my 3000mah 3s pack I usually use in that plane.
[2018-01-27 18:02:50]
kilrah :
i hate these squid cables
[2018-01-27 18:05:18]
kilrah :
only time I had a mishap (no fire, heard weird noises and could disconnect quick enough) in 15 years of using lipos was due to one as well
[2018-01-27 18:05:43]
kilrah :
when you have 10 plugs, the little 2s/350mAh still hanging to one goes unnoticed...
[2018-01-27 18:06:08]
kilrah :
threw them all out
[2018-01-27 18:07:28]
hyprmtr :
I hear ya. They are convenient but just as you say, small batteries can go unnoticed.
[2018-01-29 11:08:33]
jezzab :
Took a swim in the ocean did it?
[2018-01-29 11:10:24]
jezzab :
Either that or someone’s been doing coke off it
[2018-01-29 11:12:49]
asdrubale :
Yes is a chinese guy that after try to sell for spare parts electronic .....be careful if you buy in taobao
[2018-01-29 18:45:45]
hotelzululima :
So? Is there any news about OpenOccusync @martinbogo?
[2018-01-29 19:11:26]
martinbogo :
Will know more in 4-5 hours
[2018-01-29 19:11:39]
hotelzululima :
thanx!!
[2018-01-30 01:31:50]
hotelzululima :
@martinbogo any word?
[2018-01-30 02:48:13]
djislack :
@martinbogo is keeping the suspense up
[2018-01-30 03:25:36]
hotelzululima :
:slightly_smiling_face:
[2018-01-30 10:23:34]
cs2000 :
the channel is waiting haha
[2018-01-30 10:38:11]
jezzab :
Maybe the DJI Party Van rolled up and took him away :confused:
[2018-01-30 14:37:51]
hostile :
there were some complications for @martinbogo last night...
[2018-01-30 14:39:33]
cs2000 :
@jezzab got it right
[2018-01-30 14:39:43]
cs2000 :
im all seriousness, hope everything is ok
[2018-01-30 14:40:44]
coldflake :
@hostile complications?
[2018-01-30 14:44:08]
hostile :
yup
[2018-01-30 14:44:50]
coldflake :
Initially, it doesn't sound like a pleasant experience?
[2018-01-30 15:24:15]
martinbogo :
It boils down to -- part of this code was sourced by reverse engineering hardware encryption ( SDR ) -- and this smacked my team into DMCA territory
[2018-01-30 15:25:00]
martinbogo :
Legal came back with a 'stop release while we dig into this'
[2018-01-30 15:35:16]
hotelzululima :
hmm there is a DCMA exception for goodfaith security research into the security of consumer devices nb <https://www.ftc.gov/news-events/blogs/techftc/2016/10/dmca-security-research-exemption-consumer-devices>
[2018-01-30 15:42:12]
hostile :
I said the same thing to @martinbogo HZL
[2018-01-30 15:43:34]
hotelzululima :
its why jailbreaking is legal.. ie occusync being used in a consumer device such as a drone would appear to be in the same balliwick(IANAL)..(and I am sure noise (who is an IP/patent law attorney would tend to state the same) .. YMMV with different IP attorneys.. course you could take the present open-occusync to write a set of specs which are then tossed over the wall to another group to reimplement this is how we handled some knowledge gained by a contractors reversing of a competitors product by [redacted corp] in the ’90s.. interestingly enough it was commonly regarded incorrectly as a chinese wall
[2018-01-30 15:47:23]
martinbogo :
The problem the legal team hit is that a critical part of the RE code was sourced through reverse engineering the hardware.
[2018-01-30 15:50:39]
martinbogo :
We are.within our rights to do this thanks to the law... if I grok what the Legal team has said so far .. we still violate their rights under law if we distribute the code as it is not a pure 'clean room' implementation
[2018-01-30 16:02:34]
hotelzululima :
hmm not to argue the point BUT having been through this scenario at sunsoft and sunlabs preDCMA…. if your code did NOT incorporate any of the reversed code sequences and was composed of freshly written and test code.. thats what OUR IP lawyers used to classify as clean room.. non chinese wall , if done via specs tossed over the chinese wall then all issues disappeared.. especially if a contractor rather than an employee did the reversing and wrote the specs..
[2018-01-30 16:06:04]
hostile :
@martinbogo happy to put you in touch with EFF folks btw... alas we likely know all the same people.
[2018-01-30 16:06:19]
hostile :
but don't forget HP tried to DMCA me on RE'd code and got quieted down pretty quickly
[2018-01-30 16:06:57]
hostile :
can you transfer rights to someone with less fucks? =]
[2018-01-30 16:07:09]
hostile :
<https://www.theregister.co.uk/2002/07/31/hp_invokes_dmca_to_quash/>
[2018-01-30 16:07:14]
hostile :
^--- ME
[2018-01-30 16:07:32]
martinbogo :
Yep. However, both HP and Lexmark won their respective cases with chip-protected inks
[2018-01-30 16:07:42]
martinbogo :
no.
[2018-01-30 16:07:49]
martinbogo :
wish I could, but no.
[2018-01-30 16:08:05]
hostile :
so FWIW... I was contacted by the folks that are trying to push DMCA shit at the highest levels to show how shit is wrong in current form
[2018-01-30 16:08:11]
hostile :
happy to put you in touch with those folks
[2018-01-30 16:08:23]
hostile :
my shit from HP was landmark at this point
[2018-01-30 16:08:27]
hostile :
pointed to often
[2018-01-30 16:08:45]
hostile :
you are a big boy
[2018-01-30 16:08:52]
hostile :
let me know if you need extra contacts...
[2018-01-30 16:09:32]
hotelzululima :
transfer to my ass and its published… they can try and sue this old geezer all they want :slightly_smiling_face:
[2018-01-30 16:09:37]
martinbogo :
We've got handled hostile, hotelzululima ... all this internal due dilligence is delaying, not -stopping- us from releasing.
[2018-01-30 16:09:46]
hotelzululima :
k
[2018-01-30 16:10:19]
hostile :
@hotelzululima hrmmm where have I heard that story? PGP list somewhere was it?
[2018-01-30 16:10:20]
hostile :
lol
[2018-01-30 16:10:22]
hotelzululima :
after you have faced down US treasury & the NSA civil lawsuits not very worrysome..
[2018-01-30 16:10:41]
martinbogo :
As the head lawyer here put it to me when she did the latest round of updates this morning.. 'We are covering our collective asses with kevlar reinforced nomex."
[2018-01-30 16:10:48]
hotelzululima :
:slightly_smiling_face:
[2018-01-30 16:11:18]
hotelzululima :
we used to use cancer causing asbestos back in the day !
[2018-01-30 16:12:15]
martinbogo :
nomex is better :) I have nomex gloves and my leather jacket when I weld. looks badass
[2018-01-30 16:13:19]
hotelzululima :
now where did I put that foundry suit that I used to use for alt.unix.editors flamewars?
[2018-01-30 16:14:13]
evgeniychuiko :
Guys, what is DUSS? Is it another name for DUML?
[2018-01-30 16:19:48]
hostile :
@evgeniychuiko yeah related. DJI Unified SwProto Server?
[2018-01-30 16:20:30]
hostile :
@hotelzululima I'd have to go back and see if Dwight was ever included on any emails. I don't recall. We were working via CERT primarily and yelling at lawyerrs
[2018-01-30 16:20:36]
hostile :
he may have been fixing shit on the backend.
[2018-01-30 16:21:07]
hostile :
I just ran into the exploit author Striphey again after over a decade and a half
[2018-01-30 16:21:17]
hotelzululima :
heh heh heh
[2018-01-30 16:21:43]
hostile :
<https://twitter.com/d0tslash/status/931171815787057152>
[2018-02-01 00:08:12]
hotelzululima :
@martinbogo Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet?Are we there yet? :slightly_smiling_face:
[2018-02-01 00:08:47]
hotelzululima :
figured I would just batch them out instead of one at a time water torture :slightly_smiling_face:
[2018-02-02 20:15:10]
brian964 :
can someone remind me which of the 3 pins are which on the mavic?
[2018-02-02 20:15:15]
brian964 :
for the uart
[2018-02-02 20:24:56]
evgeniychuiko :
<http://imgur.com/9ASnfqF>
[2018-02-02 20:30:34]
hostile :
he wants to know what is tx / rx / and gnd
[2018-02-02 22:08:06]
brian964 :
I got the uart. After u-boot and "Starting kernel..." there's lots of random data...
I'm guessing thats from the GPS? Noted from init.rc
[2018-02-02 22:14:55]
hostile :
or a bad ground connection
[2018-02-02 22:16:51]
brian964 :
The uboot message is okay
[2018-02-02 22:16:56]
brian964 :
and ground is fine
[2018-02-03 06:06:04]
evgeniychuiko :
It's ttyS1, and used for core board <> fc communication
[2018-02-03 06:08:31]
evgeniychuiko :
more about internal interfaces you can find in etc/dji.json
[2018-02-03 06:18:31]
hostile :
@evgeniychuiko I could have sworn I saw DUML traffic on that port! thanks for reminding me
[2018-02-03 06:18:37]
hostile :
THAT is what the "random data" is.
[2018-02-03 06:18:40]
hostile :
DUML!
[2018-02-03 06:18:48]
hostile :
hex dump some of it
[2018-02-03 11:54:42]
freaky123 :
Anyone here knows a good soldering rig for home use? Has to be able to solder also small smd etc.
[2018-02-03 11:59:08]
freaky123 :
Possibly also reflow unit
[2018-02-03 12:03:50]
jezzab :
Hmm
[2018-02-03 12:04:11]
jezzab :
If you just want soldering iron only ive just gone to this: <http://www.thermaltronics.com/tmt-2000s.php>
[2018-02-03 12:04:20]
jezzab :
Curie Point
[2018-02-03 12:04:21]
kilrah :
i use this <https://www.elv.de/profi-100-w-loet-entloetstation-lf-8800.html>
[2018-02-03 12:05:55]
jezzab :
But my other iron/diaphram reflow I cant find a international link
[2018-02-03 12:07:18]
jezzab :
Still amazed what a simple 50w Curie can do and the price was very very good
[2018-02-03 12:08:22]
jezzab :
never burnt a tip anymore with it. Good to heat vias or pads on medium ground planes (big stuff i use the other one)
[2018-02-03 12:10:06]
jezzab :
Doesnt look to bad @kilrah (had to google translate)
[2018-02-03 12:10:57]
kilrah :
What I like most about it is the speed it heats at... Literally seconds
[2018-02-03 12:11:02]
jezzab :
yeah
[2018-02-03 12:11:34]
jezzab :
Curie man. Its amazing lol. Try one one day. I didnt believe it. its black magic with magnetism
[2018-02-03 12:11:48]
kilrah :
so much that it's sometimes annoying when i turn it on before realizing i need to change the tip, even after 3 secs it's already too hot to remove :sweat_smile:
[2018-02-03 12:11:55]
jezzab :
HAHA
[2018-02-03 12:14:20]
freaky123 :
At the lab I work we have all the expensive weller stuff so Im a bit spoiled
[2018-02-03 12:16:57]
freaky123 :
Lol the elv is password protected
[2018-02-03 12:20:34]
kilrah :
lol never noticed :smile:
[2018-02-03 12:23:24]
freaky123 :
You also see a lot of people using hakko
[2018-02-03 12:32:22]
kilrah :
indeed, hard to find a real one among the mountain of fakes though
[2018-02-03 14:50:47]
freaky123 :
I though @martinbogo advised a soldering iron once
[2018-02-03 15:35:37]
martinbogo :
hakko 888
[2018-02-03 15:35:38]
martinbogo :
yeah
[2018-02-03 15:47:45]
hostile :
@martinbogo any good word mate, or **stuck** still?
[2018-02-03 15:50:09]
martinbogo :
Big forward process this week. Lawyers are doing quid-pro arguments and finding some ways that work.
[2018-02-03 16:16:45]
hostile :
wooooord
[2018-02-03 18:12:16]
aholtzma :
@freaky123 hakko 888d is good starter iron
[2018-02-03 18:13:24]
aholtzma :
for hot air, a cheapie from ebay is fine (< $100)
[2018-02-03 18:14:24]
aholtzma :
I’d keep a fire extinguisher handy and take it apart beforehand to make sure there aren’t obvious safefy hazards
[2018-02-03 18:16:10]
aholtzma :
or be very patient and lurk on ebay for a hakko < $200
[2018-02-03 18:22:34]
evgeniychuiko :
Lukey-702 works fine many years for me. Cheap but very popular in Russian mobile workshops
[2018-02-03 18:52:52]
aholtzma :
Is that a russian brand? If you get many years out of it that’s pretty good. The cheap chinese 858d clones are good for about 6-8 months of regular use.
[2018-02-03 18:53:59]
aholtzma :
when it fails you marvel how close it was to electrocuting you and make a note to spend more next time
[2018-02-03 18:54:39]
aholtzma :
then you realize you need something right away and buy the same thing again
[2018-02-03 18:56:15]
kilrah :
LOL
[2018-02-03 18:57:26]
kilrah :
I had this for about 12 years of daily use, paid like $100 <https://www.elv.ch/Programmierbare-Komfort-L%C3%B6tstation-LS-50/x.aspx/cid_726/detail_33445>
[2018-02-03 18:57:32]
kilrah :
discontinued now
[2018-02-03 18:58:16]
kilrah :
gave it to a friend 3 years ago , still works
[2018-02-03 19:51:37]
evgeniychuiko :
@aholtzma Chinese, I guess <https://www.aliexpress.com/item/1161171780/1161171780.html>
[2018-02-04 11:39:07]
d95gas :
Dont know if anyone is interested in a teardown of the DJI Goggles, but decent one on the following site:
<https://www.rcgeeks.co.uk/blog/dji-goggles-racing-edition-teardown-whats-inside>
[2018-02-05 13:33:46]
freaky123 :
btw because the Hakko soldering are extremely expensive in europe I'm currently looking at a Weller WT-1010 :wink:
[2018-02-05 13:36:29]
evgeniychuiko :
One funny thing. Mavic never switch fan off, even It is cold
[2018-02-05 13:36:58]
freaky123 :
I wanted to buy the Hakko FX-951, but while searching for an european version I found out that they were extremely expensive compared to the US versions.. for that same price I can buy a Weller, which are well represented in Europe
[2018-02-05 13:37:24]
freaky123 :
@evgeniychuiko Why would it? It generates some extra lift ^^
[2018-02-05 13:41:54]
evgeniychuiko :
It looks funny, in Russian condition) When you switched it inside, after few minutes fan started, and then you go flying outside. Mavic will return totally frozen but with running fan)))
[2018-02-05 16:32:42]
jcase :
@lowellfoo780 starting on boards today, been crazy
[2018-02-05 20:46:08]
evgeniychuiko :
@jcase can you implement reboot command to your racer? Is it possible?
[2018-02-05 20:46:23]
jcase :
Ya I could
[2018-02-05 20:46:49]
jcase :
Y
[2018-02-05 20:47:05]
jcase :
You need it automated?
[2018-02-05 20:48:58]
evgeniychuiko :
I have test board, without any connections, only power. When I made some errors in android, it recovery. And after I cannot rooting it, because after race, I have to switch it off correctly, otherwise it will recovers again)
[2018-02-05 20:50:02]
jcase :
I'll be home in a bit
[2018-02-05 20:50:08]
jcase :
Grabbing lunch
[2018-02-05 20:52:44]
evgeniychuiko :
Only one way for rooting in this case - upload a full emmc dump with your script in vendor. But if you can add auto reboot, it will nice) For emmc uploading I have to solder few wires, my wife is very angry about it)))
[2018-02-05 21:21:47]
joker_x3 :
<https://github.com/mefistotelis/phantom-firmware-tools/issues/69#issuecomment-363189117>
I would like to share this if anyone is willing and is due to software skills more easily able to find out the possible place to modify. It would be a huge achievement for P3P 4K video quality.
[2018-02-05 21:27:04]
jcase :
@evgeniychuiko you can change the payload for the grep to auto reboot
[2018-02-05 21:46:45]
jcase :
@evgeniychuiko if you cant add it, i can after work
[2018-02-06 00:04:43]
djislack :
I saw a wrecked P4 for sale on rcgroups:
<https://www.rcgroups.com/forums/showthread.php?2991161-DJI-Phantom-4>
[2018-02-06 06:18:50]
evgeniychuiko :
@jcase I have no experience in java
[2018-02-06 06:20:30]
hostile :
that is no excuse
[2018-02-06 06:36:44]
evgeniychuiko :
I just asked about modification. If I have to go deep in many things around only for adding one command - I will prefer soldering...
[2018-02-06 06:39:46]
djislack :
:slightly_smiling_face: We were just discussing soldering irons :slightly_smiling_face:
[2018-02-06 10:46:00]
evgeniychuiko :
Who can explain racer a bit? I am trying, but can't understand. In payloads nothing inside, some zero filled arrays, and empty files... how it create script in vendor?
[2018-02-06 10:46:31]
evgeniychuiko :
[2018-02-06 13:41:10]
jcase :
@evgeniychuiko the grep payload is a bash script in a tar ball
[2018-02-06 13:43:19]
evgeniychuiko :
@jcase I can't find any scripts in your original payloads... It's definitely a magic, mate)
[2018-02-06 13:44:51]
jcase :
in stage 2
[2018-02-06 13:44:54]
jcase :
in .bin
[2018-02-06 13:44:55]
jezzab :
The grep file
[2018-02-06 13:44:57]
jcase :
its called "grep"
[2018-02-06 13:45:00]
jcase :
its a bash script
[2018-02-06 13:45:20]
jcase :
ill try to get to it today
[2018-02-06 13:45:23]
jcase :
im just slammed
[2018-02-06 13:45:35]
jezzab :
Will be in /jcase/.bin/
[2018-02-06 13:46:06]
jezzab :
foo in there too
[2018-02-06 13:46:13]
evgeniychuiko :
ahh... hidden I guess. I'm on mac
[2018-02-06 13:46:38]
jezzab :
Shows in 7zip fine
[2018-02-06 13:47:07]
kilrah :
when you're looking at the correct stage2 of course
[2018-02-06 13:47:12]
jezzab :
. Files are only hidden on Mac/Linux etc. not win
[2018-02-06 13:47:17]
kilrah :
which i wasn't :joy:
[2018-02-06 13:47:30]
jezzab :
Ahh yes
[2018-02-06 13:47:37]
jezzab :
Need the root one,
[2018-02-06 14:11:34]
evgeniychuiko :
Thank you guys, it was my mistake, showing hidden files was off on my mac. But reboot already there, in original grep
[2018-02-06 14:14:05]
evgeniychuiko :
and it not rebooting, for some reason...
[2018-02-06 14:15:08]
kilrah :
I don't see a reboot?
[2018-02-06 14:15:49]
evgeniychuiko :
last string
[2018-02-06 14:16:46]
kilrah :
i must have an old version then
[2018-02-06 14:16:57]
freaky123 :
I really fail at making a decision for my soldering iron xD
- First wanted to buy a Hakko FX-888D
- Then decided to get the active tip and easy tip changing Hakko FX-951
- Then noticed this was extremely expensive in europa and almost not available and decided I could maybe better buy a Weller
- Then decided to buy a Weller WT1010, but noticed that if I wanted to use the easy tip changing I need to buy a new heating element for each tip costing ~80 euro's excluding the tip.
- Now I don't know what to buy anymore ^^
[2018-02-06 14:17:11]
hostile :
I'm a weller man!
[2018-02-06 14:17:34]
freaky123 :
What weller do you have?
[2018-02-06 14:17:48]
kilrah :
lolz
[2018-02-06 14:17:54]
kilrah :
never liked the wellers personally
[2018-02-06 14:18:08]
freaky123 :
The new WT series looks awesome except that you cannot use a micro soldering pencil.. :disappointed: Which is exactly the one that I want
[2018-02-06 14:18:21]
kilrah :
always get the feeling i'd be paying for the name above all else
[2018-02-06 14:18:35]
hostile :
@freaky123 I'll have to unburry it and check model number
[2018-02-06 14:18:53]
freaky123 :
and getting the old WX series seems like an expensive buy for an outdated product
[2018-02-06 14:19:15]
hostile :
yeah Hakko is cheap in cost
[2018-02-06 14:19:23]
freaky123 :
not in europe.. same price
[2018-02-06 14:19:27]
hostile :
there are a billion chinese clones of each other too
[2018-02-06 14:19:56]
hostile :
@evgeniychuiko race condition via symlink...
[2018-02-06 14:20:19]
freaky123 :
A Hakko FX-951 (genuine) is similar in price as a Weller WT1010 (both with a single tip included)
[2018-02-06 14:21:27]
freaky123 :
For the european market at least.. else the choice was simple a Hakko FX-951
[2018-02-06 14:21:40]
freaky123 :
but those have stupid 110V AC
[2018-02-06 14:22:30]
freaky123 :
I don't get why weller hasn't released a micro soldering tip for the Weller WT series.. as the price of those new series seems in line with the WX
[2018-02-06 14:30:18]
freaky123 :
why do they have to make this so complex
[2018-02-06 14:30:20]
jcase :
<2 my hakko
[2018-02-06 14:30:24]
jcase :
:heart:
[2018-02-06 14:30:37]
jcase :
careful of fake hakko
[2018-02-06 14:30:41]
jcase :
ppl are actually faking them lol
[2018-02-06 14:31:01]
freaky123 :
yeah if the price isn't double of a US version I would have bought it.. And yes both are genuine
[2018-02-06 14:31:13]
aholtzma :
yeah I saw Banggood has FX-951 clones now
[2018-02-06 14:31:23]
aholtzma :
who knows what is inside
[2018-02-06 14:31:24]
freaky123 :
but a Hakko FX-951 costs 400 euro's
[2018-02-06 14:31:34]
freaky123 :
genuine in europe
[2018-02-06 14:31:44]
aholtzma :
kinda shameless, says FX-951 on the front (just no Hakko)
[2018-02-06 14:32:13]
freaky123 :
yeah I don't wanna buy crap.. I wanna a buy a soldering iron that lasts and can upgrade
[2018-02-06 14:34:06]
aholtzma :
there is the spanish one which is supposedly really good
[2018-02-06 14:34:12]
aholtzma :
but expensive in NA
[2018-02-06 14:34:23]
aholtzma :
thinking of the name….
[2018-02-06 14:34:55]
aholtzma :
JBC
[2018-02-06 14:35:39]
aholtzma :
<http://www.jbctools.com>
[2018-02-06 14:49:05]
aholtzma :
Review from guy who bought it because Hakko/Weller were too expensive in EU
[2018-02-06 14:49:07]
aholtzma :
<https://www.eevblog.com/forum/reviews/jbc-cd-2bb-solder-station-mini-review-with-pictures/>
[2018-02-06 15:32:17]
evgeniychuiko :
@jcase In which step system has to run grep script? After uploading stage2 or after first reboot?
[2018-02-06 15:35:50]
evgeniychuiko :
Something goes wrong if rooting standalone board. After races files inside ftp/.bin still there
[2018-02-06 15:37:58]
jcase :
ahh know what shit
[2018-02-06 15:38:08]
jcase :
hmm
[2018-02-06 15:38:15]
jcase :
@evgeniychuiko let me get some mornign things done
[2018-02-06 15:38:23]
jcase :
few min
[2018-02-06 15:38:27]
jcase :
dogs out, and shit
[2018-02-06 15:41:41]
jcase :
ok @evgeniychuiko you here?
[2018-02-06 15:41:48]
evgeniychuiko :
yep
[2018-02-06 15:41:49]
jcase :
lets get this working how you need it
[2018-02-06 15:41:56]
jcase :
what are you trying to do
[2018-02-06 15:42:41]
evgeniychuiko :
I'm trying to root standalone board, without any connection to drone
[2018-02-06 15:42:56]
jcase :
what firmware is on it
[2018-02-06 15:43:07]
evgeniychuiko :
1.03.0700
[2018-02-06 15:43:44]
jcase :
ok, and why wont it work as is?
[2018-02-06 15:44:14]
jcase :
turn power off, then back on should reboot it
[2018-02-06 15:44:55]
evgeniychuiko :
It will start recovery, after switching off
[2018-02-06 15:45:25]
hostile :
@evgeniychuiko there is an environment variable you need to change to get it out of recovery IIRC
[2018-02-06 15:46:10]
evgeniychuiko :
Idk why. It start recovery only after racing. Next reboot ok
[2018-02-06 15:46:19]
jcase :
well
[2018-02-06 15:46:28]
jcase :
well
[2018-02-06 15:46:29]
jcase :
byte[] packet = new byte[]{0x55, 0x0D, 0x04, 0x33, 0x2A, 0x28, 0x68, 0x57, 0x00, 0x00, 0x0B, 0x79, 0x2D};
[2018-02-06 15:46:33]
jcase :
thats the packet you want to send
[2018-02-06 15:46:35]
jcase :
to reboot it
[2018-02-06 15:46:42]
jcase :
but its probably still goign to go into recovery
[2018-02-06 15:46:49]
evgeniychuiko :
Let me try
[2018-02-06 15:49:15]
evgeniychuiko :
nothing happened. I guess this duml command should go to FC
[2018-02-06 15:49:31]
evgeniychuiko :
Isn't?
[2018-02-06 15:49:34]
jcase :
@evgeniychuiko give me a few
[2018-02-06 15:55:39]
evgeniychuiko :
I've added touch command for diagnose in grep, it works
[2018-02-06 15:56:33]
evgeniychuiko :
but grep script can't reboot the machine... maybe user rights
[2018-02-06 15:58:14]
jcase :
it can but doesnt run until next reboot
[2018-02-06 16:08:26]
hostile :
send a duml reboot
[2018-02-06 16:09:44]
hostile :
<https://forum.dji.com/thread-106055-1-1.html>
[2018-02-06 16:10:05]
hostile :
env -d boot.mode recovery
[2018-02-06 16:10:11]
hostile :
run that command @evgeniychuiko
[2018-02-06 16:10:18]
hostile :
"env -d boot.mode recovery"
[2018-02-06 16:10:19]
hostile :
then reboot
[2018-02-06 16:10:25]
hostile :
(or unplug)
[2018-02-06 16:10:29]
hostile :
should come up in normal mode
[2018-02-06 16:11:25]
evgeniychuiko :
how I can run it without shell?)
[2018-02-06 16:15:44]
hostile :
maybe you wanna DUMLRace, and downgrade to an older version with a public root ? I dunno
[2018-02-06 16:18:53]
evgeniychuiko :
I'll try it, thank you
[2018-02-08 04:43:08]
hotelzululima :
OpEnOcCuSyNc?? @martinbogo “are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?are we there yet?” your weekly pestering about same :slightly_smiling_face:
[2018-02-08 13:27:36]
evgeniychuiko :
I've successfully used my "openocusync" today))) Sniffed joysticks position on RC side, and transfer to AC side through netcat
[2018-02-08 13:29:37]
evgeniychuiko :
Works, but it can't be used. Big latency...( I definitely need another way to sniff joysticks data on AC side
[2018-02-09 04:46:53]
hostile :
@evgeniychuiko what did yu sniff with ?
[2018-02-09 06:17:22]
evgeniychuiko :
getevent | busybox grep '5: 0003 0001' - will give you right stick horizontal position for example
[2018-02-09 06:27:30]
evgeniychuiko :
same way for all axis and buttons
[2018-02-09 16:03:55]
evgeniychuiko :
Today I have found information about 5.8g ocusync in mavic pro specs. I'm pretty sure there was nothing about it before
[2018-02-09 16:07:49]
evgeniychuiko :
Did they add this for RE? Or just mistake on site... Mavic RF chip was able to works on 5.8?
[2018-02-09 16:30:03]
kilrah :
specs likely include wifi, which can do 5.8
[2018-02-09 17:01:18]
evgeniychuiko :
Wi-fi on the right side, its 2.5/5
[2018-02-09 17:01:26]
evgeniychuiko :
2.4/5
[2018-02-09 17:03:56]
kilrah :
given that's not detailed enough I'd assume the left side is that detail
[2018-02-09 18:53:14]
evgeniychuiko :
Yes, you are right. Fcc test report give us more information <https://fccid.io/SS3-M1X1708/Test-Report/Test-Report-3555711>
[2018-02-09 19:08:19]
aholtzma :
from the FCC report you can see only 2.4 GHz for Occusync
[2018-02-09 19:10:31]
aholtzma :
there is also a hint in there that that Occusync is a derivative of LTE
[2018-02-09 19:10:42]
aholtzma :
with the 1.4 MHz bandwidth option
[2018-02-09 19:11:02]
aholtzma :
not too surprising given the the LC chipset is for phones
[2018-02-09 19:27:06]
brian964 :
What is the Realtek chip being used for vs the Atheros WIFI?
[2018-02-09 19:32:26]
jcase :
@evgeniychuiko the 1.8v is vccq correct?
[2018-02-09 19:32:36]
jcase :
and the 3v is vcc?
[2018-02-09 19:33:53]
evgeniychuiko :
@jcase yep
[2018-02-09 19:35:17]
jcase :
thx
[2018-02-09 19:35:56]
aholtzma :
@brian964 which realtek chip?
[2018-02-09 19:36:37]
brian964 :
is there more than one?
the wifi+bt one: RTL8723BS
[2018-02-09 19:36:47]
aholtzma :
oh I see
[2018-02-09 19:37:31]
brian964 :
can
[2018-02-09 19:37:58]
aholtzma :
dunno
[2018-02-09 19:38:01]
brian964 :
can't find any thing related to rtl on the mavic unlike the ath6k driver files and etc
[2018-02-09 19:39:31]
aholtzma :
it’s a module, it just talks to it over sdio
[2018-02-09 19:39:53]
aholtzma :
so no specific driver
[2018-02-09 19:40:25]
evgeniychuiko :
@jcase and you should remove CLK resistance, if you want to have emmc access
[2018-02-09 19:40:35]
aholtzma :
maybe they split the 2.4g/5g into separate devices
[2018-02-09 19:40:55]
aholtzma :
that’s the only reason I can see doing that
[2018-02-09 19:42:51]
aholtzma :
that is the wifi device listening for the secret remote disable command :slightly_smiling_face:
[2018-02-09 19:43:09]
brian964 :
hm
[2018-02-09 19:43:24]
brian964 :
and what process/device monitors it?
[2018-02-09 19:44:02]
aholtzma :
haha, I have no idea I don’t have a mavic to muck around with
[2018-02-09 19:44:47]
brian964 :
alright, thanks anyways for the info
[2018-02-09 19:48:33]
aholtzma :
if you have a rooted mavic it should be straightforward to figure out
[2018-02-09 19:52:51]
aholtzma :
do you have a picture of the realtek part on the board?
[2018-02-09 19:52:59]
aholtzma :
I don’t see it on the FCC photos
[2018-02-09 19:55:44]
kilrah :
where do you see references to a realtek chip?
[2018-02-09 19:57:32]
aholtzma :
I found this <https://github.com/kevinelliott/dji/wiki/Mavic:-Reverse-Engineering>
[2018-02-09 20:00:53]
brian964 :
hooo wait
[2018-02-09 20:01:00]
brian964 :
i thought it was on the board in the back
[2018-02-09 20:01:10]
brian964 :
there's just the ath chip...
[2018-02-09 20:01:26]
brian964 :
yeah i saw the rtl chip from that page, not sure where it is..
[2018-02-09 20:01:37]
aholtzma :
there are only two antenna connectors
[2018-02-09 20:02:25]
aholtzma :
so I’m guessin there is a GPIO which drives a switch which switches between wifi and occusync
[2018-02-09 20:03:00]
aholtzma :
running another wifi through the same antenna would be crazytown
[2018-02-09 20:03:10]
brian964 :
wifi/sdr? there's a script that switches using gpio
[2018-02-09 20:03:19]
aholtzma :
which isn’t out of the question of course
[2018-02-09 20:03:29]
aholtzma :
ok, well there you go
[2018-02-09 20:04:14]
brian964 :
is occusync the sdr? and is that the secondary wifi
[2018-02-09 20:04:26]
aholtzma :
the realtek in the list then seems incorrect
[2018-02-09 20:04:32]
aholtzma :
yes occusync is the sdr
[2018-02-09 20:05:29]
brian964 :
and by sdr, you mean...?
[2018-02-09 20:05:42]
aholtzma :
software defined radio
[2018-02-09 20:05:42]
brian964 :
what hardware?
[2018-02-09 20:05:55]
aholtzma :
there is a dsp in the leadcore chipset
[2018-02-09 20:06:04]
brian964 :
ah
[2018-02-09 20:06:40]
aholtzma :
and an RFIC that does the bits to RF conversion
[2018-02-09 20:06:57]
brian964 :
so no realtek i dont think?
[2018-02-09 20:07:40]
kilrah :
most likely not
[2018-02-09 20:07:41]
aholtzma :
I see no reason for it to be there
[2018-02-09 20:07:57]
brian964 :
fuck
[2018-02-09 20:08:39]
aholtzma :
you can confirm this by finding the part numbers on the antenna switches
[2018-02-09 20:09:06]
aholtzma :
if they are only dual throw, that means only two radios
[2018-02-09 20:10:30]
aholtzma :
the fcc photos are too blurry, you’d have to have a board in your hands
[2018-02-09 20:10:52]
brian964 :
which fcc photos are you looking at
[2018-02-09 20:15:51]
hostile :
@aholtzma Realtek is probably an Ethernet chip... used to speak to the ambarella soc
[2018-02-09 20:21:19]
brian964 :
but it cant be found on the board
[2018-02-09 20:27:35]
kilrah :
that part no is a wifi chip
[2018-02-09 20:27:47]
kilrah :
but where he got that part no reference is a mystery...
[2018-02-09 20:31:10]
brian964 :
well ok im interested in seeing if there's bluetooth capability on the mavic
[2018-02-09 20:31:37]
brian964 :
in init.lc1860.blah there's a section regarding bluetooth stuff
[2018-02-09 20:34:53]
brian964 :
its got /amt/BT/BT_Address.txt but almost none of the other files/directories
[2018-02-09 20:35:04]
brian964 :
does init.lc1860 even get run?
[2018-02-09 20:40:24]
aholtzma :
LC doesn’t have built in ethernet?
[2018-02-09 20:40:40]
aholtzma :
I guess that’s what you get for using a phone SoC
[2018-02-09 20:49:06]
brian964 :
wtf is going on in this drone
[2018-02-09 21:07:10]
evgeniychuiko :
who knows for what purpose mavic has nand-flash and cpld chips?
[2018-02-09 21:07:36]
evgeniychuiko :
on core board back side
[2018-02-10 09:10:34]
reuben.finch :
anyone worked out how to spoof the flight battery data to the mavic?
[2018-02-10 09:14:08]
kilrah :
<https://github.com/sincoder/mavic_bat>
[2018-02-10 09:15:10]
reuben.finch :
I haven’t been able to get that to work. Does anyone have verification this code is correct?
[2018-02-10 09:18:18]
jezzab :
So what did you log between the battery and rest of the AC?
[2018-02-10 10:16:59]
pawelsky :
Here is some more up to date structure of the message being sent by this code
<https://dji-rev.slack.com/archives/C64R5L1HN/p1516528448000021?thread_ts=1515696257.000133&cid=C64R5L1HN>
[2018-02-10 14:12:59]
hostile :
Nice seeing you here @pawelsky
[2018-02-10 14:13:55]
hostile :
thanks for all the fish from days of old @pawelsky <https://www.rcgroups.com/forums/showthread.php?1995704-DJI-NAZA-GPS-communication-protocol-NazaDecoder-Arduino-library>
[2018-02-10 17:11:32]
djislack :
@hostile @pawelsky that was freaking great stuff and saved a lot of people frustration
[2018-02-10 17:25:09]
mingtao :
@pawelsky welcome to aboard!)
[2018-02-11 14:24:13]
martinbogo :
Good progress made. We have to make some changes to the packet decoder.
[2018-02-11 23:26:29]
pawelsky :
Good old times, I can't believe that stuff is now already 4-5 years old :slightly_smiling_face:
[2018-02-13 17:08:04]
evgeniychuiko :
How knows, there only one uart core<>FC in mavic?
[2018-02-13 23:29:06]
christianwoodward :
*wonders how much weight the air can hold…was going to 3d print a little top or bottom case that can hold an sdr to look to imsi catcher catching*
[2018-02-13 23:47:33]
hostile :
sounds fun @christianwoodward
[2018-02-14 15:11:16]
hotelzululima :
Monthly checkin @martinbogo.. any word on Open Occusync yet? (from the lawyers that is?)
[2018-02-14 17:21:43]
martinbogo :
we are close to go
[2018-02-14 17:24:33]
martinbogo :
It's stupid that we cannot release the packet analysis engine that decodes the encryption keys
[2018-02-14 17:24:44]
martinbogo :
but there you go0
[2018-02-14 17:35:16]
kilrah :
just needs done from a country with less stupid laws...
[2018-02-14 17:36:20]
hostile :
how close is "close" @martinbogo?
[2018-02-14 18:08:16]
martinbogo :
@hostile : done when it's done... out of my hands :woman_in_lotus_position:
[2018-02-14 18:09:00]
martinbogo :
:hammer_and_wrench:
[2018-02-15 00:06:15]
fallengod :
What do OpenOccusync actally do ?
[2018-02-15 00:06:35]
fallengod :
I feel hype up just from the sound of the name
[2018-02-15 00:06:52]
fallengod :
We can do occusync with any wifi hardware ?
[2018-02-15 15:12:13]
aholtzma :
packet analysis + decoding encryption keys sounds like a weapons grade fuckup
[2018-02-15 15:12:32]
aholtzma :
or even something malicious
[2018-02-15 15:15:25]
aholtzma :
I guess if they really did hack up some LTE code for their own purposes, something like that was inevitable
[2018-02-15 15:17:22]
cs2000 :
Id suspect they could, but any legal department inside a business will err on the side of caution. Excited to take a look at whatever comes out though
[2018-02-15 15:19:28]
hostile :
lol
[2018-02-15 21:49:30]
christianwoodward :
+1 for really looking forward to your guys ocusync work, esp if it has a half baked LTE thing going on - thanks for doing it! Now can you guys make the LimeSDR Mini ship faster :no_mouth:
[2018-02-15 21:49:52]
christianwoodward :
Will be happy to add to it once it gets out if anything is needed
[2018-02-15 23:01:30]
hostile :
lol a friend of mine just got his 2 days ago @christianwoodward
[2018-02-15 23:10:08]
christianwoodward :
oooooo I know the ship date said by March 28th but if I get it sooner Ill be so very hapy
[2018-02-16 02:13:02]
lolo780 :
Does that mean it might be possibly to fly a Mavic directly from a computer via sdr?
[2018-02-16 06:29:32]
spiteri.michael :
With the limeSDR, your imagination is the limit :wink:
[2018-02-16 06:29:45]
spiteri.michael :
I have one arriving early next month
[2018-02-16 18:49:09]
kilrah :
And math skills :laughing:
[2018-02-18 09:01:09]
spiteri.michael :
Yeah, I am not going to do that thing justice! LOL
[2018-02-20 12:18:24]
evgeniychuiko :
I've successfully bricked my next mavic) But now FC board is dead. @lowellfoo780 IIRC you had both types of FC board. Which partnumber has platinum FC board?
[2018-02-20 13:47:57]
cs2000 :
Another one bites the dust lol.
[2018-02-20 13:54:41]
hostile :
@evgeniychuiko doing what?
[2018-02-20 13:54:58]
hostile :
<https://www.youtube.com/watch?v=rY0WxgSXdEE>
[2018-02-20 13:57:44]
evgeniychuiko :
@hostile It's long story. In few words - don't try update only 305+306)
[2018-02-20 14:04:07]
evgeniychuiko :
In my case it was 1.03.0900 everywhere except FC. And I uprgrade 305+306 to 1.03.1000. Don't ask me why, please)
[2018-02-20 15:41:34]
lolo780 :
Not sure what part number it is, but the chip layout is totally different.
[2018-02-20 15:41:53]
lolo780 :
So instantly recognizable. Did you want one?
[2018-02-20 15:53:41]
evgeniychuiko :
@lowellfoo780 I'm just thinking, how to solve this... If I will find broken ESC board, I will try to remount FC small board. Asked you, for interest, how much is platinum ESC board. Maybe good to replace mine with new type esc
[2018-02-20 15:55:10]
evgeniychuiko :
So sad, it was completely new mavic...
[2018-02-20 15:57:04]
hostile :
Y U NO DJI Care!?
[2018-02-20 15:57:13]
hostile :
rookie move. put back together carefully... send back
[2018-02-20 15:57:18]
hostile :
OR return to BestBuy =]
[2018-02-20 16:07:46]
lolo780 :
Platinum board is $126 on ebay
[2018-02-20 16:07:48]
lolo780 :
Usd
[2018-02-20 16:14:03]
evgeniychuiko :
DJI doesn't care about Russia) No official ways at all
[2018-02-20 16:45:01]
evgeniychuiko :
Few interesting things from upgrade log. FC definitely has USB connection to core board.
[2018-02-20 16:46:38]
evgeniychuiko :
dji_verify used for moving sig file to fw file in /cache
[2018-02-20 16:48:17]
evgeniychuiko :
If we replace dji_verify for our own script, maybe we can upload modified fw?
[2018-02-20 16:48:50]
hostile :
you are correct... and we have tested... and this is a privately held asset ATM.
[2018-02-20 16:53:30]
evgeniychuiko :
In my log, I can see fw was successfully uploaded to 306, then reboot command to FC, and then many retries to connection FC failed...
[2018-02-20 16:54:06]
evgeniychuiko :
Only one hope, I will put SDcard in, maybe fc will start...
[2018-02-20 16:57:34]
mwales3 :
@hostile, I wanted to poke around the FC firmware. I have tried to extract with image.py and dji_verify, but the file is really high entropy like it is encrypted. have you been able to decrypt and reverse any of it. Have you successfully extracted it?
[2018-02-20 16:58:37]
hostile :
maybe you should look at the TrashFire repo...
[2018-02-20 16:58:49]
hostile :
<https://dji-rev.slack.com/archives/C5ZR0QXUG/p1519055426000101>
[2018-02-20 17:02:49]
mwales3 :
i'm sniffing around on mavic pro. will that repo still be helpful to me in the regard, or only helpful for mavic air?
[2018-02-20 17:03:23]
evgeniychuiko :
@hostile any experience in emergency restore FC fw yet?
[2018-02-20 17:05:30]
hostile :
no sir
[2018-02-20 17:05:46]
hostile :
you gonna neew SWD
[2018-02-20 17:05:50]
hostile :
or JTAG / both
[2018-02-20 17:44:27]
jan2642 :
@evgeniychuiko I once semi bricked an FC but I could get it working again by reflashing the 305 & 306
[2018-02-20 17:45:50]
jan2642 :
You could also try to do a full upgrade of something more recent than what you put on the FC
[2018-02-20 17:46:04]
jan2642 :
(You’d have to do that twice)
[2018-02-20 17:46:21]
evgeniychuiko :
@jan2642 Not possible for me, no connection to FC at all. I've tried any variants
[2018-02-20 17:47:05]
evgeniychuiko :
Yes, I know, so lucky) No startup esc sound even)
[2018-02-20 17:51:21]
evgeniychuiko :
Every ESC beeps once per second. No battery communication... Different FWs was tried many times, but here FC fw younger than ESC, maybe it's a reason
[2018-02-20 17:51:32]
hostile :
SWD time!
[2018-02-20 17:53:00]
evgeniychuiko :
I'm away from home now. Which mc we have in A3?
[2018-02-20 17:53:55]
evgeniychuiko :
STM or?
[2018-02-20 17:57:45]
jan2642 :
ATSAM70E
[2018-02-20 17:59:20]
jan2642 :
I also had the ESC beep per second. In my case it was an unfinished upgrade of the 305 that got me in that situation. Somehow the 801 was still able to upgrade it and got it fixed.
[2018-02-20 17:59:20]
hostile :
here @evgeniychuiko I just made it easier for you to view Mavic Air FC firmware as a quick example in which you don't have to fuck with the decryption, etc. <https://github.com/MAVProxyUser/TrashFire/blob/95382ebf0f900e2d18c3e0ce85c7d0bfed91c52e/wm230_01.00.0100/FCFW/flyctrl.img.FCFW>
[2018-02-20 17:59:27]
hostile :
thank the DJI engineer known as Donny
[2018-02-20 18:00:00]
hostile :
@jan2642 I know there are GPIO's to put shit into JTAG mode for the modem firmware IIRC. would not surprise me for other peripherals too
[2018-02-20 18:01:24]
jan2642 :
There’s definitely yet another loader in the FC (0303 IIRC) that never gets upgraded and which performs the 0305 upgrade.
[2018-02-20 18:02:25]
evgeniychuiko :
In my case 305 was ignored (same version), and only 306 was updated
[2018-02-20 18:05:32]
jan2642 :
Ah yes, maybe if you force the upgrade of the 0305 by using a different version ?
[2018-02-20 18:07:20]
jan2642 :
One thing which might make a difference is that I put the 0305 in upgrade mode by sending the 00 07 cmd to it.
[2018-02-20 18:14:35]
jan2642 :
BTW, the Mavic Air FC is quite different regarding upgrading as it runs on a dedicated core of the same SoC where all the dji_* Linux stuff is running.
[2018-02-20 18:17:46]
validat0r :
as opposed to?
[2018-02-20 18:46:09]
kilrah :
a completely separate microcontroller on another board
[2018-02-22 12:16:36]
evgeniychuiko :
From 1.03.1000 flight logs stored in flash of FC or core board?
[2018-02-22 12:22:33]
evgeniychuiko :
The question is, FC with FW >=1.03.1000 is able to start without core board connection?
[2018-02-23 11:50:17]
kilrah :
core board, but don't know if that means it won't start without one
[2018-02-23 11:50:34]
kilrah :
would imagine it expects communication from the core board anyway
[2018-02-23 11:53:05]
evgeniychuiko :
I will check it and share my experience. Unfortunately I have no core with new firmware, and cannot update it without fc and battery communication
[2018-02-26 12:19:13]
evgeniychuiko :
I've tried to connect my FC with latest firmware core - nothing, no communication at all. Is there any FC pinouts?
[2018-02-26 15:00:24]
jcase :
i think @jan2642 had hte FC pinnout perhaps
[2018-02-26 15:08:04]
jan2642 :
No, not me… I think maybe @freaky123 had them ?
[2018-03-01 18:00:12]
hotelzululima :
Monthly checkin on OpenOccusync.. @martinbogo any new News ???
[2018-03-02 00:48:48]
christianwoodward :
Can I ask what it's written in?
[2018-03-02 00:49:09]
christianwoodward :
You guys make me want to get a mavic pro but I'll be patient for the 2...
[2018-03-09 19:19:17]
evgeniychuiko :
Played a bit with mavic flight controller. It has at least two data interface - uart and usb, and use both of them
[2018-03-09 19:20:02]
evgeniychuiko :
when usb line connected to pc, assistant recognized it as fc
[2018-03-09 19:26:50]
jcase :
how are you connecting the FC to assistant?
[2018-03-09 19:26:54]
jcase :
o wow lol
[2018-03-09 19:28:05]
evgeniychuiko :
Found usb data lines
[2018-03-09 19:36:53]
dkovar :
Innnnnteresting.
[2018-03-09 19:38:35]
hostile :
pics?
[2018-03-09 19:38:42]
hostile :
and what is on the next screen!
[2018-03-09 19:38:44]
hostile :
=]
[2018-03-09 19:39:54]
evgeniychuiko :
Almost same like through bird) Few additional tabs, nothing interesting
[2018-03-09 19:39:54]
dkovar :
And what happens when you fire DUML at it....
[2018-03-09 19:40:10]
hostile :
the normal a3 tabs?
[2018-03-09 19:40:45]
evgeniychuiko :
Like debug mode with mavic
[2018-03-09 19:42:58]
evgeniychuiko :
Yes, duml commands working, but only local, fc, battery, esc. No access to 801 through fc usb)
[2018-03-09 19:43:50]
evgeniychuiko :
Or maybe just no feedback, because sender is pc, and 801 will answer to ttyGS0
[2018-03-09 19:45:37]
evgeniychuiko :
I can't compare to standalone A3, never had it
[2018-03-09 19:47:44]
hostile :
yeah I meant the a3 config screens for mavic in assistant in debug mode
[2018-03-09 19:50:44]
evgeniychuiko :
yes, same access to parameters, gains and other things. Nothing for us)
[2018-03-09 19:51:14]
validat0r :
and same access level to params?
[2018-03-09 19:52:35]
evgeniychuiko :
I think yes, there's no limitation from android. FC itself give parameters for change
[2018-03-09 19:53:24]
kilrah :
yeah but the fc might not give the same ones on the usb connection that dji thinks nobody will use than the uart
[2018-03-09 19:53:53]
kilrah :
i.e. they could have restricted only the obvious channel
[2018-03-09 19:54:11]
validat0r :
check for g_config_flying_limit_height_limit_enabled
[2018-03-09 19:57:36]
evgeniychuiko :
@ilovemynexus4 no, it hasn't this parameter
[2018-03-09 19:58:01]
evgeniychuiko :
formal fw - 1.04.100
[2018-03-09 19:58:59]
validat0r :
being a spark-op I have no clue when this para was disabled on mavic fw
[2018-03-09 20:00:55]
evgeniychuiko :
Some strange tab "certificate", with possibility for upload something from server or locale
[2018-03-09 20:01:41]
evgeniychuiko :
For example certificate for "advanced radiometry"
[2018-03-09 20:02:01]
hostile :
yeah I've seen that before too
[2018-03-10 13:38:27]
hostile :
@mingtao @evgeniychuiko do either of you have a picture of this soldering ?
[2018-03-10 13:56:17]
evgeniychuiko :
green is data+ white data-
[2018-03-10 17:00:04]
evgeniychuiko :
RX and TX pads on flight controller board. It's definitely for diagnose or programming. No external lines.
[2018-03-10 17:01:53]
evgeniychuiko :
Tried to send ascii symbols, get answers, 0xFF or 0x00 or 0xFD
[2018-03-12 11:41:23]
evgeniychuiko :
Can someone explain me mavic gps module communication? I've replaced FC board, but got "GPS disconnect please reset and check connection"
[2018-03-12 11:57:49]
jezzab :
Plugged in?
[2018-03-12 12:29:09]
evgeniychuiko :
Sure)
[2018-03-12 12:32:51]
evgeniychuiko :
FC board I took from damaged mavic, and it can be broken. But I need to check communication lines first
[2018-03-12 13:35:33]
evgeniychuiko :
This FC died under motorcycle wheels:joy: in previous life.
[2018-03-12 14:10:57]
ender :
uhhh congrats..
[2018-03-13 00:05:15]
jcase :
@evgeniychuiko ever have to unbrick a FC?
[2018-03-13 00:12:01]
hostile :
you can over SWD / JTAG fwiw
[2018-03-13 02:25:56]
jcase :
@hostile have you dont this? kinda need a walk through
[2018-03-13 03:40:20]
hostile :
long time ago, and I can't walk you through it unfortunately. I can just tell you it CAN be done. As I recall the paper by @vessialq mentioned it
[2018-03-13 03:40:26]
vessialq :
@vessialq has joined the channel
[2018-03-13 03:41:30]
hostile :
<https://github.com/vessial/dji/blob/master/如何黑掉无人机.pdf>
[2018-03-13 03:41:34]
hostile :
@jcase
[2018-03-13 03:42:19]
hostile :
see the slide titles "Stm32 IO remap defeat SWD debugging"
[2018-03-13 03:44:19]
jcase :
Thx
[2018-03-13 05:30:08]
evgeniychuiko :
@jcase No, I just replaced small FC board. But I would like to unbrick it. Just can't understand, what we can do without stm32 firmware...
[2018-03-13 05:41:27]
evgeniychuiko :
In my case no any signals from FC chip
[2018-03-13 05:58:30]
evgeniychuiko :
@vessialq Can you a bit explain it? This wiring diagram in your PDF is a FC diagram? No 7,9v in mavic FC.
[2018-03-13 13:08:21]
fredmicrowave :
Looks an external circuit you build and connect to MCU pins 18, 61, pwr_en... to enable reset SWD
[2018-03-13 15:48:25]
evgeniychuiko :
Nice:joy: You need only know where this pins under your glued IC
[2018-03-13 15:52:29]
evgeniychuiko :
And why you need to bypassing your transistor, if it's your own?) I need some comments from author, for sure.
[2018-03-13 16:11:57]
fredmicrowave :
@fredmicrowave uploaded a file: [Translated.zh-CN.en.pdf](https://dji-rev.slack.com/files/U9J5JJU8K/F9NFP2KBJ/translated.zh-cn.en.pdf)
[2018-03-13 16:12:49]
fredmicrowave :
Good point about pinout. Either need a diagram, or remove the MCU and trace the pins...
[2018-03-13 16:19:36]
evgeniychuiko :
For me this diagram looks strange, I can't understand many points here. Lack of information, almost useless.
[2018-03-13 16:21:33]
validat0r :
nice Pdf .. thanks for that
[2018-03-13 16:22:34]
validat0r :
@ilovemynexus4 uploaded a file: [I love to know what the author said when showing that slide heer](https://dji-rev.slack.com/files/U8X0X24F8/F9NFXQ056/image.png)
[2018-03-13 16:23:16]
fredmicrowave :
(I just auto-translated it from @hostile link, i am not the one to thank)
[2018-03-13 16:26:37]
hostile :
@vessialq is the author btw...
[2018-03-13 16:30:46]
ender :
Thats great work… Is this sortof public or are we not supposed to share outside Slack ?
[2018-03-13 16:30:55]
fredmicrowave :
@evgeniychuiko I agree. But "Switch protection circuit against SWD reset signal" could partially explain for someone that understand this?
[2018-03-13 16:34:38]
hostile :
it is 100% public
[2018-03-13 16:34:55]
hostile :
SWD / JTAG are disabled...
[2018-03-13 16:35:01]
hostile :
this is a trick to re enable them
[2018-03-13 16:35:16]
hostile :
IIRC for a split second timing wise you can have a window to use SWD
[2018-03-13 16:35:29]
hostile :
and for this you can flash a new firmware image with JTAG enabled
[2018-03-13 16:36:11]
hostile :
as I recall at least
[2018-03-13 16:36:18]
hostile :
some vague technique similar to the above
[2018-03-13 16:37:22]
evgeniychuiko :
But we have no fw for it...
[2018-03-13 16:37:53]
hostile :
which bird ?
[2018-03-13 16:37:58]
hostile :
we have firmware for all the birds technically
[2018-03-13 16:37:59]
evgeniychuiko :
mavic
[2018-03-13 16:38:03]
hostile :
we have mavic firmware
[2018-03-13 16:38:09]
hostile :
what are you talking about?
[2018-03-13 16:38:10]
jcase :
lots of mavic firmware lol
[2018-03-13 16:38:13]
hostile :
lol
[2018-03-13 16:38:45]
evgeniychuiko :
FC? Decrypted? For whole mcu?
[2018-03-13 16:38:52]
hostile :
<https://github.com/MAVProxyUser/firm_cache>
[2018-03-13 16:38:58]
hostile :
you have all the elements you need to make that happen
[2018-03-13 16:39:06]
hostile :
they have not been publically chained together to my knowledge
[2018-03-13 16:39:19]
hostile :
after the spray-system leak, technically you have everything you need
[2018-03-13 16:40:06]
hostile :
<https://twitter.com/thedjiproblem/status/954461938213416961>
[2018-03-13 16:40:54]
evgeniychuiko :
But there is definitely some bootloader except 305 and 306 module
[2018-03-13 17:07:44]
jan2642 :
Yes, the 303 which is put in during production and never updated in the field.
[2018-03-13 18:12:46]
hostile :
to my knowledge there HAS been success using the very risky --factory mode firmware update mechanism to flash a decrypted FC module having used the Spray-system key with it.
[2018-03-13 18:13:07]
hostile :
this is NOT for the light hearted though
[2018-03-13 19:54:15]
evgeniychuiko :
@hostile Do you mean inrup through assistant factory mode?
[2018-03-13 20:01:15]
hostile :
yes
[2018-03-13 20:31:39]
jan2642 :
That path is blocked since 01.03.1000 (IIRC). There’s specific code in libduml_fwrk.so in the Mavic to prevent upgrading the 0306 from anything but the ‘secure upgrade’ which is also part of dji_sys. It’s not clear to me if they did this to prevent modifications or because people started playing with internal upgrade and bricked their FC’s because they didn’t knew what they were doing...
[2018-03-13 20:45:31]
hostile :
so you could in theory... downgrade to 01.03.1000 and flash your shit
[2018-03-13 20:58:31]
jan2642 :
Well, 01.03.0900 then. But be careful, internal upgrade only supports decrypted firmware and there are literally **zero** safeguards. Flash something wrong and get insta-bricked !!
[2018-03-13 21:33:20]
evgeniychuiko :
Need to try. My Fc can't be bricked more than now) But how it can be done, if no any answer from FC. Which method they used for nonsecure upgrade?
[2018-03-13 21:48:16]
jan2642 :
That picture of the assistant detecting the FC was not of the bricked one ?
[2018-03-13 22:01:23]
evgeniychuiko :
No, I took fc from mechanical broken esc board. From bricked FC no any connection. Something strange in upgrade log when it was bricked
[2018-03-13 22:02:46]
evgeniychuiko :
I just compare normal log and this "brick issue" log
[2018-03-13 22:22:19]
jan2642 :
The only ‘odd’ thing to me is the ‘enc_type = 0’, I would think that it should be 1 (but I currently have no log to compare it with).
[2018-03-13 22:25:15]
evgeniychuiko :
Yes, exactly. In normal case we have enc_type=1 and start offset=41. In brick enc_type=0 and start offset=0
[2018-03-13 22:33:58]
jan2642 :
That means that there’s now garbage where the 0306 should be...
[2018-03-13 22:34:09]
evgeniychuiko :
This shit was uploaded as unencrypted... All my bricks was around this fucking 1.03.1000... Something was completely changed in upgrade algorithm.
[2018-03-13 22:37:29]
jan2642 :
If this happened with the normal upgrade then this is a major bug...
[2018-03-13 22:39:18]
jan2642 :
According to that log the 0305 is still ok so if there would be a way to prevent it from running the 0306 it might be upgradable again.. Unfortunately I don’t know it...
[2018-03-13 22:39:54]
evgeniychuiko :
Or maybe 305 or bootloader was damaged with offset 0 in additional...
[2018-03-13 22:47:23]
jan2642 :
Nah, that offset is where it starts reading in the source file, not where it starts flashing.
[2018-03-13 23:11:23]
fredmicrowave :
At line 21 there is a typo in directory , "firmaware" instead of "firmware" ...
[2018-03-13 23:24:51]
jezzab :
Thats just debug output. There are SOOOO many typos. To the point there are typos in command lines and they even call them with typos.
`dji_verify geofense` is one of my personal favourites
[2018-03-13 23:25:25]
hostile :
improt my fave in /init.rc
[2018-03-13 23:25:30]
hostile :
like the 'grep' bug
[2018-03-13 23:25:38]
jezzab :
BWHAHA yeah
[2018-03-13 23:25:47]
hostile :
leave an improt binary laying around in the right path == gold
[2018-03-13 23:35:25]
jcase :
!wiki
[2018-03-20 23:20:49]
fredmicrowave :
@fredmicrowave uploaded a file: [Mavic gimbal flex cable repair](https://dji-rev.slack.com/files/U9J5JJU8K/F9SNN14DP/dsc07272__large_.jpg)
[2018-03-20 23:21:07]
fredmicrowave :
@fredmicrowave uploaded a file: [2](https://dji-rev.slack.com/files/U9J5JJU8K/F9T9JAN5Q/dsc07271__large_.jpg)
[2018-03-20 23:21:18]
fredmicrowave :
@fredmicrowave uploaded a file: [3](https://dji-rev.slack.com/files/U9J5JJU8K/F9T6LEY1H/dsc07269__large_.jpg)
[2018-03-20 23:21:28]
fredmicrowave :
@fredmicrowave uploaded a file: [4](https://dji-rev.slack.com/files/U9J5JJU8K/F9T9JF4JE/dsc07268__large_.jpg)
[2018-03-21 02:45:29]
lolo780 :
I've seen smoke come out before
[2018-03-21 02:45:34]
g1dtf :
Is there anyone in an FCC zone with an modded GL300C RC that has measured its output using a directly connected RF power meter. All the ones I've found seem to have been done with people in the lower power CE zones.
[2018-03-21 15:54:33]
fredmicrowave :
@lowellfoo780 Smoke is factory-set and supposed to be kept inside components ...
[2018-03-21 15:57:27]
hostile :
yeah man, can't let out the magic purple smoke
[2018-03-21 15:57:31]
hostile :
all things bad occur after that!
[2018-03-21 15:58:01]
hostile :
@fredmicrowave inquiring minds want to know... did the cable work after that?
[2018-03-21 16:15:09]
fredmicrowave :
The cable was damaged in two places. After fixing it it makes auto test, camera moving in all directions, but won´t get stabilized or respond to remote, just like if it was disconnected from the core board.
Did not had time to find out why yet.
[2018-03-21 20:04:07]
lolo780 :
I usually keep a half dozen cables in stock.
[2018-03-22 02:59:52]
fredmicrowave :
I can confirm, flex cable is working. Had to disassemble everything again, used kapton for better isolation, not sure of what was wrong but all ok now.
[2018-03-25 17:42:45]
hotelzululima :
hmm nice and fast phone ie the walmart Huawei <https://www.walmart.com/ip/AT-T-PREPAID-Huawei-Ascend-XT2-16GB-Prepaid-Smartphone-Silver/854006794>
[2018-03-25 17:45:37]
hotelzululima :
BUT the glass is protruding past the case edge making this an extremely fragile phone for screen breakage.. best to order with case and front protector and NOT try and use naked except for when its in the RC in use… too cheap to repair :disappointed: BUT it runs litchi without making your wallet a disaster area :slightly_smiling_face:
[2018-03-25 17:45:58]
hotelzululima :
oh well will use this one for jailbreak experiments
[2018-03-25 17:57:56]
hostile :
nice
[2018-04-06 13:18:31]
hotelzululima :
monthly checkin @martinbogo any word on OpenOccusync??
[2018-04-06 13:43:56]
hostile :
man I assumed @martinbogo has been killed by Frank Wang's motorcycle ninja assassin team. <https://www.youtube.com/watch?v=i1nbM1Gg5OI>
[2018-04-06 13:49:14]
kilrah :
LOL... haven't seen him for a while indeed :confused:
[2018-04-06 14:03:16]
jezzab :
“Does this smell like chloroform?”
[2018-04-12 13:41:19]
martinbogo :
Nope. not dead :)
[2018-04-12 13:45:36]
hans112 :
:joy:
[2018-04-15 21:47:01]
hotelzululima :
And OpenOccuSync status?
[2018-04-15 23:30:41]
lolo780 :
I shelved my long range Mavic until there's some breakthrough. Bought a bunch of Phantoms instead.
[2018-04-20 20:03:19]
hotelzululima :
hmm looks like LodiPD NOT worried about the possibility of OpenOccuSync <http://sacramento.cbslocal.com/2018/04/19/lodi-police-drone/> CC: @martinbogo :slightly_smiling_face:
[2018-04-20 20:04:45]
hotelzululima :
lets see AlamedaPD supposedly using zigbee controlled drones the same model of which was already attacked by killerbee..
[2018-04-20 21:52:50]
hostile :
lol was it?
[2018-04-20 21:53:02]
hostile :
docs on that? cuz that rocks
[2018-04-20 22:23:03]
hotelzululima :
looks like they quite using that zigbee connected beast and switched to DJI nowadays folks were screaming about the price of the original pair of drones they bought(about 98K$)
[2018-04-20 22:23:27]
hotelzululima :
was trying to find the zigbee connection but cant find the articles I read now..
[2018-04-20 22:24:04]
hotelzululima :
AlamediPD now using DJI…
[2018-04-20 22:24:18]
hostile :
oh were they using Alutra?
[2018-04-20 22:24:31]
hostile :
thats only xbee drone I know of at PD level
[2018-04-20 22:24:49]
hotelzululima :
think the pair they had went to LA at somepoint…
[2018-04-20 22:27:56]
hotelzululima :
nope I had it wrong.. it was the aircover machines
[2018-04-20 22:28:45]
hotelzululima :
I KNOW some PD in the eastbay was trying it with zigbee connected machines in 2013 now trying to remember who
[2018-04-20 22:56:25]
hotelzululima :
think I WILL put together a dedicated aetheros m2/SBC for kismet usage!! sound like its gonna be useful as I suspect that PD’s will be flying up to date software with droneid blasting away!!
[2018-04-21 00:23:09]
hostile :
only works on mavic air and spark atm via m.2
[2018-04-21 07:41:48]
validat0r :
Spark droneid is broken
[2018-04-21 14:20:21]
hostile :
how so?
[2018-04-21 14:20:32]
hostile :
unless you have a 5mhz capable atheros card, you won't see it
[2018-04-21 14:20:59]
hostile :
<https://github.com/kismetwireless/kismet/blob/1d33b87c9b5db84d708ddd04437a46a1fc2a711b/nl80211.h#L2541>
[2018-04-21 14:21:05]
hostile :
<https://github.com/kismetwireless/kismet/blob/6c838f3d39cdc9bc0c8259d6e3dcff13cdbb0419/README#L590>
[2018-04-21 14:21:17]
hostile :
kismet config MUST be proper...
[2018-04-21 14:21:19]
hostile :
``` XXW5 5MHz quarter-channel, supported on some Atheros cards and few others.
Not auto-detected and must be manually added.```
[2018-04-21 18:40:02]
validat0r :
@hostile we talked about that. Packets are almost empty.
[2018-04-21 19:47:24]
hostile :
ahh yeah I suspect this is your card.
[2018-04-21 19:47:37]
hostile :
possibly truncating the packets
[2018-04-21 19:47:52]
hostile :
Mavic was the only confirmed broken previously
[2018-04-21 19:48:02]
hostile :
do you have a firmware version?
[2018-04-21 19:48:08]
hostile :
also which card is this again?
[2018-04-21 19:49:03]
validat0r :
Hmm .. You realy think it's just my card?
[2018-04-21 19:49:06]
hostile :
yes
[2018-04-21 19:49:16]
hostile :
I used kismet and droneID detections at work
[2018-04-21 19:49:34]
hostile :
i've not seen spark + RC send malformed packets ever
[2018-04-21 19:49:36]
validat0r :
With spark?
[2018-04-21 19:49:46]
validat0r :
Hmm .. That's odd
[2018-04-21 19:50:04]
hostile :
we use PCI / M.2 cards to sniff with though, you are using a USB IIRC?
[2018-04-21 19:50:26]
validat0r :
No, internal card on 2.4 ghz
[2018-04-21 19:50:41]
hostile :
interesting
[2018-04-21 19:50:45]
hostile :
which flavor of OS?
[2018-04-21 19:50:59]
validat0r :
Um .. Some linux
[2018-04-21 19:51:24]
hostile :
lspci for me and show me which card you use?
[2018-04-21 19:51:26]
hostile :
and uname -a
[2018-04-21 19:51:32]
hostile :
and cat /etc/issue
[2018-04-21 19:51:51]
validat0r :
Sorry, that notebook is someplacr else atm
[2018-04-21 19:52:00]
hostile :
I'm in no rush =]
[2018-04-21 19:52:04]
validat0r :
Monday I can try again
[2018-04-21 23:13:35]
luckfish1985 :
@hostile I downgrade my phantom4,but the ac can not be upgraded now ,I need some help
[2018-04-21 23:13:45]
luckfish1985 :
@luckfish1985 uploaded a file: [wx_camera_1524318094283.jpg](https://dji-rev.slack.com/files/U8A4FSPKQ/FAB3BFL21/wx_camera_1524318094283.jpg)
[2018-04-21 23:14:03]
luckfish1985 :
@luckfish1985 uploaded a file: [IMG_20180421_191519.jpg](https://dji-rev.slack.com/files/U8A4FSPKQ/FAARRU43D/img_20180421_191519.jpg)
[2018-04-21 23:15:54]
jezzab :
What firmware did u use to downgrade? And from where? Was it stock firmware?
[2018-04-21 23:16:30]
jezzab :
Is it a Phantom 4 Standard or Pro or?
[2018-04-21 23:17:55]
luckfish1985 :
I download from ddd ,it is PHANTOM4 standard
[2018-04-21 23:19:13]
jezzab :
What version did you downgrade to and what from?
[2018-04-21 23:19:35]
jezzab :
`Pull Upgrade Logs`
[2018-04-21 23:19:40]
jezzab :
and send them thru
[2018-04-21 23:24:39]
hostile :
"remote controller not found"
[2018-04-21 23:24:41]
hostile :
oh boy
[2018-04-21 23:24:45]
hostile :
that is the same issue nvar had
[2018-04-21 23:24:46]
hostile :
remember?
[2018-04-21 23:24:56]
hostile :
he applied p4p firmware to a p4a or some shit
[2018-04-21 23:25:30]
hostile :
you may be buying yourself a new core board mate
[2018-04-21 23:26:14]
jezzab :
Ive seen the message on my logs before and it was ok. Im more concerned about the device ID:
`Unknown (DJI P1 S)`
[2018-04-21 23:26:27]
jezzab :
I parse the name from it so it should be `WM330 AC` etc
[2018-04-21 23:26:40]
jezzab :
i i dont know what it is then I display what was recv and Unknown
[2018-04-21 23:26:54]
jezzab :
its coming back with `DJI P1 Sxxxx`
[2018-04-21 23:26:57]
jezzab :
which is.... weird
[2018-04-21 23:28:31]
jezzab :
just checking on P4 Std im parsing correctly
[2018-04-21 23:28:50]
luckfish1985 :
phantom4 upgrade log
[2018-04-21 23:30:27]
jezzab :
So it downgraded ok but wont upgrade?
[2018-04-21 23:31:47]
jezzab :
Looks like it rolled back ok
[2018-04-21 23:33:28]
luckfish1985 :
:sweat_smile:
[2018-04-21 23:34:07]
jezzab :
?
[2018-04-21 23:34:24]
luckfish1985 :
failed to upgrade
[2018-04-21 23:34:36]
luckfish1985 :
failed to upgrade
[2018-04-21 23:35:31]
jezzab :
Failed in what way? It wouldnt let you flash?
[2018-04-21 23:37:20]
luckfish1985 :
the ac now work fine but cannot upgrade , visual localization not work
[2018-04-21 23:41:17]
luckfish1985 :
A few months ago I downgrade the ac ,I find It worked not so perfect
[2018-04-21 23:43:36]
jezzab :
The log shows it flashed a firmware completely
[2018-04-21 23:44:00]
jezzab :
`01.02.0503`
[2018-04-21 23:45:07]
luckfish1985 :
the gimbal and the camera can not communicate with the fc
[2018-04-21 23:45:20]
jezzab :
Did you flash again?
[2018-04-21 23:45:29]
luckfish1985 :
I wil try again
[2018-04-21 23:46:52]
luckfish1985 :
but the version can not be changed,it always display 1.2.603
[2018-04-21 23:47:39]
jezzab :
Just do it one more time
[2018-04-21 23:48:45]
luckfish1985 :
the gimbal can not be flash,the AC did not auto reboot
[2018-04-21 23:49:09]
jezzab :
Flash 02.00.0106 again
[2018-04-21 23:56:11]
luckfish1985 :
I want to modify the parameter of in the FC ,but fail to flash the firmware, :sweat:
[2018-04-21 23:57:45]
jezzab :
Are trying to flash a mixed firmware??
[2018-04-21 23:58:57]
jezzab :
So you attempted to flash a stock, clean `02.00.0106` again??
[2018-04-21 23:59:02]
luckfish1985 :
not yet
[2018-04-22 00:01:18]
luckfish1985 :
it stop upgrade 44% every time
[2018-04-22 00:01:46]
luckfish1985 :
on the way
[2018-04-22 00:02:37]
luckfish1985 :
it stop
[2018-04-22 00:03:24]
luckfish1985 :
fucking day
[2018-04-22 00:05:34]
luckfish1985 :
where can I download all the firmware
[2018-04-22 00:05:42]
luckfish1985 :
!wiki
[2018-04-22 00:08:49]
jezzab :
!ddd
[2018-04-22 00:09:50]
jezzab :
[2018-04-22 00:10:26]
luckfish1985 :
thank you
[2018-04-22 00:13:22]
luckfish1985 :
I guess the firmware is not same with the gimbal ,mabe it is the root cause
[2018-04-22 00:14:15]
jezzab :
not the same with gimbal?
[2018-04-22 00:14:18]
jezzab :
```Push overall upgrade progress: 44 (18:10:0)
Gimbal 5223#1 Upgrade: check file /cache/upgrade/unsignimgs//wmxxx_0401_v01.02.00.00_2015.bin
sys_upgrade_check_file: crc16 verify for enc header erro
md5string: 23d2ab5923ec2fb8b1d26049386f8132
```
[2018-04-22 00:15:01]
jezzab :
Are you trying to flash a mixed firmware or something?
[2018-04-22 00:15:05]
jezzab :
Seems like more to this story
[2018-04-22 00:17:03]
luckfish1985 :
I forget it
[2018-04-22 00:19:17]
luckfish1985 :
how to solve this
[2018-04-22 00:22:28]
luckfish1985 :
maybe the old firmware needed
[2018-04-22 23:01:35]
hostile :
<https://www.amazon.com/Recovery-ALLSOCKET-Interface-11-5x13mm-AndroidPhone/dp/B01MFB3JCI/ref=pd_day0_328_4?_encoding=UTF8&pd_rd_i=B01MFB3JCI&pd_rd_r=G1575SPJSSPA964WP0NB&pd_rd_w=GM94d&pd_rd_wg=ZlqBi&psc=1&refRID=G1575SPJSSPA964WP0NB>
[2018-04-22 23:01:50]
hostile :
seems interesting. @jcase would it work for the chips in the DJI shit?
[2018-04-23 13:16:19]
hostile :
interesting hack... <https://osmocom.org/projects/osmo-fl2k/wiki/Wiki>
[2018-04-23 13:28:09]
jezzab :
Thats an impressive rework of a cheap product
[2018-04-23 13:28:20]
ender :
VERY cool, thx hostile !
[2018-04-23 14:02:57]
ender :
(ordered 2 of that bad guys)
[2018-04-23 18:03:19]
ender :
@ender uploaded a file: [carbon_1.jpg](https://dji-rev.slack.com/files/U60JKQQ2F/FABKWRZAN/carbon_1.jpg)
[2018-04-23 18:03:24]
ender :
@ender uploaded a file: [carbon_2.jpg](https://dji-rev.slack.com/files/U60JKQQ2F/FAAUTRU0Y/carbon_2.jpg)
[2018-04-23 18:03:27]
ender :
@ender uploaded a file: [triblade_1.jpg](https://dji-rev.slack.com/files/U60JKQQ2F/FABKX0PD0/triblade_1.jpg)
[2018-04-23 18:05:02]
ender :
Hi guys, this is hardly Nobel-prize stuff but regular prop nuts are fitting the Mavic Air so i started playing around with some alternative Props
(boy do i have a lot of options from my stockpile although i was more into larger Hexas in my DIY times).
I have a STRONG feeling that the Carbon 5"x30 are very low noise but i need to find my Sound-level-meter somewhere in some m^3 of stuff…
[2018-04-23 18:05:19]
ender :
Much more important i need to measure Efficiency.
[2018-04-23 18:06:06]
ender :
(Any idea how to measure Effiency ? My approach would be to hover and to measure time either for the full time or at least until it reaches 80% or so).
[2018-04-23 18:23:23]
hostile :
Nice
[2018-04-23 18:23:35]
hostile :
Have a scale?
[2018-04-23 18:23:40]
hostile :
Measure the thrust
[2018-04-23 18:27:38]
ender :
Well, i could do that but the thrust is adjusted by the FC and the thrust when hovering will be just the same :slightly_smiling_face: I know i could unsolder the motors and then feed PWM (did so in the good ’ol days of course measuring Wattage / thrust in my test bench) but i do not plan to go that far right now.
[2018-04-23 18:28:17]
ender :
I guess i can do nothing wrong simply measuring the hover time, agreed ?!
[2018-04-23 18:28:24]
ender :
Its just so… BORING :slightly_smiling_face:
[2018-04-23 19:43:06]
ender :
Well i did a quick test in darkness (using a flashlight to enable optical flow sensors…
I tried to measure time to go from 100% to 80% with each prop set.
[2018-04-23 19:43:32]
ender :
Carbons: 3:30 min
Triblade Nylon: 3:50 min
Stock: 4:20
[2018-04-23 19:44:06]
ender :
At least no catastrophic failure. Listening for the second time i guess the Triblade are the least noisy. I need some measurements :slightly_smiling_face:
[2018-04-23 19:45:36]
ender :
When i used the Carbons i has several Image Transmission failures, could it interfere with WiFi ?!? i power cycled twice so the emasurement was f*cked up probably but that was STRANGE.
[2018-04-23 19:45:54]
ender :
need to order 5"x30 Triblades, x45 seems too steep.
[2018-04-23 19:46:30]
validat0r :
maybe because of vibrations. i had a heck of a time handling my spark on the weekend to find out it was solely because of imbalanced props
[2018-04-23 20:02:55]
hostile :
triblade is very inefficient but has more lift power
[2018-04-23 20:03:12]
hostile :
and yes... carbon can interfere with 2.4ghz
[2018-04-23 20:05:32]
ender :
@ilovemynexus4: they were perfectly balanced (well at least 6 years before)…
[2018-04-23 20:05:52]
ender :
@hostile,whoa, i feared so. So Carbon is OUT
[2018-04-23 20:06:02]
validat0r :
carbon interferes with 2.4ghz? crazy
[2018-04-23 20:06:10]
hostile :
I said it **can**
[2018-04-23 20:06:27]
ender :
lolz i was about to order 5030 but then i remembered another stockpile, GOT EM
[2018-04-23 20:06:32]
hostile :
we had issued with our G10 variants for a while interfering , but it isn't a universal rule
[2018-04-23 20:06:34]
ender :
will try tomorrow…
[2018-04-23 20:07:27]
ender :
@hostile: i understand but as i said i had contant image transmission dropouts and that “interfernce” message in the very same spot i tried the other props. And the messages & behaviour even survived power cycles.
[2018-04-23 20:08:00]
ender :
Then i remembered Carbon is not as electromagnetically “dead” as Nylon so i figured…
[2018-04-23 20:08:12]
ender :
And on the Air the distance prop-tips to sensors is very small
[2018-04-23 20:09:40]
ender :
i also understand that generally more blades are less noisy but also less effizient. But on my micro Hexacopter Project (where most of those small props come from) i also had opposite effects and E-Prop Calculator was no big help either…
[2018-04-23 20:09:51]
ender :
So i guess i will order 4-Blade Props as well :slightly_smiling_face:
[2018-04-23 20:10:33]
ender :
ANY idea if “Bullnose” Variants are more / less efficient and more / less noisy ?
[2018-04-23 20:10:48]
ender :
didnt try those in my DIY times, see them on racers…
[2018-04-23 20:20:13]
hostile :
yeah sounds like your testing is hinting at it being a bad application in this case re: carbon
[2018-04-23 20:20:42]
hostile :
I think the bull nose impacts the tip vortices...
[2018-04-23 20:20:56]
hostile :
in the non-aerodynamic world our drones live in... these minior gains may or may not matter much. =]
[2018-04-23 22:56:49]
lolo780 :
You need to test longer. Run the tests down to a low % or cell voltage.
[2018-04-24 06:57:16]
ender :
will do. Ordered some interesting props :slightly_smiling_face:
[2018-04-24 07:01:10]
kilrah :
I would just do a "standard program" aka hover for a minute, do a straight 4m/s climb for 30 secs, P mode straight line run for 30sec, S mode straight line run for 30sec then look at power consumption in the logs.
[2018-04-24 07:23:49]
lolo780 :
10m/s climb to 30% battery
[2018-04-24 07:58:44]
ender :
Lets see, at first i will just hover for a clue and then fly a bit in sports mode to see if there are any abnormalities. I am MOST afraid of peak currents that are way higher then stock. I wonder if the FC will simply limit RPM or if it will shutdown or the likes. Any ideas about DJI FC behaviour in those cases ?
[2018-04-24 07:59:15]
kilrah :
you at least get a warning on screen...
[2018-04-24 08:10:18]
ender :
I hoped so :slightly_smiling_face:
[2018-04-24 08:10:34]
ender :
Geeesh started raining here and will last for a day or two as far as i can see…
[2018-04-24 08:11:16]
ender :
The Parrot FC was reacting to too-high-currents with a “motor blocked” and fell out of the sky…
[2018-04-24 08:11:33]
kilrah :
"nice"...
[2018-04-24 08:12:01]
ender :
So when i was Frankensteining Bebops i fixed the Bebop to the floor and gave it full throttle for a while but i doubt i can do this with the Air… I’ll try though…
[2018-04-24 08:14:27]
ender :
@kilrah Well it was nice in a way as it was reacting ultra fast to stop motors when crashing. As it uses i2c for ESC<-->FC comms it was very fast and bidirectional comms. it can even brake actively. Perect for security. Fast enough to brake props AS they were tearing into your arm (which it did NOT due to this). So as always things have two sides… And of course it would’ve been possible to differentiate between “too high currents” and “blocked”
[2018-04-24 08:15:06]
ender :
i almost laughed out loud learning that DJI still uses PWM 1000-2000 pulses for ESC’s (still true on Air, right ?!)
[2018-04-24 08:15:40]
kilrah :
nope, communication has been digital for quite a while
[2018-04-24 08:16:09]
kilrah :
there is still a "PWM equivalent" value in the logs but it's jsut there for comparison purposes basically
[2018-04-24 08:16:41]
ender :
ah okay :slightly_smiling_face: so latest platform including Pro/Spark/Air is not using PWM, just “looking” like it ? GOOD.
[2018-04-24 08:17:55]
ender :
its a pity Parrot never continued since bebop 2… Exzellent bird and great “solid 3 axis gimbal” concept in my view…
[2018-04-24 08:24:21]
kilrah :
to me the "gimbal" is the reason why Parrot stuff went down :smile: just not good enough
[2018-04-24 08:27:11]
ender :
of course its the crucial point. I love the concept and probably a sensor that would be good enough to AT LEAST throw out decent 1080p from a fisheye distortion is too expensive. not speaking of a 4k output…
[2018-04-24 08:27:23]
ender :
But i so love the “non moving parts” approach :slightly_smiling_face:
[2018-04-24 08:27:30]
ender :
Did you ever try & fly a B2 ?
[2018-04-24 08:28:17]
ender :
With B1 & B2 i had digital 720p streaming from 2km away loooong before Mavic and with some mods more robust then lightbridge…
[2018-04-24 08:28:35]
ender :
only the resulting vids were… subpar…
[2018-04-24 08:28:49]
ender :
from
[2018-04-24 08:31:34]
kilrah :
friend had a B1 and I played with it, never tried the B2
[2018-04-24 08:31:37]
kilrah :
and have a disco
[2018-04-24 08:35:18]
ender :
okay, B1 to B2 was a huge step instability (really just because of better GPS & sensors, nothing changed in principle,almost identical Firmware).
[2018-04-24 08:35:25]
ender :
But sadly same sensor…
[2018-04-24 08:35:29]
ender :
Well, whatever :slightly_smiling_face:
[2018-04-24 08:38:01]
kilrah :
but my disco has a DJI ocusync system on it :stuck_out_tongue:
[2018-04-24 08:38:33]
ender :
Haha :slightly_smiling_face:
[2018-04-24 08:38:54]
ender :
Why ? Not satisfied with range or because of camera replacement ?
[2018-04-24 08:39:38]
kilrah :
becasue i wanted the ocusync system on a wing and the disco is a good wing (and cheap now)
[2018-04-24 08:40:09]
kilrah :
like that i can do true FPV, not laggy and crappy wifi link
[2018-04-24 08:40:27]
ender :
okay… I mounted 2 B1 carcasses on 4x4 Beasts as i did not want to have Gimbals on the ground crashing into the mud :slightly_smiling_face: The strange ways things go :slightly_smiling_face:
[2018-04-24 08:40:54]
ender :
HEY, laggy & crappy just means you did never use it right :slightly_smiling_face:
[2018-04-24 08:40:55]
kilrah :
@kilrah uploaded a file: [IMG_20180209_110909.jpg](https://dji-rev.slack.com/files/U600SGWBS/FABTGU803/img_20180209_110909.jpg)
[2018-04-24 08:41:23]
kilrah :
i even reuse the disco antennas for the ocusync
[2018-04-24 08:41:43]
ender :
Also a “FRANKENDISCO” :slightly_smiling_face:
[2018-04-24 08:41:51]
ender :
abused dead parts…
[2018-04-24 08:42:29]
kilrah :
my disco camera is blurry too like several, would have to fix it and can't be bothered lol
[2018-04-24 08:42:43]
ender :
yup, whole batches were like that
[2018-04-24 08:42:48]
kilrah :
lag you're defintiely not getting less than i do with ocusync though
[2018-04-24 08:42:58]
ender :
nope
[2018-04-24 08:43:01]
ender :
of course
[2018-04-24 08:43:30]
ender :
but VERY different price tag :slightly_smiling_face: Using the heart of a $10 Xiaomi repeater 2km are no problem…
[2018-04-24 08:49:44]
kilrah :
yup but you can't left/right the camera :stuck_out_tongue:
[2018-04-24 08:50:14]
ender :
YES you can.
[2018-04-24 08:50:29]
ender :
just a matter of parameters to dragon-prog
[2018-04-24 08:50:48]
ender :
but of course not a nice undeniable…
[2018-04-24 08:51:14]
ender :
As i said, i love the concept but better sensors and more flexible software would be great…
[2018-04-24 08:51:46]
kilrah :
not with that view lol
[2018-04-24 08:51:52]
kilrah :
yup
[2018-04-24 08:52:47]
ender :
no way to get the cam under the bird ?!
[2018-04-24 08:53:01]
ender :
or on the “nose” with a small extension ?
[2018-04-24 08:53:12]
kilrah :
i want it where it is
[2018-04-24 08:53:40]
kilrah :
to fly FPV i hate nose cam where you don't see the aircraft, that's the whole point
[2018-04-24 08:54:03]
ender :
ah i see…
[2018-04-24 08:54:22]
ender :
i wasnt sure of that remark now i understand
[2018-04-24 08:54:23]
kilrah :
I fly a multi when I want that, not fixed wing
[2018-04-24 08:55:05]
ender :
how long can you keep the DISCO in the air with your setup ?
[2018-04-24 08:56:20]
kilrah :
<https://youtu.be/kx4O_CuUSEc?t=25s>
[2018-04-24 08:56:29]
kilrah :
I like me a cockpit view for fixed wing FPV
[2018-04-24 08:56:44]
ender :
:wink: great
[2018-04-24 08:57:07]
ender :
Different needs for you beeing a pilot :slightly_smiling_face:
[2018-04-24 08:57:41]
kilrah :
depends how you fly obviously... don't have enough flights with it yet, only just did one pack since I removed the draggy external antennas to use the disco's ones but I flew about 30min on it
[2018-04-24 08:57:59]
kilrah :
with stock battery that has about 2500
[2018-04-24 08:58:42]
ender :
Just ask DJI to overlay a virtual cockpit & wings over the stream :slightly_smiling_face:
[2018-04-24 08:58:53]
ender :
Or better ask the litchi guys :slightly_smiling_face:
[2018-04-24 09:02:52]
kilrah :
nope, would become as boring as flying a simulator then
[2018-04-24 09:28:58]
ender :
If it would be good you wouldnt know :stuck_out_tongue:
[2018-04-24 13:34:59]
hostile :
@madangler1 @mad_angler1 do you still have details on the i2 plugs? <https://inspirepilots.com/threads/inspire-2-battery-charging.17455/page-3>
[2018-04-24 13:35:02]
madangler1 :
@madangler1 has joined the channel
[2018-04-24 13:35:02]
mad_angler1 :
@mad_angler1 has joined the channel
[2018-04-24 13:39:03]
ender :
Welcome :slightly_smiling_face:
[2018-05-03 15:32:10]
hostile :
it would be sweet to make hardware to auto root birds. Like the Mavic Air has USBC now... use something like this with exploits on hardware. <https://store.ti.com/Search.aspx?k=TPS65983EVM&HQS=corp-tistore-null-storeinv-invf-store-octopart-wwe>
[2018-05-03 15:32:38]
hostile :
or use FaceDancer to deliver a DUML exploit
[2018-05-03 15:32:50]
hostile :
<https://int3.cc/products/facedancer21>
[2018-05-03 21:24:38]
hotelzululima :
damn :confused:
[2018-05-03 21:25:12]
hotelzululima :
will facedancer handle usb-c?
[2018-05-03 21:25:15]
lolo780 :
Facedancer sounds like a stripper name
[2018-05-03 21:25:56]
hotelzululima :
comes from the DUNE series of SF
[2018-05-03 21:26:23]
hotelzululima :
ie shapeshifter
[2018-05-03 21:27:39]
hotelzululima :
nobody seems to armor or protect libs at that level of emulation..
[2018-05-03 21:27:44]
hotelzululima :
yet
[2018-05-03 21:28:09]
hotelzululima :
except for tricks like the usb condom etc..
[2018-05-03 21:29:23]
hotelzululima :
or software that detects the USB device being plugged in and immediately powers down the USB port
[2018-05-03 21:32:54]
hotelzululima :
hmm I take it back my new Huawei cell H1711 DOES ask whether charge only or device type usage.. how resistant to OTG cable and facedancer is yet another matter…
[2018-05-04 16:03:12]
trollspeed :
What kind of actions should be done? Looks like something like atmega or stm32 boards are able to do that cause it is possible to handle rndis
[2018-05-04 16:04:30]
trollspeed :
Or maybe raspberry pi zero?
[2018-05-04 17:37:35]
hostile :
@trollspeed I'd say just RNDIS and Serial outta cover it , maybe a flash drive to store the firmware / exploits you want to flash
[2018-05-04 22:01:40]
trollspeed :
<https://www.raspberrypi.org/products/raspberry-pi-zero/>
[2018-05-04 22:22:48]
christianwoodward :
yeah the pi zero does both modes
[2018-05-04 22:22:55]
christianwoodward :
handy little thing
[2018-05-05 00:14:25]
hotelzululima :
yep now if they will just equip the pi-zero-w with the new rf chip they are using in the rpi3b+(can be used as a 2.4/5.8ghz sdr:)
[2018-05-05 00:15:32]
hotelzululima :
have 2 of them in from of me updating to the latest version of kali for my southern oregon trip :slightly_smiling_face: those poor pfsense systems in the hotels will be getting “assessed”..
[2018-05-07 07:00:09]
dan143 :
@lowellfoo780 is there a walkthrough for installing this thing somewhere?
[2018-05-07 07:00:16]
dan143 :
the amplifier?
[2018-05-07 08:25:25]
lolo780 :
Not really, you just grab the signal from the #2 antenna off the core board and output back to the stock antenna or aftermarket one. Only #2 needs the amp.
[2018-05-07 08:25:54]
lolo780 :
Power I hardwired to the esc board
[2018-05-07 09:01:29]
hans112 :
What is the impact on flight time ?
[2018-05-07 09:11:55]
lolo780 :
None that I noticed
[2018-05-07 09:12:42]
lolo780 :
RF power is adjusted on demand, so the amp shouldn't run full power unless needed
[2018-05-07 09:13:34]
lolo780 :
Anyone using an amp probably has external batteries as well
[2018-05-07 22:34:01]
dan143 :
i dont have an external battery setup
[2018-05-07 22:34:10]
dan143 :
I'd consider one but first I need to get all the flight kinks out of the way
[2018-05-07 22:34:25]
dan143 :
i dont wanna drop all this time and effort into the aircraft to have it decide it wants to take a nosedive into the ocean when its 5 miles away
[2018-05-08 19:58:54]
trulala69 :
Does anyone know, read, heard about a possibility to control a gimbal and a camera to take panorama’s in a custom diy quadcopter. I’ve read about ArduCopter and Mavlink mission programming, but there might be something else... Thanks.
[2018-05-08 20:31:13]
hostile :
Litchi?
[2018-05-08 23:42:42]
digital1 :
Now the P4P V2 also uses Ocusync can anyone explain the difference between Ocusync and Lightbridge technically ? On a scope they look very similar
[2018-05-08 23:59:29]
hostile :
different chipsets... Leadcore vs. Artysyn chipsets
[2018-05-09 04:35:31]
trulala69 :
Hmm, Litchi seems to support the A2//A3 FCs... anyone seen something outside of the DJI world?
[2018-05-09 12:27:30]
digital1 :
@hostile could Ocusync not be done on Artysun hardware ? Someone mentioned it was more of an SDR than LB so I guess that’s more of a dedicated hardware/software platform ?
Sorry just trying to understand
[2018-05-09 12:54:05]
mefisto :
Occusync uses software for operations which previously had to be implemented on FPGA due to time constraints. The Artosyn chips used in later Lightbridge implementations are just the same thing FPGA did. FPGAs are expensive, so when it become possible to make a dedicated chip, Dji did it. Artosyn received intelectual property to produce that chip from Dji.
[2018-05-09 21:29:46]
ender :
Hi Lin :slightly_smiling_face:
[2018-05-09 21:29:55]
ben_lin :
Hello there
[2018-05-09 21:30:02]
ben_lin :
The 5.8g amp tho
[2018-05-09 21:30:06]
ender :
what do you ean HW is there ? good 5,8 Amps ?
[2018-05-09 21:30:09]
ben_lin :
Putting that on a p4p
[2018-05-09 21:30:10]
ender :
ah okay :slightly_smiling_face:
[2018-05-09 21:30:15]
ben_lin :
Yeah
[2018-05-09 21:30:39]
ender :
Actually i always focussed on 5,8 (again no urban type)… So they are sparse ?
[2018-05-09 21:30:40]
ben_lin :
I was looking for 5.8g amps that can fit in the p4p rc
[2018-05-09 21:30:46]
ender :
i see.
[2018-05-09 21:31:08]
ender :
But you too only see 5,8 advantages for urban WiFi crowded areas, right ? Or am i missing something
[2018-05-09 21:31:29]
ben_lin :
5.8 is sparse…
[2018-05-09 21:31:47]
ben_lin :
Because if you put that2.4g amp in you lose 5.8
[2018-05-09 21:32:25]
ben_lin :
And it would jam all the nearby Magic’s
[2018-05-09 21:32:29]
ben_lin :
Mavic
[2018-05-09 21:32:35]
ender :
played around with AC & RC Amps with my Bebops… One time trying to push 5,8G to max and using a salvaged 5,8G TP Link repeater on HongKong Setting on my Bebop. I wasnt impressed even though that Repeater is said to deliver excellently…
[2018-05-09 21:32:52]
ender :
(compared to my 2x2W AC & Xiaomi Repeater on the RC)
[2018-05-09 21:33:02]
ben_lin :
5.8 can’t penetrate very well
[2018-05-09 21:33:03]
ender :
so at that early time i dropped interest in 5,8G
[2018-05-09 21:33:26]
ender :
exacly. And i fly around in ruins (concrete + steel) and around trees.
[2018-05-09 21:33:48]
ender :
on my DIY i played with Mavlink 433 MHz & 1,2G FPV.
[2018-05-09 21:33:58]
ender :
now 433 MHz is PENETRATING :slightly_smiling_face:
[2018-05-09 21:34:13]
ben_lin :
So long ofc
[2018-05-09 21:34:28]
ben_lin :
I just wish dji would go lower than 2.4g
[2018-05-09 21:34:40]
ben_lin :
Shouldn’t be a problem
[2018-05-09 21:34:51]
ender :
here most options below are highly illegal or hard to play with…
[2018-05-09 21:35:06]
ender :
ANd of course at some point bandwidth becomes a problem
[2018-05-09 21:35:30]
ben_lin :
720/1080p shouldn’t be a problem
[2018-05-09 21:35:36]
ender :
well, if RC & AC is using SDR there should be no limit :slightly_smiling_face:
[2018-05-09 21:35:55]
ben_lin :
Occusync uses SDR
[2018-05-09 21:36:05]
ben_lin :
which makes it better than LB2
[2018-05-09 21:36:10]
ender :
Just insert some stratigical ” freq /=2" and you are done
[2018-05-09 21:36:13]
ender :
i know :slightly_smiling_face:
[2018-05-09 21:36:46]
ben_lin :
Did u try MP vs MA?
[2018-05-09 21:37:03]
ender :
Yes, i owned them parallel for 2 weeks to find a decision.
[2018-05-09 21:37:31]
ender :
MA’s size & 2,7k60Hz won against the higher penetration of Ocusync.
[2018-05-09 21:37:57]
ben_lin :
2.7k 60fps at 100mbps?
[2018-05-09 21:38:07]
ender :
Stock flight time & range with passive ANtennae mod is harmonizing with my needs
[2018-05-09 21:38:13]
ender :
yup, yummie.
[2018-05-09 21:38:20]
ender :
And also 4k30 much better due to 100mb
[2018-05-09 21:38:41]
ender :
i sometimes use respeedr to produce 4k60, you should try it.
[2018-05-09 21:38:50]
ender :
Rivals good ol Faroudja Chip :slightly_smiling_face:
[2018-05-09 21:38:59]
ben_lin :
Damn
[2018-05-09 21:39:07]
ender :
of course for some kind of materials ist horrible.
[2018-05-09 21:39:10]
ender :
Damn what ?
[2018-05-09 21:39:12]
ben_lin :
Now I wonder how mp2 would be like
[2018-05-09 21:39:17]
ender :
haha
[2018-05-09 21:39:25]
ender :
you shouldnt.
[2018-05-09 21:39:35]
ben_lin :
The processors on MA is strong
[2018-05-09 21:39:37]
ender :
There is always a fool buying your old HW
[2018-05-09 21:39:42]
ben_lin :
True
[2018-05-09 21:39:57]
ben_lin :
But newer ones don’t have nfz hack tho
[2018-05-09 21:40:23]
ender :
I managed to not loose much money as i bought cheap (TomTop) and convinced buyers that a (cleanly and tame) modded AC is worth more then stock.
[2018-05-09 21:40:45]
ben_lin :
Also the go4 app
[2018-05-09 21:40:46]
ender :
yup, still hoping for diff to secneo the newer app and for NLD to hit the street
[2018-05-09 21:40:51]
ben_lin :
Same
[2018-05-09 21:41:17]
ben_lin :
Honestly mp2 might not have a 1inch sensor
[2018-05-09 21:41:19]
ender :
But with the “idiots” FCC hack (FakeGPS) and an airgapped stock app i am fine
[2018-05-09 21:41:31]
ender :
but 4k60 probably
[2018-05-09 21:41:50]
ender :
if not they can just go home
[2018-05-09 21:41:53]
ben_lin :
that does make a difference
[2018-05-09 21:42:06]
ben_lin :
i think they might bump it to 1/1.7"
[2018-05-09 21:42:12]
ben_lin :
not the 1 inch
[2018-05-09 21:42:17]
ender :
whatever SONY has cheap :slightly_smiling_face:
[2018-05-09 21:42:26]
ben_lin :
lol true
[2018-05-09 21:42:44]
ben_lin :
if they can get the sensor on Huaweii P20 that'd be good enough
[2018-05-09 21:42:57]
ender :
Got the P20Pro a week ago.
[2018-05-09 21:43:08]
ben_lin :
Huawei is terrible with the software tunning
[2018-05-09 21:43:09]
ender :
I was so sick of that infinity edge of my samsung…
[2018-05-09 21:43:18]
ben_lin :
lol s8
[2018-05-09 21:43:23]
ender :
yup, switching of “AI” is the first move.
[2018-05-09 21:43:41]
ben_lin :
did u try shooting raw on it
[2018-05-09 21:43:49]
ender :
The zoom is great, all else is not THAT huge step the marketing was able to project compared to S9
[2018-05-09 21:43:53]
ender :
yup
[2018-05-09 21:43:56]
ben_lin :
the sensor size just dwarfs every other smart phone
[2018-05-09 21:44:01]
ender :
i always try raw.
[2018-05-09 21:44:14]
ben_lin :
except for the trash kirin970
[2018-05-09 21:44:28]
ben_lin :
had they released a SD845 version I'd be buying it
[2018-05-09 21:44:29]
ender :
P20Pro was kind of a no brainer since i work for Leica at times :slightly_smiling_face:
[2018-05-09 21:44:39]
ben_lin :
true
[2018-05-09 21:44:51]
ben_lin :
I think it is a plausible choice for MP2
[2018-05-09 21:45:05]
ben_lin :
since that sensor is already in mass production and available
[2018-05-09 21:45:11]
ender :
yup, not eating up their 1" Phantom..
[2018-05-09 21:45:27]
ben_lin :
also DJI being much better at the software level...
[2018-05-09 21:45:49]
ben_lin :
then I keep my P4P and sell the MP
[2018-05-09 21:46:13]
ender :
why do you love the 1" so much, dynamic range or low light performance ?
[2018-05-09 21:46:19]
ben_lin :
both
[2018-05-09 21:46:24]
ender :
OR do you actually feel the 4k sharpness is much better ?
[2018-05-09 21:46:31]
ben_lin :
I tried the MP at night and it was hard to fix in post
[2018-05-09 21:46:37]
ender :
(never owned a P4P)
[2018-05-09 21:46:59]
ben_lin :
also 4k60 in 100mbps with adjustable F/ stops
[2018-05-09 21:47:14]
ben_lin :
the P4P image quality dwarfs the MP
[2018-05-09 21:47:18]
ender :
okay, i forgot about that :slightly_smiling_face: But remarkably better low light performance ?
[2018-05-09 21:47:26]
ben_lin :
the mechanical shutter great for moving objects
[2018-05-09 21:47:28]
ben_lin :
yep
[2018-05-09 21:47:36]
ender :
okay :+1:
[2018-05-09 21:47:47]
ben_lin :
with p4p u can drag the exposure up a lot and not see the noise
[2018-05-09 21:47:47]
ender :
Is it legal for you to do night flying ?
[2018-05-09 21:47:56]
ben_lin :
yeah..
[2018-05-09 21:48:05]
ender :
(not for me,all kinds of ridiculous things to change on the AC)
[2018-05-09 21:48:09]
ben_lin :
cuz I do night time in cities so it isnt totally dark
[2018-05-09 21:48:38]
ben_lin :
the p4p handles golden hour sunlight much better thanks to the dynamic range
[2018-05-09 21:49:07]
ender :
So low light perf. is my MAIN point for all other cams but not for drones as i am not allowed to use them at all in night times and unlike otehr things flying at night is easy to see & to go for by law enforcement.
[2018-05-09 21:49:07]
ben_lin :
not to mention 20MP
[2018-05-09 21:49:22]
ender :
And i tend to wnat them smaller and smaller.
[2018-05-09 21:49:31]
ben_lin :
HK prohibts night time drone use?
[2018-05-09 21:49:41]
ben_lin :
like u cant even apply for a waiver?
[2018-05-09 21:49:42]
ender :
I dont think my big Hexa with SONY Nex is even operative. Did not touch it for over a year
[2018-05-09 21:49:55]
ender :
i am in Germany :slightly_smiling_face: They prohibit all :slightly_smiling_face:
[2018-05-09 21:49:59]
ben_lin :
ohhh
[2018-05-09 21:50:03]
ben_lin :
the stupid EU regulations
[2018-05-09 21:50:15]
ender :
Well, actually many make sense. But still annoying :slightly_smiling_face:
[2018-05-09 21:50:38]
ben_lin :
u can turn off the lights on ur drone and go steathly..
[2018-05-09 21:50:47]
ben_lin :
stealthy
[2018-05-09 21:50:54]
ender :
yep yep but in rural areas at night the noise is VERY obvious
[2018-05-09 21:51:07]
ben_lin :
oh....
[2018-05-09 21:51:19]
ben_lin :
imagine a p4p blasting at sport mode
[2018-05-09 21:51:21]
ben_lin :
that noise
[2018-05-09 21:51:23]
ben_lin :
holy fuck
[2018-05-09 21:51:29]
ender :
so thats why i strive for small & low noise AC
[2018-05-09 21:51:46]
ender :
Yep, my Hexa lets the children cry when going full throttle :stuck_out_tongue:
[2018-05-09 21:51:49]
ben_lin :
MPP vs P4P the noise level is day and night
[2018-05-09 21:51:56]
ben_lin :
lel a HEXA
[2018-05-09 21:52:23]
ender :
I wanted the extra redundancy before i gave it the big gimbal and my NEX
[2018-05-09 21:52:41]
ben_lin :
usually if you go at 150m and above u cant hear it unless it is absoultely quiet and u are outside
[2018-05-09 21:53:41]
ender :
I prefer sunlight shots so i wont do risky things for a night shot anyways but i agree that city pics are BEAUTIFUL at night time :clap:
[2018-05-09 21:53:49]
ben_lin :
5.8g in EU w/o force fcc is just trash..
[2018-05-09 21:53:53]
ben_lin :
oho ok
[2018-05-09 21:53:58]
ben_lin :
true
[2018-05-09 21:54:04]
ben_lin :
thats why i bought the p4p after MP
[2018-05-09 21:54:19]
ender :
i can understand.
