Messages in anafi
[2018-07-10 08:21:47]
ender :
@ender has joined the channel
[2018-07-10 08:21:48]
hostile :
@hostile has joined the channel
[2018-07-10 08:21:48]
mathieu.peyrega :
@mathieu.peyrega has joined the channel
[2018-07-10 08:21:48]
ender :
set the channel description: All things Anafi :wink:
[2018-07-10 08:21:48]
aciid :
@aciid has joined the channel
[2018-07-10 08:21:48]
fredz :
@fredz has joined the channel
[2018-07-10 08:21:49]
mr.vibez :
@mr.vibez has joined the channel
[2018-07-10 08:21:49]
bin4ry :
@bin4ry has joined the channel
[2018-07-10 08:22:21]
aciid :
i approve this message
[2018-07-10 08:23:02]
fredz :
What a channel, it looks amazing
[2018-07-10 08:26:06]
ender :
Hi guys, i just created this channel as to NOT spam the DJI channles too much.
Probably its stone dead here but lets see :slightly_smiling_face: Cant hurt…
Current Status:
-No saved FW file
-No telnet/ssh (usual ports are closed, did not find a Bebop-style way of enabling it with a few button presses, as i have not yet decided on keeping the Anafi no search for UART points)
-FCC / CE switching works for fredz but does NOT work for me strangely enough
-APK is not protected, can be decompiled & compiled with APKtool JUST exclude the resources with “-r” options as they can not be compiled.
Cool & relevant stuff found in “CountryDetector.smali” ( Directory “smali\com\parrot\freeflight\util\location”)
[2018-07-10 08:26:30]
ender :
anything to add for current Status ?
[2018-07-10 08:26:51]
aciid :
<https://www.dropbox.com/s/s46jri7xualbqbj/com.parrot.freeflight6_source_from_JADX.zip?dl=0> succesful decompile in java format. not smali ( uncompelte, Jeb is better
[2018-07-10 08:27:23]
ender :
oh yes, even older semi-legal versions of JEB work fine.
[2018-07-10 08:28:08]
ender :
I patched the “GetCountryCode” by loading up “US” in the v0 local variable before returning.
No effect.
[2018-07-10 08:28:58]
ender :
I also treid different in adding a mCountryCodeDummy global and replaced “mCountryCode” with “mCountryCodeDummy” everytime something was written to it but initialized “mCountryCode” with “US”.
[2018-07-10 08:29:02]
ender :
Also no effect.
[2018-07-10 08:29:33]
ender :
The whole thing is stupid for me to test as even fredz proven working Fake GPS method is showing no effect on my setup.
[2018-07-10 08:29:56]
ender :
I havent the foggiest idea why not but that way i can not be sure if i am somehow locked in FCC or CE mode no matter what i do.
[2018-07-10 08:30:56]
aciid :
have you checked /data/data/com.parrot.freeflight6/shared_prefs theres a few xml files that state the countrycode?
[2018-07-10 08:31:17]
ender :
There is one other thing i dont know how to do: In the Prferences / Network Dialog layout XML you can see there is a country code selction and an Outddor/Inddor Button like there used to be for the older FreeFlight app & the Bebops.
[2018-07-10 08:31:37]
ender :
But those seem to be disabled, does anyone know how to enable those ?
[2018-07-10 08:31:45]
ender :
@aciid: no i have not seen that.
[2018-07-10 08:33:10]
ender :
The layout file in Question is: fragment_connect_wifi_config.xml
[2018-07-10 08:33:37]
ender :
BUT as i said, i cannot manage to decompile & compile including the Resources. Even using latest APKTool 2.3.3 on OSX
[2018-07-10 08:33:49]
mathieu.peyrega :
what is the RF configuration ?
[2018-07-10 08:33:52]
ender :
Are you able to do that ? Otherwise we cannot tamper with the layout xmls
[2018-07-10 08:34:03]
mathieu.peyrega :
RCi is configured as Access Point ?
[2018-07-10 08:34:12]
ender :
Nope, AC is Access point
[2018-07-10 08:34:12]
mathieu.peyrega :
or drone as access poitn ?
[2018-07-10 08:34:14]
mathieu.peyrega :
or phone ?
[2018-07-10 08:34:18]
aciid :
resources decompiled fine JADX check that
[2018-07-10 08:34:19]
ender :
drone
[2018-07-10 08:34:23]
mathieu.peyrega :
ok
[2018-07-10 08:34:30]
ender :
decompile no prob, can you compile & sign ?
[2018-07-10 08:34:50]
mathieu.peyrega :
so my guess is that the RC will stick to the country code broadcasted by the AP
[2018-07-10 08:34:52]
aciid :
not without manual labor, the decompile is overloading the folders
[2018-07-10 08:35:05]
aciid :
i spent something like an hour yesterday cleaning up /res
[2018-07-10 08:35:11]
ender :
uhhh
[2018-07-10 08:35:13]
aciid :
theres still work to do
[2018-07-10 08:35:21]
ender :
I wouldnt have the idea where to start TBH
[2018-07-10 08:36:36]
ender :
SO my main Problems are: I cannot taper with resources and whatever i do i can not be sure my setup would show the effect as the Fake GPS Method is also NOT showing.
[2018-07-10 08:37:14]
ender :
@fredz: Question: you connect your RF Meter to the RP SMA, do you leave the other open or with Antenna connected or ?!?!
[2018-07-10 08:37:16]
aciid :
country code is getting from region, I had language english-US in bluestacks and it took that
[2018-07-10 08:37:36]
ender :
how did you verify that aciid ?
[2018-07-10 08:37:47]
aciid :
I did not yet, but I can run reinstall
[2018-07-10 08:38:06]
ender :
In the “CountryCode” smali itis clearly visible that ut tries to get CC form GPS and as fallback from phone network
[2018-07-10 08:38:13]
aciid :
oh
[2018-07-10 08:38:21]
ender :
maybe that is the fallback-fallback :slightly_smiling_face:
[2018-07-10 08:38:24]
aciid :
could be that thers nothing to pull it from in bluestacks
[2018-07-10 08:38:31]
ender :
yep
[2018-07-10 08:38:52]
ender :
GPS fails --> try network CC --> fails --> Use Android CC ?!?!
[2018-07-10 08:39:05]
aciid :
<https://i.imgur.com/gkG0PIG.png> this might take some time still to cleanup
[2018-07-10 08:39:08]
aciid :
this is what it looks like
[2018-07-10 08:39:10]
ender :
but i have not seen the latter
[2018-07-10 08:39:23]
aciid :
some variations are dumped in one res xml
[2018-07-10 08:39:37]
ender :
uhgh
[2018-07-10 08:39:55]
ender :
i wondered about those folders…
[2018-07-10 08:41:01]
fredz :
@ender I leave the other open, or I use an antenna, it has no influence on the results
[2018-07-10 08:41:52]
ender :
Another thing hindering me: i was unable to use a popup messgae (aka Toast as i learned) to output the Country Code returned by “GetCountryCode”, when i try the sniplet from bin4ry or just from anywhere found by google the app installs but cannot start..
[2018-07-10 08:42:15]
fredz :
also odd is this: in France and Luxembourg, I cannot choose 5 GHz. In FCC I can choose it. However in Germany (where I was yesterday), 5 GHz popped up immediately in CE
[2018-07-10 08:42:38]
fredz :
so there is not only US/others, but also individual country settings
[2018-07-10 08:43:48]
mathieu.peyrega :
In Europe, the allowed power for 5GHz is ridiculously low
[2018-07-10 08:43:49]
fredz :
but the odd thing is, in Germany, you cannot see the signal graphs!
[2018-07-10 08:44:01]
fredz :
@fredz uploaded a file: [2018-07-08 17.47.00.png](https://dji-rev.slack.com/files/U6179MS6R/FBMKY96P5/2018-07-08_17.47.00.png)
[2018-07-10 08:44:07]
mathieu.peyrega :
so I guess Parrot prefered to disabled it rather than having a poor user experience
[2018-07-10 08:44:07]
fredz :
above in Germany
[2018-07-10 08:44:16]
ender :
@fredz: you know that i do not want to Antenna mod my Controller right now so i am using my ImmersionRC RF meter with ANtenna close to the controller & drone. SO the stock ANtennas are in place. I wonder if the chipset detects “overload” and reduces the power output. I **may** recall such a problem on the Mavic Pro however when i first played with FCCmods (using phones MCC/MNC) i successfully measured it that way on the Pro. And later also on the Spark & Air. I should be able to see a 6dB jump.
[2018-07-10 08:44:22]
fredz :
Matioupi: they disabled 5 GHz only in France and Benelux it seems
[2018-07-10 08:44:42]
ender :
strange, 5G can be helpful. Obviously shown here as i am in DE
[2018-07-10 08:44:52]
fredz :
same but in Luxembourg - no 5 GHz, but we get signal graphs
[2018-07-10 08:45:04]
ender :
uhh nice, i dont have THAT
[2018-07-10 08:45:09]
fredz :
in Germany the signal graphs are disabled
[2018-07-10 08:45:13]
aciid :
according to the sourcecode /data/data/com.parrot.freeflight6/shared_prefs path is used in countrycode management <https://i.imgur.com/d0ISvDl.png>
[2018-07-10 08:45:20]
fredz :
maybe it's illegal in Germany to see the graphs for privacy reasons!
[2018-07-10 08:45:27]
fredz :
I know the Germans love their privacy
[2018-07-10 08:45:38]
ender :
Well, my fritzbox does scanning. But maybe scanning isnt allowed ?!
[2018-07-10 08:45:44]
ender :
Have seen stranger things :slightly_smiling_face:
[2018-07-10 08:45:44]
aciid :
country_detector.xml
<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
<map>
<long name="UPDATE_TIME_KEY" value="1531164545822" />
<boolean name="GEOCODE_NEEDED_KEY" value="false" />
<string name="COUNTRY_CODE_KEY">us</string>
</map>
[2018-07-10 08:45:50]
fredz :
some ridiculous rule indeed
[2018-07-10 08:45:57]
ender :
we are nit sure.
[2018-07-10 08:45:58]
fredz :
or maybe just a bug
[2018-07-10 08:46:03]
ender :
Maybe FF6 is just f*cked up
[2018-07-10 08:46:06]
ender :
:slightly_smiling_face:
[2018-07-10 08:46:13]
fredz :
yes it sure is :slightly_smiling_face:
[2018-07-10 08:46:40]
fredz :
I also got the aUTEL eVO by the way, and it works in FCC in the whole world it seems
[2018-07-10 08:46:51]
fredz :
it has no CE certification
[2018-07-10 08:46:52]
ender :
uhhh that spells trouble for them
[2018-07-10 08:46:56]
fredz :
it cannot be sold in EU
[2018-07-10 08:46:59]
fredz :
that's why :slightly_smiling_face:
[2018-07-10 08:47:01]
fredz :
but I like that :slightly_smiling_face:
[2018-07-10 08:47:05]
ender :
ah so just trouble for the user
[2018-07-10 08:47:15]
fredz :
well, just NO trouble for the user :slightly_smiling_face:
[2018-07-10 08:47:28]
fredz :
unfortunately, Ocusync or Lightbridge is much better in distance after some tests
[2018-07-10 08:47:38]
fredz :
MP still outflies the Evo, even in CE
[2018-07-10 08:47:45]
ender :
hmm, if i look at the java and think a bit it seems useless to tamper with the mContryCode i need to set the shared preferences key with US i guess.
[2018-07-10 08:48:09]
ender :
but i dont know which format i just GUESS “US” means USA = FCC…
[2018-07-10 08:48:31]
aciid :
/data/data/com.parrot.freeflight6/shared_prefs/country_detector.xml
[2018-07-10 08:48:34]
ender :
maybe its “us” or “yugely bigly united states”
[2018-07-10 08:48:42]
aciid :
<string name="COUNTRY_CODE_KEY">us</string>
[2018-07-10 08:48:43]
ender :
okay
[2018-07-10 08:48:55]
ender :
okay lower case
[2018-07-10 08:49:30]
aciid :
if it changes back, try su chmod 444 country_detector.xml
[2018-07-10 08:49:35]
aciid :
that way it's readonly to user/system
[2018-07-10 08:49:37]
aciid :
:smile:
[2018-07-10 08:49:53]
ender :
wait aciid, i am dense, those are parameters on the phone, right ? Need to edit it with root editor ancd chmod is what you are saying ?
[2018-07-10 08:50:07]
aciid :
yes
[2018-07-10 08:50:13]
aciid :
connect via adb shell
[2018-07-10 08:50:36]
ender :
stupid enough my main flying machine is not rootable (as of now) Te moverios BT-300, ARGHH
[2018-07-10 08:50:48]
ender :
but i can at least try on my phone
[2018-07-10 08:50:57]
ender :
will do. Not expecting to see a difference :slightly_smiling_face:
[2018-07-10 08:51:11]
aciid :
maybe you can just modify the file with any filebrowser in android?
[2018-07-10 08:51:30]
aciid :
also the update_time_key on that file is a unix timestamp, could mean when it's last checked
[2018-07-10 08:51:50]
aciid :
oh yeah
[2018-07-10 08:52:01]
aciid :
this file is all that is needed to mod
[2018-07-10 08:52:06]
aciid :
sharedPreferences.edit().putString(COUNTRY_CODE_KEY, countryCode).putLong(UPDATE_TIME_KEY, mLastUpdateTime).putBoolean(GEOCODE_NEEDED_KEY, false).apply();
[2018-07-10 08:52:07]
aciid :
:smile:
[2018-07-10 08:52:45]
ender :
wait wait wait, where is that
[2018-07-10 08:53:07]
aciid :
if (System.currentTimeMillis() - mLastUpdateTime > ((long) UPDATE_RETRY_DELAY_MILLIS)) {
obsolete = true;
} else {
obsolete = false;
}
[2018-07-10 08:53:31]
aciid :
com/parrot/freeflight/util/location/CountryDetector.java
[2018-07-10 08:54:11]
ender :
okay, so change to us in filesystem and patch to not update it, is that the gist of it ?
[2018-07-10 08:54:23]
aciid :
java code is not there ofc
[2018-07-10 08:54:25]
aciid :
but the xml
[2018-07-10 08:54:28]
ender :
i know
[2018-07-10 08:54:32]
ender :
i see i in smali
[2018-07-10 08:54:44]
aciid :
according to the sourcecode that algorithm states that if you patch UPDATE_TIME_KEY to something absurd it will stay valid
[2018-07-10 08:54:48]
aciid :
forever
[2018-07-10 08:54:58]
ender :
ahhh
[2018-07-10 08:54:59]
aciid :
f (System.currentTimeMillis() - mLastUpdateTime > ((long) UPDATE_RETRY_DELAY_MILLIS)) {
[2018-07-10 08:55:21]
aciid :
mlastupdatetime is = update_time_key
[2018-07-10 08:55:38]
ender :
so like patching the update time key to year 2099 ?
[2018-07-10 08:55:50]
aciid :
yes
[2018-07-10 08:56:06]
ender :
how is android coding time, secs from year 19000 or ?!? well, that should be easy to find :slightly_smiling_face:
[2018-07-10 08:56:28]
aciid :
I cant remember if unix time ever rolls over
[2018-07-10 08:56:30]
aciid :
probably not
[2018-07-10 08:57:35]
ender :
looking…
[2018-07-10 08:57:51]
ender :
Damn my Boss expects me to get some stuff done, SLAVERY :wink:
[2018-07-10 08:57:58]
aciid :
1594371039 = Friday, July 10, 2020 8:50:39 AM
[2018-07-10 08:58:10]
ender :
so whats the timebase ?
[2018-07-10 08:58:21]
aciid :
seconds?
[2018-07-10 08:58:25]
aciid :
its standard
[2018-07-10 08:58:38]
ender :
yes but counting from where :slightly_smiling_face: Just curious
[2018-07-10 08:58:47]
aciid :
1970' like all unix systems
[2018-07-10 08:58:59]
aciid :
<https://en.wikipedia.org/wiki/Unix_time>
[2018-07-10 08:59:03]
ender :
oh okay thats stupid easy
[2018-07-10 08:59:11]
aciid :
you can save it to any database as timestamp in integer
[2018-07-10 08:59:15]
aciid :
and compare it in SQL
[2018-07-10 08:59:25]
aciid :
so easy
[2018-07-10 09:11:25]
ender :
well, my setup is not reacting. I simply edited the file with ES-FIle-Explorer Editor (root of course). I simply increased the second digit of the update time, so editing “15xxxx” to “16xxxx”, the changed “de” to “us”. No change in dB.
[2018-07-10 09:11:46]
ender :
@fredz could you try this its dirt easy ? Of course force quit ff6 while youre doing it ?!
[2018-07-10 09:12:01]
ender :
i switched back to de to no change.
[2018-07-10 09:13:03]
ender :
I also out my Anafi nearly out of range (red warning, only one bar, laggy videostream) and changed. neither the RF meter or the “WiFi icon” in the app showed a difference. MAN i got a stubborn Anafi, i am probably not useful for verifying stuff right now.
[2018-07-10 09:13:20]
fredz :
What file
[2018-07-10 09:13:23]
ender :
SO fredz.let me know :slightly_smiling_face: If that works for you it will also be easy to patch it.
[2018-07-10 09:13:30]
ender :
DO you have a rooted Android ?
[2018-07-10 09:13:36]
fredz :
Yes
[2018-07-10 09:14:19]
ender :
cool. Do you have a file browser / file editor combo to edit root files ?
[2018-07-10 09:14:28]
ender :
(i like ES File Explorer)
[2018-07-10 09:17:15]
vincentheiszwolf :
@vincentheiszwolf has joined the channel
[2018-07-10 09:17:19]
fredz :
yes of course
[2018-07-10 09:17:20]
fredz :
I have ES
[2018-07-10 09:17:33]
ender :
cool.
[2018-07-10 09:17:39]
ender :
We are talking about this file:
[2018-07-10 09:17:47]
ender :
/data/data/com.parrot.freeflight6/shared_prefs/country_detector.xml
[2018-07-10 09:18:08]
ender :
This is how the file looked BEFORE editing on my machine:
[2018-07-10 09:18:25]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBMTYL58D/-.xml)
[2018-07-10 09:18:33]
ender :
This is after editing:
[2018-07-10 09:18:43]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBMTYR3D3/-.xml)
[2018-07-10 09:19:19]
ender :
So i incresed the UPDATE_TIME_KEY by changing “15…” to “16…” basically telling the app to update the country code in the far future.
[2018-07-10 09:19:24]
ender :
I also changed de to us
[2018-07-10 09:19:27]
ender :
That could do it.
[2018-07-10 09:19:40]
ender :
no risk editing this file IMO
[2018-07-10 09:20:44]
ender :
I am very curious if this changes your power output. Ni tmine but nothing seems to change that :slightly_smiling_face: I just wonder if i am fixed to FCC or fixed to CE. I guess to FCC as the Stock Anafi performs better then the stock Air or Spark on CE…
[2018-07-10 09:21:22]
validat0r :
@ilovemynexus4 has joined the channel
[2018-07-10 09:21:48]
ender :
hi there !
[2018-07-10 09:22:06]
ender :
got an Anfi already, validat0r ?
[2018-07-10 09:22:42]
ender :
@fredz IF that works for you it should be easy to patch the APK.
[2018-07-10 09:22:49]
ender :
so no need for root to gain FCC
[2018-07-10 09:23:41]
fredz :
ok let me try
[2018-07-10 09:23:50]
ender :
great :slightly_smiling_face:
[2018-07-10 09:24:24]
aciid :
that should work, I live in Finland. no Anifi deals for me yet. also international deals suck atm
[2018-07-10 09:24:33]
fredz :
hmm my /data folder is empty
[2018-07-10 09:24:39]
ender :
i can forward one to you…
[2018-07-10 09:24:53]
ender :
uh
[2018-07-10 09:25:01]
aciid :
android should have /data/, have you installed on sd-card?
[2018-07-10 09:25:06]
fredz :
all I see is .push_device id
[2018-07-10 09:25:12]
fredz :
no I don't have an sd c ard
[2018-07-10 09:25:56]
ender :
in es got to “/” okay ?
[2018-07-10 09:26:02]
fredz :
ah ok it's /Android/data
[2018-07-10 09:26:03]
ender :
then start going down the path…
[2018-07-10 09:26:06]
ender :
oh !
[2018-07-10 09:26:13]
ender :
always nasty
[2018-07-10 09:26:28]
fredz :
com.parrot.freeflight only has a folder cache
[2018-07-10 09:26:43]
fredz :
hidden files are on
[2018-07-10 09:26:45]
ender :
you are on a virtual sd
[2018-07-10 09:27:14]
ender :
yep, got the same cache on Android/data :slightly_smiling_face:
[2018-07-10 09:27:30]
fredz :
so where to go then?
[2018-07-10 09:27:40]
ender :
Could you go to “local -> Device” in ES Menu ?
[2018-07-10 09:27:50]
fredz :
empty folder
[2018-07-10 09:27:54]
aciid :
this may vary from phone to phone
[2018-07-10 09:28:15]
ender :
empty /data ? or empty “/” ?
[2018-07-10 09:28:22]
ender :
yes aciid…
[2018-07-10 09:28:24]
fredz :
empty local -> Device
[2018-07-10 09:28:35]
ender :
did you switch on root mode for es ?
[2018-07-10 09:28:44]
ender :
rools --> root explorer
[2018-07-10 09:28:49]
fredz :
hold on this phone isn't rooted
[2018-07-10 09:28:55]
fredz :
I rooted one, let me find it
[2018-07-10 09:29:03]
ender :
ahhh that explains a lot :slightly_smiling_face:
[2018-07-10 09:29:53]
fredz :
I only have a rooted tablet
[2018-07-10 09:29:57]
fredz :
and I am charging it now
[2018-07-10 09:30:45]
ls7454 :
@ls7454 has joined the channel
[2018-07-10 09:31:32]
ender :
:slightly_smiling_face:
[2018-07-10 09:31:46]
ender :
Hi rotor_wash, already got an Anafi ? :slightly_smiling_face:
[2018-07-10 09:32:28]
fredz :
even better, it's charged ender
[2018-07-10 09:32:43]
ender :
yippieee, i cant stand the suspense :slightly_smiling_face: so go install ff6 :slightly_smiling_face:
[2018-07-10 09:33:24]
ender :
btw fredz are the stock ANtennas on the Anafi directional or just the usual PCB Omni Antennas ?
[2018-07-10 09:33:46]
hotelzululima :
@hotelzululima has joined the channel
[2018-07-10 09:33:58]
fredz :
ender I don't know I didn't open them as I didn't need to
[2018-07-10 09:34:09]
ender :
k
[2018-07-10 09:36:04]
fredz :
should I first start FF6 once without the mod
[2018-07-10 09:36:18]
ender :
yes
[2018-07-10 09:36:25]
ender :
and measure RF again :slightly_smiling_face:
[2018-07-10 09:36:30]
ender :
so the files get created…
[2018-07-10 09:36:37]
ender :
so you got something to edit
[2018-07-10 09:37:30]
fredz :
ok it's installing FF6 first
[2018-07-10 09:39:12]
fredz :
hmm the tablet doesn't see the controller even with 2 USB cables tried
[2018-07-10 09:39:13]
fredz :
dammit
[2018-07-10 09:41:05]
fredz :
nope
[2018-07-10 09:41:06]
fredz :
nothing
[2018-07-10 09:41:09]
fredz :
Nvidia Shield
[2018-07-10 09:41:24]
ender :
uhhh
[2018-07-10 09:41:36]
fredz :
ah now it works
[2018-07-10 09:41:37]
fredz :
4th cable
[2018-07-10 09:41:37]
ender :
damn fredz you’re killing me :wink:
[2018-07-10 09:41:39]
ender :
ahhh !
[2018-07-10 09:41:46]
fredz :
man I hate micro usb cables
[2018-07-10 09:41:49]
ender :
Steven King stuff
[2018-07-10 09:43:04]
fredz :
image stays black although it connects
[2018-07-10 09:43:11]
fredz :
so let's just leave it like this for now and try the hack
[2018-07-10 09:43:52]
ender :
yup, i have that black image on several devices, must be the codec
[2018-07-10 09:44:09]
ender :
doesnt change the power thing :slightly_smiling_face:
[2018-07-10 09:44:21]
fredz :
indeed
[2018-07-10 09:45:13]
fredz :
same shit about the folders here
[2018-07-10 09:45:43]
fredz :
and this one is rooted
[2018-07-10 09:46:06]
ender :
did you put es in root mode ? need that !
[2018-07-10 09:46:31]
fredz :
ah let me put it on
[2018-07-10 09:46:52]
ender :
pheww
[2018-07-10 09:47:00]
fredz :
looks better
[2018-07-10 09:47:04]
ender :
!
[2018-07-10 09:47:22]
ender :
I bet i will burn my burger to coal while listening to this :slightly_smiling_face:
[2018-07-10 09:47:30]
fredz :
I have many files in shared_prefs
[2018-07-10 09:47:34]
fredz :
but no cntry detector
[2018-07-10 09:47:59]
ender :
hmm, maybe the tablet needs gps fix one time with ff6 to create it. sounds plausible
[2018-07-10 09:48:07]
fredz :
yeah
[2018-07-10 09:48:09]
fredz :
let's try
[2018-07-10 09:48:18]
chucken1 :
@chucken1 has joined the channel
[2018-07-10 09:48:21]
solution :
@solution has joined the channel
[2018-07-10 09:49:19]
fredz :
I'll put it outside a minute
[2018-07-10 09:49:23]
fredz :
now the image does work for some reason
[2018-07-10 10:02:48]
fredz :
sorry Ender
[2018-07-10 10:02:51]
fredz :
that file is NOT appearing
[2018-07-10 10:02:56]
fredz :
I even went outside to get full GPS lock
[2018-07-10 10:03:05]
fredz :
I also tried Fake GPS on that tablet, and that works as expected
[2018-07-10 10:03:13]
ender :
oh holy crap
[2018-07-10 10:03:59]
ender :
how many files in “shared_prefs” ?
[2018-07-10 10:04:01]
ender :
12 here
[2018-07-10 10:04:02]
fredz :
I have 13 files in shared_prefs
[2018-07-10 10:04:06]
ender :
did you try refresh in es
[2018-07-10 10:04:10]
fredz :
yes I did
[2018-07-10 10:04:35]
ender :
first is account.xnl ? last WebViewChromiumPrefs.xml ?
[2018-07-10 10:05:04]
fredz :
here you go
[2018-07-10 10:05:15]
fredz :
ah dammit slack won't show it
[2018-07-10 10:05:19]
ender :
ican see it
[2018-07-10 10:05:31]
fredz :
hacked Slack?
[2018-07-10 10:06:11]
fredz :
so you have an EXTRA file but one file less than me, that's odd
[2018-07-10 10:06:21]
ender :
really differnt to mine,like only 8 that are the same
[2018-07-10 10:06:29]
ender :
android 8 here…
[2018-07-10 10:06:40]
ender :
i check on an older tablet
[2018-07-10 10:07:05]
ender :
of couse i could send you my file but we never know…
[2018-07-10 10:07:15]
fredz :
This is android 5.1.1
[2018-07-10 10:08:09]
ender :
oh maybe check the com.parrot.freeflight6_preferences xml
[2018-07-10 10:08:31]
fredz :
that's empty
[2018-07-10 10:08:33]
fredz :
just sas AAAAAA
[2018-07-10 10:08:35]
fredz :
and some more stuff
[2018-07-10 10:08:46]
fredz :
the reverse_geocoder.xml gives my location
[2018-07-10 10:09:04]
ender :
yep
[2018-07-10 10:09:43]
fredz :
odd isn't it
[2018-07-10 10:09:56]
ender :
yup, trying on an older rooted tablet now…
[2018-07-10 10:10:10]
fredz :
I could root my Google Pixel XL though, it has Android 7
[2018-07-10 10:10:21]
fredz :
I also have a Samsung Galaxy S8 Plus but I can't seem to root that one
[2018-07-10 10:10:29]
ender :
Never leave an Android w/o root of course :slightly_smiling_face:
[2018-07-10 10:10:37]
ender :
nope S8 is tough
[2018-07-10 10:10:49]
fredz :
should I upgrade my Pixel XL to 8?
[2018-07-10 10:10:53]
fredz :
can it be rooted?
[2018-07-10 10:10:55]
ender :
i have no idea
[2018-07-10 10:11:04]
ender :
it CAN be rooted, no idea if 8 update makes sense
[2018-07-10 10:11:12]
fredz :
to have same version as yours
[2018-07-10 10:11:28]
ender :
<!here>: anyone with rooted Android & Anafi here ?
[2018-07-10 10:11:57]
fredz :
seems I can
[2018-07-10 10:11:58]
fredz :
<https://forum.xda-developers.com/pixel-xl/how-to/guide-pixel-xl-android-8-1oreo-unlock-t3715279>
[2018-07-10 10:12:00]
fredz :
I'll try that later
[2018-07-10 10:13:05]
ender :
okay, btw i also tried an iCrap mini here, about the same dB level as result…
[2018-07-10 10:13:10]
fredz :
always a mess this whole rooting procedure honestly
[2018-07-10 10:13:20]
fredz :
well I can't fake the gps location on an iDevice AFAIK
[2018-07-10 10:13:59]
ender :
yep, just for baseline
[2018-07-10 10:15:50]
ender :
uhh no such file on my tablet as well…
[2018-07-10 10:19:49]
fredz :
so it's Android version dependent
[2018-07-10 10:20:10]
fredz :
odd thing is I have no files with country codes in
[2018-07-10 10:30:01]
ender :
Strange indeed. BTW i tried Fake GPS method again to no avail here on that old Tablet.
[2018-07-10 10:30:32]
ender :
I may just blindly path that part in the APK, cannot verify here but at least you can see a difference…
[2018-07-10 10:30:49]
ender :
Need todo some work here :wink: THANK YOU for trying.
[2018-07-10 10:58:00]
robert.leake91 :
@robert.leake91 has joined the channel
[2018-07-10 11:05:42]
chipmangini :
@chipmangini has joined the channel
[2018-07-10 11:58:22]
mr.vibez :
I have root on my android, what am I doing?
[2018-07-10 12:08:22]
montevecchio.m :
@montevecchio.m has joined the channel
[2018-07-10 12:28:35]
ender :
@mr.vibez: could you use a root explorer & file editor ro check if FCC hack is working ?
[2018-07-10 12:29:57]
ender :
Or are you in a FCC country ?!
[2018-07-10 12:30:19]
ender :
nevertheless its still interesting if you have the file “/data/data/com.parrot.freeflight6/shared_prefs/country_detector.xml” and whats the contents
[2018-07-10 12:34:30]
ls7454 :
pre-ordered, release here is 20/07
[2018-07-10 12:36:20]
ender :
k
[2018-07-10 12:40:49]
fredz :
where is the release only 20/07?
[2018-07-10 12:52:26]
hostile :
@ender can you post the .apk here? I could not download it as of a few days ago
[2018-07-10 12:53:29]
ender :
of course, sec.
[2018-07-10 12:53:57]
hostile :
I see @aciid posted the JADX source, I'd like to see the raw apk =]
[2018-07-10 12:54:35]
hostile :
<https://dji-rev.slack.com/archives/CBMKLBXEF/p1531211243000062> btw... if you tell the JEB folks you are with the OGs, and mention my name they will give you a discount.
[2018-07-10 12:54:47]
hostile :
just say you are participating with the Slack OG's on DJI work
[2018-07-10 12:54:47]
ender :
<https://we.tl/p0bJf2x2cQ>
[2018-07-10 12:55:04]
hostile :
thanks!
[2018-07-10 12:55:20]
ender :
it will download additional stuff to obb when started of course.
[2018-07-10 12:55:49]
ender :
We had no success decompiling it “normal” ( == with Resources) and then compiling it again. usinf latest APKTOOL
[2018-07-10 12:56:05]
ender :
so i used “-r” to exclude resources.
[2018-07-10 12:56:40]
ender :
Good stuff for location is here: “smali\com\parrot\freeflight\util\location”
[2018-07-10 12:57:22]
ender :
I guess you read that on my setup i cant even verify the FakeGPS FCC switch that fredz demonstrated working ?! But on the other Hand i dont think you are into Fcc that much :stuck_out_tongue:
[2018-07-10 13:00:44]
hostile :
<https://dji-rev.slack.com/archives/CBMKLBXEF/p1531217119000349> nah it just complains and shows the file anyway. lol
[2018-07-10 13:02:17]
fredz :
What is JEB and what is OG ? :slightly_smiling_face:
[2018-07-10 13:05:34]
hostile :
the OG's are the original gangsters... aka the Core group that created this place. **EVERYTHING** here is created by an OG basically.
[2018-07-10 13:05:50]
hostile :
there are many private rooms here, primarily occupied by OG's
[2018-07-10 13:06:03]
hostile :
we are on about 5th string contributing OG's now.
[2018-07-10 13:06:38]
hostile :
JEB is an android compiler @fredz <https://www.pnfsoftware.com/jeb/buy>
[2018-07-10 13:06:39]
fredz :
wow
[2018-07-10 13:07:26]
hostile :
the original OG network is explained here: <https://github.com/MAVProxyUser/dji_system.bin/blob/master/README.md>
[2018-07-10 13:07:45]
hostile :
"The heads of The Five Families of DJI Jailbreaking scene have met... "
[2018-07-10 13:10:20]
ender :
Drama Queen :stuck_out_tongue:
[2018-07-10 13:18:18]
sharph30 :
@sharph30 has joined the channel
[2018-07-10 13:29:09]
ender :
*** Everybody who has an Anafi, lives in a CE country, has means to measure WiFi power (and be it a running WiFi Tool on another device) and has a rooted Android phone is invited to try stuff :slightly_smiling_face:
[2018-07-10 13:35:45]
ender :
Small howto about gaining FCC in a CE country by patching a file in filesystem ANDROID root required
[2018-07-10 13:36:20]
ender :
I uploaded this small howto about how to try to gain FCC by stupid filesystem edit. Would be great if someone can verify if it works or not.
[2018-07-10 13:36:36]
ender :
(and correct me if i wrote BS)
[2018-07-10 13:44:25]
fredz :
Well @ender no it doesn't :slightly_smiling_face:
[2018-07-10 13:44:56]
ender :
sry what doesnt ?
[2018-07-10 13:45:12]
fredz :
:slightly_smiling_face:
[2018-07-10 13:45:17]
fredz :
that file does not exist hehe
[2018-07-10 13:45:35]
ender :
i wrote that in the howto if people wanna try and dont find it.
[2018-07-10 13:45:45]
fredz :
I know :slightly_smiling_face:
[2018-07-10 13:45:46]
fredz :
just kidding
[2018-07-10 13:45:49]
ender :
btw did you try and search for it throughout the file system ?
[2018-07-10 13:46:02]
fredz :
nope
[2018-07-10 13:46:14]
fredz :
I wonder though, what happens if you connect the remote to an Android WITHOUT FF6
[2018-07-10 13:46:20]
fredz :
would it still pickup the location somehow
[2018-07-10 13:46:33]
ender :
no way
[2018-07-10 13:47:00]
ender :
it can only do so by communicating with the app. Its crystal clear in the java
[2018-07-10 13:47:25]
ender :
so i guess the setting is there on your tablet, just elsewhere.
[2018-07-10 13:47:29]
fredz :
how would I find that file throughout the file system?
[2018-07-10 13:47:38]
ender :
es explorer can do that
[2018-07-10 13:47:44]
ender :
or unix shell
[2018-07-10 13:48:17]
fredz :
ok met me try with ES
[2018-07-10 13:48:24]
fredz :
did you find it on your old android?
[2018-07-10 13:48:47]
ender :
i just got that idea NOW, so i did not try yet :slightly_smiling_face:
[2018-07-10 13:53:28]
hostile :
lol <https://dji-rev.slack.com/archives/CBMKLBXEF/p1531228220000026>
[2018-07-10 13:56:03]
fredz :
nope, that file does not exist here...
[2018-07-10 13:56:05]
ender :
I searched my Tablet, no trace of that file
[2018-07-10 13:56:14]
ender :
§$%&#*
[2018-07-10 13:56:30]
fredz :
kind of odd that it differs by android version, no?
[2018-07-10 13:56:54]
ender :
I have no idea if its the android version.
[2018-07-10 13:57:14]
ender :
could also be device tablet (phone vs tablet) or brand or bad luck or …
[2018-07-10 13:59:22]
fredz :
no way to see that file if device is not rooted?
[2018-07-10 14:01:40]
ender :
checking…
[2018-07-10 14:02:36]
ender :
i have loads of android devices. currently 6 Tablets and 8 phones. Most crappy of course :slightly_smiling_face:
[2018-07-10 14:03:14]
ender :
no cant see it w/o root
[2018-07-10 14:04:19]
ender :
Did ANYONE follow the rumor that the Controller is able to output 720p via USB-C HDMI ?
[2018-07-10 14:04:29]
ender :
I have such an adapter but its broken.
[2018-07-10 14:19:54]
hostile :
sooo
[2018-07-10 14:19:58]
hostile :
something enables ftp? ./com/parrot/drone/groundsdk/arsdkengine/peripheral/updater/FirmwareUpdaterProtocol$$CC.java: static void lambda$ftpUpload$0$FirmwareUpdaterProtocol$$CC(ArsdkRequest[] arg2, @NonNull DeviceController arg3, @NonNull FirmwareUpdaterCore arg4, @NonNull Callback arg5, File arg6, Throwable arg7, boolean arg8) {
[2018-07-10 14:20:14]
fredz :
FTP is already enabled on port 61
[2018-07-10 14:20:57]
ender :
@fredz: still no user/pass like on Bebop ?
[2018-07-10 14:21:23]
fredz :
no user, no pass
[2018-07-10 14:21:29]
ender :
btw yet another rooted phone with the file absent.
[2018-07-10 14:21:31]
ender :
GOOD.
[2018-07-10 14:21:35]
hostile :
they still doing flight plan over ftp too
[2018-07-10 14:21:36]
hostile :
./com/parrot/drone/groundsdk/arsdkengine/pilotingitf/flightplan/FlightPlanUploadProtocol$$CC.java: @Nullable public static Cancelable ftpUpload$$STATIC$$(@NonNull DroneController arg4, @NonNull File arg5, @NonNull Callback arg6) {
[2018-07-10 14:21:41]
ender :
yep
[2018-07-10 14:21:45]
ender :
its all the same stuff.
[2018-07-10 14:21:51]
ender :
But no telnet, argh
[2018-07-10 14:22:18]
ender :
probably a stupid key combo
[2018-07-10 14:22:24]
aciid :
Guus im coming jome from spa i can join back to fun in a bit
[2018-07-10 14:22:41]
ender :
:wink:
[2018-07-10 14:22:53]
ender :
From the spa or from spain ?
[2018-07-10 14:22:59]
ender :
or from a spa in spain ?
[2018-07-10 14:52:43]
ender :
@fredz: okay found ya in the french Parrot forum :slightly_smiling_face:
[2018-07-10 14:53:00]
ender :
recovered my ages old password, HEY i am still a pilot commander there :slightly_smiling_face:
[2018-07-10 14:53:01]
fredz :
Which one
[2018-07-10 14:53:04]
ender :
haha
[2018-07-10 14:53:08]
fredz :
Yeah me too lol
[2018-07-10 14:53:13]
fredz :
What a sucky forum that is
[2018-07-10 14:53:20]
ender :
the parrot one
[2018-07-10 14:53:43]
ender :
well it WAS good before they moved to the new design. No monitoring before :slightly_smiling_face:
[2018-07-10 14:54:45]
fredz :
They still don’t monitor much
[2018-07-10 15:27:37]
aciid :
is 699€ best deal that you can get for anafi?
[2018-07-10 15:27:40]
aciid :
im looking at amazon
[2018-07-10 15:36:25]
hostile :
```./com/parrot/freeflight/prefs/InAppPrefs.java:@Metadata(bv={1, 0, 2}, d1=..., d2={"Lcom/parrot/freeflight/prefs/InAppPrefs;", "Lcom/parrot/freeflight/prefs/AbsPrefs;", "context", "Landroid/content/Context;", "(Landroid/content/Context;)V", "getLastCheckTimeForDrone", "", "droneId", "", "isFlightPlanPromotionActivatedForDrone", "", "droneSerial", "isFlightPlanPurchased", "isFollowMePromotionActivatedForDrone", "isFollowMePurchased", "setFlightPlanPromotionActivatedForDrone", "", "activated", "setFlightPlanPurchased", "purchased", "setFollowMePromotionActivatedForDrone", "setFollowMePurchased", "setLastCheckTimeForDrone", "checkTime", "Companion", "FreeFlight6_release"}, k=1, mv={1, 1, 10}) public final class InAppPrefs extends AbsPrefs {
./com/parrot/freeflight/prefs/InAppPrefs.java: Intrinsics.checkParameterIsNotNull(arg5, "droneId");
./com/parrot/freeflight/prefs/InAppPrefs.java: Intrinsics.checkParameterIsNotNull(arg9, "droneId");```
[2018-07-10 15:38:20]
hostile :
MCU Update Manager you say? ./com/parrot/freeflight3/update/McuUpdateManager.java
[2018-07-10 15:38:40]
hostile :
```./com/parrot/freeflight3/update/McuUpdateManager.java: com.parrot.freeflight3.update.McuUpdateManager$4.$SwitchMap$com$parrot$freeflight3$update$McuUpdateManager$State[State.IDLE.ordinal()] = 1;
./com/parrot/freeflight3/update/McuUpdateManager.java: com.parrot.freeflight3.update.McuUpdateManager$4.$SwitchMap$com$parrot$freeflight3$update$McuUpdateManager$State[State.START_OTA.ordinal()] = 2;
./com/parrot/freeflight3/update/McuUpdateManager.java: com.parrot.freeflight3.update.McuUpdateManager$4.$SwitchMap$com$parrot$freeflight3$update$McuUpdateManager$State[State.NOTIFICATION_ENABLED.ordinal()] = 3;
./com/parrot/freeflight3/update/McuUpdateManager.java: com.parrot.freeflight3.update.McuUpdateManager$4.$SwitchMap$com$parrot$freeflight3$update$McuUpdateManager$State[State.MAGIC_CODE.ordinal()] = 4;
./com/parrot/freeflight3/update/McuUpdateManager.java: com.parrot.freeflight3.update.McuUpdateManager$4.$SwitchMap$com$parrot$freeflight3$update$McuUpdateManager$State[State.SEND_LENGTH_CRC.ordinal()] = 5;
./com/parrot/freeflight3/update/McuUpdateManager.java: com.parrot.freeflight3.update.McuUpdateManager$4.$SwitchMap$com$parrot$freeflight3$update$McuUpdateManager$State[State.UPLOAD_FIRMWARE.ordinal()] = 6;
./com/parrot/freeflight3/update/McuUpdateManager.java: com.parrot.freeflight3.update.McuUpdateManager$4.$SwitchMap$com$parrot$freeflight3$update$McuUpdateManager$State[State.CHECK_LSB_CRC.ordinal()] = 7;
./com/parrot/freeflight3/update/McuUpdateManager.java: com.parrot.freeflight3.update.McuUpdateManager$4.$SwitchMap$com$parrot$freeflight3$update$McuUpdateManager$State[State.CHECK_MSB_CRC.ordinal()] = 8;```
[2018-07-10 15:43:34]
info616 :
@info616 has joined the channel
[2018-07-10 15:50:44]
hostile :
This looks like the logic for the downloader here: ./com/parrot/drone/groundsdk/internal/http/HttpUpdateClient.java
[2018-07-10 15:51:06]
hostile :
``` interface Service {
@NonNull @GET @Streaming Call download(@NonNull @Url String arg1);
@NonNull @GET(value="apiv1/update") Call list(@Nullable @Query(value="product") String arg1);
}
```
[2018-07-10 15:59:34]
hostile :
``` void dump(@NonNull PrintWriter arg9, @NonNull Set arg10) {
if((arg10.isEmpty()) || (arg10.contains("--help"))) {
arg9.write("\t--firmwares: dumps firmware store\n");
}
else {
if(!arg10.contains("--firmwares") && !arg10.contains("--all")) {
return;
}
arg9.write("Firmwares: " + this.mUpdates.size() + "\n");
Iterator v4 = this.mUpdates.values().iterator();
while(v4.hasNext()) {
Object v1 = v4.next();
FirmwareInfoCore v2 = ((FirmwareStoreEntry)v1).getFirmwareInfo();
arg9.write("\t" + v2.getFirmware() + "\n");
arg9.write("\t\tsize: " + v2.getSize() + "\n");
arg9.write("\t\tchecksum: " + v2.getChecksum() + "\n");
if(((FirmwareStoreEntry)v1).getRemoteUri() != null) {
arg9.write("\t\tremote: " + ((FirmwareStoreEntry)v1).getRemoteUri() + "\n");
}
```
[2018-07-10 16:00:10]
hostile :
``` final class FirmwareRecord {
@Nullable @SerializedName(value="md5") private final String mChecksum;
@Nullable @SerializedName(value="flags") private final Set mFlags;
@Nullable @SerializedName(value="path") private final String mLocalUri;
@Nullable @SerializedName(value="max_version") private final String mMaxVersion;
@Nullable @SerializedName(value="required_version") private final String mMinVersion;
@Nullable @SerializedName(value="product") private final String mProduct;
@Nullable @SerializedName(value="remote_url") private final String mRemoteUri;
@SerializedName(value="size") private final long mSize;
@Nullable @SerializedName(value="version") private final String mVersion;
```
[2018-07-10 16:03:27]
hostile :
```$ strings ./lib/armeabi-v7a/libsdkcore.so | grep -i firmware
Java_com_parrot_drone_sdkcore_arsdk_upload_ArsdkFirmwareUploadRequest_nativeClassInit
Java_com_parrot_drone_sdkcore_arsdk_upload_ArsdkFirmwareUploadRequest_nativeCreate
Java_com_parrot_drone_sdkcore_arsdk_upload_ArsdkFirmwareUploadRequest_nativeCancel
Java_com_parrot_drone_sdkcore_arsdk_firmware_ArsdkFirmwareVersion_nativeClassInit
Java_com_parrot_drone_sdkcore_arsdk_firmware_ArsdkFirmwareVersion_nativeFromString
Java_com_parrot_drone_sdkcore_arsdk_firmware_ArsdkFirmwareVersion_nativeCreate
Java_com_parrot_drone_sdkcore_arsdk_firmware_ArsdkFirmwareVersion_nativeCompare
Java_com_parrot_drone_sdkcore_arsdk_firmware_ArsdkFirmwareInfo_nativeClassInit
Java_com_parrot_drone_sdkcore_arsdk_firmware_ArsdkFirmwareInfo_nativeFromFile
[%s] End of firmware upload with status : %d
[%s] End of firmware upload with status : %d
Java_com_parrot_drone_sdkcore_arsdk_upload_ArsdkFirmwareUploadRequest_nativeCreate
Java_com_parrot_drone_sdkcore_arsdk_upload_ArsdkFirmwareUploadRequest_nativeCancel
Java_com_parrot_drone_sdkcore_arsdk_firmware_ArsdkFirmwareVersion_nativeFromString
Java_com_parrot_drone_sdkcore_arsdk_firmware_ArsdkFirmwareVersion_nativeCreate
Java_com_parrot_drone_sdkcore_arsdk_firmware_ArsdkFirmwareInfo_nativeFromFile
[%s] Start to upload firmware :
[%s] Start to upload firmware :
```
[2018-07-10 16:14:33]
aciid :
<https://i.imgur.com/AmKPuJv.png>
[2018-07-10 16:15:20]
aciid :
/data/com.parrot.freeflight6-1/lib/x86/libsdkcore.so
[2018-07-10 16:15:42]
aciid :
lea ecx, (aArsdkUpdaterTr_11 - 999010h)[ebx] ; "arsdk_updater_transport_ftp_create_req_"..
[2018-07-10 16:15:46]
aciid :
yup
[2018-07-10 16:28:43]
adrian :
@adrian has joined the channel
[2018-07-10 16:30:44]
ender :
Itshould be easy to get the FW file from someone who gets his Anafi on a rooted phone. I was stupid enough to initialize & update on my Moverios, cant access anything on it as they cannot be rooted…
[2018-07-10 16:31:55]
aciid :
yeah theres even fwcache folders for that in /data/data/com.parrot.freeflight
[2018-07-10 16:38:05]
aciid :
I found the firmwares
[2018-07-10 16:38:14]
aciid :
**cracks coldone**
[2018-07-10 16:38:26]
aciid :
uploading
[2018-07-10 16:41:22]
hostile :
whoot
[2018-07-10 16:42:10]
ender :
hehe
[2018-07-10 16:42:40]
ender :
i am curious if the fw version is coded like on Bebop…
[2018-07-10 16:42:53]
aciid :
takes some 4minutes I use dropbox and my network is utter shit
[2018-07-10 16:43:19]
aciid :
I don't know how to use wetransfer properly so it wont delete the files once they are downloaded
[2018-07-10 16:46:52]
aciid :
GOOD GOD ITS UNENCRYPTED
[2018-07-10 16:46:54]
aciid :
<https://www.dropbox.com/s/04lakxxl957q1de/parakeets.zip?dl=0>
[2018-07-10 16:47:02]
aciid :
BINWALK SNIPPET
[2018-07-10 16:47:03]
aciid :
4703416 0x47C4B8 Unix path: /usr/local/share/script/sd_script.sh mount /tmp/SD0 c: ambafs
4704968 0x47CAC8 Unix path: /usr/local/share/script/sync_rtc.sh
4735444 0x4841D4 Unix path: /lib/firmware/gimbal_motors.bin
[2018-07-10 16:48:06]
hostile :
whoot
[2018-07-10 16:48:14]
aciid :
OG GANG IS AT IT AGAIN
[2018-07-10 16:48:18]
ender :
I told you Parrot is harmless
[2018-07-10 16:48:38]
hostile :
6th string OGs officially forming
[2018-07-10 16:48:39]
hostile :
=]
[2018-07-10 16:49:54]
hostile :
should be able to vulture em now. <https://github.com/InfectedPacket/vulture>
[2018-07-10 16:52:04]
hostile :
once we get those plfs. <https://dji-rev.slack.com/archives/CBMKLBXEF/p1531239273000041>
[2018-07-10 16:52:37]
aciid :
need to get that drone first, I'm putting an order down on amazon as we speak
[2018-07-10 16:52:47]
aciid :
finnish retailers don't have it yet
[2018-07-10 16:53:08]
aciid :
or actually I dont know is it worth it, parrot wants me to pay for flight modes xD
[2018-07-10 16:53:14]
ender :
can binwalk search for specific files or dump all ?
[2018-07-10 16:53:22]
hostile :
lol we gonna hack dem modes! lol
[2018-07-10 16:53:24]
aciid :
yes, but it's best to -e (dump all)
[2018-07-10 16:53:45]
ender :
I would love to know if tehre is an equivalent of /etc/colibry/milosboard/reference.cfg there (milosboard = b1, mykonos = b2, anafi = ??)
[2018-07-10 16:53:59]
hostile :
36616464 0x22EB910 Minix filesystem, V1, little endian, 30 char names, 29960 zones
[2018-07-10 16:54:01]
aciid :
binwalk -D 'sh'
seach for scripts
[2018-07-10 16:54:03]
hostile :
wonder if that is legit
[2018-07-10 16:54:03]
ender :
brew still builds my binwalk…
[2018-07-10 16:54:23]
ender :
DONT KICK DA PARROT
[2018-07-10 16:54:24]
ender :
:wink:
[2018-07-10 16:54:26]
aciid :
sounds expensive
[2018-07-10 16:54:59]
ender :
one day we just say “Alexa, get me root on that bird”…
[2018-07-10 16:55:00]
hostile :
any of you have Typhoon H by chance?
[2018-07-10 16:55:09]
ender :
nope, but was a close miss :slightly_smiling_face:
[2018-07-10 16:55:18]
hostile :
I have one of those here to hack too
[2018-07-10 16:55:31]
hostile :
the transmitter is like a fucking small TV
[2018-07-10 16:55:36]
hostile :
could watch world cup on that bitch
[2018-07-10 16:55:38]
ender :
When i was very frustrated waiting for the Mavic i nearly bought one :slightly_smiling_face:
[2018-07-10 16:55:56]
fredz :
I have an unused typhoon H
[2018-07-10 16:56:00]
fredz :
Want it?
[2018-07-10 16:56:10]
ender :
me ? nope…
[2018-07-10 16:56:19]
fredz :
No @hostile
[2018-07-10 16:56:21]
ender :
Enough birds here.
[2018-07-10 16:56:21]
aciid :
where was minix? not in anafi?
[2018-07-10 16:56:37]
hostile :
update.bin in 1.0.0
[2018-07-10 16:56:47]
hostile :
```Kevins-iMac:anafi_update_1.0.0 kfinisterre$ binwalk -i update.bin
```
[2018-07-10 16:56:49]
aciid :
i must have different binwalk version or parameters
[2018-07-10 16:56:52]
aciid :
ah
[2018-07-10 16:57:04]
hostile :
they moved from old C binwalk to python a while back
[2018-07-10 16:57:18]
hostile :
```$ binwalk
Binwalk v2.1.1
Craig Heffner, <http://www.binwalk.org>
```
[2018-07-10 16:57:49]
ender :
uhh i guess my brew is cooking up c binwalk…
[2018-07-10 16:58:15]
hostile :
33236048 0x1FB2450 Linux kernel version "4.9.0+ (jenkins@ec35ea4fcccc) (gcc version 6.3.1 20170109 (Linaro GCC 6.3-2017.02) ) #1 SMP PREEMPT Thu Jun 21 14:49:56 UTC 2018"
[2018-07-10 16:58:22]
hostile :
heh man GPL rant time!
[2018-07-10 16:58:25]
aciid :
SUPRISEE
[2018-07-10 16:58:55]
ender :
naaaaaah dont do that to them hostile, the’re french !
[2018-07-10 16:59:02]
hostile :
<https://twitter.com/d0tslash/status/1016728436214239232>
[2018-07-10 16:59:06]
aciid :
they le tired
[2018-07-10 16:59:10]
hostile :
Actually... I already did them like that on Gazeo sim
[2018-07-10 16:59:20]
hostile :
fuckers tried to not release it a while back
[2018-07-10 16:59:27]
hostile :
I flipped my shit
[2018-07-10 16:59:52]
hostile :
<https://github.com/Parrot-Developers/libpomp/issues/2>
[2018-07-10 16:59:53]
hostile :
heh
[2018-07-10 17:00:00]
aciid :
yay fucking once I'm at where the party is
[2018-07-10 17:00:27]
hostile :
Sphinx is fucking dope
[2018-07-10 17:00:33]
hostile :
it can download the .plf into Gazebo
[2018-07-10 17:00:34]
hostile :
and run em
[2018-07-10 17:00:35]
hostile :
<https://www.youtube.com/watch?v=wcVjTKF_JYI>
[2018-07-10 17:00:53]
hostile :
it has these compartmentalized firmware container things
[2018-07-10 17:02:48]
hostile :
looks like I need to extract an ubifs
[2018-07-10 17:02:51]
hostile :
```WARNING: Extractor.execute failed to run external extractor 'ubireader_extract_files -o '%%ubifs-root%%' '%e'': [Errno 2] No such file or directory
36747726 0x230B9CE UBI erase count header, version: 1, EC: 0x0, VID header offset: 0x800, data offset: 0x1000```
[2018-07-10 17:04:21]
hostile :
lol
[2018-07-10 17:04:22]
hostile :
```edFIboE
]brB
anafi4k_nand.dtb
boot
w<?xml version="1.0" encoding="UTF-8"?>
<manifest>
<remote fetch="<ssh://gerrit-doc.parrot.biz>" name="
view
default
ject
/Mykonos3'
_BLDC" patX
```
[2018-07-10 17:06:08]
aciid :
why in the heck they decide to roll these unencrypted lol
[2018-07-10 17:06:17]
aciid :
hurried?
[2018-07-10 17:06:22]
hostile :
mentality
[2018-07-10 17:06:29]
ender :
It was always like that afaik
[2018-07-10 17:06:31]
hostile :
I had friends that worked there is was always semi open cuz of GPL
[2018-07-10 17:06:33]
ender :
yes hostile
[2018-07-10 17:06:38]
ender :
again yes
[2018-07-10 17:06:54]
ender :
FOr all what we did to the dragon_prog they never really cared.
[2018-07-10 17:06:56]
hostile :
I've actually got a Parrot Slam dunk. (very rare)
[2018-07-10 17:08:25]
aciid :
parrot,anafi4k
ambarella,s5l)
[2018-07-10 17:08:49]
aciid :
E# start adb only if debug is enabled
[2018-07-10 17:09:01]
aciid :
tons of fun
[2018-07-10 17:09:47]
aciid :
@hostile you have anafi yet?
[2018-07-10 17:10:01]
ender :
guys, can one of your magic tools change / inject stuff in there ?
[2018-07-10 17:10:23]
aciid :
well the firmwares were on android rootfilesystem
[2018-07-10 17:10:34]
aciid :
i guess you can make it update the drone with them if these firmwares are uh
[2018-07-10 17:10:42]
aciid :
step up version number?
[2018-07-10 17:11:27]
aciid :
@aciid uploaded a file: [found the firmwares from this path](https://dji-rev.slack.com/files/U6AD6A1QU/FBN3GA2DQ/image.png)
[2018-07-10 17:13:04]
hostile :
@aciid yeah I do have anafi here
[2018-07-10 17:15:04]
hostile :
@vo... you should probably be here.
[2018-07-10 17:15:06]
vo :
@vo has joined the channel
[2018-07-10 17:17:07]
ender :
Hi there :slightly_smiling_face:
[2018-07-10 17:17:25]
bin4ry :
hm a new channel?
[2018-07-10 17:17:35]
ender :
SURPRISE :slightly_smiling_face:
[2018-07-10 17:17:37]
bin4ry :
what is anafi?
[2018-07-10 17:17:45]
ender :
youre kidding us
[2018-07-10 17:17:51]
bin4ry :
?
[2018-07-10 17:18:03]
ender :
Parrot Anafi, crappy yet cool drone
[2018-07-10 17:18:18]
ender :
“Silence of the drones” Part 1
[2018-07-10 17:18:18]
bin4ry :
ah this thing for what you asked me yesterday?
[2018-07-10 17:18:22]
ender :
yes
[2018-07-10 17:18:25]
bin4ry :
i only remembered parrot
[2018-07-10 17:18:29]
bin4ry :
but not the name
[2018-07-10 17:18:41]
bin4ry :
lol
[2018-07-10 17:18:43]
bin4ry :
sry
[2018-07-10 17:18:50]
ender :
:wink:
[2018-07-10 17:21:58]
ender :
bin4ry, do you have any ideas if there is a quick fix for not beeing able to (de)compile the APK with resources ? With your “-r” hint everything is fine but that way the layout xml’s are untouchable…
[2018-07-10 17:22:34]
aciid :
the firmware has reference to hid-microsoft.ko and usb_otg_id, which could mean that if there is usb-port. you could try attaching a keyboard with OTG cable. and run
reboot
[2018-07-10 17:22:43]
aciid :
or anything like that, just for the kicks
[2018-07-10 17:23:06]
aciid :
if that works its just hit and miss to enable debug/adb
[2018-07-10 17:24:12]
bin4ry :
why would you want to touch taht ?
[2018-07-10 17:24:15]
bin4ry :
*that
[2018-07-10 17:24:25]
bin4ry :
i will take a look at the weekend as promised
[2018-07-10 17:24:31]
ender :
ah okay !
[2018-07-10 17:25:04]
ender :
hmm, i know the id of that hidden country selection combo box, i wonder how i could find out where in the code that is diabled ?!
[2018-07-10 17:25:20]
ender :
can jeb assist in that ? (Xref to layout id ?!)
[2018-07-10 17:25:38]
bin4ry :
maybe they removed it
[2018-07-10 17:25:42]
bin4ry :
i have no idea yet
[2018-07-10 17:25:44]
bin4ry :
i didn't look
[2018-07-10 17:26:08]
ender :
I meant that more general, how to find out what code does to layout id’s ?!
[2018-07-10 17:26:18]
ender :
which tool or approach to use
[2018-07-10 17:26:28]
bin4ry :
grep
[2018-07-10 17:26:32]
bin4ry :
i only use grep
[2018-07-10 17:26:38]
bin4ry :
apktool and grep
[2018-07-10 17:26:44]
ender :
so you grep the whole decompiled for the id ?
[2018-07-10 17:26:47]
bin4ry :
yes
[2018-07-10 17:26:51]
bin4ry :
basically
[2018-07-10 17:27:00]
bin4ry :
and jeb sometimes for a quick xref overview of functions
[2018-07-10 17:27:05]
ender :
okay sounds good. And now that you say it i remeber i did do that in dji go :slightly_smiling_face:
[2018-07-10 17:27:07]
bin4ry :
but most of the time i use grep
[2018-07-10 17:27:31]
ender :
i am really quick in forgetting stuff i dont use regularly, always was like that :disappointed:
[2018-07-10 17:27:49]
bin4ry :
lol, i forgot the name of this drone from yesterday to today
[2018-07-10 17:27:55]
bin4ry :
so don't worry
[2018-07-10 17:27:56]
ender :
:wink:
[2018-07-10 18:00:43]
ender :
uh oh. cant find a reference to the interesting layout items. AND i somehow overlooked the property ‘visibility=“gone”’ on both. COuld that means those Dialog items are obsolete and not connected anywhere ?
[2018-07-10 18:00:56]
aciid :
why doesn't binwalk understand how to extract correct filesize? it finds offsets correctly tho
[2018-07-10 18:01:40]
aciid :
@ender or they are used in a device / resolution not matching your setup?
[2018-07-10 18:01:45]
ender :
nope
[2018-07-10 18:07:21]
digital1 :
@digital1 has joined the channel
[2018-07-10 18:12:31]
aciid :
ilarilind at Acer 2400 in ~/bin/anafi/parakeets/1.0.0
$ dd if=update.bin bs=1 skip=36751825 of=ubi.ubi
[2018-07-10 18:12:34]
aciid :
look mom, no hands
[2018-07-10 18:12:52]
ender :
oh if only i could get that joke…
[2018-07-10 18:13:07]
ender :
ubi fs ?
[2018-07-10 18:13:25]
aciid :
yeah thats what hostile spotted before he dove headfirst
[2018-07-10 18:13:34]
aciid :
hope he is ok :pray:
[2018-07-10 18:13:37]
ender :
yep i quickly remembered :slightly_smiling_face:
[2018-07-10 18:16:55]
quad808 :
NICE CHANNEL...wahoooo
[2018-07-10 18:19:00]
hostile :
lol @aciid stuck in meetings now, had to run to UPS store, etc
[2018-07-10 18:19:09]
aciid :
i hear you
[2018-07-10 18:19:50]
d95gas :
Looking forward to getting my hands on Anafi. Hoping to find stock whilst in oxford
[2018-07-10 18:20:26]
ender :
uhh stock… Good luck !
[2018-07-10 18:20:45]
ender :
Best bet right now is parrot direct order.
[2018-07-10 18:20:45]
aciid :
oxford? <https://amazon.fr>
[2018-07-10 18:20:47]
aciid :
stock and prime
[2018-07-10 18:20:59]
ender :
Amazon gets 3, sells 3, gets 3, sells 3 …
[2018-07-10 18:21:10]
d95gas :
Oxford UK. And yes wishful thinking
[2018-07-10 18:21:25]
ender :
batteries ONLY at Parrot ATM
[2018-07-10 18:21:47]
aciid :
well thats a bummer
[2018-07-10 18:21:49]
ender :
Actually Parrot says 25 and MEANS 25. if DJI says 25 they mean 22
[2018-07-10 18:21:59]
fredz :
[Fnac.com](http://Fnac.com) has stock and dispatches anywhere
[2018-07-10 18:22:02]
ender :
(minutes that is, came to my mind because of battery)
[2018-07-10 18:22:14]
aciid :
im afraid of buying one coz Im sure I cant sell it to anyone if i get bored of it
[2018-07-10 18:22:15]
ender :
Oh yes FNAC is always special with Parrot, agreed
[2018-07-10 18:22:19]
aciid :
"its not dji"
[2018-07-10 18:22:28]
fredz :
No batteries at Fnac though
[2018-07-10 18:22:44]
ender :
ordered battery yesterday at parrot, shipment today
[2018-07-10 18:22:53]
fredz :
The camera is crappy though. The Mavic is much better
[2018-07-10 18:22:54]
d95gas :
Probably end up ordering direct with Parrot although not happy that I have not got access to freebies on iPhone
[2018-07-10 18:22:59]
ender :
nope fredz
[2018-07-10 18:23:08]
ender :
Better sharpness or you have a monday version
[2018-07-10 18:23:26]
ender :
i took reference images of USAf Sharpness target with all drones.
[2018-07-10 18:23:34]
fredz :
Both sharp but Anafi is much over saturated
[2018-07-10 18:23:39]
fredz :
Just like the bebop
[2018-07-10 18:23:40]
ender :
DNG
[2018-07-10 18:23:50]
fredz :
True :)
[2018-07-10 18:23:51]
ender :
everything else is crap.
[2018-07-10 18:24:05]
ender :
And DJI overprocesses JPGs to satisfy the dumb
[2018-07-10 18:24:11]
fredz :
But it’s oversaturated in video too
[2018-07-10 18:24:17]
ender :
not here.
[2018-07-10 18:24:24]
ender :
(compared to Air)
[2018-07-10 18:24:27]
fredz :
:+1:
[2018-07-10 18:24:30]
ender :
very natural
[2018-07-10 18:24:49]
fredz :
Skies are white in many cases
[2018-07-10 18:24:50]
ender :
Air is overstaurated and too high contrast. And AFAIK very similar to Pro
[2018-07-10 18:24:59]
ender :
white like blown out ?
[2018-07-10 18:25:02]
fredz :
Yes
[2018-07-10 18:25:13]
ender :
well, use -0.3 EV or use HDR or use P-log
[2018-07-10 18:25:27]
fredz :
I’m comparing defaults here
[2018-07-10 18:25:29]
ender :
P-log carries more dynamic range then D-log by a margin
[2018-07-10 18:25:43]
aciid :
is two batterys enough to play with this thing
[2018-07-10 18:25:44]
ender :
Well, compare best of the best, you are not average, are you ? :slightly_smiling_face:
[2018-07-10 18:25:45]
fredz :
And video...
[2018-07-10 18:25:49]
ender :
yes aciid.
[2018-07-10 18:25:58]
ender :
I always dont know what to do after 15 minutes :slightly_smiling_face:
[2018-07-10 18:26:16]
aciid :
i usually keep the drones on for long times when I debug
[2018-07-10 18:26:20]
aciid :
i like to live dangerously
[2018-07-10 18:26:30]
aciid :
no extra props available at this time?
[2018-07-10 18:26:31]
fredz :
I flew my Anafi 2km in CE with modded remote. But didn’t have time to try further
[2018-07-10 18:26:33]
ender :
you can attach USB-C and run from power supply. Doing that
[2018-07-10 18:26:34]
aciid :
fly carefully lol
[2018-07-10 18:26:47]
fredz :
Extra props are in the box
[2018-07-10 18:26:57]
ender :
fredz: 2km at 100m should be possible w/o mod afaik
[2018-07-10 18:27:24]
ender :
did not DO it just saw that everything was really good at 1km and by now i got a feeling for range.
[2018-07-10 18:27:25]
fredz :
I never fly stock lol
[2018-07-10 18:27:45]
ender :
so you cant measure if your mods have a positive effect :stuck_out_tongue:
[2018-07-10 18:27:59]
fredz :
True
[2018-07-10 18:28:20]
aciid :
oh 30 day returns when buying from parrot eu. "sorry rooted this already, holla at me when you release new product again thanks"
[2018-07-10 18:28:28]
hostile :
<https://twitter.com/Parrot/status/1016748030576545792>
[2018-07-10 18:28:32]
hostile :
re: GPL
[2018-07-10 18:28:33]
hostile :
lol
[2018-07-10 18:28:36]
ender :
haha
[2018-07-10 18:28:44]
ender :
what did you expect, honestly ?
[2018-07-10 18:29:03]
fredz :
I posted about FCC in a FB group and Victor Barthelemy of Parrot told me to remove it
[2018-07-10 18:29:17]
hostile :
they've always been awful with gpl
[2018-07-10 18:29:20]
hostile :
iirc
[2018-07-10 18:29:33]
ender :
lol fredz
[2018-07-10 18:29:41]
hostile :
stuff eventually winds up here <https://github.com/Parrot-Developers>
[2018-07-10 18:30:11]
hostile :
@hostile uploaded a file: [LOL](https://dji-rev.slack.com/files/U60D1SM7V/FBPC629AA/image.png)
[2018-07-10 18:30:15]
hostile :
<https://github.com/Parrot-Developers/libARDiscovery/commit/77e5d9485b410a99cd00ab920dd9f2457689334f>
[2018-07-10 18:30:16]
ender :
yes, Shell already is listed for a prerelease SDK as far as i know :slightly_smiling_face: (Shell Shrader autor of [Ar.Pro](http://Ar.Pro) aka Litchi for Parrot)
[2018-07-10 18:30:46]
aciid :
so stealthy commit xD
[2018-07-10 18:30:46]
hostile :
gonna start calling Anafi - UNKNOWNPRODUCT_5
[2018-07-10 18:30:57]
ender :
hahahehehe
[2018-07-10 18:31:01]
ender :
thats SO cute
[2018-07-10 18:32:36]
aciid :
btw latest SDK binary is in app
[2018-07-10 18:32:57]
hostile :
what is Paros?
[2018-07-10 18:33:00]
aciid :
thats where the IDA screenshot was taken of handles
[2018-07-10 18:33:03]
hostile :
@hostile uploaded a file: [image.png](https://dji-rev.slack.com/files/U60D1SM7V/FBN2864NP/image.png)
[2018-07-10 18:34:50]
hostile :
ahh bebop 2
[2018-07-10 18:39:11]
aciid :
I made a new discovery
[2018-07-10 18:39:41]
hostile :
<https://www.youtube.com/watch?v=cphNpqKpKc4>
[2018-07-10 18:39:42]
aciid :
packing
[2018-07-10 18:40:22]
aciid :
uploading
[2018-07-10 18:40:37]
hostile :
you get that ubi uncompressed?
[2018-07-10 18:40:41]
aciid :
yes
[2018-07-10 18:40:46]
aciid :
am i late?
[2018-07-10 18:40:51]
hostile :
word. I didn't have time to move over to a linux box
[2018-07-10 18:40:59]
hostile :
nope you right on time. lol
[2018-07-10 18:41:16]
aciid :
uploading
[2018-07-10 18:41:58]
ender :
nope you need a root capable editor.
[2018-07-10 18:42:13]
ender :
If you use ES-File Explorer and set it to root it can edit the file
[2018-07-10 18:42:15]
mr.vibez :
I do but none of the editors will open that file
[2018-07-10 18:42:28]
mr.vibez :
How do I set Es to root
[2018-07-10 18:42:35]
mr.vibez :
i'm using a diffrent root explorer
[2018-07-10 18:42:38]
ender :
tools->root explorer
[2018-07-10 18:42:47]
ender :
okay i cant comment on a different one
[2018-07-10 18:43:10]
mr.vibez :
There we go, let me try
[2018-07-10 18:43:16]
aciid :
everyone seated?
[2018-07-10 18:43:17]
ender :
:slightly_smiling_face:
[2018-07-10 18:43:22]
aciid :
<https://www.dropbox.com/s/hr58sgt80et75qd/linux.zip?dl=1>
[2018-07-10 18:43:24]
ender :
yep
[2018-07-10 18:43:53]
ender :
got it :slightly_smiling_face:
[2018-07-10 18:44:05]
aciid :
use dl=1 to download, fucking dropbox
[2018-07-10 18:44:32]
mr.vibez :
Ok changed that file, now what...
[2018-07-10 18:44:43]
ender :
ohhhhh its there.
[2018-07-10 18:44:47]
ender :
reference,cfg
[2018-07-10 18:45:31]
mr.vibez :
hmmm reverse_geocoder.xml had my home address in it
[2018-07-10 18:46:28]
ender :
yes thats what its meant for
[2018-07-10 18:46:41]
ender :
reversing coordinates to a city
[2018-07-10 18:46:53]
hostile :
nice work @aciid
[2018-07-10 18:47:29]
aciid :
can i get a honorable mention if we get anywhere :wink: I just ordered this GPL enabled flying toaster from the EU store
[2018-07-10 18:47:32]
ender :
if we only could change this parameter:
[2018-07-10 18:47:33]
ender :
minHeightToReturnHome = 20.0;
[2018-07-10 18:47:38]
ender :
in reference.cfg
[2018-07-10 18:47:53]
ender :
That would mean 33% of all flaws would be gone
[2018-07-10 18:49:07]
hostile :
@hostile uploaded a file: [LOL this mother fucker has Pimp Vision!](https://dji-rev.slack.com/files/U60D1SM7V/FBN5LRH8S/image.png)
[2018-07-10 18:50:06]
ender :
<https://www.youtube.com/watch?v=iZOJN23_zC8>
[2018-07-10 18:50:13]
ender :
better :slightly_smiling_face:
[2018-07-10 18:50:53]
aciid :
I'm removing the links on dropbox tonight, so remember to download those few files
[2018-07-10 18:51:17]
aciid :
they are all accesible from freeflight6, not joking
[2018-07-10 18:51:36]
ender :
good stuff in /etc/colibry (anafi4k & common) ALL THOSE FILES
[2018-07-10 18:51:53]
ender :
aciid, what ?
[2018-07-10 18:52:12]
aciid :
all this stuff came from the APK once I ran it
[2018-07-10 18:52:19]
aciid :
i used bluestacks
[2018-07-10 18:52:28]
hostile :
yeah firemware pulled... left in cache, etc
[2018-07-10 18:52:35]
ender :
or in obb ?
[2018-07-10 18:52:46]
aciid :
i missed it first too
[2018-07-10 18:53:16]
ender :
so… any way to do stuff in cfg files and reflash ? Or to figure out how to get a shell and do it manually ?
[2018-07-10 18:53:19]
hostile :
Pimp vision on this mother fucker has me loling <https://www.youtube.com/watch?v=UDApZhXTpH8>
[2018-07-10 18:53:24]
aciid :
this is my new toy, mavic pro can go and eat crap
[2018-07-10 18:53:31]
aciid :
this has a webserver
[2018-07-10 18:53:34]
aciid :
soon a twitter client
[2018-07-10 18:53:48]
ender :
actually the webserver is up already
[2018-07-10 18:53:52]
hostile :
$ cat /Users/kfinisterre/Downloads/linux/etc/pimp-vision.conf
# Pimp configuration file
#
...
[2018-07-10 18:53:52]
ender :
only boring stuff
[2018-07-10 18:53:54]
hostile :
LOLOLOLOL
[2018-07-10 18:54:06]
ender :
haha you reel in that dont you ? :slightly_smiling_face:
[2018-07-10 18:54:10]
hostile :
[pimp]
product = anafi
feature = vision
[2018-07-10 18:54:25]
aciid :
debugauth.conf
[2018-07-10 18:54:29]
aciid :
interesting..
[2018-07-10 18:54:39]
aciid :
taking this correspoding binaries to ida soon
[2018-07-10 18:54:44]
aciid :
well see how to activate debug
[2018-07-10 18:54:51]
ender :
wait a sec, i got an idea :slightly_smiling_face:
[2018-07-10 18:55:08]
aciid :
yes , you pull an allnighter with me and well make it happen
[2018-07-10 18:55:44]
ender :
i suck :slightly_smiling_face: BUT NOT ALL NIGHT :slightly_smiling_face:
[2018-07-10 18:56:44]
ender :
damn that file is missing. On the Bebops there was a file defining which magic keypresses do what. MISSING here :disappointed:
[2018-07-10 18:57:09]
ender :
On the later FW you had to press button 4 times to enable telnet and do long presses for debug and whatnot
[2018-07-10 18:58:16]
hostile :
```# In debug mode, we need to wait adb to finalize its usb configuration (sys.usb.ffs.ready=1)
on property:rw.debuggable=1:usbd.usb_state=configured:sys.usb.ffs.ready=1
write /dev/cfg/usb_gadget/g1/UDC ${ro.product.usb.device}
...
on property:rw.debuggable=1
# prepare rndis function, but don't enable it yet !
mkdir /dev/cfg/usb_gadget/g1/functions/rndis.usb0
mkdir /dev/cfg/usb_gadget/g1/functions/ffs.adb
symlink /dev/cfg/usb_gadget/g1/functions/ffs.adb /dev/cfg/usb_gadget/g1/configs/c.1/ffs.adb
# ADB daemon needs this only for native (USB) connection
mkdir /dev/usb-ffs
mkdir /dev/usb-ffs/adb
mount functionfs adb /dev/usb-ffs/adb
...
# Qualcomm diag
on property:rw.debuggable=1:usbd.usb_mode=diag
# disable mass_storage on usb0
rm /dev/cfg/usb_gadget/g1/configs/c.1/mass_storage.usb0
# disable rndis on usb0
rm /dev/cfg/usb_gadget/g1/configs/c.1/rndis.usb0
# set Qualcomm identifiers
write /dev/cfg/usb_gadget/g1/idVendor 0x05c6
write /dev/cfg/usb_gadget/g1/idProduct 0x9025
# enable diag
mkdir /dev/cfg/usb_gadget/g1/functions/diag.diag
symlink /dev/cfg/usb_gadget/g1/functions/diag.diag /dev/cfg/usb_gadget/g1/configs/c.1/diag.diag
# disable and re-enable adb native, the goal is to make it the
# second Interface Descriptor to make Windows happy
rm /dev/cfg/usb_gadget/g1/configs/c.1/ffs.adb
symlink /dev/cfg/usb_gadget/g1/functions/ffs.adb /dev/cfg/usb_gadget/g1/configs/c.1/ffs.adb
# Here because when former mode is mass storage this block is
# called twice but "configured" is not executed the second time
write /dev/cfg/usb_gadget/g1/UDC ${ro.product.usb.device}
setprop usbd.usb_status "configured"
```
[2018-07-10 18:58:28]
hostile :
^--- ./etc/boxinit.d/20-usbd.rc
[2018-07-10 18:59:14]
ender :
yep yep but how to enable it ?!
[2018-07-10 19:02:37]
hostile :
via ftp?
[2018-07-10 19:02:39]
hostile :
=]
[2018-07-10 19:06:35]
ender :
well you lost me or are you talking about that darn path traversal thingy ?
[2018-07-10 19:06:57]
hostile :
it was a possible vector
[2018-07-10 19:07:02]
hostile :
just spitballing
[2018-07-10 19:07:08]
ender :
:wink:
[2018-07-10 19:07:25]
ender :
i BET its easier. Itwas always easy in the good ’ol times.
[2018-07-10 19:07:50]
ender :
i’ll browse some of the old docs
[2018-07-10 19:08:24]
aciid :
I think running qemu with this ubifs is too much work, but i'd like to run some of the apps. since the drone is not here for a few days yet
[2018-07-10 19:08:36]
aciid :
cant run web-page without backendservice
[2018-07-10 19:11:03]
hostile :
Parrot Sphinx is their own architecture for this shit
[2018-07-10 19:11:05]
hostile :
get the .plfs
[2018-07-10 19:11:10]
hostile :
stuff into sphinx
[2018-07-10 19:12:26]
d95gas :
Guys dont know if its of any use (I am not into programming) but in file qcom_cfg (Linux/Lib/Firmware/Wlan) around line 206 there is ref's to country codes, and references to settings users can override
[2018-07-10 19:13:09]
aciid :
I have made a new discovery
[2018-07-10 19:13:13]
ender :
yep, can be very useful when we get a shell level access ! Was very similar with the former broadcom hardware.
[2018-07-10 19:13:17]
ender :
aciiiiiid
[2018-07-10 19:13:56]
hostile :
web server is civet <https://github.com/civetweb/civetweb>
[2018-07-10 19:14:11]
aciid :
/usr/bin/user-storaged /etc/user-storaged.conf
looks for debug certificate on sdcard
[2018-07-10 19:14:41]
ender :
uhhh
[2018-07-10 19:14:42]
aciid :
user-storaged is responsible and running all the time. things as usual like mount and unmount when you phyiscally remove, but has this auth in way
[2018-07-10 19:15:15]
hostile :
lol their GPL "police" file ./usr/share/police/police-notice.html
[2018-07-10 19:15:25]
aciid :
I have that shit up on ida, hostile can you verify my find
[2018-07-10 19:16:46]
hostile :
```$ cat etc/user-storaged.conf
# mount and monitor a specific SDCard partition in a specific mount path
mmcblk0p1 vfat auto utf8,uid=1000,gid=1000 perf_duration=0,fdr_max_count=20,fdr_max_use=10,tuxera=1,syncfs_delay=10 /mnt/user```
[2018-07-10 19:17:11]
hostile :
yes I see what you mean
[2018-07-10 19:17:13]
hostile :
```Unable to scan for debug certificate: rc=%d```
[2018-07-10 19:18:40]
aciid :
decompiles as text so I cant get full graphs, but ill try to decode the flow
[2018-07-10 19:20:03]
hostile :
ahh that also ties into ./usr/bin/sdcard_script_launch.sh that I was looking at
[2018-07-10 19:20:35]
hostile :
you eyeballing usr/bin/debugauth and usr/lib/libdebugauth.so ?
[2018-07-10 19:21:58]
hostile :
```No serial number found in certificate
Invalid product serial number
Invalid storage serial number
Unknown certificate type: %d
EVT:DEBUG;enable=%d```
[2018-07-10 19:25:26]
hostile :
AND the firmware DOES have sphinx support...
[2018-07-10 19:25:28]
hostile :
``` <project name="sphinx/fakegimbal" path="simulator/fakegimbal" revision="5d9101804802930c2528e4b4e38f0a75805427bb"/>
<project name="sphinx/hostapd" path="packages/hostapd" revision="016ef99caa13e185689c3663f06ac9b7b337d45d"/>
<project name="sphinx/libiio-simulator-plugin" path="simulator/libiio-simulator-plugin" revision="de5378e2fb960183086e5446e45ab784e2a0bef8"/>
<project name="sphinx/libjson-rpc-cpp" path="packages/libjson-rpc-cpp" revision="e3d73e647194b99ce650061cac002c364ef527db"/>
<project name="sphinx/libultrasound" path="simulator/libultrasound" revision="16741a720c149ec329760e2b624fded5aa8840f3"/>
<project name="sphinx/models/anafi" path="simulator/models/anafi" revision="0a67b997ec186900b9808be37dfaf8905b872d6a"/>
<project name="sphinx/pimp-sphinx" path="simulator/pimp-sphinx" revision="4231a570e8e5e824b339620d10d66c12d2ed7aba"/>
<project name="sphinx/sdformat" path="simulator/sdformat" revision="af7c2acd3e877f6f5aeca9920f2434bb08856c9e"/>
<project name="sphinx/sphinx-time" path="simulator/sphinx-time" revision="413787ba046794b69090a25d2068fa2d19a0a074"/>
<project name="sphinx/sphinx_data_inject" path="simulator/sphinx_data_inject" revision="7e168e03077c5a7fc2bb64306548c5aee0485234"/>
<project name="sphinx/stubs/libsbat" path="simulator/libsbat" revision="42f478c493e0dcbbc67d07bf67146a97a7038ea8"/>
<project name="sphinx/web_client" path="packages/web_client" revision="fe63b0edb79e5bf2f808d8f07dfcfcaebb4c5549"/>
<project name="sphinx/web_gndctrl" path="packages/web_gndctrl" revision="8a20dc3eab6122d5ef2ae261888b09a1b7de5e8b"/>
```
[2018-07-10 19:29:20]
hostile :
@aciid can you tell what directory they call dbgauth_scan_directory against inside of user-storaged
[2018-07-10 19:31:14]
aciid :
looking into
[2018-07-10 19:31:44]
ender :
^---- getting some Popcorn
[2018-07-10 19:31:51]
mr.vibez :
me too
[2018-07-10 19:32:01]
ender :
Lee, did you manage to change that file ?
[2018-07-10 19:32:07]
mr.vibez :
yup
[2018-07-10 19:32:18]
ender :
to any good effect ? :slightly_smiling_face:
[2018-07-10 19:32:38]
mr.vibez :
Need to recharge a battery
[2018-07-10 19:32:57]
mr.vibez :
No other way to tell it's worked other than a range test?
[2018-07-10 19:35:08]
ender :
well you could use a second phone or tablet or PC with some kind of wifi analyzer that shows you dB values.
[2018-07-10 19:35:09]
aciid :
@hostile card root my humble guess, again I have no qemu running
```
.text:0000000000407C98 loc_407C98 ; CODE XREF: .text:0000000000407E18↓j
.text:0000000000407C98 ; .text:0000000000407E9C↓j
.text:0000000000407C98 LDR X0, [X29,#0x40]
.text:0000000000407C9C ADD X1, X22, #aMountPoint@PAGEOFF ; "MOUNT_POINT"
.text:0000000000407CA0 LDR X0, [X0,#0x70]
.text:0000000000407CA4 BL tlist_get_str
.text:0000000000407CA8 BL .dbgauth_scan_directory
.text:0000000000407CAC MOV W21, W0
.text:0000000000407CB0 CBZ W0, loc_407CC8
.text:0000000000407CB4 LDR X22, [X20,#__ulog_cookie_userstoraged_ptr@PAGEOFF]
.text:0000000000407CB8 LDR W0, [X22,#(dword_41D75C - 0x41D750)]
.text:0000000000407CBC TBNZ W0, #0x1F, loc_407EF0
.text:0000000000407CC0
```
[2018-07-10 19:35:54]
ender :
then compare with “us” and “de” setting.
[2018-07-10 19:36:07]
mr.vibez :
ok
[2018-07-10 19:36:21]
ender :
DId you try fredz fake GPS method ?
[2018-07-10 19:36:33]
mr.vibez :
Nah, I didn't
[2018-07-10 19:36:49]
ender :
you should first and see if it makes a difference.
[2018-07-10 19:37:29]
mr.vibez :
Wasn't sure how to measure the signal strength, just assumed as it's a modified wifi protocol, a wifi analyser wouldn't pick it up
[2018-07-10 19:38:00]
ender :
It should!
[2018-07-10 19:38:35]
mr.vibez :
Need to wait for the football to finish :slightly_smiling_face:
[2018-07-10 19:38:50]
ender :
yep, i hope BEL gets 1 more :slightly_smiling_face:
[2018-07-10 19:39:33]
mr.vibez :
Me too
[2018-07-10 19:40:38]
fredz :
I am from BEL :) The French should not win or their ego will burst.
[2018-07-10 19:41:07]
mr.vibez :
I'm English and think Belgium would be easier to beat in the final lol
[2018-07-10 19:41:08]
ender :
oh fredz by the way, could you check if the measurable difference using Fake GPS is also visible wiht a simple wifi analyzer tool on another Android ?!
[2018-07-10 19:41:14]
ender :
haha
[2018-07-10 19:41:22]
ender :
I am German and thing we sucked :slightly_smiling_face:
[2018-07-10 19:41:30]
mr.vibez :
I would agree lol
[2018-07-10 19:41:44]
mr.vibez :
but then so did Brazil
[2018-07-10 19:41:49]
mr.vibez :
and Argentina
[2018-07-10 19:41:55]
fredz :
What WiFi analyzer app?
[2018-07-10 19:42:07]
ender :
well any but wait a sec i give you an idea
[2018-07-10 19:42:23]
ender :
“WiFiAnalyzer”
[2018-07-10 19:42:32]
fredz :
Original name :)
[2018-07-10 19:42:47]
ender :
yep, 2 weeks work for the Marketing deparment :stuck_out_tongue:
[2018-07-10 19:43:13]
hostile :
<https://dji-rev.slack.com/archives/CBMKLBXEF/p1531251309000357> good eye
[2018-07-10 19:51:04]
aciid :
I have made an new finding
[2018-07-10 19:51:27]
aciid :
need someone who has parrot wifi on and laptop connected to it
[2018-07-10 19:51:51]
mr.vibez :
How would I do that?
[2018-07-10 19:52:06]
mr.vibez :
Literally switch on the parrot?
[2018-07-10 19:52:20]
aciid :
parrot should be able to run this web-server
[2018-07-10 19:52:28]
aciid :
I don't actually know im judging from the code
[2018-07-10 19:52:35]
aciid :
this might work via phone naturally also
[2018-07-10 19:52:41]
aciid :
connect controller to phone
[2018-07-10 19:52:52]
aciid :
and go to parrots ip on webbrowser
[2018-07-10 19:53:12]
mr.vibez :
How do I get the IP?
[2018-07-10 19:53:24]
aciid :
192.168.42.1
[2018-07-10 19:53:26]
aciid :
is parrot's ip
[2018-07-10 19:53:29]
fredz :
There’s a web server on port 80 by default
[2018-07-10 19:53:31]
aciid :
<http://192.168.42.1>
[2018-07-10 19:53:33]
fredz :
I’ve been on it
[2018-07-10 19:53:51]
aciid :
can you check what happens on
<http://192.168.42.1/properties>
[2018-07-10 19:54:03]
fredz :
Not home now
[2018-07-10 19:54:13]
aciid :
@ender @hostile
[2018-07-10 19:54:17]
mr.vibez :
Off for a quick fly, then i'll come back
[2018-07-10 19:54:26]
aciid :
<http://192.168.42.1/usb_mode>
[2018-07-10 19:54:37]
ender :
can do
[2018-07-10 19:54:42]
ender :
sec
[2018-07-10 19:55:17]
ender :
(will be offline of course, what to look for?)
[2018-07-10 19:55:34]
ender :
well, i’ll be back !
[2018-07-10 19:55:40]
ender :
connecting to anafi
[2018-07-10 19:56:03]
aciid :
try these few urls on browser
[2018-07-10 19:56:09]
aciid :
<http://192.168.42.1/properties>
[2018-07-10 19:56:13]
aciid :
<http://192.168.42.1/usb_mode>
[2018-07-10 19:56:19]
aciid :
<http://192.168.42.2/properties>
[2018-07-10 19:56:24]
aciid :
<http://192.168.42.2/usb_mode>
[2018-07-10 19:57:44]
ender :
both result in 404
[2018-07-10 19:57:44]
ender :
okay, will try the .2, be back
[2018-07-10 19:59:13]
ender :
on the .1 adresses :
Error 404: Not Found
Not found
[2018-07-10 19:59:23]
ender :
on the .2 adresses the browser stalls
[2018-07-10 19:59:34]
ender :
(Safari, any use of trying Chrome ?)
[2018-07-10 20:00:58]
aciid :
its correct
[2018-07-10 20:01:02]
aciid :
those are websocket address's
[2018-07-10 20:01:04]
aciid :
should stall
[2018-07-10 20:01:12]
aciid :
enough
[2018-07-10 20:02:38]
aciid :
@aciid uploaded a file: [image.png](https://dji-rev.slack.com/files/U6AD6A1QU/FBMGCQSFJ/image.png)
[2018-07-10 20:02:53]
aciid :
we probably need a certificate file, dont know are there binarys available that craft one
[2018-07-10 20:03:02]
aciid :
this is vanilla way of enabling debug
[2018-07-10 20:03:10]
hostile :
aye, they have serial number embedded too
[2018-07-10 20:03:31]
aciid :
web-server has rw properties from websockets
[2018-07-10 20:03:46]
aciid :
but im too arsed to start guessing ill wait for my shipment and spider it
[2018-07-10 20:09:32]
aciid :
there is also /etc/update-signature.conf so modifying firmwares might not be easy route wihout exploit
[2018-07-10 20:11:24]
mr.vibez :
@ender that xml change made no difference, unless fcc sucks as bad as ce mode. 200m then choppy connection where I live. The Mavic Air on FCC would get 1k
[2018-07-10 20:11:48]
ender :
200m ?!?!
[2018-07-10 20:11:59]
ender :
I can get EASY 1km at 20m Altitude.
[2018-07-10 20:12:06]
ender :
Maybe mine is locked to FCC
[2018-07-10 20:12:25]
mr.vibez :
I did a range test in a field and got 1km
[2018-07-10 20:12:31]
ender :
okay
[2018-07-10 20:12:44]
mr.vibez :
but round my house, we have lots of intefrence
[2018-07-10 20:12:45]
ender :
urban place sucks ?
[2018-07-10 20:12:49]
ender :
okay
[2018-07-10 20:12:50]
mr.vibez :
yup
[2018-07-10 20:13:07]
mr.vibez :
FCC on mavic air can usually punch through it
[2018-07-10 20:13:26]
ender :
Well, i am optimistic about FCC on the Anafi as well, give it some time…
[2018-07-10 20:13:51]
mr.vibez :
me too. Although the clock is ticking, 29 days and it's off back otherwise :stuck_out_tongue:
[2018-07-10 20:13:59]
ender :
:wink:
[2018-07-10 20:14:23]
ender :
cya guys, gotta work & sleep ! THANKS to aciid & hostile for magic stuff !
[2018-07-10 20:14:40]
aciid :
yeah ttyl I'm GMT+2
[2018-07-10 20:19:58]
mr.vibez :
Just noticed the anafi video is vbr rather than cbr
[2018-07-10 20:20:46]
mr.vibez :
or maybe not
[2018-07-10 20:21:10]
mr.vibez :
daytime videos are 100 Mb/s but the night video I did was only 70 Mb/s
[2018-07-10 20:22:39]
mr.vibez :
Auto exposure works quite smooth too. You can lock ISO,WB etc but leave EV on auto
[2018-07-10 21:28:58]
aciid :
anafi has ton of hid modules , someoneshould definitely try the otg-keyboard thing
[2018-07-10 21:38:54]
pedrocab :
Hi all, Can anyone share with me a PCAP file capturing traffic from Anafi/FF6 ? I’ve been reversing parrot SDK last years and I’m wondering if they change something in the ARCommands
[2018-07-10 21:39:05]
pedrocab :
Thank you in advance
[2018-07-10 21:43:22]
aciid :
@pedrocab <https://bpaste.net/raw/a2fb733cdc81> all strings in latest libsdkcore.so FreeFlight6
[2018-07-10 21:43:35]
aciid :
I don't have comms/pcaps. since I dont have the drone yet
[2018-07-10 21:52:22]
mr.vibez :
Need me to try anything, wife is in bed and drone is sat doing nothing
[2018-07-10 21:52:44]
pedrocab :
Thank you @aciid , I will take a look to libsdkcore strings more carefully. Looking forward to analyzing comms/pcap if someone has an anafi
[2018-07-10 21:56:04]
pedrocab :
@lee if you have rooted Android, launch tcpdump (-i wlan0 -w test.pcap) and them from FF6 flight the anafi (takeoff, whatever, land). Stop the tcpdump (Ctrl C) and share pcap :) Thnx
[2018-07-10 21:56:34]
pedrocab :
Sorry @mr.vibez
[2018-07-10 21:57:18]
pedrocab :
If you haven’t a rooted Android, arp poison from your Linux will work
[2018-07-10 21:57:58]
mr.vibez :
I'm afraid I won't be taking it for a flight tonight, battery is fairly low and it's dark outside
[2018-07-10 21:59:30]
pedrocab :
Fear of the dark ? ;)
[2018-07-10 22:02:26]
mr.vibez :
Fear of the neighbours lol
[2018-07-10 22:02:48]
mr.vibez :
Do I need to take off, or just connect to the drone?
[2018-07-10 22:13:27]
pedrocab :
Hahaha, don’t worry. I would like to see AR commands so take off is needed, but if you can share a pcap just connecting would be nice also
[2018-07-10 22:13:47]
pedrocab :
Do you try to connect to Anafi Linux using adb ?
[2018-07-10 22:15:28]
pedrocab :
adb connect 192.168.42.1
[2018-07-10 22:16:22]
mr.vibez :
Let me try
[2018-07-10 22:28:44]
mr.vibez :
unable to connect to 192.168.42.1:5555: cannot connect to 192.168.42.1:5555: No connection could be made because the target machine actively refused it. (10061)
[2018-07-10 23:58:24]
hostile :
nice to see you here @pedrocab this is @d0tslash
[2018-07-10 23:59:08]
hostile :
@pedrocab I too am wondering if they fixed the sequence numbering bug =]
[2018-07-11 05:24:19]
pedrocab :
Hi @hostile
[2018-07-11 05:25:03]
pedrocab :
Yes, I’m curious too, hahaha
[2018-07-11 06:13:53]
fredz :
<https://imgur.com/a/85qqzTi>
This is a screenshot from their FF6 app. Their altitude is wrong (the Anafi can’t go higher than 150 meter) and the speed is wrong by a factor 10...
[2018-07-11 06:22:13]
fredz :
@ender here is the power measured by WifiAnalyzer. The drone was 50cm to the right of the phone with the measuring app and the remote 50cm to the left from the phone (I used another phone for the FakeGPS together with the FF6 app).
<https://imgur.com/a/dByrAi2>
[2018-07-11 06:22:24]
fredz :
Top is CE, bottom is FCC
[2018-07-11 06:38:59]
fredz :
For those interested, it seems these resellers have 89 pieces of the Anafi in stock for only 614 Euros incl VAT. I don't know this company but it's quite well known in Netherlands. <https://maxict.nl/parrot-anafi-ultra-compact-en-lightweight-4k-hdr-drone-p9490286.html>
[2018-07-11 07:27:43]
ender :
Wow only 2 dB jump visible…
[2018-07-11 07:33:38]
ender :
@aciid: can do, what to try exactly ?
[2018-07-11 07:47:06]
ender :
@aciid: well i attached an USB keyboard via USB-C OTG Adapter and tried to make it reboot (pressing return several times, then typing return and stuff). Did not reboot :slightly_smiling_face: ANy alternative ideas what to type ?!
[2018-07-11 07:47:33]
aciid :
probably doesn't work then, but it was worth a try
[2018-07-11 07:48:19]
aciid :
oh it has usbc I need to remember to go buy a cable for that
[2018-07-11 07:58:31]
ender :
yep yep
[2018-07-11 07:58:50]
ender :
ANd a PD Standard charger to cut the charging time to 1h30min.
[2018-07-11 07:59:13]
ender :
conventional USB chargers will charge with max 5V2A = 2h:30hmin or more
[2018-07-11 07:59:39]
ender :
The 2 port RavPower 36W PD USB Charger does the job (approx 20 Euro)
[2018-07-11 08:07:30]
fredz :
@ender yes only 2 dB, but can try again. Still it goes up immediately after switching to FCC
[2018-07-11 08:07:53]
ender :
thats the main point of course.
[2018-07-11 08:08:10]
ender :
so mine really reacts different. I tried with rf meter and Tablet with wifi analyzer…
[2018-07-11 08:10:09]
ender :
@aciid hmm, there is no reboot in the linux partition, is there ?!
[2018-07-11 08:10:17]
fredz :
not one dB difference @ender?
[2018-07-11 08:10:36]
aciid :
@ender yeah actually im not sure what binaries there are, reboot was present in mavic so I just figured
[2018-07-11 08:10:42]
ender :
well it fluctuates a bit so i wont see 1dB
[2018-07-11 08:11:03]
aciid :
my thinking is that the otg keyboard could call any binary if it connects
[2018-07-11 08:11:05]
aciid :
like uh
[2018-07-11 08:11:10]
aciid :
beep
[2018-07-11 08:11:11]
aciid :
is in linux
[2018-07-11 08:11:12]
aciid :
you know
[2018-07-11 08:11:32]
ender :
yep yep i understood that you guess i got a shell there :slightly_smiling_face:
[2018-07-11 08:12:03]
ender :
just searching for a command that i would recognize from the outside…
[2018-07-11 08:12:05]
aciid :
there is no reboot
[2018-07-11 08:12:06]
aciid :
hmm
[2018-07-11 08:12:45]
aciid :
ill check the init scripts
[2018-07-11 08:12:54]
aciid :
does it make sounds
[2018-07-11 08:12:57]
aciid :
when it starts?
[2018-07-11 08:13:03]
aciid :
(is there a beeper) or somethng
[2018-07-11 08:13:21]
ender :
yes, i tried both with keyboard connected from the beginning or plugged in later
[2018-07-11 08:16:28]
aciid :
so anyways global path is export PATH /sbin:/bin:/usr/bin:/usr/sbin
[2018-07-11 08:16:42]
aciid :
anything from those could be used with keyboard
[2018-07-11 08:17:09]
aciid :
shutdown.sh
[2018-07-11 08:17:29]
ender :
I will check if it delivers power or needs a powered usb hub…
[2018-07-11 08:17:39]
ender :
yepp tried shutdown.sh meanwhile :slightly_smiling_face:
[2018-07-11 08:17:43]
aciid :
yeah, mym mavic didn't like my mechanical keyboard
[2018-07-11 08:17:52]
aciid :
i have ducky
[2018-07-11 08:18:04]
ender :
rubberducky ? :wink:
[2018-07-11 08:18:32]
aciid :
that would be fun too
[2018-07-11 08:18:47]
aciid :
not related but I bought a hackRF one
[2018-07-11 08:19:04]
aciid :
I want to see can I jam consumer drones
[2018-07-11 08:20:52]
ender :
Damn, it delivers power via USB OTG. So this is cool as we can use it as apower bank but destroys the keyboard hope :disappointed:
[2018-07-11 08:21:07]
ender :
will try chargin my phone from Anafi now :slightly_smiling_face:
[2018-07-11 08:21:17]
aciid :
my reasoning is that modules.order from the kernel
[2018-07-11 08:21:24]
aciid :
contains these hid classes
[2018-07-11 08:21:34]
aciid :
I cannot be on the wrong track
[2018-07-11 08:21:53]
aciid :
```
kernel/fs/mbcache.ko
kernel/fs/ext4/ext4.ko
kernel/fs/jbd2/jbd2.ko
kernel/fs/nfsd/nfsd.ko
kernel/fs/fuse/fuse.ko
kernel/fs/fuse/cuse.ko
kernel/crypto/seqiv.ko
kernel/crypto/echainiv.ko
kernel/crypto/gf128mul.ko
kernel/crypto/ctr.ko
kernel/crypto/gcm.ko
kernel/crypto/ccm.ko
kernel/crypto/drbg.ko
kernel/crypto/jitterentropy_rng.ko
kernel/crypto/ghash-generic.ko
kernel/drivers/parrot/i2c/i2c-threadx.ko
kernel/drivers/parrot/iio/bldc/cypress/bldc-cypress.ko
kernel/drivers/parrot/iio/bldc/cypress/bldc_cypress_i2c.ko
kernel/drivers/parrot/smartbattery/smartbattery.ko
kernel/drivers/net/ethernet/ambarella/ambarella_eth.ko
kernel/drivers/net/mii.ko
kernel/drivers/net/phy/libphy.ko
kernel/drivers/net/phy/fixed_phy.ko
kernel/drivers/net/phy/micrel.ko
kernel/drivers/net/phy/realtek.ko
kernel/drivers/usb/core/usbcore.ko
kernel/drivers/usb/host/ehci-hcd.ko
kernel/drivers/usb/host/ehci-ambarella.ko
kernel/drivers/usb/host/ohci-hcd.ko
kernel/drivers/usb/storage/usb-storage.ko
kernel/drivers/usb/serial/usbserial.ko
kernel/drivers/usb/misc/ehset.ko
kernel/drivers/usb/gadget/libcomposite.ko
kernel/drivers/usb/gadget/udc/udc-core.ko
kernel/drivers/usb/gadget/udc/ambarella_udc.ko
kernel/drivers/usb/gadget/function/usb_f_acm.ko
kernel/drivers/usb/gadget/function/u_serial.ko
kernel/drivers/usb/gadget/function/usb_f_serial.ko
kernel/drivers/usb/gadget/function/usb_f_obex.ko
kernel/drivers/usb/gadget/function/u_ether.ko
kernel/drivers/usb/gadget/function/usb_f_ecm.ko
kernel/drivers/usb/gadget/function/usb_f_ecm_subset.ko
kernel/drivers/usb/gadget/function/usb_f_rndis.ko
kernel/drivers/usb/gadget/function/usb_f_mass_storage.ko
kernel/drivers/usb/gadget/function/usb_f_fs.ko
kernel/drivers/usb/gadget/function/usb_f_diag.ko
kernel/drivers/usb/gadget/legacy/g_ether.ko
kernel/drivers/usb/gadget/legacy/g_ffs.ko
kernel/drivers/usb/gadget/legacy/g_mass_storage.ko
kernel/drivers/usb/gadget/legacy/g_serial.ko
kernel/drivers/usb/gadget/legacy/g_multi.ko
kernel/drivers/usb/common/usb-common.ko
kernel/drivers/input/misc/uinput.ko
kernel/drivers/input/evdev.ko
kernel/drivers/mmc/core/pwrseq_simple.ko
kernel/drivers/mmc/core/pwrseq_emmc.ko
kernel/drivers/of/of_mdio.ko
kernel/drivers/scsi/scsi_mod.ko
kernel/drivers/scsi/sd_mod.ko
kernel/drivers/hid/hid.ko
kernel/drivers/hid/hid-generic.ko
kernel/drivers/hid/hid-a4tech.ko
kernel/drivers/hid/hid-apple.ko
kernel/drivers/hid/hid-belkin.ko
kernel/drivers/hid/hid-cherry.ko
kernel/drivers/hid/hid-chicony.ko
kernel/drivers/hid/hid-cypress.ko
kernel/drivers/hid/hid-ezkey.ko
kernel/drivers/hid/hid-kensington.ko
kernel/drivers/hid/hid-logitech.ko
kernel/drivers/hid/hid-microsoft.ko
kernel/drivers/hid/hid-monterey.ko
kernel/drivers/hid/usbhid/usbhid.ko
kernel/net/802/p8022.ko
kernel/net/802/psnap.ko
kernel/net/802/stp.ko
kernel/net/wireless/cfg80211.ko
kernel/net/llc/llc.ko
kernel/net/bridge/bridge.ko
kernel/net/mac80211/mac80211.ko
kernel/lib/crc-ccitt.ko
```
[2018-07-11 08:21:55]
aciid :
loadorder
[2018-07-11 08:22:19]
ender :
But there could be a sort of menu, like “r” for reboot “d” for debug “x” for self destruction and so on, not a real shell, right ?
[2018-07-11 08:22:27]
aciid :
you are right
[2018-07-11 08:22:30]
ender :
(or nothing at all)
[2018-07-11 08:22:45]
ender :
i TRIED most letters :slightly_smiling_face:
[2018-07-11 08:24:52]
aciid :
oh my genuine batterys are on the post office and dhl is brining my mavic gimbal today
[2018-07-11 08:25:09]
fredz :
where did you order the batteries
[2018-07-11 08:25:15]
ender :
parrot
[2018-07-11 08:25:26]
ender :
cancelled amazon
[2018-07-11 08:26:06]
aciid :
[parrot.eu](http://parrot.eu)
[2018-07-11 08:26:11]
aciid :
<https://www.parrot.com/eu/drones/anafi>
[2018-07-11 08:26:22]
aciid :
mavic batterys from aliexpress
[2018-07-11 08:26:54]
aciid :
@ender
[2018-07-11 08:26:59]
aciid :
adb doesnt run on default port
[2018-07-11 08:27:36]
aciid :
port is 9050
[2018-07-11 08:28:12]
ender :
uhh you say adb via wireless might be ON ?
[2018-07-11 08:28:24]
aciid :
well im usb debugging isn't on
[2018-07-11 08:28:40]
ender :
i’ll try, sec
[2018-07-11 08:28:46]
aciid :
default.prop contents
[2018-07-11 08:28:49]
aciid :
service.adb.tcp.port=9050
ro.debuggable=0
ro.gps.no_firmware=1
persist.ftr.legs=0
persist.user.usb_mode=mass_storage
[2018-07-11 08:29:09]
ender :
btw Anafi charges my phone with 5V 1A now :slightly_smiling_face:
[2018-07-11 08:31:19]
ender :
nahh connection refused
[2018-07-11 08:31:41]
aciid :
but its there?
[2018-07-11 08:31:51]
aciid :
did you try with adb?
[2018-07-11 08:32:11]
aciid :
adb connect ipipipip:9050
[2018-07-11 08:32:29]
aciid :
wlan ip
[2018-07-11 08:32:38]
aciid :
or rndiswrapper
[2018-07-11 08:32:39]
aciid :
usb ip
[2018-07-11 08:32:40]
aciid :
dunno
[2018-07-11 08:35:54]
aciid :
does anyone have board pictures yet
[2018-07-11 08:37:58]
ender :
i tried adb connect on port 9050
[2018-07-11 08:38:09]
ender :
--> refused
[2018-07-11 08:39:42]
aciid :
oki
[2018-07-11 09:00:00]
ender :
bad idea to use Anafi as Powerbank, battery does not charge anymore ! So dont do THAT :wink:
[2018-07-11 09:02:59]
ender :
phewww, STOP ALL PANIC :wink: After flying with the Anafi it seems to have resetted “its smartness” and now looks lik eit charges again. Neverthless, NOT recommended…
[2018-07-11 09:09:11]
aciid :
im out of ideas on the attack vectors before we find i2c serial ports
[2018-07-11 09:10:15]
ender :
All at its time :slightly_smiling_face:
[2018-07-11 09:10:55]
ender :
If i keep it i will also open it and sniff around. I will take it with me on a week of holidays and after that i know whether to keep it.
[2018-07-11 09:11:45]
aciid :
according to the files there may be an additional scard
[2018-07-11 09:14:20]
aciid :
there is emmc and sdcard
[2018-07-11 09:17:51]
ender :
hmm, the Bebops had built-in emmc
[2018-07-11 09:18:12]
ender :
maybe the Anafi still has it…
[2018-07-11 09:28:20]
aciid :
parrot has not sent my order yet and its like mid day in europe
[2018-07-11 11:20:52]
aciid :
hahah they started handling my after I tweeted
[2018-07-11 11:20:54]
aciid :
lololol
[2018-07-11 11:28:38]
ender :
personal touch :slightly_smiling_face:
[2018-07-11 11:54:19]
aciid :
Mavic works again gimbal cam and all
[2018-07-11 12:03:51]
ender :
:+1:
[2018-07-11 12:16:11]
hostile :
<https://dji-rev.slack.com/archives/CBMKLBXEF/p1531296725000261> try "busybox reboot"
[2018-07-11 12:17:12]
ender :
okay but maybe busybox powerdown.sh ?!
[2018-07-11 12:18:18]
ender :
oh mixup order,will try in a sec or two !
[2018-07-11 12:19:33]
ender :
Damn, “my” Parrot dev that i know from bebop times is not with Parrot anymore…
[2018-07-11 12:32:08]
hostile :
yeah my dude Cherbini is gone too
[2018-07-11 12:32:23]
hostile :
a good chunk of their R&D team disappeared
[2018-07-11 12:55:12]
aciid :
@hostile im 100% otg usb-keyboard might just work since they are loaded in kernel
[2018-07-11 12:55:26]
aciid :
theres logitech, apple, microsoft atleast loaded
[2018-07-11 12:56:51]
aciid :
100% might just work, quote me on that
[2018-07-11 13:12:15]
ender :
it might work, but who knows where the keypresses go ?!
[2018-07-11 13:12:33]
ender :
Or do you have strong hints that there is an open shell ? Or maybe a login Dialog ?
[2018-07-11 13:12:46]
hostile :
remember when t-mobile g1 backgrounded /bin/sh and you could type commands on the home screen lol
[2018-07-11 13:15:18]
aciid :
b-but i want to believe
[2018-07-11 13:16:17]
aciid :
first thing when that anafi arrives is that ill probe it for i2c and serial and can
[2018-07-11 13:18:35]
ender :
aciid, i believe you too :slightly_smiling_face: The Question is what to type. I tried prepending CTRL-C & CTRL-D and “root<cr><cr>” and so on :slightly_smiling_face:
[2018-07-11 13:18:48]
aciid :
:smile:
[2018-07-11 13:18:48]
aciid :
try pressin 1
[2018-07-11 13:19:03]
aciid :
i havent found corresponding binary for login, but it could be that there is something like that
[2018-07-11 13:19:04]
aciid :
menu
[2018-07-11 13:19:11]
ender :
yup
[2018-07-11 15:28:33]
aciid :
parrot jsut sent me the anafi
[2018-07-11 15:28:40]
aciid :
gonna be real interesting if its here by friday
[2018-07-11 15:45:36]
ender :
cool !
[2018-07-11 15:47:35]
hostile :
you'll need Torx T6 bits fwiw
[2018-07-11 15:49:59]
ender :
Or a Parrot Toolkit :slightly_smiling_face: got 3 of them :wink:
[2018-07-11 15:50:50]
hostile :
you also need to pull the sticker from under the battery
[2018-07-11 15:50:57]
hostile :
there are two torx screws under it
[2018-07-11 15:52:19]
hostile :
4 screws total to pop the lid
[2018-07-11 15:53:38]
hostile :
@hostile uploaded a file: [image_from_ios.jpg](https://dji-rev.slack.com/files/U60D1SM7V/FBN7QD7LZ/image_from_ios.jpg)
[2018-07-11 15:55:21]
ender :
She’s …NAKED :wink:
[2018-07-11 15:55:49]
aciid :
oh @hostile making headway
[2018-07-11 15:56:24]
aciid :
highscreen pictures of board pls and notes are there sensible sized pins for uart etc
[2018-07-11 15:57:04]
ender :
And protocoll of all pins and free pizza & beer and whatnot :slightly_smiling_face: !beer
[2018-07-11 15:57:44]
aciid :
oh theres ton of silkscreened pin labels
[2018-07-11 15:57:45]
aciid :
lol
[2018-07-11 15:58:55]
ender :
I wonder if thats the very same fan as the Bebops had. Have like 5 of them lying around :slightly_smiling_face:
[2018-07-11 16:01:46]
hostile :
under first shield is an ambarella h22-a0-rh <https://www.ambarella.com/uploads/docs/H22-Product-Brief.pdf>
[2018-07-11 16:04:57]
hostile :
QCA6174a under the other one <https://www.qualcomm.com/media/documents/files/qca6174a-product-brief.pdf>
[2018-07-11 16:05:11]
hostile :
all ball grid
[2018-07-11 16:05:14]
hostile :
small traces
[2018-07-11 16:05:18]
hostile :
no obvious pads
[2018-07-11 16:06:54]
hostile :
@hostile uploaded a file: [image_from_ios-1.jpg](https://dji-rev.slack.com/files/U60D1SM7V/FBN3K92NL/image_from_ios-1.jpg)
[2018-07-11 16:09:53]
hostile :
things to eyeball <https://cxsecurity.com/cveproduct/14/35489/qca_36__31__37__34_a_firmware/>
[2018-07-11 16:10:26]
aciid :
wtf traces and components 45' angle
[2018-07-11 16:10:32]
aciid :
preschool engineering
[2018-07-11 16:10:43]
aciid :
that is absolutely banned everywhere I'm aware, it's unreliable and 99% of assembly lines are not capable of producing them that pass QA
[2018-07-11 16:12:34]
hostile :
possible ambarella uart / jtag on bottom side of the PCB in corner near ambarella
[2018-07-11 16:12:54]
hostile :
5 pins in a row (dots / test pads)
[2018-07-11 16:12:57]
aciid :
there must be a jtag somewhere that IC is huge
[2018-07-11 16:13:16]
aciid :
my Saleae Logic is thirsty for some parakeet
[2018-07-11 16:13:31]
hostile :
it probably has ip access to the qca chip
[2018-07-11 16:14:05]
hostile :
good man if you own a Saleae
[2018-07-11 16:16:23]
aciid :
found something
[2018-07-11 16:16:44]
aciid :
```
switchUsbMode: function(t) {
return o.a.put("/api/v1/info/usb_mode?mode=" + t)
},
```
[2018-07-11 16:17:17]
aciid :
```
return [n("span", {
directives: [{
name: "show",
rawName: "v-show",
value: "usbd.usb_mode" === e.row.key && t.isDebuggable && t.nextUsbMode,
expression: "cell.row.key === 'usbd.usb_mode' && isDebuggable && nextUsbMode"
}],
staticClass: "linkbtn",
attrs: {
title: "switch " + t.nextUsbMode
},
on: {
click: function(e) {
t.switchUsbMode(t.nextUsbMode)
}
}
```
[2018-07-11 16:17:34]
hostile :
score
[2018-07-11 16:17:37]
hostile :
check this file ./usr/share/www/js/0.f9d9c006b32eef610545.j
[2018-07-11 16:18:06]
hostile :
that the one you eyeballing beautified ?
[2018-07-11 16:18:21]
aciid :
yes
[2018-07-11 16:19:50]
hostile :
```n FTM: Some vendors have implemented the FTM mode (hold Vol Down while connecting the USB) which in fact exposes an ADB interface. UFED can usually detect this mode and continue to extract normally using ‘Generic Qualcomm ADB’.``` <https://media.cellebrite.com/wp-content/uploads/2017/12/qualcomm-edl-physical-extractions-guide.pdf>
[2018-07-11 16:20:00]
hostile :
```$ cat ./usr/bin/start_qcom_ftm.sh
#!/bin/sh
killall qcom-qca6174-ftmdaemon 2>/dev/null
pterm wifid 2>/dev/null
if [ -d /dev/cfg/usb_gadget/g1/functions/diag.diag ]; then
# Diag is activated, launch ftm
rmmod wlan 2>/dev/null
echo 0 > /sys/devices/platform/user_gpio/wifi_nrst/value
echo 1 > /sys/devices/platform/user_gpio/wifi_nrst/value
modprobe wlan con_mode=5
qcom-qca6174-ftmdaemon
else
# Activate diag
modprobe diagchar
# The job is now done in file /etc/boxinit.d/20-usbd.rc
sprop usbd.usb_mode diag
fi
```
[2018-07-11 16:20:43]
hostile :
```$ grep ftm . -r
Binary file ./lib/modules/4.9.0+/extra/wlan.ko matches
Binary file ./usr/bin/qcom-qca6174-ftmdaemon matches
Binary file ./usr/bin/qcom-qca6174-myftm matches
./usr/bin/start_qcom_ftm.sh:killall qcom-qca6174-ftmdaemon 2>/dev/null
./usr/bin/start_qcom_ftm.sh: # Diag is activated, launch ftm
./usr/bin/start_qcom_ftm.sh: qcom-qca6174-ftmdaemon
Binary file ./usr/lib/wifid/cfg80211driver.so matches
```
[2018-07-11 16:21:23]
hostile :
can't tell if Fine Timing Measurement or debug stuff.
[2018-07-11 16:21:25]
hostile :
or both lol
[2018-07-11 16:22:07]
aciid :
.rodata:0000000000021F40 0000002D C /lib/firmware/ath6k/AR6004/hw3.0/softmac.bin
[2018-07-11 16:22:13]
aciid :
so--ftm---ac.bin
[2018-07-11 16:22:31]
aciid :
your match
[2018-07-11 16:22:40]
aciid :
on cfg802111
[2018-07-11 16:22:44]
hostile :
aye seems to be the wifi FTM stuff qcom-qca6174-myftm
[2018-07-11 16:23:36]
aciid :
.rodata:0000000000419DD0 0000002C C usb_mode cannot be changed if no debuggable
[2018-07-11 16:23:38]
aciid :
fuck
[2018-07-11 16:23:39]
aciid :
:<
[2018-07-11 16:23:53]
aciid :
/usr/bin/webserver
[2018-07-11 16:24:28]
aciid :
but
[2018-07-11 16:24:37]
aciid :
properties may be able to change rw.debuggable
[2018-07-11 16:24:45]
aciid :
@ender you good with computers?
[2018-07-11 16:24:53]
ender :
got one :stuck_out_tongue:
[2018-07-11 16:24:56]
aciid :
we'd need like chrome with postman application
[2018-07-11 16:25:02]
aciid :
to start fiddling with these api routes
[2018-07-11 16:25:06]
aciid :
we found how to use them now
[2018-07-11 16:25:15]
aciid :
but if it disocnnects you from slack that is bad
[2018-07-11 16:25:30]
ender :
np, i could add LAN
[2018-07-11 16:26:02]
aciid :
ill still look for methods
[2018-07-11 16:26:07]
ender :
so have LAN for internet and WiFi to Anafi
[2018-07-11 16:27:43]
aciid :
abort
[2018-07-11 16:27:46]
aciid :
theres only get mode for info
[2018-07-11 16:27:48]
aciid :
properties
[2018-07-11 16:27:52]
aciid :
boring
[2018-07-11 16:28:11]
aciid :
need to find whole api routing
[2018-07-11 16:28:18]
aciid :
to understand
[2018-07-11 17:01:52]
aciid :
well acording to my findings from webserver
```
switchUsbMode: function(t) {
return r.a.put("/api/v1/info/usb_mode?mode=" + t)
},
```
wont work unless ro.debuggable is already at 1
[2018-07-11 17:04:42]
ender :
bah
[2018-07-11 17:13:39]
aciid :
interesting file /usr/bin/hwtoolbox parrot's propertiary debugger
[2018-07-11 17:13:43]
aciid :
has menu and all
[2018-07-11 17:16:38]
aciid :
<https://bpaste.net/show/db7dd0494428>
[2018-07-11 17:17:19]
ender :
nice
[2018-07-11 17:19:59]
aciid :
<https://bpaste.net/show/cc9ebe935130> interactive mode
[2018-07-11 17:27:02]
ender :
Maybe thats what i am doing on the usb keyboard :slightly_smiling_face:
[2018-07-11 17:27:34]
ender :
(nahhh dont think so)
[2018-07-11 17:29:43]
aciid :
```
LDR X0, [X29,#0xCF0+var_C28]
ADRP X2, #aCmdGoldenRefer@PAGE ; "CMD_GOLDEN_REFERENCES"
ADD X2, X2, #aCmdGoldenRefer@PAGEOFF ; "CMD_GOLDEN_REFERENCES"
MOV W1, #2
BL sub_41D170
```
[2018-07-11 17:29:45]
aciid :
wth?
[2018-07-11 17:30:46]
ender :
Well at least Parrot seems not to make so much typos as DJI seeing all this :stuck_out_tongue:
[2018-07-11 17:37:33]
hostile :
that was nice of them to leave for us
[2018-07-11 17:37:42]
hostile :
we need to check for the droneid implementation the french were mandating
[2018-07-11 18:12:53]
aciid :
@ender whick keyboard you have btw
[2018-07-11 18:13:00]
ender :
a lot
[2018-07-11 18:13:04]
ender :
i tried 2
[2018-07-11 18:13:14]
ender :
one wireless with usb receiver and one wired
[2018-07-11 18:13:33]
aciid :
Mavic turned off my keyboard after 5seconds
[2018-07-11 18:13:42]
aciid :
For comparison
[2018-07-11 18:13:59]
aciid :
But that doesnt have the thing we are investigqtkng
[2018-07-11 18:14:06]
ender :
yep, but e.g. on the Bebop 1 & 2 i was able to use OTG equipment as long as i wanted if that is any indication
[2018-07-11 18:14:28]
ender :
Like a flir camera or USB Storage or .,..
[2018-07-11 18:14:49]
aciid :
mpp3_update_1.0.5 whicv device is this?
[2018-07-11 18:14:58]
ender :
the controller
[2018-07-11 18:17:52]
aciid :
controller filesystem equally interesting
[2018-07-11 18:17:54]
aciid :
lets dig?
[2018-07-11 18:18:24]
aciid :
uplaoding
[2018-07-11 18:19:29]
ender :
I will search for any trace of HDMI, there was a “nearly-official” rumour that the USB-C is 720p Output capable which would be a BLAST.
[2018-07-11 18:20:07]
aciid :
well hwtoolbox has mention of hdmi
[2018-07-11 18:20:18]
ender :
:pray:
[2018-07-11 18:22:31]
aciid :
found a way to get shellcode in
[2018-07-11 18:24:48]
aciid :
downside is that it can crap out the controller
[2018-07-11 18:27:51]
ender :
uhuhuhuuuu
[2018-07-11 18:28:24]
ender :
I just ran away because it came to my mind that i DO have such a USB-C to HDMI thingy. Works with my phone but not with the controller :disappointed:
[2018-07-11 18:31:44]
aciid :
I'm sitting on this now I'm 100% sure
[2018-07-11 18:36:12]
aciid :
bah fs may be read only
[2018-07-11 18:36:14]
aciid :
back to start
[2018-07-11 18:36:29]
aciid :
the point of interest is /usr/sbin/update-usbids.sh
[2018-07-11 18:36:56]
aciid :
<https://www.dropbox.com/s/moz45ukti0fs4b6/rootfs.zip?dl=1> controller
[2018-07-11 18:39:23]
ender :
on later Bebop Firmwares FS was ro, you always had to be root to make it rw
[2018-07-11 18:40:11]
aciid :
who is going to open the controller and take pictures?
[2018-07-11 18:41:02]
ender :
i swear i will do if i decide to keep it but i cannot do it now :-((
[2018-07-11 18:41:27]
ender :
But i cannot see hostile waiting 10 days (thats the limit i set myself)
[2018-07-11 18:41:43]
ender :
--> HDMI, where did you see it mentioned ?
[2018-07-11 18:42:25]
aciid :
oh look oh look they have restricted capabilites of devices by usbid's
[2018-07-11 18:42:30]
aciid :
attac vector right here
[2018-07-11 18:42:43]
aciid :
@ender can't HDMI wait
[2018-07-11 18:42:59]
aciid :
<https://bpaste.net/show/cc9ebe935130> hdmi
[2018-07-11 18:43:04]
ender :
yeah yeah, you mentioned the occurance :slightly_smiling_face:
[2018-07-11 21:25:45]
aciid :
anything new?
[2018-07-11 21:26:36]
ender :
CRO 2, ENG 1 :slightly_smiling_face:
[2018-07-11 21:26:40]
ender :
Good nite !
[2018-07-11 21:27:03]
aciid :
wut?
[2018-07-11 21:27:05]
aciid :
good nite
[2018-07-11 21:27:25]
ender :
Tired :wink:
[2018-07-11 21:27:32]
ender :
cya !
[2018-07-12 03:04:51]
mr.vibez :
<https://www.youtube.com/watch?v=xRaJ-UWt1Xc&feature=youtu.be>
[2018-07-12 06:56:23]
fredz :
Well, he's just using Fake GPS - you can see it because his home point doesn't move in the video
[2018-07-12 07:10:12]
aciid :
interesting numbers
[2018-07-12 07:40:36]
mr.vibez :
Not sure you can fake GPS on iPhone even with jailbreak. I tried once with DJI go and it didn't work.
[2018-07-12 07:41:06]
fredz :
you can't unless it's jailbroken (and old)
[2018-07-12 07:41:32]
fredz :
didn't see it was on a iPhone - so it's interesting
[2018-07-12 07:51:55]
aciid :
@mr.vibez you can with stock
[2018-07-12 07:53:33]
aciid :
create a new ios app, tether simulate it in the phone and supply location gpx. whole phone changes location
[2018-07-12 07:53:46]
aciid :
works for snapchat, pokemon go, dji go4(fcc)
[2018-07-12 08:02:55]
ender :
But why is the distance meter okay and not showing 10.000 miles ? Well it might be different in iOS in that they use distance to takeoff and not to controller…
[2018-07-12 08:03:19]
ender :
aciid: so no simple fake gps app for ios ?
[2018-07-12 08:03:55]
ender :
Is there an idiots description for the process (i can creata apps for iOS, in fact doing so but never tampered with position)
[2018-07-12 08:06:47]
aciid :
<https://www.youtube.com/watch?v=uVNEf61ds_0>
[2018-07-12 08:06:50]
aciid :
I used this, you need a real macos and latest xcode
[2018-07-12 08:10:12]
ender :
got real macos & xcode as i develop iOS Apps from time to time. But as i am using a Multiplatform Framework i am not into NATIVE iOS stuff, using Qt that hides the hideous stuff from me for good :-9
[2018-07-12 08:10:25]
ender :
thx aciid
[2018-07-12 08:11:12]
ender :
woops, reading the first comment in YT: will this only work tethered to the Mac ? :wink:
[2018-07-12 08:11:39]
aciid :
xcode supports networked builds too
[2018-07-12 08:11:40]
aciid :
over wifi
[2018-07-12 08:11:43]
aciid :
but I havent tried
[2018-07-12 08:12:09]
aciid :
so yeah cable tethered then wifi to your bird
[2018-07-12 08:12:12]
aciid :
youll get a popup
[2018-07-12 08:12:34]
aciid :
newyork said "close to a nuclear power plant fly carefully" okkk :E
[2018-07-12 08:12:44]
ender :
haha
[2018-07-12 08:13:17]
ender :
sounds like crap, i guess i stick to Android Fake GPS :slightly_smiling_face:
[2018-07-12 08:13:42]
ender :
It WOULD be nice if iOS FakeGPS method ends up in correct distance to take off instead those thousands of miles…
[2018-07-12 08:14:32]
aciid :
how about buying a hackrf and be done with it?
[2018-07-12 08:14:52]
aciid :
broadcast a spoofed gps to everyone
[2018-07-12 08:14:55]
aciid :
o wait thats a crime
[2018-07-12 08:15:00]
aciid :
xd
[2018-07-12 08:15:49]
ender :
haha
[2018-07-12 08:16:04]
ender :
I goit one in the make here but havent got the time…
[2018-07-12 08:16:22]
ender :
This el cheapo thing built from a HDMI to VGA adapter
[2018-07-12 08:48:55]
mr.vibez :
Not convinced he spoofed via xcode but we'll see
[2018-07-12 08:49:25]
mr.vibez :
Or if he did, it's not practical
[2018-07-12 08:50:30]
fredz :
I talked to him, he is currently "making a tutorial"
[2018-07-12 08:53:16]
aciid :
@mr.vibez not convinced? I've ran that and it works
[2018-07-12 08:53:49]
aciid :
get this pseudobullshit attitude off. we working here on trust ok?
[2018-07-12 08:55:02]
aciid :
people dig consumer devices and do all this shit and document exploiting to github and youtube for free
[2018-07-12 08:55:07]
aciid :
then someone comes and "not convinced"
[2018-07-12 10:36:02]
aciid :
set the channel topic: Parakeet is a type of Parrot known for their ability to mimic chatter.
[2018-07-12 10:54:05]
ender :
:wink:
[2018-07-12 11:19:32]
mr.vibez :
@aciid sorry, I know it can work via xcode, did the same myself with DJI, I was just pondering if he used that method as the distance guage didn't behave as I expected. No offense intended
[2018-07-12 11:21:42]
mr.vibez :
I believe in the OG :grin:
[2018-07-12 11:23:03]
mr.vibez :
I was just not convinced if that was the specific method they used as they haven't gone into detail yet. It could be a different method
[2018-07-12 11:35:23]
fredz :
I cannot believe he used Xcode... anyway he will publish his "tutorial" today so he says
[2018-07-12 11:42:48]
aciid :
didn't I just link the video how to do this thing
[2018-07-12 11:42:53]
aciid :
it's completely basic
[2018-07-12 11:43:20]
aciid :
xcode tutorial <https://www.youtube.com/watch?v=uVNEf61ds_0>
[2018-07-12 11:43:27]
aciid :
if you can't follow this please don't drink and drone
[2018-07-12 11:44:59]
ender :
@aciid: The reason to doubt that he did just that is the distance in the iOS app.
At least if you use the Fake GPS approach in Android the distance will be shown to that fake GPS position which are probably thousands if miles.
IF that isnt normally the case in iOS (which i do not know) That guy must have done some more. Or its a fraud… We’ll see
[2018-07-12 11:46:13]
aciid :
oh yeah but have to remember parrot's app is like really buggy. could be that it caches those things instead of being realtime with checking
[2018-07-12 11:46:58]
fredz :
I think the iOS app works differently, I cannot think he is using a Mac or xcode
[2018-07-12 11:47:03]
fredz :
but we'll see what he says
[2018-07-12 11:47:28]
fredz :
aciid, no it doesn't cache, look at this video of the Android one that I made.
[2018-07-12 11:47:58]
fredz :
<https://www.dropbox.com/s/1kokjzjhfxpdivx/2018-07-07%2021.23.43.mov?dl=0>
[2018-07-12 11:48:08]
fredz :
(but maybe the iOS caches, though I highly doubt it)
[2018-07-12 11:51:08]
ender :
Actually on Android the FF6 app is much less performance hungry than the DJI GO App. Probably the DJI guys all use “Visual basic” :wink:
[2018-07-12 11:51:28]
fredz :
The DJI app on iOS is a lot more stable than the Android app, that's true as well
[2018-07-12 11:51:58]
ender :
(Which is good for me as i can use my wifes old Yotaphone for the Anafi until the P20 Pro works properly with FF6)
[2018-07-12 11:52:12]
ender :
@fredz FANBOY :stuck_out_tongue: :wink:
[2018-07-12 11:55:46]
aciid :
Im afraid to buy a android phone for droiding coz they outdate so fast
[2018-07-12 11:55:58]
aciid :
ive been looking at something 8" but I want root
[2018-07-12 11:56:12]
aciid :
mediapad t3 m3 somethig looks good
[2018-07-12 12:04:37]
fredz :
there are so few good Android tablets
[2018-07-12 12:04:43]
fredz :
phones are ok, but tablets
[2018-07-12 12:09:05]
ender :
There are a lot good Android Tablets actually :slightly_smiling_face: All my freinds that i have talked over from iOS wong go back to iCrap :slightly_smiling_face: But maybe thats my superpower :slightly_smiling_face:
[2018-07-12 12:11:17]
aciid :
well the ios apps just work, but I'm interested in the privacy side of android apps
[2018-07-12 12:11:23]
aciid :
i dont have my iphone x rooted, so
[2018-07-12 12:11:33]
aciid :
who knows what the chinese are looking at my dick while flying my drone
[2018-07-12 12:11:46]
fredz :
so, @ender, what is a good and powerful, rootable, recent Android tablet?
[2018-07-12 12:12:08]
ender :
All recent Samsung or Huawei mediapads just to start :slightly_smiling_face:
[2018-07-12 12:12:18]
ender :
If you want to save money there are others
[2018-07-12 12:12:47]
fredz :
Galaxy Tab S3?
[2018-07-12 12:14:48]
ender :
fredz, do you buy cars or drones the same way ? :slightly_smiling_face: You need a sorted list of stuff you want, a list of MUST HAVE and a list of NO GO and a budget. If you dont have that you cant buy anything at all IMO :wink:
[2018-07-12 12:33:49]
fredz :
here we go... he made his tutorial
[2018-07-12 12:33:49]
fredz :
<https://youtu.be/afAalkHOb0s>
[2018-07-12 12:35:06]
fredz :
what a let down
[2018-07-12 12:35:09]
fredz :
he "thinks" he's in FCC
[2018-07-12 12:35:11]
fredz :
didn't even measure it
[2018-07-12 12:35:45]
ender :
haha lolz
[2018-07-12 12:37:12]
fredz :
I can't believe this works!
[2018-07-12 12:37:17]
fredz :
let me try with my tool
[2018-07-12 12:37:49]
fredz :
I mean my meter
[2018-07-12 12:38:01]
ender :
DONT USE DA TOOL :wink:
[2018-07-12 12:39:12]
fredz :
lol what a wanker that guy must be
[2018-07-12 12:39:22]
fredz :
how the **** can he now it's in FCC
[2018-07-12 12:52:00]
aciid :
@ender must have some rresults from the nights that I have no recollection anymore
[2018-07-12 12:52:14]
ender :
?
[2018-07-12 12:52:25]
aciid :
localization is not affecting
[2018-07-12 12:52:29]
fredz :
OK, I Just tested it
[2018-07-12 12:52:30]
aciid :
should not
[2018-07-12 12:52:35]
fredz :
it's bullshit, it just stays on 12 dBm
[2018-07-12 12:52:37]
fredz :
as I thought
[2018-07-12 12:53:45]
ender :
IF he would do that on a Wifi only iPad and switches to US and switches WiFI off then theres a small chance it works as there is no WAY determining countrycode then.
[2018-07-12 12:53:49]
ender :
but ONLY then
[2018-07-12 12:54:15]
fredz :
nah, I tried this on a Wifi only iPad
[2018-07-12 12:54:19]
fredz :
same thing
[2018-07-12 12:54:36]
aciid :
well well my bluestacks emulator has no GPS
[2018-07-12 12:54:49]
aciid :
I selected en-US on android install
[2018-07-12 12:54:51]
aciid :
when it booted first time
[2018-07-12 12:55:02]
aciid :
but yeah no GPS
[2018-07-12 12:56:23]
ender :
I’ll take a quick look in the JEB code, sec
[2018-07-12 12:56:46]
ender :
(the path of deciding CC was clearly there)
[2018-07-12 12:57:44]
aciid :
well it must be baseline for something
[2018-07-12 12:58:23]
ender :
IMO cc codes can come from:
(1) GPS
(2) modem aka cellular Network
(3) Wifi CC
(4) Region in settings.
On an iPad Wifi you could disable 1 to 3 and be left with 4
[2018-07-12 12:58:33]
ender :
okay jeb loaded up, sec :slightly_smiling_face:
[2018-07-12 13:00:33]
ender :
okay, if no GPS cc it asks for “updateCountryCodeFromTelephoneNetwork”. looking there…
[2018-07-12 13:01:38]
ender :
it calls android getNetworkCountryIso
[2018-07-12 13:02:15]
fredz :
yeah in Android, but I wonder how it works in iOS, might not be the same
[2018-07-12 13:04:37]
fredz :
and, who knows, maybe it stays in CE mode until it gets a GPS signal, even if you bring your drone to FCC territory
[2018-07-12 13:04:56]
ender :
we dont know. Also we dont know what “getNetworkCountryIso” does if no phone network is there.
[2018-07-12 13:05:29]
ender :
I cant say anything at all as for me (as you know) not even the FakeGPS does something, my Anafi is locked, i hope in FCC :slightly_smiling_face:
[2018-07-12 13:05:41]
fredz :
they sent you a special CE only one
[2018-07-12 13:08:13]
ender :
nahhh a FCC Power+ version :slightly_smiling_face:
[2018-07-12 13:08:22]
aciid :
my humble opinion that may be untrue is that parrot does not have enough capital to have manfucaturing procedure for CE and FCC to be different
[2018-07-12 13:08:27]
aciid :
but I may be very wrong
[2018-07-12 13:08:42]
aciid :
DJI has atleast two
[2018-07-12 13:08:46]
aciid :
one for china and one for EU
[2018-07-12 13:08:53]
aciid :
i dont know if one xists for FCC aswell
[2018-07-12 13:09:04]
ender :
aciid, it would speak against the history (Bebop) and against economical & sales stuff
[2018-07-12 13:09:12]
ender :
Who wants a drone that cannot be fcc’ed
[2018-07-12 13:09:19]
ender :
and fredz CAN be convinced
[2018-07-12 13:09:27]
aciid :
yeah they probably has one that fits all
[2018-07-12 13:09:33]
aciid :
and try to be sneaky
[2018-07-12 13:09:35]
aciid :
and fail
[2018-07-12 13:18:23]
aciid :
anafi question, can you connect to the drone or rc with wifi
[2018-07-12 13:18:25]
aciid :
from laptop
[2018-07-12 13:20:33]
ender :
you can connect to drone via PC (or Smartdevice for that matter if you dont want to use RC)
[2018-07-12 13:20:59]
ender :
thats how i tried telnet / ssh / adb yesterday…
[2018-07-12 13:21:07]
ender :
--> connection to MacBook
[2018-07-12 13:42:28]
hostile :
yeah RNDIS seemed like it was enabled
[2018-07-12 13:44:49]
ender :
?