[2018-05-09 21:54:29]
ender :
Lin, i gotta grab some sleep.
[2018-05-09 21:54:39]
ben_lin :
see ya later:)
[2018-05-09 21:54:49]
ender :
Nice chatting to you !
[2018-05-09 21:56:47]
ben_lin :
Same here
[2018-05-09 21:57:27]
ben_lin :
Good night there:) in California here it is 3pm
[2018-05-09 22:10:41]
mr.vibez :
Are those internal antennas easy to install?
[2018-05-09 22:18:41]
ben_lin :
which one u talking about
[2018-05-09 22:18:59]
ben_lin :
they all require taking apart the RC and re-soldering
[2018-05-09 22:19:18]
ben_lin :
takes about 2-3 hrs
[2018-05-09 22:20:42]
mr.vibez :
The one you posted a link to: 2.4G Signal Amplification Module 2W Remote Control Extended Range Module Elf Remote Refit Remote Distance
[2018-05-09 22:22:27]
ben_lin :
that one requires re-soldering
[2018-05-09 22:23:04]
ben_lin :
where u located
[2018-05-09 22:23:07]
ben_lin :
if not China
[2018-05-09 22:23:17]
ben_lin :
then u'd have to DIY
[2018-05-09 22:23:50]
ben_lin :
it basically re-routes the signal wire coming out of the coreboard to the AMP and then to the stock antenna
[2018-05-10 17:15:26]
mr.vibez :
UK
[2018-05-13 16:56:12]
digital1 :
<https://dji-rev.slack.com/archives/C64R5L1HN/p1525870445000702> thanks so Ocusync is more software than hardware and can be run on existing hardware compared to LB that requires dedicated hw ? Just trying to get this clear in my head
[2018-05-13 19:09:02]
hostile :
not really.... the hardware drives the direction the code heads.
[2018-05-13 19:09:38]
hostile :
the RF front end supports certain things...
[2018-05-13 19:09:41]
hostile :
they code on top of it
[2018-05-14 16:04:24]
ender :
@chron0, i wrote up this “Any Android 2 HDMI” in Mavicpilots. Still valid. Of course you can use any casting device that offers WiFi accesspoint and works in a frequency not interfering with the AirCraft.
<https://mavicpilots.com/threads/hdmi-goggles-or-spotter-monitor-via-20-dongle-5ghz.4907/>
[2018-05-14 16:04:54]
chron0 :
@ender thnx again
[2018-05-14 16:05:23]
ender :
you can power the smallish dongle from the goggles so the setup CAN be very small (it was on my Headplay).
[2018-05-14 16:05:51]
ender :
And it worked flawlessly & stable without too much fuzz. ALso no fat HDMI wire from phone to goggles…
[2018-05-14 16:06:03]
ender :
But of course added lag. (90-150 ms, effectively doubling total lag)
[2018-05-14 16:07:32]
chron0 :
I've got no prior experience to know if it's gonna bug me or not (latency wise) but thanks for sharing, I've forgotten about those miracast things...
[2018-05-14 16:09:44]
chron0 :
can you recommend any light AR glasses with HDMI?
[2018-05-14 16:10:44]
ender :
liked my Zeiss a lot
[2018-05-14 16:11:20]
ender :
But nowadays laws want LOS (otherwise you need an extra spotter) which reduces the choice to Moverios. But i have a cheapcheap solution in the queue :wink:
[2018-05-14 16:11:37]
ender :
@ender uploaded a file: [air-foldable.jpg](https://dji-rev.slack.com/files/U60JKQQ2F/FANNMNVFA/air-foldable.jpg)
[2018-05-14 16:11:41]
ender :
Now for something complete different (and also stupid), World premiere of foldable Mavic Air props :slightly_smiling_face:
[2018-05-14 16:12:13]
ender :
(Spark clamps with 5030 foldable blades). Look like stock made only there are none.
[2018-05-14 16:12:30]
ender :
Byproduct of striving for low noise props as my main project waits for Royal Mail :slightly_smiling_face:
[2018-05-14 16:13:04]
ender :
Above pictured are LESS annyoing then stock props. No idea of battery life yet and i dont really need ’em foldable but folks asked for it.
[2018-05-14 16:13:51]
ender :
@chron0, OH you SAID **AR** that still only leaves the Moverios and some cheap hacks :slightly_smiling_face:
[2018-05-14 16:14:52]
chron0 :
nice prop job
[2018-05-14 16:16:06]
chron0 :
do the moverios have hdmi in?
[2018-05-14 16:19:22]
ender :
mine do :slightly_smiling_face: Stock NO
[2018-05-14 16:20:08]
ender :
Easy thing, there is a “HDMI Wand” thingy that converts HDMI to USB OTG. SO i can use my Moverio for other stuff then DJI GO (e.g. for my WiDV or Bluray watching or you-name-it).
[2018-05-14 16:20:23]
ender :
Also Have a 5.8G analog to USB OTG so i can use them with my DIY Birds…
[2018-05-14 16:24:05]
chron0 :
@ender guess I'll query your brains about it some more :slightly_smiling_face:
[2018-05-14 16:25:59]
ender :
damn :slightly_smiling_face: Brains in permanent holidays :stuck_out_tongue:
[2018-05-14 17:39:27]
quad808 :
@quad808 has joined the channel
[2018-05-14 17:45:51]
quad808 :
@ben_lin Thanks my friend!
[2018-05-14 21:51:44]
quad808 :
@ender... I am confused about the dongle you are talking about and the setup...can you provide a link to the dongle so I can take a look at it?
[2018-05-14 21:56:20]
quad808 :
@ender, nevermind..I got it. Google is your friend. doh
[2018-05-15 07:12:14]
ender :
google pretends to be your friend but does a wonderful job doing so :slightly_smiling_face:
[2018-05-17 19:58:21]
mr.vibez :
Anyone have a guide for removing the speaker from the mavic air controller?
[2018-05-18 09:18:24]
w4t3r :
@mr.vibez: @jan2642 made an amazing tool that disables the sound of the mavic pro rc, we could kindly ask him how hard it would be to port it to the mavic air? ;)
[2018-05-18 09:20:32]
validat0r :
did he release the mavic pro tool?
[2018-05-18 09:28:11]
cs2000 :
I wasnt aware that was released yet publically
[2018-05-18 09:43:11]
cs2000 :
But i do know he is still working on MA support
[2018-05-18 09:48:11]
mr.vibez :
Was it a hammer?
[2018-05-18 09:51:31]
cs2000 :
:joy: that would also work
[2018-05-18 10:09:25]
jan2642 :
It’s not yet publicly released, but more volunteers for beta testing are welcome :wink:
[2018-05-18 10:10:42]
jan2642 :
In theory I can do it on the MA as well but I don’t have one and especially with the first attempts, there’s a risk of bricking the microcontroller.
[2018-05-18 10:17:03]
validat0r :
if you'd do it for spark rc i'd beta test
[2018-05-18 10:20:06]
jan2642 :
There’s a Spark RC on its way to me exactly for this purpose but the local postal service is screwing up…
[2018-05-18 10:20:26]
validat0r :
great news. keep me posted
[2018-05-18 15:45:55]
mr.vibez :
@jan2642 I will test on mavic air if you want?
[2018-05-18 17:10:23]
rickysuper :
I use blue tape to cover the "speaker" and almost mute it.
[2018-05-18 17:13:25]
jan2642 :
@mr.vibez Sorry, I can’t take the risk. Chances are too high that it’ll get bricked and they don’t sell MA remotes separately… I can un-brick them but need physical access.
[2018-05-18 17:14:11]
mr.vibez :
I understand. I'll take it to bits and cover the speaker
[2018-05-18 17:18:48]
hostile :
@jan2642 FWIW... no one has tried contacting DJI care and saying... "my wife ran my remote over with her car it is fucked, can I buy a new one?"
[2018-05-18 17:19:00]
jan2642 :
I probably will get to the point that it can silence MA remotes but I can’t predict how long it will take.. Once I have a remote it can go quite fast.
[2018-05-18 17:19:34]
hostile :
<https://www.ebay.com/itm/Brand-new-DJI-Mavic-Air-Radio-Controller-Remote-control-Genuine/273065484387?hash=item3f93f8a063:g:LK0AAOSwHI1agKlb:sc:USPSFirstClass!43235!US!-1>
[2018-05-18 17:19:44]
jan2642 :
@hostile There’s a story about a guy whose remote got stolen in the DJI forum and they told him there was no way he could get a remote separately..
[2018-05-18 17:19:54]
hostile :
dude has a pile of em on ebay
[2018-05-18 17:19:57]
hostile :
"35 sold"
[2018-05-18 17:20:05]
hostile :
9 available
[2018-05-18 17:20:20]
hostile :
<https://www.ebay.com/itm/DJI-Mavic-Air-Controller/302736615450?_trkparms=aid%3D222007%26algo%3DSIM.MBE%26ao%3D2%26asc%3D44039%26meid%3Dc6b647c4b67f4bc3bd9e6d03f0d1933e%26pid%3D100005%26rk%3D6%26rkt%3D12%26sd%3D273065484387%26itm%3D302736615450&_trksid=p2047675.c100005.m1851>
[2018-05-18 17:20:55]
hostile :
someone buy that and ship it to jan
[2018-05-18 17:21:06]
hostile :
@coldflake any spare funds from NLD?
[2018-05-18 17:21:11]
jan2642 :
That will help, yes :wink:
[2018-05-18 17:21:42]
hostile :
oh hi there... <https://www.ebay.com/itm/Genuine-NEW-DJI-Mavic-Air-Flight-Controller-ESC-and-Power-Circuit-Board/282903464370?hash=item41de5c49b2:g:uucAAOSwKJtau-on>
[2018-05-18 17:22:01]
hostile :
more parts popping up too
[2018-05-18 17:22:05]
jan2642 :
If I can make enough with the app, I could get an MA myself. We’ll see…
[2018-05-18 17:23:40]
jan2642 :
This guy buys new drones, takes them apart and sells the parts by themselves.
[2018-05-18 17:38:52]
rickysuper :
My friend bought a new MA RC from China official DJI, claimed that he had lost it.
[2018-05-19 07:24:45]
coldflake :
@jan2642 PayPal account and amount please and I will fork it over
[2018-05-19 07:30:25]
jan2642 :
@coldflake Thanks for the generous offer, I think it might be cheaper if someone on the US buys it and then ships it to Europe ?
[2018-05-19 08:01:57]
mr.vibez :
Anyone used these? <https://www.amazon.com/Refitting-Antenna-Signal-Booster-Nacome/dp/B074GPTXYD>
[2018-05-19 08:02:04]
mr.vibez :
Any good?
[2018-05-19 10:59:04]
ben_lin :
aint too bad
[2018-05-19 10:59:35]
ben_lin :
It makes the signal less directional while not decreasing the strength
[2018-05-19 10:59:53]
ben_lin :
So u don’t have to point straight at the ac for long range
[2018-05-19 11:04:06]
ender :
They are great.
[2018-05-19 11:06:09]
ender :
3300m with Mavic Air @100m Altitude, still 2 “bars” left. Turned around because i chickened out as the wind was slightly unpredictable that day. returned with approx 30% so i could have gone a lot further. I uses those Anttennas with MP, Spark and MA. I also build a dual Amplifier to go in between but actualy never bothered as those Antennas are great…
[2018-05-19 11:07:56]
mr.vibez :
Thanks, might pick up a set!
[2018-05-19 11:08:27]
mr.vibez :
Wasn't sure they would fit the Mavic Air as it's not mentioned in the product description
[2018-05-19 11:32:57]
cs2000 :
Wonder if @quad808 could assist with that?
[2018-05-19 11:34:11]
cs2000 :
Those antennas look pretty good, I’m tempted by them, more range is always better!
[2018-05-19 15:43:52]
coldflake :
Yes, probably but NLD will be happy to cover your costs regardless.
Just let me know how much you had to bleed and I will reimburse you.
LOL...almost sound like something else :slightly_smiling_face:
[2018-05-19 17:04:45]
quad808 :
@jan2642 @coldflake I can help with whatever is needed...buy from US and ship over to wherever is needed. Ask @cs2000 how is "picture" is...bwahahahahaha!
[2018-05-19 17:05:22]
jan2642 :
Sounds like there is a story coming up ?
[2018-05-19 17:05:25]
coldflake :
Cool
[2018-05-19 17:23:49]
cs2000 :
:joy: I asked for Quads help to get one of those Huwai Elate phones from bestbuy as there’s nothing that cheap and fast in the U.K. and he kindly sent me one with me covering the costs obviously, but there was a photo on the phone lol
[2018-05-19 17:27:20]
quad808 :
come on man...it was a picture...thing. Maybe. Well...not really, but it worked!
[2018-05-19 17:27:50]
quad808 :
moving picture frame thinghy
[2018-05-19 17:43:49]
cs2000 :
Lol :joy: he was testing the camera for me
[2018-05-19 19:05:40]
lolo780 :
Was it a picture meant for Tinder?
[2018-05-19 19:24:12]
hostile :
@hostile uploaded a file: [naked-man-in-tea-kettle.jpg](https://dji-rev.slack.com/files/U60D1SM7V/FATT6CTF1/naked-man-in-tea-kettle.jpg)
[2018-05-19 19:46:43]
quad808 :
Quick question for you Mavic Air users...whats the minimum version of GO that you can use for the air??
[2018-05-19 19:58:27]
kilrah :
4.2.0 i think was the first to have support
[2018-05-19 20:06:55]
quad808 :
Thanks!
[2018-05-26 13:03:31]
nospam :
Has anyone tried to reverse enginer the hardware of the Spark? Im curious if it is possible to trigger an secondary camera on the (main) camera triggering...
[2018-05-26 14:39:55]
hostile :
Define “triggering”
[2018-05-26 15:34:56]
nospam :
Im flying a waypoint mission, and the camera is set on 2sec intervall. I'd like to trigger a secondary camera when each photo is taken. This can be done if there is 1) A hardware IO that can be used or 2) if there is a serial debug stream which can be parsed.
[2018-05-26 19:03:59]
hostile :
there is likely a DUML message associated with the triggering
[2018-05-26 19:04:19]
hostile :
tried examining the decompiled apk
?
[2018-05-27 00:25:11]
quad808 :
Hey guys...anyone here installed Patched GO on the CS? Care to write up a how to??
[2018-05-27 00:25:34]
ben_lin :
Its all on the wiki ma friend
[2018-05-27 00:27:23]
quad808 :
Thats what I thought...not for me, I get requests all the time in NLD, and send them to the Wiki...lol
[2018-05-27 01:07:48]
ben_lin :
lol
[2018-05-27 01:08:05]
ben_lin :
What u need help on@quad808
[2018-05-27 01:22:21]
ben_lin :
Afaik there shouldn’t be a problem on running the latest go patched on CS
[2018-05-27 01:22:32]
ben_lin :
I did it myself without issues
[2018-05-27 18:16:02]
nospam :
Thx. I'll look into it
[2018-05-27 19:03:50]
nospam :
I saw in an post in general that there is a picture of SBUS terminal pads on the main PCB (Spark), but could not find any more info about this (at least when searching on Slack with my android).
Has anyone been down that rabit hole?
Which data can be sent / sniffed / parsed on those pads?
[2018-05-27 19:06:01]
nospam :
[2018-05-28 09:56:29]
kilrah :
Jsut an sbus input, you can connect a receiver there and use it instead of the built in system if you go edit the FC config in debug mode.
[2018-05-28 15:08:11]
nospam :
Thx for the info.
[2018-05-29 12:53:51]
dnapappas0112 :
Hey guys, has anyone been able to get direct access/control to the sdr in the gl300c controller? Im trying to figure out how to access and control output power of the tx. I know about the fcc/ce patching and configs files. The only thing in configs that works on P4 is the 32 channels. I know the sdr is capable of a much higher output power, im just trying to find a way to adjust it. I have a spectrum analyzer and I can connect directly to the controller to measure output power. If I can help contribute some findings for the P4, let me know. I can try some different things to see what works and what doesn't.
[2018-05-30 19:26:56]
asoka :
baterie mavic
[2018-06-02 23:16:56]
edisonbattery :
anyone know anything about P4P schematics? official? unofficial? homemade?
[2018-06-03 06:20:55]
hotelzululima :
so @martinbogo did OpenOccusync die on the vine or did the barristers just excessively delay same ?
[2018-06-03 07:14:14]
lolo780 :
<https://rover.ebay.com/rover/0/0/0?mpre=https%3A%2F%2Fwww.ebay.com%2Fulk%2Fitm%2F192556456988>
For anyone that thinks they could fix it
[2018-06-03 08:39:23]
ender :
Question about batteries / auto-land limit: Did i understand it right: Usually 3.4V per cell seems to be the point where Auto-Land is engaged, right ? If you dont want that you can switch to OEM batteries which will not initiate ANY forced thing like RTH or auto land, it will display Voltage instead of percent and lets you fly until brown out & crash, is that right ?
[2018-06-03 08:39:38]
ender :
Please correct me if i am wrong.
[2018-06-03 08:40:31]
ender :
Apart from that: is there a way to edit the limits, e.g. use 3.1V per cell for autoland ? OR to edit the Voltage to percent table --> indirectly changing the limits by that ? (We did that on the Bebops) ?
[2018-06-03 08:49:50]
ben_lin :
You change to non-DJI batts, not “oem batts”
[2018-06-03 08:50:31]
ben_lin :
And AFAIK we haven’t done that voltage change here
[2018-06-03 08:50:43]
ben_lin :
Other than that u right
[2018-06-03 09:13:06]
validat0r :
Auto land is also triggered if you're up high and the FC calculates the time back to the ground. So no voltage trigger, but some crude math at work here
[2018-06-03 09:30:18]
ben_lin :
@lowellfoo780 did this ever happen to u when u doing those ultra high altitudes flights?
[2018-06-03 09:40:38]
lolo780 :
There's an auto land that still happens on non dji battery
[2018-06-03 09:42:10]
lolo780 :
Voltage to percent, someone was talking about that. Can't recall who.
[2018-06-03 10:37:51]
ender :
uhhh still auto land ? For me its not about ultra high flights, just within regulations (100m here), just trying to max out flight time. But i guess if i am far away it will still use that auto land / auto rth thingy with OEM ?! Could you elaborate what happens when or is this not known well ?
[2018-06-03 11:17:11]
validat0r :
My spark doesn't autoland anymore in non dji batt setting
[2018-06-03 11:17:36]
validat0r :
Only rth when out of rc range (and not on waypoint mission)
[2018-06-03 11:18:49]
validat0r :
It's still on "land" when batt low, but doesn't do it even when 0%
[2018-06-03 11:42:48]
ender :
did someone ever try when the SPark or MP or MA has “brown out” ? (Voltage) ?
[2018-06-03 12:31:20]
validat0r :
Meaning?
[2018-06-03 12:31:39]
validat0r :
Sudden current drops?
[2018-06-03 12:37:40]
ender :
brown out is the end of things, FC crashes, drone goes DOWN :slightly_smiling_face:
[2018-06-03 12:41:40]
validat0r :
Well yeah .. After 0% batt I had ca. 40s until bird went down.
[2018-06-03 12:42:41]
validat0r :
Only tried it once though
[2018-06-03 12:47:02]
ender :
okay, thx !
[2018-06-03 15:00:59]
lolo780 :
@ender when the battery voltage drops off and motor pwm hits 100% you better be close to landing or it'll go into a spinning crash.
[2018-06-03 17:13:01]
rickysuper :
I changed my Mavic Air battery mode to non DJI battery but auto landing still happen !
[2018-06-03 17:53:26]
quad808 :
@lowellfoo780 will know all this battery voodoo..he has flown higher and farther than probably all of us combined...LOL
[2018-06-03 21:01:34]
lolo780 :
The Air has a mind of it's own. Did you set both battery voltage levels to minimum in assistant and change response to LED only?
[2018-06-04 02:28:51]
rickysuper :
.400 Firmware using Assistant 1.1.2 only can change to non DJI battery but do not allow change the voltage level parameters .... :disappointed:
[2018-06-04 02:30:22]
rickysuper :
strange that sometimes it auto land but sometimes it can hover until 0%. May be related to RTH mode, GPS or Sport mode.
[2018-06-04 19:32:39]
nospam :
Has anyone looked into changing the compression of the JPEG's from the Spark alt option to make DNG (aka RAW)?
The pictures show a clear degrading due to compression artefacts, and I think that the camera can do better (as it is the same sensor as MA afaik..)
Is this setting in the app or is it in the birds binarys?
(Im trying to get into the code, but not used to work with decompiled smali..)
[2018-06-04 19:36:37]
ender :
@nospam: this Question of course has been asked before.
What i did is that i echanged MP & Spark camera ID in the APK. That resulted in all Mavic Video & Photo options showing up on the spark.
Sadly things that were interesting (like DNG, 4k video, 2,7k video) always reverted themselves after selecting them. So it seems those parameters are clamped in the Spark Firmware. But that way i was able to change the style to e.g. -1,0,0 which resulted in much better images & video as it was not oversharpened / overly contrasty. But thats only a limited success of course.
[2018-06-04 19:39:26]
nospam :
@ender Thanx for the info. Yes, I would also expect the "logic" to be in the bird, but sometimes there might be a setting for eg Compression but no GUI in the App... Anyhow, thx
[2018-06-04 19:40:45]
ender :
@nospam: i did not check or know that but i feellike the compression isnt too harsh, it only gets bad as it has to compress sharpening artifacts that i eliminated by reducing the Software Sharpness…
[2018-06-04 19:40:58]
ender :
So in the end i felt the images are okay compression-wise
[2018-06-04 19:41:42]
ender :
i only used that special apk to change parameters and then flew with the usual app as i did not want to risk funny stuff. The changed parameters from the “Spark-like-MP” app were persistent.
[2018-06-04 19:43:44]
nospam :
@ender Would I be pushing my luck if I asked where one could find this camera ID in the decompiled code? :wink:
[2018-06-04 19:44:52]
ender :
nope we all work together here. I can give you the “before & after” smali files or if you wish the compiled APK ( all of a very old APK version but shouldnt matter for the task at hand). I do not own a Spark anymore so it got stuck at an old version
[2018-06-04 19:47:02]
nospam :
It would be great with the before&after, it can be a nice excercise to try and build the apk myself. Until now I have only used the RunMe.sh... :smiley:
[2018-06-04 19:47:06]
validat0r :
well i tried enders thing on my spark .. but wasnt too happy
[2018-06-04 19:47:24]
validat0r :
there are just too many photo options that are not working with spark
[2018-06-04 19:47:27]
ender :
in which way ?
[2018-06-04 19:47:45]
ender :
Ah YES, but havibg a custom style improved things a lot IMO
[2018-06-04 19:48:04]
ender :
Thats what i said, most stuff reverts after selecting “wanted” stuff
[2018-06-04 19:48:11]
ender :
but style was okay to edit
[2018-06-04 19:48:47]
validat0r :
fiddling with jpeg compression ration would be nice, but i bet it's done on the ac
[2018-06-04 19:48:57]
ender :
@ilovemynexus4 if you have transferred my simple patched to more up to date apk versions maybe you can shove them over to Morim ?
[2018-06-04 19:49:28]
validat0r :
hmm
[2018-06-04 19:49:42]
validat0r :
will have a look into that .. didn't pursue it further
[2018-06-04 19:49:43]
ender :
i mean the patched smali file
[2018-06-04 19:49:47]
ender :
?
[2018-06-04 19:49:51]
validat0r :
sure
[2018-06-04 19:50:05]
ender :
:+1:
[2018-06-04 19:50:37]
ender :
Morim: then i thing you’ll be fine, okay ?
[2018-06-04 19:50:52]
ender :
If all fails PM me for the old APK
[2018-06-04 19:51:06]
nospam :
@ilovemynexus4 @ender Much appreciated
[2018-06-04 19:51:28]
validat0r :
i'm sure i did it once in .14 .. could you give me a hint what to look for?
[2018-06-04 19:52:02]
ender :
Its in the DataCameraGetPushStateInfo$CameraType.smali
[2018-06-04 19:52:56]
ender :
i believe my patch is from .8 or something even more obsolete :slightly_smiling_face: But the changed style suvvived until i sold the spark (.15 i believe)
[2018-06-04 19:56:00]
ender :
need to run, let me know if you dont find it…
[2018-06-04 19:57:03]
validat0r :
lol
[2018-06-04 19:57:07]
validat0r :
have it in my repo
[2018-06-04 19:57:15]
validat0r :
totally forgot about it
[2018-06-09 19:35:30]
edisonbattery :
Does anyone here deal with schematics or hardware mods?
[2018-06-09 19:49:58]
edisonbattery :
I thougt this channel is about hardware ---- all I see is people talking about jpegs and apks and djiGO. Is there somewhere where people actually want to discuss HARDWARE?
[2018-06-09 21:28:11]
hostile :
@mefisto is the only one to "deal" in them that I'm aware of... not really been much need for a schematic. what is your goal? what are you trying to accomplish?
[2018-06-09 22:02:07]
mefisto :
Just start a discussion and we will discuss hardware.
Here is my porno site with some bare circuits:
<https://github.com/o-gs/dji-firmware-tools/wiki/DJI-Hardware>
[2018-06-14 23:15:11]
edisonbattery :
This is exactly what im looking for. I come across sentera agricultural cams sometimes that are wired into the main flight controller on phantom4pro its on the 3rd pin they run a signal wire to the camera. Wondering what this pin is, and if they can use it for triggering camera? what else can i trigger with it?
[2018-06-14 23:36:28]
hostile :
grenade drops of course! **troll face**
[2018-06-14 23:47:35]
edisonbattery :
i was think more of lighting.
[2018-06-15 16:20:03]
mefisto :
@edisonbattery you can control the camera remotely by injecting DUML packets, either from a PC or mobile device.
[2018-06-15 16:21:29]
mefisto :
If you want to receive the signal to your own device inside the drone, then you can just tap to any of the serial interfaces and sniff the communication.
[2018-06-15 16:22:35]
mefisto :
I'd use Pi Zero for it. Can sniff DUML, and has enough power to do other tasks for you.
[2018-06-15 17:09:32]
edisonbattery :
Wow...nice. Do you know what U4 is and also U7?
[2018-06-15 17:51:03]
mefisto :
Open the schematic in kiCAD :wink:
[2018-06-15 17:51:17]
mefisto :
links to kicad projects are on the wiki I linked.
[2018-06-15 17:52:39]
mefisto :
U7 actually made it on the picture, it's in top right - API.
[2018-06-15 21:12:17]
dkovar :
@mefisto I've been off in my own little world for too long - any pointers to getting set up for sniffing DUML?
[2018-06-15 21:12:51]
dkovar :
And, is anyone using bench power to run various DJI products rather than batteries and, if so, how?
[2018-06-15 21:30:26]
hostile :
Mavic Coreboard has two little pads on it
[2018-06-15 21:30:56]
hostile :
can solder a 3s straight to them with a deans connector or what ever
[2018-06-15 22:03:07]
dkovar :
Excellent, thank you. I'm going to look into some way of making a plug that mimics a battery as well.
[2018-06-15 22:06:46]
dkovar :
Maybe like this: <https://dronexpert.nl/camera-lift-for-phantom3-inspire-and-matrice-100/>
[2018-06-16 07:51:53]
ender :
Haha, did that to my Franken-Bebop --> calculated weigt of wires to be == battery + 100g. resulted in 15m with appropriate AWG.
Had 2 crashes trying to get up but then managed a successful lifz and kept it in the air for an hour. Then i was satisfied and scrapped that experiment :slightly_smiling_face: WInd would have been NOT good for those hanging wires…
[2018-06-16 08:33:37]
mefisto :
@dkovar I recently described one place of sniffing Ph3, it's here:
<https://github.com/o-gs/dji-firmware-tools/issues/77>
[2018-06-16 11:18:01]
dkovar :
@mefisto Thanks!
[2018-06-19 15:01:13]
hostile :
is anyone familiar with the TB48S Battery in M600 at all?
[2018-06-20 02:10:52]
hdnes :
I am :wink:
[2018-06-20 02:11:20]
hdnes :
they are a real bitch to keep aligned unless you have assistant…. or your own DUML tool :wink:
[2018-06-21 12:25:32]
edisonbattery :
If the P4P runs kitkat and Im able to root with fireworks and use adb to kill nfz folder.... Can you run other apps on the internal android os of the Phantom. Can a Flir One be plugged into the microusb on the side and an app be able to at the very least-- start recording? is this possible or am I way off?
[2018-06-21 12:28:04]
ender :
@edisonbattery: well you would need to crosscompile the flirone app somehow meaningful for the Aircraft.
[2018-06-21 12:29:15]
ender :
I went the route to connect a FLIR Seek to the Spark (or any other with WiFI, also working on Parrot Bebops). Then i got root, then i used a custom virtualhere clienet and connected PC via WiFi and “mounted” the Seek to the PC using the )excellent) GitHub Seek FLIR software. voilá…
[2018-06-21 12:29:27]
ender :
But for P4P thats harder…
[2018-06-21 12:29:46]
ender :
Maybe just connect an Android with attached FLIR One and let it WifI stream…
[2018-06-21 12:33:24]
hostile :
@edisonbattery sure you could run android apps on the drone, the problem is it isn't **really** android and it is missing LOTS of the common sub systems for running dalvik apks
[2018-06-21 12:33:58]
hostile :
it is like some bastart minimalized android-ish thing.
[2018-06-21 12:40:26]
edisonbattery :
The whole point is not to have a phone strapped to the phantom. Its bulky...causes wind resistance and drift or blocks censors....its just not cool. What would be cool is to write a custom app that just does bare minimum to get the image and put it on the sd card. Can the phantom be tricked into engaging the motors with a flir one connected via extension to the micro usb.
[2018-06-21 12:40:52]
hostile :
I understand the point... Im just saying "android app" drone side is not the answer.
[2018-06-21 12:41:12]
hostile :
any **trick** you can think of is possible... you just need to roll your sleves up a bit =]
[2018-06-21 12:42:40]
edisonbattery :
I totally had my sleeves rolled up--- I have shop and see a lot of drones come thru, and all my buddies are more the willing to 'experiment' with me. Im just looking for any clues I can find towards something cool and fun.
[2018-06-21 12:47:43]
hostile :
so my next question is what is the technical hurdle you ran into in considering how to engage the motors with a flir one connected?
[2018-06-22 04:51:07]
edisonbattery :
my motors wouldnt start -- like I was plugged into Assistant but not
[2018-06-22 06:42:15]
ender :
uhh
[2018-06-22 06:42:31]
ender :
Probably check if usb plugged…
[2018-06-22 06:47:52]
hostile :
patch dji_flight or what ever
[2018-06-22 06:47:59]
hostile :
check logs for the error it is throwing
[2018-06-22 06:48:04]
hostile :
grep the binaries for the error
[2018-06-22 06:48:05]
hostile :
patch it
[2018-06-22 07:36:28]
ender :
OR use a RPI Zero that has Virtualhere installed + 5GHz Wifi Dongle to transmit FLIR to Groundstation. really small and enough perfomance. 3D Print a nice casing (RPI + FLIR), get only power supply from drone, makes you independent. Do you want trouble or a working (modular) system ?
[2018-06-22 22:41:49]
edisonbattery :
I must have goofed somewhere, because I restarted my phone, the p4p, and the RC and suddenly I could start the engines with the FlirOne turned on and plugged into the micro usb on the side of the bird. is there some way to run a script or shell command once the bird has completed its startup sequence?
[2018-06-23 03:12:44]
hostile :
there are some .sh files you can edit, but I don't think the technique to make them persist is public
[2018-06-24 21:50:27]
pawelsky :
Does anyone have closeup photos of the insides of Mavic Platinum camera (like the one for Mavic Pro attached)? I'm wondering if it would be enough to just replace the camera itself to fix the pixel-binning of Mavic Pro, or some camera related electronics inside the bird itself differs as well...
[2018-06-25 08:10:13]
ben_lin :
There is a gimbal/camera control board in the bird
[2018-06-25 08:10:36]
ben_lin :
The external camera housing only contains the sensor IIRC
[2018-06-26 05:21:21]
lolo780 :
@pawelsky cam is the same, it's the chip on core board that's new. A9 vs a9se
[2018-06-26 05:21:32]
lolo780 :
You need to upgrade core boards
[2018-06-26 11:26:45]
mefisto :
If you can, please take a photo of both sides of any board which is not already on the wiki:
<https://github.com/o-gs/dji-firmware-tools/wiki/DJI-Hardware>
[2018-06-26 12:48:38]
buundy :
okay!
[2018-06-26 14:35:15]
edisonbattery :
I get platinums in my shop every couple weeks. What exactly do you want photos of, I will get them for you.
[2018-06-26 14:43:14]
mefisto :
Bare circuits. Both sides. With chip markings visible, when possible. RF shields opened, when possible. Anything I don't already have on the wiki.
[2018-06-26 14:46:21]
buundy :
I can take pictures of spark parts, as they are open now on my desk
[2018-06-26 14:47:04]
mefisto :
please do.
[2018-06-26 15:18:05]
buundy :
I am uploading the pictures to wetransfer
[2018-06-26 15:18:11]
buundy :
just a few minutes
[2018-06-26 15:19:26]
buundy :
here they are: <https://we.tl/6EYM5ERhRd>
[2018-06-26 15:19:59]
buundy :
logic board without shields, gps module and front sensor boards
[2018-06-26 16:13:25]
mefisto :
Thank you! That's a nice SeaSpark.
[2018-06-26 16:45:38]
buundy :
Yesyes :) not worth repairing as it is burnt a bit
[2018-06-26 16:46:46]
buundy :
Tell me if i can delete from my machine or if you need other part's pictures
[2018-06-26 17:21:32]
mefisto :
If you have any other, I'll take them. Will put them on the wiki as soon as i'm able to photoshop them.
[2018-06-26 17:23:00]
mefisto :
I would especially use photos of ph4 the original.
[2018-06-26 18:07:46]
buundy :
I will take pics of ph4 noard
[2018-06-27 06:54:54]
buundy :
Do you have idea what would cause Camera sensor error and Air Encoder error both in the same Spark. It has a slight water damage, but I cleaned it thoroughly, and the logic board contacts and under the shield are clean. Tried with a whole new camera module, and the same error. Tried fw refresh, not solved the issue. I think the problem is with the logic board, but there is no visible sign of the damage. How can I query the modules if there is problem with them? comm_serialtalk.py can help maybe?
[2018-06-27 09:20:34]
mefisto :
The `comm_serialtalk.py` is a powerful tool, but it was published just 10 days ago:
<https://github.com/o-gs/dji-firmware-tools/commit/14f0f8ca1ccb6f930a4885090784173943028c18>
You're one of the first people who knows how to properly use it.
[2018-06-27 09:32:07]
buundy :
:slightly_smiling_face:
[2018-06-27 09:41:44]
ender :
not for me,worked with every device i treied…
[2018-07-02 12:38:47]
buundy :
@buundy uploaded a file: [I also attach it as an image](https://dji-rev.slack.com/files/UBD3QD1EC/FBHDTUUUA/p1110115.jpg)
[2018-07-02 14:16:04]
aciid :
Hi I've been absent from slack for a year almost. I'm inquirying for some basic information not in the wiki.
Are the GPIO pins on mavic addressable with DJI Assistant 2? I've seen the configuration page and it seems like it could work. My mavic is arriving tommorrow, so I'm just asking ahead. Talking about this screenshot. I'm interested in using +5V High/Low for example basic microcontrol control via GPIO
<https://www.rcgroups.com/forums/showatt.php?attachmentid=9786784>
[2018-07-02 14:34:31]
hostile :
try ~hardware
[2018-07-02 14:35:19]
jezzab :
:thinking_face:
[2018-07-02 14:36:27]
aciid :
@hostile this is ~hardware :3
[2018-07-02 14:41:26]
ender :
lol
[2018-07-02 14:43:02]
mefisto :
So A3 has 8 gpios? Nice. It is quite possible all FCs have it, the question is whether there is a path on pcb for it or is it just a loney ball under a chip.
[2018-07-02 14:45:15]
aciid :
@mefisto I remember seeing a picture of mavic motherboard that has corresponding pins
[2018-07-02 14:45:50]
hostile :
lol sorry slack client acting fucky!
[2018-07-02 14:46:08]
hostile :
I legit had ~general selected
[2018-07-02 14:48:08]
aciid :
if nobody finds boardviews / images of baords for now, ill take some tommorrow
[2018-07-02 14:48:14]
aciid :
didn't find them in wiki
[2018-07-02 15:06:45]
mefisto :
I will gladly accept any photos for the wiki.
[2018-07-02 15:07:54]
ender :
@aciid: if you use the USB OTG the Mavic will refuse to liftoff, you gotta patch stuff to change its mind :slightly_smiling_face:
[2018-07-02 15:13:29]
aciid :
@ender thanks going to keep that in mind. do you have information about the other onboard USB-does it have any functionality
[2018-07-02 15:14:03]
ender :
uhhh thats long ago, wasnt it access to the Ambarella chipset ?!
[2018-07-02 15:14:34]
ender :
(Sold my Pro, like my Air better)
[2018-07-02 15:16:42]
aciid :
I'm also interested in the Tello, it was 100€
[2018-07-02 15:17:01]
aciid :
for giggles
[2018-07-02 15:18:23]
hostile :
<https://github.com/MAVProxyUser/RyzeTelloFirmware>
[2018-07-02 15:18:29]
hostile :
notes in the readme
[2018-07-02 15:19:24]
aciid :
holy macaroni
[2018-07-02 15:33:59]
hostile :
you can use a goodfet to dump the SPI flash
[2018-07-04 20:58:05]
aciid :
chinese website had scraped the "blacked out" chip on internal sd-card and revealed chipname :open_mouth:
[2018-07-04 20:58:06]
aciid :
<https://i.imgur.com/orHqY5Y.png>
[2018-07-04 21:00:50]
aciid :
as you know the otherside of this board contains the dual IMU's. so this chip should have some pretty interesting code if someone hooks a programmer into the legs and dumps it
[2018-07-04 21:11:03]
hostile :
we knew its name for other reasons =]
[2018-07-04 21:11:04]
hostile :
nice find tho
[2018-07-04 21:13:44]
aciid :
@hostile for other reasons, but have you dumped it yet?
[2018-07-04 21:14:11]
aciid :
I'm interested honestly using IO ports that are visible in DJI assistant 2
[2018-07-04 21:15:12]
aciid :
I'm trying to find those ports. in DJIassistant gpio 1 was for "landing gear", gpio 2 was for fan. rest are unassigned
[2018-07-04 21:16:21]
aciid :
this page <https://devusa.djicdn.com/images/guides/HardSync_Assistant-1b056408b1.png>
[2018-07-04 21:21:45]
hostile :
we have the AES key
[2018-07-04 21:21:59]
hostile :
way easier to just reverse / unpack the firmware and use the key on the module
[2018-07-04 21:22:05]
hostile :
no need to get fancy with the hardware
[2018-07-04 21:22:24]
hostile :
ping @mefisto for help or @mathieu.peyrega
[2018-07-04 21:22:29]
mathieu.peyrega :
@mathieu.peyrega has joined the channel
[2018-07-04 21:22:52]
aciid :
I'm very interested
[2018-07-04 21:23:08]
aciid :
I have ton of projects for this bird in particular. but I've been missing out for a year now
[2018-07-04 21:26:06]
hostile :
@aciid start here <https://github.com/o-gs/dji-firmware-tools>
[2018-07-04 21:27:44]
aciid :
so the AES key is the only thing I cannot find here?
[2018-07-04 21:28:27]
hostile :
its built in to the above
[2018-07-04 21:28:30]
hostile :
I shared it publically
[2018-07-05 05:16:18]
mathieu.peyrega :
@aciid
[2018-07-05 05:16:27]
mathieu.peyrega :
@mathieu.peyrega uploaded a file: [Sans titre](https://dji-rev.slack.com/files/U84HERNVC/FBJF2D10Q/-.pl)
[2018-07-05 05:17:11]
mathieu.peyrega :
for Mavic, you do not need any steps on the bird as you can use image.py with got the correct PUEK to unsign MAvic / P4 / P4P
[2018-07-05 05:17:28]
mathieu.peyrega :
For Spark, you need to fo on the bird
[2018-07-05 06:10:44]
hostile :
@atlas
[2018-07-05 06:10:47]
atlas :
@atlas has joined the channel
[2018-07-05 16:28:12]
aciid :
does anyone have a 2018 method for working with mavic on the bench? like cooling upgrades? or do I just let the fan blow like making me deaf
[2018-07-05 17:04:31]
mefisto :
I once transferred 1gbit firmware through uart from ph3 gimbal. I had the board put on a block of ice. The transfer took circa 6 hours.
[2018-07-05 17:22:06]
aciid :
holy shit
[2018-07-05 20:38:42]
validat0r :
50kbit/s ??
[2018-07-05 20:39:30]
validat0r :
115200 didnt work?
[2018-07-05 23:42:37]
mefisto :
It was at 115200, via ymodem.
[2018-07-07 16:42:15]
mefisto :
I added wikis about boards within Ph4 to the project:
<https://github.com/o-gs/dji-firmware-tools/wiki/DJI-Hardware#phantom-4>
[2018-07-07 16:43:03]
aciid :
@mefisto mavic pro's gimbal/cam board is not on the table :confused:
[2018-07-07 16:46:15]
mefisto :
Yes; I don't have any good photos of these.
[2018-07-07 16:46:29]
aciid :
I have a DSLR Ill make one
[2018-07-07 16:46:50]
mefisto :
Would be great.
[2018-07-07 16:46:52]
aciid :
*unscrews board*
[2018-07-07 17:04:47]
aciid :
@mefisto I don't have wiki permissions, but heres the pictures
<https://i.imgur.com/9foLZoG.jpg>
<https://i.imgur.com/5hGJfKf.jpg>
[2018-07-07 17:07:33]
mefisto :
Thanks; will add.
[2018-07-07 17:25:57]
aciid :
<https://i.imgur.com/Iph8apx.jpg>
[2018-07-07 17:32:08]
buundy :
I was wondering what is the small connector on the left bottom side, maybe some diagnostic port?
[2018-07-07 17:32:47]
aciid :
I dont have a multimeter in the house at the moment, but I'd guess so
[2018-07-07 17:32:51]
aciid :
I can go get one from the garage
[2018-07-07 18:24:17]
aciid :
IMU backplate cleaned up pic found on a chinese blog <http://www.kanzhaji.com/wp-content/uploads/2017/04/D3.jpg>
[2018-07-07 18:24:30]
aciid :
or is that called fc
[2018-07-08 06:37:12]
aciid :
funny enough lvds connector on mavic has 14 pins which is common lvds pin count. has anyone tried connecting any other imaging devices to the mavic camera board?
[2018-07-08 07:35:00]
paulpaws :
@aciid mavic in acro mode, didnt know you can fly in full manual mode, when you have acro do you mean in full manual mode?
[2018-07-08 07:36:02]
aciid :
I was in full manual grrr
[2018-07-08 07:49:57]
paulpaws :
i c , how do you put into full manual mode?
[2018-07-08 08:18:39]
hans112 :
You can change some parameters for that
[2018-07-08 08:39:26]
mingtao :
Phantom 4 PRO V2.0
[2018-07-08 08:41:43]
mingtao :
@mingtao uploaded a file: [IMG_20180708_114043.jpg](https://dji-rev.slack.com/files/U602KGN9X/FBL1UV3UG/img_20180708_114043.jpg)
[2018-07-08 09:36:15]
paulpaws :
@d799700 care to share ?
[2018-07-08 11:12:48]
hans112 :
<https://dji.retroroms.info/howto/parameterhacks>
[2018-07-08 11:13:18]
hans112 :
First or second one (depends if you want it under your p or s button )
[2018-07-08 13:31:30]
aciid :
I'll tell you if you promise not to shit on me if you wreck it
[2018-07-08 13:32:32]
aciid :
hans's answer. is correct put control mode[1] to 0. and sure to check that control mode[2] is 7. == normal
[2018-07-08 13:34:17]
aciid :
I'll add to this, if you make flips eg. and your drone is going out of control.
Do not put it back to "normal" mode if it's near vertical tipping point. If you do this youll end up like me, IMU locks the drone upside down, and it comes down like a stone and it thinks its the right way up so it wont flip over
[2018-07-08 13:35:03]
aciid :
this IMU error can be seen in this linked timestamp <https://youtu.be/TX20tl_Vk-o?t=106>
[2018-07-08 13:35:25]
aciid :
in the video inspire flips for unknown reason and it wont turn right way up anymore since IMU thinks its ok
[2018-07-08 13:56:16]
hans112 :
Hehehe that is useful information ;)
[2018-07-08 14:06:38]
paulpaws :
Thanks hans
[2018-07-08 14:12:07]
hans112 :
Welcome. Have fun trying :grimacing:
[2018-07-08 18:41:15]
aciid :
<https://www.youtube.com/watch?v=vioiVWP47dA> full vide of the Inspire drone that went inverted and came down to ground
[2018-07-08 21:23:07]
aciid :
@mefisto <https://i.imgur.com/31pT7Bs.jpg>
<https://i.imgur.com/6Mt4F6o.jpg>
[2018-07-08 21:31:45]
mefisto :
Thanks @aciid, will add to wiki.
[2018-07-08 21:32:27]
aciid :
<https://i.imgur.com/do6CUEs.jpg> <https://i.imgur.com/v27PT23.jpg>
[2018-07-08 21:32:38]
aciid :
found this retangle thing inside the aluminium housing dont know what it is
[2018-07-08 21:35:21]
aciid :
this black thing is shutter
[2018-07-08 21:35:24]
aciid :
the rectangle
[2018-07-08 21:35:29]
aciid :
it had springs inside
[2018-07-08 21:37:54]
mefisto :
Maybe it is just for focusing? I don't think Mavics have mechanical shutter.
[2018-07-08 21:47:16]
aciid :
focus is better actually it moves the lense
[2018-07-08 21:47:22]
aciid :
it moves the barrel
[2018-07-09 05:40:35]
paulpaws :
look <https://www.engadget.com/2018/07/07/dji-mavic-2-leak/>
[2018-07-09 13:43:47]
aciid :
@doubleohasian holy crap I did it succesfuly <https://imgur.com/a/5AAPlIQ>
[2018-07-09 13:43:51]
doubleohasian :
@doubleohasian has joined the channel
[2018-07-09 13:51:20]
aciid :
And I failed <https://imgur.com/a/jBfnDDm>
[2018-07-09 13:51:59]
aciid :
Trying to find how to extract the camera without destroying the sensor
[2018-07-09 15:49:51]
aciid :
next new camera is coming later this week
[2018-07-09 15:50:13]
aciid :
going to buy a OTG cabel from a shop now so I have something to do atleast LOL
[2018-07-10 12:00:18]
fredmicrowave :
I was tired of lens fogging, and removed the camera board by carefully cutting the silicone compound around it with a fine scalpel blade (and microscope). The clearance around the board is just enough, and the glue is the only thing that hold it in place. Then I could push on the front glass from inside to remove it. No more fogging :stuck_out_tongue: .
[2018-07-10 12:48:47]
aciid :
@fredmicrowave thanks ill try that next time
[2018-07-11 01:29:39]
doubleohasian :
Great success! @aciid
[2018-07-13 06:45:03]
aciid :
what happens if you cut the VCC line from mavic RC usb-port? does it stop charging the phone connected. would it still work. probably my second mod
[2018-07-13 06:45:53]
mr.vibez :
I just disabale charging via an aoo
[2018-07-13 06:45:57]
mr.vibez :
*app
[2018-07-13 07:07:17]
aciid :
via an app on the phone?
[2018-07-13 07:07:36]
aciid :
not a possbility for me since I have a stock iphone
[2018-07-13 07:15:41]
ender :
That app only works on a few rooted phones, sad to say :disappointed:
[2018-07-13 07:15:59]
ender :
cutiing the VCC line does also break connection…
[2018-07-13 07:16:34]
ender :
you **could** insert a “well dimensioned” resistor to limit charge current.
[2018-07-13 07:21:04]
mathieu.peyrega :
may be you can first type making a custom cable where the line is cut at cable level and not straight i nthe MAvic RC ?
[2018-07-13 07:37:41]
ender :
Thats what was tried already Matioupi ?! Or which line to cut do you propose ?
[2018-07-13 07:38:06]
ender :
(btw also interesting for Anafi and many others as those RC’s also insist charging the Android device)
[2018-07-13 07:40:29]
mathieu.peyrega :
and don't you have a USB config choice in developper menu in your device ?
[2018-07-13 07:40:45]
mathieu.peyrega :
On mines, i activate developper settings (7 tap on build number)
[2018-07-13 07:40:53]
ender :
doesnt change anything.
[2018-07-13 07:41:06]
mathieu.peyrega :
then on the menu there is a USB config settign wher eI can select charge or MTP etc... ?
[2018-07-13 07:41:11]
mathieu.peyrega :
ok did not realized it :slightly_smiling_face:
[2018-07-13 07:41:21]
ender :
yeah Matioupi, i know the drill, been there since Androis 2.x :slightly_smiling_face:
[2018-07-13 07:41:39]
ender :
(because i like Windows CE betterthen Android 1 :slightly_smiling_face: )
[2018-07-13 07:42:31]
mathieu.peyrega :
I actually never noticed that the RC was charging the phone... I have to check that :slightly_smiling_face:
[2018-07-13 07:43:07]
ender :
:wink: not on iOS as the USB plug does not carry the mighty Apple credentials :slightly_smiling_face:
[2018-07-13 07:43:20]
mathieu.peyrega :
i'm on Android only
[2018-07-13 07:43:27]
ender :
good guy
[2018-07-13 07:43:30]
mathieu.peyrega :
lol
[2018-07-13 07:43:43]
mathieu.peyrega :
i'm not sectarian :slightly_smiling_face:
[2018-07-13 07:43:45]
ender :
need iCrap for work as many silly people got the money :stuck_out_tongue:
[2018-07-13 07:45:35]
ender :
but as we brought that up, lets see if my rooted P20 Pro is one of the rare phones compatible with those “dont charge” apps. right now my counter is that 5/5 do not change charging behaviour by those apps (or setprops for that matter)
[2018-07-13 07:47:14]
mathieu.peyrega :
could it be that the charing current limit resistor is already integrated in RC by DJI ?
[2018-07-13 07:47:26]
mathieu.peyrega :
did someone gave a look to amps going there ?
[2018-07-13 07:48:14]
mathieu.peyrega :
I have a small USB like this : <https://www.adafruit.com/product/1852>
[2018-07-13 07:48:18]
mathieu.peyrega :
will give a try
[2018-07-13 07:50:47]
rickysuper :
My Samsung Note8 only lost about 10% battery power after 3-4 flying cycles. The RC can only last for 5 flying cycles and will drop to only one power LED left. Mavic Air.
[2018-07-13 07:53:10]
ender :
@mathieu.peyrega: of course there IS a current limiter in the RC, dont want to push 20A over the tiny cable :slightly_smiling_face: But i was speaking about additional limiter. But it will degrade the signal and of course decrease VCC so its a strange game and will result in no/flaky conection depending on devices & SOC’s.
[2018-07-13 07:53:33]
ender :
BUT the good news, i found an APp that works for the P20 Pro :slightly_smiling_face:
[2018-07-13 07:53:41]
mathieu.peyrega :
I undertand that, USB standad is 500mA or 1A don't remember
[2018-07-13 07:53:53]
ender :
500 but RC charges higher
[2018-07-13 07:54:07]
ender :
The App working on the P20 Pro Is called “Battery charge limit”.
[2018-07-13 07:54:11]
mathieu.peyrega :
and they don't have the tiny thunder icon !
[2018-07-13 07:54:22]
mathieu.peyrega :
is this USB norm compliant :slightly_smiling_face: ?
[2018-07-13 07:55:26]
ender :
That App has smart settings. : Dont charge beyond XX percentage (set it to the allowed max = 40% AND dont start charging below XX percent, set it to 16%, so right before the pesky 15% Android warning comes up.
[2018-07-13 07:55:45]
ender :
So it WILL charge before your phone goes to limbo but not if its quite charged.
[2018-07-13 07:56:14]
mathieu.peyrega :
mod may be a kind of "Y" cable with a small external battery charging Phone AND RC ?
[2018-07-13 07:56:25]
ender :
Yes Matioupi that was done and works
[2018-07-13 07:56:35]
mathieu.peyrega :
shit, reinvented wheel again...
[2018-07-13 07:56:41]
mathieu.peyrega :
was born too late
[2018-07-13 07:56:51]
ender :
BUT listen up, try that up with rooted phone, maybe it has a higher hit rate or i am just lucky with the Huawei.
[2018-07-13 07:57:45]
ender :
@mathieu.peyrega, i know the feeling, on a boat Trip with my Grandpa i “invented” electronic stuff and when we had landfall i started checking to find that all existed (was 12 then) . UNHAPPY :slightly_smiling_face:
[2018-07-13 16:47:17]
mathieu.peyrega :
I just check and the phone draws about 450-460 mA from the Mavic RC...
[2018-07-13 16:47:24]
mathieu.peyrega :
I need to check with CrystalSky too
[2018-07-13 16:49:15]
mathieu.peyrega :
with CS 0.00amps...
[2018-07-13 20:12:48]
mathieu.peyrega :
this is why I never notice it... I actually almost never fly with phone...
[2018-07-15 13:44:15]
dkovar :
<https://dji-rev.slack.com/archives/C64R5L1HN/p1531468574000045>
I am trying an external battery connected to my RC via the normal USB port and the phone connected to the RC via the smaller port. Hopefully this will work. I fly a lot of missions in a row, often away from my vehicle, and power management is a huge issue.
[2018-07-15 14:26:12]
aciid :
Does that kind of charging work?
[2018-07-16 12:34:14]
kilrah :
no. a normal host usb port doesn't accept an input.
[2018-07-16 23:45:27]
fredmicrowave :
PC Usb standard is 1A and iphone will limit charging current to 1A, independently of power supply capacity of course. Current limit is set by the phone, not the supply.
[2018-07-17 11:36:24]
paulpaws :
Thanks
[2018-07-19 12:23:26]
aciid :
@aciid uploaded a file: [Night IR mavic 800mW 5.8ghz](https://dji-rev.slack.com/files/U6AD6A1QU/FBT82N7AP/image_from_ios.jpg)
[2018-07-19 13:06:11]
d95gas :
Interesting little project that.
[2018-07-19 13:50:12]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBTHR8TAR/image_from_ios.jpg)
[2018-07-19 14:26:40]
d95gas :
i Like :thumbsup_all:
[2018-07-19 20:17:30]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBTJHBNSF/image_from_ios.jpg)
[2018-07-19 21:10:34]
aciid :
@aciid uploaded a file: [Midnight](https://dji-rev.slack.com/files/U6AD6A1QU/FBV3G1T4N/image_from_ios.jpg)
[2018-07-19 21:19:46]
quad808 :
Very cool!
[2018-07-19 21:22:04]
aciid :
total price ~100€
[2018-07-19 21:24:39]
aciid :
parts used (no referral links)
<https://www.aliexpress.com/item/AKK-X2-5-8Ghz-40CH-0-01mW-25mW-200mW-500mW-800mW-Switchable-FPV-Transmitter-Compatible-with/32835446944.html>
<https://www.aliexpress.com/item/NEW-RunCam-Night-Eagle-2-PRO-1-1-8-CMOS-2-5mm-800TVL-0-00001-LUX/32836326367.html>
<https://www.aliexpress.com/item/SkyRC-4-3-LCD-5-8G-40Ch-FPV-Monitor-2-In-1-Wireless-Receiver-for-RC/32829100512.html>
[2018-07-19 21:38:08]
adrian :
GG dude!
[2018-07-19 21:47:28]
aciid :
thanks! i love the community here!
[2018-07-19 22:05:52]
flydji :
whats the video range with this setup? is power from mavic battery?
[2018-07-19 22:08:16]
aciid :
yeah im powering it from my mavic. the transmitters maxinum power output is 800mW so it works for probably for 1-2 km in city conditions. depending on antennas
[2018-07-19 22:08:27]
aciid :
my display is utter shit with a shitty antenna
[2018-07-19 22:08:44]
aciid :
the transmitter is rated for ~4km with max power.
[2018-07-19 22:09:05]
aciid :
there is a 1200mW version also in aliexpress
[2018-07-19 22:09:43]
flydji :
very nice!
[2018-07-19 22:10:49]
aciid :
ive seen youtube guys with budget rigs using the transmitter for 1.5km with reliable picture.
[2018-07-19 22:11:02]
aciid :
have to remember that this transmitter and runcam = 100€
[2018-07-19 22:11:14]
aciid :
can't get cheap and good quality to be like 10km :smile:
[2018-07-19 22:11:20]
aciid :
but I love the quality already
[2018-07-19 22:13:28]
flydji :
wich pins do i need to get mavics battery power?
[2018-07-19 22:19:26]
aciid :
mavic facing away from you
[4pins NEGATIVE] [4pins POSITIVE] [2pins DATA]
[2018-07-19 22:20:13]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBTHBR2Q4/image_from_ios.jpg)
[2018-07-19 22:20:20]
aciid :
used a resistor leg made into a loop that I fitted on the pin
[2018-07-19 22:20:23]
aciid :
worked perfectly
[2018-07-19 22:22:53]
aciid :
bring back the ~hardware mods
[2018-07-19 22:22:58]
aciid :
I want to see more
[2018-07-19 22:23:18]
aciid :
I mean I want to see people joining in to break things
[2018-07-19 22:40:38]
flydji :
thanks! so number 2 and 5. think i will join breaking things ;-). but at first, i need a boring battery mod... like this clip mod available
[2018-07-19 22:47:44]
aciid :
commercial clip mod is the greatest scam ever
[2018-07-19 22:47:58]
aciid :
its so expensive that it should be a federal crime to sell a piece of metal for that price
[2018-07-19 22:53:57]
flydji :
does it work like it should? think i will build my own...
[2018-07-19 22:56:06]
aciid :
yes it does?
[2018-07-19 22:56:19]
aciid :
did you see the pictures above with the camera attached lol
[2018-07-19 22:57:07]
aciid :
last year the croocks behind the battery clip "INVENTION" were bullying each other that they own a pattent pending application to that piece of metal
[2018-07-19 22:57:14]
aciid :
its ridicilous
[2018-07-19 22:57:38]
aciid :
and they sell it for something like $49
[2018-07-19 23:06:19]
flydji :
agree! better take 2 lihv's for the money... and have some fun modding by yourself
[2018-07-19 23:11:53]
aciid :
xD
[2018-07-19 23:11:53]
aciid :
paperclips ftw
[2018-07-20 00:13:30]
digdat0 :
i had this pic of the battery pinout .. not sure where i found it.
[2018-07-20 00:13:30]
digdat0 :
<https://i.imgur.com/zOSQ85r.png>
[2018-07-20 00:13:48]
digdat0 :
<https://i.imgur.com/zOSQ85r.png>
[2018-07-20 01:49:40]
makingthisnameup :
So awesome
[2018-07-20 05:39:46]
mingtao :
shit ... first and last pins are SMBUS line (uart) .. does not matter how many voltage on this pins
[2018-07-20 09:23:58]
aciid :
<https://www.aliexpress.com/item/DJI-Compass-Error-Fixer-Fix-Your-Compass-Error-Cfixer-for-RC-Drone-DJI-Mavic-Air-Pro/32836706266.html>?
[2018-07-20 09:24:09]
aciid :
does anyone know how this is made?
[2018-07-20 10:46:38]
mefisto :
Electromagnet. Eother alternating field or pulses.
[2018-07-20 13:03:04]
fredmicrowave :
Yes, same principle as TV degaussing. A rotating magnet can also do the trick, or just holding one by hand if you are very careful and can read data at the same time...
[2018-07-20 13:19:47]
fredmicrowave :
Fwiw : Replacement of the 5v regulator in the MP.
Failed ( apparently) after a cap ( on the other side of the PCB) got shorted ( water damage).
[2018-07-20 14:46:38]
mefisto :
The crater almost looks like unusually big pin-1 marking.
[2018-07-22 14:10:05]
martinbogo :
Hey all! I’m back :slightly_smiling_face:
[2018-07-22 14:10:34]
martinbogo :
New job, so I had to step away from dji-rev-eng for a while ( almost 6 months now )
[2018-07-22 14:44:21]
d95gas :
Welcome back buddy..... As you will no doubt have seen there has been lots happening, and of course the OG still have more tricks up their sleeve (I think), NLD is now well developed and proving to be a hit.
[2018-07-23 01:00:40]
umbr4 :
open ocusync lives I hope
[2018-07-23 08:43:33]
ender :
hi :slightly_smiling_face:
[2018-07-23 09:26:03]
cs2000 :
Since it was done at his old work, i assume that info is their property, so likely cant be released. Standard procedure is everything you make during work time (work related or not) is property of your employer, but this can be negotiated i guess.
[2018-07-23 10:43:36]
aciid :
long shot, but does anyone on this server have a BEEPROG2 with BGA67 NAND adapter? :smile: I'm contemplating on reflowing Parrot's new drone so we can modify the firmware on board. Programmer costs 999€ and the adapter 572€ E:E
this programmer and adapter works for just about any chipset. (next target autel evo drone? )
[2018-07-23 16:34:29]
martinbogo :
Worse — There was a settlement, and it prohibits me from even -peeking- at DJI’s protocols.
[2018-07-23 16:35:06]
martinbogo :
Programmer? Yes. The BGA67 adapter? Nope.
[2018-07-23 16:35:20]
martinbogo :
And since I’m in the US… probably not a huge help :slightly_smiling_face:
[2018-07-24 16:35:22]
aciid :
@aciid uploaded a file: [MP beaconing when RC is not turned on yet](https://dji-rev.slack.com/files/U6AD6A1QU/FBW04DAMR/image.png)
[2018-07-24 17:45:05]
buundy :
What does this pic mean? It is an rf scanner or something like that?
[2018-07-24 17:46:47]
mathieu.peyrega :
I think @aciid got shares at greatscottgadgets :slightly_smiling_face:
[2018-07-24 17:47:09]
mathieu.peyrega :
this is a waterfall view of the RF emissions of the Mavic Pro
[2018-07-24 17:47:31]
mathieu.peyrega :
timeline is "vertical axis" increasing torward bottom
[2018-07-24 17:47:44]
mathieu.peyrega :
frequency line is horizontal axis, center in the middle
[2018-07-24 17:47:52]
mathieu.peyrega :
and color is intensity of signal
[2018-07-24 17:48:58]
aciid :
it's fun to see that Mavic bird is client to the RC it looks,
instead Anafi bird hosts the accesspoint :smile:
[2018-07-24 17:49:32]
nocommie :
I have been trying to use my HackRF and my RF Explorer to see the output of my MP TX to troubleshoot come range issues but have not had any luck. Basically I don't see much, if anything on the analyzer with the TX only powered on. Once I power on the MP I get a lot of response but am not able to discern what is from the TX or MP. Any advice appreciated.
[2018-07-24 17:50:18]
mathieu.peyrega :
do you make a direct cable conexion or throught an antenna ?
[2018-07-24 17:50:36]
aciid :
also do you have correct antenna for frequency
[2018-07-24 17:50:46]
mathieu.peyrega :
direct cable connexion would require an attenuator
[2018-07-24 17:52:31]
nocommie :
Well I have a 10db attenuator but was planning on just doing an RF test as opposed to cable. Yes, correct freq but using generic antenna. However, like I said, I get plenty of data when the MP is on so I don't think the freq or antennas are the issue. Perhaps the TX must first link to the MP to get the channel info etc before it starts transmitting?
[2018-07-24 17:53:26]
aciid :
you can't find bird at all with hackrf?
[2018-07-24 17:53:49]
aciid :
oh you are trying to solve TX from bird
[2018-07-24 17:53:51]
aciid :
now I get it
[2018-07-24 17:53:55]
aciid :
hmm
[2018-07-24 17:54:21]
aciid :
you could probably shield your RC
[2018-07-24 17:54:32]
aciid :
that way you get less signal, and it's still connected
[2018-07-24 17:54:42]
aciid :
or direct cable as @mathieu.peyrega suggested
[2018-07-24 19:35:02]
jan2642 :
10 db attenuation might not be enough though.. more info here: <https://en.m.wikipedia.org/wiki/Free-space_path_loss>
[2018-07-24 19:36:50]
jan2642 :
And don’t forget a DC block!
[2018-07-24 21:58:29]
validat0r :
are the mavic/spark intel. batteries "balanced"? if so, how is this achieved? internally by the inner workings of the intel. bat, or externally by the charger?
[2018-07-24 22:04:40]
aciid :
the charger has a circuit for that, the side pins on the battery connector are data-lanes
[2018-07-24 22:05:56]
aciid :
if your batteries start to discharge unevenly. empty the battery and charge it for ~6hours
[2018-07-24 22:06:16]
validat0r :
hmm .. i know .. its data-gnd-acc-acc-gnd-data
[2018-07-24 22:09:24]
validat0r :
at least for spark intel. bats.. do mavic bats have more pins?
[2018-07-24 22:09:53]
validat0r :
looks like 10
[2018-07-25 00:16:36]
nocommie :
So I just received a new/used controller and my range is fine now. Something must be amiss with my original controller. I did add a Titan amp to it, installed the quick disconnect plugs in place of the stock antennas, but that was like 6 months ago. I have been using the amp and rubber duck antennas for awhile with no issues. One thing that comes to mind however: The amp came with one RHCP and one LHCP antenna installed. I changed the LHCP to a RHCP to be more compatible with my Disco. I am wondering if the 2.5 watts of power on 2 antennas that close, with the same polarization may have sent too much power into the adjacent antenna and caused it to damage the TX. I changed it back to LHCP but it didn't make a difference. Well, at least I have an extra controller to play around with. I guess I will reflash it, then open it up and start testing stuff.
[2018-07-25 00:17:40]
aciid :
this is the context we were talking about earlier? SDR stuff?
[2018-07-25 00:18:08]
aciid :
you could verify that better with a antenna tester
[2018-07-25 00:18:12]
aciid :
if you can loan/buy one
[2018-07-25 00:21:03]
aciid :
<https://www.eham.net/ehamforum/smf/index.php?topic=112912.0>
[2018-07-25 00:21:42]
aciid :
that is cheap compared to professional devices go for $400+
[2018-07-25 00:25:36]
nocommie :
I have a HackRF and RF explorer. It just seems that testing the controller alone, without it connected to the Mavic, doesn't show actual output. I just tested with the "good" TX and it does the same thing. I think it need to be communicating with the MP to actually ramp up its RF output. I suppose a cabled, direct connection is the only way to test. Not really interested in testing that way with the additional hazards. I just don't have the correct attenuatiors, DC block etc.
[2018-07-25 00:28:27]
nocommie :
Yeah, I would be interested to know the actual communications steps that happen when they are powered on etc.
[2018-07-25 05:32:40]
mathieu.peyrega :
RDV around 11:00 UTC : <https://ariane.cnes.fr/fr/direct-lancement-dariane-5-galileo-le-25072018>
[2018-07-25 10:20:42]
mefisto :
@aciid Chargers of DJI drones are just ordinary switching regulators which always output the same voltage. Data pins in batteries are only used for flying, not for charging.
It is easy to verify that by looking at the third party chargers - those with attachable cables have 2-pin connector on the charger side.
[2018-07-25 10:21:25]
mefisto :
Balancer circuit is inside the dji batteries.
[2018-07-25 10:22:09]
jezzab :
the charging chip is actually very smart
[2018-07-25 10:22:18]
jezzab :
it balances, holds the capacities, calibrations ans cell type etc
[2018-07-25 10:23:25]
jezzab :
Dev board using that chip: <http://www.ti.com/lit/ug/sluu516/sluu516.pdf>
[2018-07-25 10:24:18]
jezzab :
The long range guys should invest in a EV2300 or EV2400 :wink:
[2018-07-25 15:23:42]
fredmicrowave :
Be careful, the power supply for Mavic is (and must be) current limited to 6~7amps ... Never use a higher current or battery to directly charge a Mavic battery...
[2018-07-25 15:32:12]
ender :
doesnt the charge circuit care for that ? I would think so
[2018-07-25 15:56:10]
fredmicrowave :
It would make sense, but it doens´t . The maximum charging rate ( the speed at witch the battery will get fully chraged) is in great part determined by the power supply max current (up to 6-7A max, afaik...)
If you connect it directly to a higher current supply, you get a short high intensity spike, then some protection circuit in the battery kicks in.
[2018-07-25 15:58:01]
validat0r :
irreversibly?
[2018-07-25 15:58:46]
validat0r :
like a fuse?
[2018-07-25 16:01:02]
fredmicrowave :
No. Some electronic protection, resets by itself, but i would avoid using it too much .
Here is some info and stuff i made about Mavic charger:
<https://multicopterpilots.com/forums/showthread.php?t=2429&p=10842&viewfull=1#post10842>
[2018-07-26 08:53:55]
buundy :
do you guys have any idea on how to revive a dead phantom 3 pro gimbal upper board? after a firmware upgrade it is partially dead. I can control the gimbal with the transmitter, but the LED on the front of the control board doesn’t light up wit hany color, and tx says no image transmiassion signal, and also I cannot reinstall the firmware as it seems it cannot read the sd card. maybe there is some hardware solution for this?
[2018-07-26 08:58:32]
mefisto :
@buundy if there is no light then Ambarella is not booting. I never tried fixing that. Probably requires nand reflash, but flashing docs are not public. It is probably similar to A7 though, and A7 docs are public and easy to find.
[2018-07-26 08:58:32]
buundy :
i dont see any damage on the board
[2018-07-26 08:59:04]
buundy :
it is beyond my tools and knowledge unfortunately :disappointed:
[2018-07-26 08:59:58]
mefisto :
Try soldering ftdi to U0 test pads. Maybe will show something.
[2018-07-26 09:01:32]
mefisto :
There is probably a way to reflash via serial or usb, we just don't know it.
[2018-07-26 09:02:02]
buundy :
@buundy uploaded a file: [/](https://dji-rev.slack.com/files/UBD3QD1EC/FBXEG68DT/image_from_ios.jpg)
[2018-07-26 09:02:12]
buundy :
The circular pads?
[2018-07-26 09:17:39]
mefisto :
Yes, those are test pads / service pads. Used for automated testing during production. You can sometimes see a small hole in them from the probes which were used to test the board.
[2018-07-26 09:17:41]
mefisto :
<https://github.com/o-gs/dji-firmware-tools/wiki/WM320-Gimbal-top-board#service-interfaces>
[2018-07-26 09:29:27]
aciid :
What kind of a chip is best to use for reading? I used a Saleae logic to read Parrot Anafi pads, got Ambarella boot from the pads and linux boot from the second set.
but once I tried using a "serial reader" it doesnt show up with any bandwiths :confused:
[2018-07-26 09:30:04]
aciid :
the way logic read it to CSV was one character per row :smile: so its kinda hard to read
[2018-07-26 09:32:35]
mefisto :
I only use standard USB-to-TTL chips from china; you can see them in my DUML capturing setup:
<https://github.com/o-gs/dji-firmware-tools/issues/77>
[2018-07-26 09:33:35]
mefisto :
For reading linux-based chips (Ambarella and DaVinci) I always try to jus hook a pendrive to the USB; but if this isn't available, I use ymodem transfer via serial.
[2018-07-26 09:34:56]
mefisto :
If you meant reading theNAND directly - I never tried that.
[2018-07-26 09:35:04]
buundy :
I have the same ttl adapter
[2018-07-26 09:37:36]
aciid :
yeah makes sense that my serial adapter wont work then if its "waiting for something"
[2018-07-26 09:37:52]
aciid :
I think I have one of those chips in my SoC header collection
[2018-07-26 11:48:10]
aciid :
Ahh a new mavic 4K camera spare just arrived third try on removing IR
[2018-07-26 11:54:37]
aciid :
@aciid uploaded a file: [Trying to cut a notch](https://dji-rev.slack.com/files/U6AD6A1QU/FBX8WHK0T/image_from_ios.jpg)
[2018-07-26 12:36:02]
aciid :
@aciid uploaded a file: [Extracted without visible damage](https://dji-rev.slack.com/files/U6AD6A1QU/FBXHJFGJ1/image_from_ios.jpg)
[2018-07-26 12:56:51]
ender :
aciid, what are you trying to do ? Shoot those artistix “no IR Filter” Images or Images that show the state of plants or attach a IR LED array and have a nighthawk ?
[2018-07-26 12:59:11]
aciid :
Nighthawk
[2018-07-26 12:59:51]
ender :
Thought so :slightly_smiling_face:
[2018-07-26 13:00:12]
ender :
destroyed 2 Bebop cams wanting to do so :slightly_smiling_face:
[2018-07-26 13:00:26]
ender :
well they WERE damaged before so not soooo much loss
[2018-07-26 13:02:13]
aciid :
@aciid uploaded a file: [Success sensor is intact](https://dji-rev.slack.com/files/U6AD6A1QU/FBXDWR77C/image_from_ios.jpg)
[2018-07-26 13:04:19]
ender :
yihaaa
[2018-07-26 13:07:57]
aciid :
Do i dare to try this
[2018-07-26 13:08:16]
aciid :
I guess with a additionaö lvds, im not taking that gimbal apart
[2018-07-26 13:25:54]
buundy :
so I tried with another P3P board, 368U0TX and RX works, and it boots the same way
but I think I am not doing something right with the U0 TX and RX ports as they don’t boot on this board also
maybe they are defective the same way?
also the LED doesn’t light up
I supply 12V to the board
[2018-07-26 13:26:28]
buundy :
anyone has experience with diagnosing P3P gimbal board “deadness”? :slightly_smiling_face:
[2018-07-26 13:26:37]
aciid :
do you get voltage from U0 pins?
[2018-07-26 13:27:55]
buundy :
U0_R I get 2,97V
[2018-07-26 13:27:59]
buundy :
I dont have a scope
[2018-07-26 13:28:29]
buundy :
on U0_T I dont get any voltage
[2018-07-26 13:29:02]
aciid :
GND + TX pin should get voltage
[2018-07-26 13:29:35]
buundy :
check that again
[2018-07-26 13:30:23]
buundy :
3.31V
[2018-07-26 13:30:46]
aciid :
so it probably boots but your serial device wont catch it
[2018-07-26 13:30:46]
buundy :
there seems to be voltage
[2018-07-26 13:30:51]
aciid :
just like in ine
[2018-07-26 13:30:53]
aciid :
mine
[2018-07-26 13:30:56]
aciid :
Parrot Anafi
[2018-07-26 13:31:18]
buundy :
if I try it with 368U0TX and RX it works and I can see the DaVinci booting up
[2018-07-26 13:31:19]
aciid :
i used a logic analyzer to catch the output
[2018-07-26 13:31:37]
aciid :
the serial usb thing didn't just detect anything
[2018-07-26 13:32:32]
buundy :
hmm
[2018-07-26 13:33:10]
buundy :
but is it possible that my usb detects the 368_U0 and it cannot detect the U0
[2018-07-26 13:33:36]
aciid :
i don't know about p3 specifically someone else probably can confirm your findings
[2018-07-26 13:33:45]
aciid :
i dont know about any phantoms
[2018-07-27 06:32:30]
buundy :
I tried the p3p with the other board and it worked flawlessly, i could update its firmware
[2018-07-27 06:33:53]
buundy :
So i dont know what could be wrong with the other board
[2018-07-27 06:34:21]
buundy :
Both board's davinci was booting equally
[2018-07-27 06:34:56]
buundy :
And I couldnt see the booting of the ambarella on any of them
[2018-07-27 06:35:08]
buundy :
But one was working well
[2018-07-27 06:35:44]
buundy :
Other is partially dead, no led light, no image transmission, tried with the same gimbal module
[2018-07-27 06:36:33]
buundy :
I tested the voltages on the dead board and it it got the 12V, all other volages were present on the test points
[2018-07-27 07:26:32]
mefisto :
Well that is interesting.. so maybe the U0 interface needs to be enabled somehow? I never tried connecting to it; the logs on my wiki I got from @mingtao :
<https://github.com/o-gs/dji-firmware-tools/wiki/Firmware-m0100#debug-serial-interface-u0>
[2018-07-27 08:14:11]
buundy :
yes, I see that it should “talk”
[2018-07-27 08:14:40]
buundy :
but if I connect to the ttl interface, all I get is a . (dot) in the console, in hex I think it is 00
[2018-07-27 08:14:53]
buundy :
and if I disconnect I also get another dot
[2018-07-27 08:15:10]
buundy :
maybe it is just a noise as I connect the interface
[2018-07-27 08:38:01]
jezzab :
Is it a 3V3, 5V0 or xxx TTL?
[2018-07-27 08:38:33]
buundy :
I tried to supply power to the board externally throught the 12V pin
[2018-07-27 08:38:43]
buundy :
and of course I also tried 5V, and 3V3
[2018-07-27 08:39:05]
buundy :
but generally supplying 12V also powered everything I think
[2018-07-27 08:40:31]
mefisto :
Yes, probably it is just noise.
[2018-07-27 08:53:58]
jezzab :
Some of those TTL USB Converters the RX and TX pins are inverted. But you probably tried that
[2018-07-27 08:58:06]
jezzab :
Was it you that said you have a Saleae?
[2018-07-27 08:58:15]
aciid :
I have one
[2018-07-27 08:58:27]
jezzab :
Ah its was you. Nvm
[2018-07-27 08:58:51]
aciid :
y sorry, but I had a problem too. saleae gets serial output. but none ofthe tested USB TTL FTDI adapters dont. is there a adapter that doesn't require "handshake" to just print shit
[2018-07-27 08:59:49]
jezzab :
Sounds like it's a lower voltage. I remember someone mentioned a Mavic UART was 1V8 or something like that
[2018-07-27 09:00:03]
aciid :
so I need a stepup chipset logic convert
[2018-07-27 09:00:09]
aciid :
thanks, wil ltry that
[2018-07-27 09:00:46]
jezzab :
Think it was @martinbogo a long time ago
[2018-07-27 09:01:15]
aciid :
last time I used one of those was with xbox 360. you needed to stepup voltage ocmmunicate with the DVD-drive strange times
[2018-07-27 09:02:41]
mefisto :
wow.. 1V8 UART.. I don't have any reader for that either.
[2018-07-27 09:02:55]
mefisto :
In Ph3, all uarts are 3.3V.
[2018-07-27 09:03:06]
jezzab :
It was a weird voltage from the norm
[2018-07-27 09:03:08]
aciid :
Theres voltage tho from earlier
[2018-07-27 09:03:20]
jezzab :
Hmm
[2018-07-27 09:03:49]
jezzab :
I dunno. Just if a 3V3/5V0 TTL won't pick it up and Saleae will, it kinda seems that way
[2018-07-27 09:17:23]
mefisto :
Here is a conversation with someone who connected to the Ambarella U0 interface; he did not mention anything more needed to get access to it:
<https://github.com/o-gs/dji-firmware-tools/issues/65#issuecomment-357506338>
[2018-07-27 09:39:55]
aciid :
Interesting
[2018-07-27 19:45:58]
martinbogo :
mefisto : You can use a level shifter.
[2018-07-27 19:46:25]
martinbogo :
mefisto : I just went ahead and bought an USB serial cable with 1.8v though … ended up being easier
[2018-07-27 19:47:00]
martinbogo :
@jezzab: Saleae logic 16+ will do it, but you need to be suuuuper careful that you don’t have any noise on the line
[2018-07-27 20:17:01]
mefisto :
thanks @martinbogo
[2018-07-27 22:23:49]
jan2642 :
@mefisto the RX of a 3V3 TTL should pick up the 1V8 TX just fine. The TX of the 3V3 can be lowered to 1V65 by a voltage divider of 2 identical resistors.
[2018-07-31 23:06:05]
aciid :
@sami.keskinen
[2018-07-31 23:06:07]
sami.keskinen :
@sami.keskinen has joined the channel
[2018-08-01 12:52:42]
validat0r :
<https://dji-rev.slack.com/archives/C64R5L1HN/p1532532222000097>
[2018-08-01 13:05:46]
buundy :
thx
[2018-08-05 22:16:19]
aciid :
<https://www.banggood.com/search/ruideng.html> interesting lab power stuff
[2018-08-06 02:41:19]
flystraightcircles :
Hi! Anyone tried to make 1 good Mavic Pro gimbal arm out of several broken ones? Is there a way to disassemble and reassemble the arm?
[2018-08-06 05:00:45]
aciid :
@flystraightcircles I think they are one injectionmold castings. So that to me sounds "not feasible". also there dynamic forces pplied could be too high for anything other than ultrasonic bonding or using corrosive chemicals to bond the plastics together
[2018-08-06 05:02:10]
aciid :
the arm's are ~9euros without the motor in aliexpress, free shipping. if you need one. but it's a great project to try if you want to make one from scraps. I saw a video of a guy who made 4blade props from mavic props with epoxy
[2018-08-06 05:29:03]
lolo780 :
Just buy a new one. Speaking from experience it's not worth the time.
[2018-08-06 07:40:26]
buundy :
+1
[2018-08-06 16:54:04]
flystraightcircles :
It's not about the cost... it's the waiting for a new one ... at least 2 weeks... I was hoping someone managed this already.
[2018-08-06 20:57:07]
lolo780 :
Oh, do you mean taking each axis apart? I've only seen them wobbling from crash damage, never tried to take apart.
In the mean time you could run the gimbal unpowered and still get decent daytime pictures and video.
[2018-08-08 07:22:28]
buundy :
has anyone tried to repair a not charging P4 remote? it is a widespread issue, and reflowing some parts of the board fixes the problem temporarily
[2018-08-08 07:22:37]
buundy :
<https://forum.dji.com/thread-116313-1-1.html>
[2018-08-08 07:23:21]
buundy :
I repaired some of the controllers with this method, but I want a better solution. Do anyone have schematics or deeper diagnostic knowledge of this problem?
[2018-08-08 09:20:43]
buundy :
Another thing:
[2018-08-08 09:20:48]
buundy :
the problem I try to solve is that if I change the top gimbal controller board in the mavic, when I switch on the AC the gimbal acts a little strange (twitches when doing its initialization dance) but then it finds its stable position. I suspect that somehow the top board is linked to the gimbal mechanics, as if I change only the camera module or the cables this does not happen. only if I change the 3 axis gimbal mechanics the strange behaviour starts. so I think they are paired
[2018-08-08 09:33:28]
aciid :
It's not linked, but it's different hardware revision than the camera
[2018-08-08 09:33:45]
aciid :
AC needs t be firmware upgraded immidiately if you change something likethat
[2018-08-09 12:30:12]
buundy :
@aciid I tried firmware refresh after changing the gimbal mechanism and it didn’t help
[2018-08-09 12:30:33]
buundy :
so I think they are paired somehow with the top board in the factory
[2018-08-09 12:33:06]
aciid :
@buundy if this is MP? I changed my gimbal recently. bought a 60dollar gimbal+camera combo from aliexpress, didnt change controller board.
[2018-08-09 12:53:09]
buundy :
it is luck then :slightly_smiling_face:
[2018-08-09 12:53:16]
buundy :
I changed lots of them
[2018-08-09 12:53:20]
buundy :
MP
[2018-08-09 12:53:23]
the_lord :
did you try spark repair tool?
[2018-08-09 12:53:28]
buundy :
yesyes
[2018-08-09 12:53:57]
buundy :
consulted with @mefisto and he says it works with SPARK and MA
[2018-08-09 12:54:15]
buundy :
I tried it with MP but no relevant response from the AC
[2018-08-09 12:55:03]
the_lord :
yes no sign on MP during the repair and the app failed but then the problem solved
[2018-08-09 12:55:42]
will042082 :
What’s the spark repair tool? Back to the wiki!
[2018-08-09 12:56:15]
the_lord :
its software released by DJI for dealers to repair SPARK
[2018-08-09 12:56:40]
aciid :
ah SPARK issue
[2018-08-09 12:56:43]
buundy :
oh, sorry, I didnt use that
[2018-08-09 12:56:44]
aciid :
MP doens't have tha tproblem
[2018-08-09 12:56:52]
buundy :
where can I get it?
[2018-08-09 12:57:00]
will042082 :
What he said
[2018-08-09 12:57:05]
mefisto :
Seeing the conversation, you are probably talking about different tools: "comm_og_service_tool.py" has the capability of triggering gimbal calibration, but the tool @the_lord talks about is a service software from Dji.
[2018-08-09 12:57:49]
mefisto :
Looks like I'm slow at writing, lol
[2018-08-09 12:58:18]
good.win.alexs :
so, is it available somewhere @the_lord?
[2018-08-09 12:58:30]
the_lord :
not publicly available
[2018-08-09 12:59:39]
good.win.alexs :
i understand that. service things are never public :stuck_out_tongue:
[2018-08-09 12:59:56]
buundy :
and does anyone has access to it? :smile:
[2018-08-09 13:00:17]
mefisto :
confess! confess! confess!
[2018-08-09 13:00:45]
good.win.alexs :
i have full electric schemas for my laptop that is under NDA, it is also not available officially ))))
[2018-08-09 13:01:12]
good.win.alexs :
so, is there any way to get this tools somehow?
[2018-08-09 13:01:35]
buundy :
I would try it out, there are several functions I would need
[2018-08-09 13:03:25]
will042082 :
But.... we’re not public!
[2018-08-09 13:04:30]
mefisto :
I'm sure we can re-produce all the functions in an open-source tool.
[2018-08-09 13:05:14]
buundy :
so we have to find out how to zero the position of a new gimbal yaw motor on a P4 :stuck_out_tongue:
[2018-08-09 13:06:18]
mefisto :
we do not "speak" to the yaw motor controller directly; we can only talk to gimbal main controller.
[2018-08-09 13:07:16]
mefisto :
The gimbal main controller will then drive all the motor drivers.
[2018-08-09 13:23:37]
mefisto :
We could try sending various packets to the gimbal and checking how it reacts; but there are likely packets which will brick the thing..
[2018-08-09 13:27:29]
good.win.alexs :
better if we can get this “mysterious” peace of software
[2018-08-09 13:27:41]
good.win.alexs :
and debug what’s going on
[2018-08-10 00:12:06]
edisonbattery :
why bring it up, if you are just going to play coy. could you provide any real info about where to grab a copy or u jus' trollin?
[2018-08-10 07:32:53]
good.win.alexs :
looks like @the_lord is just trolling us
[2018-08-10 08:32:15]
aciid :
in my opinion such leading on is quite unworthy. many of the tools have been revealed via references methods by dji's libraries and such. there is no telling if there still are more sdk's, but id say there is no such thing as 3rd party repairshop that has more than what we already know
[2018-08-10 08:32:41]
jezzab :
@the_lord is one of the LONG time OGs. If you keep it up @edisonbattery and @good.win.alexs, I'm gonna breakout the dusty stick in the corner
[2018-08-10 08:37:36]
d95gas :
here we go again with Jezzab's stick :slightly_smiling_face:
[2018-08-10 09:01:40]
jezzab :
Not my stick lol
[2018-08-10 09:10:13]
d95gas :
well the O.G stick then ...... :slightly_smiling_face:
[2018-08-10 09:10:25]
jezzab :
I just think the smart ass comments because someone has access to a tool, and the guy was genuinely trying to offer a solution (not thinking about the accessibility to the tool) is uncalled for. He was not trying to troll or be funny. Hes a great and smart bloke with a LOT of experience with repairing and working on these drones.
[2018-08-10 13:09:20]
the_lord :
@jezzab thanks mate for watching my back
[2018-08-10 13:13:52]
cs2000 :
#og hugs
[2018-08-10 13:13:54]
cs2000 :
lol
[2018-08-10 13:54:08]
chipmangini :
I called DJI NYC yesterday about replacing my P4P's bent Gimbal Arm, and was told that's the only service that they can't do because they don't have the "special software" to reset the gimbal motors. Only DJI has it and won't give it to them!
[2018-08-10 13:56:41]
good.win.alexs :
i’m scared now - i’m waiting new gimbal for my MP1, and i really hope it will just work
[2018-08-10 13:56:58]
good.win.alexs :
i’m without my bird for more than month (((
[2018-08-10 14:56:49]
edisonbattery :
dji and apple have similar (pronounced 'secretive') service and service center policies. One main difference is how guys like Louis Rossman have not only schematics, but highly detailed schematics and docs and he is 'unauthrozied'. Where is our 'Rossman' and all the info that obviously exists somewhere?
[2018-08-10 14:59:30]
jezzab :
Just because someone broke an NDA to give your "Rossman" that info or who ever had it, their PC was hacked doesnt mean anyone else has to.
Get over it
[2018-08-10 15:04:09]
edisonbattery :
whoa-- chill, i'll drop it. I thought this was the 'rev' board. If it all it take to stop reverse engineering is a simple NDA and a request to 'please stop' then what are we doing here?
[2018-08-10 15:05:18]
jezzab :
_breath Jezza, breath_
[2018-08-10 15:05:30]
jezzab :
Good night
[2018-08-10 15:11:08]
jcase :
@edisonbattery then get on it and start reversing
[2018-08-10 15:11:16]
jcase :
and publish all you want
[2018-08-10 15:13:01]
cs2000 :
@edisonbattery i dont think you fully understand this group. Its the nature of what we do. The people that originally HAVE those repair tools are authorised DJI repair centres. They cannot share them or else risk loosing their business. Tools leak out via alternate methods however. Same with exploits, theirs plenty of things this group does behind closed doors with the goal of releasing something publicly when the time or the tool is right. If for example we had a root for the Mavic Air, theirs no way in hell it would be released as it would be patched. You need at **least** 2 roots/exploits using totally different methods so that no matter what happens to the first one, you still have the second one. Nobody else gets mad at this stuff as theyre thankful for what we as a group, spending literally millions of man hours, have released for FREE non the less!
[2018-08-10 15:13:46]
validat0r :
With dji having postponed its mp2 release everybody's going crazy :joy:
[2018-08-10 15:15:50]
mathieu.peyrega :
Vacation time for me ! I hope @edisonbattery will have bring us light when i'll come back !
[2018-08-10 15:49:38]
mefisto :
I though my bag of popcorn would go to waste, but seem like it still has a chance. More, more!
[2018-08-11 00:07:53]
quad808 :
Well. My thoughts. Here it comes.....I don't think it's fair at all that most of you in here are way, WAY more skilled than me, and do high level stuff that mere mortals like me would have no chance of doing, unless we spend years and years of learning....Kinda like what you guys have already done. I don't think it's fair and I want a new brain. Simple as that. Ok, thats not going to happen, and since I don't have the skill set, I do everything I can to help in other ways, to do what I can do to help out. You don't demand, you don't whine. You ask politely if you need help, full well knowing that maybe no one will give you the time of day. There are very highly skilled people in here...I have seen some of their work live, as it happened, and I didn't understand one bit of it, other than they are doing this (OGs) because it is a challenge, and this is a HUGE AND....they are willing to share with all of us. I don't want everything they have. I wouldn't know what to do with it anyway, and thats fine. At the end of the day we are all drone pilots, and love the sport. The work that has been done here has freed many, many DJI drones, made people lots of money with their commercial drone work, and has even saved lives! Yep, you got that right. SAVED LIVES. I just love being part of this community, and doing my small part to keep it going. This is not easy work folks. Otherwise more would be doing it. I will now get down from my box, and you all can carry on.
[2018-08-11 00:36:00]
will042082 :
Well said. I hope to contribute to the community somehow someway even in the smallest of way. Specially when compared to most here. But learning and figuring shit out is half the fun, but having a guiding hand is what the community is about. With that said I hope the guys make a decent income with NLD, I know l a large portion of the “modding” community are people that simply want an easy button and you guys have made an AMAZING tool to fill that need. Hell I paid for NLD and I have a fucking AIR!!! lol. Worth it in my mind to try and say thank you. Also donated to our friend releasing the iOS tweaks and doing my damndest to help contribute on that front. If Jezzab, Aciid and others don’t ban me for stupid questions first :sunglasses:. I do think though that you guys should definitely charge an additional fee for the NLD app. Something similar to Cydia tweaks or something. Not just because of the mods, but it’s years ahead of the actual GO 4 app with the inclusion of the satellites, actual elevation etc. worth an additional fee in my opinion. Last note. NLD for iOS :sunglasses:
Last,last note. Full AIR support :upside_down_face:
[2018-08-11 08:09:44]
aciid :
@doubleohasian fear not already on it new mods coming i call it the cancermachine 9000
More information: <https://avianres.biomedcentral.com/track/pdf/10.1186/s40657-017-0092-3>
[2018-08-11 13:58:18]
jcase :
@quad808 secret is that this stuff doesnt need years. I went having touched visual basic 10 yr prior and not really messing with anything programming or computer related for a decade, to learning smali and exploitation in 3 days. Honestly, I got fed up I couldnt remove amazon mp3 from my droid eris and no one had "rooted" it yet. I effectively didnt sleep for 3 days and learned smali and android.
[2018-08-11 13:58:27]
jcase :
had to learn java after wards
[2018-08-11 13:58:56]
jcase :
hell i spent 10 hours of something relatively simple yesterday
[2018-08-12 19:16:09]
tom4711 :
Hi all. I had a crash an killed my flexcable in the gimbal. After changing the flexcable I have an compass error 'compass 1 disconnected'. Is compass 1 the small PCB in bird's nose or the one built in GPS Modul? If it's the small PCB maybe I have damaged the cable. Thanks for your support.
[2018-08-12 19:28:53]
aciid :
theres one compass in the GPS module and one the nose if I remember right. I fixed a similar error yesterday when my GPS wires were pulled off the pads
[2018-08-12 19:29:02]
aciid :
it said no compass available
[2018-08-12 19:29:41]
aciid :
@tom4711 check dji assistant 2 on debug mode goto "Dashboard" see which errors does it say
[2018-08-12 19:29:49]
aciid :
it should have a red text in there
[2018-08-12 19:29:55]
aciid :
this is how I fixed mine yesterday <https://dji.retroroms.info/howto/mavic_gps_disconnected_compass_wont_calibrate_fix>
[2018-08-12 21:01:52]
buundy :
you can check which is which with a small magnet :slightly_smiling_face: DJI Go 4 » General Settings » Advanced Settings » Sensors
[2018-08-13 01:49:58]
jcase :
!wiki
[2018-08-14 11:32:35]
flystraightcircles :
@tom4711 when you put back the top cover, make sure you connect the plug that's on it.
[2018-08-14 16:55:36]
ender :
guys, do you have any cheap source for some brushed to brushless converters ? Hard to get now…
[2018-08-14 16:56:21]
ender :
(like those from mCP X times)
[2018-08-21 16:04:28]
christianwoodward :
2==A’C ’’A; DEDWWXXGM
[2018-08-21 16:45:34]
buundy :
I am now searching for solution for the dead GL300B/C (Phantom 4, Phantom 4 Adv/Pro) remotes… the charging circuit dies after some time and doesnt let the remote to charge itself past the first LED dot.
[2018-08-21 16:45:56]
buundy :
I tried reflowing the board and on some remotes it did the trick and they now work
[2018-08-21 16:46:11]
buundy :
but on some others it worked for a month or so then they died again
[2018-08-21 16:46:43]
buundy :
maybe if I can find the exact defective part or wrong solder point I can only rework that part of the remote
[2018-08-21 16:46:47]
buundy :
anyone has idea?
[2018-08-21 21:27:49]
spiteri.michael :
Are there any photos of those boards about?
[2018-08-21 21:28:47]
spiteri.michael :
A schematic of the charger section would help a lot.
[2018-08-22 05:29:15]
buundy :
I share a photo today when I get to work
[2018-08-24 03:31:35]
aciid :
@channel does anyone have experience with these russian RF Analyzers? <http://arinst.net/arinst_ssa_tg_r2.php>
[2018-08-24 03:31:55]
aciid :
sorry for the channel, this device's price point is as such that I have to ask **everbody**
[2018-08-24 03:37:03]
lolo780 :
No but that looks nice
[2018-08-24 03:44:20]
aciid :
<https://www.youtube.com/watch?v=I50BaOcy_0s> review of a unit without the screen, using a tablet
[2018-08-24 03:45:21]
aciid :
like I guess 0-22ghz HP Agilent RF analyzer goes for 1000-3000€ :smile: and is rack-sized
[2018-08-24 06:41:59]
good.win.alexs :
Its just $350, advertised for 36Mhz-3Ghz, plus up to 6Ghz with higher error rate
[2018-08-24 06:42:14]
good.win.alexs :
Not bad at all
[2018-08-24 07:31:13]
aciid :
well there are few reviews and pictures of the pcb's but not much else
[2018-08-24 07:31:15]
aciid :
it's quite new
[2018-08-24 09:02:58]
kilrah :
wow that's beautiful
[2018-08-24 09:03:23]
kilrah :
(i already have a 6G rf explorer though)
[2018-08-24 09:05:03]
kilrah :
but tracking gen, veryy nice
[2018-08-24 09:05:22]
kilrah :
and seems way higher resolution
[2018-08-28 09:03:06]
buundy :
guys, I found the culprit of the non-chargable GL300* remotes, it was a 8-legged charging regulator IC that needed to be resoldered properly
[2018-08-28 09:40:10]
spiteri.michael :
Another victim of lead free solder!
[2018-08-28 09:41:28]
spiteri.michael :
Or it could also be bad ic's that have a bad connection internally(bond wire) reheating will make them work for a while if your lucky.
[2018-08-28 13:58:50]
fredz :
so we got the Mavic 2 and opened the remote :slightly_smiling_face:
[2018-08-28 13:59:09]
jan2642 :
I’m listening :wink:
[2018-08-28 13:59:46]
fredz :
here you go
[2018-08-28 13:59:47]
fredz :
<https://ibb.co/hWGr7p>
<https://ibb.co/cDNnf9>
<https://ibb.co/gknynp>
<https://ibb.co/iqsaYU>
[2018-08-28 14:00:11]
fredz :
it's even easier to open than the previous DJI remotes and the quality is much better than the MP1 remote
[2018-08-28 14:01:05]
fredz :
I mean the build quality
[2018-08-28 14:02:54]
kilrah :
really? was quite solid already
[2018-08-28 14:02:59]
jan2642 :
You didn’t looked at the bottom side of the board or under the cans ? I was wondering if it’s still using the LeadCore processor…
[2018-08-28 14:24:51]
fredz :
Much much better quality
[2018-08-28 14:24:56]
fredz :
And easier to open
[2018-08-28 14:26:47]
ender :
cool !
[2018-08-28 15:09:48]
brd_gsm :
And with uart on the bottom left corner, pretty handy
[2018-08-28 15:53:10]
flydji :
what a shame that mp2 still has no hdmi out...
[2018-08-28 16:08:22]
good.win.alexs :
I think, this will be permanent difference on phantom serie
[2018-08-28 16:15:25]
kilrah :
nope, see ~general
[2018-08-28 17:54:59]
aciid :
@flydji mavic is still a consumer product
[2018-08-28 17:55:10]
aciid :
its just "fun to carry around"
[2018-08-28 17:55:25]
aciid :
just like a pocket-zoom camera
[2018-08-28 17:55:34]
aciid :
its not so fun to carry a 3000€ dslr
[2018-08-28 17:55:56]
aciid :
doesn't fit any bags
[2018-08-28 18:12:46]
lolo780 :
Sometimes you don't have to carry the mavic home
[2018-08-28 18:12:56]
lolo780 :
Or any other dji drone actually.
[2018-08-28 18:40:24]
aciid :
@lowellfoo780: D
[2018-08-28 19:25:24]
buundy :
I am planning on disassembling the m2pro when it arrives in a week
[2018-08-28 19:25:33]
buundy :
Will post pictures
[2018-08-28 19:28:41]
lolo780 :
I'll be opening my RC as well unless it's incredibly impressive in stock form.
[2018-08-28 19:29:09]
ender :
well, fredz did that already !
[2018-08-28 19:29:35]
lolo780 :
I want to boost the left side port only with an uncased amp
[2018-08-28 19:29:53]
lolo780 :
Make the most compact boosted RC possible.
[2018-08-28 19:30:16]
lolo780 :
And still have it fit in any case
[2018-08-28 19:30:58]
ender :
are you 100% that the added asymetric power makes up for possible mimo 2x2 problems ?
[2018-08-28 19:31:16]
lolo780 :
Works fine on the M1.
[2018-08-28 19:31:21]
lolo780 :
And P4s
[2018-08-28 19:31:33]
lolo780 :
Guess will find out on the M2
[2018-08-28 19:32:16]
lolo780 :
On my p4s I use a reflector on the left antenna only
[2018-08-28 19:32:56]
lolo780 :
Done the same on the M1. P4A stock battery, stock RC with reflector, 9.3km
[2018-08-28 19:33:18]
lolo780 :
18.6km round trip
[2018-09-01 07:58:10]
hdnes :
Anyone have the route to ssh into the Ambarella chip
[2018-09-01 07:58:34]
aciid :
rear usb port?
[2018-09-01 07:59:36]
hdnes :
I feel like I remember getting in without that
[2018-09-01 07:59:57]
hdnes :
Tty? Through LC?
[2018-09-01 08:23:34]
jan2642 :
IIRC you can telnet to it from the LC.
[2018-09-10 08:24:54]
aciid :
found a decent VNA for sub 6ghz that is under 1000€. on par with hobbygrade level with hackrf and such so not pro, but definitely worth to take a peek. requires heavy calib to get 4-6ghz, but I found a newsgroup posting that it's possible <http://pocketvna.com>
[2018-09-10 11:25:59]
validat0r :
how to I disassemble a spark foldable prop? hearty smash on the smaller end of the pin holding the blade?
[2018-09-10 11:27:00]
ender :
yes, using something a tad smaller in Diameter of course :slightly_smiling_face: Its very easy.
[2018-09-10 11:27:30]
ender :
Why do you do that ? I did so to create 3 sets of experimental low-noise props for my Mavic Air. Wuth partial success…
[2018-09-10 11:27:31]
validat0r :
so it's just pressed in, no screwing?
[2018-09-10 11:27:38]
ender :
yes, only pressed
[2018-09-10 11:28:01]
mathieu.peyrega :
maybe you can use same kind of tools that the one to open a bike chain
[2018-09-10 11:28:01]
ender :
And if you are careful you can just press it back and it will hold. OR add a tiny spot of glue to be 1000%
[2018-09-10 11:28:09]
mathieu.peyrega :
but I guess the spark pin is smaller
[2018-09-10 11:28:18]
validat0r :
have enough broken props so take them apart and build working ones
[2018-09-10 11:28:22]
ender :
just a tip of a small nail will do
[2018-09-10 11:28:43]
validat0r :
@mathieu.peyrega good thinking. have one of those
[2018-09-10 11:29:42]
validat0r :
[2018-09-10 11:29:53]
validat0r :
lower half is perfectly good :smile:
[2018-09-10 11:30:24]
ender :
ahh i see, use 2 defective to create 1 good..
[2018-09-10 11:30:37]
ender :
you do rabbit hunting with the spark ? :slightly_smiling_face:
[2018-09-10 11:30:59]
validat0r :
fast ascend into a tree branch
[2018-09-10 11:31:01]
mathieu.peyrega :
he does worst, he make horror movies :slightly_smiling_face:
[2018-09-10 11:31:07]
ender :
eeeeeek
[2018-09-10 11:31:14]
validat0r :
followed by a rapid descent
[2018-09-10 11:32:21]
ender :
I attached the Spark base to RaceKraft Triblade with wingtips to have a “lower-noise” Mavic Air before i got the Anafi…
[2018-09-10 11:33:05]
ender :
also created foldable props for the Air that way… (NOT Spark blades of course, bigger ones)
[2018-09-10 12:42:39]
chron0 :
such a shame that you can't use the ocusync air unit with the mavic controller for other projects
[2018-09-10 12:44:13]
jakub :
@ilovemynexus4 was it flying with this prop ? :wink:
[2018-09-10 12:58:01]
validat0r :
@jakub for like 2sec, yes .. on it's way down
[2018-09-10 12:58:42]
chron0 :
anyone on mavic2 already?
[2018-09-10 13:20:29]
kilrah :
@chron0 you can actually...
[2018-09-10 13:23:53]
chron0 :
@aciid: can definitely recommend pocketvna, I've used it for a couple of antenna projects
[2018-09-10 13:26:17]
aciid :
yea shot the developer a email that can he whole heartedly say even "it may crudely work with 5.8" that is enough for me
[2018-09-10 13:26:30]
aciid :
found a newsgroup posting ill trust that enough tbh
[2018-09-10 13:27:05]
aciid :
@chron0 even unaccurate is enough and it goes into the shopping cart. theres no competition'
[2018-09-10 13:29:47]
chron0 :
ye, otherwise it's an easy 5 digit invest for R&S or agilent gear :confused: and I like that it's just a small box and the SW runs on linux too
[2018-09-10 13:32:53]
kilrah :
if you don't need the phase rf explorer with siggen works pretty well up to 6G
[2018-09-10 13:33:12]
kilrah :
aka makes an SNA, not VNA
[2018-09-10 13:48:25]
aciid :
i've been eyeing at rf explorer, but it's essentially what my hackrf does
[2018-09-10 13:48:42]
aciid :
it's more like a spectrum analyzer, whhere pocket vna is well a vna, even if slow aswell
[2018-09-10 16:40:19]
fredmicrowave :
Would be so awesome if the Mavic2 gimbals could be adapted to the MaviPro ... Anyone know if they are completely different in terms of communication with the drone ?