[2018-07-12 13:57:33]
aciid :
in anafi
[2018-07-12 13:57:37]
aciid :
wifi driver
[2018-07-12 13:57:45]
aciid :
operating system level
[2018-07-12 13:57:57]
aciid :
also my anafi did not come today, so friday it is
[2018-07-12 13:58:36]
aciid :
what kind of nutriets should I buy for tommorow to keep up the weekend
[2018-07-12 13:59:45]
aciid :
mppd has references that it can act as an AP
[2018-07-12 14:00:40]
ender :
anafi acts as AP, aye
[2018-07-12 14:00:44]
ender :
it just does
[2018-07-12 14:09:11]
aciid :
mppd boot branch wifi setup
```
080 STR.W R8, [R0] ; Store to Memory
080 ADD.W R3, R0, #0x1A8 ; Rd = Op1 + Op2
080 LDMIA.W R4, {R0-R2} ; Load Block from Memory
080 ADD R4, SP, #0x80+var_7C ; Rd = Op1 + Op2
080 STMIA.W R3, {R0-R2} ; Store Block to Memory
080 LDR R2, =(aScanRssi+0xE - 0x29CB8) ; Load from Memory
080 MOV R1, R4 ; Rd = Op2
080 LDR R0, =(aRoFactoryCount - 0x29CBA) ; Load from Memory
080 STR.W R9, [R5,#0x1B4] ; Store to Memory
080 ADD R2, PC ; ""
080 ADD R0, PC ; "ro.factory.country_lock"
080 BLX sys_prop_get ; Branch with Link and Exchange (immediate address)
080 LDRB.W R3, [SP,#0x80+var_7C] ; Load from Memory
080 CBZ R3, loc_29CCE ; Compare and Branch on Zero
```
[2018-07-12 14:10:37]
aciid :
drone stores parametrization which is passed to the controller on pairing
[2018-07-12 14:17:26]
ender :
yep
[2018-07-12 14:22:27]
aciid :
<https://bpaste.net/show/bb9d44f6b9c8> was too lazy to label but as interesting
[2018-07-12 14:38:11]
aciid :
@ender busy night coming?
[2018-07-12 14:38:30]
aciid :
wanna do a first? inspect the controller :smiley:
[2018-07-12 14:38:54]
ender :
As i said, no HW is touched until i decided in 9 days, sorry
[2018-07-12 14:39:06]
aciid :
ah sorry
[2018-07-12 14:39:08]
aciid :
I missed that
[2018-07-12 14:39:11]
aciid :
honestly
[2018-07-12 14:40:00]
ender :
:wink:
[2018-07-12 14:40:06]
ender :
np, as long as i know it :slightly_smiling_face:
[2018-07-12 14:40:41]
aciid :
from my viewpoint this is more interesting than dji drones from what I've gathered information so far
[2018-07-12 14:40:48]
aciid :
it looks like everything is tuneable
[2018-07-12 14:41:04]
aciid :
esc curves , gimbal curves
[2018-07-12 14:41:22]
aciid :
those are usually prettty deep in dji but they are loaded on start from rootfs on anafi
[2018-07-12 14:41:30]
aciid :
they can be tested on sphinx simulation first
[2018-07-12 14:41:34]
aciid :
so great platform
[2018-07-12 14:42:55]
ender :
yep, all is there at your hands :slightly_smiling_face:
[2018-07-12 14:43:07]
aciid :
anafi RC references found to USB working as MMC
[2018-07-12 14:43:34]
mr.vibez :
Just watching the FCC mod video now. Are you saying it's not in FCC mode?
[2018-07-12 14:44:05]
aciid :
in which video?
[2018-07-12 14:44:13]
ender :
the stupid one
[2018-07-12 14:44:14]
mr.vibez :
<https://www.youtube.com/watch?v=afAalkHOb0s&feature=youtu.be>
[2018-07-12 14:44:23]
aciid :
that probably doesn't work
[2018-07-12 14:44:35]
ender :
well fredz measured it not to work.
[2018-07-12 14:44:42]
ender :
So i trust fredz more then the vid.
[2018-07-12 14:44:49]
ender :
But that guy had a good range :slightly_smiling_face:
[2018-07-12 14:44:57]
aciid :
@fredz can you test tthe xcode thingy too even tho its unpractical, measure it that is
[2018-07-12 14:44:57]
ender :
amazing if its still CE
[2018-07-12 14:45:06]
fredz :
I don't have a Mac
[2018-07-12 14:45:12]
ender :
lolz
[2018-07-12 14:45:27]
ender :
i have a mac but my Anafi does not react to mere humans work :slightly_smiling_face:
[2018-07-12 14:45:42]
aciid :
i don't understand
[2018-07-12 14:45:46]
ender :
me neither
[2018-07-12 14:46:10]
ender :
i am saying: on my Anafi not even the “known pretty good” Fake GPS Android thing works
[2018-07-12 14:46:11]
fredz :
aciid: I just tested what he did in the video - it really doesn't work; he just is lucky with his range.
[2018-07-12 14:46:21]
ender :
as if my anafi is locked, dont know if on fcc or ce
[2018-07-12 14:47:18]
ender :
MAYBE i find the time to test it yet again in a less wifi crowded area to be 100% sure as i myself cant believe i have a stubborn anafi
[2018-07-12 14:47:39]
ender :
Thats why i quit app patching becuase if i dont see an effect it might just be because of my stubborn Anafi ?!?!
[2018-07-12 14:48:14]
ender :
afk
[2018-07-12 14:48:14]
mr.vibez :
If you need me to test anything, let me know
[2018-07-12 14:48:38]
mr.vibez :
That xml change didn't affect range
[2018-07-12 14:48:40]
fredz :
it would be good if someone with a RF meter tests it, just like me, to verify my results
[2018-07-12 14:48:55]
fredz :
and someone who physically modded his remote
[2018-07-12 14:49:04]
mr.vibez :
Afraid only way I could do that is using the wifianalzer app :disappointed:
[2018-07-12 14:49:11]
ender :
you wont find any person beside yourself atm fredz
[2018-07-12 14:49:29]
fredz :
y'all scared to drill the controller
[2018-07-12 14:49:43]
aciid :
Anafi Controller has references that it reads wifi SSID baseband country bytes.
[2018-07-12 14:49:45]
aciid :
RC
[2018-07-12 14:49:56]
mr.vibez :
I am because at the moment it will be going back
[2018-07-12 14:49:57]
ender :
Believe me (from DJI and others) if the effect is worth the effort it shows up on RF-Meter with Antenna as well if you keep things stable.
[2018-07-12 14:50:10]
aciid :
so heres how i figure it will go
[2018-07-12 14:50:12]
fredz :
you mean on wifianalyzer
[2018-07-12 14:50:30]
ender :
wifianalyzer is harder to see, agreed
[2018-07-12 14:54:43]
aciid :
phone has parameters of country ( **Unknown methods** )
phone uses ARSDK to connect to controller which is connected to drone
once connected drone populates "paired" RC "/etc/manage_drones"(on RC) is populated by drones settings <- verified via RC disassembly
RC finishes pairing and drone pulls settings set by phone, Drone's country is set by phones country property <- verified via APK disassembly, it uses ARSDK for this
RC monitors Drone link via wifid <- RC disassembles country packet byte from 802.11 RFC spec. and uses that as reference to COUNTRY
[2018-07-12 14:55:59]
ender :
I do not know if you oversimplified but technically “phone uses ARSDK to connect to controller which is connected to drone ( simplified )”
[2018-07-12 14:56:36]
ender :
to be clear, there is (normally) no direct connection phone <---> drone
[2018-07-12 14:56:38]
mr.vibez :
Not sure if you guys noticed the original fake gps video but it seems the drone can switch between FCC & CE mode mid flight?
[2018-07-12 14:56:50]
ender :
yes
[2018-07-12 14:56:56]
aciid :
should we start piratepad or something for this information soon
[2018-07-12 14:56:59]
aciid :
i have 0% notes
[2018-07-12 14:57:12]
aciid :
I just work as I go since I don't have the drone yet
[2018-07-12 14:57:14]
aciid :
intuition
[2018-07-12 15:01:56]
aciid :
<https://etherpad.net/p/5RGeDG7hXV> if this idea sucks lets back off
[2018-07-12 15:01:58]
aciid :
but ill start dumping
[2018-07-12 15:10:14]
mr.vibez :
Just testing the fake gps app, my home position keeps flicking between my true home and the fake home
[2018-07-12 15:15:32]
mr.vibez :
Ah I had to turn off wifi location services
[2018-07-12 15:20:51]
mr.vibez :
Just to add a 2nd confirmation, seems fake gps along shows no difference in wifianalzer
[2018-07-12 15:21:23]
mr.vibez :
This is with the drone not having gps lock
[2018-07-12 15:25:38]
ender :
Lee, are you talking android ?
[2018-07-12 15:26:23]
mr.vibez :
yep
[2018-07-12 15:26:31]
ender :
damn…
[2018-07-12 15:27:16]
mr.vibez :
It could be using my sim for geo location
[2018-07-12 15:27:36]
mr.vibez :
Or remembered the last geo location the drone was in
[2018-07-12 15:28:16]
mr.vibez :
It certainly isn't using GPS/wifi of the phone
[2018-07-12 15:37:33]
ender :
Oh heck. i start thinking that the RC maybe adjusts power down if the Anafiis so close and thats why our drones seem “locked”. Fredz practically cur of one Antenna by attaching the RF meter to it.
[2018-07-12 15:37:51]
ender :
fredz: was it hard to open the controlelr so see the ufl plugs ?
[2018-07-12 15:37:59]
ender :
Danger of damaging the whole thing ?
[2018-07-12 15:38:15]
ender :
I dont have 2 left thumbs, i modded all 3 dji RC’s just fine, what do you think ?
[2018-07-12 15:38:41]
ender :
I would just attach the RF meter to one UFL (do you use right or left antenna), NOT drilling stuff :slightly_smiling_face:
[2018-07-12 15:38:50]
ender :
@fredz so you get notified :stuck_out_tongue:
[2018-07-12 15:44:46]
ender :
Freeeedz ? @aciid,i see my resolve crumbling not to touch that darn thing :slightly_smiling_face:
[2018-07-12 15:45:24]
aciid :
oh a new message FOR ME
[2018-07-12 15:46:00]
aciid :
@ender how much have you tinkered with previous drones in firmware alone?
[2018-07-12 15:46:15]
aciid :
I'd say this is an interesting oppoturnity, keep the drone
[2018-07-12 15:46:35]
ender :
i always mod soft & hardware if i can
[2018-07-12 15:46:54]
aciid :
I'm just saying youll enjoy it if you have enjoyed other drones fw tinkering
[2018-07-12 15:47:05]
aciid :
from what I've seen almost everything is tuneable at this fw
[2018-07-12 15:47:06]
ender :
Because i started with DIY (Arduino, KK, Pixhawk) and then coudnt believe how imprisoned you are with RTF
[2018-07-12 15:47:15]
fredz :
No it’s so easy to open. Just he 6 screws on the back and it pops out
[2018-07-12 15:47:23]
fredz :
Standard ufl connectors inside
[2018-07-12 15:47:32]
aciid :
also we are headfirst this group with this knowledgement. it would be stupid for you to drop out in a week like "bah parrot"
[2018-07-12 15:47:44]
ender :
okay, hope to do it after dinner. Yeah, still have some pigtails left.
[2018-07-12 15:47:55]
aciid :
ill be taking DSLR pictures once mine arrives
[2018-07-12 15:48:00]
fredz :
Both ufl outputs have the same signal and power
[2018-07-12 15:48:01]
aciid :
hopefully tommorow
[2018-07-12 15:48:23]
ender :
Damn, going to hloiday tomorrow, work not finished, need to pack and then this, you kill me guys (hopefully before my wife does)
[2018-07-12 15:48:45]
ender :
:stuck_out_tongue:
[2018-07-12 15:50:07]
aciid :
@fredz hows your weekend looking? if I may ask
[2018-07-12 15:54:45]
ender :
I WILL have Internet most of the time and take my Anafi with me,so i may not be completely useless :slightly_smiling_face:
[2018-07-12 15:56:10]
fredz :
I’ll take it to
[2018-07-12 15:57:37]
aciid :
parrot still in northern franche
[2018-07-12 15:57:46]
aciid :
this courier service chosen by parrot is ajoke
[2018-07-12 15:58:58]
fredz :
French quality!
[2018-07-12 16:01:49]
ender :
Yep Chronopost…
[2018-07-12 16:02:08]
aciid :
I hope that it's in transit their office is next to an airfield
[2018-07-12 16:19:04]
fredz :
what country does it have to go to @aciid
In the Chronopost tracking, you will see another tracking number appear in comments GEO....
You can use this number (numeric) on DPD tracking, as Chronopost is part of DPD
[2018-07-12 16:20:31]
fredz :
Numéro partenaire : GEO/0467106xxxE
Enter this number on <https://extranet.dpd.de/status/en_GB/parcel/>
[2018-07-12 16:20:53]
fredz :
(just the number starting with a 0)
[2018-07-12 16:21:29]
ender :
:flag-fi:
[2018-07-12 16:22:19]
fredz :
If it goes to UK you can also enter that same number on [www.dpdlocal.co.uk](http://www.dpdlocal.co.uk)
[2018-07-12 16:31:02]
aciid :
@aciid uploaded a file: [Pasted image at 2018-07-12, 7:30 PM](https://dji-rev.slack.com/files/U6AD6A1QU/FBPMYEEF7/pasted_image_at_2018_07_12_07_30_pm.png)
[2018-07-12 16:32:12]
fredz :
Are you in UK?
[2018-07-12 16:32:33]
fredz :
If so, expect a UK scan in Oldbury tonight and delivery maybe tomorrow
[2018-07-12 16:32:41]
aciid :
finland
[2018-07-12 16:32:44]
fredz :
Oh
[2018-07-12 16:32:50]
aciid :
im scared
[2018-07-12 16:32:56]
fredz :
That will take much longer
[2018-07-12 16:33:02]
aciid :
i should have ordered way earlier
[2018-07-12 16:33:05]
fredz :
Takes 3-4 working days from Chilly
[2018-07-12 16:33:15]
fredz :
Why didn’t you get it from Fnac or Amazon?
[2018-07-12 16:34:50]
fredz :
DPD doesn’t do air. They only do road.
[2018-07-12 16:38:34]
aciid :
what in the fuck
[2018-07-12 16:38:41]
aciid :
i ordered from [parrot.com/eu](http://parrot.com/eu)
[2018-07-12 16:38:51]
fredz :
Yeah DPD is a road carrier
[2018-07-12 16:39:02]
fredz :
They generally make movements at night
[2018-07-12 16:39:06]
aciid :
because people told me [amazon.de/fr](http://amazon.de/fr) usually is out of stock even tho it says in stock and premium
[2018-07-12 16:39:26]
fredz :
From France it’ll go to Netherlands, then to Denmark, then to Sweden and so on
[2018-07-12 16:39:36]
fredz :
I know as we use them a lot for Scandinavia
[2018-07-12 16:40:02]
aciid :
im so ******d
[2018-07-12 16:40:06]
fredz :
Still 4-5 working days for Finland should be doable
[2018-07-12 16:40:37]
fredz :
You can use the same tracking number on the PostNord site as they deliver in Finland
[2018-07-12 16:41:04]
aciid :
they told me 1-3 ;_;
[2018-07-12 16:41:22]
aciid :
and no retailers carry anafi yet
[2018-07-12 16:41:25]
fredz :
Wait let me find you a tracking number to Finland so you can compare
[2018-07-12 16:41:27]
aciid :
also i wanted the extra battery
[2018-07-12 16:42:47]
fredz :
Try this one 05395000017477
[2018-07-12 16:42:56]
fredz :
On a pc not on a mobile
[2018-07-12 16:43:25]
aciid :
a week
[2018-07-12 16:43:26]
aciid :
omg
[2018-07-12 16:43:48]
aciid :
im going to miss out so bad
[2018-07-12 16:43:51]
fredz :
Yes and we are closer even than France
[2018-07-12 16:46:07]
fredz :
Well it did Netherlands to Vantaa in 2.5 days and then Vantaa to Ouli in 3 days
[2018-07-12 16:46:19]
fredz :
Oulu
[2018-07-12 16:46:54]
aciid :
i live close to the capital hopefuly they can give me achange to fetch it myself
[2018-07-12 16:46:59]
aciid :
50km
[2018-07-12 16:47:41]
fredz :
No they insist on first testing themselves once
[2018-07-12 16:47:51]
fredz :
Only then they send it to a post office for pick up
[2018-07-12 16:48:16]
fredz :
But maybe you’ll have it on Monday already as they also drive in the weekends
[2018-07-12 16:48:35]
aciid :
well looks like weekend is going on IDA then
[2018-07-12 16:48:41]
aciid :
and maybe ARM emulation if ill find a way
[2018-07-12 17:12:05]
aciid :
ill load the mpp3 rootfs to my raspberry pi2
[2018-07-12 17:13:03]
aciid :
stupid but may just work
[2018-07-12 17:18:11]
ender :
the bebop 2 binaries were widely compatible with RPI, AYE SIR
[2018-07-12 17:18:49]
ender :
Okay, i took apart the RC (what a babies job compared to DJI) and tried my luck with RF Meter & Fake GPS. NO LUCK. Values did not spike
[2018-07-12 17:19:05]
fredz :
Baby job indeed
[2018-07-12 17:19:13]
fredz :
What values do you have
[2018-07-12 17:20:29]
ender :
oh somewhat around -12 but i did not care to adjust to the changed ATT so thats not the point. we are searching for a 6dB jump and there was none
[2018-07-12 17:21:07]
ender :
neither up nor down
[2018-07-12 17:24:06]
mr.vibez :
DId your home point move to the fake gps location?
[2018-07-12 17:24:51]
aciid :
oh nice ida ships remote dbgsrv's for arm i can add that to the raspi too
[2018-07-12 17:24:54]
ender :
yes of course :slightly_smiling_face:
[2018-07-12 17:25:14]
mr.vibez :
Just checking because if I had wifi on, it picked up on that instead
[2018-07-12 17:25:24]
ender :
whoa ?
[2018-07-12 17:26:22]
mr.vibez :
I had to change location services to GPS only, not wifi/cellular/gps
[2018-07-12 17:26:35]
ender :
Okay, thats my Default
[2018-07-12 17:26:40]
mr.vibez :
:slightly_smiling_face:
[2018-07-12 17:27:56]
ender :
@fredz: Just to be sure, which RP-SMA did you use for measuring ? I assume its 2x2 MIMO like on the Bebops so it does not matter but ANYWAYS :slightly_smiling_face: And what was your average dB value on FCC (and CE) ?
[2018-07-12 17:32:18]
fredz :
The pigtails we always use ...
[2018-07-12 17:32:38]
fredz :
12 dBm for CE and 19 dBm for FCC
[2018-07-12 17:32:45]
ender :
:slightly_smiling_face: I meant left or right antennae
[2018-07-12 17:35:08]
fredz :
Both have exactly same values
[2018-07-12 17:35:14]
ender :
Did you try ?
[2018-07-12 17:35:19]
fredz :
Yes
[2018-07-12 17:35:24]
ender :
:+1:
[2018-07-12 17:35:34]
ender :
Sorry for my Paranoia but i dont get this :slightly_smiling_face:
[2018-07-12 17:35:38]
fredz :
Dji remotes have totally different values on each
[2018-07-12 17:35:45]
ender :
i know thats why i ask :slightly_smiling_face:
[2018-07-12 17:36:18]
ender :
enough space in there for my tiny 1W boosters anyways :slightly_smiling_face:
[2018-07-12 17:36:35]
fredz :
Sunhans?
[2018-07-12 17:36:54]
ender :
nope, DIY from base PCB
[2018-07-12 17:37:03]
ender :
waste of time but tiny :slightly_smiling_face:
[2018-07-12 17:37:03]
fredz :
Nice!
[2018-07-12 17:37:15]
ender :
Had too much time at hand at that time
[2018-07-12 17:38:01]
ender :
A guy looked at the stock antennae and reported they are not bad, i wonder how your regular circular polarized really stack up against them…
[2018-07-12 17:38:31]
ender :
parabolic design, therefore already directional but mildly (like i prefer it)
[2018-07-12 17:38:40]
fredz :
You have a source?
[2018-07-12 17:38:46]
ender :
no pics sadly but if the thing is as easy to open.
[2018-07-12 17:38:55]
fredz :
Who was it?
[2018-07-12 17:39:06]
ender :
He just said but hes a guy i learned to trust. in [drohnenforum.de](http://drohnenforum.de)
[2018-07-12 17:39:10]
ender :
biber
[2018-07-12 17:39:14]
fredz :
I’m using this one <https://www.maxxuav.eu/collections/dji-mavic-pro-1/products/4hawks-raptor-sr-range-extender-mavic-pro-spark>
[2018-07-12 17:39:24]
ender :
one of the mods, an old Bebop companion
[2018-07-12 17:39:30]
fredz :
Don’t think this is CP though
[2018-07-12 17:39:59]
ender :
oh i mixed that up, i always go for the circ-pol, learned to love them…
[2018-07-12 17:40:11]
ender :
aka “science-fiction-movie-bras”
[2018-07-12 17:40:45]
fredz :
still, it doesn't really matter, as that won't solve your FCC/CE switch problem
[2018-07-12 17:41:16]
ender :
nope, i am clueless. I get another Anafi for a friend next week (wehn i am not home), will compare to it.
[2018-07-12 17:41:37]
fredz :
I'll do the test again later tonight and try to record it for you
[2018-07-12 17:41:39]
fredz :
by video
[2018-07-12 17:41:41]
ender :
But Lee was also unable to see a difference. Albeit harder to see with WiFIAnalyzer app.
[2018-07-12 17:42:05]
ender :
Or did you feel you could safely spot it with the App on another smartdevice ?
[2018-07-12 17:42:26]
ender :
i assume you also have Anafi FW 1.0.0 and controller fw 1.0.5, right :slightly_smiling_face:
[2018-07-12 17:43:20]
fredz :
Let me check
[2018-07-12 17:43:27]
fredz :
what firmware does it have printed on the remote
[2018-07-12 17:43:44]
fredz :
at the back
[2018-07-12 17:43:53]
fredz :
mine says FW 1.0.1
[2018-07-12 17:50:09]
mr.vibez :
Ok I went out and flew using the gps hack, no difference at all. App complained at me the drone didn't have enough battery to make it home from new york to the UK lol
[2018-07-12 17:50:39]
ender :
hehe, fredz you have to check in the app :wink:
[2018-07-12 17:50:53]
ender :
@mr.vibez: lol
[2018-07-12 17:50:54]
fredz :
I know elder, but it’s good to know what’s printed there too
[2018-07-12 17:50:58]
fredz :
Ender
[2018-07-12 17:51:04]
ender :
i like elder :slightly_smiling_face:
[2018-07-12 17:51:11]
fredz :
Maybe there are different hardware revisions or so
[2018-07-12 17:51:24]
ender :
Naaaaaaaahh dont freak me out :slightly_smiling_face:
[2018-07-12 17:51:32]
ender :
Well time will solve this riddle…
[2018-07-12 17:58:17]
aciid :
I wont get over my depression this weekend
[2018-07-12 17:58:19]
aciid :
I need a goal
[2018-07-12 18:02:15]
ender :
so sorry for you aciid, i HATE it when toys dont arrive on time
[2018-07-12 18:02:43]
ender :
@fredz: you said you also did the trick with other Android devices, right ?
[2018-07-12 18:03:07]
fredz :
Yes I’ll try again in a bit
[2018-07-12 18:03:53]
ender :
do you have an android tablet wifi only ? So there is no influence of sim provider/network ?
[2018-07-12 18:06:01]
fredz :
Sure
[2018-07-12 18:06:14]
ender :
may try with it ?!
[2018-07-12 18:20:38]
aciid :
interesting that the debuggable property is switched with having a correct certificate in sd-card.
but where does it logs errors for the Parrot Developer if the certficiate fails
[2018-07-12 18:20:43]
aciid :
does it write the errors to sd-card too?
[2018-07-12 18:21:10]
aciid :
@ender want to try and throw a random .crt file to your anafi sdcard and see what happens?
[2018-07-12 18:21:47]
mr.vibez :
I can try
[2018-07-12 18:22:24]
aciid :
<https://bpaste.net/show/0c30adfdfbf9> pubkey auth function from anafi for authenticating developers via crt files
[2018-07-12 18:24:37]
mr.vibez :
does it need a specific filename?
[2018-07-12 18:25:29]
aciid :
I dont think so
[2018-07-12 18:25:39]
aciid :
but it may have all kinds of verifications too
[2018-07-12 18:26:01]
aciid :
judging from the disassebmly it may need correct checksum :E
[2018-07-12 18:26:22]
aciid :
i dont know how that is possible may be they have double redunant checking one certificate per checksum if checksum matches they match pub key
[2018-07-12 18:27:59]
mr.vibez :
Nothing written to the sd card as far as I can see
[2018-07-12 18:28:37]
aciid :
<https://github.com/Parrot-Developers/ulog> logging wrapper used everywhere
[2018-07-12 18:28:41]
aciid :
ok
[2018-07-12 18:28:45]
aciid :
thanks for trying @mr.vibez
[2018-07-12 18:28:59]
mr.vibez :
maybe it logs to console
[2018-07-12 18:29:19]
aciid :
yeah but this is before debuggable is 1
[2018-07-12 18:29:36]
aciid :
what kind of ip does the drone lease to you when you connect to wifi
[2018-07-12 18:29:42]
aciid :
and what does the drone have?
[2018-07-12 18:29:59]
aciid :
usbnet.sh has additional ip
[2018-07-12 18:30:01]
aciid :
192.168.43.1
[2018-07-12 18:30:09]
aciid :
it creates that
[2018-07-12 18:30:23]
mr.vibez :
Not sure how I could tell
[2018-07-12 18:30:42]
aciid :
@fredz did you say rndis earlier=?
[2018-07-12 18:30:44]
aciid :
or was it hostile
[2018-07-12 18:31:32]
fredz :
Not me
[2018-07-12 18:31:48]
aciid :
```
# USBnet interface :
ACTION=="add", \
KERNEL=="rndis*", \
SUBSYSTEM=="net", \
NAME="rndis0" \
RUN+="usbnet.sh add rndis0"
ACTION=="add", \
KERNEL=="usb*", \
SUBSYSTEM=="net", \
NAME="usb0" \
RUN+="usbnet.sh add usb0"
ACTION=="remove", \
KERNEL=="rndis0", \
SUBSYSTEM=="net", \
RUN+="usbnet.sh remove rndis0"
ACTION=="remove", \
KERNEL=="usb0", \
SUBSYSTEM=="net", \
RUN+="usbnet.sh remove usb0"
```
[2018-07-12 18:32:17]
aciid :
hah I know this
[2018-07-12 18:32:38]
aciid :
usb-ethernet
[2018-07-12 18:37:21]
ender :
Hi guys, im back :slightly_smiling_face:
[2018-07-12 18:37:28]
aciid :
i found a way in
[2018-07-12 18:37:29]
ender :
hostile said rndis :slightly_smiling_face:
[2018-07-12 18:37:34]
ender :
up !
[2018-07-12 18:37:37]
aciid :
it uses usbc-ethernet
[2018-07-12 18:37:45]
aciid :
that apple thing
[2018-07-12 18:37:53]
aciid :
depending is the usb only usb port?
[2018-07-12 18:37:56]
aciid :
in the battery
[2018-07-12 18:38:08]
aciid :
if not then its maybe something other usb-ethernet
[2018-07-12 18:38:11]
aciid :
u know dongle anyway
[2018-07-12 18:38:14]
ender :
yes as far as we know and hostile was pretty far in dissecting
[2018-07-12 18:38:34]
ender :
so are you speaking of usb ethernet adapter or of network via usb rndis ?
[2018-07-12 18:38:48]
aciid :
networking via usb is common with all android devices
[2018-07-12 18:39:00]
ender :
thats why i am asking :slightly_smiling_face:
[2018-07-12 18:39:11]
ender :
as you said “apple thing”
[2018-07-12 18:39:25]
aciid :
well if normal usb-c cable to computer doesnt spawn a networking interface
[2018-07-12 18:39:33]
aciid :
then it's not the "normal adb" way
[2018-07-12 18:39:47]
ender :
i dontthink so bit i can try if its amulti-headed device
[2018-07-12 18:40:08]
aciid :
:\bin\freeflight\parakeets\linux\usr\bin\rndisoff.sh:
2 rm /dev/cfg/usb_gadget/g1/configs/c.1/rndis.usb0
3 rm -rf /dev/cfg/usb_gadget/g1/functions/rndis.usb0/ &>/dev/null
4: modprobe -r usb_f_rndis u_ether
[2018-07-12 18:40:15]
ender :
ok
[2018-07-12 18:41:04]
fredz :
@ender I'm trying it now on a Galaxy Tab S3
[2018-07-12 18:41:04]
aciid :
just checked for u_ether that is the driver that supports usb-dongles on linux
[2018-07-12 18:41:08]
fredz :
unrooted
[2018-07-12 18:41:13]
ender :
k, wifi only ?
[2018-07-12 18:41:16]
fredz :
yes
[2018-07-12 18:41:36]
ender :
okay so we ARE talking about ethernet usb adapter ? i got tons of those
[2018-07-12 18:41:56]
aciid :
yes
[2018-07-12 18:41:59]
aciid :
also I haven a IP for you
[2018-07-12 18:42:10]
ender :
ha and you assume its the ..43. range then ?
[2018-07-12 18:42:12]
aciid :
192.168.43.1 is the bird ip when you connect usb-dongel
[2018-07-12 18:42:39]
ender :
sec, gotta grab at least three or four of them usb ethernet dongles.
[2018-07-12 18:42:47]
aciid :
isnt anafi usb-c?
[2018-07-12 18:42:52]
aciid :
but yeah
[2018-07-12 18:42:55]
aciid :
try many
[2018-07-12 18:43:07]
ender :
i got an usb-c OTG adapter…
[2018-07-12 18:43:16]
aciid :
that it should be
[2018-07-12 18:43:40]
aciid :
i promise ill stop bugging people if 192.168.43.1 wont answer xD
[2018-07-12 18:44:24]
fredz :
@fredz uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6179MS6R/FBPDMN29J/image_from_ios.jpg)
[2018-07-12 18:44:29]
fredz :
can you see that image, @ender
[2018-07-12 18:44:51]
fredz :
that's CE, 12.9 dBM and about -28dBm on the Wifianalyzer
[2018-07-12 18:44:52]
ender :
sure enough
[2018-07-12 18:44:54]
ender :
13 dB
[2018-07-12 18:45:10]
ender :
and with fakr gps off POOF ?
[2018-07-12 18:45:18]
fredz :
tha's off
[2018-07-12 18:45:22]
fredz :
now I'm putting it on
[2018-07-12 18:45:26]
ender :
okay aciid, first adapter does not seem to be supported
[2018-07-12 18:45:37]
ender :
no lights.
[2018-07-12 18:45:51]
aciid :
connected between both ends
[2018-07-12 18:45:54]
aciid :
kay
[2018-07-12 18:45:56]
ender :
?
[2018-07-12 18:46:03]
ender :
otherwise it would be wifi :slightly_smiling_face:
[2018-07-12 18:46:03]
aciid :
i mean cat is connected?
[2018-07-12 18:46:07]
ender :
yep
[2018-07-12 18:46:29]
fredz :
WifiAnalyzer is very messy. Sometimes I have -23 dBm sometimes -28 dbM same position and CE
[2018-07-12 18:46:35]
fredz :
now I even have -30 dBm
[2018-07-12 18:46:57]
fredz :
And voila now it's in FCC
[2018-07-12 18:47:01]
mr.vibez :
@fredz I had the same issue with the windows version too
[2018-07-12 18:47:06]
fredz :
immediately I get 19 dBm on the RF reader
[2018-07-12 18:47:18]
ender :
you kill me fredz
[2018-07-12 18:47:22]
fredz :
wifianalyzer doesn't even budget, it says -26 dBm
[2018-07-12 18:47:31]
fredz :
so wifianalyzer basically gives no good indication
[2018-07-12 18:47:37]
ender :
k
[2018-07-12 18:47:45]
fredz :
now it's -38 and one second later it's -24
[2018-07-12 18:47:47]
aciid :
boot the drone with the usb dongle inserted
[2018-07-12 18:47:53]
aciid :
its in init.d script
[2018-07-12 18:47:53]
ender :
k
[2018-07-12 18:48:12]
ender :
will be offline as i will change my ip to fixed 192.168.43.100
[2018-07-12 18:48:13]
aciid :
<https://bpaste.net/show/6a2f47738a31> script here
[2018-07-12 18:48:19]
ender :
cya guys
[2018-07-12 18:48:23]
aciid :
y
[2018-07-12 18:48:36]
fredz :
@fredz uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6179MS6R/FBQTQFE94/image_from_ios.jpg)
[2018-07-12 18:48:41]
fredz :
let me now try the other port
[2018-07-12 18:48:58]
fredz :
exactly same value
[2018-07-12 18:49:15]
aciid :
port?
[2018-07-12 18:49:26]
aciid :
ah antenna
[2018-07-12 18:49:34]
fredz :
yeah antenna connector lol
[2018-07-12 18:49:45]
fredz :
and let me check my versions @ender
[2018-07-12 18:50:22]
fredz :
software 1.0.0
[2018-07-12 18:50:42]
fredz :
and 1.0.5 on RC
[2018-07-12 18:50:55]
fredz :
what more can we do :slightly_smiling_face:
[2018-07-12 18:51:20]
aciid :
start trying to push updates?
[2018-07-12 18:51:48]
fredz :
@ender I force quit FF6 now and then I stopped FakeGPS to see what happens
[2018-07-12 18:51:54]
fredz :
will it stay in FCC or not...
[2018-07-12 18:52:16]
fredz :
place your bets
[2018-07-12 18:52:33]
mr.vibez :
It wont
[2018-07-12 18:52:43]
fredz :
it does of course stay in FCC, because FF6 is quit
[2018-07-12 18:52:55]
fredz :
aha!
[2018-07-12 18:52:58]
mr.vibez :
how do you know its fcc?
[2018-07-12 18:52:58]
fredz :
no it does NOT!
[2018-07-12 18:53:04]
fredz :
I have a RF meter, see pics above
[2018-07-12 18:53:20]
mr.vibez :
Ah I see
[2018-07-12 18:53:24]
fredz :
after about 1 Minute, it goes back to CE, @ender that's very odd!
[2018-07-12 18:53:36]
fredz :
so even without FF6 running it does this, (but the cable is still connectedà
[2018-07-12 18:53:41]
mr.vibez :
Yeah the YT video in FB showed that it drops back down
[2018-07-12 18:54:10]
fredz :
and ta-da when I put fakegps back on WITH FF6 FORCE QUIT, it switches to FCC immediately within a second!
[2018-07-12 18:55:23]
fredz :
and again, I disabled fakegps, it takes 20-30 seconds before it switches back to CE
[2018-07-12 18:55:26]
fredz :
all without FF6 running
[2018-07-12 18:55:56]
fredz :
so the theory that it needs FF6 for location is somehow wrong, unless there is something resident in memory
[2018-07-12 18:56:30]
mr.vibez :
Very strange
[2018-07-12 18:56:48]
aciid :
ender taking suspiciously long, i wonder if its a good thing
[2018-07-12 18:56:53]
mr.vibez :
Does that mean the drone has a direct connection to the tablet?
[2018-07-12 18:57:42]
fredz :
did the test again without FF6. From CE to FCC it takes 0 seconds, from FCC to CE it takes 10 seconds
[2018-07-12 18:57:51]
fredz :
which is consistent with the movie I made a day ago
[2018-07-12 18:58:27]
fredz :
this is wizardry stuff
[2018-07-12 18:58:35]
fredz :
how can FF6 detect this if it's not running?
[2018-07-12 18:58:46]
mr.vibez :
Exactly
[2018-07-12 18:58:48]
aciid :
arsdk
[2018-07-12 18:59:08]
fredz :
ok now I'm uninstalling FF6 to see what happens
[2018-07-12 18:59:47]
fredz :
with FF6 uninstalled nothing happens, it just stays CE even when switched to USA using FakeGPS
[2018-07-12 18:59:53]
fredz :
so definitely something is resident there
[2018-07-12 19:00:18]
fredz :
which makes sense and invalidates my theory that FF6 isn't needed for this.
So Ender, although not present, was right about this one
[2018-07-12 19:00:24]
mr.vibez :
Did it behave the same on a phone as it did with a tablet?
[2018-07-12 19:00:45]
fredz :
yes on all the devices I tried, it behalved exactly the same
[2018-07-12 19:01:10]
fredz :
with sim card, without sim card, with US card etc
[2018-07-12 19:01:16]
mr.vibez :
ok
[2018-07-12 19:01:24]
fredz :
but that's just me of course
[2018-07-12 19:01:33]
fredz :
still the WifiAnalyzer thing definitely doesn't work well
[2018-07-12 19:01:37]
fredz :
a real RF meter is needed.
[2018-07-12 19:01:45]
ender :
nope :disappointed:
[2018-07-12 19:01:56]
ender :
i tried 4 different USB2Eth Adapters, i swear i have 2 more but cannot find them ATM
[2018-07-12 19:02:08]
mr.vibez :
Is the drone getting a gps lock when you do the testing? @fredz
[2018-07-12 19:03:32]
ender :
@aciid: no chance of seeing the needed chipset ?
[2018-07-12 19:03:43]
aciid :
probably in cache files
[2018-07-12 19:03:45]
fredz :
I tried with and without gps lock, no difference - it seems it only takes into account the phone's location for FCC/CE
[2018-07-12 19:08:24]
aciid :
this is jsut silly the device from kenstington loaded into the kernel
[2018-07-12 19:08:25]
aciid :
2041 SlimBlade Trackball
[2018-07-12 19:08:52]
aciid :
belkin 3201 F1DF102U/F1DG102U Flip KVM
[2018-07-12 19:09:03]
aciid :
ton of apple stuff
[2018-07-12 19:09:09]
aciid :
ill try to look for the usb eth things
[2018-07-12 19:09:15]
aciid :
byut these are very specific
[2018-07-12 19:09:22]
aciid :
these are no default values in kernel menu
[2018-07-12 19:13:21]
aciid :
anything by genesys is allowed <https://usb-ids.gowdy.us/read/UD/05e3>
[2018-07-12 19:20:34]
aciid :
im out of idewas
[2018-07-12 19:24:04]
ender :
no usb2eth from genesys afaics
[2018-07-12 19:24:34]
aciid :
yeah those were all hid
[2018-07-12 19:24:48]
aciid :
the file is modules.symbols
[2018-07-12 19:24:58]
aciid :
the content is so strange
[2018-07-12 19:25:03]
aciid :
why only certain devices?
[2018-07-12 19:25:17]
aciid :
why bitmasking certain drivers?
[2018-07-12 20:49:44]
aciid :
@aciid uploaded a file: [well this parrot sphinx is interesting](https://dji-rev.slack.com/files/U6AD6A1QU/FBR13SPV4/image.png)
[2018-07-12 20:52:12]
ender :
i havent a clue,what is it about (or tell me to google it)
[2018-07-12 20:53:31]
aciid :
<http://developer.parrot.com/docs/sphinx/firststep.html> the app that was first for parrot devs now opensource
[2018-07-12 20:53:47]
aciid :
drone simulator that works with custom models and google maps and uhh custom models and maps
[2018-07-12 20:53:51]
aciid :
and can load data files
[2018-07-12 20:54:04]
ender :
ah cool
[2018-07-12 20:54:13]
aciid :
<https://www.youtube.com/watch?v=s_SBLeXRrhE>
[2018-07-12 20:54:24]
aciid :
in this demo they fly one set of data with real drone and simulation
[2018-07-12 20:54:28]
aciid :
its very very close
[2018-07-12 20:54:39]
aciid :
old version
[2018-07-12 20:54:51]
aciid :
hostile said that anafi should work on this simulator
[2018-07-12 20:55:51]
ender :
woah, this is way complex, nice (browsing on the webpage)
[2018-07-12 20:56:15]
aciid :
works with skycontroller
[2018-07-12 20:56:22]
aciid :
the site is old
[2018-07-12 20:56:23]
ender :
gives one trust in their firmware,wonder why its not as rock solid as the DJI Air :stuck_out_tongue:
[2018-07-12 20:56:25]
aciid :
theres is no sphinx thing
[2018-07-12 20:56:36]
aciid :
well parrot is no meme company
[2018-07-12 20:56:40]
aciid :
people think its a toy company
[2018-07-12 20:57:01]
ender :
nope, they come from expensive bluetooth hands free stuff.
[2018-07-12 20:57:08]
ender :
toys are just a recent spinoff
[2018-07-12 20:59:24]
aciid :
[Msg] Drone bebop2[c45757cc20bd9aedc02a9bf14a0d5fd562a4f9cb] loaded
[Msg] WEB DASHBOARD IS ACCESSIBLE at <http://localhost:9002>
[Err] [[Machine.cc:959](http://Machine.cc:959)] Failed to start bebop2 : net.hook/assign failed.
[Err] [[Machine.cc:966](http://Machine.cc:966)] Probable cause for this error: the requested stolen interface (wlan0:eth0:192.168.42.1/24) does not exist
[2018-07-12 20:59:27]
aciid :
not even kidding
[2018-07-12 20:59:38]
aciid :
sphinx creates wifi like parrot drone
[2018-07-12 20:59:42]
aciid :
so the controller can connect
[2018-07-12 20:59:51]
aciid :
omg omg
[2018-07-12 21:00:03]
aciid :
this simulated backend could have breakpoints
[2018-07-12 21:00:09]
aciid :
and connect skycontroller
[2018-07-12 21:00:11]
aciid :
the realdeal
[2018-07-12 21:00:16]
aciid :
and inject shellcode
[2018-07-12 21:18:56]
ender :
yep read that nearly at first, very cool thing
[2018-07-13 01:12:14]
aciid :
What was the one file we needed to work towards finding? Extension was pld or something
[2018-07-13 01:12:27]
aciid :
Hostile mentioned it
[2018-07-13 01:13:28]
aciid :
It was anafi specific api dictionary probably that was used between phone and rc comms
[2018-07-13 06:19:58]
ender :
Mornin… its the *.plf files
[2018-07-13 06:22:59]
aciid :
Rip my weekend
[2018-07-13 06:23:27]
ls7454 :
:+1:
[2018-07-13 06:23:44]
aciid :
no you must have misunderstood
[2018-07-13 06:23:50]
aciid :
its not making it today :<
[2018-07-13 08:01:45]
ender :
Guys, if it bugs you that the RC charges the Smartdevice loosing its tiny charge:
App for limiting phone charging from the RC:
The App working on the P20 Pro Is called “Battery charge limit”. (edited)
That App has smart settings. : Dont charge beyond XX percentage (set it to the allowed max = 40% AND dont start charging below XX percent, set it to 16%, so right before the pesky 15% Android warning comes up.
So it WILL charge before your phone goes to limbo but not if its quite charged.
Try that up with rooted phone, maybe it has a higher hit rate then other APps that failed me before
(or i am just lucky with the Huawei)
[2018-07-13 08:13:53]
mr.vibez :
I use this one <https://play.google.com/store/apps/details?id=org.bramantya.stopcharging&hl=en>
[2018-07-13 08:19:10]
ender :
@mr.vibez: yep the “alternative” method works. So i am lucky with the P20 Pro as i tried “your” app before and it did nor work with my tablets and previous main phone. I like the “smartness” of the app i linked above as it WILL start charging at 16%…
[2018-07-13 08:20:07]
mr.vibez :
No end of times I forget to turn charging back on in that app I posted, resulting in a flat battery when in comes to fly. I'll give yours a try
[2018-07-13 08:20:23]
mr.vibez :
Just trying to sync flight plans between bluestacks and my phone
[2018-07-13 08:20:52]
mr.vibez :
That way I can create flight plans on my pc rather than on my tiny phone
[2018-07-13 08:22:43]
mr.vibez :
Need an app that syncs data between root folders
[2018-07-13 08:36:10]
mr.vibez :
Hmm, simply copied the files across doesn't work
[2018-07-13 08:54:18]
mr.vibez :
If anyone could figure out how freeflight knows which flightplans to load that would be great :slightly_smiling_face:
[2018-07-13 08:57:58]
fredz :
I actually tested the flightplans. With the Disco, the flightplans work, even when the drone disconnects due to distance
[2018-07-13 08:58:11]
fredz :
however, on FF6, there is a note that when it loses connection, it would RTH
[2018-07-13 08:58:32]
fredz :
I tested this by disconnecting my smartphone while in a flightplan, and it just continued fine
[2018-07-13 08:58:46]
fredz :
however, that was not a good test, as the remote was still communicating with the drone
[2018-07-13 08:59:03]
fredz :
so I should do a test with a flightplan and then switch off the remote in the middle of the flight plan
[2018-07-13 08:59:19]
fredz :
I suppose it will quit the flightplan, which is a pity, because the Disco flightplans that work without any connection are just great
[2018-07-13 09:00:18]
ender :
That would be awful and we can only hope that Shell does it better if its not hardwired in the SDK :disappointed:
[2018-07-13 09:00:27]
ender :
(Shell aka Author of [Ar.Pro](http://Ar.Pro))
[2018-07-13 09:00:52]
mr.vibez :
I think a noticed a option about rth and it was false
[2018-07-13 09:02:11]
mr.vibez :
"flightPlan":{"returnHomeOnDisconnectMutability":false}
[2018-07-13 09:09:03]
ender :
uhhh
[2018-07-13 09:09:07]
ender :
good find
[2018-07-13 13:51:50]
mr.vibez :
Well well well, it does seem to continue it's flight plan even after disconnecting
[2018-07-13 13:52:16]
fredz :
Switched off the controller?
[2018-07-13 13:55:55]
mr.vibez :
No, flew out of range
[2018-07-13 13:56:17]
fredz :
Ultimate test would be to switch off controller
[2018-07-13 13:56:24]
mr.vibez :
Why?
[2018-07-13 13:56:39]
mr.vibez :
If it says connection lost, it's lost?
[2018-07-13 13:56:40]
fredz :
Because video might have dropped but telemetry might still communicate without telling you
[2018-07-13 13:57:00]
mr.vibez :
It said disconnected in the app and all telemetry had had vanished off the screen
[2018-07-13 13:57:09]
fredz :
Still :)
[2018-07-13 13:57:25]
fredz :
You never know
[2018-07-13 13:57:49]
mr.vibez :
True
[2018-07-13 13:58:35]
mr.vibez :
The flight plan feature is pretty good. You can mix and match smooth curves, photos at way points etc
[2018-07-13 13:58:40]
mr.vibez :
better than litchi
[2018-07-13 13:58:52]
mr.vibez :
Well, it that regards anyway
[2018-07-13 13:59:19]
mr.vibez :
DJI waypoints seems to be a series of small segments
[2018-07-13 13:59:27]
mr.vibez :
This appears to do true arcs
[2018-07-13 14:02:22]
fredz :
Yeah like on the Disco. It rules
[2018-07-13 14:02:59]
mr.vibez :
DO you know if AEB or Panos are supported on other Parrot Drones?
[2018-07-13 14:04:33]
mr.vibez :
Seems really strange even landscape panos is not an option
[2018-07-13 14:09:23]
d95gas :
Guys can I ask a question of this group. Has anyone got the final release version of Freeflight 6 for IOS. Reason why, I got the Beta version, and was SUPPOSED to get the to in-app extra's FREE.
But the 2 additional apps always showed at £17.99 each. So contacted Parrot support, who told me it was because Freeflight 6 was now released and therefore no freebies on IOS. But I cannot find the release version on the App store at all. Just wondering if its a UK thing. Pi$$ed me right off.
[2018-07-13 14:10:28]
fredz :
The beta had the options free for 90 days. Not more.
[2018-07-13 14:10:58]
d95gas :
Yes and that was my point, from the minute I installed the Beta, I never got the free options
[2018-07-13 14:11:08]
fredz :
<https://itunes.apple.com/app/id1386165299>
[2018-07-13 14:12:00]
d95gas :
thats the thing, on my iphone 7 plus, in the app store, it does not show up
[2018-07-13 14:12:14]
fredz :
Just click on the link I guess
[2018-07-13 14:12:20]
fredz :
Or delete the beta first
[2018-07-13 14:13:28]
d95gas :
Yep deleted the beta and when I search App store - No show :slightly_smiling_face:
[2018-07-13 14:13:41]
fredz :
Don’t search
[2018-07-13 14:13:44]
fredz :
Click on the link
[2018-07-13 14:13:52]
fredz :
If that doesn’t work it’s Brexit :)
[2018-07-13 14:14:18]
d95gas :
Yea, Trump is on the ground - Anything can happen now :slightly_smiling_face:
[2018-07-13 14:15:28]
mr.vibez :
Wonder if a flightplan would RTH if the battery is low
[2018-07-13 20:08:47]
mr.vibez :
Damn, the camera is actually pretty bad to exposure correctly
[2018-07-13 20:09:06]
mr.vibez :
You can set EV, but then it adjust the ISO to get it at 0
[2018-07-13 20:09:41]
mr.vibez :
Or you can adjust shutter speed, but then there is no way to tell what the EV is, no histogram or zebra stripes
[2018-07-13 20:16:34]
fredz :
Yeah it’s crap
[2018-07-13 20:18:39]
mr.vibez :
Guess it's aiming at the point and click market
[2018-07-13 20:21:30]
mr.vibez :
Are you keeping yours @fredz?
[2018-07-13 20:34:25]
fredz :
Since I drilled the remote - yes
[2018-07-13 20:38:29]
mr.vibez :
lol
[2018-07-13 20:38:45]
mr.vibez :
right next issue, dng have serious barrel distortion :disappointed:
[2018-07-13 20:42:17]
aciid :
drilled the remote? :smile:
[2018-07-13 20:42:23]
aciid :
oh yeah antenna analysis?
[2018-07-13 21:05:31]
mr.vibez :
Shesh, now dng files won't open in lightroom.
[2018-07-15 10:16:43]
mr.vibez :
close FF6 (and all others applications)
get the phone in Airplane mode
turn off Localization (both GPS and WIFI)
set default Android language English US
open RC
connect the phone with RC by USB cable
open FF6 (if not automatically when USB pluged in)
turn on ANAFI and wait fo connection
set/change WIFI channel to 5G manually
turn on back Localization in Android Settings
[2018-07-15 10:16:57]
mr.vibez :
Read that on a forum, not sure how true it is
[2018-07-15 10:44:11]
aciid :
@mr.vibez is there a quality anafi forum that allows speaking about mods?
[2018-07-15 10:46:37]
mr.vibez :
Just a question on the developer forum
[2018-07-15 10:46:38]
mr.vibez :
<http://forum.developer.parrot.com/t/anafi-5g-fcc-mode/7669>
[2018-07-15 11:02:33]
mr.vibez :
@ender might know some other places
[2018-07-15 11:03:00]
aciid :
I think that is quite dangerous to start writing to their official forums, but I know its not you
[2018-07-15 11:06:07]
fredz :
Well historically the Parrot forum was full of these technical hacking posts. Only with the release of Anafi did Parrot stop really supporting open source well...
[2018-07-15 11:06:26]
fredz :
Parrot was always much better towards the community than DJI
[2018-07-15 11:11:17]
mr.vibez :
Not quite sure where to "set default Android language English US"
[2018-07-15 11:12:23]
mr.vibez :
I can't even fly outside my back yard on 2ghz, so it would be interesting to try 5ghz
[2018-07-15 11:12:25]
aciid :
mine asked when I took the phone to use
[2018-07-15 11:12:36]
mr.vibez :
?
[2018-07-15 11:12:50]
aciid :
when I unpacked it
[2018-07-15 11:12:59]
aciid :
I don't use daily devices to fly
[2018-07-15 11:13:19]
mr.vibez :
Me either, I just have the wunderphone for flying
[2018-07-15 11:14:16]
mr.vibez :
<https://play.google.com/store/apps/details?id=tw.TigerHuang.RegionChanger&hl=en_US>
[2018-07-15 11:14:26]
mr.vibez :
looks interesting
[2018-07-15 11:15:30]
mr.vibez :
Changes mcc too
[2018-07-15 11:16:54]
mr.vibez :
except it doesnt work lol
[2018-07-15 11:19:54]
fredz :
Mcc doesn’t seem to count for FF6
[2018-07-15 11:22:16]
mr.vibez :
Oh
[2018-07-15 11:22:43]
aciid :
actually maybe ff6 has updated, i havent seen latest, sorry. last time it was this file that you could edit
[2018-07-15 12:08:26]
mr.vibez :
Which file?
[2018-07-15 12:09:56]
aciid :
country_detector.xml
[2018-07-15 12:25:59]
mr.vibez :
Ah yeah, already modified that file.
[2018-07-15 12:26:53]
mr.vibez :
That didn't let me get 5ghz if I remember correctly
[2018-07-15 20:31:56]
ender :
Hi guys, just dropping by during holiday…
Yes i know forums where you can discuss technical stuff but in German. RCGroups also allows almost everything but is quite chaotic. (One thread per drone, argh)
The Anafi Facebook group has a bad ratio of newbies / technicalpeople but you can talk about everything there.
See ya all !
[2018-07-15 20:34:01]
aciid :
yass I think Ill keep here, every place looks bad. even hak5
[2018-07-16 06:29:25]
aciid :
Anafi is at the distribution center in finland now, called them up and asked can I come and pick it up. DPD NEVER AGAIN
[2018-07-16 06:34:33]
fredz :
And can you?
[2018-07-16 06:54:11]
aciid :
they just called me back and told me to come and get it
[2018-07-16 06:54:24]
aciid :
they were not sure was the shipment unpacked yet
[2018-07-16 06:54:31]
aciid :
just leaving the house
[2018-07-16 08:12:14]
info616 :
I‘m just wondering that Freeflight shows me 11 channels in the 2.4 GHz mode within the EU. According to DJI logic that would mean I‘m in FCC mode. Well could be things are different in Parrot logic.
[2018-07-16 09:02:26]
fredz :
Parrot only has 11 channels, even in CE
[2018-07-16 10:21:51]
mr.vibez :
My 2nd anafi battery arrived today :grin:
[2018-07-16 10:35:27]
aciid :
ok so I have my anafi here now, it is loaded with FW 0.8.4-beta
[2018-07-16 10:35:52]
aciid :
it prompts me to upgrade to 1.0.0 as per Android and iOS freeflight 6
[2018-07-16 10:35:58]
aciid :
the FW we have unpacked from the APK is 1.0.0
[2018-07-16 10:36:04]
aciid :
and 0.9.9 as oldest
[2018-07-16 10:36:45]
aciid :
should I just go to 1.0.0 or stay at 0.8.4-beta?
[2018-07-16 10:36:57]
aciid :
or put usb-dumper between the wires before I upgrade
[2018-07-16 10:37:05]
aciid :
at the time
[2018-07-16 10:55:32]
fredz :
Wow you got a beta bird?
[2018-07-16 11:10:57]
aciid :
what version were you in?
[2018-07-16 11:11:27]
aciid :
version shows up in the app
[2018-07-16 11:11:35]
aciid :
it wont let me fly without upgrading im not upgrading
[2018-07-16 13:07:08]
aciid :
controller connects 3 devices
[2018-07-16 13:07:23]
aciid :
hid, rndis, eem
[2018-07-16 13:07:37]
aciid :
i almost got it working , but probably still missing something
[2018-07-16 13:13:09]
aciid :
Controller has 2 blocks of iron inside
[2018-07-16 13:13:14]
aciid :
hense the weight
[2018-07-16 13:15:50]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBQEJJUQ0/image_from_ios.jpg)
[2018-07-16 13:32:56]
aciid :
@aciid uploaded a file: [@](https://dji-rev.slack.com/files/U6AD6A1QU/FBR6HGJTC/image_from_ios.jpg)
[2018-07-16 13:33:53]
fredz :
Mine was 0.9.9
[2018-07-16 13:34:49]
aciid :
ill stay then
[2018-07-16 13:35:22]
aciid :
controller is in 1.0.1
[2018-07-16 13:35:31]
aciid :
Gonna take proper pictures later but these come as i go
[2018-07-16 13:35:31]
fredz :
Same
[2018-07-16 13:40:19]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBQUWAY84/image_from_ios.jpg)
[2018-07-16 13:40:29]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBSG2GDQE/image_from_ios.jpg)
[2018-07-16 14:29:08]
aciid :
this shit be good
[2018-07-16 14:32:50]
mr.vibez :
in what way?
[2018-07-16 14:33:33]
aciid :
fun to work with
[2018-07-16 14:33:36]
aciid :
good spacing
[2018-07-16 14:33:37]
aciid :
imo
[2018-07-16 14:34:13]
mr.vibez :
:slightly_smiling_face:
[2018-07-16 14:34:35]
mr.vibez :
So you haven't even flown it yet??!
[2018-07-16 14:34:45]
aciid :
nope
[2018-07-16 14:34:54]
aciid :
i wont upgrade i have a beta build in
[2018-07-16 14:35:02]
aciid :
0.8.4-beta in the bird
[2018-07-16 14:35:09]
mr.vibez :
Nice!
[2018-07-16 14:35:10]
aciid :
it wont let me fly
[2018-07-16 14:35:13]
aciid :
without android
[2018-07-16 14:35:25]
aciid :
rooted android could give me a go
[2018-07-16 14:35:42]
aciid :
that would be too easy
[2018-07-16 14:36:03]
mr.vibez :
Hopefully they left out some of the fw protection in the beta :slightly_smiling_face:
[2018-07-16 14:56:53]
aciid :
<!here> controller stock
[2018-07-16 15:04:16]
aciid :
adb is running default on controlelr no tricks needed
[2018-07-16 15:04:47]
aciid :
connect 192.168.53.1:9050
mpp3 ports
```
Starting Nmap 7.60 ( <https://nmap.org> ) at 2018-07-16 07:53 PDT
Nmap scan report for 192.168.53.1
Host is up (0.0059s latency).
Not shown: 995 closed ports
PORT STATE SERVICE
21/tcp open ftp
161/tcp filtered snmp
554/tcp open rtsp
6007/tcp open X11:7
9050/tcp open tor-socks
```
[2018-07-16 15:46:25]
hostile :
nice work
[2018-07-16 15:46:30]
hostile :
can you shell out on the drone from the TX?
[2018-07-16 15:46:34]
hostile :
sometimes there are backdoors
[2018-07-16 15:47:04]
aciid :
im trying to do just that
[2018-07-16 15:57:38]
aciid :
its possible to sock into the machine atleast
[2018-07-16 15:57:47]
aciid :
i just opened some random page via nc
[2018-07-16 16:08:50]
aciid :
ok a security oopsie also on stock.
you can connect to MPP adb via IP when you first connect to bird WIFI
[2018-07-16 16:11:18]
aciid :
bird ports
```
PORT STATE SERVICE
80/tcp open http
554/tcp open rtsp
9898/tcp open monkeycom
```
[2018-07-16 17:21:17]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBR4MU0QL/image_from_ios.jpg)
[2018-07-16 17:21:29]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBQQV5NDP/image_from_ios.jpg)
[2018-07-16 17:21:38]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBSM86Z3Q/image_from_ios.jpg)
[2018-07-16 17:25:53]
aciid :
<https://i.imgur.com/ZPold8P.jpg>
<https://i.imgur.com/c1eJj16.jpg>
<https://i.imgur.com/dUcHvnY.jpg>
[2018-07-16 17:57:47]
aciid :
what nexrt
[2018-07-16 17:59:00]
aciid :
@hostile I think next thing is to try and make a firmware upgrade pack
[2018-07-16 18:13:16]
quad808 :
@aciid dude...hardcore...much props!
[2018-07-16 19:17:03]
aciid :
```
root@mpp3:~ # gprop ro.debuggable
1
```
[2018-07-16 19:17:20]
aciid :
wowowow wth, was this just a lucky coincidence in my rtemote controller fw?
[2018-07-16 19:17:34]
aciid :
does everyone else have ro.debuggable = 1 too?
[2018-07-16 19:56:54]
aciid :
API fields <https://bpaste.net/show/82529fc5274d>
[2018-07-16 20:31:27]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBRBSU9K5/image_from_ios.jpg)
[2018-07-16 20:31:49]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBQURH5B3/image_from_ios.jpg)
[2018-07-16 21:59:44]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBRM92KQD/image_from_ios.jpg)
[2018-07-16 22:00:50]
aciid :
from left
1. TX UNKNOWN
2. RX AMBRELLA ( boot sequence could be more too )
3. GND
4. RX LINUX SHELL (some ANSI shit)
5. TX UNKNOWN
[2018-07-16 22:05:48]
aciid :
thats it for me today, good nite all . hope someone finds something useful with this
[2018-07-17 02:14:59]
hostile :
nice work @aciid I saw those and thought no damn way...
[2018-07-17 02:15:00]
hostile :
LOL
[2018-07-17 08:32:15]
mr.vibez :
Interesting hacking manual here for the bebop, might be useful <https://github.com/nicknack70/bebop/blob/master/UBHG/UBHG1_7_3.pdf>
[2018-07-17 08:41:27]
mr.vibez :
certainly useful once we can telnet into it
[2018-07-17 08:52:49]
aciid :
dragon references were found on the rootfs of the bird
[2018-07-17 08:55:16]
mr.vibez :
Some good stuff also here. Wonder how much relates to the anafi too <https://github.com/nicknack70/bebop>
[2018-07-17 09:01:03]
aciid :
my ATEN Usb serial is broken, need to get a new one from somehwere
[2018-07-17 09:01:17]
aciid :
or hook up a debug bridge from some atmel shite
[2018-07-17 09:02:52]
aciid :
fak this ill upgrade to 1.0.0 i wanna see this fly already
[2018-07-17 09:03:01]
mr.vibez :
lol
[2018-07-17 09:03:53]
aciid :
some duct tape on the battery andits ready
[2018-07-17 09:10:21]
aciid :
oh woop the fucking doo lost ADB with that upgrade
[2018-07-17 09:10:34]
aciid :
:laughing: :gun:
[2018-07-17 09:22:14]
fredz :
lost ADB? Can you get it back?
[2018-07-17 09:23:50]
aciid :
no
[2018-07-17 09:24:12]
aciid :
the controller upgraded without telling me
[2018-07-17 09:26:22]
mr.vibez :
crap
[2018-07-17 09:26:35]
aciid :
well I wanted to see how it werks
[2018-07-17 09:26:41]
aciid :
guess it wasnt worht it at this point
[2018-07-17 09:26:44]
aciid :
better order a new one
[2018-07-17 09:27:58]
fredz :
Order a new one from Parrot and send the old one back
[2018-07-17 09:29:08]
mr.vibez :
Sounds like a plan
[2018-07-17 09:29:35]
aciid :
cant do it that way, they want to make sure the next one works
[2018-07-17 09:29:41]
aciid :
need to order it and then return the older one
[2018-07-17 09:30:14]
fredz :
Indeed
[2018-07-17 09:30:54]
aciid :
well if someone has an untouched anafi, don't upgrade it to fly it
[2018-07-17 09:34:16]
aciid :
oh I didnt lose it
[2018-07-17 09:34:17]
aciid :
sorry all
[2018-07-17 09:34:18]
aciid :
xD
[2018-07-17 09:34:27]
mr.vibez :
Woohoo!
[2018-07-17 09:34:34]
aciid :
[ 2724.954015] usb 1-1: new high-speed USB device number 4 using ehci-pci
[ 2725.305268] usb 1-1: New USB device found, idVendor=19cf, idProduct=5040
[ 2725.305269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2725.305270] usb 1-1: Product: Parrot Skycontroller 3
[ 2725.305271] usb 1-1: Manufacturer: Parrot
[ 2725.305272] usb 1-1: SerialNumber: PI040443AA8F017332
[ 2725.325447] rndis_host 1-1:1.0 usb0: register 'rndis_host' at usb-0000:02:03.0-1, RNDIS device, da:4f:d1:8b:7e:81
[ 2725.333879] rndis_host 1-1:1.0 ens35u1: renamed from usb0
[ 2725.358880] IPv6: ADDRCONF(NETDEV_UP): ens35u1: link is not ready
[2018-07-17 09:34:36]
aciid :
i almost cried
[2018-07-17 09:34:37]
aciid :
XD
[2018-07-17 09:34:52]
aciid :
good
[2018-07-17 09:34:52]
aciid :
ok so now I have ADB and I can still fly at current FW versions
[2018-07-17 09:39:35]
aciid :
software fault here, the binary that should probably prevent debugging is not named correctly
[2018-07-17 09:39:38]
aciid :
setprop not found
[2018-07-17 09:39:40]
aciid :
sprop found
[2018-07-17 09:40:04]
aciid :
root@mpp3:/etc # sprop persist.debuggable 1
[2018-07-17 09:40:09]
aciid :
peace of mind
[2018-07-17 09:44:00]
aciid :
root@mpp3:/data # cat lib/libshsettings/wifi.cfg
wifi :
{
outdoor = true;
autocountry = false;
country = "FI";
encryption = 8;
key = "xxxxxxxxxxxxxxxxxxxxxxxx";
autoselect = true;
band = 4;
channel = -1;
};
[2018-07-17 09:44:10]
aciid :
i wonder what it does if i change it to US?
[2018-07-17 10:05:43]
aciid :
```
01-01 00:00:00.012 W KERNEL : **********************************************************
K 01-01 00:00:00.012 W KERNEL : *** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ***
K 01-01 00:00:00.012 W KERNEL : *** ***
K 01-01 00:00:00.012 W KERNEL : *** trace_printk() being used. Allocating extra memory. ***
K 01-01 00:00:00.012 W KERNEL : *** ***
K 01-01 00:00:00.012 W KERNEL : *** This means that this is a DEBUG kernel and it is ***
K 01-01 00:00:00.012 W KERNEL : *** unsafe for produciton use. ***
K 01-01 00:00:00.012 W KERNEL : *** ***
K 01-01 00:00:00.012 W KERNEL : *** If you see this message and you are not debugging ***
K 01-01 00:00:00.012 W KERNEL : *** the kernel, report this immediately to your vendor! ***
K 01-01 00:00:00.012 W KERNEL : *** ***
K 01-01 00:00:00.012 W KERNEL : *** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ***
K 01-01 00:00:00.012 W KERNEL : **********************************************************
```
[2018-07-17 10:06:57]
aciid :
somethjing called proxy_drone might be a way into the drone via MPP3
[2018-07-17 10:07:41]
aciid :
its built in /usr/bin/mppd
[2018-07-17 10:12:12]
aciid :
@mr.vibez @fredz @ender this means that if you guys have any firmware in the controller you can get in ADB with just USB-C cable and Ubuntu
[2018-07-17 12:39:49]
mr.vibez :
I guess those properties are read only?
[2018-07-17 13:18:41]
aciid :
which you mean?
[2018-07-17 14:04:15]
hostile :
excellent work @aciid... sorry I've not been present!
[2018-07-17 14:04:33]
hostile :
can you tar up the file system?
[2018-07-17 14:04:40]
aciid :
by all means I know we all have to have our freetime too
[2018-07-17 14:04:59]
aciid :
I have access to the controller yet
[2018-07-17 14:05:10]
aciid :
adb root latest firmware
[2018-07-17 14:05:14]
aciid :
I can do that ye
[2018-07-17 14:34:53]
aciid :
the controller interferences with iphone like hell
[2018-07-17 14:35:06]
aciid :
image goes all out of sync if iphone x is not in airplane mode
[2018-07-17 14:38:22]
aciid :
who all actively participating here, Ill send a private link to the tar. I'm essentially doxing myself. gps and shit there can't prune the details without spending too much time. @hostile @fredz @mr.vibez @ender
[2018-07-17 14:41:31]
aciid :
uploading...
[2018-07-17 14:42:58]
aciid :
debug pins are wonderful on the bird. but you need make a pad-connector to fit that space and bring cables out the bottom of the bird or something.
or
break a battery pack so you can supply voltage to the bird and get your debugger pins there
[2018-07-17 14:47:11]
aciid :
<https://github.com/Aciid/Anafi-Rev> creating this
[2018-07-17 15:32:56]
aciid :
/usr/bin/wifid tends to write there. I think better to patch wifid :slightly_smiling_face:
[2018-07-17 15:33:18]
aciid :
patch it to US in assembly
[2018-07-17 16:14:12]
aciid :
```
U 07-17 10:02:19.969 I proxy_drone (mppd-189) : connect to drone [name=ANAFI-xxxxxxxxxxxxxxxxxx] [id=yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy]
U 07-17 10:02:19.969 I proxy_drone (mppd-189) : connecting to drone 'ANAFI-xxxxxxxxxxxxxxxxxx' (yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy)
U 07-17 10:02:19.979 N boxinit (init-1) : process 'wifid-dhclient', pid 367 exited
U 07-17 10:02:19.979 I arsdkctrl_net(mppd-189) : Sending json:
U 07-17 10:02:19.979 I arsdkctrl_net(mppd-189) : { "arstream2_client_stream_port": 55004, "arstream2_client_control_port": 55005, "arstream2_supported_metadata_version": 1, "controller_name": "yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy", "controller_type": "RC,Skycontroller 3", "d2c_port": 9988, "qos_mode": 1 }
U 07-17 10:02:19.999 I arsdkctrl_net(mppd-189) : Received json:
U 07-17 10:02:19.999 I arsdkctrl_net(mppd-189) : { "arstream_fragment_size": 65000, "arstream_fragment_maximum_number": 4, "arstream_max_ack_interval": -1, "c2d_update_port": 51, "c2d_user_port": 21, "arstream2_server_stream_port": 5004, "arstream2_server_control_port": 5005, "arstream2_max_packet_size": 1500, "arstream2_max_latency": 0, "arstream2_max_network_latency": 200, "arstream2_max_bitrate": 1500000, "arstream2_parameter_sets": "TBD", "status": 0, "c2d_port": 2233, "qos_mode": 1 }
U 07-17 10:02:19.999 I proxy_drone (mppd-189) : set ip/mac QOS mode: 1
U 07-17 10:02:19.999 I proxy_drone (mppd-189) : RTSP Available ? N
```
[2018-07-17 16:14:32]
aciid :
interesting for to say atleast
[2018-07-17 16:14:42]
aciid :
communication found from the lods
[2018-07-17 16:17:53]
aciid :
also tcpdump seems to crash the controller
[2018-07-17 16:47:09]
aciid :
<rtsp://192.168.42.1:554/live>
[2018-07-17 16:47:38]
aciid :
drone streams quite good picture, need strong wifi adapter of course
[2018-07-17 16:47:53]
aciid :
take that DJI LOL
[2018-07-17 16:55:25]
mr.vibez :
We need to fit a sim like the disco lol
[2018-07-17 16:56:02]
aciid :
I dont see why that wouldnt work coould need some work lol
[2018-07-17 17:01:11]
mr.vibez :
Just wondering if we rebroadcast that live feed somehow
[2018-07-17 17:02:21]
aciid :
with straight up wifi that is easy you just need some gear from mikrotik or ubiquity
[2018-07-17 17:02:54]
aciid :
once you can connect to rtsp you can just use any program like obs to stream it to youtube
[2018-07-17 17:03:27]
aciid :
4g only can be precarious since the stream is quite laggy even with wifi
[2018-07-17 17:04:27]
mr.vibez :
So that feed is coming from the AC correct?
[2018-07-17 17:06:13]
mr.vibez :
I guess the app is connecting to that stream, or it's going ac>fc>smart device
[2018-07-17 17:15:24]
aciid :
Freeflight app way:
your phone - cable - rc -----------------bird video
[2018-07-17 17:15:37]
aciid :
i just connected to the bird via wifi on my pc and opened that url
[2018-07-17 18:01:35]
mr.vibez :
So possible to have a background app that connects from your phone that could stream that video to facebook?
[2018-07-17 18:22:00]
aciid :
yea for example
[2018-07-17 19:00:21]
aciid :
I wonder how nitpicky the RC really is, if I spoof Anafi wlan
[2018-07-17 19:01:10]
aciid :
could dump traffic that way
[2018-07-17 19:01:24]
aciid :
tcpdump doesnt work on the controller it hangs
[2018-07-17 19:06:16]
aciid :
actually i'd need two wireless routers for that to work. but could be doable
[2018-07-17 19:06:53]
aciid :
one mikrotik would be client to bird's wifi.
one mikrotik would be ap for rc's wifi.
[2018-07-17 19:07:01]
aciid :
then just figure out the routing
[2018-07-17 20:01:24]
ender :
woah ! Hi guys, getting some iNternet her for a change and reading HERO stuff from accid :slightly_smiling_face:
[2018-07-17 20:01:43]
ender :
sounds great, WAIT you are saying you HAVE adb to the bitrd on current FW ? What did i do wrong ?
[2018-07-17 20:01:48]
ender :
(when trying) ?
[2018-07-17 20:02:40]
ender :
well, i try to read up until Internet gets flaky again :slightly_smiling_face:
[2018-07-17 20:09:00]
ender :
Hmm, i only got OSX here right now, tried… connected to controller, RNDIS up, Controller got 192.168.53.72
[2018-07-17 20:09:13]
ender :
But adb connect 192.168.53.72 is refused.
[2018-07-17 20:09:16]
ender :
Anything dumb ?!
[2018-07-17 20:12:24]
ender :
hmm, also livestream does not work for me strangely (connected to MPP via USB RNDIS and to Anfi via Wifi)
[2018-07-17 20:12:43]
ender :
well nevertheless sounds **promising**.
[2018-07-17 20:14:24]
ender :
@fredz: tried real world testing of fake GPS vs. measurement. But real life proves measurement: No change in range when using simple Fake GPS US spoofing. decrease of “signal bars” at the very asme positions, total range until connection loss almost the same (+-50m). Flying over flat landscape at 2m Altitude, loss at 600m in seemingly CE mode.
[2018-07-17 20:15:13]
ender :
did anyone else besides aciid connect via adb ?! if i get it right you ADB into controller linux NOT into AC linux, right ? Or is it tunneled ?!
[2018-07-17 20:16:32]
ender :
testes the bird endlessly here, very solid so far. Range okay but could be perfect with FCC. Flight time feels soooo much longer compaired to Air. I eben exceeded the 25min on Sunday. (slow cruising, 24 degrees temperatur, NO WIND.) down to 5% when landing :slightly_smiling_face:
[2018-07-17 20:17:34]
mr.vibez :
Yeah flight time is great
[2018-07-17 20:18:30]
ender :
lee, did you manage to connect via adb ? sounds straightforward but doesnt work here atm.
[2018-07-17 20:18:40]
mr.vibez :
Biggest issue I have at the moment is lack of a histogram for stills
[2018-07-17 20:18:47]
ender :
Or NOT with current AC & MPP FW ?! Or exotic port
[2018-07-17 20:19:06]
mr.vibez :
Erm not tried it as I wouldn't know what to do after I did
[2018-07-17 20:19:21]
ender :
yep, Histogram would be nice or coloring of under / overexposed areas at least
[2018-07-17 20:20:18]
mr.vibez :
The EV meter is strange too, it doesnt show the current EV, rather it's used to tell camera what EV to acheive when in auto mode. Confused me at the start
[2018-07-17 20:20:36]
ender :
okay… if you are on windows you can browse for “minimal adb and fastboot” that will find you a small package with (almost) up to date cmd line binaries
[2018-07-17 20:21:09]
mr.vibez :
I already have adb installed
[2018-07-17 20:22:00]
ender :
well if you connect to a device via USB debug you can list devices with “adb devices”
[2018-07-17 20:22:01]
aciid :
hi, nice to see that someone is on slack at the sametime! :pray:
[2018-07-17 20:22:06]
ender :
hi :slightly_smiling_face:
[2018-07-17 20:22:16]
aciid :
adb works on ubuntu only
[2018-07-17 20:22:16]
ender :
I am on an Island, just flaky internet :slightly_smiling_face:
[2018-07-17 20:22:26]
ender :
uh why is that aciid ?
[2018-07-17 20:22:28]
ender :
OSX no chance ?
[2018-07-17 20:22:37]
aciid :
i havent tried on osx i have to verify
[2018-07-17 20:22:38]
aciid :
sec
[2018-07-17 20:22:49]
aciid :
on windows there are no common INF driver
[2018-07-17 20:22:51]
ender :
any special “trick” for adb ? (port #, ???)
[2018-07-17 20:23:05]
ender :
well its easy to add anafi MPP to inf i guess…
[2018-07-17 20:23:12]
ender :
If you use windows in dev mode
[2018-07-17 20:23:31]
aciid :
adb connect 192.168.53.1:9050
[2018-07-17 20:23:40]
ender :
i got the stuff connected here but cannot adb
[2018-07-17 20:23:47]
mr.vibez :
That's the controller correct?
[2018-07-17 20:23:50]
aciid :
yes
[2018-07-17 20:23:51]
ender :
tried that, remembered that port.
[2018-07-17 20:23:54]
aciid :
bird doesn't have ADB activated
[2018-07-17 20:24:00]
aciid :
from factory
[2018-07-17 20:24:05]
ender :
okay, i can see mpp rndis and can ping to mpp
[2018-07-17 20:24:13]
aciid :
oh
[2018-07-17 20:24:17]
aciid :
so osx works
[2018-07-17 20:24:24]
ender :
do i need to have bird connected to wifi when trying to adb to mpp via USB rndis (sounds mad)
[2018-07-17 20:24:38]
aciid :
no
[2018-07-17 20:24:43]
ender :
okay
[2018-07-17 20:24:45]
aciid :
only MPP with usb cable to mac
[2018-07-17 20:24:46]
ender :
i try, sec
[2018-07-17 20:25:21]
ender :
bwahhhahahh works now, did not 5min agao, i swear, i have it in the history :slightly_smiling_face:
[2018-07-17 20:25:35]
aciid :
ok so you are in
[2018-07-17 20:25:40]
ender :
yep, can shell tp it
[2018-07-17 20:25:45]
mr.vibez :
Do we connect to the RC via wifi or from usb?
[2018-07-17 20:25:50]
ender :
usb
[2018-07-17 20:25:57]
mr.vibez :
USB-C?
[2018-07-17 20:26:04]
ender :
it opens a rndis “TCPIP via USB” connection
[2018-07-17 20:26:11]
ender :
needs a driver, osx one is generic
[2018-07-17 20:26:15]
ender :
windows a problem.
[2018-07-17 20:26:23]
aciid :
now first thing first after adb shell
```
sprop persist.debuggable 1
```
[2018-07-17 20:26:36]
ender :
if you dont have ubuntu, a vmware image is small and easy to aquire
[2018-07-17 20:26:53]
ender :
done aciid
[2018-07-17 20:27:02]
mr.vibez :
I'll install one, but which usb do we connect to? the regular usb or the usb-c?
[2018-07-17 20:27:08]
aciid :
@mr.vibez usb cable supplied
[2018-07-17 20:27:10]
ender :
the c
[2018-07-17 20:27:26]
aciid :
usb-c to RC and usb male standard end to computer
[2018-07-17 20:27:29]
ender :
so MPP is slave
[2018-07-17 20:27:37]
mr.vibez :
ok let me install ubuntu
[2018-07-17 20:27:38]
aciid :
yeah bird runs wifi accespoiunt
[2018-07-17 20:27:46]
aciid :
@mr.vibez download vmware workstation trial
[2018-07-17 20:27:49]
aciid :
its really simple
[2018-07-17 20:27:55]
ender :
:+1: Lee
[2018-07-17 20:27:56]
aciid :
it has necessary drivers automatically
[2018-07-17 20:28:15]
ender :
vmp player still free on windows isnt it ?
[2018-07-17 20:28:18]
ender :
no need for WS ?
[2018-07-17 20:28:19]
aciid :
probably is
[2018-07-17 20:28:29]
aciid :
if images exists
[2018-07-17 20:28:50]
aciid :
<https://my.vmware.com/en/web/vmware/free#desktop_end_user_computing/vmware_workstation_player/14_0>
[2018-07-17 20:28:52]
ender :
aciid did you try wifi us insteaf of fi / auto ?
[2018-07-17 20:29:09]
mr.vibez :
Already have vmware
[2018-07-17 20:29:33]
mr.vibez :
In fact I already have an osx image, will that do?
[2018-07-17 20:30:03]
ender :
yep
[2018-07-17 20:30:09]
mr.vibez :
booting now
[2018-07-17 20:30:18]
ender :
you bad boy dont happen to use hackintosh, right ? :wink:
[2018-07-17 20:30:53]
aciid :
OSX works for adb too its eems if you have that @mr.vibez
[2018-07-17 20:31:22]
aciid :
ender, i haven't gotten wifi = us working yet. /usr/bin/wifid is in charge of that it negotiates it from phone
[2018-07-17 20:31:26]
aciid :
need to patch that binary
[2018-07-17 20:31:30]
mr.vibez :
uh my osx vm image is stuck in a bootloop
[2018-07-17 20:31:49]
aciid :
lets get you ubuntu
[2018-07-17 20:32:08]
mr.vibez :
I've got the iso for 18.04
[2018-07-17 20:32:20]
mr.vibez :
just creating a virtual machine now
[2018-07-17 20:32:31]
aciid :
<https://drive.google.com/file/d/1_XjjlG0TYa9Fuf6lXAelt22XRHX9I_EP/view>
[2018-07-17 20:32:37]
aciid :
this is abootable one, if you don't want to install
[2018-07-17 20:32:39]
aciid :
but go ahead
[2018-07-17 20:33:00]
ender :
Here is adb installation on osx/ubuntu/win: <https://www.xda-developers.com/install-adb-windows-macos-linux/>
[2018-07-17 20:33:10]
aciid :
that wont solve windows
[2018-07-17 20:33:15]
ender :
yep
[2018-07-17 20:33:21]
ender :
focus on ubuntu / osx
[2018-07-17 20:34:04]
aciid :
Anafi uses custom coded CDC EEM driver that has interface for RNDIS, windows never guess's which device is parent
[2018-07-17 20:34:10]
ender :
so aciid most important: did you fly it yet now that you upgraded the FW anyways ? or did you just upgrade MPP but not the bird ? :slightly_smiling_face:
[2018-07-17 20:34:13]
aciid :
there are three interfaces in that CDC device
[2018-07-17 20:34:14]
aciid :
yes
[2018-07-17 20:34:16]
aciid :
i did fly
[2018-07-17 20:34:20]
aciid :
everythign upgraded
[2018-07-17 20:34:21]
aciid :
it's ok
[2018-07-17 20:34:25]
ender :
:slightly_smiling_face:
[2018-07-17 20:34:28]
aciid :
factory was 0.8.4-beta
[2018-07-17 20:34:31]
aciid :
but im not sad
[2018-07-17 20:34:54]
ender :
I like the little bird. I am flying here at places where i did not want to fly with Pro / Air as the Anafi is so unobstrusive
[2018-07-17 20:35:02]
aciid :
yea its so nimble
[2018-07-17 20:35:20]
aciid :
i have massive signal problems in city with anafi
[2018-07-17 20:35:28]
aciid :
in 2.4ghz mode if there are other devices
[2018-07-17 20:35:46]
aciid :
i went to rooftop height and the image started lagging
[2018-07-17 20:35:49]
ender :
Thtas what 5G is for
[2018-07-17 20:36:05]
ender :
and dont forget to plane-mode your phone
[2018-07-17 20:36:07]
aciid :
i have wifid -binary open in IDA here
[2018-07-17 20:36:12]
ender :
k
[2018-07-17 20:36:18]
mr.vibez :
Same problem, not 5ghz option though
[2018-07-17 20:36:29]
ender :
in bebop times stuff was easy to find via string xref
[2018-07-17 20:36:34]
ender :
they did not hide stuff
[2018-07-17 20:36:42]
ender :
wonder if they still behave like that
[2018-07-17 20:37:17]
ender :
btw that bebop ultiate hacking guide lee linked has a co author named “Ender” :wink:
[2018-07-17 20:37:31]
ender :
i bet 50% to 75% is still somehow useful
[2018-07-17 20:37:39]
mr.vibez :
Is it you?
[2018-07-17 20:37:55]
aciid :
ender:
cat /update/log
[2018-07-17 20:37:59]
aciid :
interesting file
[2018-07-17 20:38:57]
ender :
yes lee, but nicknck did the hard work of making it human-readable, kudos to him, hes still around in original parrot forum
[2018-07-17 20:39:25]
mr.vibez :
nice, saves us having to read through it all :slightly_smiling_face:
[2018-07-17 20:40:08]
aciid :
creating a IDA map for wifid here
[2018-07-17 20:40:27]
aciid :
its quite new to me, but ill do my best to name some imporant functions
[2018-07-17 20:40:35]
aciid :
then we can try to patch it, its hard to in ARM you need to use a calculator for real
[2018-07-17 20:41:10]
aciid :
<http://armconverter.com/>
[2018-07-17 20:41:29]
ender :
@mr.vibez: well i left the crew with UBHG 1.2 or so :slightly_smiling_face:
[2018-07-17 20:42:29]
ender :
The brunt of IDA reveng was done by an ex Tesla security engineer. But it was so easy he was able to teach me the basics to continue patching later Firmwares..
[2018-07-17 20:42:58]
mr.vibez :
:slightly_smiling_face:
[2018-07-17 20:43:21]
ender :
aciid seem to be more up-to date on that :slightly_smiling_face:
[2018-07-17 20:43:51]
aciid :
i want to do my part here lol, im no pro
[2018-07-17 20:44:08]
mr.vibez :
Out of interest, why are not concentrating on the app?
[2018-07-17 20:45:24]
ender :
I can only speak for myself: i got 2 main interests so far: FCC & RTH Altitude. THEN maybe change FLight Attitude limits to the max.
[2018-07-17 20:45:47]
aciid :
I don't have an android phone. so emulating the results is painful. also i didn't get decompiled version to work since there are variations of tablet mode that overload the compiler. the code should be cleaned up manually its slow.
[2018-07-17 20:46:06]
ender :
FCC should be doable inn the app OR the fw (MPP or AC ??). RTH Alt and Attitude limits ONLY in FW. So FW seems more important IMO.
[2018-07-17 20:46:22]
aciid :
there is a job for anyone. there are serial pins in the sd-card module
[2018-07-17 20:46:35]
aciid :
if someone has working serial interface someone should try writing
[2018-07-17 20:46:55]
ender :
i do. At home. Like 5 of those :disappointed:
[2018-07-17 20:47:06]
aciid :
<https://github.com/Aciid/Anafi-Rev/wiki>
[2018-07-17 20:48:11]
ender :
isnt that a bit too public right now (Parrot closing the doors before really usavle APP/FW/SDK is out) ?
[2018-07-17 20:48:42]
aciid :
you are right, but tehy probably monitor this chat too
[2018-07-17 20:48:45]
aciid :
ill take it down
[2018-07-17 20:49:03]
mr.vibez :
Ubuntu 16.04.4 (64bit).vmdk is corrupt according to vmware
[2018-07-17 20:49:12]
ender :
i dont think so (this chat). Dont worry, just my opinion :slightly_smiling_face: You#re clearly the boss here.
[2018-07-17 20:49:36]
aciid :
well the info is in my computer lol
[2018-07-17 20:49:41]
aciid :
i just archive versions and stuff
[2018-07-17 20:52:04]
ender :
oops just lost conection
[2018-07-17 20:57:22]
ender :
@aciid: noob question: you are saying the wifi cfg is useless becaue its handled in the binary ?! Could you elaborate ?! If i swithch from auto to manual and use us will it be ignored or changed back by binary ?
[2018-07-17 20:58:09]
aciid :
check /update/log file what happens when you switch wifi modes from freeflight app
[2018-07-17 20:59:18]
ender :
ahh okay
[2018-07-17 20:59:22]
ender :
will do
[2018-07-17 20:59:36]
aciid :
from analyzing wifid binary it seems so
[2018-07-17 21:00:05]
aciid :
but i havent checked which is the manager
[2018-07-17 21:00:08]
aciid :
wifid or mppd
[2018-07-17 21:00:15]
aciid :
both are very interesting
[2018-07-17 21:01:03]
ender :
holycrap thats a long log
[2018-07-17 21:03:47]
ender :
just starting to browse the log, seems its there since the first test run of the anafi in factory…
[2018-07-17 21:04:38]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBRH9JQF2/-.pl)
[2018-07-17 21:06:12]
aciid :
Central Regulatory Domain Agent, controls wireless channels in computer networkin
[2018-07-17 21:09:04]
ender :
seems to be wifid doing the dirty job…
[2018-07-17 21:10:05]
ender :
well and mppd executing it :slightly_smiling_face: probably both could be patched, right ?
[2018-07-17 21:12:19]
aciid :
yeah
[2018-07-17 21:12:26]
mr.vibez :
osboxes@osboxes:~/Desktop/platform-tools$ adb connect 192.168.53.1:9050
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
unable to connect to 192.168.53.1:9050
[2018-07-17 21:12:40]
aciid :
ping 192.168.53.1
[2018-07-17 21:12:57]
ender :
and / or look for it in the network settings
[2018-07-17 21:13:37]
aciid :
also check that you have attached the usb into the virtual machine
[2018-07-17 21:13:37]
mr.vibez :
hurrah
[2018-07-17 21:13:38]
mr.vibez :
connected to 192.168.53.1:9050
[2018-07-17 21:13:39]
ender :
@ender uploaded a file: [Bildschirmfoto 2018-07-17 um 23.13.13.png](https://dji-rev.slack.com/files/U60JKQQ2F/FBSD3NS5B/bildschirmfoto_2018-07-17_um_23.13.13.png)
[2018-07-17 21:13:47]
ender :
great
[2018-07-17 21:13:51]
ender :
what did you change ?
[2018-07-17 21:14:01]
mr.vibez :
Wally here was trying to connect to the rc rather than the fc
[2018-07-17 21:14:09]
mr.vibez :
ooops
[2018-07-17 21:14:18]
mr.vibez :
Was trying to connect to the bird not the controller
[2018-07-17 21:14:23]
aciid :
:smile:
[2018-07-17 21:16:08]
mr.vibez :
So it says connect but put me back to terminal
[2018-07-17 21:16:28]
aciid :
adb shell
[2018-07-17 21:16:29]
aciid :
after that
[2018-07-17 21:16:31]
ender :
then you do adb shell
[2018-07-17 21:19:05]
mr.vibez :
I'm in thanks :slightly_smiling_face:
[2018-07-17 21:19:23]
ender :
i can see this in the log “usbcore: registered new interface driver ax88179_178a”. If the controller knows THAT usb2eth chipset then maybe the bird does as well. At least 2 of the 4 usb2eth got an asix chipset but i am not sure about that particular one.
[2018-07-17 21:19:31]
ender :
cannot try now :disappointed:
[2018-07-17 21:20:04]
ender :
i AM quite sure one was a XX179…
[2018-07-17 21:20:26]
ender :
but 2 of my usb2eth are lost in my workbench chaos, got to find em when i am back home
[2018-07-17 21:21:41]
aciid :
hmm interesting theory
[2018-07-17 21:22:12]
aciid :
but I think its all down to rw.debuggable value
[2018-07-17 21:22:35]
aciid :
the best bet now is to try and communicate via the socket that is established to bird
[2018-07-17 21:22:38]
aciid :
5005
[2018-07-17 21:22:41]
aciid :
or 5004
[2018-07-17 21:22:47]
aciid :
tcpdump will hang the RC
[2018-07-17 21:22:51]
aciid :
don't try to run it
[2018-07-17 21:35:12]
aciid :
need to reboot ida crashing
[2018-07-17 21:35:14]
aciid :
something broke
[2018-07-17 21:37:23]
ender :
aciid, i seem not to be able to have the controller connected to an android phine and to adb to it at the same time, same for you ?
[2018-07-17 21:38:50]
aciid :
it's not possible
[2018-07-17 21:39:10]
ender :
okay, thought so but i better ask :slightly_smiling_face:
[2018-07-17 21:39:26]
aciid :
need to figure out a way how to attach adb to the wifi
[2018-07-17 21:39:31]
aciid :
its probably pretty simple
[2018-07-17 21:53:51]
mr.vibez :
Slightly off topic
[2018-07-17 21:53:51]
mr.vibez :
<https://www.ebay.co.uk/itm/Camera-Lens-Filter-UV-CPL-ND-PL-ND4-ND8-ND16-ND32-For-ANAFI-TB-AIR-Flight-Drone/253758198939?hash=item3b152ad49b%3Am%3AmZKKXJnuK-KAwuq7lzcH_xQ&var=553035794885&_sacat=0&_nkw=anafi+nd+filters&_from=R40&rt=nc&_trksid=m570.l1313>
[2018-07-17 21:55:14]
ender :
/lib/firmware/wlan/qcom_cfg.ini setting gAPCntryCode to USI or USO wont help right ?
[2018-07-17 22:00:31]
ender :
battery on macbook is low and wife complains, see you guys & kudos to aciid !!!!
[2018-07-17 22:01:03]
mr.vibez :
laters
[2018-07-17 22:04:03]
aciid :
oh thats fast if they did them already
[2018-07-17 22:43:48]
aciid :
im going sleeping hack safe and fly dangerously
[2018-07-18 11:54:09]
aciid :
I have now a jailbreaken iphone thanks to @antihawk i can start to inspect freeflight 6 on ios
[2018-07-18 11:54:16]
antihawk :
@antihawk has joined the channel
[2018-07-18 12:18:01]
mr.vibez :
:slightly_smiling_face:
[2018-07-18 13:39:29]
aciid :
well my anafi fell over today from knee distance and it wont calibrate anymore
[2018-07-18 13:39:50]
aciid :
if a cable is disconnected for some component its ok, if i cant find fault it goes back to parrot
[2018-07-18 14:12:33]
aciid :
its working again
[2018-07-18 14:12:42]
aciid :
calibrating has to be done really spinning fasty
[2018-07-18 14:50:15]
aciid :
@aciid uploaded a file: [LOLOLOLOOLOLOLOLOLOOLOLOOLOLOLOLOLOLOL](https://dji-rev.slack.com/files/U6AD6A1QU/FBSFJNN2G/screen_shot_2018-07-18_at_17.49.16.png)
[2018-07-18 14:55:36]
mr.vibez :
I guess you're in the ios app
[2018-07-18 15:09:32]
aciid :
Found a hidden GPS coordinate inside the app
[2018-07-18 15:10:06]
aciid :
<https://www.google.com/maps/place/Niji/@48.1149132,-1.6171706,18z/data=!4m5!3m4!1s0x480eded12f9b1c63:0x216be4280974081d!8m2!3d48.1149166!4d-1.6176751>
[2018-07-18 15:10:09]
aciid :
pointing to this building
[2018-07-18 15:31:54]
fredz :
wow that's cool
[2018-07-18 17:27:43]
quad808 :
Do we know if any data from the Anafi gets sent to Parrot??
[2018-07-18 18:25:21]
aciid :
@quad808 Parrot is a French company so they have to respect GDPR to the fullest. it asks for your permission on first start on do you want to share data. The app itself doesn't even require registeration to fly Anafi. it's fully unlocked out of the box. but I haven't ofcourse checked this with wireshark or anything
[2018-07-18 19:16:47]
quad808 :
Thank you! Just the confirmation I was looking for.
[2018-07-19 08:40:08]
aciid :
SD Card that comes with anafi is TOO DAMN SLOW
[2018-07-19 08:47:04]
aciid :
the send in a Sandisk Industrial card
[2018-07-19 08:47:09]
aciid :
that shit is like made for IoT devices
[2018-07-19 09:00:28]
aciid :
I ordered Lexar x1000
[2018-07-19 09:00:31]
aciid :
fuck u Parrot
[2018-07-19 10:35:27]
jabuasab :
Wow for $700 I thought it would be higher quality material. This thing feels like it should cost $50.
[2018-07-19 10:38:25]
fredz :
No no you need to call it French refinement!
[2018-07-19 10:47:55]
jabuasab :
Even the controller looks like one of those that comes with the $10 cheap Chinese drones.
[2018-07-19 10:48:13]
fredz :
Indeed
[2018-07-19 10:48:20]
fredz :
The plastic is very thin
[2018-07-19 11:48:02]
mr.vibez :
Isn't the done itself carbon fibre?
[2018-07-19 11:48:13]
mr.vibez :
Agree on the controller
[2018-07-19 11:49:46]
mr.vibez :
I use a Samsung u3, plenty fast enough. Surprised they packed in a u1
[2018-07-19 11:59:27]
fredz :
Looks like plastic to me
[2018-07-19 14:33:47]
aciid :
btw Parrot has obfuscated Settings pages content thats why FCC and Altitude controls are not done yet
[2018-07-19 14:33:48]
aciid :
xD
[2018-07-19 14:34:40]
aciid :
@aciid uploaded a file: [Untitled](https://dji-rev.slack.com/files/U6AD6A1QU/FBT7M77LL/-.txt)
[2018-07-19 20:21:37]
aciid :
Interesting
[2018-07-20 10:33:58]
makingthisnameup :
I just saw we already have this channel. Ahh fellow anafi clique
[2018-07-20 10:57:36]
aciid :
yea theres toon of information here hopefuly slack shows backlog
[2018-07-20 11:01:25]
aciid :
I tried flaming the motor arm yesterday it didn't melt. the skin started boiling tho
[2018-07-20 15:28:47]
makingthisnameup :
Whoaa xD
[2018-07-20 15:29:21]
makingthisnameup :
I think I've seen one wrecked anafi so far? Just from yt or somewhere
[2018-07-21 11:39:22]
aciid :
<https://forum.developer.parrot.com/t/anafi-5g-fcc-mode/7669/2>
someone has verified my finding from Android X86 live boot test that I did on my laptop that locale sets your GEO. this guy changed his locale on his phone and it activated FCC
[2018-07-21 15:20:56]
mr.vibez :
Yeah I posted that earlier. Didn't work for me, or should I say, I couldn't get it to work
[2018-07-21 15:22:40]
mr.vibez :
I tried a few tools to change my locale on Android and couldn't get 5ghz to work
[2018-07-21 17:37:59]
mr.vibez :
@aciid so changing your language enabled 5ghz?
[2018-07-21 17:40:14]
aciid :
I did tha ton the emulated Android way backfew weeks ago, not yet on physical
[2018-07-21 17:41:07]
aciid :
but as we judged from the Java class's it was as underlying check. even DJI uses multiple checks so it would probably not work in real life.
```
10940 ms -[DJICountryCodeManager currentCountryCode]
10940 ms | -[DJICountryCodeManager countryCodeForGPS]
10940 ms | -[DJICountryCodeManager countryCodeForMCC]
10940 ms | -[DJICountryCodeManager countryCodeForIP]
```
[2018-07-21 17:42:04]
aciid :
@mr.vibez I have my jb iphone now ill actually check how it looks on this now.
[2018-07-21 17:46:00]
mr.vibez :
Interesting that guy got it working
[2018-07-21 17:46:24]
mr.vibez :
Unless it failed once outside
[2018-07-21 18:10:50]
ender :
Guys, anything smart i could do with a Anafi running .87 beta version ?
[2018-07-21 18:12:07]
ender :
(just got back home and got the message from a friend who just got his..)
[2018-07-21 18:57:28]
ender :
wth, i cannot seem to get adb to mpp to work anymore.
[2018-07-21 18:57:34]
ender :
was there some special trick ?
[2018-07-21 18:58:04]
ender :
Can i let the mpp boot up and connect to anafi and THEN connect to the OSX/Ubuntu or does it have to be connected from the start ?!
[2018-07-21 19:01:47]
ender :
ah stupid me, typo !
[2018-07-21 19:15:54]
aciid :
yeah remember to adb connect
[2018-07-21 19:20:42]
ender :
na i tried port 905
[2018-07-21 19:42:07]
aciid :
@ender you cant connect?
[2018-07-21 19:42:20]
aciid :
Port is 9005
[2018-07-21 19:42:29]
aciid :
If i recall correctly
[2018-07-21 19:42:48]
aciid :
Im mobile atm ill help as i can
[2018-07-21 19:45:25]
ender :
9050 and yes i can connect to mpp but not to anafi as foreseen :disappointed:
[2018-07-21 19:48:21]
aciid :
Hey its not done yet
[2018-07-21 19:48:30]
aciid :
The anafi thing :/
[2018-07-21 19:49:32]
aciid :
If someone finds jtag pins that would be great
[2018-07-21 20:16:59]
ender :
@fredz: did you adb into your mpp ? IF so, can you see if your mpp works on higher txpower when you forced it to fcc ?
[2018-07-21 20:17:23]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBUHE6UR1/-.pl)
[2018-07-21 20:17:48]
ender :
mine says 14 dBm which is 25mW, lolz
[2018-07-21 20:18:10]
ender :
and as i said, also a real world test did not show me 1m more distance using fake GPS
[2018-07-21 20:18:21]
ender :
now i also changed MNC, MCC, region, language, whatnot
[2018-07-21 20:18:27]
ender :
no f*cking way
[2018-07-21 20:18:41]
mr.vibez :
Did it enable 5ghz?
[2018-07-21 20:19:05]
ender :
well, i always have 5 G available here (de)
[2018-07-21 20:19:28]
ender :
so it did NOT disable it :slightly_smiling_face:
[2018-07-21 20:19:40]
mr.vibez :
Ah, only 2ghz here uk
[2018-07-21 20:50:19]
mr.vibez :
Looks interesting
[2018-07-21 20:52:17]
ender :
Yes Lee, but for me patching around there did not step up Tx Power :disappointed:
[2018-07-21 20:53:04]
mr.vibez :
Shame
[2018-07-21 20:53:18]
ender :
And i now also tried with second anafi (friends). No change in Ty power with fake gps or whatever. Frustrating. I cnanot believ that i have 2 special Anafi at hand here so i dont know if i can even test if i am patching stuff…
[2018-07-21 20:53:54]
ender :
If i recall the fake GPS method did also not work for you Lee, right ?
[2018-07-21 20:54:01]
ender :
aciid: what about you, did you try it ?
[2018-07-21 20:54:45]
mr.vibez :
It make no difference on wifianalyser or to real life range test
[2018-07-21 20:54:49]
ender :
good night, frustrating stuff, that FCC thingy. For DJI it was so easy starting with MNC/MCC…
[2018-07-21 20:54:55]
ender :
yep lee, same for me
[2018-07-21 20:55:08]
aciid :
I have a iphone
[2018-07-21 20:55:17]
ender :
No android ?! Darn…
[2018-07-21 20:55:24]
aciid :
yeah , but the rules are the same
[2018-07-21 20:55:35]
aciid :
both apps are vey heavily obfuscated
[2018-07-21 20:55:37]
aciid :
in logic
[2018-07-21 20:55:43]
ender :
yep, as its jailbroken :slightly_smiling_face:
[2018-07-21 20:55:54]
ender :
So did you manage to step up txpower somehow ?
[2018-07-21 20:55:59]
aciid :
yes but I mean this new technology I've been woved into
[2018-07-21 20:56:02]
aciid :
"FRIDA"
[2018-07-21 20:56:06]
aciid :
userland pathcing without jailbreaking
[2018-07-21 20:56:16]
aciid :
it's something we can share to community once tweaks are ready
[2018-07-21 20:56:37]
aciid :
I've learned about it here from OG's originally
[2018-07-21 20:56:38]
ender :
yep, i read about it in DJI GO patching…
[2018-07-21 20:57:47]
ender :
i cannot believe how fredz v´can do & measure it with simple tricks on every device and i cannot on 2 different anafis…
[2018-07-21 20:57:57]
aciid :
I've been studying both android and ios freeflight for hours, but as I knew the earlier thing was not correct since i was on emulator
[2018-07-21 20:58:10]
aciid :
I feel you, I have a hackrf now
[2018-07-21 20:58:23]
aciid :
i can measure now too
[2018-07-21 20:58:31]
ender :
okay
[2018-07-21 20:58:33]
aciid :
like not accurate
[2018-07-21 20:58:55]
ender :
the difference between CE & FCC can be measured with a wet hankerchief :slightly_smiling_face:
[2018-07-21 20:58:59]
ender :
No need for accuracy
[2018-07-21 20:59:04]
aciid :
but I can see gain difference for sure
[2018-07-21 20:59:18]
ender :
oh you can ? With FakeGPS method ?
[2018-07-21 20:59:28]
aciid :
no i mean
[2018-07-21 20:59:35]
aciid :
if ill test
[2018-07-21 20:59:36]
ender :
ah potentially
[2018-07-21 20:59:42]
aciid :
yeah sorry
[2018-07-21 20:59:54]
aciid :
but im in a car now, i can probably take a peek into the ios source here
[2018-07-21 20:59:57]
aciid :
i have over an hour drive
[2018-07-21 21:00:02]
aciid :
in a passenger seat
[2018-07-21 21:00:14]
aciid :
actually i dont have an reverse tools with me
[2018-07-21 21:00:15]
ender :
I am still dizzy from travelling, going to bed now :slightly_smiling_face:
[2018-07-21 21:00:19]
aciid :
yah
[2018-07-21 21:00:19]
ender :
uhhh
[2018-07-21 21:00:27]
aciid :
hmm I need to find ida or something
[2018-07-21 21:00:35]
aciid :
links are dead lol
[2018-07-21 21:00:48]
aciid :
i don't have it in my dropbox too but ill try to search for it
[2018-07-21 21:01:04]
aciid :
but once im at home ill jump on the java source because we were far
[2018-07-21 21:02:33]
ender :
g’night guys !
[2018-07-21 21:02:39]
aciid :
nite nite
[2018-07-21 23:05:38]
aciid :
found something interesting from android client, can't test.
com/parrot/drone/groundsdk/internal/GroundSdkConfig.java
[2018-07-21 23:06:26]
aciid :
@aciid uploaded a file: [Untitled](https://dji-rev.slack.com/files/U6AD6A1QU/FBUJ0CPPD/-.txt)
[2018-07-21 23:49:42]
aciid :
Spawning `com.parrot.freeflight6`...
[*] Start: Hooking into "GroundSdk.GeofenceCore" methods
Hooking: - maxDistance
[*] Hooked: - maxDistance
[*] Completed: Hooking into "GroundSdk.GeofenceCore" methods
iPhone - WIFI Anafi
```
[*] Detected call to: Geofence: mode = GeofenceModeSetting: cylinder updating: [false] maxAltitude = 0.5 / 82.6870498657227 / 150.0 [false] maxDistance = 10.0 / 283.751251220703 / 2000.0 [false]] -> maxDistance
```
iPhone MCC - ANAFI
```
[*] Detected call to: Geofence: mode = GeofenceModeSetting: cylinder updating: [false] maxAltitude = 0.5 / 82.6870498657227 / 150.0 [false] maxDistance = 10.0 / 283.751251220703 / 2000.0 [false]] -> maxDistance
```
[2018-07-22 00:31:55]
aciid :
@aciid uploaded a file: [ArsdkEngine.ArsdkDeviceCtrlBackend -> loads](https://dji-rev.slack.com/files/U6AD6A1QU/FBU17AXNC/arsdkengine_arsdkdevicectrlbackend_-__loads.txt)
[2018-07-22 00:34:21]
aciid :
all commands from MCC/RC -> Phone come via ( hundred per second ? )
[*] Detected call to: ArsdkEngine.ArsdkDeviceCtrlBackend: 0x1c4248790 -> onCommandReceived:
the pointer is randomly generated because of reasons I don't understand yet the loader is . address in code below links to that huge codeblock that dechipers command to respective module or acts
```
/* @class _TtC11ArsdkEngine22ArsdkDeviceCtrlBackend */
-(void)onCommandReceived:(void *)arg2 {
swift_unknownUnownedLoadStrong();
[self retain];
loc_13bd94();
[self release];
[r20 release];
return;
}
```
[2018-07-22 00:38:39]
aciid :
:man_in_lotus_position::sleeping::sleeping_accommodation: gn!
[2018-07-22 18:22:01]
aciid :
hmm I changed firmware version back to 0.8.4-beta in plist file in iOS the app prompts me to update
[2018-07-22 18:22:07]
aciid :
im checking if I can "re upgrade"
[2018-07-22 18:22:16]
aciid :
we can capture those commands etc
[2018-07-22 18:23:09]
aciid :
AHAHAH
[2018-07-22 18:23:10]
aciid :
it works
[2018-07-22 18:23:42]
aciid :
@aciid uploaded a file: [Unknown-3.png](https://dji-rev.slack.com/files/U6AD6A1QU/FBV0YP38V/unknown-3.png)
[2018-07-22 18:24:09]
aciid :
$ scp com.parrot.freeflight6.plist root@192.168.1.78:/private/var/mobile/Containers/Data/Application/EF6F1DC2-7483-4E79-A872-0B998921D696/Library/Preferences/
[2018-07-22 18:24:19]
aciid :
xcode can edit plist
[2018-07-22 18:24:24]
aciid :
that command pushes the plist
[2018-07-22 19:39:43]
mr.vibez :
Nice, so if we can mod the fw, we know we can reflash it
[2018-07-22 19:41:39]
aciid :
tcpdump crashes the ADB session on Anafi Remote, anyone know why?
[2018-07-22 19:44:15]
aciid :
ah need to run it via shell command
[2018-07-22 19:44:18]
aciid :
not in interactive
[2018-07-22 19:44:26]
aciid :
adb shell tcpdump -i any -p -s 0 -w /tmp/capture.pcap
this works
[2018-07-22 21:35:46]
aciid :
found these strings in FreeFlight6 binary
```
__cstring:0000000100838F20 00000027 C _TtC11FreeFlight619DebugViewController
__cstring:000000010083FA90 00000014 C DebugViewController
__cstring:0000000100840D10 0000001C C _TtC11FreeFlight69DebugView
__const:0000000100888900 00000024 C 11FreeFlight619DebugViewControllerC
__const:0000000100888A20 00000042 C 11FreeFlight612DebugViewKey33_5C100886A5AB497A869700BF661D8509LLO
__const:0000000100890080 00000019 C 11FreeFlight69DebugViewC
__swift3_typeref:0000000100962A60 00000042 C 11FreeFlight612DebugViewKey33_5C100886A5AB497A869700BF661D8509LLO
__swift3_typeref:0000000100962AB0 00000024 C 11FreeFlight619DebugViewControllerC
__swift3_typeref:0000000100962B20 00000059 C s10DictionaryVy11FreeFlight612DebugViewKey33_5C100886A5AB497A869700BF661D8509LLOAC0dE0CG
__swift3_typeref:0000000100962D40 00000028 C 11FreeFlight619DebugViewControllerCSgXw
__swift3_typeref:000000010096C180 00000019 C 11FreeFlight69DebugViewC
```
[2018-07-22 21:56:53]
aciid :
if anyone is versed with clientside, this probably exists in Android too and should be easier to trim through how to change to this view
[2018-07-23 08:08:59]
aciid :
I wonder if Parrot will ever open the bird. I'm running into deadends eveywhere. the sd-card debug certificate scan seems to be a closed system
[2018-07-23 08:10:37]
aciid :
what i'm hoping for ofcourse is that someone with previous experience in jtag could step-in too to probably see that if the chips can be read/written
[2018-07-23 08:16:40]
aciid :
@aciid uploaded a file: [Fyi, anafi is not ”that fast” but ita fast](https://dji-rev.slack.com/files/U6AD6A1QU/FBW3EF62K/image_from_ios.jpg)
[2018-07-23 08:42:19]
ender :
Hi ! Gotta do some catchup with real life work :slightly_smiling_face: but looking here from time to time: I was unable to make ANY other microSD work except the bundled one. I also have faster 64GByte cards here but they are all refused. Did your 1000x work, aciid ?
[2018-07-23 08:47:19]
aciid :
ahhh mine works neither
[2018-07-23 08:47:27]
aciid :
jesus what a piece of garbage
[2018-07-23 08:53:50]
ender :
Well aciid, we know its all fixable by FW & Appupdates so thats cool :slightly_smiling_face:
[2018-07-23 08:54:43]
ender :
SOME people reported their SD cards worked after haveing them inserted while doing a full reset. I am not yet desperate enough to do that, need to recalibrate & set settings again after that, otherwise no biggie. so if you feel like it…
[2018-07-23 08:55:15]
ender :
Even cards they explicitely recommend are not working :slightly_smiling_face:
[2018-07-23 08:55:42]
ender :
uhh have nothing here but maybe one could look for a special partition scheme on the stock cards ?
[2018-07-23 10:04:57]
mr.vibez :
My Evo u3 worked. Just needed to format to fat32 and then let the bird format it.
[2018-07-23 10:08:42]
aciid :
ill try that
[2018-07-23 10:09:21]
aciid :
im starting to get pissed that no release date for SDK is apparent
[2018-07-23 10:12:42]
aciid :
it worked, thanks!
[2018-07-23 10:16:59]
ender :
@mr.vibez wfich size ?
[2018-07-23 10:17:23]
ender :
aciid: whoa, worked by full reset ?
[2018-07-23 10:19:49]
ender :
was just about to say that there maybe is a 32GB limit as my “slow as hell” 32 GB just worked but my faster cards are all 64GB+
[2018-07-23 10:20:09]
ender :
so i go through the process of doing full resets with the 64GB cards now :slightly_smiling_face:
[2018-07-23 10:20:13]
aciid :
formatted lexar x1000 64gb card on windows 10 to exFAT
[2018-07-23 10:20:23]
ender :
ohhhhh
[2018-07-23 10:20:34]
ender :
exFat, cool
[2018-07-23 10:20:51]
ender :
(DID try that once but never since)
[2018-07-23 10:21:13]
aciid :
drone said "not formatted" opened up the card view in freeflight, pressed format sd-card.
prompt came up (didn't before PC exFAT reset)
confirmed format
took some 2-3minutes for the sd-card icon to go green and 63.... of 64gb is now usable
[2018-07-23 10:21:25]
ender :
no reset needed ?!
[2018-07-23 10:21:38]
aciid :
it wanted to format again on the drone after formatting to exFAT
[2018-07-23 10:21:51]
aciid :
i tried it from packaging straight to drone
[2018-07-23 10:21:55]
aciid :
that didn't work at all
[2018-07-23 10:22:06]
aciid :
probably missing GPT
[2018-07-23 10:22:10]
ender :
so did you try reformat ?
[2018-07-23 10:22:11]
aciid :
thats why the drone failed
[2018-07-23 10:22:16]
ender :
or just gave ittime ?
[2018-07-23 10:22:23]
aciid :
yeah it took some like 3minutes
[2018-07-23 10:22:31]
aciid :
but alas I exFAT formatted it before
[2018-07-23 10:22:35]
ender :
okay, no full reset, no drone-format ?
[2018-07-23 10:22:40]
aciid :
nope
[2018-07-23 10:22:43]
aciid :
no drone resets
[2018-07-23 10:22:53]
aciid :
how do you even full-reset anafi?
[2018-07-23 10:22:58]
aciid :
without spoofing firmware version
[2018-07-23 10:23:14]
ender :
loooong power buttin press, then the 4 bars count from 1 to 4 in red. after that release
[2018-07-23 10:23:27]
aciid :
:open_mouth:
[2018-07-23 10:23:33]
aciid :
which firmware it boots into?
[2018-07-23 10:23:43]
ender :
well, the last flashed :slightly_smiling_face:
[2018-07-23 10:23:53]
ender :
no magic, just purge all settings i guess
[2018-07-23 10:24:15]
ender :
(if you think it reflashes, it probably does not do that)
[2018-07-23 10:24:38]
aciid :
im getting over worked about this drone, I almost bought a bga NAND reader to just be done with this
[2018-07-23 10:24:54]
aciid :
this is all ive had in my mind for 2 weeks now
[2018-07-23 10:25:05]
ender :
:wink:
[2018-07-23 10:26:16]
ender :
To clear that up: no drone reset OKAY but did you allow the drone to reformat your exfat drive ?
[2018-07-23 10:26:36]
aciid :
yup
[2018-07-23 10:26:42]
aciid :
it prompts to format the card even if its in exFAT
[2018-07-23 10:26:57]
aciid :
confirm it and it appears as usable space in 2-3mins
[2018-07-23 10:27:01]
ender :
okay, usually just shows “x” and reformat fails if tried manually for my.
[2018-07-23 10:27:07]
ender :
Will try to start with exFAT
[2018-07-23 10:27:11]
aciid :
<https://www.elnec.com/en/products/programming-adapters/DIL48_BGA67-1_ZIF-CS_NAND-1/>
this fits the toshiba MMC NAND found in the anafi board
[2018-07-23 10:27:53]
ender :
uhhh why the heck is it that expensive
[2018-07-23 10:28:03]
mr.vibez :
64gb
[2018-07-23 10:28:20]
ender :
thx lee !
[2018-07-23 10:28:22]
aciid :
beeprog is a expensive thingy
[2018-07-23 10:28:47]
aciid :
but get this, it could read in the whole NAND and it could be then modified and rewritten
[2018-07-23 10:29:13]
aciid :
but it would have to be hot-air station re-soldered
[2018-07-23 10:29:15]
aciid :
off and on bakc again
[2018-07-23 10:30:58]
ender :
exactly, too messy for my hands :slightly_smiling_face:
[2018-07-23 10:31:13]
ender :
I loved those atmel “plug on” Adaters, thats what i like :slightly_smiling_face:
[2018-07-23 10:31:54]
aciid :
yeah I have those aswell its fun to tinker around burn images and bootloaders
[2018-07-23 10:32:04]
aciid :
i also have a cheap chinese programmer for them
[2018-07-23 10:33:17]
ender :
Noob question(s): you were able to extract the Anafi firmware update including the UFI part, yes ? What prevents modifying and repacking ? Signing ? checksum ?
[2018-07-23 10:34:43]
aciid :
the .tar archives which contain "updater.bin" and "image.bin" contain files such as "signature" and "header" I have not checked does it make any validations.
[2018-07-23 10:35:17]
ender :
okay, so it **could** work but not very probable because of signing, right ?
[2018-07-23 10:35:28]
aciid :
it's probable that it's signed
[2018-07-23 10:35:50]
ender :
yep yep and not as stupid as DJI giving away keys…
[2018-07-23 10:36:21]
aciid :
1500€ and this could be solved xD
[2018-07-23 10:36:28]
ender :
:wink:
[2018-07-23 10:36:59]
aciid :
got me thinking why none commercial site like (c0ptersafe) doesn't do non-dji drones
[2018-07-23 10:37:09]
aciid :
then i remembered he is on this server and just copies our stuff.....
[2018-07-23 10:37:22]
aciid :
sells nfz sport firmwares for $300
[2018-07-23 10:37:25]
aciid :
fucking horrendous
[2018-07-23 10:37:50]
ender :
actually i think its a bit unfair as CS started original work by himself if i recall it right.
[2018-07-23 10:38:20]
ender :
I am not 100% on that, thats looong ago…
[2018-07-23 10:38:24]
aciid :
yea
[2018-07-23 10:39:07]
ender :
and i am not sure about giving back knowledge at OG level either…
[2018-07-23 10:39:53]
aciid :
just saw him say something on another channel weke ago
[2018-07-23 10:39:59]
aciid :
I was like "oh he is here"
[2018-07-23 10:40:03]
ender :
:wink:
[2018-07-23 10:40:15]
ender :
He wasnt here for a LONG time, at least openly.
[2018-07-23 10:40:34]
ender :
(maybe its THEM, i think so…)
[2018-07-23 12:59:50]
aciid :
I sent a begging email to Parrot to open up the drone :smile:
[2018-07-23 13:08:55]
ender :
:wink:
[2018-07-23 13:18:45]
makingthisnameup :
And then plot twist, DJI opens everything :joy:
[2018-07-23 13:20:35]
makingthisnameup :
Srsly parrot do it. Overnight community support
[2018-07-23 13:21:08]
makingthisnameup :
Start wearing parrot shirts
[2018-07-23 14:39:46]
ender :
And right after that pigs will fly… :slightly_smiling_face:
[2018-07-23 14:40:21]
ender :
(At least in the DJI case, Parrot was close to doing just that at the transition from AR Drone to bebop AFAIK)
[2018-07-23 14:42:14]
ender :
btw aciid, got my UHS 3 64GB to work with the anafi. I was not prompted for it but i formatted it via Freeflight (Android) and LEFT THE SCREEN OPEN instead of closing it. AFter a minute it refreshed showing all lovely BYTE to be available for pix & images, hurray ! On the bad side my OSX cannot read the card now while my W10 can … Got to look at that much closer when i got time…
[2018-07-23 16:12:49]
c.binetti :
It is a known problem that the card is not readable with OSX but only with Windows afterwards. Maybe they will fix this with an update.
[2018-07-23 16:57:35]
hostile :
@aciid awesome work mate... <https://dji-rev.slack.com/archives/CBMKLBXEF/p1532216982000028>
[2018-07-23 16:59:43]
hostile :
@jezzab you in here?
[2018-07-23 16:59:46]
jezzab :
@jezzab has joined the channel
[2018-07-23 17:00:02]
hostile :
@czokie you too...
[2018-07-23 17:00:05]
czokie :
@czokie has joined the channel
[2018-07-23 17:00:12]
hostile :
will probably enjoy this stuff.
[2018-07-23 19:05:26]
aciid :
<https://parrotpilots.com/forums/anafi.6/> some more recent discussions seem to take place here, [parrot.com](http://parrot.com) forums are a graveyard
[2018-07-23 19:28:00]
aciid :
@aciid uploaded a file: [anafi4k_nand.dtb -> dts <dtc -I dtb -O dts -o dtb.txt anafi4k_nand.dtb>](https://dji-rev.slack.com/files/U6AD6A1QU/FBUU6RB2M/anafi4k_nand_dtb_-__dts__dtc_-i_dtb_-o_dts_-o_dtb_txt_anafi4k_nand_dtb_.txt)
[2018-07-23 19:29:22]
aciid :
@aciid uploaded a file: [msm8909-pm8916-mpp3-hw00.dtb -> dts <dtc -I dtb -O dts -o dtb.txt msm8909-pm8916-mpp3-hw00.dtb>](https://dji-rev.slack.com/files/U6AD6A1QU/FBUU7P6GZ/msm8909-pm8916-mpp3-hw00_dtb_-__dts__dtc_-i_dtb_-o_dts_-o_dtb_txt_msm8909-pm8916-mpp3-hw00_dtb_.txt)
[2018-07-23 21:46:31]
jezzab :
Very nice. Well done
[2018-07-24 00:13:16]
aciid :
some bools reflect changes in code, for example IAP billing uses FAKE_IN_APP_PURCHASE
[2018-07-24 08:36:56]
aciid :
@makingthisnameup invite
[2018-07-24 08:37:00]
aciid :
oh youi are here lol
[2018-07-24 08:42:02]
makingthisnameup :
Yes! I lurk. Well kinda.
[2018-07-24 08:42:20]
makingthisnameup :
Rant and then lurk
[2018-07-24 10:23:09]
ender :
Donald style :wink:
[2018-07-24 10:31:49]
ender :
There are some old warriors from bebop times that i found again. Like me i guess most only have very limited hacking skills but i could be wrong. At least for testing / collecting data / bringing up ideas they could be useful i guess. WOuld you mind me pointing them here ? (If NO, where is that darn invitation link ?!)
[2018-07-24 10:32:44]
ender :
probably i should tag this @hostile & @aciid at least and to everyone else who feels in charge in this channel :wink:
[2018-07-24 10:33:39]
aciid :
can they open <https://dji-rev.slack.com>
[2018-07-24 10:33:55]
aciid :
ah need invit elink still
[2018-07-24 10:34:31]
aciid :
@ender <https://join.slack.com/t/dji-rev/shared_invite/enQtMjk5OTEyMzcyMjI3LTdlZjY4NzQ5M2M2NmE5ZWM4OTgyNThmZDVmZjdjODE4ODYyNmYwZjYxMDcyYzcxNmZlYzI5ZjI2ZGQ2NGY1ZTc>
[2018-07-24 10:35:17]
ender :
They an then simply join the anafi channel right ?
[2018-07-24 10:35:24]
ender :
like "join ~anafi"
[2018-07-24 10:35:24]
aciid :
yea
[2018-07-24 10:35:32]
aciid :
they have to press Channels
[2018-07-24 10:35:34]
aciid :
text
[2018-07-24 10:35:37]
aciid :
to see the listng
[2018-07-24 10:35:50]
aciid :
<https://dji-rev.slack.com/messages/CBMKLBXEF> or press here this is link to ~anafi
[2018-07-24 10:37:03]
ender :
yep.
[2018-07-24 11:12:56]
aciid :
Would be great to see some older parrot guys yeah
[2018-07-24 11:13:18]
aciid :
I asked on parrotpilots if anyone has the beta binaries for ios or android
[2018-07-24 11:13:29]
aciid :
<https://parrotpilots.com/threads/freeflight6-android-ios-betas.81/>
[2018-07-24 11:53:10]
ender :
Okay, invited 3 “old Parroteers” and 2 guys that code SDK Apps that i dont know SO well. Lets see if anyone follows through…
[2018-07-24 13:44:29]
hostile :
@mail451 should be in here as one of those old school Parrot vets @aciid
[2018-07-24 13:44:32]
mail451 :
@mail451 has joined the channel
[2018-07-24 13:44:44]
hostile :
I know he is busy with his Spark atm
[2018-07-24 13:44:51]
hostile :
but I'm sure you can bounce ideas off him too
[2018-07-24 13:45:46]
hostile :
@ender bring em along mate ! The more the merrier.
[2018-07-24 13:46:31]
aciid :
I feel broken down by this. I was looking at proper NAND chip programmer for the toshiba 2GB chip that contains the OS
[2018-07-24 13:47:20]
aciid :
<https://www.elnec.com/en/products/programming-adapters/DIL48_BGA67-1_ZIF-CS_NAND-1/>
<https://www.elnec.com/en/products/universal-programmers/beeprog2/>
this set would handle that and couple others lel
[2018-07-24 14:13:04]
mail451 :
@hostile hey!
[2018-07-24 14:13:14]
mail451 :
Actually as part of my company we're buying the Anafi...
[2018-07-24 14:15:52]
aciid :
hey it's a great drone and the controller already has ADB enabled from actory
[2018-07-24 14:16:03]
mail451 :
wow, nice.
[2018-07-24 14:16:32]
aciid :
but drone adb still a mystery on lockdown, it searches for developer certificate on the sd-card
[2018-07-24 15:41:07]
hostile :
yeah this will be hard to bypass considering serial number is also part of the certificate
[2018-07-24 15:41:22]
hostile :
unless we can override the certificate chain somehow
[2018-07-24 15:41:35]
hostile :
I'm sure the controller can **push** firmware / files to the drone somehow
[2018-07-24 15:42:29]
aciid :
what do you think about modifying the NAND, if the cost is not taken into account.
[2018-07-24 17:23:15]
aciid :
<https://imgur.com/a/nUKmMx9> how wifi looks in sdr
[2018-07-24 19:34:34]
aciid :
still no response from Parrot
[2018-07-24 20:28:53]
aciid :
what should I do if they don't respond?
[2018-07-24 20:35:24]
aciid :
<https://parrotpilots.com/threads/what-bandwidth-setting.83/>
[2018-07-24 20:37:42]
ender :
aciid, you dont really think they will reply in a helpful manner, do you ? I mean i think they will reply but it will be blablablabla NO
[2018-07-24 20:39:28]
aciid :
I was just manic to try
[2018-07-24 20:48:29]
ender :
you know what we did on the Ar Drone and bebop 1 ? Try that :stuck_out_tongue:
[2018-07-24 20:49:02]
ender :
As i said, i believe they were really considering when they moved to the bebop.
[2018-07-24 20:50:58]
aciid :
I just feel like the attackvectors are really limited here, maybe its a test. Since libpomp is opensource which is the control socket they might want to see if we break it on the controller
[2018-07-24 20:51:45]
aciid :
We could crosscompile new binaries to RC so it sends something nasty to bird
[2018-07-24 20:54:39]
ender :
i dont think they are that subtle (testing) , but i could be wrong :slightly_smiling_face:
[2018-07-24 21:03:27]
aciid :
I just feel defeated since ive tried almost everything ive cameup with but theres still things to do which require more pre-setup. Such as redirecting update fw stream, possibly jtag/nanddump, webexploit
[2018-07-24 21:08:53]
ender :
Heads up aciid :slightly_smiling_face:
[2018-07-25 00:47:39]
aciid :
@ender it's 3:48 here and I was browsing parrotpilots. saw a post about someone specifying adb and firmware things, started writing a personal message to this user to invite user to this slack.
read the username twice, or three times.
almost sent you a invite :smile:
[2018-07-25 00:54:59]
aciid :
<https://freeflight6.herokuapp.com/> - Freeflight 6 beta app, all flightmodes free until september. No fw discoveries so far
[2018-07-25 00:56:59]
aciid :
@aciid uploaded a file: [Image uploaded from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBW5NN2G4/image_uploaded_from_ios.png)
[2018-07-25 01:09:53]
aciid :
You need to press buy button i. The IAP. It will then say beta users are not biled
[2018-07-25 01:10:07]
aciid :
I just installed and activated all
[2018-07-25 04:25:47]
makingthisnameup :
Oh I'll play your beta game parrot. Signing up
[2018-07-25 07:29:17]
ender :
Ohhhhh i would so LOOOVE to be invited :stuck_out_tongue_winking_eye:
[2018-07-25 07:32:23]
ender :
oops, i signed up for that a month ago or so :slightly_smiling_face: That App is virtually identical with the one in the store. it just had not passed the Apple testing afaik. No proper Beta test, just a way to get the App to the screaming customers as drone was out before test. We did this onec for a Camera App :slightly_smiling_face:
[2018-07-25 07:42:15]
aciid :
its a testflight build
[2018-07-25 07:42:52]
aciid :
it should be quite the same as in appstore from my experience yeah its a way to release builds without apple screening
[2018-07-25 07:42:56]
aciid :
tell you what
[2018-07-25 07:43:01]
aciid :
ill pull that app now from the phone
[2018-07-25 07:43:04]
aciid :
and we can compare
[2018-07-25 07:43:08]
aciid :
but its probably same
[2018-07-25 07:43:12]
aciid :
it worked btw
[2018-07-25 07:43:14]
aciid :
the iap unlock
[2018-07-25 11:11:36]
ender :
Guys, please refresh my memory: is there ANYONE who was clearly able to switch bewteen CE & FCC and clearly measure the difference ? I played around again and using the Android sharedpreferences file i may got it but its sooo difficult to see as i also suspect (and saw in iwconfig) that Tx power is automatically adjusted i need confirmation or FAIL…
[2018-07-25 11:22:17]
fredz :
I have using Fake GPS
[2018-07-25 11:22:33]
fredz :
@fredz uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6179MS6R/FBWFPUJ03/image_from_ios.jpg)
[2018-07-25 11:22:48]
fredz :
@fredz uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6179MS6R/FBVU16J0G/image_from_ios.jpg)
[2018-07-25 11:22:52]
fredz :
Not sure if you can see these 2 pics
[2018-07-25 11:38:01]
ender :
sorry, forgot to say EXCEPT fredz :slightly_smiling_face:
[2018-07-25 11:38:12]
ender :
To rule out that you have somewhat special harware
[2018-07-25 11:43:10]
fredz :
Hehe nobody except you and me dare to open the controller and have an RF meter, it seems
[2018-07-25 11:45:19]
ender :
Hmm, others proved much more cojones then that :slightly_smiling_face:
[2018-07-25 11:46:24]
ender :
But i am quite sure that i saw a Tx Power step up when drone was flying further away. (Like 3 bars, 2 bars, 1 bar, 3 Bars again when flying further away in a straight line).
[2018-07-25 11:46:53]
ender :
And there are hints in the iwconfig that indeed there is an automatic power output leveling enabled.
[2018-07-25 11:47:14]
ender :
(on adb MPP shell)
[2018-07-25 11:52:59]
aciid :
I've opened the controller, but I don't have an RF-meter :<
[2018-07-25 11:53:07]
aciid :
I've thought about buying one from china
[2018-07-25 11:53:36]
aciid :
Ive done great work on DJI GO with country detection I think I'm ready to try and tackle freeflight once more
[2018-07-25 11:56:06]
ender :
aciid, did you try fakegps and measure a difference ?
[2018-07-25 11:56:36]
aciid :
I haven't tried, the fakegps apps for jailbreaked ios cost money, but I can use the iOS developer faking technique
[2018-07-25 11:57:42]
ender :
yep. Before trying to “Frida” the iOS App (as i think thats what you plan to do) you would need to establish a baseline anyways to be sure if its in FCC or CE mode, right ?! MAYBE even just by using a WiFI Scan tool or the likes.
[2018-07-25 11:58:31]
ender :
It drives me mad to be honest :slightly_smiling_face:
[2018-07-25 11:58:37]
aciid :
well my 5.8ghz button is disabled when its in "Finland" mode
[2018-07-25 11:58:40]
aciid :
its grey
[2018-07-25 11:58:47]
aciid :
it wont respond to pressing it
[2018-07-25 11:59:05]
ender :
okay so you would use that as a prove of CC ?
[2018-07-25 11:59:16]
aciid :
well it would then restart connections with the drone
[2018-07-25 11:59:28]
aciid :
it would disconnect if I press that and then I'd get the hackrf out
[2018-07-25 11:59:45]
aciid :
and scan the channel it is showing
[2018-07-25 12:00:00]
aciid :
but as I said freeflight is heavily obfuscated
[2018-07-25 12:02:24]
ender :
well from the program logic we see in Jeb (Android of course) i deduct that this foolish little thing should do the trick --> edit the geolocation file in shared prefs to state “us” or “hk” and set the “last updated” timer to the far future and BINGO. As far as i can see there is no “update time is in the future” check and no other caveat.
[2018-07-25 12:03:05]
ender :
sounds too easy and for the life of mine i cannot prove its working MAYBE because of that auto-Tx-power thing.
[2018-07-25 12:03:26]
ender :
So i need a real live test but cant go away for flying ATM as i have to care for the kids.
[2018-07-25 12:05:39]
aciid :
can you use frida-trace on the geolocation class?
[2018-07-25 12:05:47]
aciid :
that way you see if it gets updated again to something else
[2018-07-25 12:06:02]
aciid :
that would then show us that we need a different approach
[2018-07-25 12:08:13]
ender :
I MAY have botched the last test as i did not reset the update timer so it might just updated from “us” to de.
[2018-07-25 12:09:42]
ender :
@aciid: cant ATM. i dont know sh*t about Frida as iOS is only my “I use it if i am forced to” device. Use it for work but as i use Qt FrameWork i suck at native iOS, only need it very rarely as Qt gets better and better shielding from that messy sh*t.
[2018-07-25 12:10:15]
ender :
I would need Jailbreak to do all that, right ?
[2018-07-25 12:12:36]
aciid :
I'm talking about if someone has android and can use Frida
[2018-07-25 12:12:41]
aciid :
I can do Frida iOS shit here
[2018-07-25 12:15:40]
ender :
It also makes me mad how fredz can change FCC to CE and back in mid flight within seconds as the code here should mean the CC is only updated one time per hour, RIGHT ?
[2018-07-25 12:15:51]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBXMF5EBZ/-.java)
[2018-07-25 12:16:23]
ender :
could you doublecheck that ? UPDATE_RETRY_DELAY_MILLIS is set to one hour (3.6 Million millisecs) ?!
[2018-07-25 12:16:46]
ender :
so how on earth can a change in GPS position lead to an immediate change in FCC / CE ?
[2018-07-25 12:22:48]
ender :
uh oh, i guess i know…sec…
[2018-07-25 12:26:38]
ender :
oh yeah, that mGeoCodeNeeded is set to true if the position changes apruptly for more then 3000m which is probably more then the distance USA<-->EU :slightly_smiling_face:
[2018-07-25 12:26:40]
ender :
lolz
[2018-07-25 12:26:51]
ender :
so there is room for patching…
[2018-07-25 12:26:57]
ender :
will try…
[2018-07-25 12:56:25]
aciid :
```
*** entered -[ArsdkEngine.CommonRadio onRssiChanged:]: ***
arg 1 type: nil nil
arg 1 value: nil
retval type: GroundSdk.RadioCore GroundSdk.RadioCore
retval value: RadioCore - rssi: -36 linkSignalQuality: 4
*** exiting -[ArsdkEngine.CommonRadio onRssiChanged:]: ***
```
[2018-07-25 12:56:30]
aciid :
this can be useful to determine things
[2018-07-25 13:19:34]
aciid :
oh for fss.... the segmentControl which has the buttons for wifi-band setting is a sub-view that doesn't render on Frida printout of elements
[2018-07-25 13:20:04]
ender :
And on Android i cannot do stuff to the resources as it doesnt recompile, ACK
[2018-07-25 13:20:22]
ender :
Would simply enable country selector and be done with it…
[2018-07-25 13:20:22]
aciid :
```
| | | | | | | | | <FreeFlight6.SettingsWiFiRangeCell: 0x110816c00; baseClass = UITableViewCell; frame = (0 69; 670 69); clipsToBounds = YES; opaque = NO; autoresize = W; layer = <CALayer: 0x1c022afc0>>
| | | | | | | | | | <UITableViewCellContentView: 0x10fda7a80; frame = (0 0; 670 69); opaque = NO; gestureRecognizers = <NSArray: 0x1c0641740>; layer = <CALayer: 0x1c022f1a0>>
| | | | | | | | | | | <UILabel: 0x10fdb2b90; frame = (30 24; 166 21); text = 'Wi-Fi band'; opaque = NO; autoresize = RM+BM; userInteractionEnabled = NO; layer = <_UILabelLayer: 0x1c0298240>>
| | | | | | | | | | | <FreeFlight6.SegmentedControl: 0x10fdb2e60; baseClass = UIControl; frame = (204 18.6667; 426 32); autoresize = RM+BM; layer = <CALayer: 0x1c022f2a0>>
| | | | | | | | | | <_UITableViewCellSeparatorView: 0x10fdb3140; frame = (15 74.5; 586 0.5); layer = <CALayer: 0x1c0238f40>>
```
[2018-07-25 13:20:24]
aciid :
oh hei
[2018-07-25 13:20:27]
aciid :
actually
[2018-07-25 13:20:28]
aciid :
it does
[2018-07-25 13:20:31]
aciid :
I learned a thing
[2018-07-25 13:20:34]
aciid :
jsut few days ago
[2018-07-25 13:20:37]
ender :
w00t
[2018-07-25 13:20:39]
aciid :
when are you free
[2018-07-25 13:20:48]
ender :
?
[2018-07-25 13:20:56]
aciid :
i can spec you how its done
[2018-07-25 13:21:02]
aciid :
specify
[2018-07-25 13:21:03]
ender :
uhhh
[2018-07-25 13:21:12]
ender :
how long for a potatoe brain to grok it ?
[2018-07-25 13:21:16]
aciid :
i can actuallly make a video
[2018-07-25 13:21:19]
aciid :
and you can watch it
[2018-07-25 13:21:31]
aciid :
just like the run through
[2018-07-25 13:21:34]
ender :
can you brain transfer it via UART ? :slightly_smiling_face:
[2018-07-25 13:21:41]
aciid :
hah
[2018-07-25 13:21:49]
ender :
low baudrate :slightly_smiling_face:
[2018-07-25 13:21:55]
ender :
okay, whatever you prefer.
[2018-07-25 13:22:21]
aciid :
<https://www.dropbox.com/s/blzazzizcqcoen3/smali-puukotus-ilman-etta-binaari-vahingoittuu.xlsx?dl=1>
[2018-07-25 13:22:28]
aciid :
this is what I wrote to my friend about it
[2018-07-25 13:22:47]
aciid :
as we were hunting clientside overwritten values
[2018-07-25 13:23:47]
ender :
oooookaaaayyyy, And that somehow solves the res recompile problem ?
[2018-07-25 13:24:06]
aciid :
we were doing it wrong
[2018-07-25 13:25:45]
aciid :
right way is to
apktool d -o decompiled_binary freeflight6.apk
jaxd -> extract apk to classes or use jaxd-gui
jaxd- extract and viewer has this "line 123" notation that matches the output of apktool smali files
so you find your changable things in the java-class sources from jaxd and bytepatch changes in the apktool smali decompiled files
[2018-07-25 13:26:03]
aciid :
then you type
apktool b -o patched_apk_out.apk decompiled_binary
[2018-07-25 13:26:10]
aciid :
and it rebuilds the apk from the smali without compiling
[2018-07-25 13:26:16]
aciid :
then you sign the apk and install it
[2018-07-25 13:27:37]
aciid :
**sign apk**
keytool -genkey -v -keystore my-release-key.keystore -alias alias_name -keyalg RSA -keysize 2048 -validity 10000
jarsigner -verbose -sigalg SHA1withRSA -digestalg SHA1 -keystore my-release-key.keystore my_application.apk alias_name
[2018-07-25 13:27:48]
ender :
yes yes thats fine, but actually i do it this way: decompile it in jeb, find what to patch and do that in the smali code, then recompile. But does that somehow solve the problem of resources not beeing able to be recompiled ?