[2018-09-10 17:23:20]
kilrah :
almost no chance
[2018-09-10 19:03:56]
validat0r :
assembling new props from busted ones works nicely. good thing I kept all my damaged props
[2018-09-10 19:06:49]
validat0r :
only tricky thing: to get the pin out without cracking the middle thing. not sure if epoxying the thing back together is such a good idea
[2018-09-10 19:42:54]
good.win.alexs :
@ilovemynexus4 on your place i’d better think twice if i want to loose whole drone bcz of made-from-scratch props :slightly_smiling_face:
[2018-09-10 19:43:55]
good.win.alexs :
ok for some durable race drone, but mavic is pretty delicate as girlfriend :slightly_smiling_face:
[2018-09-10 19:45:13]
mathieu.peyrega :
he's got a Spark.... and Spark can handle > 100 m drop without a tear :slightly_smiling_face:
[2018-09-10 20:05:19]
good.win.alexs :
0_0
[2018-09-10 20:05:24]
kilrah :
indeed, spark was made for people with no idea to throw into everything they can find
[2018-09-10 20:49:30]
validat0r :
hey .. back up the sparkling truck
[2018-09-10 20:50:41]
validat0r :
@good.win.alexs yeah, i'll probably think twice about using the epoxyed props, but the other ones look pretty good
[2018-09-10 20:51:10]
validat0r :
the little pins in the foldable props look reusable to me
[2018-09-10 20:52:39]
validat0r :
only if it doesnt fall onto its right front side and the top cover sheers off the VPS ribbon cable :smile:
[2018-09-11 15:54:15]
kilrah :
oho, no more hall sensors for the m2 gimbals
[2018-09-11 15:57:44]
mathieu.peyrega :
what was the hall sensor role on MP1 ? (max angle detection ?)
[2018-09-11 15:59:15]
kilrah :
i mean the rc controller sticks
[2018-09-11 16:00:42]
mathieu.peyrega :
have they turned to glass angular coder disks from Leica ?
[2018-09-11 16:00:51]
mathieu.peyrega :
(after buying Hasselblad...)
[2018-09-11 16:00:52]
mathieu.peyrega :
:slightly_smiling_face:
[2018-09-11 16:01:22]
kilrah :
no back to old regular pot-based toy stick assemblies...
[2018-09-11 16:01:49]
kilrah :
which are usually shit, so will see how it works
[2018-09-11 16:02:00]
mathieu.peyrega :
so no counter UAV compagny can target the pilot with a strong magnetic field anymore :slightly_smiling_face:
[2018-09-11 16:02:26]
kilrah :
<https://mavicpilots.com/attachments/dronemods-2018-571-png.46127/>
[2018-09-11 17:28:08]
good.win.alexs :
Omfg... Resistive pots...
[2018-09-11 17:28:44]
good.win.alexs :
One upgrade - five downgrades. This is how progress is working nowadays?
[2018-09-11 17:32:26]
aciid :
resistive pots you gotta be kidding me
[2018-09-11 17:32:32]
aciid :
thats like flysky level of shitberg
[2018-09-11 17:48:09]
buundy :
Am i correct that the p4 series rc gimbals are also pots?
[2018-09-11 18:00:03]
kilrah :
yup inspire, p4 is pots
[2018-09-11 18:00:10]
kilrah :
no problem at all with the large gimbals
[2018-09-11 18:00:25]
kilrah :
but those small "game controller" assemblies are usually poor
[2018-09-11 18:01:11]
kilrah :
but anyway i don't think the hall thingies on the MP remote were much better, and they introduced a whole load of their own issues with calibration problems and magnetic interference from magnets on phones eetc, so not very surprising they removed them
[2018-09-11 18:01:52]
kilrah :
they had already reverted at the time of mavic air actually, and that's not bad at all
[2018-09-21 16:30:13]
aciid :
here @tumik
[2018-09-21 16:30:18]
tumik :
@tumik has joined the channel
[2018-09-22 18:52:19]
buundy :
I have now a Mavic Air for repair but it seems that the remote is broken not the drone. When I fly with it forward the release the sticks the drone goes forward an extra 1-2 meters. Same for backwards. I tried with another MA remote and the drifting doesn’t occur. How would you start investigating this problem? (Also sometimes when I turn on the remote it starts beeping loud, and I have to do calibration to stop the beeping). Maybe something is wrong with the sensors?
[2018-09-24 08:07:31]
ender :
Guys, just to let you know, i had perfect results with my cheap& repaired MP1 and a Lenovo VR180 camera. Great flying and the Lenovo does anti-shake for itself. STEREO VR Yihaaaa
[2018-09-24 14:31:21]
mingtao :
...
[2018-09-24 14:31:37]
cs2000 :
yes, but not publically
[2018-09-24 14:32:29]
mingtao :
can you PM ?
[2018-09-24 14:49:12]
cs2000 :
I dont have access to it either, and even if i did, i wouldnt be able to share the details, if its not public, its not public
[2018-09-24 15:54:34]
cantrepeat :
Isn't CopterSafe the people who are selling Mavic Pro NFZ hack for $200 online?
[2018-09-24 15:58:58]
d95gas :
Thats him/them :+1:
[2018-09-24 16:03:33]
cs2000 :
Correct, back in the day before we kinds stomped on all that
[2018-09-24 16:05:27]
cantrepeat :
I'm all for the people who reverse/code this stuff, I make sure to donate, but good god, $200!!! Just criminal. Then to come here and ask for someone's work, MP2 NFZ, just to turn around and sell it as their own. TF man.
[2018-09-24 16:06:28]
cantrepeat :
I don't mean to rant but damn.
[2018-09-24 16:07:12]
ender :
AFAIR that conflict has been settled to be cooperation now.
[2018-09-24 16:07:16]
cantrepeat :
Who's got that sweet GPL again. :smile:
[2018-09-24 16:07:39]
cantrepeat :
I hope so.
[2018-09-24 16:09:11]
cs2000 :
Yeah, theirs no bad blood in here over the whole thing
[2018-09-24 16:09:22]
cs2000 :
people still have their own opinions though :wink:
[2018-09-24 16:09:42]
cantrepeat :
I'll try to keep mine to myself :stuck_out_tongue:
[2018-09-24 16:15:46]
mingtao :
but it was 1.5 year ago .. and We as a first who make it! )
[2018-09-24 16:19:06]
d95gas :
Everyone is one big happy family (Does not include DJI) :grinning:
[2018-09-24 16:19:33]
d95gas :
And not seen "Papa" (Bin4ry) around for a while to keep us all in check
[2018-09-24 16:22:20]
cs2000 :
me neither, sure he keeps checking in occasionally. Alot of people, me included, take extended breaks from this place sometimes.
[2018-09-24 16:24:51]
d95gas :
Yep same here.... Work owns my a$$ and they are making sure they get every ounce of bloody out of me, constantly on the road these days, but do try to keep up with everything thats going on
[2018-09-24 16:25:53]
cantrepeat :
<---- retired and get I bored very easy.
[2018-09-24 16:26:05]
cantrepeat :
I get*
[2018-09-24 16:26:16]
cs2000 :
Its good to see some of the original people round here all this time later :slightly_smiling_face:
[2018-09-24 16:29:41]
d95gas :
its certainly gone from strength to strength and many new users, think Bin4ry's original goal was to develop a self-supporting group, rather than having to depend on the O.G all the time, and he has certainly achieved that...... Think this Slack group has world fame .
[2018-09-24 16:35:58]
jcase :
lol
[2018-09-24 16:36:09]
jcase :
@catalinaskirace you would freak if you saw teh reality
[2018-09-24 16:36:21]
jcase :
i know 100% a forensic vendor is selling a modified version of some of my software
[2018-09-24 16:36:23]
jcase :
at $20k
[2018-09-24 16:36:24]
jcase :
range
[2018-09-24 16:36:48]
jcase :
just because something is GPL'd doesnt mean they cant sell it
[2018-09-24 16:36:49]
cantrepeat :
gezz the hell!!!
[2018-09-24 16:36:56]
jcase :
in fact, GPL allows it
[2018-09-24 16:37:49]
cantrepeat :
@jcase is your stuff that has the sweet GPL on it. I think is some thing about a proper dick if you use my code to make money and don't share. It's the best GPL I've ever seen.
[2018-09-24 16:39:55]
cantrepeat :
Although, the wording sounded more UK.
[2018-09-24 16:40:11]
jcase :
sometimes it is
[2018-09-24 16:40:18]
jcase :
frankly if source is public i expect it to get jacked
[2018-09-24 16:40:19]
jcase :
its life
[2018-09-24 16:41:15]
jcase :
i mean realistically, if i dont want something used in other apps, i have no problem stopping it
[2018-09-24 16:41:43]
jcase :
no issue writing custom obfuscators/packers, my most succesful app has gone 4 years without being unpacked
[2018-09-24 16:50:15]
d95gas :
Look at DJI ... They are making a killing out of GPL and sticking 2 fingers up at the license
[2018-09-24 16:51:19]
jcase :
GPL holds no weight in real life
[2018-09-24 16:51:20]
jcase :
sorry it doesnt
[2018-09-24 17:01:16]
mefisto :
GPL means - if you make something around my code, you should give your source on request to anyone. It does not mean you can't make money on it.
[2018-09-24 17:48:17]
jcase :
you dont have to give it to anyone
[2018-09-24 17:48:27]
jcase :
you have to give it to those who have a right to request it
[2018-09-24 17:48:30]
jcase :
eg who got the binary from you
[2018-09-24 20:17:56]
mefisto :
yeah, true.
[2018-09-25 15:20:10]
good.win.alexs :
@aciid will you have minute to share your experience how to override Wifi restrictions on MP1?
[2018-09-25 15:28:15]
aciid :
@good.win.alexs we used fc_patcher
[2018-09-25 15:36:24]
good.win.alexs :
i understood that from first time :))))
[2018-09-25 15:37:05]
good.win.alexs :
was it done through parameters? or custom patches? if you can share any bits of your experience - it will be great
[2018-09-25 15:44:40]
ender :
(old fart Ender says “and please compile it for the Wiki”)
[2018-09-25 15:58:59]
aciid :
I can try an retrieve my configuration
[2018-09-25 16:01:14]
aciid :
ill pull the files
[2018-09-25 16:01:28]
aciid :
that file was not changed
[2018-09-25 16:01:30]
ender :
I wonder if DFS is beneficial for “our” needs…
[2018-09-25 16:01:47]
ender :
so its identical to mine, right ?
[2018-09-25 16:02:24]
aciid :
I don't know is DFS compliance a big deal in-land in europe
[2018-09-25 16:02:45]
aciid :
may trigger if you have a fly-over in a NATO country
[2018-09-25 16:04:53]
aciid :
@good.win.alexs this is the one we used
[2018-09-25 16:05:50]
good.win.alexs :
so, just parameters? going to check it…
[2018-09-25 16:06:48]
ender :
i deleted BS as i posted in wrong channel (meant to go to anafi, qualcom ini stuff), SORRY
[2018-09-25 16:10:13]
good.win.alexs :
@aciid so, is it Novice Mode radius param limiting Wifi mode by radius from home point?
[2018-09-25 16:11:08]
aciid :
@good.win.alexs yes if I recall correctly novice thing. we confirmed it first by starting walking in novice mode behind MP1 , for over the original limit
[2018-09-25 16:11:14]
aciid :
then we added the LTE tunnel and flew it over the limit
[2018-09-25 16:15:14]
good.win.alexs :
Hmm, ok, ill try it. Tnx
[2018-09-25 17:22:16]
good.win.alexs :
Anyway tnx
[2018-09-25 20:40:43]
aciid :
@good.win.alexs ive been pretty busy lately, can we catch up on the weekend about this. ill try to help you best as I can
[2018-09-25 21:36:07]
good.win.alexs :
sure, np, take your time. just decided to kindly ask you again in case if you forgot :slightly_smiling_face:
[2018-09-26 07:16:21]
ender :
Guys, a “simple” Question for you USB & Hardware wizards: I have a USB-C Dock that offers HDMI out and USB-A ( = OTG) for my Huawei P20.
BUT i dont want to use my phone in USB-host mode i want to use it in slave mode.
Why ? I want to connect HDMI goggles and a DJI or Parrot Remote Control. I opened the adapter and Voilá i can see the CC1 (Pin A5) connected to GND via 5kOhm Resistor, Would i simply cut that connection ? Or connect A5 to +Vcc (via Resistor??) or ???
IF i do so thephone will not spit out 5V supply,so i probably would need to wire 5V from else where, right (Like from the existing USB-A that would be connected to the RC by means of a USB-A to USB-A cable) ?
In other words: HELP :wink:
[2018-09-26 07:28:47]
kilrah :
you can't do that
[2018-09-26 07:29:03]
kilrah :
you simply can't do both directions at the same time on the same port
[2018-09-26 07:31:42]
ender :
so no HDMI out and USB slave combined ? Is USB-host mode connected to HDMI out ?
[2018-09-26 07:31:56]
ender :
(i do NOT want USB host AND slave together)
[2018-09-26 07:33:33]
kilrah :
HDMI out is not HDMI out from phone, it data going out over USB-C that is converted to HDMI by a chip in the adapter
[2018-09-26 07:33:43]
kilrah :
if you change the port direction you'd kill that
[2018-09-26 07:34:17]
kilrah :
aka phone is host, and the adapter is device
[2018-09-26 07:34:39]
ender :
are you 100% on that ? I am not talking about MHL where you are obviously right. I hoped the Displayport mode is covered by SBU pins and is independent from USB 2.0pins (NOT those superspeed ones)
[2018-09-26 07:35:21]
ender :
On MHL 11pin that WAS possible (did that on my now deceased Note 3)
[2018-09-26 07:35:44]
kilrah :
yes becasue MHL was really separate links
[2018-09-26 07:36:12]
ender :
but ifi look on the schematics USB-C has seperate USB 2.0 & displayport pins as well.
[2018-09-26 07:36:22]
ender :
Let me triple check.
[2018-09-26 07:36:29]
kilrah :
not 100% sure no, but I've never seen anything suggesting that you can have different directions for the usb2 link and the rest
[2018-09-26 07:36:56]
ender :
display port IMO uses the superspeed / USB 3,0 pins whileusb 2,0 is independent.
[2018-09-26 07:36:59]
kilrah :
and even if it does I'm 99% sure that no existing software would support that operation mode
[2018-09-26 07:37:18]
ender :
its not about software :slightly_smiling_face:
[2018-09-26 07:37:22]
kilrah :
certainly isn't on the adapter i have
[2018-09-26 07:37:53]
kilrah :
casue while DP/HDMI is in use I ALSO get >USB2 speeds on the USB ports and ethernet
[2018-09-26 07:38:12]
ender :
<https://www.electronicdesign.com/sites/electronicdesign.com/files/uploads/2015/02/0216_TI_USBtypeC_F2-big.gif>
[2018-09-26 07:38:46]
ender :
the usb 2.0 seems independent from DIsplayport use (right pins for DP-Alt)
[2018-09-26 07:38:50]
kilrah :
yeah it is about software becasue the phone will just simplify the thing and say "if the port is out i don't care about advertising myself as a device"
[2018-09-26 07:40:06]
ender :
of course it could be… But couldnt that decision be independent ? “Oh i need to push out Displayport signal,fine,.i’ll do that” + “Oh a USB host isconnected and CC1 says i am a slave so lets connect” ?!?!
[2018-09-26 07:40:56]
kilrah :
well, try it, but given the usual minimal support in consumer devices I doubt anyone spent some time implementing something they figured nobody would use
[2018-09-26 07:41:02]
ender :
I SUSPECT you only find those ports combining HDMI + USB-host as they were meade for MacBooks in the first place but of course it could be a non-supported combo to have HDMI out and USB-slave
[2018-09-26 07:41:13]
kilrah :
and as i said, it's usually not DP alt mode that's used in the first place
[2018-09-26 07:42:00]
ender :
Hmm, why have a CC1pin at all to signal USB-OTG if it cannot be used to signal USB-Slave ?!
[2018-09-26 07:42:32]
ender :
anyways: i do know that a 5k pull down signals OTG. In that logic, would a 5k pullup signal slave ?or NC ?
[2018-09-26 07:42:40]
ender :
(on A5 / CC1)
[2018-09-26 07:42:46]
kilrah :
well IMO it is, but switches the entire port to host, like with OTG
[2018-09-26 07:43:13]
ender :
yes could very well be but there IS not HDMI-in so why switch that ?!
[2018-09-26 07:43:27]
ender :
no device could have HDMI-in without serious measures…
[2018-09-26 07:43:41]
ender :
--> Framegrabbers
[2018-09-26 07:44:19]
kilrah :
no but when not in host mode you are in "usb-3 device" mode!
[2018-09-26 07:45:15]
kilrah :
CC pins are to detect cable orientation and who is "in" and who is "out" - whole port, not just the USB2
[2018-09-26 07:45:18]
kilrah :
<https://www.silabs.com/community/mcu/8-bit/knowledge-base.entry.html/2016/09/26/what_s_the_role_ofc-kQYe>
[2018-09-26 07:45:28]
ender :
hmm, i guess its alla question how flexible the driver is so were right about the “software matter” thing.
[2018-09-26 07:45:31]
ender :
yep
[2018-09-26 07:46:10]
ender :
But again:just general electronics,IF i want to try, whats the common “opposite” of using a5k pulldown, do 5k pullup or not connect or ?!?!
[2018-09-26 07:46:30]
ender :
(if there is such thing)
[2018-09-26 07:47:06]
kilrah :
it's much more complicated than that, see my link
[2018-09-26 07:49:29]
ender :
damn, feared that :slightly_smiling_face:
[2018-09-26 20:56:01]
buundy :
By the way do anyone have any idea on how to charge the mavic air via usb-c? To my knowledge is is not possible but if there is a hack or something :) I dont understand that why dji havent implemented it on one of the most portable drone... the spark can be charged from a power bank.
[2018-09-26 21:11:53]
lolo780 :
save the weight of a DC-DC converter would be my guess
[2018-09-26 21:12:22]
lolo780 :
the spark is fairly empty inside and a POS anyways.
[2018-09-26 22:57:33]
brd_gsm :
Because the mavic air needs 13.2v, thats why
[2018-09-26 22:59:20]
brd_gsm :
<https://rover.ebay.com/rover/0/0/0?mpre=https%3A%2F%2Fwww.ebay.nl%2Fulk%2Fitm%2F282515094291>
[2018-09-26 22:59:39]
brd_gsm :
You could use something like that, but it would be hacky
[2018-09-26 23:00:35]
brd_gsm :
But anyway, i’m just a guy with some gpus to crack passwords for the pros in here, so take my words with caution ;)
[2018-09-27 04:44:27]
kilrah :
It would be totally possible technically, they just haven't done it for some reason. And yes the Air is the one where it would have made most sense.
[2018-09-28 00:37:59]
aciid :
DC-DC boosters are very jittery, follow manufacturor spec on the chip how much voltage it needs to be stable for your buckup
[2018-09-28 06:37:13]
ender :
for charging it wouldnt matter…
[2018-09-28 14:37:50]
buundy :
Do anyone knows anything more about this P3 hw hack?
[2018-09-28 14:37:53]
buundy :
<https://youtu.be/ycrrOj5CARc>
[2018-09-28 14:38:01]
buundy :
Starting at 2:10
[2018-09-28 14:42:42]
buundy :
Ive read about a range issue in a forum, and the solution was the above. Remove the IC and wire together 2 capacitors
[2018-09-28 14:42:56]
buundy :
That IC switches between antennas
[2018-09-28 14:43:07]
buundy :
And the wire bypasses it
[2018-09-28 14:43:29]
buundy :
These is the same chip in p3a/p and p4 also
[2018-09-28 15:36:27]
mr.vibez :
SilencioRC works on the mp2?
[2018-09-28 15:40:41]
jcase :
doubt it
[2018-09-28 15:40:47]
jcase :
mp r
[2018-09-28 15:40:54]
jcase :
but the mp rc should work on mp2
[2018-09-28 15:40:56]
jcase :
iirc
[2018-09-28 15:41:15]
kilrah :
no, dji said "with future updates"
[2018-09-28 15:45:21]
mr.vibez :
ah shame
[2018-09-28 17:40:38]
jan2642 :
@mr.vibez soon..
[2018-09-28 17:41:09]
mr.vibez :
Great! Excited to try it.
[2018-09-28 17:43:19]
kilrah :
actually you shouldn't need it as much since on the M2 rc you can stop the beeping
[2018-09-28 17:43:31]
kilrah :
at least supposed to
[2018-09-28 17:43:38]
jan2642 :
Just out of curiosity, did you try it on the mp2 rc ? It will refuse to flash it but I’m wondering what gets reported as firmware version.
[2018-09-28 18:20:08]
kilrah :
ah damn, thought it was both
[2018-09-28 18:20:18]
kilrah :
but or that you can jsut set the warning lower?
[2018-09-28 18:21:55]
mr.vibez :
15% is lowest it will go. Last thing I need when I have a low battery is the controller beeping alerting everyone around to my panic lol
[2018-09-28 18:23:24]
kilrah :
I'm always on the ground by 25%...
[2018-09-28 18:54:58]
mefisto :
@buundy yes, that just gets rid of a chip which switches antennas:
[2018-09-28 18:56:51]
mefisto :
In P3 Std antennas are omnidirectional, so this does the job. Removing the antenna switching in Ph3 Pro/Adv would lead to issues - antennas there are not omnidirectional. Also, in pro/adv two antennas are always active at the same time - there is double transceiver.
[2018-09-28 19:04:09]
mefisto :
The bypass cable needs to be very short - it causes serious relections of the microwave signal, so if longer than 2cm it will start broadcasting within the case.
[2018-09-29 07:58:11]
buundy :
But why bypassing one antenna helps with the range issue?
[2018-09-29 07:58:41]
buundy :
And why select one rf output instead of the other? One of them is better?
[2018-09-29 20:06:27]
aholtzma :
it’s possible that one of the rf inputs has a terrible noise floor
[2018-09-29 20:06:56]
aholtzma :
some of the atheros chipsets had that problem
[2018-09-29 20:07:59]
aholtzma :
Atheros was like :man-shrugging:
[2018-09-29 20:10:58]
aholtzma :
P3 has the Artsyn RFIC I think?
[2018-09-30 14:34:46]
mefisto :
@buundy I think the switching chip just failed. It either stopped working completely, or its impedance increased enough to cause reflections.
For which antenna to choose - doesn't matter, they're the same; just pick one.
[2018-09-30 15:10:13]
buundy :
Okay, but if the aircraft rotatas and the other antenna signal would be better now there isnt any chip to decide which to choose. If I understand correctly it is something like a diversity receiver in fpv drones
[2018-09-30 15:11:58]
kilrah :
yeah but the point is that it doesn't work, so is better removed than installed and not working...
[2018-09-30 20:44:46]
buundy :
I see :)
[2018-10-03 08:13:33]
kilrah :
interesting, the m2 battery has switches under the clips to detect if it hasn't been inserted all the way
[2018-10-03 11:09:08]
buundy :
Same as in mavic air :)
[2018-10-03 11:09:27]
buundy :
It also notifies nyou when the battery is not inserted properly
[2018-10-03 11:09:31]
buundy :
Clever idea!
[2018-10-03 15:20:23]
kilrah :
well yeah i hope it notifies you if they put switches for it :smile:
[2018-10-03 15:20:35]
kilrah :
indeed
[2018-10-03 15:21:06]
kilrah :
never took an air battery apart, nice that it also has it
[2018-10-03 15:27:35]
mwales3 :
for an application where there is a lot of current flowing, you want that connection to have a lot of surface area. even if there is a connection, it may not be "good enough" for high current. i had a DLP lamp installed in TV and i guess the replacement wasn't screwed down all the way into it's connector, and the connection got hot and melted the connectors
[2018-10-03 15:36:14]
cantrepeat :
yup just like selecting the gauge of wire for electricity
[2018-10-03 15:36:36]
cantrepeat :
too thin and overheat and melt
[2018-10-04 07:21:15]
ender :
Talking of sticky things (@jezzab knows what i mean) …
Did you ever have a “softtouch” plastic surface going sticky on you ?
I use a Xrite i1Pro2 specrtal sensor for work and within 2 weeks the “softtouch” rubbery surface went unbearably sticky. Like if you peeled of a 40 year old 3M Tape from it. If you got that: Acetone os your friend ! Works like a charm and stickyness has been exchanged by uglyness (as the color faded away partially) but wtf, its a tool, doesnt have to look or feel nice :slightly_smiling_face:
[2018-10-04 08:00:13]
kilrah :
yes, common
[2018-10-04 08:00:52]
kilrah :
but usually the plastic it was applied to would be dissolved by acetone...
[2018-10-04 08:29:27]
ender :
only partly :slightly_smiling_face:
[2018-10-04 08:29:48]
ender :
you can use orange oil and other stuff but that can take ages.
[2018-10-04 08:31:04]
jezzab :
if it was PLA your fine, if its ABS... dont do it
[2018-10-04 08:31:42]
jezzab :
You are best with IPA (Isopropyl Alcohol), wont harm plastic and remove just about anything like that.
[2018-10-04 08:36:23]
ender :
sry but no IPA wont work against softtouch slime
[2018-10-04 08:36:59]
ender :
it needs something that includes a certain stuff (German: Terpentene).
[2018-10-04 08:37:03]
jezzab :
Tried it did you?
[2018-10-04 08:37:10]
ender :
of course. first try
[2018-10-04 08:37:18]
jezzab :
ha!
[2018-10-04 08:37:20]
ender :
As i shy away from acetone as last resort always
[2018-10-04 08:37:29]
ender :
(not too healthy)
[2018-10-04 08:37:43]
ender :
I got 99% IPA for my SLP 3D Pronter
[2018-10-04 08:37:48]
jezzab :
English: Turpentine
[2018-10-04 08:37:53]
ender :
and acetone for ABS glueing
[2018-10-04 08:38:18]
ender :
and whatnot on solvents for PETG and resin
[2018-10-05 02:56:33]
jcase :
im building my prusa i3 mk3
[2018-10-05 02:56:34]
jcase :
today
[2018-10-05 02:56:37]
jcase :
first 3d printer
[2018-10-05 05:26:03]
buundy :
We have it since april. It is a miracle!
[2018-10-05 07:31:34]
ender :
yay !
[2018-10-05 07:31:37]
ender :
Good luck :slightly_smiling_face:
[2018-10-05 07:31:52]
ender :
I arrived at my fourth 3D printer now :slightly_smiling_face:
[2018-10-05 08:16:23]
ender :
But still the moment when thought is transferred to matter is somehow magic…
[2018-10-05 08:38:42]
jezzab :
I still find it amazing having done lots of CNC machining that I can print something inside something (cant do this with machining) else with 3D printing (like you can print a ball joint that works)
And you dont have to tool the entire thing..... then snap off a $300 end mill because you were wrong with your speeds or heights
[2018-10-05 09:40:05]
kilrah :
I've spent a lot of time watching my printers print. Not anymore unfortunately, one more thing that's gone from "amazing" to "normal, just get me my part out already!" :disappointed: Hate myself for that
[2018-10-05 09:40:38]
jezzab :
Very true.
[2018-10-05 09:41:40]
jezzab :
Its good when you can get to a point where you can walk away and trust you wont be coming back to it air printing or twisting. Hit print, come back and its done perfectly
[2018-10-05 09:41:43]
kilrah :
cnc i'm still watching :slightly_smiling_face:
[2018-10-05 09:42:38]
jezzab :
haha yeah air printing is ok compared to watching a very expensive CNC mill bit smash and jam into the part you have been machine for 3 hours
[2018-10-05 09:42:38]
kilrah :
yeah i know my printer well now, rarely have issues
[2018-10-05 09:43:05]
kilrah :
only one i have too often is shitty spools getting tangled
[2018-10-05 09:43:21]
kilrah :
<https://imgur.com/a/6MubucJ>
[2018-10-05 09:43:21]
kilrah :
did that the other day on the cnc
[2018-10-05 09:43:48]
kilrah :
(open link, preview is not the right pic)
[2018-10-05 09:43:51]
cantrepeat :
There you go kilrah, trying to get me to spend money again
[2018-10-05 09:44:00]
jezzab :
Problem is i dont use it much now days. Gets dust on the spool. Screws it up. I need to put something on to wipe it off and it comes in. Seen a few guys do it with a sponge and things
[2018-10-05 09:44:59]
jezzab :
very nice. Mines all been CNC routers and mills (300k+). bits get .... expensive when you break them
[2018-10-05 09:45:26]
kilrah :
yeah i have the home gamer version lol
[2018-10-05 09:46:04]
kilrah :
does the job if you give it time and care :stuck_out_tongue:
[2018-10-05 09:46:11]
jezzab :
Yup
[2018-10-05 09:47:04]
kilrah :
dealing with inconsistent rigidity is the biggest pain, speeds/feeds are very unpredictable
[2018-10-05 09:47:53]
cantrepeat :
can you mill stainless steel on yours?
[2018-10-05 09:49:19]
kilrah :
never tried yet but i'd think that's the limit
[2018-10-05 09:49:42]
kilrah :
tried some common steel and that was very sketchy lol
[2018-10-05 09:50:14]
kilrah :
you REALLY have to think of your cut directions
[2018-10-05 09:50:26]
cantrepeat :
would probably take 4 or 5 times as long as aluminum I'm guessing
[2018-10-05 09:50:43]
jezzab :
even aluminium the directions make a big difference
[2018-10-05 09:50:54]
jezzab :
especially for a final finish
[2018-10-05 09:51:06]
kilrah :
yeah
[2018-10-05 09:51:07]
jezzab :
and has to be solid AF
[2018-10-05 09:51:28]
jezzab :
all mines been aluminium
[2018-10-05 09:51:44]
kilrah :
but i mean in steel if i go wrong the bit will start jumping around a few mm :smile:
[2018-10-05 09:51:46]
jezzab :
and a little plastic for a fuel system. was annoying
[2018-10-05 09:52:18]
kilrah :
alu you do cosmetic defects but nothing really bad
[2018-10-05 09:52:27]
jezzab :
hardest bit is learning your speeds to get the alloy to "chip" just right
[2018-10-05 09:52:56]
kilrah :
i've done foam (eps, epp), wood, plastics, acrylic, CF, alu so far
[2018-10-05 09:53:04]
jezzab :
ah yeah cool
[2018-10-05 09:53:12]
jezzab :
foam would be interesting
[2018-10-05 09:53:33]
kilrah :
it makes a freaking hell of a mess lol
[2018-10-05 09:53:39]
jezzab :
i bet haha
[2018-10-05 09:55:17]
kilrah :
and also relatively tricky, easy to start melting stuff and if you do you wrap your tool in goo, which then rubs on the material and melts the whole stuff too lol
[2018-10-05 09:56:02]
jezzab :
yeah nah thanks lol
[2018-10-05 13:20:21]
mingtao :
DJI Mavic 2 RF
[2018-10-08 15:55:12]
doubleohasian :
Anyone have schematic or diagram with gimbal control and collision sensor control board voltages? I have a gimbal with no apparent damage that shows video feedback but no motor control Trying to test this.
[2018-10-08 15:55:56]
doubleohasian :
wrong channel ignore
[2018-10-08 15:56:13]
doubleohasian :
oh wait this is the right channel
[2018-10-08 15:56:18]
doubleohasian :
ignore my ignore
[2018-10-08 15:56:19]
doubleohasian :
lol
[2018-10-08 15:56:26]
good.win.alexs :
@doubleohasian are you sure that your flex is ok?
[2018-10-08 15:56:36]
good.win.alexs :
try to change flex by first
[2018-10-08 15:56:59]
doubleohasian :
no apparent damage, contacts too small to test unless you have another method to check? I guess I could open the gimbal
[2018-10-08 15:57:06]
good.win.alexs :
in most cases - this is an issue when something wrong with gimbal
[2018-10-08 15:57:18]
good.win.alexs :
you can’t open gimbal :slightly_smiling_face:
[2018-10-08 15:57:23]
good.win.alexs :
ok, sorry, you can - once
[2018-10-08 15:57:28]
doubleohasian :
lol
[2018-10-08 15:57:32]
doubleohasian :
Challenge accepted
[2018-10-08 15:57:56]
doubleohasian :
what's the worst that can happen? I break it more? lol.
[2018-10-08 15:57:57]
good.win.alexs :
i recommend you to start from flex cable (that black flat bastard)
[2018-10-08 15:58:09]
doubleohasian :
oh the ribbon? not the harness?
[2018-10-08 15:58:16]
good.win.alexs :
yes
[2018-10-08 15:58:48]
good.win.alexs :
if there are no signs of life from gimbal - then your flat cable is dead, or you have real troubles on gimbal board
[2018-10-08 15:59:45]
good.win.alexs :
but i suppose that main power is same for camera and motors. maybe some ICs between power and some lines, but i have huge doubt
[2018-10-08 16:00:04]
good.win.alexs :
if changing flex will not work for you - you may start testing your board
[2018-10-08 16:00:48]
good.win.alexs :
when gimbal itself is damaged - you will have non working one or two engines, or it will just fail startup calibration (as there are hall sensors inside of each motor)
[2018-10-08 16:01:18]
good.win.alexs :
so, it should at least make some movements on startup in case of just gimbal problems
[2018-10-08 16:01:45]
doubleohasian :
Well we’ll well
[2018-10-08 16:02:07]
good.win.alexs :
if it looks like dead - i can suppose problems with flat cable or board. but knowing that flex is dying on every single mavic - better to start from it
[2018-10-08 16:02:42]
good.win.alexs :
first - try to disconnect-connect that black flat cable from board
[2018-10-08 16:02:54]
doubleohasian :
given that you said the gimbal can't be opened, can the ribbon be replaced or have to go with new gimbal?
[2018-10-08 16:03:06]
good.win.alexs :
if it will not work - take any cheap china copy cable and replace to see if there will be any change in behaviour
[2018-10-08 16:03:09]
doubleohasian :
nah, that sum bitch is ripped right out.
[2018-10-08 16:03:23]
good.win.alexs :
all cables can be replaces
[2018-10-08 16:03:34]
good.win.alexs :
you can find a lot of videos on youtube
[2018-10-08 16:03:42]
doubleohasian :
Thanks, mate.
[2018-10-08 16:03:47]
good.win.alexs :
flat cable is common issue on mavic ))))
[2018-10-08 16:04:04]
doubleohasian :
Thats racist, just because it's black? You inhumane monster.
[2018-10-08 16:04:16]
good.win.alexs :
!DJI
[2018-10-08 16:04:48]
doubleohasian :
Well i'm off to deal with buying a house. Thanks, I'll have to get a new cable in the mail.
[2018-10-08 16:05:45]
good.win.alexs :
whole gimbal is assembled from few parts - camera module, gimbal motor assembly, anti-vibration plate, gimbal logic board
[2018-10-08 16:05:53]
good.win.alexs :
and few plastic covers on gimbal arms
[2018-10-08 16:06:04]
good.win.alexs :
ah, and two cables
[2018-10-08 16:06:29]
good.win.alexs :
so any of this parts can be replaced. but you can’t disassemble arms-motors as they are made as single unit
[2018-10-08 16:07:06]
good.win.alexs :
just few notes about what you should do:
[2018-10-08 16:07:20]
good.win.alexs :
- replace flat cable. if it will work - you are ok
[2018-10-08 16:08:03]
good.win.alexs :
- if after replacing cable it will start making some movements, but still will not pass start calibration - you have also broken gimbal. replace gimbal assembly (arms with motors)
[2018-10-08 16:08:25]
good.win.alexs :
- if after replacing cable it will be still behaving like dead - replace top gimbal board
[2018-10-08 16:08:29]
doubleohasian :
**opens snippet**
[2018-10-08 16:11:34]
doubleohasian :
proceeds to drop the smallest screw in the gimbal arm covers....
[2018-10-08 16:11:41]
doubleohasian :
son of a.....
[2018-10-08 16:28:22]
doubleohasian :
It's much longer than I thought. obligatory she-said joke.
[2018-10-08 18:14:00]
buundy :
Lol :D
[2018-10-08 18:14:21]
buundy :
Btw a lot of copy flex cables doesnt work well
[2018-10-08 18:14:31]
buundy :
It is hard to find original flex
[2018-10-08 18:14:41]
buundy :
It is usually 2x price
[2018-10-08 18:14:50]
buundy :
More flexible and always work
[2018-10-08 18:15:53]
buundy :
For example this: <https://s.click.aliexpress.com/e/blayDgOM>
[2018-10-08 18:16:12]
buundy :
Note the H or K letter on the connector
[2018-10-08 18:16:27]
buundy :
On the copoes there is no lettering
[2018-10-08 18:16:38]
buundy :
*copies
[2018-10-09 12:32:50]
ender :
By the way, as long as i do not find a SMALL Smartdevice with HDMI out and DJI & Parrot compatibility i settled for a cheap universal Solution:
-Yuneec Skyview (new for < 80 EU)
-EZCast 4k or 5G Dongle (4k also implies 5G capability)
-DC2DC 5V from LiIon to 5V USB (salvaged from a cheap Powerbank)
I “Dremelled” a small opening in the Yuneec goggles where i put a small USB outlet with DC2DC from the built in LiIon cell (to not overload the internal 5V DC2DC)
I had zero Problems when i set the AP in the Dongle to 5G, with 2,4G i had loads of trouble :slightly_smiling_face:
The stuff adds about 80ms lag. (Hard to measure precisely, lets say 60-100 ms)
Works fine and even with the built-in weak cell it should last > 1,5h and no one stops me from using a higher cpacity cell or attaching a Power bank for charging on the Go.
[2018-10-09 12:33:03]
ender :
[2018-10-10 07:23:00]
makingthisnameup :
Baller
[2018-10-10 08:03:12]
trulala69 :
@ender: I like your approach a lot... As I'm getting older I've problems seeing close objects (damn, but well it is like it is) and with my Cinemizer I can adjust each eye. Question is, is there enough space in the Skyview for glasses?
[2018-10-10 08:04:33]
ender :
Yes there is enough space, tried it :wink:
[2018-10-10 08:06:47]
trulala69 :
I see :smile:
[2018-10-10 19:48:01]
aciid :
@ender that looks fucking amazing
[2018-10-10 20:32:27]
quad808 :
@aciid @ender Can you guys explain to me what I am looking at? Are these able to pick up DJI video signal? Or just Anafi? Or both, or , or... LOL
[2018-10-10 20:35:40]
quad808 :
DOH! I think I get it. Tablet with HDMI out, like Shield...connected to GO, video out is sent 5g to goggles....NICE
[2018-10-10 20:36:25]
aciid :
@quad808 yup , it's a "casting" rig
[2018-10-10 20:36:38]
aciid :
great for scenery and shooting
[2018-10-10 20:37:03]
quad808 :
I maybe slow, but I got it...LOL
[2018-10-10 20:37:18]
aciid :
beats paying +300€ to DJI :smile:
[2018-10-10 20:37:29]
quad808 :
I have a confession.
[2018-10-10 20:38:05]
quad808 :
I have loads of Goggles at home, probably 4 sets, and don't use any of them, including DJI Goggles...LOL
[2018-10-10 20:38:37]
aciid :
I think this overburden is a common with this hobby
[2018-10-10 20:39:19]
aciid :
just a "few drones" and a "couple of remotes" and a pair of goggles and pantry full of accessory and parts
[2018-10-10 20:39:20]
quad808 :
I just never liked covering my face for fear of the unknown assailant sneaking up on me and bopping me on the head and taking my shit...LOL
[2018-10-10 20:39:46]
quad808 :
me thinks I should suck it up and get over it
[2018-10-10 20:40:19]
aciid :
I just like tinkering with this stuff, hurts like hell to work on anafi and dji
[2018-10-10 20:40:44]
aciid :
I start to feel like why even bother, I've started using gopros with racing copters now
[2018-10-10 20:41:40]
aciid :
I still use dji products just as a platform actually, to experiment stupid stuff. since they just stay in the air better i guess
[2018-10-10 20:42:14]
quad808 :
another question....can you use the 4k casting device on a TV HDMI out? I have a great pair of goggles that have HDMI in...I can sit and watch tv...
[2018-10-10 20:42:32]
quad808 :
now I can buy more stuff!!
[2018-10-10 20:42:50]
aciid :
new mi box is coming soon wait for that it's 4k HDR xD
[2018-10-10 20:43:04]
quad808 :
oooohhhh...nice!
[2018-10-10 20:48:07]
kilrah :
tv doesn't typically have hdmi out
[2018-10-10 20:48:17]
kilrah :
would need an STB/decoder/whatever
[2018-10-10 20:48:34]
kilrah :
PC
[2018-10-10 20:48:40]
quad808 :
OMG. I have lost all brain power today
[2018-10-10 20:49:17]
kilrah :
and that casting device is the opposite too - SUPPLIES an hdmi signal to a display device
[2018-10-10 20:50:05]
quad808 :
yes, thats what I thought. Maybe I should look before asking brain numbing questions....I need a vacation. sheesh
[2018-10-10 20:52:18]
kilrah :
lol
[2018-10-10 21:21:02]
good.win.alexs :
@aciid looks like same 905X amlogic. same mi box 3 in new case?
[2018-10-10 21:22:29]
ender :
Guys, the point is i need NO device with hdmi out. Just my phone...
[2018-10-10 21:47:54]
quad808 :
My brain just exploded. :exploding_head:
[2018-10-11 20:42:36]
ender :
Pick up the pieces :laughing:
[2018-10-14 23:30:04]
doubleohasian :
Shot in the dark but we don’t have board schematics do we? It would save me troubleshooting.
[2018-10-15 01:27:44]
doubleohasian :
I hate this liquid E-tape crap...
[2018-10-18 11:21:52]
fredmicrowave :
Just a warning, may sound obvious, but NEVER obstruct the ultrasound sensors on the MP.
It will fly normally except that it will never go down, at all, untill the battery is dead. (I would call that a stupid and dangerous bug)
[2018-10-18 11:27:11]
cantrepeat :
cant you turn off the sensors in the GO app?
[2018-10-18 11:31:06]
fredmicrowave :
The cameras for precision landing, but not the US afaik.
I tried to turn them on and off but it didn´t help. The firmware assumes the drone is at ground level, and refuses to go down. The only thing I could think of and did no try is to shut it off mid-air...
[2018-10-18 11:34:53]
validat0r :
Same goes with spark and fog/clouds :anguished:
[2018-10-18 11:35:45]
validat0r :
Does the Air have visual sensors, too? Then same goes with it, too
[2018-10-18 11:38:50]
fredmicrowave :
Fog and clouds ( and Sun, sometimes) are why i always fly with visual sensors off . You can turn them off while flying, which is good. But ultrasound sensors are another problem if for some reason they detect an obstacle...
[2018-10-18 11:46:14]
validat0r :
Uhm .. How do you switch sparks vps off?
[2018-10-18 11:46:35]
validat0r :
I mean, front sensors, OK. But the vps on the bottom?
[2018-10-18 11:55:13]
fredmicrowave :
Sorry, only have the Mavic... I don´t think the bottom visual sensors are a problem even if they are obstructed (?)
[2018-10-18 11:56:13]
fredmicrowave :
I always assumed they are only used for precision landing and no-gps positioning...
[2018-10-18 11:57:13]
cantrepeat :
glad I have a MPP then, can shut them all off while in flight
[2018-10-18 11:58:12]
fredmicrowave :
You can shut off the ultrasound sensors ?
[2018-10-18 12:03:24]
cantrepeat :
yes
[2018-10-18 12:05:46]
validat0r :
@fredmicrowave bottom visual sensors will matter if they get obstructed (fog/clouds). AC won't descend.
[2018-10-18 12:07:50]
cantrepeat :
In sport mod it seems that non of the sensors matter. You can fly it into the ground at full speed.
[2018-10-18 12:21:22]
cantrepeat :
none*
[2018-10-18 12:21:35]
fredmicrowave :
Ok, but as long as you can disable them ( the visual sensors) I suppose it doesn´t matter too much...
This time I also I switched to sport mode but it made no difference.
[2018-10-18 13:15:18]
validat0r :
nah, sport mode does recognize vps sensors as well
[2018-10-18 13:15:49]
validat0r :
it might be difficult for the AC to break before hitting the ground
[2018-10-18 13:15:58]
validat0r :
but it tries
[2018-10-18 13:44:02]
cantrepeat :
I get some SS of the GO app sensor page later today. Maybe I can make sense of what I'm seeing.
[2018-10-18 14:23:05]
fredmicrowave :
This is confusing. I don't think you can ever disable US sensors, at least on the Mavic. They are one of the first things to start when you power up the drone. You can hear them clicking, maybe part of the FC startup sequence.
Anyway, the facts remains, from real experience: The drone will not descend as long as it thinks it is close to to the ground (or already landed).
To me, this is a clear example of a programming bug that can put people at risk. Manual input should always override automatisms, or machines will eventually rule humans :stuck_out_tongue:
[2018-10-19 06:32:52]
jezzab :
Turn off Landing Protection @fredmicrowave
[2018-10-19 06:33:27]
jezzab :
You can then slam into the ground to you hearts content. I hate it being on
[2018-10-19 06:34:08]
lolo780 :
I fly with bottom mounted external batteries all the time. Jist turn the sensors off.
[2018-10-19 11:00:43]
fredmicrowave :
I forgot this landing protection could be disabled... nice. Thanks!
[2018-10-22 00:17:46]
zapf :
I have a inspire 2 battery showing a broken cell error after being recharged. Its had less than 10 charges, and all the cells show the correct voltage after charging. Someone said to deep cycle to try and get them better in balance, but how exactly do i do that when it won't let me take off
[2018-10-22 05:05:10]
puckquentin :
@zapf you don't need to take off in order to deplete your batteries
[2018-10-22 05:05:50]
puckquentin :
turn on i2 and let it sit there for whatever hours it takes to run the batteries down
[2018-10-22 05:06:16]
puckquentin :
i would guess that it should take ~10hr or so
[2018-10-22 05:42:26]
kilrah :
and half of that with only one battery in
[2018-10-22 07:47:05]
mefisto :
For anyone doing repairs on Ph3 Pro/Adv gimbals - here's an update of my "8fps FPV video fix" archive, with more detailed description:
<https://mega.nz/#!sdUlzCZS!sBz-eGjXkftllSxl0F5eXn05P_MlmnHpEdEiBac2PqY>
[2018-10-22 13:50:25]
fredmicrowave :
@zapf I have done connecting a car bulb to the battery, but you have to control voltage carefully, or using the "discharge" menu of a regular lipo charger, but it is slow...
[2018-10-22 20:17:44]
lolo780 :
You might be able to set battery type to 3 or non dji, as well as turn off the start motor check. That will even let you take off with the usb cable plugged in and AC inverted.
[2018-10-22 20:26:54]
good.win.alexs :
are you talking about g_cfg_debug.motor.no_start_motor_check?
[2018-10-22 20:27:14]
good.win.alexs :
does _debug params have effect in normal mode?
[2018-10-22 21:20:04]
lolo780 :
Yeah and there's one other motor parameter but it's not persistent.
[2018-10-22 21:20:23]
lolo780 :
Changes all modes as far as I know
[2018-10-22 21:23:49]
good.win.alexs :
which one?
[2018-10-26 13:06:37]
validat0r :
little thing with spark: since last crash, lateral movements aren't properly compensated by the gimbal system on my spark. but only, when airborne, not when the thing is sitting in my hand and moved manually. Any ideas?
[2018-10-26 13:56:33]
zapf :
@puckquentin left it on, got it all sorted out!
[2018-10-26 18:16:46]
validat0r :
hmm .. will try
[2018-10-26 18:44:03]
kilrah :
normal or sport?
[2018-10-26 18:58:59]
validat0r :
normal
[2018-10-26 18:59:04]
validat0r :
(and sport for that matter)
[2018-10-26 19:00:35]
kilrah :
well in sport it's normal
[2018-10-26 19:02:00]
validat0r :
i know .. but the picture starts tilting at very small lateral movements already, so there is definitely sth wrong
[2018-10-29 13:48:17]
fredmicrowave :
@lowellfoo780 Mounting a floodlight (30W led) on my MP for night photograpy. Do you think 330grs is OK for motors an escs, on the long run ?
[2018-10-29 16:15:57]
lolo780 :
A single stock battery won't like that but it will still fly. Add one external battery and you'll be fine.
[2018-10-29 21:01:13]
fredmicrowave :
I see. So the weak point is the battery discharge rate not the motors... But if I add one external battery it will add even more weight...
I am not after flight time.
Thanks.
[2018-10-29 21:02:51]
fredmicrowave :
The floodlight battery is independent, BTW. A 1000mah Lipo.
[2018-10-29 21:04:13]
fredmicrowave :
And the led its rated 30w but drain 2.2A@12v
[2018-10-30 07:24:40]
lolo780 :
If flight time isn't an issue it should work ok. Just make sure the battery is warm before liftoff.
[2018-10-30 08:58:23]
bjoneseying :
On the enterprise they seem to be drawing the power from the main flight battery.
[2018-10-30 12:22:50]
fredmicrowave :
Yes, i noticed it too. Though about doing that on the Mavic, but drawing 2.2 amps more from the main battery didn't seem a too good idea ...
[2018-10-31 20:53:05]
w4t3r :
@bjoneseying strange thing is the MP2 batteries are limited to 80w charging and have 60wh. Mavic pro batteries have ~45wh and you can charge them with 100w. But for some reason they still can power the mavic plus the spotlight
[2018-10-31 22:49:41]
fredmicrowave :
I successfully saved a MP battery with one low cell ( due to low discharge) by charging that one cell only on a lipo charger.
Cycling the battery 3 times did not work.
[2018-10-31 22:52:32]
fredmicrowave :
MP FC
[2018-10-31 22:52:47]
fredmicrowave :
[2018-11-02 11:07:51]
w4t3r :
But why is the discharge rating higher then?
[2018-11-02 11:08:25]
w4t3r :
Didn‘t know they where 4.4v/cell, thanks!
[2018-11-02 11:09:26]
good.win.alexs :
4.4? are you sure?
[2018-11-02 11:09:30]
kilrah :
yup
[2018-11-02 11:09:36]
good.win.alexs :
btw, on MP1 lipo is not 4.35 even
[2018-11-02 11:09:42]
good.win.alexs :
they are using 4.3 lion
[2018-11-02 11:10:14]
kilrah :
it is 4.35
[2018-11-02 11:10:20]
good.win.alexs :
nope, it’s not :wink:
[2018-11-02 11:10:22]
kilrah :
terminates at 13.05
[2018-11-02 11:10:36]
good.win.alexs :
they are made as 4.3 :slightly_smiling_face:
[2018-11-02 11:10:46]
kilrah :
but they go to 4.35 with them
[2018-11-02 11:10:47]
good.win.alexs :
if you are getting more - you are overcharging them
[2018-11-02 11:11:09]
good.win.alexs :
@kilrah maybe, it’s time to calibrate charger?
[2018-11-02 11:11:43]
good.win.alexs :
i have original cells from China, they are rated as 4.3V
[2018-11-02 11:12:00]
kilrah :
DJI rate and charge them at 4.35
[2018-11-02 11:12:03]
kilrah :
it's not me..
[2018-11-02 11:12:48]
good.win.alexs :
why you think they are rating them as 4.35? it’s not written anyway
[2018-11-02 11:13:09]
good.win.alexs :
11.4V on batt, so 3.8V middle voltage. it doesn’t mean 4.35 at max charge
[2018-11-02 11:13:23]
kilrah :
...
[2018-11-02 11:13:41]
kilrah :
13.05 isn't written clearly enough maybe?
[2018-11-02 11:13:43]
good.win.alexs :
ah, yes, did miss first line
[2018-11-02 11:13:51]
good.win.alexs :
then they are playing with fire
[2018-11-02 11:14:12]
kilrah :
M2 is 17.6
[2018-11-02 11:14:13]
good.win.alexs :
did you see news about Insp2 and Matrice batteries? )))
[2018-11-02 11:14:52]
kilrah :
well we haven't seen a slew of Mavic batteries catching fire, so... no
[2018-11-02 11:15:00]
good.win.alexs :
in MP1 - there are two manufacturers for cells - Amperex and LG
[2018-11-02 11:15:15]
good.win.alexs :
and both are rated as 4.3V cells
[2018-11-02 11:15:37]
good.win.alexs :
maybe, they are tolerant enough to work on 4.35
[2018-11-02 11:15:47]
good.win.alexs :
but they are not supposed to be used in that way…
[2018-11-02 11:15:50]
kilrah :
well they obviously are lol
[2018-11-02 11:17:11]
kilrah :
M2 cells are impressive, at 70% they're still over 4V
[2018-11-02 11:17:28]
kilrah :
under load in flight
[2018-11-02 11:18:04]
good.win.alexs :
for 4.4 they definitely changed chemistry
[2018-11-02 11:18:11]
good.win.alexs :
didn’t see such cells in the wild
[2018-11-02 11:18:33]
good.win.alexs :
but, this may be some special order to Amperex or LG
[2018-11-02 11:18:40]
good.win.alexs :
DJI has resources for such contracts
[2018-11-02 11:19:30]
kilrah :
yep
[2018-11-02 11:20:34]
cantrepeat :
too bad the M2 batteries aren't backwards compatible with M1
[2018-11-02 15:05:45]
w4t3r :
agreed
[2018-11-02 18:41:53]
lolo780 :
That would make the m2 suck on 3s
[2018-11-02 18:42:10]
lolo780 :
The m2 battery packaging is much better
[2018-11-02 18:47:33]
jcase :
m2 is sooo much faster than mp
[2018-11-02 19:38:54]
lolo780 :
The M2 is so good stock that I haven't modded mine yet
[2018-11-02 20:24:01]
bjoneseying :
DJI isn't the only one using 5.4v, Samsung use them on galaxy phones
[2018-11-02 20:24:11]
bjoneseying :
4.4v
[2018-11-02 20:25:02]
bjoneseying :
Chemistry is lithium cobalt oxide if memory serves
[2018-11-02 20:26:34]
bjoneseying :
DJI have been using 4.4 since the mavic air
[2018-11-02 23:33:38]
lolo780 :
The non platinum does
[2018-11-03 00:05:47]
w4t3r :
So they could have made them backwards compatible after all?
[2018-11-03 00:06:17]
w4t3r :
Is the protocol the same?
[2018-11-03 00:43:03]
bjoneseying :
Since when did the M1P fly on 4S batteries?
[2018-11-03 06:31:21]
lolo780 :
M1 can use 4s
[2018-11-08 09:34:15]
xela75 :
Hey ! can someone post pictures of Mavic 2 PCB ?
[2018-11-08 09:34:49]
xela75 :
I can't find them in the files section..
[2018-11-08 12:07:45]
makerbob :
Might anyone give me a hint, how to extract the gimbal's pitch (motor) signal to drive /slave a 2nd gimbal to the movement of the original Mavic gimbal. Me thinks one could solder wires to some of the service pads of the gimbal control board. If only I knew which one to start with?
<https://github.com/o-gs/dji-firmware-tools/wiki/WM220-Gimbal-Sensor-Control-board>
[2018-11-08 12:25:28]
ender :
Thats not gonna work i fear.
[2018-11-08 12:25:47]
ender :
Unless the physical properties of the second gimbal are precisely like the original one.
[2018-11-08 12:26:40]
ender :
The calibration of a gimbal is very delicate, you cannot simply drive a different one (or one in parallel) with the signals for an existing well calibrated one.
[2018-11-08 14:14:15]
makerbob :
Thanks ender. What I'm investigating is the idea to control only coarsely the 2nd "main" gimbal pitch (not tilt compensated) with the dial of mavic's rc. I guess at some point along the gimbal ribbon, there should be the pure bldc motor signals (turn cw, turn ccw) + sensor information of the tilt angle or/and motor position (?). If I could grab these and translate it with some arduino based solution /esc maybe it could work. On the gimbal control board the pads A1 B1 C1, A2 B2 C2, A3 B3 C3 (anyone know what three of them are pitch?) and the pads PITCH and H1_PITCH look tempting.
[2018-11-08 14:27:38]
ender :
Hmm, what would come closest is the sensor seignal from the 3 gyros which are probably i2c.
[2018-11-08 14:28:01]
ender :
Dont waste your time trying to get the pitch information from the motor signal if you ask me…
[2018-11-08 21:43:04]
makerbob :
Well, I'm very good at this - wasting time that is. But you are propable right. However I found out, that service pads A1, B1, C1, A_N, PowerGND, GND and 3V3M go to the pitch motor of the gimbal.
[2018-11-08 21:53:13]
ender :
could you tell us what you are up to, maybe “WE” have an idea ? :slightly_smiling_face:
[2018-11-08 21:53:35]
ender :
And i am that other guy wasting too much time on mad ideas :wink:
[2018-11-08 21:53:43]
ender :
(Now going to bed…)
[2018-11-09 10:48:09]
makerbob :
Yes, I love to. The idea is to mount a tiltable platform or device (= "device2" i.e. flashlight, thermal camera) on top of the mp1. I'd prefer to control the tilt angle (0°, -90°) of device2 with mavic's rc as this elliminates the need of yet another remote control. The tiltable platform would be moved by a servo or bldc-motor; wired to some microcontroller/shield to do logic/motor control = "control2"
Concepts I thought of so far to control the tilt angle of device2 (mavic rc controlled):
1) Using sensor data/bldc signal/or tx,rx data from or to MP1 gimbal fed into control2 -> would potentially permit tilt angles between +30° and -90° with an added benefit to use dedicated tilt dial wheel on the mavic remote...but way over my head
2) Using MP1 front LED as signal as many drop devices do -> restricted to two discrete servo positions like 0° and -90° but easier to do)
Other things ("autonomous" control of device 2)
3) Monitoring main battery voltage, if it drops below a threshold, device2 tilts down at the end of the flight -> not really what I want
4) Using a tiny tilt switch similar to <https://signalquest.com/product/components/sq-sen-8xx/> attached to the mp1 gimbal -> propably not robust, restricted to discrete positions
So I propably come out with concept 2), any input for coming closer to concept 1) is very welcome!
[2018-11-09 12:13:36]
ender :
>> 2) Using MP1 front LED as signal as many drop devices do -> restricted to two discrete servo positions like 0° and -90° but easier to do)
Well, that could be turned into something else. LED OFF = NO MOVEMENT, LED on: Movement in Direction (1) ( e.g. UP). then LED OFF and next LED ON = Movement in Direction (2). A bit fiddling but easy to code and you would have all angles open to move to :slightly_smiling_face:
[2018-11-09 12:14:10]
ender :
BTW, i also had a Cree, a FLIR and a NERF Launcher on my MP1 & Bebops :slightly_smiling_face:
[2018-11-09 12:15:48]
ender :
or… If you dont need too much range you can use the MP1 via WiFi and your Arduino can hook up to your MP1 Wifi as well and a second Android device (or PC or whatever) could also connect (using MP1 as wifi AP) and control whatever you like. That way i got video stream from FLIR in one of my experiments.
[2018-11-09 22:18:37]
fredmicrowave :
What about mounting an optical sensor, ( reflective or not) on the fixed part of the gimbal, with the coding ( printed strip, or wheel like in a PC mouse, or printer strip) fixed to the tilting part of the gimbal ?
Then you just need to convert signals to repeat the gimbal tilt movement...
If you need a relatively low resolution, an absolute encoder would make it be even possible with discrete components, no calibration or programming needed...
[2018-11-10 07:12:19]
evgeniychuiko :
Hi guys! I was off for few months. Any new info about mavic’s FC reflash? I’ve seen many new steps with firmware decryption, nice! But maybe some experience with direct firmware upload to FC chip?
[2018-11-10 10:05:13]
good.win.alexs :
@evgeniychuiko looks like you was too long in cryo :grin: fc patcher is out and works perfectly - using 01.04.300 with unlocked limits and tuned params ;)
[2018-11-10 10:09:38]
evgeniychuiko :
Ive seen it... Im talking about firmware upload to bricked FC. Through SWD or JTAG pins. If patcher was made without any mistakes and bricked FCs, Im very impressed)
[2018-11-10 10:19:59]
validat0r :
i heard of no bricked FCs during development
[2018-11-10 19:38:27]
jcase :
if i were to design a FC firmware patcher, i would setup qemu or something and emulate it first
[2018-11-10 19:38:37]
jcase :
im betting they did that
[2018-11-11 02:12:48]
validat0r :
Nah
[2018-11-17 10:27:13]
evgeniychuiko :
@mefisto any experience with DUPC sending inside dji system? I mean using a dji_mb_ctrl for example
[2018-11-17 10:30:10]
validat0r :
Had some fun with that. But don't know what dupc is
[2018-11-17 10:35:41]
evgeniychuiko :
55 packets. I need to send some packets from RC side to flightcontroller.
[2018-11-17 10:38:04]
validat0r :
really? from the remote control?
[2018-11-17 10:39:07]
validat0r :
is issue dji_mb_ctrl on the android on the AC
[2018-11-17 10:40:28]
validat0r :
have you had a look at the cmd line params of dji_mb_ctrl?`with that you can build the packets sent to any target listening to duml packets
[2018-11-17 10:42:44]
validat0r :
but i guess jezz or mefisto are more qualified to help you
[2018-11-17 10:43:19]
validat0r :
i just wanted to switch off ac's leds and i got that and am happy now
[2018-11-17 10:45:04]
evgeniychuiko :
Do you use mb_ctrl for it?
[2018-11-17 10:49:02]
validat0r :
yes
[2018-11-17 10:49:28]
evgeniychuiko :
Local from AC side?
[2018-11-17 10:49:40]
validat0r :
it's a script on the ac ..
[2018-11-17 10:50:27]
validat0r :
sparks rc is quite avers to persistant system changes ..
[2018-11-17 10:52:14]
validat0r :
maybe one could issue that cmd from the app, too ..
[2018-11-17 11:40:37]
mefisto :
You can use either dji_mb_ctrl or comm_serialtalk.py to send duml/dupc packets to the drone.
[2018-11-17 11:41:17]
mefisto :
<https://github.com/o-gs/dji-firmware-tools#comm_serialtalkpy>
[2018-11-17 11:53:34]
evgeniychuiko :
Yeah, already did it with @ilovemynexus4))) Successful send duml to FC from RC's mb_ctrl
[2018-11-20 14:14:47]
hostile :
@bryanhalf
[2018-11-20 14:14:49]
bryanhalf :
@bryanhalf has joined the channel
[2018-11-20 14:14:55]
hostile :
@supahfly
[2018-11-20 14:14:57]
thecatthathacks :
@supahfly has joined the channel
[2018-11-20 14:15:23]
hostile :
@supahfly @bryanhalf you two may be in tune with what @evgeniychuiko is doing...
[2018-11-20 15:33:25]
thecatthathacks :
ohhh nice
[2018-11-20 15:33:27]
thecatthathacks :
morning
[2018-11-20 16:45:24]
ender :
heya!
[2018-11-21 10:35:48]
mingtao :
Hasselblad 1" sensor .....
[2018-11-21 10:37:57]
kilrah :
nice
[2018-11-21 10:42:27]
mingtao :
1" sensor like Chinese XXL size clothes - but all rest world size M ))
[2018-11-21 10:45:16]
kilrah :
1 inch isn't sensor size
[2018-11-21 10:45:42]
kilrah :
it's well known that the main characteristic of the "1 inch standard" is that there is exactly nothing in it that measures 1 inch
[2018-11-21 10:47:30]
mingtao :
Yes .. write one , but mean another, but sell as 1" ..
[2018-11-21 10:47:53]
kilrah :
well there was, but 50 years ago
[2018-11-21 10:47:56]
kilrah :
and it was a video standard
[2018-11-21 10:48:02]
kilrah :
but yeah, everybody does that
[2018-11-21 10:48:36]
kilrah :
it's "the active picture size an ancient 1 inch video vacuum tube would give"
[2018-11-21 10:49:22]
kilrah :
since that size has stayed standard for video cameras and lenses and called like that it's then been reused for photo cameras for quite a while now
[2018-11-21 10:49:56]
mingtao :
yes i know... but ..it was 50 years ago... new time need new approach
[2018-11-21 10:52:07]
validat0r :
<https://en.wikipedia.org/wiki/Image_sensor_format#/media/File:SensorSizes.svg>
[2018-11-21 11:01:26]
cantrepeat :
3G 4G LTE marketing
[2018-11-21 11:05:10]
cantrepeat :
when the manufacture can write the standard then and it's not universal the standard will never be the same.
[2018-11-21 13:43:15]
good.win.alexs :
is there any information about different “kind” of duml/duss commands? any notes/structured info/etc
[2018-11-21 13:43:48]
good.win.alexs :
anything is welcome. mostly i’m interested now how RF power is being set on both RC and AC, but will be happy to learn other things as well :slightly_smiling_face:
[2018-11-21 13:44:09]
good.win.alexs :
and please - i know where are wireshark and dissector :slightly_smiling_face:
[2018-11-21 13:44:22]
validat0r :
RF power is set by setting region code
[2018-11-21 13:44:36]
good.win.alexs :
by setting region code in Go
[2018-11-21 13:44:47]
validat0r :
well, not in, but by GO
[2018-11-21 13:44:49]
good.win.alexs :
but is it same on rc/ac level?
[2018-11-21 13:45:06]
good.win.alexs :
Go sends something to RC, and RC sends to AC
[2018-11-21 13:45:13]
good.win.alexs :
so question is - what
[2018-11-21 13:50:42]
validat0r :
GO sends to RC
[2018-11-21 13:51:06]
validat0r :
and GO sends to AC
[2018-11-21 13:52:03]
validat0r :
not sure if RC sends to AC, if you're connected by USB cable, but GO should be able to send DUML cmd to AC when wired to RC
[2018-11-21 13:53:11]
validat0r :
55 17 04 38 02 0e 1d 00 40 07 30 55 53 00 00 55 53 00 00 01 00 fe 5d
[2018-11-21 13:53:27]
validat0r :
thats DUML for set RC to region code US
[2018-11-21 14:39:32]
good.win.alexs :
go has direct communication with RC - so any command for AC have to go through RC
[2018-11-21 14:40:06]
good.win.alexs :
so there are two ways - Go sends command to RC, and RC sends command to AC in chain (as response to Go command)
[2018-11-21 14:40:35]
good.win.alexs :
second option - Go sends two commands - one is accepted directly by RC, and second is passed through air link to AC
[2018-11-21 14:41:34]
good.win.alexs :
what i’m amazing - there should be easy way to pass different RF levels to RC and AC (for ex., Boost on AC and CE on RC) using duml framework, without modifying Ocusync firmware
[2018-11-21 15:23:12]
validat0r :
Sure. Ive been long waiting for an "send arbitrary duml" app for android :smile:
[2018-11-21 15:28:50]
good.win.alexs :
Ita not big deal to make solution
[2018-11-21 15:29:02]
good.win.alexs :
I want understand how things are working
[2018-11-21 15:29:29]
good.win.alexs :
All chain of events, exact commands - for FCC, for Boost etc.
[2018-11-21 15:34:24]
validat0r :
Me too. Let's make a wiki page
[2018-11-21 17:48:40]
evgeniychuiko :
Me too) We need dump of RC<>GO communication. I have part of duml for search
[2018-11-21 17:54:06]
evgeniychuiko :
@jcase promised me to do it, with usb sniffer, few months ago)
[2018-11-21 17:54:31]
jcase :
Sniff what
[2018-11-21 17:54:39]
jcase :
I can do it
[2018-11-21 17:54:47]
jcase :
Just what cmd
[2018-11-21 17:55:34]
jcase :
Fcc boost?
[2018-11-21 17:57:37]
jcase :
Remind me later, I'm waiting at doctor now
[2018-11-21 18:01:34]
evgeniychuiko :
yeah, fcc duml. My idea is add fcc config and sniff for packets which contains FFFF0048
[2018-11-21 19:04:57]
good.win.alexs :
Fcc and boost. And understanding communication chain between go, rc and ac. Mainly - is Go sending country to AC directly through RC? Or rc is generating duml for AC as response to Go command?
[2018-11-21 20:05:23]
jcase :
@evgeniychuiko @good.win.alexs I can do it, ive never had to enable FFC boost etc, so someone will need to walk me through it but i can sniff it
[2018-11-21 20:05:28]
jcase :
or, I could build cmd from scratch
[2018-11-21 21:07:18]
good.win.alexs :
if you have any knowledge that is not described - you can share it :slightly_smiling_face:
[2018-11-21 21:07:56]
good.win.alexs :
about enabling fcc, boost - you can just use NLD Go to get easy configuration through text config file (json)
[2018-11-21 21:37:35]
jcase :
what do you mean knowledge not described?
[2018-11-21 21:38:23]
jcase :
everyone seems to have knowledge not described, lot of people dont seem to share, i stopped sharing for that reason, perhaps i will again when i see others doing so
[2018-11-21 21:38:33]
jcase :
but fwiw, send me the apk and tell me how to send the packetse
[2018-11-21 21:38:36]
jcase :
ill dump the packets
[2018-11-21 21:51:33]
good.win.alexs :
ok, i’ll do that later. and it was just kind ask - if you feel that you can’t or you just don’t want to share anything - you are free to not do that :slightly_smiling_face: but if you want - i’ll be happy to learn anything new
[2018-11-21 23:35:39]
jcase :
as i do
[2018-11-21 23:36:14]
jcase :
i just see people popping in bragging about things, and then see nothing posted, part of the reason ive been sitting on research
[2018-11-22 06:58:41]
good.win.alexs :
IF i have something really useful - it is on my github or on proper forum thread :)
[2018-11-22 10:18:09]
bjoneseying :
<https://www.youtube.com/watch?v=fUEBLh2jezc>
[2018-11-22 10:18:22]
bjoneseying :
Bo explains the 1" sensor thing in laymens terms
[2018-11-22 14:46:04]
jcase :
@good.win.alexs were you the one that said unpacking current secneo is easy?
[2018-11-22 14:46:19]
jcase :
where is the link to that
[2018-11-22 14:47:01]
good.win.alexs :
never said that it will be easy :slightly_smiling_face:
[2018-11-22 14:47:11]
good.win.alexs :
it’s hard as hell to fool secneo
[2018-11-22 14:47:15]
good.win.alexs :
but it is possible
[2018-11-22 14:47:16]
jcase :
:slightly_smiling_face:
[2018-11-22 14:47:27]
good.win.alexs :
had to make pause in the middle of my road due to overload on work
[2018-11-22 14:47:41]
good.win.alexs :
but still i’m planning to continue my fight :slightly_smiling_face:
[2018-11-22 14:48:00]
jcase :
its an interesting one
[2018-11-22 14:48:20]
good.win.alexs :
you know - it’s all about time
[2018-11-22 14:48:32]
jcase :
its all about secneo being dumb
[2018-11-22 14:48:36]
jcase :
and time
[2018-11-22 14:48:37]
jcase :
lol
[2018-11-22 14:49:11]
good.win.alexs :
there is nothing impossible, you just need good brain, enough wish and a lot of time
[2018-11-22 14:49:36]
jcase :
been writing android unpackers for a while
[2018-11-22 14:49:51]
jcase :
secneo gets more obnoxious and stupid
[2018-11-22 14:49:55]
jcase :
as the years go on
[2018-11-22 14:51:06]
jcase :
anyhow someone shoot me the APK they want sniffed
[2018-11-22 14:51:23]
jcase :
and if you know the payload etc to sniff
[2018-11-22 14:51:26]
jcase :
it will take 2 min
[2018-11-22 14:52:35]
good.win.alexs :
i have no experience on reverse engineering, and especially on packers
[2018-11-22 14:52:51]
good.win.alexs :
so it is not so straightforward for me
[2018-11-22 14:53:27]
good.win.alexs :
mostly i’m admin and developer (developing mostly for business, so high level langs)
[2018-11-22 14:56:37]
jcase :
its fun
[2018-11-22 14:56:50]
jcase :
getting boring now tho
[2018-11-22 14:57:09]
jcase :
good just added back in memory loading of dex files
[2018-11-22 14:57:13]
jcase :
after removing it
[2018-11-22 14:57:15]
jcase :
so thats fun too
[2018-11-22 15:12:05]
validat0r :
this community could really need a fresh, nosecneoed GO apk
[2018-11-22 16:35:06]
webmaster :
I would even go as far as financially adding to a bounty, set for one, that gets to unobfuscate a newer GO version than there currently is.
[2018-11-22 16:35:28]
webmaster :
Meaning a new nosecneo version of GO 4
[2018-11-22 19:47:30]
lolo780 :
I'd donate some $
[2018-11-22 20:03:38]
mingtao :
[2018-11-22 21:08:49]
evgeniychuiko :
@jcase @good.win.alexs When we use configs files in GO, there should be DUML packets. In case of force23,force25 and fcc it should be sender=2,reciever=9,cmd_set=9,cmd_id=39
[2018-11-22 21:09:23]
evgeniychuiko :
and some payload, for examle FFFF0048 for fcc
[2018-11-22 21:09:58]
evgeniychuiko :
For force_boost cmd_id 60, I guess
[2018-11-22 21:16:36]
jcase :
ok, well ill need the apk
[2018-11-22 21:16:44]
jcase :
and config
[2018-11-22 21:16:48]
jcase :
i can do it tomorrow probably
[2018-11-22 21:16:55]
validat0r :
what apk?
[2018-11-22 21:17:06]
jcase :
one to provide the traffic they want dumped
[2018-11-22 21:17:30]
evgeniychuiko :
<https://www.apkmirror.com/apk/dji-technology-co-ltd/dji-go-4/dji-go-4-4-1-3-release/>
[2018-11-22 21:17:40]
jcase :
ok so normal apk works?
[2018-11-22 21:17:45]
jcase :
just need to load a config or something?
[2018-11-22 21:17:51]
jcase :
or wait, im in the US
[2018-11-22 21:17:59]
jcase :
so it should be by default?
[2018-11-22 21:18:13]
jcase :
either way, holiday, someone want to ping me tomorrow when im not cooking for family
[2018-11-22 21:18:14]
jcase :
ill do it up
[2018-11-22 21:21:42]
validat0r :
has to be put in some directory, hasnt it?
[2018-11-22 21:22:40]
evgeniychuiko :
I've tried to make DUML with cmd_set 9 and cmd_id 39, it definitely works, but wrong way... SDR just rebooting, with some peak around 2,5GHz... Something wrong with payload I guess
[2018-11-22 21:23:31]
evgeniychuiko :
Yeah, sure, @jcase has to unzip it, and put in GO app folder
[2018-11-22 21:23:51]
jcase :
which go app folder
[2018-11-22 21:23:58]
jcase :
/data/data/djiblah
[2018-11-22 21:24:01]
jcase :
or another
[2018-11-22 21:24:10]
good.win.alexs :
on sdcard
[2018-11-22 21:24:11]
validat0r :
nah ... /sdcard/dji/dji.go.4
[2018-11-22 21:24:16]
jcase :
ok
[2018-11-22 21:25:07]
evgeniychuiko :
put the dot DJI dot configs file in the right folder \Android\data\dji.go.v4\files
[2018-11-22 21:27:04]
jcase :
someone speak up tomorrow, it will take 10min
[2018-11-22 21:27:07]
jcase :
i just have house full of family atm
[2018-11-22 21:27:29]
validat0r :
<http://dji.retroroms.info/howto/dji_configs>
[2018-11-22 21:27:48]
validat0r :
I wonder who put "\" onto this page
[2018-11-22 21:28:01]
evgeniychuiko :
And file name should be .DJI.configs please rename it. No problem @jcase, we'll wait)
[2018-11-22 21:28:52]
validat0r :
maybe we'd need someone who actually did this ...
[2018-11-22 21:29:18]
jcase :
bah fuck brother in law is here
[2018-11-22 21:29:22]
jcase :
let me get a drink, ill hide in office
[2018-11-22 21:29:26]
jcase :
and do it now
[2018-11-22 21:31:18]
jcase :
to those that are not married, the more awesome your wife is
[2018-11-22 21:31:21]
jcase :
the more shit her family is
[2018-11-22 21:31:22]
jcase :
its fact
[2018-11-22 21:32:11]
validat0r :
@jskon have you had any luck sending arbitrary dumls from the app? i still havent come around to looking for a elegant solution for this
[2018-11-22 21:32:21]
jcase :
I can
[2018-11-22 21:32:23]
jcase :
sending duml is ez
[2018-11-22 21:32:24]
jcase :
from app
[2018-11-22 21:32:37]
jcase :
3 different ways to do it
[2018-11-22 21:32:43]
validat0r :
ok ..
[2018-11-22 21:32:55]
jcase :
if you want to get real lazy, you can just write it to the outputstream
[2018-11-22 21:32:58]
jcase :
like write raw duml to it
[2018-11-22 21:34:00]
jcase :
installing now
[2018-11-22 21:34:03]
jcase :
should i do all the config shit
[2018-11-22 21:34:06]
jcase :
before runnign the app
[2018-11-22 21:34:07]
jcase :
or what
[2018-11-22 21:35:24]
validat0r :
my plan was to hijack some menu item in GO or maybe patch one in of my own to trigger a DUML cmd .. I think I find the smali for the menu item, but I havent found the part where GO sends a DUML
[2018-11-22 21:35:27]
evgeniychuiko :
@ilovemynexus4 no, I don't need to send anything from app. If I will have fcc or boost DUML packet, I will use RC standalone)
[2018-11-22 21:36:17]
evgeniychuiko :
As I said you before, you can use long press of RC buttons for any your own DUML
[2018-11-22 21:36:53]
validat0r :
ah, right .. yeah, problem is still the Spark RC .. it's different to Mavic RC
[2018-11-22 21:37:07]
validat0r :
so I have to use the App
[2018-11-22 21:37:16]
evgeniychuiko :
@jcase you have to put .DJI.configs file
[2018-11-22 21:39:25]
validat0r :
i'm still unclean on where to put the config file
[2018-11-22 21:40:03]
evgeniychuiko :
As I know it doesn't work on spark
[2018-11-22 21:40:12]
validat0r :
ok .. maybe i got it wrong and /data/data/dji.go.v4/files is really the right path
[2018-11-22 21:40:47]
validat0r :
yeah .. it doesnt .. i'm just kind of going through the motions
[2018-11-22 21:45:17]
good.win.alexs :
@jcase best family is that lives far from you :stuck_out_tongue:
[2018-11-22 21:47:20]
jcase :
ok yeah
[2018-11-22 21:47:23]
jcase :
i nede ot know the right path
[2018-11-22 21:47:26]
jcase :
im not hunting for it
[2018-11-22 21:48:04]
validat0r :
/data/data/dji.go.v4/files
[2018-11-22 21:48:16]
jcase :
so not on sdcard?
[2018-11-22 21:48:27]
jcase :
ok i cant put in /data/data right now
[2018-11-22 21:48:36]
jcase :
i dont have rooted phone on hand, ill get one out tomorrow
[2018-11-22 21:48:51]
validat0r :
lol .. I never did it, but "\Android\data\dji.go.v4\files" doesnt strike me as the right path
[2018-11-22 21:48:52]
evgeniychuiko :
you dont need root for it
[2018-11-22 21:48:58]
validat0r :
darn
[2018-11-22 21:48:59]
jcase :
if it goes on /data/data
[2018-11-22 21:48:59]
validat0r :
no root
[2018-11-22 21:49:01]
jcase :
then yes you do
[2018-11-22 21:49:12]
jcase :
im confused, does it go on sdcard
[2018-11-22 21:49:14]
jcase :
or /data/data
[2018-11-22 21:49:15]
evgeniychuiko :
if you have same folders on sdcard, put configs in both places
[2018-11-22 21:49:48]
validat0r :
i just looked on my phone and there is no files folder on the sdcard
[2018-11-22 21:50:03]
jcase :
yeah if someone can give me the exact path
[2018-11-22 21:50:12]
jcase :
because i have a lot of DJI folders on sdccard
[2018-11-22 21:50:17]
evgeniychuiko :
dji.go.v4 - folder name
[2018-11-22 21:50:18]
validat0r :
/data/data/dji.go.v4/files exists
[2018-11-22 21:50:30]
jcase :
./sdcard/DJI/dji.go.v4/
[2018-11-22 21:50:32]
jcase :
that one
[2018-11-22 21:50:57]
evgeniychuiko :
is there "files" folder?
[2018-11-22 21:51:12]
evgeniychuiko :
I have no android, sorry)
[2018-11-22 21:51:23]
validat0r :
there is a pseudo C code at the end of <http://dji.retroroms.info/howto/dji_configs>
[2018-11-22 21:51:24]
jcase :
no
[2018-11-22 21:51:36]
validat0r :
where it opens the config file
[2018-11-22 21:51:44]
validat0r :
not sure if that helps
[2018-11-22 21:51:48]
jcase :
ok yeah im going back to cooking
[2018-11-22 21:51:56]
good.win.alexs :
@jcase it should be Android/data/dji.go.v4/files
[2018-11-22 21:51:59]
good.win.alexs :
nothing else
[2018-11-22 21:52:06]
good.win.alexs :
but you have to run Go first
[2018-11-22 21:52:12]
good.win.alexs :
it will create folders
[2018-11-22 21:52:18]
validat0r :
sure, "Android"? where is that?
[2018-11-22 21:52:20]
good.win.alexs :
then you have to force close Go
[2018-11-22 21:52:39]
good.win.alexs :
yes, Android/data on internal sdcard
[2018-11-22 21:52:45]
good.win.alexs :
it was always same
[2018-11-22 21:52:54]
jcase :
ok thanks
[2018-11-22 21:52:56]
jcase :
thats what i needed
[2018-11-22 21:53:14]
good.win.alexs :
connect with “adb shell”
[2018-11-22 21:53:19]
validat0r :
ok, you're right
[2018-11-22 21:53:20]
good.win.alexs :
and use “ls -a” in files folder
[2018-11-22 21:53:28]
good.win.alexs :
it will show hidden files
[2018-11-22 21:53:31]
validat0r :
/sdcard/Android/data/dji.go.v4/files
[2018-11-22 21:53:34]
jcase :
-rw-rw---- 1 u0_a199 sdcard_rw 71 2017-12-22 23:04 .DJI.configs_force_boost
[2018-11-22 21:53:36]
jcase :
look right?
[2018-11-22 21:53:43]
good.win.alexs :
normal “ls” will not show any files that has dot in beginning of filename
[2018-11-22 21:53:45]
evgeniychuiko :
wrong name
[2018-11-22 21:53:51]
validat0r :
nah, just ".DJI.configs"
[2018-11-22 21:54:02]
good.win.alexs :
@jcase it should be.. yes, as validat0r said
[2018-11-22 21:54:06]
evgeniychuiko :
.DJI.configs
[2018-11-22 21:54:20]
validat0r :
/sdcard/Android/data/dji.go.v4/files/.DJI.configs
[2018-11-22 21:54:41]
good.win.alexs :
and you should be sure that you force closed app
[2018-11-22 21:54:50]
good.win.alexs :
otherwise it will not pick up new config
[2018-11-22 21:55:14]
good.win.alexs :
this is common mistake…
[2018-11-22 21:57:34]
evgeniychuiko :
And I think GO will send this SDR DUML only when connected to mavic pro
[2018-11-22 21:59:28]
validat0r :
well ".DJI.configs" isn't in .14 any more
[2018-11-22 22:00:38]
validat0r :
let's hope jcase's brother in law isnt out flying with his MP
[2018-11-22 22:02:34]
jcase :
ok dumped
[2018-11-22 22:02:39]
jcase :
what was the packet or paylaod signature
[2018-11-22 22:02:44]
jcase :
what should i filter on
[2018-11-22 22:02:53]
validat0r :
both, i guess
[2018-11-22 22:02:59]
evgeniychuiko :
for force boost cmd_id should be 60
[2018-11-22 22:03:47]
evgeniychuiko :
and reciever_id 9
[2018-11-22 22:03:55]
jcase :
any idea on the payload?
[2018-11-22 22:04:05]
evgeniychuiko :
Not for boost
[2018-11-22 22:05:14]
validat0r :
55 xx 04 xx 02 09 xx xx xx 09 3c ...
[2018-11-22 22:05:26]
validat0r :
something like this?
[2018-11-22 22:05:38]
validat0r :
cmd_set was 09, wasnt it?
[2018-11-22 22:06:09]
evgeniychuiko :
I guess, its only idea from DJI GO reversing atm
[2018-11-22 22:07:11]
evgeniychuiko :
At this step I would filter only cmd_id
[2018-11-22 22:07:37]
validat0r :
02 - Go App, 09 HD transmission MCU air side, 09 High-definition map transmission command set
[2018-11-22 22:08:32]
evgeniychuiko :
yeah, but we dont know message lenght and payload
[2018-11-22 22:09:11]
jcase :
ok wrote a fitler
[2018-11-22 22:09:14]
jcase :
tell me what to filter for
[2018-11-22 22:09:26]
evgeniychuiko :
cmd_id 60
[2018-11-22 22:10:29]
evgeniychuiko :
in hex it should be 3c
[2018-11-22 22:11:06]
validat0r :
i keep changing the duml :smile:
[2018-11-22 22:11:36]
validat0r :
still not sure .. but tenth byte should be 0x3c
[2018-11-22 22:11:45]
evgeniychuiko :
packet[10]==0x3c
[2018-11-22 22:12:54]
jcase :
550D04330209510040093C8D82
[2018-11-22 22:12:59]
jcase :
only match
[2018-11-22 22:13:26]
validat0r :
55 0D 04 33 02 09 51 00 40 09 3C 8D 82
[2018-11-22 22:13:39]
validat0r :
looks like it
[2018-11-22 22:13:47]
validat0r :
but no payload
[2018-11-22 22:13:57]
validat0r :
rest fits
[2018-11-22 22:14:15]
evgeniychuiko :
yeah, it should be without payload
[2018-11-22 22:14:49]
validat0r :
hmm, exactly the duml you predicted
[2018-11-22 22:14:59]
evgeniychuiko :
and if @jcase has a time, we can change config to force23 and sniff it
[2018-11-22 22:15:20]
validat0r :
give him the force23 config
[2018-11-22 22:16:10]
jcase :
wouldnt it be easier to just look at the code
[2018-11-22 22:16:29]
validat0r :
you think? what should one look for in the code?
[2018-11-22 22:16:55]
jcase :
each duml cmd had a class that forms it
[2018-11-22 22:16:56]
evgeniychuiko :
Its not so clear for me after dex>jar
[2018-11-22 22:17:04]
jcase :
dex2jar is crap
[2018-11-22 22:17:26]
validat0r :
no, tell me, what should one look for in the 4.1.3 smali tree?
[2018-11-22 22:17:50]
evgeniychuiko :
@jcase, can you find responce for this boost DUML
[2018-11-22 22:18:13]
jcase :
yeah hold
[2018-11-22 22:18:23]
jcase :
@ilovemynexus4 i'd look through the class anmes and see if any stand out
[2018-11-22 22:18:36]
validat0r :
hmmkay
[2018-11-22 22:19:14]
evgeniychuiko :
if ( (unsigned int)objc_msgSend(v3, "sdr_force_2_3_G") )
{
v14 = (DJIOFDMPack *)objc_msgSend(&OBJC_CLASS___DJIOFDMPack, "alloc");
v15 = ((id (__cdecl **)(DJIBasePack **, SEL))objc_msgSend)(&v14->super, "initRequest");
v16 = v15;
v17 = objc_msgSend(v15, "extHeader");
v17[1] = v17[1] & 0xE0 | 9;
**((_BYTE **)objc_msgSend(v16, "extHeader") + 5) = 9;
**((_BYTE **)objc_msgSend(v16, "extHeader") + 6) = 39;
objc_msgSend(v16, "setBodyLength:", 10LL);
v18 = malloc(0xAuLL);
objc_msgSend(v16, "setBody:", v18);
v19 = objc_msgSend(v16, "body");
v19[4] = 0;
**(_QWORD **)v19 = 0x3A2FFFF00460100LL;
v20 = (DJIPackManager *)+[DJIPackManager sharedInstance](&OBJC_CLASS___DJIPackManager, "sharedInstance");
}
[2018-11-22 22:22:07]
validat0r :
maybe someone should run the old JEB on 4.1.3
[2018-11-22 22:22:22]
jcase :
i ahve
[2018-11-22 22:22:24]
jcase :
thats what i use
[2018-11-22 22:24:18]
jcase :
@evgeniychuiko no response
[2018-11-22 22:24:19]
validat0r :
would you run in on 4.1.3?
[2018-11-22 22:24:27]
jcase :
i can, not atm
[2018-11-22 22:24:37]
validat0r :
ok
[2018-11-22 22:25:04]
jcase :
dealing with brother in law wanting money
[2018-11-22 22:25:09]
jcase :
aka go fuck yoruself
[2018-11-22 22:25:17]
jcase :
aint paying for company i dont want
[2018-11-22 22:25:19]
evgeniychuiko :
@jcase, if you will have a time, please do sniff one more time with force_23
[2018-11-22 22:25:25]
jcase :
im working on it
[2018-11-22 22:25:29]
validat0r :
@evgeniychuiko are we sure 2.3 GHz works with Mavic pro?
[2018-11-22 22:26:00]
evgeniychuiko :
and sniff a packet[10]==27
[2018-11-22 22:26:11]
validat0r :
ah ok .. 32 chan was the mode only for Phantoms .. ok
[2018-11-22 22:26:28]
evgeniychuiko :
2.3 works on MP for sure
[2018-11-22 22:28:06]
jcase :
550D04330209560040093C51B2
[2018-11-22 22:28:10]
jcase :
thats it for now
[2018-11-22 22:28:26]
jcase :
now is time to drink
[2018-11-22 22:28:34]
jcase :
well i wish
[2018-11-22 22:28:39]
jcase :
about 7 more hours on that
[2018-11-22 22:29:23]
validat0r :
only 30 more minutes for this day do be taken out of its misery .. for me here at least
[2018-11-22 22:30:48]
validat0r :
hmm .. that DUML is still 09.3C
[2018-11-22 22:31:24]
validat0r :
same as first one
[2018-11-22 22:34:44]
evgeniychuiko :
Yeah, same packet. You should replace config, and restart all devices and GO
[2018-11-22 22:35:12]
evgeniychuiko :
And sniff a packet[10]==27
[2018-11-22 22:35:59]
jcase :
i did
[2018-11-22 22:36:05]
jcase :
i can try again later not now
[2018-11-22 22:36:13]
jcase :
trying to ignore the world
[2018-11-22 22:36:42]
evgeniychuiko :
Ok, thank you very much! It was a big step for me with your help!
[2018-11-22 22:37:06]
jcase :
np sorry i cant do more now
[2018-11-23 07:20:32]
evgeniychuiko :
Something still unknown... I’ve tried many DUMLs, with some useless results. @jcase, if its possible, give me whole dump. There should be few duml to SDR I guess...
[2018-11-23 09:35:57]
evgeniychuiko :
[2018-11-25 21:28:35]
mefisto :
<https://github.com/o-gs/dji-firmware-tools/blob/master/comm_dissector/wireshark/dji-p3-fcuart.lua#L767>
[2018-11-25 21:29:58]
mefisto :
(I keep most dissectors in P3 file even though they match all platforms; will remove all other files when I have time)
[2018-11-26 20:41:31]
evgeniychuiko :
I've found force_fcc DUML... It was long way, but I did it...
[2018-11-26 20:44:21]
evgeniychuiko :
I've made fake route in DJI GO and sniff it
[2018-11-26 20:45:33]
evgeniychuiko :
its DUML with target 9, cmd_set 9, cmd_id 0x27 and payload 00024800FFFF0200000000
[2018-11-26 20:46:33]
evgeniychuiko :
As I expected (4800FFFF)
[2018-11-26 20:48:45]
evgeniychuiko :
for switching to FCC, you can use dji_mb_ctrl from AC side
[2018-11-26 20:49:07]
evgeniychuiko :
dji_mb_ctrl -S test -R local -g 9 -s 9 -c 27 00024800FFFF0200000000
[2018-11-26 20:49:45]
evgeniychuiko :
Enjoy guys)
[2018-11-26 21:56:22]
validat0r :
Awesome .. @evgeniychuiko
[2018-11-26 22:02:35]
validat0r :
so it's function SetSdrAssitantWrite
[2018-11-26 22:02:47]
validat0r :
where did you find that function list anyway?
[2018-11-27 05:32:30]
evgeniychuiko :
That list encoded in DJI GO. So, guys, Im completely lost with last firmwares (stuck with 03.900). Is it still possible to have our own scripts in vendor/bin?
[2018-11-27 10:49:10]
good.win.alexs :
@evgeniychuiko so, this affects only AC? correct? do we have to send two duml to different targets to switch both AC and RC? correct?
[2018-11-27 10:58:07]
evgeniychuiko :
@good.win.alexs No, only one packet. Its command to SDR. And after SDR has his own communication
[2018-11-27 10:58:28]
good.win.alexs :
so, it is in sync by internal mechanism?
[2018-11-27 10:58:33]
good.win.alexs :
correct?
[2018-11-27 10:58:38]
evgeniychuiko :
Sure
[2018-11-27 10:59:02]
good.win.alexs :
that is what i was hoping they will not do…
[2018-11-27 10:59:22]
good.win.alexs :
bu negotiation is standard process, so not surprise
[2018-11-27 11:00:18]
evgeniychuiko :
What you want to do with ocusync?
[2018-11-27 11:01:14]
good.win.alexs :
i was thinking about posibility to use Boost on AC, and CE on RC
[2018-11-27 11:01:32]
good.win.alexs :
to get 3W boosters on RC
[2018-11-27 11:01:55]
good.win.alexs :
ocusync is more stable on, for ex., 2.3Ghz + Boost than RC
[2018-11-27 11:02:09]
good.win.alexs :
so in such setup RC consistency is even not close to Ocusync
[2018-11-27 11:02:35]
good.win.alexs :
but you will not install boosters on top of 30dB output chain )))
[2018-11-27 11:02:44]
evgeniychuiko :
iirc boost will set 1,5w only on AC side. But I never checked it
[2018-11-27 11:02:50]
good.win.alexs :
so, with Boost no way for boosyers
[2018-11-27 11:03:06]
good.win.alexs :
@evgeniychuiko as far as i remember - no
[2018-11-27 11:03:16]
good.win.alexs :
it will change frequency only on AC
[2018-11-27 11:03:33]
good.win.alexs :
as control signal is always going to 2.4Ghz with classic FHSS
[2018-11-27 11:03:58]
good.win.alexs :
but ocusync uses custom modulation, and it is able to switch between frequences
[2018-11-27 11:04:28]
evgeniychuiko :
Control signals are only duml packets in network....
[2018-11-27 11:04:29]
good.win.alexs :
but after SDR there is LTE amlifier chip (capable to work in 2.3-2.7Ghz range)
[2018-11-27 11:04:56]
good.win.alexs :
and it is being controller by i2c/uart (not sure xactly) from SDR
[2018-11-27 11:05:11]
good.win.alexs :
so SDR choses amplification ratio
[2018-11-27 11:05:31]
good.win.alexs :
so, if you are setting for ex. FCC - it will enable higher amp on both sides
[2018-11-27 11:06:42]
mefisto :
In case someone needs the commands for Lightbridge (Ph3/Inspire1):
<https://github.com/o-gs/dji-firmware-tools/issues/10#issuecomment-434877876>
[2018-11-27 18:31:47]
evgeniychuiko :
@w4t3r Sure. dji_mb_ctrl -S test -R local -g 9 -s 9 -c 3c
[2018-11-27 18:42:43]
evgeniychuiko :
@good.win.alexs I tried to understand ocusync a bit better. AC side sdr = 9, RC side sdr = 14. Both sides have same command sets, same commands. But, for example force FCC command to 9 works for both, and same command for 14 does nothing... It means 9 is primary side, and only from this side we can set something. And 9 keeps settings untill reboot.
[2018-11-27 18:48:23]
evgeniychuiko :
I just tried to find a way to force FCC from RC side, but no luck atm. I can do it with serial port, but I want to use RC standalone.
[2018-11-27 19:24:05]
validat0r :
No mbctrl on mavic rc?
[2018-11-27 19:28:06]
evgeniychuiko :
RC has a dji_mb_ctrl, but no proper route to target 9... I've tried to make my own json file, but still no luck.
[2018-11-27 20:55:51]
evgeniychuiko :
For some reason mb_ctrl always use default dji.json, even if you force it to use your json with -J flag
[2018-11-27 21:06:12]
validat0r :
Hmmkay
[2018-11-27 22:11:14]
w4t3r :
Thanks man!
[2018-11-28 00:24:01]
good.win.alexs :
@evgeniychuiko do you have idea about switching to CE? Ill be appreciated if you have ready answer
[2018-11-28 00:25:11]
cat.db :
can be used for mavic 2？need root first？
[2018-11-28 08:36:34]
xela75 :
Anyway, mavic 2 has a dji_mb_ctrl binary
[2018-11-28 12:18:26]
webmaster :
Does this work for phantom 4 pro, too?
[2018-11-28 14:40:56]
jcase :
yes it does
[2018-11-28 14:53:12]
xela75 :
mavic 2 has TEE but for what aim ? To stock secure elements like crypto key ?
[2018-11-28 14:54:39]
jcase :
@xela75 someone finally post a dump publicly?
[2018-11-28 14:56:24]
xela75 :
I don't know
[2018-11-28 14:57:35]
jcase :
just havent seen many (any) others working on it, then you confirm it has that binary
[2018-11-28 15:01:09]
xela75 :
i'm looking into the question...
[2018-11-28 15:09:34]
hostile :
does anyone have a proper eMMC flash dump from a Mavic Pro by chance? I know a few of you <!here> have been messing around at the hardware level.
[2018-11-28 15:10:04]
xela75 :
Is there another channel more implicated in mp2 reversing ?
[2018-11-28 15:10:36]
jcase :
@hostile i can dump one
[2018-11-28 15:20:34]
jcase :
@xela75 no because ive only found one or two other people even considering looking at it
[2018-11-28 15:42:36]
hostile :
that would rock @jcase
[2018-11-28 15:42:47]
jcase :
@hostile pm
[2018-11-28 18:12:47]
fredmicrowave :
@jcase That´s because most of us has not the knowledge... If there is any way I can contribute, here I am ...
[2018-11-28 18:13:28]
jcase :
see its al labout gaining that knowledge
[2018-11-28 18:28:37]
fredmicrowave :
I know.
But learning programming from scratch is a hard project. I am more the hardware kind guy ...
[2018-11-28 18:29:01]
fredmicrowave :
And then comes the hacking part.... Yet another level...
[2018-11-28 18:31:30]
fredmicrowave :
But please don´t assume everyone is giving a $hit about it and just waiting for things to arrive all done and for free. It´s just that sometimes it seems too much out of range.
[2018-11-28 19:25:12]
jcase :
i dont assume that
[2018-11-28 19:25:29]
jcase :
but i mean hw kind of guy, hw work can lead to root or nfz bypass
[2018-11-28 19:25:30]
jcase :
as well
[2018-11-28 19:25:38]
jcase :
we have already seen both of those being used on dji
[2018-11-28 22:31:29]
fredmicrowave :
Software programmed hw mmh ... :expressionless:
It can be really frustrating how soft is used in everything, when it looks so opaque ...
A few years ago I developed a UHF long range (20+km) radio system, the goal being to make it as simple, robust and reliable as possible. So, no software :stuck_out_tongue:
Was open project. Worked great, and stil does. BUT, of course, no channel hopping, no security features... So, no future ... And i did no dive into learning programming....
[2018-11-28 22:39:07]
fredmicrowave :
( That is, a drone / FPV radio system )
[2018-11-28 23:31:39]
mefisto :
You can always use FPGA for that. That is exactly what DJI did on early lightbridges. Unless you consider HDL languages to be on programming side as well.
[2018-11-28 23:36:12]
mefisto :
Though people who call themselves programmers can very, very rarely use a HDL. It requires some effort to understand them for people who are used to objects.
[2018-11-28 23:41:54]
mefisto :
Today it is easier for them to understand that programs are not sequential - because there is huge parallelism on CPUs as well. But how loops work in HDLs is harder - it takes time for them to realize that doing for() on 32-bit (32-lines) variable will copy the transistors inside 4 billion times.
[2018-11-28 23:46:55]
cantrepeat :
doesn't sound very efficient.
[2018-11-29 02:02:04]
fredmicrowave :
Well, I consider it to be programming as soon as it needs... programming. I even had to google for FPGA and HDL meanings.
When i say simple, I really mean simple. I consider that when something is doing what you need, cannot be simplified any more and has the lower part count as possible, then it is as close as perfect as possible.
And yes, I know how retrograde that sounds :laughing:
[2018-11-29 04:40:47]
kilrah :
good luck about making a whole drone with no software... :joy:
[2018-11-29 05:05:26]
jcase :
shit as a kid i flew some wired planes
[2018-11-29 05:05:31]
jcase :
just some wood, a motor, and some wire
[2018-11-29 05:05:34]
jcase :
that counts right?
[2018-11-29 05:35:39]
kilrah :
no unlike it was autonomous (and not just for a few seconds :stuck_out_tongue: )
[2018-11-29 07:15:34]
lolo780 :
I remember control line airplanes
[2018-11-29 10:28:26]
flydji :
i remember my twist the rubber band plane...:+1:
[2018-11-29 10:29:23]
cantrepeat :
twist rubber band bi-plane with a parachute on the pilot
[2018-11-29 10:30:20]
cantrepeat :
@lowellfoo780 standing there while the plane flew circles around you!
[2018-11-29 14:50:59]
fredmicrowave :
Software stuff is awesome, almost nothing would works without it now, and that´s great.
However my first drones where software-less, using 3 accelerometers from gyros, signals where analog amplified. Very primitive ... And funny.
Helis were not using software either.
[2018-11-29 14:52:38]
fredmicrowave :
And that´s not centuries ago, it was this millenium :stuck_out_tongue:
[2018-11-29 14:58:46]
fredmicrowave :
Anyway, all that to explain jcase that, probably like some others here, i'm not enough into software, and can't help hacking M2 or stuff, but it's not because i'm indifferent.
[2018-11-29 15:18:07]
jcase :
not something that needs explaining
[2018-11-29 15:18:12]
jcase :
i have no issue with choices liek that
[2018-11-29 15:18:25]
jcase :
i have issue with the dozen ppl asking me when
[2018-11-29 15:18:35]
jcase :
people like simoo that ask over and over
[2018-11-29 15:18:42]
jcase :
but do nothing on their own
[2018-11-29 15:18:48]
jcase :
you havent begged once
[2018-11-29 18:03:31]
aciid :
what kind of GPS does MP2 have?
[2018-11-29 18:03:54]
aciid :
some same shite as in MP1?
[2018-11-29 18:45:29]
lolo780 :
If by same you mean a ceramic square, then yes.
The navigation system on the M2 is very good, a big step up from the problematic M1.
[2018-11-29 18:47:01]
jcase :
i really like the landing light
[2018-11-29 18:47:13]
jcase :
i dont fly much but this time of the uear it is very dark here most of the day
[2018-11-29 19:42:49]
lolo780 :
The other night I was out and some couple parked right in front of me, blocking my signal. I had to get out of my car so made sure to fly slowly over them with the landing lights blazing.
[2018-11-29 19:47:52]
lolo780 :
<https://i.imgur.com/BQvTuNR.jpg>
A lot of hardware gets worked on at this spot since you can park here.
[2018-12-01 11:35:54]
evgeniychuiko :
Looks like DJI has changed DUML in mavic2
[2018-12-01 11:37:05]
evgeniychuiko :
55 packets still there, but structure is completely different
[2018-12-01 12:40:59]
cat.db :
which bird can use your toos ？:heart:
[2018-12-01 19:45:03]
jcase :
@evgeniychuiko no the duml is same
[2018-12-01 19:45:06]
jcase :
structure is identical
[2018-12-01 19:45:19]
jcase :
but DUML isnt the only packet format DJI uses that starts with 0x55
[2018-12-01 19:45:28]
jcase :
they also have a DUSS packet
[2018-12-01 19:45:30]
jcase :
which is similar
[2018-12-01 19:45:31]
jcase :
and not new
[2018-12-02 06:56:15]
evgeniychuiko :
@jcase Oh, ok. Maybe dump for me was made with wrong uart baudrate) I have no chance to have m2 atm. Expensive toy)
[2018-12-02 15:39:42]
jcase :
@evgeniychuiko can i see?
[2018-12-02 15:58:34]
evgeniychuiko :
[2018-12-02 16:02:00]
evgeniychuiko :
@jcase Sure. And they closed vuln with vendor/bin in latest firmware of MP
[2018-12-02 16:02:24]
evgeniychuiko :
I cant use it for fcc_mod...
[2018-12-02 16:20:40]
jcase :
wasnt really a vuln, was a persistance method
[2018-12-02 16:20:43]
jcase :
you would need another one
[2018-12-02 16:22:24]
jcase :
@evgeniychuiko im not sure how that was dumped, but the format of it beign dumped into a file like that somewhat indicates someone didnt do it right
[2018-12-02 16:22:43]
jcase :
i would have to write something to parse it
[2018-12-02 16:22:47]
jcase :
to doublt check them
[2018-12-02 16:25:10]
evgeniychuiko :
The dump was made with buggy TeraTerm... Just for first look. Do not spent your time for it)
[2018-12-02 16:26:40]
evgeniychuiko :
I have one better task for community. Why dji_mb_ctrl always use /system/etc/dji.json? I've tried to reverse it and change path in dji_mb_ctrl binary... But no luck
[2018-12-02 16:53:03]
jcase :
probably the duml libraries
[2018-12-02 16:53:04]
jcase :
?