[2018-07-25 13:28:20]
aciid :
what are yo using to recompile?
[2018-07-25 13:28:30]
ender :
apktool
[2018-07-25 13:28:54]
aciid :
have to try apktool decompile rebuild
[2018-07-25 13:29:01]
aciid :
dji go app worked just fine with that method
[2018-07-25 13:29:06]
aciid :
didn't use jeb
[2018-07-25 13:29:17]
ender :
jeb is just for display.
[2018-07-25 13:29:35]
ender :
i decompile (w/o resources) with apktool, change stuff in smali, then recompile &sign.
[2018-07-25 13:29:45]
ender :
if i decompile WITH resources it cannot be recompiled.
[2018-07-25 13:29:52]
ender :
You were at that as well, remember ? :slightly_smiling_face:
[2018-07-25 13:30:06]
aciid :
I tried to compile it with java
[2018-07-25 13:30:08]
aciid :
like
[2018-07-25 13:30:10]
aciid :
build it
[2018-07-25 13:30:30]
aciid :
which was silly
[2018-07-25 13:30:34]
aciid :
it owuld have never worked
[2018-07-25 13:30:44]
ender :
no need for java, jeb can display fine. just decompile code to smali and resources to xml and we would be good
[2018-07-25 13:32:53]
ender :
Hmmm… MAYBE my very first patch approach may WAS right, we just did not wait the one hour to update from “de” to “us”… Which would be solved by clearing app data… Hmmm TRYING…
[2018-07-25 13:33:38]
aciid :
ill try it now with apktool so im not talking shit
[2018-07-25 13:33:48]
ender :
:wink:
[2018-07-25 13:37:30]
aciid :
```
C:\bin>java -jar apktool_2.3.3.jar d -o parrot\smali_out parrot\com.parrot.freeflight6.apk
I: Using Apktool 2.3.3 on com.parrot.freeflight6.apk
I: Loading resource table...
I: Decoding AndroidManifest.xml with resources...
I: Loading resource table from file: C:\Users\Admin\AppData\Local\apktool\framework\1.apk
I: Regular manifest package...
I: Decoding file-resources...
I: Decoding values */* XMLs...
I: Baksmaling classes.dex...
I: Baksmaling classes2.dex...
I: Copying assets and libs...
I: Copying unknown files...
I: Copying original files...
C:\bin>java -jar apktool_2.3.3.jar b -o parrot\patched_smali.apk parrot\smali_out
I: Using Apktool 2.3.3
I: Checking whether sources has changed...
I: Smaling smali folder into classes.dex...
I: Checking whether sources has changed...
I: Smaling smali_classes2 folder into classes2.dex...
I: Checking whether resources has changed...
I: Building resources...
I: Copying libs... (/lib)
I: Copying libs... (/kotlin)
I: Building apk file...
I: Copying unknown files/dir...
I: Built apk...
C:\bin>
```
[2018-07-25 13:37:47]
ender :
wtf
[2018-07-25 13:38:06]
ender :
okay w/o resouces, right ?
[2018-07-25 13:38:56]
aciid :
@aciid uploaded a file: [image.png](https://dji-rev.slack.com/files/U6AD6A1QU/FBW0VEZA4/image.png)
[2018-07-25 13:39:03]
aciid :
@aciid uploaded a file: [image.png](https://dji-rev.slack.com/files/U6AD6A1QU/FBWHYEGN7/image.png)
[2018-07-25 13:39:11]
ender :
wtf
[2018-07-25 13:39:26]
aciid :
it doesn't have the 150mb's worth of firmware images, but I guess you don't need them anyways
[2018-07-25 13:39:33]
ender :
i DID try 2.3.3, didnt i ?!?!?
[2018-07-25 13:39:34]
aciid :
they can be added manually to that build
[2018-07-25 13:41:26]
ender :
uhhh just went outside to test patch, anafi got new FW it seems. Any confirmations ?
[2018-07-25 13:42:37]
aciid :
no fuck no
[2018-07-25 13:42:39]
aciid :
PLS NO
[2018-07-25 13:42:45]
aciid :
what does it offer
[2018-07-25 13:42:51]
aciid :
dont upgrade
[2018-07-25 13:42:56]
ender :
no idea. controller AND anafi.
[2018-07-25 13:43:01]
aciid :
it will close down the controller
[2018-07-25 13:43:06]
ender :
YES i do :slightly_smiling_face: got a second anafi here :slightly_smiling_face:
[2018-07-25 13:43:23]
ender :
the one i am playing with is going back anyways :slightly_smiling_face:
[2018-07-25 13:43:25]
aciid :
ok then you can tell us if it did close that
[2018-07-25 13:43:32]
ender :
YES i will :slightly_smiling_face:
[2018-07-25 13:43:49]
ender :
afk for a minute or two…
[2018-07-25 13:44:51]
aciid :
1.0.1 for drone and 1.0.7 for controller
[2018-07-25 13:45:06]
aciid :
@hostile Anafi new firmware update just hit
[2018-07-25 13:49:05]
aciid :
./Documents/firmwares/skyCtrl3/1.0.7:
total 31952
drwxr-xr-x 3 mobile mobile 96 Jul 25 16:46 ./
drwxr-xr-x 3 mobile mobile 96 Jul 25 16:46 ../
-rw------- 1 mobile mobile 32718037 Jul 25 16:46 mpp3_update.tar.gz
[2018-07-25 13:49:48]
aciid :
./anafi4k/1.0.1:
total 53608
drwxr-xr-x 3 mobile mobile 96 Jul 25 16:49 ./
drwxr-xr-x 3 mobile mobile 96 Jul 25 16:49 ../
-rw------- 1 mobile mobile 54892020 Jul 25 16:49 anafi_update.tar.gz
[2018-07-25 13:53:30]
aciid :
wtf the ubi file is extracted now
[2018-07-25 13:53:35]
aciid :
its not in update bin?
[2018-07-25 13:53:46]
aciid :
ilarilind at Acer 2400 in ~/bin/anafi/mpp3_1.0.7
$ ls -alh
total 141152
drwxr-xr-x 12 ilarilind staff 384B Jul 25 16:52 .
drwxr-xr-x 7 ilarilind staff 224B Jul 25 16:52 ..
-rwxr-xr-x 1 ilarilind staff 439K Jul 9 12:05 appsboot.mbn
-rw-r--r-- 1 ilarilind staff 7.7M Jul 9 12:06 apq8009-recovery.img
-rw-r--r-- 1 ilarilind staff 5.5M Jul 9 12:06 apq8009mpp3-linux-boot.img
drwxr-xr-x 3 ilarilind staff 96B Jan 1 1970 etc
-rw------- 1 ilarilind staff 56B Jul 9 12:06 header
-rw-r--r-- 1 ilarilind staff 23M Jul 9 12:04 mpp3-linux.ubi
-rw-r--r-- 1 ilarilind staff 158K Nov 7 2017 rpm.mbn
-rw-r--r-- 1 ilarilind staff 214K Nov 7 2017 sbl1.mbn
-rwxr-xr-x 1 ilarilind staff 511K Nov 7 2017 tz.mbn
[2018-07-25 13:54:04]
aciid :
so can we no update the file flash it?
[2018-07-25 13:54:47]
aciid :
anafi still has update.bin
[2018-07-25 13:54:51]
aciid :
upi file is packed
[2018-07-25 13:54:57]
aciid :
ilarilind at Acer 2400 in ~/bin/anafi/anafi_1.0.1
$ ls -alh
total 286832
drwxr-xr-x 8 ilarilind staff 256B Jul 25 16:54 .
drwxr-xr-x 7 ilarilind staff 224B Jul 25 16:52 ..
drwxr-xr-x 3 ilarilind staff 96B Jan 1 1970 etc
-rw-r--r-- 1 ilarilind staff 377K Jul 24 20:03 fwupdater.bin
-rw------- 1 ilarilind staff 56B Jul 24 20:03 header
-rw------- 1 ilarilind staff 2.2K Jul 24 20:03 signature
-rw-r--r-- 1 ilarilind staff 87M Jul 24 20:03 update.bin
[2018-07-25 13:56:28]
aciid :
ilarilind at Acer 2400 in ~/bin/anafi/mpp3_1.0.7
$ python3 ../parakeets/mpp/upidump.py --savedir extracted mpp3-linux.ubi
==> mpp3-linux.ubi <==
1 named volumes found, 2 physical volumes, blocksize=0x20000
== volume b'rootfs' ==
saved 523 files
[2018-07-25 14:06:18]
aciid :
looks like a kernel update on the skycontroller
[2018-07-25 14:06:22]
ender :
okay, DNG’s are fixed !
[2018-07-25 14:06:38]
ender :
Hover was rock solid but then there is NO wind here today so it could be unchanged.
[2018-07-25 14:06:52]
aciid :
controller adb seems to be intact
[2018-07-25 14:06:54]
aciid :
no code changes
[2018-07-25 14:07:07]
ender :
damn wanted to say that NOW
[2018-07-25 14:07:13]
aciid :
sorry :<
[2018-07-25 14:07:14]
ender :
why did YOU upgrade ?
[2018-07-25 14:07:18]
aciid :
i didnt
[2018-07-25 14:07:22]
aciid :
i extracted the firmware
[2018-07-25 14:07:27]
aciid :
and ran a compare
[2018-07-25 14:07:40]
ender :
**no** change for controller ?
[2018-07-25 14:07:46]
aciid :
only the kernel
[2018-07-25 14:08:02]
ender :
hmm, any idea what that could mean ?
[2018-07-25 14:08:56]
ender :
brb
[2018-07-25 14:09:44]
ender :
okay, anafi still no adb on 9050 :slightly_smiling_face:
[2018-07-25 14:09:53]
ender :
AND i guess i was flying FCC
[2018-07-25 14:09:59]
ender :
(real life test)
[2018-07-25 14:10:18]
ender :
so i dont know if the FW update improved connection or my patched app did that :slightly_smiling_face:
[2018-07-25 14:10:57]
makingthisnameup :
This is kinda getting exciting
[2018-07-25 14:11:27]
aciid :
@aciid uploaded a file: ["Doesn't look like anything to me" **pokerface**](https://dji-rev.slack.com/files/U6AD6A1QU/FBWFHLX1A/screen_shot_2018-07-25_at_17.10.32.png)
[2018-07-25 14:12:24]
ender :
probably increased version string on all of those :slightly_smiling_face:
[2018-07-25 14:12:29]
aciid :
yea
[2018-07-25 14:12:36]
ender :
Ohhh wind started, need to test hover.
[2018-07-25 14:12:39]
ender :
afk brb
[2018-07-25 14:13:35]
makingthisnameup :
I'ma test hover too. Because you know power in numbers
[2018-07-25 14:17:40]
ender :
muhaha rain also started from out-of-nowhere”. From blue sky to a dark-bad cloud and stormy windgusts in 5 minutes. WOW. NO COLLUSION, NO CLIMATE CHANGE, lolz
[2018-07-25 14:46:38]
ender :
@aciid: when i try to recompile the apk it results in this:
[2018-07-25 14:46:48]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBWKL589H/-.txt)
[2018-07-25 14:47:06]
ender :
ANd thats what i recall. WHY ? where is your magic ? Its windows, right ?
[2018-07-25 14:47:32]
aciid :
jeb extracted?
[2018-07-25 14:47:58]
ender :
nooo
[2018-07-25 14:48:04]
ender :
just your apktool decompile and compile
[2018-07-25 14:48:07]
aciid :
100% same as my paste?
[2018-07-25 14:48:09]
ender :
no jeb no nothing
[2018-07-25 14:48:09]
aciid :
wtf?
[2018-07-25 14:48:12]
aciid :
how does yours not work
[2018-07-25 14:48:13]
ender :
windows ?
[2018-07-25 14:48:20]
aciid :
im using windows 10
[2018-07-25 14:48:43]
ender :
but when we discussed in android_apk_patching channel you had the same problems and started changing paths and so on.
[2018-07-25 14:49:12]
aciid :
i was wrong back then,. i thought it was impossible to repack
[2018-07-25 14:49:21]
aciid :
i was trying to recompile it in java ide
[2018-07-25 14:49:32]
aciid :
like make it into a APK the "project way"
[2018-07-25 14:49:35]
aciid :
gradle and shit
[2018-07-25 14:49:40]
aciid :
but this works
[2018-07-25 14:49:40]
ender :
ahhh
[2018-07-25 14:49:42]
aciid :
apktool
[2018-07-25 14:49:43]
ender :
no thats no way
[2018-07-25 14:49:45]
aciid :
default settings
[2018-07-25 14:49:48]
ender :
damn…
[2018-07-25 14:49:54]
aciid :
hows you not working
[2018-07-25 14:49:54]
ender :
WELL, i did change one xml
[2018-07-25 14:50:02]
aciid :
it shouldnt matter
[2018-07-25 14:50:05]
ender :
probably it only fails it is has something to do
[2018-07-25 14:50:13]
aciid :
as long as you dont fuck up pointers in layouts significantly?
[2018-07-25 14:50:19]
ender :
naaah
[2018-07-25 14:50:28]
aciid :
smali probably checks for their existance on repack
[2018-07-25 14:50:33]
ender :
will try without change
[2018-07-25 14:50:57]
ender :
just to have same result as you without use of course :slightly_smiling_face:
[2018-07-25 14:51:41]
ender :
i am changing “fragment_preferences_network.xml.
[2018-07-25 14:51:51]
ender :
removing the three visibility gone properties
[2018-07-25 14:52:58]
aciid :
damn i need a android to make my life easy
[2018-07-25 14:57:36]
ender :
same w/o change.
[2018-07-25 14:57:45]
ender :
could you do the changes and recompile ?
[2018-07-25 14:57:53]
aciid :
surew
[2018-07-25 14:57:59]
ender :
android:visibility=“gone” replaced with nothing
[2018-07-25 14:58:03]
ender :
3 times in that file
[2018-07-25 14:58:09]
aciid :
file name
[2018-07-25 14:58:17]
ender :
fragment_preferences_network.xml
[2018-07-25 14:58:20]
ender :
in layout
[2018-07-25 14:58:22]
ender :
res
[2018-07-25 14:58:34]
ender :
if those are still wired that would be great :slightly_smiling_face:
[2018-07-25 14:59:03]
aciid :
if this works ill run to the store now and buy a oneplus 6
[2018-07-25 14:59:07]
ender :
same result on OSX :disappointed:
[2018-07-25 14:59:20]
ender :
aciid, a cheap one will do. Even old Yotaphone 2 is great.
[2018-07-25 14:59:27]
ender :
FF6 is better on resources than dji go
[2018-07-25 14:59:41]
ender :
why oh why does it fail ?!
[2018-07-25 14:59:49]
ender :
which java version you use on W10 ?
[2018-07-25 15:00:43]
ender :
BTW on my second flight (judging from the signal bars) i was back on CE.
[2018-07-25 15:00:47]
ender :
lolz
[2018-07-25 15:01:13]
aciid :
C:\bin>java -jar apktool_2.3.3.jar b -o parrot\patched_smali.apk parrot\smali_out
I: Using Apktool 2.3.3
I: Checking whether sources has changed...
I: Checking whether sources has changed...
I: Checking whether resources has changed...
I: Building resources...
I: Building apk file...
I: Copying unknown files/dir...
I: Built apk...
C:\bin>
[2018-07-25 15:01:24]
aciid :
need to sign it
[2018-07-25 15:01:28]
aciid :
ill upload it after that
[2018-07-25 15:01:46]
ender :
holy crap
[2018-07-25 15:01:56]
ender :
could you tell me your java version
[2018-07-25 15:07:55]
aciid :
jre1.8.0_181
[2018-07-25 15:08:16]
ender :
okay, will try the same
[2018-07-25 15:08:24]
aciid :
ill upload it anyways
[2018-07-25 15:08:32]
aciid :
byut better to get your build together too
[2018-07-25 15:08:39]
aciid :
s o you can do it by yourself
[2018-07-25 15:08:59]
ender :
of **course**
[2018-07-25 15:09:02]
aciid :
<https://www.dropbox.com/s/iglduk3hrof1qyv/patched_smali.apk?dl=1> this link in 2 minutes
[2018-07-25 15:09:19]
ender :
haha clicked it a nanosec later
[2018-07-25 15:09:23]
mail451 :
@aciid get a Redmi note 3 or 4
[2018-07-25 15:09:43]
mail451 :
cheap Android phone that works, can be loaded with LineageOS w/ root access and signature spoofing
[2018-07-25 15:09:54]
aciid :
all that i need
[2018-07-25 15:10:13]
aciid :
is the xiaomi note 5 also rootable?
[2018-07-25 15:10:33]
aciid :
unofficial
[2018-07-25 15:10:36]
aciid :
lineageos
[2018-07-25 15:10:41]
aciid :
so probably best to stick with note4?
[2018-07-25 15:10:54]
aciid :
or wat
[2018-07-25 15:13:43]
mail451 :
Redmi Note 5 appears to have official LOS: <https://download.lineageos.org/whyred>
[2018-07-25 15:14:04]
mail451 :
LOS provides an addon for root access: <https://download.lineageos.org/extras>
[2018-07-25 15:14:50]
aciid :
yea looks like note 5 is just more recent
[2018-07-25 15:14:54]
mail451 :
yes
[2018-07-25 15:14:57]
mail451 :
but more expensive
[2018-07-25 15:15:24]
aciid :
ok so, redmi 5 is 5.7" and redmi **note** 5 is 5.9"
[2018-07-25 15:15:25]
aciid :
.DDD
[2018-07-25 15:15:35]
aciid :
model spagetti
[2018-07-25 15:15:46]
mail451 :
Xiaomi models names are confusing
[2018-07-25 15:15:53]
mail451 :
Redmi 5 is called Redmi Note 5 in india
[2018-07-25 15:16:15]
aciid :
ah redmi note 5 = redmi 5 plus
[2018-07-25 15:16:18]
aciid :
yea
[2018-07-25 15:16:21]
mail451 :
yes
[2018-07-25 15:16:27]
aciid :
<https://www.gsmarena.com/compare.php3?idPhone1=8768&idPhone2=8959>
[2018-07-25 15:16:38]
aciid :
base phone is still different without plus or note name
[2018-07-25 15:16:56]
mail451 :
<https://www.gsmarena.com/xiaomi_redmi_note_5_pro-8893.php>
[2018-07-25 15:17:16]
mail451 :
This one supports LOS
[2018-07-25 15:17:23]
mail451 :
Redmi Note 5 **pro**
[2018-07-25 15:19:42]
aciid :
and it doesn't use that name in china
[2018-07-25 15:19:43]
aciid :
for fuck sakes
[2018-07-25 15:20:41]
aciid :
oh it doesn't exist in aliexpress
[2018-07-25 15:21:23]
ender :
aciid, your change worked BUT only one country in the list, cant choose another :slightly_smiling_face:
[2018-07-25 15:21:26]
ender :
hehe
[2018-07-25 15:21:33]
ender :
we’ll get there…
[2018-07-25 15:21:40]
aciid :
waat :smile:
[2018-07-25 15:21:46]
aciid :
which country=
[2018-07-25 15:21:50]
ender :
I installed java version, still apktook error:
[2018-07-25 15:21:51]
aciid :
which list?
[2018-07-25 15:21:52]
ender :
C:\Users\nils\Downloads\_nils>java -version
java version “1.8.0_181”
Java(TM) SE Runtime Environment (build 1.8.0_181-b13)
Java HotSpot(TM) 64-Bit Server VM (build 25.181-b13, mixed mode)
[2018-07-25 15:22:05]
ender :
thats your version, right ?
[2018-07-25 15:22:14]
ender :
country list
[2018-07-25 15:22:21]
aciid :
what country list Ive never seen one
[2018-07-25 15:22:22]
ender :
only contains “Germany”
[2018-07-25 15:22:33]
ender :
you just hacked it to be visible, remember ?
[2018-07-25 15:22:46]
aciid :
there is a list to change country?
[2018-07-25 15:22:49]
aciid :
like a debug menu?
[2018-07-25 15:22:49]
ender :
cc list to choose like in old freeflight versions
[2018-07-25 15:22:59]
ender :
acidd, get your brain together :slightly_smiling_face:
[2018-07-25 15:23:05]
ender :
you just patched that layout for me
[2018-07-25 15:23:10]
aciid :
there is no such thing in iOS
[2018-07-25 15:23:14]
aciid :
i just changed some lines man
[2018-07-25 15:23:17]
ender :
allowing the stuff to be visible :slightly_smiling_face:
[2018-07-25 15:23:27]
aciid :
"old freeflight versions"
[2018-07-25 15:23:31]
ender :
it was there in all previous FF versions
[2018-07-25 15:23:32]
ender :
FF3
[2018-07-25 15:23:34]
aciid :
would you happen to have any of these vrsions?
[2018-07-25 15:23:37]
aciid :
freeflight 6 betas
[2018-07-25 15:23:46]
ender :
no, i mean FF for Bebop & Disco
[2018-07-25 15:23:51]
ender :
& Mambo and whatnot
[2018-07-25 15:23:57]
aciid :
ok
[2018-07-25 15:24:27]
aciid :
so Redmi Note 5 in aliexpress :smile: = Redmi Note 5 Pro elsewhere
[2018-07-25 15:24:35]
mail451 :
Yep.
[2018-07-25 15:24:41]
mail451 :
<https://es.aliexpress.com/store/product/Global-Version-Original-Xiaomi-Redmi-Note-5-4GB-RAM-64GB-ROM-SmartPhone-Snapdragon-636-Octa-Core/311331_32856462704.html>
[2018-07-25 15:25:04]
ender :
why the heck cant i (de)compile, arghh
[2018-07-25 15:29:56]
mail451 :
@ender what can't you decompile?
[2018-07-25 15:30:35]
ender :
if i decompile the freeflight apk with apktool i get tons of errors when compiling again (using latest apktool). See sniplets above.
[2018-07-25 15:30:48]
ender :
Now i updated java version to the same as aciid, still same errors.
[2018-07-25 15:30:59]
ender :
if i (de)compile without resources its fine
[2018-07-25 15:31:10]
ender :
same error on OSX, now also updating OSX java
[2018-07-25 15:31:50]
aciid :
I don't get it
[2018-07-25 15:31:57]
aciid :
are you sure you remembered to install Java 64bit
[2018-07-25 15:31:59]
aciid :
not 32bit
[2018-07-25 15:32:27]
ender :
jep 64 here
[2018-07-25 15:33:08]
mail451 :
Delete framework/1.apk
[2018-07-25 15:33:16]
ender :
?
[2018-07-25 15:33:25]
ender :
in decompiled stuff ?
[2018-07-25 15:34:43]
mail451 :
what is the output for apktool d [ff6_apk] ?
[2018-07-25 15:34:48]
mail451 :
in your system
[2018-07-25 15:35:23]
mail451 :
I had the same error as you when messing with Gopro APK
[2018-07-25 15:36:08]
mail451 :
So I fixed by deleting : /home/konrad/.local/share/apktool/framework/1.apk
[2018-07-25 15:36:15]
aciid :
that might be true
[2018-07-25 15:36:15]
mail451 :
but your path is different
[2018-07-25 15:36:17]
mail451 :
so delete
[2018-07-25 15:36:18]
aciid :
there is a cache on windows too
[2018-07-25 15:36:28]
mail451 :
the file 1.apk that is in framework
[2018-07-25 15:36:30]
mail451 :
worked for me
[2018-07-25 15:36:44]
aciid :
C:\Users\Admin\AppData\Local\apktool
[2018-07-25 15:36:50]
ender :
uhhh
[2018-07-25 15:36:51]
aciid :
theres a 1.apk file
[2018-07-25 15:36:59]
ender :
trycky, trying ….NOW
[2018-07-25 15:37:07]
ender :
java sucks in ALL respects…
[2018-07-25 15:37:25]
aciid :
ive never seen a vacuum use java
[2018-07-25 15:37:31]
mail451 :
lmao
[2018-07-25 15:37:47]
mail451 :
@ender lmk if that fixes it.
[2018-07-25 15:37:53]
ender :
whenever i look at Java i see ONLY vacuum
[2018-07-25 15:38:07]
mail451 :
as an android developer I agree
[2018-07-25 15:38:22]
mail451 :
how do I post snippets?
[2018-07-25 15:38:58]
mail451 :
@mail451 uploaded a file: [Apktool log of FF6.apk](https://dji-rev.slack.com/files/UAU27B42K/FBWUYM9UM/apktool_log_of_ff6_apk.txt)
[2018-07-25 15:39:02]
ender :
just post the crap then clicjk the “+” in the bottom left
[2018-07-25 15:39:04]
ender :
ahh
[2018-07-25 15:39:06]
mail451 :
got it
[2018-07-25 15:39:22]
mail451 :
check it out I apktool d and apktool b after deleting framework/1.apk
[2018-07-25 15:39:39]
ender :
yep yep trying now
[2018-07-25 15:41:45]
ender :
okay, whatever comes out of that. We managed to make the country selection (and outdoor / indoor, which fixes the 5G problem afaik).
[2018-07-25 15:42:34]
ender :
The dropdown only contains one country. how would i find references to that dropdown ? they probably changed the code instead of showing all possible countries like in ff3 ?! DOnt tell me “grep”
[2018-07-25 15:42:58]
mail451 :
what do you need to change?
[2018-07-25 15:43:23]
ender :
we found country selection in a layout xml. it was hidden. After removing that its visible.
[2018-07-25 15:43:44]
mail451 :
go to res/values/strings.xml and find the text of option inside dropdown, then grep your way to the .class code.
[2018-07-25 15:43:47]
mail451 :
oh cool
[2018-07-25 15:44:00]
ender :
somewhere code must set its only item to your curent country. Thats fine. But earlier versions showed all possible countries
[2018-07-25 15:44:10]
ender :
okay
[2018-07-25 15:44:31]
mail451 :
so the goal of android apk mod is to change country?
[2018-07-25 15:44:56]
ender :
..In the hope of changing Tx power to FCC and allow 5Ghz YES
[2018-07-25 15:45:00]
aciid :
```
{
"version": "0.9.9",
"md5": "b79220aa765c3e33d8c59e7229a80ecc",
"product": "0914",
"max_version": "0.8.4-beta3",
"size": 54272405,
"path": "obb:///anafi_update_0.9.9.tgz",
"required_version": "0.8.4-beta3"
},
```
[2018-07-25 15:45:02]
ender :
If the code is unwired NO
[2018-07-25 15:45:03]
aciid :
mystery resolved
[2018-07-25 15:45:12]
aciid :
0.8.4-beta was 0.9.9
[2018-07-25 15:45:17]
ender :
ah :slightly_smiling_face:
[2018-07-25 15:45:21]
aciid :
hmm
[2018-07-25 15:45:28]
aciid :
this file is in resources
[2018-07-25 15:45:28]
ender :
:champagne:
[2018-07-25 15:45:31]
aciid :
so if we repack
[2018-07-25 15:45:32]
aciid :
hmm
[2018-07-25 15:45:36]
aciid :
hmm
[2018-07-25 15:45:36]
aciid :
and change the file
[2018-07-25 15:45:44]
ender :
recompile worked now… #*$§% Java :stuck_out_tongue:
[2018-07-25 15:45:59]
ender :
Bad tools, bad dependencies, bad style, bad %$&§%§
[2018-07-25 15:46:02]
aciid :
ok next try changing res\raw\gsdk_preset_updates.json
[2018-07-25 15:46:10]
aciid :
create a false update
[2018-07-25 15:46:20]
aciid :
like version 1.0.9?
[2018-07-25 15:46:28]
aciid :
see if it wants to update
[2018-07-25 15:46:37]
aciid :
use the same firmware entry
[2018-07-25 15:46:42]
aciid :
you wont run into any trouble
[2018-07-25 15:50:00]
mail451 :
@ender theoretically, if the methods return the cc for USA (or other country) it might work.
[2018-07-25 15:50:33]
ender :
yep i am patching getcountrycode
[2018-07-25 15:50:36]
ender :
to return “us”
[2018-07-25 15:50:43]
mail451 :
ok
[2018-07-25 15:50:50]
ender :
seemed to work at first but second flight was CE again i guess.
[2018-07-25 15:51:00]
ender :
just judging from imprecise signal bars
[2018-07-25 15:51:19]
ender :
see that “us” in the end:
[2018-07-25 15:51:27]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBW45HZ4Y/-.php)
[2018-07-25 15:51:36]
mail451 :
you should patch the other methods and mCountryCode
[2018-07-25 15:51:43]
mail451 :
smali/com/parrot/freeflight/util/location/CountryDetector.smali: "updateCountryCodeFromTelephoneNetwork",
[2018-07-25 15:51:49]
ender :
yep did one day, will prolly do again :slightly_smiling_face:
[2018-07-25 15:51:53]
ender :
yep yep
[2018-07-25 15:52:00]
mail451 :
so it gets the country code from Telephone Network, and updates the string
[2018-07-25 15:52:15]
ender :
or from gps if coords there and coords are > 3000m away from old
[2018-07-25 15:52:35]
mail451 :
this could be a xposed module
[2018-07-25 15:52:39]
aciid :
it didn't write firmware json for the new updates
[2018-07-25 15:52:45]
aciid :
ill try to hack it for the heck of it
[2018-07-25 15:52:54]
aciid :
change the parameter and repack and shit
[2018-07-25 15:53:17]
mail451 :
@aciid check out xposed, it changes java code on the fly without repacking
[2018-07-25 15:53:24]
aciid :
ios :<
[2018-07-25 15:53:33]
aciid :
thats why im looking at aliexpress
[2018-07-25 15:54:04]
aciid :
firmware urls found
[2018-07-25 15:54:08]
mail451 :
nice
[2018-07-25 15:55:01]
aciid :
´´´
<https://firmware.parrot.com/Drones/0914/1.0.1/ALL/anafi_update.tar.gz>
md5 07fadcdc40a54e7f5a11c8146d66def4
<https://firmware.parrot.com/Drones/0918/1.0.7/ALL/mpp3_update.tar.gz>
md5 1b652363fab478e4b3bf0d2d3b9a9d52
´´´
[2018-07-25 15:55:10]
aciid :
dont do much but nice to know the "product number"
[2018-07-25 15:55:49]
ender :
aciid, do you still wnat me to add that fake update in json file or not ?
[2018-07-25 15:56:13]
aciid :
yes if you can
[2018-07-25 15:56:23]
aciid :
its not mandatory found same in iOS
[2018-07-25 15:56:26]
aciid :
i can try here
[2018-07-25 15:56:44]
ender :
okay then i care for more locations to patch “us”…
[2018-07-25 15:59:10]
mail451 :
I think with root it shouldn't be hard to change cc... because it appears they use sharedprefs
[2018-07-25 16:01:45]
ender :
i tried
[2018-07-25 16:01:55]
ender :
set to us and updatetime to far future
[2018-07-25 16:02:05]
aciid :
heres what ill do,
copy new anafi update to ubuntu
instal extract root filesystem to binary
mount the filesystem
modify the files
unmont
remove the old filesystem bytes
append the filesystem into the binary
[2018-07-25 16:02:14]
aciid :
this will faill
[2018-07-25 16:02:14]
aciid :
:smile:
[2018-07-25 16:02:17]
ender :
:wink:
[2018-07-25 16:02:31]
ender :
Or we’ll dance the Mambo !
[2018-07-25 16:15:26]
ender :
@mail451 hmm, the only entry in that Country Selctor for me is “Germany”.
[2018-07-25 16:15:31]
mail451 :
@ender here is .patch for some mods.
[2018-07-25 16:15:42]
mail451 :
"Germany"... ok I'll look
[2018-07-25 16:16:02]
ender :
i patched that in smali, no way (for me) to recompile java
[2018-07-25 16:16:37]
mail451 :
you have to use jar2dex then compile APK
[2018-07-25 16:16:44]
ender :
I tried new approach: i added mCountrycodeDummy, initialized bith to “us” and from then on all writes go to Dummy, all reads from original
[2018-07-25 16:16:53]
mail451 :
good
[2018-07-25 16:16:59]
ender :
@aciid: you did try that, right ?
[2018-07-25 16:17:05]
ender :
lets see :slightly_smiling_face:
[2018-07-25 16:17:19]
ender :
@mail451 Did you find the layout file i meant ?
[2018-07-25 16:17:49]
aciid :
I have the 1.0.1 filesystem from anafi now mounted on ubuntu
[2018-07-25 16:17:51]
aciid :
hold me please
[2018-07-25 16:18:27]
aciid :
im going to modify this so that rw.debuggable=1 ro.debuggable=1 on start
[2018-07-25 16:19:01]
mail451 :
no @ender what is the filename?
[2018-07-25 16:19:55]
ender :
in res/layouts/fragment_preferences_network.xml
[2018-07-25 16:20:12]
ender :
There are 3 hidden elements: title, the dropdown and the in/outdoor button.
[2018-07-25 16:20:20]
ender :
we unhid those successfully.
[2018-07-25 16:20:27]
aciid :
what did setprop -z do in MPP?
[2018-07-25 16:20:44]
aciid :
"set if value not present?"
[2018-07-25 16:20:58]
mail451 :
yes if you remove android:visibility="gone" they will appear
[2018-07-25 16:21:04]
ender :
yesyseyseyes
[2018-07-25 16:21:06]
ender :
network_location_picker
[2018-07-25 16:21:07]
mail451 :
what is the issue?
[2018-07-25 16:21:29]
ender :
is the one that is only populated with “Germany”. I want it to be populated with all countries possible.
[2018-07-25 16:21:32]
mail451 :
ok
[2018-07-25 16:21:49]
ender :
Probably some disabled code as this was the way in prior FF versions
[2018-07-25 16:22:22]
ender :
you were able to do “Auto” which resulted in your real country OR select a FCC country if you are in a CE country and need range.
[2018-07-25 16:22:49]
ender :
Question: where is the code that populated the dropdown with only one country and is there an easy way to change that back to all CC’s
[2018-07-25 16:22:53]
ender :
Answer ? :slightly_smiling_face:
[2018-07-25 16:24:37]
mail451 :
I found the ViewBinder
[2018-07-25 16:27:37]
ender :
that sounds terrific
[2018-07-25 16:28:02]
aciid :
ok changes made
[2018-07-25 16:28:05]
aciid :
ill try to pack it now
[2018-07-25 16:28:13]
ender :
fw sim ?
[2018-07-25 16:28:23]
mail451 :
code relevant to us is internal erroing
[2018-07-25 16:28:37]
mail451 :
I'll dump it in a few hours from my phone gonna fly the spark for a while.
[2018-07-25 16:28:40]
mail451 :
lmk of any news
[2018-07-25 16:28:52]
ender :
okay, could you give me a quick hint which file ?!
[2018-07-25 16:39:50]
mail451 :
In the park rn but find com/parrot/feature/settings/Preference Network.smali
[2018-07-25 16:39:58]
mail451 :
Something like that
[2018-07-25 16:40:15]
mail451 :
I can't find Germany anywhere
[2018-07-25 16:40:39]
mail451 :
Probably gets the country list from server over internet
[2018-07-25 16:40:52]
ender :
yep or iso decoding
[2018-07-25 16:42:24]
aciid :
Id need to find the NAND size for the rootfs
[2018-07-25 16:42:26]
aciid :
of the anafi
[2018-07-25 16:42:43]
aciid :
it should be on the file but i dont know how to read it yet
[2018-07-25 16:45:11]
aciid :
Oh found the way, then i inserted usbc cable into my computer and it shorted
[2018-07-25 16:48:35]
ender :
huh ?
[2018-07-25 16:59:29]
aciid :
yeah just tired
[2018-07-25 16:59:42]
aciid :
i was looking for a cable to connect the MPP to check the ubi nand stuff
[2018-07-25 17:00:04]
aciid :
both ends of the usb cable went to my desktop and
[2018-07-25 17:00:08]
aciid :
nothing broke but it booted
[2018-07-25 17:00:17]
ender :
phewww…
[2018-07-25 17:00:18]
aciid :
now i locked myself out of my apartment
[2018-07-25 17:00:23]
ender :
no
[2018-07-25 17:00:26]
aciid :
was going to the garage
[2018-07-25 17:00:38]
aciid :
sitting in my car, wife is coming in an hour
[2018-07-25 17:00:40]
aciid :
:smile:
[2018-07-25 17:00:53]
ender :
hahaha lolz at least 1 hour is not THAT bad.
[2018-07-25 17:01:02]
aciid :
yeah
[2018-07-25 17:16:57]
c.binetti :
haha aciid you made me laugh really hard. But so far nice job guys and i really enjoy to see how you are doing your homework :wink:
[2018-07-25 17:19:01]
aciid :
Must be the heat that ia causing me to malfunction
[2018-07-25 17:19:09]
mr.vibez :
Wow looks like some progress is being made. So are we able to switch to 5ghz yet?
[2018-07-25 17:19:55]
c.binetti :
dont worry aciid here is hot as hell too ^^
[2018-07-25 17:21:00]
mr.vibez :
I actually burnt my garage down last week, the insurance company have put us up in a hotel. 4 people in a tiny room = hot as hell & one pissed off wife lol
[2018-07-25 17:21:24]
c.binetti :
hahahaha
[2018-07-25 17:21:35]
c.binetti :
and sorry for your garage
[2018-07-25 17:22:39]
mr.vibez :
It's crazy, the insurance company want to remove all the electrical items and strip them down to clean. They say carbon from the fire can ruin the electrics
[2018-07-25 17:22:50]
mr.vibez :
Manged to sneak my drones out though
[2018-07-25 17:23:53]
c.binetti :
wtf
[2018-07-25 17:24:17]
mail451 :
Wow sorry for your garage
[2018-07-25 17:24:52]
mail451 :
It's hot here in Spain , I hope the forests don't burn down
[2018-07-25 17:24:58]
mail451 :
We had that problem a few years ago
[2018-07-25 17:25:43]
mr.vibez :
Yeah wild fires are scary
[2018-07-25 17:26:30]
aciid :
Insirance wants to inspect wiring?
[2018-07-25 17:27:51]
mr.vibez :
No, it's the cleanup company. They fog the whole house and clean everything
[2018-07-25 17:28:02]
mr.vibez :
Even the electrical items
[2018-07-25 17:28:59]
mr.vibez :
Then they redecorate the whole house
[2018-07-25 17:29:07]
mr.vibez :
re-wire the electrics
[2018-07-25 17:30:29]
aciid :
Ahh that sounds good one stop safety rebuild
[2018-07-25 17:30:48]
aciid :
No need to do a long ass job on each thing
[2018-07-25 17:30:59]
aciid :
Remodeling is hell
[2018-07-25 17:31:40]
mr.vibez :
Sure is
[2018-07-25 17:31:53]
mr.vibez :
Anyway, have you seen there is a new ff apk?
[2018-07-25 17:35:46]
mail451 :
1.0.2 yes, new update on play store
[2018-07-25 17:37:09]
mr.vibez :
OK, just catching up on developments
[2018-07-25 17:48:33]
ender :
oh whoa
[2018-07-25 17:48:45]
ender :
it seems i have FCC now.
[2018-07-25 17:48:59]
ender :
I also unlocked country display and it shows united states.
[2018-07-25 17:49:17]
ender :
i can also see WiFi channel energy diagram and 5G choice
[2018-07-25 17:49:24]
ender :
but it is NOT straightforward.
[2018-07-25 17:50:06]
ender :
first it started up in “german” mode then all rebooted tried stuff (region changer, fakegps) then country display changed to USA now it stays it seems.
[2018-07-25 17:51:17]
ender :
just to learn there is a new ff6 :slightly_smiling_face:
[2018-07-25 17:51:54]
ender :
oh cant see it on play store. staggered update. can anyone be so kind to upload apk ?
[2018-07-25 17:53:32]
ender :
haha lolz i got it :slightly_smiling_face:
[2018-07-25 17:53:38]
ender :
was done automatically.
[2018-07-25 17:56:18]
aciid :
Its ota
[2018-07-25 17:56:25]
aciid :
The updates
[2018-07-25 17:56:27]
aciid :
Yrah
[2018-07-25 17:56:42]
aciid :
I ordered this xiaomi note 5 pro
[2018-07-25 17:56:50]
aciid :
Gonna have myself a drone phone
[2018-07-25 17:57:01]
ender :
ahh i now know how to make pics download work on Android, interested ?
[2018-07-25 17:59:21]
mr.vibez :
Sure
[2018-07-25 17:59:28]
ender :
Just enter the memory card menu and select “my gallery”, THEN it asks for permissions and after that you can download at will.
[2018-07-25 17:59:37]
ender :
El Stupido
[2018-07-25 17:59:40]
mr.vibez :
Nice
[2018-07-25 17:59:53]
mr.vibez :
So is the FCC easy to do?
[2018-07-25 18:04:01]
mr.vibez :
Is it just res/layouts/fragment_preferences_network.xml I need to edit?
[2018-07-25 18:04:19]
ender :
nope nope.
[2018-07-25 18:05:13]
ender :
I patched the GetCountry xml, the layout thing at least SHOWS what the Anafi is thinking where it is. very helpful but if @mail451 could help us to get the dropdown populated and the chooser to work it would be much easier.
[2018-07-25 18:05:44]
ender :
I am just trying to patch the 1.02similar, if i learn how to repeatable make FCC work w/o region change or FakeGPS you are the first to know :slightly_smiling_face:
[2018-07-25 18:06:25]
mr.vibez :
Much appreciated. Hopefully I can fly outside my backyard then :slightly_smiling_face:
[2018-07-25 18:08:33]
aciid :
Fakegps on launch only? It doesnt update again? That is possibly patchable kf you can find the method it calls on app setup when the logo appears on ff6
[2018-07-25 18:08:54]
aciid :
Cant have global faked gps that messes jp flying
[2018-07-25 18:11:50]
ender :
yep yep.
[2018-07-25 18:12:01]
ender :
The one GPS change may triggered the patch
[2018-07-25 18:16:16]
aciid :
According to my research some settings maybe cached
[2018-07-25 18:21:33]
ender :
well i did a full app uninstall first
[2018-07-25 18:25:21]
mail451 :
@aciid yay
[2018-07-25 18:25:40]
aciid :
yay i got back in
[2018-07-25 18:25:45]
aciid :
wife let me in like a dog
[2018-07-25 18:25:46]
mail451 :
nice
[2018-07-25 18:26:17]
c.binetti :
haha nice ^^
[2018-07-25 18:26:45]
mail451 :
@ender I'm looking at the dropdown
[2018-07-25 18:26:59]
mail451 :
but can't see anything regarding country codes
[2018-07-25 18:27:02]
ender :
:+1:
[2018-07-25 18:27:21]
ender :
maybe the code from selecting a country to setting the CC is removed…
[2018-07-25 18:27:37]
mail451 :
yes
[2018-07-25 18:27:58]
mail451 :
how did you get FCC ? Also, does the app require an account to fly the drone?
[2018-07-25 18:33:17]
ender :
no it doesnt require account
[2018-07-25 18:33:28]
mail451 :
nice.
[2018-07-25 18:33:32]
ender :
Fcc -> patches and a little luck. trying to force luck now
[2018-07-25 18:33:36]
ender :
with 1.0.2 app
[2018-07-25 18:36:44]
mail451 :
which patch? getCountryCode in .smali?
[2018-07-25 18:44:13]
ender :
yes i added some more stuff, please be patient, testing in a few minutes.
[2018-07-25 18:44:26]
ender :
the combo box would be sooooo much more elegant…
[2018-07-25 18:52:01]
mail451 :
I don't have an anafi to test the location chooser sorry
[2018-07-25 18:56:18]
mail451 :
<https://i.imgur.com/uHroorn.png>
[2018-07-25 18:56:35]
mail451 :
Answer might be here.
[2018-07-25 18:58:21]
mail451 :
@mail451 uploaded a file: [Untitled](https://dji-rev.slack.com/files/UAU27B42K/FBX45GD6H/-.js)
[2018-07-25 19:01:56]
aciid :
theres tons of obfuscation
[2018-07-25 19:03:40]
mail451 :
yes
[2018-07-25 19:03:42]
mail451 :
I also found a cc list
[2018-07-25 19:03:58]
mail451 :
<https://hastebin.com/fohuqedena.cs>
[2018-07-25 19:04:18]
ender :
we only need “us” or possibly “hk” :slightly_smiling_face:
[2018-07-25 19:05:24]
mail451 :
so if i understand this right, the dropdown menu to select the country only has Germany right?
[2018-07-25 19:05:31]
ender :
in my case.
[2018-07-25 19:05:46]
ender :
i just tried. it seems my patches amount to nothing. I dont know why.
[2018-07-25 19:08:43]
mail451 :
hmmmm
[2018-07-25 19:08:55]
mail451 :
maybe we should do a parrot-modder
[2018-07-25 19:09:08]
aciid :
after weve identifed working things
[2018-07-25 19:09:23]
mail451 :
yes, with patches for both "us" and "hk"
[2018-07-25 19:09:40]
mail451 :
what other things need modding apart from changing cc?
[2018-07-25 19:09:49]
mail451 :
I saw they use Baidu SDK for maps
[2018-07-25 19:10:17]
aciid :
they have developer views that would be nice to unlock
[2018-07-25 19:12:43]
aciid :
ill try to see if I can identify firmware view
[2018-07-25 19:12:44]
aciid :
on ios
[2018-07-25 19:12:47]
aciid :
to skip it
[2018-07-25 19:20:38]
aciid :
oh its not a mandatory update this time?
[2018-07-25 19:20:42]
ender :
heres the deal. My patching around in CountryDetector.smali did not change a thing. BUT the good thing is: making the CC visible in the network settings allws at least to SEE if it works. So when i was using fake gps i could go to USA and USA was shown as well as Hongkong or france (then 5G disabled) and Germany.
[2018-07-25 19:20:48]
ender :
So thats a small step at least.
[2018-07-25 19:21:13]
ender :
I have no idea why my patches do not work, maybe someone else wants to look at it ?
[2018-07-25 19:21:46]
ender :
maybe its old & unused code but…
[2018-07-25 19:23:41]
ender :
the cc is stored in mCountryCode. I created a duplicate mCountryCodeDummy. I initialized both with “us”. i went through the code and whenever something was written to mCountryCode i exchanged it with mCountryCodeDummy (sput…). Whenever cc was read from it i left it alone (sget…).
[2018-07-25 19:24:59]
ender :
Additionally i hardwired replaced the result of getNetworkCountryIso with “us” in updateCountryCodeFromTelephoneNetwork
[2018-07-25 19:25:19]
ender :
I also hardwired always returned “us” in getCountryCode.
[2018-07-25 19:25:22]
ender :
..
[2018-07-25 19:25:39]
ender :
Just got an idea, i can jeb my patched apk to see if things are like i wanted it…
[2018-07-25 19:27:54]
mail451 :
probably the relevant code is obsfucated
[2018-07-25 19:32:33]
ender :
THATS strange.
[2018-07-25 19:32:52]
ender :
If i JEB my patched stuff i cann find my *Dummy stuff. Fine.
[2018-07-25 19:33:06]
ender :
But i cannot find my hardwired “us” returns.
[2018-07-25 19:33:18]
ender :
I probably did that wrong.
[2018-07-25 19:36:31]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBX4YQ5EH/-.php)
[2018-07-25 19:37:06]
ender :
e.g. this is a patched method. see line 18 where i “try” to overwrite return val v0 with “us”
[2018-07-25 19:37:16]
mail451 :
I noticed country codes are uppercase btw
[2018-07-25 19:37:18]
mail451 :
so try "US"
[2018-07-25 19:37:34]
ender :
hmmm, in the sharedprefs they are lowercase ?!
[2018-07-25 19:37:40]
mail451 :
ahh then no.
[2018-07-25 19:37:59]
ender :
ok :slightly_smiling_face:
[2018-07-25 19:38:39]
ender :
okay, jeb shows THAT:
[2018-07-25 19:38:48]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBYABAX1U/-.java)
[2018-07-25 19:38:55]
ender :
see line 6, its Bullshit.
[2018-07-25 19:39:05]
ender :
so my smali is wrong, anyone here to improve that ?
[2018-07-25 19:39:24]
ender :
(its embarrasing, i know)
[2018-07-25 19:41:17]
ender :
argh i just noticed its not a good place to patch anyways but nevertheless, any smali help how to overwrite a value ?
[2018-07-25 19:57:41]
mail451 :
I'll help you edit the smali, i have to go to dinner first.
[2018-07-25 19:57:50]
ender :
do that :slightly_smiling_face:
[2018-07-25 19:58:29]
ender :
I am cooking up something else meanwhile. To speak with the Donald “who would have though writing to a variable could be so hard ?” :slightly_smiling_face:
[2018-07-25 20:09:15]
ender :
damn, even my latest ideas dont work :disappointed:
[2018-07-25 20:09:42]
ender :
Need to care for the kids for a while, maybe someone could go through the java meanwhile and see if you find a flaw…
[2018-07-25 20:11:11]
ender :
The things to look for are my games with mCountryCode and mCountryCodeDummy AND (as i then rely on mCountryCode to always contain “us”) i just use mCountryCode in updateCountryCodeFromTelephoneNetwork instead of getting iso code from Telephinemanager.
[2018-07-25 20:11:28]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBWPVU53N/-.java)
[2018-07-25 20:12:08]
ender :
cya, ibb
[2018-07-25 21:15:40]
ender :
okay, last try for today :disappointed: FAILURE:
[2018-07-25 21:15:48]
ender :
@ender uploaded a file: [Untitled](https://dji-rev.slack.com/files/U60JKQQ2F/FBY3YL3EK/-.java)
[2018-07-25 21:16:37]
ender :
I also rewired “updateCountryCode”
[2018-07-25 21:16:53]
ender :
but still behaves as if nothing was patched :disappointed:
Remember i trus that my mCountryCode = “us” and Dummy stuff is working. If i failed there everything fails…
[2018-07-25 21:17:08]
ender :
GOOD i can see the result in the network prefs now :slightly_smiling_face:
[2018-07-25 21:18:35]
ender :
btw. the “country_detector.xml” in shared_prefs is showing us solid.
[2018-07-25 21:18:48]
ender :
So i guess my patched stuff IS called but just not used anymore…
[2018-07-25 21:19:00]
ender :
Please look through that stuff and tell me i am wrong :slightly_smiling_face:
[2018-07-25 21:19:19]
ender :
night !
[2018-07-25 21:22:35]
mr.vibez :
Anyone on the new fw know if the dng files have a lens correction profile baked in?
[2018-07-25 22:05:17]
aciid :
@mr.vibez [parrotpilots.com](http://parrotpilots.com)
[2018-07-26 08:17:59]
ender :
@mr.vibez: nope, at least nothing Lightroom or Raw onverter can detect. But if you choose “DJI” --> “FC200" and choose about 60% its near-perfect.
[2018-07-26 08:56:14]
aciid :
@aciid uploaded a file: [Image from iOS](https://dji-rev.slack.com/files/U6AD6A1QU/FBXECR3A9/image_from_ios.png)
[2018-07-26 09:08:40]
c.binetti :
:smile: :+1:
[2018-07-26 09:11:35]
ender :
@aciid, doyou know that guy “Don Quijote” ? :stuck_out_tongue: Cynical as i can be i believe they only react to Pressure (We will tell all world you use GPL’ed stuff without notice) or to Business reasons (We can sell more if we go OpenSOurce). Thats just about it :slightly_smiling_face:
[2018-07-26 09:12:32]
aciid :
that is our next thing
[2018-07-26 09:12:49]
aciid :
gotta try begging first
[2018-07-26 09:12:54]
ender :
:slightly_smiling_face:
[2018-07-26 09:13:02]
ender :
It honors you that you do that.
[2018-07-26 09:13:04]
aciid :
then we start all GPL on their asses
[2018-07-26 09:13:14]
aciid :
im just manic
[2018-07-26 09:13:21]
aciid :
i feel disconnected to the issue at hand
[2018-07-26 09:13:41]
ender :
I doubt that they have as much hidden corpses as DJI in the basement but lets see :slightly_smiling_face:
[2018-07-26 09:13:50]
ender :
root ?
[2018-07-26 09:27:42]
aciid :
they have licensing shit up, but they are not providing source
[2018-07-26 09:34:10]
ender :
I did not say “no corpses” just not an Army of them like DJI :slightly_smiling_face:
[2018-07-26 16:05:47]
aciid :
@hostile sorry to bother , but did you have experience about UBI filesystems from past?
I'm thinking its worth a try to, extract ubi from binary -> modify /etc/ folder scripts so it boots in debuggable == adb on
Make new image out of the mountpoint, Remove ubi bytes from update image , append the updated ubifs image to the binary
[2018-07-26 16:06:11]
aciid :
from what I've seen the MD5 for the update tar.gz (containing the binary ) is stored locally on the phones.
[2018-07-26 16:07:03]
hostile :
there are tools for ubi extract / repack IIRC
[2018-07-26 16:07:13]
hostile :
also fuck Parrot... they KNOW about the gpl already
[2018-07-26 16:07:15]
hostile :
been asked multiple times
[2018-07-26 16:07:39]
aciid :
yeah I sent them a email describing how much I know about the OS in anafi and requested developer certificate to get root
[2018-07-26 16:07:55]
aciid :
theirt twitter rep verified that they are constructing an answer to me
[2018-07-26 16:08:05]
aciid :
which could mean anything but they just asked for more time.
[2018-07-26 16:09:23]
aciid :
also I have not found a certificate that Anafi would check the update against
[2018-07-26 16:09:44]
aciid :
not in rootfilesystem's neither in apps
[2018-07-26 16:10:41]
aciid :
there is a "signature" named file within each ANAFI image. with a public key
[2018-07-26 16:11:06]
aciid :
so lets replace that public key in the file and add new certificate?
[2018-07-26 16:11:46]
aciid :
@aciid uploaded a file: [Untitled](https://dji-rev.slack.com/files/U6AD6A1QU/FBXNJ421K/-.pl)
[2018-07-26 16:11:54]
aciid :
Funny thing is, the remote controller does not use this method
[2018-07-26 16:12:20]
aciid :
its just "md5 sum matches what is in .plist file in ios?"
"ok update the remote"
[2018-07-26 16:25:29]
aciid :
**MTD-Utils Parameters:**
ubireader_utils_info [options] path/to/file
The script will analyze a UBI image and create a Linux shell script and UBI config file that can be used for building new UBI images to the same specifications. For just a printed list of the options and values, use the (-r, --show-only) option.
[2018-07-26 16:25:32]
aciid :
oh my
[2018-07-26 16:30:13]
aciid :
ilarilind at Acer 2400 in ~/bin/anafi/parakeets/1.0.0
$ ubireader_utils_info upifs
Volume linux
alignment -a 1
default_compr -x lzo
fanout -f 8
image_seq -Q 280959438
key_hash -k r5
leb_size -e 126976
log_lebs -l 5
max_bud_bytes -j 8388608
max_leb_cnt -c 2047
min_io_size -m 2048
name -N linux
orph_lebs -p 1
peb_size -p 131072
sub_page_size -s 2048
version -x 1
vid_hdr_offset -O 2048
vol_id -n 0
#ubinize.ini#
[linux]
vol_name=linux
vol_size=78725120
vol_flags=autoresize
vol_type=dynamic
vol_alignment=1
vol_id=0
Writing to: ubifs-root/upifs/img-280959438/create_ubi_img-280959438.sh
Writing to: ubifs-root/upifs/img-280959438/img-280959438.ini
[2018-07-26 16:30:18]
aciid :
holy crap this will probably works
[2018-07-26 16:49:04]
aciid :
I just checked, against the older controller fw too, there is no signature file
[2018-07-26 16:49:56]
aciid :
RC maincpu is apq8009 processor. what does the drone have?
[2018-07-26 16:58:38]
aciid :
ilarilind at Acer 2400 in ~/bin/anafi/anafi_1.0.1
$ strings _fwupdater.bin.extracted/53F4B.tar
_key_rpb
signature
[E]No signature found in context
[E]No compatible rsa public key format found
[E]Unknown public key
Not ustar format ('%s')
Corrupted crc
CRC error
Bad filename
Bad file type
Bad octal file size
Bad file size
ustar
[2018-07-26 16:58:47]
aciid :
what is key_rbp?
[2018-07-26 16:58:58]
aciid :
theres public_key_der and public_key_rbp in the signature file
[2018-07-26 18:22:09]
aciid :
gentlemen ```
-rw-r--r-- 1 root root 24379392 Jul 26 11:19 img-708586.ubi
-rw-r--r-- 1 aciid aciid 24379392 Jul 9 02:04 mpp3-linux.ubi
```
my ubi vs stock
[2018-07-26 18:22:15]
aciid :
with just few ascii changes
[2018-07-26 18:22:20]
aciid :
its going in very soon
[2018-07-26 18:22:42]
aciid :
i just added persistancy for adb in controller just for kicks and greets as a comment to see if this works
[2018-07-26 18:24:14]
mr.vibez :
Sweet
[2018-07-26 18:44:11]
aciid :
OK , I'm now applying new update tar.gz MD5SUM to plist and starting update on the MPP3 REMOTE CONTROL
[2018-07-26 18:44:14]
aciid :
LETS PRAY
[2018-07-26 18:47:34]
mr.vibez :
:crossed_fingers:
[2018-07-26 18:48:35]
mail451 :
sweet
[2018-07-26 18:48:48]
mail451 :
new update for ff6 live on the play store.
[2018-07-26 18:49:05]
ender :
holy crap
[2018-07-26 18:49:11]
ender :
good luck aciid.
[2018-07-26 18:50:33]
ender :
Just coming home from a flight. Still not sure if i can “feel” any real life difference when switching on FakeGPS or not. Funny thing: this time with latest App the App insisted i am in China. Also after switching back to real GPS and power cycle all. Am i locked to China now ? WiFI Performance was **not** better. Strange things happen…
[2018-07-26 18:52:03]
ender :
BTW. i decided to sell my Mavic Air now. I took both to the holidays last time and every single time decided for the Anafi because there were other people. No matter the range or whatever. Its the Drone i want to fly with not bothering other beeings.
[2018-07-26 18:55:29]
aciid :
connecting MPP3 to iphone now in Flightmode/nowifi
[2018-07-26 18:55:33]
aciid :
airplanemode
[2018-07-26 18:55:38]
ender :
updated ?
[2018-07-26 18:56:52]
aciid :
hmm doesn't detect remote if it's connected without drone
[2018-07-26 18:56:57]
aciid :
i want to update without having the drone on
[2018-07-26 18:57:08]
aciid :
ill kill the drone midway
[2018-07-26 18:57:16]
ender :
should detect MPP w/o drone.
[2018-07-26 18:57:20]
ender :
at least android does
[2018-07-26 18:57:29]
ender :
it shows MPP battery level
[2018-07-26 18:57:44]
ender :
it MIGHT only autostart app with drone connected.
[2018-07-26 18:57:44]
aciid :
must be something else then
[2018-07-26 18:57:56]
ender :
So you may have to start FF6 manually
[2018-07-26 18:59:34]
aciid :
could be some stupid ios tweak bug ill restart
[2018-07-26 19:00:02]
aciid :
or maybe its keeping hash of the plist.....
[2018-07-26 19:00:15]
aciid :
we will soon know
[2018-07-26 19:00:23]
aciid :
now it connected
[2018-07-26 19:01:08]
aciid :
here goes nothing!
[2018-07-26 19:01:12]
aciid :
sending update to controller
[2018-07-26 19:03:25]
aciid :
[2018-07-26 19:03:53]
aciid :
taking an awfully long time : DDD
[2018-07-26 19:04:43]
aciid :
maybe i fucked up
[2018-07-26 19:05:49]
mr.vibez :
uh oh
[2018-07-26 19:06:10]
mr.vibez :
Update and reboot section was instant for me
[2018-07-26 19:06:13]
aciid :
:smile:
[2018-07-26 19:06:38]
aciid :
it worked
[2018-07-26 19:06:40]
aciid :
im on 1.0.7
[2018-07-26 19:06:44]
aciid :
i had to replug the cable
[2018-07-26 19:06:49]
aciid :
now, lets see does adb shell work
[2018-07-26 19:06:57]
aciid :
so excited
[2018-07-26 19:07:10]
aciid :
if this works the drone is next
[2018-07-26 19:07:55]
mr.vibez :
What will this give us? Root?
[2018-07-26 19:08:07]
mr.vibez :
Or the ability to modify strings?
[2018-07-26 19:08:11]
aciid :
yes, but im trying it on remote controller first
[2018-07-26 19:08:28]
mr.vibez :
Nice
[2018-07-26 19:09:24]
aciid :
[2018-07-26 19:09:25]
aciid :
EAT MY SHORTS
[2018-07-26 19:10:37]
aciid :
@channel we have a working way to binary patch the firmware images on update
[2018-07-26 19:11:22]
quad808 :
Excellent work by all!!! WAHOOOOOO
[2018-07-26 19:11:23]
aciid :
Instructions coming
[2018-07-26 19:11:40]
ender :
holy mcCrap, how sure are you that anafi will act the same (just using md5)
[2018-07-26 19:12:01]
ender :
but already this should open up road to high Tx power…
[2018-07-26 19:12:08]
aciid :
anafi has a ambarella required style. which i a signature file on tar.gz
[2018-07-26 19:12:18]
aciid :
but it doesn't have counter part to the public key
[2018-07-26 19:12:22]
aciid :
so we just put our own key there
[2018-07-26 19:12:31]
mr.vibez :
Congrats @aciid!
[2018-07-26 19:12:55]
aciid :
please don't distribute outside of DJI-REV SERVER
[2018-07-26 19:13:01]
ender :
:flag-fi::birthday::flag-fi:
[2018-07-26 19:14:23]
ender :
I’ll let you know when i understand 10% on it…. :wink:
[2018-07-26 19:15:45]
ender :
SO did you start on 1.05 using the 1.0.7 for your experiment or were you on 1.0.7 and added another section for your fake FW ?
[2018-07-26 19:17:31]
aciid :
I was on 1.0.5 on MPP3 and patched the 1.0.7 , but I guess fake also works.
faking works by editing plist and telling that "this is version 1.0.8" and supply same details
[2018-07-26 19:18:03]
aciid :
it will tell theres a new update and it will feed it to the RC and upgrade. the device doens't necessarily check if it's a new version because it has no references
[2018-07-26 19:18:08]
aciid :
just filenames if any
[2018-07-26 19:22:24]
mr.vibez :
Wonder if you could do smaller increments. 1.0.7.1 for example
[2018-07-26 19:24:39]
aciid :
we could roll our own version numbers anyway we like
[2018-07-26 19:24:47]
aciid :
what we need now is help on the drone part
[2018-07-26 19:25:04]
aciid :
I need someone to give me information about this ambarella CPU
[2018-07-26 19:25:18]
aciid :
that is the firmware updater common or not to parrot
[2018-07-26 19:26:47]
ender :
@aciid, is the MPP easy to brick ? or is there an impenetrable bootloader so we can play freely (Also a certain idiot that comes to my mind) ?
[2018-07-26 19:27:11]
aciid :
I don't know.
[2018-07-26 19:27:27]
aciid :
mine didn't brick, it just didn't go into menu by itself
[2018-07-26 19:31:55]
aciid :
ill start looking for devices using the same Ambarella H22 CPU so I can compare how the firmware updates on them
[2018-07-26 19:32:14]
aciid :
<http://support.sjcam.com/support/solutions/articles/9000148153-sj8-pro-firmware-ver-1-2-0-huge-update-> here is one
[2018-07-26 19:34:51]
aciid :
oh binwalk identifies a filesystem there too, should buy that camera lol
[2018-07-26 19:36:40]
ender :
yep the guys on [dashcamtalk.com](http://dashcamtalk.com) can probably help. They break into those ambarella chipsets like nothing…
[2018-07-26 19:38:20]
aciid :
oh they had somekind of firmware editors for the older ambarellas
[2018-07-26 19:38:21]
aciid :
nice
[2018-07-26 20:04:46]
aciid :
I think i found a loophole
[2018-07-26 20:04:56]
aciid :
it checks signature only on specified files
[2018-07-26 20:05:20]
aciid :
so Ill make copy of the original file and target that and leave the patched one there with the samename
[2018-07-26 20:10:14]
aciid :
even if this would work the only hex place i can modify without rebuilding the filesystem is /etc/default.prop which sets ro.debuggable.
that value is used only if persistance.debuggable is not found
[2018-07-26 20:11:55]
aciid :
probably have to rely on the original strategy also, to do the same tricks but this time have to use binwalk and carve out the file and replace it with the rebuilt file use the pinned guide to rebuild ubifs correctly
[2018-07-26 20:45:09]
mail451 :
@ender did you end up getting the 'us' fcc bypass to work?
[2018-07-26 21:23:17]
mail451 :
apktool d FreeFlight\ 6\ 1.0.0.apk FF6_Smalisrc/ && get file smali/com/parrot/freeflight/util/location/CountryDetector.smali && [apply diff to CountryDetector_PATCH.smali] && cp CountryDetector_PATCH.smali FF6_Smalisrc/smali/com/parrot/freeflight/util/location/CountryDetector.smali
[2018-07-26 21:42:16]
aciid :
please don't share outside DJI-REV
[2018-07-26 21:54:45]
ender :
@mail451: thats my stuff there, right ? Ir did you change it ?!
Nevertheless if you scroll up a bit you can see that its not working at all. Today after activating FakeGPS once my Country (that dropdown only containing one item) was locked to China :slightly_smiling_face: Even if i faked to US. And after neutralizing and reboot it was still on China.
[2018-07-26 21:55:11]
ender :
Maybe thats their reaction if they detect fishy things :slightly_smiling_face: But i would have thought is locked to “France” then :slightly_smiling_face:
[2018-07-26 21:55:33]
ender :
@aciid, whoa did you actually DO it on the Anafi or preparing ?
[2018-07-26 21:57:02]
aciid :
preparing, iphone is acting up on me apps are respringing
[2018-07-26 21:57:24]
aciid :
I think I need to reinstall electra
[2018-07-26 22:03:32]
aciid :
that helped, now i need to reinstall freeflight
[2018-07-26 22:05:03]
mr.vibez :
Do we know the hw model of the camera sensor? Did anyone do a teardown of that yet?
[2018-07-26 22:11:34]
ender :
yep the sensor is known. Damned if i remember it right now but its all over the place.
[2018-07-26 22:13:39]
mr.vibez :
Ah so it is
[2018-07-26 22:13:49]
ender :
IMX230
[2018-07-26 22:13:49]
mr.vibez :
IMX230
[2018-07-26 22:13:51]
ender :
haha
[2018-07-26 22:15:10]
aciid :
here goes again
[2018-07-26 22:15:13]
aciid :
yall ready
[2018-07-26 22:15:28]
ender :
damn yes :slightly_smiling_face:
[2018-07-26 22:16:03]
aciid :
if this works I can upload the files
[2018-07-26 22:16:26]
aciid :
hmm it wants internet
[2018-07-26 22:16:32]
aciid :
ill make sure the plist is valid
[2018-07-26 22:17:26]
aciid :
ahh typo in plist name
[2018-07-26 22:20:31]
aciid :
nope, somethings off. it doesn' upload it it wants to download it in the same session when its uploading
[2018-07-26 22:20:32]
aciid :
whack
[2018-07-26 22:21:07]
ender :
Get some sleep, dont force it & brick :slightly_smiling_face: You achieved a lot today…
[2018-07-26 22:21:30]
aciid :
no
[2018-07-26 22:21:37]
aciid :
I wanna **finnish**
[2018-07-26 22:21:41]
ender :
lolz
[2018-07-26 22:22:28]
aciid :
oh lol theres a cached entry from older instal
[2018-07-26 22:22:34]
aciid :
i have the testflight shit going here
[2018-07-26 22:22:37]
aciid :
thats why it didn't install that
[2018-07-26 22:22:40]
aciid :
new try
[2018-07-26 22:30:10]
ender :
damned, want to go to bed but cant as long as you battle the forces of evil :slightly_smiling_face:
[2018-07-26 22:30:21]
aciid :
i don't get this shit, it wants to download it to flash
[2018-07-26 22:30:25]
aciid :
in the same session that it's open
[2018-07-26 22:30:27]
aciid :
ok ill let it do that
[2018-07-26 22:30:35]
aciid :
but it doesnt replace my patched file
[2018-07-26 22:30:41]
aciid :
security fail right there
[2018-07-26 22:31:00]
ender :
uh why doesnt it replace it ? did you make it ro ?
[2018-07-26 22:31:27]
ender :
or simply overwiting failing due to bad coding ?
[2018-07-26 22:32:31]
aciid :
oh fuck
[2018-07-26 22:32:32]
aciid :
here we go
[2018-07-26 22:32:46]
aciid :
forgot holywater
[2018-07-26 22:32:50]
aciid :
shit shit shit
[2018-07-26 22:32:58]
aciid :
ill take my cat into my lap
[2018-07-26 22:34:13]
aciid :
halfway uploaded
[2018-07-26 22:36:09]
aciid :
seems to be stuck
[2018-07-26 22:36:13]
aciid :
on sending
[2018-07-26 22:36:21]
aciid :
file is probably too big?
[2018-07-26 22:41:25]
aciid :
ill try once more, then its enough
[2018-07-26 22:42:09]
ender :
Good decision, like i said, dont force it…
[2018-07-26 22:42:30]
aciid :
someone with proper FTDI could see from the pins what it says when the firmware is not accepted or wtf is going on
[2018-07-26 22:42:32]
jezzab :
Use a bigger hammer to force it in :stuck_out_tongue:
[2018-07-26 22:43:31]
aciid :
but even the remote controllers update was buggy, but that worked
[2018-07-26 22:43:36]
aciid :
[2018-07-26 22:44:22]
jezzab :
Stuck @ 50%?
[2018-07-26 22:46:34]
ender :
SUSPENSE :wink:
[2018-07-26 22:47:07]
aciid :
yeah its not going, the update file went from 50mb -> 100mb
[2018-07-26 22:47:17]
aciid :
it doesnt even say the error
[2018-07-26 22:47:32]
aciid :
but it doesnt brick, i could press cancel and even fly
[2018-07-26 22:47:58]
aciid :
i had to copy the original fw file in there to make it check signature against that
[2018-07-26 22:48:01]
aciid :
but I renamed it
[2018-07-26 22:48:12]
aciid :
signature file checks signature from
update1.bin
[2018-07-26 22:48:17]
aciid :
and the patched update file is update.bin
[2018-07-26 22:48:26]
aciid :
so I guess theres yo problem
[2018-07-26 22:48:42]
aciid :
filesize, but proper ftdi cables would reveal true problem
[2018-07-26 22:49:03]
aciid :
I pinned the ANAFI guide to this channel how I made this
[2018-07-26 22:52:53]
ender :
Night :slightly_smiling_face:
[2018-07-26 22:53:31]
aciid :
gn
[2018-07-26 23:12:22]
jcarlo :
Man its always popping in here!
[2018-07-26 23:44:48]
makingthisnameup :
It's because the anafi was "designed with passion" or at least the box says
[2018-07-27 01:51:37]
jabuasab :
how the hell do you get this thing to operate at 5ghz. my option is grayed out
[2018-07-27 05:44:04]
mail451 :
@ender no I added some extra patches to my stuff.
[2018-07-27 06:01:20]
aciid :
@jabuasab on iOS i have the same problem , no way to enable it via frida so far
[2018-07-27 07:06:54]
ender :
@mail451 Ah okay, gotta spot the differences and try ! I will report…
[2018-07-27 07:07:38]
aciid :
use beyond comparison on windows/mac/linux
[2018-07-27 07:07:51]
aciid :
extract both apk's
[2018-07-27 07:07:59]
aciid :
its quite good for that
[2018-07-27 07:08:03]
ender :
yeah yeah, will manage that :slightly_smiling_face:
[2018-07-27 07:08:10]
ender :
good morning btw :slightly_smiling_face:
[2018-07-27 07:08:16]
aciid :
moning 10:08
[2018-07-27 07:08:26]
ender :
need to do some work stuff first.
[2018-07-27 07:08:30]
aciid :
hahah
[2018-07-27 07:08:44]
aciid :
need to drive the car back to work probably later today
[2018-07-27 07:56:18]
ender :
WOAH ff 1.0.3 in play store. version history never changes. Sounds like some panic bug fixes for a rushed 1.0.1 :slightly_smiling_face:
[2018-07-27 08:02:48]
aciid :
btw to all, you can probably skip firmware updating with firewalling freeflight apps
[2018-07-27 08:02:56]
aciid :
so that it cannot go to the internt
[2018-07-27 08:03:04]
aciid :
ther eis no reason to give itnernet access to the freeflight app
[2018-07-27 08:09:45]
ender :
yes of course.
[2018-07-27 08:10:00]
ender :
like with dji go. i like afwall+
[2018-07-27 08:52:57]
mr.vibez :
Doesn't it need internet for the maps?
[2018-07-27 08:53:23]
aciid :
depends on firewall, some firewalls can add exception for the googlemaps
[2018-07-27 08:53:56]
aciid :
if you can add by hostname block this hostname : [firmware.parrot.com](http://firmware.parrot.com)
[2018-07-27 09:13:26]
ender :
you just have to start that if an upgrade is forced AND does evil.
[2018-07-27 09:13:38]
ender :
THEN dont upgrade, delete data and airgap it.
[2018-07-27 09:14:09]
ender :
SO just dont upgrade before hearing from unlucky idiots like me that something is gone :slightly_smiling_face:
[2018-07-27 09:26:03]
aciid :
lucky people have 2 drones
[2018-07-27 09:26:09]
aciid :
I'm not that wealthy :smile:
[2018-07-27 09:32:37]
ender :
haha it was just that i later got the offer to buy an anafi for 650 Euro, so the 700 Euro Anafi goes back.
[2018-07-27 09:32:55]
ender :
I offered them to keep it before making this crummy Deal but they did not want to so i swap.
[2018-07-27 09:33:14]
ender :
and i’ll keep “the old one” for a while so i have 2 batteries :slightly_smiling_face:
[2018-07-27 09:33:21]
ender :
Until my ordered battery arrives…
[2018-07-27 09:33:44]
ender :
I know its fishy but i told them thats what i am gonna do if they dont match the better price.
[2018-07-27 10:12:09]
ender :
@mail451: patch crashes FF6. But i can see you did about the same as i did. Did you try to patch & run FF6 yourself ?
[2018-07-27 10:12:50]
ender :
As i was unable to do “variable = “us” i patched thoes functions to use the mCountryCode that contained “us”. To no avail.
[2018-07-27 10:13:15]
ender :
Please try to patch & run yourself and let me know if it crashes for you as well.
[2018-07-27 10:13:28]
ender :
I used 1.0.3 as base but the file in Question is identical.
[2018-07-27 10:20:38]
mail451 :
@ender I'll look into that, I'm using 1.0.0, I don't have an anafi so I can't debug the app. Can you get me a logcat?
[2018-07-27 10:21:15]
ender :
you just need to start the app it crashes immediatly. no need for anafi :slightly_smiling_face:
[2018-07-27 10:22:01]
mail451 :
Oh ok.
[2018-07-27 10:22:17]
ender :
Sorry i just found the time for trying but as i said, you patched the same stuff as me anyways so i dont think there is a better result. Unless you found an erro in the latest patches i posted here (NOT the one where i try to overwite variables with the “jumbo” stuff(
[2018-07-27 10:37:57]
jabuasab :
@aciid let me know if you figure it out. I'm on Android but have iOS devices too
[2018-07-27 10:54:04]
ender :
@fredz: could you try if fakegps still works for you on 1.0.3 apk ?! I patched the apk so i can see the country ode but was unable to see “United States”…
[2018-07-27 11:11:18]
aciid :
@ender i'd keep both drones if I'd ever run in a sitsuation with two
[2018-07-27 11:11:34]
aciid :
but I guess you have alot of drones already
[2018-07-27 11:24:27]
ender :
well i sell the more exensive ones like MP, Spark and now the MA.
[2018-07-27 11:24:36]
ender :
I only keep my DIY that no one wants :slightly_smiling_face:
[2018-07-27 11:25:17]
ender :
So having multiple is just a temporary situation. The second Anafi is packaged and ready to ship as soon as i get my spare battery And the MA will be off to ebay next Weekend.
[2018-07-27 11:25:28]
ender :
(not counting endless masses of toy drones < 100 Euro)
[2018-07-27 11:29:19]
aciid :
I'm checking ambarella product listings for the cpu's and trying to find recent models, that way I can eye on how they update. and if im lucky to find a SDK
[2018-07-27 11:29:26]
aciid :
theres so little information
[2018-07-27 11:30:05]
aciid :
HAH Autel EVO Ambarella H2
[2018-07-27 11:32:43]
fredz :
I have an Evo
[2018-07-27 11:32:53]
aciid :
hmm
[2018-07-27 11:33:09]
aciid :
are you free today?
[2018-07-27 11:33:21]
aciid :
can you check your mobile device does it cache for firmwares for Autel EVO
[2018-07-27 11:33:51]
fredz :
We’re on holiday but I can check tonight
[2018-07-27 11:33:59]
fredz :
How would I check
[2018-07-27 11:34:05]
aciid :
android or iOS?
[2018-07-27 11:35:52]
fredz :
I have used it on both
[2018-07-27 11:36:19]
aciid :
ok, well since you have android probably rooted then check o nthat
[2018-07-27 11:36:37]
aciid :
you need a file explorer and go to /data/com.autelrobotics something path
[2018-07-27 11:36:39]
aciid :
should be there
[2018-07-27 11:37:47]
aciid :
haha no need
[2018-07-27 11:37:55]
aciid :
firmware was on their website
[2018-07-27 11:38:25]
aciid :
<https://www.autelrobotics.com/support/downloads/>
[2018-07-27 11:40:27]
d95gas :
I like the update notes for the latest firmware from Autel:
Added Ludicrous Mode for the 45mph max speed (Fly with caution)
[2018-07-27 11:43:07]
d95gas :
and another odd thing. When you open the BIN file (their update for EVO) it shows " X-Star2.0_CameraXB015_V0.2.0.1.bin"
[2018-07-27 11:45:34]
aciid :
I need to probably buy that drone too just to hack it. does some european guy wanna lease it to me?
[2018-07-27 15:01:47]
d95gas :
Question on the Anafi controller. Will it hold the iPad Mini ? or is the max size phone size ?
[2018-07-27 15:20:00]
ender :
max size is of a phone.There is a great tablet holder for $15 from the US
[2018-07-27 15:33:48]
d95gas :
and another question..... Just seen this video on how to change Anafi to FCC mode..... Does it work? do we have a hack for it yet? <https://www.youtube.com/watch?time_continue=25&v=afAalkHOb0s>
[2018-07-27 15:33:59]
ender :
yeah nooo
[2018-07-27 15:34:04]
ender :
i dont know.
[2018-07-27 15:34:19]
ender :
FCC is very inconclusive for me.
[2018-07-27 15:34:51]
ender :
I have a rf meter and if i use above method or the fakegps method that is insofar trusted as fredz proved it with rf meter for me nothing happens.
[2018-07-27 15:35:02]
ender :
On 2 different Anafis.
[2018-07-27 15:35:09]
ender :
So i guess there is one more factor.
[2018-07-27 15:35:20]
ender :
Neither in RF Meter output or in real life tests.
[2018-07-27 15:35:39]
ender :
However playing with my patched versions i am SURE i had a real boost but ext start it was gone.
[2018-07-27 15:35:46]
ender :
So i really dont know.
[2018-07-27 15:36:06]
ender :
So my vote would go for NO RELIABLE FCC HACK YET
[2018-07-27 15:36:20]
ender :
But the way aciid thrashes the stuff it might not be long.
[2018-07-27 15:36:41]
ender :
@aciid: now that you can change the MPP Filesystem, isnt there an opportunity ?!
[2018-07-27 15:38:01]
aciid :
sure
[2018-07-27 15:38:11]
aciid :
but I need to find now how to decrypt mavic log files
[2018-07-27 15:38:18]
aciid :
does anyone know
[2018-07-27 15:41:08]
ender :
uhh i used to… oG’s know. It was easy, there even is a tool from jan… wait, i’ll look
[2018-07-27 15:42:20]
ender :
DJI_ftpd_aes_unscramble-master
[2018-07-27 15:42:39]
ender :
<https://github.com/MAVProxyUser/DJI_ftpd_aes_unscramble>
[2018-07-27 15:42:43]
ender :
please try that
[2018-07-27 15:42:51]
ender :
tool from mefisto
[2018-07-27 15:42:57]
ender :
I hope its still state of the art
[2018-07-27 15:44:41]
aciid :
looks like @jezzab fork has new AES key?
[2018-07-27 15:44:44]
ender :
<http://dji.retroroms.info/howto/dji_ftpd_aes_unscramble?s[]=unscramble>
[2018-07-27 15:44:45]
aciid :
<https://github.com/jezzab/DJI_ftpd_aes_unscramble/blob/05d492ab82b40fe4553a9d42850b6fb6b5f35d46/dji_ftpd_descrambler.py#L35>
[2018-07-27 15:45:27]
ender :
yep but that was after my Mavic Pro time so i have no idea if / when its needed. Fire it up and you’ll see, ACIID Style :slightly_smiling_face:
[2018-07-27 15:45:47]
ender :
upp, some mod may kick us as we are WAY OT in Anafi group :slightly_smiling_face:
[2018-07-27 15:46:11]
aciid :
i have @antihawk's logs here we are trying to find does the logs from /blackbox folder contain info when mavic hits distance / radius limit
[2018-07-27 15:46:14]
aciid :
when flying in wifi mode
[2018-07-27 15:46:25]
aciid :
that is still not patched in any firmware or in nldapp or in dji go 4 apk
[2018-07-27 15:46:32]
aciid :
wifi radius is still 80m
[2018-07-27 15:46:45]
ender :
yep awful, but always was out of focus for most.
[2018-07-27 15:47:17]
ender :
Here Anafi FCC would be more interseting (hint hint)
[2018-07-27 15:47:22]
aciid :
maybe later today
[2018-07-27 15:47:48]
aciid :
im at @antihawk's home now, so well try to do this first
[2018-07-27 15:47:53]
ender :
ahhh !
[2018-07-27 15:49:10]
ender :
Hell, i remember there was some “normal” FC Parameter by Websockets that SOUNDED as if it would relieve the limit as well but that was after my time. May ask if someone remembers. Would be stupid to reinvent wheel. Anyways even without limit the speed was also limited…
[2018-07-27 15:49:47]
ender :
I am very sorry, cant remember, months ago…
[2018-07-27 15:53:47]
aciid :
its ok
[2018-07-27 15:54:18]
ender :
were you able to descramble log ?
[2018-07-27 16:00:10]
aciid :
nope
[2018-07-27 16:31:50]
c.binetti :
will it not work with openssl?
[2018-07-27 16:32:15]
c.binetti :
<https://mavicpilots.com/threads/has-anyone-managed-to-decrypt-the-blackbox-log-files-without-dealing-with-github-repositories.34815/>
[2018-07-27 16:37:40]
aciid :
nope wont work, must be different keys for blackbox
[2018-07-27 17:33:05]
aciid :
android almost SElinux removed
[2018-07-27 17:33:17]
aciid :
so I have a dev phone for DJI GO and Freeflight6
[2018-07-27 17:35:20]
ender :
yiahhh
[2018-07-27 19:59:33]
mail451 :
At least it does not crash...
[2018-07-27 20:00:58]
mail451 :
@aciid can you tell me more about the developer views?
[2018-07-27 20:31:01]
ender :
konrad,what did you change, what was the crashing part ?
[2018-07-27 20:39:08]
aciid :
going home soon be back later
[2018-07-27 20:39:32]
ender :
bye :slightly_smiling_face:
[2018-07-27 20:43:02]
mail451 :
Yes @ender
[2018-07-27 20:43:10]
mail451 :
Now I tested it and it doesn't crash
[2018-07-27 20:43:23]
mail451 :
But don't know if it actually enables FCC parameters
[2018-07-27 21:01:48]
aciid :
im at home now
[2018-07-27 21:04:49]
ender :
korad, it does not seem to do a different thing then my last attempt. Will try nevertheless. But why do you put Dummy and read to the real thing ? My idea was to preinitialize both with "us" and from then on only read to the dummy and write with the real thing.
[2018-07-27 21:06:42]
mail451 :
Ah mCountryDummy was left there accidentally.
[2018-07-27 21:08:40]
ender :
konrad as i said before i failed to load up "us" in the variable (yoused jumbo" but did so by loading the mCountryCode everywhere where i wanted to load "us". so i dont think you are doing a different thing. Its valuable that i know now how to smali load a value into avariable but i think maybe all that code is not really used.
[2018-07-27 21:09:32]
ender :
When i use my patch the shared_preferences.xml ALWAYS contains "us" which is fine but there is no "FCC effect" that i can measure or prove my known "range course".
[2018-07-27 21:10:23]
ender :
But the country display in the fragment_prefrences_network that i unhid always shows Germany.
[2018-07-27 21:10:55]
ender :
With version 1.0.3 i am not able to change that even with FakeGPS, strangely i got it changed to china somehow and it was lokced to china then.
[2018-07-27 21:11:27]
ender :
The only thing that came to my mind is that i changed my WiFi region (WiFix Manager) to be able to "see" Anafi on 15x wifi channels.
[2018-07-27 21:11:36]
ender :
So that might have aninfluence.
[2018-07-27 21:12:11]
ender :
But thats all cr*p . We need to change the processing code in the COntroller that then informs the drone and also steps up controller Tx power i guess.
[2018-07-27 21:27:34]
ender :
btw, what was causing the crash ? I am still trying to learn smali... ?!
[2018-07-27 21:45:44]
mail451 :
The crash was a variable name that was out of range, constants names should use v[0..4] then moved.
[2018-07-27 21:57:16]
ender :
ah so v11 was out of range ?!
[2018-07-27 21:57:24]
ender :
dint know that, thx
[2018-07-27 22:39:09]
aciid :
at home
[2018-07-27 22:39:14]
aciid :
finally
[2018-07-27 23:00:09]
jabuasab :
Anyone have issues with the drone getting gps. Gps just stays red for it
[2018-07-27 23:02:57]
aciid :
only inside
[2018-07-27 23:25:01]
jabuasab :
Hmmm
[2018-07-27 23:31:45]
jabuasab :
Are there any logs stored on it?
[2018-07-27 23:37:49]
makingthisnameup :
Sidebar - finished the Titan install. Have not tried it yet
[2018-07-27 23:38:11]
makingthisnameup :
Aww no photo space
[2018-07-27 23:43:41]
makingthisnameup :
<https://photos.app.goo.gl/dmVBGC4YCFThkgSN8>
[2018-07-27 23:44:04]
aciid :
i have sucesfuly extracted Anafi Signature key
[2018-07-27 23:44:14]
makingthisnameup :
Yeah!
[2018-07-27 23:44:33]
makingthisnameup :
Dude you have been on one for a week something now
[2018-07-27 23:45:26]
aciid :
i have a eating disorder probably
[2018-07-27 23:47:03]
makingthisnameup :
Whatever your doing it's working
[2018-07-28 00:34:42]
aciid :
If someone comes up with what does **public_key_rpb** mean that would be great
[2018-07-28 00:37:12]
aciid :
_ rotation in partitioned bitstream (RPB)._
[2018-07-28 00:41:48]
jezzab :
I think it just mean Rpublic
[2018-07-28 00:42:18]
jezzab :
`...calculates its public key Rpb, where Rpb = RRpr mod P.`
[2018-07-28 04:37:48]
aciid :
I don't understand this notation.
[2018-07-28 04:39:23]
aciid :
How to convert **public_key_der** from signature
```
copy "public_key_der" from signature file
---------------------------
aciid@ubuntu:~$ echo "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" > der.txt
aciid@ubuntu:~$ xxd -r -p der.txt > derbin.txt
aciid@ubuntu:~$ openssl rsa -pubin -in derbin.txt -inform DER -outform PEM -out der.pem
writing RSA key
aciid@ubuntu:~$ openssl rsa -inform PEM -pubin -in der.pem -text -noout
.......
```
[2018-07-28 06:18:41]
aciid :
We extracted the public_key_der from the file to pem format so we can sign files now.
Solving this rpb, is the last piece of the puzzle.
Could you try to help with explaining this to me better, my understanding of algebra is not on this level at the moment.
[2018-07-28 06:22:01]
jezzab :
your best bet would be talking to @jan2642 or @freaky123 (hes not around now days)
[2018-07-28 13:06:31]
aciid :
I have found the references what **RPB** really means in signature.
Anafi is built on Linaro framework. RPB is so called "meta-distro" layer in there.
All binaries on Anafi mention it too GCC: (Linaro GCC 6.3-2017.02) 6.3.1 20170109)
**Reference Platform Build**: Created and maintained by Linaro, these builds target the open source community by shipping the freshest possible versions of software across the entire software stack - firmware, bootloader, kernel, middleware and applications.
[2018-07-28 13:51:36]
aciid :
@ender package com.parrot.drone.groundsdk.arsdkengine.peripheral.wifi;
[2018-07-28 14:19:12]
aciid :
[2018-07-28 14:32:17]
mr.vibez :
Nice
[2018-07-28 15:09:10]
aciid :
Android Frida users please try to trace com.parrot.freeflight.prefs.AbsPrefs getMSharedPrefs
[2018-07-28 15:10:29]
mail451 :
ok.
[2018-07-28 16:08:37]
mail451 :
@aciid konrad@konrad-pc [~]: frida-trace -i "getMSharedPrefs" -U com.parrot.freeflight.prefs.AbsPrefs
Failed to attach: unable to find process with name 'com.parrot.freeflight.prefs.AbsPrefs'
[2018-07-28 16:09:01]
mail451 :
rooted Xiaomi Mi a1, frida && frida-server version 10.7.7
[2018-07-28 16:09:06]
aciid :
wrong style
[2018-07-28 16:09:36]
aciid :
frida-trace -U "com.parrot.freeflight" -i "getMSharedPrefs"
[2018-07-28 16:09:38]
aciid :
try that
[2018-07-28 16:09:59]
mail451 :
btw, package name is com.parrot.freeflight6
[2018-07-28 16:09:59]
aciid :
if com.parrot doesnt work, use frida-ps -U to find correct package name
[2018-07-28 16:10:04]
aciid :
ok
[2018-07-28 16:10:04]
mail451 :
not freeflight
[2018-07-28 16:10:16]
aciid :
frida-trace -U "com.parrot.freeflight6" -i "getMSharedPrefs"
[2018-07-28 16:10:44]
mail451 :
Started tracing 0 functions. Press Ctrl+C to stop.
[2018-07-28 16:10:57]
mail451 :
do I need to do anything? I have the app open.
[2018-07-28 16:11:30]
aciid :
it should open the app
[2018-07-28 16:11:32]
aciid :
by itself
[2018-07-28 16:11:40]
aciid :
ahh
[2018-07-28 16:11:43]
aciid :
it cannot find function
[2018-07-28 16:12:00]
aciid :
hmm maybe need to list classes and methods it can hook
[2018-07-28 16:13:08]
mail451 :
how do I get that?
[2018-07-28 16:13:49]
aciid :
frida -U -f "com.parrot.freeflight6" --no-pause
[2018-07-28 16:13:56]
aciid :
then once it has commandline
Java.perform(function(){Java.enumerateLoadedClasses({"onMatch":function(className){ console.log(className) },"onComplete":function(){}})})
[2018-07-28 16:14:02]
aciid :
copypaste that in to the commandline
[2018-07-28 16:18:30]
mail451 :
lots of text, can that be dumped into a file?
[2018-07-28 16:18:45]
aciid :
which operating system?
[2018-07-28 16:19:00]
mail451 :
Android, Arch Linux
[2018-07-28 16:19:13]
aciid :
try yout commandline EDIT menu
[2018-07-28 16:19:17]
aciid :
select al l -> copy
[2018-07-28 16:19:19]
aciid :
?
[2018-07-28 16:19:28]
aciid :
I dont know how to write to file in interactive frida
[2018-07-28 16:19:57]
mail451 :
this is as far as my terminal emulator goes: <https://hastebin.com/esirewenop.bash>
[2018-07-28 16:21:55]
aciid :
looks good
[2018-07-28 16:23:16]
mail451 :
is the function needed there?
[2018-07-28 16:23:20]
aciid :
we need to try to trace those classes
[2018-07-28 16:23:24]
aciid :
wait
[2018-07-28 16:24:18]
aciid :
frida-trace -U -f "com.parrot.freeflight6" -I "com.parrot.freeflight.prefs"
[2018-07-28 16:24:21]
aciid :
try that
[2018-07-28 16:24:33]
aciid :
I dont know how to do things in android
[2018-07-28 16:24:35]
aciid :
need to google
[2018-07-28 16:25:20]
mail451 :
frida froze my phone, weird.
[2018-07-28 16:25:24]
mail451 :
have to reboot it
[2018-07-28 16:25:25]
aciid :
its common
[2018-07-28 16:25:31]
aciid :
normally once frida handler dies
[2018-07-28 16:25:35]
aciid :
it will timeout
[2018-07-28 16:25:37]
aciid :
and crash the app
[2018-07-28 16:25:41]
aciid :
shoudl work again
[2018-07-28 16:25:44]
aciid :
depends again on phone
[2018-07-28 16:25:49]
aciid :
I have a dev phone I do this shit
[2018-07-28 16:25:51]
aciid :
old iphone
[2018-07-28 16:26:04]
mail451 :
lmao I rooted my main phone just to get this
[2018-07-28 16:26:14]
aciid :
im going to try a new wifi unlock hack with mavic pro to outside for a bit
[2018-07-28 16:26:21]
aciid :
yea we will use that root
[2018-07-28 16:26:24]
aciid :
you will learn
[2018-07-28 16:26:26]
aciid :
brb !
[2018-07-28 16:26:33]
aciid :
not going to be for long
[2018-07-28 16:26:34]
mail451 :
I stopped using root because android 8.1 has weird selinux shit that makes it bootloop
[2018-07-28 16:26:36]
mail451 :
ok cya
[2018-07-28 16:26:44]
mail451 :
maybe I should fly the spark for a bit aswell
[2018-07-28 16:57:17]
aciid :
@ender the publickey thing probably solved
[2018-07-28 17:08:06]
ender :
Hi aciid, just back from some swimming. Yeah i have seen you are running circles around the Protection :slightly_smiling_face:
[2018-07-28 18:05:30]
aciid :
Yes but found something but need more people to start looking what could it be context
[2018-07-28 18:08:43]
ender :
So for a non-Superhacker ( :wink: ) Whats the current state:
(1) you got the MPP in your pocket ? (Able to change whatever you like in Ubuntu and flash it) ?
(2) You know how to sign Aircraft Firmwares and push them or not or halfway or ?!?!
[2018-07-28 18:11:24]
ender :
BTW, Anafi stuff popping up on Thingyverse, need to repair my 3D-Printer...
e.g. very simple Tablet Adapter:
<https://www.thingiverse.com/thing:3023595>
[2018-07-28 18:21:05]
mail451 :
@aciid hey, still need the frida thing?
[2018-07-28 18:29:10]
aciid :
@mail451 I think we can leave it for today
[2018-07-28 18:29:30]
aciid :
I just got wet on my motorcycle trip to home
[2018-07-28 18:29:33]
aciid :
I was testing a new thing
[2018-07-28 18:29:46]
mail451 :
I went to the mountains to fly the spark
[2018-07-28 18:29:49]
mail451 :
got some sick shots
[2018-07-28 18:30:06]
mail451 :
did a solid 10k steps
[2018-07-28 18:30:09]
aciid :
wow
[2018-07-28 18:30:28]
aciid :
I wish we would have mountains
[2018-07-28 18:30:39]
aciid :
I just came up with a new Anafi flash test
[2018-07-28 18:30:52]
ender :
uh
[2018-07-28 18:30:54]
mail451 :
flash test?
[2018-07-28 18:31:04]
aciid :
Anafi Firmware
[2018-07-28 18:31:06]
ender :
flash it to submission..
[2018-07-28 18:31:19]
aciid :
I guess the second key is static key for the operating system
[2018-07-28 18:31:26]
aciid :
so ill try once more adding my own keys there
[2018-07-28 18:31:38]
aciid :
need to figure out how to sign multiple files
[2018-07-28 18:31:43]
aciid :
and get one section
[2018-07-28 18:59:09]
aciid :
<https://rot256.io/post/software_update/>
[2018-07-28 18:59:23]
aciid :
last years chaos computer congress CTF looks awfully familiar......
[2018-07-28 20:01:27]
jabuasab :
man this thing took 20mins to lock to gps. God this thing is hoooorrible. would rather have a spark or air for the money
[2018-07-28 20:01:51]
ender :
@jabuasab, thx for your positive thinking :stuck_out_tongue:
[2018-07-28 20:01:55]
jabuasab :
lol
[2018-07-28 20:01:56]
ender :
It will lock faster and faster
[2018-07-28 20:01:57]
jabuasab :
np
[2018-07-28 20:02:06]
jabuasab :
but its just so bad
[2018-07-28 20:02:19]
ender :
go back to where i say “faster and faster”
[2018-07-28 20:02:28]
jabuasab :
no just overall
[2018-07-28 20:02:36]
ender :
so sell it and get over it ?!
[2018-07-28 20:02:44]
jabuasab :
from build quality to flight.
[2018-07-28 20:02:46]
jabuasab :
lol
[2018-07-28 20:02:54]
ender :
Yeah horrible. We all hate Anafi here
[2018-07-28 20:03:01]
jabuasab :
haha
[2018-07-28 20:03:09]
ender :
Its so loud. I hate not obeying to NFZ, love NFZ
[2018-07-28 20:03:22]
jabuasab :
its not too loud
[2018-07-28 20:03:26]
aciid :
I don't have gps locking problems
[2018-07-28 20:03:29]
ender :
Love giving data to the chinese, god beware giving Data to a french company
[2018-07-28 20:03:30]
jabuasab :
normal brushless motors
[2018-07-28 20:03:40]
aciid :
have you considered that Anafi is carbon fiber?
[2018-07-28 20:03:43]
aciid :
did you know?
[2018-07-28 20:03:46]
ender :
@aciid: at first it can take longer
[2018-07-28 20:03:59]
ender :
thedude: as opposed to abnormal ones ?
[2018-07-28 20:04:19]
jabuasab :
carbon fiber?
[2018-07-28 20:04:24]
aciid :
yes
[2018-07-28 20:04:26]
ender :
the hull
[2018-07-28 20:04:37]
aciid :
you are comparing a piece of engineering to a DJI drone.
[2018-07-28 20:04:45]
ender :
so it has flex and beats the crap out of Air in terms of flight time and weight
[2018-07-28 20:04:49]
aciid :
which is in firmare version 1.0.0
[2018-07-28 20:04:52]
ender :
but yeah quite horrible
[2018-07-28 20:04:53]
aciid :
and app version 1.0.1
[2018-07-28 20:05:02]
aciid :
anafi is fucking supa
[2018-07-28 20:05:28]
jabuasab :
are we joking here? i am confused lol
[2018-07-28 20:05:35]
makingthisnameup :
Hella supa
[2018-07-28 20:05:38]
ender :
we are making fun out of you.
[2018-07-28 20:05:45]
ender :
i made up a list of pros and cons.
[2018-07-28 20:05:52]
aciid :
someone is actually a dji fanboy?
[2018-07-28 20:05:54]
aciid :
cringe
[2018-07-28 20:06:09]
ender :
if you wanna focus on the cons or make them up your invited to do that on MAGA_aka_whining channel :wink:
[2018-07-28 20:06:37]
ender :
no seriously. I’ll fetch that list and paste it, sec.
[2018-07-28 20:06:48]
aciid :
joking
[2018-07-28 20:06:49]
ender :
(hope i find it in the forum buried somewhere)
[2018-07-28 20:06:50]
aciid :
but anyways
[2018-07-28 20:06:57]
aciid :
parrotpilots is a great forum it seems
[2018-07-28 20:07:00]
jabuasab :
i am so not a dji fanboy...if you were referring to me .lol
[2018-07-28 20:07:06]
ender :
i am !
[2018-07-28 20:07:08]
aciid :
<https://parrotpilots.com/>
[2018-07-28 20:07:10]
jabuasab :
oooh
[2018-07-28 20:07:10]
ender :
except…
[2018-07-28 20:07:13]
jabuasab :
dji sucks too
[2018-07-28 20:07:17]
jabuasab :
lol
[2018-07-28 20:07:23]
jabuasab :
DIY is the way to go
[2018-07-28 20:07:53]
ender :
not if you want a small 4k drone with flight time over 5 minutes
[2018-07-28 20:08:02]
ender :
Show me and i pray to your picture from then on
[2018-07-28 20:08:13]
ender :
Been there done that. Well … FAILED :slightly_smiling_face:
[2018-07-28 20:08:34]
jabuasab :
any DIY with a gopro
[2018-07-28 20:08:34]
ender :
If you want a hilariously big thing with soso flight time i have one for sale :slightly_smiling_face:
[2018-07-28 20:08:42]
ender :
Y6B Hexa with SONY NEX Gimbal
[2018-07-28 20:09:43]
jabuasab :
[2018-07-28 20:09:47]
jabuasab :
just built this. it has 4k and is better than the anafi
[2018-07-28 20:09:48]
jabuasab :
lol
[2018-07-28 20:09:56]
ender :
lolz :wink:
[2018-07-28 20:10:04]
ender :
nice choice of color, subtle
[2018-07-28 20:10:12]
jabuasab :
yeah its camo
[2018-07-28 20:10:17]
jabuasab :
for the grass
[2018-07-28 20:10:22]
aciid :
thats cute
[2018-07-28 20:10:23]
aciid :
did you print it?
[2018-07-28 20:10:25]
ender :
Is it glow in the dark
[2018-07-28 20:10:27]
jabuasab :
yeah
[2018-07-28 20:10:32]
jabuasab :
no not glow in the dark
[2018-07-28 20:10:35]
jabuasab :
i didn print it
[2018-07-28 20:10:38]
aciid :
what is that silicon matt called btw
[2018-07-28 20:10:41]
aciid :
I need those
[2018-07-28 20:10:45]
ender :
Next one should have glow in the dark. love that
[2018-07-28 20:10:46]
aciid :
for my workdesk
[2018-07-28 20:10:50]
aciid :
garage
[2018-07-28 20:10:52]
jabuasab :
the ESD mat?
[2018-07-28 20:10:57]
jabuasab :
tan one
[2018-07-28 20:11:01]
aciid :
the green
[2018-07-28 20:11:02]
jabuasab :
amazon for $14
[2018-07-28 20:11:05]
jabuasab :
oh that
[2018-07-28 20:11:13]
jabuasab :
its a cutting mat
[2018-07-28 20:11:15]
aciid :
i dont know the word
[2018-07-28 20:11:16]
aciid :
oh
[2018-07-28 20:11:29]
jabuasab :
<https://www.amazon.com/Quilting-Cutting-Mats/b?ie=UTF8&node=262643011>
[2018-07-28 20:12:27]
jabuasab :
i have some glow in the dark filament but im printing a bigger one now
[2018-07-28 20:12:40]
jabuasab :
<https://www.thingiverse.com/thing:2414983>
[2018-07-28 20:12:49]
aciid :
Ender, I'm ordering you from aliexpress
[2018-07-28 20:12:53]
jabuasab :
uses two 2212 brushless motors
[2018-07-28 20:13:06]
aciid :
Ender do you come via DHL
[2018-07-28 20:13:11]
aciid :
<https://www.aliexpress.com/store/product/CR-10-Mini-3D-printer-DIY-KIT-Prusa-i3-Large-Print-size-Continuation-Print-of-power/3033013_32829861835.html>?
[2018-07-28 20:13:14]
jabuasab :
lol
[2018-07-28 20:13:33]
jabuasab :
i have a ft-5
[2018-07-28 20:13:40]
aciid :
I don't have space
[2018-07-28 20:13:51]
aciid :
I had duplicator with dual heads X2
[2018-07-28 20:13:58]
aciid :
i didnt use it that much regretted
[2018-07-28 20:14:05]
jabuasab :
i use mine all the time
[2018-07-28 20:14:11]
jabuasab :
the ft5 is a beast
[2018-07-28 20:14:17]
aciid :
I need to fix my mavic bodyshell
[2018-07-28 20:14:28]
aciid :
I cut away the rear
[2018-07-28 20:14:34]
jabuasab :
why?
[2018-07-28 20:14:41]
aciid :
connected the rear USB
[2018-07-28 20:14:50]
aciid :
theres a micro-usb port
[2018-07-28 20:14:50]
jabuasab :
oh
[2018-07-28 20:14:51]
ender :
Air vs. Anafi: (Dont compare to MP, Evo, MP2, different class of birds)
Pro Anafi & Con Air:
-Anafi is low noise (as loud as the tiny Ryze Tello), Air is loud as Hell.
-Anafi is 2/3 of the weight, less impact damage if the sh*t hits the fan
-Anafi doesnt enforce NFZ crap, Air forces you to obey chinese companys idea of NFZ unless ya hack it.
-Anafi can look 90° up, can shoot full 360 spherical panos
-Anafi can keep Image stabilized at higher wind
-Anafi does not seem to give your data away as much as the Air
-Anafi has much more flight time
-Anafi batteries are able to beeing charged with any USB, optimum with USB-C PD Standard (max 24W, i only have seen 18W)
-Anafi has better low light performance, 1 to 2 F-Stops (amazing)
-Anafi photos have more usable resolution
-Anafi video has lossless Zoom (1.4x 4k or 2.8x FHD)
-Anafi 2D/EIS Gimbal can handle steeper angles / higherwind gusts
-Anafi hardly ever shows prop shadows or the props themselves due to its construction.
-Anafi Lens does not seem to show as much sun flares as the Air
Pro Air & Con Anafi:
-Air has better hover “lock”, like nailed to the sky
-Air Build Quality is fantastic
-Air App DJI GO is more mature with more options & features altogether.
-Air / DJI has a big & nice hacking community (sucking up bigly here :stuck_out_tongue: )
-Air can be fitted with DJI Care Refresh
-Air has front & back OA Sensors which makes the noobs feel safe until they are not :stuck_out_tongue:
-Air has faster GPS Fix (Anafis improves over time but does not reach Airs speed)
-Air has known good working FCC hack
-Anafi lacks possibility of adjusting RTH Behavior or Altidude :skull_and_crossbones: (Yeah App thing but outstandingly stupid)
-Anafi EIS can fail in **very** low light conditions (H-jitter)
P.S. i am a Kraut so please help me correcting blatant errors in “ze inglish lahnguatsh”
[2018-07-28 20:15:03]
ender :
sry still editing, incomplete…
[2018-07-28 20:15:07]
jabuasab :
yeah i know. i forgot what it was used for
[2018-07-28 20:15:13]
aciid :
@ender pin that post once you are ready
[2018-07-28 20:15:38]
aciid :
im going out with @antihawk ill take my laptop with me too.
[2018-07-28 20:15:51]
aciid :
friend is driving us around and were hacking over beers in the back
[2018-07-28 20:15:52]
aciid :
best
[2018-07-28 20:15:57]
aciid :
executive Volvo
[2018-07-28 20:16:07]
aciid :
S60 polestar edition
[2018-07-28 20:17:56]
ender :
i edited list, will think of more and pin it…
[2018-07-28 20:22:02]
ender :
ACTUALLY i do have a CR-10, its printing the Anafi Tablet holder right now (or fucking it up, i did not bother to readjust it after 3 month w/o usage)
[2018-07-28 20:23:19]
ender :
@jabuasab: you said the Anafi uses “normal” brushless motors, for me thats a pro argument but you sound like its negative ? What are you saying there ?
[2018-07-28 20:23:47]
jabuasab :
nothing. you were commenting on the sound
[2018-07-28 20:24:52]
ender :
well the sound is mostly about airflow round the hull & ESC producing a “foward leaning sine wave for linear power increment torque”
[2018-07-28 20:25:10]
ender :
Air has fucked up Airflow as prop ring is over the hull too much.
[2018-07-28 20:25:26]
ender :
Give the Air 3cm longer legs and it would prolly by 3dB less and 3 minutes more
[2018-07-28 20:25:35]
jabuasab :
yeah i know it is quieter
[2018-07-28 20:25:40]
ender :
(and rounded legs)
[2018-07-28 20:25:48]
ender :
its not quieter.
[2018-07-28 20:25:58]
ender :
its QUIETER
[2018-07-28 20:26:04]
jabuasab :
lol
[2018-07-28 20:26:07]
aciid :
its really quiet
[2018-07-28 20:26:32]
ender :
Seriosly i come form big birds but with drone awareness (haters) and stuff i really enjoy people NOT turning heads when i fly.
[2018-07-28 20:26:33]
jabuasab :
it could be quieter
[2018-07-28 20:26:43]
ender :
like your tank if you throw it ?
[2018-07-28 20:26:56]
jabuasab :
yeah that would be quiet
[2018-07-28 20:26:57]
ender :
you are a “glas is half empty guy” ;.)
[2018-07-28 20:27:02]
jabuasab :
lol
[2018-07-28 20:27:09]
jabuasab :
just stirring the pot
[2018-07-28 20:27:10]
jabuasab :
lol
[2018-07-28 20:27:14]
ender :
no, any real ideas how to make it quieter ?
[2018-07-28 20:27:24]
ender :
The Props are… Exotic matter
[2018-07-28 20:27:25]
jabuasab :
different props
[2018-07-28 20:27:39]
jabuasab :
esc could quiet it down
[2018-07-28 20:27:45]
aciid :
rpm scaling
[2018-07-28 20:27:48]
jabuasab :
but its all one unit
[2018-07-28 20:27:51]
jabuasab :
yeah
[2018-07-28 20:27:52]
aciid :
i havent tried yet
[2018-07-28 20:28:03]
ender :
Thats just talk.
[2018-07-28 20:28:17]
ender :
Show me an existing implementation or one aiming at that
[2018-07-28 20:28:23]
ender :
seriously.
[2018-07-28 20:28:29]
jabuasab :
whats the KV on these motors?
[2018-07-28 20:28:31]
ender :
Its SUCH a difference to the other drones.
[2018-07-28 20:28:44]
ender :
uhh someone measured already in my german forum…
[2018-07-28 20:28:56]
ender :
uhhh…. cant remember
[2018-07-28 20:28:59]
jabuasab :
np
[2018-07-28 20:29:03]
ender :
But will be all over the place soon…
[2018-07-28 20:29:26]
jabuasab :
i wish i could tweak the yaw
[2018-07-28 20:29:29]
jabuasab :
it bugs me
[2018-07-28 20:29:31]
ender :
maybe 3kish but i dont remember
[2018-07-28 20:29:36]
ender :
?
[2018-07-28 20:29:43]
jabuasab :
its soo slow in turtle mode
[2018-07-28 20:29:47]
ender :
settings
[2018-07-28 20:29:49]
aciid :
Im trying to flash these fucking systems but nobody is helping me :<
[2018-07-28 20:29:52]
ender :
you can
[2018-07-28 20:30:02]
jabuasab :
ooooh settings
[2018-07-28 20:30:06]
ender :
theres angular speed and yaw speed.
[2018-07-28 20:30:10]
jabuasab :
cool
[2018-07-28 20:30:12]
ender :
MAN, RTFM (i never do)
[2018-07-28 20:30:23]
jabuasab :
i put it to fast mode and everything sped up but the yaw
[2018-07-28 20:30:28]
ender :
like i said, in a way more attitude control then DJI go
[2018-07-28 20:30:38]
jabuasab :
lol there is a manual?
[2018-07-28 20:30:45]
ender :
yaw is faster in sports but of course not fast enough.
[2018-07-28 20:30:49]
ender :
Yea there is one.
[2018-07-28 20:30:53]
jabuasab :
yeah like 5% faster
[2018-07-28 20:31:15]
ender :
just set it, its on the very left side, you sound like right side :slightly_smiling_face:
[2018-07-28 20:31:31]
jabuasab :
ill check it out
[2018-07-28 20:31:43]
ender :
:+1:
[2018-07-28 20:32:42]
ender :
And read my list, its getting bigegr. But list give or take for me its 50% about sound and 30% about long flight time and dont give a sh*t about the rest.
[2018-07-28 20:32:53]
ender :
Oh i just recalled two more points :slightly_smiling_face:
[2018-07-28 20:33:56]
jabuasab :
any way to push different FW yet?
[2018-07-28 20:34:10]
jabuasab :
mine was on a Beta FW when i got it
[2018-07-28 20:35:15]
ender :
You should update it and aciid is running circles around modding & flashing his own ideas of FW. So a half YES
[2018-07-28 20:40:15]
aciid :
everyone can update
[2018-07-28 20:40:20]
aciid :
theres nothing new in the updater
[2018-07-28 20:40:31]
aciid :
I think ive managed to crack the update thinggy
[2018-07-28 20:40:41]
aciid :
need to just try it
[2018-07-28 22:57:14]
trulala69 :
@ender You mentioned panos in your list, which I use a lot with my Spark.
Is the Anafi now able to do Panos?
And AEB shots would be wonderful...
If it could do both, I would immediately order one and ditch the Spark ...
[2018-07-29 08:13:31]
ender :
@trulala69 Nope neither Panos nor AEB are possible right now. AEB can be found in the Android, just not yet enabled so i guess that will be done soon.
Panos i dont know. On the Bebops we usesd an ALetrnative App that was able to go through the 360 degree Pano routine… Lets see :slightly_smiling_face:
[2018-07-29 09:41:50]
trulala69 :
Ok, then let’s hope they’re doing some enhancements for photographers soon... thanks mate!
[2018-07-29 09:46:22]
aciid :
@ender what is the name of the cable and connectors I need to make common remote mods?
[2018-07-29 09:46:48]
aciid :
ufl - rp sma?
[2018-07-29 09:46:48]
ender :
you mean like ataching RF Meter or external Atenna ?
[2018-07-29 09:46:53]
aciid :
yea
[2018-07-29 09:47:20]
aciid :
I know I need female UFL . but what is the most common for the other end. Male or Female?
[2018-07-29 09:47:43]
ender :
UFL to RP-SMA pigtail.
[2018-07-29 09:48:28]
aciid :
<https://www.aliexpress.com/store/product/5-pieces-kit-17cm-Extension-Cord-UFL-to-RP-SMA-Connector-Antenna-WiFi-Pigtail-Cable/2926015_32806038167.html>
[2018-07-29 09:48:31]
aciid :
something like this?
[2018-07-29 09:48:42]
ender :
yep
[2018-07-29 09:48:59]
ender :
if the cable is short even basic Quality will be just fine.
[2018-07-29 09:49:26]
ender :
Depending on what you want / need there are of course RP-SMA with 90 degree angle cable and longer better Quality cables.
[2018-07-29 09:49:35]
ender :
(like those needed to mod DJI remotes)
[2018-07-29 09:49:58]
ender :
fredz has them all as he sells that stuff of course :slightly_smiling_face:
[2018-07-29 09:51:19]
ender :
sniff, just gave away my MA :disappointed: still hurts but i have to watch my toy-budget…
[2018-07-29 10:05:16]
aciid :
do the amplifiers work in terms of say air / spark
[2018-07-29 10:05:23]
aciid :
could try on to anafi too
[2018-07-29 10:06:06]
ender :
For Air / Spark i’d say you need HQ Amplifiers as the receiving chipset is very good and bad amps tend to blow up noise too much.
[2018-07-29 10:06:32]
aciid :
I havent even thought about the quality of the amps
[2018-07-29 10:06:39]
aciid :
im such a newbie
[2018-07-29 10:06:41]
ender :
IMO using Apms is only justified when flying in crowded environment OR with battery mods.
[2018-07-29 10:06:56]
ender :
sunhans are of **very** mixed Quality.
[2018-07-29 10:07:24]
ender :
I have HQ 500mW amp that can run circles around a Sunhans 5W
[2018-07-29 10:07:34]
ender :
as it has close to zero noise
[2018-07-29 10:07:57]
ender :
and factor 10 is not much in dB if the “big one” has some dB of noise all the engery is POOF.
[2018-07-29 10:08:05]
ender :
And you can easily overload receiver
[2018-07-29 10:08:52]
ender :
so i would go for HQ with low amplification but thats jzst me and its expensive. So my reasoning led to nice passive Solutions. But i do not fly in crowded Areas where only brute force helps…
[2018-07-29 10:09:18]
mr.vibez :
Anyone know an android emulator for windows where you can access the root filesystem from windows?
[2018-07-29 10:09:41]
ender :
afair Bluestacks can be rooted
[2018-07-29 10:10:16]
aciid :
I have rooted bluestacks
[2018-07-29 10:10:20]
aciid :
I can upload the tool
[2018-07-29 10:10:27]
aciid :
works with recent bluestacks
[2018-07-29 10:10:38]
ender :
aciid is there anything a mere human can try / help in terms of getting FCC to work in the light of your recent FW flash adventures ?
[2018-07-29 10:11:08]
aciid :
probably, but my Android phone is arriving in a week or two
[2018-07-29 10:11:23]
aciid :
we tried S6 edge with @antihawk but I couldnt catch any classes
[2018-07-29 10:11:39]
aciid :
someone else tried it too here, I don't know whats going on with android and Frida
[2018-07-29 10:11:50]
aciid :
I also probably found the place I noted you about it here
[2018-07-29 10:12:54]
aciid :
package com.parrot.drone.groundsdk.arsdkengine.peripheral.wifi;
[2018-07-29 10:12:55]
mr.vibez :
Sorry I have a rooted blustacks but no idea how to access the filesystem from windows
[2018-07-29 10:13:10]
aciid :
im uploading the shite for you just a sec
[2018-07-29 10:13:42]
aciid :
<https://www.dropbox.com/s/s9l4u4xzp4in7m1/BSTweaker5_5000.zip?dl=1>
[2018-07-29 10:14:01]
aciid :
that tool also has file explorer for bluestacks
[2018-07-29 10:14:01]
mr.vibez :
Already got that
[2018-07-29 10:14:07]
aciid :
thers a file manager
[2018-07-29 10:14:10]
mr.vibez :
oh does it
[2018-07-29 10:14:13]
aciid :
last tab
[2018-07-29 10:14:14]
mr.vibez :
let me check
[2018-07-29 10:14:30]
aciid :
"FM" tab
[2018-07-29 10:14:36]
aciid :
@ender package com.parrot.drone.groundsdk.arsdkengine.peripheral.wifi;
[2018-07-29 10:14:43]
aciid :
check that in decompile
[2018-07-29 10:14:47]
ender :
uhh yes, just forget it. WIll look at that
[2018-07-29 10:14:54]
aciid :
i have source here too
[2018-07-29 10:14:59]
ender :
**firing up JEB**
[2018-07-29 10:15:14]
aciid :
uh I wonder if bluestacks can be cheated to see Anafi
[2018-07-29 10:15:18]
aciid :
with wifi adapter
[2018-07-29 10:15:25]
ender :
with wifi it SHOULD work
[2018-07-29 10:15:34]
mr.vibez :
cant see where in bstweaker to access the filesystem
[2018-07-29 10:15:40]
aciid :
FM tab
[2018-07-29 10:16:40]
aciid :
ok freeflight apk works in bluestacks
[2018-07-29 10:16:42]
aciid :
got it running
[2018-07-29 10:16:52]
ender :
:+1:
[2018-07-29 10:16:59]
aciid :
the network part is infuriating
[2018-07-29 10:17:13]
ender :
in which way ?
[2018-07-29 10:17:28]
mr.vibez :
perfect, thanks @aciid
[2018-07-29 10:18:46]
aciid :
need to patch FreeFlight probably , because it's trying to find Anafi from via that WIFI must be "enabledf"
[2018-07-29 10:18:58]
aciid :
I dont know will it find Anafi even if im on the network with my PC
[2018-07-29 10:19:00]
aciid :
but ill try
[2018-07-29 10:19:53]
ender :
learning from FF3 it may find it everywhere.
[2018-07-29 10:20:19]
ender :
my 4km+ setup with bebop involved USB2Ethernet on the Android and the Ethernet going to a Longrange WiFI Router.
[2018-07-29 10:21:47]
ender :
so just give it a try.
[2018-07-29 10:22:11]
mr.vibez :
Working on generating mapping flightplans for anafi :slightly_smiling_face:
[2018-07-29 10:22:34]
aciid :
did you sign in to get flightmapping working?
[2018-07-29 10:22:36]
ender :
let your pc connect to anafi vs wifi and BOOM
[2018-07-29 10:22:51]
mr.vibez :
Yeah I signed in
[2018-07-29 10:22:52]
aciid :
im connected to anafi
[2018-07-29 10:23:02]
aciid :
but freeflight 6 insists that android is not connected to wifi
[2018-07-29 10:23:04]
aciid :
thats the problem
[2018-07-29 10:23:07]
mr.vibez :
You dont need to be conncted
[2018-07-29 10:23:15]
aciid :
i want to be connected to the bird
[2018-07-29 10:23:17]
ender :
hmmm
[2018-07-29 10:23:28]
aciid :
bluestacks doesnt tell to android theres a wifi adapter usb
[2018-07-29 10:23:30]
ender :
maybe there is that additional level in FF6 compared to FF3
[2018-07-29 10:23:43]
ender :
so the check needs to be patched.
[2018-07-29 10:24:00]
mr.vibez :
Why do you think you need to patch it?
[2018-07-29 10:24:00]
ender :
I browse through the stuff in the folder you mentioned aciid, interseting.
[2018-07-29 10:24:38]
aciid :
the app is monitoring wifi connection
[2018-07-29 10:24:51]
aciid :
and doesnt search for the drone unless wifi AP name is "ANAFI-SOMETHIGN"
[2018-07-29 10:24:54]
aciid :
need to patch that
[2018-07-29 10:25:04]
aciid :
that way it will look it nomatter what
[2018-07-29 10:25:16]
mr.vibez :
TO use flightplan in bluestacks?
[2018-07-29 10:25:32]
aciid :
no
[2018-07-29 10:25:37]
aciid :
I want to fly from my PC
[2018-07-29 10:25:40]
aciid :
get it :
[2018-07-29 10:25:41]
aciid :
:smile:
[2018-07-29 10:25:47]
mr.vibez :
Oh, sorry
[2018-07-29 10:25:50]
aciid :
im crazy
[2018-07-29 10:25:52]
aciid :
its ok
[2018-07-29 10:26:01]
mr.vibez :
indeed :slightly_smiling_face:
[2018-07-29 10:26:16]
ender :
aciid, one of the first things i tried with APM was flying on PC with my gamepad :slightly_smiling_face:
[2018-07-29 10:26:28]
aciid :
just ordered a few from aliexpress
[2018-07-29 10:26:30]
ender :
Its an instinct, GOTTA DO THAT :wink:
[2018-07-29 10:26:51]
aciid :
my unlimited wifi selfie <https://files.slack.com/files-pri/T60D095A7-FBYNNLD50/image_from_ios.jpg>
[2018-07-29 10:26:54]
ender :
i will be away for a minute browsing the stuff you pointed me to, looking GOOD.
[2018-07-29 10:27:05]
aciid :
oh that is on private
[2018-07-29 10:27:06]
aciid :
welp
[2018-07-29 10:27:18]
ender :
hahehe
[2018-07-29 10:27:34]
aciid :
[2018-07-29 10:32:16]
ender :
the stuff there clearly reacts to the preferences settings. it would be SO nice to reenable not only display of country selection but also populating the combobox with all possible countries. would be so elegant.
[2018-07-29 10:34:20]
ender :
su much nice stuff.
[2018-07-29 10:34:35]
ender :
Also show the wifi scanner or not ( iwonder why not shown in .de)
[2018-07-29 10:35:03]
ender :
Crap, lunch closes in, kids want help, family wants to go to a lake, NEED TIME :wink:
[2018-07-29 10:35:21]
ender :
But looking terrific :slightly_smiling_face:
[2018-07-29 10:38:29]
fredz :
So should I not update my Anafi and just fly in Airplane mode? Haven’t used it in two weeks
[2018-07-29 10:40:21]
ender :
i guess updating it right now is safe.
[2018-07-29 10:40:25]
ender :
Better hover lock :slightly_smiling_face:
[2018-07-29 10:59:19]
fredz :
Why is it safe now
[2018-07-29 11:11:40]
aciid :
updater shows no changes to updating methods and there seems to be no exploits in sight that are usable from the outside
[2018-07-29 11:57:36]
mail451 :
@ender just thought, if we apply patch and deny GPS permissions it will use defined string.
[2018-07-29 11:59:13]
mail451 :
So Anafi does not have Panorama feature? I see there's an SDK so making an Android app that turns the drone and takes a picture should not be that difficult
[2018-07-29 12:00:37]
mr.vibez :
Is there an SDK for the anafi yet?
[2018-07-29 12:02:29]
ender :
@mail451 tried that. No pamo feature yet
[2018-07-29 12:02:37]
ender :
sdk not out, will come.
[2018-07-29 12:04:50]
mail451 :
Hmmm
[2018-07-29 12:05:11]
mail451 :
What's the comms? Wifi? I assume its TCP packets like DJI drones
[2018-07-29 12:05:42]
ender :
com.parrot.drone.groundsdk.arsdkengine.peripheral.wifi is interesting, two source file in there.
[2018-07-29 12:06:10]
ender :
Those are the reactions to a user selecting a country from the drop down box that we unhid and that only contains one country yet.
[2018-07-29 12:06:35]
ender :
if we could populate it at least with “cn”, “us”, “de” we would have a lot of choices
[2018-07-29 12:07:31]
mail451 :
Will look at it later
[2018-07-29 12:22:09]
aciid :
comms is on libpomp and udp sockets
[2018-07-29 12:43:36]
aciid :
I think ill go try follow modes today, if it's stable enough Ill take a run with my motorcycle
[2018-07-29 12:49:39]
ender :
btw i just found my old ipad mini, wifi only.
[2018-07-29 12:49:57]
ender :
i set it to region US and was flying. CLEARLY better reception, i guess FCC...
[2018-07-29 15:00:21]
mail451 :
@ender just checked ISO_COUNTRY_CODES, it contains: <https://hastebin.com/ocaqibedus.sql>
[2018-07-29 15:02:06]
aciid :
yeah they use those
[2018-07-29 15:02:21]
aciid :
I wonder if middleeastern countries areblocked
[2018-07-29 15:03:34]
mail451 :
no SY/SYR...
[2018-07-29 15:03:48]
mail451 :
no UAE either
[2018-07-29 15:55:33]
jabuasab :
does this thing generate Log files? if so, how do you pull them?
[2018-07-29 16:58:38]
aciid :
I dont know by default
[2018-07-29 16:58:43]
aciid :
check the filesystem?
[2018-07-29 18:32:46]
quad808 :
@ender Great list. You forgot the most important one. Anafi is made by Parrot, NOT DJI. FTW!
[2018-07-29 18:35:40]
quad808 :
Call me crazy, but I am seriously considering picking up the Anafi too.....just picked up the EVO. BUT...I fly in very congested wifi mostly, so don't know how the Anafi will do. I could pick it up from Amazon and return easily if I don't like it.
[2018-07-29 18:42:01]
d95gas :
I just ordered mine .... Be here tomorrow from Amazon Prime...... Seeing as our American cousins have excluded me from playing with Evo :slightly_smiling_face:
[2018-07-29 18:48:18]
aciid :
Ebay works
[2018-07-29 18:52:32]
mr.vibez :
@quad808 it's not particularly good near object as the attenna is quite directional. No worse than other WiFi based drones when it comes to congestion though
[2018-07-29 18:55:59]
mr.vibez :
Anyone know how to switch units since the ff6 update? I need to test a script i wrote in various distance/speed units
[2018-07-29 18:57:53]
quad808 :
@d95gas you will have to let me know what you think about it....I fired up the EVO for some testing, wife came out to the yard as I was coming back in to land....wow, she says...thats LOUD. LOL...coming down for landing, it's pretty loud compared to the Mavic. But generally on par, or maybe slightly less loud...sound profile is a little lower in pitch.
[2018-07-29 19:14:46]
quad808 :
Buying the right drone, is subjective, so the best drone is the one you use the most, I figure.
[2018-07-29 19:15:19]
quad808 :
anafi is in my cart. Mocking me.
[2018-07-29 19:16:11]
ender :
Hi guys, back from swimming !
@mail451: ah okay i would love to populate the dropdown with that list :wink: Starting to look at the binding code i found now with help of validator (basically i was just too stupid and grepped for the wrong id, grrr)
@quad808 Yeah you are crazy :wink: and YES that sentence abot “the drone your using” drove me to selling my Air today. In the last holiday i ONLY used the Anafi as the Air would have been too obstrusive. So the Air has to go.
[2018-07-29 19:16:49]
quad808 :
@ender You need to just stop.
[2018-07-29 19:17:02]
quad808 :
you are hurting my wallet. LOL
[2018-07-29 19:17:47]
ender :
It seems my little experiment with the iPad Mini Wifi where i set the region to US has locked my Anafi in US FCC for a while. Great range Performance with my Phone where everything was unfaked & german. Something to consider…. HMMM
[2018-07-29 19:17:53]
ender :
:wink: quad
[2018-07-29 19:18:17]
quad808 :
Do you have a Mavic?
[2018-07-29 19:18:29]
ender :
Had a Pro, a Spark and an Air
[2018-07-29 19:18:49]
quad808 :
ok, that settles it. Anafi will MOCK ME NO MORE.
[2018-07-29 19:18:52]
ender :
But also a Bebop 1 & 2 and a Disco :slightly_smiling_face:
[2018-07-29 19:19:15]
ender :
so i might be from evil Parotteer group convincing harmless DJI’lers to buy crap :wink:
[2018-07-29 19:19:22]
quad808 :
Whats one more to add to the collection? :thinking_face:
[2018-07-29 19:19:44]
ender :
Well i AM pretty good in selling stuff without too bug loss so thats okay.
[2018-07-29 19:20:19]
ender :
I may want to save up for MP2 Zoom. Then i would have a small stealth drone and the carrier for the dirty jobs.
[2018-07-29 19:20:41]
mr.vibez :
That's my plan
[2018-07-29 19:21:06]
mr.vibez :
With the iOS FCC trick, did it give you 5ghz too?
[2018-07-29 19:21:22]
ender :
uh hard to see as de always has 5G enabled
[2018-07-29 19:21:39]
mr.vibez :
Ah I see
[2018-07-29 19:21:43]
ender :
and it wasnt really a trick, just fooling around :slightly_smiling_face:
[2018-07-29 19:22:21]
mr.vibez :
Out of interest, what units is your app in? Ft or meters?
[2018-07-29 19:22:55]
ender :
i have a 1.0.3 version with patched network prefs ui that shows the current used country code and i WANTED a FCC to CE comparison so i was flying with the “I am US” iPad first, then used my fla-phone all sett to Krautland. But the country showed US and it performed like US which was very good.
[2018-07-29 19:23:11]
ender :
Meters, so i guess they took that from android settings
[2018-07-29 19:23:58]
ender :
In the code was a kind of “we check for country code every hour” so it might switches back next time. If that is so its easy to counter.
[2018-07-29 19:24:39]
ender :
but i have a different lead now, and aciid has the Anafi by its (tiny) balls with his FW flash achievements…
[2018-07-29 19:25:18]
ender :
Damn, more typos than DT
[2018-07-29 19:40:58]
mr.vibez :
@ender do you have access to your flightplan files?
[2018-07-29 19:41:15]
mail451 :
@ender can you switch to Europe tho?
[2018-07-29 19:41:15]
ender :
of that anafi flights i just did ?
[2018-07-29 19:41:22]
mr.vibez :
no
[2018-07-29 19:41:32]
mr.vibez :
the flightplan feature
[2018-07-29 19:41:40]
ender :
@mail451: will try
[2018-07-29 19:41:57]
ender :
i have not yet used flightplan, or am i misunderstanding ?!
[2018-07-29 21:05:59]
ender :
need to sleep but Question: did someone use a “Toast” message successful in Freeflight 6 ? it seems the usually used “v0" does not contain the needed context ?! App crashes if i try “helloworld” Toast samples. Anyone ? Good night !
[2018-07-29 22:01:50]
mail451 :
You want to run Toast.makeText() in smali?
[2018-07-30 07:23:29]
ender :
yep
[2018-07-30 08:03:11]
ender :
e.g. just for testing i inserted a Toast here:
[2018-07-30 08:05:05]
ender :
[2018-07-30 08:05:17]
ender :
see the toast output test in the end.
[2018-07-30 08:05:27]
ender :
If i insert this code FF6 crashes when starting.
[2018-07-30 08:07:15]
ender :
The original sample that bin4ry gave me and all that i can found always use p0 as the app context. That does not seem to be right. Any way to know where App context is or to get it beforehand ? Any other idea whats wrong with that code ?!
[2018-07-30 08:08:16]
ender :
Like this java sample, that seems to GET the APp context instead of assuming its in p0, right ? How would that look in smali ?!
[2018-07-30 08:08:17]
ender :
Toast.makeText(getApplicationContext(), “text”, Toast.LENGTH_LONG).show();
[2018-07-30 08:48:39]
mail451 :
Couple notes, where is your text? You should use {text, toast}
[2018-07-30 08:48:58]
mail451 :
so const-string v1, "this is toast"
[2018-07-30 08:49:14]
mail451 :
invoke-static {p0, v1, v0}, Landroid/widget/Toast;->makeText(Landroid/content/Context;Ljava/lang/CharSequence;I)Landroid/widget/Toast;
[2018-07-30 08:49:18]
mail451 :
move-result-object v0
[2018-07-30 08:49:22]
mail451 :
invoke-virtual {v0}, Landroid/widget/Toast;->show()V
[2018-07-30 08:49:29]
mail451 :
oh and initialize v0
[2018-07-30 08:49:30]
mail451 :
const/4 v0, 0x1
[2018-07-30 08:49:53]
mail451 :
ahh i see v0 is mCountryCode
[2018-07-30 09:07:27]
ender :
yes
[2018-07-30 09:07:40]
ender :
i think p0 is my problem
[2018-07-30 09:08:07]
aciid :
why are you hacking smali? doesn't java class rebuild apk work anymore?
[2018-07-30 09:08:48]
ender :
uh i dont hink that ever really worked, does it ?
[2018-07-30 09:08:52]
aciid :
waat
[2018-07-30 09:09:00]
mail451 :
I haven't got it to work @aciid
[2018-07-30 09:09:10]
mail451 :
we can get the classes in dex, get a jar
[2018-07-30 09:09:12]
aciid :
we've done 10 rebuilds with @antihawk of dji go 4 now
[2018-07-30 09:09:18]
mail451 :
but modifying the jar is hard.
[2018-07-30 09:09:18]
ender :
oops
[2018-07-30 09:09:30]
mail451 :
show us the light @aciid
[2018-07-30 09:09:44]
aciid :
and dji go is far bigger and complex app than freeflight
[2018-07-30 09:09:51]
ender :
i agree
[2018-07-30 09:10:16]
mail451 :
how do you modify the DJI Go app Java source code?
[2018-07-30 09:10:19]
aciid :
o wait i forgot
[2018-07-30 09:10:26]
aciid :
yaeh apktool decompiled to smali
[2018-07-30 09:10:30]
aciid :
*extracted
[2018-07-30 09:10:32]
aciid :
ah carry on
[2018-07-30 09:10:37]
mail451 :
yes thats what we are doing
[2018-07-30 09:10:37]
ender :
That would be great, i mean i hate java and all that but … better then smali…
[2018-07-30 09:10:41]
mail451 :
yep
[2018-07-30 09:10:43]
aciid :
yea i forgot how it was
[2018-07-30 09:10:52]
aciid :
need to figure out how to get java code to smali then
[2018-07-30 09:10:58]
aciid :
like a generator class for IDE
[2018-07-30 09:11:04]
ender :
yeah but no.
[2018-07-30 09:11:07]
aciid :
where you can write "haxxxx" and it generates smali for you
[2018-07-30 09:11:10]
ender :
Has been tried a lot with DJI GO.
[2018-07-30 09:11:23]
ender :
i mean full java recompile.
[2018-07-30 09:11:28]
mail451 :
There are plugins for IntelliJ that decode Java but I haven't tried ot
[2018-07-30 09:11:46]
aciid :
not a recompile, but I mean a java program that you can feed java code into
[2018-07-30 09:11:50]
ender :
GENERALLY people agree it does not work on apks doing more than “hello world”. That doesnt mean it does not work, only i dont know a way :slightly_smiling_face:
[2018-07-30 09:12:00]
aciid :
and it converts that to v0 move- virtual invoke shit
[2018-07-30 09:12:08]
ender :
oka aciid, thats not too hard, only i havent the time for the toolchain right now
[2018-07-30 09:12:08]
mail451 :
deejayeye-modder is smali mods
[2018-07-30 09:12:41]
aciid :
yah but that is hand written mods, what I'm after is that . lets figure out an app that helps with writing smali
[2018-07-30 09:12:54]
ender :
<https://stackoverflow.com/questions/29051781/convert-java-file-to-smali-file>
[2018-07-30 09:13:22]
aciid :
an app that you can check the class decompile with . and be like
*ok I need to spawnToaster(), lets convert this to smali"
[2018-07-30 09:13:33]
ender :
i would someone with toolchain up to convert the line from above “Toast.makeText(getApplicationContext(), “text”, Toast.LENGTH_LONG).show();”
[2018-07-30 09:13:36]
aciid :
then it makes the dozen lines of smali to run "spawnToaster"
[2018-07-30 09:13:46]
ender :
as it looks it GETS the app context instead of assuming its in p0
[2018-07-30 09:13:51]
mail451 :
@ender I sent a message with the code.
[2018-07-30 09:14:04]
ender :
oh that was smali from that line ?
[2018-07-30 09:14:22]
mail451 :
Which file needs to be added and in which line? I'll make a diff
[2018-07-30 09:14:49]
ender :
wait konrad. The main point is that either toast does not work at all in FF& (which i dont believe) or p0 is wrong.
[2018-07-30 09:14:58]
ender :
Or did you find an error in my smali method ?
[2018-07-30 09:15:11]
ender :
(you started with v0 but as you later saw its the CC)
[2018-07-30 09:16:08]
mail451 :
code looks ok
[2018-07-30 09:16:11]
mail451 :
hmmm
[2018-07-30 09:16:43]
ender :
yes. And all samples you find when looking for “how to use toast output in smali” are alike.
[2018-07-30 09:17:10]
ender :
They all assume the app context in p0. When it crashed bin4ry said that the app context is probably wrong or elsewhere in FF6.
[2018-07-30 09:17:20]
mail451 :
In Java to use toast we have to import android.widget.Toast
[2018-07-30 09:17:40]
mail451 :
Maybe the code needs to have Toast imported
[2018-07-30 09:17:58]
ender :
hmmm, how to do in smali. And that is not mentioned in the samples, would they leave out such essential stuff ? (If so they need to be hanged).
[2018-07-30 09:18:22]
mail451 :
mCountryCode is null at the start
[2018-07-30 09:18:23]
ender :
But i agree, i thought about that but then it was not mentioned to i “thought” maybe Toast is always imported
[2018-07-30 09:18:37]
mail451 :
maybe you have to connect to drone and then display the toast
[2018-07-30 09:18:37]
ender :
its not null when i print it i hope
[2018-07-30 09:18:46]
ender :
and it also does not work if using a constant string
[2018-07-30 09:18:57]
mail451 :
when its declared it is, later its populated with getFromTelephonyNetwork()
[2018-07-30 09:19:04]
mail451 :
hmmm that's weird
[2018-07-30 09:19:08]
ender :
IS this more suitable in apk_patching channel ?!