[2018-12-02 17:00:56]
evgeniychuiko :
I've tried to reverse libraries too, but no path in libraries. Maybe Im not enough skilled for it:lying_face:
[2018-12-02 19:19:30]
evgeniychuiko :
I have successful created a new route in dji.json for proper RC>AC_9_target DUML commands. It means we can use RC with FW lower 1.04.0200 with latest Mavic firmwares for implement SDR commands
[2018-12-02 20:16:56]
jcase :
@evgeniychuiko interesting, how?
[2018-12-02 20:30:43]
evgeniychuiko :
@jcase just added entry
[2018-12-02 20:30:52]
jcase :
ah
[2018-12-02 20:31:00]
evgeniychuiko :
[2018-12-02 20:31:16]
evgeniychuiko :
to test.diag
[2018-12-04 21:36:01]
thecatthathacks :
dji_mb_ctrl uses the json for the channel definition in this case local but can be others (mostly wireless)
[2018-12-04 21:42:31]
thecatthathacks :
Which I have to admit is annoying while reversing XD but I would probably look at libduml_fw.so ... or so ...
[2018-12-04 21:42:49]
evgeniychuiko :
@supahfly Sorry? Is it a question, or?
[2018-12-04 21:43:30]
thecatthathacks :
I believe you wondered why they used their json? That’s what i think on checking some of the libraries and code
[2018-12-04 21:43:32]
thecatthathacks :
:)
[2018-12-04 21:43:53]
thecatthathacks :
But I could be wrong tbh :)
[2018-12-04 21:45:08]
thecatthathacks :
If you peek at that lib you can see the diff channels they use depending on the setup worth engineering, debug, production but again is the lib and could be just dirty from other drones
[2018-12-04 21:46:41]
evgeniychuiko :
I wondered why it always use one default json, if dji_mb_ctrl has a parameter for choosing json file
[2018-12-04 21:47:52]
evgeniychuiko :
it just ignore -J param...
[2018-12-04 21:51:55]
thecatthathacks :
Oh XD never checked tbh went straight into libraries XD
[2018-12-04 21:52:12]
thecatthathacks :
Told ya as usual I’m wrong :P blame it on rickson my cat
[2018-12-09 17:04:14]
buundy :
Hello Guys, I have an interesting problem regarding a Mavic Pro 1st gen. (Background story in a nutshell: I repair lots of DJI drones, 100+ MP). So I have this one, and it is not focusing, cannot move the gimbal tilt and also even it has SD card installed it says “No SD Card” when I try to format it. On the status screen it even says “Gimbal disconnected”. Now the investigation: When I switch on the drone, it does the initialization gimbal dance, but if I look closely it doesn’t move the focus lens first. So I thought it would be a regular “damaged cable issue”, so I replaced the camera data cable: no success. Replaced camera: no success. Replaced gimbal control board: no success. Replaced the flex cable that runs from the gimbal control board to the main board: no success. I tried to do fw upgrade, downgrade but every time it interrupts around 40% with error code 020104. Found some dji forums, but no clue what could be wrong. Do you have any ideas that I should try? I will swap the whole gimbal-camera module into another MP, just to make sure I did the cross-testing right. The “No SD Card” issue makes me think that the problem is somewhere in the main board, and not really related to the gimbal-camera. I think some communication between the main board and the camera is missing. Any ideas? :slightly_smiling_face:
[2018-12-09 18:29:30]
kilrah :
I would think the mainboard is dead indeed
[2018-12-09 18:47:46]
ender :
or maybe corruption of camera Firmware ?!?
[2018-12-09 18:50:39]
kilrah :
well yeah that's on the mainboard precisely
[2018-12-09 18:51:48]
ender :
yep yep but i meant not a HW fault but something that could be fixed with a $$$ flasher / JTAG device. Not that it makes a difference for Andris...
[2018-12-09 20:34:24]
buundy :
I will try reflashing the firmware again and I will update this case :slightly_smiling_face:
[2018-12-09 20:54:31]
evgeniychuiko :
@buundy firstly you have to check upgrade log, I bet there will be something about no comm with some module
[2018-12-09 20:55:32]
evgeniychuiko :
And it looks like you have to replace core board
[2018-12-09 20:55:53]
buundy :
or repair it :slightly_smiling_face: don’t know how yet, but I will figure out
[2018-12-09 20:56:15]
buundy :
I will search for the upgrade log and check it
[2018-12-09 20:56:40]
evgeniychuiko :
folder /data/dji/log
[2018-12-09 20:57:05]
evgeniychuiko :
You have to know it, if you are experienced in repair)
[2018-12-09 20:58:56]
buundy :
mostly hw repair :slightly_smiling_face: but sometimes I google it again and again
[2018-12-09 21:37:20]
lolo780 :
M1 parts are a dime a dozen now. Hardly worth the time to trouble shoot any more.
[2018-12-09 23:16:22]
fredmicrowave :
I tried to update MP1 with no gimbal/camera assembly before, and it stops around 44% .
[2018-12-09 23:19:07]
fredmicrowave :
You must know that, but not all sd cards works well in the mavic. I have a new 64gb Toshiba sd card that i need (sometimes) to reinsert one or two times before the system accept it. worls perfectly with another card.
[2018-12-10 10:07:33]
buundy :
Yes I've heard about those sd card issues;)
[2018-12-10 19:05:21]
bin4ry :
@evgeniychuiko very nice work, just saw everything and saw the backlog :slightly_smiling_face: hard work paid off. last time @jezzab and i was doing logs in MA we found this duml was switching modes : 55170438021b1d0040073055530000555300000100045a
[2018-12-10 19:06:09]
bin4ry :
but this was back in (march i think) and we never went the whole way like you, nice work!
[2018-12-10 19:07:03]
bin4ry :
we saw this duml because it was sending 5553 :wink:
[2018-12-10 19:07:48]
evgeniychuiko :
MA RC has android?
[2018-12-10 19:08:19]
evgeniychuiko :
I just thinking about mod for MA, but never had it
[2018-12-10 19:08:30]
bin4ry :
i honestly don't remember anything about it really
[2018-12-10 19:08:39]
bin4ry :
but i was sending it form PC
[2018-12-10 19:08:43]
bin4ry :
let me send you the script
[2018-12-10 19:09:00]
evgeniychuiko :
Yeah, I can send any dumls)
[2018-12-10 19:09:31]
bin4ry :
send via PM
[2018-12-10 19:09:55]
bin4ry :
wansnt the MA RC running a custom wrt or smth ?
[2018-12-10 19:09:57]
evgeniychuiko :
But for nice mod we need access to AC or RC. Otherwise nobody will want to switch fcc with laptop in field)))
[2018-12-10 19:10:18]
bin4ry :
yeah my plan was to do an small duml app
[2018-12-10 19:10:25]
bin4ry :
i did make it though
[2018-12-10 19:10:28]
bin4ry :
but it was wonky
[2018-12-10 19:11:21]
bin4ry :
problem was RC was swithcing back modes
[2018-12-10 19:11:24]
evgeniychuiko :
Independent mod works much better. You dont need any movings with apps. Just switch it from RC button
[2018-12-10 19:11:42]
bin4ry :
yah i think so, nice work!
[2018-12-10 19:11:50]
bin4ry :
if i find my android duml app i'll send it
[2018-12-10 19:11:53]
bin4ry :
gimme a minute to look for it
[2018-12-10 19:12:08]
evgeniychuiko :
Thx!
[2018-12-10 19:13:59]
bin4ry :
send, but it's very bad, but you get the idea how to send cmds
[2018-12-10 19:14:21]
bin4ry :
idea was to just make a sideapp to switch modes :wink:
[2018-12-10 19:14:40]
bin4ry :
but like i said, the RC always felt back to CE from FCC once you started the GO app
[2018-12-10 19:27:19]
evgeniychuiko :
Guys, maybe someone has experience with android usb system. Mavic remote controller recognized only once. After you reconnect the usb plug, it will switch to another state. And you need to restart RC for the next PC connection. Why?
[2018-12-10 19:27:38]
bin4ry :
it has a timeout for OTG
[2018-12-10 19:28:06]
bin4ry :
IIRC you need to replug on the RC side
[2018-12-10 19:28:11]
bin4ry :
to bring it up again
[2018-12-10 19:30:08]
evgeniychuiko :
For mobile-RC connection yes, but for PC-RC connection it will not help
[2018-12-10 19:38:18]
bin4ry :
ah ok
[2018-12-10 19:38:29]
bin4ry :
sorry no idea then
[2018-12-10 20:44:37]
jcase :
@evgeniychuiko that can be an issue for certain brands
[2018-12-10 20:44:44]
jcase :
particularly some samsung models
[2018-12-10 20:44:54]
jcase :
ahh for pc - rc?
[2018-12-10 20:44:57]
jcase :
i have no such issue
[2018-12-10 20:45:04]
jcase :
are you not closing the serial connection?
[2018-12-10 21:28:10]
evgeniychuiko :
@jcase doesn’t matter. Just try to reconnect usb plug when assistant only started. It will no recognize rc anymore, until you restart it. And no issue for AC. I bit confused, because it has same cpu
[2018-12-10 22:19:27]
jcase :
i dont use assistant so idk
[2018-12-11 05:20:46]
evgeniychuiko :
Its just an example, issue in RC inside. Maybe some hardware switch for hd flow
[2018-12-11 21:20:38]
support.dji :
Hello. Does anyone know why the wm220.cfg.sig file has disappeared from Mavic's firmware 01.04.0500?
[2018-12-11 21:33:33]
jezzab :
It hasnt disappeared. Its just a longer name. the `.cfg.sig` ending is the same, the name doesnt matter @support.dji
[2018-12-11 21:48:45]
support.dji :
@jezzab Thank you for your quick answer. Corrupted downloaded firmware file. I found the missing file in a fresh downloaded 0500 firmware!
[2018-12-11 22:03:14]
support.dji :
@jezzab I try to understand, as much as possible, your work done for root access. Successfully done on 0500 firmware. But where can I find information to make it persistant? I start to take a look on the following files check_1860_state.sh, cmdline, start_dji_system.sh
[2018-12-13 15:10:14]
fredmicrowave :
I don't remember to have seen MP1 undamaged camera board pictures, so here it goes...
[2018-12-13 15:10:41]
fredmicrowave :
[2018-12-13 15:14:03]
validat0r :
@mefisto ^^
[2018-12-13 16:00:34]
kilrah :
nice
[2018-12-13 16:29:18]
mefisto :
Yeah, good photos. The ones I have are covered with some thermoconductive junk:
<https://github.com/o-gs/dji-firmware-tools/wiki/WM220-Camera-sensor-board#board-view>
[2018-12-13 16:34:36]
fredmicrowave :
I will try to remove the camera lens assembly and take another photo.
[2018-12-13 16:35:43]
fredmicrowave :
It is just glued in place, and focus mechanism is connected via 4 soldered wires.
[2018-12-13 21:44:04]
fredmicrowave :
[2018-12-13 21:46:18]
fredmicrowave :
[2018-12-13 23:43:00]
mefisto :
Wow.. that is quality.
[2018-12-14 00:56:56]
lolo780 :
Wow
[2018-12-14 00:57:05]
lolo780 :
What kind of phone is that?
[2018-12-14 01:20:42]
fredmicrowave :
I found the small symbols and lettering quite interesting.
What do you mean by phone ?
[2018-12-14 01:21:06]
fredmicrowave :
AmScope microscope and A6000 camera.
[2018-12-14 04:10:43]
lolo780 :
Kidding. That's a nice camera setup.
[2018-12-14 10:31:41]
bjoneseying :
1mm? Ho Lee Fuk!
[2018-12-14 16:45:43]
lolo780 :
See the bigger picture
[2018-12-14 18:54:30]
pawelsky :
Is it the original MP1 camera or the upgraded one (as in MP1P)?
[2018-12-14 19:51:22]
quad808 :
bah....I could solder that
[2018-12-14 19:52:38]
quad808 :
I would burn the chip, and a huge blob of solder, but I could still solder it. But if you still wanted it to work....ummmmm
[2018-12-14 20:44:10]
ender :
I could work on it with a Dremel after you soldered. "Who would have thought Electronics is so difficult" :wink:
[2018-12-14 20:48:39]
lolo780 :
I can weld it back together
[2018-12-14 20:55:42]
chipmangini :
I think that rivets are the key for repairs..
[2018-12-14 20:58:12]
lolo780 :
Nutserts. This is ~hardware
[2018-12-14 21:48:31]
chipmangini :
Bwahaha, Perfect!
[2018-12-15 03:37:38]
fredmicrowave :
This is the Mavic 1 Pro camera.
[2018-12-15 03:39:21]
fredmicrowave :
No idea if it is the upgraded one or not...
[2018-12-15 12:21:59]
aciid :
@fredmicrowave excuse me hold up, how did you manage to open up the camera without breaking it? I've been trying to do this for months. I'm trying to remove the IR lens. I've broken like 3 cameras now
[2018-12-15 13:24:55]
fredmicrowave :
The trick is hot air and a scalpel.
First remove as much as you can the grey slicone compound around the PCB, inserting the scalpel blade. Take you time.
Then heat the outer casing with hot air, and lift PCB carefully, levering with the scalpel blade inserted between casing and PCB connector side, where the aluminium is recessing .
(Once you succeed, don't try to continue lifting from one size only, or you will damage the internal camera metallic casing. Try to level up the PCB as soon as possible)
The difficult part it to remove the metallic casing of the camera itself, (it is also silicone glued all around) and melt the 4 solder pads still lifting the case without melting the plastic. (You need to be an octopus. )
I failed this part, ( didn't care too much ) but i can be done :slightly_smiling_face:
[2018-12-15 13:25:36]
fredmicrowave :
[2018-12-15 13:27:48]
fredmicrowave :
(About the 4 pads, instead of heating, i thing it should be easier and safer to remove solder with dessoldering wick )
[2018-12-15 13:31:35]
fredmicrowave :
I used the same method to remove the front glass on my MP´s cameras to avoid fogging. (And flare, although it is still occurring )
[2018-12-15 15:24:44]
aciid :
I had little sucess last time with the removal, but the image was unsharp so I guess the 4 pads were broken
[2018-12-15 15:24:48]
aciid :
it didn't focus anymore
[2018-12-15 15:25:07]
aciid :
i bent the whole focusbox to remove the IR lens, but I see it's a delicate operation now
[2018-12-15 15:25:17]
aciid :
im really anal about getting a one succee out of a dozen
[2018-12-15 15:25:38]
aciid :
the cameras are 10 dollars on some sites, like dhgate had them and aliexpress
[2018-12-15 15:25:43]
aciid :
refurb, but working
[2018-12-15 16:58:11]
evgeniychuiko :
Guys, any experience with connecting m1 camera direct to core board without gimbal board?
[2018-12-15 18:43:54]
lolo780 :
I've only run without the gimbal but with the board. Would it be just making the right adapter cable?
[2018-12-15 20:02:25]
fredmicrowave :
@aciid I have just tried to remove the IR filter. I don't think it can be done without breaking it, but thats probably not a problem.
You cannot heat it to remove it: The lens itself is not glass, but some plastic, super sensitive to heat . (I wonder how they managed to make plastic 4k lens)
I can try to do it for you, I will just need the camera(s) .
[2018-12-15 20:18:27]
fredmicrowave :
@evgeniychuiko As soon as I receive the board i am waiting for, I will check if there is continuity between camera connector and core board connectors ...
[2018-12-15 20:33:50]
aciid :
i broke the ir lens last time, its a goodw ay to get rid of it. but I bent the pins on the focusbox, need to figureout how to remove the lense without scratchign the sensor
[2018-12-15 20:34:55]
aciid :
i have a camera here, but I need to source a spatula too :smile:
[2018-12-15 20:35:12]
aciid :
just got this unit from a crashed one i was working on earlier today
[2018-12-15 20:38:06]
fredmicrowave :
Dont try to clean the sensor ever: You will mess with all the side connecting wires, so tiny you can't even see them .
[2018-12-15 20:38:31]
fredmicrowave :
Is it worth it to remove the ir filter ?
[2018-12-15 21:04:25]
aciid :
@fredmicrowave well the sensor is small, but I don't know would be a good try. theres also a similiar sony imx camera on turtle caddx
[2018-12-15 21:04:37]
aciid :
<https://www.banggood.com/Caddx-Turtle-FOV-145-Degree-Super-WDR-Mini-FPV-Camera-1080P-60fps-DVR-HD-Recording-OSD-for-RC-Drone-p-1320281.html>
[2018-12-15 21:04:39]
aciid :
same cable and all
[2018-12-15 21:25:44]
evgeniychuiko :
@hostile How you think, tello edu has the same HW?
[2018-12-16 01:58:24]
fredmicrowave :
MP1 IMU
[2018-12-16 03:40:34]
lolo780 :
I was just looking at the M2 IMU. DJI has made a lot of design improvements. M1 and P4 cables get ripped up in crashes.
[2018-12-16 03:42:36]
lolo780 :
Early M1s had no glue securing the ribbon so it could pop off on impact. By glueing it in, DJI made people replace the whole flight control board.
[2018-12-16 13:25:52]
mefisto :
Added the IMU photo to wiki:
<https://github.com/o-gs/dji-firmware-tools/wiki/WM220-Flight-Controller-and-IMU-board#board-view>
[2018-12-16 14:14:56]
fredmicrowave :
Just for fun : 3 differents drones IMU's .
Mechanical gyroscope (~1400grs, 1994) , fiber optic IMU (FOG, ~800grs), DJI MP1 IMU (4.2grs )
[2018-12-16 15:54:54]
buundy :
is it a BMW logo on the top left enclosure?
[2018-12-16 16:05:07]
aciid :
probably a missile component
[2018-12-16 16:15:39]
evgeniychuiko :
@fredmicrowave is it part of that "drone"? <https://www.flightglobal.com/pdfarchive/view/1964/1964%20-%200153.html>
[2018-12-16 22:19:41]
fredmicrowave :
Andris8888, not BMW :smile: , it's roll axis symbol ( center )
Not that old jkson: Chukar target drone. ( Interesting reading about that autogyro drone...)
[2018-12-19 01:14:41]
fredmicrowave :
@evgeniychuiko Here is the continuity test from camera connector to core board (or others) connectors.
Circled pins are the ones that give no continuity results, unfortunately still 8 of them...
[2018-12-19 01:16:32]
fredmicrowave :
[2018-12-19 01:17:19]
fredmicrowave :
Looking at the camera board, there seems to be 3 not connected...
[2018-12-19 01:17:43]
fredmicrowave :
At least they have no TP
[2018-12-19 04:29:50]
evgeniychuiko :
@fredmicrowave it is an amazing job! Thank you very much mate!
[2018-12-19 06:29:45]
evgeniychuiko :
And if its possible, can you measure vcc level? It looks like gimbal board drive it from battery. I guess you can measure it in standalone board, just power it through 2-pin connector
[2018-12-19 14:19:36]
fredmicrowave :
Updated diagram with measured voltages .
[2018-12-19 14:22:09]
fredmicrowave :
Actually the gimbal flex connector was still connected. :confused:
All others disconnected. Power supply from AC
[2018-12-19 14:23:40]
fredmicrowave :
1V8 ( v,w ) have larger copper traces, and a larger test point. Looks like main PS, 1v8, for camera.
[2018-12-19 14:25:48]
fredmicrowave :
Beside z, the center greyed zone is ground, and one wire to camera connects to it.
[2018-12-19 15:32:51]
buundy :
thank you for your investigation, I think we can use it in the future!
[2018-12-19 16:20:05]
evgeniychuiko :
Amazing @fredmicrowave! I will try to connect camera and core board according to your diagram and share my experience!
[2018-12-19 16:23:33]
fredmicrowave :
Thanks! Will be interesting.
But still missing a few, i don´t think the ones showing voltage are just power supply...
[2018-12-19 16:25:47]
evgeniychuiko :
It could be some pulled data lines to gimbal, we will see. Camera has gyroscopes at least
[2018-12-19 16:57:07]
fredmicrowave :
You are right ! I forgot about those... Makes sense that the ones that goes directly to core board are the camera ones .
[2018-12-19 17:45:27]
evgeniychuiko :
@fredmicrowave, I don’t want to disturb you with my endless questions, but... Do you have flat cable 24/24 from gimbal board to core board?
[2018-12-19 17:47:56]
evgeniychuiko :
In both board we have pin 1 mark. But, anyway connectors could be mirrored or mixed
[2018-12-19 19:18:01]
evgeniychuiko :
I have only core and camera itself, no cables..
[2018-12-19 20:11:27]
fredmicrowave :
Yes, i d have a flat cable, let me check
[2018-12-19 20:21:43]
fredmicrowave :
they are kind flipped, hard to explain...
[2018-12-19 20:30:15]
fredmicrowave :
[2018-12-19 20:32:43]
fredmicrowave :
Hope that is clear enough.
And no problem !
All ground are connected together in the flat cable too .
[2018-12-19 21:09:16]
evgeniychuiko :
Yeah, completely clear mate!) Seems I have all info, and gonna heat soldering station) Thank you very much!
[2018-12-19 21:25:18]
fredmicrowave :
Good luck :slightly_smiling_face:
[2018-12-20 12:47:00]
ender :
Thumbs up guys and godspeed to your soldering iron :slightly_smiling_face:
[2018-12-21 17:07:26]
evgeniychuiko :
[2018-12-21 17:10:02]
evgeniychuiko :
Somehow it works! But very interference sensitive. Original cable from camera to gimbal board is shielded. Every single tiny wire is shielded!!!
[2018-12-21 17:11:47]
evgeniychuiko :
[2018-12-21 17:12:10]
fredmicrowave :
Cool !
Maybe this is why they used so many grounds. Even the layout on the board seems to have pairs with grounds on each side.
[2018-12-21 17:13:07]
evgeniychuiko :
Yeah, for sure. And it was a real nightmare to solding it
[2018-12-21 17:14:56]
fredmicrowave :
I can imagine. But knowing that it works is cool, really.
Need a way to improve. Is that the best image you could get ? puting you fingers around the wires helps ? Or close to a ferrite bead ?
Would be interesting to try with original camera shielded cable...
[2018-12-21 17:16:58]
evgeniychuiko :
Yes, I will continue for sure. It was the best image I got. Original cable... Its impossible to work with them... So tiny
[2018-12-21 17:20:14]
fredmicrowave :
There is also probably filters, and maybe bypass caps, on the pcb.
I can see them, but not sure if they are low value resistors, or filters ...
[2018-12-21 17:22:39]
evgeniychuiko :
I think I will blow off connector on core board, because its so hard to work with it. And I’ll make shortest wires as possible.
[2018-12-21 17:26:46]
fredmicrowave :
Yes, it should be easier.
Or solder a small intermediary PCB with wires, very close to the core board , then it will be easier to work on it from camera and try to improve signal quality ...
[2018-12-21 17:47:01]
evgeniychuiko :
@fredmicrowave but your diagram is correct, sometimes I can see part of image, and focus works, I can move the lens from GO interface
[2018-12-21 17:52:49]
evgeniychuiko :
It looks like ABCDEFGHIJ are mipi interface for camera, and QMNO are enable signals and maybe focus lines
[2018-12-21 17:54:33]
evgeniychuiko :
without qmno camera not initialized, and not warming
[2018-12-21 18:04:49]
lolo780 :
Autofocus barely works on the m1. Wonder why it's so bad.
[2018-12-21 18:11:08]
sheldon.holy :
It won't work because those data lines are switching at very high speed
[2018-12-21 18:11:14]
sheldon.holy :
You'll need twisted pairs at minimum
[2018-12-21 18:11:23]
sheldon.holy :
DJI uses shielded cable
[2018-12-21 18:11:37]
sheldon.holy :
The little green wires in the camera cable are actually 46awg coax..
[2018-12-21 18:11:44]
sheldon.holy :
stripped with a laser because they are teeny
[2018-12-21 18:13:22]
sheldon.holy :
oh you said the same above
[2018-12-21 18:13:24]
sheldon.holy :
do excuse me
[2018-12-21 18:16:45]
sheldon.holy :
MPU6500 is EOL, I wonder why DJI still uses it
[2018-12-21 18:17:05]
jcase :
cheap probably
[2018-12-21 18:18:24]
sheldon.holy :
on the gimbals they use one labelled "MPU66"
[2018-12-21 18:18:27]
sheldon.holy :
sorry "MP66"
[2018-12-21 18:18:41]
sheldon.holy :
You can swap it with an MPU6500 and it still works fine, so not sure what the difference is
[2018-12-21 18:18:52]
sheldon.holy :
google cannot find "mp66" or "mpu6600"
[2018-12-21 18:27:32]
kilrah :
the stock cable uses micro-coax
[2018-12-21 18:28:08]
kilrah :
so each line is a coax cable with its own signal and ground connections on the board
[2018-12-21 18:28:22]
quad808 :
I can't imagine soldering so tiny a connection.
[2018-12-21 18:29:00]
slack1208 :
ABCDEFGHIJ are the 5 differential pairs for MIPI so you'll want to make them all length matched and paired with a ground wire to try to help with noise - at least
[2018-12-21 18:30:43]
sheldon.holy :
You need special tooling
[2018-12-21 18:30:58]
sheldon.holy :
I just got some cables using those connectors made, it was 12 usd for qty of 20 cables
[2018-12-21 18:31:29]
sheldon.holy :
You lay a small solder rod across the contacts and then use IR to melt it
[2018-12-21 18:31:36]
sheldon.holy :
it's nuts
[2018-12-21 18:37:29]
lolo780 :
I got this. 1/8 rod should stick it
[2018-12-21 18:42:21]
sheldon.holy :
Hahaha
[2018-12-21 18:42:30]
evgeniychuiko :
[2018-12-21 18:42:47]
sheldon.holy :
Sorry I meant 12usd each in qty of 20
[2018-12-21 18:59:10]
sheldon.holy :
Good luck @evgeniychuiko just make sure the wires are the same length
[2018-12-21 19:10:53]
good.win.alexs :
Main problem is that connection is with parallel high frequency data lines
[2018-12-21 19:11:17]
cantrepeat :
butane torch should work fine!
[2018-12-21 19:11:26]
good.win.alexs :
So to have image you'll have to perfectly align all data lines with same length
[2018-12-21 19:11:48]
good.win.alexs :
Its common thing for cam lines
[2018-12-21 19:12:07]
good.win.alexs :
Thats why all RPi's has flat flex for camera
[2018-12-21 21:02:29]
fredmicrowave :
This is why I think gluing small prototyping intermediary pcb boards would allow to use larger flex or coax between camera and core board ...
[2018-12-21 21:03:37]
sheldon.holy :
Just get some boards made
[2018-12-21 21:03:42]
sheldon.holy :
Will save so much headache
[2018-12-21 21:03:49]
sheldon.holy :
Buy a few more cables from ebay and job done
[2018-12-21 21:04:00]
sheldon.holy :
The connectors are hirose DF56
[2018-12-21 21:04:07]
sheldon.holy :
26 position - you'll find them on ebay
[2018-12-22 21:29:07]
buundy :
I admire how deep you went with this, but what is the point of trying to replicate what an original cable can do for 20usd? Am I missing some point? :) Absolutely no offense, I am just curious
[2018-12-22 21:31:36]
buundy :
Also I always wonder how can one find a totally unknown connector type. How do you start searching? Image search?
[2018-12-22 21:44:11]
evgeniychuiko :
I didn’t try to replicate original cable... Its some DIY project, just for fun. I make my own airunit, for using it with dji goggles and mavic RC. I’ve already made small converter board based on stm32, which sniff joysticks and buttons data in core board and convert it to regular pwm channels output
[2018-12-22 21:45:57]
evgeniychuiko :
And I need to connect camera to core board DIRECTLY, without gimbal board between.
[2018-12-22 21:49:49]
evgeniychuiko :
And when it will be done, I’ll install my own “airunit” to helicopter or any another custom device for remote control and fHD live video. Its just hobby mate)
[2018-12-22 22:25:17]
sheldon.holy :
@buundy For looking up connectors it's quite easy, just search for the pin pitch, number of positions, most connectors have some logo on them too
[2018-12-22 22:25:31]
sheldon.holy :
Also connector type, like FFC, micro coax or whatever
[2018-12-22 22:25:49]
sheldon.holy :
In this case it took me ages, someone told me what it was. That's the easiest way!
[2018-12-23 00:36:54]
fredmicrowave :
Deeper into the MP1 camera.
Exposed is the focus mechanism: Flexible pcb holding a Hall sensor, the lens assembly holding a mall magnet and linear bearings made of 4 micro steel balls on each side, and spring...
The coil seems to be made of only one "turn" of enamelled wire .
[2018-12-23 01:31:39]
aciid :
this sounds interesting as fuck, i've been thinking about where to hook into to accomplish minimalistic DJI SDR + with off the shelf flightcomputer +esc+motors
[2018-12-23 02:36:38]
jackmax :
Want to repair the brick mav1, remove the photo of this emmc? Need to use a hot air gun to blow it down, with what tools can the firmware flash into the emmc?
[2018-12-23 08:02:52]
mingtao :
photo from M2..
[2018-12-23 09:01:08]
jezzab :
@pcp20160520 dude, based on your pic, your question and your knowledge.... stop now
[2018-12-23 09:47:48]
kilrah :
I might be interested in that, got some info? Data coming from CAN bus?
[2018-12-23 09:48:41]
lolo780 :
I like to heat the board up and bang the edge on the bench. Start with a clean slate.
[2018-12-23 09:50:18]
lolo780 :
<https://youtu.be/qWo2HOhDbsc>
[2018-12-23 09:51:09]
lolo780 :
Yeah the gimbal less m1 cam crashes with vibration
[2018-12-23 09:51:24]
lolo780 :
so stupid
[2018-12-23 10:12:08]
evgeniychuiko :
No, uart channel to FC. My board catch duml packets
[2018-12-23 10:12:30]
kilrah :
ok
[2018-12-23 10:13:12]
kilrah :
I have a need to get that info from the CAN bus on a Lightbridge 2 for a project... gonna have to reverse it
[2018-12-23 10:27:15]
aciid :
my collegue is up in arms with lightbridge2 he is certain that after a few years he is able to draw a capable fpga to decode h265 with decent costs
[2018-12-23 10:27:39]
evgeniychuiko :
@lowellfoo780 What do you mean crashes?
[2018-12-23 10:29:00]
aciid :
<https://www.rc-cam.com/forum/index.php?/topic/4106-analog-hd-fpv-video-why-not/>
[2018-12-23 10:30:59]
kilrah :
did you use wifibroadcast yet? that one's getting rid of the 802.11 stack...
[2018-12-23 10:43:26]
kilrah :
for me it's jsut unbeliavably bad rolling shutter wobbles
[2018-12-23 10:44:10]
kilrah :
really unusable for anything that flies, used it for ground stationary stuff only...
[2018-12-23 11:00:46]
jackmax :
I knew that I could only repair it by replacing the core board, because this core board could not work properly, so I removed the emmc.
[2018-12-23 11:10:28]
jackmax :
[2018-12-23 11:45:49]
jezzab :
[2018-12-23 11:47:48]
jezzab :
Why do you keep posting random pics? The first one you posted and circled isnt even the eMMC then you post an eMMC and then you post a random pic of what im guessing is a USB storage stick (which has an eMMC on it) or one of those USB eMMC solder on readers??
[2018-12-23 11:49:20]
jezzab :
Ripping a BGA off is a piece of piss. Reading it out isnt too bad either with an adaptor (or wires if you wanna go that way) but putting it back on is another story
[2018-12-23 11:50:01]
jezzab :
You have a part number, you have it off (you claim) it should take literally 5 minutes to Google a data sheet and grab your trusty 1 bit transfer SD card reader
[2018-12-23 11:52:41]
jezzab :
Yeah, maybe its an eMMC reader @aciid /shrug if thats the case then why ask if you have the tools?
[2018-12-23 11:54:28]
jackmax :
The photo circled was to ask if it was the chip, and then a friend told me it wasn't the chip, and he told me the correct one.
[2018-12-23 11:54:59]
jezzab :
have you ever removed and reballed/resoldered a BGA chip before @pcp20160520?
[2018-12-23 12:00:06]
jezzab :
Anyway, goodluck. Doable: yes
[2018-12-23 12:14:13]
jackmax :
thx，This is the photo he sent to him for repair. After repair, it still doesn't work normally, and he can't find the reason.
[2018-12-23 12:19:10]
jezzab :
I believe the saying is `欲速则不达`?
[2018-12-23 12:20:16]
rickysuper :
慢工出細貨？
[2018-12-23 12:23:29]
jackmax :
在将EMMC_ROM1_FJ25AB_267046048_00000000_E9000000.bin文件写入emmc后，飞机可以连接到计算机，但不能连接到遥控器，也不能更新固件。固件版本是0.00.000。
[2018-12-23 12:26:47]
jezzab :
Optimstic it talks to the PC.
[2018-12-23 12:27:46]
sheldon.holy :
The package circled is qfn..?
[2018-12-23 12:54:40]
jackmax :
The package circled is not EMMC
[2018-12-23 13:05:17]
jackmax :
Is it similar boot zones haven't been flashed into , so firmware can't be upgraded?
[2018-12-27 21:28:05]
bobdole :
hey guys.. if a gimbal needs +6 roll all the time to keep horizon level (auto re-calibrate fixes it, but then it needs +6 again after any gimbal movements during flight)... and video feed is "jelloing" unless a filter is put on (after auto re-calibrate).. what probably needs to be replaced?
[2018-12-27 21:31:21]
lolo780 :
M1? Try just the camera lense assy. That contains the gyro.
[2018-12-27 21:31:59]
bobdole :
yes m1
[2018-12-27 21:32:52]
lolo780 :
Gimbal in good shape? Moves smoothly on all axis?
[2018-12-27 21:33:40]
bobdole :
it appears so
[2018-12-27 22:18:18]
fredmicrowave :
Chech that you did not add magnetic stuff close to it . Also, the screw that holds the compass board inside the Mavic is non-magnetic, should not be mixed with others...
[2018-12-27 22:21:16]
bobdole :
just ordered a lens assembly
[2018-12-28 09:15:24]
buundy :
Or the roll axis motor's sensor reports back wrong position?
[2018-12-28 13:39:54]
sheldon.holy :
@jacksphone does the gimbal have its original control board from the factory or has it been changed?
[2018-12-28 22:31:25]
fredmicrowave :
Mavic Pro Gimbal motor, driver and sensors.
[2018-12-28 22:31:44]
fredmicrowave :
MP6536 Datasheet diagram
[2018-12-28 22:35:51]
good.win.alexs :
you are fantastic!
[2018-12-28 22:36:18]
good.win.alexs :
is it possible to re-assemble it?
[2018-12-28 22:39:30]
fredmicrowave :
Yes, just by pressing it back , but it did not disassemble the right way: The shaft, hold by a screw on the back side, should have come out with the motor rotor/bell ...
[2018-12-28 23:22:04]
mefisto :
Good stuff. Thanks @fredmicrowave.
[2018-12-29 01:38:16]
bobdole :
I am not sure
[2018-12-29 02:51:34]
fredmicrowave :
Wish i could do more .
[2018-12-29 08:29:15]
buundy :
How could you separate it without breaking it?
[2018-12-29 13:17:15]
fredmicrowave :
By inserting knife and screwdriver blades 180º apart, and lifting up carefully and evenly. The knife is only used as a wedge, readjust it constantly to pull horizontally.
If i had to disassemble a lot of them, i suppose making a simple and small extractor with a screw pushing against the shaft would a better solution :slightly_smiling_face:
[2018-12-29 17:40:16]
sheldon.holy :
The shaft is press fitted in the bearing, won't come out without a proper press :/
[2018-12-29 17:40:23]
sheldon.holy :
We did make a press for P4 yaw motors
[2018-12-29 17:41:45]
sheldon.holy :
[2018-12-29 17:41:52]
sheldon.holy :
[2018-12-29 17:42:22]
sheldon.holy :
But there is no practical use for taking them apart - the gimbals are calibrated with the magnet positions so you can't mix/match
[2018-12-29 18:40:56]
buundy :
yes, but if you have to replace a motor with torn ribbon, there is a good use of the press _)
[2018-12-29 18:41:30]
buundy :
i made a similar one, and it can extract motor shaft from p4 yaw motor without the flange
[2018-12-29 19:02:26]
sheldon.holy :
Yes, for motors without the flange we just screw a plate on top
[2018-12-29 19:02:42]
sheldon.holy :
We use it for P4s but I mean there is no practical use for dismantling a Mavic gimbal
[2018-12-29 19:02:51]
sheldon.holy :
<https://www.ebay.co.uk/itm/For-DJI-Spark-Drone-Camera-Chipset-Repair-Parts-Spare-Part-Black/132743924410?_trkparms=aid%3D333200%26algo%3DCOMP.MBE%26ao%3D1%26asc%3D55596%26meid%3D04c7464a6ea44deb9e9f8948610f19d7%26pid%3D100041%26rk%3D2%26rkt%3D12%26sd%3D323355933982%26itm%3D132743924410&_trksid=p5713.c100041.m2061>
[2018-12-29 19:03:20]
sheldon.holy :
Interesting, these are Spark camera modules (same as MP but without autofocus lens) before they have been glued together at the DJI factory.
[2018-12-29 20:38:11]
fredmicrowave :
This was my idea for a simple extractor for the MP if i had to make one.
But as you say, I don't see much usefulness ...
[2018-12-30 09:11:33]
buundy :
Only usefulness is that if you replace the gimbal mechanics of mp, the initialization dance will become twitching. It is somehow paired to the gimbal board. Have you experienced this too?
[2018-12-30 11:49:35]
sheldon.holy :
@buundy Yes, the board has an st32 microcontroller that controls the gimbal. It is calibrated with the gimbal at the factory
[2018-12-30 11:50:00]
sheldon.holy :
if you change just the gimbal or the board it won't work _unless_ the board happens to have similar calibration constants
[2018-12-30 11:50:31]
sheldon.holy :
You need to try around 10 boards per gimbal before it works usually
[2018-12-30 11:52:09]
sheldon.holy :
<https://www.ebay.com/itm/For-Genuin-DJI-MAVIC-PRO-Gimbal-Video-4K-Camera-Lens-Repair-Tool-Replacement-Hot/292830194141?_trkparms=aid%3D555018%26algo%3DPL.SIM%26ao%3D2%26asc%3D20160323102634%26meid%3D35d43f45c0154b90b3f0db34bfb4ba8f%26pid%3D100623%26rk%3D1%26rkt%3D6%26sd%3D153128477223%26itm%3D292830194141&_trksid=p2047675.c100623.m-1>
[2018-12-30 11:58:15]
buundy :
@sheldon.holy do you know any other solution other than trying 10s of gimbals? :)
[2018-12-30 11:59:32]
buundy :
Is there any way to read out the data that controller holds about calibration and somehow adjust it to the new gimbal
[2018-12-30 12:01:22]
sheldon.holy :
Yes
[2018-12-30 12:01:34]
sheldon.holy :
Well
[2018-12-30 12:01:34]
sheldon.holy :
No
[2018-12-30 12:01:58]
sheldon.holy :
If you're changing the board because e.g. you damaged a connector, you can desolder the mcu and solder onto the new one
[2018-12-30 12:02:16]
sheldon.holy :
if you swap the gimbal with no top board then no
[2018-12-30 13:15:39]
fredmicrowave :
I am not sure if the back (hidden) USB connector had something to do with that ?
It should be possible to access gimbal board parameters in some way...
[2018-12-30 13:20:31]
mefisto :
Maybe even through DUML.. but it requires extensive analysis to understand how the gimbal FW works.
I am just doing such analysis for Ph3 gimbal:
<https://github.com/o-gs/dji-firmware-tools/issues/99#issuecomment-449969600>
[2018-12-30 14:47:10]
fredmicrowave :
That's interesting. I have to give it a try on MP.
[2018-12-30 14:53:22]
fredmicrowave :
I suppose there is no way for the calibration procedure to know when it hits the gimbal end course , so end limits should be set manually...
[2018-12-30 16:54:41]
mefisto :
That's possible. I don't really understand what the calibration data contains. I just know where it is because I can see what part is read from persistent storage.
[2018-12-30 18:02:22]
sheldon.holy :
@mefisto I'm not sure how useful the P3 data will be
[2018-12-30 18:02:40]
sheldon.holy :
P3 gimbals get position feedback from potentiometers in each gimbal motor assembly
[2018-12-30 18:03:00]
sheldon.holy :
P4, Spark, Mavic etc... all use the back emf from the motor for position feedback
[2018-12-30 18:03:04]
sheldon.holy :
and the IMU of course
[2018-12-30 18:03:22]
sheldon.holy :
If you remove the IMU the gimbal usually starts up but then it goes nuts and dies
[2018-12-30 18:04:42]
sheldon.holy :
I think the camera/gimbal units are calibrated at the factory before being fitted to a drone. I also don't think that they are made in DJI's factory but that's not really important
[2018-12-30 18:06:13]
sheldon.holy :
The Mavic gimbal boards have a small connector on them which seems to be for programming. It would be easy to see where this connects to on the mcu
[2018-12-30 18:06:35]
sheldon.holy :
Oh yeah #funfact!
[2018-12-30 18:06:59]
sheldon.holy :
P4 gimbals have that issue where the yaw motor overheats and burns out, on the M2 gimbals they have temperature sensors on the coils for yaw and roll motors
[2018-12-30 18:07:05]
sheldon.holy :
I still burned one out anyway....
[2018-12-30 18:10:52]
sheldon.holy :
If you need any parts and stuff to help with this project let me know
[2018-12-30 18:11:16]
sheldon.holy :
I'm not sure the P3 data will help though as P3s seem to self-calibrate
[2018-12-30 19:01:18]
mefisto :
Ph3 auto-calibrates two axes only; for yaw it does not have a potentiometer, and that axis does not take part in auto-calibration. Anyway, Dji software always evolves from older versions, so knowing more about Ph3 also speeds up research on newer platforms.
[2018-12-30 20:05:40]
sheldon.holy :
Ah yes that's a good point, the yaw axis uses a hall sensor feedback like the Inspire 1 cameras
[2019-01-03 21:43:36]
fredmicrowave :
Here is the MP gimbal board diagram, around the programming connector ...
[2019-01-03 22:31:25]
slack1208 :
So it exposes SWD programming on the STM32 which makes sense, and the CAN bus. Out of interest, what are you trying to do?
[2019-01-04 00:53:28]
fredmicrowave :
The idea was to get access to the calibration parameters, (in particular the endpoints values), so a non-paired gimbal won´t hit the end courses when auto-calibrating at startup...
[2019-01-04 01:08:19]
fredmicrowave :
... And reversing this part was a way to share some info, as I am not much of a programmer...
[2019-01-09 15:33:41]
bobdole :
any good / cheap sources for parts? i need a mavic pro gimbal with the cables in it
[2019-01-09 15:34:17]
bobdole :
bought a lens off an ebay seller and it turned out to be smashed up
[2019-01-09 16:13:01]
jackmax :
After replacing Y-axis motor of gimbal of P4P, the camera tilts after starting. After in APP the adjust, it is still same. Is there any way to get back to normal?
[2019-01-09 17:07:14]
mefisto :
We still don't know how to do hall sensor calibration in Ph4.
I am looking at Ph3 gimbal firmware now, though I have some distractions.
[2019-01-09 18:25:31]
lolo780 :
I fixed my p4p gimbals by replacing them with m2ps
[2019-01-09 18:25:57]
lolo780 :
P4p cameras annoy me
[2019-01-09 19:27:23]
buundy :
You have to dismantle the original (probably broken) motor of the p4p, and put the magnetic part (rotor) on the new motors coiled part (stator). Disassembling without breaking is a bit tricky, but it is doable. The gimbal controller knows the original magnetic polarity, that is why you have to replace it on the new motor
[2019-01-10 03:35:49]
jackmax :
@buundy The motor of motor universal joint can not be aligned and corrected after replacement. Send it back to DJI. Does DJI directly use software to write corresponding code for direct correction?
[2019-01-10 14:10:33]
buundy :
I dont quite understand you, sorry. Ive replaced lots of p4p yaw motors and they aligned properly.
[2019-01-10 14:13:10]
jackmax :
Are you replacing the Y-axis motor?
[2019-01-10 14:14:17]
buundy :
Yes
[2019-01-10 14:14:24]
buundy :
Y=yaw?
[2019-01-10 14:34:32]
jackmax :
The pen points to the local motor, called the Y-axis motor.
[2019-01-10 15:31:19]
buundy :
yes, I was talking about that too
[2019-01-10 16:26:45]
jackmax :
This RXm pin was accidentally scratched off. Will the M1 core plate still work?
[2019-01-10 16:27:53]
jackmax :
[2019-01-10 16:33:32]
mefisto :
DNU should not be used anyway (duh), but RXm sound important.. what datasheet says about it?
[2019-01-10 16:45:22]
jackmax :
I can't find the Micron JWB30 chip specification. This is the MX100 T0804P1VDA chip specification
[2019-01-10 16:49:12]
mefisto :
That's not too bad. The chip normally uses parallel communication, not UART. serial I/O is only for developing/testing. (and needed in some rare cases of bad design).
[2019-01-10 16:49:35]
mefisto :
I'd say it will still work.
[2019-01-10 16:49:47]
jackmax :
thx
[2019-01-10 16:54:55]
evgeniychuiko :
@pcp20160520 What are you trying to do?
[2019-01-10 16:55:20]
validat0r :
he had a damaged board
[2019-01-10 16:58:00]
evgeniychuiko :
Emmc was damaged? Beacause its only one reason to reflow it. I shared pins for emmc access without reflow
[2019-01-10 16:58:54]
evgeniychuiko :
And if he has no emmc dump, I guess no chance to repair it.
[2019-01-10 17:06:43]
fredmicrowave :
It´s on the edge of the chip, so you should be able to glue a thin wire in place of the pad, and reroute it ...
[2019-01-10 17:12:38]
jackmax :
I mistakenly pushed the dji_flight file of p4p into m1 and replaced the original dji_flight file. As a result, I could not connect to the computer and turned it into a brick. I want to fix it.
[2019-01-10 17:24:28]
evgeniychuiko :
@pcp20160520 There was better way than emmc removing mate... Anyway, good luck. Hope you will repair it.
[2019-01-10 17:26:18]
jackmax :
I bought a programmer and an emmc chip, and downloaded the file emmc_rom1_fj25ab_267046048_00000000_e9000000.bin, which was loaded into the chip. The computer could not be connected after welding, because BOOT1 BOOT2 RPBM and EXT_CSD partition could not work properly without it.
[2019-01-10 17:31:43]
jackmax :
This is the editor to read out the partition file, with three of them plus the network download bin file, loaded together with the chip still does not work.
[2019-01-10 17:40:17]
evgeniychuiko :
@pcp20160520, as I said, you choose wrong way, in my opinion.
[2019-01-10 17:42:13]
evgeniychuiko :
Im bit experienced, my very first m1 died same way... At least you should upload mmcblk0 and mmcblk0boot0 and boot1 from your original emmc
[2019-01-10 17:45:44]
evgeniychuiko :
Im not sure they used RPMB, but boot sectors must be assign to LC1860 iirc
[2019-01-10 17:47:05]
freaky123 :
for M1 there is a key in the mmc which is unique for each device
[2019-01-10 17:47:19]
freaky123 :
encrypted by an efuse value.. which is inside the LC
[2019-01-10 17:47:21]
evgeniychuiko :
Otherwise you will get something about keys error in u-boot output
[2019-01-10 17:48:32]
jackmax :
Can you share with me all the files you read from all partitions? I'll try writing with your file.
[2019-01-10 17:50:42]
evgeniychuiko :
@pcp20160520 please read few messages above mate...
[2019-01-10 17:51:52]
jackmax :
Is the newly purchased emmc chip not able to work properly? Can the chip only be removed with the core board?
[2019-01-10 17:56:35]
evgeniychuiko :
As only one possible way, you can try upload boot partitions dump from your original emmc. I cant say it will work, but without it wont work for sure
[2019-01-10 18:02:07]
kilrah :
aka, if you didn't backup your original emmc before trying to rewrite you're screwed.
[2019-01-10 18:03:27]
cantrepeat :
<------ needs to backup original emmc before I brick something. My toaster isn't safe with me around.
[2019-01-10 18:11:03]
evgeniychuiko :
On m1 its check on u-boot stage
[2019-01-10 20:34:48]
freaky123 :
yeah in M1 you can't change the bootloader it is verified
[2019-01-10 21:42:14]
mefisto :
That complicates things. Is u-boot a part of fw update?
[2019-01-10 22:10:45]
freaky123 :
yes
[2019-01-10 22:10:57]
freaky123 :
kernel is also verified
[2019-01-10 22:11:21]
freaky123 :
all by efused hash of the public key in front of the bootloader
[2019-01-11 04:25:41]
jackmax :
@evgeniychuiko My programmer can only read the 5 partitions here. What is the mmcblk0 you said?
[2019-01-11 05:42:53]
evgeniychuiko :
@pcp20160520 take boot partitions from your original emmc. mmcblk0=user, but your original user partition contains wrong file, as you said
[2019-01-11 05:45:15]
evgeniychuiko :
It means you have to change your original user partition, or use dump from another running system
[2019-01-11 05:46:54]
evgeniychuiko :
To make emmc dump you dont need to reflow chip. Just make adb pull /dev/block/mmcblk0
[2019-01-11 05:48:10]
jackmax :
<http://dji.polybotes.feralhosting.com/Mavic%20Pro%20EMMC%20Full%20Dump/>
[2019-01-11 05:49:30]
jackmax :
Can the bin file downloaded from this website be loaded into my original chip?
[2019-01-11 06:02:59]
evgeniychuiko :
Im not owner of that file, I have no idea. Try it, or make new one in any working m1
[2019-01-11 06:03:31]
jackmax :
ok
[2019-01-11 09:53:15]
cs2000 :
@pcp20160520 thats my server, but the file was just provided to me, dont have any info on it.
[2019-01-11 12:19:50]
cantrepeat :
@pcp20160520 what programmer are you using?
[2019-01-11 12:21:16]
jackmax :
rt809h
[2019-01-11 14:33:29]
jackmax :
Successful repair of a core board, thank you @evgeniychuiko @freaky123
[2019-01-11 14:34:01]
freaky123 :
what did you do?
[2019-01-11 14:37:18]
jackmax :
I have many core boards and I have to blow EMMC carefully. Import mmcblk0 with a programmer and weld it back.
[2019-01-11 14:39:00]
cantrepeat :
@pcp20160520 nice work!
[2019-01-11 14:40:53]
jackmax :
Thanks for your help, I can fix it.
[2019-01-11 14:44:34]
jackmax :
[2019-01-11 14:45:44]
cantrepeat :
if nothing else you have a metric shit ton (MST) of spare parts!!!
[2019-01-11 14:46:40]
cantrepeat :
MST = very sophisticate measuring standard.
[2019-01-11 15:17:19]
mingtao :
what is the strange black mavic ? on a photo
[2019-01-11 15:18:24]
mingtao :
it was a my flie .. dumped from worked mavic at 2016
[2019-01-11 15:18:40]
mingtao :
but this dump consist only userarea
[2019-01-11 15:19:43]
cs2000 :
looks like a custom paintjob as it looks like its rubbed off on the arm
[2019-01-11 15:21:05]
mingtao :
mavic ISP pinouts for reflashing emmc without soldering
[2019-01-11 15:21:51]
cantrepeat :
That's a MST of blue loctite as well.
[2019-01-11 15:22:04]
mingtao :
but... look at motor!
[2019-01-11 15:23:04]
validat0r :
that's thermal paste on the casing
[2019-01-11 15:25:15]
cantrepeat :
in the blue tipped syringe?
[2019-01-11 15:25:19]
cantrepeat :
That makes more sense
[2019-01-11 15:25:21]
xela75 :
@pcp20160520 Are you happy with your rt809h ? How much time for 1 GB dump ?
[2019-01-11 15:38:35]
jackmax :
@mingtao Thank you so much. I tried yesterday but didn't succeed. Maybe I didn't find the right place.
[2019-01-11 15:39:11]
mingtao :
also don forget desolder CLK resistor
[2019-01-11 15:39:29]
mingtao :
i have a problem with this .
[2019-01-11 15:40:58]
mingtao :
just remove resistor on CLK line and solder cable to side that close to emmc - not to CPU
[2019-01-11 15:41:07]
jackmax :
nice
[2019-01-11 15:45:06]
jackmax :
[2019-01-11 15:52:07]
jackmax :
@mingtao The black shell is the test machine before the release of the product. The board on my desk is also the core board of the test machine, and there are inspection points marked on it.
[2019-01-11 16:01:27]
mingtao :
you are work on a DJI ?))))
[2019-01-11 16:13:25]
bobdole :
more pictures of the test machine? i want a glossy black mavic pro :slightly_smiling_face:
[2019-01-11 16:23:28]
jackmax :
[2019-01-11 16:26:26]
jackmax :
[2019-01-11 19:50:14]
buundy :
The front arm antenna "legs" are strange too
[2019-01-11 19:51:12]
buundy :
Probably a prototype?
[2019-01-11 19:52:00]
bobdole :
"the test machine before the release of the product. "
[2019-01-11 19:52:13]
bobdole :
i want one damnit
[2019-01-11 20:14:16]
mefisto :
Looks like the board from FCC certification teardown.
[2019-01-12 00:59:24]
jackmax :
@xela75 9.851M/S
[2019-01-14 08:52:01]
xela75 :
thx for the answer
[2019-01-14 08:52:20]
xela75 :
and with how many Data bits ?
[2019-01-14 19:38:47]
sheldon.holy :
[2019-01-14 19:39:05]
sheldon.holy :
In case anyone ever wondered what glue DJI use. The black one in Mavics is the same part number (1533), just black version
[2019-01-14 19:52:17]
buundy :
And you shouldn't mess with it with your bare hands as it causes reproductive system problems :mask:
[2019-01-14 19:52:42]
buundy :
We use this too, it is totally the glue dji uses
[2019-01-14 19:54:02]
buundy :
Sorry, we use 1530
[2019-01-14 19:54:05]
buundy :
<https://goo.gl/images/4oienP>
[2019-01-14 20:39:54]
sheldon.holy :
Oh really? Well I'm screwed then!
[2019-01-14 20:44:34]
fredmicrowave :
Interesting!
And very expensive. Mechanically, the closest I have seen when cured is T-Rex sealant , very resistant, but has likely a different viscosity before curing.
[2019-01-14 20:46:33]
fredmicrowave :
_ThreeBond TB1533c is a solvent-free, single component, moisture-curable, elastic adhesive. ThreeBond TB1533c replaces TB1530C, it is a very similar material but meets the new EU legislations as there is no tin contained _
[2019-01-14 21:03:28]
buundy :
oh, I see, then it is safer to use
[2019-01-14 21:04:03]
buundy :
we bought 1530a/b/c/d (each color) 6 months ago
[2019-01-14 21:04:19]
buundy :
transparent/black/white/gray
[2019-01-14 21:04:53]
buundy :
yes, it is expensive, but now I don’t worry about proper repairing :slightly_smiling_face:
[2019-01-14 22:39:28]
sheldon.holy :
A tube lasts us maybe 200 Mavics
[2019-01-14 22:39:32]
sheldon.holy :
So it's not so bad
[2019-01-14 22:55:40]
chipmangini :
If it doesn't glue you're dick to your hand I guess it's OK! :stuck_out_tongue_winking_eye:
[2019-01-15 07:03:53]
lolo780 :
I've always used permatex ultra grey
[2019-01-15 07:04:12]
lolo780 :
On drones that is.
[2019-01-15 10:25:41]
jezzab :
Pick the car guy ^^ let me guess, its O2 sensor safe as well? :p @lowellfoo780
[2019-01-15 15:03:49]
lolo780 :
IMU safe too
[2019-01-16 09:45:27]
cs2000 :
I use Permatex ultra grey to for sealing rocker covers on cars haha
[2019-01-16 14:45:39]
sheldon.holy :
I prefer hylomar
[2019-01-17 00:34:29]
bobdole :
What's the difference between these 2 mavic pro lens assemblies? Which is older?
[2019-01-17 00:38:27]
bobdole :
<https://ibb.co/PcDq1FT>
[2019-01-17 01:36:06]
lolo780 :
Interesting. I have piles of those but never noticed the difference. I think those are connect the dots. Soldering gun should work nicely. 200w.
[2019-01-17 09:19:39]
sheldon.holy :
One on the left is newer I believe
[2019-01-17 11:09:00]
kilrah :
I'd expect the right one to be newer. Getting rid of test points and silkscreen is something you'd do after initial production runs.
[2019-01-17 11:10:05]
kilrah :
but could be the opposite in this case, adding testpoints so they could load the module in a jig for calibration/verification
[2019-01-17 11:10:40]
kilrah :
after the fiasco with so many early units with uneven / improperly assembled optics
[2019-01-17 17:55:05]
bobdole :
The one on the right is from my mavic Pro Platinum which came with bonus jello. The one on the left came from a replacement gimbal which was in poor condition. I'm thinking the mavic pro Platinum one might have been the actual ones that came with it, but then again it could have been a replacement too.
[2019-01-17 20:47:01]
sheldon.holy :
All the brand new gimbals we get from DJI directly are the left type
[2019-01-17 20:47:08]
sheldon.holy :
With test pads
[2019-01-18 05:19:01]
bobdole :
@sheldon.holy where can i get a brand new lens assembly and how much do they go for?
[2019-01-18 06:57:18]
buundy :
aliexpress has lots of them
[2019-01-18 07:54:51]
aciid :
I've wacked like 2 already
[2019-01-18 07:54:58]
aciid :
i bought mine from aliexpress, 10€ a piece
[2019-01-18 08:57:54]
sheldon.holy :
Aliexpress ones are used
[2019-01-18 09:47:21]
webmaster :
<https://www.freakware.de/shop/sellout.php?sel_man=26>
[2019-01-18 09:47:46]
webmaster :
For those that might need some DJI parts.
[2019-01-18 18:24:09]
vertigo :
Does anyone know of a breakout board (even if through rpi) for a mavic pro (1) camera and gimbal. Was thinking about fitting it to a custom smaller drone. Can’t use spark or tello as I need to build something without gps and something I can fly completely manually (no compass)
[2019-01-18 18:44:37]
aciid :
@vertigo Caddx Turtle uses the same camera board and breakouts
[2019-01-18 18:44:52]
aciid :
saves HD, outputs analog in realtime
[2019-01-18 18:45:07]
aciid :
IMX camera too
[2019-01-18 19:08:15]
vertigo :
Thanks will take a look
[2019-01-18 23:45:22]
sheldon.holy :
@jacksphone DJI doesn't sell brand new ones at all, all the ones available online are taken from damaged gimbals. They should all work fine though.
[2019-01-19 03:16:05]
fredmicrowave :
You should be able to connect that board on the output of the gimbal board, camera signals only. Gimbal stabilization may work, but without pan and tilt, as I don't think control signal type is known.
[2019-01-19 03:36:29]
vertigo :
Thanks may give it a try if I can find a cheap mav camera lol. I’m a cheapskate :joy: need to weigh up costs. This or a 4K fpv can with stable gimbal system.
[2019-01-19 11:55:12]
sheldon.holy :
Gimbal won't do anything unless it has data connections to the core boars
[2019-01-19 11:55:31]
sheldon.holy :
Also the camera won't work unless it's the exact same sensor
[2019-01-19 13:07:23]
fredmicrowave :
Oh, I thought gimbal initialization and stabilization was independent, then camera would go to a neutral position...
[2019-01-21 21:58:31]
oskars :
anyone found useful information on Mavic Pro Gimbal Board components? Plans, schematics?
[2019-01-22 00:17:55]
mefisto :
Just published battery board photos; need to catch up with what I have on the wiki regarding Mavic Pro:
<https://github.com/o-gs/dji-firmware-tools/wiki/DJI-Hardware#mavic-pro>
[2019-01-22 02:43:26]
mefisto :
When I made the wiki, I didn't even knew there are two versions. I will probably name the boards based on their markings after an update.
[2019-01-22 03:43:49]
bobdole :
ah... ok well here's a picture of the two of them if it helps <https://i.ibb.co/Jv3Drmx/20190116-163540.jpg>
[2019-01-22 08:51:07]
oskars :
Can you identify bad component on the MP gimbal board? :slightly_smiling_face:
[2019-01-22 13:45:17]
fredmicrowave :
MP1 camera
[2019-01-22 13:45:47]
fredmicrowave :
Here is one more version
[2019-01-22 14:04:30]
lyf20010701 :
hello how to remove a3 nfz
[2019-01-22 14:05:10]
lyf20010701 :
i have a m600pro want to remove nfz
[2019-01-23 07:09:24]
oskars :
No one can assist on this? :confused:
[2019-01-23 13:38:50]
buundy :
Hello Guys, has anyone disassembled and “hacked” MP battery before? I have a dead one, it is showing the two middle LED-s, and cannot restart, cannot update, it is totally bricked. I disassembled it, and too photos of it, it has a nice balance charging board with lot of test points (TEST, RST, GND, TX, RX, 3V3, etc). So far I haven’t been able to get it talk to my FTDI adapter.
[2019-01-23 13:38:52]
buundy :
<https://we.tl/t-77DmrTChbh>
[2019-01-23 13:39:12]
buundy :
high res photos included, maybe we can brainstorm and I can test your suggestions
[2019-01-23 14:23:53]
fredmicrowave :
All cells voltage are ok ?
[2019-01-23 16:45:19]
buundy :
I have not tested it, because I was not able to charge the battery. Although I can charge it via external balance charger if needed
[2019-01-23 17:05:58]
cs2000 :
If none of the cells are dead, it would probably come back is balanced charged externally and then firmware flashed on it again, it wont let you charge it whilst those 2 lights are flashing using the official charger
[2019-01-23 18:44:36]
fredmicrowave :
I would certainly charge all cells externally before trying it again. If the board detect a cell outside of parameters, It will not work properly.
[2019-01-23 18:47:01]
buundy :
Problem is those middle two lights doesnt allow me to turn it on and reflash fw inside of drone
[2019-01-23 18:47:42]
buundy :
But I will try balancing it first then I will report back
[2019-01-23 18:48:07]
buundy :
I wonder how can I communicate with it via those test pads
[2019-01-23 18:48:40]
buundy :
Especially the tx rx pads, also rst pad and there is also a pad named test
[2019-01-23 19:38:00]
mefisto :
I'm pretty sure that's just UART, and standard DUML packets.
[2019-01-23 19:58:25]
buundy :
It means that it doesnt write anything in the console while powered on? I tried hooking it up with the 3v3, gnd, tx, rx pins but no data appeared in the terminal. I hoped that after the successful previous p3p flashing I will be successful with the investigation with this board. I am trying to figure out those pins, what they are good for
[2019-01-23 21:30:24]
mefisto :
I don't think it will respond to DUML when not turned on.. but you may try sending it a common packet, ie. ask for software version. Like here, just change receiver_type:
<https://github.com/o-gs/dji-firmware-tools#comm_serialtalkpy>
[2019-01-23 23:50:33]
good.win.alexs :
@buundy If battery got locked - there is no easy way to bring it to life
[2019-01-23 23:51:00]
good.win.alexs :
there is Texas Instrument controller - bq30z55
[2019-01-23 23:51:09]
good.win.alexs :
it is controlling chemistry
[2019-01-23 23:51:24]
good.win.alexs :
and it is password-protected
[2019-01-23 23:51:59]
good.win.alexs :
so, in any moment if it will decide there is something wrong with cells - it will switch to locked state
[2019-01-23 23:52:46]
good.win.alexs :
and you will need 1. Special programmer to communicate with it (SMBus protocol); 2. Password to “unseal” controller
[2019-01-23 23:53:09]
good.win.alexs :
i know at least one peace of software that is capable of unlocking this controllers - UBRT
[2019-01-23 23:53:26]
good.win.alexs :
but license will cost around 800 usd per first year of usage
[2019-01-23 23:53:40]
good.win.alexs :
plus around 150-200 usd for programmer (hardware part)
[2019-01-23 23:54:20]
good.win.alexs :
cheaper and easier if you will find somebody, who is repairing laptop batteries - they have mostly similar problem with controllers
[2019-01-23 23:54:48]
good.win.alexs :
so what you need - fix/replace cells + unlock bq30z55 on board
[2019-01-23 23:55:30]
good.win.alexs :
and lock is one-way, no reflash or external commands will return this controller back to life. Only special software and special programmer
[2019-01-24 00:22:01]
cantrepeat :
Buy a new battery
[2019-01-24 00:52:55]
fredmicrowave :
Replacing the BQ30Z55 by a new, or unlocked one could work ?
[2019-01-24 09:54:40]
good.win.alexs :
@fredmicrowave no, replacing with new will not work
[2019-01-24 09:55:16]
good.win.alexs :
replacing with one from another battery will work if you’ll do it carefully (you have to disconnect cells in proper sequence to not trigger lock :wink: )
[2019-01-24 09:55:42]
good.win.alexs :
there is second MCU on board - also from Texas, it is MSP430
[2019-01-24 09:55:51]
good.win.alexs :
small microprocessor
[2019-01-24 09:56:16]
good.win.alexs :
it is mostly responsible for communication between bq30z55 and flight controller (using UART lines)
[2019-01-24 09:56:40]
good.win.alexs :
and there is authentication part between bq30z55 and MSP430
[2019-01-24 09:57:08]
good.win.alexs :
so, new BQ30 should have correct auth key stored to work with onboard MSP430
[2019-01-24 09:59:12]
good.win.alexs :
so, if you will find unseal key or auth key from BQ30… i’m ready even to pay, and i know others who will be happy to donate :slightly_smiling_face:
[2019-01-24 10:02:12]
buundy :
seems not an easy task :slightly_smiling_face:
[2019-01-24 10:02:28]
buundy :
I was just curious about how to get inside it
[2019-01-24 10:03:07]
buundy :
of course buying a new battery is a more reasonable option, but finding out these things about these batteries is fun to do
[2019-01-24 12:12:24]
good.win.alexs :
this controllers are using special proto SMBus - which is close relative to I2C protocol
[2019-01-24 12:13:36]
good.win.alexs :
TI has full documentation on them
[2019-01-24 12:44:02]
fredmicrowave :
Thanks for the information. Sad that in practice, they managed to restrain our liberty to repair and modify our stuff.
For changing cells, i suppose that temporarily connecting another good lipo with long wires could be an option to avoid triggering it.
[2019-01-24 12:45:15]
buundy :
Good idea :)
[2019-01-24 21:03:29]
fredmicrowave :
I don´t know f this can help:
<https://www.youtube.com/watch?v=4ECFAJtxrW4&>
[2019-01-24 21:49:51]
pawelsky :
Just make sure you use the version of the evaluation software supporting the Mavic battery firmware (I've used bqEVSWSetup00.09.92_bq30z55v0.36R3c.exe if I recall correctly)
[2019-01-25 01:10:00]
dronepilot :
Hi guys i bricked my CS 5.5, everything worked well attempting rooting. But i deleted dji go 4 and dji launcher, a had installed APEX launcher but no i can’t get everything back to normal it stays only dji logo when powered on and dose nothing else.
Which version of twrp can i upload via fastboot and where can i get the firmware in zip format?
Thanks
[2019-01-25 01:23:20]
cat.db :
you need send your cs to dji :smile:
[2019-01-25 01:26:43]
dronepilot :
Anyone can give me a help with this? Dji is overseas from my hometown customs charges are absurd on returning so i am willing for some help.
[2019-01-25 10:51:54]
chipmangini :
@rgf8aerial I would ask in the crystalsky_rooting channel
[2019-01-25 12:47:29]
dronepilot :
Thanks Doc will try that.
[2019-01-25 15:22:31]
good.win.alexs :
Yes, default password for battery manufacturer. This is known password for some people (google for Regedit Group), but not public. You can buy software to unseal for few hundred dollars. And you can’t unlock controller without knowing password. And there is no easy way to bruteforce it.
[2019-01-26 23:12:17]
good.win.alexs :
Did you try default password? Can you confirm that they as so stupid to not use custom pass?
[2019-01-26 23:15:39]
good.win.alexs :
@fredmicrowave if you want to switch board from one cells-set to another - there is very easy sequence: 1. Disconnect red power wire first to power-off controller; 2. DIsconnect ground wire to be sure that it is totally powered-off; 3. Disconnect balance wires (tiny ones)
[2019-01-26 23:16:03]
good.win.alexs :
To connect board with new cells - repeat it in opposite direction
[2019-01-27 00:42:43]
pawelsky :
Yes I did try the default password.
[2019-01-27 02:27:05]
fredmicrowave :
That makes sense, no power but never a cell error detected. Cool. Thanks !
[2019-01-27 02:38:56]
fredmicrowave :
BTW, as I said some time ago I fixed a battery that got low cell voltage -due to a too deep discharge- by recharging that cell only. (cycling it several times did not work) . I can now confirm that it worked, several flights and balance is within 0.1v in flight.
[2019-01-27 14:38:59]
good.win.alexs :
Then that is great for us! And once again - shame for DJI…
[2019-01-27 20:16:58]
zsanjavi14 :
Hi all. Phantom 4 pro navigation system error what is problem how i can fix it
[2019-01-27 21:29:41]
webmaster :
Any screenshots of error messages, pocs, logs, steps you've already done to try to solve it, specific environmental circumstances?
[2019-01-28 02:41:55]
lolo780 :
Crashed? The FC ribbon cables are shit on the p4p
[2019-01-28 02:42:08]
lolo780 :
Always tear
[2019-01-28 08:48:17]
oskars :
Guys - can you assist on following? I replaced two back arms for Mavic Pro and now after I put all together I have issue... RC is not connecting (not binding) and when I plug in USB to connect MP with PC it reconnects all the time.. anyone have had similar issue? Any idea on how to resolve this? :confused:
[2019-01-28 12:40:12]
oskars :
Thanks to all respondents.. solved! :slightly_smiling_face:
[2019-01-28 12:49:21]
buundy :
What was the problem?
[2019-01-28 12:49:28]
buundy :
So we can learn
[2019-01-31 20:57:38]
flydji :
I have got problems with a M1 battery, only 60 cycles and about one year old. When i charge, it
never stops blinking the 4 led's. App says, it is charged 99%. Automatic discharge, it goes down to
3 dots, not 2 and a half as usual. Seems to be a wrong calibration or so. Does anybody know this?
[2019-02-01 02:16:42]
fredmicrowave :
[2019-02-01 02:26:47]
fredmicrowave :
I have made some experiments with Mp1 escs. After checking the probable pinout, I connected a FTDI to the test points, powered the board, then run the BheliSuite config software and tried different connections .
At some point I could see response on the RX led of the ftdi . (I was hoping DJI could have been using open bheli firmware :laughing:). They are using proprietary control chips which reference (IESC1000) leads nowhere.
This was just a quick experiment and certainly not the proper way to do it: Any suggestion to go further will be welcome.
[2019-02-01 06:36:07]
buundy :
Nice try :)
[2019-02-01 06:36:37]
buundy :
Maybe they are also using betaflight :P
[2019-02-01 07:41:04]
oskars :
Not sure what was exact issue but I can tell what I did.
1. Cleaned the board once again.
2. Found a small bridge on main controller connectors. Removed them, cleaned.
3. Took a compressed air session all over the board.
4. Re-attached core board main cable.
As per history I have noticed that MP rear led light stays solid RED mostly in two cases.
1. When Core board cable is damaged / not fastened correctly.
2. There is a bridge between main controller unit pins - of course you need to be careful when soldering though.
However, having a spare core board cable or connector is always good. :+1:
[2019-02-01 12:27:27]
fredmicrowave :
Aha, good idea. Maybe assistant is just a copy with cosmetic changes :smile:
[2019-02-01 12:37:15]
evgeniychuiko :
@fredmicrowave I guess its just duml interface, isnt?
[2019-02-01 12:49:58]
freaky123 :
lol I could have told you they are not using BLHeli :wink:
[2019-02-01 12:49:59]
freaky123 :
The Mp1 just uses normal PWM input btw
[2019-02-01 12:57:50]
fredmicrowave :
@evgeniychuiko I have no idea. As i said it was just a quick test, and I understand very little about communication protocols. I thought that it could be a copy-paste from another open source esc system. It would be nice to access config. for example, bheli has an option to remove starting sounds ...
@freaky123 Good to know ! thanks. Then i suppose controllers must use regular firmware too...
[2019-02-01 12:59:50]
freaky123 :
the rx/tx on the escs are used for firmware updates and feedback about the status of the motors
[2019-02-01 13:00:06]
freaky123 :
they use the same rx/tx connected to all escs
[2019-02-01 13:00:35]
freaky123 :
on the FC board there are 4 pins for PWM (the motors) and 1 UART connected to all escs
[2019-02-01 13:01:51]
fredmicrowave :
I see.
[2019-02-01 13:03:01]
fredmicrowave :
I need to try again
[2019-02-01 13:10:12]
fredmicrowave :
I wonder how it communicates with 4 escs with one UART ...
[2019-02-01 13:13:00]
evgeniychuiko :
With duml commands I guess. Different recievers... 1201,1202....
[2019-02-01 13:18:53]
freaky123 :
yep
[2019-02-01 19:14:48]
kilrah :
spark has no more pwm, just one single bidirectional uart line for all 4, both control and telemetry
[2019-02-01 19:14:52]
kilrah :
imagine later ones are same
[2019-02-01 19:16:01]
kilrah :
fc sends one packet with values for all 4 escs, and a byte that tells one of the 4 to reply with its data
[2019-02-02 15:37:20]
buundy :
Thanks! :+1:
[2019-02-09 04:29:04]
ki4gyw :
Anyone tinkering with the Smart Controller?
[2019-02-10 17:56:14]
bobdole :
battery mod on mavic pro platinum - i tried thunder power high voltage 4500mah 3SHV and was disappointed.. internal resistance seems a hell of a lot higher than the proteks. mavic pro went down to 3.7v/cell whereas this thunder power battery is at 3.84v/cell
[2019-02-11 10:33:31]
dangerm0us :
Anyone here using DJI RE Goggles with the M2? Is your range as terrible as mine? Just got a set and tried them out for the first time, completely stock setup. The range was about 300m tops for me. Interested in anyone else’s experience...
[2019-02-11 13:20:53]
kilrah :
More than that, but nowhere near where it should be nor what you get with a mavic 1.
[2019-02-11 13:21:08]
kilrah :
well known issue on the m2... somehow hasn't seen a fix yet.
[2019-02-11 16:28:37]
evgeniychuiko :
Yeah, my biggest disappointment about m2... Goggles works so bad with m2. No smooth mode available, frames dropping and so on
[2019-02-11 16:30:12]
evgeniychuiko :
With m1 the goggles are slave device. But with m2 they are independent host
[2019-02-11 16:40:17]
cantrepeat :
DJI wants everyone to buy new googles so support for the m2 probably wont happen
[2019-02-11 16:40:34]
cantrepeat :
or rather work well with m2 wont happen
[2019-02-11 16:47:21]
bobdole :
hmm.. probably a great time to buy goggles
[2019-02-11 21:36:48]
dangerm0us :
Read somewhere to use the Pagoda antenna, didn’t help much if at all. Complete signal drops at about 400m with the antenna attached. Had to power off the goggles mid-flight to regain control of the bird. What an epic disappointment. I had read they slave from the remote on the M1, which seems totally logical... Why would one assume it would be different with the M2!
[2019-02-11 21:43:32]
quad808 :
Goggles? I have a set that I probably used twice, and a case. Sitting there not used at all. If someone wants to take them off my hands for a good price, let me know.
[2019-02-11 22:20:09]
chipmangini :
@quad808 How do they compare to the Moverios?
[2019-02-11 22:21:16]
quad808 :
The clarity is spectacular, but I just never liked the complete enclosed use of it, and they are heavy
[2019-02-11 22:21:20]
chipmangini :
I was thinking on getting them just for friends to watch what I see...
[2019-02-11 22:21:47]
quad808 :
Now for that use....they would go nuts over them.
[2019-02-11 22:22:15]
chipmangini :
Are you'rs the RE?
[2019-02-11 22:23:23]
quad808 :
Some pilots swear by them, but not me...hence the Moverio...(thanks for that...they are GREAT) No, not RE, just standard. I also have +4 DJI reading glasses adapters in them, so I could see the screen clearly.
[2019-02-11 22:24:30]
quad808 :
if interested let me know by PM, we can chat offline
[2019-02-11 22:25:11]
chipmangini :
If I was to buy a set, I would try the RE, otherwise, I just LOVE the Moverios with the Rochester Optical Goggles! Best of all worlds!
[2019-02-11 22:26:01]
quad808 :
:+1: And I agree about the RE
[2019-02-11 22:26:12]
chipmangini :
:+1:
[2019-02-12 02:27:42]
bobdole :
whats the range like with the goggles?
[2019-02-12 04:26:44]
dangerm0us :
The RE’s are great. They work well with my mini quad too. If the range issue can be fixed with the M2 (which is a deal breaker, to be clear, on face value at least) then they would be the complete package. The clarity is excellent and if you’re into FPV you’ll love em.
[2019-02-12 04:40:11]
bobdole :
oh this is great... <https://thumbs.gfycat.com/GiganticUnhappyKestrel.webp> gigantic unhappy kestrel... lol.. i was using 8" tablet and saw the sun glint off utility pole ground wire at the last fraction of a second and gently bounced off of it
[2019-02-12 04:40:46]
bobdole :
would goggles prevent that? this was almost two miles away. would have taken hours to hike to it
[2019-02-12 04:41:37]
bobdole :
<https://gfycat.com/giganticunhappykestrel> better view
[2019-02-12 04:56:49]
kilrah :
I have been able to see such a wire and stop in time with them, yup
[2019-02-12 05:17:50]
bobdole :
well.. i'm sold.. but on regular old 2.4 ghz mavic pro, what is the range like? same as the controller? i wouldn't be using the 5.8ghz
[2019-02-12 05:38:59]
kilrah :
yup, same as controller
[2019-02-15 15:35:28]
zapf :
Apparently you can still buy 3dr solos direct for the same price as the liquidation. I figured they relegated the rest of their stock to sitescan units
[2019-02-15 15:36:22]
zapf :
(I got cc'd on an email chain because of some purchasing issues with our department)
[2019-02-16 03:49:41]
vertigo :
On zenmuse x3 Does anyone know of a way to either A. Clear corrupt firmware from video encoder or B. Clear gimbal calibration so that it can resense and re setup the end points etc after swapping camera core and boards. No matter what we do we can’t get mag nuts in right place as camera core is from a broken gimbal.
Basically we had 2 x3 one had no damage but had corrupted fw on video encoder and the other had been crashed and snapped arms but picture still worked. Gimbal all worked on first cam but no picture so we put cam from broken gimbal on the gimbal which is ok and now we have picture but gimbal doesn’t work as calibration is all wrong as that core is setup for the broken gimbal.
[2019-02-16 20:47:26]
mefisto :
Does anyone know why there are two IR diodes in forward VPS on Spark? Just redundancy? or for wider angular area? or for checking whether an obstacle is on left or right?
[2019-02-16 20:48:05]
mefisto :
I just put it on wiki and this made me wonder..:
<https://github.com/o-gs/dji-firmware-tools/wiki/WM100-Forward-VPS-IR-daughter-board>
[2019-02-16 21:31:15]
aciid :
would it be easy to check if they pulsate in tandem? some IR leds wavelengths used are visible in phone cameras, if you don't have other IR equipment around
[2019-02-16 21:42:57]
fredmicrowave :
At first glance, it looks like a distance measurement sensor ... One is a TX, the other RX ?
[2019-02-16 23:04:39]
mefisto :
@fredmicrowave That was my first thought as well. But then I noticed both are blinking, and photodiode is on the mother board. Not sure if they're blinking simultaneously or very close to each other.
[2019-02-16 23:06:28]
mefisto :
@aciid there are many videos on YT, not easy to draw any conclusions though. ie:
<https://www.youtube.com/watch?v=gvoBAcEMdIg>
[2019-02-16 23:17:25]
fredmicrowave :
Interesting, they are visible in the first seconds of the video... If you set the video a 0.25 speed, they really seems to be blinking simustaneously.
Could it be some kind of illuminator for obstacle sensing cameras in low light conditions? MP is often complaining about low light and obstacle avoidance being disabled ...
[2019-02-17 07:34:07]
buundy :
Maybe IR help for the camera in low light
[2019-02-17 17:08:17]
luckfish1985 :
@mefisto left is camera , right is IR transmitter
[2019-02-25 22:38:04]
pawelsky :
It is a ToF depth sensor, two transmitters most likely for better illumination/range
[2019-03-03 21:12:56]
sheldon.holy :
M2 and MA gimbals use the same M7 arm for gimbal control
[2019-03-03 21:12:58]
sheldon.holy :
Interesting
[2019-03-03 21:13:06]
sheldon.holy :
Looks like same architecture
[2019-03-04 16:13:17]
bobdole :
does it feel like dji's strategy was heavy R&D for initial awesome product with a very long life cycle? seems they keep reusing same old shit
[2019-03-04 16:48:18]
dkovar :
If you can sell the same stuff over and over again then you can make money without incurring new development expenses.
[2019-03-05 09:28:15]
w4t3r :
@evgeniychuiko Would you mind sharing the command for locking the gimbal to fly in manual mode?
[2019-03-05 09:33:47]
evgeniychuiko :
Sure, if someone need it
[2019-03-05 09:34:24]
evgeniychuiko :
dji_mb_ctrl -R diag -g 4 -s 4 -c 3d 0232
[2019-03-05 18:30:49]
w4t3r :
Thanks a lot @evgeniychuiko! Do you happen to know a command to take a picture?
[2019-03-05 19:09:08]
lolo780 :
"Cheese"
[2019-03-05 20:27:32]
cantrepeat :
is it not adb -camera -cheese ?? :smile:
[2019-03-06 08:47:10]
evgeniychuiko :
its because drone is connected to usb. Just add that cmd to script, after some pause, for example 15sec
[2019-03-06 09:37:43]
w4t3r :
I thought about that and started a shell that slept for 40 seconds (while I unplugged the USB) and then executed the command, and the same thing happened, but I will try to add it to the script that executes on boot, thanks!
[2019-03-06 12:48:14]
evgeniychuiko :
Ok, Ive made a loop, never checked how long gimbal will be locked after cmd once
[2019-03-06 12:49:14]
evgeniychuiko :
When compass calibration started, system will send it to gimbal every second
[2019-03-06 12:50:40]
evgeniychuiko :
I mean error 1002 because drone is usb connected
[2019-03-06 12:51:01]
evgeniychuiko :
Not 30sec timeout, never checked it
[2019-03-06 14:17:48]
w4t3r :
I tried adding it to /vendor/bin/check_1860_state.sh, and it resetted again after 30 seconds. So I'll make a loop like you did
[2019-03-06 14:30:41]
validat0r :
there is time lapse in the app .. why wouldn't you use that?
[2019-03-06 15:41:33]
w4t3r :
@ilovemynexus4 because it only allows 5 second intervals and not 1s. **WHEN SHOOTING RAW**
[2019-03-06 15:44:08]
w4t3r :
Ok, that was too huge. But it’s a thing. A 20 minute flight = 1200 seconds, 1200/5 = 240, that’s not even 10 seonds of resulting video! If I got a frame every second (which is possible if I take each shot manually. My shutter button is already worn out because of that), it would be 1200/25 = 48s of video
[2019-03-06 15:47:47]
sheldon.holy :
M2Z IR filter can be easily removed
[2019-03-06 17:33:06]
lolo780 :
Any pics of M2 gimbals taken apart?
[2019-03-06 17:49:07]
sheldon.holy :
What do you want to see? I have pieces of all of them
[2019-03-06 17:49:25]
lolo780 :
How it comes apart
[2019-03-06 17:49:36]
sheldon.holy :
Oh that's easy :)
[2019-03-06 17:49:41]
lolo780 :
I have an M2P here with a dead roll motor or sensor
[2019-03-06 17:49:55]
sheldon.holy :
Ah right
[2019-03-06 17:49:55]
sheldon.holy :
[2019-03-06 17:50:04]
sheldon.holy :
Dismantling the motor will be next to impossible without breaking it
[2019-03-06 17:50:26]
sheldon.holy :
[2019-03-06 17:50:28]
teslahv :
Hi!
[2019-03-06 17:50:34]
sheldon.holy :
Could be damaged flex cables too, in which case it's a bit wankered
[2019-03-06 17:51:14]
lolo780 :
So just replace? Got any for sale?
[2019-03-06 18:00:30]
sheldon.holy :
None for sale in afraid as I need all the working bits for repairs
[2019-03-06 19:19:45]
teslahv :
HW related too: Is there any one that ever has played the Mavic RC speaker files?
[2019-03-06 19:21:25]
teslahv :
Using tinyplay SoundTest.wav e.g.
I don't think that was any related to the Mavic I think? Last fw is 01.03.0550, in following SW it is missing.
[2019-03-06 19:43:06]
w4t3r :
@teslahv so the script is done now.
You have to use this: <https://github.com/jkson5/jkson_fcc_mod>
Install it **without** the loop selector mode, set the transmitting power to what you like.
Then adb pull /vendor/bin/check_1860_state.sh and append this:
```
busybox ping -c 1 -w 1800 192.168.41.2
sleep 5
while true
do
logcat | grep -FEm 1 ', 0, 0, 1, 1, 0, 0, ., ., 0, 0, ., 0, 0, 0, ..'
sleep 5
logcat | grep -FEm 1 ', 0, 0, 1, 1, 0, 0, ., ., 0, 0, ., 0, 0, 0, ..' &
pid=$!
while kill -0 $pid 2> /dev/null; do
dji_mb_ctrl -R diag -g 4 -s 4 -c 3d 0232
sleep 10
done
sleep 5
done
```
Then remount /vendor r/w with `busybox mount -o remount,rw /vendor` in adb shell and `adb push check_1860_state.sh /vendor/bin/check_1860_state.sh`
I don't know if the chmod is neccessary, it's `adb shell chmod 755 /vendor/bin/check_1860_state.sh`
Then you have a five second window to press pause+c1 as many times as you like (I like to do it twice in case it doesn't get it) to toggle between locked and unlocked. It takes around a minute after toggling to unlocked until the gimbal is "on" again.
The complete /vendor/bin/check_1860_state.sh for 1,5w + gimbal mode switching is:
```
#!/system/bin/sh
/system/bin/check_1860_state.sh&
busybox ping -c 1 -w 1800 192.168.41.2
sleep 5
while :
do
dji_mb_ctrl -S test -R local -g 9 -s 9 -c 27 00024800FFFF0200000000
dji_mb_ctrl -S test -R local -g 9 -s 9 -c 3c
break
done
while true
do
logcat | grep -FEm 1 ', 0, 0, 1, 1, 0, 0, ., ., 0, 0, ., 0, 0, 0, ..'
sleep 5
logcat | grep -FEm 1 ', 0, 0, 1, 1, 0, 0, ., ., 0, 0, ., 0, 0, 0, ..' &
pid=$!
while kill -0 $pid 2> /dev/null; do
dji_mb_ctrl -R diag -g 4 -s 4 -c 3d 0232
sleep 10
done
sleep 10
done
```
[2019-03-07 06:43:51]
teslahv :
Ok thank you very much! The selector is already installed and works fine. There was an issue that made/makes the blackbox get clogged until no FLYnnn.DAT are written.
That is why I installed 2 selectors one for SDR control and one for clean up uninteresting FLYnnn.DAT after a successful flight (Before turning off the bird I can now remove the DAT files until the point that my bird crashes. Then I can choose not to delete and save DAT instead)
Selectors are Pause && C1 && C2 for CE/FCC without boost and Pause && !C1 && C2 for forced DAT deletion.
I think I will add your gimbal mod to Pause && C1 && !C2 for the first attempts.
(Btw I plan on adding a sub-menu to the FCC mod so it is in the sub-menu and parent menu is 2.3 or 2.5 GHz selection.)
[2019-03-07 06:48:36]
teslahv :
A few tiny questions @w4t3r : You're talking about 1 minute time. This is hopefully not the time the gimbal stays in FPV mode?
Then, if the gimbal isn't mechanically locked, isn't manual mode flight too much strain to the gimbal?
[2019-03-07 07:41:01]
lolo780 :
Not too much strain. If you turn the AC vertical or upsidedown the gimbal locks straight ahead anyways
[2019-03-07 13:07:00]
w4t3r :
@teslahv what firmware are you on, BTW? My DAT files are incomplete, too. I’m om 1.4.3
[2019-03-07 13:16:14]
w4t3r :
Ah, I think I understand your question now. Using my code snippet will lock your gimbal until you unlock it.
Unlocking may take 60 seconds
[2019-03-07 16:08:29]
teslahv :
And state updated ofc.
[2019-03-08 16:11:02]
teslahv :
I haven't verified yet that the aren't broken anymore.
Will try to do so tonight.
Code is not even worth to talk of and it has an important caveat: It erases all Dat files and then for the current boot-time the FC won't be able to access the new 001. DAT file (Seq nr starts at 001 again and I haven't been good enough at bash yet to leave the last e.g. 3 files).
Put in other words you have to reboot AC following the deletion.
[2019-03-08 16:13:09]
teslahv :
Tell me if still interested
[2019-03-08 16:41:07]
evgeniychuiko :
@w4t3r gimbal cmds update
[2019-03-08 16:42:12]
evgeniychuiko :
dji_mb_ctrl -R diag -g 4 -s 4 -a 20 -c 3d 0232 (02 - lock mode, 32 - seconds)
[2019-03-08 16:42:33]
evgeniychuiko :
dji_mb_ctrl -R diag -g 4 -s 4 -a 20 -c 3d 01 (normal mode)
[2019-03-08 16:43:47]
w4t3r :
Cool! And sorry for asking again, you don’t know the command to take a picture?
[2019-03-08 16:44:35]
evgeniychuiko :
Trying to understand how to take photo. Ive found cmd, but for some unknown reason it will take picture only once, until bird reboot
[2019-03-08 16:45:32]
w4t3r :
That’a a pity. Thanks for looking though!
[2019-03-08 16:45:53]
evgeniychuiko :
Will find, and let you know
[2019-03-08 16:46:45]
w4t3r :
Do you think it would be useful if I made a pull request to your fcc mod with the gimbal lock command?
[2019-03-08 17:56:47]
evgeniychuiko :
@w4t3r Ok, got it!
[2019-03-08 17:57:00]
evgeniychuiko :
dji_mb_ctrl -R diag -g 1 -s 2 -a 0 -c 7c 0100 (take photo)
[2019-03-08 17:57:38]
evgeniychuiko :
dji_mb_ctrl -R diag -g 1 -s 3 -a 0 -c 6c (complete it and ready for next photo)
[2019-03-08 18:16:25]
teslahv :
@evgeniychuiko Thanks so much for your contributions!
What is your approach? Do you disassemble firmware or do you analyze live communication?
[2019-03-08 18:22:29]
teslahv :
Or, analyze test*.sh scripts
[2019-03-08 18:30:42]
w4t3r :
Thank you very much @evgeniychuiko! Much appreciated
[2019-03-08 18:40:05]
evgeniychuiko :
Sometime reverse fw, but mostly do internal communication analyze with plenty software tricks. Sorry, cant share my tools, mate.
[2019-03-08 18:56:08]
teslahv :
Ok thx, no problem at all!
[2019-03-10 16:04:45]
w4t3r :
Are mavic pro and platinum motors identical? flew against a tree…
[2019-03-10 16:05:27]
lolo780 :
Same
[2019-03-10 16:05:38]
lolo780 :
Did the tree win?
[2019-03-10 16:16:17]
w4t3r :
Yeah lol. Tried to beat my speed record (156km/h) at midnight but only managed 140. Was damn tired and focused too much on navigating while descending with 10m/s and forgot to stop. Hit a tree at 25m height with 55km/h. Broke the gimbal cables, vibration absorption rubbers, one arm and some props. Quite lucky that I found all parts in the woods though, the battery was 10m away from the drone…
[2019-03-10 16:17:38]
lolo780 :
I always tape the battery on since they tend to fly off
[2019-03-10 16:18:04]
w4t3r :
that's smart, then you can use esc beeping to find it
[2019-03-10 16:18:21]
lolo780 :
Yep
[2019-03-10 16:20:20]
lolo780 :
3m 8934 is unbelievably strong
[2019-03-10 16:21:44]
w4t3r :
But one question: if there is still power after a crash, couldn't broken cables cause a short circuit?
[2019-03-10 16:22:21]
w4t3r :
I think I attributed a fried gimbal top board in p3 times to that
[2019-03-10 16:22:55]
lolo780 :
I guess that's possible
[2019-03-10 16:23:21]
lolo780 :
Never seen that on mavics
[2019-03-10 16:25:35]
w4t3r :
Ok, good to know. I'll assume the motors are identical cuz platinum are cheaper
[2019-03-10 16:26:11]
w4t3r :
fucking gimbal cables cost 10 bucks each :face_with_symbols_on_mouth:
[2019-03-10 16:27:29]
lolo780 :
Weird how platinum parts are cheap. M2 stuff is also reasonably priced.
[2019-03-10 22:53:12]
teslahv :
Shutters and canopy beneath won.
[2019-03-10 22:53:51]
teslahv :
Ofc footwalk won too
[2019-03-10 23:31:10]
bobdole :
were you trying to fly it into a window and then it started drifting into the window frame?
[2019-03-11 09:01:44]
aciid :
flying over 100km/h with a mavic sounds dangerous
[2019-03-11 09:33:56]
validat0r :
That's much less in m/s
[2019-03-11 15:59:04]
validat0r :
similar lesson i had to learn the hard way: never start under the branches of a tree
[2019-03-11 16:08:29]
bobdole :
why does the damn thing drift into window frames and balcony rails?
[2019-03-11 16:10:46]
bobdole :
@teslahv did you have djicare? i found the best way to handle those types of scenarios is to get the dji shitcopter AWAY from the building ASAP. i launched out of a hotel room that had a balcony and after losing a set of propellers, i found the only solution was to flip to sport mode and go full speed through the patio doors
[2019-03-11 16:11:06]
bobdole :
had to do the same thing on the way back
[2019-03-11 16:14:11]
teslahv :
I wouldn't say it is shit. I like it pretty much. No I don't think I have DJI Care, but will attempt to fix it myself.
[2019-03-11 16:17:26]
bobdole :
i'd say its pretty shitty how it tends to get sucked towards objects.
[2019-03-11 16:18:31]
teslahv :
Ok I don't have much experience with that. Aerodynamics issue?
[2019-03-11 16:20:05]
bobdole :
i think it is a magnetic field issue
[2019-03-12 18:53:35]
teslahv :
Guys I told ya I crashed my Mavic. In the crash the bird lost its one of its feet which I was able to find again. What I lost too was some RF voodoo mag!c stick that was in the foot. I presume that the sticks look the same in both feet and will post a picture:
[2019-03-12 18:54:53]
teslahv :
[2019-03-12 18:57:45]
teslahv :
Now on to the 100 dollar questions:
1.) What exactly is that voodoo magic that it does? Appears like some reflectors that were calculated to like "1 ppm" accuracy
2.) Will I lose like 35643 dBm gain if I don't have that reflector on one leg?
[2019-03-12 18:58:57]
teslahv :
So even with FCC+boost some 0.2 mm range :joy::joy::joy:
[2019-03-12 19:00:33]
lolo780 :
I've run without them and no problems flying long range.
[2019-03-12 19:00:48]
lolo780 :
I only connect the left side AC antenna
[2019-03-12 19:01:05]
lolo780 :
And you only need the left side RC antenna and amp
[2019-03-12 19:21:16]
teslahv :
But you can use the right side too? Is it gain?
[2019-03-12 19:21:37]
teslahv :
If you have both RC antennae
[2019-03-12 19:32:34]
lolo780 :
The right side on both helps short range multi path or something like that.
[2019-03-12 19:33:00]
lolo780 :
I never noticed any difference
[2019-03-12 20:27:55]
bobdole :
those feet are cheap and so are the entire arms (new)
[2019-03-12 20:30:48]
lolo780 :
Ali express
[2019-03-12 20:38:06]
teslahv :
Don't own credit/debit cards
[2019-03-12 20:38:56]
teslahv :
I'd rather fix it myself as good as possible :)
[2019-03-12 22:08:58]
lolo780 :
Search Beanbubba on [mavicpilots.com](http://mavicpilots.com). he's an rf engineer and has done extensive analyzing
[2019-03-15 19:02:00]
lolo780 :
I've had customers pay with stacks of 5s and 10s
[2019-03-15 21:05:27]
cantrepeat :
make it rain do they?
[2019-03-24 02:28:58]
dgrauwickel :
Beanbubba passed away about a week ago!!! :(((((
[2019-03-25 17:48:22]
zapf :
Anyone know of a 2.4ghz transceiver like the nrf24l01, but with more power?
[2019-03-25 17:49:55]
zapf :
Want to transmit sensor data to a ground station, already have stuff on 433 (rc) and 900mhz (mavlink telemetry via an rfd900x).
[2019-03-25 19:39:29]
bobdole :
@lowellfoo780 is this sufficient? i pulled the log and was going to plug it into the viewer.. but then i saw airdata has this power meter thing <https://app.airdata.com/share/eKBYQI/POWERCells_Graph>
[2019-03-25 19:40:59]
bobdole :
i'm a little disappointed in this battery hyperion G8 5200mah LIHV.. looks like it might be a little too heavy for my setup... then again the sunhans amp feels hot so maybe its taking more than the 200mah i assumed
[2019-03-25 22:43:34]
bobdole :
disregard that... it was the dji battery. it actually gives me a few more minutes than the protek. i got only 28 minutes with the 4100mah protek and it force landed me at 10%
[2019-03-25 22:52:55]
lolo780 :
Ok that's promising
[2019-03-26 00:00:33]
bobdole :
that hyperion G8 3S 5200mah lihv is 315 grams now. the wrapper and plastic protector only weighed 5g
[2019-03-26 02:47:36]
lolo780 :
Darn
[2019-03-26 05:16:05]
lolo780 :
A mavic 1 with m2 motors and props plus 4s power
[2019-03-26 05:16:58]
lolo780 :
Would be a great combo. If you remove the foam spacers between cells, a 4s battery is barely taller than stock.
[2019-03-26 15:32:41]
bobdole :
have you done this? or rather.. if you haven't why havent you
[2019-03-26 15:37:11]
bobdole :
would m1p esc handle 4s?
[2019-03-26 19:37:16]
w4t3r :
I think he said some time ago that they do
[2019-03-26 19:45:53]
lolo780 :
The standard esc will. Platinum ESCs detect over voltage
[2019-03-26 19:47:21]
lolo780 :
Platinum ESCs are not as good for modding, but in stock form are better. DJI changed MOSFETs.
[2019-03-26 20:13:55]
bobdole :
what happens when they detect over voltage? just won't fire up?
[2019-03-26 20:40:01]
lolo780 :
Goes on strike
[2019-03-26 20:40:20]
lolo780 :
seeds a firmware mod
[2019-03-26 21:45:55]
teslahv :
Lol seems the repair with the 2 component glue is ok.
Mavic flew just fine today :)
[2019-03-26 21:47:31]
teslahv :
No hints for that crash except the gimbal correction which is now at +2.8 (!)
Need to bend the gimbal plate a little more (or less)
[2019-03-27 07:59:31]
buundy :
Be careful with the fragile flex cable! ;)
[2019-03-27 15:35:12]
teslahv :
Yeah I'll do so.
Possible need to do a gimbal calib too
[2019-03-27 15:35:21]
teslahv :
Possibly
[2019-03-27 16:10:00]
bobdole :
gimbal calibrate... horizon is fine... fly a minute... +2.8!
[2019-03-27 16:20:47]
lolo780 :
Drone has a positive attitude
[2019-03-29 18:43:46]
zapf :
I remember this from the launch event. Did anyone ever actually develop an addon that interfaced with the i2 usb?
[2019-03-29 18:44:05]
zapf :
they claimed it was supported through the SDK
[2019-03-29 18:44:41]
lolo780 :
Unable to load image
[2019-03-29 18:46:06]
zapf :
It's just a screenshot from their launch event stream
[2019-04-06 17:09:23]
bobdole :
@lowellfoo780 with a battery mod, if you have issues where you want to drain an addon lipo at a faster rate than the DJi battery, do you shorten wires or increase gauge? the hyperion g8 batteries are promising, but IR needs a little grease
[2019-04-06 17:52:44]
lolo780 :
Never really thought about it. I always run the shortest wires possible. Usually 16ga.
[2019-04-06 18:24:03]
fredmicrowave :
In theory, both .
The effects are the same, and will add.
[2019-04-06 18:25:12]
fredmicrowave :
(Keeping in mind that thicker wires are heavier)
[2019-04-06 19:25:48]
bobdole :
yeah.. wondering if 2in of 16awg vs 12awg will make a noticeable difference. i think it might
[2019-04-06 19:33:36]
lolo780 :
If you run the calculations on voltage drop it's next to nothing
[2019-04-06 19:33:52]
lolo780 :
12ga is also a pain on xt30s
[2019-04-06 19:49:54]
validat0r :
What’s ga?
[2019-04-06 19:54:19]
validat0r :
Wire diameter?
[2019-04-06 19:56:28]
lolo780 :
Gauge
[2019-04-06 19:58:14]
validat0r :
Got it
[2019-04-06 21:04:03]
fredmicrowave :
If what you want is a lower resistance path to that battery, everything is important and it may make a difference..
The voltage drop is very small, but relative change between using 12 and 16Awg@30A is not : 0.05V vs 0.02V voltage drop; (0.44%vs 0.17%)
Wire length is crucial too.
[2019-04-06 21:10:43]
lolo780 :
At 1.5c it's a lot less.
[2019-04-06 21:10:52]
lolo780 :
Assuming long range flying.
[2019-04-06 21:20:54]
fredmicrowave :
Ah yes, indeed. I was assuming something more hungry :slightly_smiling_face:
[2019-04-07 07:20:44]
bobdole :
Thanks!
[2019-04-09 18:46:35]
nocommie :
anyone know a US source for an MP1 IMU? I have found them included with the ESC board but only need the IMU. Thanks
[2019-04-10 00:43:10]
luckfish1985 :
CHINA
[2019-04-10 00:43:55]
luckfish1985 :
4$
[2019-04-10 03:26:56]
lolo780 :
Thunderdrones
[2019-04-10 12:36:37]
nocommie :
Thanks. I went ahead and ordered an ESC board with one attached for about $35.
[2019-04-10 13:55:25]
fredmicrowave :
Yes you can find complete boards on ebay for about 35 . That sort out lots of problems. The one i bought was already modded. nfz free
[2019-04-10 14:23:58]
chipmangini :
Delete
[2019-04-13 21:43:44]
nocommie :
Hey Guys, I received a used IMU, installed it and powered up. I can now calibrate the compass. Before it would never detect that I was spinning while level for the first step. But now I get constant "calibrate IMU"messaged. I can calibrate the IMU fine, and it says successfully calibrated but comes up again right after finishing. I have reflashed the FW and same thing. Any ideas? I suppose this one could be bad too. I actually got 2 in the package so I may try replacing it again.
[2019-04-13 21:45:35]
chipmangini :
Have you rebooted? Just sayn'
[2019-04-13 21:49:07]
nocommie :
yep lol
[2019-04-13 21:50:36]
lolo780 :
Try the Assistant IMU calibration. Advanced. You can also read the x y z data there.
[2019-04-13 21:50:45]
nocommie :
ah ok, good idea
[2019-04-13 21:51:42]
nocommie :
is that in normal assistant bootup or in debug mode of the beta?
[2019-04-14 00:42:47]
lolo780 :
I forget
[2019-04-14 01:19:23]
nocommie :
Yeah, it is in the dev mode only. But, having issues getting into devmode. I can get in but cant select anything. Just a red circle/line for a mouse pointer. Cant select the imu calibration option. Or any option
[2019-04-18 08:42:38]
drlov :
Anyone with Software for aligning Gimbal's P4 SERIES?
[2019-04-23 16:22:23]
sheldon.holy :
Nope
[2019-04-23 16:22:26]
sheldon.holy :
Doesn't exist
[2019-04-23 16:22:33]
sheldon.holy :
@jhonny.ebtir
[2019-04-23 17:45:40]
drlov :
And how do you do to align gimbal when the magnet breaks?
[2019-04-23 17:45:49]
drlov :
@sheldon.holy
[2019-04-23 17:46:30]
sheldon.holy :
You buy a new gimbal
[2019-04-23 17:46:56]
sheldon.holy :
Or you can buy maybe 10-20 motors and see which one is close :slightly_smiling_face:
[2019-04-23 17:50:29]
lolo780 :
There is another way to align the yaw and that's to simply rotate the upper mount.
[2019-04-23 17:50:42]
lolo780 :
Redrill or do whatever is needed to center the cam
[2019-04-23 17:57:43]
sheldon.holy :
If it's your own drone then sure
[2019-04-23 21:11:08]
teslahv :
Shredded my bird again while expecting to be in ATTI and not being in ATTI but in dangerous GPS/ATTI mix.
I could not understand why the Mavic would brake that abruptly and tried to land.