[2018-07-30 09:19:26]
ender :
I could ask the question again there… Maybe some other person knows…
[2018-07-30 09:20:17]
mail451 :
yep
[2018-07-30 09:53:23]
aciid :
y
[2018-07-30 09:53:24]
aciid :
yo
[2018-07-30 09:53:32]
aciid :
@ender @mail451
[2018-07-30 09:53:33]
aciid :
<https://github.com/Lanchon/haystack>
[2018-07-30 09:53:39]
aciid :
PULL AND PUSH SMALI TO PHONE
[2018-07-30 09:53:44]
aciid :
no need to repack
[2018-07-30 09:53:47]
ender :
nice
[2018-07-30 09:53:52]
mail451 :
Nice
[2018-07-30 09:54:23]
aciid :
its taking too damn long for my XIOAMI to arrive
[2018-07-30 09:54:25]
aciid :
:mad:
[2018-07-30 09:55:47]
mail451 :
Needs a deodexed ROM
[2018-07-30 09:56:30]
mail451 :
Btw @aciid flash microg-lineage ROM to your note5 when it arrives, it includes signature spoofing by default
[2018-07-30 09:56:39]
mail451 :
Might get a Redmi Note 3 as a drone phone
[2018-07-30 10:03:04]
aciid :
"runs a non-deoxed rom"
[2018-07-30 10:03:37]
aciid :
i wonder what all these hacker firmwares do
[2018-07-30 10:03:40]
aciid :
exposed and microg
[2018-07-30 10:05:03]
mail451 :
Xposed just provides an API to inject java code into apps, it depends on which mods use the API
[2018-07-30 10:05:17]
mail451 :
MicroG is for privacy, but it requires signature spoofing
[2018-07-30 10:05:51]
aciid :
i cant wait for the phone to arrive, it was received by DHL in honkong friday
[2018-07-30 10:05:54]
aciid :
no updates since xD
[2018-07-30 11:19:50]
mail451 :
@ender tried your code, it does indeed crash. Here is the logcat
[2018-07-30 11:19:59]
mail451 :
[2018-07-30 11:22:28]
mail451 :
Also I think we can only send Toast from an Activity...
[2018-07-30 11:22:45]
mail451 :
Let's try Log.d("...",mCountryCode);
[2018-07-30 11:27:13]
mail451 :
[2018-07-30 11:47:23]
mail451 :
This does not crash... Maybe stripping every function that updates mCountryCode is the way to go.
[2018-07-30 11:47:47]
aciid :
frida doesn't want to work on android it seems
[2018-07-30 11:48:02]
aciid :
i don't understand why it cant hook does it need somekind of a hacker kernel shit
[2018-07-30 11:48:07]
aciid :
we had to get SELINUX off and all
[2018-07-30 11:48:11]
aciid :
when i tried it lasttime
[2018-07-30 11:48:36]
mail451 :
yes, you need SeLinux permissive
[2018-07-30 11:49:47]
mail451 :
<https://i.imgur.com/FdJTPko.png>
[2018-07-30 11:49:59]
mail451 :
preferences with my smali patch
[2018-07-30 11:50:10]
mail451 :
don't know if it differs from European parameters
[2018-07-30 11:50:29]
aciid :
what did u change
[2018-07-30 11:50:42]
mail451 :
This
[2018-07-30 11:57:22]
mail451 :
It's using feet instead of meters that's a good start I guess
[2018-07-30 11:57:40]
mail451 :
but don't know if it will actually enable higher tx
[2018-07-30 15:18:22]
mr.vibez :
<https://www.parrot.com/uk/support/mises-jour/release-notes>
[2018-07-30 15:44:53]
mail451 :
There are some panorama references in the app...
[2018-07-30 16:03:55]
mr.vibez :
I think it's left over from previous versions
[2018-07-30 16:07:39]
aciid :
btw if you want to look at anafi stream on your pc low-latency , you need to compile a library
[2018-07-30 16:07:48]
aciid :
<https://developer.parrot.com/blog/2016/play-bebop-stream-on-vlc/>
[2018-07-30 16:08:13]
aciid :
stream is atleast 100ms lag if with pure vlc no libraries
[2018-07-30 17:33:09]
aciid :
anafi fwupgrade can also be done via the http page in anafi
[2018-07-30 17:33:14]
aciid :
if you connect to it via wifi
[2018-07-30 17:33:29]
aciid :
kinda faster to do it that way, no need to upload tar and modify plist
[2018-07-30 17:33:40]
aciid :
i still havent gotten the hang of what im looking for
[2018-07-30 17:33:53]
aciid :
I wonder if flightplans can be exploited
[2018-07-30 18:26:10]
ender :
In which way would you exploit FP ?
[2018-07-30 18:52:53]
quad808 :
All you Anafi heads cost me money!
[2018-07-30 18:53:12]
quad808 :
:+1:
[2018-07-30 18:57:18]
aciid :
@ender I dont know. I'm interested where the files even go from there
[2018-07-30 19:24:08]
ender :
I do think that thats all known from Bebop.
[2018-07-30 19:24:20]
ender :
did you check the hacking guide linked here earlier =
[2018-07-30 19:24:22]
ender :
?
[2018-07-30 19:24:46]
ender :
I never was a big FP guy but i am quite confident that has been explored & published.
[2018-07-30 19:24:57]
aciid :
noo
[2018-07-30 19:24:59]
aciid :
can you link
[2018-07-30 19:25:06]
ender :
the hacking guide ?
[2018-07-30 19:25:09]
aciid :
yea
[2018-07-30 19:25:12]
ender :
sec
[2018-07-30 19:25:15]
aciid :
I guess this anafi is just new shit for them
[2018-07-30 19:25:20]
aciid :
they try to keep it secure
[2018-07-30 19:25:22]
aciid :
for a while
[2018-07-30 19:25:33]
ender :
yes bit like 75% is the same as bebop.
[2018-07-30 19:25:34]
aciid :
at parrot
[2018-07-30 19:26:13]
ender :
<https://github.com/nicknack70/bebop>
[2018-07-30 19:26:28]
ender :
i invited nicknack as well, old buddy of me.
[2018-07-30 19:26:47]
ender :
i contributed quite some stuff to it :slightly_smiling_face:
[2018-07-30 19:29:10]
ender :
/data/ftp/internal_000/flightplans
[2018-07-30 19:29:23]
ender :
on the bebop but i guess FP’s are uploaded by FTP still ?!
[2018-07-30 19:29:33]
aciid :
oh
[2018-07-30 19:29:44]
aciid :
it seems to use websocket now for uploading
[2018-07-30 19:30:00]
aciid :
and /data/ paths dont exist yet on the firmware when we extract it
[2018-07-30 19:30:08]
aciid :
we'd need to run the startup scripts to get the paths correct
[2018-07-30 19:30:20]
aciid :
im still on the verge to get correct ARM version board to run the firmware scripts
[2018-07-30 19:30:26]
aciid :
armv9 probably
[2018-07-30 19:30:27]
ender :
uhh yes the flightplans WERE mavlink compatible.
[2018-07-30 19:30:50]
ender :
i recall. Freaky must know, he did Paparazzi for bebop 1 & 2
[2018-07-30 19:31:25]
aciid :
parrot has still not responded
[2018-07-30 19:31:39]
ender :
Uh i guess you dont know freaky123 he is one of the OG’s but was out recently due to real life…
[2018-07-30 19:31:51]
ender :
Forget that idea :slightly_smiling_face:
[2018-07-30 19:32:17]
ender :
I mean they will answer eventually but if it is a helpful answer in any way i am willing to eat honey on my next burger…
[2018-07-30 19:34:49]
aciid :
I don't know
[2018-07-30 19:41:15]
ender :
Q: Are we 100% that the MPP has a compass but no GPS ?
[2018-07-30 19:41:26]
ender :
(When opening for the UFL i did not look for it).
[2018-07-30 19:41:41]
ender :
It has a Magnetometer, strangely that is used on iOS but not on Android…
[2018-07-30 19:51:03]
aciid :
I didn't find a GPS in MPP
[2018-07-30 19:51:07]
aciid :
it probably uses phones
[2018-07-30 19:55:11]
ender :
yes it does but it could be like magnetometer, not use it right now :slightly_smiling_face:
[2018-07-30 19:55:23]
ender :
Here is some more random flightplan stuff:
[2018-07-30 19:55:25]
ender :
<https://github.com/hybridgroup/node-bebop/tree/master/examples>
[2018-07-30 19:55:59]
ender :
@aciid, cant recall where, but somewere was alist of devices the MPP has maybe in the apk or in the MPP Fw or …
[2018-07-30 19:56:11]
ender :
THERE i saw it has a magnetometer did not know before…
[2018-07-30 20:03:29]
ender :
btw just had time for a little fight, Anafi was still FCC… Amazing.
[2018-07-30 20:03:58]
ender :
(well lets say performance was **good** and patched FF6 (only GUI patch) showed “United States”.
[2018-07-30 20:04:12]
ender :
So the iPad really gave it a kick somehow :slightly_smiling_face:
[2018-07-30 20:08:48]
mail451 :
nice, what patch did you use?
[2018-07-30 20:08:58]
mr.vibez :
You need to share this patched version :slightly_smiling_face:
[2018-07-30 20:09:06]
ender :
haha no patch, well on FF6 only the patch to make the CC visible.
[2018-07-30 20:09:19]
ender :
you can have THAT but its trivial.
[2018-07-30 20:09:45]
ender :
but i used an WiFi iPad where i set region to US and that did some magic it seems. No idea how long.
[2018-07-30 20:10:10]
mr.vibez :
Does fcc still stick after going back to android?
[2018-07-30 20:10:13]
mail451 :
btw did you try the new patch I shared, it just disable updateCCfromTelephoneNetwork() but it does not crash
[2018-07-30 20:10:13]
ender :
I have to say that the stream was very fluid on an oldish iPad Mini 2 compared to current Android…
[2018-07-30 20:10:16]
ender :
Yes Lee
[2018-07-30 20:10:52]
ender :
Not yet konrad, i have so much to do in reale Life, need to get work done so i can take a week off on Wednesday
[2018-07-30 20:10:53]
mr.vibez :
Can you tell if it's in fcc mode?
[2018-07-30 20:11:01]
mail451 :
hmm, so the iPad set in US does set the mode to FCC. Maybe an Xposed module will help
[2018-07-30 20:11:11]
mail451 :
@ender ok, no worries just wondering
[2018-07-30 20:11:20]
ender :
the trails in that package aciid pointed me to are hOT as well, i wished i could be betetr in smali. Will be in times :slightly_smiling_face:
[2018-07-30 20:11:52]
ender :
in those modules the drop down is initialized and presses are processed. SO there would be a key for elegant country switching i guess.
[2018-07-30 20:12:11]
ender :
konrad, did you order an Anafi ? Because you dont have one atm, right ?
[2018-07-30 20:12:37]
mail451 :
no I don't have one.
[2018-07-30 20:12:55]
mail451 :
I already bought DJI Spark, and its draining my wallet lol
[2018-07-30 20:13:26]
ender :
i loved my Sparky as well :slightly_smiling_face:
[2018-07-30 20:13:33]
mail451 :
its a solid drone
[2018-07-30 20:13:52]
mail451 :
maybe Mavic Air will have a price decrease when mavic 2 is officially released
[2018-07-30 20:14:04]
ender :
Flying it at 8 beaufort on the Beach in Rømø, Denmark (The Spark)
[2018-07-30 20:15:15]
mail451 :
I've had it for a week now, just flew it near the mountains. Maybe I will bring it to the capital and film the buildings.
[2018-07-30 20:15:42]
mail451 :
I like that the Anafi has zoom, but it seems too large compared to spark
[2018-07-30 20:16:01]
ender :
oh it really isnt. folded it takes less volume.
[2018-07-30 20:16:07]
ender :
Did you see it in real life ?
[2018-07-30 20:16:30]
ender :
Its so fragile and less noisy than the Spark
[2018-07-30 20:17:13]
mail451 :
no I haven't seen it irl
[2018-07-30 20:17:13]
mr.vibez :
@ender was there any visual way to tell you have your anafi in fcc mode?
[2018-07-30 20:17:49]
ender :
uhh just browsing the MPP, seems we can edit the key mapping and it has flip actions. Gimbal will not like that :slightly_smiling_face:
[2018-07-30 20:18:11]
ender :
/etc/mppd/mapping_anafi4k.cfg
[2018-07-30 20:21:53]
ender :
hmm, would love to change it, @aciid, any idea if it is safe to mount it rw and do stuff ?
[2018-07-30 20:22:16]
aciid :
ive done it
[2018-07-30 20:22:17]
aciid :
its safe
[2018-07-30 20:22:21]
ender :
mount –o remount,rw /
[2018-07-30 20:22:23]
aciid :
but check manifest first
[2018-07-30 20:22:23]
ender :
?
[2018-07-30 20:22:30]
ender :
uh check what ?
[2018-07-30 20:22:34]
aciid :
AC has manifest named file in /etc
[2018-07-30 20:23:11]
aciid :
/etc/manifest.xml
[2018-07-30 20:23:13]
ender :
yes, looking at it
[2018-07-30 20:23:22]
aciid :
does it have mapping file?
[2018-07-30 20:23:43]
ender :
checking… IF so, would i need to recalc md5 and edit that there ?
[2018-07-30 20:24:49]
aciid :
I don't know the implications yet I havent read through all binaries
[2018-07-30 20:25:00]
ender :
k, will try :slightly_smiling_face:
[2018-07-30 20:25:09]
ender :
its not in there so i am prolly safe
[2018-07-30 20:27:39]
ender :
yummy, gimbal pan
[2018-07-30 20:51:19]
ender :
haha, in adb iwconfig NOW says Tx-Power=25 dBm
[2018-07-30 20:51:27]
ender :
i recall it was 14 before.
[2018-07-30 20:54:02]
ender :
so something definitely happened
[2018-07-30 21:00:37]
ender :
Aha, it really thinks i am in the US:
[2018-07-30 21:00:39]
ender :
root@mpp3:/usr/sbin # iw reg get
country US: DFS-FCC
(2402 - 2472 @ 40), (N/A, 30), (N/A)
(5170 - 5250 @ 80), (N/A, 24), (N/A)
(5250 - 5330 @ 80), (N/A, 24), (0 ms), DFS
(5490 - 5730 @ 160), (N/A, 24), (0 ms), DFS
(5735 - 5835 @ 80), (N/A, 30), (N/A)
(5842 - 5863 @ 5), (N/A, 30), (N/A)
(5850 - 5870 @ 10), (N/A, 30), (N/A)
(5860 - 5880 @ 10), (N/A, 30), (N/A)
(5865 - 5885 @ 20), (N/A, 30), (N/A)
(5870 - 5890 @ 10), (N/A, 30), (N/A)
(5880 - 5900 @ 10), (N/A, 30), (N/A)
(5890 - 5910 @ 10), (N/A, 30), (N/A)
(5895 - 5915 @ 20), (N/A, 30), (N/A)
(5900 - 5920 @ 10), (N/A, 30), (N/A)
(5910 - 5930 @ 10), (N/A, 30), (N/A)
(57240 - 63720 @ 2160), (N/A, 40), (N/A)
[2018-07-30 21:05:41]
ender :
hmm one can set the region on the mpp with the usual :
[2018-07-30 21:05:53]
ender :
[2018-07-30 21:06:06]
ender :
if i do DE it goes to 20dBm
[2018-07-30 21:06:10]
ender :
US 25 dBm
[2018-07-30 21:06:22]
ender :
but i cannot set 30 dBm although its in the limits
[2018-07-30 21:06:32]
ender :
but also not less, seems to be blocked.
[2018-07-30 21:06:40]
ender :
And anyways we would need the same on the drone.
[2018-07-30 21:06:52]
ender :
naaahhh the solution is in app patching i still believe
[2018-07-30 21:06:57]
ender :
but nice
[2018-07-30 21:19:19]
aciid :
oh it can be done in MPP?
[2018-07-30 21:20:19]
ender :
what exactly ?
[2018-07-30 21:20:26]
aciid :
iw reg set
[2018-07-30 21:20:29]
ender :
yes
[2018-07-30 21:20:33]
ender :
works
[2018-07-30 21:20:42]
ender :
but only for MPP,not for Anafi :disappointed:
[2018-07-30 21:20:59]
ender :
right NOW due to my strange US fix i guess both are set to US
[2018-07-30 21:21:07]
ender :
but that was done by the app.
[2018-07-30 21:21:27]
ender :
app will set it on MPP & Anafi
[2018-07-30 21:21:42]
aciid :
why on earth does tcpdump crash on MPP
[2018-07-30 21:22:00]
ender :
IMHO it would be more elegant to do it in the app
[2018-07-30 21:22:01]
aciid :
that tcpdump is so custom that it makes me cry if it doesn't work
[2018-07-30 21:22:08]
aciid :
it has SDR functionality
[2018-07-30 21:22:09]
ender :
:wink:
[2018-07-30 21:24:16]
aciid :
oh boy there are a few firmware bins
[2018-07-30 21:24:20]
aciid :
MPP
[2018-07-30 21:24:25]
aciid :
/lib/firmware
[2018-07-30 21:24:31]
aciid :
bdwlan30_10db.bin
[2018-07-30 21:24:32]
aciid :
:open_mouth:
[2018-07-30 21:25:37]
ender :
Thats aaaaaaa GOOD thing ? :wink:
[2018-07-30 21:26:18]
aciid :
this is probably the file it loads when you set reg
[2018-07-30 21:26:24]
aciid :
because its so small
[2018-07-30 21:26:30]
ender :
holy mccrap
[2018-07-30 21:27:38]
aciid :
see the wlan folder
[2018-07-30 21:27:46]
aciid :
lib/firmware/wlan/qcom_cfg.ini
[2018-07-30 21:27:55]
aciid :
# This file allows user to override the factory
# defaults for the WLAN Driver
[2018-07-30 21:28:50]
aciid :
# Maximum Tx power
# gTxPowerCap=30
[2018-07-30 21:29:00]
ender :
we were there before.
[2018-07-30 21:29:05]
aciid :
gEnableAutomaticTxPowerControl=1
[2018-07-30 21:29:08]
ender :
but again, thats MPP only
[2018-07-30 21:29:13]
aciid :
yaeh
[2018-07-30 21:29:18]
ender :
yes yes thats what i said looking at it
[2018-07-30 21:29:37]
ender :
at that time you mumbled something about wifif overriding it ?!
[2018-07-30 21:29:42]
aciid :
i havent been here
[2018-07-30 21:29:49]
aciid :
Ive been eating pudding in ios_ipa
[2018-07-30 21:29:58]
ender :
Then i got you wrong at that time
[2018-07-30 21:30:03]
ender :
oh slimy iOS
[2018-07-30 21:32:29]
ender :
btw: editing the mapping did not change the mapping :disappointed:
[2018-07-30 21:33:22]
aciid :
did the file get overwritten?
[2018-07-30 21:34:25]
ender :
yes
[2018-07-30 21:34:29]
ender :
contents was changed
[2018-07-30 21:34:34]
ender :
rebooted mpp &drone
[2018-07-30 21:34:49]
ender :
wanted camera pan instead of zoom :slightly_smiling_face:
[2018-07-30 21:34:54]
ender :
did still zoom afterward
[2018-07-30 21:35:21]
ender :
hmmm idea… maybe thats just in place if app is not runing. Would make sense
[2018-07-30 21:35:38]
ender :
app MUST be able to override as future versions are sure to get button mapping like in FF3
[2018-07-30 21:36:32]
ender :
playing with wifi file, did not do that as i understood you wrong that it makes no sense…
[2018-07-30 21:38:12]
aciid :
well one thing works for that and that is modifying the ubi and flashing
[2018-07-30 21:38:35]
ender :
but is that preferable to just going there, mount rw and modding ?
[2018-07-30 21:38:37]
aciid :
i dont know where the image is stored if it gets overwritten
[2018-07-30 21:38:45]
aciid :
did you try mount rw already?
[2018-07-30 21:38:48]
aciid :
that should work
[2018-07-30 21:38:51]
ender :
yep, did
[2018-07-30 21:39:03]
ender :
thats how i am playing right now :slightly_smiling_face:
[2018-07-30 21:40:39]
ender :
hmm, no matter if i change txpower (okay its cap not set) or Country it still goes to its usual US & 25dbm
[2018-07-30 21:43:01]
ender :
§$%&#* iw and me are not communicating well…
[2018-07-30 21:45:23]
ender :
ah found better fitting man
[2018-07-30 21:47:44]
ender :
aha ! If i use iw reg set de then txpower goes down to 14 dBm !
[2018-07-30 21:48:15]
ender :
25mW, probably because Antenna gain to keep EIRP < 100mW
[2018-07-30 21:48:30]
ender :
hmm, where is the table that determins that (Antenna Gain).
[2018-07-30 21:48:48]
ender :
Thats why it “only” goes to 25dBm on “US” and not 29 / 30
[2018-07-30 21:49:24]
ender :
hmm, set txpower seems not to be permitted
[2018-07-30 21:49:37]
ender :
iw wlan0 set txpower fixed 30
[2018-07-30 21:49:43]
ender :
command failed: Operation not supported (-95)
[2018-07-30 21:54:14]
ender :
well, at least we can play around on the MPP :slightly_smiling_face:
[2018-07-30 21:56:38]
aciid :
hmm m
[2018-07-30 21:59:10]
ender :
hmmmm as well :slightly_smiling_face:
[2018-07-30 21:59:23]
ender :
the fw thing is nice btw.
[2018-07-30 21:59:36]
ender :
its linked to the 6db file but there is a 10db file.
[2018-07-30 21:59:47]
ender :
maybe that cpmpensates for ANtenna gain to limit to eirp
[2018-07-30 21:59:51]
ender :
will relink :slightly_smiling_face:
[2018-07-30 21:59:56]
ender :
But again: only MPP :disappointed:
[2018-07-30 22:01:57]
aciid :
if someone wins lottery they can buy the 1,500€ programmer so we can fix the AC already
[2018-07-30 22:02:05]
ender :
haheeee
[2018-07-30 22:02:18]
ender :
but i was under the impression you can flash the AC with odded FW ?!
[2018-07-30 22:02:25]
ender :
or at least beeing close to that ?!
[2018-07-30 22:03:10]
aciid :
yeah, i tried a ton of methods , but then I read the binary that maanges the fw consistency check
[2018-07-30 22:03:21]
aciid :
<https://www.dropbox.com/s/ysvvo13pvj7vpzc/libupdate.pdf?dl=0>
[2018-07-30 22:03:40]
aciid :
the bottom row on the graph
[2018-07-30 22:03:45]
aciid :
errors for all kinda sitsuations
[2018-07-30 22:03:53]
ender :
argh !
[2018-07-30 22:03:56]
aciid :
the cecking is rpetty deep
[2018-07-30 22:05:09]
ender :
its a bit unsharp when i zoom to that ida shot but a lot of words spell “signature” :disappointed:
[2018-07-30 22:08:00]
ender :
hmm, linking that 10db file instead 6db did nothing i can see.
[2018-07-30 22:08:06]
ender :
(with iwconfig)
[2018-07-30 22:08:31]
ender :
well, i am fine with 25dBm as long as its on the AC & MPP permanent which is is not right now.
[2018-07-30 22:09:03]
ender :
If only bin4ry would show some interest, there are SO many yummie things in the apk, camera settings and stuff…
[2018-07-30 22:09:12]
ender :
i need to read up on smali…
[2018-07-30 22:09:23]
ender :
maybe i can do in the holiday without a divorce :slightly_smiling_face:
[2018-07-30 22:09:47]
ender :
i saw 120 FPS settings and strange resolutions and whatnot.
[2018-07-30 22:09:51]
ender :
AEB and everything
[2018-07-30 22:10:02]
mr.vibez :
AEB would be nice
[2018-07-30 22:10:03]
ender :
so little time, so many smali…
[2018-07-30 22:10:23]
ender :
i enabled it in one part but was still missing the button, lol
[2018-07-30 22:10:38]
ender :
need more play time and more smali/java knowledge.
[2018-07-30 22:11:02]
ender :
Hopefully my best friend wont hear about that. I scorn him everyday because he is a java guy :slightly_smiling_face:
[2018-07-30 22:16:24]
ender :
$%&% stupid JEB cant even find in all project files, is that possible ? How can anyone shell out a dime for it…
[2018-07-31 06:23:14]
aciid :
[2018-07-31 06:25:57]
mr.vibez :
Mavic filters fit?
[2018-07-31 06:26:45]
aciid :
some do
[2018-07-31 06:26:55]
aciid :
not all brands
[2018-07-31 06:54:19]
mr.vibez :
Does it pass the start-up procedure with it on?
[2018-07-31 06:59:55]
aciid :
it does
[2018-07-31 07:00:26]
aciid :
<https://parrotpilots.com/threads/polarpro-nd8-on-the-anafi.44/page-2>
[2018-07-31 08:31:01]
aciid :
easy way to get toolchain for MPP&Anafi?
<https://github.com/PX4/Toolchains/blob/master/install_toolchain.sh#L111>
[2018-07-31 12:32:04]
aciid :
Parrot just asked for my serialnumber via email
[2018-07-31 12:32:14]
aciid :
I wonder where this leads into
[2018-07-31 13:20:31]
ender :
uhhhh
[2018-07-31 13:21:04]
ender :
I would tell them your request is on no way connected to the actual drone you are using.
[2018-07-31 13:21:14]
ender :
And to stick it up Theirs…
[2018-07-31 13:22:21]
ender :
Or did you ask for the signature which HAS the SN inside. Then they may want to give it to you (or debug file on SD Card) BUT voiding your warranty as many Phone manufacturers do wth OEM Bootloader unlocking
[2018-07-31 13:38:35]
mail451 :
What was it for? Activating the drone?
[2018-07-31 13:53:25]
aciid :
I gave them the SN
[2018-07-31 13:54:02]
aciid :
if they add a blacklist function we will surely see it
[2018-07-31 16:06:47]
ender :
btw did some more stuff with iwconfig, read up where it gets it limits for differend reg settings but did not find any og the publically mentioned files / databases. Tried several “lawless” nations like US VE BO CN HK but max is 25 dBm it seems. Dont know about AC side of course.
[2018-07-31 16:07:48]
ender :
@aciid: IF we had a $1500 magic wand, what would that mean ? We could read the complete NAND, but would that neccessarily mean we could flash whatever we want from then on akso for other people ?!
[2018-07-31 16:08:09]
ender :
Is this something one could borrow for less ? It would be a crowdfunding option….
[2018-07-31 16:09:33]
aciid :
well I don't know about jtag, but that device is a universal programmer that can handle the 2gb nand on anafi.
a final resolve would be that people who would want root could buy a pre programmed nand chip, meaning that would have to buy them in bulk first.
[2018-07-31 16:09:44]
aciid :
but tha tthing could be in future used for any project
[2018-07-31 16:09:57]
aciid :
but I think we first wait for parrots respnse anyway
[2018-07-31 16:10:36]
aciid :
and the nand chips could be sold without added cost to users. since it's not for profit
[2018-07-31 16:11:02]
ender :
ah thats awful. no real solution, not even for 5% of Anafista
[2018-07-31 16:11:10]
aciid :
:smile:
[2018-07-31 16:11:28]
ender :
I hoped you would say you can rip the sig stuff exemplary and then we could all flash what we want :slightly_smiling_face:
[2018-07-31 16:11:48]
ender :
You know you want that “l” there…
[2018-07-31 16:12:05]
aciid :
sig stuff, is outta the window already as it's verified to be doing work
[2018-07-31 16:12:19]
aciid :
next possibility would be to exploit the signature check
[2018-07-31 16:12:31]
aciid :
but its hard to get roots via that way
[2018-07-31 16:12:39]
ender :
IF the Mpp is the one relating the C setting to the AC that would be good and obviuosly hackable ATM
[2018-07-31 16:12:44]
ender :
and i do think so.
[2018-07-31 16:12:48]
aciid :
we'd need a shellcode that sets rw.debuggable = 1
[2018-07-31 16:12:51]
aciid :
its possible
[2018-07-31 16:13:07]
ender :
that enabled adb on Anafi, right ?
[2018-07-31 16:13:17]
aciid :
enabled via signature check crashing shellcode
[2018-07-31 16:13:33]
aciid :
but it needs probably more experienced people. I havent messed with those in a while
[2018-07-31 16:13:41]
aciid :
last time with OSCP course
[2018-07-31 16:14:03]
aciid :
and that requires readable output from the UART pins which is also a problem stiill
[2018-07-31 16:14:24]
aciid :
probably needs logic level conventer
[2018-07-31 16:14:25]
ender :
aciid, any chance there is a script in anafi also opening up adb or ssh or telnet on a certain key event ? (Like releasing power button at second red bar or the like ?
[2018-07-31 16:14:49]
aciid :
that would be on the battery firmware
[2018-07-31 16:14:54]
ender :
If we would find the routine that does a full rest on anafi on the 4'th red bar then we’d know if theres other stuff
[2018-07-31 16:15:17]
ender :
but battery relays full reset to anafi.
[2018-07-31 16:15:38]
aciid :
need to check the battery firmware
[2018-07-31 16:16:05]
ender :
i would think that battery is not THAT smart but that the button & LED’s are routed through to Anafi as HID.
[2018-07-31 16:16:10]
ender :
Well thats how i would do it.
[2018-07-31 16:17:22]
ender :
Just reaching for a small straw but i could bet they have an easy backdoor. I am probably wrong.
[2018-07-31 16:17:57]
aciid :
theres also a possibility that UART pins have input
[2018-07-31 16:18:02]
aciid :
but I need to solder my logic level converter
[2018-07-31 16:19:14]
aciid :
this project probably ends with me destroying my sd-card adapter since the pins are there
[2018-07-31 16:19:24]
ender :
uh-oh okay smartbattery IS certainly very smart if one looks at “smartbattery-cli” binary
[2018-07-31 16:20:57]
ender :
You were saying that MPP communicates via known ports with the Anafi, did you try to listen or are you sure the chatter is encrypted ?
[2018-07-31 16:22:40]
aciid :
MPP has tcpdump
[2018-07-31 16:22:46]
aciid :
it can display all communications
[2018-07-31 16:25:40]
ender :
buuuuut it crashes right ?
[2018-07-31 16:26:18]
ender :
btw. the factory reset is caused by buttond = Daemon who listens for the battery power button…
[2018-07-31 16:26:33]
ender :
did not find interesting stuff there
[2018-07-31 16:27:06]
ender :
the problem is: At the moment i could not even CAUSE a country change as my drone still is solidly locked in US
[2018-07-31 16:27:08]
ender :
lolz
[2018-07-31 16:27:21]
ender :
so nothing to watch for in tcpdump :slightly_smiling_face:
[2018-07-31 16:32:26]
ender :
afk
[2018-07-31 16:40:04]
aciid :
well theres so much to investigate, would be good that other people would do that work aswell
[2018-07-31 18:49:13]
ender :
i know i suck atm… few time, work & family… sry i’ll try !
[2018-07-31 18:51:30]
ender :
P.S. just had a little flight 2km at 5m Altitude, thats GROSS. I now know that stock Anafi FCC is better then stock Air FCC … 5m Altitude !!!
[2018-07-31 18:53:36]
ender :
BTW latest FW update changed the stream in a way that my smartTV can play it again without stuttering !
[2018-07-31 20:04:35]
quad808 :
@ender Not sure what you mean. Do you mean you flew out 2km and stayed at 5m the whole flight?? Thats impressive!
[2018-07-31 20:17:23]
aciid :
I crashed anafi yesterday, was flying with wifi and iphone. it started t drift and it didn't respond to the touchscreen joystick. it was 0.5m when it went to the bush, no damage
[2018-07-31 21:03:54]
aciid :
HNGGGGGGGGGGGGGGG
[2018-07-31 21:14:06]
ender :
@quad808 yes 2km at 5m Altitude
[2018-07-31 21:14:10]
ender :
over water
[2018-07-31 21:14:43]
ender :
aciid 250 ms ?!
[2018-07-31 21:42:00]
ender :
Just tried on 2,4 GHz: plain 200ms. on 5,8 180 ms but theres always +-20ms
[2018-07-31 21:42:16]
ender :
thats okay with me. mavic Pro was 140ms
[2018-07-31 21:42:36]
ender :
I never bothered to measure the Air.
[2018-07-31 21:43:26]
aciid :
i just figured out to test, im not bothered
[2018-07-31 21:43:38]
aciid :
it doesn't matter since it's less than 1second
[2018-07-31 21:43:44]
ender :
its an ancient but still unbeaten method :slightly_smiling_face:
[2018-07-31 21:43:55]
ender :
lolz, racers would rip you
[2018-07-31 21:44:07]
aciid :
racers can have their fpv
[2018-07-31 21:44:09]
ender :
but for a photo drone i can bear < 300ms
[2018-07-31 21:44:20]
aciid :
I just found this thing called connex prosight
[2018-07-31 21:44:25]
aciid :
looks nice and dandy
[2018-07-31 21:44:45]
ender :
I have a WiDV for sale, beats Connex in some things and is not much worse else.
[2018-07-31 21:44:58]
ender :
WiDV Pro with diversity / dual receivers.
[2018-07-31 21:45:08]
ender :
1080p 30km, 720p 50km :slightly_smiling_face:
[2018-07-31 21:45:16]
ender :
okay,not with stock ANtenna
[2018-07-31 21:45:24]
aciid :
holy shit :smile:
[2018-07-31 21:45:32]
ender :
yep
[2018-07-31 21:45:33]
aciid :
what do you use that for
[2018-07-31 21:45:47]
ender :
i used it on my big Hexa.
[2018-07-31 21:46:04]
ender :
Its fun controlling your drone with a flightstick Pro & paddles :slightly_smiling_face:
[2018-07-31 21:46:08]
ender :
Like a Huey
[2018-07-31 21:47:04]
ender :
“voices in the background flustering “YOU NEED THAT, BUY IT FROM ENDER NOOOOOW”
[2018-07-31 21:49:27]
aciid :
I don't have a craft nice enough for that
[2018-07-31 21:49:28]
aciid :
:smile:
[2018-07-31 21:49:28]
aciid :
yet
[2018-07-31 21:52:13]
ender :
When the time comes you can use it as the worlds most sophisticated long range Babyphone :stuck_out_tongue:
[2018-07-31 23:04:22]
aciid :
@sami.keskinen
[2018-07-31 23:04:25]
sami.keskinen :
@sami.keskinen has joined the channel
[2018-08-01 06:28:55]
ender :
hi there :slightly_smiling_face:
[2018-08-01 07:31:25]
aciid :
invited my work collegue to slack, got him into fpv as more like a challenge to build some vtx chips
[2018-08-01 10:54:33]
sami.keskinen :
Hi, just looking into wifi FPV vs. 5.8 GHz FPV. They tell us the 5.8 GHz FPV is analog, but wut? Every signal is inherently analog. Now I just have to find a way to utilise that 5.8 GHz transmitter (and receiver) to pack digital data in an analog signal. This'll be good :smile:
[2018-08-01 13:55:28]
mr.vibez :
Nothing we didn't already know. <http://blog.parrot.com/2018/07/31/anafi-wi-fi-range-efficiency/>
[2018-08-01 18:29:17]
fredz :
A good laugh :)
[2018-08-01 18:29:45]
aciid :
gezus :<
[2018-08-01 18:30:21]
aciid :
cant get that working on iOS :confused:
[2018-08-01 18:30:26]
fredz :
It’s incorrect as 5 GHz works perfectly in Germany. Only in France it’s not allowed
[2018-08-01 18:30:32]
aciid :
its probably cached
[2018-08-01 18:30:38]
aciid :
doesn't working finland
[2018-08-01 20:01:20]
mr.vibez :
Doesn't work Uk either
[2018-08-01 20:04:28]
mr.vibez :
Wonder what user GPS issues this fixes
[2018-08-01 20:04:46]
mr.vibez :
[2018-08-01 20:14:57]
aciid :
uh
[2018-08-01 20:15:08]
aciid :
i dont know is the decompile accurate enough to do diff?
[2018-08-02 09:03:15]
ender :
sometimes variable naming is mixed and results in hundreds of diffs in one file because of one changed line, sometimes it works perfect even for small changes :disappointed:
[2018-08-02 09:03:20]
ender :
so one has to try..
[2018-08-02 09:03:55]
ender :
i am back in holidays, what can i say, first try for longrange yesterday and the CC is back to Germany, so bad performance :slightly_smiling_face:
[2018-08-02 09:04:07]
ender :
trying to get it back to US again.
[2018-08-02 09:04:22]
ender :
hopefully get time to brood over apk to find a better solution.
[2018-08-02 09:05:19]
aciid :
my xiaomi is arriving tommorrow probably
[2018-08-02 10:17:14]
ender :
@mr.vibez mayn dont get "green GPS" for the smartdevice if they use A-GPS, maybe its that ?!
[2018-08-02 10:18:21]
ender :
P.S. as i realized yesterday my Anafi is back to CE i ADB'ed into controller and did iw reg set US and dBm jumped from 14 to 25 but as soon as phone / Tablet with FF6 was attached it was always thrown back to CE mode. Thought so but had to try...
[2018-08-02 10:49:14]
mr.vibez :
Damn, can't you get it back to FCC now?
[2018-08-02 11:07:56]
ender :
nope :slightly_smiling_face:
[2018-08-02 11:08:07]
ender :
I am going through the apk in baby steps now...
[2018-08-02 13:53:43]
ender :
damn tried 3 more “US” patches that looked good but all failed. continuing…
[2018-08-02 15:20:46]
fredz :
So you now manage to see a dB difference Ender?
[2018-08-02 16:05:31]
ender :
The one time i WAS in FCC it was easy to see even with WiFi Scanners.
[2018-08-02 16:05:44]
ender :
and its even easier if you attach MPP via ADB.
[2018-08-02 16:06:03]
ender :
It clearly then says 25dB instead of 14 dB in CE. 11dB difference !!!!
[2018-08-02 16:06:39]
ender :
and iw reg get says “US” instead of “DE” or “DK” (where i am right now)
[2018-08-02 16:07:46]
ender :
i guess its a mixture, cc update is triggered by something (maybe the 3000m geo location change that we find in the smali. I just wonder why not all methods work for all pilots (like your FakeGPS finding).
[2018-08-02 16:09:56]
mail451 :
So it the code switch has to do with the remote as well?
[2018-08-02 16:10:00]
ender :
Its clearly in the code, if geo.last to geo.current difference is > 3km then update from whatevr source (geo or Phone network or Android region or …). But i guess its maybe dead code where i am patching as it does never make difference and i am new to smali but not stupid. On the other side when i patch in the prefs settings code change is visible and i had some pretty good looking stuff there.
[2018-08-02 16:10:37]
ender :
Like “if counry selector (that i patched visible) is clicked then update wifiAccesspointCountrycode with XXX (where i patched XXX to “US”).
[2018-08-02 16:10:41]
ender :
But di dnot work yet.
[2018-08-02 16:11:05]
ender :
yes, IF the app decides to switch Country Code its done for Remote and Anafi.
[2018-08-02 16:11:14]
ender :
Thats like on the Bebobs…
[2018-08-02 16:11:45]
ender :
I can ADB the remote and set it to the US. But the Anafi will stay on its TXPower and as soon as i connect the APp it will fall back to current geolocation & TXpower.
[2018-08-03 06:25:36]
aciid :
a little fight with DHL , the android phone has now been paid in a nick of time to customs. I don't know did they threw the phone into the final leg already or do I have to go to DHL mainoffice today
[2018-08-03 06:25:45]
aciid :
as I had to do with ANAFI too..
[2018-08-03 06:52:45]
aciid :
fucking asshat DHL
[2018-08-03 11:09:36]
mail451 :
@ender have you tried changing variables in WifiAccessPointCore?
[2018-08-03 16:43:39]
aciid :
ahahha I need to wait 2weeks to unlock bootloader
[2018-08-03 16:43:42]
aciid :
retarded
[2018-08-03 16:49:25]
fredz :
Why
[2018-08-03 16:54:11]
aciid :
because xiaomi antics
[2018-08-03 16:54:43]
aciid :
<https://www.google.fi/search?q=xiaomi+unlock+bootloader+timer&oq=xiaomi+unlock+bootloader+timer&aqs=chrome..69i57j0j69i60l3j0.3810j0j7&sourceid=chrome&ie=UTF-8>
[2018-08-03 16:55:10]
fredz :
Lol
[2018-08-03 16:55:37]
aciid :
but i guess i can do almost anything
[2018-08-03 16:55:38]
aciid :
so its ok
[2018-08-03 17:20:42]
quad808 :
wahooooo...just joined the Anafi family! Came in yesterday
[2018-08-03 17:21:45]
quad808 :
super light....but hard to hold position in the wind. Almost crashed it yesterday...LOL...looking at the phone screen options for app...
[2018-08-03 17:23:00]
quad808 :
BUT...it sure is QUIET. Videos on line don't really show you how quiet it is.
[2018-08-03 17:33:51]
mail451 :
@aciid yes it sucks that you have to wait 2 weeks
[2018-08-03 17:34:11]
mail451 :
don't get it, on mi xiaomi android one phone its just fastboot oem unlock
[2018-08-03 17:34:26]
mail451 :
now huawei is removing the ability to unlock BL
[2018-08-03 17:34:36]
mail451 :
hopefully other OEMs don't do the same
[2018-08-03 17:38:10]
aciid :
could be some legalitie thing
[2018-08-03 17:42:55]
d95gas :
@quad808 have you tried the sport settings yet, used it on "out of the box" setup, jesus it moves. Love the fact its so quiet.... was using it at work yesterday, 20m up and nobody even knew it was there. Really like it, the firmware upgrade was super smooth, and all of it connecting together is just so slick and faultless (well using it with iPhone 7+), just got to get hold of spare batts now.
[2018-08-03 17:45:48]
quad808 :
I didn't have much flying time yesterday....it was super windy! Will give it a run through this weekend for sure!! But, I agree....seemless so far. Connects right away...the only thing that gave me a slight hiccup is the memory card, replaced it with a 64G and had to do several attemps at formatting
[2018-08-03 17:50:06]
quad808 :
I will have more time...I can see how this drone will become very popular. Super light. Compact. Long flight times. 180 camera tilt. Lots of video features, including zoom, and presets...the ONLY thing I don't like so far is the stupid memory card holder. What were they thinking? Its just stupid. It has USB 3.0, but the transfer speed direct from the drone is usb 2.0 speeds, so you have to take out the card if you want fast transfer speeds
[2018-08-03 17:51:15]
quad808 :
I will try some different cards to make sure it wasn't the card I was using.
[2018-08-03 17:52:12]
aciid :
Ive crashed twice because of high wind drifting
[2018-08-03 17:52:50]
quad808 :
I'm glad it wasn't only me, so something to be aware of in tight spaces.
[2018-08-03 17:53:06]
aciid :
It has USB 3.0, but the transfer speed direct from the drone is usb 2.0 speeds, well the cards are not exactly too fast either without additional pins
[2018-08-03 17:53:32]
quad808 :
do you know if the drift is as bad when in Sport mode?
[2018-08-03 17:54:00]
quad808 :
I didn't test that yet, nor do any research on if there are settings to compensate yet.
[2018-08-03 17:54:39]
d95gas :
To be honest I had no drift at all, I found it to be solid and was shocked as others had said about the drift.... assume you did the update on controller and Anafi. Found it very stable in both modes
[2018-08-03 17:55:29]
quad808 :
also...1 more question...in the display, there are two GPS....one is the drone...the other? Controller? I had green on one, and red on the other...time to do research
[2018-08-03 17:55:59]
quad808 :
@d95gas to be fair, it was very windy at my place yesterday...the Anafi was all over the place
[2018-08-03 17:56:09]
quad808 :
so not really a fair test yet
[2018-08-03 17:56:50]
d95gas :
thats why you were drifting, both need to be green....Controller and Anafi. When I first set it all up, I powered everything up and just let it sit in the wideopen for about 10 mins before doing anything, let it pull down the Almanac data, etc
[2018-08-03 17:57:05]
d95gas :
Once they were both green, I found it as stable as the MP
[2018-08-03 17:57:18]
quad808 :
yep, thanks...thats what I was thinking was the issue
[2018-08-03 17:57:47]
d95gas :
Also notice there was an update for the App on Android today, which states that it resolves GPS issues
[2018-08-03 17:59:45]
quad808 :
ahhhh...good! Updates went better than any other drone I have
[2018-08-03 18:00:33]
quad808 :
is there a forced height limit? I didn't see it in the app...the EVO has one...800m
[2018-08-03 18:02:11]
d95gas :
150m (Currently) I am sure something may happen to that, same was as FCC for us CE users :slightly_smiling_face: also can enable/disable GeoFence
[2018-08-03 18:02:30]
d95gas :
its under the "Safety" tab
[2018-08-03 18:04:24]
quad808 :
maybe I should read more...hahahaha
[2018-08-03 18:17:18]
d95gas :
Nah thats a woman thing :grinning: us proper guys just throw the manual in the trash.................................. and then cry when we can't get it working, and ask the wife to help
[2018-08-03 18:19:03]
quad808 :
lol
[2018-08-03 18:23:19]
aciid :
oh I can probably actually install lineage os
[2018-08-03 18:23:24]
aciid :
in EDL mdoe what ever that is
[2018-08-03 18:57:13]
mr.vibez :
Why bother?
[2018-08-03 19:00:36]
mr.vibez :
The one on the right is your phone gps I believe
[2018-08-03 21:49:35]
mr.vibez :
Simple patch request, keep units in meters rather than feet
[2018-08-04 14:51:57]
mail451 :
Anafi has DNG+JPG... Major advantage over my Spark
[2018-08-04 16:25:05]
d95gas :
@aciid Hey bud, did you get any further with the FCC on the Anafi ....... going to have a play with the phone and see if I can fool it, but a bit of a tweak in the app I am sure would perform a lot better. Also, did you come across anything about removing the 150m height limit? Thanks
[2018-08-04 16:33:57]
aciid :
@d95gas I havent played with the APK yet, my android is not rooted yet since bootlocker is locked for 2 weeks
[2018-08-04 17:37:18]
d95gas :
Oh thats a right shame
[2018-08-04 17:49:30]
aciid :
but I think I can still do some sort of tinkering
[2018-08-04 17:52:09]
d95gas :
:+1:
[2018-08-04 18:03:08]
mr.vibez :
Have we got a solid way of decompiling and recompiling the ff6 apk yet? I might have a play
[2018-08-04 18:04:59]
aciid :
@mr.vibez
To decrypt smali
apktool d freeflight6.apk
To repack smali
apktool e freeflight6.apk
You need to resign the apk, to get it installing properly <https://stackoverflow.com/a/24833908>
jaxd if you want apk to java classes for readability, also jaxd output gives you smali line pointers where to mod.
[2018-08-04 18:07:40]
mr.vibez :
Thanks i'll take a look
[2018-08-04 18:07:43]
aciid :
<https://github.com/skylot/jadx>
<https://github.com/iBotPeaches/Apktool>
[2018-08-04 18:08:17]
mr.vibez :
It's the to java that throws me
[2018-08-04 18:10:04]
ender :
Hi ! If recompiling fails for the resources you need to update java ! nearly got me :slightly_smiling_face:
[2018-08-04 18:10:20]
ender :
compiling to jave and recompiling does NOT work.
[2018-08-04 18:10:30]
mr.vibez :
Thought so
[2018-08-04 18:10:36]
mr.vibez :
"maxAltitudeRange": [0.5, 150],
[2018-08-04 18:10:42]
ender :
you look at the java (with jadx or jeb) and then find that place in smali and mod
[2018-08-04 18:10:49]
mr.vibez :
looks like a start
[2018-08-04 18:11:20]
ender :
@mr.vibez if its like on the Bebop then there is a GUI range like that and THAN a check in the Flightcontroller process that has to be patched with IDA.
[2018-08-04 18:11:44]
ender :
It was easy BUT currently we can do NADA on the Anafi as iths filesystem is better protected and no root :disappointed:
[2018-08-04 18:12:05]
ender :
For FCC i tried **so** many places, still overwhelmed of all the possibilities to try
[2018-08-04 18:12:45]
ender :
I unhid the country code setting selector in the GUI but the dropdown is only filled with currentcountry.
[2018-08-04 18:13:07]
mr.vibez :
Ah, I think a flightplan can go above 150m if we edit the flightplan.json. So just assumed it would be limited by the gui
[2018-08-04 18:13:40]
ender :
@mr.vibez that is very well possible, give it a try, just saying whats the cause if it is NOT working :wink:
[2018-08-04 18:14:05]
mr.vibez :
:slightly_smiling_face:
[2018-08-04 18:15:34]
ender :
I stumbled about java code that i saw in JEB but was unable to find in jadx (smali2), so there is probably trouble if only working in jadx. I found the file by “grep” then was unable to find that path in jadx, then tried in jeb to see that it was visible there. Be aware of that jadx (0.71) bug / problem / restriction. Or did i use jadx wrong ?!
[2018-08-04 18:16:09]
mr.vibez :
Even if I could set the damn unit to meters rather than feet I would be happy. But I suspect if I crack that, i'd probably crack FCC too
[2018-08-04 18:16:31]
ender :
Yes, the performance was so **great** (better than Air on FCC)
[2018-08-04 18:17:18]
ender :
Today i reset the Anafi then connected iPad WiFi with region set to US to see if that repeats the process. It did NOT
[2018-08-04 18:17:35]
ender :
I saw the generic unit correction stuff in the apk…
[2018-08-04 18:17:50]
ender :
@channel can one reset the MPP ?
[2018-08-04 18:18:04]
aciid :
what you mean?
[2018-08-04 18:18:37]
jabuasab :
?
[2018-08-04 18:18:42]
ender :
well, somehow factory reset the MPP
[2018-08-04 18:18:49]
ender :
The Remote Controller
[2018-08-04 18:19:09]
jabuasab :
Hmm not sure
[2018-08-04 18:19:12]
aciid :
doens't firmware upgrade do that?
[2018-08-04 18:19:14]
ender :
I would like to set Anafi & Mpp in “initial state” and connect to that magic iPad
[2018-08-04 18:19:14]
aciid :
whats the problem at hand
[2018-08-04 18:19:18]
aciid :
if I may ask
[2018-08-04 18:19:19]
ender :
see above
[2018-08-04 18:19:28]
aciid :
ah so no gps on init
[2018-08-04 18:19:30]
aciid :
interesting theory
[2018-08-04 18:19:37]
ender :
ipad wifi HAS no gps
[2018-08-04 18:19:41]
ender :
and no cellular
[2018-08-04 18:19:42]
aciid :
I know
[2018-08-04 18:19:52]
ender :
i know from the code that it should fallback to region then.
[2018-08-04 18:20:01]
aciid :
I'm at assembly I'm not sure if I have sources yet downloaded
[2018-08-04 18:20:08]
ender :
and after first connecting to ipad it had US
[2018-08-04 18:20:22]
ender :
i guess it was locked until i did a move of more then 3000m
[2018-08-04 18:20:24]
aciid :
there could be a script to do that
[2018-08-04 18:20:25]
ender :
as in the code
[2018-08-04 18:20:31]
ender :
uuuuuu
[2018-08-04 18:20:38]
ender :
^------ IDIOT
[2018-08-04 18:21:04]
aciid :
<https://www.assembly.org/summer18/demoscene>
[2018-08-04 18:21:14]
aciid :
I'm with my laptop , ill check
[2018-08-04 18:21:16]
ender :
Maybe its just the iOS App that has to be rest, if its anything like the ANdroid app it THEN stores CC & update time
[2018-08-04 18:21:30]
ender :
will try ASAP
[2018-08-04 18:21:32]
ender :
brb
[2018-08-04 18:21:51]
ender :
(sitting with MacBook @ beach right now :-)
[2018-08-04 18:22:22]
aciid :
(y)
[2018-08-04 18:22:26]
aciid :
:y:
[2018-08-04 18:22:54]
ender :
Uhhhh as i said i am only a “if i really must” iOS user, any way to reset an app like on Android
[2018-08-04 18:23:09]
ender :
or do i need to reinstall, bad WiFi here…
[2018-08-04 18:41:05]
aciid :
reinstall what?
[2018-08-04 18:41:10]
aciid :
apps?
[2018-08-04 18:41:11]
mr.vibez :
what java nonsense do I need to to run jadx?
[2018-08-04 18:41:28]
aciid :
check jadx/build folder does it hae bin folder
[2018-08-04 18:41:39]
mr.vibez :
Oh it reqs jre
[2018-08-04 18:41:43]
aciid :
wut
[2018-08-04 18:42:37]
mr.vibez :
I needed to install java runtime engine
[2018-08-04 18:43:33]
aciid :
yeah
[2018-08-04 19:10:22]
ender :
lolz, i did my experiment with reinstalled app (did not find a way to delete app date on iOS, anyone ?).
[2018-08-04 19:10:31]
ender :
Guess what, my CC afterwards was FRANCE :wink:
[2018-08-04 19:10:52]
ender :
So i managed to get locked in China one time, US one time and now France. hahaha
[2018-08-04 19:45:04]
ender :
Hmm, the MPP “iw reg get” definately remembers the current country. After my little stunf if i attach the MPP via ADB, no Anafi connected, no connection with the App, the MPP states “FR”.
I hope If i could convince the MPP, the MPP could convince APP & Anafi to be in the US.
[2018-08-04 19:45:14]
ender :
------------
okay, convinced MPP to be in US by editing “/data/lib/libshsettings/wifi.cfg to “US” default.
rebooted MPP and Tadaaaa: MPP said iw reg get = US
started anafi, anafi connected, THEN MPP swithcted to FR.
DAMN. So Anafi probably has same default setting “FR”.
AND Anafi overrules MPP
[2018-08-04 19:53:59]
mr.vibez :
Grrr, strange it did work for you once
[2018-08-04 20:02:01]
ender :
well, i have to retry with changed setup, but of course this is just a lame excuse to get the app rigged with “US”.
[2018-08-04 20:05:12]
mr.vibez :
jedx, how to find the corresponding smali?
[2018-08-04 20:05:22]
ender :
jadx ?
[2018-08-04 20:05:35]
ender :
well its the same path in the smali subdir
[2018-08-04 20:08:15]
mr.vibez :
Thanks
[2018-08-04 20:13:34]
ender :
But as i said BEWARE as jadx does not show all files !!
[2018-08-04 20:15:05]
mr.vibez :
Found the method I want to play with
[2018-08-04 20:15:11]
mr.vibez :
Now to learn smali :slightly_smiling_face:
[2018-08-04 20:27:11]
mr.vibez :
Is it normal that smali is not in the same order as the java?
[2018-08-04 20:27:31]
mr.vibez :
.line 67
:cond_0
const/4 v0, 0x1
.line 64
:goto_0
iput-boolean v0, p0, Lcom/parrot/freeflight/util/ui/MetricsServant;->usesImperialUnits:Z
return-void
.line 66
:cond_1
[2018-08-04 20:27:45]
mr.vibez :
The line numbers are out of sequence
[2018-08-04 20:30:09]
ender :
yes thats normal…
[2018-08-04 20:30:27]
ender :
irritating though :slightly_smiling_face:
[2018-08-04 20:33:22]
ender :
BTW i am using APK Easy Tool, one click decompile & recompile & sign ! (V 1.51 portable, includes latestapktool &signing)
[2018-08-04 20:33:36]
mr.vibez :
Me too
[2018-08-04 20:33:45]
mr.vibez :
Cant seem to install the apk though
[2018-08-04 20:34:03]
ender :
what happens ?
[2018-08-04 20:34:25]
ender :
(did you uninstall last ff6 ?)
[2018-08-04 20:34:40]
mr.vibez :
Well i'm installing to bluestacks
[2018-08-04 20:34:46]
mr.vibez :
yeah did an uninstall
[2018-08-04 20:34:58]
mr.vibez :
I get a red exclamation mark
[2018-08-04 20:35:22]
ender :
uh some kind of google security ?!
[2018-08-04 20:35:46]
ender :
you should check in “security” if any kind of malware detection is still active
[2018-08-04 20:38:34]
mr.vibez :
It's the apk in the "2-Recompiled APKs" we need to upload yeah?
[2018-08-04 20:50:39]
mr.vibez :
Nope it's not happy with the recompiled apk :disappointed:
[2018-08-04 20:50:49]
ender :
yes
[2018-08-04 20:51:15]
ender :
is it signed ? (apk easy should be set up automatically to sign on recompile and say so in the process)
[2018-08-04 20:51:53]
mr.vibez :
[2018-08-04 20:52:21]
ender :
yep all fine.
[2018-08-04 20:52:33]
ender :
ahhh wait, there was this trick…
[2018-08-04 20:53:47]
ender :
Do you have this file ?:
C:\Users\<username>\apktool\framework\1.apk
[2018-08-04 20:53:53]
ender :
If so, delete it and retry
[2018-08-04 20:55:55]
mr.vibez :
I dont have that folder C:\Users\<username>\apktool\
[2018-08-04 20:56:49]
ender :
hmm, i could try your apk if you upload it somewhere e.g. wetransfer ?!
[2018-08-04 20:57:11]
ender :
The we know if its the apk or some setting in bluestacks.
[2018-08-04 21:04:53]
aciid :
Im on mobile whats happeninga?
[2018-08-04 21:04:54]
c.binetti :
it is in appdata
[2018-08-04 21:05:25]
aciid :
Apktool cache remove yes it helps if you have errors
[2018-08-04 21:05:26]
ender :
oh damn yes probably
[2018-08-04 21:05:34]
mr.vibez :
S: WARNING: Could not write to (C:\Users\Lee\AppData\Local\apktool\framework), using C:\Users\Lee\AppData\Local\Temp\ instead...
S: Please be aware this is a volatile directory and frameworks could go missing, please utilize --frame-path if the default storage directory is unavailable
[2018-08-04 21:05:36]
c.binetti :
C:\users\<username>\appdata\local\tmp
[2018-08-04 21:05:38]
aciid :
Google for apktool path
[2018-08-04 21:05:51]
aciid :
Use windows explorer show hidden paths and files
[2018-08-04 21:05:54]
ender :
C:\Users\Admin\AppData\Local\apktool\framework\1.apk
[2018-08-04 21:06:22]
ender :
sry man, just googled for it and they seem to have written Bullshit
[2018-08-04 21:07:01]
mr.vibez :
S: WARNING: Could not write to (C:\Users\Lee\AppData\Local\apktool\framework), using
[2018-08-04 21:07:10]
mr.vibez :
that's what is causing the issue
[2018-08-04 21:08:09]
c.binetti :
did you run it in admin mode?
[2018-08-04 21:08:16]
mr.vibez :
no
[2018-08-04 21:08:40]
c.binetti :
so try it and choose different path for the framework like shown above
[2018-08-04 21:09:05]
ender :
admin mode NOT needed for me in W10. i am admin user but did not “start as admin”
[2018-08-04 21:10:02]
mr.vibez :
trying now
[2018-08-04 21:17:40]
mr.vibez :
created the folder C:\Users\Lee\AppData\Local\apktool\framework
[2018-08-04 21:17:56]
mr.vibez :
1.apk is still there though
[2018-08-04 21:18:32]
mr.vibez :
no obvious errors
[2018-08-04 21:18:34]
mr.vibez :
------------------------------------------
04/08/2018 22:15:45
Compiling APK file...(CMD mode: Normal)
/c "java -Xmx1024m -jar "C:\Program Files (x86)\APK Easy Tool\Apktool\apktool_2.3.3.jar" b -f -o "C:\Users\Lee\Documents\APK Easy Tool\2-Recompiled APKs\FreeFlight 6_1.0.4_apk-dl.com.apk" "C:\Users\Lee\Documents\APK Easy Tool\1-Decompiled APKs\FreeFlight [6_1.0.4_apk-dl.com](http://6_1.0.4_apk-dl.com)" "
------------------------------------------
04/08/2018 22:16:59
Signing APK file... (apksigner.jar)
/c "java -Xmx1024m -jar "C:\Program Files (x86)\APK Easy Tool\Resources\apksigner.jar" sign --key "C:\Program Files (x86)\APK Easy Tool\Resources\sign1.pk8" --cert "C:\Program Files (x86)\APK Easy Tool\Resources\sign2.pem" --out "C:\Users\Lee\Documents\APK Easy Tool\2-Recompiled APKs\FreeFlight 6_1.0.4_apk-dl.com.apk" "C:\Users\Lee\Documents\APK Easy Tool\2-Recompiled APKs\FreeFlight 6_1.0.4_apk-dl.com.apk"
[2018-08-04 21:19:05]
mr.vibez :
still wont install though
[2018-08-04 21:20:05]
ender :
like i said,i can check it for you so you can be sure to go this or that way. Or dou you have a real android to try aswell ?
[2018-08-04 21:24:20]
mr.vibez :
<https://we.tl/UbDz4tXNq1>
[2018-08-04 21:28:19]
ender :
checking…
[2018-08-04 21:29:36]
ender :
installs & runs fine
[2018-08-04 21:30:12]
ender :
i always have a copy of the obb data on the android btw so i can just unistall, reinstall, copy obb and test run
[2018-08-04 21:30:39]
ender :
so there is some (security??) setting on Bluestacks that kicks you in the butt i’d say
[2018-08-04 21:30:56]
mr.vibez :
must be
[2018-08-04 21:31:12]
ender :
good night guys, good luck lee finding the culprit !
[2018-08-04 21:31:24]
mr.vibez :
cheers Ender, g'nite
[2018-08-04 21:37:09]
mr.vibez :
Hurrah
[2018-08-04 21:37:36]
mr.vibez :
Stupid bluestacks hadn't correctly uninstalled ff6 after all
[2018-08-04 22:02:51]
mr.vibez :
Ok I think my patch works but for some reason google maps has stopped working
[2018-08-04 22:05:03]
mr.vibez :
Guess it's due to com.google.android.maps.v2.API_KEY
[2018-08-04 22:55:45]
mr.vibez :
Sorted. I now have metric units in the app again :slightly_smiling_face:
[2018-08-05 00:20:21]
aciid :
back
[2018-08-05 00:22:36]
jabuasab :
any way to pull the flight logs?
[2018-08-05 00:24:14]
aciid :
they save on SD-card
[2018-08-05 00:24:50]
aciid :
also by connecting to AC wifi with laptop go to gateway on webbrowser
[2018-08-05 00:24:57]
aciid :
phones also store that in JSON format
[2018-08-05 00:56:21]
quad808 :
@channel I realize that you all are busy hacking away on the Anafi...but has anyone tried hand launching yet? Scared the crap outta me...
[2018-08-05 00:57:53]
aciid :
I have
[2018-08-05 00:57:58]
aciid :
works everytime
[2018-08-05 01:00:48]
quad808 :
I didn't know it waited for you to throw it up...I sat there watching it...waiting...waiting...then it turned off.
[2018-08-05 01:01:29]
quad808 :
Tried again....moved my hand up and down, waiting for the props to take off...had to take the leap of faith and toss it...LOL
[2018-08-05 01:01:44]
aciid :
yeah me neither read the manual
[2018-08-05 01:01:55]
jabuasab :
@aciid thanks
[2018-08-05 01:02:10]
quad808 :
but, it works FANTASTIC!
[2018-08-05 05:45:15]
makingthisnameup :
Like one try after another
[2018-08-05 05:45:28]
makingthisnameup :
4th time. Put it on the ground
[2018-08-05 07:41:07]
mr.vibez :
So what do we think the flightplans are that can be uploaded via the web interface? How would we generate them and execute them?
[2018-08-05 08:26:25]
aciid :
@mr.vibez you can find flightplans from your mobile device caches if you have FlightPlan IAP / DLC unlocked. you an make flightplans on mobile and download them
[2018-08-05 08:26:42]
aciid :
Parrot will release an app for making flightplans on PC/MAC most probably later
[2018-08-05 08:27:13]
aciid :
they are MAVLINK files I think I have some examples somewhere from which I downloaded
[2018-08-05 08:27:49]
mr.vibez :
There are the flightplans you generate in the IAP
[2018-08-05 08:28:06]
mr.vibez :
but I suspect the web ones are different
[2018-08-05 08:28:13]
aciid :
nope same files
[2018-08-05 08:28:14]
mr.vibez :
as you say, true mavlink ones
[2018-08-05 08:28:26]
aciid :
they save in mavlink format you do in the IAP
[2018-08-05 08:28:30]
mr.vibez :
The ones via IAP are not mavlink
[2018-08-05 08:28:45]
aciid :
I checked on my jailbroken iphone
[2018-08-05 08:29:37]
mr.vibez :
On android the IAP produces .json files which I think get translated to mavlink format
[2018-08-05 08:31:38]
aciid :
```
Noeton-3100:/var/mobile/Containers/Data/Application/43D0C3F4-F94D-4674-A5F2-3DF5E503C411/Documents root# cat FlightPlan/A938A621-F11B-44C7-97E9-3805C4AD9D1D/flightPlan.mavlink
QGC WPL 120
0 0 3 178 0.000000 6.000000 -1.000000 0.000000 0.000000 0.000000 0.000000 1
1 0 3 2500 0.000000 30.000000 0.000000 0.000000 0.000000 0.000000 0.000000 1
2 0 3 16 0.000000 5.000000 0.000000 110.380959 60.629959 24.845894 63.000000 1
3 0 3 178 0.000000 5.000000 -1.000000 0.000000 0.000000 0.000000 0.000000 1
4 0 3 50000 1.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 1
5 0 3 16 0.000000 5.000000 0.000000 290.380737 60.629570 24.848042 63.000000 1
6 0 3 16 0.000000 5.000000 0.000000 325.819580 60.628555 24.846571 67.000000 1
7 0 3 16 0.000000 5.000000 0.000000 406.300079 60.628803 24.842539 63.000000 1
8 0 3 16 0.000000 5.000000 0.000000 120.851280 60.630291 24.843674 63.000000 1
9 0 3 16 0.000000 5.000000 0.000000 193.137680 60.630829 24.845949 63.000000 1
10 0 3 16 0.000000 5.000000 0.000000 261.804321 60.630112 24.846630 63.000000 1
11 0 3 2501 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 1
```
[2018-08-05 08:32:27]
aciid :
I don't know which file extension webinterface expects
[2018-08-05 08:32:44]
aciid :
i haven't tried upload yet. I can check webserver binary to confirm the extension
[2018-08-05 08:33:00]
mr.vibez :
Interesting, the IAP produces this for me
[2018-08-05 08:33:29]
mr.vibez :
[2018-08-05 08:34:09]
aciid :
that is surely different , hmm
[2018-08-05 08:34:10]
mr.vibez :
I'd love to be able to run mavlink rather than the dumbed down crap flightplan produces
[2018-08-05 08:34:16]
aciid :
I know man
[2018-08-05 08:34:20]
aciid :
i feel the same
[2018-08-05 08:35:07]
mr.vibez :
Looking at the moment to see if I can enable bracketing
[2018-08-05 08:35:14]
aciid :
oh flightplan page is fucked up , it calls firmwar update handler
[2018-08-05 08:35:18]
aciid :
it doens't work yet
[2018-08-05 08:35:32]
aciid :
it says bad update file format when you upload flightplan
[2018-08-05 08:35:35]
aciid :
it's nothing serious
[2018-08-05 08:35:37]
mr.vibez :
oh
[2018-08-05 08:36:06]
aciid :
and no can't be a vulreanability runs same checks as with a firmwar eit's the same path in websocket upload too
[2018-08-05 08:36:11]
aciid :
it just a copy pasted webpage
[2018-08-05 08:36:23]
mr.vibez :
:disappointed:
[2018-08-05 08:36:46]
aciid :
we could check does android app upload flightplan or execute it, when you run IAP generated one :smiley:
[2018-08-05 08:38:01]
mr.vibez :
That mavlink file, was it on the ac or the phone?
[2018-08-05 08:38:17]
aciid :
that was on the phone in iOS
[2018-08-05 08:38:34]
aciid :
but yours had quite much more information
[2018-08-05 08:38:49]
aciid :
I had only fly points in my mavlink, no actions
[2018-08-05 08:38:51]
aciid :
I made it hastly
[2018-08-05 08:39:09]
aciid :
tell you what Ill make actions to the same mavlink and we will see how it looks then?
[2018-08-05 08:39:22]
mr.vibez :
There seems to be a module that converts the json to mavlink
[2018-08-05 08:39:23]
mr.vibez :
ok
[2018-08-05 08:39:40]
aciid :
that in app or in AC?
[2018-08-05 08:40:28]
mr.vibez :
in app
[2018-08-05 08:40:33]
mr.vibez :
C:\Users\Lee\Desktop\New Folder\sources\com\parrot\freeflight\flightplan\model
[2018-08-05 08:43:23]
mr.vibez :
Anyway, family time. Check back laters
[2018-08-05 08:43:30]
aciid :
ttyl
[2018-08-05 08:56:36]
ender :
Great you made it Lee !
[2018-08-05 08:57:05]
ender :
At some point we would need to gather working patches and/or clone the DJI GO modder script to automate patches.
[2018-08-05 08:59:36]
mr.vibez :
Thanks Ender. Great idea. Did you also have to use a new maps API key for you recompiled APK?
[2018-08-05 09:01:39]
aciid :
@ender I concur we need a centralized repo. private or public
[2018-08-05 09:01:51]
aciid :
slack throws our stuff in to abyss
[2018-08-05 09:01:53]
ender :
yes, i did not do it yet but yes thats a must, learned from DJI GO hackinf when they used google
[2018-08-05 09:02:17]
ender :
until now lets swear that we keep our working patches tidy :slightly_smiling_face:
[2018-08-05 09:02:38]
ender :
For me thats not much, tried a LOT of stuff but yet only the “make CC setting visible” is worth anything
[2018-08-05 09:03:06]
ender :
So FCC by MPP or Anafi hack would be great,not forcing noobs to use their own google API key whuch they would never do.
[2018-08-05 09:03:32]
aciid :
I have totally missed out about recent discoveries
[2018-08-05 09:03:58]
ender :
as i said, i can easily convince MPP to “feel US” by editing the /data/lib/libshsettings/wifi.cfg but it gets overruled as soon as it connects to Anafi
[2018-08-05 09:04:07]
ender :
Anafi will have the very same file i guess.
[2018-08-05 09:04:21]
ender :
And App is able to pass through changes for those 2 files on MPP & Anafi.