Meanwhile touched things and that in turn brought me down.
[2019-04-23 21:34:55]
teslahv :
When grounded it would not stop moving because the tilt detection is turned off by FC patch.
I then could stop it and I noticed that the gimbal would sound strange noises.
I tried to make the gimbal move but it wouldn't move.
I turned off and on again the bird and the gimbal would only turn upside and downside, then stop.
I Go I would see Gimbal: Restarting.
I opened the Mavic and reconnected the gimbal connectors. Unfortunately, the behavior would be the same.
If there's any pointers I'd be happy to know. I may just ask Thunderdrones too.
Afterwards I did disconnect the gimbal so it isn't controlled at all. It's now pretty much like using the @evgeniychuiko gimbal shutdown commands.
I then fixed it with some tape so the gimbal is softly held in a defined position.
Flight ofc was quite a bit shakier now. I'm afraid I'll be forced to get familiar with that shaking ;)
[2019-04-23 21:46:02]
fredmicrowave :
If there is no mechanical damage, I think that could be a flex problem. Easy to fix.
[2019-04-23 21:46:21]
fredmicrowave :
( assuming it is a MP )
[2019-04-23 21:51:00]
teslahv :
It is an MP(P), but what is flex?
[2019-04-23 21:58:17]
teslahv :
I reconnected all of the gimbal connectors, but I don't know what mechanical damage looks like.
There is slight damage but it has been there before and I cannot assess whether it may force the gimbal restart or not.
I will have a look into the mobile's DAT's and TXT's. Hopefully they state what exactly makes the gimbal restart.
[2019-04-23 21:59:10]
fredmicrowave :
Flex, or ribbon cable, is the flat cable that connects motors, sensors and cemera to the main gimbal board
[2019-04-23 21:59:42]
fredmicrowave :
One of the many youtube videos about that:
<https://www.youtube.com/watch?v=zp8v7ePbZCY&t=489s>
[2019-04-23 22:00:27]
teslahv :
One would need replacement ribbon then?
[2019-04-23 22:00:47]
fredmicrowave :
Damage may be invisible, but if you can see any sort of damage, it is most certainly bad.
[2019-04-23 22:01:45]
fredmicrowave :
Well you should carefully visually check it first,
[2019-04-23 22:03:05]
teslahv :
Ok I'll watch the video.
[2019-04-23 22:04:12]
fredmicrowave :
You may find a shorter one, I just picked that one...
[2019-04-24 04:31:34]
teslahv :
How to figure out
- whether the ribbon in damaged?
- the motors themselves are ok?
[2019-04-24 04:31:59]
teslahv :
(The gimbal motors)
[2019-04-24 06:58:11]
lolo780 :
If in doubt, buy a gimbal with ribbon. Ali Express or ebay
[2019-04-24 11:34:04]
sheldon.holy :
The gimbals supplied with ribbons are 70% of the time useless though
[2019-04-24 11:34:21]
sheldon.holy :
I never use gimbals supplied without the control board, they won't calibrate properly otherwise
[2019-04-24 11:34:26]
sheldon.holy :
Usually don't work at all
[2019-04-24 11:35:05]
sheldon.holy :
Things to check on gimbal: check motors for any play or movement on the shafts, if they wobble by hand then it will vibrate badly when turned on (new gimbal time)
[2019-04-24 11:35:38]
sheldon.holy :
Rotate the gimbal axes to the end stops, if they move past the normal end stop position then the end stop is bad. If that happens then it will not complete the boot up routine (new gimbal time)
[2019-04-24 16:44:59]
teslahv :
Can I visually see the end stop be bad?
[2019-04-24 16:53:08]
teslahv :
Or put in different words, how to find the end stop?
[2019-04-24 17:06:04]
fredmicrowave :
If you rotate the gimbal by hand, you will feel it blocking the rotation. If damaged, the camera will go too far from normal. And eventually, the ribbon flex will be the end stop...
[2019-04-24 17:13:25]
teslahv :
For up/downward gimbal part the plastic seems to be the end stop. The other movements appear to have an invisible stop.
[2019-04-24 17:15:02]
teslahv :
How do we notice burnt gimbals such as when forgetting to remove the gimbal clamp?
[2019-04-24 17:16:41]
teslahv :
I was grounded 45 s I think, then the Mavic battery was switched off.
If it was obstructed that time it could well have an effect?
[2019-04-24 17:18:07]
fredmicrowave :
Well, i guess if it doens't work it means that it is damaged...
[2019-04-24 17:18:07]
teslahv :
I will surely have a look into the flight logs.
[2019-04-24 17:18:56]
teslahv :
Yeah but fixable with 20$ ribbon or 300$ camera assembly?
[2019-04-24 17:21:41]
fredmicrowave :
I am not that experienced with damaged gimbals. But you can always begin by disassembling the ribbon and inspect it. If damaged, change it. If not, and you have time, change it too, as it is sometimes invisible.
[2019-04-24 17:23:27]
fredmicrowave :
You can complete gimbal assemblies for around 150 on aliexpress. And only gimbal much cheaper, but take the chance end up with a not so well calibrated one that sometimes drift from horizon...
[2019-04-24 17:23:56]
teslahv :
Ye, or become acquainted with flying without gimbal^^
[2019-04-24 17:25:08]
teslahv :
Can't we calibrate the gimbal better after reflashing gimbal FW?
[2019-04-24 17:26:42]
teslahv :
Downgrade gimbal FW then upgrade it, so there is always a "change" in FW version and a download is deemed necessary.
[2019-04-24 17:31:42]
fredmicrowave :
No, apparently gimbal calibration is something that comes from factory only....
[2019-04-24 18:59:20]
teslahv :
Ok
[2019-04-26 23:41:00]
makerbob :
Don't know if it helps, but here comes some info which I couldn't find elsewhere: if you power the sensor board + gimbal via the two pole JST connector with 11,4 V (the full battery voltage, white is +, black is GND), it will perform the gimbal dance (self calibration). This works with the LVDS cable (for camera, the cable with the many single shielded strands) and the flex ribbon (that goes from the sensor board 34 pin FPC connector to the 3 FPC connectors of the motors. That works without the mavic nearby. It could well be, that the STM32F303 of the sensor board has some calibration info already installed, but I don't know. BTW there are mechanical stops inside the gimbal motor which you can see once you remove the bell with an 8 pole magnet ring from the 9 pole stator of the gimbal motor. BTW2
[2019-04-27 00:15:06]
makerbob :
BTW2 there are two (not three) SOT23 analog hall sensors (Texas Instruments DRV5053 inside each MP gimbal motor, search datasheet for marking +ALOA). Hall sensors are spaced 113.3° from each other. They sense the magnet poles of the magnet ring, poles are spaced 45° (as it has 8 magnetic poles). Since the MP3536 Gate driver - each motor has one close by - can't do nothing with the hall signals, they are passed via to the sensor board's STM32F303 (the two pitch hall sensor go each via 1 kOhm to pin13 = PA3 and pin14 = PA4 of the STM32F303. Not verified: Propably they are merged inside the STM with a flip flop like in a magnetic encoder . Not completely verified: I think it's possible to drive the gimbal motors with something like an ordinary Storm Gimbal Controller, some work for the calibration has to be done + the 34 pin FPC connection (0.4 pitch spacing) at the non gimbal end is not really easy of course. The pitch motor has the following connections on it 16 pin FPC connector: PWM1; PWM2; PWM3 (PWM frequency 20 kHz, 50% duty is "neutral"); V+ (full battery voltage 11.4V); + for hall sensors (can take up to 28V); a fault monitor line; GND; Hall out 1 and Hall out two. I assume it's the same for Yaw and Roll.
[2019-04-27 00:23:30]
makerbob :
[2019-04-27 00:27:45]
makerbob :
[2019-04-27 00:31:21]
makerbob :
enjoy
[2019-04-27 00:42:05]
makerbob :
[2019-04-27 00:47:37]
makerbob :
Pictured are the hall sensors of the gimbal pitch motor. The pin numbering is in reference to the above pictured connectors. green circles go to the 16 pin FPC connector of the gimbal pitch motor, yellow rectangles belong to the 34 pin FPC connector of the sensor board
[2019-04-27 01:24:17]
lolo780 :
Great info, thanks for the writeup
[2019-04-27 07:04:15]
teslahv :
C
R
A
Z
Y
[2019-04-27 07:04:41]
teslahv :
Are you working for !DJI? :smirk:
[2019-04-27 07:07:11]
teslahv :
Cannot comment on all posts but I'd like to say many many thanks at least once! :smiley:
[2019-04-27 07:10:18]
teslahv :
Now anyone knows how to save that info so it can be accessed weeks later?
Slack won't let me scroll past 100 lines or so, so I'd need to save that info for later if new 100 lines had been written here...
[2019-04-27 07:14:09]
bin4ry :
how about download and document local at your pc? :wink:
[2019-04-27 07:14:33]
teslahv :
Lol yeah :see_no_evil::see_no_evil:
[2019-04-27 07:14:40]
bin4ry :
:grin:
[2019-04-27 07:15:23]
teslahv :
Ok for the first shot I shared it with myself.
[2019-04-27 07:15:53]
teslahv :
Will buy me some time until I get to the PC again
[2019-04-27 07:18:11]
bin4ry :
i see
[2019-04-27 07:38:01]
teslahv :
Pictures aren't visible at once though.
[2019-04-27 08:25:12]
jan2642 :
!wiki maybe ?
[2019-04-27 08:39:31]
teslahv :
What is the ideal velocity for rth again?
[2019-04-27 08:39:46]
teslahv :
Sorry wrong chat
[2019-04-27 11:50:15]
validat0r :
doesn't @aciid has a nice github repo with all kind of hardware close-ups? maybe he wants to save if for posterity
[2019-04-27 11:50:26]
validat0r :
@aciid ^^
[2019-04-27 12:09:55]
fredmicrowave :
Since it is on the same subject, i'm uploading here again the diagrams from the gimbal board that I made a some time ago.
[2019-04-27 12:10:04]
fredmicrowave :
[2019-04-27 12:10:10]
fredmicrowave :
[2019-04-27 12:11:45]
fredmicrowave :
[2019-04-27 13:20:57]
kilrah :
best to put everything on the wiki indeed, anything that is supposed to stay
[2019-04-27 15:32:30]
makerbob :
I'm happy to give something back. I couldn't have done it without the infos here and the work that has been done, thank:slightly_smiling_face:s, you know who you are.
[2019-04-27 17:19:46]
teslahv :
!! :grinning:
[2019-04-27 17:20:01]
teslahv :
!wiki
[2019-04-28 11:45:23]
teslahv :
What FC does M1 have?
In Assistant there's A3/A3+ displayed as options.
A3 is selected and green. Does M1 have A3?
[2019-04-28 14:20:23]
lolo780 :
Ya
[2019-04-28 16:20:34]
teslahv :
Is there any sources on your "Ya"? Like forum threads, docs, ...
[2019-04-28 16:21:32]
teslahv :
Because A3 controller seems to be costly and high end.
[2019-04-28 16:31:41]
lolo780 :
Some features are missing
[2019-04-28 16:33:03]
lolo780 :
Would be interesting to know if they could be unlocked internally.
[2019-04-28 19:14:00]
teslahv :
Ok ty!
[2019-04-28 19:14:26]
teslahv :
Lol that error is misleading
[2019-04-28 19:14:37]
teslahv :
[2019-04-28 19:15:06]
lolo780 :
For the gimbal?
[2019-04-28 19:15:12]
teslahv :
Ye
[2019-04-28 19:15:37]
teslahv :
Exactly what I got when crash occurred
[2019-04-28 19:16:56]
teslahv :
And gimbal vibration abnormal occurred when gimbal plate was above the plate hook due to crash
[2019-04-28 19:17:34]
lolo780 :
Oh yeah, was it ok after you popped it out?
[2019-04-28 19:18:31]
teslahv :
Are you Referring to the latest crash?
[2019-04-28 19:21:23]
lolo780 :
I guess so?
[2019-04-28 19:24:54]
teslahv :
There were two different crashes several month apart: At the first crash the gimbal plate popped before the hook and plate could not freely move anymore. Popped plate back in ==> everything worked like a charm again.
The last crash unknown gimbal problem occurred. Problem wasn't investigated further and I disconnected the gimbal signal connectors manually. Plate did not pop out here. This is the current AC status.
[2019-04-28 19:30:00]
teslahv :
Gimbal motor temporarily fixed, until I find some time to open the gimbal parts.
[2019-04-29 19:54:14]
teslahv :
Folks what is your strategies to prevent the arms folding in manual mode?
[2019-04-29 19:56:02]
teslahv :
Am I suggested to prevent the back arms folding too?
[2019-04-29 19:59:21]
teslahv :
Btw how realistic is GO4 Simulator about manual mode? If no inputs other than throttle are made is it correct that the attitude doesn't change for an infinite amount of time? I guess not?
How fast then does attitude "drift" away?
[2019-04-29 20:01:46]
teslahv :
Now consider the attitude be changed temporarily. If sticks are released, will the attitude be fixed at the last value?
[2019-04-29 20:03:22]
teslahv :
Or will the attitude indefinitely drift?
[2019-04-29 20:04:40]
teslahv :
Ofc I'm not at all talking about the AC itself drifting (not holding position).
[2019-04-29 20:05:54]
kilrah :
In manual stick centered = attitude hold, but nothing's perfect and in real life it'll always drift requiring small, but "constant" adjustments.
[2019-04-29 20:06:13]
kilrah :
why would the arms fold?
[2019-04-29 20:06:29]
bobdole :
it has happened to me on two different mavic pros
[2019-04-29 20:06:34]
teslahv :
Ok yeah I thought so...
[2019-04-29 20:07:00]
bobdole :
lolo suggested this m2p accessory that would lock the arms. let me dig it up
[2019-04-29 20:07:05]
teslahv :
You loose 2k then :confused:
[2019-04-29 20:07:57]
bobdole :
<https://hobbyking.com/en_us/pgytech-auxillary-camera-mount-for-dji-mavic-2.html?countrycode=US&gclid=CjwKCAjwwZrmBRA7EiwA4iMzBCRnnlUBLQafc62h2AcIxK4oyG4HcbwjnpuIoE39UI85hRojCdAECRoCnygQAvD_BwE&gclsrc=aw.ds>
[2019-04-29 20:08:05]
teslahv :
If the arms fold up there is over and out
[2019-04-29 20:08:18]
bobdole :
but not sure if it could be modified for m1p.
[2019-04-29 20:18:39]
teslahv :
I planned on making a tiny hole in the upper side of the front legs then put same e.g. 0.8 mm wire through both legs and slightly tie it together.
If the arms were to fold in then the tension on the wire would greatly increase and fold the arms back out.
Maybe I should even put a spring on each wire part which is strong enough to prevent the arms fold back. Shouldn't be more than 36 g hopefully so it was 5% if the bird's weight.
[2019-04-29 20:22:26]
teslahv :
I could use steel wire and recalibrate Mavic compass. I then couldn't fly sport/p without having that installation in place though. Not yet sure if good idea.
[2019-04-29 23:00:56]
lolo780 :
I've used 1mm carbon rod. Will shear in a crash still.
[2019-04-29 23:01:01]
lolo780 :
Or tape.
[2019-04-29 23:01:57]
lolo780 :
<https://i.imgur.com/mUT9k8g.jpg>
[2019-04-29 23:02:01]
lolo780 :
This works too
[2019-04-30 04:19:10]
teslahv :
That is a Mavic ... ok.
Is it worth the work if compared against dedicated 0815 diy fpv racer?
[2019-04-30 06:32:20]
lolo780 :
Depends what the purpose is. This was built to fly long range and high altitude.
[2019-04-30 07:12:58]
buundy :
But without camera, what is this specific drone's purpose?
[2019-04-30 07:13:05]
buundy :
Just curious
[2019-04-30 07:59:43]
lolo780 :
It would have a cam
[2019-04-30 08:00:04]
lolo780 :
And a top shell.
[2019-04-30 14:24:01]
bobdole :
why not just put the mavic guts onto a race quad frame?
[2019-04-30 19:48:56]
w4t3r :
Incredible info @makerbob and @fredmicrowave. Have you considered putting it on @mefisto‘s wiki?
[2019-04-30 19:49:52]
mefisto :
<https://github.com/o-gs/dji-hardware-schematics>
[2019-04-30 19:49:56]
mefisto :
maybe?
[2019-04-30 21:30:07]
teslahv :
All set
[2019-04-30 21:31:18]
teslahv :
Now need to fly in the simulator. A lot.
[2019-04-30 21:39:00]
teslahv :
Shouldn't the wiki there be merged with !wiki?
[2019-04-30 21:42:11]
lolo780 :
How about shorter. Attach to the arm near the stripes
[2019-04-30 21:42:37]
lolo780 :
Your setup will have a surprising amount of drag
[2019-04-30 21:55:14]
teslahv :
Yeah I could have done that but I didn't know the arms and didn't want to put a hole in it.
I knew the legs though and deemed the bore as safe.
[2019-04-30 21:55:27]
bobdole :
i recently tried to use a very thick steel braided wire but it didn't work out so good <https://imgur.com/a/GVHY0e3>
[2019-04-30 21:55:36]
bobdole :
ended up lopping off the left landing gear
[2019-04-30 21:56:45]
teslahv :
So if I notice I cannot get the 160 kph then I will uninstall the setup.
[2019-04-30 21:56:50]
teslahv :
XD
[2019-04-30 21:58:19]
teslahv :
What I wanna say is in my first flights I will have problems different from drag I guess.
[2019-04-30 22:03:20]
teslahv :
Some questions remain:
- will the GO 4 simulator simulate the FC initialize in the wrong direction if the mode switch is turned to non-manual when at >90 degree tilt?
- when none of the stick modes do have GPS positioning will the Mavic still return to home with GPS if the signal is lost or the battery is exhausted?
[2019-04-30 22:03:45]
teslahv :
I have ATTI and manual.
[2019-04-30 22:04:25]
lolo780 :
It should flip into P mode
[2019-04-30 22:05:54]
teslahv :
Will the FC initialize incorrectly if either the mode switch is switched to ATTI or the motors are turned on both while >90 degrees tilt?
[2019-04-30 22:05:56]
lolo780 :
That overrides all else
[2019-04-30 22:06:18]
teslahv :
So was the problem in both occasions?
[2019-04-30 22:06:25]
teslahv :
Ok ty
[2019-04-30 22:06:48]
lolo780 :
Atti is fine. Initialize inverted should be ok if the parameter for motor start is on.
[2019-04-30 22:07:10]
lolo780 :
Try it on the ground@
[2019-04-30 22:07:27]
teslahv :
It is on.
[2019-04-30 22:08:22]
teslahv :
So on what occasions does the misinitialization occur, is there threads/posts on that problem?
[2019-04-30 22:09:07]
teslahv :
Or personal experience^^
[2019-05-01 01:44:17]
lolo780 :
Possibly above 10,000m
[2019-05-01 16:48:30]
bobdole :
why do you guys want this full manual mode?
[2019-05-01 17:39:27]
validat0r :
To many ACs probably
[2019-05-01 17:39:37]
validat0r :
Have to reduce stock
[2019-05-02 06:17:58]
hans112 :
Can anyone recommend a place to buy a mavic pro gimball? After two attempts to replace the ribbon cable, the bird keeps showing the gimball overload error.
[2019-05-02 06:19:26]
hans112 :
Ali express has many options, but they are like a box of chocolates... You never know what you're gonna get
[2019-05-02 06:36:12]
buundy :
Look for the original cables labeled H or K on the biggest connector
[2019-05-02 06:52:03]
lolo780 :
Ebay Asia sellers
[2019-05-02 06:54:50]
lolo780 :
<https://rover.ebay.com/rover/0/0/0?mpre=https%3A%2F%2Fwww.ebay.com%2Fulk%2Fitm%2F253923234801>
[2019-05-02 06:55:40]
lolo780 :
<https://rover.ebay.com/rover/0/0/0?mpre=https%3A%2F%2Fwww.ebay.com%2Fulk%2Fitm%2F252835089367>
[2019-05-02 06:55:49]
lolo780 :
Buy in bulk. I'll get 10 at a time
[2019-05-02 17:34:52]
hans112 :
Hmm ok, will check that. Is it a possibility that the gimball itself is defective and that replacing the ribbon cable would have no effect ?
[2019-05-02 18:20:24]
kilrah :
yup if a motor is toast it sure can
[2019-05-02 18:59:15]
hans112 :
Any way to find out ? Once its initialized , if seems to be reacting ok...
[2019-05-02 19:00:10]
buundy :
This one on ebay is not original, i search a link for you
[2019-05-02 19:00:56]
buundy :
Look for the letter H or K
[2019-05-02 19:01:01]
buundy :
US $124.99 | 5pcs For DJI Mavic Pro Gimbal Flexible Flat Flex Cable Layer Drone Original Repair Parts Replacement RCmall DR2070A
<https://s.click.aliexpress.com/e/bl8NjQks>
[2019-05-02 19:01:21]
buundy :
More expensive but always work
[2019-05-03 21:37:15]
abdo054 :
Any recommendations where to look for a mavic 2 pro camera only?
[2019-05-03 21:39:02]
lolo780 :
Yes, let me find my purchase link
[2019-05-03 21:41:59]
lolo780 :
[2019-05-03 21:42:12]
lolo780 :
Shipped fast, brand new.
[2019-05-03 22:22:33]
abdo054 :
Thanks buddy
[2019-05-03 22:22:51]
lolo780 :
Did your break?
[2019-05-03 22:22:55]
lolo780 :
Or got a zoom
[2019-05-03 22:23:49]
abdo054 :
Got a zoom
[2019-05-03 22:26:40]
abdo054 :
Yikes! $608
[2019-05-03 22:32:43]
lolo780 :
Price went up. I paid 585
[2019-05-03 22:45:23]
abdo054 :
I guess I'll wait and see if it'll go down
[2019-05-04 08:19:43]
drlov :
Does anyone have the yellow silicon glue that DJI uses?
[2019-05-04 09:40:04]
teslahv :
What do you need it for?
[2019-05-04 09:40:25]
teslahv :
(I haven't though)
[2019-05-04 09:51:48]
teslahv :
Does FC create DAT while flying in Assistant/GO Simulator?
[2019-05-04 16:47:37]
fallengod :
Wondering if the moter shaft on the spark could be replaced
[2019-05-04 16:48:29]
fallengod :
Brough a crashed spark and after repairing the camera gimble then notice 3 of the moter shaft is bented
[2019-05-04 16:49:09]
validat0r :
That sucks at 16k rpm
[2019-05-05 09:07:06]
teslahv :
Does someone know how the M1 senses
- It is in the air?
- It is missing at least 1 prop?
I tried many things but without props it never showed battery time which I take as a hint it doesn't feel being in the air.
Tried Atti and Manual.
[2019-05-05 09:11:05]
teslahv :
1 I guess it might be some aggregate of
- VPS didn't show obstacle go away.
- AC cannot fly with n props missing.
[2019-05-05 09:11:52]
teslahv :
Ofc Gyro and accelerometer values didn't show valid changes too.
[2019-05-05 11:40:54]
lolo780 :
Turn off vps, start motors and lift the AC up
[2019-05-05 12:11:20]
teslahv :
It doesn't infer not being capable of flying from missing propeller load?
[2019-05-05 13:06:17]
lolo780 :
Nope
[2019-05-05 13:06:38]
lolo780 :
You can test NFZ like that.
[2019-05-05 13:47:20]
teslahv :
For NFZ test you don't need to pick the AC up though?
Should be enough to see if the motors start spinning up to more than idle level if throttle is increased...
[2019-05-07 16:40:10]
teslahv :
Will try once more
[2019-05-07 16:52:17]
teslahv :
Data is shown now in DatCon so it seems to work in fact.
[2019-05-07 16:53:44]
teslahv :
Any of you Manual mode flyers, did you ever alter rates of pitch/roll?
[2019-05-07 18:45:17]
teslahv :
Ok, 360->Mavic does 1 roll/flip / s, 180->1 roll/flip / (2s)
Rates are in degrees/s and not some random values.
[2019-05-07 18:48:25]
lolo780 :
Yep
[2019-05-07 18:48:28]
teslahv :
Then seems the 50% power at center position can be lowered. At least it appeared to be a lot sloppier in the simulator and I got 7.7 kRPM instead of 8.5 kRPM in real life
[2019-05-07 18:50:04]
teslahv :
I don't wanna burn ESCs, so this should help.
Ofc I cannot do flips that easily then but I'm not interested in flips at the first flights!
[2019-05-07 18:50:47]
lolo780 :
You'll only burn the ESCs up from sustained full throttle in manual.
[2019-05-07 18:50:54]
lolo780 :
At 100% power.
[2019-05-07 18:50:54]
teslahv :
Now really looking forward to getting the M1 props
[2019-05-07 18:51:14]
lolo780 :
Keep the logged temps under 100c
[2019-05-07 18:51:39]
lolo780 :
Vent holes in the upper shell make a big difference
[2019-05-07 18:51:45]
teslahv :
As in "Punch out"
[2019-05-07 18:52:42]
lolo780 :
<https://i.imgur.com/kLcYR1Q.jpg>
[2019-05-07 18:52:54]
teslahv :
They're in the DAT I guess?
[2019-05-07 18:53:00]
lolo780 :
Yeah.
[2019-05-07 18:53:09]
teslahv :
Hahaha
[2019-05-07 18:53:12]
lolo780 :
Remove rear motor covers. Drill the fronts
[2019-05-07 18:54:04]
teslahv :
Motor covers..?
[2019-05-07 18:59:08]
teslahv :
Next point of failure after the ESCs is the battery I reckon?
[2019-05-07 19:01:48]
lolo780 :
Battery is fine if it's hot.
[2019-05-07 19:02:03]
lolo780 :
Never full throttle a cold battery.
[2019-05-07 19:02:40]
lolo780 :
That setup will go 6500m vertical without shutting motors off on the way down.
[2019-05-07 19:03:06]
lolo780 :
The rear lower black plastic.
[2019-05-07 19:03:32]
lolo780 :
Up front, drill the base of the antenna pieces.
[2019-05-07 19:04:08]
lolo780 :
And adding small washers under the motor mounts to raise them up will promote cooling airflow
[2019-05-07 19:07:00]
lolo780 :
You can pull the bolt heads through the plastic when hot.
[2019-05-07 19:07:23]
lolo780 :
Had the #2 come off in flight.
[2019-05-07 19:07:58]
teslahv :
How do you mean? "Controlled" descent in Manual mode w/o CSC?
[2019-05-07 19:09:05]
lolo780 :
<https://i.imgur.com/S5852TZ.png>
[2019-05-07 19:10:31]
lolo780 :
You can still fly it back against the wind.
[2019-05-07 19:10:40]
teslahv :
Ah ok
[2019-05-07 19:11:04]
lolo780 :
Very efficiently. Calling it gliding would be stretch, but that sort of idea.
[2019-05-07 19:11:38]
teslahv :
Ok got ya.
[2019-05-07 19:12:15]
lolo780 :
I recommend flying in the middle of nowhere. Can only hurt trees.
[2019-05-07 19:12:24]
lolo780 :
Unless you hit yourself
[2019-05-07 19:12:30]
teslahv :
Just how do you do such things, you must be very adventurous xD
[2019-05-07 19:12:58]
lolo780 :
Flying RC a long time.
[2019-05-07 19:13:12]
lolo780 :
And having endless wilderness helps.
[2019-05-07 19:13:31]
lolo780 :
Don't be on the news.
[2019-05-07 19:13:32]
teslahv :
Here in Switzerland it isn't easy to fly in middle of nowhere... :/
[2019-05-07 19:13:51]
lolo780 :
Yeah I can imagine.
[2019-05-07 19:13:54]
teslahv :
Ok I see
[2019-05-07 19:14:16]
lolo780 :
But you can probably find some areas. Swiss alps
[2019-05-07 19:18:20]
teslahv :
Hm, call me a pussy but I already made 1.5 km and I am currently not planning to do it again.
Afraid of gliders of all sorts and small propeller planes, and such.
[2019-05-07 19:19:42]
lolo780 :
If there's any doubt, don't fly high. Not worth the risk.
[2019-05-07 19:21:05]
lolo780 :
Night time is better though.
[2019-05-07 19:28:55]
teslahv :
That's why I made the 1.5 km flight in night time.
Or why I only flew up a mountain 1.2 km when the first skiers/snowboarders wasn't yet on the slope.
[2019-05-07 19:31:23]
teslahv :
Was funny to enjoy the power of FC patcher with the newest FC firmware but now I don't think I even would need the altitude removal anymore^^
[2019-05-07 19:32:51]
teslahv :
As opposed to Manual. That's going to be one adventure for sure :heart_eyes:
[2019-05-07 19:39:21]
lolo780 :
3500m mountains around here
[2019-05-07 20:06:56]
teslahv :
4 km around "here"
(Not actually were I'm living)
[2019-05-07 23:15:19]
lolo780 :
Amp it up
[2019-05-08 02:45:51]
bobdole :
:thinking_face:
[2019-05-08 02:46:58]
bobdole :
:expressionless:
[2019-05-08 04:15:29]
teslahv :
?
[2019-05-08 04:19:42]
teslahv :
remove /blackbox/flyctrl/*.DAT, Reflash 0305+0306
[2019-05-08 04:20:10]
teslahv :
(Untested as I don't have the problem)
[2019-05-08 04:28:47]
lolo780 :
69mph down is not bad
[2019-05-08 04:29:50]
lolo780 :
So what happened?
[2019-05-08 05:00:33]
bobdole :
This wasn't in manual mode. It was just 55mph+ full stick forward and 22mph full stick descent... and the arm folded in
[2019-05-08 05:45:49]
w4t3r :
Ooouuuuch
[2019-05-08 09:45:22]
cantrepeat :
@jacksphone You should lift weights to strengthen your arms. That should keep them from folding under load! :smile:
[2019-05-08 15:49:58]
teslahv :
I'd try repatch FC altogether.
But first of all adb shell into your Mavic and post your df listing of /
I made the experience from 400 MB free space downwards it didn't write the DATs somehow.
I had to rm -rf the DATs and reboot and then the new FLY001.DAT was increasing in file size as expected.
You may want to turn on your RC first so your DAT gets a valid date/time stamp.
[2019-05-08 15:50:32]
teslahv :
You always may want to power up your RC first.
[2019-05-08 15:52:14]
teslahv :
Crazy this happened!
[2019-05-08 16:24:34]
bobdole :
@catalinaskirace yeah, i was actually thinking of opening up the hinge to see if i could beef the spring mechanism up with some elastomeric or something the other day.. should have taken that plunge (har)
[2019-05-08 16:25:52]
teslahv :
You retrieved the AC..??
[2019-05-08 16:26:33]
bobdole :
no man... that lake is 300ft+ deep at that spot and even if i went down there, its probably deep enough into mud that i'd never find it
[2019-05-08 16:27:10]
teslahv :
So how did you know an arm folded in?
[2019-05-08 16:27:27]
bobdole :
because my arms always fold in with 3 different mavics
[2019-05-08 16:27:49]
teslahv :
I see
[2019-05-08 16:27:49]
bobdole :
i guess 54mph is a barrier i should not cross when there's heavy wind
[2019-05-08 16:28:06]
bobdole :
was going against the wind 55+mph and 22mph down
[2019-05-08 16:28:18]
teslahv :
How can you even go 54 mph against wind?
[2019-05-08 16:28:25]
bobdole :
i guess it was a dive
[2019-05-08 16:28:27]
teslahv :
Or was it relative
[2019-05-08 16:28:55]
bobdole :
wind was actually just 10-15mph but there were strong gusts
[2019-05-08 16:29:01]
bobdole :
maybe less
[2019-05-08 16:30:01]
bobdole :
i got motor obstructed error and then motor blocked
[2019-05-08 16:30:19]
bobdole :
right now i'm trying to decide if i should get a mavic air, replace the mavic pro (have batteries/controllers/etc), or just get mavic 2.
[2019-05-08 18:38:35]
lolo780 :
Get a mavic 2 plus m1 AC only
[2019-05-08 18:43:50]
bobdole :
yeah i'm selling a $1k camera lens that i never used to offset the cost of the m2p i'm convinced i need..
[2019-05-08 18:44:40]
bobdole :
i'll replace the m1p when it slips down to $300
[2019-05-08 20:11:14]
lolo780 :
Thunderdrones used to sell M1P ac only for 375. I bet it's cheaper now.
[2019-05-08 20:12:47]
lolo780 :
I just bought a zoom camera. Same weight but should be better aerodynamically.
[2019-05-08 20:23:02]
fredmicrowave :
I found out the zoom feature to be great, but the Zoom camera is bad for photos, although ok for video. Mp2 pro zoom camera ? ...
Hope a quick swap plate will be available soon.
[2019-05-08 20:31:40]
lolo780 :
Yeah the zoom camera sucks
[2019-05-08 20:31:56]
lolo780 :
Super resolution is cool
[2019-05-08 20:32:29]
lolo780 :
A couple of 360 panos I shot had stitch errors.
[2019-05-08 20:34:29]
fredmicrowave :
Resolution and specially much lower noise
[2019-05-08 20:34:35]
lolo780 :
I only installed the zoom camera to fly long range. Will see if it makes any difference. Best stock battery flight with the pro cam is 23.5km total. Record is around 23.9km.
[2019-05-08 20:36:40]
fredmicrowave :
I weight is that important, maybe you could remove the gimbal and keep only the camera connected
[2019-05-08 22:20:23]
lolo780 :
I've done that on the M1 before. I have a couple of spare pro cameras with broken roll sensors. Might do a 1" fpv mod.
[2019-05-09 03:44:00]
bjoneseying :
Isn't the pro camera like 2g difference?
[2019-05-09 04:59:59]
teslahv :
It is about drag
[2019-05-09 06:34:39]
lolo780 :
On my scale both assemblies weigh 98g
[2019-05-09 13:33:18]
bobdole :
are you using a range mod on your m2p? whats your m2p setup anyway @lowellfoo780 external battery?
[2019-05-09 17:17:28]
lolo780 :
RC reflector, stock battery, stock hardware, just NLD
[2019-05-09 17:18:27]
bobdole :
any plans for a battery mod?
[2019-05-09 17:18:52]
lolo780 :
I have a battery modded one but haven't flown it
[2019-05-09 17:19:39]
teslahv :
NLD for altitude?
[2019-05-09 17:19:58]
bobdole :
nfz and paramters probably?
[2019-05-09 17:20:37]
teslahv :
Or can't you go above 500 m yet.
[2019-05-09 17:50:12]
teslahv :
@lowellfoo780 did you ever replace ESCs by ones that can like 50+ A, and put a Tattu 95C in?
You used to do at least 1 M1 mod that looked quite "racey" XD
[2019-05-09 17:51:00]
lolo780 :
No
[2019-05-09 17:51:04]
teslahv :
Oh and install better motors
[2019-05-09 17:51:26]
teslahv :
Oh ok. But you did reduce weight?
[2019-05-09 17:51:33]
lolo780 :
Yeah
[2019-05-09 17:51:55]
lolo780 :
Phantom motors have been tried on the M1. Limited success.
[2019-05-09 17:52:28]
teslahv :
Did you do it for record or for freestyle/"racing"?
[2019-05-09 17:52:42]
lolo780 :
Just for fun.
[2019-05-09 17:53:01]
lolo780 :
The M1 and M2 can both hit the distance limit with si please batttery mods.
[2019-05-09 17:53:04]
teslahv :
Ok but nothing like hobbyking motors or such
[2019-05-09 17:53:38]
teslahv :
"Dys" a name I know for example.
[2019-05-09 17:53:53]
teslahv :
Ok I understand.
[2019-05-09 18:21:28]
teslahv :
Lol can the M1 run from 4S?
[2019-05-09 18:30:26]
lolo780 :
Yes.
[2019-05-09 18:30:39]
lolo780 :
Not the platinum, just M1P
[2019-05-09 18:42:42]
teslahv :
Hahaha how do you know?
[2019-05-09 18:43:45]
teslahv :
Btw all set down here. Just waiting for the unstable windy weather to end!
[2019-05-09 18:47:19]
lolo780 :
M1PP esc will error on 4s
[2019-05-09 19:02:23]
bobdole :
i think i'm done with the m1p... i want to go fast, but arms keep folding in and camera sucks. i sent dji my flightrecord and cached video for shits and giggles. lets see if they overlook the 2600ft climb up the mountain and the 57mph flight down
[2019-05-09 19:04:34]
lolo780 :
Hahah
[2019-05-09 19:05:15]
lolo780 :
I've spent a couple of days flying the M2Z camera and don't really see why anyone would get it other than cost
[2019-05-09 19:05:31]
lolo780 :
M2P for sure.
[2019-05-09 19:07:38]
bin4ry :
i like the little optical zoom
[2019-05-09 19:08:02]
bobdole :
it is a very short zoom though
[2019-05-09 19:08:05]
bin4ry :
but i don’t care much anyway, was cheaper :joy:
[2019-05-09 19:08:49]
bin4ry :
it is very short yes
[2019-05-09 19:09:04]
bin4ry :
but the dolly zoom is very nice
[2019-05-09 19:16:38]
teslahv :
To all racers/freestylers, where do you get your parts?
- Hobbyking?
- Horizon Hobby?
- banggood?
- getfpv?
[2019-05-09 19:19:08]
bobdole :
@teslahv just curious, do you spend a lot of time on youtube?
[2019-05-09 19:20:00]
bobdole :
i've noticed youtube tries to push fpv racing on anyone interested in dji drones...
[2019-05-09 19:23:58]
lolo780 :
I have a great local store that supports all the FPV racers. Otherwise buy online wherever.
[2019-05-09 19:25:35]
teslahv :
I recently was a lot on yt, ye
[2019-05-09 19:28:26]
teslahv :
I was not signed up tho and I claim it came from me.
Only thing I did was searching for Mavic Manual, and some days later "fpv quad tutorial" or such to learn fly manually.
[2019-05-09 19:28:43]
teslahv :
Ok ty.
[2019-05-09 19:29:25]
teslahv :
How do they push DJI people into FPV?
[2019-05-09 19:30:38]
bobdole :
youtube/google always trying to sell shit
[2019-05-09 19:30:54]
teslahv :
Ye I could imagine.
[2019-05-09 19:31:05]
bobdole :
you look up porn and i'm sure they'll find a way to eventually sell you a dress
[2019-05-09 19:31:25]
teslahv :
How did they influence me to go into FPV?
[2019-05-09 19:31:59]
bobdole :
i dunno man, but my amazon order history is a testament to google's success
[2019-05-09 19:32:05]
teslahv :
Break my gimbal so disconnecting the gimbal came into my mind?
[2019-05-09 19:32:35]
validat0r :
Are these reflectors really worth the money?
[2019-05-09 19:38:09]
bobdole :
if we were in a giant store with all products in it (google), the racing quads would be within eyeshot of the dji stuff
[2019-05-09 19:38:22]
bobdole :
likewise... you'll find condoms and tampons near the babyfood
[2019-05-09 19:40:16]
teslahv :
I well can imagine that but in my case:
- Gimbal breaks due to ATTI/GPS fail in 0.5 m height (ROFL.) + no money for even gimbal ribbon
- Enters Manual instead
- How fly Manual? Let's try Assistent Sim!
(Looks up Manual vids meanwhile on yt)
(Notes that yawing while pitched does something completely unexpected)
- So lets then look up how racers are controlled and how it compares to Manual
- Finds that Manual = acro = rate it is all the same, decides "While batteries are charging again I will now watch tons of FPV vids to let me inspire what the Mavic could do in theory"
- Gets lost into FPV :neutral_face:
[2019-05-09 19:40:50]
teslahv :
Hahaha for real?
[2019-05-09 19:40:53]
bobdole :
yeah same here...
[2019-05-09 19:41:16]
bobdole :
comments in the videos from people saying they have no intention of even ever getting into fpv racing also
[2019-05-09 19:41:59]
teslahv :
The videos are just toooo crazy and cool to ditch fpv
[2019-05-09 19:45:41]
teslahv :
I don't plan on buying FPV equipment any soon tho. I cannot afford more than a full set of 8330 props at the very moment.
[2019-05-09 19:53:52]
lolo780 :
FPV props are cheap
[2019-05-09 19:54:08]
lolo780 :
And usually the only things that break. Tough as hell.
[2019-05-09 19:54:13]
lolo780 :
The frames
[2019-05-09 19:55:58]
teslahv :
Ye but I'd need TX/VX, quad, goggles, battery, and chargers.
[2019-05-09 19:56:34]
teslahv :
I don't have any FPV equipment yet^^
[2019-05-09 20:00:36]
teslahv :
Jet stream right over us --> weather unstable as shit....
[2019-05-09 23:11:25]
drlov :
Any software developer? I need one to develop a Software. I pay well!
[2019-05-10 16:21:16]
teslahv :
Anyone good at swollen DJI batteries?
How swollen is too swollen?
[2019-05-10 16:34:35]
fredmicrowave :
Charge it quickly, preferably slow rate, if possible on another charger. If it gets normal or close to it, you are good.
[2019-05-10 19:19:09]
lolo780 :
Targets at the range
[2019-05-10 19:23:07]
validat0r :
Do they blend?
[2019-05-10 20:12:31]
teslahv :
If the capacity is close to 3830 mAh you mean? Or whatever value it was.
[2019-05-10 20:13:05]
teslahv :
It is 3830 nominal just looked.
[2019-05-10 20:22:33]
teslahv :
Referring to my question?
[2019-05-11 16:15:22]
teslahv :
It doesn't seem to be swollen such that it would come over the edges underneath the battery yet.
[2019-05-12 22:37:31]
fredmicrowave :
Sorry.
I mean if it flattens back to normal . The degassing process can be reverted back if you don't wait to long.
[2019-05-13 04:11:59]
teslahv :
Ok thx.
[2019-05-13 14:01:46]
validat0r :
that's service
[2019-05-13 14:51:25]
teslahv :
You're kidding.
[2019-05-13 14:54:42]
teslahv :
However next time do tie the arms together with a thread or such. I think you should be safe then.
[2019-05-13 15:31:09]
cs2000 :
Im guessing in all these "arm folding" cases, its the front arms that fold backwards, nothing funky happens with the rears right?
[2019-05-13 15:56:46]
bobdole :
yes
[2019-05-13 15:57:35]
bobdole :
@teslahv no joke, but i don't have a tracking number for the new drone yet
[2019-05-13 16:12:31]
teslahv :
Still waiting for the wind to diminish tho.
[2019-05-13 16:14:48]
teslahv :
Crazy still :grinning:
[2019-05-15 04:14:01]
teslahv :
This battery has a physical problem.
I still tried to put it into the Mavic and I couldn't remove it just by trying to tear the battery from the Mavic.
If I press the battery buttons I don't need to tear battery from the Mavic as the battery comes off as easily as normal. So seems the damaged battery sits in the Mavic as solidly as a non-damaged one.
Thus if I fly Manual, should I be still fine?
Do you put batteries out of order if the are slightly cracked?
[2019-05-15 04:16:19]
teslahv :
Message error.
[2019-05-15 06:48:56]
lolo780 :
Tape it on
[2019-05-15 08:19:45]
bjoneseying :
At least it doesn't have a mental problem :grinning:
[2019-05-15 15:28:37]
teslahv :
No, it isn't. I must have thrown the battery to the ground accidentally.
I don't think it may puff enough to damage the case without becoming squishy first?
[2019-05-15 15:30:09]
teslahv :
Will have to use the battery for flight simulator or Mavic modding only. Safety first in the subject of aerospace.
[2019-05-16 21:19:23]
spiteri.michael :
set the channel topic: AT91SAM7S64 processor
[2019-05-16 21:21:10]
spiteri.michael :
Hi Guys, not drone related and feel I may have posted in the place/method? However, I know someone in here will be able to easily answer my question...
[2019-05-16 21:26:35]
spiteri.michael :
I have a device here that uses the AT91SAM7S64 processor that needs repair. First thing, when holding the Erase pin on this chip hi during power up, does that actually erase the device, just like that? and second, once the processor has been put into bootloader mode is there any way to remove the program from it if it is secured? I can buy the module for later models, but I have a device here that is an earlier model and this module is no longer supported by the manufacturer, only difference is the program. If I had the program, the later model module could be programmed to work on the older device as the board layout and functions are exactly the same.
[2019-05-18 22:16:14]
spiteri.michael :
To answer some of my own questions, holding erase pin high does erase the flash memory. The board has a usb port on it, however, the clock for the processor is 12mhz and according to the datasheet for the usb to be usable it needs to be running on an 18.something mhz crystal. This leaves the next option, using the uart connection, which was also broken out on this board, right next to the erase testpoint! So followed the datasheet to enable SAM-BA and was able to connect to it! At this point it dawned on me that there is no way to connect to this device via UART, or at least the UART port I am attempting to use, because for the UART port to become active, you need to restore the Boot Assistant in flash. To do that, first it needs to be erased.... Only other avenue is to look into the Jtag side of things or send the processor off to someone and pay $$$
[2019-05-19 07:11:06]
teslahv :
What is that device?
[2019-05-19 10:50:19]
spiteri.michael :
This is the controller for a screen for menu controls on a Minelab GPX metal detector. And it is looking like it could be the actual chip that has the problem as swapping it to the board I erased didn't solve my problem. Digging a bit deeper it seems like the contrast is too weak. I can make the contrast dark with a wet finger/ add a resistor to make the screen usable again, but there will come a time when there is a different problem. I'll do some more checks on the signals to the screen and compare with one that works properly and see if there is a pin that has gone dead on the uC. This is purely for repair purposes. I hate it when shit can't be fixed! Only reason I asked here is I know there are a lot of really smart guys here and surely someone has attempted this sort of thing with that series ARM processor before?
[2019-05-20 15:37:56]
teslahv :
[2019-05-21 18:34:06]
buundy :
Betafpv whoops are good many says
[2019-05-21 18:34:32]
buundy :
But it you are hardcore, you build a toothpick, like [kababfpv.com](http://kababfpv.com)
[2019-05-21 19:15:16]
teslahv :
Yeah toothpick ones will come later I think.
[2019-05-21 20:12:28]
lolo780 :
TBS Vendetta
[2019-05-21 20:12:51]
lolo780 :
Good for beginners, built like a tank
[2019-05-21 21:01:04]
bobdole :
@teslahv is your mavic pro dead?
[2019-05-22 04:39:59]
teslahv :
Arm lock tab is broken and camera silver wires are broken.
[2019-05-22 06:45:33]
lolo780 :
Easy fix
[2019-05-22 06:45:42]
lolo780 :
Rear arm tab?
[2019-05-22 06:48:34]
lolo780 :
<https://i.imgur.com/I2GgudU.jpg>
[2019-05-22 06:48:42]
lolo780 :
CF plate
[2019-05-22 14:49:20]
teslahv :
I thought such. Though at the moment I don't have time at all for the Mavic.
[2019-05-22 14:50:51]
teslahv :
Need to get started with "real" FPV gear. Kind of "race", "competition" against a relative of mine :see_no_evil:.
[2019-05-22 14:52:02]
teslahv :
Yep :)
[2019-05-22 14:52:05]
lolo780 :
What's your budget?
[2019-05-22 14:52:47]
teslahv :
FPV or Mavic?
[2019-05-22 14:52:55]
teslahv :
Mavic 0$
[2019-05-22 14:52:56]
lolo780 :
Fpv
[2019-05-22 14:53:01]
teslahv :
XD
[2019-05-22 14:55:06]
teslahv :
400... Wanted to get a BL Tiny Whoop + Taranis Q7 + Eachine EV100.
[2019-05-22 14:56:21]
teslahv :
Though I'm not sure whether not to go for decent goggles from beginning though then I'd need to increase the budget.
[2019-05-22 14:58:55]
lolo780 :
I recommend DVR
[2019-05-22 14:59:36]
lolo780 :
Get the best goggles, fpv quality sucks to begin with
[2019-05-22 15:01:33]
lolo780 :
And goggles are personal preference and fit. Viewing angle. Ev100 has no diversity either.
[2019-05-22 15:01:47]
teslahv :
Fatshark Dominator HD3, I like the diversity option about them. But I'd like an awful lot if I just had enough money.
[2019-05-22 15:02:04]
teslahv :
But they are dirt cheap
[2019-05-22 15:02:51]
lolo780 :
Look around for a used complete package. I bought one setup from a spark owner who bought in, flew a few.times and realized that fpv is not for him.
[2019-05-22 15:03:14]
lolo780 :
People think they'll fly like on YouTube.
[2019-05-22 15:04:14]
teslahv :
I'm looking at Fatshark for 275 Swiss Francs (CHF).
[2019-05-22 15:04:24]
teslahv :
Used ones.
[2019-05-22 15:06:19]
teslahv :
Not me. I'm only interested in the youtube video feed if it's live and is looking like s***. Then I know it's for real. My decision is I want to go with FPV.
[2019-05-22 15:08:10]
teslahv :
What I think is important is a decent FOV on the goggles But not too big such that you don't need to scroll with the eyes.
[2019-05-22 15:09:28]
teslahv :
Calm and waiting for fpv.blue like gear tho :heart_eyes:.
[2019-05-22 16:03:34]
teslahv :
Can we use diversity module with Dominator HD3 Core?
[2019-05-22 16:53:17]
flydji :
yes, go for the eachine pro58 with achilles firmware
[2019-05-22 16:53:40]
flydji :
if you want cheap and good
[2019-05-23 04:58:25]
teslahv :
Ok.
I duckduckgoed a whole lot about using EU LBT locked FrSky Taranis Q X7 with banggood/hobbyking non EU receivers. Is there a way to still bind if you cannot modify the Taranis because they locked FW?
[2019-05-23 05:00:16]
teslahv :
With Mobula7 from FPV racing there's both an EU and non EU receiver installed. However, not lots of quads will have this.
[2019-05-23 20:38:35]
bobdole :
"Your Mavic Pro Platinum has been inspected and will be shipped within two business days.":sunglasses:
[2019-05-24 18:27:22]
zapf :
I'm trying out the pirx 2.0 firmware atm. Free and I think it fits my needs. Currently finishing up a mount for it on my headplays
[2019-05-25 07:20:58]
teslahv :
Rate is up to 8.3 flips/s :)
[2019-06-01 16:44:34]
bobdole :
Anyone know what internal differences between the Mavic 2 and the Mavic 2 enterprise? I want to make a Mavic 2 pro enterprise
[2019-06-05 07:18:11]
bjoneseying :
at a high level M2E has ADS-B receiver and usb port up top for addons
[2019-06-05 07:18:39]
bjoneseying :
no idea internally at a board level though
[2019-06-09 18:03:57]
sheldon.holy :
Very little difference
[2019-06-09 18:04:24]
sheldon.holy :
The top board with GPS and IMU on M2 has unpopulated areas for ads-b and usb
[2019-06-09 18:08:18]
sheldon.holy :
[2019-06-09 18:08:56]
lolo780 :
I noticed that
[2019-06-09 18:09:08]
sheldon.holy :
The price difference between M2 and M2E is a joke considering hardware
[2019-06-09 18:09:29]
lolo780 :
Charge what the customer will lay
[2019-06-09 18:09:31]
lolo780 :
Pay
[2019-06-09 18:09:39]
sheldon.holy :
Especially another grand for M2ED which is only about another $150 for the lepton sensor in qty
[2019-06-09 18:10:20]
lolo780 :
ED sounds like erectile dysfunction
[2019-06-09 18:11:34]
sheldon.holy :
Hahaha
[2019-06-09 18:11:48]
sheldon.holy :
It's shite anyway
[2019-06-09 18:12:46]
sheldon.holy :
[2019-06-09 18:13:07]
sheldon.holy :
This is almost done :)
[2019-06-09 18:15:00]
lolo780 :
What is it?
[2019-06-09 18:16:12]
sheldon.holy :
Boson integration
[2019-06-09 18:17:54]
lolo780 :
Cool
[2019-06-09 18:17:58]
lolo780 :
A lot of work?
[2019-06-09 18:18:37]
lolo780 :
What camera specs is it?
[2019-06-09 18:22:25]
sheldon.holy :
Taken 6 months yes
[2019-06-09 18:22:49]
lolo780 :
For production or one off?
[2019-06-09 18:22:52]
sheldon.holy :
320 pixel boson, option of 50, 34 and 25 deg FOV lenses
[2019-06-09 18:22:56]
sheldon.holy :
Production
[2019-06-09 18:23:24]
lolo780 :
Very cool
[2019-06-09 18:27:46]
sheldon.holy :
[2019-06-09 18:28:10]
lolo780 :
I see the golden harp
[2019-06-09 18:31:58]
sheldon.holy :
Lol
[2019-06-11 18:31:42]
bobdole :
just ran m2p with hyperion g8 4400mah battery stripped down from 368g to 355g and after 35min flight of 35mph max motors were HOT like burn-your-lips or can't-hold-for-more-than-3-seconds hot
[2019-06-11 18:31:46]
bobdole :
is this bad?
[2019-06-11 18:35:12]
lolo780 :
Could demagnetize them
[2019-06-11 18:35:45]
lolo780 :
All 4 hot?
[2019-06-11 18:43:37]
bobdole :
yeah all 4. fronts slightly hotter than rear.. but all hot for sure
[2019-06-11 18:44:49]
bobdole :
<https://app.airdata.com/share/AwzUgx> here's the flight.. maybe i was pushing it
[2019-06-12 20:18:05]
buundy :
hello everyone
[2019-06-12 20:18:57]
buundy :
I am fighting with a P3 ADV RC, which has probably bad USB firmware so no mobile device can connect to it and therefore the firmware cannot be upgraded/downgraded on it, basically it is bricked
[2019-06-12 20:19:20]
buundy :
has anyone succeeded with reflashing the Cypress USB controller
[2019-06-12 20:19:39]
buundy :
the m1600 module is responsible for it in the firmware
[2019-06-12 20:19:54]
buundy :
I cannot decrypt it with the Dji123456 password
[2019-06-12 20:20:46]
buundy :
<https://github.com/o-gs/dji-firmware-tools/wiki/Firmware-m1600>
[2019-06-12 20:21:27]
buundy :
there are UART pads on the logic board and boot selector pad also
[2019-06-12 20:21:55]
buundy :
it is a GL300B logic board, so no DaVinci on the USB board :disappointed:
[2019-06-12 20:22:14]
buundy :
[2019-06-12 20:22:21]
buundy :
any suggestions welcome
[2019-06-12 22:39:02]
mefisto :
Well you definitely won't decrypt those two with the same method. Because:
1. m1600 is in different format
[2019-06-12 22:39:20]
mefisto :
2. m1600 is not encrypted
[2019-06-13 07:14:05]
buundy :
I will try the uart port with a terminal to see what it prints, maybe some useful information
[2019-06-13 07:29:29]
mefisto :
The m1600 firmware is very simple. After all the programmable part is just a 8051 clone. It can't print any text.
[2019-06-13 07:32:46]
mefisto :
To get a response from it, we would need a way to send/receive DUML packet.
[2019-06-13 07:36:57]
buundy :
I also see in the wiki that maybe the 1601 module is for the USB
[2019-06-13 07:37:16]
buundy :
I am not sure. In the extracted firmware ini files I see this:
[2019-06-13 07:37:40]
buundy :
for the m1600: # Stores firmware for receiver usb ‘IG810 LB2_68013_RX ground’
[2019-06-13 07:37:56]
buundy :
for the m1601: # Stores firmware for receiver usb controller model 01
[2019-06-13 07:38:26]
buundy :
m1600 is 3KB, m1601 is 184KB
[2019-06-13 07:51:31]
mefisto :
If gl300b uses m1601, then that's a different story - it is a big firmware, based on ThreadX RTOS. But there are still not many text messages in it - it probably doesn't have text debug messages.
[2019-06-13 07:52:19]
mefisto :
But that would mean the Cypress chip there has ARM9 core.. is it true? I though Cypress uses only 8051..
[2019-06-13 07:54:10]
mefisto :
Well look at that.. "CPU Core ARM926 EJ-S"
[2019-06-13 07:54:58]
mefisto :
so yeah.. RCs other than GL300a use m1601 instead of m1600.
[2019-06-13 09:29:36]
buundy :
nice find!
[2019-06-13 09:30:12]
buundy :
so it is not an easy task then to reflash the m1601 without USB connection
[2019-06-13 09:30:30]
buundy :
I read that the 300b remotes cannot be up/downgraded via USB stick method
[2019-06-13 09:30:55]
buundy :
it can be up/downgraded only with mobile device
[2019-06-13 09:31:05]
buundy :
but it cannot connect to mobile device…
[2019-06-13 09:32:00]
buundy :
that is why I thought mabe there is a way to reflash via serial port, but the method is unknown for me
[2019-06-13 15:50:21]
mefisto :
You'd have to read Cypress documentation to learn flashing methods.
[2019-06-13 16:00:14]
buundy :
I only found this but no mention about flashing methods. I will reread later, maybe I find some useful info
[2019-06-13 16:00:15]
buundy :
<https://www.cypress.com/file/140296/download>
[2019-06-14 00:25:10]
mefisto :
Read this one as well:
<https://www.cypress.com/documentation/reference-designs/fx3-programmers-manual>
[2019-06-14 00:26:26]
mefisto :
From the datasheet, it looks like the chip doesn't have internal eeprom? If this is correct, then there must be a serial flash chip near to it, and it stores the programming.
[2019-06-14 06:35:57]
buundy :
Thanks! I will take a look
[2019-06-14 08:39:53]
cat.db :
@mefisto I unzipped the 900 module of the phantom3 series of firmware, and modified the parameters for enhancing the signal, but the actual test has no effect, please ask what is going on, I use the author modified test also has no effect.:rolling_on_the_floor_laughing:
[2019-06-14 08:48:53]
mefisto :
I understand you used lightbridge_stm32_hardcoder.py on m0900? Show the modified json file. To make sure your changes are in effect, you may increase mcu_firmware_version number. There was some packet which allows to ask a module for its fw version.
[2019-06-15 09:18:24]
cat.db :
ok, i will send it to you .
[2019-06-17 13:54:26]
markusfriedl :
really like the idea of the uavmods adapter for the dji spark to use mavic air battery without having to rewire everything.. does anyone of you know how to set this up or geht the connectors for it and how the wiring should be.. would try to build that on my own
[2019-06-17 14:41:59]
validat0r :
Nice
[2019-06-17 14:43:54]
validat0r :
<https://forum.dji.com/thread-105106-2-1.html>
[2019-06-17 14:50:29]
validat0r :
<https://adrian.siemieniak.net/portal/diy-dji-mavic-air-car-usb-charger/>
[2019-06-17 14:51:07]
validat0r :
spark has data pins at the outer ends, MA seems to have them center,
[2019-06-18 05:34:48]
d51 :
FYI M2P/M2Z New Remote(RC1B)
<https://forum.dji.com/forum.php?mod=viewthread&tid=188134&page=1#pid1850792>
Lack of ADB(No ethernet comm), Not compatible anymore Moverio or something else that using ADB.
[2019-06-18 05:35:53]
d51 :
Upper side is RC1A, bottom is RC1B
[2019-06-18 05:38:23]
d51 :
LOL, Is it the aftermath of Xi and Trump's war? LC BGA disappeared.
[2019-06-18 06:57:54]
markusfriedl :
@ilovemynexus4 i'm just wondering why spark has 6 pins for battery and mavic air 8 pins... so i'm not quite sure what is the function of these extra pins an how to attach the pins to each other
[2019-06-18 08:03:04]
validat0r :
Maybe because higher currents. Or just to make them incompatible to other bats.
[2019-06-18 08:15:29]
jan2642 :
They need the LC for Ocusync, I wonder what that replacement BGA is. The picture is too blurry to read it.
[2019-06-18 08:16:40]
jan2642 :
Do they use the same firmware image ?
[2019-06-18 08:39:32]
validat0r :
Pictures might be sth for @mefisto
[2019-06-18 09:20:52]
mefisto :
Thanks @ilovemynexus4, will look at these. Looks like the cost reduction which happened in P3 at some point (where they replaced AD transceiver by a knock-off and Altera FPGA by custom chip from a company noone heard about before. But with more integration - looks like the new chip integrates flash storage (no external NAND), and doesn't require advanced power circuit (LC1160 was replaced by a simple buck).
[2019-06-18 09:46:27]
markusfriedl :
[2019-06-18 09:46:47]
markusfriedl :
need the same for MA and i'm happy
[2019-06-18 22:06:27]
papareproductora :
Hi everyone. I just realized that this channel exists. Can I ask a question about a hw failure in my m1p gimbal? Its not a common one, just happened after replacing a broken flex cable, after a crash.
[2019-06-19 04:14:50]
teslahv :
I read about your crash. I go for broken silver cables.
[2019-06-19 08:32:41]
buundy :
tell us the story and maybe some of us have some idea :slightly_smiling_face:
[2019-06-19 22:34:06]
chipmangini :
@quad808 I bought these to cus I figured they would go with the Moverios. Lets see,,, <https://fluidity.tech/>
[2019-06-19 22:35:33]
quad808 :
I saw this a while back..looks great
[2019-06-19 22:38:49]
chipmangini :
I'll supposedly have em next week, stay tuned...
[2019-06-20 02:01:22]
quad808 :
For sure, post a review!
[2019-06-20 05:19:10]
papareproductora :
Hi! I'll give it a try, visually looks good, maybe it's broken on inside the black tape. What are the functions of that silver cable?
[2019-06-20 05:20:22]
papareproductora :
<https://photos.app.goo.gl/PCHThXXFpCDj9evx8> Here are a video of the actual behavior.
[2019-06-20 17:07:31]
teslahv :
I thought it is video, not sure though.
[2019-06-20 17:08:43]
papareproductora :
I have no video. Could it be that this silver wire has something to do with gyro and related gimbal sensor?
[2019-06-20 17:24:10]
chipmangini :
Me too! :stuck_out_tongue_winking_eye:
[2019-06-20 17:35:36]
sheldon.holy :
Yes, the video cable also connects to the gimbal IMU over i2c
[2019-06-20 18:17:09]
papareproductora :
Fine, I will replace it also and will tell you the results. Thank you very much
[2019-06-22 08:09:42]
samdi :
Hello, my Mavic air prompts the camera error 3 after replacing a new camera. The firmware update is still the same error message. I don't know who has the solution to this error?
[2019-06-22 08:12:00]
validat0r :
Components of the MA are digitally coupled together iirc
[2019-06-22 08:17:45]
samdi :
After swapping the old camera（Unable to focus） element to the new gimbal part part the went went. So maybe the camera module (the small part with the lens) is paired to the logic board of the drone.
[2019-06-22 08:19:04]
samdi :
How do I make this camera error disappear in the app?
[2019-06-22 08:20:38]
samdi :
old camera error went away
[2019-06-22 14:16:58]
sheldon.holy :
Yes, use the old camera module. There is a serial number stored on new cameras that means you need DJI dealer software to validate the new SN, but even that doesn't usually work. Also Mavic air has no autofocus so why are you even doing this?
[2019-06-22 15:54:32]
samdi :
@sheldon.holy There's something wrong with the old air camera. So I have to replace it with a new one.
[2019-06-22 19:08:41]
sheldon.holy :
Then you're shit out of luck unfortunately
[2019-06-22 19:09:08]
sheldon.holy :
Unless...
[2019-06-22 19:09:20]
sheldon.holy :
You get a second hand camera which already has an activated serial
[2019-06-22 19:09:28]
sheldon.holy :
Then you'll be fine
[2019-06-25 19:28:27]
dgrauwickel :
NLD forums are history eh?
[2019-06-25 20:56:59]
teslahv :
Dunno, y?
[2019-06-25 22:45:02]
quad808 :
Nope, being worked on and security added...some day they will be back up
[2019-06-30 13:10:18]
papareproductora :
I also applied a few patches like fcc force mod and some tweaks using the old dji assistant 1.1.2
[2019-06-30 18:41:24]
teslahv :
Nice :)
[2019-07-01 04:31:18]
teslahv :
Did you separate the gimbal using the vibration damping plate and rubber bands?
[2019-07-01 04:32:55]
teslahv :
The entire gimbal assembly must shake or move somewhat if you hold the Mavic in your hands and shake it a bit while unpowered.
[2019-07-01 04:34:06]
teslahv :
And the vibration plate should not touch any part of the Mavic.
[2019-07-01 04:36:26]
teslahv :
It is mechanical lowpass filter so the gimbal only has to correct low frequency shaking.
It might be in your case the gimbal also must correct for high frequency oscillations.
[2019-07-01 21:01:17]
papareproductora :
Hi @teslahv everything is in place. The gimbal plate it's moving freely, the servos are unobstructed. Afaik, the mavic gimbal doesn't make any noise. Mine is doing a lot of buzz noise. I'm going to review it in a few hours, I might post a video.
[2019-07-01 21:02:06]
papareproductora :
Also I'm concerned about the temperature because of the motor's coils. I have little experience with this kind of trouble
[2019-07-02 01:23:46]
papareproductora :
Could it be that the camera were overheated? I've distributed the heatsink paste uniformly to test it. Maybe the sensors got very hot and then short circuited itself. Is this possible?
[2019-07-02 01:24:10]
papareproductora :
[2019-07-02 01:24:29]
papareproductora :
[2019-07-02 01:35:19]
papareproductora :
Gosh. Im going to assemble it again. Its too late I'm afraid of getting tired soon and not having the patience to finish
[2019-07-02 01:45:40]
papareproductora :
This time I'm not using glue to keep it fixed. Anyone knows if this is ok?
[2019-07-02 02:29:53]
papareproductora :
Well I've assembled it again and did some tests. In the image I get and error with the legend "check the gimbal connections" (in spanish). Thing is that the camera servo goes out some times. And also get extremely hot, I can't even touch it after 2 minutes of tests.
[2019-07-02 03:14:42]
papareproductora :
Ok, I saw smoke. That's bad. Im going to meditate with the pillow
[2019-07-02 03:15:42]
papareproductora :
I may have to buy a new servo and a new ribbon cable. F&%#!
[2019-07-02 04:08:11]
lolo780 :
That happens sometimes.
I'd just buy a gimbal with cable already assembled from Ebay or Ali
[2019-07-02 05:37:01]
teslahv :
O sh**. Yes, the smoke is bad :/ .
[2019-07-02 09:58:33]
papareproductora :
Mavic's camera and board aren't hardcoded or something? Or that is just sparks?
[2019-07-02 10:22:25]
mefisto :
I'm sure the pairing can be easily workarounded with firmware mod. It just requires ~ a month of looking into binary code.
[2019-07-02 10:23:25]
mefisto :
(taking in general, I don't know whether pairing is an issue with Mavic 1)
[2019-07-02 10:26:05]
papareproductora :
the camera is working fine, luckly for me
[2019-07-02 10:28:08]
papareproductora :
this one cames assembled with the cable, maybe this will work, what do you say?
[2019-07-02 13:19:57]
fredmicrowave :
There is no real pairing with M1 gimbal, so it should work. But you just may have an uncalibred gimbal that will hit endstops when self-calibrating, and possibly a somewhat tilted horizon that you can manually correct in the app.
The gimbal is adjusted with its control board, so the only way to avoid that is to buy both the board and gimbal, or be lucky and get a gimbal with characteristics close enough from your original one .
[2019-07-02 19:08:58]
dgrauwickel :
I see the endstop hit alot.... Has anyone found a solution to mate a new gimbal to the controlboard? And by mate recal the end stop points...
[2019-07-03 00:00:45]
fredmicrowave :
I don't think anyone has a solution. It has been discussed before. The control board has a programming interface , it would be cool to be able to communicate with it in a useful way...
[2019-07-03 15:33:46]
papareproductora :
My mavic was hitting endstops before the crash and it was original
[2019-07-03 15:34:33]
papareproductora :
It never behaved like you insinuate, without touching the limits when self calibrating
[2019-07-03 16:10:09]
dgrauwickel :
Weird.. I have repaired many and have seen a correlation between the Gimbal and Gimbal board.... sometimes better sometimes worse
[2019-07-04 03:26:25]
sheldon.holy :
They always touch the end stops, but if the control board has calibration constants that are significantly different to the replacement gimbal (usually the case), the gimbal will slap against the end stops very hard
[2019-07-04 03:27:15]
sheldon.holy :
The ones you buy that are just a gimbal with nothing else are useless, you should only really fit the whole camera/gimbal/control board assembly if you want it to work properly.
[2019-07-04 12:48:47]
papareproductora :
Oh, that are bad news for my pocket
[2019-07-04 22:41:14]
bobdole :
@lowellfoo780 for battery mod aerodynamics, does setting the battery face up and sidecar style (to minimize blocking antenna during certain rotations) negatively affect lift? <https://imgur.com/a/QI6VKyL>
[2019-07-04 22:49:51]
lolo780 :
Any side mount is worse. Wider plan view is worse as well
[2019-07-04 22:50:29]
lolo780 :
Only exception would be extremely long arms with tilt motors where you could generate lift from an airfoil shape.
[2019-07-04 23:00:52]
bobdole :
better to just throw it on top?
[2019-07-05 02:04:15]
lolo780 :
Bottom
[2019-07-05 02:19:35]
bobdole :
what if bottom isn't an option? i'm going to be unable to handcatch and will need to land it on the ground. i'm almost certain i'll rupture a cell
[2019-07-05 09:50:06]
lolo780 :
I landed on the batteries plenty of times. Use some dense foam underneath.
[2019-07-05 13:17:25]
kilrah :
your flex is likely either badly connected, or it was a fake (common, and that's the typical behavior)
[2019-07-05 14:54:17]
papareproductora :
Hey everyone. Im going to ask a friend to travel to the USA to buy the spare gimbal, the entire assembly. Could someone please give me some advice about where to buy? Or a trusty eBay link, I really need help because here in Argentina the spare costs three times more than bringing it from usa
[2019-07-05 15:21:57]
bobdole :
not sure about everyone else but at one point i went through 3 gimbals because they had issues where either the camera was scratched up, dead, or never had flat horizon
[2019-07-05 17:41:22]
kilrah :
huh? not mentioned in the thread?
[2019-07-05 17:53:13]
papareproductora :
Look here <https://dji-rev.slack.com/archives/C64R5L1HN/p1562037282100300>
[2019-07-05 17:57:13]
papareproductora :
@jacksphone My camera looks that's working fine. Is there a gimbal assembly without camera?
[2019-07-05 18:06:14]
asdrubale :
Hello did Simeone found parameter in Mavic 2 zoom to reduce Speed of zoom control? This is in order to slow down optical zoom Speed
[2019-07-05 18:53:28]
lolo780 :
I would guess that is controlled by the app
[2019-07-05 19:44:26]
asdrubale :
Thanks lolo780 i will check normally i use frida , maybe is possibile .
[2019-07-12 22:29:32]
bobdole :
yeah i've purchased one before
[2019-07-12 23:34:39]
papareproductora :
So it exists. I think that's good news.
[2019-07-12 23:34:51]
papareproductora :
Because I'm kinda out of money
[2019-07-12 23:35:11]
papareproductora :
How do I realize if a spare is original or not?
[2019-07-12 23:46:00]
bobdole :
not sure what you mean by that, but ebay and aliexpress probably both have what you're looking for
[2019-07-12 23:46:53]
bobdole :
10 second search <https://www.aliexpress.com/item/HD-4K-Cam-Gimbal-Original-Repair-Part-Gimbal-Arm-Motor-with-Flex-Cable-for-DJI-Mavic/32975054464.html?spm=2114.search0604.3.37.3172622e07nZn9&ws_ab_test=searchweb0_0,searchweb201602_1_10065_10068_10130_10547_319_10059_10884_317_10548_10887_10696_321_322_10084_453_10083_454_10103_10618_10307_537_536,searchweb201603_55,ppcSwitch_0&algo_expid=26b6f1ef-41f7-45f7-b966-fd8cf41616cb-5&algo_pvid=26b6f1ef-41f7-45f7-b966-fd8cf41616cb&transAbTest=ae803_5>
[2019-07-12 23:50:23]
papareproductora :
Awesome! But, what about that guy who said that the board cames calibrated with the gimbal? Is it true?
[2019-07-12 23:50:55]
papareproductora :
If so, I'd rather prefer to buy board, plate and gimbal assembly
[2019-07-12 23:51:28]
papareproductora :
@jacksphone I really appreciate your time with me.
[2019-07-13 00:15:17]
bobdole :
i'm not sure what you've got going on, but i've had a damaged gimbal and a damaged camera and i've replaced both without issue (except that a few of them came damaged)
[2019-07-24 04:52:35]
samdi :
Why can't Google search for MP66 chip technical specifications?
[2019-07-24 04:56:16]
samdi :
Only have MPU-6500 Product Specification
[2019-07-24 08:39:31]
mefisto :
No public specs for MPU-6600. Maybe that is only for Dji? Or only China market?
[2019-07-24 08:57:58]
mefisto :
They're using the same chip since Phantom 3, btw:
<https://github.com/o-gs/dji-firmware-tools/wiki/WM321-Camera-sensor-board>
[2019-07-24 09:20:15]
jackmax :
@mefisto How do I read the data inside?
[2019-07-24 09:27:20]
mefisto :
The device doesn't store any programming, if that's what you're asking. Check datasheet for info on how to use that device. It has config registers and measurement registers for i/o.
[2019-08-05 19:12:50]
buundy :
I ran into a problem with a Phantom 3 Adv. Vertical lines appeared on the light areas of the image, only in video mode. Then vertical lines appeared on all of the image area. Is it the gimbal control board that is doing the video transmission and encoding?
[2019-08-05 19:15:47]
buundy :
or maybe camera sensor problem? maybe overheating?
[2019-08-05 19:17:41]
mefisto :
I'd vote sensor. Assuming this is not some kind of modified overexposure zebra added by software (but these are usually angled stripes).
[2019-08-05 19:20:53]
buundy :
yes, of course not the zebra lines :slightly_smiling_face:
[2019-08-05 19:20:54]
buundy :
<https://www.youtube.com/watch?v=9tT9k_x-0a8>
[2019-08-05 19:20:59]
buundy :
it is a similar issue
[2019-08-05 19:21:10]
buundy :
in the comments they vote for ribbon cable problem
[2019-08-05 19:21:27]
buundy :
I will try and report success/failure
[2019-08-05 21:35:27]
sheldon.holy :
Yes ribbon
[2019-08-05 21:35:33]
sheldon.holy :
Just be careful of eBay cables
[2019-08-05 21:35:36]
sheldon.holy :
Fake ones don't work
[2019-08-05 21:35:44]
sheldon.holy :
For the p3 make sure you get a genuine cable
[2019-08-06 00:10:03]
digdat0 :
may be worth while to try putting some thermal paste on the camera board. I had similar issues where my video would "flicker" and adding some thermal stuff helped dissipate heat. Problems went away after that
[2019-08-06 00:10:09]
digdat0 :
maybe check odfm cables too
[2019-08-06 11:35:27]
buundy :
Thanks for your answers, I will try the suggestions. I know that only genuine cables work at all, I don’t know how anyone can still sell fake ones. What is the purpose of manufacturing a similar cable that definitely won’t work. Or does it work on specific models?
[2019-08-07 01:38:41]
sheldon.holy :
Depends on the model. P4p aftermarket cables often work for example, but not for very long. P3 non genuine ones however are rubbish
[2019-08-07 16:11:14]
validat0r :
anyone knows what's the InternalFlightControllerVersion of Spark on FW .0900/.1000?
[2019-08-07 23:00:42]
mefisto :
Anyone happens to have Mavic Air boards with chips exposed and can make good quality photos?
[2019-08-08 02:34:48]
drlov :
Does anyone know how to activate Mavic air after switching from Main core? Damn DJI, forcing us to do maintenance with them....
[2019-08-10 00:44:30]
bjoneseying :
None on the FCC site?
[2019-08-12 22:52:27]
mefisto :
Some new photos on the wiki:
Inspire 1 X5 camera:
<https://github.com/o-gs/dji-firmware-tools/wiki/DJI-Hardware#inspire-1>
Mavic Air (sadly, no HQ image of core board):
<https://github.com/o-gs/dji-firmware-tools/wiki/DJI-Hardware#mavic-air>
[2019-08-13 00:01:14]
sheldon.holy :
I can get core board images for yoy
[2019-08-13 00:01:16]
sheldon.holy :
You
[2019-08-13 01:10:53]
mefisto :
Please do. I always accept board images, if they're better than what I already have on the wiki.
[2019-08-13 02:38:42]
brett.e.burkhart :
@mefisto is there a reason you wouldn’t want links to this in the wiki? You have quite the collection going but I don’t know how I would have found out about it if I wasn’t on here.
Unless you don’t want me to I think we need to link the wiki to your wiki
[2019-08-13 09:41:06]
mefisto :
Sure, I don't have any issues with linking to github wikis.
Though I'm wondering about areas of interest for each wiki...
The retroroms wiki is sometimes slow, to the point of being unreachable. The limited reliability makes it hard to use it for me.
[2019-08-13 10:28:43]
brett.e.burkhart :
Yea but it’s the place people know to go to look for stuff. Just a matter of exposure.
[2019-08-13 11:04:00]
mefisto :
I have no issue with linking. Existing links also may need updating - I still see the repo being referred to as "phantom-firmware-tools".
[2019-08-15 10:59:14]
buundy :
I will try to take high res photos for you
[2019-08-15 10:59:22]
buundy :
Allow me a few days
[2019-08-18 20:51:39]
sheldon.holy :
We've sorted a fix for camera error 3 on Mavic air and Mavic 2
[2019-08-18 20:51:56]
sheldon.holy :
If anyone is interested drop me a PM, I'll do a write-up eventually
[2019-08-20 00:02:41]
drlov :
@sheldon.holy Private :slightly_smiling_face:
[2019-08-24 06:56:31]
bjoneseying :
Would most likely need a write up on that error given how many people purchased zoom/pro assemblies for camera swap on the mavic 2
[2019-08-24 09:51:42]
sheldon.holy :
Yeah it's on my to do list
[2019-08-24 09:51:49]
sheldon.holy :
Problem is it needs some custom hardware
[2019-08-24 09:52:09]
sheldon.holy :
Just so you all know, though...
[2019-08-24 09:53:33]
sheldon.holy :
Mavic air and Mavic 2 camera modules have an eeprom which stores the camera serial number and a load of other stuff. Not sure what the eeprom on MA is but M2 is a 24m02 - 2mbit eeprom and it's mostly full of stuff.
[2019-08-24 09:54:02]
sheldon.holy :
I think all that data could be lens distortion calibration data, but I don't know for sure
[2019-08-24 09:54:12]
sheldon.holy :
(I don't think it is)
[2019-08-24 09:55:05]
sheldon.holy :
Anyway, we take an activated camera module (one that comes with a drone when it's new) and copy the contents of it's eeprom to all of the ones that show error 3 (every single brand new camera/gimbal unit from DJI will show this)
[2019-08-24 09:55:09]
sheldon.holy :
That fixes it
[2019-08-24 09:55:27]
sheldon.holy :
Whether or not DJI will care about all these cameras on the same SN I don't know :)
[2019-08-24 09:56:12]
sheldon.holy :
We do the copy with some custom hardware but you just need to power the cameras and connect the i2c lines
[2019-08-24 09:56:24]
sheldon.holy :
We did this on an Xmega micro
[2019-08-24 09:57:41]
sheldon.holy :
If anyone is interested, I will knock up a simple PCB. It could do two things: 1. Store a known activated eeprom code and copy that onto it with one button. 2. Push another button and it'll copy between two camera modules
[2019-08-24 09:58:05]
sheldon.holy :
Cost maybe 70usd for the hardware, if people would want that then tell me :)
[2019-08-24 14:43:58]
bobdole :
oh man.. my mavic 2 battery is sitting here next to me charging and i'm watching the light patterns.... and it paused for like 3/4 of a second half way through before resuming like normal
[2019-08-24 14:44:06]
bobdole :
is it going to explode?
[2019-08-24 14:44:16]
bobdole :
WHY DID IT DO THAT
[2019-08-24 17:33:03]
lolo780 :
DJI has figured out time dilation
[2019-08-24 23:20:38]
mefisto :
it got distracted from charging because you looked at it. Back when I had Atari 64XE, it would fail loading games from tape when I looked at it.
[2019-08-24 23:24:01]
bobdole :
yeah... i picked up a few atari 400s in the early 90s... and one of them seemed to be possessed by something. i figured it was something electromagnetic
[2019-08-26 12:05:14]
buundy :
I am interested in the camera solution for mavic air
[2019-08-30 23:21:56]
norcalcobra :
I have a mavic pro and today I took it out to fly and all was normal. An hour later I turned on the remote control and the LCD screen is dark. Anyone know a fix for this?
[2019-08-31 09:05:46]
validat0r :
Charge battery?
[2019-08-31 18:31:05]
quad808 :
Eclipse?
[2019-09-01 20:46:55]
norcalcobra :
did that.
[2019-09-01 22:05:43]
sheldon.holy :
Any idea if the actual LCD is broken or if it's just the backlight?
[2019-09-02 00:19:50]
norcalcobra :
no idea… I am going to take it apart and see if there are any cracked solder joints
[2019-09-02 00:23:17]
norcalcobra :
It kind of sucks it died. It’s not a normal RC. It’s been modified to have a lot stronger signal. If I buy another one I will have to do all of the mods again.. sigh
[2019-09-02 09:18:36]
sheldon.holy :
Probably dead power supply then
[2019-09-02 09:18:50]
sheldon.holy :
Never seen an LCD die out of thousands of (stock) mavics
[2019-09-02 09:36:53]
cs2000 :
From memory of disassembly, the "backlight" is a single LED aimed at the side of the screen, could be a failed LED or the tiny wires could be broken. Doubt its a PCB issue.
[2019-09-02 12:20:42]
fredmicrowave :
If it was the backlight it would still connect, beep, and you could see stuff by pointing a flashlight to it.
[2019-09-02 22:52:51]
norcalcobra :
Thanks for the tips guys.. I am going to break it open in a bit here.. I have an electronics degree and lots of component level repair experience so I should be able to fix it.
[2019-09-14 08:46:11]
capra_vecinului :
When at initialization, the camera of a Mavic Pro 1 "smacks its head on all walls", meaning it violently performs the "gimbal dance" and then the message "gimbal obstructed" appears in the display (although it is not), then it is usually a ribbon failure, am I right? :disappointed: Oh, Lord...
[2019-09-14 14:10:44]
digdat0 :
Yeah I’d think it’s a ribbon rather than the motors
[2019-09-14 14:28:19]
brett.e.burkhart :
I agree. Had the same issue and ribbon cable fixed it. When you take it apart you realize it’s impossible for the gimbal to hit the walls of its mount (though that’s what sounds like is happening) its actually hitting the mechanical stops of the gimbal motors.
[2019-09-14 16:46:23]
papareproductora :
Hi everyone!
[2019-09-14 16:48:08]
papareproductora :
I finally got the gimbal replacement motors. Two months waiting! Look like it's working again, but I can't remember if the heat is normal. I can perceive some heat located at the gimbal arm and the back of the camera
[2019-09-14 16:48:21]
papareproductora :
I'm kinda worried about it
[2019-09-14 20:04:50]
papareproductora :
Nevermind. After calibration it was good
[2019-09-14 20:05:10]
papareproductora :
Thank you all for your help!
[2019-09-15 21:51:22]
norcalcobra :
Just a followup on my dead mavic RC. I was able to fix it. I opened it up and touched some solder joints near the display cabe and voila, LCD worked again.
[2019-09-19 06:35:39]
bjoneseying :
dry joints?
[2019-09-19 16:57:17]
quad808 :
thats what SHE said...
[2019-09-19 18:35:20]
mefisto :
@giri we have gimbal calibration via software only for spark and mavic air.
[2019-09-19 18:37:14]
giri :
Thank you @mefisto
[2019-09-19 18:37:37]
giri :
It’s such a shame that DJI is locking their parts behind software that no one else has access to
[2019-09-19 18:37:46]
giri :
People thought Apple was bad
[2019-09-19 18:38:33]
giri :
Is there anything I can do to further this process for the Phantom 4 series
[2019-09-19 18:59:56]
mefisto :
I looked ap Ph3 gimbal firmware; but I couldn't understand what many values mean - that requires whole days of looking at the code. Here's the related thread:
<https://github.com/o-gs/dji-firmware-tools/issues/99>
[2019-09-19 19:00:14]
mefisto :
for ph4 - didn't even looked at it.
[2019-09-19 19:01:16]
mefisto :
what you could do is download firmware from arm drivers; not sure when I'll get back to it though.
[2019-09-19 19:02:00]
mefisto :
or you can learn reverse engineering and look at the firmware yourself.
[2019-10-08 07:06:10]
giri :
I have multiple P4 and P4P gimbals and I really want to figure this out. I have a basic understanding of commands and have a technically brain. I’ve been experimenting with Linux.
@mefisto I know you’re busy and I’m not going to ask you to take time to do this, but is there somewhere I can start myself?
How do I connect to the ESC board? Do I have to solder onto the service pads? How would I connect this to USB? Or would I go through the hidden micro USB port on the gimbal.
Any help or direction is appreciated! I’m ready to reverse engineer the FW and look for anything I can get. I have 5 gimbals with problems now
[2019-10-08 10:15:52]
mefisto :
I did not experimented with connecting to Gimbal Motor Driver boards.
Only with the main gimbal controller - STM32. Firmware for it is available in updates - you can download the update, decrypt it and look at it in a disassembler, like Ida Pro.
[2019-10-08 10:33:46]
mefisto :
To make opening it with disasse4mbler easier, you may use the binary which converts firmware to ELF format. Conversion parameters should be similar to what I used for ph3 - it's the same uC after all:
<https://github.com/o-gs/dji-firmware-tools#arm_bin2elfpy>
[2019-10-08 17:02:35]
drlov :
We are all in this same goal... I have tried contact with several programmers and none of them managed to develop such a task... Really, it's something very complicated!
[2019-10-11 20:57:05]
w4t3r :
Is there any possibility to disable imu0 on mavic pro? I crashed and it said "data error", it show's a 16g acceleration in x direction in assistant and prevents successfull calibrations, even of imu1
[2019-10-11 20:59:11]
w4t3r :
Or if anyone knows a fix or what I should replace it would be greatly appreciated
[2019-10-11 20:59:50]
w4t3r :
[2019-10-11 21:00:31]
w4t3r :
this was what it showed at the beginning, after the crash. I attempted a calibration and now nothing works or calibrates.
[2019-10-12 03:31:49]
nocommie :
I had a similar issue where one of the ACC would not calibrate. I spent a lot of time trying to get it working. I ended up getting a used core board with the IMU board and replaced it. I have seen people report that sometimes you can "unstick" a bad gyro or IMU by tapping it. Didn't work for me however.
[2019-10-13 19:17:23]
w4t3r :
Thanks @nocommie
[2019-10-13 19:17:39]
w4t3r :
Is it enough to only buy the fc board?
[2019-10-13 21:39:05]
sheldon.holy :
You can solder in new IMU chips, MPU6500. Or find a dead ESC board and swap the IMU over. Or whack the drone against a table :)
[2019-10-14 05:01:41]
lolo780 :
It's usually the ribbon cable. You can swap the IMU out, it unplug.
[2019-10-15 16:10:07]
flystraightcircles :
Anyone knows if you can replace platinum motors with regular motors?
[2019-10-15 19:52:25]
bobdole :
i thought they were the same
[2019-10-16 00:22:07]
flystraightcircles :
I think so too. Thanks.
[2019-10-16 02:05:39]
quad808 :
ESCs are different for sure
[2019-10-16 12:04:19]
lolo780 :
Motors are the same
[2019-10-21 15:47:45]
w4t3r :
Thanks @sheldon.holy I tried smashing the drone against a table but it didn't work. However, I managed to calibrate IMU1 by putting it into the freezer and then do an "imu1 advanced calibration" in the debug assistant. Now it flies fine with IMU1, ignoring IMU0's 16g bullshit data. Can you confirm what @lowellfoo780 said that it might be the cable? Because if so, flying with it might be dumb because it might break further and thus crash mid flight, but otherwise I don't see any reason to replace it given that the drones flies and the mavic 2 doesn't even have redundant IMUs
[2019-10-21 15:48:41]
w4t3r :
Would this be the thing I'd need to buy? <https://www.ebay.com/itm/1pc-DJI-Mavic-Pro-IMU-original-parts-For-DJI-Mavic-Pro-/253839577602>
[2019-10-21 21:11:04]
sheldon.holy :
Not the cable in this case - if it reads a 16G value it means the IMU is "stuck". Not sure what causes this on a MEMS sensor but you can probably find out through the wonder of the internet.
If cable was broken you wouldn't get any readings at all, but both failure modes are fairly common.
Best to buy a new IMU module as you linked above, will be good as gold.
[2019-10-30 23:39:00]
papareproductora :
Hello everyone! Did anyone ever had trouble with RC usb otg cable? My experience is getting worse. I even replaced my phone. Also tried to use a 90 degree microusb cable. Thing is that my RC shows an error, i have to reboot to overcome it, but it never loses connection with bird. Dji go app shows "remote control connection error" in yellow. I think it's a bad contact, because when I use the original charging usb cable it works better.
Does anyone have any idea to overcome this issue? I already tryed new cable, new phone... Next try it's an iphone :smile: :+1: and see if it solves by using a different plug.
[2019-11-01 23:52:04]
sdcoughlan :
dont use the supplied cable, throw it in the bin and use the usb connector at the bottom of the remote.
[2019-11-04 02:53:28]
mefisto :
Chips in Mavic Mini:
<https://github.com/o-gs/dji-firmware-tools/wiki/WM160-Main-Processing-Core-Board#parts>
[2019-11-04 04:50:59]
mingtao :
:+1::+1::+1:
[2019-11-05 10:58:53]
elintnl :
so power enough to fly with waypoints.....
[2019-11-05 12:04:40]
validat0r :
Mavic mini and waypoint mode sounds awesome
[2019-11-05 12:05:37]
elintnl :
I think Litchi fixed that
[2019-11-05 12:05:50]
validat0r :
Though i doubt it's feasible. Dji fly app is barebone. Has it waypoints? And I doubt MM will work with go4
[2019-11-05 12:06:46]
validat0r :
Does litchi support real waypoint mode? Where the AC doesn't have to be connected with the RC all the time?
[2019-11-05 12:07:32]
validat0r :
Hacking Go4 so it works with MM would be a stunt.
[2019-11-05 12:07:33]
elintnl :
yes even for Spark
[2019-11-05 12:07:59]
validat0r :
OK. Haven't looked at litchi for some time. So litchi is the way to go for MM?
[2019-11-05 12:08:38]
elintnl :
If Litchi add mavic mini, and dji released the sdk for it
[2019-11-05 12:10:18]
elintnl :
August 2018 Updates
iOS: Litchi for DJI Mavic / Phantom / Inspire / Spark
Version 2.5.1 (August 14, 2018)
- fixed a crash that could happen when starting the app
Version 2.5.0 (August 13, 2018)
- added support for Phantom 4 Pro V2
- enabled waypoint and orbit mode for Spark
[2019-11-05 12:10:21]
elintnl :
etc etc
[2019-11-05 12:11:07]
validat0r :
Yeah, does litchi really support the offline waypoint mode?
[2019-11-05 12:12:18]
elintnl :
yes sir
[2019-11-05 12:12:50]
elintnl :
check PM
[2019-11-05 12:14:15]
validat0r :
Will take a look at it.
[2019-11-05 13:37:54]
papareproductora :
Thank you! I've done such thing with less-than-ideal luck
[2019-11-07 17:31:37]
sheldon.holy :
Is camera error 3 on new gimbals still an issue?
[2019-11-07 17:31:47]
sheldon.holy :
[2019-11-07 17:31:50]
sheldon.holy :
Our Mavic 2 gimbal fixer is done
[2019-11-07 18:17:21]
d95gas :
looking good
[2019-11-07 18:20:09]
mingtao :
what about error code 4 ?
[2019-11-07 18:50:31]
hello892 :
error code 4 is usually a problem with the cable inside the gimbal
[2019-11-07 20:14:15]
sdcoughlan :
looks pro - error 3 is still an issue, how much ?
[2019-11-08 17:51:45]
sheldon.holy :
<https://youtu.be/EICmY0M6tSU>
[2019-11-09 11:34:04]
mefisto :
Since someone (on Facebook, not sure if by @asdrubale or someone else before him) finally published Mavic Mini teardown, added photos to our wiki as well:
<https://github.com/o-gs/dji-firmware-tools/wiki/DJI-Hardware#mavic-mini>
[2019-11-09 18:51:53]
zapf :
Is there a small breakout board available for the m200 / i2 gimbal connector? I've designed models to physically mount to the connector, but would love to be able to pull 5 or 12v out
[2019-11-15 19:17:02]
buundy :
Hello Everyone! I have a problem with a P3P main board I want to solve out of curiosity even I can replace the board. Here it is: it has ESC status error. Alao it doesnt give too much info about it, so I checked the motors and they seem to be fine. I also checked every bit of the board to see some damaged smd parts, sincs the drone was lightly crashed, but everything is intact on the board. So I tried forced fw update, to see the log. In the log, all of the 12 00, 12 01, 12 02 and the 12 03 modules seem to be disconnected, so I think maybe some main data line is broken or maybe the power to all of the ESC modules is missing. I will try to measure across the board, but any suggestions are welcome. Looked at @mefisto 's schematics on github, but they are not actual representations of the main board, just logical illustrations. Thanks!
[2019-11-15 21:55:25]
digdat0 :
@buundy i saw LOTS of esc errors reported after the 1.11 firmware came out. I personally ran into it .. and downgrading to 1.10 fixed it. I'd personally try this with the debug file to force the install. Then, let it re-install once without debug .. can't hurt! The 1200 module is the fw for the ESC, if no physical connection existed that would be a problem. But, since the esc's are integrated into the mainboard, there really isn't a way i know where they could just be 'disconnected' .. maybe some issue with data transmission through a ribbon or cable?
[2019-11-16 07:40:15]
buundy :
I tried to install the non-public 1.11.30 fw which was issued by dji after the infamous 1.11.20 fw
[2019-11-16 07:40:53]
buundy :
I think maybe the solder joints to the central fc board may be damaged
[2019-11-16 07:42:42]
buundy :
When you try to install fw which part is doing the flashing? When it says cannot connect to device which module says it? If the fc, then I have to look into the fc <-> esc connection maybe
[2019-11-16 21:51:45]
mefisto :
> maybe the solder joints to the central fc board may be damaged
Yep. That's most likely it. I only repaired a few, but stiil one of these had broken solder point there.
[2019-11-16 21:55:08]
mefisto :
> When you try to install fw which part is doing the flashing?
Ambarella is extracting single FW modules and sending to targets.
> When it says cannot connect to device which module says it?
At the end, Ambarella. But some devices are not accessible directly - ie. instead of FPGA, you're only talking to nearby STM32. And in case of ESC, the FC translates DUML to the protocol they understand.
[2019-11-16 21:57:27]
mefisto :
So in your case, I'm pretty sure FC concludes that there is an issue with ESCs. Also, if ESCs are not constatly beeping, they probably receive UART packets from the FC; talking back just doesn't work.
[2019-11-16 21:59:39]
mefisto :
If any ESC in Ph3 can't see any communication from FC (ie. FC is dead or not powered), then it starts beeping. That happens quite fast, can't remember exactly but I think it's like two seconds after power up.
[2019-11-17 08:30:13]
buundy :
Thanks @mefisto, you always help me understand the deeper workings of these systems :relaxed:
[2019-11-18 15:29:04]
buundy :
I resoldered all of the solder joints, no success
[2019-11-18 15:29:21]
buundy :
I also replaced the whole FC (middle board), still no luck
[2019-11-18 15:29:44]
buundy :
When I start the drone, there is no start ESC music
[2019-11-18 15:32:09]
buundy :
has anyone diagnosed this kind of problem before? I mean does anyone know where are the power lines for the ESC? I suspect that there is no power to the ESC controllers
[2019-11-18 15:34:03]
buundy :
[2019-11-18 15:44:22]
buundy :
Update: 3v3 is missing from the esc controllers
[2019-11-18 15:44:32]
buundy :
Have to find the cause
[2019-11-18 17:24:28]
fredmicrowave :
I had a failed Esc power supply once, but the esc where beeping like when they lack signal input. It was tiny 5-pin switch regulator if i remember correctly. It failed because of a shorted SMD capacitor.
[2019-11-18 20:35:48]
buundy :
found the solution
[2019-11-18 20:36:11]
buundy :
[2019-11-18 20:36:19]
buundy :
there was a shorted capacitor where you can see the soldering on the board
[2019-11-18 20:36:38]
buundy :
I replaced it from a donor board
[2019-11-18 20:36:50]
buundy :
it works now :slightly_smiling_face:
[2019-11-18 20:37:02]
buundy :
thanks again!
[2019-11-18 22:06:50]
digdat0 :
nice, great job man. that wasn't easy to diagnose!
[2019-11-19 04:10:54]
drlov :
Did you identify the capacitor in short by meter measurement or was it toasted?
[2019-11-19 07:23:38]
buundy :
There was a small scratch on it
[2019-11-19 07:23:45]
buundy :
So I measured it
[2019-11-19 07:23:53]
buundy :
It was shorted
[2019-11-19 07:24:13]
buundy :
After removing it, the short disappeared from the board
[2019-11-22 19:11:37]
massimo.ardizzone :
please if anyone have, post the picture of RC mavic mini us and european.. i need to resolve a question: is different on power stage???
[2019-11-22 19:32:03]
pawelsky :
Is this MT1SS5 or MT1SD25? Judging from the unpopulated components that looks like the 5.8-only version
[2019-11-22 21:28:36]
pingspike :
what sort of picture do you need mate?
[2019-11-23 10:10:16]
massimo.ardizzone :
i need the power stage pictures
[2019-11-23 14:10:32]
sheldon.holy :
There are some photos on the Mavic mini page on [dronedoctor.co.uk](http://dronedoctor.co.uk)
[2019-11-23 21:03:50]
buundy :
I only see the ESC board and the main board
[2019-11-23 21:04:19]
buundy :
The power stage of the RF circuitry is probably under shields, maybe?
[2019-11-23 23:24:23]
sheldon.holy :
Oohhhh
[2019-11-23 23:24:33]
sheldon.holy :
Sorry, for some reason I was thinking ESC board
[2019-11-23 23:24:43]
sheldon.holy :
Let me take a photo for you when I'm in the office tomorrow :)
[2019-11-25 17:20:48]
hello892 :
Is this on the RC side or the aircraft side?
[2019-11-25 17:31:41]
hello892 :
[2019-11-25 17:31:52]
hello892 :
[2019-11-25 17:33:00]
hello892 :
^^^^ Some photos of the main board, with the shields off
[2019-11-25 17:34:28]
hello892 :
On the 2nd photo under the smaller shield it's an Atheros AR1021X-CL3D, and under the larger shield it's the Ambarella H22
[2019-11-25 17:37:25]
the_lord :
[2019-11-25 19:08:21]
fredmicrowave :
There is really hardware differences after all. Power amplifier and front-end are not fitted on the last pictures...
[2019-11-25 19:26:30]
validat0r :
I don't see it .. Where's the difference?
[2019-11-25 19:51:03]
quad808 :
blue sticky shit left over on the chips...LOL
[2019-11-25 20:35:06]
massimo.ardizzone :
@fredmicrowave can you zoom the particles you said?
[2019-11-25 20:39:52]
pingspike :
what am I not seeing here? :face_with_monocle:
[2019-11-25 20:40:15]
massimo.ardizzone :
for me is identical :nerd_face:
[2019-11-25 20:52:30]
fredmicrowave :
[2019-11-25 20:53:28]
pingspike :
like quad808 said, it's just under all the blue shit? :smile:
[2019-11-25 20:53:40]
validat0r :
and you suspect sth under the blue goo?
[2019-11-25 20:53:52]
massimo.ardizzone :
omg and what is this
[2019-11-25 20:55:24]
fredmicrowave :
This is most probably a power amplifier, maybe front end preamp, but it would be good to know the reference of that Ic...
[2019-11-25 20:55:59]
massimo.ardizzone :
mmm this is the base for soldier chip wirh four laterals
[2019-11-25 20:56:02]
pingspike :
it just looks like a blob of solder to me :thinking_face:
[2019-11-25 20:56:20]
massimo.ardizzone :
no soldiers on pins
[2019-11-25 20:56:21]
massimo.ardizzone :
[2019-11-25 20:57:22]
fredmicrowave :
You may be right. But there blue thermal paste made me think there was an IC here...
[2019-11-25 20:57:29]
fredmicrowave :
*the
[2019-11-25 20:57:29]
massimo.ardizzone :
there is a little cobra inside :snake:
[2019-11-25 20:58:38]
fredmicrowave :
There is smoke inside. If you let it escape, it will not work any more.
[2019-11-25 20:58:39]
validat0r :
<https://dji-rev.slack.com/files/U61AW8HC1/FQBM9C612/top_inside.jpg>
[2019-11-25 20:59:02]
validat0r :
see this picture .. there's goo on that spot, but i dont think theres an ic underneath
[2019-11-25 20:59:13]
fredmicrowave :
Someone should clean that blue paste and have a look
[2019-11-25 21:00:27]
fredmicrowave :
Maybe, but that would make no sense.
[2019-11-25 21:02:31]
validat0r :
let's ask @asdrubale
[2019-11-25 21:02:45]
fredmicrowave :
I find strange also that they made the PCB with this IC and did not fit it. Are we sure the different boards we see here are from distinct versions ?
[2019-11-25 21:03:56]
validat0r :
there was a notion that there are different RC types .. to be determined if they differ hw wise .. I haven't read anything about there being different AC types
[2019-11-25 21:04:02]
pingspike :
is the printed text on both boards the same?
[2019-11-25 21:04:46]
massimo.ardizzone :
for transmit video at long distance i think the ac need power same the rc
[2019-11-25 21:04:52]
massimo.ardizzone :
or not?
[2019-11-25 21:10:39]
massimo.ardizzone :
this strange thing is only on US models?
[2019-11-25 21:12:29]
massimo.ardizzone :
seems to be soldiered only on 4 pin of 16 (4x4 based pins)
[2019-11-25 21:17:51]
massimo.ardizzone :
[2019-11-25 21:18:04]
massimo.ardizzone :
search for similar :-)
[2019-11-25 21:38:04]
massimo.ardizzone :
is plausible is CE model with this resistive components that limit the power.. go to remove and test!!! :sunglasses:
[2019-11-25 21:43:03]
massimo.ardizzone :
@
[2019-11-25 21:43:05]
massimo.ardizzone :
smd coil
[2019-11-25 22:47:02]
massimo.ardizzone :
omg
[2019-11-25 22:47:03]
massimo.ardizzone :
[2019-11-25 22:55:39]
massimo.ardizzone :
SKY 746 2K01
[2019-11-25 22:56:26]
validat0r :
there it is ..
[2019-11-25 22:57:20]
validat0r :
is that written on the IC? SKY...?
[2019-11-25 22:57:44]
massimo.ardizzone :
yes
[2019-11-25 22:57:51]
massimo.ardizzone :
model US FCC
[2019-11-25 22:58:00]
validat0r :
google has nothing on it .. what is it?
[2019-11-25 22:58:05]
quad808 :
meh...more blue blobs
[2019-11-25 22:58:11]
validat0r :
so it's on the US model, but not on the CE models?
[2019-11-25 22:58:12]
massimo.ardizzone :
746 pardon not 745
[2019-11-25 22:58:38]
quad808 :
jk....nice work so far guys!
[2019-11-25 23:01:51]
massimo.ardizzone :
[2019-11-25 23:03:23]
validat0r :
totally readable :d
[2019-11-26 02:35:49]
the_lord :
its SKY85746-11 and it is "5GHz, 5V, 18dBm 1024QAM FEM (PA + LNA + SW)", integrated PA and LNA, and RF switch
[2019-11-26 03:06:50]
the_lord :
couldn't find datasheet
[2019-11-26 03:08:29]
fredmicrowave :
Interesting, on that version both the others Rf stages are missing ...
[2019-11-26 03:09:23]
fredmicrowave :
So, on that board no 2.4ghz I guess ...
[2019-11-26 03:13:18]
the_lord :
true
[2019-11-26 03:14:05]
the_lord :
I prefer to have both frequencies rather than boosted single frequency
[2019-11-26 03:15:56]
the_lord :
it gave me error when I changed the tx pwr to 1F aka 31 dbm, the maximum my board accepted without errors was 1E
[2019-11-26 05:10:27]
the_lord :
Unfortunately CE is way less than the FCC
hacking it is useless unless the hardware is capable to do more then 19dbm
[2019-11-26 06:02:34]
bin4ry :
hm, that’s bad. still we can pump up atleast the max power software wise. but i would not have expected them to actually do another hardware batch
[2019-11-26 11:00:22]
fredmicrowave :
Re-populating the boards with the missing components , then adapting the firmware should be possible, but in practice I think a small booster will be the best solution if you really need more range...
[2019-11-26 11:14:09]
validat0r :
Anyone took the RC apart? And another one in FCC territory?
[2019-11-26 11:53:47]
massimo.ardizzone :
@the_lord have you tryed to set 30 dbm on 5 ghz? the main wireless chip AR1021X-CL3D not is the same from US and Eorupean version? the power stage is inside the chip
[2019-11-26 12:00:52]
validat0r :
on the sticker inside the bat compartment it says: Input 5V=2A/9V=2A/12V=1.5A .. stock bats have 7.2V .. doesn't that mean the AC works with 3S packs, too?
[2019-11-26 12:11:23]
massimo.ardizzone :
@ilovemynexus4 is voltage for charging
[2019-11-26 12:13:36]
validat0r :
ok
[2019-11-26 12:13:53]
validat0r :
input for AC? 12V on USB?
[2019-11-26 12:14:10]
validat0r :
the sticker is on the AC, not the battery, haven't I mentioned?
[2019-11-26 12:14:49]
massimo.ardizzone :
yes , rc and ac support the quickcharge on usb
[2019-11-26 12:16:25]
massimo.ardizzone :
quickcharge 3.0 is capable to put 20 volts
[2019-11-26 12:17:00]
massimo.ardizzone :
2.0 12 volts
[2019-11-26 12:18:46]
massimo.ardizzone :
i charge the mini with this (only 9 volts)
[2019-11-26 12:22:37]
massimo.ardizzone :
@
[2019-11-26 12:22:43]
massimo.ardizzone :
see the leds how to go fast in QC
[2019-11-26 12:43:28]
validat0r :
oh boy .. didn't try that ..
[2019-11-26 12:45:19]
validat0r :
didn't know, quickcharge was available over usb b mini
[2019-11-26 12:46:10]
massimo.ardizzone :
yes is very fast.. 40% fastest
[2019-11-26 12:46:16]
validat0r :
awesome
[2019-11-26 13:11:48]
pawelsky :
Another detailed MM teardown
<https://www.rcgeeks.co.uk/blog/dji-mavic-mini-teardown-whats-inside>
[2019-11-26 13:21:19]
validat0r :
which version? CE? FCC?
[2019-11-26 13:28:51]
the_lord :
It’s CE
[2019-11-26 13:32:03]
validat0r :
[2019-11-26 13:33:34]
validat0r :
holy cow .. never saw 12V on my USB Monitor dongle
[2019-11-26 13:34:35]
validat0r :
but i don't think the leds are scanning any faster than on 5V
[2019-11-26 13:40:44]
massimo.ardizzone :
:sob:
[2019-11-26 15:11:09]
pingspike :
so should I sell my CE and import a FCC from America??
[2019-11-26 15:12:24]
validat0r :
probably
[2019-11-26 15:15:13]
pingspike :
I knew I should have ordered from overseas... :man-facepalming:
[2019-11-26 15:19:06]
validat0r :
I have yet to see a range test with the FCC variant .. are there some on youtube?
[2019-11-26 16:18:14]
validat0r :
nice find .. so this is a CE version, right?
[2019-11-26 17:11:31]
quad808 :
FCC range test...<https://www.youtube.com/watch?v=aBXS2m9xwXc&t=1s>
[2019-11-26 17:12:16]
quad808 :
@ilovemynexus4 stupid far on FCC
[2019-11-26 17:29:25]
fredmicrowave :
@ilovemynexus4 Yes, we can see on one of the pics the model is MT1SD25
[2019-11-26 17:35:54]
validat0r :
awesome video .. 5.5km is incredible .. not sure why it didn't stop at g_config.flying_limit.max_radius=5000m
[2019-11-26 17:36:25]
validat0r :
CE version seems to be quite inferior in that respect
[2019-11-26 17:39:46]
validat0r :
he did like 8m/s .. I guess you could get more when modding to 10m/s .. you'd need a calm day in both directions though
[2019-11-26 17:55:39]
validat0r :
concerning the forced auto landing I think we have to look at the battery parameters
[2019-11-26 17:55:58]
validat0r :
lol .. they corrected the spelling in bat_enable_smart_bat_landing_protect (used to be portect)
[2019-11-26 18:08:47]
quad808 :
:joy:
[2019-11-26 18:14:20]
pawelsky :
I'l answer my own question - it is the MT1SD25 (CE version) :)
[2019-11-27 11:39:48]
validat0r :
the IC is there on the rights .. you circled the wrong part of the board :smile:
[2019-11-27 16:47:31]
blithe74 :
Hi friends!
[2019-11-27 17:03:43]
blithe74 :
I am sorry about my English. The FCC and CE version has hardware difference. In FCC version placed high power adjustable amplifier SKY85748 for 5.8Ghz (Yellow circle). In CE version, I think, placed two low level amplifier for 2.4GHz and 5.8GHz (red circle). But i do not find high quality photo wit model these chips (red circle). Who do have the model number of the chips or high quality photo of CE version? If need datasheet for 85748 I can uploaded it.
[2019-11-27 17:09:02]
the_lord :
the red circle in the middle is 213GAA
[2019-11-27 17:11:15]
the_lord :
the red circle on the left is ether 750CAT, 760CAT or 780CAT i'm not sure coz I don't have the drone right now
[2019-11-27 17:14:35]
blithe74 :
**the_lord**, Do you have datasheet for these?
[2019-11-27 17:16:02]
the_lord :
I looked for the SKY8546 datasheet but couldn't find it
[2019-11-27 17:29:06]
blithe74 :
Are you sure the chip is 85746 isn't 85748? I found datasheet for 748.
[2019-11-27 17:29:55]
the_lord :
I don't have FCC
[2019-11-27 17:33:53]
blithe74 :
<https://mavicpilots.com/threads/mavic-mini-a-look-inside.75814/page-4#post-869882> Mavic inside FCC version
[2019-11-27 17:40:04]
the_lord :
can't confirm if its 6 or 8
[2019-11-27 18:59:49]
fredmicrowave :
:smile:
Of course you know that I was showing the missing IC's of the Fcc version...
So they swap the two smaller ones for the larger one (and vice-versa) depending on the remote and AC version.
[2019-11-27 20:23:51]
validat0r :
and there is the same thing on the two remote variants ..
[2019-11-27 20:25:10]
validat0r :
either one big 5GHz amp, or two smaller 2.4 and 5.8 GHz amps near the Atherors chip
[2019-11-27 20:26:27]
validat0r :
[2019-11-27 20:29:05]
validat0r :
you're totally right .. I saw that only just now that you meant the missing CE ICs
[2019-11-28 03:34:56]
bjoneseying :
Small tip on the charging: You can charge battery either via drone or hub upto 24w using QC3 charger 12V 2A - stock charger is only 12V 1.5A (18W)
[2019-11-28 03:35:19]
bjoneseying :
the Smart Controller charger is 24W and charges the Mini full speed
[2019-11-28 08:33:02]
massimo.ardizzone :
i think it drain max 1.5 amp @ 12 volts
[2019-11-28 11:32:43]
chipmangini :
I ordered on of these yesterday. 61W, we'll see! <https://www.amazon.com/gp/product/B07TC53ZYD/ref=ppx_yo_dt_b_asin_title_o01_s00?ie=UTF8&psc=1>
[2019-11-28 13:15:56]
massimo.ardizzone :
is a usbC how to connect with MM ?
[2019-11-29 15:06:13]
blithe74 :
Guys!
Please, upload high quality photo RF module drone and control for CE and FCC version, and write type of chips (with 6,8,16 pins). Please!!!
And second request, give me, please datasheet for AR1021X-CL3D.
[2019-11-29 23:37:20]
makerbob :
CE Mavic Mini RC RF module bottom side
[2019-11-29 23:46:22]
validat0r :
Awesome
[2019-11-30 20:10:41]
pingspike :
what's the plan here @blithe74? Buy the missing ICs and simply solder them in?
[2019-11-30 21:58:19]
jcase :
Mini Nand is mini
[2019-11-30 22:05:02]
ryan929 :
Love the flywired BGA :slightly_smiling_face:
[2019-11-30 22:58:38]
validat0r :
Fucking awesome
[2019-12-01 01:50:22]
massimo.ardizzone :
dumped?
[2019-12-01 04:02:05]
blithe74 :
@rich So far, I don 't know how to solve the problem. In CE version for 5.8Ghz need remove CE component and add FCC component with small change. All to be work in usual mode but with amplifier.
But with 2.4Ghz not simply. I don't know what the chips 790 (or 780 or 730) and 213 GAD and 22E CAB. I thought 213 was SKY AS213-92, but in datasheet 2 Pin is ground, 5 Pin - in/out, but on plate the chip placed to 180°. And AS213 for 2 GHz. If chips 213 and 790 is Tx/Rx switch, In this time need change switch to amplifier, but place very a little and component is very very a small...
[2019-12-01 11:10:15]
bjoneseying :
Stock charger will, its 18W (12x1.5) however if you got a 24W charger (12x2A) it will charge a bit quicker.
[2019-12-01 12:56:29]
chipmangini :
@bjoneseying Yeah, I found that out, but I have some iPads, and the wifes cell phone is an iPhone, so not gone to waste...:stuck_out_tongue_winking_eye:
[2019-12-02 02:35:01]
bjoneseying :
Yep perfect for iOS stuff and Google Pixel phones - they're also USB-PD
[2019-12-02 20:18:47]
makerbob :
CE Mavic Mini RC RF module bottom side lr
[2019-12-02 20:19:29]
makerbob :
CE Mavic Mini RC RF module top side lr
[2019-12-02 20:19:50]
validat0r :
nice
[2019-12-02 20:51:23]
validat0r :
yeah, now we need a source for the SKY 746 2K01 and we could try, if populating the board will enhance FCC mode
[2019-12-02 21:04:54]
pingspike :
it'll still need some sort of gps trickery though, right?
[2019-12-02 21:05:04]
pingspike :
as well as the hardware mod
[2019-12-02 21:25:43]
fredmicrowave :
There is also resistors and capacitors that need to be fitted. Not a big deal, but values needed. For the caps, they have to be removed and measured, as they are not marked. Not sure about the resistors, I can read any value on them from those pics.
Pictures to compare both version side to side would also help a lot.
[2019-12-02 21:25:58]
fredmicrowave :
can't
[2019-12-02 22:29:37]
validat0r :
yeah, gps trickery as long as we cannot own dji fly
[2019-12-02 22:30:42]
validat0r :
there may be a possibility to inhibit a change of the country code at another place .. gonna try that
[2019-12-02 23:45:53]
bobdole :
putin spoofs gps signals wherever he goes... is he in here? @putin ?
[2019-12-02 23:51:29]
bjoneseying :
Nyet
[2019-12-03 00:04:52]
bobdole :
:putiniswatchingyou:
[2019-12-03 08:37:07]
cs2000 :
@fredmicrowave I know he's a busy man, but Jcase had already pulled his MM apart, so im sure if he has time and you ask nicely he will pop a cap (or a few) off to measure
[2019-12-03 12:57:44]
fredmicrowave :
Thanks. Personally I don´t own a MM , so I don´t really need this, but just for the fun it could be nice to make a "universal" MM :slightly_smiling_face:
[2019-12-03 15:04:20]
jcase :
Yeah I'm nowhere near my donor mini, I'm out of state
[2019-12-03 15:04:34]
jcase :
At a hardware security training
[2019-12-03 17:33:50]
blithe74 :
@makerbob Thank You very much! Tell me please number of chip 7?0 CAZ - it is 730 CAZ?
@ilovemynexus4 Company SkyWorks (<https://www.skyworksinc.com/>) do not know about chip SKY 746 with 16 pins, but know about SKY85748-11
Who know what the chips: 7?0 CAZ, 213 GAD and 22E CAB?
[2019-12-04 19:40:24]
makerbob :
CE Mavic Mini RC RF module bottom side r mres
[2019-12-04 20:09:33]
validat0r :
nice
[2019-12-05 04:55:45]
blithe74 :
@makerbob Thanks. Please, write model number of chip in yellow square?
[2019-12-05 21:43:29]
pawelsky :
What is interesting is why there are 7 RF lines going to/from the Atheros chip. I could understand 4 (TX/RX for both 2.4 and 5.8), but why 7?
[2019-12-06 04:27:04]
blithe74 :
Thanks. What You think about 730 chip? Who made it - company and full model number?
[2019-12-06 07:35:23]
massimo.ardizzone :
CAZ is italian penis ahhahaha
[2019-12-07 10:51:17]
buundy :
Hello Everyone, I have a strange problem for today :slightly_smiling_face: I have a Phantom 4 on my desk and when I turn on, it works, but as soon as the small fan in the gimbal starts to spin, image transmission disappears. After 1-2 seconds the fan stops and the image transmission reappears. After 5-10 seconds the fan starts to spin again and the image transmission disappears. And so on… Do you have any ideas?
[2019-12-07 10:59:42]
validat0r :
some subssystem constantly rebooting?
[2019-12-07 11:03:12]
buundy :
it seems, maybe I try a fw refresh
[2019-12-07 11:03:27]
buundy :
I desoldered the fan, and it didn’t solve the problem
[2019-12-07 13:29:25]
buundy :
[2019-12-07 13:29:37]
buundy :
Excerpt from the upgrade log
[2019-12-07 13:29:49]
buundy :
It seems that the gimbal has some problem
[2019-12-12 17:51:18]
buundy :
Has anyone tried serial tty connection to the mavic mini?
[2019-12-12 17:51:39]
buundy :
It appears for 1-2 seconds during startup, but disappears
[2019-12-12 17:52:29]
buundy :
I swapped a gimbal module, and I cannot recalibrate it, si I tried @mefisto 's tool, but no success
[2019-12-12 17:52:55]
buundy :
The dji fly app says gimbal imu data invalid
[2019-12-12 17:53:33]
buundy :
So I swapped the camera, so the new gimbal has the original camera
[2019-12-12 17:53:38]
buundy :
Error disappeared
[2019-12-12 17:53:43]
validat0r :
connect it to dji assistant for some seconds, then serial port will be up permanently until reboot
[2019-12-12 17:53:57]
buundy :
Do camera is paired to the main board
[2019-12-12 17:54:05]
buundy :
So*
[2019-12-12 17:54:07]
validat0r :
I wouldn't know
[2019-12-12 17:54:28]
buundy :
Thanks for the assistant tip
[2019-12-12 17:55:08]
buundy :
Now it doesnt have the gimbal imu error and it can calibrate as well, but not pointing straight
[2019-12-12 17:55:22]
buundy :
This is it for today
[2019-12-12 17:55:40]
buundy :
If you have suggestions, I can try tomorrow
[2019-12-12 20:08:10]
jcase :
@ilovemynexus4 @buundy serial is up for good with me on my mac, i dont have assistant installed
[2019-12-12 20:08:21]
jcase :
but it could be my tool causing it to stay up
[2019-12-12 21:10:34]
validat0r :
lol .. they've got a cleartext Heartbeat Msg stating "[D-WL][DEBUG][Country]in_mainland:0"
[2019-12-12 21:12:04]
validat0r :
*wonders what happens in case of in_mainland:1*
[2019-12-13 10:38:56]
cs2000 :
The black van comes... !dji
[2019-12-13 18:21:11]
buundy :
Been to an official dji repair center I know and sometimes we help out each other with parts. They had the software for calibrating to mavic mini gimbal, but the software failed to create the cali file, something was missing. I left the drone with them, to figure out how the sw works, it is a bit overcomplicated...
[2019-12-17 06:24:02]
blithe74 :
@buundy
Can You to ask in DJI service what the chips: 730, 213, 22E and two ceramic, a mounted in CE version, and who made it. And, if it possible, the circuit of radio module for FCC version?
I think how rebuilding radio tract 5.8GHz CE version to FCC version, and how to up power in 2.4 GHz.
[2019-12-17 12:54:51]
mingtao :
it is just bga for Ambarella
[2019-12-19 08:36:02]
buundy :
They are just regular service, they swap parts and do some software work with the programs dji provides to them. They dont do deep level stuff
[2019-12-27 12:17:26]
bin4ry :
[2019-12-27 12:17:36]
bin4ry :
will take a while to solder this properly :joy:
[2019-12-27 14:26:16]
d95gas :
Someone has been bored of Christmas :slightly_smiling_face:
[2019-12-27 16:40:48]
validat0r :
Still some wires to solder to the bga
[2019-12-27 18:59:11]
jcase :
@ilovemynexus4 @bin4ry either of you know how to parse the ambaraella partition table
[2019-12-27 19:01:29]
validat0r :
How does it look like?
[2019-12-27 19:01:53]
jcase :
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF FF 00 00 02 00 01 00 00 00
42 4F 4F 54 53 54 52 41 50 00 FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
00 00 00 00 00 10 00 00 01 00 00 00 00 00 00 00
00 00 00 00 00 10 00 00 FF FF FF FF 22 DB 4B C9
42 4F 4F 54 4C 4F 41 44 45 52 00 FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
00 00 00 00 00 00 04 00 02 00 00 00 02 00 00 00
00 00 00 08 D0 66 02 00 FF FF FF FF F6 28 D1 E9
46 57 5F 55 50 44 41 54 45 52 00 FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
00 BC 9D 00 00 00 08 00 04 00 00 00 04 00 00 00
00 00 02 00 E0 ED 04 00 FF FF FF FF 94 C6 96 37
41 52 4D 5F 54 52 55 53 54 5F 46 57 00 FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
00 00 00 00 00 80 00 00 01 00 00 00 08 00 00 00
00 40 00 00 20 40 00 00 FF FF FF FF 86 BD D7 FE
48 59 50 45 52 56 49 53 4F 52 00 FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 00
00 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
[2019-12-28 11:33:42]
buundy :
Usually:
[2019-12-28 11:33:45]
buundy :
ls /dev/tty.*
[2019-12-28 11:33:59]
buundy :
This will list all the ports
[2019-12-28 11:34:32]
buundy :
MM will be something like tty.usbmodem14205
[2019-12-28 14:55:44]
monkeyman :
got it, somehow I have to restart the MM to make /dev/tty.usbmodem14303 to show, Thanks @buundy
[2019-12-28 14:57:00]
monkeyman :
done listing, I want to change the MM cinematic mode to ATTI ~parameter_settings
[2019-12-28 16:25:45]
bin4ry :
you can either start assistant and let it detect the mav mini or send he duml to switch it to assistant mode quickly after bootup yourself to the drone. the tty is there but you need to be quick (20sec or so)
[2019-12-28 16:36:11]
validat0r :
it's enough to query the ac version
[2019-12-28 18:33:40]
buundy :
If you start assistant, tty would be persistent in my experience
[2020-01-06 22:03:30]
drlov :
Several people having this kind of problem in Mavic 2. The problem is related to core( receiver). Anyone else with this problem?
[2020-01-07 02:29:55]
htcohio :
Hi!
[2020-01-07 02:31:30]
htcohio :
[2020-01-07 02:33:32]
htcohio :
I just found this group today.
I have been involved with an open source digital HD fpv system called OpenHD. (it is based on EZ wifibroadcast)
Anyways, I'm trying to gather information related to the mavic Pro gimbal, I actually don't own any DJI but, I'd really like to get one of the gimbals working with an alternative camera.
[2020-01-07 02:34:28]
htcohio :
[https://github.com/OpenHD/Open.HD/wiki](https://github.com/OpenHD/Open.HD/wiki)
[2020-01-07 02:34:34]
htcohio :
[https://youtu.be/SWP5sUj4p5M](https://youtu.be/SWP5sUj4p5M)
[2020-01-07 02:36:07]
htcohio :
I was looking to use a storm 32 gimbal controller but, I understand the Mavic gimbal has magnetic hall effect sensors on each axis. I assume that might be difficult to adapt to another board?
[2020-01-07 05:14:33]
samsuttabris.st :
can you repair this part?
[2020-01-07 10:41:38]
mefisto :
@htcohio Cool project.
Normally, the gimbal is controlled by this STM32:
<https://github.com/o-gs/dji-firmware-tools/wiki/WM220-Gimbal-Sensor-Control-board>
If you want to focus on camera, you may try to re-use that board. Not completely sure if the gimbal will come to life with only this. But I think it will.
[2020-01-07 10:42:14]
mefisto :
The schematic isn't mine; though I can't really remember who is its author.
[2020-01-07 13:15:53]
fredmicrowave :
I am. This is the partial diagram from the unused connector port, on the MP1 gimbal board.
[2020-01-07 13:20:56]
fredmicrowave :
Someone ( I think it was Jkson) also tried to connect another camera on the MP1 board , with the help of a connector pinout schematic I made. It worked, with lots of interferences because of the flying connection wires.
[2020-01-07 15:18:40]
htcohio :
thanks!
All I am really hoping for is to be able to control pan and tilt with standard RC protocol.
are the most likely use a shepherd gimbal controller like a storm32.
As for the camera, I already have a flat Flex adapter circuit that could convert the stock DJI camera micro coaxial cable into any camera that it's suitable for such a small lens like, runcam split or, Firefly split 4K
[2020-01-09 21:30:09]
makerbob :
@htcohio. Find some info in pics below. Can you share any info on your DJI flex adapter 2 micro coax solution?
[2020-01-09 21:32:46]
makerbob :
[2020-01-10 16:26:14]
htcohio :
Hi!
thank you
[2020-01-10 16:26:20]
htcohio :
I we'll take a look at this
[2020-01-10 16:26:54]
htcohio :
I I'm thinking it might be too much work or cost too much to try and use the hall effect position sensors.
[2020-01-10 16:27:47]
htcohio :
I at least in the beginning am going to create a PCB to break out the motor wires then, integrate a storm32 gimbal control
[2020-01-19 15:48:20]
zapf :
I don't mean to sound presumptuous, but I was thinking about the inspire 2 and it's cinessd and related licensing. I've tried to keep an eye on the hardware hacking scene in this channel, and it seems confusing that I've not heard anyone trying to crack these open other than just opening the case. I'd assume there'd be a big market for copying the firmware onto non-marked up m.2 ssds. Same with the prores license unlock (even if only as a means of dealing with losing ones you paid for after warranty service).
Is there anyone that could clue me in on if it's just a lack of interest (compared to much more popular uas like the mavic series) or that these are particularly hard targets (the inspire 2 itself has been hacked, and I assumed the licenses are packaged in the same way as other modules in there).
[2020-01-19 16:35:37]
nocommie :
IIRC I read something on hacking so you can use non-dji hard drives. I think it was related to the same thing with the RED camera hard drives. Maybe you can find something searching for RED hacking.
[2020-01-19 17:26:35]
jcase :
@zapf research is expensive, esp on higher end devices
[2020-01-21 04:27:40]
hazardc :
time is money
[2020-01-21 04:30:33]
hazardc :
already a lot of companies copying dji at prosumer level though, but most high end clients just buy the best available no matter what even if it's wasteful spending.
[2020-01-21 04:33:28]
hazardc :
You want to make money from the drone industry I'll be straight up with you, multispectral and lidar.... two things if you could find a way to get on phantom-level drones for considerably cheaper than what is currently offered and easy to use with apps like dronedeploy.,.. you would make a lot of money if you could undercut that market, a lot of people want in that cannot afford to be in.
[2020-01-22 23:03:39]
b1tninja :
is there any dji drones that use the lc1810
[2020-01-23 17:36:43]
dnacho :
Hi, does anyone know why a phantom 3 main board would start 3 of the 4 motors. And the 4th one just beeps d-d-d like that so I'm not sure what it is because it no longer gives esc status error. It just beeps
[2020-01-23 17:49:36]
dnacho :
There is also updating but you can hear the motor beep
[2020-01-23 18:44:50]
b1tninja :
photoconnection
[2020-01-23 19:07:43]
dnacho :
[2020-01-23 19:15:26]
b1tninja :
Why did it need new motor
[2020-01-23 19:17:41]
dnacho :
It was just troubleshooting to see if it was a motor problem
[2020-01-23 19:18:07]
b1tninja :
ah no crashes?
[2020-01-23 19:18:16]
dnacho :
No
[2020-01-23 19:18:49]
b1tninja :
try swapping diagonalmotor
[2020-01-23 19:19:37]
buundy :
you should check the 3V6 pads if they have 3,6 Volts
[2020-01-23 19:19:59]
buundy :
also check the PWM pads with oscilloscope
[2020-01-23 19:20:22]
buundy :
I usually compare the ESCs test pads to each other
[2020-01-23 19:20:54]
b1tninja :
is that unpopulated voltage regulator always issing
[2020-01-23 19:21:30]
b1tninja :
idk that hw looks like it was never there though
[2020-01-23 19:21:56]
buundy :
probably it is a connector’s place
[2020-01-23 19:23:14]
dnacho :
I don't have an oscilloscope but I can check the voltaje on those pads and compare it to the one on the others
[2020-01-23 19:23:35]
dnacho :
What should the test pads give?
[2020-01-23 19:24:09]
dnacho :
The one on the right to the bolt it's always like that on all boards. It's a pad for a connector
[2020-01-23 19:24:38]
b1tninja :
did it work ever
[2020-01-23 19:25:15]
dnacho :
And @buundy you mean the 3v3 pads right? I can't seem to find any 3v6
[2020-01-23 19:25:33]
dnacho :
Yes it did work correctly
[2020-01-23 19:26:11]
buundy :
sorry, 3,3
[2020-01-23 19:26:31]
buundy :
also there is a 3V6 :slightly_smiling_face: find it!
[2020-01-23 19:27:55]
b1tninja :
[2020-01-23 19:28:07]
b1tninja :
looksfucky
[2020-01-23 19:29:28]
b1tninja :
is that white stuff magic residue
[2020-01-23 19:30:02]
b1tninja :
or just artifact fro camera stitching
[2020-01-23 20:57:45]
dnacho :
Just where is that one
[2020-01-23 20:58:10]
b1tninja :
middle rightish of the bigger iamge
[2020-01-23 22:53:37]
dnacho :
It's one of the fets?
[2020-01-23 22:53:58]
dnacho :
Or do you mean the voltage regulator?
[2020-01-24 23:53:53]
clauto :
has anyone seen a mavic 2 running on an external battery without piggybacking on dji stock battery?
[2020-01-25 00:38:23]
digdat0 :
in our fb group, a guy from Singapore is trying that and its failing 'battery authentication' and hes not able to fire motors. Has not been able to find out how to disable the auth on the battery. Also found that if you deconstruct the battery an unplug the balance lead, it totally fucks up the battery and you need to re-program the battery, basically bricks it and not recoverable without DJI internal tools.
[2020-01-25 02:12:22]
dnacho :
It's the same with the osmo pocket if you disconnect the battery it kills the osmo. Dji is really trying people not to open their stuff
[2020-01-25 02:20:58]
b1tninja :
thats kind of interesting, suppose hooking the external battery inline is not desireable
[2020-01-25 02:22:29]
b1tninja :
like parallel, and allowing it to communicate etc
[2020-01-25 02:24:24]
b1tninja :
just extra bit of info, i'm able to get a mavpro to stay on with a bench ps
[2020-01-25 02:24:30]
b1tninja :
but i've not tried to fly it
[2020-01-25 02:26:08]
b1tninja :
i'll try this weekend, i imagine its the same
[2020-01-25 02:50:02]
fredmicrowave :
Good to know about the Osmo...
Someone referred before that i you disconnect the battery wires in the right order (for the MP1) and reconnect it in the reverse order, it will work. (I think it was: beginning from + )
You could also connect another battery in parallel temporarily with long wires...
[2020-01-25 03:51:15]
clauto :
@digdat0 very interesting, that the did it that way, that kind of kills one of my ideas.. I wanted to gut a official battery and wire in 4S2P to the stock circuitry and hope I could trick it to working with 18650s I could just swap out..
[2020-01-25 03:51:40]
b1tninja :
yea the power at least can be attached either direction
[2020-01-25 03:51:50]
b1tninja :
like you can charge them either way
[2020-01-25 03:52:32]
b1tninja :
the simplest hack is probably to use linker to dynamically modify whichever binary checks that
[2020-01-25 03:52:46]
b1tninja :
dji sys would be my guess
[2020-01-25 03:53:00]
b1tninja :
but idk where the execution / rooting stands for the mav2
[2020-01-25 03:53:10]
b1tninja :
i have working kernel modules for mavpro though
[2020-01-25 03:54:12]
b1tninja :
if you pull open one of the remote controls the battery assembly, its maybe easy way to get access to the communication side
[2020-01-25 03:54:25]
b1tninja :
could probably replay that
[2020-01-25 04:02:52]
nocommie :
Fuckin DJI. I wonder if this goes against right to repair laws.
[2020-01-25 04:07:35]
clauto :
I did find a way to get the motors to fire with any battery tho! Which is why I was asking if this was known info or not.
In parameters for battery_type there is 1 = DJI and 2 = non dji… if you just set this to a 0 the motors fire right up!
I can even run this on a power supply!
[2020-01-25 04:12:23]
clauto :
[2020-01-25 05:55:25]
b1tninja :
thats interesting info--- do they not fire for non dji
[2020-01-25 05:55:33]
b1tninja :
or is just anything other than 1 not dji
[2020-01-25 05:56:24]
b1tninja :
dji doesn't even follow the gpl opensource laws i doubt anyone would actually take the time to sue them
[2020-01-25 05:57:01]
b1tninja :
maybe some sort of manufactures of compatible parts, but i bet it is illegal to lock out like that
[2020-01-25 05:57:59]
b1tninja :
maybe there is some legality regarding like safety assurances though, so it doesn't drop out of the sky though, no idea...
[2020-01-25 06:54:52]
clauto :
They will not run if you use the assistant to set them to non dji. Only when they are in the "misconfigured" state (*t*hat's what it says in the dashboard view of 1.12)
[2020-01-25 06:56:33]
clauto :
But yea you have 0 feedback on power level or how long you can continue to fly
[2020-01-25 10:02:49]
b1tninja :
interesting what assistant view lets you set that, i dont remember seeing anything like that-- did you get into the debug mode or something
[2020-01-26 21:32:12]
clauto :
debug in 1.12 @justincapella
[2020-01-26 21:33:11]
clauto :
I am working on getting debug in the latest version now, they not only rem’d out the lines that allow it, but removed the lines from the application, trying to reinject them from 1.12
[2020-01-27 22:04:39]
dnacho :
Hey guys
Has anyone done any work on a dji x3 gimbal?
I have one that has two broken arms and flex cable
And I have another one that works great but doesn't give any image.
So what I did was change the image sensor to the one that doesn't give image and now it does but it won't stabilize. Do I have to change the magnets and the motor controllers from the destroyed one to this one?
[2020-01-27 22:05:12]
dnacho :
Or just changing the magnets should work?
[2020-01-28 22:36:48]
zapf :
A dji backed startup just announced (well, at CES) a new Lidar tech that drops the price about 90%
[2020-01-31 19:17:05]
fabian.briese :
Hi, is there a solution to read the mavic air wifi password from app or something else? I cannot find this option in DJI Assistant or DJI Go 4.
[2020-02-01 13:23:23]
benhuri03 :
Hi guys
[2020-02-11 01:56:22]
dnacho :
Anyone has any ideas?
Hey guys
Has anyone done any work on a dji x3 gimbal?
I have one that has two broken arms and flex cable
And I have another one that works great but doesn't give any image.
So what I did was change the image sensor to the one that doesn't give image and now it does but it won't stabilize. Do I have to change the magnets and the motor controllers from the destroyed one to this one?
Or just changing the magnets should work? I'm not sure if the are paired to the motor controlling board like on the newer drones
[2020-02-11 16:26:00]
b1tninja :
do you have pics
[2020-02-11 16:26:16]
b1tninja :
i saw in the firmware checks to see that the calibration data is the same
[2020-02-11 16:26:24]
b1tninja :
so maybe you need to recalibrate them but I've gto no idea
[2020-02-11 16:26:28]
b1tninja :
the magnets shouldn't be the problem
[2020-02-12 01:44:06]
dnacho :
@justincapella pictures of what would it be?
Its just that I'm not sure if it needs the same magnets like on the phantom 4 gimbal. That you have to change the magnet and the drivers
[2020-02-12 02:02:07]
b1tninja :
oh, im not sure if they even have the kernel module compiled or anything like that
[2020-02-12 12:59:09]
mefisto :
We (or at least I) don't know what sensing method is used in your gimbal. Dji used:
• resistance sensors (aka just a potentiometer) in Ph2 and Ph3 gimbals (roll & tilt arm)
• Magnetic field sensors (in Ph3 yaw arm)
• Hall effect sensors (also magnetic, but a bit different)
If resistance based arm is in wrong position - replace potentiometer.
If magnetic sensor based arm is in wrong pos - perform SW calibration, or rotate or replace the magnet encoder ring around the axis
If Hal sensor arm is in wrong pos - you either need to perform software calibration, or use the same parts; which exact parts - some people here explained that in the past, but I can't remember - I never did that myself.
We don't have SW calibration for every model. Ie. no such command for Ph4.
[2020-02-13 02:10:03]
dnacho :
Thank you very much for your explanation @mefisto
Yeah this ones are magnetic field sensors
And from the calibration thats another question I had I know the spark and mavic air gimbal can get re calibrated so that when you change the gimbal motors they work using the og service tools and in that same code there's the info of other drones. Does the gimbal calibration also work on the or just on those two models?
[2020-02-13 07:59:23]
buundy :
Just with spark, mavic air
[2020-02-13 07:59:31]
buundy :
As far as i know
[2020-02-13 11:45:54]
mefisto :
There's also a calibration packet for Ph3, it calibrates the yaw arm only (resistance based arms can't be calibrated). This one may work for gimbals released at the same time, I don't know.
[2020-02-13 16:43:57]
dnacho :
@buundy yeah thats what I also knew but was curios to know
[2020-02-13 16:44:56]
dnacho :
@mefisto ohhh ok ok do you know where that ph3 calibration packet is?
I had not heard about it and I could work with the x3
[2020-02-13 16:58:22]
mefisto :
Just tell the og service tool you are using p3x while requesting the calibration.
[2020-02-13 18:00:38]
drlov :
Ph3 is not even calibrated. He even makes the moves, but he doesn't line up the engine. Alignment must be done manually on the shaft
[2020-02-13 19:03:52]
dnacho :
Oh ok ok so the og tools don't do anything? @jhonny.ebtir you still have to change the magnet position?
[2020-02-13 19:04:41]
dnacho :
I really hate that dji makes it so difficult to get tools that are not even for their recent drones
Putting each magnet of the x3 zenmuse is turning up to be a real pain
[2020-02-14 17:09:34]
dnacho :
Any chance someone still has the old dji phantom 2 vision assistant version 1.08?
[2020-02-14 17:20:02]
digdat0 :
try this <http://www.droneslinger.com/software/assistant-1-08.zip>
[2020-02-14 17:20:07]
digdat0 :
<http://droneslinger.com/software.html>
[2020-02-14 17:21:23]
dnacho :
Thank you
Thats a really old website but just saved the one of the fireman's drone
[2020-02-28 10:28:39]
buundy :
@mefisto ./comm_og_service_tool.py gimbal calibration works on Mavic 2 Pro! Just a feedback
[2020-02-28 10:28:46]
buundy :
I used: ./comm_og_service_tool.py -vvv /dev/tty.usbmodem14105 WM230 GimbalCalib JointCoarse
[2020-02-28 10:37:32]
mefisto :
which FW version was on the AC? Did you also do LinearHall calib?
[2020-02-28 10:41:39]
buundy :
I have not tried linearhall, should I try it?
[2020-02-28 10:42:27]
buundy :
v01.00.0200
[2020-02-28 10:44:13]
buundy :
it works also ./comm_og_service_tool.py -vvv /dev/tty.usbmodem14105 WM230 GimbalCalib LinearHall
[2020-02-28 10:44:20]
buundy :
it is more precise
[2020-02-28 11:43:45]
mefisto :
These do different things, so you should really do both.
[2020-02-29 07:02:08]
buundy :
Oh, I didn't know that. Any of them resulted in good position
[2020-02-29 15:52:15]
sheldon.holy :
!wiki
[2020-03-01 20:17:14]
ego-22 :
Whoops, looks like I broke Ronin-S via comm_og_service_tool :zany_face:
I ran calibration script by mistake on it and now gimbal not working at all
[2020-03-01 21:53:54]
mefisto :
Never looked at Ronin firmwares, so no idea what that function does there. If it means calibration, like in drones, then it probably requires specific position, camera installed etc.
Though for a gimbal with switchable camera, I'd be suprised if calibration option is not available through the app.
[2020-03-08 18:56:48]
jemo07 :
Hi everyone, is there any work on reversing the BMS ?
[2020-03-08 19:01:53]
jemo07 :
Looking at the Mavic Pro and Mini... I2C comm is not encrypted but not getting very far as there is a SHA exchange that authenticates, so just reversing the I2C protocol will not be enough, thoughts or any other out there working on this?
[2020-03-08 19:49:43]
jemo07 :
Here is an excerpt of the captured file...
[2020-03-08 19:50:19]
jemo07 :
It’s coming from a gent named Alain on FB DJI Mod Mini Group.
[2020-03-08 19:51:24]
jemo07 :
I’m just getting ready to connect my Logic-Analyzer to see how far I can get...
[2020-03-08 20:16:35]
validat0r :
Nice. I'd like to see some progress on mini
[2020-03-08 20:16:45]
validat0r :
Has been too long without
[2020-03-08 20:17:12]
validat0r :
Get Alain's ass over here
[2020-03-08 20:21:10]
b1tninja :
you trying to use an after market battery and have it speak like the oem one
[2020-03-08 22:22:28]
jemo07 :
Yup, sent him a pm but nothing...
[2020-03-08 22:24:32]
jemo07 :
[2020-03-08 22:40:50]
jemo07 :
Two things, one in interact with the bms in a way that you can keep it from locking and adjust the cell/capacity... this way you can create your own battery pack and still get the data back from the telemetry... ultimately will be to create your own bms and pack...
[2020-03-09 01:52:32]
b1tninja :
I was able to compile a custom kernel module for mav pro so if there is some function in /proc/kallsyms you want to hook let me know
[2020-03-09 07:29:00]
mingtao :
I think ronin-s not so easy to destroy via software
[2020-03-18 10:19:23]
b1tninja :
[2020-03-18 10:19:45]
b1tninja :
Anyone already know what that unpopulated connector top right is
[2020-03-18 12:00:19]
ryan929 :
My initial guess would be a USB 3 mini or something, just given the shape, apparent size, and retention. Also, 8 pads, USB 3 has 8 signals (including GND, but not counting GND_DRAIN)... just an idea - you should be able to see with a multimeter if that appears to match up at least on some of the pins (unless you have a scope that can check SSTX/RX)
[2020-03-18 12:15:32]
b1tninja :
That makes sense
[2020-03-18 20:00:14]
pawelsky :
It is actually a flex cable connector
[2020-03-19 06:38:27]
b1tninja :
it's nearby a usb2 hub
[2020-03-20 00:11:06]
pawelsky :
It is likely Molex [503480-0800](tel:5034800800) - <https://www.digikey.pl/product-detail/en/molex/5034800800/WM1388CT-ND/2356642>
<https://media.digikey.com/Photos/Molex/503480-0800.jpg>
[2020-04-03 08:40:26]
mefisto :
Is there a normal tablet inside that "DJI TableTop Display Mavic" thing? anyone knows?:
<https://allegro.pl/oferta/dji-tabletop-display-mavic-9125015976>
[2020-04-03 11:38:15]
mefisto :
That might be not a bad product to disassemble, for 12 USD.
[2020-04-03 12:56:46]
bin4ry :
hm, isn’t that things normally only this photo frames with sdcard?
[2020-04-03 14:13:47]
mefisto :
It plays movies.
Many informational devices have a normal tabled screwed in to the hole. aybe there's a detachable tablet in this one?
[2020-04-03 14:25:02]
validat0r :
If not you can put your favourite bird on display like a pro
[2020-04-03 16:28:09]
chipmangini :
@mefisto Apparently it does... <https://www.youtube.com/watch?v=sU-b7jvlFlI>
[2020-04-04 01:34:22]
mefisto :
I'm diagnosing a car cam; anyone knows what's that chip? Seem to contain 5 buck converters, from the image. Used to power Alpha Imaging Technology AIT8328p. Marking: S48A 2206. Also seen one with S29T 2206.
[2020-04-04 09:55:27]
mingtao :
<http://www.gmt.com.tw/product/datasheet/EDS-2206.pdf>
[2020-04-04 09:57:03]
mefisto :
Great! Thank you. I searched for it quite long.. looks like have to improve my google skills.
[2020-04-04 10:00:39]
mingtao :
enjoy)
[2020-04-07 14:28:30]
mefisto :
The screen width seem to be 28 cm(from photoshop measure; the whole thing is 77cm wide), so it's circa 12 inch screen. There is a bare board duct taped on the back, with SD-card from which the movies are played.
12 inch electronic frame with ability to constantly play movies from sd-card, for $12? I'm getting one.
[2020-04-07 23:00:57]
jcase :
Does anyone have the register address info for the MIMXRT1061DVL6A from the mini?
[2020-04-09 15:38:17]
ego-22 :
Anyone tried to replace h3 emmc on mavic air or m2 and write new rpmb?
[2020-04-09 15:43:40]
jcase :
seems like a lot of work, why would someone do that
[2020-04-09 15:43:53]
jcase :
i mean rpmb should also be tied to a per device key, if they did it right
[2020-04-09 16:09:40]
ego-22 :
I have mavic air core with dead emmc. I replaced emmc and write dump from working unit. System boot ok, but as I expected, SN was zero and board requed activation. And I think maybe eagle_rpmb_[inject.sh](http://inject.sh) will write new data to cleaned RPMB?
[2020-04-09 17:13:03]
daviskat :
I tried to read RPMB with programmer, but there is no data in it, maybe it is encrypted.
[2020-04-09 17:13:18]
daviskat :
m2
[2020-04-12 10:48:38]
sheldon.holy :
I have one, if you want me to check then let me know
[2020-04-12 10:48:44]
sheldon.holy :
Oops just saw you bought it
[2020-04-13 16:14:19]
buundy :
Anyone has experience with P4 Air Encoder error? I replaced the double gimbal control panel, but it did not solve the problem. Error code image:
[2020-04-13 16:14:26]
buundy :
[2020-04-13 18:00:04]
webhdx :
I have a broken Mavic Air. It crashed to the concrete after falling 60 meters from the sky. It doesn't show over WiFi and it can't connect via DJI GO but surprisingly works with DJI Assistant. I've also noticed the fan is not spinning at all and it gets very hot quickly. There is no water damage and no obvious visible issues after inspecting the main core board under the microscope. Any idea where to start? I wanted to play with the software first as it should be possible to get some kind of system logs or hardware logs (the same type of information DJI GO shows when something is wrong).
[2020-04-13 20:50:05]
buundy :
Without cooling it shuts off the cpu after a few minutes
[2020-04-13 20:56:13]
webhdx :
Yes I guess so because it tends to restart the connection in DJI Assistant after it gets really hot. It doesn't change anything if I cool it down using external fan tho, won't connect to remote controller. I would like to somehow access system logs to see if WiFi is initialized properly
[2020-04-13 21:04:00]
webhdx :
Maybe there are any other issues but hard to guess because PCB looks fine. After booting up it flashes red-green-yellow a few times, then solid red.
[2020-04-13 21:06:01]
webhdx :
I assume it means critical error but I couldn't find any way to read the error since there is no DJI GO connection. Update logs also seem to be okay but I'm not sure if those are from the last boot or after last successful update.
[2020-04-14 13:00:24]
matox89 :
I heard that here is information about Mavic 2 error code 3?
[2020-04-15 10:14:56]
matox89 :
Have anyone found channel to get P4 / P4 Pro RC batteries?
[2020-04-15 17:32:36]
chipmangini :
@matti.miettinen1 <https://store.dji.com/product/phantom-4-pro-intelligent-battery-high-capacity>
[2020-04-15 17:51:43]
matox89 :
I mean RC = Remote controller
[2020-04-15 18:03:48]
oakley75 :
So there's this P4PV2 that throws error code 0x032800 and every firmware update fails. My understanding is it's incompatible / corrupted fw causing it and a Jtag flash is the only fix. Anyone been through this? Def don't wanna send it in. It's showing .0100 fw currently and the app shows flight controller na
[2020-04-15 23:10:56]
fredmicrowave :
Is the enterprise Dual camera compatible with the Mavic Pro2 ? That is, could it be swapped just like the zoom camera?
[2020-04-16 06:11:34]
matox89 :
You can`t swap zoom camera anymore whitout errors, not sure about enterprise.
[2020-04-16 09:11:34]
mefisto :
@reoak Dji drones consists of modules. You first need to know which module needs reflashing. Some details:
<https://github.com/o-gs/dji-firmware-tools/wiki#introduction>
[2020-04-16 11:31:45]
fredmicrowave :
@matti.miettinen1 Wow, I didn't know that. One more reason -if needed- not to update I guess...
[2020-04-16 11:38:55]
matox89 :
Yes Mavic 2 has come some like Mavic air, Serial number check, if serial won`t match you get error 3, same what I talk earlier.
[2020-04-16 14:13:32]
fredmicrowave :
But It must be only on later versions then, I have one on .100 and swapping camera between pro and zoom works well.
[2020-04-17 01:50:00]
oakley75 :
@mefisto we can duml in to flash a bad nand? You're right I don't know which module it is, I suspect FC related. This things being a pain
[2020-04-17 01:56:30]
dnacho :
If I remember correctly there's even a board to replace serial numbers from the original camera to the new one
[2020-04-17 02:28:56]
jcase :
if the nand is bad, its BAD and cant just be reflashed. If its just corrupt, probably need to remove and reprogram in most cases
[2020-04-17 10:24:34]
matox89 :
Can Mavic 2 FW downgrade to .100, with assistant you cant?
[2020-04-17 11:09:39]
mefisto :
Yeah, the NANDs often get de-programmed. Especially the smaller capacity ones.
Smaller capacity NANDs are usually made by fusing larger capacity ones, disabling part of hardware. But it is rare to fuse fully functional ones; usually they are fused because there was a manufacturing defect and the total capacity is below what it should be.
This leads to a situation where smaller NANDs are less reliable, because they're simply defective batches of the larger ones. That was especially seen in Ph3 Pro, which had 128MBit and 256MBit NAND. The 256MBit ones were rarely failing. Though in this specific case there were also other factors - in case of hard landing, aluminium arm was inflicting force on the 128MBit NAND, causing physical damage.
[2020-04-17 11:09:39]
mefisto :
Yeah, the NANDs often get de-programmed. Especially the smaller capacity ones.
Smaller capacity NANDs are usually made by fusing larger capacity ones, disabling part of hardware. But it is rare to fuse fully functional ones; usually they are fused because there was a manufacturing defect and the total capacity is below what it should be.
This leads to a situation where smaller NANDs are less reliable, because they're simply defective batches of the larger ones. That was especially seen in Ph3 Pro, which had 128MBit and 256MBit NAND. The 256MBit ones were rarely failing. Though in this specific case there were also other factors - in case of hard landing, aluminium arm was inflicting force on the 128MBit NAND, causing physical damage.
[2020-04-17 13:57:40]
micronica :
does anyone have a solution for bricked spark that doesnt connect to USB and DJI assistant or dumbledore dont see it?
[2020-04-17 14:40:07]
micronica :
Operating systems see the SD card in the Spark, but the Assistant is blind to the existence of the Spark.
[2020-04-26 04:33:46]
buundy :
I finally found the solution for the restarting P4 image transmission problem. First to narrow down the problem, I swapped the whole gimbal-camera assembly and the problem disappeared. So I know it was within the gimbal-camera. I replaced the top board with ambarella: didn’t solve the problem. Then I replaced the camera: didn’t solve the problem. Replaced the gimbal ribbon: didn’t solve the problem. Replaced the small panel in the back of the gimbal: didn’t solve the problem. I swapped everything: no solution. WHAT??? Finally I replaced the Ambarella board again, this time with another board. Problem disappeared! So I suspect that the ambarella board was somehow got broken and it worked for 5-6 seconds then it restarted every time, so basically the image transmission was useless. Also software update cannot be done, error code 0x022403. Now I know it was the Ambarella board. Million dollar question: Anyone knows how to reflash the Ambarella in P4 if it cannot start? There is an inner USB connector, maybe somehow through it? I have done it on P3Pro, but not on P4. Any help appreciated :slightly_smiling_face:
[2020-04-26 06:45:01]
mingtao :
Reflash with dump
[2020-04-26 06:45:56]
mingtao :
And at first find and connect uart to console of ambarella. You will see what problem is now
[2020-04-26 07:51:31]
buundy :
There is 4 uart on the board, do you know exactly which?
[2020-04-26 07:51:50]
buundy :
Also by reflash you mean the texas instruments flasher?
[2020-04-28 04:52:44]
mingtao :
@buundy no - i mean connect to NAND with desoldering from board - but at first you must know what happened with Amba now!!!
[2020-04-28 09:20:09]
w4t3r :
@mefisto did it arrive?
[2020-05-02 13:21:23]
buundy :
Hello Everyone! I have stumbled across a pretty misterious problem again. With a Mavic Mini, after a small crash, and repairing the gimbal the system says: "Power system hardware error. Restart aircraft (Code: 30210)"
[2020-05-02 13:21:44]
buundy :
On the forums someone suggests to replace ESC
[2020-05-02 13:21:54]
buundy :
I replaced it twice, same error
[2020-05-02 13:22:23]
buundy :
Replaced the flex cable, didnt solve the problem
[2020-05-02 13:22:46]
buundy :
As I am typing, maybe the problem is with one motor, i will measure them
[2020-05-02 14:39:06]
buundy :
Problem solved :)
[2020-05-02 14:40:05]
buundy :
One motor coil was broken partially and the resistance was different than the others. 0,7 Ohm is normal, broken one had 1,5 Ohms.
[2020-05-06 23:21:21]
sheldon.holy :
It's to do with the serial number on the camera. Dump the eeprom from a known working camera without error 3 and copy it to the new camera
[2020-05-06 23:21:41]
sheldon.holy :
A new camera from DJI will always have error 3 unless you copy the SN from the old cam module to the new one
[2020-05-06 23:22:00]
sheldon.holy :
If it doesn't show error 3 then you didn't get a new camera, it would have been second hand
[2020-05-07 19:58:25]
micronica :
```DM36x initialization passed!
UBL Product Vesion : DJI-486M-UBL-1.0-rc0(2015-10-30)
Dji UBL Version: 1.51(Nov 2 2015 - 15:46:28)
Booting Catalog Boot Loader
BootMode = NAND
Starting NAND Copy...
Valid magicnum, 0xA1ACED66, found in block 0x00000019.
DONE
Jumping to entry point at 0x81080000.
U-Boot Product Vesion : DJI-DEC-Uboot-1.0-rc0(2015-11-02)
U-Boot 2010.12-rc2-svn3214-Dji (Nov 02 2015 - 19:39:56)
Cores: ARM 486 MHz
DDR: 360 MHz
I2C: ready
DRAM: 128 MiB
NAND: 128 MiB
Bad block table found at page 65472, version 0x01
Bad block table found at page 65408, version 0x01
*** Warning - bad CRC, using default environment
Net: Ethernet PHY: GENERIC @ 0xff
DaVinci-EMAC
Press ESC to abort autoboot in 1 seconds
Loading from nand0, offset 0x4a0000
Image Name: Linux-2.6.32.17-davinci1
Created: 2015-06-23 9:37:05 UTC
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 4065664 Bytes = 3.9 MiB
Load Address: 80008000
Entry Point: 80008000
## Booting kernel from Legacy Image at 80700000 ...
Image Name: Linux-2.6.32.17-davinci1
Created: 2015-06-23 9:37:05 UTC
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 4065664 Bytes = 3.9 MiB
Load Address: 80008000
Entry Point: 80008000
Loading Kernel Image ... OK
OK
Starting kernel ...
[ 0.000000] Kernel Product Vesion : DJI-GRC-Kernel-1.1-rc0(2015-06-23)
[ 0.000000] Linux version 2.6.32.17-davinci1 (root@dji) (gcc version 4.3.3 (Sourcery G++ Lite 2009q1-203) ) #6 PREEMPT Tue Jun 23 17:37:03 HKT 2015
[ 0.000000] CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
[ 0.000000] CPU: VIVT data cache, VIVT instruction cache
[ 0.000000] Machine: DaVinci DM36x EVM
[ 0.000000] Memory policy: ECC disabled, Data cache writeback
[ 0.000000] DaVinci dm36x_rev1.2 variant 0x8
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping off. Total pages: 12192
[ 0.000000] Kernel command line: console=ttyS0,115200n8 rw dm365_imp.oper_mode=0 video=davincifb:vid0=0,10K:vid1=0,10K:osd0=1920x1080X16,8100K mem=48MB davinci_enc_mngr.ch0_output=COMPOSITE davinci_enc_mngr.ch0_mode=pal ubi.mtd=2,2048 root=ubi0:rootfs rootfstype=ubifs ip=off lpj=1077248
[ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Memory: 48MB = 48MB total
[ 0.000000] Memory: 44424KB available (3672K code, 444K data, 116K init, 0K highmem)
[ 0.000000] SLUB: Genslabs=11, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] NR_IRQS:245
[ 0.000000] Console: colour dummy device 80x30
[ 0.000000] Calibrating delay loop (skipped) preset value.. 215.44 BogoMIPS (lpj=1077248)
[ 0.000000] Mount-cache hash table entries: 512
[ 0.000000] CPU: Testing write buffer coherency: ok
[ 0.000000] DaVinci: 8 gpio irqs
[ 0.000000] NET: Registered protocol family 16
[ 0.090000] bio: create slab <bio-0> at 0
[ 0.100000] DM365 IPIPE initialized in Continuous mode
[ 0.100000] SCSI subsystem initialized
[ 0.100000] usbcore: registered new interface driver usbfs
[ 0.100000] usbcore: registered new interface driver hub
[ 0.100000] usbcore: registered new device driver usb
[ 0.110000] vpss vpss: dm365_vpss vpss probed
[ 0.110000] vpss vpss: dm365_vpss vpss probe success
[ 0.110000] ch0 default output "COMPOSITE", mode "PAL"
[ 0.110000] pinmux1:0x00145555
[ 0.110000] VPBE Encoder Initialized
[ 0.120000] cfg80211: Using static regulatory domain info
[ 0.120000] cfg80211: Regulatory domain: US
[ 0.120000] (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
[ 0.120000] (2402000 KHz - 2472000 KHz @ 40000 KHz), (600 mBi, 2700 mBm)
[ 0.120000] (5170000 KHz - 5190000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
[ 0.120000] (5190000 KHz - 5210000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
[ 0.120000] (5210000 KHz - 5230000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
[ 0.120000] (5230000 KHz - 5330000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
[ 0.120000] (5735000 KHz - 5835000 KHz @ 40000 KHz), (600 mBi, 3000 mBm)
[ 0.120000] cfg80211: Calling CRDA for country: US
[ 0.120000] Switching to clocksource timer0_1
[ 0.120000] musb_hdrc: version 6.0, pio, host, debug=0
[ 0.150000] musb_hdrc: USB Host mode controller at fec64000 using PIO, IRQ 12
[ 0.150000] musb_hdrc musb_hdrc: MUSB HDRC host driver
[ 0.150000] musb_hdrc musb_hdrc: new USB bus registered, assigned bus number 1
[ 0.150000] usb usb1: configuration #1 chosen from 1 choice
[ 0.150000] hub 1-0:1.0: USB hub found
[ 0.150000] hub 1-0:1.0: 1 port detected
[ 0.150000] NET: Registered protocol family 2
[ 0.150000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.150000] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
[ 0.150000] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.150000] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.150000] TCP reno registered
[ 0.150000] NET: Registered protocol family 1
[ 0.150000] RPC: Registered udp transport module.
[ 0.150000] RPC: Registered tcp transport module.
[ 0.150000] RPC: Registered tcp NFSv4.1 backchannel transport module.
[ 0.160000] kfile init
[ 0.160000] JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
[ 0.160000] msgmni has been set to 86
[ 0.160000] alg: No test for stdrng (krng)
[ 0.160000] io scheduler noop registered (default)
[ 0.200000] davincifb davincifb.0: dm_osd0_fb: Initial window configuration is invalid.
[ 0.200000] davincifb davincifb.0: dm_osd0_fb: 1920x1080x16@0,0 with framebuffer size 8100KB
[ 0.200000] davincifb davincifb.0: dm_vid0_fb: 0x0x16@0,0 with framebuffer size 10KB
[ 0.210000] davincifb davincifb.0: dm_osd1_fb: Initial window configuration is invalid.
[ 0.220000] davincifb davincifb.0: dm_osd1_fb: 1920x1080x4@0,0 with framebuffer size 4050KB
[ 0.220000] davincifb davincifb.0: dm_vid1_fb: 0x0x16@0,0 with framebuffer size 10KB
[ 0.270000] venc off init
[ 0.270000] hdmi status init
[ 0.270000] DM365 IPIPEIF probed
[ 0.270000] imp serializer initialized
[ 0.270000] davinci_previewer initialized
[ 0.280000] davinci_resizer initialized
[ 0.280000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[ 0.280000] serial8250.0: ttyS0 at MMIO 0x1c20000 (irq = 40) is a 16550A
[ 0.750000] console [ttyS0] enabled
[ 0.750000] serial8250.0: ttyS1 at MMIO 0x1d06000 (irq = 41) is a 16550A
[ 0.760000] brd: module loaded
[ 0.770000] NAND device: Manufacturer ID: 0x2c, Chip ID: 0xf1 (Micron NAND 128MiB 3,3V 8-bit)
[ 0.780000] Creating 4 MTD partitions on "davinci_nand.0":
[ 0.780000] 0x000000000000-0x0000004a0000 : "bootloader"
[ 0.790000] 0x0000004a0000-0x000000e00000 : "kernel"
[ 0.800000] 0x000000e00000-0x000007f00000 : "filesystem"
[ 0.810000] 0x000000000000-0x000008000000 : "all"
[ 0.820000] davinci_nand davinci_nand.0: controller rev. 2.3
[ 0.820000] UBI: attaching mtd2 to ubi0
[ 0.830000] UBI: physical eraseblock size: 131072 bytes (128 KiB)
[ 0.830000] UBI: logical eraseblock size: 126976 bytes
[ 0.840000] UBI: smallest flash I/O unit: 2048
[ 0.840000] UBI: sub-page size: 512
[ 0.850000] UBI: VID header offset: 2048 (aligned 2048)
[ 0.860000] UBI: data offset: 4096
[ 1.060000] usb 1-1: new high speed USB device using musb_hdrc and address 2
[ 1.210000] usb 1-1: configuration #1 chosen from 1 choice
[ 1.210000] hub 1-1:1.0: USB hub found
[ 1.230000] hub 1-1:1.0: 2 ports detected
[ 1.310000] UBI: attached mtd2 to ubi0
[ 1.310000] UBI: MTD device name: "filesystem"
[ 1.320000] UBI: MTD device size: 113 MiB
[ 1.320000] UBI: number of good PEBs: 904
[ 1.320000] UBI: number of bad PEBs: 0
[ 1.330000] UBI: max. allowed volumes: 128
[ 1.330000] UBI: wear-leveling threshold: 4096
[ 1.340000] UBI: number of internal volumes: 1
[ 1.340000] UBI: number of user volumes: 1
[ 1.350000] UBI: available PEBs: 0
[ 1.350000] UBI: total number of reserved PEBs: 904
[ 1.360000] UBI: number of PEBs reserved for bad PEB handling: 9
[ 1.360000] UBI: max/mean erase counter: 170/2
[ 1.370000] UBI: image sequence number: 1259737329
[ 1.370000] UBI: background thread "ubi_bgt0d" started, PID 342
[ 1.380000] console [netcon0] enabled
[ 1.380000] netconsole: network logging started
[ 1.390000] Initializing USB Mass Storage driver...
[ 1.400000] usbcore: registered new interface driver usb-storage
[ 1.400000] USB Mass Storage support registered.
[ 1.410000] usbcore: registered new interface driver usbtest
[ 1.410000] i2c /dev entries driver
[ 1.420000] Linux video capture interface: v2.00
[ 1.430000] vpfe-capture: vpss clock vpss_master enabled
[ 1.430000] vpfe-capture vpfe-capture: v4l2 device registered
[ 1.440000] vpfe-capture vpfe-capture: video device registered
[ 1.450000] No sub devices registered
[ 1.450000] Trying to register davinci display video device.
[ 1.460000] layer=c1feb000,layer->video_dev=c1feb164
[ 1.460000] Trying to register davinci display video device.
[ 1.470000] layer=c1feb400,layer->video_dev=c1feb564
[ 1.480000] davinci_init:DaVinci V4L2 Display Driver V1.0 loaded
[ 1.480000] watchdog watchdog: heartbeat 1 sec
[ 1.490000] usbcore: registered new interface driver usbmouse
[ 1.490000] usbmouse: v1.6:USB HID Boot Protocol mouse driver
[ 1.500000] TCP cubic registered
[ 1.500000] NET: Registered protocol family 17
[ 1.510000] lib80211: common routines for IEEE802.11 drivers
[ 1.510000] ksocket init
[ 1.540000] encrypt device:atsha204 found```
[2020-05-07 19:58:50]
micronica :
already flashed dm365_secret.bin and this doesnt work
[2020-05-07 20:00:11]
mefisto :
generate a few random files and try writing those. The partition is encrypted anyway.
[2020-05-07 20:02:21]
mefisto :
And if that won't help - the only option will be to re-compile kernel with atsha module disabled.
[2020-05-07 20:24:56]
jcase :
what device is that
[2020-05-07 20:39:19]
micronica :
gl300a
[2020-05-07 20:39:41]
micronica :
for star i have a kerner problem so i reflash it
[2020-05-07 20:40:13]
micronica :
now kernerl load without a problem but have problem with encription
[2020-05-07 20:43:53]
micronica :
sadly random file doesnt work for me
[2020-05-07 20:44:08]
micronica :
so now i need to re-compile kernel and i dont know how so a long night i gess
[2020-05-07 21:40:08]
mefisto :
To re-compile the kernel, you need the original tree plus config file. DJI probably didn't do any patching to kernel by themselves, so that's all you should need.
DaVinci Linux you can get somewhere on TI servers.. I downloaded it years ago, so don't remember much.
Config - it's likely to be somewhere in RootFS. Extract the rootfs from dji-firmware-tools wiki, and look there. And if it's not there - you may start with default config for TI evaluation board; but you'll likely have to do some tweaks to it in that case.
[2020-05-07 21:40:56]
mefisto :
I wonder if Cypress connection requires some kind of non-standard kernel module..
[2020-05-07 21:56:06]
mefisto :
Hm, now when I think about it, recompiling that thing could actually allow some good changes..
ie. for HDMI boards, it should be possible to allow streaming to both mobile device and HDMI at the same time.
[2020-05-07 22:00:00]
micronica :
For now cunstomer need this controller so I will buy new one and in the meantime I will be working on that encrypted one
[2020-05-07 22:22:01]
mefisto :
It may be easier to continue modifying the partition instead of re-compiling everything..
how many random images did you tried? I don't think there's any structure to that partition, there's just a bug somewhere which leads to the freeze if data after decryption has specific look.. so for most collections of random data, the board should boot.
We could also write a small app which would encrypt some data using the atsha, and then write that to the partition.. if atsha receives data compressed with proper key, it shouldn't bug out.
I remember doing such experiments when I worked on these things (writing an app which uses atsha).
[2020-05-07 22:32:53]
micronica :
3 or 4 files same size as original. First time I gave this problem and it's common for me to reflash kernel and secure partition
[2020-05-07 22:42:14]
mefisto :
recompiling may be easier than expected.. TI provides ISO image which has everything ready for a specific old version of Ubuntu, and instructions on how to install that Ubuntu on VirtualBox. So I'm swinging back towards recompiling kernel rather than developing a tool.
[2020-05-07 22:51:31]
micronica :
I will read about that distro tommorow and maybe I have full forking board
[2020-05-08 06:57:14]
b1tninja :
I have experience building kernel module for mavpro if i can be of any help
[2020-05-08 06:57:37]
b1tninja :
It's outrageous dji doesn't care about gpl lol
[2020-05-11 17:35:42]
markusfriedl :
does anyone know which connector the spark remote has for the antennas... mhf2? 3?
[2020-05-11 20:36:28]
mingtao :
Ipx
[2020-05-12 17:13:32]
b1tninja :
Not a dji product but anyone how what this bitting is called
[2020-05-12 17:15:05]
validat0r :
Tri-Wing
[2020-05-12 17:15:36]
b1tninja :
Thanks
[2020-05-12 17:15:48]
b1tninja :
Tried to Google image search it
[2020-05-12 17:15:51]
validat0r :
Now I am the real bitninja?
[2020-05-12 17:16:04]
b1tninja :
Lol
[2020-05-12 17:16:43]
b1tninja :
*is now known as b0tninja*
[2020-05-14 00:07:19]
dnacho :
Hi group. Is there a way to calibrate the gimbal of a mavic mini in the same way that the mavic air and spark?
[2020-05-14 00:07:29]
dnacho :
Mine is stuck to the left after a gimbal swap
[2020-05-14 08:39:48]
mefisto :
The calib function in comm_og_service_tool is not updated to support Mavic Mini. Unless someone makes the support, it will stay that way.
For me - I might do this in some distant future, at the moment I'm busy with different things.
[2020-05-14 15:06:45]
dnacho :
@mefisto it's does support it. I used it yesterday and it works without a problem just like with the mavic air
[2020-05-14 15:07:03]
dnacho :
Both commands work
[2020-05-14 15:08:25]
mefisto :
Good to know. Thanks.
[2020-05-15 12:13:43]
buundy :
I will test it also
[2020-05-20 15:45:03]
markusfriedl :
short question... does it make a difference on the antenna mods what antenna you apply on which side and same for the cable connectors inside the remote
[2020-05-25 20:15:26]
micronica :
Anyone know what kind of socket/connector is that? Looks like lvds bit I can't find any info on that. I usually replace whole board but it's a waist of god working board only the socket is broken for most of the time
[2020-05-25 20:38:14]
mingtao :
Hirose df..
[2020-05-25 20:38:57]
mingtao :
[2020-05-26 06:31:57]
buundy :
Thanks! Good info!
[2020-05-26 07:36:58]
mingtao :
handmade! )) i have on all gimbal cameras )
[2020-05-26 18:09:53]
buundy :
Why do you create these schematics? Do you repair these cables? Or make testing equipment?
[2020-05-26 19:07:37]
webhdx :
Do you mind sharing those?
[2020-05-27 05:07:26]
mingtao :
Making my cables and testing equip
[2020-05-27 19:29:29]
buundy :
Can you show photos? Interesting!
[2020-05-28 20:11:59]
webhdx :
Anyone able to identify those 2 components in circles? Mavic Air, gimbal not moving at all, they heat up.
[2020-05-28 21:42:27]
vladsol2009 :
High res :smiley:
[2020-05-28 22:15:51]
webhdx :
you can click on it to make it bigger :slightly_smiling_face: don't have better photo right now but might take new one if needed
[2020-05-28 22:16:25]
webhdx :
but should be quite obvious which component are these if you had Air's MC board in hand before
[2020-05-28 22:17:44]
webhdx :
not sure about markings but looks like: CMHY (SOT-23 package) nad DF8 (4 pins, square)
[2020-05-28 23:19:21]
vladsol2009 :
It is safe to assume that SOT-23-5 is some sort of linear voltage reg or LDO :)
[2020-05-29 06:49:38]
webhdx :
Yeah I think so but couldn't find any datasheet. I will do better photos today, maybe someone can help.
[2020-05-29 09:34:17]
webhdx :
Markings: CAXMHY and DF8. I'm sure it's LDO as they are both present near each other in other power sections on the board (i.e. under the bigger black shield visible on the photo).
[2020-05-29 09:35:22]
webhdx :
pinging @mingtao you are the man in the repairs, any idea? :slightly_smiling_face:
[2020-05-29 10:55:18]
vladsol2009 :
CAXMHY = NCP114 (NCP114ASN150T1G or NCP114ASN150T2G)
[2020-05-29 10:55:26]
vladsol2009 :
1.5V
[2020-05-29 11:18:09]
vladsol2009 :
Is there a dash under the "8" on the smaller one?
[2020-05-29 11:30:39]
webhdx :
Yes there is
[2020-05-29 12:43:17]
webhdx :
Damn, I'm impressed @vladsol2009. I've spent a few hours yesterday googling and nothing. It's indeed 1.5V LDO. Not too hard to find any other 1.5V replacement as they usually have the same pinout. I'm more concerned about the other component tho - I have no idea what it is but this might be uDFN-4 package and it looks like ON Semicondutor produces LDOs in that package too. I will desolder it later to confirm package size.
[2020-05-29 12:46:05]
vladsol2009 :
May be a NCP160AMX180TBG, but i'm not sure.
[2020-05-29 12:46:40]
vladsol2009 :
Can be a ST or Microchip part... Or something else :slightly_smiling_face:
[2020-05-29 12:47:11]
webhdx :
How do you find those? I've tried a lot of websites and I couldn't find anything by the markings
[2020-05-29 12:48:00]
webhdx :
I will take the risk and try NCP160
[2020-05-29 12:51:25]
webhdx :
Thanks a ton @vladsol2009. I owe you a beer.
[2020-05-29 12:51:37]
vladsol2009 :
You can desolder these regs and apply power to them from an external source. It is possible that they are not damaged, but become heated due to excessive load.
[2020-05-29 12:52:28]
webhdx :
2 capacitors nearby seem to be shorted. I will start desoldering regs and caps to check what is shorting the rail to the ground
[2020-05-29 13:17:41]
fredmicrowave :
Exactly, they are probably not damaged, but some component on the output shorted.
[2020-05-29 13:18:55]
fredmicrowave :
DF8 could be a switch ( mosfet? )
[2020-05-29 13:21:26]
webhdx :
DF8 pinout seems to match NCP160 pinout
[2020-05-29 13:21:39]
webhdx :
both regulators share the same input
[2020-05-29 13:22:09]
webhdx :
so I suppose CAXMHY and DF8 are LDOs
[2020-05-29 13:23:00]
webhdx :
I don't have replacements on hand, need to order some from China :confused: I will try to check on some scrap mobile phone boards
[2020-05-29 13:23:43]
webhdx :
let's hope they are not damaged but after seeing some smoke in that area I'm not too optimistic
[2020-05-29 14:14:16]
fredmicrowave :
Right, the upper right pin (3) on the picture looked like a signal input, hence my switch suggestion, but the NCP160 has an enable input, so that match too.
I would check the outputs for shorts and resolve that before anything else :slightly_smiling_face: .
[2020-05-29 14:18:06]
webhdx :
input seems to be shorted to ground
[2020-05-29 14:18:21]
webhdx :
would that cause those ICs to heat up?
[2020-05-29 14:19:55]
webhdx :
it's a hell to diagnose it without a boardview or schematics
[2020-05-29 14:20:02]
webhdx :
I will start removing caps on input line first
[2020-05-29 14:37:58]
ego-22 :
Looks like you have shorted 3v3 line. Wifi link also not work?
[2020-05-29 14:43:30]
webhdx :
Yes, it doesn't work
[2020-05-29 14:45:39]
webhdx :
I will try my luck first with the gimbal power area as this is where I saw smoke. If it doesn't help I will inject 3.3V and check what gets hot
[2020-05-29 14:46:40]
webhdx :
This board is cursed, it had 5V line shorted. Fixed it, worked for a bit, connected the gimbal and now another line seems to be shorted.
[2020-05-29 17:10:15]
fredmicrowave :
Shorted V input should not make it to heat up: If Vin is shorted it receives no power.
[2020-06-03 09:34:02]
webhdx :
Another day, another question :slightly_smiling_face: Does anyone know what is exact connector name for Mavic Mini tilt axis gimbal motor PCB? I believe this is the same part used as GPS connector in Spark. Thanks in advance
[2020-06-03 20:02:17]
makerbob :
Looks quite like the gimbal B2B connectors used in Mavic Pro. Could be sourced from HIROSE or MOLEX. Picture below is from Mavic Pro. Pinout may vary in MM.
[2020-06-03 20:39:35]
webhdx :
Yeah same connector. I had Spark GPS cable on hand which had the same connector as well.
[2020-06-05 12:38:03]
webhdx :
Anyone has a pinout for ESC<->Core board connection on Mavic Mini? Or at least ohms readings/voltages? My Mini is dead, no signs of life at all. LEDs are lighting up when connected via USB but it can't be turned on. I suspect broken ESC/power board but want to try fixing it before ordering new one.
[2020-06-05 18:07:52]
buundy :
Next week I can measure for you I hope
[2020-06-06 21:29:44]
micronica :
Thx a lot for that. So only aliexpress because mouser only 10000 per order :smile:
[2020-06-06 21:35:15]
micronica :
Do u know where to order like 20-50 peace?
[2020-06-10 01:48:57]
dnacho :
Has anyone had this problem after changing a mavic mini gimbal and calibrating it through the og tools
[2020-06-10 01:49:04]
dnacho :
[2020-06-10 01:49:19]
dnacho :
It says gimbal imu data error and gimbal calibration error
[2020-06-10 01:49:30]
dnacho :
But the gimbal does work and move
[2020-06-10 13:42:13]
buundy :
needs to be paired to the motherboard by dji programming tool
[2020-06-10 14:39:22]
webhdx :
It sucks DJI does that :confused: I can't see any reason why they do that besides stopping unathorized repairs. I have a Mini sitting around which needs gimbal replacement. Glad gimbals without camera modules popped out on AliExpress and they are cheap.
[2020-06-10 14:59:44]
dnacho :
Oh man @buundy and do you happen to have that tool? I can pay for that
[2020-06-10 15:00:30]
dnacho :
It really does suck @maciej.cezary.kobus specially since they started doing it in the latest firmware
[2020-06-10 15:01:06]
dnacho :
Also @buundy do you know if by swapping the camera sensor I would get rid of the problem like on the mavic air?
[2020-06-10 15:21:03]
buundy :
I have not tried camera swapping, but I think so, maybe it helps
[2020-06-10 15:22:10]
buundy :
does anyone know how to reflash a P3A gimbal board? I have one that doesnt transmit fpv feed. It is a similar problem like the P3P black screen, which can be solved by reflashing ambarella, but the chip which is present on the p3P it is missing from the P3A board. so it cannot be reflashed the same way
[2020-06-10 15:22:36]
bin4ry :
maybe @mingtao can help
[2020-06-10 15:22:56]
buundy :
I found a thread that describes that it can be reflashed with ambausb
[2020-06-10 15:23:18]
bin4ry :
i meant the gimbal issue
[2020-06-10 15:23:27]
bin4ry :
the other one maybe @mefisto
[2020-06-10 15:23:50]
buundy :
I booted up the board in usb mode by shorting the OUT6, OUT8, GND pins, and windows (ambausb) recognizes the board
[2020-06-10 15:23:57]
buundy :
but i dont have fw to flash on it
[2020-06-10 15:24:00]
buundy :
any heads up?
[2020-06-10 15:24:07]
buundy :
this is the thread: <https://github.com/o-gs/dji-firmware-tools/issues/157>
[2020-06-10 15:38:33]
buundy :
I extracted the m0100 module from the bin fw package, but I don’t know what should I exactly search for in it
[2020-06-10 15:44:14]
buundy :
actually AMBAUSB sees a device without connecting the OUT6 and OUT8 pins with GND, so I am a bit confused
[2020-06-10 15:44:22]
buundy :
I will post my findings
[2020-06-10 15:46:13]
buundy :
well, I was wrong. usb boot doesnt work without the jumper wire
[2020-06-10 15:52:16]
buundy :
so I selected S2(A9) and the Ambarella device appeared in the list
[2020-06-10 15:52:37]
buundy :
I could select the m0100 fw package as firmware to flash it, but it fails
[2020-06-10 16:45:06]
mingtao :
I think you are mistaken..
[2020-06-10 16:45:24]
mingtao :
I have same problem. And think Amba is dead..
[2020-06-10 16:45:37]
mingtao :
But solution was very easy.
[2020-06-10 16:46:14]
mingtao :
Amba have selfrecovery methode.. and very difficult to brick them
[2020-06-10 17:06:31]
buundy :
What is the self recovery method?
[2020-06-10 17:09:27]
buundy :
I tried reflashing it
[2020-06-10 17:09:40]
buundy :
Probably with a wrong fw
[2020-06-15 19:31:40]
drlov :
Phantom 4 Pro v2.0 losing signal at 2.4ghz, less than 2 meters and already lose signal. At 5.8ghz it works normally. I've already tested with another Radio Control and it's still the same thing. Someone with that same problem
[2020-06-15 20:01:48]
buundy :
no idea :disappointed:
[2020-06-15 20:02:26]
buundy :
all antennas in place? there are two under the ultrasonic module iirc
[2020-06-15 20:04:50]
drlov :
It's only two antennas and they're there. I saw on the forum DJI and other people with the same problem. DJI's not responding! It seems to be something lot related... Another friend has the same problem with his drone too
[2020-06-16 23:32:51]
dnacho :
wich version of the remote are you using?
[2020-06-17 00:51:26]
dnacho :
I swapped the camera board and that removed the compatibility error but I still have the gimbal calibration error on the mavic mini
[2020-06-17 00:52:02]
dnacho :
any ideas on how to remove it? The gimbal does work but it gives that error
[2020-06-17 00:52:50]
dnacho :
wich if I calibrate the gimbal in the app it still gives it. If I turn it off and then off it disapears but appears again after rebotting
[2020-06-18 18:50:35]
webhdx :
Mini: If you have no battery communication (no S/N) check two diodes on SDA/SCL signals. They are 3.3V. One signal on my ESC was 1V due to broken diode. I removed it since it’s only for protection.
[2020-06-18 18:53:03]
webhdx :
The diode is probably ESDA8V2-1MX2 <https://www.st.com/resource/en/datasheet/esda8v2-1mx2.pdf>
[2020-06-19 08:12:34]
webhdx :
If anyone is interested. Some time ago I was asking about 2 voltage regulators which were shorting 3.3V line on my Mavic Air. I finally got proper lab bench power supply and after confirming they both got shorted to ground I removed them. Air is working right now, I mean it's connecting with the controller at least. It seems both LDOs are used for powering front vision sensors as they're reporting errors at the moment. Ordered the parts and will solder them back soon. Still no life in the gimbal but I will continue working on that. Checked all fuses (or 0 ohm resitors if you will) and they are fine. Would greatly appreciate if anyone has connector pinouts with diode mode readings or voltages.
[2020-06-23 12:38:20]
sdcoughlan :
same issue with a M2. 5.8ghz is fine. Replaced core board .
[2020-06-23 14:46:38]
jcase :
I'm very nervous around power issues, anyone comfortable with them willing to assist me in putting my m2 and ma2 on bench power supplies?
[2020-06-23 14:47:16]
jcase :
(when i get back home on the 4th)
[2020-06-23 14:47:25]
jcase :
it would make fuzzing much easier for me
[2020-06-23 14:47:39]
jcase :
as i could run it 24/7
[2020-06-23 15:02:40]
buundy :
Correct me if I am wrong, but I think you should just connect the battery receptor pins to positive and negative wires. If I remember correctly the m2 uses 4s batteries so 4x3,7V=14,8V should be enough for powering that drone. Pinout of the battery is usually written on the casing.
[2020-06-23 15:04:04]
jcase :
yeah i cant correct you because idk lol
[2020-06-23 15:04:25]
jcase :
i might come bug you once i get home
[2020-06-23 15:32:06]
webhdx :
don't worry, if you apply too much voltage it will just fly faster and higher :face_with_rolling_eyes:
[2020-06-23 15:33:09]
webhdx :
I prefer to solder wires to proper service points on the ESCs and power it that way
[2020-06-23 15:33:31]
webhdx :
as with battery connector there is a huge chance of frying SMBUS
[2020-06-23 15:36:14]
d95gas :
**Andris8888** is correct **Jcase**, fairly simple process, and will certainly make like easier for you. Sure someone should be able to knock up something that can be just plug n play for the bench supply. All you are doing is mimicking the 4S battery..... and a half decent fan blowing over it to keep it at a reasonable temp :+1:
[2020-06-23 15:52:01]
fredmicrowave :
I suppose you will also have to set non-dji bat in parameters ...
[2020-06-23 16:03:06]
buundy :
Fan should help with cooling. On P3 machines it is mandatory as they can overheat easily and fly the memory contents. @mefisto can talk about it
[2020-06-23 16:16:11]
jcase :
@d95gas goal is to print a jig to make it plug and play
[2020-06-23 16:16:25]
jcase :
@fredmicrowave no issue, i can set any parameter i want
[2020-06-23 16:21:43]
d95gas :
That would be good. I have a brand new 3D printer sat in the garage, never used it, just didnt seem to be able to find the time, shame really as I was looking forward to using it..... Another toy gathering dust :slightly_smiling_face:
[2020-06-23 20:00:22]
david218 :
@jcase as long as you don't reverse the wires, you'll be good. I'd probably be lazy and try an old 19V laptop charger.
[2020-06-25 13:59:33]
sheldon.holy :
Different IMU on this i2
[2020-06-25 13:59:35]
sheldon.holy :
[2020-06-25 13:59:47]
sheldon.holy :
Can't find the part anywhere
[2020-06-25 13:59:56]
sheldon.holy :
Maybe a custom jobby for DJI?
[2020-06-25 14:19:53]
mingtao :
Yes it is new version of I2 and have only one firmware 1.2.500
[2020-06-25 14:20:18]
mingtao :
Dont flash other firmware to this drone
[2020-06-25 15:53:12]
fredmicrowave :
@sheldon.holy According to this document, it should be the same as the ADIS16470
[2020-06-25 18:44:59]
mingtao :
Also this imu installed at new M300 and M200 v2
[2020-06-25 19:26:01]
buundy :
You are very up to date ;)
[2020-06-29 15:09:15]
webhdx :
<!here> Anyone here worked on Osmo Action hardware? I have one heavily water damaged. No WiFi and no SD card. Would need some help on identifying FPC connectors.
[2020-06-29 15:09:57]
webhdx :
Not a drone but since this is DJI product some people here might know some stuff about the Osmo
[2020-06-29 15:16:58]
digdat0 :
i bet if you post pics people will help out
[2020-06-29 15:29:57]
webhdx :
Sorry for the crappy quality but my microscope sucks. It has C1 marking on it. I need header and receptacle. Would appreciate if someone can identify exact part number or an alternative because I don't know the pitch, spacing etc.
[2020-06-29 15:30:56]
webhdx :
This connector is used for front LCD panel
[2020-06-29 15:31:42]
webhdx :
30 pins (2 rows 15 pins each)
[2020-06-29 15:37:14]
webhdx :
I almost sure I won't be able to fix front LCD as the connector on flex cable comes off and there are basically no traces left :smile: but I will give it a try with new connectors
[2020-06-29 15:37:29]
webhdx :
WiFi/SD card issue seems to be related as there is a short on one power line
[2020-06-29 18:38:40]
buundy :
I only know that hirose is manufacturing these type of connectors
[2020-06-29 20:44:53]
buundy :
I am trying to source Micro USB type A connector that is used on the side of the MavicPro/Spark/MavicAir/MavicMini RC. It is a squared micro USB connector and lots of people break it by plugging the charger cable in the wrong direction. I could replace a broken connector, but I cannot source the proper part. I have searched through Mouser, Farnell, Digikey but they didn’t have the exact part I need. Any ideas? I can show a few photos of the connector if needed.
[2020-07-01 09:29:39]
sheldon.holy :
I use ones from farnell that are almost identical
[2020-07-01 09:29:45]
sheldon.holy :
You just need to chop the legs shorter
[2020-07-01 09:31:01]
sheldon.holy :
I'll find you the PN
[2020-07-01 12:45:48]
webhdx :
[2020-07-01 12:48:25]
webhdx :
It charges the battery via microUSB so charge controller seems to be responding, not sure which IC manages USB data connection (the ARM CPU?)
And it blinks yellow as it wants to connect. Doesn't respond to button press to force resyncing
[2020-07-01 18:40:53]
buundy :
Thanks, can you send me the part number?
[2020-07-03 17:56:50]
webhdx :
Damn, not many hardware geeks here but I will try :stuck_out_tongue: Did anyone try to reverse engineer how gimbal is controlled in DJI drones (Air in my case)? I have a case where DRV8313 drivers are getting low INx signals. I was wondering which IC is pulling these signals? Is that Atmel ATSAME70N19 which is near driver ICs? But it seems kinda overkill to me to use such powerful MCU just to control the gimbal :smile:
[2020-07-03 18:02:59]
d95gas :
Think hardware wise for the information you are looking for @buundy is your man :wink:
[2020-07-03 18:04:23]
buundy :
I am not that deep in that aspect, I am sorry :(
[2020-07-03 18:35:02]
webhdx :
I think internally gimbal works as a USB device, thus using Cortex MCU just for gimbal doesn't seem like a bad idea. Would pay real gold for .0620 Air root so I could debug it. Don't want to let this core board go just because the gimbal is not working :disappointed:
[2020-07-05 14:26:43]
ender :
[2020-07-05 14:27:44]
ender :
Hi, I cleaned up a bit in my RF box... Does anyone need MCX or MMCX (the black ones) cables?
If i recall it correctly i bought these for Parrots Sky Controller loooong time ago :slightly_smiling_face:
[2020-07-06 00:25:57]
hazardc :
There's so many possibilities with the fully rooted stuff that hasn't even been tried at all, or possibly even been an afterthought. I think in a few years people will be modding old dji main boards into all kinds of autonomous stuff
[2020-07-06 08:00:05]
buundy :
Anyone can identify this connector's exact type?
[2020-07-06 08:00:25]
buundy :
It is a 35 contact connector
[2020-07-06 08:00:37]
buundy :
On a P3P board
[2020-07-06 08:01:31]
buundy :
Two rows, upper contact, height 1.25-1.3mm, width 12.35mm. Pitch is 0.3mm
[2020-07-06 09:55:02]
nopexecutor :
Anyone able to point the ADS-B HW in MA2?
[2020-07-06 09:57:10]
nopexecutor :
I'm supposed to have non-ADS-B version, but I have some doubt regarding serial number check in code - it seems to treat drones with "3N3" SN prefix (matching my unit) as ads-b enabled - I wonder if that can be accurate
[2020-07-07 08:59:45]
mefisto :
@buundy is something wrong with the identification here?:
<https://github.com/o-gs/dji-firmware-tools/wiki/WM320-Gimbal-top-board>
[2020-07-07 10:36:32]
buundy :
@mefisto I have browsed through OMRON’s cataalog, but somehow I missed this… I suspedted it is OMRON, but I was not sure as there were no logo or anything on it. Thanks BTW! :slightly_smiling_face:
[2020-07-07 10:36:45]
buundy :
In case anyone wonders it is Omron XF2B-3545-31A
[2020-07-07 10:39:28]
buundy :
@takeshi87 I have seen two versions of GPS boards on Aliexpress here: <https://www.aliexpress.com/item/4001080250029.html?spm=2114.12010612.8148356.1.399777fdMZOjCA>
[2020-07-07 10:39:51]
buundy :
there is a 3N3 version and a 1WN version
[2020-07-07 10:40:02]
buundy :
I dont know which is which
[2020-07-07 14:51:09]
buundy :
Another connector identifying :)
[2020-07-07 14:51:41]
buundy :
[2020-07-07 15:01:27]
buundy :
if I remember correclty, sometime ago @mingtao posted about this connector
[2020-07-07 15:08:39]
mingtao :
Hirose
[2020-07-07 15:58:47]
buundy :
thx!
[2020-07-08 11:17:36]
buundy :
Hello guys, another day, another issue:
[2020-07-08 11:18:41]
buundy :
I am repairing a M2P gimbal. I have swapped everything (flex, video line cable, arms, head, camera) but it seems I cannot find the culprit
[2020-07-08 11:18:55]
buundy :
[2020-07-08 11:19:04]
buundy :
It sometimes tries to do the initial calibrations, but fails
[2020-07-08 11:19:16]
buundy :
Sometimes it doesnt move at all
[2020-07-08 11:19:39]
buundy :
Sometimes it emits a high sound like in the video and it moves randomly
[2020-07-08 11:20:17]
buundy :
Anyone has an idea what should I try?
[2020-07-08 11:24:58]
buundy :
Gimbal status is normal... but it is limp
[2020-07-08 11:25:08]
buundy :
I can focus the camera and take pic
[2020-07-08 11:26:36]
buundy :
tried multiple video feed cables
[2020-07-08 11:28:39]
buundy :
I hope secretly that @mingtao has a recipe for this :smile:
[2020-07-08 11:49:09]
ender :
Hi Andris, you are certainly a pro, but just to make sure: dont you also need to run that DJI Gimbal Calibration after swapping out the parts? I did have to do that for a tiny Spark :slightly_smiling_face:
Sorry if i am totally wrong!
[2020-07-08 11:49:31]
ender :
Spark acted very similar to your vid before i did that
[2020-07-08 11:57:56]
mingtao :
strange gimbal
[2020-07-08 11:58:04]
mingtao :
no recipe for this))
[2020-07-08 19:21:01]
buundy :
@sheldon.holy can you send me the P/N please if you have it?
[2020-07-08 19:23:00]
buundy :
Hi @ender! Thanks for your reply, you are correct, I would have to run the cali program, but here it is a different issue. It should be stabilized but not in the correct position. Then the cali would position it correctly. I suspect it is a contact error in one wire or something like that
[2020-07-08 19:24:49]
ender :
Hi!
Okay for me it was like on your video, the gimbal was "mad" on the Sparky before i ran the calibration.
May give it a spin anyways :slightly_smiling_face:
Good luck man!
[2020-07-11 07:40:44]
buundy :
@sheldon.holy any info? I have tried several from farnell but no luck
[2020-07-11 15:48:01]
matox89 :
Hello, is anyone found solution of this camera and to the motherboard pairing?
[2020-07-12 05:40:35]
mingtao :
Which drone?
[2020-07-12 07:05:05]
ender :
Sounds like Anafi?
[2020-07-12 18:50:02]
d95gas :
It transpires that on the Anafi camera and motherboard are not paired. Guy on the forum swaps them frequently doing repairs and confirms they are not paired like DJI.
[2020-07-12 18:54:28]
buundy :
I think he is talking about Mavic Air or maybe Mavic Mini
[2020-07-12 19:38:10]
ender :
Well, we may never learn :slightly_smiling_face: Anafi also needs pairing of cam & Board and so far only Parrot knows how to do it...
[2020-07-13 06:39:18]
d95gas :
@ender There is a guy on the Anafi forum who repairs the Anafi's for a living. He has shown that the Anafi camera is not paired to the motherboard. In fact he shows that there are no chips on the Anafi camera only resistors/capacitors, therefore no option for them to embed and sort of code to lock it to the motherboard. Which is good news if you crash and bust the gimbal :slightly_smiling_face:
[2020-07-13 09:08:43]
matox89 :
Mavic Mini, Mavic 2 are problem drones. And I think that new air 2 too.
[2020-07-13 09:18:12]
buundy :
Hello Guys, I went down this road so much times, but I am now out of ideas. I have a P3P drone that has “gimbal disconnected” message, no led light on gimbal board, only shows dji logo on mobile screen. I can control the gimbal, but there is no video/photo options in the app. I connected to the board via serial interface, and it can boot successfully, but it says after booting:GetFPGAstatus err!
FPGA[1,0,1,0]-1.000000:0
hdmi status is 1
video lost
ARM Load: 0% Video fps: 0 fps Video bit rate: 0 kbps PHY Bandwidth: 0 kbps Time: 00:02:04 Resolution: 1280x720
[2020-07-13 09:18:31]
buundy :
any ideas what is wrong? I already reflashed davinci, but no luck
[2020-07-13 11:44:48]
ego-22 :
Ambarella nand I guess
[2020-07-13 14:13:27]
buundy :
but it can boot and is running!
[2020-07-14 12:13:54]
ego-22 :
But you say "no led light on gimbal board", that a sign of ambarella problem
[2020-07-14 20:14:24]
ender :
Antenna Question!
I am playing around with the thought to have a modular option to amplify the signal for my 4Hawks Raptor SR Antenna.
I have 2 small High Quality Amps in Aluminium cases.
Would it hurt the ANtenna output to the front if i directly attach them to the back of the Antenna (i marked the areas in red)?
[2020-07-14 20:15:39]
ender :
[2020-07-14 20:16:01]
ender :
Or must i avoid too much metal in those areas, do you guys know?
(It must be as close packed inside the Alientech Pro but then the Antennas might be of a different type, i do not know)
[2020-07-15 11:36:36]
fredmicrowave :
Normally this should not affect the antennas, if they are on the other side they must have a ground plane on the back, but to be sure a view from inside would help. You should also make certain that there are no active components inside ...
[2020-07-15 11:42:24]
ender :
no active stuff, just a passive non-powered Antenna
[2020-07-15 11:43:38]
ender :
Its glued so cannot be opened without good reason... The flat panel / CP Antennas i saw all had a ground plane as well, so i would hope its not affecting their function but what do i know, i am far away from beeing an Antenna expert...
Thx for the Thumbs up!
[2020-07-15 11:58:09]
fredmicrowave :
From what i can see here they look like phased patch antennas, you should be perfectly fine .
[2020-07-15 12:10:49]
ender :
great! I also assume that SR uses the same pattern as XR THANKS a load!
[2020-07-15 17:18:09]
quad808 :
@fredmicrowave Can you recommend some whip type antennas to use on RC's, 2.4G? I am curious as to what is good and what is not. There are so many "scam" type stuff out there, no way for the non-antenna types to know. I use Titan Drones whip antennas and they work fantastic, but would like to know what is also good or not. Don't know what to look for or who to trust in buying. So many claims, but without testing....what do you buy? I already have several antennas....Raptor, FPVLR "boobs", Whips. Man...I have too much shit, and too many drones....
[2020-07-15 19:38:45]
007 :
I use at ALIENTECH BOOSTER and 4Hawks XR on my p4p they both very good, with one battery I get 5.5 km (11 km)
[2020-07-15 22:35:27]
fredmicrowave :
@quad808 Sorry but I have no idea about commercial stuff. I use stock as I have never needed specially long range. I used homemade PCB patches, yagis and cloverleafs antennas when I was still building drones :face_with_rolling_eyes:
I can give you advice on antenna technologies depending on your needs though, but you are right about surreal gain claims and not tuned antennas...
At those frequencies even a plastic cap can change tuning, and I see antennas made with materials and techniques that are hardly precisely reproducible...
[2020-07-16 15:12:14]
dnacho :
Has anyone been able to revive a tb50 that has been to long in storage?
Or knows how to open them up?
[2020-07-16 18:16:49]
quad808 :
@fredmicrowave Thanks for the response. yah, I know squat about antennas.
[2020-07-16 18:20:55]
ender :
I believe there are not that huge Quality differences for "whip" aka Omni or Donut Antennas. You can mess it up if you are stupid in DIY but anything industrial there is not much to muck up. PCB Antennas and above more exotic designes are something different and need precision and even "Tuning" but Omnis...
[2020-07-16 21:40:12]
fredmicrowave :
Yes, they are not that critical, but any "whip" antenna that is longer than ~6cm @2.4ghz and claims more thant 2.14 dbi of gain means it is most probably a colinear. To work properly they must be made with (relatively) carefully matched elements.
[2020-07-17 15:02:05]
micronica :
<https://www.hirose.com/product/p/CL0662-5600-0-51?lang=en>
[2020-07-17 15:03:09]
micronica :
anyone succesfuli pared new gimbal for mavic air 2? The rirmware tools dot have commend for that or i cant see
[2020-07-17 15:03:30]
micronica :
[2020-07-17 15:15:34]
bin4ry :
you need dji service tools for that and a vpn
[2020-07-17 15:19:20]
micronica :
i only got dji firmware tools from github
[2020-07-17 15:20:17]
micronica :
for now thats only soft i use for all my calibration
[2020-07-17 15:21:14]
bin4ry :
i think for pairing you need the service tools
[2020-07-17 15:21:25]
digdat0 :
i wonder why DJI is limiting hardware like that. Was it after people started swapping M2 cameras? It seems pointless, like the Keurig cup DRM or the GE Fridge water filter with DRM
[2020-07-17 15:21:25]
micronica :
and where i get one?
[2020-07-17 15:21:48]
dnacho :
It's been since the mavic air 1 that they started doing that
[2020-07-17 15:22:01]
dnacho :
Is it giving any errors?
[2020-07-17 15:22:18]
micronica :
not strait hirizont
[2020-07-17 15:22:43]
micronica :
[2020-07-17 15:23:12]
micronica :
All motors work, camera also but even when I swap only camera to the new gimbal doesn't help
[2020-07-17 15:26:24]
bin4ry :
i am not 100% sure if only camera needs service tools and gimbal can be replaced. there are others more confident here. but what i know is that there is a special firmware for calibration you need to flash that and can then calibrate in dji fly
[2020-07-17 15:27:19]
micronica :
thats whot i looking for. For other camera/gimbal iv got solution but for now on air 2 am stuck
[2020-07-17 15:29:01]
bin4ry :
pm
[2020-07-17 15:29:04]
bin4ry :
me
[2020-07-17 16:37:52]
dnacho :
Even when you swapped just the sensor it's still the same right? And on the app it doesn't show any error?
[2020-07-17 16:54:04]
micronica :
yes even when i swap just camera sensor
[2020-07-18 22:32:01]
drlov :
What is the solution when presenting code error 3?
[2020-07-21 16:12:13]
matox89 :
Have anyone changed inspire 1 x3 camera to x5 camera?
[2020-07-21 16:55:25]
matox89 :
I got same error than this <https://www.youtube.com/watch?v=KZAV6Jy1J7w&feature=emb_title>
[2020-07-21 19:57:00]
pingspike :
@matti.miettinen1 I've got the X3, Z3 and X5, no issues swapping any of them at any time
[2020-07-21 19:58:41]
pingspike :
damaged pins on the gimbal connector? (or the socket, in the inspire?)
[2020-07-22 16:12:25]
matox89 :
I think it is ribbon cable broken from x5 cam
[2020-08-03 13:52:15]
micronica :
ph4 standard this error, what does it mean
[2020-08-03 13:52:16]
micronica :
[2020-08-03 13:53:49]
micronica :
only thing i change wass complete shell and landing gear, yaw arm on gimbal and right ESC from phantom 4 pro
[2020-08-03 16:55:41]
martinbogo :
Bad sensor
[2020-08-03 18:38:00]
buundy :
Yeah, but which one? :)
[2020-08-04 07:41:57]
micronica :
bottom one
[2020-08-04 08:03:38]
micronica :
now sensor works, all board works on another ph4 and still topology error
[2020-08-11 09:50:33]
micronica :
ok, so now i have m2p the voltage on battery drop from 90 to 20% without a reason on new and used battery
[2020-08-12 19:17:57]
bobdole :
that happens when you _*FiRE THE LASER*_
[2020-08-13 18:48:58]
pratik1 :
HOW TO CALIBRATE MAVIC FCKING MINI GIMBAL. It says DUT device is not recognised. I AM GOING MAD
[2020-08-24 11:22:42]
micronica :
did you replace motor or camera also?
[2020-08-24 11:37:10]
micronica :
anyone have a way do calibrate gimbal motor on air 2? camera stay from original gimbal only motor
[2020-08-25 09:42:13]
mefisto :
Tried comm_og_service_tool.py? It worked with M2 and Mini, so likely to work with MA2 as well.
[2020-08-28 17:15:29]
matox89 :
have anyone idea how dell flightlogs Phantom 3
[2020-08-28 17:15:43]
matox89 :
*phantom 4 from imu microsd?
[2020-08-28 21:21:28]
mefisto :
There is a duml command to format sd card. Can't remember any details. Try looking into dissectors.
[2020-08-30 17:41:05]
loaderbull :
All, crashed my MA2. The gimbal has broken, what are my options? Replace camera assembly as straight forward as i would like to hope or will it need professional installation/calibration?
[2020-08-30 17:41:20]
loaderbull :
[2020-08-30 17:43:26]
loaderbull :
Looks like a wire is overstretched so assuming no continuity. Camera display is fine. No up/down movement on gimbal. I have put it all together as it still all slots in together fine. But there is a piece of plastic missing as shown in pic 1. What are my options guys? Is this a send to DJi for repair or is anyone capable here? Any help appreciated, im in the UK. Cheers :neutral_face:
[2020-08-30 18:22:28]
buundy :
I think you can only buy full gimbal-camera from aliexpress
[2020-08-30 18:22:46]
buundy :
It probably needs calibration with mefisto's tools
[2020-08-30 18:23:15]
buundy :
But probably it will display some random error, but should work fine
[2020-08-30 18:23:26]
buundy :
I have not tried it yet
[2020-08-30 18:23:51]
loaderbull :
Ok cheers, will wait and see of anyone else chimes in too. Thanks
[2020-09-01 14:55:10]
micronica :
air 2 doesnt work on mefisto tools sadly
[2020-09-01 14:57:04]
loaderbull :
So is it a case of sending it to DJi?
[2020-09-04 08:39:02]
fabian.briese :
Hello, I repaired the mavic air 2 gimbal. After this I calibrated the gimbal via the python comm_og_service_tool tool. Everything was fine... but now I get an "Gimbal calibration error" message. I tried the same with a brand new mavic mini.... same problem. Calibration error. Any ideas?
[2020-09-04 15:19:18]
poopnondji :
@fabian.briese try running the calibration app in assistant for mavic
[2020-09-04 15:45:02]
fabian.briese :
@vdub804 But this is for vision system right? Not for gimbal problems...
[2020-09-04 15:55:36]
loaderbull :
My bird is off to DJi. As far as i can tell it requires them for cam/gimbal replacement on Mavic Air 2. Anything else and it will throw up errors? I may be wrong but i bit the bullet.
[2020-09-05 19:23:12]
nettunoroberto :
Hi friend, you have news for reset error code 03 after replace camera sensor of MA1?
[2020-09-10 10:59:33]
micronica :
Any one ever have a problem MA1 that when i connect to PC for update i see in device menager DJI virtual COM but assistant or dumbledore doesnt see the mavic? led on back is green then yellow then red so self diagnostic but never finish
[2020-09-10 15:00:33]
oakley75 :
Bad flash it seems. Maybe try delete the com connection in device mgr and try again? Desperate times...
[2020-09-10 15:08:48]
bin4ry :
@islonina try to let it sit for a few hours, maybe a full battery., sometimes recovery mode kicks in and fixes it
[2020-09-10 15:09:00]
bin4ry :
but i am not sure for ma1 if it can do that, but it is worth a try
[2020-09-10 15:17:17]
micronica :
Already try this on 3 battery until it's empty
[2020-09-10 15:19:35]
bin4ry :
then i think it is a bad flash :disappointed: you would need to open it and reflash the chip with a proper dump
[2020-09-11 23:33:49]
kketija :
comm_og_service_tool does work on the Air 2
[2020-09-11 23:35:34]
kketija :
you need dji tool and vpn access to remove this notification. there might be other ways
[2020-09-12 08:39:07]
carlcox89 :
Hello all, any way to bypass dji fpv goggles or caddx vista activation?
[2020-09-12 08:40:39]
carlcox89 :
Do Offline activation i mean
[2020-09-12 11:33:22]
buundy :
Why would you want that? I am just curious, as I also have these.
[2020-09-16 09:02:05]
nagybm :
Hi All, I have an MP1 RC (GL200a) that was bricked during a firmware update. All that works is the backlight and my pc can recognize something is connected when I plug it in. Does anyone have any tips/tricks? (I hear it runs Android. Is it possible to boot into recovery mode?)
[2020-09-16 11:49:44]
ben_lin :
Attention to SuperPatcher users: if you do everything right up to the step where you pick the bin file from SP's sub-directory for DUMLdore to flash in the mods, and see an empty folder, then it is likely that those files were never successfully fetched in the first place due to network issues
[2020-09-16 11:50:07]
ben_lin :
AKA the fuking CCP firewall
[2020-09-16 11:50:33]
ben_lin :
if you cant freely navigate this site <https://github.com/brett8883/Super-Firmware_Cache>
[2020-09-16 11:50:49]
ben_lin :
then your superpatcher is not gonna work
[2020-09-16 11:51:02]
ben_lin :
put on a VPN and grab the files manually
[2020-09-16 11:51:19]
ben_lin :
oh wrong channel ffs
[2020-09-16 16:03:11]
micronica :
Anyone have schematic for dji spark or know why when I replace front sensor 3d I got esc error(check on 3 different module? When I disconnect sensor I don't get esc error
[2020-09-17 06:30:47]
claudiu.clement :
Hello, an electrical schematic diagram for Phantom 3 St are available somewere?
[2020-09-17 09:49:59]
mefisto :
All we have is on the github wiki:
<https://github.com/o-gs/dji-firmware-tools/wiki>
[2020-09-17 10:48:39]
micronica :
on github i know abaut them but maybe someone have one :smile:
[2020-09-17 11:00:19]
webhdx :
Let's hope it will "fall from the truck" one day :slightly_smiling_face:
[2020-09-17 11:31:18]
claudiu.clement :
Thank you for this link but here is not electrical schematic for Phantom 3 ST
[2020-09-18 17:29:09]
micronica :
Ok next problem. Sometimes mavic 2 pro dont see battery level or even read serial number and cycle count
[2020-09-18 18:39:16]
buundy :
Connector pins clean?
[2020-09-18 19:42:31]
webhdx :
Yeah sounds like bad joint on battery connector or ESC-Core board flex cable.
[2020-09-19 13:19:00]
micronica :
all clean and check on microscope
[2020-09-22 09:37:53]
buundy :
I have a Mavic Air (1) and it has IMU error. In the sensors viewer screen it says all of the gyro and all acc is “Disconnected”. I put in another module, and it is the same. I see no damage on the board. Any idea?
[2020-09-22 09:39:41]
buundy :
no water damage
[2020-09-22 09:39:46]
buundy :
no phisical damage
[2020-09-22 09:41:24]
buundy :
also tried refreshing the fw
[2020-09-22 09:43:09]
buundy :
seems the connector was dirty… as it works now after a cleaning
[2020-09-22 09:43:16]
buundy :
i swear it was clean…
[2020-09-24 08:08:12]
buundy :
does anyone know the exact type of the blue thermal paste in drones’ logic boards? I find it is better than the oldar, gray one as the gray tends to dry out after a few years, but the blue one doesn’t dry out.
[2020-09-24 13:18:18]
matox89 :
I`m not sure but I searched this and thik it would be Fujipoly thermal paste SPG-50A
[2020-09-24 16:51:35]
buundy :
Thanks, I will take a look!
[2020-09-25 09:03:19]
matox89 :
It is littlebit hard to get, I askes that price is 30ml / 50€
[2020-09-25 09:03:24]
matox89 :
*asked
[2020-09-27 04:16:15]
oakley75 :
Anyone know what would cause all 4 esc errors as well as rear vision sensor errors, all at the same time, on a P4Pv2.0? Way too coincidental to be actual bad hardware. It wasv involved in a crash I'm told.
[2020-09-27 05:54:30]
buundy :
Maybe some of the small flex cables feom the FC to the Escs or the 3in1 board?
[2020-09-27 13:33:20]
oakley75 :
Thanks. I haven't got to see it yet but loose cables makes allot of sense. Last phantom I opened was a P2 lol, do you mean the connections to the 3in1 or can the 3in1 board get broken easily during a crash? Can't find much on the error code a000c0
[2020-09-27 16:21:57]
micronica :
i use pasta hp from termopasty in Poland or pasta h from termopasty
[2020-10-01 19:41:03]
micronica :
anyone found solution to mavic mini downward sensor error, camera is easy to change and ir diode but sensor reciving signal are hard to find and easy to damage during removal
[2020-10-02 10:24:38]
micronica :
thats on 3 mainboard already, 3 hard crashed drone from client
[2020-10-02 14:55:51]
buundy :
Have not occured to my repairs yet
[2020-10-03 10:20:40]
kketija :
Mavic Mini Vision Sensor error 180031 & Downward vision sensor error 180016 is normally due to damaged video cable.
[2020-10-07 20:53:12]
htcohio :
Hey, quick question is this the IMX377 sensor as far as you know?
Also, I assume the MP66 sensor is the IMU? Would That be comparable to an MP6500 or MP6050?
Im looking to adapt the existing wiring to a raspberry pi camera and, storm 32 gimbal controller. Unless you think I could access a factory Mavic pro gimbal controller and somehow use it connected to a pixhawk? I don't actually own the drone I just bought a couple of the aftermarket gimbals
[2020-10-12 18:34:11]
dnacho :
Anyone know from where does the navigation system error on a mavic mini come?
[2020-10-12 19:16:46]
dnacho :
It's error 30105,ive never seen that error before
[2020-10-12 20:50:57]
dnacho :
Also any way to fix the gimbal imu data error. Error code 40021
[2020-10-13 07:25:31]
buundy :
I think it is ribbon cable
[2020-10-13 07:25:51]
buundy :
Which connects to gps+imu, compass and gimbal
[2020-10-13 07:26:02]
buundy :
Or it is Gps module problem
[2020-10-14 14:43:36]
buundy :
Anyone have idea why a P3P doesn’t have GPS signal? The bars are all grey, no satellites. App also says “Satellite positioning off. Fly with caution.”
[2020-10-14 14:43:48]
buundy :
I replaced the gps module, did not solved the problem.
[2020-10-14 14:44:00]
buundy :
Also tried FW update, succeeded, but no GPS.
[2020-10-14 16:57:43]
buundy :
Visually it seems to be okay
[2020-10-14 17:04:00]
fun.day.cool :
I would guess it is the motherboard then
[2020-10-15 01:51:00]
dnacho :
It's just that I swapped the main board and it started showing that
[2020-10-15 01:51:28]
dnacho :
Any way to be 100% certain
[2020-10-15 16:21:26]
buundy :
I resoldered the FC's 40 "legs" and not it says GPS Not connected. I traces the rx and tx lines to the fc and they seem good. Maybe I resolder the whole fc again.
[2020-10-15 21:47:16]
fun.day.cool :
Well the last option is a software issue because we can safely rule out hardware. Maybe we should flash the software. Re-soldering might be the solution as well.
[2020-10-16 18:51:02]
fun.day.cool :
Here you can see a properly calibrated gps software (MA2)
[2020-10-17 05:19:34]
claudiu.clement :
Hi,
Regarding P3S, somebody knows details about flashing the FC with J-link?
I need m0305, m0306 unencrypted file and the range address for each. This link do not contain all information that need for SWD flashing procedure: <https://github.com/o-gs/dji-firmware-tools/wiki/Firmware-m0305>.
Thank you!
[2020-10-17 05:57:16]
claudiu.clement :
I will try to apply this information: The bootloader resides in Sector 0 of the main memory block in flash (0x0800 0000 - 0x0800 3FFF), while the main application should reside in sector 2 (starting address 0x0800 8000). I need the loader and the application files m0305 / m0306...
[2020-10-18 16:18:53]
digdat0 :
Did you check dankdownloader? Whats j-link? Why not use the current python tools?
[2020-10-19 06:16:55]
claudiu.clement :
Hello,
J-link is JTAG/SWD Debug and programmer from Segger. (Similar with St-link).
I connect these pins to J-link: SWDIO, SWCLK, Boot0 to 3v3, VCC and GND.
To flash the FC controller STM32F427, I need:
- the bootloder (m0305) and the application (m0306) files. OK, at this point I will try to use dji-firmware-tools-master by mefistotelis. I hope to can extract and split the files.
- The big problem is here: the memory location and start address for the each files (m0305 and m0306).
Update!
To avoid on te future my hardwork, on this project:
M0305 is not the bootloader. No bootloader for the FC in the update official .bin.
[2020-10-19 11:42:14]
micronica :
mp2, gimbal doesnt move, control board on the gimbal already replace, image/motor cable replace. I see on dji go4 serial number of the camera but still doesnt move. All flex from motor perfect condition
[2020-10-19 13:22:44]
buundy :
i have hard times with m2p gimbals
[2020-10-19 13:22:54]
buundy :
still not tried again
[2020-10-20 06:55:16]
asdrubale :
Sorry but these, for my understanding form old DJI FC WKM or WKM H , ACE one , are not gps parameter to calibrate , but are the position of gps 1 and 2 vs. center of gravity CG. and you can found the same for IMU , You must to change them if you move CG adding something to drone in term of weight like ex a second battery , but no people use them
[2020-10-20 07:37:47]
asdrubale :
I need to apologize the coordinate of GPS position are other parameter , so i don't know , what is making antenna_gps_x or y or z
[2020-10-20 20:41:15]
whitey12884 :
The main board and gps is tied together.. they have to be from same mini
[2020-10-28 15:56:17]
buundy :
My Mavic Mini reincarnation as a Micro Long Range machine is in progress
[2020-10-28 16:36:06]
buundy :
if someone is interested, I can share details of the frame
[2020-10-28 18:24:05]
markusfriedl :
@buundy nice one.. i freed mavic mini from dji software and gave it a betaflight fc
[2020-10-28 19:16:43]
buundy :
How much can you stay in the air? Where is the fpv cam?
[2020-10-28 20:06:43]
pingspike :
these are kickass mods :+1::skin-tone-2:
[2020-10-28 20:10:04]
trulala69 :
Yes, please ...
[2020-10-28 21:36:16]
markusfriedl :
Will test max flight time after applying 3000mah lion battery. Fpv cam will be added after these tests :) Total weight iat at the moment 200g with battery.
[2020-10-28 21:45:18]
buundy :
2s/3s?
[2020-10-28 21:58:09]
markusfriedl :
2s.. at least for the start
[2020-10-29 19:16:48]
dnacho :
Anyone seen this error?
[2020-10-29 19:16:54]
dnacho :
[2020-10-29 20:18:24]
mefisto :
Check connectivity on the UART line between FC and ESC MCU. Also check DAT logs to know which ESC.
[2020-10-30 06:43:05]
buundy :
What annoys me with the new Fly app is that it doesn't describe errors well. "Navigation system error" or "Power systerm error" is too generic, and it makes diagnostics harder.
[2020-10-31 03:57:57]
dnacho :
So it seems to be the same error the m2 had where it just "burned" battery's. As I downgraded the firmware and tried another battery and it doesn't give the error anymore but if I install one of the burned battery's it does show it @mefisto
On the m2 it was fixed on the 510 update
[2020-10-31 08:09:48]
mefisto :
ok, so the message wasn't even remotely related to the real issue. Good to know.
[2020-10-31 12:49:50]
buundy :
Has anyone flashed a MP battery with the TI EV2300 tool?
[2020-10-31 16:11:24]
pawelsky :
@buundy I didn't "flash it", but I did modify its parameters and e.g. clear the PF flags.
[2020-10-31 16:24:15]
buundy :
Wow, any tips appreciated. Do you have some short description? Sw used? Etc
[2020-11-02 14:22:17]
pawelsky :
@buundy I've used TI's bq Evaluation Software (google for bqEVSWSetup00.09.92_bq30z55v0.36R3c.exe, as this is as far as I remember the one supporting Mavic's battery bq30z55 firmware version). To make things easier you could also purchase the license for UBRT-2300
[2020-11-02 14:28:45]
pawelsky :
You'll also find a lot of useful information in [this guy's](https://www.youtube.com/user/mihaigsm2003/videos) videos.
[2020-11-02 19:18:16]
buundy :
Thank you! I will take a look at it!
[2020-11-03 12:42:44]
buundy :
@pawelsky Are the communication lines exposed on the Mavic Pro battery? I measured the side donnectors and they seem to be 3.3V serial, but I am not sure. Did you opened your battery?
[2020-11-03 13:13:19]
buundy :
maybe it is for drone system communication
[2020-11-03 13:13:42]
buundy :
I opened it up and soldered to sda and scl
[2020-11-03 13:45:00]
webhdx :
it's smbus
[2020-11-03 13:45:10]
webhdx :
you don't need any fancy equipment to talk to the batteries
[2020-11-03 13:45:27]
webhdx :
but it will be required if you want to use particular software
[2020-11-03 13:45:49]
buundy :
have you removed PF flag from battery via SMBUS?
[2020-11-03 13:46:20]
buundy :
i have some time to test some bad batteries and i want to dig deeper
[2020-11-03 13:52:37]
buundy :
I want to talk to bq30z55 battery management IC
[2020-11-03 14:15:31]
buundy :
Tried with the TI software, but it doesnt recognize the battery. Can you post some photos of your config?
[2020-11-03 14:15:36]
buundy :
the EV2300 is installed
[2020-11-03 14:43:46]
dnacho :
Anyone knows how to remove this error it's a mavic air 2
[2020-11-03 14:43:52]
dnacho :
[2020-11-03 15:11:29]
buundy :
probably with calibration? mefisto’s tools works and calibrates, but I don’t think it will remove the error
[2020-11-03 15:11:50]
buundy :
have you replaced the gimbal?
[2020-11-03 15:14:42]
bin4ry :
you really need to flash a software first to save the calibration data
[2020-11-03 15:14:57]
bin4ry :
for the mm and ma2 it is
[2020-11-03 15:15:18]
bin4ry :
only after that you can do the calibration and it saves it. without the "special" firmware it won't save thus the error won't go away
[2020-11-03 15:32:40]
buundy :
@pawelsky Can you show me the right direction? Your Ti software doesn’t recognize the Mavic Pro ’s battery at all. Can you help a bit?
[2020-11-03 15:33:43]
buundy :
[2020-11-03 15:51:08]
mingtao :
Look ilat ic and solder directly to BQ
[2020-11-03 15:51:34]
buundy :
sorry what?
[2020-11-03 15:51:53]
mingtao :
Look to ic ))
[2020-11-03 15:52:02]
mingtao :
Bq30z55
[2020-11-03 15:52:26]
buundy :
so I have to solder the IC’s legs directly to EV2300?
[2020-11-03 15:52:30]
mingtao :
Pcb as i remember have wrong marks
[2020-11-03 15:52:37]
mingtao :
Yes
[2020-11-03 15:52:37]
buundy :
LOL :slightly_smiling_face:
[2020-11-03 15:53:04]
buundy :
do you know which legs exactly? BTW do you work with ubrt or with other tool?
[2020-11-03 15:53:15]
mingtao :
Pad 13 and 15
[2020-11-03 15:53:23]
mingtao :
Open datasheet
[2020-11-03 15:53:29]
buundy :
okay, I will try
[2020-11-03 15:53:35]
mingtao :
I work with ubrt
[2020-11-03 15:54:20]
mingtao :
License cost 150$ per year
[2020-11-03 15:55:13]
buundy :
for dji battery I have read it is 200USD
[2020-11-03 16:19:38]
buundy :
Some progress
[2020-11-03 16:19:50]
buundy :
[2020-11-03 16:25:25]
buundy :
[2020-11-03 18:06:43]
buundy :
I have to figure out what does those flags mean
[2020-11-03 18:06:54]
buundy :
And how to delete them maybe
[2020-11-03 18:07:26]
buundy :
If anyone used the TI bq Evaluation Software before please tell me tips
[2020-11-03 19:42:42]
mingtao :
you meed Unseal password and for sometime Full Access password
[2020-11-03 19:43:16]
mingtao :
then you can chenage and parameters and cycle count and etc
[2020-11-03 20:54:17]
mefisto :
The unseal key is 128 bit. If it's not one of the defaults (ie. 0-f and then f-0), figuring it out would require some serious tinkering. Brute forcing it without any additional knowledge would take years.
[2020-11-03 22:17:51]
jcase :
0123456789ABCDEF
[2020-11-04 02:50:50]
fredmicrowave :
@buundy you may find this video useful. (Specially if you understand Russian and if the chip your on is the BQ30Z55 )
There is a key too.
<https://www.youtube.com/watch?v=4Cv6bIeaS7g>
[2020-11-04 07:29:44]
buundy :
Thanks for the answers
[2020-11-04 07:32:05]
buundy :
The problem with those videos is that they use the ubrt app which is 200eur. The free version doesnt understand bq30z55 batteries. And just for exploration and tinkering it is a high price. If I had lots of batteries then it would be a good solution business-wise, but for now, I want to stick to the option @pawelsky suggested
[2020-11-04 09:12:41]
buundy :
now some new info
[2020-11-04 09:13:00]
buundy :
I somehow unsealed the battery with the bq EVSW
[2020-11-04 09:13:36]
buundy :
but I cannot send SMBus write command via the software, because the firmware version doesn’t exactly match with the battery.
[2020-11-04 09:14:09]
buundy :
the BQ EVSW has firmware support up to bq30z55 v0.32 but the battery reports that it is v0.36
[2020-11-04 09:14:36]
buundy :
WHen I tried to get the v0.36 fw i couldn’t find it anywhere because it is not available publicly
[2020-11-04 09:14:42]
buundy :
anyone has it maybe? :smile:
[2020-11-04 09:15:57]
buundy :
[2020-11-04 09:56:04]
buundy :
I managed to read some parameters with the BQ EVSW tool following this reference: <https://www.ti.com/lit/ug/sluua79/sluua79.pdf?ts=1604412853586&ref_url=https%253A%252F%252Fwww.ti.com%252Fproduct%252FBQ30Z554-R1>
[2020-11-04 09:58:16]
buundy :
for example if I read 0x20 Block it will get the answer: 41 54 4c 20 20 4e 56 54 which translates to ATL NVT which is the manufacturer of the cells
[2020-11-04 09:58:49]
buundy :
now I have to figure out how to not just read, but write specific blocks in the battery firmware
[2020-11-04 09:59:02]
buundy :
somehow it is in full access… so that shouldn’t nbe the problem
[2020-11-04 09:59:59]
buundy :
Mavic Pro Battery unseal key is 0123456789ABCDEFFEDCBA9876543210
[2020-11-04 10:02:41]
buundy :
PFStatus() would be the 0x53 Block which reads 05 00 00 00
[2020-11-04 10:04:56]
buundy :
if I am correct then this means in binary 101000000000000000000000000
[2020-11-04 10:06:09]
buundy :
but there should be 32 bits (correct me if I am wrong, I am way no expert)
[2020-11-04 10:22:56]
buundy :
when I try to write anything with the program it says “SMB Write Block Error, Error code: SMB terminated: VB_T2H_UNKNOWN”
[2020-11-04 10:27:30]
buundy :
it was an unwriteable block, now I see :slightly_smiling_face:
[2020-11-04 10:41:17]
buundy :
I am not sure if it is unsealed… the BQ EVSW says it is, but somehow it doesnt semm to be
[2020-11-04 11:32:08]
buundy :
Finally it works :slightly_smiling_face:
[2020-11-04 11:32:22]
buundy :
sent the 00 29 command to 00
[2020-11-04 11:32:27]
buundy :
it reseted the PF flag
[2020-11-04 11:36:06]
buundy :
also cleared the XDSG and XCHG flags which disallowed charging and discharging
[2020-11-04 11:42:55]
buundy :
now I try to dig deeper
[2020-11-04 11:43:28]
buundy :
[2020-11-04 11:43:31]
buundy :
Charging
[2020-11-04 12:04:01]
buundy :
some errors again
[2020-11-04 12:04:09]
buundy :
seems the cells cannot be balanced
[2020-11-04 12:24:23]
buundy :
the problem with this type of solution is that basically you have to destroy your battery to access the SMBus pins inside the battery. Does anyone know if there is a way to communicate with the TI BQ30z55 ic via the serial interface that is available on the outside pins of the battery?
[2020-11-04 12:26:13]
jcase :
where are the pins located? can you precision drill out access to them in a way that doesnt ocmpletely destroy them
[2020-11-04 12:26:17]
jcase :
ive done that on other devices
[2020-11-04 13:49:10]
webhdx :
If I'm not mistaken core board is also using SMBus to communicate with the battery. Are you sure you can't connect ev2300 via battery connector?
[2020-11-04 13:50:30]
webhdx :
BTW. @buundy any chance you can also check what is possible with Mavic Air batteries? Not gonna shell out 100$ if it not gonna work :smile:
[2020-11-04 13:52:02]
webhdx :
These are waiting for some love :)
[2020-11-04 14:04:13]
buundy :
I have no MA battery at hand now :disappointed:
[2020-11-04 14:43:14]
jcase :
what are yo utrying to do wit hMA batteries? ive got a stack
[2020-11-04 16:27:24]
mingtao :
I think PF reset
[2020-11-04 18:19:25]
micronica :
anyone found a way to downgrad 01.00.0620 on mavic air aircraft? Without it after gimbal change(and put original camera) no movment only video
[2020-11-04 19:54:22]
fun.day.cool :
You can use [drone-hacks.com](http://drone-hacks.com)
[2020-11-05 00:49:02]
pawelsky :
> When I tried to get the v0.36 fw i couldn't find it anywhere because it is not available publicly
@buundy It is available - just google the exact name I've given you earlier.
[2020-11-05 00:49:42]
pawelsky :
> Are you sure you can't connect ev2300 via battery connector?
@maciej.cezary.kobus For MP you can't.
[2020-11-05 09:12:31]
micronica :
I know that but no my client pay me 50€ for repair for mister of them an now another 35 co no go
[2020-11-05 10:21:48]
buundy :
@pawelsky WOW, I missed the end of the file name and google gave me different results the first time. Now I could download the one you mentioned
[2020-11-05 10:35:48]
the_lord :
@buundy is it possible to change the battery capacity ?
[2020-11-05 11:18:42]
buundy :
Physically by rebuilding it with other cells? Probably possible I think
[2020-11-05 15:06:36]
the_lord :
I mean can you change it in BMS so it will calculate based on new capacity?
[2020-11-05 15:29:44]
buundy :
I think it is possible but needs deep knowledge of parameters, calibration, etc, because there is 100-200 parameters that can be set
[2020-11-05 15:30:30]
buundy :
I can show you what have I done till today, so you can go on and maybe build an “official” higher capacity battery :slightly_smiling_face:
[2020-11-05 15:31:40]
buundy :
I think I will leave the MP battery project for a rest, because I have lots of other repair work to do, and repairing a MP battery doesn’t worth it IMO (no clean disassembly possible)
[2020-11-05 15:32:56]
buundy :
but foy diy reasons, maybe for building a new batt, it would be a fun project
[2020-11-05 17:01:42]
mefisto :
@the_lord In "Data Flash" -> "Gas Gauging" you can set factory capacity (Qmax) of each cell.
[2020-11-05 17:04:39]
mefisto :
Yes. Unseal, then you can edit. There are hundereds of params to set - alarm levels, reserves, various voltages and currents. So if you like tinkering, you'll be in heaven.
[2020-11-05 17:05:19]
the_lord :
Thanks
[2020-11-05 18:03:05]
webhdx :
In heaven? When the battery explodes? :joy:
[2020-11-05 20:32:05]
buundy :
Custom designed and 3D printed mount for installing the new, bigger battery is also an option later :)
[2020-11-05 20:32:57]
buundy :
Shouldnt you do a full calibration cycle on the new battery? And maybe also chemistry programming? @mefisto
[2020-11-05 21:58:20]
mefisto :
No idea, I never did such things in drone batteries. When I'm building myself a power bank, I'm only making sure the crontroller knows whether the cells are li-po or li-ion. Then the controller computes everything else it needs automatically during normal charging and discharging.
[2020-11-06 19:29:35]
micronica :
Please send me the stl or dxf. A have planty od motors so it's perfect fit
[2020-11-06 19:59:31]
micronica :
And please tell me this motor can run 3s battery not only 2
[2020-11-06 22:39:01]
fun.day.cool :
How do I calibrate the ma2 motors? Ever since I crashed mine its been slightly misaligned and the drone moves slightly to the right (its not the compass or imu I already calibrated it)
[2020-11-07 20:54:17]
micronica :
Thx for that. On 3s o don't see a problem so far on a branch it's fettec 35a and iflight kiss fc on 3s 18650 pack
[2020-11-08 03:33:52]
kketija :
vision sensor calibration will help ( downward sensor)
[2020-11-08 18:48:11]
buundy :
[2020-11-08 18:48:26]
buundy :
I have not tried milling them, but I will try it in the next week
[2020-11-08 18:48:35]
buundy :
I also send the STL
[2020-11-08 18:50:31]
buundy :
If you want to modify it, I upload the f3d archive also
[2020-11-08 18:50:38]
buundy :
[2020-11-08 18:51:32]
buundy :
rest of the files can be downloaded here: <https://www.thingiverse.com/thing:4054381>
[2020-11-09 14:56:00]
fredmicrowave :
For those looking for an alternative for the grey compound used in DJI drone to fix cables and connectors, the Soudal T-rex Power in grey is very similar and good.
[2020-11-09 16:15:54]
buundy :
The original is ThreeBond TB1530
[2020-11-09 16:16:08]
buundy :
Available in clear, black, gray and white
[2020-11-09 19:48:19]
drlov :
Where do I find it for purchase?
[2020-11-09 19:51:42]
buundy :
I dont know, in Hungary I found a distributor who sold it :) maybe ebay?
[2020-11-09 20:21:26]
drlov :
Don't you have this seller's link? I'll look on Ebay too
[2020-11-09 21:26:17]
buundy :
<https://threebond-europe.com/contact/threebond-europe-offices/>
[2020-11-09 21:27:03]
buundy :
<https://threebond-europe.com/contact/distributors/>
[2020-11-12 09:02:16]
micronica :
i use black and white 704
[2020-11-12 09:03:39]
micronica :
Thx for that :smile:
[2020-11-12 14:41:18]
buundy :
Let me know if you build it! I am planning to share my design on thingiverse/youmagine and you could upload a make :)
[2020-11-20 10:26:30]
buundy :
Anyone knows the exact part number of this 5D switch used on the MP, M2 remotes?
[2020-11-20 10:26:47]
buundy :
It usually breaks when disassembling
[2020-11-20 10:27:13]
buundy :
[2020-11-20 10:53:58]
buundy :
Also the usb connector seems proprietary and I could find it anywhere
[2020-11-20 10:54:29]
buundy :
[2020-11-20 10:54:51]
buundy :
It breaks easily and I need replacement parts
[2020-11-20 11:05:25]
buundy :
maybe @mingtao knows the exact part number?
[2020-11-20 11:05:36]
mingtao :
i just use glue
[2020-11-20 11:07:37]
buundy :
:smile:
[2020-11-20 11:07:43]
buundy :
for the broken USB?
[2020-11-20 11:08:38]
buundy :
also the 5D button cant be glued as it moves in more axis
[2020-11-20 11:15:55]
mingtao :
i mean for 5d )
[2020-11-20 11:17:35]
mingtao :
<https://www.google.com/url?sa=i&url=https%3A%2F%2Fwww.gmelectronic.com%2Fusb-connector-esb227110100z&psig=AOvVaw2keAJfG3DWeSNPCluvqgNr&ust=1605957437021000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCPiIo-f_kO0CFQAAAAAdAAAAABAD>
[2020-11-20 11:17:37]
buundy :
:slightly_smiling_face:
[2020-11-20 11:18:00]
buundy :
it is not the same, right?
[2020-11-20 12:53:45]
mingtao :
Just search micro-a usb socket .. but partern my differ
[2020-11-20 16:45:42]
buundy :
Yes, I have one that I can solder in, but it would be nice to have the exact type
[2020-11-20 16:45:57]
buundy :
Do you thint these are manufactured by dji?
[2020-11-20 17:08:06]
fbi.airfield51 :
[https://www.digikey.com/en/products/detail/molex/0475900001/1832256](https://www.digikey.com/en/products/detail/molex/0475900001/1832256)
[2020-11-20 17:08:56]
fbi.airfield51 :
Was a recommended one on mavicpilots
[2020-11-20 19:00:19]
pawelsky :
> Just search micro-a usb socket .. but partern my differ
It is actually the micro-AB type socket (i.e. it accepts both micro-A and micro-B plugs)
[2020-11-20 19:40:21]
buundy :
Yes, I learned that :)
[2020-11-20 19:52:05]
micronica :
anyone have god source for microsub type ab port for mavic controller?
[2020-11-20 20:16:22]
buundy :
We were talking about it just yet :)
[2020-11-20 20:16:35]
micronica :
already fount thx to Robert
[2020-11-20 20:27:31]
micronica :
already send to carbon cut
[2020-11-23 10:17:00]
buundy :
[2020-11-23 10:17:14]
buundy :
If anyone need this, M2P gimbal cable pinout
[2020-11-23 10:17:30]
buundy :
I measured the lines, hopefully correct
[2020-11-23 12:31:15]
mingtao :
[2020-11-23 17:59:03]
buundy :
Nice!
[2020-11-23 19:42:20]
mefisto :
I have that image since May, but I somehow didn't wrote who made it. @mingtao is it yours?
[2020-11-23 19:44:39]
mingtao :
yes
[2020-11-23 19:47:17]
mingtao :
dji x7 part 2
[2020-11-23 19:47:33]
mingtao :
dji x7 part 1
[2020-11-23 19:47:50]
mingtao :
dji x5 part1
[2020-11-23 19:48:06]
mingtao :
dji x5 part 2
[2020-11-23 20:21:40]
mefisto :
nice! thanks!
I'm keeping track to copyrights, to make sure I know who to ask for permission in case I want to publish stuff.
[2020-11-24 07:49:26]
mingtao :
Use it as you whant
[2020-11-24 07:56:13]
mingtao :
Anyone have mipi logic anylyzer or scanner?
[2020-11-24 07:56:47]
mingtao :
Whant to find . Pinout for mipi interface of IMX sensor
[2020-11-24 08:01:43]
buundy :
@mingtao you make these pinouts for diagnostics?
[2020-11-24 08:01:55]
buundy :
Or when do you use them?
[2020-11-24 08:02:05]
buundy :
I made mine to check a cable
[2020-11-24 08:02:34]
buundy :
And it turned out to be good, and the top gimbal board seems to be dead.
[2020-11-24 08:04:23]
mingtao :
Not all pinouts have
[2020-11-24 08:06:15]
mingtao :
[2020-11-25 08:17:38]
micronica :
This doesn't fit, the anker points doesn't aligned with the hole on the board
[2020-11-25 08:18:01]
micronica :
[2020-11-25 10:46:41]
micronica :
u use mavic mini motor, f405 matek stack mk2, crossfire nano. vtx pro32 nano and 4s 18650 battery, camera runcam split 3 or cadax ant
[2020-11-25 11:22:39]
micronica :
its wrong type, already bought, anker pint doesnt match and inside its inverted
[2020-11-25 13:18:18]
micronica :
any solution to replacing mavic mini IMU/GPS board?
[2020-11-25 13:24:58]
micronica :
already try resoldering with original one to doner board
[2020-11-25 15:36:00]
mingtao :
Mavic mini have encrypted firmware .. so if you change it. It will mot work
[2020-11-25 16:14:24]
micronica :
i replace board imu because fisical damage on the cordner, so i theory when i replace imu board in place client imu from original board it shoud work
[2020-11-25 18:47:51]
mefisto :
Yes, there's no programming in MP65, so replacing it should make it work, just causing "imu calibration error" until you calibrate.
That's the same Invensense MPU-6500 chip used since Ph3:
<https://github.com/o-gs/dji-firmware-tools/wiki/P3-Flight-Controller-aka-MC#parts>
[2020-11-25 19:27:48]
buundy :
I will use mamba f411, crossfire, vista and maybe naked gopro
[2020-11-25 20:07:03]
yzayn.yz :
does any of you know how i can change the serial number of a drone?
[2020-11-25 20:27:11]
martinbogo :
yes I do, and no I won't tell you :slightly_smiling_face:
[2020-11-25 20:27:46]
martinbogo :
Not because I'm mean or anything -- but because the procedure to do so would require me to give away an exploit that we don't want to lose.
[2020-11-25 20:27:59]
martinbogo :
"a drone" depends on the model you have of course.
[2020-11-25 20:28:12]
martinbogo :
It's trivial on a Phantom, Matrice, or Inspire.
[2020-11-25 20:28:22]
martinbogo :
Less so on the newer DJI drones
[2020-11-25 20:28:36]
martinbogo :
and if you're not talking DJI, you need to be on another Discord/Slack server
[2020-11-25 20:58:36]
yzayn.yz :
it's OK
I read commands in an exploit.
A command says "Set Serial Number", I want to try it, but I'm afraid that it will damage the drone
[2020-11-26 05:07:47]
bin4ry :
doesn’t work that way
[2020-11-26 08:02:49]
yzayn.yz :
OK
then I keep looking
[2020-11-26 10:29:39]
micronica :
client change this so i guess dji server detected difrent imu and locked for future replacment
[2020-11-26 13:30:26]
yzayn.yz :
[2020-11-27 09:23:32]
samsuttabris.st :
u have solutiton?
[2020-11-28 13:54:18]
mefisto :
Do we have a datasheet for that SN1708031 chip, used in Mini and Tello? TI doesn't seem to acknowledge it exists.. closest I could find on their site is SN1708024ZQZR, doesn't seem to be the same thing though.
[2020-12-01 10:45:59]
pawelsky :
@mefisto Looks like a custom chip, but they do acknowledge its existence (<https://www.ti.com/materialcontent/en/search?partType=tiPartNumber&partNumber=SN1708031>). No datasheet unfortunately :(
[2020-12-01 10:59:33]
mefisto :
Ohh, that's material content information, required for export. When I was asked to provide that, I was giving "Polycarbon casing with copper leads covering small wafer of doped silicon." Though I rarely import parts nowadays, so maybe I just got lucky it wasn't withheld. Didn't know that manufacturers provide such detailed info. (and it looks like I was wrong about polycarbon - the sheet says it's fused silica).
[2020-12-01 14:01:49]
rameezahmed1998 :
mavic 2 remote controller is not turning on i replace the battery its not charging also plz guide me thanks
[2020-12-02 12:47:17]
micronica :
[2020-12-02 12:47:26]
micronica :
even on TI live chat doesnt know it exist
[2020-12-02 12:49:02]
micronica :
anlu info i get is that this ic is for ucb and usb-c power dilivery IC anly that, but they create me a case for more info
[2020-12-02 18:55:41]
yzayn.yz :
does anyone have a list of all drone spare parts?
[2020-12-02 20:25:16]
mefisto :
That is kind of interesting for me as well. On my wiki, I usually give names to boards by myself. But I noticed that repair shops tend to use the same names. Though usually very similar to mine.
People from FCC teadrdowns definitely don't get any names from DJI. Sometimes what they name the boards is based on false assumptions.
The best source of info for me today is aliexpress search "dji board".
[2020-12-03 13:36:44]
matox89 :
Hi anyone know where P4 this ACC (accelometer) locate? Changed IMU board and it won`t settle. Mainboard?
[2020-12-03 16:27:50]
matox89 :
Thanks but I didn`t find anything about accelometer
[2020-12-03 17:25:22]
mefisto :
hm, yes you're kind of right. Ok, I will update the page:
<https://github.com/o-gs/dji-firmware-tools/wiki/WM330-Flight-Controller-board>
[2020-12-04 12:29:11]
matox89 :
Thanks, weird that I tested other flight control board and same problem keeps going.
[2020-12-04 14:52:43]
matox89 :
Yes, I think test that too. Thanks.
[2020-12-06 00:43:08]
mefisto :
Is DJI doing something to stop the use of dummies for spare parts?
I mean, besides renaming them to "replicas"?
[2020-12-06 11:21:31]
buundy :
What parts do you mean?
[2020-12-06 11:21:40]
buundy :
Casing, etc?
[2020-12-06 12:20:44]
mefisto :
The dummy for Mavic 2 pro costed as much as gimbal assembly for the Pro. And it included the whole casing. But now it's near impossible to get.
[2020-12-06 12:24:55]
mefisto :
Look at this guy. All he's selling are parts from Tello dummy and Mavic Pro dummy:
<https://allegro.pl/uzytkownik/DiffeRentShop>
[2020-12-06 13:40:11]
kilrah :
i would imagine they only produce one batch of them at launch and that's it since there would be no point supplying them (for the intended purpose) later...
[2020-12-06 15:17:13]
buundy :
I knew it I was just curious which parts do you need. Also I didn't know you repair drones! I thought you are a programmer working in the IT sector.
[2020-12-06 18:10:36]
mefisto :
You were right, I don't repair drones as a job. I do that occasionally, as a hobby. I only fixed a bunch, mostly Ph3s, all owned by me.
I don't currently need any particular part, though I am planning do buy remains of a Tello. Just when looking for prices of its dummy (found one for $10) I noticed that other dummies are "out of stock" in every shop.
And I bought Mavic Air dummy mostly because it was almost as cheap as the Tello - never even held any Mavic Air in my hands.
[2020-12-07 07:33:33]
buundy :
Now I see :) and yes, of course, dummies can be used for parts, however it is not easy to get them. I was lucky that some hungarian retailer sold me some MA, M2 for not much
[2020-12-09 09:18:53]
sheldon.holy :
Yeah, the dummies are offered to dealers at the beginning of production
[2020-12-09 09:20:01]
sheldon.holy :
Also they are quite expensive, and most dealers are online stores only so they have no need for dummies
[2020-12-09 09:21:37]
sheldon.holy :
So most dealers don't even buy them
[2020-12-09 13:34:15]
mefisto :
For some reason, Mavic Air replica costs 12-20 USD, and Mavic Mini replica is over 80 USD.
Air replica seem more complex. So is the price difference only because the Mini is newer? Or because some parts (ie. lens cover) are hard to get separately?
[2020-12-10 11:27:17]
rameezahmed1998 :
Any one know the issue its mavic 2 remote
[2020-12-10 11:36:51]
kilrah :
Magnetic interference?
[2020-12-10 16:41:33]
rameezahmed1998 :
No bro the left joystick issue its not working on left and right
[2020-12-11 00:43:04]
dnacho :
Has anyone been able to fix mavic air 2 esc error 30085
[2020-12-11 11:07:05]
buundy :
have you tried replacing it?
[2020-12-11 11:07:16]
buundy :
or maybe problem with one of the motors
[2020-12-11 11:07:29]
buundy :
you can measure the 3 coils in each of them with ohmmeter
[2020-12-11 11:08:13]
buundy :
without connected joysticks it wont work
[2020-12-11 11:08:25]
buundy :
if I see correctly you dont have the sticks connected
[2020-12-11 14:40:04]
dnacho :
The esc, no. Its just strange that one of the dealers here has gotten 3 ma2 with the same problem in less than 3 days
[2020-12-11 14:40:30]
dnacho :
how would I measure the coils? Like whats the value i should get in the ohmmeter
[2020-12-11 16:31:36]
kr2166 :
Does anyone know how the gimbal is controlled in Mavic mini either 1 or 2? In other Mavics I see there is a separate gimbal controller board but not in Mavic mini's. There is no microcontroller or motor drivers I see as such. Just wondering how it is controlled.
[2020-12-11 19:06:36]
buundy :
@pabloiarriola measure the resistance between motor leads 1-2, 2-3, 3-1, all should be the same, around 7-8 ohms
[2020-12-11 19:07:07]
buundy :
if one is different or maybe no connection then the motor maybe broken
[2020-12-11 19:07:26]
buundy :
if you smoke a motor you can smell it, and you can see burnt coils
[2020-12-11 19:11:29]
mingtao :
7-8 ohms it is to much
[2020-12-12 08:57:50]
buundy :
U usually measure 7-8 ohm on drone motors. How much do you measure?
[2020-12-13 14:44:32]
mingtao :
Anyone have exp with mipi ? Or csi-2?
[2020-12-15 09:58:46]
micronica :
anyone have datashet for that?
[2020-12-15 09:58:55]
micronica :
i924dj3
[2020-12-15 13:37:06]
rameezahmed1998 :
P3s not linking to rc any suggestions
[2020-12-15 17:07:11]
mingtao :
guys who have the experience of restoring H3 on DJI Mavic 2 ?
[2020-12-15 17:07:51]
mingtao :
my cant boot and i can't find the answer
[2020-12-15 17:08:04]
mingtao :
host_vref_training_by_software.899: ***********************bist training data line err, fail=1**************************
set noc finish.
no target_middle_processing.144
welcome to lk Aug 21 2018 18:05:52
boot args 0xf0a07000 0x5a 0x60 0xf0a50000
INIT: cpu 0, calling hook 0xfffcdda5 (version) at level 0x3ffff, flags 0x1
version:
arch: ARM
platform: EAGLE
target: EAGLE_WM240
project: EAGLE_WM240_TEST
buildid: H8LA2_LOCAL
initializing heap
calling constructors
initializing mp
initializing threads
initializing timers
initializing ports
creating bootstrap completion thread
top of bootstrap2()
initializing platform
pmic_param_id=5
lp8758 dev_rev=2
power_pmic_lp8758_init: attach wm240 LP8758 config.
pmic_lp8758_fixup_for_chip() is called.
pmic_lp8758_fixup_for_board() is called.
power_pmic_act8846_init: attach wm240 ACT8846 config.
pmic_act8846_fixup_for_chip() is called.
pmic_act8846_fixup_for_board() is called.
invalid reg chan 12
ACPU DVFS step 2.
initializing target
get_board_id: PMIC is empty. exit
EMMC Version >= 5.1 EN_RPMB_REL_WR = 1
calling apps_init()
SE_SECURE_LCS
Writing GPT partition
GPT: Primary signature invalid cannot write GPT
Re-Flash all the partitions
GPT: (WARNING) Primary signature invalid
GPT: Primary and backup signatures invalid
panic (caller 0xfffd11c9): DEBUG ASSERT FAILED at (lib/heap/miniheap/miniheap.c: 341): as->magic == HEAP_MAGIC
HALT: spinning forever... (reason = 9)
[2020-12-15 18:12:33]
dnacho :
and i measure that with the motor desoldered right? Or still soldered to the esc? @buundy @mingtao
[2020-12-15 18:13:10]
mingtao :
Does not matter
[2020-12-15 18:15:42]
dnacho :
ohhhh ok ok I thought they had to be desoldered. I should be able to measure the resistance with a normal multi meter right?
[2020-12-16 06:16:16]
buundy :
Yes
[2020-12-16 14:07:32]
mefisto :
Anyone figured out a way of opening Mavic 1 battery without wrecking the plastics?
I just bought 3 never used (overdischarged) batteries; opened one looking at YT videos, but apparently these were not the correct videos.
[2020-12-16 14:11:30]
william.markezana :
never managed to do so, closest I got was by 3d printing a new enclosure
[2020-12-16 14:29:44]
mefisto :
Well, it probably won't work without resetting BQ chip anyway..
[2020-12-16 14:30:24]
mefisto :
Maybe drilling small holes at certain spots would allow to open it without cracking?
[2020-12-16 14:36:04]
kilrah :
when i opened one the whole contour was very strongly ultrasonically welded
[2020-12-16 14:36:19]
kilrah :
can't really split it there
[2020-12-16 14:36:50]
kilrah :
maybe cut all around a little further from the weld and then use tape to close again?
[2020-12-16 15:09:37]
fredmicrowave :
I have opened one recently, results not perfect but not too bad. I can take pics if it helps. Used mainly a strong knife blade, hitting with a small hammer (or equivalent) when necessary.
[2020-12-16 15:13:04]
mefisto :
Yeah, I got best results with a [cement spatula](https://www.aliexpress.com/item/1005001437762685.html) and a hammer - similar setup. But that's for releasing the part around the cells, what about the parts near connector?
[2020-12-16 15:13:15]
mefisto :
Please share the photos.
[2020-12-16 15:30:26]
fredmicrowave :
Not sure if that helps. I can take details photos later. Near connector was the same, just corners made it more difficult...
[2020-12-16 17:58:13]
mefisto :
Hm, the battery I charged seem to be working fine.
So for the next two, I'm considering just drilling small holes where battery power wires are, and putting screws there so that they touch the contacts. Then I could charge the battery using these screws.
[2020-12-16 18:41:23]
buundy :
I was able to reset the bq chip
[2020-12-16 18:41:43]
buundy :
I can help if you want
[2020-12-16 18:42:11]
buundy :
I left the project because Of the ultrasonicLly welded enclosure
[2020-12-16 18:42:36]
buundy :
Because I cannot restore a dead battery with clean results
[2020-12-16 18:42:51]
buundy :
Casing would be damaged a bit
[2020-12-16 19:24:22]
fredmicrowave :
Tabs positions for drilling @mefisto :
[2020-12-16 19:42:00]
mefisto :
@buundy I don't really have the drone, just batteries - so I can't tell if I need BQ access. The battery turns on fine, and after charging it a bit directly, it charges fine by normal Mavic power brick.
@fredmicrowave thanks, will check that with the battery I disassembled and use for drilling.
[2020-12-16 21:08:02]
buundy :
Oh I see, then you are lucky :)
[2020-12-16 21:08:29]
buundy :
No PF flags have been set
[2020-12-17 02:43:27]
mel69hash :
You'll have to sacrifice MP casing in order to get to it internal parts. I've done more then 10 bats and all casing damaged at the connector joints. M2P is much easier and likely you'll save the casing with minimal damage.
[2020-12-17 12:56:18]
david.haluska :
I was able to force charge MP1 battery without damaging case - minus connected in connector and for plus I created pigtail cable with needle at the end and injected this needle between plastics in place where red cable is routed, there is small hole in the inner plastic - bottom part you just need little bit lift/pry plastic of top cover in that place and inject needle inside directly to red cable
[2020-12-17 12:56:35]
david.haluska :
for sure that way you could fix only batteries which do not have chip already locked
[2020-12-17 23:20:57]
mefisto :
Yes, it's limited to non-locked BQ, but it's still a neat solution! Thanks, will try that.
[2020-12-18 15:44:44]
mefisto :
Ahh, perfect.
[2020-12-20 02:50:43]
kketija :
reset remote then try re-link
[2020-12-20 05:27:50]
rameezahmed1998 :
Trying but same issue
[2020-12-21 21:14:16]
dnacho :
has anyone been able to use dji firmware tools on mac?
[2020-12-22 05:58:34]
buundy :
Yes
[2020-12-22 06:35:55]
buundy :
So I was wondering: Mavic Mini, 250 grams fly well for 30 minutes. My drone: same motors, same battery, feels weak. Definitely needs some experimenting.
[2020-12-22 06:38:03]
buundy :
Any ideas appreciated regarding the weakness.
[2020-12-22 06:40:54]
buundy :
(Mavic mini, same motors, same battery, 250 grams -> flies well. My drone, same motors, same battery, 220 grams -> feels weak.)
[2020-12-22 09:12:51]
buundy :
I tested today again, 2s, mavic mini 18650 battery, 20 min flight time. But it feels weak and resonates on higher throttle. I think maybe I turn the motors slightly outwards to concentrate the airflow centrally
[2020-12-22 23:41:38]
dnacho :
How did you use the com? I'm kind of lost with pyserial and coms on macs
[2020-12-23 15:36:59]
buundy :
Finally figured out that the rear arms are so long that they resonate
[2020-12-23 15:37:25]
buundy :
So with a stabilizer side rod the resonance disappeared
[2020-12-23 15:37:57]
buundy :
[2020-12-23 15:38:16]
buundy :
Flies for about 20min, 230grams
[2020-12-23 17:23:01]
mingtao :
can you share setup?
[2020-12-23 17:27:52]
buundy :
Of course, I will write a summary about it and also publish cad files
[2020-12-23 17:28:04]
buundy :
It you need it right now, I can send
[2020-12-31 15:48:44]
d95gas :
Anyone got any battery fixes? MP1 Battery, only had 4 charges. Showing battery error. Have done numerous complete discharges and charges. Cells are out of balance significantly:
[2020-12-31 15:49:23]
d95gas :
Worst case it will just become a power bank, but its a bloody shame as its only had 4 charges
[2020-12-31 16:33:34]
mefisto :
Isn't auto discharge balancing cells in such a case?
[2020-12-31 16:53:43]
d95gas :
Nope, I have discharged them right down then charged again using the genuine DJI Charger, dont it several times and the difference between each cell still remains.
[2020-12-31 16:54:08]
d95gas :
I would of hoped that the system could correct....... but I was wrong
[2021-01-03 11:57:32]
pawelsky :
@d95gas The best you can do (other than warranty return of course) is to cut small holes in the battery case in front of the balance port and discharge each of the cells individually to the same level and then charge the battery normally.
[2021-01-03 13:16:13]
d95gas :
Interesting.... Any pics
[2021-01-03 13:53:05]
pawelsky :
@d95gas This should give you a rough idea where to cut. Do not cut too deep, the connector/wires are about 2mm behind the case wall. Do not disconnect the charge plug as this will cause the battery to eventually go into the permanent failure state.
[2021-01-03 14:17:00]
d95gas :
Excellent. Better have a look on Amazon for a cheap balance charger/discharger. Will definitely give it a go as nothing to lose with it. Thanks for the info :+1:
[2021-01-03 14:36:08]
buundy :
Isdt chargers are very good
[2021-01-03 14:36:44]
buundy :
I have a Q6 Plus and a D1
[2021-01-03 15:04:49]
d95gas :
<https://www.batterylogic.co.uk/isdt-Q6-plus-smart-balance-charger.asp>
[2021-01-03 15:10:25]
william.markezana :
this one is great but you need your own power supply, lab psu or can recycle an old laptop charger
[2021-01-03 15:11:03]
d95gas :
Plenty of those laying around, must have 200+ in the garage
[2021-01-03 15:15:26]
william.markezana :
haha all good then! I have this one for fpv batteries, never failed me
[2021-01-03 15:20:26]
d95gas :
Seems the Q6 is now replaced with the Q8
ISDT Q8 DC Portable Smart Balance
[2021-01-03 15:22:36]
d95gas :
and everywhere out of stock of them as well Grrrrrr
[2021-01-03 15:56:55]
d95gas :
One for you "Battery Experts". Given the expense of a smart charger for the sake of one battery. Is it possible to access the balance plug as previously described, and put something across the pos and neg of each cell to drain..... Monitoring the level with a multimeter?? I just hate wasting this battery when its only had a handful of charges. The ISDT Chargers are certainly a good recommendation, but looks like I can only get one from China.
[2021-01-03 16:08:11]
buundy :
Possible yes, but not easily controllable, although hooking up this battery to a balance charger is also quite a challenge :)
[2021-01-03 16:18:32]
d95gas :
Yes, DJI didnt make it easy :slightly_smiling_face: so I think my first step is to cut this access hatch into the battery to access the balance lead first.
[2021-01-03 16:26:41]
fredmicrowave :
A resistor, or a car bulb, while monitoring voltage, should do the trick. Stop at the same voltage, preferably quite low, on each cell.
[2021-01-03 16:47:41]
d95gas :
Thanks, going to give it a go tomorrow. Need to access the balance plug first.
[2021-01-03 16:56:08]
fredmicrowave :
If not done so, you may want to see **[this](https://dji-rev.slack.com/archives/C64R5L1HN/p1608306335236300?thread_ts=1608127652.225900&cid=C64R5L1HN)** thread, there is also info about how to access tabs and cells too.
[2021-01-03 17:01:28]
fredmicrowave :
BTW, to anyone opening MP batteries : If plastic got deformed after operation, it almost miraculously get back to its original shape (up to some point of course) by applying hot hair.
For smaller dents, almost looks like memory material...
[2021-01-03 17:18:00]
d95gas :
That is an interesting read and certainly got me thinking now. the image with the measurements will prove very handy, thanks
[2021-01-03 17:46:25]
the.hope.ltd :
hi
i have tried this battery extender on mavic 2 with orginal m2 battery and 1 lippo 4s 1250 60c battery...i noticed the flight time increased from 26 min to 31 min whether i put 1250mha or 2200mha
the question is why always 31m hovering since the battery bigger or smaller or original battery alone ?
[2021-01-03 19:30:14]
bobdole :
takes more effort to hover
[2021-01-04 00:29:27]
pawelsky :
@mefisto That is likely a permanent failure (PF) flag raised due to too long cell imbalance (CB) or cell undervoltage (CUV). Unfortunately I don't have the screenshots from the battery configuration screens anymore so I don't remember what the actual protection values were.
[2021-01-04 01:05:00]
mel69hash :
@d95gas I have done this process and even tried to charge each cell many times and I hit the wall. Not sure for new battery though. My batteries are all above 50 charges when the cells not balance. I've had 20 to 30 MP battery mods and recycle the smart board with new cells bought off AliExpress. Been there done that. You may try with your new bat it may works. What I've done is hook up another bal lead which I can use as single cell charge using 2 pin to charge to balance the cell. But after few normal charge, the battery back to its unbalance voltage. Good luck with your try and do update if it works.
[2021-01-04 01:15:42]
the.hope.ltd :
Sorry for intercept
Is mavic 2 locked to fly max 31min with an extra battery :battery::thinking_face:
Is the solution from the battery Bmc programing or AC firmware :face_with_rolling_eyes:
[2021-01-04 01:18:07]
mel69hash :
I've flown M2P for close to 45 hovering and 55 mins cruising with a 4S2P (11570mah) P4 cells
[2021-01-04 01:18:39]
the.hope.ltd :
I have tried 1250mah and 2200mah beside the original dji intelligent battery using external connection
[2021-01-04 01:19:12]
mel69hash :
Here's my setup
[2021-01-04 01:20:56]
mel69hash :
Flown them based on battery voltage and not % as its the best way to monitor and it is an exact way of monitoring the battery.
[2021-01-04 01:22:53]
the.hope.ltd :
Wow :clap:
I saw many on YouTube but I can't understand what's the trick to achieve this
[2021-01-04 01:24:57]
the.hope.ltd :
I agree with you :100:
But even if let the cells drops to 3.2v still the drone Lands at 31min
[2021-01-04 01:29:10]
mel69hash :
Go find Digdat0 YouTube that teach you to access DJI Assistant 2 1.1.2 and get developer access to change the battery to type 2 or 3. This will keep your drone airborne and bypass the landing trigger when bat hit low. Only for the expert and one who knows what they are doing. I don't advice you unless you are well into parameter tweaking.
[2021-01-04 06:19:04]
d95gas :
@mel69hash thanks for the info buddy. I had a feeling it was going to be a wasted task. Worst case I can use it as a powerbank out in the field, for tablet or other device recharge. Would of made life easier IF DJI had gone a different design and made the balance lead easier to access without having to either break open the battery or cut a hole in it. I shall ponder the situation and see if curiosity gets the better of me. Thanks
[2021-01-04 12:20:00]
the.hope.ltd :
Did you do the same to your m2 to fly 55min with p4 cells ?
[2021-01-04 12:24:31]
mel69hash :
Yes provided your firmware is within the tweakable firmware which I think was the 01.04.300 firmware(fw). These fw have 2 version and one comes with DJI lockdown and the original one does not
[2021-01-04 12:43:12]
the.hope.ltd :
I saw some ready battery from China working without interrupt with parameters..any idea how that works?
[2021-01-04 12:54:29]
mel69hash :
Is that the normal 3rd party manufacturer battery?
[2021-01-04 12:55:10]
mel69hash :
Still with that third party supplier, yr auto landing when low bat will still trigger
[2021-01-04 13:31:15]
the.hope.ltd :
No it's p4 cells and the seller said he did something with the bmc to unlock the time limit ..and many people are using it but it's expensive 450$
[2021-01-04 13:33:13]
the.hope.ltd :
I tried to fly with an extra battery and on auto landing I cancel the process it doesn't land until battery cells drops to 3.2
[2021-01-04 13:34:26]
mel69hash :
Well thats expensive at 450USD?
[2021-01-04 13:34:45]
the.hope.ltd :
Still looking for solution error code 200 on m2 coreboard
[2021-01-04 13:35:13]
mel69hash :
From China? What I know they sell it from Singapore all those ultra battery for all Mavic drones
[2021-01-04 13:48:51]
the.hope.ltd :
Yes maybe :flag-sg: Singapore
[2021-01-04 13:50:14]
the.hope.ltd :
I want to try making one by myself but I can't get the right answer until now ..can you please suggest what exactly to do if you know
[2021-01-04 14:37:28]
amanita :
Hi Sakis! I am from Greece, i am the only one in Greece that i made my own batteries for mavic 1 pro & mavic 2 pro.:wink:. 3S2P for mavic pro & 4S2P for mavic 2.
[2021-01-04 14:48:55]
amanita :
Hi Sakis I had the same error code 200 with mavic 2 pro with camera. camera was completely dead, error message 200 and says no sd card even though there is an sd card inserted. I could not take off due to error code. I used Dji care refresh and they sent me a new one!
[2021-01-04 19:27:13]
the.hope.ltd :
Thanks amenita
My case is different because been already open
[2021-01-04 22:15:39]
the.hope.ltd :
Ela re amanita..pes apo tin arxi
[2021-01-04 22:16:00]
the.hope.ltd :
Do I have to mod the mavic 2 firmware first ?
[2021-01-04 22:22:59]
the.hope.ltd :
:face_with_rolling_eyes: :thinking_face:
[2021-01-06 07:33:32]
mingtao :
opening - doesn not mean - no warranty
[2021-01-06 12:08:04]
the.hope.ltd :
I tried to fly with an extra battery and on auto landing I cancel the process it doesn't land until battery cells drops to 3.2
[2021-01-08 13:57:33]
micronica :
anyone have solution for no image on p2 vision(without plus)?
[2021-01-08 13:57:36]
micronica :
[2021-01-08 13:58:07]
micronica :
on plus it simple reflash wifi module but on standard one no info
[2021-01-08 21:57:52]
mefisto :
Both Vision and Vision Plus use DM365, and in both its NAND deprogramming is the most frequent point of failure.
<https://github.com/o-gs/dji-firmware-tools/wiki/Flashing-firmware-on-DaVinci-media-processors>
[2021-01-11 16:50:52]
buundy :
any ideas for this:
[2021-01-11 16:51:03]
buundy :
I have a MP Remote Controller
[2021-01-11 16:51:31]
buundy :
none of the USB ports work. Not the side one, and not the bottom one. However I can charge the RC through the side USB port.
[2021-01-11 16:51:40]
buundy :
I cannot connect even to Assistant
[2021-01-11 16:51:48]
buundy :
is there a way to reset the RC?
[2021-01-11 17:15:04]
quad808 :
just a note...remember that you can't connect both USB's at the same time
[2021-01-11 21:38:02]
buundy :
yes-yes, I know that :slightly_smiling_face:
[2021-01-12 01:22:36]
rsrmdp :
I found a solution to the one that does not charge the battery. fixed load but it also works there I send photos. Sorry I don't speak English, I use a translator. it is best to stabilize the cells first with a power supply. I hope it serves you
[2021-01-14 19:45:13]
buundy :
Does anyone know the exact type of this thermal grease?
[2021-01-14 19:45:36]
buundy :
It is good because after years it doesn't dry out
[2021-01-14 21:29:59]
chipmangini :
@buundy I know that it's been posted here in the past, (even recently) but I don't have the "Slackability" to go back and find it...
[2021-01-15 13:49:53]
buundy :
Thanks :)
[2021-01-15 13:50:26]
buundy :
Another question, and I know the answer depends on a lot of circumstances.
[2021-01-15 13:50:39]
buundy :
P3A, no image transmission signal
[2021-01-15 13:51:19]
buundy :
Swapped flex, gimbal board, camera, ofdm module, small ofdm cable. So basically everything
[2021-01-15 13:51:27]
buundy :
Still the same error
[2021-01-15 13:51:37]
buundy :
Maybe I try firmware refresh
[2021-01-15 13:51:44]
buundy :
Any ideas?
[2021-01-15 14:07:40]
info349 :
dj mini 2 with broken gimbal, can I mount the one from mavic mini 1, will it work?
[2021-01-15 14:27:13]
buundy :
Let me know if you try :)
[2021-01-15 14:32:45]
p.axel :
We tried swapping gimbal from MM1 to MM2. Just keep in mind, that you have to swap the camera module.
We just had issues with the yaw motor....but maybe that was related to smth. else.
To be continued... :)
[2021-01-17 11:38:27]
kketija :
There is 2 versions of camera and gimbal board. check very carefully that they are the same.
[2021-01-19 11:23:50]
mefisto :
I'm looking into Mavic batteries. Using `bqEVSWSetup00.09.80_bq30z55v0.32.exe` as that was suggested by @pawelsky and @buundy.
When I go into 'Seal/Auth` tab, I'm greeted with a list of worrying messages:
```Data Flash Configuration not found. Please obtain a version of bqEVSW that supports this device and Firmware version.
Can not open Dataflash configuration file attempting to read number of configured cells. Please reinstall bqEVSW.
Error: Could not find subclass and offset for Settings.Configuration.SystemConfiguration
Not able to Columb Counter Offset location.```
[2021-01-19 11:24:38]
mefisto :
Is that expected, or do I have wrong version of the tool? Or maybe I've chosen wrong FW version at startup?
[2021-01-19 11:25:44]
buundy :
hmm, I don’t remember, but I didn’t have the error message. In the status bar what firmware version do you see? Send a screenshot please.
[2021-01-19 11:27:04]
mefisto :
Here's the screenshot:
[2021-01-19 11:27:39]
buundy :
thanks
[2021-01-19 11:28:01]
buundy :
in the SBS tab do you see other status info instead of “Communication OK”?
[2021-01-19 11:28:11]
mefisto :
Hm, maybe I should use `bqEVSWSetup00.09.92_bq30z55v0.36R3c.exe` instead? It has 67 megs as compared to the one I'm currently using (which had 7 megs).
[2021-01-19 11:28:54]
buundy :
in the status message you should see the BQ chip’s exact version
[2021-01-19 11:34:04]
mefisto :
It shows `Device:0 Ver:0.00` in the status bar.
I will check the updated software tomorrow, it is likely the culprit.
[2021-01-19 11:36:13]
buundy :
Let me know and I will try to help
[2021-01-19 11:42:17]
mefisto :
Sure, thanks.
I was able to sniff the communication between the BQ chip and EV2300, so that's something.
Used Raspberry Pi and one of its example tools, 'I2C_sniffer'.
Ie. reading of 'Remaining Cap. alarm':
```[16+01+[17+96-[[[44-]```
So EV2300 is x16 and the battery is x17. And the value of command/offset x01 is x96 = 150 mAh
(the basic commands are listed in Smart Battery Specification document)
[2021-01-19 12:17:01]
rsrmdp :
Good morning here in Argentina. I read in the Texas forum, to unlock the bq30z55 chip the firmware is given by the company but presenting papers, there are two options
1 - <http://ubrt.com.ua/download> (Paying)
2 - As previously sent a photo, leave them fixed by soldering the points BAT + and PACK +
[2021-01-19 12:19:11]
rsrmdp :
[2021-01-19 13:17:56]
rsrmdp :
I have been using them personally like this, because UBRT charges 200USD and at the currency exchange, the service is very expensive, beyond that I have used UBRT services. Connecting the points to the EV2300 box
[2021-01-19 13:21:51]
rsrmdp :
Here is the video with the points. What it does not say is that the service provided by UBRT is paid
<https://www.youtube.com/watch?v=vzc_zV50HQw&t=836s&ab_channel=TaranuMihaita>
[2021-01-19 13:22:14]
rsrmdp :
I hope the data will serve you, have a good day !!!
[2021-01-19 13:40:24]
rsrmdp :
[2021-01-19 13:45:46]
rsrmdp :
[2021-01-19 13:46:43]
rsrmdp :
The only bad thing is that you connect it to the drone and it starts up, you have to turn it on to communicate the data, but it remains functional.
[2021-01-19 20:30:32]
info349 :
hello everyone, I have a mini2 fallen with a broken arm, disconnecting the cables of the arm when I turn on the dji sound does not start and no motor turns and I have error 30210, I order an esc board or putting a good arm back could it work again?
[2021-01-19 20:33:52]
buundy :
Solder in a good arm and you are good to go
[2021-01-19 20:34:00]
buundy :
The motors make the sounds
[2021-01-19 20:34:11]
buundy :
Te esc checks for all the motors
[2021-01-19 20:34:24]
buundy :
So if one motor is missing it wont start
[2021-01-19 20:37:37]
info349 :
[2021-01-19 20:38:27]
info349 :
here is the video of the start, thanks for the advice
[2021-01-20 10:47:20]
mefisto :
What's the use of pointy/conical soldering tips?
I'm mostly using chisel tips. When I try to micro-solder with pointy ones, it's harder to melt the solder and any melted solder escapes to around a middle of the tip instead of staying at the end where you want it to be.
But most soldering stations are sold with a pointy tip. Is that only to force people to buy another one, or is there any use of pointy tips?
I'm considering just sand papering my pointy tips; that will damage their coating, but maybe as hoof tips they at least will be somewhat useful.
[2021-01-20 13:45:38]
edo :
Pointy tips are for me unuseful. I like to use this type in different size.
[2021-01-20 14:46:33]
fredmicrowave :
For regular soldering (as for the tip above, 2mm is regular) I use them indifferently, pointy are more precise , and don't require you to turn the soldering iron into the right position. I do not recommend to sand them ever, as they will become almost instantly useless.
For micro soldering I often have this problem, and is due in my opinion to lower quality tips and iron, with insuficient heat at the tip, where it's needed but the most difficult to get. Good microsoldering irons are very expensive. You can try to increase temperature (above normal) and wet the tip carefully...Hot air may be a better solution in some situations.
[2021-01-22 18:27:59]
micronica :
ok, thx, on vison plus i done this many times. So it will be the same but diffrent layout of the test point
[2021-01-22 18:29:08]
micronica :
i use only chisel type, bevel one for long drag soldering and j type for fine soldering
[2021-01-22 18:30:33]
micronica :
anyone know what i need to replace on the mainboard on mavic pro when i constantly have a problem with compass 1? i already change this for another one and still in flight always get the error. Its propably some filter or regulator on the data line or vcc of the gps board
[2021-01-22 20:40:27]
rsrmdp :
calibration error throws you?
[2021-01-22 20:47:17]
fun.day.cool :
I'm getting a motor error warning and a weird sound coming from my ma2. Is this a concern?
[2021-01-22 20:47:19]
rsrmdp :
[2021-01-22 20:47:39]
rsrmdp :
if the problem is magnetic, solve it with this
[2021-01-22 20:48:18]
rsrmdp :
pass it through the front landing gear, compass 1 and 2
[2021-01-23 02:40:55]
rsrmdp :
Take the coil out of a washing machine. more specifically the drain pump. It served me to, let's say, remove the magnetisk from the compass, if I had one. I have found in compass one, that the cables are so fine. to arm and disarm any one was cut, made the GPS plate. it has white resin in the welds. Cheers
[2021-01-23 04:13:37]
kketija :
yes. post a screen shot of the error
[2021-01-23 04:26:05]
kketija :
its unlikely. more likely is the compass is defective. I have replaced 3 defective new gps modules in a row. 4th one worked. If you had a 2nd mavic to test it would help
[2021-01-23 11:11:50]
micronica :
demagnetyzer doesnt work already tryed
[2021-01-23 14:07:07]
micronica :
3 gps board owrks fine on another mavic so thats not the problem
[2021-01-23 15:22:26]
fun.day.cool :
Unfortunately I didn't get a screenshot but it went something like this: Motor Error, Fly with caution.
[2021-01-23 22:05:16]
flylusive_pat :
@mefisto <https://trb2300.xyz/Repairements/DJi-MMBatRepair> I made already a program to repair bq40z307, yes rpi can be used to read/write data
[2021-01-23 22:09:06]
flylusive_pat :
@mefisto if you want help, we can collaborate
[2021-01-24 10:49:26]
mefisto :
@kakerarecever567 sure, we can collaborate.
I will make my software open-source, but it won't have GUI and will likely not even work on Windows (unless someone adds a support).
So not sure if you can see it as a competition to the TRB tool.
[2021-01-24 10:54:37]
mefisto :
I am working on BQ30z55 support, as that's in the PF'ed battery I have.
[2021-01-24 10:58:18]
mefisto :
Right now I am still working on simple things:
```pi@raspberrypi:~/dji_mavic_bat $ ./comm_sbs_bqctrl.py -vv --bus "smbus:1" --dev_address 0x0b --read BatteryMode
Opening smbus:1
Auto-selected chip: BQ_GENERIC, Unidentified chip from TI BQ family
Reading simple command at addr=0xb, cmd=0x3, type=uint16
BatteryMode: 0x6001 bitfields Battery modes and capabilities
CAPACITY_MODE: 0=Report in mAh [CapM] Capacity reporting unit, mA/mAh or 10mW/10mWh
CHARGER_MODE: 1=Tx disabled [ChgM] Don't send ChargingCurrent() and ChargingVoltage()
CHARGE_CONTROLLER_ENABLED: 0=Disabled [CC] Battery pack's internal charge controller state
ALARM_MODE: 1=Tx disabled [AM] Don't master the SMBus and send AlarmWarning()
PRIMARY_BATTERY_SUPPORT: 0=No support [PBS] Ability to act as primary or secondary battery
PRIMARY_BATTERY: 0=Secondary [PB] Operate as the pri/sec battery in a system
CONDITION_FLAG: 0=No need [CF] Battery requests a conditioning cycle
INTERNAL_CHARGE_CONTROLLER: 1=Supported [ICC] Internal Charge Controller circuit available
pi@raspberrypi:~/dji_mavic_bat $ ./comm_sbs_bqctrl.py -vv --bus "smbus:1" --dev_address 0x0b --read ManufacturerName
Opening smbus:1
Auto-selected chip: BQ_GENERIC, Unidentified chip from TI BQ family
Reading simple command at addr=0xb, cmd=0x20, type=string[8]
ManufacturerName: b'ATL NVT' None Character array containing the battery's manufacturer's name
pi@raspberrypi:~/dji_mavic_bat $```
[2021-01-24 11:06:23]
flylusive_pat :
@mefisto for clearing PF on z55 you need good writing conditions, then standard PF reset will do it
[2021-01-24 11:06:51]
flylusive_pat :
@mefisto sure, I have my custom adapter for RPI that communicates with TRB already, so if you want you can help there.. it communicates with my program via network tcp server
[2021-01-24 11:07:32]
flylusive_pat :
@buundy I'll be very happy to assist you getting rid of the PF :slightly_smiling_face:
[2021-01-24 11:08:02]
flylusive_pat :
@mefisto check private messages and reply me there
[2021-01-24 11:12:40]
flylusive_pat :
"b'ATL NVT'" -> yourvariable.decode('ascii') thanks :smile:
[2021-01-24 19:06:16]
micronica :
my flyes well over 20 min and weels ok for slow crouser drone
[2021-01-25 12:31:00]
buundy :
@kakerarecever567 Thanks, I will get back to you later as I probably exchange the battery with dji. I repair lots of drones so I think there will be more occasions for testing :slightly_smiling_face:
[2021-01-25 12:32:19]
buundy :
Good! I am redesigning the frame as it is vibrating a bit on higher throttle due to long arms. If you are interested I can share the Fusion 360 archive so you can cut custom parts
[2021-01-25 12:32:38]
buundy :
I added stiffening rods to the side and now it vibrates less
[2021-01-25 12:32:46]
buundy :
but needs a bit tuning
[2021-01-27 12:42:56]
micronica :
anone replace with sucess roll arm on the p3 pro?
[2021-01-27 13:25:20]
buundy :
You have to calibrate the potentiometer and shaft
[2021-01-27 13:32:19]
micronica :
how, on dji tools doent work, shaft is pressfit to new arm, i can't use old arma and motor thats why i have a problem
[2021-01-27 14:42:01]
micronica :
ok found already
[2021-01-28 01:45:39]
rsrmdp :
i want to help based on my experiences. I cannot find English. without disinterest I can give you my phone. I don't know if it can be shared here. I don't want to be disrespectful or break group rules
[2021-02-03 13:15:14]
djibot :
Does anyone happen to know which pins are UART for M2P?
[2021-02-03 14:52:54]
mingtao :
which uart pin you need?
[2021-02-03 15:05:15]
djibot :
Was trying to get to main processor, and reset pins, but they seem to have quite a few sections on the main board, just not sure which section I would need
[2021-02-03 15:05:40]
djibot :
Where the firmware is.
[2021-02-03 20:04:00]
djibot :
I have been reading the OG site, looking at this, wondering where to solder to start using tools, to watch it boot with terminal, pins next to H3? Not sure which one holds firmware.
[2021-02-03 20:05:17]
djibot :
WM240 doesn't have much to say about it. I'm surprised.
[2021-02-04 05:22:59]
mingtao :
[2021-02-04 05:23:37]
mingtao :
It is all four uarts channels ,8n1 921600 speed
[2021-02-04 09:30:10]
djibot :
Thank you, if I get time today I'll try them out.
[2021-02-05 17:56:02]
dnacho :
Has anyone been able to find the source for the battery signal error on the mavic 2
[2021-02-05 18:52:30]
mefisto :
> the source for the battery signal error on the mavic 2
The battery? Sounds like a source here.
[2021-02-06 21:23:45]
flylusive_pat :
> the source for the battery signal error on the mavic 2
Do you mean, how to repair that ?
[2021-02-06 21:33:52]
dnacho :
That is correct @kakerarecever567
[2021-02-06 22:44:25]
flylusive_pat :
@pabloiarriola you need a special tool called TRB to repair the chip
[2021-02-06 22:44:32]
flylusive_pat :
(battery)
[2021-02-06 23:38:20]
dnacho :
That's even for the drone side? Per my findings the drone is "killing" them
[2021-02-07 13:26:09]
flylusive_pat :
It's for BMS - chip in battery.
[2021-02-09 18:26:19]
dnacho :
Yeap but in theory it's the esc that kills them right?
[2021-02-09 19:21:07]
fredmicrowave :
The chip is inside the battery. What triggers it is some value out of parameters. For example, too low or too high voltage, or too much unbalanced, which are normally a sign of a bad battery cells.
In theory, it triggers the chip to avoid people charging and using bad batteries, or messing around with the cells, leading to an unsafe flight.
In practice, it helps a lot to sell more of their very expensive batteries.
[2021-02-12 13:15:47]
mefisto :
Anyone used cheap USB-to-I2C bridge? Is it visible for OS as I2C bus, or just as serial?
This one states is is visible as "virtual COM":
<https://www.aliexpress.com/item/32971026081.html>
I2C is not a COM, so I wonder how is that supposed to work.
[2021-02-12 23:47:26]
validat0r :
What after market lipos to use for refurbishing worn down spark/magic batteries?
[2021-02-12 23:48:10]
validat0r :
Does the bms has to be touched after bat exchange?
[2021-02-14 12:37:33]
mefisto :
Do you think this is doable? Making a hole like this, to solder to the SDA/SCL through it, and avoid destroying the whole plastic case?
Also, is it doable for someone who solders something once a month, not a repair technician who does that for hours every day?
[2021-02-14 15:22:19]
jcase :
dont see why not
[2021-02-14 15:22:28]
jcase :
I'd mill the hole out personally
[2021-02-14 22:00:24]
mefisto :
Will report back after I tested this.
[2021-02-15 00:28:27]
fredmicrowave :
You could also fix two probes together with the correct spacing (for example fine tip multimeter probes, the cheap Chineses gold plated ones are not so bad) ), holding them the time needed for programming...
[2021-02-15 00:45:09]
jcase :
i'd probably make a jig with pogo pins
[2021-02-15 00:45:15]
jcase :
and drill two holes tbh
[2021-02-15 08:04:48]
mefisto :
Small holes for needles could work.. but then I'd also need a bigger hole to look throgh.
[2021-02-15 08:06:26]
mefisto :
Not a bad idea. Maybe I'll try that.
[2021-02-15 08:08:30]
mefisto :
Pogo pins would be worse for the task - I actually want to puncture the solder, as the parts are covered with some isolator paint.
[2021-02-15 11:19:48]
buundy :
interesting :slightly_smiling_face:
[2021-02-15 12:36:14]
fredmicrowave :
For 6€ you can buy an endoscope that you plug on your phone: Tape the probes on it and you just need a hole large enough for the endoscope :)
A round hole could be easily concealed with a sticker afterwards.
[2021-02-15 12:53:25]
mefisto :
It generally worked - meaning I made a looking hole + two pin holes, inserted needles, and I see some I2C communication (though with errors).
But when I try to send anything, I'm not getting proper response. So I guess my needles can't overcome the pull-up.
[2021-02-15 16:27:34]
flylusive_pat :
@mefisto :slightly_smiling_face::rolling_on_the_floor_laughing:
[2021-02-15 22:29:29]
mefisto :
I will take and smash that RPI as soon as I'm over!!
Everything was working! I couldn't send commands to the battery because the I2C bus got into some invalid state.
Took me several hours of checking every possible little thing before I rebooted it. And suddenly it works:
[2021-02-15 22:36:17]
mefisto :
I got trolled hard.
[2021-02-16 00:13:59]
validat0r :
by whom?
[2021-02-16 01:00:05]
mefisto :
By the Pi.
[2021-02-16 09:14:24]
validat0r :
I hope you're documenting this stuff well. I see myself tinkering with dji batts in the nearer future
[2021-02-16 11:06:52]
validat0r :
Is there a way to activate the internal SD card in a Mavic Pro 1 post fw 1.3.900?
[2021-02-16 12:13:45]
buundy :
Hi guys. This is the second time I find myself with a Spark with non-responding logic board. Does anyone have a clue what is wrong with them? The USB connection doesn’t work, so I cannot restore the fw. Also the gimbal doesn’t move. And finally there is no Wi-Fi connection, cannot reset the Wi-Fi, cannot link, and doesn’t beep when I push the battery button. There is a long thread on DJI forums but with no solution. Ideas?
[2021-02-16 15:20:41]
ego-22 :
Hello, do you have usb uart adapter?
[2021-02-16 15:46:10]
buundy :
yes :slightly_smiling_face:
[2021-02-16 15:46:40]
buundy :
is there an UART somewhere where I can restore?
[2021-02-16 18:54:56]
mefisto :
@kakerarecever567 could you make a high quality photo of one board, both sides? Preferably with chip markings visible.
I even have Tello battery board on the wiki, but no Mavic Mini:
<https://github.com/o-gs/dji-firmware-tools/wiki/WM004-Battery-Board#board-view>
[2021-02-16 19:55:33]
flylusive_pat :
> @kakerarecever567 could you make a high quality photo of one board, both sides? Preferably with chip markings visible.
Hey man, Mini 2? Yes sure I can send you them, I can even take them with microscope no problem.
[2021-02-16 20:01:40]
flylusive_pat :
> I see myself tinkering with dji batts in the nearer future
<https://trb2300.xyz> :slightly_smiling_face:
[2021-02-16 20:30:31]
mefisto :
I don't have mini 1 nor mini 2 photos. Actually I assumed the boards are identical.
[2021-02-17 10:39:00]
rameezahmed1998 :
Can anyone tell me which components are these or any clear picture of it?
[2021-02-17 10:40:17]
validat0r :
is that tello?
[2021-02-17 10:46:10]
validat0r :
you mean the 3 circles that look like testpoints?
[2021-02-17 10:47:57]
validat0r :
tello is so freaking miniscule
[2021-02-17 10:49:14]
validat0r :
i opened my tello in order to look for some components that were probably missing in your shot .. but there are just testpoints as in yours
[2021-02-17 10:51:56]
rameezahmed1998 :
The original picture is here of my tello board
[2021-02-17 11:08:54]
validat0r :
so you dont mean the testpoints? i dont understand ..
[2021-02-17 11:10:24]
validat0r :
this looks ugly .. did you fry sth?
[2021-02-17 11:14:00]
rameezahmed1998 :
Its water damage bro
[2021-02-17 11:16:11]
rameezahmed1998 :
Which component is installed here
[2021-02-17 11:21:16]
validat0r :
just a sec .. not sure if i can see it properly .. glue on it plus very small
[2021-02-17 11:36:31]
validat0r :
[2021-02-17 11:59:40]
fredmicrowave :
Looks like coils , 0 ohms ?
That happens when you insert a screwdriver to lift the connector :smile:
[2021-02-17 12:12:43]
validat0r :
damn tello. cam shows only green lines.. took off, bird went straight into the ceiling without any stick input .. thank god there were prop guards on
[2021-02-17 12:19:25]
rameezahmed1998 :
@fredmicrowave exactly
[2021-02-17 12:21:16]
rameezahmed1998 :
@ilovemynexus4 can you try to remove the glue and take the exact value of component
[2021-02-17 12:28:53]
validat0r :
mesure exact value of a coil in a circuit? is that even possible?
[2021-02-17 12:39:21]
rameezahmed1998 :
Any number is mentioned on coil?
[2021-02-17 12:42:28]
validat0r :
sorry, not gonna scratch that off. i might scratch the component off right with it. plus i dont have a microscope anyway.
[2021-02-17 12:48:27]
fredmicrowave :
You can just check if it is 0 ohm, then you can use about any inductor o same size, I would bet it is data line protection.
[2021-02-17 12:55:19]
rameezahmed1998 :
@fredmicrowave ok
[2021-02-17 12:55:32]
rameezahmed1998 :
@ilovemynexus4 thank you
[2021-02-17 12:57:33]
rameezahmed1998 :
@fredmicrowave what happens if i dont put coil leave as it is?
[2021-02-17 13:05:57]
fredmicrowave :
If they are coils, something will fail to work if you leave them open... But you could shunt them, you just to be sure those are coils to do that.
[2021-02-17 13:08:16]
rameezahmed1998 :
@fredmicrowave i dont know that is coil or another components but error is camera sensor error
[2021-02-18 01:02:27]
mefisto :
I made dis:
<https://www.youtube.com/watch?v=P5PNOO2GebY>
[2021-02-18 01:14:27]
william.markezana :
amazing work here mate, wish I had that a couple years ago
[2021-02-18 08:30:54]
validat0r :
Awesome video. Great work!
[2021-02-18 09:21:29]
flylusive_pat :
> I don't have mini 1 nor mini 2 photos. Actually I assumed the boards are identical.
@mefisto Hello ))), I will take you the photos of Mini 1 and Mini 2 boards.
[2021-02-18 09:26:44]
flylusive_pat :
> I made dis
@mefisto Very nice!!
> SHA1 key is the password
From when is SHA1 key the pass, not entirely sure on z55, but on z307 you can only unseal with standard unseal, not with SHA1.
[2021-02-18 09:29:29]
flylusive_pat :
z307 at least has custom firmware, so it's harder to reverser engineer
[2021-02-18 09:29:46]
flylusive_pat :
there is no TI pf and no TI clear pf command
[2021-02-18 14:46:40]
mefisto :
Yeah, I've heard that in bq40z307 batteries TIs PF is disabled, and DJI has their own mechanism, with separate security key. And keys there are 32-bit, work in the same way as in BQ40z80.
The tool I made was only tested on bq30z55, ATM.
[2021-02-18 14:47:55]
validat0r :
which bats used what bq?
[2021-02-18 14:47:59]
jcase :
keys in a cryptocell or just in the firmware
[2021-02-18 14:51:04]
webhdx :
I had the same issue. I came into the conclusion somehow the firmware got corrupted and it stopped booting. Couldn't fix it so I sold it eventually.
[2021-02-18 14:52:47]
webhdx :
It was okay electrically. I'm not sure how it got broken since it was working fine and just suddenly stopped booting. In my case battery charging via USB cable still worked.
[2021-02-18 14:54:58]
webhdx :
@mingtao do you know UART test points for Mavic Air? I'd like to debug that ARM chip which handles gimbal and I believe front sensors.
[2021-02-18 14:56:06]
webhdx :
In my case the gimbal doesn't move at all, tried many different gimbals so the issue is on the core board. Also I have 2 M2P/M2Z gimbal boards that appear to be dead, despite being okay electrically (no shorts etc.)
[2021-02-18 14:56:18]
webhdx :
I believe this may be the same issue
[2021-02-18 15:56:17]
fredmicrowave :
That´s awesome Mefisto, thanks a lot !
I suppose a simple usb to i2c board like this one should work too :
[https://www.ebay.com/itm/CP2112-USB-To-I2C-Communication-Module-Evaluation-Kit-for-[…]ebug-Board/401790283672?hash=item5d8c912f98:g:WsUAAOSwkpxdCgrR](https://www.ebay.com/itm/CP2112-USB-To-I2C-Communication-Module-Evaluation-Kit-for-CCS811-Debug-Board/401790283672?hash=item5d8c912f98:g:WsUAAOSwkpxdCgrR)
[2021-02-18 16:09:59]
mefisto :
The BQ chips store keys internally, in Data Flash. So you can actually change the key by a proper series of SMBus commands (you need to provide old key though).
[2021-02-18 16:13:49]
mingtao :
Mavic air? It is too old drone for me.. i think i all remember about uart on this drone
[2021-02-18 17:32:55]
webhdx :
I understand. Do you have experience fixing Mavic 2 gimbal boards? I have 2 boards not moving the gimbal at all. This may be similar issue to the Air
[2021-02-18 21:59:14]
buundy :
Thanks for the info. I think we need to find a way of restoring sw via lower level methods than usb
[2021-02-19 07:24:49]
info349 :
hello everyone, I have a mavic mini after a fall I had errors 40012 and 40002, I replaced the gimbal and the 40002 is gone, I still have the 40012 left and obviously it does not arm the motors, what could I try to replace?
[2021-02-20 18:21:14]
flylusive_pat :
> keys in a cryptocell or just in the firmware
@jcase in EEPROM
[2021-02-20 18:21:52]
jcase :
well then doesnt sound like they would be difficult to grab
[2021-02-20 18:21:58]
flylusive_pat :
@mefisto yes it's possible to change them.. I actually replace them with 0x04143672 0xffffffff
[2021-02-20 18:22:25]
flylusive_pat :
> well then doesnt sound like they would be difficult to grab
i have them, they're different for some drones..
[2021-02-20 18:23:33]
flylusive_pat :
@jcase v0.0.2 dji is starting to implement their own way of auth.. I think in future they won't even use TI auth.. rather will do something like Sanyo where it's based on some private algo randomly generated numbers
[2021-02-20 22:53:54]
ego-22 :
Try connect to uart tx drone to uart rx converter on this pin. Speed 921600
Mine spark board got "Unknown board: please check your configs." error.
[2021-02-21 06:56:22]
buundy :
Thanks, I will try!
[2021-02-22 12:16:08]
webhdx :
[2021-02-22 12:16:29]
webhdx :
^ Mavic 2 Zoom
[2021-02-22 15:37:59]
mingtao :
Just replace and use djigo
[2021-02-22 15:38:15]
mingtao :
For best result calibrate over dji software
[2021-02-22 16:12:49]
dnacho :
Does anyone know the source or how to fix a mavic 2 that sometimes transmits image and sometimes it doesn't
I have to reboot it around 3 or 4 times before it transmits image and the next time I turn it on it won't transmit
[2021-02-22 18:03:40]
validat0r :
noob question: does the battery has to be powered on the access the bms via i2c/smb?
[2021-02-22 18:40:47]
validat0r :
ok, it does not
[2021-02-22 18:55:39]
flylusive_pat :
@ilovemynexus4 no and use smbus not i2c
[2021-02-22 18:59:02]
validat0r :
ok. well for now i2c works fine with mefistos tool on the 2nd bat I dremeled open. first one didn respond. I bet cells are empty and I have to open the case
[2021-02-22 20:18:08]
mefisto :
I charged mine by a small hole below connector. There should be an image in the history of this channel.
[2021-02-22 20:18:37]
mefisto :
The little hole at front is probably also visible in my video, though I never mention it.
[2021-02-22 21:44:37]
validat0r :
cant get rid of battery error .. High Voltage bit is set. Cells seem to be out of balance by 0.2V .. is "device reset" sth I should consider? how does the reset work?
[2021-02-22 22:24:10]
mefisto :
What each command does, you can find in chip reference.
[2021-02-22 22:25:29]
mefisto :
Search for "SLUU852A.PDF", as this was not published by TI.
[2021-02-22 22:29:43]
mefisto :
"High Voltage" is a charging flag, not PF flag.
[2021-02-22 22:35:57]
validat0r :
found your photo for reaching the (+) with a needle .. very helpful.Thx
[2021-02-22 22:47:52]
validat0r :
got it. thx
[2021-02-23 10:49:00]
validat0r :
*recharging a bad batt with 5V @ 2.5A .. not sure this will amount to anything*
[2021-02-23 11:42:37]
mefisto :
I charged it only a bit, like 20%. Then I cleared PF and charged the rest by standard means.
[2021-02-23 12:02:18]
mefisto :
Hm, 5V @ 2.5A? 0n this voltage, the current should drop within less than a minute. Unless you hit wrong pad with your needle, and you're charging a single cell.
[2021-02-23 12:12:26]
validat0r :
thought of that, too. dremeled access to the balancer plug, result: two cells "dead", one cell like 4V. Charged the two to 4V, LEDs back, now in the process of resetting PF
[2021-02-23 12:23:48]
validat0r :
awesome. now the sucker is charging. but still LED 2+3 are lit.
[2021-02-23 12:50:10]
fredmicrowave :
A lipo cell that has dropped below (say) ~2.5v for some time (more than a few minutes) is virtually dead ... Will never hold charge as before imo ...
[2021-02-23 12:50:33]
kilrah :
nope, revived many that even stayed at 0V for months
[2021-02-23 12:50:40]
kilrah :
depends a lot on luck
[2021-02-23 12:53:05]
fredmicrowave :
DJI batteries ?
Some, like in tablets, have a protection circuit (tiny board close to pads) that shut off so you get 0V but the battery has still charge. Never seen a 0v battery that did not puff.
[2021-02-23 12:53:35]
kilrah :
they can work well with even close to rated capacity... current handling however can go down quite a but, so they might not be good enough for propulsion anymore
[2021-02-23 12:53:52]
kilrah :
not DJI, but others yes, and really at 0V
[2021-02-23 12:54:39]
fredmicrowave :
Ok, good to know. Current often improves after a few cycles.
[2021-02-23 13:12:26]
validat0r :
LED 2+3 is fw issue? how to force a bat-fw upgrade?
[2021-02-23 14:04:37]
mefisto :
My tool doesn't have FW read/write function. But the battery can be rebooted into bootloader, then you have access to it.
[2021-02-23 15:59:33]
flylusive_pat :
@mefisto why not to add reading/writing senc (unencrypted srec)?
[2021-02-23 15:59:39]
flylusive_pat :
[2021-02-23 16:19:09]
mefisto :
If anyone needs it, we do accept pull requests / patches to dji-firmware-tools. I doubt I'll be implementing that.
[2021-02-23 20:46:56]
validat0r :
Charging middle cell ..
[2021-02-24 10:00:30]
validat0r :
Is there any information available on how the AC does the battery fw update?
[2021-02-24 10:52:18]
validat0r :
ok, have this one battery with the 2+3 LED problem; couldn't get I2C connect, now after desoldering (+) and reattaching, I2C is up again. not sure, what to do with it.
[2021-02-24 13:30:20]
validat0r :
this "full access" mode is different from "unsealed", rght?
[2021-02-24 14:00:56]
validat0r :
Well, writing that senc to my bat didnt help .. now even less functionality .. only i2c bus visible but not accepting any more commands :confused:
[2021-02-24 14:28:03]
mefisto :
yes.
[2021-02-24 15:16:56]
flylusive_pat :
Why you wrote it @ilovemynexus4 .. I send it to mefisto as example
[2021-02-24 16:49:27]
validat0r :
wasnt it for mav pro batts?
[2021-02-24 19:02:35]
flylusive_pat :
Yes it was, i pulled it from my new bat
[2021-02-24 19:02:59]
flylusive_pat :
But it purposed was to show it to mefisto if he needs it for adding senc reader writer
[2021-02-24 19:03:18]
flylusive_pat :
If I had the senc back in the day, it would be easier for me to impleme that
[2021-02-24 19:12:10]
validat0r :
sure. would be nice. but, as he said, he likely won't implement it.
[2021-03-01 16:50:35]
cloudwerx :
Hey all, can anyone recommend a good logic analyser/scope that is good for getting started with hardware hacking, I have started working on some old routers and learning a lot about various protocols and sniffing/capture, attempting to get at the FW and root. I currently have a decent multi-meter, various probe types, rPi, a laptop with Kali, Arduinos, soldering station and bench adjustable DC power supply. I figure a logic analyser would be real useful and wouldn't mind using a software based one rather than a pricy external unit. Trying to keep it around 100$USD if possible, any ideas ? If you know any other tools that would be helpful in learning I am all ears. Thanks!
[2021-03-01 16:51:40]
jcase :
@tylerpublic price range?
[2021-03-01 16:51:54]
jcase :
<https://www.saleae.com/>
[2021-03-01 16:52:00]
jcase :
this is the best logic analuyzer imo
[2021-03-01 16:52:05]
jcase :
primarily thier software is great
[2021-03-01 16:52:14]
jcase :
there are super cheap clones available that work with their softwarew
[2021-03-01 16:52:20]
jcase :
but the hw on those are hit or miss sometimes
[2021-03-01 16:57:13]
cloudwerx :
Hmm the software looks really nice, but trying to keep it around 100-150$ or so. Wife is about to divorce me after buy Mavic 2 Zoom and then the Pro Camera/Gimbal plus tons of extras lol. Do you know what analyser features are really important to have or ones I would regret not having when I start attacking my M2?
[2021-03-01 16:58:19]
jcase :
clones are like $4
[2021-03-01 16:58:50]
jcase :
[2021-03-01 16:58:56]
jcase :
or less, i think i paid $1 each, i keep a drawer of them to give away
[2021-03-01 16:58:59]
jcase :
or use in training
[2021-03-01 16:59:33]
cloudwerx :
Ok :ok_hand: thanks
[2021-03-01 17:00:38]
jcase :
But I prefer the real one myself
[2021-03-01 17:04:41]
cloudwerx :
Perhaps once I learn more and get confident with things I will make the investment, definitely enjoy learning all this stuff. Got my 10 year old Son helping me, he wants to be an engineer when he grows up, or a professional gamer/youtuber (ugh)
[2021-03-01 17:06:52]
jcase :
my 10yr old wants the same lol
[2021-03-01 17:21:18]
cloudwerx :
With all the advantages they have today compared to when I grew up in the 80s and 90s, he is able to learn things so fast and has so much opportunity. We ended up enrolling him a new school that is heavily focused on technology, has been huge help as he is not the sport playing type, and is very introverted and shy. But has been able to join a lot of after school programs learning how to code, use photoshop and various DIY/MAKE stuff. We recently found a Maker Space close by and thinking about signing up, they have some badass tools I would never be able to afford. Just waiting for COVID to stop screwing things up
[2021-03-01 17:22:01]
jcase :
we dont have anytyhing here
[2021-03-01 17:22:17]
jcase :
but i mean, i functionally have a makerspace at my place so there is that
[2021-03-01 17:22:36]
jcase :
@tylerpublic check out [codemonkey.com](http://codemonkey.com)
[2021-03-01 22:40:29]
flylusive_pat :
> there are super cheap clones available that work with their softwarew
@jcase I got tons of them and almost all do the job, for 2$ one
[2021-03-01 22:40:50]
jcase :
@kakerarecever567 i have about 40 of them
[2021-03-01 22:40:53]
jcase :
for putting on trainings
[2021-03-01 22:41:02]
jcase :
but they are occasionally faulty
[2021-03-01 22:41:06]
jcase :
i still prefer my salae
[2021-03-01 22:41:26]
jcase :
i actually havent gotten to use them for trainings ... covid
[2021-03-01 22:41:30]
flylusive_pat :
I made smbus/i2c logic analys from EV2300 ))
[2021-03-01 22:41:36]
flylusive_pat :
what trainings?
[2021-03-01 22:41:47]
jcase :
i was hoping to put on a drone security training
[2021-03-01 22:41:58]
jcase :
i built a mock drone out of cheap boards
[2021-03-01 22:42:01]
jcase :
and a linux distro
[2021-03-01 22:42:09]
flylusive_pat :
good luck with that ))
[2021-03-01 22:42:14]
jcase :
3d printed drone shaped cases
[2021-03-01 22:42:23]
jcase :
luck isnt needed on that, i had enough interest
[2021-03-01 22:42:38]
jcase :
training budgets are common in the us for infosec
[2021-03-01 22:43:06]
jcase :
every training ive done has been booked out completely
[2021-03-01 22:43:14]
flylusive_pat :
i was tired of using logic analys to sniff comm with drone so i used ev23k, turned out it can monitor the traffic with a bit of adjustements
[2021-03-01 22:44:14]
flylusive_pat :
now I'm on a way to find unseal algo for bq40 family, to unseal without key
[2021-03-01 22:44:44]
flylusive_pat :
it's possible to just auth the chip and it will be in full access, but nothing is public, those I know that can do that, got it from factory
[2021-03-01 23:08:42]
tmbinc :
My main issue with Saleae-style LAs is the limited buffer RAM. Maybe my machine is just crappy but depending on what else I do with the machine, I constantly run into buffer overruns at high-ish sample rates (50MS/s+ with a few pins). This is a Saleae Logic 16 (and clone; behavior is equal of course)
[2021-03-01 23:17:57]
kilrah :
got a real logic pro 8 too, convenient to have analog to have a quick look at the actual waveform when things are strange, saved me time on several occasions without having to dig out the scope
[2021-03-01 23:18:01]
kilrah :
never had buffer issues
[2021-03-02 13:18:44]
kketija :
Mavic Air 2 Gimbal - is it possible to swop the gimbal between drones and not have an activation issue. or is the gimbal hardcoded to the motherboard & therefore only can be used on the original drone. thanks
[2021-03-02 15:38:30]
freaky123 :
Does anyone have a shop where you can buy a dji osmo pocket 2 battery?
[2021-03-03 15:28:51]
mingtao :
I have spare
[2021-03-03 15:53:41]
dnacho :
Wasnt that battery supposed to not be able to be swapped
[2021-03-03 17:10:55]
mingtao :
[2021-03-03 17:17:56]
dnacho :
Oh wow even the one of the v1?
[2021-03-03 17:26:20]
kilrah :
well its not meant to be user-replaceable, but it doesn't mean it can't be replaced :smile:
[2021-03-03 18:32:03]
w4t3r :
hey, were you able to replace it somehow? One of my two accelerometers is stuck and I've been thinking about replacing the IMU.
[2021-03-03 18:33:03]
mefisto :
We're not just users, we're more like users with benefits.
[2021-03-03 20:41:00]
flylusive_pat :
i'm taking you the pics now
[2021-03-03 20:46:21]
flylusive_pat :
@mefisto do you know what chip is running inside new dji bat? 9003?
[2021-03-03 20:47:17]
mefisto :
no, haven't seen any teardown yet.
[2021-03-03 20:47:43]
flylusive_pat :
i'm planning to get keys for it
[2021-03-04 10:54:24]
mingtao :
9003 - it is bq40z307
[2021-03-04 14:26:11]
flylusive_pat :
@mingtao 9003 is just chip, z307 is fw
[2021-03-04 14:26:29]
flylusive_pat :
But my friend said on the new bat they’re different keys
[2021-03-04 14:26:58]
mingtao :
maybe - dont know
[2021-03-05 16:15:28]
freaky123 :
I broke the cable while disassembling my osmo pocket 2, but I didn't want to figure out the connecotr and just replace the battery
[2021-03-05 16:15:44]
freaky123 :
but apperently I have to figure out the connector if it isn't user replacable
[2021-03-07 03:25:31]
cloudwerx :
Anyone know a cheap/clone or alternative to the VR Table? Looking for something that can hold my probes in place for emmc flashing, I already have bench PSU so don't need any rails built in like the VR Table, but the articulating arms and vice are so nice, so expensive tho
[2021-03-07 10:56:11]
pingspike :
looks like some kind of futuristic robotic open heart surgery :nerd_face:
[2021-03-12 16:10:38]
micronica :
i use this <https://www.thingiverse.com/thing:3615910>
[2021-03-15 09:57:46]
rameezahmed1998 :
Mavic2 enterprise sensor system error barometer disconnected.
[2021-03-15 09:58:30]
rameezahmed1998 :
Anyone know how to bypass it to back in fly
[2021-03-15 15:51:35]
micronica :
<https://drone-hacks.com/> can i downgrade mavic air 1 from 620 mor its the same as mavic 2 pro when dji locked downgrade?
[2021-03-15 15:55:02]
micronica :
antyrollback value 4
[2021-03-15 15:59:15]
cs2000 :
<https://drone-hacks.com/birdmap>
[2021-03-15 15:59:43]
micronica :
it shows firmware on grren nut on mavic 2 pro also and i cant downgrade
[2021-03-15 16:00:44]
cs2000 :
Downgrade is possible back to 01.00.0300 as the ARB# is the same, but no further
[2021-03-15 16:01:41]
micronica :
i need 500 so it fill be ok, and antyrollback doesnt matter?
[2021-03-15 16:02:27]
micronica :
or a can downgrade only if i have 300 or older FW?
[2021-03-15 16:03:10]
cs2000 :
Correct, as long as the ARB# is the same, you can downgrade
You can grab firmware from my site (or the EXE version if you want it locally) <http://dankdronedownloader.com/DDD2/app/>
It shows you the ARB# when you select the firmware.
You can downgrade to 01.00.0300 from your version (including 0500) but you cant go lower
[2021-03-15 16:06:08]
micronica :
thats weard because i cant dongrade using dumldore 3.2 to 1.00.0500
[2021-03-15 16:07:18]
cs2000 :
DUMLdore may not support the Air, genuinely its been so long since it was the "go-to" application i forget what Jezzab managed to add support for
[2021-03-15 16:07:31]
cs2000 :
Try Drone-hacks anyway, firmware flashing is free
[2021-03-15 16:07:49]
cs2000 :
you just have to supply the firmware file which you can get using DankDroneDownloader !DDD
[2021-03-15 16:08:24]
cs2000 :
Any specific questions about using it, we have ~dronehacks as a channel
[2021-03-17 02:40:26]
drones.medellin :
Hello guys,
Anyone with some Dji board schematics?
I can help to build them if there is someone working on it
Thanks :+1::skin-tone-3:
[2021-03-17 14:06:28]
jcase :
Man I'd like some data sheets on the new socs
[2021-03-22 14:49:47]
cloudwerx :
Dude that's perfect! Thanks!!
[2021-04-06 07:23:35]
buundy :
Anyone has experience about Mini 1 gimbal housing module is compatible with Mini 2? Seems the same but it would be too easy. I know about the 4K badge difference, but apart from that can I exchange them?
[2021-04-06 09:43:44]
djibot.5150 :
Would you be willing to add to the Mavic 2 pro page? Very little is written so far.
[2021-04-12 13:11:01]
mixeysan :
Do you need a photo of mavic 2 pro motherboard with ISP eMMC pinouts? I was interested and I bought the motherboard of the drowned drone, drew the ISP eMMC pinout and read the data from it, and also restored photos and videos from the internal memory.
[2021-04-12 20:39:49]
micronica :
Same motor. I replace gimbal motor many times from MM1 to MM2
[2021-04-13 22:18:45]
tmbinc :
MM1/MM2 Gimbal - Is there some documentation on the electrical interface to the gimbal? Is it all digital, or are there power drivers/ADCs on the mainboard?
Is there a good way to test a gimbal, other than to put it on a drone and try it?
[2021-04-13 22:19:26]
dnacho :
And where did you got the motor?
I have been trying to get it but the usual stores are out of stock
[2021-04-15 17:54:12]
flylusive_pat :
Do you know guys where to find Mini 2 gimbal shell? Cannot find it on AliExpress. I have camera working but it's not rotating because it's cracked and with burned motor.
[2021-04-16 18:34:38]
micronica :
Anyone found solution on p4 controller (gl0300f) connect to drone but not to phone. Already replace usb board and flex from mainboard to usb board?
[2021-04-16 19:32:16]
mefisto :
No idea what's in GL300f.. do they still use Cypress USB controller there? If so, you should look into documentation of that chip, figure out how to check whether it's booting.
Or ping the chip via DUML, from the drone. It should be reachable.
[2021-04-16 19:33:00]
mefisto :
(from the drone, meaning connect the drone to PC and send DUML command from PC)
[2021-04-17 01:48:23]
djibot.5150 :
Has anyone gotten any modding done with M200 V2? I was going to try the retrorom mod but it appears that the assistant mentioned does not work with the aircraft.
[2021-04-17 18:05:31]
djibot.5150 :
EBay sells Mavic 2 zoom/pro shells, and each arm with motor, look there yet?
[2021-04-17 19:09:23]
flylusive_pat :
@djibot.5150 We're talking about Mini 2, not Mavic 2.
[2021-04-17 19:10:34]
djibot.5150 :
just saying alot of parts are sold there
[2021-04-17 19:11:23]
djibot.5150 :
Some people buy just to sell parts there, that's all, sorry.
[2021-04-17 19:27:28]
flylusive_pat :
@djibot.5150 I agree, but I can't seem to find Mini 2 gimbal arm. I asked friend in DJi if he can get me one, I'm afraid Mini 1 gimbal arm will not work.
[2021-04-17 19:42:27]
djibot.5150 :
You right I just spent 10 minutes looking everywhere, dampers cables and replacement lenses are all I see everywhere. Sorry about that. May need to buy whole assembly.
[2021-04-19 16:11:19]
mixeysan :
Greetings to all! I have a blocked battery from the mavic 2 pro, as I understand it. there was a low charge. The battery is seen on the I2C bus
[2021-04-19 16:12:21]
mixeysan :
[2021-04-19 16:12:42]
mixeysan :
[2021-04-19 16:15:56]
mixeysan :
How can I repair it?
[2021-04-19 17:41:32]
mefisto :
If you read the battery thread in "issues" on github, you will learn that DJI introduced PFF2 flag in newer batteries.
[2021-04-19 17:42:05]
mefisto :
I know how to lift that flag, but I didn't implemented that yet. I'm now focused on different things.
[2021-04-19 18:14:03]
mefisto :
there are paid tools to do that, or you can figure out commands to send through I2C by yourself.
[2021-04-19 18:16:41]
mixeysan :
what commands are needed for unseal?
[2021-04-19 19:00:34]
mefisto :
do ManufacturerBlockAccess.DataFlashAccess at 0x4060
[2021-04-19 19:02:09]
mefisto :
around bytes 4-6, there is flag value. compare that with other batteries
[2021-04-19 19:06:56]
mefisto :
I'm not exactly sure which bits need to be toggled. On my good battery, the whole line is:
02040000006700006b3a00005a4f570003534449000000000000000000000000
[2021-04-19 19:09:10]
mefisto :
You may need to trigger ManufacturerBlockAccess.DeviceReset after writing to make the battery honor the new value
[2021-04-23 10:14:57]
flylusive_pat :
> what commands are needed for unseal?
<https://trb2300.xyz> if you want a paid tool to do it
[2021-04-23 11:53:43]
tmbinc :
My experience is that MM1 and MM2 gimbals and cameras are completely identical, except the 4k badge. Did I miss something?
[2021-04-28 21:44:18]
dnacho :
anyone knows of a way to reset the firmware on a osmo mobile 4?
[2021-04-30 07:40:11]
buundy :
Can someone identify me this connector? It is in the Spark controller.
[2021-04-30 07:40:36]
buundy :
Unfortunately I damaged it so I want to replace it
[2021-04-30 07:40:48]
buundy :
8-pin ribbon connector
[2021-05-03 19:52:45]
buundy :
Anyone? :)
[2021-05-03 20:21:08]
mefisto :
DJI used Omron ZIF connectors in the past, maybe try looking there.
[2021-05-03 20:27:31]
mefisto :
Looking at my photo:
<https://github.com/o-gs/dji-firmware-tools/wiki/GL100-Main-board>
This seem close:
<https://components.omron.com/product-detail?partId=26>
[2021-05-04 06:45:13]
buundy :
Thank you very much!
[2021-05-04 07:12:02]
info349 :
someone has some solution to activate a dji mini2, for them it is stolen during transport
[2021-05-04 08:08:24]
mefisto :
@info349 If you have a proof of purchease, try asking DJI.
We're not really into unlocking possibly stolen products.
[2021-05-04 08:09:54]
info349 :
,yes, I have proof of purchase
[2021-05-04 11:03:40]
mefisto :
@buundy looking into the datasheets - it seem I was closing ZIFs wrong all along.
[2021-05-07 15:15:42]
tmbinc :
I want to power a MA2 from a lab PSU. Any hints on how I simulate a power button press?
[2021-05-07 15:49:23]
validat0r :
Mavic just starts up when voltage is applied. Ma2 not?
[2021-05-07 16:37:25]
tmbinc :
Uh ok the board has some more damage than expected ;)
[2021-05-07 17:00:48]
mefisto :
My tool has some rudimentary simulation of these packets - I use it to test the tool without the actual battery connected (--dry-run):
<https://github.com/o-gs/dji-firmware-tools/blob/master/comm_sbs_chips/BQ40z307.py#L4664>
[2021-05-08 11:46:15]
flylusive_pat :
@mefisto are you missing auth there? block 2f? without having that ti auth you'll get non-dji warning
[2021-05-08 12:02:47]
mefisto :
You're right. I made it only to test my tool, and my tool does not currently implement Authenticate 0x2f command.
[2021-05-09 19:34:03]
olli_dxd :
I was looking at the gimbal on my P4P and was quite intrigued by the internal extra micro usb. Do we know what it is for?
I also had an idea of modding a downward white led like on the modern mavics, do we have anything on this?
[2021-05-11 20:48:52]
olli_dxd :
Got a P4 battery with connector melted, do we know which type of connector it is I need to order?
[2021-05-11 20:58:45]
buundy :
I think it is proprietary so you cannot order it from digikey or farnell
[2021-05-11 21:50:15]
olli_dxd :
Found it, it’s made by MSD/MISTA. It’s a 10pos 2.5mm pitch blade type power connector
[2021-05-12 19:24:22]
olli_dxd :
Ah shite… Minimum order volume is 50 pcs:cold_sweat:
[2021-05-13 08:42:27]
buundy :
Followup to my connector-search:
[2021-05-13 08:42:44]
buundy :
[2021-05-13 08:42:51]
buundy :
Can anyone recognize the logo of the manufacturer?
[2021-05-13 08:51:27]
buundy :
the distance between the pins is around 0.05mm, I am not sure, because I didn’t have a proper caliper with me just a cheap one
[2021-05-13 08:52:04]
buundy :
sorry 0.5 mm
[2021-05-13 08:59:44]
buundy :
maybe this? hirose FH34?
[2021-05-13 08:59:46]
buundy :
<https://www.hirose.com/en/product/document?clcode=&productname=&series=FH34SRJ&documenttype=Catalog&lang=en&documentid=D31646_en>
[2021-05-13 09:01:15]
buundy :
(the logo is different, but maybe the spec is the same)
[2021-05-13 21:07:35]
gabriel.gonzalez.garc :
Is Mavic Pro 2 based on Ambarella or AllWinner?
[2021-05-13 21:54:49]
mefisto :
Hints:
• Ambarella SDK has a lot of functions starting with 'amba'. Do you see that in m0801?
• Ambarella has Cortex-A53 CPU, which microarch is that based on? And which microarch is used in m0801?
[2021-05-14 05:39:25]
hazardc :
P4p needs the 32ch hack back ... they gimped that thing so hard when they started pushing occusync.
[2021-05-14 10:08:10]
buundy :
followup to my fpc connector saga
[2021-05-14 10:08:57]
buundy :
I ordered this one and it seems it fits
[2021-05-14 10:08:58]
buundy :
<https://hu.farnell.com/molex/503480-0800/connector-fpc-8pos-1row-0-5mm/dp/2396218?st=503480-0800>
[2021-05-14 10:09:22]
buundy :
Molex [503480-0800](tel:5034800800)
[2021-05-14 17:13:48]
johnriscure1 :
I also want to do this hehe
[2021-05-14 17:14:02]
johnriscure1 :
ie replace battery with lab psu
[2021-05-15 11:15:35]
info349 :
hello everyone I have a mavic 2 pro with a broken gimbal (broken cables) is it normal that it gives me error 200 and does not arm the motors? or. could there be some other problem?
[2021-05-15 15:11:22]
ego-22 :
This is normal without gimbal
[2021-05-15 15:46:41]
info349 :
thank you very much
[2021-05-17 18:35:30]
the.hope.ltd :
No it's not normal ...error code 200 could be from main board also
[2021-05-19 10:09:26]
tmbinc :
Ok, another MA2. I can power it up from a Lab PSU, but is it normal that it has a >2A "pulse" at the beginning?
After that it powers up fine, doesn't complain, and does the motor self-check beeps.
(This MA2 had water damage so I want to make sure it's not related to that.)
[2021-05-19 10:54:38]
olli_dxd :
The 2A startup current is most likely charging capacitors. There is also some draw from the ESC modules when they go through the beep sequence when twitching the motors
[2021-05-19 15:34:11]
tmbinc :
It's not inrush. It is when twitching the motors (not beeping - that's later)
[2021-05-19 15:35:37]
tmbinc :
It peaks at 4.5A(!!).
[2021-05-19 15:36:58]
tmbinc :
Then again with a 40.42Wh battery, and an estimated flying time of ~35 minutes, that's well over 80W average power so significantly higher.
[2021-05-19 15:37:51]
tmbinc :
I wonder if it's a quick battery test of some sort.
[2021-05-19 15:39:18]
olli_dxd :
It is an all system test used to determine if motors and ESCs are properly working and the peak is because it has to accelerate the static mass of the bell housing and propeller on all 4 corners and energise the motors in the gimbal. I think at least
[2021-05-19 15:42:09]
olli_dxd :
Mind if I ask which log this is written to so I can try graphing this on my P4P just out of curiosity
[2021-05-19 15:45:03]
tmbinc :
This is from a lab PSU (Agilent N6701A with N6774A module)
[2021-05-19 15:45:51]
tmbinc :
(so not logged on the device)
[2021-05-20 04:59:51]
rameezahmed1998 :
Is mavic mini and mavic mini 2 esc board are same?
[2021-05-20 11:28:48]
buundy :
No they are not
[2021-05-20 11:29:01]
buundy :
Mini 2 has extra connector for front led
[2021-05-20 11:29:12]
buundy :
Possibly other hw differences also
[2021-05-20 14:54:17]
olli_dxd :
Mini 2 has stronger motors so ESCs are beefier
[2021-05-20 17:48:17]
buundy :
Really different motors?
[2021-05-20 17:48:29]
buundy :
I mean I see the different bell
[2021-05-20 17:48:44]
buundy :
But i thought it was just some weight optimization
[2021-05-20 17:49:25]
buundy :
I have built a microlongrange fpv drond from mini 1 motors that is why im asking
[2021-05-20 17:49:45]
buundy :
[2021-05-21 10:45:46]
olli_dxd :
@buundy yep, different kV ratings
[2021-05-21 10:46:07]
buundy :
thanks! I will try them. Any idea why I get heavy vibrations?
[2021-05-21 10:46:16]
buundy :
Post a video in a minute
[2021-05-21 10:50:29]
buundy :
<https://www.youtube.com/watch?v=itB8RiYaGhw>
[2021-05-21 10:50:38]
buundy :
still processing
[2021-05-21 10:51:55]
buundy :
when I hold it in my hand and raise the throttle a bit I can see the motors spin up and start to vibrate left-right heavily
[2021-05-21 10:52:06]
buundy :
arms are made of 3mm CF
[2021-05-21 10:52:22]
buundy :
not too long to resonate I think
[2021-05-21 10:52:47]
buundy :
I am not sure if there is an unbalance in the motors themselves
[2021-05-21 10:53:00]
buundy :
I will swap them now to test another four
[2021-05-21 17:53:38]
olli_dxd :
Check your props, they should be labled which ones are paired to which, since they are balanced together
[2021-05-21 18:45:21]
fredmicrowave :
Are your props loose enough ? But not too loose ...
[2021-05-21 21:33:52]
quad808 :
I would: switch props front to back. Then fly again. If you can manage to get it into a stable hover....look closely at the vibrations. You can even lightly touch the bottom of the arm under the motor to see exactly which motor/prop is out of whack. (feel for vibrations...just a light touch under the motor) Then switch the props again and do the same thing. If the vibration stays with the same motor, it's probably not the props. Check the motor screws etc to make sure they are tight.
[2021-05-22 06:36:05]
buundy :
I think it is not the problem with the motors
[2021-05-22 06:36:12]
buundy :
And not the props either
[2021-05-22 06:36:53]
buundy :
They have a small imbalance but in the mini the frame dampens the resonance, so there is no problem with them
[2021-05-22 06:37:11]
buundy :
But in a rigid carbon fiber frame the resonance appears
[2021-05-22 06:38:55]
buundy :
Holding in hands (with protective glasses) I raised the throttle to a point when it started vibrating heavily, and it couldnt stop after a specific frequency even after I lowered the throttle. I had to let go of the throttle to stop the resonance
[2021-05-22 06:39:26]
buundy :
So i designed and made two horizontal stiffeners which I attached to the arms
[2021-05-22 06:40:14]
buundy :
[2021-05-22 06:41:05]
buundy :
That eliminated the resonance problem, or probably just pushed the resonant frequency higher beyond the normal throttle interval that would be used
[2021-05-22 06:41:55]
buundy :
Now the resonant behaviour mostly disappeared, but there is significant wobble while flying that is probably caused by a tuning issue
[2021-05-22 06:42:22]
buundy :
However I cannot figure out what could be the cause
[2021-05-22 06:44:24]
buundy :
this video shows what it was before the arms stiffener: <https://www.youtube.com/watch?v=itB8RiYaGhw>
[2021-05-22 06:44:36]
buundy :
clearly throttle-related vibrations
[2021-05-22 06:47:07]
buundy :
now here is the video with the wobbles, any ideas appreciated :slightly_smiling_face: first I will try to lower the filtering, and dive deeper in tuning
[2021-05-22 06:47:21]
buundy :
<https://www.youtube.com/watch?v=NVKPItRh4ng>
[2021-05-22 06:54:10]
buundy :
Sorry for posting here, should I move to random?
[2021-05-22 16:13:41]
olli_dxd :
This is clearly hardware related, but mayhaps more random
[2021-05-22 17:03:40]
buundy :
Okay then, lets move to #random
[2021-05-26 20:20:18]
info349 :
hello everyone, I have a mavic 2 pro that after a fall the gimbal no longer moves, do you think if only y motor is interrupted, the rest (p motor r motor) should move?
[2021-05-26 20:21:25]
buundy :
In my experience diagnosing the M2P gimbals are nightmare. So much can go wrong and sometimes multiple parts.
[2021-05-26 20:21:57]
buundy :
If you can get several gimbals maybe you have chance to finally build one working. Maybe just my unluckiness :slightly_smiling_face:
[2021-05-26 20:34:05]
info349 :
the problem is that on the various Chinese stores there are no more spare gimbals, sold out, in fact I was thinking of sending it to dji but I don't know how much it could ask me
[2021-05-28 15:38:29]
olli_dxd :
Any way to solve this problem? I’d rather not shell out 200 bucks for the whole Ncore controller module
[2021-05-28 21:02:11]
mingtao :
just use glue
[2021-05-29 14:11:55]
olli_dxd :
Metal and glue nah, won’t cut it
[2021-05-30 09:51:14]
flylusive_pat :
<https://youtu.be/YwWq3HM0-ig>
[2021-05-30 12:59:41]
info349 :
does anyone know if the one circled is the stop of the gimbal on the mavic 2 pro? the gimbal spins without ever stopping and I don't understand what should stop it
[2021-05-31 03:13:02]
drlov :
Yes!
[2021-05-31 16:17:51]
tmbinc :
Has someone found the serial port (with LK log, beginning of Linux spew) on Mavic Air 2? It should be there and I scoped "everything" and didn't find it, but probably just missed it.
[2021-06-01 00:25:28]
tmbinc :
ok found it, it's on the middle (unused) FPC connector
[2021-06-01 14:08:15]
buundy :
Am I right that the mini2 gimbal cannot be calibrated via the comm_og_service_tool python script? Or am I just not doing something right?
[2021-06-01 14:08:36]
buundy :
Also is there a service firmware like on the mini 1 (.320) ?
[2021-06-01 14:31:19]
info349 :
hello everyone, i am banging my head with mavic 2 pro fallen, the gimbal is completely detached, i bought this piece in the picture and now i am back the pictures but the gimbal does not make any kind of movement when i turn it on it is as if there is no it was but the camera works perfectly, what could I check? is it not by chance that the firmware has some protection that prevents movements?
[2021-06-01 16:41:19]
the.hope.ltd :
Hello
I have mavic 2 z wich is not linking to rc
Update always ask for missing updating meduals
The link led on ac stay red even after pushing
Any idea for sulotion
Or where is the rf board on core board of m2??
[2021-06-02 15:36:19]
dnacho :
@buundy you are correct, in theory the option to use comm has been closed. And yes there is a service firmware for the mini 2
[2021-06-02 15:37:36]
dnacho :
@info349 do any of the motors get hot? And the ptz cable are you sure is not damaged
[2021-06-02 15:37:58]
dnacho :
Has anyone been able to change the gimbal of the mavic air 2
[2021-06-02 15:51:11]
info349 :
no motor overheats, the cable looks good, the images are transmitted
[2021-06-02 16:13:50]
dnacho :
do you happen to have another ptz cable?
[2021-06-02 18:02:58]
buundy :
if I change it to another gimbal-camera, it needs activation but I cannot activate it…
[2021-06-02 18:18:25]
dnacho :
@buundy just what exactly do you mean by that? You swap the complete gimbal to another mm2?
[2021-06-02 18:19:53]
buundy :
no-no, I meant ma2
[2021-06-02 18:19:56]
buundy :
not mini 2
[2021-06-03 06:09:29]
info349 :
no, i will buy it
[2021-06-03 08:38:36]
buundy :
does anyone know what is the firmware number of the mini 2 that has gimbal calibration function? I know that for mini 1 it is 01.00.0320
[2021-06-03 08:58:38]
bin4ry :
not from the top of my head, but we have all calibration firmware currently available ping @cs2000 from ~dankdronedownloader he can provide them if you are nice to him :slightly_smiling_face:
[2021-06-03 09:03:53]
buundy :
i already checked the ~dankdronedownloader repository, but I dont know which one is used for gimbal cali
[2021-06-03 09:04:45]
buundy :
[2021-06-03 09:07:16]
bin4ry :
this firmwares are not listed in the website
[2021-06-03 09:07:29]
bin4ry :
as they are no need for endusers
[2021-06-03 09:07:49]
buundy :
0.320 is listed for Mini 1, that is why I thought
[2021-06-03 09:08:57]
bin4ry :
ahh, i think he listed it by accident then
[2021-06-03 09:08:59]
bin4ry :
:slightly_smiling_face:
[2021-06-03 09:09:09]
bin4ry :
normally he does not list this special firmwares
[2021-06-03 09:10:40]
buundy :
okay, thanks for clarifying
[2021-06-03 09:15:33]
mefisto :
Hm, so we have calibration FW (shouldn't that be called pairing FW?) for any other drones? I thought that is mini-only thing.
[2021-06-03 09:16:16]
bin4ry :
the calibration firmware is needed for the gimbal dance, in the normal one the calibration data is not saved (as per dji service documents).
[2021-06-03 09:17:00]
bin4ry :
and it seems to be a thing since the mm1 series. mm1,mm2,ma2,ma2s needs them to save gimbal calibration data
[2021-06-03 09:18:57]
mefisto :
I see; and what are the versions?
[2021-06-03 09:19:19]
bin4ry :
Air2_FW_AC_v09.09.0902
[2021-06-03 09:19:28]
bin4ry :
320 for mm1
[2021-06-03 09:19:33]
bin4ry :
i need to find the other ones
[2021-06-03 09:19:45]
bin4ry :
once i have access to my pc
[2021-06-03 09:26:26]
bin4ry :
70.00.0100 for mini2
[2021-06-03 09:26:35]
bin4ry :
i have send them to you in PM
[2021-06-03 15:56:41]
buundy :
Just out of curiosity, is there a hardware way to make the downgrade possible on a M2P board 01.00.0200 to 01.00.0100. I mean public way that I can tinker with. I know there is a way but I don’t know if it is public.
[2021-06-03 15:57:05]
buundy :
I have a M2P with a broken gimbal and I plan to refurbish it
[2021-06-03 17:42:14]
dkovar :
Does this look familiar to anyone? Main board off of a homebuilt drone that was ... found.
[2021-06-03 17:47:19]
bin4ry :
200 firmware is antirollback 0 most likely. if so a downgrade without exploit is possible. you should check that. dronehacks shows antirollback value and allows the flash of possible (for free of course if no exploit is needed!)
[2021-06-03 18:06:05]
m4x :
Is it wet or is that flux all over lol
[2021-06-03 18:07:12]
m4x :
Looks close to some atmega so I guess arducopter based Board?
[2021-06-03 18:31:17]
dkovar :
Flux all over. I'm trying to get it in my hands for more detail.
[2021-06-05 00:45:43]
fredmicrowave :
Really looks like some version of the Betaflight controller, maybe F3 or F4, CPU ref should tell more...
[2021-06-05 09:09:10]
mefisto :
Air 2 seem to have differen ESC boards for ADS-B vs. non-ADS-B versions; though I wonder if the ADS batch just had older version of the board, or is there something ADS-B specific on ESC board.
Anybody knows whether these are interchangeable?
[2021-06-05 13:22:41]
tmbinc :
Do the "non-ADS-B" version also have the ADS-B chip?
I know this is a somewhat stupid question, but I'm curious because my europe-bought MA2 boards still have the ADS-B chip on them.
[2021-06-05 13:22:53]
tmbinc :
(And I thought ADS-B is a US-only feature)
[2021-06-05 13:33:32]
mefisto :
I shared the images here:
<https://github.com/o-gs/dji-firmware-tools/wiki/DJI-Hardware#mavic-air-2>
[2021-06-05 13:34:02]
mefisto :
so yeah, the chip is just missing from GPS board.
[2021-06-05 13:35:17]
mefisto :
but I'm a bit confused on whether the changes are limited to GPS board, or is the ESC board somehow also adjusted for ADS-B.
[2021-06-05 13:37:58]
tmbinc :
Ah thanks! Yeah sorry I don't know about the ESC board. Couldn't imagine what should be different but maybe.
[2021-06-06 12:22:47]
asdrubale :
Now also the code for Europe have ads-b , final letter W . You can activate using Frida on iOS device
[2021-06-07 14:39:41]
dnacho :
Does anyone know the real source of the esc connection error code 30085 on the mavic air 2 and mavic air 2s?
[2021-06-07 21:11:25]
flylusive_pat :
Could you please forward it to me as well? I ordered brand new gimbal for Mini 2 )).
[2021-06-07 21:12:39]
flylusive_pat :
New DJi FPV RACER battery :wink:
[2021-06-08 16:13:20]
buundy :
Anyone knows the solution for a gl300e remote that drops connection every 3-5 seconds and has a very laggy blocky screen?
[2021-06-08 16:13:58]
buundy :
I replaced the bottom connection board (probably encoder?) but not helped
[2021-06-08 16:14:18]
buundy :
With a known good remote the drone transmits perfectly
[2021-06-08 16:15:10]
dnacho :
Have you tried setting the remote to just 5.8Ghz, ive found that some when you have it in dual or 2.4 have that issue
[2021-06-08 16:15:55]
buundy :
There is no option for that
[2021-06-08 16:16:02]
buundy :
It has the built in android
[2021-06-08 16:16:32]
buundy :
Probably I will try to reflash the fw also
[2021-06-08 16:25:30]
buundy :
Also there is another one with battery charging ic issue, but if I change the ic, it works for a few days then it dies again. So probably there is something that breaks the charging ic. Any ideas where to look?
[2021-06-08 19:29:46]
dnacho :
it should have the option
[2021-06-08 19:30:22]
dnacho :
There was another fix well you would put a resistance i think somewhere have you tried that one?
[2021-06-08 19:41:42]
m4x :
reverse current issue?
[2021-06-09 08:11:20]
buundy :
sorry I dont understand it
[2021-06-09 08:11:29]
buundy :
the reverse current issue
[2021-06-09 17:25:07]
olli_dxd :
Which IC have you replaced? I can tell you that the Ti charging ic is not the problem. Problem is this fucker. Tiny 8 pin located close to the LEDs on top side of pcb
[2021-06-09 17:29:50]
olli_dxd :
If you need any specific hardware intel on Phantom 4 pro and peripherals just @ me
[2021-06-09 18:02:30]
dkovar :
You, sir, rock. I owe you a beer or three.
[2021-06-09 19:14:44]
buundy :
Thanks for your answer! I replaced that IC :)
[2021-06-09 19:15:14]
buundy :
Saved 5-10 RC this way
[2021-06-09 19:15:25]
buundy :
But this one seems to be stubborn
[2021-06-09 19:16:05]
buundy :
For a few days it works fine with a new IC
[2021-06-09 19:16:19]
buundy :
But after some time it geta corrupted again
[2021-06-09 22:42:04]
olli_dxd :
You never need to replace that IC, only reflow is needed
[2021-06-10 05:55:54]
buundy :
No, in my experience reflowing doesnt always help, sometimes only replacement helped
[2021-06-10 05:56:17]
buundy :
So I replace all the time to make them 100%
[2021-06-14 20:34:53]
flylusive_pat :
CP2112 support for battery repair. tool -> <https://trb.patboonlab.co/> .. wiki => <https://trbwiki.patboonlab.co>
Who has the adapter and wants to participate in testing, plz contact me :slightly_smiling_face:
[2021-06-14 21:19:47]
buundy :
You mean the ev2300 tool?
[2021-06-14 22:32:53]
mefisto :
Nice. I'm planning to support this as well. If I manage to get back to batteries..
It's cheap and easy to program as SMBus adapter.
[2021-06-15 14:17:43]
olli_dxd :
I stand corrected because I may have encountered a stubborn one that needs that chip replaced, where do you get them chips?
[2021-06-16 17:06:33]
buundy :
Aliexpress! If you cannot find it I will search for a link
[2021-06-22 08:13:10]
flylusive_pat :
@buundy No, CP2112 adapter.
[2021-06-22 19:37:03]
tmbinc :
Does someone have a SMB2352 (Mini2 USB-C/charger controller) datasheet? I want to figure out if MM2 FC firmware has the ability to enable VBUS out.
[2021-06-22 19:38:00]
tmbinc :
(Idea is if we can build payloads that are powered from USB, and can communicate DUML over USB)
[2021-06-23 11:23:02]
micronica :
its conformal coat. Commin on fvp drone its reacent fc because 4in1 esc
[2021-06-23 14:10:16]
micronica :
Please send me the files again. I have to build another one but i lost files :smile:
[2021-06-23 14:12:58]
olli_dxd :
Do we know why Osmo X3 refuses to initialise on Inspire 1, but Inspire 1 X3 works no problem on Osmo handle?
[2021-06-23 14:17:17]
micronica :
i don see it on your thingiverse sadly
[2021-06-23 14:44:18]
pingspike :
I bought an Osmo with X5 years ago
[2021-06-23 14:44:30]
pingspike :
I have a feeling I had to re-flash the firmware on it, to make it work with the i1
[2021-06-23 14:45:22]
pingspike :
<https://dl.djicdn.com/downloads/inspire_1/20170710/WM610_FC550_FW_V01.11.01.50.zip>
[2021-06-23 14:45:33]
pingspike :
use with caution, it will update the drone too :grimacing:
[2021-06-23 14:45:42]
pingspike :
oh wait
[2021-06-23 14:45:48]
pingspike :
thats for the X5 :man-facepalming::skin-tone-2:
[2021-06-23 14:46:14]
pingspike :
go here
[2021-06-23 14:46:20]
pingspike :
make sure you select X3 from the list:
[2021-06-23 14:46:24]
pingspike :
[2021-06-23 14:46:38]
pingspike :
again, it will bump the drone to that firmware version too
[2021-06-23 18:41:01]
buundy :
Hi! Which build? The microlongrange for mini motors?
[2021-06-23 19:38:06]
olli_dxd :
@rich buut, what if the gimbal doesn’t do it’s dance, and nothing happened when I put an SD-card in it.:thinking_face: Didn’t try firmware flashing.
Edit: turns out Osmo X3 is different on a hardware level, so flashing inspire X3 fw on it won’t work according to forums
[2021-06-23 20:07:48]
olli_dxd :
Turns out they actually have a different model no… White Zenmuse X3 is FC350, Black Osmo X3 is FC350H. Same goes for Osmo Z3.
[2021-06-24 11:27:59]
micronica :
yes. Its perfect for relax long range flight and i need another one in my life
[2021-06-24 18:31:04]
buundy :
I am still developing it but I think I am close to finished
[2021-06-24 18:31:27]
buundy :
Where are you from?
[2021-06-24 18:32:32]
buundy :
In the last weeks I was eliminating vibration sources from the frame to start the pid tuning with a mechanically clean material
[2021-06-24 18:32:49]
buundy :
Do you know chris rosser and uavtech channels?
[2021-06-24 21:29:19]
dnacho :
Has anyone has a dji mavic mini 1 that still shows gimbal calibration error even after calibrating the gimbal on the special fw version?
[2021-06-25 02:43:16]
luluminjeong15 :
I don't know about datasheet.. but I chip-off the mavic mini2 controller, and dump the flash memory. But I don't know how analyze it. If I give this dump file to you, can you advise with me? OR let me know about your idea more sepcifically, and I will try it! :blush:
[2021-06-25 06:22:48]
buundy :
I dont remember now but maxbe I have had
[2021-06-25 06:23:00]
buundy :
Why? Do you have a solution?
[2021-06-25 16:41:36]
dnacho :
no, I have that problem. One that even after making the gimbal calibration with the special firmware it still shows the gimbal calibration error
[2021-06-30 08:42:48]
micronica :
Calibrate on dji-tools from github then flash special firmware then run calibration on dji fly app. Works for 100% time for me
[2021-06-30 12:41:01]
tmbinc :
I have an - apparently almost unused, built in 2020 - P1GS (original white goggles), that "doesn't boot". Finally disassembled it, got to the serial port, and boot ends with:
```[...]bright_cali, left brightness 200, right brightness 215
crash_counter = 24
wipe_counter = 0
boot recovery
board_id: volt1 = 909mV, volt2 = 723mV
Unknown board: please check your configs.
stop booting...```
[2021-06-30 12:41:05]
tmbinc :
Any idea what this could be?
[2021-06-30 12:58:56]
tmbinc :
Looking at the bootarea.img for this, it seems they read two ADC channels, and then compare with a table to identify the board/DRAM config:
[2021-06-30 12:59:22]
tmbinc :
"30" appears to be the tolerance, and 909mV is really not close enough to 946mV
[2021-06-30 13:50:54]
mefisto :
So the board type is chosen based on some voltages? I'd assume that's the goggles part determining version of the battery+antennas part.
So this fails volt1, or volt2, or both? Looks like both to me.
I wonder what happens if you try different battery part.
[2021-06-30 14:20:27]
tmbinc :
Hm, I don't know the pinout unfortunately. and there's no obvious battery voltage testpoint I can find (like on the other boards)
[2021-06-30 15:15:50]
ego-22 :
I had Spark with same problem. In my case LC1160 (pmic for LC1860) is broken (one line has low resistance)
Log from Spark with problem:
```DRAM: 512 MiB
mmc set rst_n_function done!
SD/MMC1: 0
crash_counter = 13
wipe_counter = 0
boot recovery
board_id: volt1 = 8mV, volt2 = 459mV
Unknown board: please check your configs.
stop booting...```
And from normal:
```zq_select 0
training :1 0
DRAM: 512 MiB
mmc set rst_n_function done!
SD/MMC1: 0
boot normal
board_id: volt1 = 57mV, volt2 = 497mV
board is WM100_UAV_V5A```
[2021-06-30 18:31:24]
tmbinc :
Interesting, thank you! Do you have the pinout of the LC1160?
[2021-06-30 18:50:35]
ego-22 :
No, I only see schematic for Redmi 2A which have LC1860 and LC1160. And I just replace LC1160 and broken Spark starts booting normal.
[2021-06-30 23:09:47]
bajalal :
Hi, i have changed gimbal esc board of phantom 4 pro. Does any know how i can program it or calibrat it?
[2021-07-01 00:50:11]
tmbinc :
I've noticed 2V85A is ~2.99V, not 2.85V. Applying a factor of 2.99/2.85 to the measured values yields 953/758mV, which will make them very close to the target 946/762mV.
[2021-07-01 00:56:41]
tmbinc :
The board also has a pretty high power consumption when switched off, I wonder if that's related.
[2021-07-02 11:20:26]
micronica :
you dont have to
[2021-07-02 11:20:58]
micronica :
Any news abaut firmeare for MM2 or Air2 for removing 40011 error after replacing gimbal like on MM1?
[2021-07-02 11:27:56]
m4x :
not possible on the mini 2, their calibration process uses some optical detection for gimbal attitude and therefore you cant replicate it without exactly reconstructing their process. I even patched it and made it pass and 40...11 err still stuck around so there might be a internal flag too somewhere.
[2021-07-02 11:28:32]
m4x :
Still got it to work just fine tho, but the nag still persists
[2021-07-02 11:29:01]
m4x :
(its the gimbal self-health check)
[2021-07-02 11:29:38]
micronica :
o know that, but sometimes my client have problem with visible error because lowers the drone value
[2021-07-02 11:29:47]
micronica :
ok so still waiting
[2021-07-02 11:30:15]
m4x :
I didnt find a fix for that yet :confused:
[2021-07-02 11:30:32]
m4x :
But i am fine with just having a perfectly operational drone :stuck_out_tongue:
[2021-07-02 11:30:40]
m4x :
in fact it works better than from factory
[2021-07-07 16:48:53]
tmbinc :
I have a water damaged MA2 battery that I want to inspect. I've disassembled the case. Is the battery glued to the bottom of the case? Is there a trick to remove it, other then to just pull on the black outer plastic?
[2021-07-07 18:54:03]
mefisto :
I never disassembled MA2 battery, but with different products had good experience heating the glue a bit; 30-40 degC was enough to soften it.
Though it's probably not the safest approach when dealing with batteries.
[2021-07-08 00:10:25]
mel69hash :
I have not stripped MA2 battery but did it to MP & M2P. I am sure it is glued onto the battery case. Like what @mefisto advice, a hot air blow will do the job but I just forcefully stripped it as I don't have an hot air blower. So far done to mire then 10 batteries and have known the trick to remove it safely.
[2021-07-08 07:53:45]
mefisto :
I was disassembing one dummy during winter, and placing it on a heater was enough.
The battery was glued to the rest of the dummy. I applied pressure by inserting a tool under the battery, then placed it on the heater, and circa 10 minutes later heard "thump" as the glue gave up.
[2021-07-08 16:26:29]
dnacho :
with the dji tools do I do both calibrations?
[2021-07-08 16:29:56]
dnacho :
does anyone know from where does the navigation system error come on the mavic mini 1?
[2021-07-08 16:40:49]
dnacho :
[2021-07-08 16:40:59]
dnacho :
It doesn't say the exact error, just this
[2021-07-09 02:00:35]
luluminjeong15 :
We tear down the pantom 4 pro v2, and find DJI IESC 3000 Chip. Does anybody has a datasheet if DJI IESC 3000? There are no information about this chip!
[2021-07-09 07:30:20]
kilrah :
don't know about that particular one, but initially it was just "whatever silabs chip was popular in ESCs with a DJI label on"
[2021-07-09 08:51:20]
mefisto :
Back in the days of Ph3, someone got a pre-release board with OEM marking, and turns out the IESC2000 was TI:
<https://github.com/o-gs/dji-firmware-tools/wiki/P3X-ESC-center-board#board-view>
[2021-07-09 09:36:04]
buundy :
hi everyone. I am trying to calibrate a ma2 gimbal using the 09.09.0902 fw (it is supposed to do the calibration). It rotates the gimbal assy properly and rests on the final posifion when it reaches 90%, but it is stuck after that and it doesnt remove the 40011 error code. (I replaced the camera module from the old gimbal module so other errors are not present).
[2021-07-09 12:45:06]
micronica :
yes joint and hall
[2021-07-09 12:59:36]
buundy :
here is the solution, I have been to a dji repair center. after 90% you have to point the drone upwards so the gimbal looks up to the sky. it will then finish calibration.
[2021-07-09 13:12:48]
m4x :
does it succeed tho? On mini 2 theres def some computervision code to calibrate the attitude
[2021-07-09 13:13:02]
m4x :
and just moving it on that step will cancel the calibration process
[2021-07-09 13:13:10]
m4x :
it should save the data from all the prior steps tho
[2021-07-09 13:13:25]
m4x :
as far i can tell the last step is the same u can do in "manual calibration" where u center it
[2021-07-09 13:13:36]
m4x :
or rather its the base and the manual cali is a offset of that
[2021-07-09 13:14:32]
m4x :
did the repair center had a dot matrix at the ceiling?
[2021-07-09 13:14:35]
m4x :
:stuck_out_tongue:
[2021-07-09 13:44:45]
buundy :
no they didnt have
[2021-07-09 13:44:50]
buundy :
i will ask next time
[2021-07-09 13:45:52]
m4x :
i c, could just be a mini 2 thing as well
[2021-07-09 13:46:30]
m4x :
this was the approximate matrix that i restored based on the points it compares against fwiw
[2021-07-09 13:47:03]
buundy :
wow
[2021-07-09 13:47:47]
buundy :
does anyone have air2s cali fw?
[2021-07-09 13:47:59]
buundy :
just to save it on my machine :slightly_smiling_face:
[2021-07-09 13:49:00]
m4x :
I dont have it. Want to add to my prior post tho that they use <https://limu.ait.kyushu-u.ac.jp/~uchiyama/me/code/UCHIYAMARKERS/index.html> for markers (and its generator) with some changes. Actually violates the non commercial license but i guess they dont give a shit as usual
[2021-07-09 13:49:30]
m4x :
managed to find it based on the internal paper and locally likely arrangement hashing implementation in the unit tests / factory autotests
[2021-07-09 13:54:24]
buundy :
i dont quite understand how this works and what it does :slightly_smiling_face:
[2021-07-09 13:54:29]
buundy :
but it is interesting
[2021-07-09 13:54:37]
buundy :
if you explain I am happy to listen
[2021-07-09 13:54:44]
buundy :
propbably others too
[2021-07-11 21:59:34]
flylusive_pat :
Hello, does anyone have locked/damaged DJi FPV DRONE battery that he would like to sell/donate? We're working on a solution for program TRB.
[2021-07-13 02:35:15]
fredmicrowave :
You just need to download an App called "ebay", it´s free !
Then you search for a battery, and click "buy it now", you bought it, and it is still free !
You just need to pay a fee to unlock shipping ... But it is one time only.
[2021-07-13 14:46:17]
tmbinc :
Here's how it looks at the bottom. Pulling at the black tape is not a good idea. Heat didn't help here, but soaking in alcohol did the trick eventually.
The connector/PCB is clicked into the front, so as soon as the cells un-glued, make sure you force the plastic at the front (over the connector) a bit to the front to allow the connector to be removed.
[2021-07-13 19:20:33]
flylusive_pat :
@fredmicrowave Unfortunately, there not many damaged batteries yet, and if they're are, most of the people will just throw them into trash.
[2021-07-13 19:51:21]
info349 :
where do you get that firmware version?
[2021-07-13 19:54:39]
info349 :
aren't these the firmware?
[2021-07-14 14:21:22]
tmbinc :
How do the gimbal's hall sensors work?
I'm looking at a disassembled Mini gimbal (but equally interested in an Air2S gimbal), and they use an MP6536 (<https://www.monolithicpower.com/en/mp6536.html>) 3-channel motor driver, and appear to have two hall sensors at the extreme positions, SOT-23, "9102u". I can't find any reference to that designator unfortunately, I assume it must be a linear sensor. Any idea what that part is?
I assume they output some analog signal, and then the flight controller implements a closed-loop position actuator. Can I read the raw hall sensor values from the FC?
(I want to debug gimbals that are "stuck" at an extreme position; thinking of building a gimbal test rig or repurposing a Mini with custom FC firmware.)
[2021-07-14 23:45:24]
tmbinc :
To answer part of my own question - there are two analog values that give a sine-like response to the movement. The two sensors are placed apart with some angular offset, thereby creating a quadrature-ish signal on movement.
[2021-07-15 21:24:18]
flylusive_pat :
@tmbinc I work only with batteries, but that is interesting you started digging into it. I wanted to look at it for a long time.
[2021-07-17 21:55:48]
flylusive_pat :
<https://youtu.be/DQqBmqeLeYE>
[2021-07-18 17:54:43]
info349 :
good evening everyone, I have a problem with a spark that does not mark the height well, of these three which sensor manages the height?
[2021-07-18 18:02:04]
buundy :
The two black are ir distance sensors if i am correct
[2021-07-18 18:50:36]
mefisto :
one is LED and the other is photodiode, so both are part of the sensing circuit, but I wouldn't call them both sensors.
Also, there's barometer inside. And that is the main component for height computation, the sensors below only provide additional stabilization at low altitudes.
[2021-07-19 11:05:53]
info349 :
perfect thanks
[2021-07-19 11:06:22]
info349 :
good morning, but why do you think the gimbals of the mini1 / mini2 are no longer found?
[2021-07-19 13:26:15]
hardkore :
Definitely looks like it could be cracked old conformal coating. Whatever that drone was doing though, by the setup I imagine it was bad and likely had to do things with penitentiaries.
[2021-07-23 09:32:12]
buundy :
Hi guys! I have several water damaged but cleaned Mavic Mini ESC panels. they power on the drone but report “Power System Error” or something similar. They are in good condition and I am curious how would you start diagnosing or measuring them where the problem lies?
[2021-07-23 09:34:10]
buundy :
(For more info: I swapped ESC flex and it didn’t solve the problem, and with a new ESC it works well, so the logic board is fine. I measured the FETs and they seem to be in working conditions, all measured similar values.)
[2021-07-23 18:01:04]
fredmicrowave :
For water damage I would begin by testing all ceramic caps for a short. This is typical failure. Then, vias connectivity, as water always stay there longer and dissolves copper by electrolysis...
[2021-07-25 20:35:31]
mingtao :
comrades, who can help up with the protocol identification? I am having fun with Mavic mini, sniff data flow , but I can't understand what kind of protocol it is
[2021-07-25 20:36:36]
mingtao :
i use software - Logic Saelae 2
[2021-07-25 20:37:02]
mingtao :
[2021-07-26 10:27:06]
mefisto :
Do we know who produces the FPC connectors which DJI use? They use Hirose for gimbal cable, but not sure if also for the 2-row FPS connectors.
I see several Chinese brands do similar connectors:
LANRUISI
Vakdo
BINYEAE
BestChip
Coopart
RYKKZ
I think I've seen "LS" on one of the connectors, which would suggest the first one.
[2021-07-26 10:52:51]
m4x :
theres also lite star electronics
[2021-07-26 10:55:08]
m4x :
i could ask my partner at the factory if they do business with dji, knowing them they wont tell us tho
[2021-07-26 13:18:47]
mefisto :
Maybe these are actually of the same dimensions, and manufacturer doesn't matter that much?
I can't seem to find website of LANRUISI, at least the one which makes connectors.
[2021-07-26 14:08:17]
mefisto :
I see Hirose has these as well:
<https://www.hirose.com/en/product/series/BK13C>
(couldn't find it before because it's in different category than other FFCs)
[2021-07-28 13:15:30]
micronica :
Anyone ise dji battery repair tool? I cant connect to the battery
[2021-07-28 13:16:58]
micronica :
or i need cp2112. I have other i2c to USB board that i try tu use
[2021-07-28 13:47:20]
micronica :
i try ch341a on i2c mode no connection for me
[2021-07-28 16:03:00]
mefisto :
For most usb-to-i2c dongles, a firmware needs to be flashed on the stick for it to work. The "DJi_Battery_Killer" tool (if this is what you're talking about) does that as well.
And that's all good, the programming is seamless, and does no permanent change to the stick - it's loading to uC RAM. But it does mean the SPECIFIC chip needs to be supported.
I never used that tool, so I don't know which usb-to-i2cs it supports.
[2021-07-28 16:05:58]
mefisto :
If you're talking about Python tool, it currently only supports running on Linux devices which have integrated I2C - mostly Raspberry Pi.
I was going to make support of sticks, but I keep delaying this.. never enough time.
[2021-07-30 21:22:44]
samsuttabris.st :
what your steps? bcz i fail
[2021-07-31 15:09:14]
dnacho :
[2021-07-31 15:09:34]
dnacho :
[2021-08-05 18:29:04]
olli_dxd :
Got trouble with the indexing nuts on my inspire x3 and can’t figure out if it’s the big flex that is damaged, or nuts not in the right place. Any tips?
[2021-08-11 13:47:44]
m4x :
those connectors generally suck
[2021-08-11 13:47:52]
m4x :
they are prone to break pins
[2021-08-11 13:48:12]
m4x :
they will just losely be in there, until u move it and shorts
[2021-08-11 13:48:52]
m4x :
nintendo switch uses the same adapter for their sd connectors and broken pins just from moving around are a very known issue causing sd comms to use 1bit mode
[2021-08-11 13:49:01]
m4x :
without constant unplug etc
[2021-08-11 13:49:14]
m4x :
so i suspect smth broke, was losely in there
[2021-08-11 13:49:17]
m4x :
eventually shorted
[2021-08-11 13:50:00]
m4x :
> All from doing what the company repeatedly asked of me..
You mean pluggin in the connector? **laughs**
[2021-08-11 13:50:12]
m4x :
partially on you for not checking beforehand if thats the case
[2021-08-11 13:50:23]
m4x :
you can usually fix it with a copper strand, did that several times before
[2021-08-11 13:50:27]
m4x :
but its a job for tiny soldering man
[2021-08-11 13:50:42]
droneabc :
I just don't get how its my fault if I have already asked to send it back and they kept telling me to try and make it work.
[2021-08-11 13:51:06]
m4x :
just.. technically.
[2021-08-11 13:51:12]
m4x :
i cant blame u, they are sneaky
[2021-08-11 13:51:18]
droneabc :
The components around the area also changed color before smoking
[2021-08-11 13:51:18]
m4x :
u often dont see it until u poke the pin
[2021-08-11 13:51:21]
m4x :
with tweezers
[2021-08-11 13:51:26]
m4x :
well yea
[2021-08-11 13:51:29]
m4x :
shit heats up
[2021-08-11 13:51:31]
m4x :
its a short
[2021-08-11 13:52:01]
m4x :
Ask them "Why did your board ship with a broken pin on this connector, was no QC done?"
[2021-08-11 13:52:18]
m4x :
you are not to blame unless u fucked around with it a bunch
[2021-08-11 13:52:20]
droneabc :
To the right side of connection was noticed first, then the ones under the cable were noticed later after battery was out
[2021-08-11 13:53:33]
m4x :
Well they did say to check board connectors..
[2021-08-11 13:53:45]
m4x :
But they didn't imply check for broken pins
[2021-08-11 13:54:41]
m4x :
..
[2021-08-11 13:54:45]
m4x :
Oh dear
[2021-08-11 13:54:58]
m4x :
Sounds like bad contacts
[2021-08-11 13:55:15]
m4x :
Not surprised it blew then
[2021-08-11 13:55:47]
droneabc :
I thought it may be programming
[2021-08-11 13:56:05]
m4x :
Nah just the reseating
[2021-08-11 13:56:30]
m4x :
You boot it first without all just to confirm the mobo works
[2021-08-11 14:00:10]
m4x :
their fault not doing qa
[2021-08-11 14:00:35]
m4x :
a few out of every thousand have this issue
[2021-08-11 14:00:38]
m4x :
on boards i know
[2021-08-11 14:00:49]
m4x :
given these boards sold millions of units, its.. quite common
[2021-08-12 09:21:23]
m4x :
sounds like fraud
[2021-08-12 09:21:40]
m4x :
The connect 1by1 is just basic stuff. would be hilariously bad if its in code..
[2021-08-12 09:21:55]
m4x :
"not under warranty" my ass, you paid for a functional product, did u not?
[2021-08-12 09:21:58]
m4x :
thats fraud
[2021-08-12 09:22:33]
m4x :
If you still have a board, make a macro pic of every connector
[2021-08-12 09:22:48]
m4x :
ideally one that didnt catch fire
[2021-08-12 09:57:24]
m4x :
kk
[2021-08-12 09:58:20]
m4x :
imo either they arent aware of the cause of the issue, or they actively ignore it
[2021-08-12 13:32:45]
mefisto :
I don't care enough to read all that, so not sure if applicable, but:
Mavic2 vs Mavic2 enterprise has different GPS cable. Wouldn't the connector burn if you tried to use M2 board on one side and M2E on the other?
(also you may get more to the point, I'm sure more people here reacted with TLDR)
[2021-08-12 14:02:28]
fredmicrowave :
Specially since all this have been discussed quite clearly in the dedicated forum, where it belongs.
[2021-08-12 14:35:09]
dkovar :
There is a ~nld channel here.
[2021-08-12 18:50:35]
dkovar :
The gentleman running the firm has been a member of this Slack for many years and has been an integral part of and contributor to the community. I've found him to be both professional and honest.
If you have an issue with him, please go to ~nld and at least try to resolve it.
[2021-08-12 18:54:09]
m4x :
> Sorry i thought it was a hardware issue, is it Not?
All i can vouch for is that this type of connector often has design issues that make it unacceptable on any device that takes slight vibrations or rough handling
[2021-08-12 18:54:36]
m4x :
Apply any type of pressure and poof
[2021-08-12 20:32:23]
mefisto :
That sounded more like a drama than HW issue.
But don't get me wrong, we all love drama. It just requires some story telling skills.
And since this channel really is about fixing HW issues - are you going to replace that FPC connector? Did you ordered a replacement?
Do you even have equipment and skills for that?
[2021-08-14 19:06:48]
rameezahmed1998 :
In which borad i can find that ic
Fault is mavic air 2 gimbal motor not responding
[2021-08-16 11:51:23]
mefisto :
For Mavic 2 FPC connectors - I found one which looks exactly like the bottom one, but it's 2x20 pins instead of 2x17.
It was described as:
"Flex FPC Connector Plug For Huawei Nova3 Nova3I Nova 3 3I 3E P smart plus Nova3E P20 Lite P20Lite Board 40Pin Mobile Phone Flex Cables LCD Screen Display"
[2021-08-16 14:03:13]
mefisto :
Chinese sellers love to hide model numbers. But that connector clearly comes from LANRUISI. Anyone have their catalogue?
I found the 34-pin version advertised as LCD connector for the phones:
```Xiaomi Mi Max/Max2
Samsung Galaxy A20E A202 A202F J7 SKY Pro 2017 J727 P V J727A
Samsung Galaxy J7 J5 Prime G610 G6100 ON5 ON7 2016 G5700 G570```
[2021-08-16 16:15:38]
sincoder :
[2021-08-16 16:16:39]
sincoder :
I saw someone selling them, but I don’t know the specific model
[2021-08-16 16:46:35]
mefisto :
Yeah, that one is typically sold as:
"50pin FPC Connector for SONY Xperia Z L36H L36 C6603 C6602 LCD Display Screen"
[2021-08-16 16:47:42]
mefisto :
And there's "Lanrui Repair Store" on Aliexperss which has all of them (amongst other sellers, but this one sounds "official").
[2021-08-16 16:47:55]
mefisto :
But I still have no company site nor model numbers.
[2021-08-16 17:06:52]
mefisto :
There's a Spanish technical university which claims to cooperate with "Lan Rui Semiconductor materials (Shangai)".
And google now thinks I'm a robot and asks me to solve captchas.
[2021-08-16 21:45:39]
mefisto :
This should make it easier to measure things at the connectors:
<https://www.aliexpress.com/item/1005001290485767.html>
[2021-08-16 21:46:52]
buundy :
Good find!
[2021-08-16 23:00:39]
tmbinc :
I'd _love_ to have breakout boards for "all" DJI connectors, including the debug connectors and gimbal connectors.
[2021-08-17 10:13:40]
mefisto :
At least in Mavic 2, all connectors have 0.4 pitch - so the above board will work, you only need to solder proper connector to it.
Though I only found 3 FFC cables - gimbal, GPS and ESC. So not sure how to tap to the rest..
Connectors I bought for soldering:
* GIMBAL - LANRUISI 2x20pin female connector, 0.4 mm pitch
(search for FPC Huawei Honor 10 Play Maimang 7 Mate20 lite 5C X1, Huawei Nova 3/3I/3E/P/P20 Lite)
* GPS - LANRUISI 2x25pin male connector, 0.4 mm pitch
(search for FPC SONY Xperia Z L36H/L36/C6603/C6602)
* ESC - LANRUISI 2x17pin male connector, 0.4 mm pitch
(search for FPC Samsung Galaxy A20E/A202/A202F J7 SKY Pro 2017 SM-J727P/J727V/J727A)
[2021-08-17 12:50:31]
micronica :
Anyone found exact model on potentiometer for dji copntroller on air 1 and air 2(same part). I found manufacture bu. On potentiometer is 8 0 B 103. I knot that 8 is for long lasting series, b is for resistance temper-linear but 0? I guessing its 10k resistor like most of the times
[2021-08-17 12:50:42]
micronica :
<http://www.polyshine.cn/uploadFile/FM10K-2014-01-04-04-10-37.pdf>
[2021-08-17 12:51:27]
micronica :
and i guess 103 is for 10k
[2021-08-17 12:52:07]
micronica :
so 10k linear resistor, long lasting series, 30* angle or so
[2021-08-17 12:59:58]
micronica :
\
[2021-08-17 16:10:09]
dnacho :
Does anyone have the DJI FPV Drone Vision Sensor Module calibration software? I have one of the sensor that does not show any image, has anyone had this problem
[2021-08-17 20:26:05]
micronica :
U can replace it without any problem
[2021-08-18 00:13:40]
coldflake :
Earlier today I saw that DronePaperWeight something had posted a smearing campaign targeted NLD and the rooted core boards.
Now the messages has been deleted by an admin but it bothers me that people are left with a wrong impression of NLD on the matter.
Before a core board is being shipped out, it is always being tested by installing it into our test drone and checked with DJI GO that everything works.
The boards are brand new and already QC at the DJI factory.
After receiving his board, he said that the drone would not boot up.
I explained to him that the 3 connectors that goes on the board could be tricky.
He replied that the board did not work and he was told to send it back.
When I received the board back I tested it again and it were working fine.
I sent him another board back with DHL express and 3 days later he claimed that the replacement board did not work either.
I knew that when I tested it before shipping it was working and since he had the exact same issue, I told him to make sure that he put the connectors right.
Eventually he fried the GPS connector and wanted yet another replacement board for free.
I told him that the first board that he sent back were working when I received it and another customer now had it working without any problems.
He went into our forum, facebook and apparently also here and said that I were lying, that the boards were stolen and what not. He also threatened that he would ruin our business if he would not get a new board for free.
We have sold several hundreds of those boards and only a few had this problem and everyone eventually managed to get the connectors installed right.
He was the only one who managed to fry his board.
I told him that our warranty does not cover a faulty installation but he kept insisting that the board was faulty.
He refused to understand that because the GPS connector were not properly seated in place, the board would not boot due to short protection.
The picture he posted here of the fried board does not indicate that he was able to install it correctly at least.
We have never had a faulty board but I still test them every time because there is always a first time for everything.
The core boards are pretty cool because they are permanently rooted, has persistence in the file system, and a 000000000000 serial number and does not require activation with DJI.
NLD does fully what it says on the tin and our physical products are always tested before shipping.
[2021-08-18 10:41:15]
m4x :
@coldflake the thing is, those connectors arent made to be detached (ironic, isnt it, for their format). Once they passed QC, they should not be disconnected. I am not exaggerating when i tell ya these are fucking shit and i have seen pins snap in-place and give a shit/spotty connection (hence QC could pass but it can later fail as well). You can baby the shit out of it and still have it snap (even if its fixed with a screw!). I've seen it all... You end up with a fix like this <https://twitter.com/m4xwdev/status/1300080001220587521>
Given that, I recommend not blaming the customer. It sounds more like a borked board more than anything else. You usually just spot them when applying some pressure with tweezers on the pins. Its worse with the longer ones as the error margins only get worse
[2021-08-18 10:41:43]
m4x :
> He replied that the board did not work and he was told to send it back.
> When I received the board back I tested it again and it were working fine.
Tbh, that sounds just what i'd expect
[2021-08-18 10:41:46]
m4x :
with a lose pin
[2021-08-18 10:41:59]
m4x :
Thats what i meant with their fault analysis leaving stuff to be desired
[2021-08-18 10:42:48]
m4x :
I also appreciate you giving some background, theres always 2 sides of a coin
[2021-08-18 10:43:08]
m4x :
This is just what i learned the hard way over the years in system engineering
[2021-08-18 10:43:28]
m4x :
I blame the cursed connectors
[2021-08-18 10:45:14]
m4x :
> The picture he posted here of the fried board does not indicate that he was able to install it correctly at least.
Or the broken pin got lose and shorted, which is what i assume
[2021-08-18 10:45:53]
m4x :
I do recommend visual inspection and testing the pins individual in such a case. Its a real safety hazard if this comes lose
[2021-08-18 10:46:36]
m4x :
on other devices (where its used for the SD connection f.e.), it will work most of the time, you can shake the shit out of it, dont move it and suddently u get SDMMC transmission errors and reinit in 1bit mode or panics..
[2021-08-18 10:46:46]
m4x :
worst case the bird will become a stone
[2021-08-18 10:47:29]
m4x :
> and a 000000000000 serial number and does not require activation with DJI.
ugh what
[2021-08-18 10:47:44]
m4x :
not sure that info should be public, even tho it seems so trivial
[2021-08-18 11:27:04]
micronica :
For over 2k repair i only rip one connector. Not mention phone repiar close to 300 a month for 5 years
[2021-08-18 11:27:29]
coldflake :
Thanks for your explanation regarding the those damn connectors.
I also do a visual inspection of them under the microscope that I use for micro soldering as the last part of the QC test.
Also did that with the board I received back.
I also wrote on the product page that the board should be installed by a professional and even better, people should just send i their drone and I will make sure that it leaves from here fully working. I fully hear what you are saying about those connectors and I have experienced the same. It is just very delicate and if people apply for too much force they will definitely break.
What I also tried to explain him was that even though his stock board has no problem, it does not mean that the core board has a problem either.
The cables are attached to the shasis with self adhesive stickers and they do not always line up with a replacement board compared to the stock board that was assembled in the factory.
The devil is in the detail as with many other things but some people do not understand why there is a difference.
[2021-08-18 11:29:00]
m4x :
> For over 2k repair i only rip one connector. Not mention phone repiar close to 300 a month for 5 years
I have a ~10-15k userbase and several dozen had such issues (as a more recent example)
[2021-08-18 11:30:02]
m4x :
(after about 2 years, not even replugging)
[2021-08-18 11:30:09]
m4x :
(just snaps in place)
[2021-08-18 11:30:24]
m4x :
thats a significant enough number for me to curse about the connectors
[2021-08-18 11:31:42]
micronica :
My cas eof 20k. I know that many people that work with me at the same board rip many connector. After a while i was main technician that repair that kind os stuff
[2021-08-18 11:32:32]
m4x :
in my cases the users never even disconnected them, sealed from factory
[2021-08-18 11:32:45]
m4x :
And nintendo also has a better production value :stuck_out_tongue:
[2021-08-18 11:32:57]
m4x :
but anyway, it does happen sadly
[2021-08-18 11:34:27]
m4x :
@coldflake they can be sneaky, when i had it personally, it wasnt visible but it would jump out of the connector as soon i touched it slightly, it was lose but still stuck in place
[2021-08-18 11:34:39]
m4x :
hence test each pin very carefully while visual inspecting
[2021-08-18 11:34:41]
m4x :
scope is ideal
[2021-08-18 11:35:00]
coldflake :
Yes scope is required I would say
[2021-08-18 11:35:15]
m4x :
unless u are tiny soldering man
[2021-08-18 11:35:16]
m4x :
:stuck_out_tongue:
[2021-08-18 11:35:25]
coldflake :
lol
[2021-08-18 11:36:37]
fredmicrowave :
Not sure from what I see on pictures, is it the soldering that gets lose, or the pad that gets pulled up ?
[2021-08-18 11:36:52]
m4x :
usually single pins just snap in place
[2021-08-18 11:38:11]
fredmicrowave :
Ok, I suppose it snap in place where it is angled ... Hard to see indeed.
[2021-08-18 11:38:19]
coldflake :
I have installed many of those boards and only broke a socket once.
I have also experienced that it would not boot up a couple of times due to short protection but after restarting the GPS connector no problem
[2021-08-18 11:38:56]
m4x :
When you are a customer and the only board you buy has such a issue, your frustration is guaranteed
[2021-08-18 11:39:14]
m4x :
'it's not a issue until it is'
[2021-08-18 11:39:26]
fredmicrowave :
In a way you could consider lucky to have only one problem when we see how random people handle connectors , coldflake
[2021-08-18 11:39:27]
m4x :
Vendors usually suck up the cost
[2021-08-18 11:39:34]
m4x :
And slaughter the board for parts
[2021-08-18 11:39:48]
m4x :
It's hard to tell if customer is at fault
[2021-08-18 11:39:58]
m4x :
Most likely, but there is doubt
[2021-08-18 11:40:01]
coldflake :
Yes but in his case he had the same problem with two boards that were both working fine
[2021-08-18 11:40:22]
coldflake :
There is a doubt and that is why I tell people to ship them back and send them a replacement
[2021-08-18 11:40:43]
m4x :
Are you associated with nld?
[2021-08-18 11:40:48]
coldflake :
Yes
[2021-08-18 11:40:52]
m4x :
I c
[2021-08-18 11:42:17]
fredmicrowave :
Maybe when there is a problem asking to send back the drone too would avoid further problems, not increasing significantly shipping costs...
[2021-08-18 11:43:23]
coldflake :
It is just awful wirh those connectors, in another case 3 boards were shipped back and forth and none of them had an issue. Luckily the customer finally made it with the 3rd board.
DHL shipping costs for a turnaround is around 100€ so it sometimes get really frustrating :)
[2021-08-18 11:45:17]
coldflake :
@fredmicrowave I also do that but then they will not pay for a working hour and the extra shipping cost for sending the full drone.
If I buy a spare part and have difficulty installing they will not install it for free :)
[2021-08-18 11:53:15]
fredmicrowave :
Maybe you can propose that as a bonus for a fee, proposing enhancements, and making it clear before they buy that in case o problem you will ask for the drone to be sent back. I know in practice it is never easy, there are alway people that make problems of everything and those are not detectable beforehand unfortunately.
[2021-08-18 11:56:01]
fredmicrowave :
Microscope is a life changer. You will gain access to a world you hade no idea existed, and will be able to work in it.
Not sure about the electronic tho. Binocular is really important as it gives you distance information...
[2021-08-18 11:59:39]
fredmicrowave :
Amscope makes reasonably priced ones and good quality.
[2021-08-18 12:06:17]
mefisto :
There are Chinese copies of Amscope, available in Europe under various brands, ie. "Discovery", "Researcher" etc. I was thinking about that, but it still costs 3x more than LCD and the scope is much larger. I don't have space for more equipment, atm. The LCD one is easy to move.
But we'll see, honestly I have no idea how usable it will be.
[2021-08-18 12:12:50]
m4x :
yea stuff starts getting quite trippy LOL
[2021-08-18 12:31:42]
coldflake :
Many components nowadays are so small that they just look like little dots with the naked eye lol
[2021-08-18 12:32:18]
coldflake :
A microscope connected to a big screen is essential with these things
[2021-08-18 12:55:59]
coldflake :
@fredmicrowave That is a great idea
[2021-08-18 13:15:08]
m4x :
meanwhile i still use a good ol mirror scope ^^
[2021-08-18 13:15:18]
m4x :
just need a good light from top
[2021-08-18 13:15:29]
m4x :
digital scopes just arent the same imo
[2021-08-18 13:15:38]
m4x :
unless you spend several grand
[2021-08-18 13:47:22]
coldflake :
[2021-08-18 13:48:20]
coldflake :
This one is pretty good and wasn't that expensive either
[2021-08-18 15:47:28]
m4x :
fancy 3d perception :see_no_evil:
[2021-08-18 15:48:03]
m4x :
I mostly use it for tweezer work or for confirming that theres no bridges
[2021-08-18 15:56:28]
coldflake :
I never use it in binocular mode, only with the screen so 2D :)
[2021-08-18 17:19:10]
m4x :
its important to have 3d perception if u solder under the scope directly
[2021-08-18 17:19:16]
m4x :
at least at high amplification
[2021-08-18 17:20:05]
m4x :
i get away with a third hand with most stuff tho
[2021-08-18 17:20:41]
m4x :
also wheres your vaccum pick? :wink:
[2021-08-18 17:20:57]
m4x :
Best investment for me in the last 6 years lol
[2021-08-18 17:22:11]
m4x :
also is that a oscilloscope or a lab supply?
[2021-08-18 17:22:31]
m4x :
would be quite small screen for a osc unless diy'd lol
[2021-08-18 17:58:13]
coldflake :
The box with the coffe cup on the display is a hot air gun
[2021-08-18 17:58:36]
coldflake :
I also have a vacuum pick, it's very useful
[2021-08-18 17:59:07]
coldflake :
I do not have an oscilloscope though...yet
[2021-08-18 17:59:24]
coldflake :
It's fun to solder shit and fix things, I love it
[2021-08-18 19:22:29]
m4x :
i dont have a osc either, but my chipwhisperer does the trick usually
[2021-08-18 19:22:37]
m4x :
just need to script some logic
[2021-08-18 19:23:24]
m4x :
some unsynced clock traces
[2021-08-18 19:23:37]
m4x :
some delays as it wasnt driving the clkgen
[2021-08-18 19:24:09]
m4x :
u can see where pll kicks in heh
[2021-08-18 19:24:59]
m4x :
just not so much realtime without doing it yourself
[2021-08-18 19:25:09]
m4x :
but great for FI attacks
[2021-08-18 19:27:29]
m4x :
i do consider making a modchip eventually, if i happen to care enough by the time i get some spare board :stuck_out_tongue:
[2021-08-18 19:27:41]
m4x :
or at least exfiltrate the secrets by then
[2021-08-18 19:27:55]
m4x :
(for mini 2)
[2021-08-18 19:30:53]
coldflake :
Cool man
[2021-08-18 19:31:21]
coldflake :
I don't mind sending you a rooted core board for m2 if you would like to yank with that a bit
[2021-08-18 19:33:00]
m4x :
mavic 2? I dont think theres much fun left
[2021-08-18 19:33:37]
m4x :
(i am not familiar with common shortform of names here)
[2021-08-18 19:34:10]
coldflake :
I would like to get the master key to derivatives from it :)
[2021-08-18 19:34:35]
m4x :
when do u have code execution?
[2021-08-18 19:34:57]
m4x :
didnt it have custom brom?
[2021-08-18 19:35:00]
m4x :
key lockout?
[2021-08-18 19:35:03]
m4x :
protected brom?
[2021-08-19 10:49:05]
mefisto :
yes, it is protected. And yes, FI would probably allow us to read it.
I don't think anyone tried that though.
[2021-08-19 10:49:15]
mefisto :
Me have no experience with FI.
[2021-08-19 11:04:28]
m4x :
Do we have a dump of the unprotected part (first 0x1000 or so?)
[2021-08-19 11:05:06]
m4x :
Would need to at least estimate when the Brom protection activates
[2021-08-19 11:05:42]
m4x :
But I guess bootrom protection methods also vary
[2021-08-19 11:06:20]
mefisto :
I only have what I got from FW updates and NAND (which is the same thing). No mem dump.
[2021-08-19 11:06:51]
m4x :
Device in question had a custom Brom, didn't it?
[2021-08-19 11:07:21]
coldflake :
Which chip do we need to dump from @mefisto, the 1860?
[2021-08-19 11:08:14]
m4x :
Fwiw depending in the secret could also do a CPA
[2021-08-19 11:08:31]
m4x :
Assuming we can generate outputs on device
[2021-08-19 11:20:06]
mefisto :
1860 has brom from LC, not dji. We still don't have it, but it's not that crucial there.
Eagle has custom dji brom which we don't have and which performs first signature verification - it checks bootloader.
[2021-08-19 11:30:46]
coldflake :
Aye
[2021-08-19 11:52:52]
olli_dxd :
Bresser biorit icd c5 is a great option if you need a somewhat cheap scope
[2021-08-19 12:43:30]
dronecat :
Coldflake, you said the customer sent his back, it was fine and you sent it back DHL 3 day, the customer stated you never offered to take either board back, he asked for proof , he wanted the DHL tracking number and you blocked him, why did you refuse to show proof? Can you support your claim?
[2021-08-19 12:46:52]
dronecat :
He showed proof of emails on your ticket where he asked to return it, your support shows his request was ignored, and you wanted him to try work around for 4 days instead? till he "fucked up his own board" , I didn't see any falsehoods out of him what so ever..
I see a few falsehoods you wrote above though. I have a feeling you aren't truth full about "he was the only one to fry his board". do you recall your post about the professional drone repair shop in CA that even fried his customers board? To refresh your memory you wrote in days before you took your forum down, you said it was for maintenance or something? I think it was the over dozen customers they kept coming forward you kept letting lies you couldn't keep straight. Like how many boards burnt? You stated above, just one, yet on your website you admired to at least one more.
[2021-08-19 13:08:49]
dronecat :
You stated to the dozen people with complaints they come straight from dji factory tested and tested again by you You also claimed it on your site many times Here is DJI response to my query. If you piss too many people off, I have a feeling your board will be sent in just because people don't like being lied to and callinf the people who ended up with a bad faulty board liars is bad business.
[2021-08-19 14:00:21]
mefisto :
Ok, the drama is getting better, even if this isn't exactly the channel for that.
Though asking DJI whether boards come "straight from the factory" is a little silly. That's leaning towards "it wasn't _straight_ because the truck took a few turns", soon after a big reveal that "companies have warehouses".
[2021-08-19 14:00:22]
coldflake :
@dronecat...Where do you think that we got the board from then?
You can not buy the anywhere, just google it
[2021-08-19 14:02:19]
coldflake :
@dronecat I do not understand why you are trying to be judge and jury in a matter that you have no part of and does not know the details to be honest.
The drone repair shop in CA acknowledged their mistake.
This guy was the only one who did not acknowledge his mistake and tried to blame it on us.
He also did not mention that he already had a replacement board sent that he could not get to work either.
[2021-08-19 14:02:55]
dronecat :
In your own words you buy batches of 50, I have seen 50 board for sale, their is a company that has 100's for sale want proof?
[2021-08-19 14:03:12]
dronecat :
They are used boards they sell in huge bulks
[2021-08-19 14:03:41]
coldflake :
Yes but our boards are not used!
[2021-08-19 14:03:48]
coldflake :
[2021-08-19 14:04:00]
coldflake :
The are factory fresh
[2021-08-19 14:04:10]
dronecat :
No clue , you changed serial numbers
[2021-08-19 14:04:21]
coldflake :
We did not change anything
[2021-08-19 14:04:37]
coldflake :
It is dji factory developer boards god damn it
[2021-08-19 14:05:07]
coldflake :
I sent a board to @mefisto so you can ask him if it were new or used
[2021-08-19 14:05:50]
coldflake :
Bedsides, sending shit line that do dji is silly and you show that way that you don't belong here really. What an idiotic thing to do!
[2021-08-19 14:08:25]
coldflake :
@dronecat I do not understand what your issue is and what your goal is with these BS Posts
[2021-08-19 14:08:26]
dronecat :
You skipped main point, I wanted proof the person you spoke of, one of many, even sent you a boars for an exchange, or where it was offered
[2021-08-19 14:09:05]
dronecat :
You say everyone is a liar, I'm asking a simple and direct question, the email was a little off base on my part though, sorry
[2021-08-19 14:10:19]
coldflake :
@dronecat You have no part in the case so it is really none of your business.
[2021-08-19 14:11:49]
dronecat :
When you accused me of lying about your hardware and called us faulty installers, you made it my business.
[2021-08-19 14:12:17]
coldflake :
@dronecat I have never accused you of anything, I dont even know who you are?
[2021-08-19 14:12:38]
coldflake :
What I do know is that you sent stupid shit to DJI
[2021-08-19 14:15:21]
dronecat :
Well as one of many installers who doesn't know how to install your hardware, yet has no problem with original dji boards, then was called a liar by you, I did ask them, you made statement DJI itself tested them, I was seeing if they really tested it
[2021-08-19 14:16:24]
dronecat :
One of many people who complained, and you covered complaints by removing your forum so others don't see how many faulty boards you shipped
[2021-08-19 14:16:34]
coldflake :
What do you expect??? They are obviously produced at their factory and they do test everything the manufacture.
I still do not see where the fuck you come in the picture still?
[2021-08-19 14:17:37]
coldflake :
¨Many people? Be careful, you are stirring up shit.
[2021-08-19 14:18:18]
dronecat :
Because I'll send your board to them and ask, I wonder if they can get the real # off it to see if it was even new, you class they were good because dji tested them, so now that argument you made is pointless
[2021-08-19 14:19:02]
dronecat :
I had a car that was tested in the factory, where it once came from at one point, no longer runs
[2021-08-19 14:19:39]
coldflake :
This is ever so fucked up! Gregory Hart there under another name???
[2021-08-19 14:20:19]
dronecat :
Is he at DJI?
[2021-08-19 14:20:40]
dronecat :
What's his support email I'll ask him
[2021-08-19 14:22:03]
coldflake :
Well I still does not know who you are, what your problem is...other than you are trying to stir up shit.
[2021-08-19 14:24:51]
coldflake :
And for what it is worth, we had to close the forum down because of a problem with the forum plugin that cased posts to be posted in random topics and database deadlocks.
[2021-08-19 14:25:05]
coldflake :
Conspiracy shit and waste of everyones time
[2021-08-19 14:27:29]
coldflake :
Also, he got blocked because he kept on posting false claims in a regular smearing campaign with name calling and everything.
If he would have kept to the matter of the case instead of acting like tard he would not have been blocked. In fact, we have never blocked anyone from our forum before him
[2021-08-19 14:27:49]
coldflake :
And now it is good with this BS, wasting everyones time in this channel
[2021-08-19 14:31:47]
coldflake :
And finally, only 4 people had problems with their board, one of them was this guy who torched his board, the other was the CA repairshop and the last two managed to fix the connector issue.
Spreading falsehoods like this is not ok, like really not!
[2021-08-19 14:48:53]
fredmicrowave :
In a positive note, I find incredible that among hundreds of boards, this customer is the only one having problems and still bugging around in public forums, after his board had been replaced 3 times...
Specially in this very specific domain, this must be an outstandingly low record of issues...
[2021-08-19 14:51:18]
flylusive_pat :
@coldflake ban him, he doesn't belong here
[2021-08-19 14:51:48]
flylusive_pat :
Contacting DJi about those boards, very stupid move..
[2021-08-19 14:51:59]
fredmicrowave :
If you ban him he will be a martyr
[2021-08-19 14:52:10]
coldflake :
@fredmicrowave He is upset that we did not want to replace the sparepart that he torched. If I buy something at Dronivo and fry it during installation, they would tell me that it is too bad.
When he sent the first board back and it tested out fine, he was told to have a professional install it when he receives it. He did not want to pay for that because from his point of view it was the boards that were faulty and he even wrote several places that they were stolen
[2021-08-19 14:54:14]
fredmicrowave :
There are always customers like that. They are undetectable beforehand unfortunately.
[2021-08-19 14:54:16]
coldflake :
@fredmicrowave He said that he will do everything to ruin my reputation and my business if we did not send him a replacement for the board that he fried...and that is what he is working on doing now.
His original account here for banned by an admin for his BS and then today he came in under a new account and spoke about himself in third person to try and make it look like several people had problems with the boards.
[2021-08-19 14:55:36]
fredmicrowave :
Yes, pretty obvious, at least the 3rd account... I don´t think he is ruining your reputation, people reading this are not stupid.
[2021-08-19 14:55:40]
coldflake :
@fredmicrowave Yes unfortunately. I wouldn't mind giving him a full refund if he had not fried the board.
I would also have installed it for him for free but now when the board is fried then there is really nothing we can do anymore.
[2021-08-19 14:57:45]
coldflake :
I actually got so tired of it that I told him that we would just send him a new board and then say fuck it.
[2021-08-19 14:58:58]
coldflake :
Here is what I wrote him a couple of weeks ago:
Hello Greg,
I have no idea what glue you are talking about and why you mix mefistos repo into it.
I dont see that it proves anything at all to be honest.
No one fiddled with the pins on that board as it came straight from the factory.
There has not been told any untrue statements regarding the board and the reason that you got banned from the forum was because you could not keep it at a level that would be expected from an adult.
Trying to discredit and your neo name calling is just a disqualification from any forum and it really does not help your case.
These unhinged support tickets of yours does not make any sense.
If we look past the BS that you wrote in the forum, we would not mind helping you out with your issue.
It just becomes a little difficult with those unhinged tirades where you jump between subjects and because it seriously does not make any sense.
For whatever reason the board did not work as you claim, the fact still remains that you burned it off and that puts us in a difficult situation.
We do not cover if people ruin the board while installing it and the first board you bought apparently did not cause you problems.
We have never denied to take the board back, we told you to try again to make sure that the pin connectors were properly seated.
You have written to us that you tried many times but could not get the board to work.
Those many times the board did not fry so it is obvious that when it fried you made a mistake with the connector.
From our point of view, anyone can come and claim it did not work and that is why we ask people to send it back.
The board you sent back worked 100% and were later sent to another customer who did not have any problems with it.
Please at least take that fact into consideration instead of just keeping writing unhinged messages that does not even make any sense.
You do not make it easy for us to help you with this unhinged stuff because to be able to give you a proper response we need to at least be able to understand what you are writing.
It would be nice if you could take a little time to write a proper message that is readable not a complete mashup of mixed words.
If we are going to help you, you need to send the fried board back and then we can send you a new one.
If you are unhappy with the above you should go to PayPal and open up a dispute case.
/Coldflake
[2021-08-19 15:02:43]
coldflake :
He never replied to that because he were busy posting nasty posts about us everywhere.
I honestly can not see what I could have done differently and those boards are quite expensive as they obviously are not from an official dji channel.
[2021-08-19 15:03:58]
coldflake :
Anyway, I am very sorry for you guys having to listen to all this BS. The last many posts in this channel has been more drama than hardware.
[2021-08-19 15:07:02]
coldflake :
As you can see in the reply that I sent him, he DID get a replacement board the first time and it was the replacement that he fried.
In the post above he wants me to post proof that a replacement even were sent even though he knows very well that he got a replacement.
[2021-08-19 15:07:54]
coldflake :
Fuck that shit :santa:
[2021-08-19 15:10:43]
mefisto :
Many people here have repair shops, they've seen whole range of customers.
So pretty sure we all know what's going on here.
[2021-08-19 15:11:50]
coldflake :
Yes, it just gives me a sour stomach and ruins my mood
[2021-08-19 15:17:00]
fredmicrowave :
Just don´t. As long as your responded and helped as you could, better ignore it. Sometimes answering a troll makes things worse and gives him more visibility.
[2021-08-19 15:18:29]
coldflake :
Yes that is very true @fredmicrowave
[2021-08-19 18:25:08]
503496897 :
code just loops indefinitely，what's wrong？
[2021-08-19 18:32:11]
mefisto :
U-boot checks if MMC is ok, U-boot reads the kernel from MMC to DRAM, u-boot jumps the execution to kernel, then everything reboots.
Either kernel is damaged (hm, shouldn't u-boot verify its checksum first) or DRAM can't store it properly.
[2021-08-19 18:37:14]
mefisto :
Find a way to enter u-boot console and reflash kernel?
[2021-08-19 19:04:27]
503496897 :
Due to I delete the system/bin/sh？:sweat_smile:
[2021-08-19 19:20:56]
mingtao :
emmc is crashed
[2021-08-19 19:21:02]
mingtao :
need reflash it
[2021-08-19 19:21:09]
mingtao :
over icsp
[2021-08-20 04:08:52]
503496897 :
So.the programming device required？
[2021-08-20 05:59:54]
mingtao :
just emmc adapter
[2021-08-20 11:01:31]
mefisto :
There is always a way to enter bootloader with chip on-board, but I don't think anyone investigated that.
If pressing keys during startup won't get you prompt, there's probably a test pad which does that.
Anyway, that requires research, so you're probably better off with emmc desoldering.
[2021-08-20 11:11:28]
m4x :
gnd the mmc clock
[2021-08-20 11:11:33]
m4x :
would be my guess
[2021-08-20 11:11:56]
m4x :
but you only know that for sure with a oscilloscope
[2021-08-20 11:12:15]
m4x :
~~or try random testpads~~
[2021-08-20 14:49:48]
gabriel.gonzalez.garc :
Is there any available information on how to power the Mavic pro 1, ambarella PCB without connecting it to the drone internal connector? I would like to power it directly from a power supply
[2021-08-20 16:24:05]
mefisto :
Simplest way is to get the ESC board and connect everything through it. Or measure voltages which it sends to Core Board.
[2021-08-20 18:05:58]
dnacho :
Anyone knows from where the navigation system error on a phantom 4 plus comes?
[2021-08-21 03:23:15]
lolo780 :
Broken ribbon cables are common on P4s
[2021-08-21 03:23:57]
lolo780 :
What's the history of the ac?
[2021-08-23 12:47:29]
bania95 :
Anybody knows what are those transistors marked red? They have been ripped off and I have to replace them.
[2021-08-23 12:48:02]
bania95 :
Phantom 4 Advance
[2021-08-23 13:25:02]
mingtao :
as i remembered it is led
[2021-08-27 18:42:32]
micronica :
anyone have this file or direct contact to designer. Im waiting over a week for respond and i need this
[2021-08-27 18:42:35]
micronica :
<https://www.thingiverse.com/thing:4834017>
[2021-08-27 18:57:52]
kilrah :
they obviously want to sell the part and not give the file
[2021-08-27 19:54:24]
fredmicrowave :
Is it not the same as that one ? :
<https://www.thingiverse.com/thing:3548043>
[2021-08-29 02:15:41]
ticket499473 :
No, sometimes sucking his micro Wang helps you though. [droneabc.lovestoblog.com](http://droneabc.lovestoblog.com) if you want to see why ignoring it didn't help? Wait till you see how long [nolimitdronez.com](http://nolimitdronez.com) makes you wait on ticket 2.. Soon wink wink.. Hint hint.. Lol... Next update can't see what's in the works... Oh when you get done sucking it can you give him a message? Enter one tracking number he lied about and I'll "remove it from the internet"
[2021-08-30 13:11:56]
micronica :
the thread is not connected to main body and dimension i way off. Print this from 95-110% scale no luck
[2021-08-30 13:12:12]
micronica :
they dont even respond
[2021-08-30 19:36:53]
tmbinc :
@mefisto so I've bought a couple of these 0.4mm connectors, and apart from that fact that I suck at soldering, the 2x17 one would have attached nicely to the Mini2's debug port.
Now I want to build a breakout board, but ideally connected with a flex cable. Any idea where I can get a generic 2x17 0.4mm flex cable, with or without connectors?
I could use a PCB directly but it's somewhat inconvenient from a mechanical perspective.
[2021-08-30 20:27:35]
coldflake :
@tmbinc is JTAG enabled on the mini 2?
[2021-08-31 07:50:55]
tmbinc :
For the iMX? no. I don‘t know about the Ambarella.
[2021-09-02 00:14:13]
bobdole :
guys.. hypothetically speaking how hard would it be to turn a mavic pro (with camera removed) into something like a gpu cryptocurrency miner? thinking of using one as an android based raspberry pie
[2021-09-02 02:09:37]
oakley75 :
Like mining what, electronium maybe?
[2021-09-02 06:35:19]
bobdole :
i'd have to check hashrates and see what works most efficiently
[2021-09-02 07:49:21]
mefisto :
First you need to check what you want to program.
<https://github.com/o-gs/dji-firmware-tools/wiki/WM220-Core-Board-A#programming>
[2021-09-02 08:26:43]
w0h :
Does anyone know of a shop that sells the Air 2S Gimbal? :disappointed:
[2021-09-02 12:16:27]
tmbinc :
How screwed up is your gimbal? I'm in the process of fixing a water-damaged one.
[2021-09-02 12:40:31]
w0h :
Camera works fine and also moves up and down. But the other two directions are broken
[2021-09-02 12:47:58]
tmbinc :
Ah, I have the reverse problem (yaw, roll works but pitch is broken)
[2021-09-02 12:48:23]
tmbinc :
Electrical or mechanical problem?
[2021-09-02 12:48:54]
tmbinc :
In my case it was a broken trace on the main PCB (due to corrosion) so that one of the PWMs was missing, plus water damaged at the pitch driver IC within the gimbal (which I hope to fix)
[2021-09-02 12:50:04]
w0h :
I am not entirely sure because I have almost no equipment where I am currently but I am pretty sure it's mechanical as I can hear it
[2021-09-05 15:15:24]
olli_dxd :
I modified a mavic to run external packs and removed the original pack to save weight, but I’ve now lost voltage readout. Any solution?
[2021-09-05 20:39:43]
mefisto :
Drone gets voltages from BMS chip, through SBS protocol. Either use SBS-capable chip, or emulate it using Arduino.
[2021-09-06 14:54:26]
olli_dxd :
So, only solution would be to attach external pack in parallel to or replacing the original pack and keeping BMS like original?
[2021-09-07 05:52:45]
buundy :
That is what i was thinking also. But you have to be careful of what you connect/disconnect first.
[2021-09-08 13:13:11]
olli_dxd :
@buundy I know, I’ve replaced packs and unlocked dead batteries quite a few times.
[2021-09-08 17:29:09]
amanita :
Hello. I make my own batteries for mavic 2 pro with double capacity. I make all the necessary changes in dataflashRom editor so the battery has the correct settings. In my drone everything works fine (my drone is in an old firmware version and in "non dji battery") but when I tried it at a friend's mavic 2 pro (with the latest firmware) i got "Battery Authentication Failed" message. I have tested 3 different batteries and the same message appears. Does anyone know any solution without having to change to "non dji battery" ? @mefisto @kakerarecever567
[2021-09-08 18:20:37]
lolo780 :
So with newer firmware it will still work on battery type 3?
[2021-09-08 18:20:50]
lolo780 :
Or does it always fail authentication.
[2021-09-08 18:22:54]
lolo780 :
Does anyone make M2 3rd party batteries? Maybe DJI is trying to prevent what happened to the M1 with all the aftermarket batteries available.
[2021-09-08 19:59:42]
flylusive_pat :
@amanita What tool have you used?
[2021-09-08 19:59:44]
flylusive_pat :
TRB?
[2021-09-08 19:59:49]
flylusive_pat :
Send me TSENC, I will check it.
[2021-09-08 20:00:38]
flylusive_pat :
@lowellfoo780 No, such solution is not publicly available, but I can tell you it exists :slightly_smiling_face: And no, even China doesn't have it :smile:
[2021-09-08 20:32:55]
m4x :
What's there to make a big secret about? There's at least like 5 ways to make it work
[2021-09-08 20:33:13]
m4x :
At least for Minis
[2021-09-08 20:36:26]
amanita :
I sent you a message. Τhank you!!!
[2021-09-08 20:54:27]
flylusive_pat :
@m4x Clone BMS? NO !
[2021-09-08 20:54:38]
flylusive_pat :
Everyone is missing the TI auth part
[2021-09-08 20:56:11]
flylusive_pat :
I only know 2 people who successfully cloned bq9003 auth, but they have more then 10 years experience.
[2021-09-08 20:57:19]
m4x :
depends on your use case mate
[2021-09-08 20:58:30]
flylusive_pat :
Yessss, that's true. Cloned non-dji BMS are all aroudn but not cloned ones that can authorize as original ones.
[2021-09-08 20:58:33]
m4x :
its gonna be more painful if u want smth for the market
[2021-09-08 20:58:39]
m4x :
its easy if u have full control over the system
[2021-09-08 20:58:44]
m4x :
depending on various factors
[2021-09-08 20:59:01]
m4x :
basically if u make a scale from 0 to 10, the methods can be all over the place in terms of difficulty
[2021-09-08 20:59:24]
m4x :
also gonna do that shit for 10 years soon as well :see_no_evil:
[2021-09-08 20:59:44]
m4x :
at least if u consider professional carreer
[2021-09-08 21:00:16]
flylusive_pat :
Yeah, I've started hacking those BMS's just for fun, and still doing it for fun.
[2021-09-08 21:01:15]
m4x :
Just another piece of the system, mind you I only know the fc side of things, didn't check the chips yet but there's a bunch of way to deal with that too either way..
[2021-09-08 21:01:42]
m4x :
Gonna be a pain if u wanna sell batteries tho
[2021-09-08 21:01:52]
flylusive_pat :
Well, if you don't know the instr. set, then you are screwed. :smile: And.. they are not public!
[2021-09-08 21:02:03]
flylusive_pat :
That is the hardest about the smart batteries.
[2021-09-08 21:02:08]
m4x :
Wouldn't be the first orooitery Isa I met
[2021-09-08 21:02:14]
m4x :
Properitery
[2021-09-08 21:02:57]
m4x :
fault injection is also always a option
[2021-09-08 21:03:10]
m4x :
ota as well
[2021-09-08 21:03:27]
m4x :
also you can bypass the circuit physically as required
[2021-09-08 21:03:53]
flylusive_pat :
yes, of course, but for some chips that is not even required
[2021-09-08 21:04:06]
m4x :
for end users its probably the easiest to mod a existing one
[2021-09-08 21:04:09]
flylusive_pat :
some ti chips will give you the password ,, by accident ''
[2021-09-08 21:04:24]
m4x :
well you can always make it tell u stuff or prevent it being locked out
[2021-09-08 21:04:27]
m4x :
if u have a side channel
[2021-09-08 21:04:47]
m4x :
and if u know what it computes then theres also other oracle attacks and shit
[2021-09-08 21:06:22]
flylusive_pat :
Theoretically yes, but 9003 likes to die in experiments :slightly_smiling_face:
[2021-09-08 21:06:36]
m4x :
theres always a few for the greater good..
[2021-09-08 21:06:56]
flylusive_pat :
I killed around 40 to 60 9003 chips to get a way in
[2021-09-08 21:07:13]
m4x :
tiny circuits are a pain :stuck_out_tongue:
[2021-09-08 21:10:09]
m4x :
battery auth stuff on fc side is pretty boring at least
[2021-09-08 21:10:51]
tmbinc :
Well yes until you get into 7002DFD0
[2021-09-08 21:11:25]
tmbinc :
But agreed, if this is all symmetric, FC firmware is probably easiest one to go with
[2021-09-08 21:14:53]
m4x :
Unless the Esc board says nope we don't provide power then at least for minis that should do the trick
[2021-09-08 21:15:03]
m4x :
And many roads can lead to there
[2021-09-08 21:15:46]
m4x :
But yea def the easiest If that's all it takes
[2021-09-08 21:16:33]
m4x :
My first question would be how he got the err, some led error code or in app, that would tell a lot already
[2021-09-09 06:57:52]
buundy :
nice conversation about batteries I enjoy these :slightly_smiling_face:
[2021-09-09 06:58:31]
buundy :
I also experimented with MP batteries with bq tools, but that is not that deep level like these.
[2021-09-13 12:50:40]
fredmicrowave :
I have successfuly changed M2 battery cells without reprograming, the disconnect / connect sequence ( +/bal/neg ) works fine too. Case is easy to open.
[2021-09-13 12:52:59]
m4x :
does it handle the diff capacities tho?
[2021-09-13 12:53:06]
m4x :
or did u just replace with simliar
[2021-09-13 14:23:57]
fredmicrowave :
Replaced with "same" cells:
<https://www.aliexpress.com/item/1005001954259710.html>
[2021-09-13 14:24:27]
m4x :
ah, may i ask, for what purpose?
[2021-09-13 14:24:34]
m4x :
excessive degredation?
[2021-09-13 14:24:44]
fredmicrowave :
Genuinely good seller btw
[2021-09-13 14:25:41]
fredmicrowave :
Yes, and mostly puffing more and more at each flight . To a point they would pop up.
[2021-09-13 14:25:53]
m4x :
how many cycles did the old cells have?
[2021-09-13 14:26:59]
m4x :
after u replaced the cells u should do 2-3 calibration runs
[2021-09-13 14:27:02]
m4x :
and full charges
[2021-09-13 14:27:21]
m4x :
aka let it low power shutoff
[2021-09-13 14:27:50]
fredmicrowave :
No idea, did not check. Between a fair amount to a lot . Around 2 years flying maybe. But I "may" have landed with less than 5 % a couple times ....
[2021-09-13 14:28:58]
m4x :
Usually removing the cells can trigger a cali reset too, so not sure
[2021-09-13 14:29:08]
m4x :
Well that's no issue
[2021-09-13 14:29:11]
m4x :
5%
[2021-09-13 14:29:11]
fredmicrowave :
Good idea, did not do a full flight yet.
I decided to remove the battery board, and soldered the balance connector directly .
[2021-09-13 14:29:20]
m4x :
Basically fight it landing
[2021-09-13 14:29:26]
m4x :
Till it doesn't let u fight anymore
[2021-09-13 14:29:28]
m4x :
On the spot
[2021-09-13 14:29:39]
m4x :
And let it on till it just shuts off
[2021-09-13 14:29:52]
m4x :
That way bms usually calibrated the full capacity
[2021-09-13 14:30:06]
m4x :
I am not sure if dji stuff is more driven by voltage, usually its a combination of both
[2021-09-13 14:30:28]
m4x :
If calibration is out of sync which happens if u never full discharge then it would stick around 'forever' at 0%
[2021-09-13 14:30:33]
m4x :
Till voltage hits the levels
[2021-09-13 14:30:45]
m4x :
On some devices I had 0% for hours
[2021-09-13 14:30:47]
m4x :
Lol
[2021-09-13 14:31:06]
m4x :
I'd assume they use capacity for the rth calcs
[2021-09-13 14:31:16]
m4x :
Voltages for cutoff
[2021-09-13 14:31:20]
fredmicrowave :
On the other hand, depleting to 0% or even below if batts have a lower capacity, may kill them
[2021-09-13 14:31:32]
m4x :
Meh their 0% is still perfectly safe
[2021-09-13 14:31:38]
m4x :
It's to get ppl to land early
[2021-09-13 14:31:47]
m4x :
It's a mind game
[2021-09-13 14:31:54]
fredmicrowave :
I will fly more conservatively with those
[2021-09-13 14:31:58]
tmbinc :
Isn't welding them to the electronics a PITA? Or what equipment do you use?
[2021-09-13 14:32:23]
m4x :
Yea Fred do that for now
[2021-09-13 14:32:30]
fredmicrowave :
I don´t think the cells like it when too low.
[2021-09-13 14:32:43]
m4x :
It's not dangerously low
[2021-09-13 14:32:49]
m4x :
Where it causes rapid degredation
[2021-09-13 14:32:52]
m4x :
That's the joke
[2021-09-13 14:33:13]
fredmicrowave :
I just welded them together in series, did not use the original board.
[2021-09-13 14:33:17]
m4x :
For usual usage yea so low isn't ideal, for cali runs it's perfectly fine
[2021-09-13 14:33:26]
m4x :
But it's not in the danger zone
[2021-09-13 14:33:26]
fredmicrowave :
I mean , soldered lol.
[2021-09-13 14:33:56]
fredmicrowave :
Ok , i see
[2021-09-13 14:34:15]
m4x :
Just not smth u should do every single time
[2021-09-13 14:35:39]
tmbinc :
Oh sorry I can't read.
[2021-09-13 14:35:41]
fredmicrowave :
Soldering was not so easy for the negative tabs, used paste and a realatively very hot temp iron , worked fine.
[2021-09-13 14:35:45]
m4x :
Btw i go by electron scope pics on that
[2021-09-13 14:35:58]
m4x :
there as low as 2.6v per cell on lipo caused no irregular dmg
[2021-09-13 14:37:39]
fredmicrowave :
Great to know. But problem was them inflating so much at each flight
[2021-09-13 14:37:55]
m4x :
uh wat
[2021-09-13 14:37:59]
m4x :
i mean inflating is good
[2021-09-13 14:38:00]
m4x :
as failsafe
[2021-09-13 14:38:04]
m4x :
but mid flight?
[2021-09-13 14:38:10]
m4x :
thats a nope out situation
[2021-09-13 14:38:11]
m4x :
lol
[2021-09-13 14:38:44]
m4x :
but i take inflated lipos over having them explode
[2021-09-13 14:38:46]
m4x :
:see_no_evil:
[2021-09-13 14:43:41]
fredmicrowave :
This must be why they have put microswitches under each battery holds, so when one pops up it warns you your batt (or drone) is about to drop
[2021-09-13 14:45:24]
m4x :
now thats a neat feature i'd like to see in more things
[2021-09-13 14:46:00]
flylusive_pat :
> Genuinely good seller btw
my partner haha
[2021-09-13 14:46:17]
flylusive_pat :
Glad he you’re happy with the cells
[2021-09-13 14:49:25]
flylusive_pat :
@fredmicrowave Charge to 100%, then discharge to 0% (3.55V per cell), and then charge it again to 100%
[2021-09-13 14:49:29]
flylusive_pat :
Now you should have correct capacity
[2021-09-13 14:50:11]
flylusive_pat :
Or if you have TRB, just hit Auto Calibration :ok_hand:
[2021-09-13 15:05:52]
fredmicrowave :
Ok @kakerarecever567, will do that , tnx.
Cells look exactly as the originals, I still want to weight them just out of curiosity.
[2021-09-13 15:06:12]
flylusive_pat :
ASD = ATL, original
[2021-09-13 15:06:22]
fredmicrowave :
Great
[2021-09-13 15:10:41]
fredmicrowave :
Then i have another battery that got somehow connected reversed on the charge plug for a fraction of a second, apparently mosfets got shorted: When I plug the battery drone powers up partially. If i press the button powers up normally.
Mp1 mosfets are the same and I have an old board, will have to swap them...
[2021-09-13 15:14:33]
flylusive_pat :
Check if BQ chip is ok as well
[2021-09-13 15:21:47]
fredmicrowave :
Look so, drone seems to work.
Waiting for a CP2112 as my Ev2300 copy wont work (Did not try with TRB)
[2021-09-13 15:49:10]
flylusive_pat :
Show me your ev2300
[2021-09-13 15:49:14]
flylusive_pat :
I will help you
[2021-09-13 15:50:02]
flylusive_pat :
CP2112 is not able to do everything ev23k can do
[2021-09-13 15:52:05]
originaldobo007 :
I've accidentally depleted an Air2S battery to 0% once or twice but it has had no problems after a recharge.
[2021-09-13 15:54:55]
m4x :
Happens all the time in simulator
[2021-09-13 15:54:59]
m4x :
:see_no_evil:
[2021-09-13 16:02:36]
fredmicrowave :
It´s one of those
<https://www.aliexpress.com/item/1005002681148937.html>
[2021-09-13 21:35:56]
m4x :
is the final low voltage cut-off done by the BMS or the drone? I hope the BMS lol
[2021-09-13 21:37:28]
m4x :
its good to have some synchronized signaling between them tho
[2021-09-13 21:40:28]
fredmicrowave :
[2021-09-13 21:41:08]
m4x :
bit too much flux around the connector for my taste
[2021-09-13 21:41:34]
m4x :
was that from factory?
[2021-09-13 21:42:22]
fredmicrowave :
2 versions of the M2 battery board @mefisto, new Mosfets with slightly lower rds and missing transistor (?) , if you want to update your database .
[2021-09-13 21:42:49]
m4x :
huh so they manually solder it?
[2021-09-13 21:43:10]
m4x :
resin based flux i suppose?
[2021-09-13 21:43:52]
m4x :
thats waaay more than youd use for p&p smd assembly
[2021-09-13 21:44:16]
fredmicrowave :
Not flux, protective coating
[2021-09-13 21:44:27]
m4x :
smells like resin flux
[2021-09-13 21:44:54]
m4x :
the white stuff, sure, secures the connector
[2021-09-13 21:44:59]
m4x :
the rest? doubt
[2021-09-13 21:45:16]
m4x :
does it melt? the epoxyd they use to secure it usually is at least 360+°C
[2021-09-13 21:45:17]
fredmicrowave :
Both are from factory
[2021-09-13 21:45:34]
m4x :
if it melts around 200-300 its flux
[2021-09-13 21:46:18]
m4x :
this looks like reflown under resin flux after stencil assembly
[2021-09-13 21:46:22]
m4x :
without cleanup
[2021-09-13 21:46:41]
m4x :
so curious ifs its actually the same shit
[2021-09-13 21:46:58]
m4x :
theres some white specs but i'd expect more cloudiness
[2021-09-13 21:47:03]
m4x :
even at a thin coat
[2021-09-13 21:47:46]
m4x :
if its protective, then odd choice _not_ covering the connector pins
[2021-09-13 21:47:56]
m4x :
so inverse
[2021-09-13 21:51:58]
fredmicrowave :
Not flux, you can believe me. Smells exactly the same as what you find in Iphones.
And now I have to remove those mosfets and fight against this shit, that also wont let the flux help melting the solder.
[2021-09-13 21:52:25]
m4x :
well u can always make it turn into tar :stuck_out_tongue:
[2021-09-13 21:52:40]
m4x :
so
[2021-09-13 21:52:43]
m4x :
either soak in iso
[2021-09-13 21:52:47]
m4x :
or non polar solvent
[2021-09-13 21:52:53]
m4x :
dunno which works
[2021-09-13 21:52:57]
m4x :
but either will soften it
[2021-09-13 21:53:12]
m4x :
depends on the epoxyd
[2021-09-13 21:53:20]
m4x :
usually iso does the trick
[2021-09-13 21:53:23]
m4x :
after soak
[2021-09-13 21:53:40]
m4x :
so u can peel it right off
[2021-09-13 21:53:44]
m4x :
if that doesnt work, try petrol
[2021-09-13 21:53:53]
m4x :
the components there dont care as long u dry them right
[2021-09-13 21:54:12]
m4x :
tho in non polar, the plastic might get soggy
[2021-09-13 21:54:23]
m4x :
so try not to dip it in prolonged
[2021-09-13 21:54:28]
m4x :
wont matter for iso
[2021-09-13 21:55:32]
fredmicrowave :
iso or mek don´t work, at least not quickly.
Heat it will be.
[2021-09-13 21:55:49]
m4x :
iso would take at least overnight
[2021-09-13 21:55:52]
m4x :
at least usually
[2021-09-13 21:56:01]
m4x :
non polar would tell u rather quick
[2021-09-13 22:04:02]
fredmicrowave :
its done, actually quite easier to remove than the M1 , i had to apply lots of heat
[2021-09-13 22:09:10]
m4x :
_until the pads lift, lol_
[2021-09-13 22:27:27]
fredmicrowave :
Done.
Not great, not terrible, but should be safe :slightly_smiling_face:
[2021-09-14 00:41:43]
lolo780 :
What are the battery build dates?
[2021-09-14 01:21:54]
fredmicrowave :
Don´t know where to find the build date... But I bought this one about one month ago . The other one probably more like 2 years...
[2021-09-14 08:23:02]
lucaps82 :
Hi everyone, I'm new here and I'm looking for help with my DJI Spark.
Few weeks ago I hit a tree branch and Spark has fallen directly into a small, natural rainwater tank, with a very muddy bottom, full of garbage, plants and insects.
It was only about 1m deep, but even with the latest GPS data, I couldn't find it. So.. I decided I'll pump out as much water as possible and then try again.
Finally I've got him back, brown from mud. It has spent 28 hours under the water. What failed was only the battery (2 cells still fine:) ).
I've finally cleaned him out under a freshwater stream and let him dry for 2 weeks. After that I disassembled him and cleaned everything with a toothbrush and IPA.
Next, I've put everything back in and, which very surprised me, my Spark was happy to fly again! I flew out 3 batteries.
The following weekend I went out flying with my son again. He couldn't bind the DJI remote control with a drone, which was initially signalling blinking yellow and red.
When I tried the fan stopped turning on. The only indication that it's turned on was the battery LED status.
When I connect him via USB to PC, the aircraft turns on and I'm able to bind to it's WiFi and connect to it with the DJI GO4 app, see the camera stream and move the gimbal.
There is no error reported except that the UAV cannot fly because of the USB connection detected.
Next, when disconnecting the USB cable, the drone fan stops again, but I'm still connected with the app.
The status screen in the app reports now the following error:
_*Check the 8-pin plug that connects the damping plate and the aircraft.*_
The connector that goes from the damping plate to the mainboard is the IMU connector afaik, but it has more than 8-pins. When the aircraft is connected to USB, the status of IMU is correct.
When I disconnect this plug and power on the drone, I get different errors.
I also did factory reset / upgrades with DJI Assistant, everything went fine.
IMO, something is wrong with the power supply of the drone(?), something broken in the damping plug itself ? Or it's on the mainboard.
How to find the real error or what this error really means? I can't find much about it.
Do you have any idea whether it's possible to fix this by myself? If not, what to replace? Mainboard or sth else first ?
Thanks in advance.
[2021-09-14 08:27:39]
validat0r :
I feel your pain. Had a bad connector cable once in my spark. Was barley detectable under magnifing glass. Cannot imaginge where to look after full bath. Must be corrosions all over the place.
[2021-09-14 08:28:44]
validat0r :
Maybe buy another crashed spark and start swapping components.
[2021-09-14 08:29:49]
validat0r :
Have never seen that error msg myself. Very specific. Didnt know sth like that was in the app
[2021-09-14 08:31:59]
validat0r :
Stopping fan is bad bc spark might overheat. Havent seen that the behaviour besides during flight controller upgrade procedure
[2021-09-14 08:41:23]
lucaps82 :
Fan stops only after disconnecting USB. When connected, **no errors**. That's weird. I'd like to find a way to find out what the problem is. If not, I'll probably buy a new mainboard. Corrosion was mainly on the connectors, the biggest on the power connector. I removed even the radiator metal plates on the mainboard, the integrated circuits under them where completely dry.
Also, the IMU connector has more the 8 pins... TBH, I couldn't find any 8 pin connector :slightly_smiling_face:
[2021-09-14 09:48:42]
coldflake :
@fredmicrowave A super good tip for removing sensitive parts or parts that has many connectors, use low melt solder. It fucking rocks and it stays liquid for a longer period of time so it is easy to keep several pads liquid and remove the component.
[2021-09-14 09:51:46]
coldflake :
And you don't have to apply a lot of heat if you first replace the unledded solder with low melt.
Unleaded solder melts at around 360°C and low melt solder at around 130°. All factory produced stuff is unleaded solder.
[2021-09-14 10:05:14]
m4x :
bismuth, mate
[2021-09-14 10:05:59]
m4x :
and yea factory uses hot temp usually. higher than most components are rated for. they get away with it due to being solderpaste (fine particles) and some seeding
[2021-09-14 10:06:18]
m4x :
@coldflake at 360°C pads start lifting
[2021-09-14 10:06:22]
m4x :
so its a must
[2021-09-14 10:06:51]
m4x :
learned that the hard way lol, usually pcb's arent that sensitive on the layers
[2021-09-14 10:07:12]
m4x :
tho it was also a crashed drone that i salvaged, so could be microscopic damages prior
[2021-09-14 10:07:30]
m4x :
<https://en.wikipedia.org/wiki/Rose%27s_metal>
[2021-09-14 10:08:03]
m4x :
i grind some up usually (its brittle af due to bismuth) and add it to my solderpaste
[2021-09-14 10:08:05]
m4x :
to lower it
[2021-09-14 10:08:22]
m4x :
apply finely, melt it, it will mix right in
[2021-09-14 10:08:32]
m4x :
tho i mostly use it for desoldering
[2021-09-14 10:08:52]
m4x :
often you just need to re-tin with lead and use some desoldering wick
[2021-09-14 10:09:01]
m4x :
rose's metal is usually for desoldering
[2021-09-14 10:09:05]
m4x :
or if u have a huge package
[2021-09-14 10:09:16]
m4x :
and you have troubles keeping it liquid on all legs
[2021-09-14 10:09:27]
m4x :
u probably know most of it, just for bystanders
[2021-09-14 10:11:44]
coldflake :
Yes, whatever trick one can use to lower the melting point is key to work on sensitive things and not just blast them with heat
[2021-09-14 10:12:18]