[2018-08-05 09:04:33]
ender :
Question is which app relays / switches those files.
[2018-08-05 09:04:46]
aciid :
libpomp master control port
[2018-08-05 09:05:06]
ender :
libpimp i guess ?
[2018-08-05 09:05:17]
aciid :
libpomp
[2018-08-05 09:05:22]
aciid :
<https://github.com/Parrot-Developers/libpomp>
[2018-08-05 09:05:27]
ender :
ahhh
[2018-08-05 09:05:44]
ender :
oh just got one more idea….
[2018-08-05 09:13:58]
ender :
nahhh
[2018-08-05 09:14:22]
ender :
even if i protect the wifi.cfg file with chattr +i wifi.cfg it still gets overwritten.
[2018-08-05 09:14:29]
ender :
Would have been too easy anyways :slightly_smiling_face:
[2018-08-05 09:14:54]
ender :
@aciid: you say it would be good to bother libpomp with aunt IDA ?
[2018-08-05 09:19:35]
aciid :
ill try looking at android logs now
[2018-08-05 09:19:52]
aciid :
it would be good to understand pomp and how to intercept it
[2018-08-05 09:21:22]
ender :
aciid: at which logs are you looking ? Or too much to mention ?
[2018-08-05 09:22:16]
aciid :
ULog saves logs to external storage, this case SD-card
[2018-08-05 09:22:25]
aciid :
freeflight
[2018-08-05 09:22:39]
ender :
ahh ff6 logs on android ?
[2018-08-05 09:22:43]
ender :
not mpp logs ?
[2018-08-05 09:22:51]
ender :
i will browse around on mpp a bit…
[2018-08-05 09:22:53]
aciid :
apk
[2018-08-05 09:22:57]
ender :
yep
[2018-08-05 09:22:57]
aciid :
yeah
[2018-08-05 09:28:21]
aciid :
FF6Application.java
```
Boolean bool = BuildConfig.LOG_RECORDER;
Intrinsics.checkExpressionValueIsNotNull(bool, "BuildConfig.LOG_RECORDER");
if (bool.booleanValue()) {
logRecorder = new ULogRecorder();
ULogRecorder uLogRecorder = logRecorder;
if (uLogRecorder != null) {
uLogRecorder.start("FreeFlight6/log");
}
}
```
spill the beans
[2018-08-05 10:06:16]
aciid :
lol i patched 1.0.0
[2018-08-05 10:06:24]
aciid :
i wasnt looking which version i had on local
[2018-08-05 10:17:31]
mail451 :
What are you trying to patch?
[2018-08-05 10:17:42]
mail451 :
I'm still trying to come up with an FCC patch...
[2018-08-05 10:23:52]
aciid :
This normal?
[2018-08-05 10:39:39]
mr.vibez :
Yeah did that for me when I reinstalled the latest version
[2018-08-05 10:40:19]
aciid :
does anyone have root?
[2018-08-05 10:40:22]
aciid :
on android
[2018-08-05 10:41:16]
aciid :
smali\com\parrot\freeflight\BuildConfig.smali
<https://bpaste.net/raw/87c6f3a31298>
[2018-08-05 10:41:20]
aciid :
latest version
[2018-08-05 10:41:26]
aciid :
patched for debug and logging
[2018-08-05 10:41:36]
aciid :
logs should be visible in /data/freeparrotwhatever/logs
[2018-08-05 10:41:38]
aciid :
with root now
[2018-08-05 10:41:43]
aciid :
if anyone can chekc
[2018-08-05 10:57:11]
mail451 :
Damn I unrooted
[2018-08-05 10:57:16]
mail451 :
will root again gimme a sec
[2018-08-05 10:57:29]
aciid :
waattt
[2018-08-05 10:57:33]
aciid :
no you dont have to for this
[2018-08-05 10:57:51]
mail451 :
I can boot to TWRP and read the /data/ logs as well
[2018-08-05 10:57:51]
aciid :
ill continue once I get bootloader unlocked
[2018-08-05 10:57:56]
mail451 :
my BL is unlocked
[2018-08-05 10:58:57]
mr.vibez :
I have root
[2018-08-05 11:03:26]
mr.vibez :
Is this what you patched?
[2018-08-05 11:03:28]
mr.vibez :
11c11
< .field public static final DEBUG:Z = false
---
> .field public static final DEBUG:Z = true
30c30
< .locals 2
---
> .locals 3
33a34
> const/4 v2, 0x1
36c37
< invoke-static {v1}, Ljava/lang/Boolean;->valueOf(Z)Ljava/lang/Boolean;
---
> invoke-static {v2}, Ljava/lang/Boolean;->valueOf(Z)Ljava/lang/Boolean;
43c44
< invoke-static {v1}, Ljava/lang/Boolean;->valueOf(Z)Ljava/lang/Boolean;
---
> invoke-static {v2}, Ljava/lang/Boolean;->valueOf(Z)Ljava/lang/Boolean;
[2018-08-05 11:06:55]
aciid :
yes
[2018-08-05 11:12:39]
mr.vibez :
@ender care to share "make CC setting visible"
[2018-08-05 11:12:50]
mr.vibez :
How are we going to collate this stuff?
[2018-08-05 11:15:52]
mr.vibez :
@aciid installed the debug mod
[2018-08-05 11:15:58]
mr.vibez :
looking for logs now
[2018-08-05 11:16:01]
aciid :
nice
[2018-08-05 11:16:22]
aciid :
most probably in usual path in /data/com.parrot.
[2018-08-05 11:16:32]
aciid :
I only see the cache folder without root
[2018-08-05 11:16:33]
aciid :
xD
[2018-08-05 11:17:36]
mr.vibez :
there is /data/data/com.parrot
[2018-08-05 11:17:39]
mr.vibez :
but no logs
[2018-08-05 11:18:42]
mr.vibez :
found it
[2018-08-05 11:19:28]
mr.vibez :
Freeflight6/log
[2018-08-05 11:19:31]
mr.vibez :
on sd card
[2018-08-05 11:20:10]
mr.vibez :
storage/emulated/0/freeflight6/log
[2018-08-05 11:23:12]
mr.vibez :
[2018-08-05 11:24:19]
aciid :
fuck yeah
[2018-08-05 11:26:01]
mr.vibez :
I guess we can start manually logging stuff now? or is that too hard to do in smali?
[2018-08-05 11:26:06]
aciid :
you can
[2018-08-05 11:26:40]
mr.vibez :
This was in bluestacks by the way.
[2018-08-05 11:27:46]
aciid :
oh
[2018-08-05 11:27:47]
aciid :
lol
[2018-08-05 11:27:49]
aciid :
greatjob
[2018-08-05 11:27:53]
aciid :
didn't think about that again
[2018-08-05 11:28:00]
aciid :
did you know about android-x86 ?
[2018-08-05 11:28:21]
aciid :
whole operating system emulation of recent Android version. no gaming bullshit just for development
[2018-08-05 11:28:28]
mr.vibez :
Don't you have to dual boot into that?
[2018-08-05 11:28:32]
aciid :
virtualbox
[2018-08-05 11:28:36]
mr.vibez :
Or can you VM in?
[2018-08-05 11:28:40]
mr.vibez :
Ah I see
[2018-08-05 11:28:53]
mr.vibez :
I might set it up
[2018-08-05 11:29:00]
aciid :
and pstt probably even forward USB devices to it
[2018-08-05 11:29:04]
aciid :
so flying from PC
[2018-08-05 11:29:14]
aciid :
atleast it works with bluetooth controllers, but probably with MPP too
[2018-08-05 11:29:16]
mr.vibez :
or I could use a AVD
[2018-08-05 11:29:53]
aciid :
@ender is it ok to connect AC to HACKRF using pigtail? or will something burn?
[2018-08-05 11:34:58]
mr.vibez :
Interesting, we can debug smali on the fly? <https://crosp.net/blog/software-development/mobile/android/android-reverse-engineering-debugging-smali-using-smalidea/>
[2018-08-05 11:38:26]
aciid :
theres many frmaeworks for that
[2018-08-05 11:39:52]
aciid :
@mr.vibez <https://github.com/Lanchon/haystack>
[2018-08-05 11:40:09]
aciid :
pull-fileset: pulls a fileset from a device via adb.
push-fileset: pushes a fileset back to a device via adb.
patch-fileset: patches a fileset that resides on your PC.
[2018-08-05 13:35:08]
ender :
i really do not know, sry
[2018-08-05 13:37:47]
ender :
patched file to make CC settings visible
[2018-08-05 13:38:05]
ender :
just dropped the file here. did not change from 1.0.0 to 1.0.4
[2018-08-05 13:39:57]
ender :
in /res/layout
[2018-08-05 13:41:17]
ender :
guys, so how would i log a variable in smali now ?
[2018-08-05 13:41:21]
ender :
(with patch enabled)
[2018-08-05 13:42:18]
d95gas :
sorry for being a numpty...... what is CC Settings ?
[2018-08-05 13:53:47]
mr.vibez :
Country code. It's a drop-down to change WiFi region
[2018-08-05 13:58:02]
d95gas :
ah right, THINK I had just worked that out when I came across CountryDetector ...... Trying to learn something at high speed with an old brain is not easy :disappointed:
[2018-08-05 13:58:34]
mail451 :
Hey @ender, const-string v0, "Tag" invoke-static {v0, %STRING%}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I
[2018-08-05 14:00:17]
ender :
thanks, need to run but will try later, GREAT
[2018-08-05 17:03:34]
aciid :
should we start a repo? slack is fucking up this by deleting everyhing all the time
[2018-08-05 17:34:26]
d95gas :
:+1:
[2018-08-05 18:32:31]
mail451 :
:100:
[2018-08-05 18:36:24]
aciid :
I think dust has also settled from Parrot
[2018-08-05 18:36:34]
aciid :
or do you guys want to use a private repo from my Workplace first?
[2018-08-05 18:36:41]
aciid :
I can do that too if we need to do that first
[2018-08-05 18:36:44]
aciid :
git repo
[2018-08-05 18:39:20]
mr.vibez :
Private for WIP stuff
[2018-08-05 19:27:13]
mail451 :
I have a WIP patch for FCC
[2018-08-05 19:29:01]
aciid :
what we call this? freedomfighter, like from freeflight
[2018-08-05 19:29:38]
aciid :
just the repo
[2018-08-05 19:30:01]
aciid :
freeflight-fixer?
[2018-08-05 19:30:15]
mail451 :
Anafinessed
[2018-08-05 19:30:19]
aciid :
ok
[2018-08-05 19:30:35]
aciid :
bitbucket has private repos and supports oauth and all
[2018-08-05 19:30:42]
aciid :
if you have users there I can invite
[2018-08-05 19:30:53]
aciid :
i made the repo ill add my stuff there too
[2018-08-05 19:31:01]
mail451 :
konraditurbe is my bitbucket username
[2018-08-05 19:31:27]
aciid :
doesn't find that name
[2018-08-05 19:31:53]
mail451 :
Try konradit
[2018-08-05 19:32:04]
aciid :
works
[2018-08-05 19:34:37]
mail451 :
Ok. I'll submit my wip stuff tomorrow
[2018-08-05 19:35:35]
mr.vibez :
my username there is "ifana"
[2018-08-05 19:51:44]
mr.vibez :
Hmm my patched apk runs fine on bluestacks but hangs on my phone
[2018-08-05 20:12:52]
ender :
@mail451 just wanted to start trying again as i know how to log now, if you have a test APK i would know if i should continue or not :wink:
[2018-08-05 20:13:07]
ender :
(or test modded smali file(s).
[2018-08-05 20:19:56]
mr.vibez :
Strange, got my apk running onmy phone, now the log files are created but empty
[2018-08-05 20:43:39]
ender :
hmmm, my ff6 doe not log it seems. Is it enough to open unmodded app (apart from enable log patch) and to connect to anafi and stop app or do i need a flight for normal logs to be shown ?!
[2018-08-05 20:44:19]
aciid :
hmm
[2018-08-05 20:44:28]
mr.vibez :
Does it create the log file?
[2018-08-05 20:44:29]
aciid :
these logs should be debug logs
[2018-08-05 20:44:31]
aciid :
with the new patch
[2018-08-05 20:44:47]
ender :
sec, i may have mixed up my (dozens) apk files :wink:
[2018-08-05 20:44:49]
aciid :
@ender do you have bitbucket user? please create one lets start using repo
[2018-08-05 20:45:15]
ender :
will do @home i am in holidays 2 more days :wink:
[2018-08-05 20:45:23]
aciid :
damn
[2018-08-05 20:45:37]
aciid :
you guys wanna know secrets?
[2018-08-05 20:46:07]
aciid :
<https://i.imgur.com/TyWrfLj.jpg>
[2018-08-05 20:46:14]
aciid :
best guess wins, what is happening in this picture?
Validat0r is excempt from this guessing
[2018-08-05 20:46:55]
mail451 :
The map and camera view are switched?
[2018-08-05 20:47:52]
aciid :
it thinks im in russia
[2018-08-05 20:48:15]
mail451 :
Hmmm
[2018-08-05 20:48:34]
aciid :
I have yet to checked is Anafi doing the same
[2018-08-05 20:48:40]
mail451 :
Why tho
[2018-08-05 20:48:52]
aciid :
real hacking
[2018-08-05 20:49:18]
mail451 :
Nice
[2018-08-05 20:49:19]
aciid :
I warned Parrot that they will face consiquences if they don't open up Anafi.
Would take matters in our own hands exposing vulreanabilities
[2018-08-05 20:49:24]
aciid :
testing anafi now.
[2018-08-05 20:49:40]
aciid :
something like this === how to crash anyones drone
[2018-08-05 20:51:41]
aciid :
annnd parrot is vulreanable
[2018-08-05 20:51:42]
ender :
hmm, so you are not simply gps spoofing with your hackrf ?
[2018-08-05 20:51:59]
aciid :
yes
[2018-08-05 20:52:20]
ender :
But nearly everybody is vulnerable against that ?!
[2018-08-05 20:52:36]
mail451 :
There are fake GPS apps that were used in the Pokémon go craze
[2018-08-05 20:52:43]
mail451 :
I wonder if that works as well
[2018-08-05 20:52:51]
ender :
but we did use FakeGPS ?!
[2018-08-05 20:52:55]
ender :
i dont get it sorry
[2018-08-05 20:53:30]
ender :
BTW log really not working, tried the “right” APK with debug = true ?!?!
[2018-08-05 20:53:49]
mail451 :
Check that it can write to storage ?
[2018-08-05 20:54:06]
mr.vibez :
its only partly working for me on a real device, creates the log but it's blank
[2018-08-05 20:55:54]
aciid :
someone had log here
[2018-08-05 20:56:11]
mr.vibez :
it was me
[2018-08-05 20:56:17]
mr.vibez :
on bluestacks
[2018-08-05 20:56:28]
mr.vibez :
doesnt work on real device though :disappointed:
[2018-08-05 20:56:29]
aciid :
you need filebrowser root ofcourse
[2018-08-05 20:56:31]
aciid :
with real device
[2018-08-05 20:56:43]
aciid :
I don't have accesss to those folders in my xiaomi
[2018-08-05 20:56:53]
aciid :
in bluestacks i have like 6 folders under freeflight6
[2018-08-05 20:56:57]
mail451 :
It's in /data/data/com.parrot.freeflight6/ ?
[2018-08-05 20:57:01]
aciid :
yes
[2018-08-05 20:57:08]
aciid :
as I've demonstrated when we started this project there are xml files and shit
[2018-08-05 20:57:08]
mr.vibez :
no
[2018-08-05 20:57:46]
mr.vibez :
storage/emulated/0/freeflight6/log
[2018-08-05 20:58:14]
ender :
okay , Lee has the log in a differnt place then konrad ?
[2018-08-05 20:59:57]
ender :
GOT IT, its the same bug that hinders picture download for many: I did have storage permissions but needed to go to “my gallery§ to get asked again for storage permissions and BOOM now i got a ff6 folder with log !
[2018-08-05 21:00:06]
ender :
in Lees path…
[2018-08-05 21:00:11]
mail451 :
Yes
[2018-08-05 21:00:40]
ender :
lets see if one of my own log messages is there…
[2018-08-05 21:01:25]
mr.vibez :
Be interesting to see the log after connecting to your AC
[2018-08-05 21:03:19]
ender :
konrad, you are adamant in not giving away / sharing your FCC patch now, right ? could use FCC on my trip tomorrow :slightly_smiling_face:
[2018-08-05 21:04:20]
mail451 :
I was at a friends gathering, going home now won't arrive in a few hours, I can share when I arrive
[2018-08-05 21:04:41]
ender :
would be great, SORRY to push you that hard !!!!
[2018-08-05 21:04:47]
mail451 :
Nah nah no worries lol
[2018-08-05 21:08:49]
ender :
:+1:
[2018-08-05 21:16:55]
mr.vibez :
My anafi slammed down hard today.
[2018-08-05 21:17:13]
mr.vibez :
Simple land command but it failed to see the ground. Man it can bounce :slightly_smiling_face:
[2018-08-05 21:31:02]
aciid :
ive had that happen when it fails to land it wont respond to any commands
[2018-08-05 21:31:04]
aciid :
its scary
[2018-08-05 21:31:16]
aciid :
rolled over and stopped after motor obstruction
[2018-08-05 22:45:39]
mail451 :
ok @ender I just arrived home, I'm making you a patch :slightly_smiling_face:
[2018-08-05 22:50:34]
aciid :
ill push the stuff to bitbucket now
[2018-08-05 22:57:18]
aciid :
If you want to contribute to the Bitbucket download sourcetree app latest
[2018-08-05 22:57:20]
aciid :
<https://downloads.atlassian.com/software/sourcetree/windows/ga/SourceTreeSetup-2.6.9.exe>
[2018-08-05 22:57:25]
aciid :
its easiest if you dont know git
[2018-08-05 22:57:37]
aciid :
<https://downloads.atlassian.com/software/sourcetree/Sourcetree_2.7.3a.zip>
[2018-08-05 23:02:55]
mail451 :
just pushed some stuff
[2018-08-05 23:10:41]
aciid :
thanks, ill add firmeware cache and firest apk cache
[2018-08-05 23:11:10]
aciid :
or should we have binaries elesewhere
[2018-08-05 23:12:41]
mail451 :
Maybe in a [MEGA.co.nz](http://MEGA.co.nz) so it does not count against the repo storage quota
[2018-08-06 05:40:59]
mr.vibez :
I think we need to specify which version of the apk the patches are for?
[2018-08-06 06:20:30]
ender :
uh okay, downloading Sourcetree, where’s the good stuff ?
[2018-08-06 06:20:33]
ender :
:wink:
[2018-08-06 07:35:36]
ender :
i signed up with sourcetree…
[2018-08-06 07:36:24]
ender :
so @mail451 did you store the alleged FCC patch under your id konradit ?
[2018-08-06 07:36:44]
mail451 :
Yes. Haven't tested it yet
[2018-08-06 07:37:40]
ender :
my username is “Ender_FFX”, so how would i access your patches ?
[2018-08-06 07:42:13]
ender :
(I guess you would need to add me, right ?)
[2018-08-06 07:59:31]
mail451 :
Added
[2018-08-06 09:16:08]
ender :
thx
[2018-08-06 09:45:09]
ender :
@mail451: ah i see thats still the patch you posted before and it still crashes ff6 :disappointed:
[2018-08-06 09:45:13]
ender :
So its not working.
[2018-08-06 09:45:16]
mail451 :
hmm
[2018-08-06 09:45:55]
ender :
and it IS patching about the same stuff that i tried (and failed). Only my method was using the hopefully unchanged myCountryCode instead of new registers
[2018-08-06 09:46:05]
aciid :
I just got a scary result, my phone fixed to the GPS spoof spam. It said I was going 30km/h
[2018-08-06 09:47:54]
ender :
i will gladly try a non crashing version ( i guess # of locals or register numbers still messy) but i **think** that the cc of that smali is widely ignored. I managed to have the app in a state where “US” is written to the shared prefs (thus the contents of mCountryCode) but the displayed CC in FF6 & visible in MPP via ADB was still something different…
[2018-08-06 09:48:09]
ender :
gotta run away for a while (beach) :wink: thx & cya
[2018-08-06 10:01:33]
d95gas :
Guys, nothing I can do to help you crack this, but always happy to do some testing
[2018-08-06 10:03:37]
aciid :
we can give you read rights to the repo if you want
[2018-08-06 10:14:43]
d95gas :
If you are ok with that...... I try to dabble with the APK's but this old brain is way past that these days :slightly_smiling_face:
[2018-08-06 10:19:00]
mail451 :
@ender ahh the patch came out wrong
[2018-08-06 10:19:04]
mail451 :
will do a full diff -Naur
[2018-08-06 10:19:10]
mr.vibez :
I think we need to be more organized. We need to standardise the format of the patches and document which APK they are for....
[2018-08-06 10:19:17]
ender :
kay, eager to try again :slightly_smiling_face:
[2018-08-06 10:22:36]
mr.vibez :
@mail451 which version of ff6 are you patching? 1.0.4?
[2018-08-06 10:22:47]
mail451 :
1.0.4 yes
[2018-08-06 10:30:07]
ender :
maybe a subfolder per version ?
[2018-08-06 10:42:55]
aciid :
sounds like a good idea
[2018-08-06 10:43:09]
mail451 :
ok
[2018-08-06 10:54:31]
d95gas :
Signed up on same name as here "d95gas" and installed "Sourcetree" (Windows)
[2018-08-06 10:59:52]
aciid :
ill add you
[2018-08-06 11:02:53]
d95gas :
Thanks
[2018-08-06 11:09:25]
aciid :
@d95gas cant find you via that name
[2018-08-06 11:13:40]
d95gas :
oh ..... odd definitely signed up with that..... let me do some checking
[2018-08-06 11:16:52]
aciid :
can you link yourpublic profile
[2018-08-06 11:27:00]
mail451 :
how do I check if i have FCC mode enabled?
[2018-08-06 11:30:20]
d95gas :
sorry .... may have missed an activation. Should be good now as I am currently logged into Bitbucket
[2018-08-06 11:45:13]
ender :
@mail451 :
[2018-08-06 11:45:21]
aciid :
added
[2018-08-06 11:46:09]
ender :
(1) measure before and after with RF-Meter OR less precise but good enough with WiFi Scanner on another device
[2018-08-06 11:46:28]
ender :
(2) use the enable cc patch and look in the app settings if US is set
[2018-08-06 11:47:33]
ender :
(3) run patched app and then detach phone from MPP, connect MPP via ADB and run iwconfig to see if TXpower is NOT 14dB but 25 dB and use “iw reg get” to see if it results in “US”
[2018-08-06 11:48:00]
ender :
mine now is locked to “France” which sadly is CE AND no 5G available, so one of the worst choices :slightly_smiling_face:
[2018-08-06 11:54:34]
fredz :
Both in-app purchases are currently €1 instead of €20 each FYI on FreeFlight 6 with the newest version
[2018-08-06 11:54:51]
ender :
i know but i cannot see the App in iOS Store !
[2018-08-06 11:54:59]
ender :
Is that reduced price also valid for Android ?
[2018-08-06 11:55:02]
mail451 :
I don't have an anafi, I'll root and check out the preferences
[2018-08-06 11:56:44]
ender :
@mail451: no way to check then i fear. I **guess** even the shared_prefs are written AFTER connection to the drone.
[2018-08-06 11:56:55]
ender :
if you “uncrash” your patch i can test asap
[2018-08-06 11:57:21]
ender :
@fredz: Android seeems not to be reduced, so still have to use luckypatcher for that one :wink:
[2018-08-06 11:57:22]
fredz :
@ender Yes for iOS and Android
[2018-08-06 11:57:25]
ender :
ohh
[2018-08-06 11:57:31]
ender :
Did you see & try for Android ?
[2018-08-06 11:57:48]
fredz :
Not yet
[2018-08-06 11:59:13]
fredz :
Will in a bit
[2018-08-06 11:59:15]
fredz :
<https://itunes.apple.com/us/developer/parrot-sa/id373065274>
[2018-08-06 11:59:35]
aciid :
freeflight 6 updated?
[2018-08-06 11:59:39]
aciid :
I want to save all versions
[2018-08-06 11:59:54]
aciid :
ill try to save ios versions as I can
[2018-08-06 12:00:10]
aciid :
apkpure saves android versions right?
[2018-08-06 12:00:10]
fredz :
1.0.03 on iOS
[2018-08-06 12:00:15]
fredz :
1.0.3
[2018-08-06 12:00:34]
ender :
will retry, an hour before it was not available on iPad, maybe only published for iPhone…
[2018-08-06 12:01:08]
aciid :
amateur developers
[2018-08-06 12:01:16]
aciid :
they acidentally pulled it fromappstore?
[2018-08-06 12:01:29]
aciid :
ah shitty keywords
[2018-08-06 12:01:31]
fredz :
Has not been pulled from mine in any case
[2018-08-06 12:01:34]
ender :
Well, itunes Connect IS hard to grok but even i managed for my pay apps :slightly_smiling_face:
[2018-08-06 12:01:35]
aciid :
found it
[2018-08-06 12:01:46]
aciid :
1.0.3 5hours ago
[2018-08-06 12:01:55]
ender :
iphone or pad ?
[2018-08-06 12:02:00]
aciid :
iphone
[2018-08-06 12:02:06]
ender :
§$%#
[2018-08-06 12:02:16]
ender :
so probably only for baby devices :slightly_smiling_face:
[2018-08-06 12:03:35]
ender :
yeah still not showing up, arghhh
[2018-08-06 12:03:54]
fredz :
Hmmm let me try on iPad
[2018-08-06 12:03:55]
ender :
so i probably miss the discount on my iPad, need to try at home with work iphone…
[2018-08-06 12:04:13]
aciid :
beta you mean?
[2018-08-06 12:04:18]
fredz :
Oh no it’s a commercial action they sent me an email about it
[2018-08-06 12:04:34]
aciid :
I actually checked how they check if trials are in rder
[2018-08-06 12:04:35]
ender :
yep got email
[2018-08-06 12:04:36]
aciid :
order
[2018-08-06 12:04:45]
aciid :
it can probably be faked
[2018-08-06 12:05:27]
ender :
yep but i do not jailbreal work iOS devices :slightly_smiling_face:
[2018-08-06 12:05:38]
fredz :
I see it fine on my iPad
[2018-08-06 12:05:46]
ender :
woah
[2018-08-06 12:05:54]
ender :
hmm, ipad region still set to US…
[2018-08-06 12:06:02]
fredz :
Mine is US
[2018-08-06 12:06:07]
ender :
hmm
[2018-08-06 12:06:10]
fredz :
WIth US App Store account
[2018-08-06 12:06:22]
ender :
maybe iPad Mini 2 WiFi is too old ?!
[2018-08-06 12:06:24]
fredz :
[2018-08-06 12:06:35]
fredz :
See the photo?
[2018-08-06 12:07:00]
ender :
of course
[2018-08-06 12:08:03]
fredz :
Direct link to FF6 : <https://itunes.apple.com/us/app/freeflight-6/id1386165299?mt=8>
[2018-08-06 12:08:27]
fredz :
For all countries I tried, it works fine
[2018-08-06 12:08:58]
ender :
woah, again, maybe not to non-gps units (would make sense) or iPad Mini 2 is too old (although it performs smooth with BETA)
[2018-08-06 12:09:14]
fredz :
what happens if you click on that direct link? An error?
[2018-08-06 12:09:18]
ender :
rebooting that darn thing
[2018-08-06 12:09:30]
ender :
link shows and tells me to install on iOS Appstore :slightly_smiling_face:
[2018-08-06 12:09:40]
fredz :
you h3x0r3d too much :slightly_smiling_face:
[2018-08-06 12:09:42]
ender :
“This app is only available on the App Store for iOS devices”
[2018-08-06 12:13:53]
ender :
okay, i still do not find it in app store BUT if i enter the direct link above in iPad browser it asks me if i want to open the link in App Store and … **here it is** …
[2018-08-06 12:14:00]
ender :
thx, weird behaviour…
[2018-08-06 12:14:24]
aciid :
doesn't need to be jailbroken
[2018-08-06 12:14:53]
ender :
for spoofing iPAd as iPhone ?
[2018-08-06 12:14:56]
aciid :
ill copy my logs
[2018-08-06 12:15:02]
aciid :
well uh its a webcall
[2018-08-06 12:15:12]
ender :
what are we talking about aciid ?
[2018-08-06 12:15:13]
aciid :
quite shitty json response
[2018-08-06 12:15:16]
aciid :
IAP
[2018-08-06 12:17:24]
d95gas :
I have just purchased them both for 0.99p each on that was my iphone, which is on a different account to my ipad. My ipad had the Beta software on, where as my iPhone was none beta. So hoping when I get home, I can purchase on the iPad as well, otherwise it will be wiped and put to same account as phone :slightly_smiling_face: but massive drop, which has given me a £34 saving
[2018-08-06 12:23:29]
fredz :
iOS purchases are account based. So you can simply use the Restore button on other devices signed in to the same account and get them “free”
[2018-08-06 12:24:18]
d95gas :
I have 2 accounts :slightly_smiling_face: like to keep work and pleasure seperate
[2018-08-06 12:24:31]
ender :
dito d95
[2018-08-06 12:25:18]
fredz :
:+1:
[2018-08-06 12:26:30]
fredz :
look at us, so happy for a feature that should have been free :slightly_smiling_face:
[2018-08-06 12:29:42]
fredz :
Stki
[2018-08-06 12:29:46]
fredz :
Still $18 on Android!
[2018-08-06 12:30:15]
ender :
Apple users have more money, let them fork out 40$ each and make it for free on Android :stuck_out_tongue:
[2018-08-06 12:30:35]
fredz :
man how can Parrot be so messy. They send a mailing to everyone and then forget to update Android
[2018-08-06 12:30:48]
ender :
is android mentioned there ??
[2018-08-06 12:30:51]
ender :
(in the mail)
[2018-08-06 12:31:48]
fredz :
no OS is targeted
[2018-08-06 12:46:17]
fredz :
"To reward your loyalty, we’re giving you exclusive access to both Follow Me and Flight Plan in-apps for only $0,99/£0,99/1,09€ on FreeFlight 6! Get the features quickly! After 30 days from the date you receive this email, the Follow Me and Flight Plan apps will default to its regular price of $17.99//£17.99/19,99€. "
[2018-08-06 12:46:20]
fredz :
seems to be iOS only
[2018-08-06 12:52:48]
ender :
i guess because of the BETA only weeks for iOS users…
[2018-08-06 12:53:10]
fredz :
true, but the Android users never had a discount :slightly_smiling_face:
[2018-08-06 13:04:52]
mail451 :
@ender there are a few more files that need to be patched (WifiFeatureWifiAccessPoint.java and WifiAccessPointCore.java, etc...)
[2018-08-06 13:05:09]
mail451 :
will mod this afternoon (17 UTC) and send a diff
[2018-08-06 13:05:18]
mail451 :
off to eat
[2018-08-06 13:06:04]
ender :
yes, i patched many places there as well.
[2018-08-06 13:06:08]
ender :
to no success…
[2018-08-06 13:06:17]
ender :
hoping you get it right :slightly_smiling_face:
[2018-08-06 13:07:00]
ender :
I solved your crashed by increasing locals by one in the methods you used and then using the appropriate variable. No more crash but also does not work.
[2018-08-06 13:07:17]
ender :
its the same places i pathched before.
[2018-08-06 13:08:25]
ender :
BUT after i reset my Anafi the zillion’st time now it reacts to the simple fake GPS method. Advantage for me is thati can SEE the US as country now iw fake GPS works. Also MPP ADB says 25dB & CC=US
[2018-08-06 13:08:37]
ender :
Thats okay fo rmy test flight today :slightly_smiling_face:
[2018-08-06 13:10:12]
ender :
strange things….
[2018-08-06 13:18:37]
ender :
crash free (still not working) FCC patch based on konrads WIP
[2018-08-06 13:19:03]
ender :
@mail451: this is my patched based on yours, crash free and changed one more put to dummy…
[2018-08-06 13:20:02]
ender :
if you want to update that, but as i said still not the desired effect. It seems the stuff in country selector is working and patchable (because the resulting shared prefs are on “us” now all the time) but simply not relevant anymore.
[2018-08-06 13:20:12]
mail451 :
Ok. I'll add it to the repo, I am patching more files
[2018-08-06 13:20:18]
ender :
k !
[2018-08-06 15:00:36]
mr.vibez :
Uh, I have no idea how to use this bitbucket client
[2018-08-06 15:04:09]
aciid :
click remote
[2018-08-06 15:04:11]
aciid :
click add account
[2018-08-06 15:04:15]
mr.vibez :
Ok i'm up and running, going to create a folder
[2018-08-06 15:04:27]
mr.vibez :
for 1.0.4
[2018-08-06 15:04:30]
aciid :
then when you add account you will see listing of repos you have acecess
[2018-08-06 15:10:18]
mr.vibez :
Ok i've made some changes to my local copy, how to commit?
[2018-08-06 15:12:01]
aciid :
there should be textbox in bottom
[2018-08-06 15:12:03]
aciid :
with your name on it
[2018-08-06 15:12:05]
aciid :
and commit button
[2018-08-06 15:12:17]
aciid :
i need to download sourcetree cant remember
[2018-08-06 15:15:49]
mr.vibez :
Can you check, I think i've commited
[2018-08-06 15:19:22]
aciid :
yes i see the commit
[2018-08-06 15:20:00]
mr.vibez :
Do you need to approve it or something?
[2018-08-06 15:23:47]
aciid :
no
[2018-08-06 15:23:51]
aciid :
it just works
[2018-08-06 15:24:13]
mr.vibez :
My patch is not showing <https://bitbucket.org/aciid/anafinessed/src/master/Patches/WIP/>
[2018-08-06 15:25:12]
aciid :
I see a folder
[2018-08-06 15:25:23]
aciid :
with a file called CC_2_US.patch
[2018-08-06 15:26:03]
mr.vibez :
There should be this
[2018-08-06 15:26:04]
mr.vibez :
Patches/Final/1.0.4/setDefaultUnitsToMeters.patch
[2018-08-06 15:26:51]
mail451 :
[2018-08-06 15:26:57]
mail451 :
this is what is currently pushed
[2018-08-06 15:27:36]
mr.vibez :
Yeah that's me but I can't see that on the website
[2018-08-06 15:27:39]
mr.vibez :
<https://bitbucket.org/aciid/anafinessed/src/master/>
[2018-08-06 15:27:44]
mail451 :
it takes a bit to refresh
[2018-08-06 15:28:15]
mr.vibez :
Ah ok
[2018-08-06 15:46:42]
ender :
Konrad, you maybe should rename the “enable_dropdown_menu.patch” to “show_current_country.patch”, this is a bit misleading as the menu is only Populated with current country.
[2018-08-06 15:50:22]
ender :
by the way, in this smali:
smali\com\parrot\freeflight\feature\settings\category\PreferencesNetworkFragment$initData$2.smali
there is a “onClick” method that handled clicking in the now visible menu. i tried to then send “US” to the wifi manager but somehow failed (did not work).
[2018-08-06 15:53:56]
ender :
and here is the method that populates the menu items:
smali\com\parrot\freeflight\feature\settings\category\PreferencesNetworkFragment.smali
[2018-08-06 15:54:10]
ender :
In “initCountryList”
[2018-08-06 15:54:45]
ender :
It seems to get the current country from “accessPoint.country()”
[2018-08-06 15:55:37]
ender :
Does any of you know how to set up a List in smali ?
[2018-08-06 16:23:39]
mr.vibez :
I think you may be able to do it inline
[2018-08-06 16:24:18]
mr.vibez :
this.countryList = CollectionsKt___CollectionsKt.sortedWith(iterable2, new PreferencesNetworkFragment$initCountryList$$inlined$compareBy$1(instance));
[2018-08-06 16:27:28]
mr.vibez :
maybe not
[2018-08-06 16:28:28]
mr.vibez :
private final void initCountryList(WifiAccessPoint accessPoint) {
if (accessPoint != null) {
[2018-08-06 16:28:40]
mr.vibez :
maybe remove that check and see what happens
[2018-08-06 16:33:49]
mr.vibez :
ignore that
[2018-08-06 16:34:51]
mr.vibez :
I don't think anything even calls initCountryList()
[2018-08-06 16:36:07]
mr.vibez :
oh setDrone() does
[2018-08-06 16:43:40]
mr.vibez :
I've got a feeling the AP sends the list of country codes to the app.
[2018-08-06 16:46:44]
ender :
yes, thats what i think, so its only one country.
[2018-08-06 16:47:00]
ender :
I’d like to generate a list of countries, maybe at least the one from the drone + US
[2018-08-06 16:47:13]
ender :
and then hope that onClick does its job
[2018-08-06 16:47:35]
ender :
BUT i tried to fill a country structure with stuff including the “code” “US” and failed.
[2018-08-06 16:47:41]
ender :
so i am unsure…
[2018-08-06 16:51:39]
mr.vibez :
So frustrating
[2018-08-06 16:52:08]
ender :
BTW when going through camea settings there is a 2.7k resolution mentioned, would be great to enable it at some time… and also to try a higher FPS for 4k :wink: LATER…
[2018-08-06 16:52:22]
ender :
Lee, now with debug output it should be accellerated…
[2018-08-06 16:52:54]
ender :
e.g. add one in “onClick” and see if it is called at all, and IF so fake a “us” country selection and so on…
[2018-08-06 16:54:20]
ender :
Lee, do you work with Jadx ?!
[2018-08-06 16:58:07]
ender :
[2018-08-06 16:58:24]
ender :
this fills the dropdown list, looks strange somehow…
[2018-08-06 17:02:47]
mr.vibez :
Yes I used Jadx and loaded the project into android studio. I prefer that ide
[2018-08-06 17:03:34]
ender :
k !
[2018-08-06 17:18:21]
mr.vibez :
Biggest issue I have at the moment is that when I run my modded apks on a real device, it hangs at the splash screen
[2018-08-06 17:18:50]
ender :
ooops
[2018-08-06 17:18:53]
ender :
thats strange
[2018-08-06 17:19:03]
ender :
but you mod in smali, not in java, right ?
[2018-08-06 17:19:20]
ender :
brb, gotta do a test flight…
[2018-08-06 17:19:40]
mr.vibez :
yeah in smali
[2018-08-06 17:19:50]
mr.vibez :
works on bluestacks
[2018-08-06 17:20:10]
mr.vibez :
I need to figure out if it's a specific patch that causes the error
[2018-08-06 17:29:17]
mr.vibez :
I think it's more of a HW limit than Sw
[2018-08-06 18:04:33]
mail451 :
@ender New FCC patch available that does not crash
[2018-08-06 18:11:18]
fredz :
Android add-ons are also $1 now
[2018-08-06 18:16:13]
quad808 :
Ok, how do I get these add ons?
[2018-08-06 18:16:38]
quad808 :
(he says without doing any research at all)
[2018-08-06 18:18:35]
mail451 :
CountryDetector.smali: <https://hastebin.com/uremusuveb.php>
[2018-08-06 18:19:16]
d95gas :
IOS Only - I got it on my 7+ this morning for £1.... £34 saving :slightly_smiling_face: checked Android tonight when I got home and still £17.99. Going to check my other account on my iPad see if I can get a double wammy...... giving me £68 saving..... more drone bits :slightly_smiling_face:
[2018-08-06 18:24:55]
quad808 :
I opened the app... .99 Android
[2018-08-06 18:25:10]
quad808 :
Had to create a stupid account
[2018-08-06 18:25:16]
fredz :
Android 0.99 :slightly_smiling_face:
[2018-08-06 18:25:20]
quad808 :
now they track everything I do.
[2018-08-06 18:25:20]
fredz :
just bought them on Android
[2018-08-06 18:25:21]
d95gas :
Oh shit I'm missing out....... hmmmm need to look into this :slightly_smiling_face:
[2018-08-06 18:25:39]
d95gas :
they already know everything about us
[2018-08-06 18:25:54]
fredz :
The Donald knows it all... or wait, the Russians
[2018-08-06 18:25:55]
quad808 :
I don't want them to see what I do with my drone in the bedroom....oops. I just said too much already...
[2018-08-06 18:28:17]
d95gas :
now getting out the pile of android devices that I can never decide which one to you, so all of them mirrored :slightly_smiling_face:
[2018-08-06 18:31:30]
quad808 :
Once it's in play store purchase, should be able to go to all devices, right?
[2018-08-06 18:31:43]
quad808 :
I also have a pile
[2018-08-06 18:37:54]
fredz :
yes
[2018-08-06 18:42:43]
quad808 :
Parrot also has Anafi batteries in stock...just picked up one
[2018-08-06 18:44:30]
mr.vibez :
@aciid can you post your debug patch to the repo please
[2018-08-06 18:45:16]
aciid :
sure I didn't patch it yet
[2018-08-06 18:45:21]
aciid :
I ddn't make the diff I mean
[2018-08-06 18:45:24]
aciid :
ill do it
[2018-08-06 18:45:38]
aciid :
are we using the latest version
[2018-08-06 18:45:41]
aciid :
of freelflight
[2018-08-06 18:46:23]
mr.vibez :
1.0.4
[2018-08-06 19:29:12]
aciid :
I added the debugger log patch
[2018-08-06 19:29:25]
aciid :
needs work, but its there in WIP that why :smiley:
[2018-08-06 19:33:14]
mr.vibez :
Thanks
[2018-08-06 19:33:38]
mr.vibez :
just noticed my patch has the wrong filepath +--- /home/osboxes/Desktop/MetricsServant.
[2018-08-06 19:38:08]
ender :
lolz cannot test as my anafi currently is locked again to US after my FakeGPS playing around. Could someone test Konrads patches ?
[2018-08-06 19:58:20]
mr.vibez :
@mail451 latest fcc patch still crashes for me
[2018-08-06 20:00:22]
mail451 :
Weird, did you try copy pasting from the hastebin?
[2018-08-06 20:01:24]
mr.vibez :
I did indeed
[2018-08-06 20:01:37]
mr.vibez :
Do you have an APK I could try just in case I messed up?
[2018-08-06 20:14:54]
mail451 :
Yes
[2018-08-06 20:45:22]
mr.vibez :
Same problem i'm afraid. crashes as soon as the drone connects
[2018-08-06 20:47:26]
aciid :
which mods+
[2018-08-06 20:48:01]
mr.vibez :
The FCC one
[2018-08-06 20:48:23]
aciid :
can you check logcat?
[2018-08-06 20:48:36]
aciid :
logcat is very fast log output
[2018-08-06 20:48:48]
aciid :
you probably need to have it running while it crashes then ctrl+c the logcat
[2018-08-06 20:48:55]
aciid :
and scroll through if it says why it crashes
[2018-08-06 20:49:38]
mr.vibez :
I'm afraid i'm done for the day. I'll try and take a look tomorrow unless @ender ever gets off that beach :stuck_out_tongue:
[2018-08-06 20:50:08]
aciid :
we thank you for your esrvice
[2018-08-07 06:57:34]
info616 :
A lot what you’re doing is beyond my scope.
But I finally was able to use 5 GHz channels with the controller in Germany (not working because Freeflight6 offers wrong channels for Germany and the controller refuses to work with these) by using FakeGPS with US location. In manual channel selection these channels are available even after disabling FakeGPS until you relaunch Freeflight.
Does that mean I use FCC transmission power that way?
[2018-08-07 07:09:51]
fredz :
Yes
[2018-08-07 07:10:24]
fredz :
If you leave fakegps active only
[2018-08-07 07:14:29]
ender :
@channel: for me US is locked after switching off dron & controller while phone was “fakeGPS’ed. Strange enough but its the case…
As always its good to run version wivh displays CC so you can be sure. But WiFi Range & Performance is SO much better you cannot fail to recognize :slightly_smiling_face:
For SURE there is a kind of Auto power, because even on FCC you can see signal bars going from 3 to 2 to 1 and THEN to 3 again without moving controller and still flying further away…
[2018-08-07 07:14:52]
ender :
travelling today, so i’ll be back later. Things are going the right way i feel :slightly_smiling_face:
[2018-08-07 12:31:36]
info616 :
Leaving fakeGPS on is not a viable solution. I assume neither RTH nor the flight modes that rely on the controller GPS like FollowMe etc. will work any more.
Did a flight test today with fakeGPS disabled after having switched to a 5 GHz channel while location was set to US.
Initially worked pretty well. Connection seemed to be stronger. So I flew a bit further to check the range. I‘d say it was almost double the distance before I got the low signal warning. Unfortunately then strange things happened. I flew backwards but a few seconds later the video blacked out. I still could see the drones position on the map and it reacted to my commands. So I flew it back manually. Video did not reappear.
I assume when signal is lost, the controller leaves manual channel selection mode and at that point it resets the available channels back to the default list according to the actual location, in my case Germany. Thus the prior selected channel is no more available. Well, just speculation.
That said using 5GHz channels with fakeGPS disabled seems not be a bulletproof workaround.
[2018-08-07 13:10:25]
fredz :
Leaving Fakegps on is a viable solution as the RTH goes to the take off location of the drone and not to the location of the smartphone or controller. Don’t know about followme but doesn’t that just follow an object on the camera?
[2018-08-07 13:11:12]
fredz :
Disabling fakegps sets it back to CE mode within 10 seconds. We have tried that using an RF meter.
[2018-08-07 13:12:30]
mr.vibez :
Fake GPS never worked for me. Which app are you guys using?
[2018-08-07 13:15:42]
fredz :
Fake GPS
[2018-08-07 13:16:02]
fredz :
You can only see it with a real rf meter connected to the connectors
[2018-08-07 13:16:59]
fredz :
I don’t know if you can see this video
[2018-08-07 13:17:03]
fredz :
It’s uploading now
[2018-08-07 13:18:08]
mr.vibez :
I tried one before but could see 5ghz or any increase in range, so assumed it didn't work
[2018-08-07 13:18:20]
fredz :
2.4 GHz
[2018-08-07 13:20:11]
fredz :
It seems 5 GHz stays even after disabling fake gps but the FCC power disappears immediately
[2018-08-07 13:20:12]
fredz :
[2018-08-07 13:20:25]
fredz :
Do you see that movie I just posted?
[2018-08-07 14:10:11]
aciid :
yup
[2018-08-07 15:39:12]
mr.vibez :
@fredz That is while the AC also has GPS lock?
[2018-08-07 15:44:59]
fredz :
Yes
[2018-08-07 15:45:08]
fredz :
Try it
[2018-08-07 15:49:09]
mr.vibez :
It works for me now.
[2018-08-07 15:49:27]
mr.vibez :
Using the dropdown patch I can see it says United States
[2018-08-07 15:52:14]
mr.vibez :
Next issue is how to get my IAP working on the modded version
[2018-08-07 15:58:56]
mr.vibez :
Ah, backing up my data via titanium backup and restoring seems to do the trick
[2018-08-07 16:00:10]
mr.vibez :
Interesting, my latest battery from anasi came with a connection cover
[2018-08-07 16:01:19]
fredz :
Pic?
[2018-08-07 16:02:50]
mr.vibez :
[2018-08-07 16:10:09]
mr.vibez :
Can you see the pic?
[2018-08-07 18:14:08]
aciid :
yes
[2018-08-07 20:17:02]
info616 :
on my Anafi both the display of US channels and the chosen 5 GHz channel stick when I have chosen the channel manually.
In any of the automatic channel selection modes whether 2.4 GHz, 5 GHz or full auto channel selection reverts to default for Germany within 10s after I disable fakeGPS,
This afternoon I tested the behaviour when the Anafi looses contact with the controller. Didn‘t want to do it again in real flight, so I faked loss of signal by putting aluminum foil around the controller antenna. Seems I was right with my theory.
With connection on channel 40 and fakeGPS off the available channels switched to German default list within a few seconds after signal loss. After removing the aluminum foil it reconnected on channel 11.
With fakeGPS enabled and set to US location, controller reconnected on same channel 40.
Are you sure power switches to CE within 10 seconds after disabling fakeGPS although the channel list still lists the US channels? Or did the list change as well within 10s. If so where you in one of the automatic channel selection modes?
[2018-08-07 20:28:34]
info616 :
Follow me uses both the GPS of the controller and the framed picture. You can try it by framing yourself, then laying the controller down and walking away. Camera keeps pointing at you but Anafi doesn‘t follow you like it does with controller.
You get issues as well in the dronie modes dolly zoom and boomerang. The Anafi turns away from you with the green frame still tracking you. Confusing effect.
[2018-08-07 21:52:06]
mr.vibez :
SkyControllerWifiAccessPoint looks interesting
[2018-08-08 09:48:01]
info616 :
Interesting, on the 0.8.4 beta firmware for the Anafi, the curves overlay for channel usage is displayed in Germany. On 1.0.1 firmware it is not. Though available channels are the same on both versions.
[2018-08-08 12:30:11]
ender :
No one thinks Fake GPS is a good solution… As for me my Anafi is currently locked in US (wonder how long). So i can use “true” GPS AND have FCC range.
[2018-08-08 12:31:17]
mr.vibez :
Mine doesn't stay locked for some reason
[2018-08-08 15:32:42]
mr.vibez :
Once you guys have FCC on, what does this file look like? /data/data/com.parrot.freeflight6/shared_prefs/country_detector.xml
[2018-08-08 15:40:42]
aciid :
IIRC it saves the countrycode there, like it did on my android-x86 run
[2018-08-08 15:41:39]
mr.vibez :
Can android-x86 connect to the controller?
[2018-08-08 15:42:19]
mr.vibez :
Anyway, we could make that file ro after setting FCC and see what happens
[2018-08-08 15:42:23]
mr.vibez :
I couldn't even get my copy to boot
[2018-08-08 15:50:58]
aciid :
i havent tried anafi controller,
[2018-08-08 15:51:13]
aciid :
i tried with dji and it didn't work since android-x86 contains a subset of drivers
[2018-08-08 15:51:47]
mr.vibez :
Ah seems that xml didn't update for me even though the UI showed I was in united states
[2018-08-08 15:55:08]
mr.vibez :
reverse_geocoder.xml updated though
[2018-08-08 16:23:33]
mr.vibez :
Ok just done a diff between FCC vs CE mode on dir /data/data/com.parrot.freeflight6/
[2018-08-08 16:23:48]
mr.vibez :
only file that changes is country_detector.xml
[2018-08-08 16:23:53]
mr.vibez :
Sorry
[2018-08-08 16:24:13]
mr.vibez :
reverse_geocoder.xml is the only file that changes
[2018-08-08 21:50:29]
mr.vibez :
OK hardcoded COUNTRY_CODE_KEY = US in country_detector.xml, still no difference
[2018-08-08 22:17:20]
ender :
yep, all around country detector looks like the wrong path, but of course i may err…
[2018-08-08 22:19:14]
mr.vibez :
I'm out of ideas now
[2018-08-08 22:21:09]
aciid :
what we doing here
[2018-08-08 22:22:20]
mr.vibez :
Seeing if /data/data/com.parrot.freeflight6/shared_prefs/country_detector.xml has an effect
[2018-08-08 22:23:13]
mr.vibez :
It is the only file in the filesystem that gets updated when switching from CE>FCC via fake gps
[2018-08-08 22:24:27]
mr.vibez :
I mean "reverse_geocoder.xml" I disabled some of the code that updates the country code in that file
[2018-08-08 22:24:51]
mr.vibez :
and hard coded the country code in that file
[2018-08-08 22:25:12]
mr.vibez :
made no difference, app still detected my country is GB rather than US
[2018-08-08 23:16:35]
aciid :
9 days till root bootlocker unload
[2018-08-08 23:17:07]
makingthisnameup :
Wuttt, I need to back read
[2018-08-08 23:17:09]
aciid :
xiaomi phones have 20days to unlock
[2018-08-09 07:58:10]
ender :
--> reverse geocoder is not important IMO, it “just” shows your position in cleartext (nearest city / area as cleartext derived from ccords). Of course that changes if you fake a different GPS position…
[2018-08-09 08:10:38]
info616 :
Seems I was wrong. Yesterday during a flight I couldn‘t manage US channel list to stick after disabling fakeGPS even in manual channel selection mode. Either something has changed in my settings or probably the Anafi didn‘t have a GPS signal during my first tests.
So for now only keeping fakeGPS on all the time works for me to get US channels and likely FCC mode.
[2018-08-09 08:14:38]
info616 :
@ender how did you manage to get your Anafi locked to US? So you have correct GPS location but US channels available? Did you check it runs in FCC power mode?
[2018-08-09 08:14:59]
ender :
i have no friggin idea. Before i had it locked to CN and to France. :slightly_smiling_face:
[2018-08-09 08:16:54]
info616 :
but you experimented with patches, so it is not just the result of a couple of resets and playing with fakeGPS?
[2018-08-09 08:17:06]
ender :
And i have no time to further look at it ATM as i need to catch up work from my holidays but hope to look into that in a day or at the weekend. I DID change my phones behaviours (MNC, MCC, Fake GPS) and then reset the Anafi before first connection, that certainly did “something”. but thats all moot, we need an App or Firmware level patch. I only did that stuff again as i needed FCC power for the thing i was trying to capture in the holidays (parade of old ships 2km away from the shoreline). And it did work :slightly_smiling_face:
[2018-08-09 08:17:18]
ender :
back to work…
[2018-08-09 08:24:00]
info616 :
so you found accidentally what everbody here is searching for. :sunglasses:
[2018-08-09 08:34:47]
mr.vibez :
Agree that reverse geocoder was a dead end but it did need investigating
[2018-08-09 08:37:12]
ender :
I did not yet turn on my Anafi, i guess after the drastic GPS coordinate change because of travel it will then reconsider and show the correct Countrycode again (Germany). But lets see…
[2018-08-09 08:37:59]
ender :
After taking my critical shots i started playing and faked gps in South america, russia, some places far apart but the drone was kept in US - FCC setting…
[2018-08-09 10:30:34]
mr.vibez :
Wonder what we happen if we change that 3km value to 30000km
[2018-08-09 10:32:23]
mail451 :
where?
[2018-08-09 10:48:12]
ender :
@mr.vibez exactly, but ONLY if my theory is correct :wink:
[2018-08-09 10:48:37]
ender :
@mail451 in countrydetector,smali
[2018-08-09 13:21:22]
mr.vibez :
I'll try a little bit later today
[2018-08-09 15:36:32]
ender :
Are Anafi batteries still hard to get ?! i have one too much that goes back to Parrot tomorrow if no one else wants it !
[2018-08-09 16:10:06]
mr.vibez :
Plenty of stock in the UK thanks
[2018-08-09 16:11:44]
mr.vibez :
.field private static final MIN_DISTANCE_TO_GEOCODE_METERS:I = 0xbb8
[2018-08-09 16:11:59]
mr.vibez :
what logic translates 0xbb8 to 3000?
[2018-08-09 16:12:23]
mr.vibez :
I guess it's hex?
[2018-08-09 16:26:22]
mr.vibez :
Set it to 99999999, made no difference, still switched between FCC/CC
[2018-08-09 16:27:41]
mr.vibez :
I wonder if the lat/lon are sent to the controller and it does a geocode to determine region?
[2018-08-09 16:37:10]
d95gas :
I'm not into the programming level you guys are, but I can read, and a lot of the files I went through on the apk did seem to indicate the used of some sort of geocode database to determine location, and from what I remember, it used this for various elements.
[2018-08-09 16:39:08]
mr.vibez :
Yeah it does ask a lot of geo questions. Just can't quite figure out which one triggers the transmitter power
[2018-08-09 16:45:50]
mr.vibez :
How do we return from a method in smali? I want to exit a method early
[2018-08-09 16:47:51]
ender :
either goto the “usual” return or copy & paste the return in there. See that you have a variable ready if it should return a value.
[2018-08-09 16:49:51]
d95gas :
have a day off tomorrow so will have a look through the smali files and see if anything jumps out..... Might help me get a better understanding as well.
[2018-08-09 16:51:21]
ender :
P.S. its very obvious but came to my mind late in the game. If you are unsure if you produced a mess in smali just run jadx or JEB to verify that the code is doing what you want…
[2018-08-09 16:51:44]
ender :
(on the recompiled apk)
[2018-08-09 21:30:43]
aciid :
Mocute gamepad doesn't work with Anafi
[2018-08-10 09:28:01]
aciid :
answer from Parrot SAS finally
[2018-08-10 09:28:06]
aciid :
```Hello,
Unfortunately, we do not have this file at the Technical Support (product usage Department).
You will have to get in touch with the Developers from the website directly please.
Best Regards,
John
Parrot Customer Service & Support
```
refering to the developer certificate
[2018-08-10 09:41:34]
ender :
haha
[2018-08-10 10:09:46]
aciid :
<https://forum.developer.parrot.com/t/applying-for-anafi-developer-certificate-security-work-here/7832>
see here, and play candid if you can write a comment supporting the statement from your viewpoint
[2018-08-10 12:27:48]
fredz :
"from the website"?
[2018-08-10 12:27:49]
fredz :
lol
[2018-08-10 12:41:44]
aciid :
@fredz sorry?
[2018-08-10 12:41:48]
aciid :
oh yeah the email
[2018-08-10 13:14:57]
aciid :
<https://parrotpilots.com/threads/call-to-all-parrot-developers-tinkerers-hackers-pilots.166/> crossposted
[2018-08-10 13:15:04]
aciid :
I hope I this gets some traction
[2018-08-10 15:50:39]
mr.vibez :
Thoughts on these? The motors do seem quite exposed <https://www.amazon.co.uk/dp/B07GBSJBR8/>
[2018-08-10 15:53:56]
d95gas :
Gucci :slightly_smiling_face: and Red is my fav colour
[2018-08-10 15:57:47]
mr.vibez :
noticed the underside of the motor is still exposed anyway
[2018-08-10 15:58:07]
mr.vibez :
so probably a waste of money and weight
[2018-08-10 16:01:01]
d95gas :
1g
[2018-08-11 06:31:03]
info616 :
What about heat? Maybe there is a reason for the open design.
[2018-08-11 06:53:27]
ender :
@Pete: My thoughts excactly :slightly_smiling_face:
[2018-08-11 20:51:39]
ender :
Okay, got some time to play. Target: reverse_geocoder.xml i try to follow where the data come frome and patch the source to US. lets see.
BUT MEANWHILE i learned something new:
[2018-08-11 20:53:13]
ender :
i was playing around with the file /data/lib/mppd/mapping_anafi4k.xml a while ago to change keymappings. i changed stuff but to no effect. Suddenly while flying in my holiday some keys behaved strange. Indeed as strange as i tested them to behave.
Now i confirmed what made the difference: It seems when i reset the anafi it pulls the files from the mppd !
[2018-08-11 20:53:18]
ender :
Thats cool to know !
[2018-08-11 20:56:03]
ender :
btw my Anafi is NOT locked to US anymore, now back to Germany, as i suspected…
[2018-08-11 20:56:25]
ender :
in geocoder i also found a 3000m minimum recheck distance… hmmmm :wink:
[2018-08-11 20:56:56]
ender :
tried the same trick as with mapping with wifi,cfg on MPP and reset Anafi but that did not do magic :slightly_smiling_face:
[2018-08-11 22:30:59]
aciid :
I've found us a new member
[2018-08-11 22:31:07]
aciid :
```
synman
5h
I saw your post on anafi and was curious if you would be willing to share your learnings thus far or point me to a community / forum where this type of productive discussion is occuring?
---snipped----
```
[2018-08-11 22:31:10]
aciid :
@ender
[2018-08-11 22:32:01]
mr.vibez :
NIce
[2018-08-12 07:51:55]
ender :
:+1:
[2018-08-12 08:04:26]
d95gas :
Would be great to get the FCC hack, and good that "Ender" may have found some more goodies
[2018-08-12 08:16:04]
mail451 :
What's the status on the Fcc hack? Maybe dumping all instances of mCountryCode to Log.d would help
[2018-08-12 08:43:44]
mr.vibez :
looks useful for such purpose? <https://github.com/intrepidusgroup/IGLogger>
[2018-08-12 11:46:11]
d95gas :
Guys.... On your delvings into the Anafi APK, have you come across anything that might enable us to change the RTH height, better still would be a slider option similar to what they have on the GeoFence.
Many of us have emailed Parrot Customer Support to suggest they make the change as fixed height of 20m could present issues.
[2018-08-12 11:49:12]
mr.vibez :
As far as I can see, it's in the firmware on the drone. Nothing in the apk suggests it's configurable
[2018-08-12 11:50:19]
d95gas :
Ahh bugger ... we will just need to try and keep the pressure on Parrot though.... not that I see them listening, but you never know. Any nearer to cracking the FCC situation ..... Would be nice to get a little more power
[2018-08-12 11:53:17]
mr.vibez :
I think we are waiting on @aciid to get his android rooted. All roads so far had led to dead ends. Hopefully @aciid will have some fresh ideas.
[2018-08-12 11:53:54]
mr.vibez :
Not the best solution, but fake gps does appear to work well.
[2018-08-12 12:08:12]
aciid :
@mr.vibez 7 days to go
[2018-08-12 12:08:21]
aciid :
checked yesterday
[2018-08-12 12:09:16]
mr.vibez :
Strange policy
[2018-08-12 12:22:25]
d95gas :
Never heard of that policy before, I know with my "Wundaphone", I just went on their website, entered the serial number and another ID, and then popped up the unlock code
[2018-08-12 12:22:40]
d95gas :
Just came across: <https://forum.developer.parrot.com/t/anafi-5g-fcc-mode/7669>
[2018-08-12 12:23:52]
aciid :
@mr.vibez its to prevent stolen phones being erased
[2018-08-12 12:24:04]
aciid :
20 days from making the request via automatic system to unlock
[2018-08-12 12:24:18]
mr.vibez :
Ah I see
[2018-08-12 12:26:44]
d95gas :
In this day and age, given the amount of stolen phones doing the rounds, it make sense
[2018-08-12 12:36:52]
aciid :
so if you steal a xiaomi, and happen to know the password of the user which is added protection.
you then go to download mi_unlock
login with users password, sends a verification sms to users number, wihch is not in that phone anymore since ISP.
then you should request unlocking
takes 20 days xDDD
[2018-08-12 12:44:15]
d95gas :
by which time the thieving toerag is pi$$ed off and goes and nicks a samsung :slightly_smiling_face:
[2018-08-12 12:44:27]
d95gas :
other manufacturers are available!!
[2018-08-12 16:16:25]
ender :
@d95gas The RTH Altitude is in a config file on the Anafi which we cant touch ATM.
[2018-08-12 16:18:04]
mr.vibez :
Apparently someone posted a pic of reconfigurable RTH and AEB from a beta version the parrot devs were working on. Can't find it now though :disappointed:
[2018-08-12 16:19:01]
mr.vibez :
Nice, figure out how to enable IAP in my modded apk :slightly_smiling_face:
[2018-08-12 16:19:39]
mr.vibez :
isFlightPlanPurchased should be easy for everyone to figure out the rest
[2018-08-12 16:20:53]
mr.vibez :
right, i'm going to try and log as much as I can in countrydetector
[2018-08-12 16:24:19]
mr.vibez :
Anyone use this? Looks interesting <http://virtuous-ten-studio.com/>
[2018-08-12 18:07:11]
d95gas :
would be nice to think they are considering the "Wants" of the users.
[2018-08-12 18:07:30]
d95gas :
Flightplan, etc purchased.... would of been daft not to at 99p :slightly_smiling_face:
[2018-08-12 18:10:57]
mr.vibez :
I paid full price but needed a way for them to work on my modded apk
[2018-08-12 18:11:07]
mr.vibez :
not sure of the legit way to do that
[2018-08-12 18:26:28]
d95gas :
Understandable ...... I just wish I had time left to be able to understand all this Smali stuff, got the APK stripped down and can see all the references in various Smali files to the Countrydetector and Geocode, but dont really know what I am looking at ..... Keep reading, but nothing sinking in
[2018-08-12 18:29:08]
aciid :
@d95gas most reverse engineering is appliable on all platforms. if you go an learn about assembly x86 and disassembly and reverse engineering on youtube series you will start to get hang of it . general knowledgement of programming is good to have
[2018-08-12 18:31:12]
d95gas :
Yes Youtube is my next best friend. Have a few days off coming up and will be dowloading some vids in prep for that
[2018-08-12 18:33:51]
aciid :
I learned via "reversing with lena" back in 2010 or something. that's s whole downloadable video series with ollydbg debugger, still relevant and working apps to work on
[2018-08-12 18:34:50]
aciid :
<https://tuts4you.com/e107_plugins/download/download.php?view.2876>
[2018-08-12 18:34:56]
aciid :
password for file is tuts4you
[2018-08-12 18:37:33]
d95gas :
Very interesting, having a look now, thanks Aciid
[2018-08-12 19:06:59]
aciid :
I like how the first tutorial, files folder has ollydbg config file. it's very comprehensive to have everything the same as the tutorials are
[2018-08-12 19:07:03]
aciid :
sazzy woman
[2018-08-12 19:07:18]
aciid :
videos can be played with VLC Video Lan Client
[2018-08-12 19:07:29]
aciid :
the SWF files, or use the HTML file in the folders
[2018-08-12 19:07:45]
aciid :
oh browsers don't allow flash, well that or vlc
[2018-08-12 19:08:39]
aciid :
ahh so nostalgic
[2018-08-12 19:14:56]
mail451 :
First part of Log Country Code done... available in repo under WIP/1.0.4
[2018-08-12 19:15:19]
mail451 :
get output like this
[2018-08-12 19:15:44]
mail451 :
Remember to allocate more registers for .local!
[2018-08-12 20:46:05]
mail451 :
Yes
[2018-08-12 20:46:37]
mail451 :
I'm looking at SkyControllerWifiAccessPoint as well
[2018-08-12 20:53:43]
mail451 :
Are files under "com.parrot.drone.sdkcore.arsdk" relevant to us?
[2018-08-12 20:54:16]
mr.vibez :
Not sure what is and isn't relevant at this point
[2018-08-12 20:54:22]
mail451 :
roger that
[2018-08-12 20:56:01]
mr.vibez :
const-string v1, "Anafinessed-CountryDetector-getCountryCode()"
invoke-static {v1, v0}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I
[2018-08-12 20:56:23]
mr.vibez :
woultd this be valid?
[2018-08-12 20:56:31]
mr.vibez :
invoke-static {"MYTAG", v0}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I
[2018-08-12 20:58:29]
mail451 :
Also I have noted ware editing under peripheral/wifi and not under peripheral/gamepad so for the hacks to work we would have to connect the drone via WiFi not via the physical controller..
[2018-08-12 20:58:47]
mail451 :
@mr.vibez No strings need to be defined earlier
[2018-08-12 20:58:56]
mr.vibez :
Fair enough
[2018-08-12 20:59:46]
mr.vibez :
I want to implement this for logging but I din't know how to include the smali file. It says we must compile/decompile it <https://github.com/b3nn/IGLogger>
[2018-08-12 20:59:56]
mr.vibez :
would be much quicker to log
[2018-08-12 21:01:38]
aciid :
@mr.vibez yes theres few options for debug logging,but most of the solutions are dependant that is the apk in "debug" build mode. also you can post via debugger if have root it's probably easier than adding libraries.
[2018-08-12 21:03:06]
mr.vibez :
@mail451 logging code works well but it involves incrementing the number of registers. A little painful but seems to work
[2018-08-12 21:07:44]
aciid :
<https://github.com/intrepidusgroup/IGLogger>
[2018-08-12 21:07:48]
aciid :
ah
[2018-08-12 21:07:50]
aciid :
same thing
[2018-08-12 21:07:57]
aciid :
but thisis probably original
[2018-08-12 21:07:58]
aciid :
dunno
[2018-08-12 21:08:35]
aciid :
well that sayss how its done
[2018-08-12 21:08:48]
aciid :
@mr.vibez Use APKTool to decompile, place the "iglogger.smali" in the root of the application you want logging from (after you APKTool'ed it). Then to log out, simply add a line of Smali where you want to log out. The easiest case is simple to add:
[2018-08-12 21:08:57]
aciid :
fair enough?
[2018-08-12 21:11:00]
mr.vibez :
Doesnt seem to work
[2018-08-12 21:11:10]
mr.vibez :
cant find that class
[2018-08-12 21:11:30]
mr.vibez :
It appears as if you have to compile the java first and then generate your own smali file?
[2018-08-12 21:11:57]
mail451 :
Don't they provide a smali file?
[2018-08-12 21:12:14]
mail451 :
I'm fine calling the java/util/Log library
[2018-08-12 21:12:19]
mr.vibez :
Yeah but apktool doesnt compile with it in the root
[2018-08-12 21:14:04]
mr.vibez :
oh wat
[2018-08-12 21:14:04]
aciid :
the class is in the link I posted
[2018-08-12 21:14:19]
aciid :
different repo
[2018-08-12 21:14:28]
mr.vibez :
seems to compile using iglogger_for_APKTOOLv2.smali
[2018-08-12 21:14:46]
mr.vibez :
from the repo I posted
[2018-08-12 21:14:56]
mr.vibez :
let's see if it works
[2018-08-12 21:17:10]
mr.vibez :
actually not sure I see the benefit, as if you want to tag anything, you still need to increase the number of locals
[2018-08-12 21:29:27]
aciid :
tagging helps you with REAL logger adblog systems, you can us parametring on which logtag groups to show
[2018-08-12 21:29:35]
aciid :
try typing
adb logcat
[2018-08-12 21:29:39]
aciid :
the output is fun
[2018-08-12 21:30:22]
mr.vibez :
Mean that library doesnt seem to offer much more that @mail451 posted
[2018-08-12 21:32:58]
mail451 :
Yes @aciid I put standard Log.d from Java in the files, which can be picked up by adb logcat or Android Studio
[2018-08-12 21:43:42]
aciid :
you can do ittt
[2018-08-12 21:49:53]
aciid :
~5 days till XIAOMI unlock
[2018-08-12 21:50:06]
aciid :
then the beast will be unleashed
[2018-08-12 21:50:24]
aciid :
[2018-08-12 21:56:06]
mr.vibez :
08-12 22:54:48.489 588 588 D Anafinessed-CountryDetector-start(): US
08-12 22:55:02.960 588 588 D Anafinessed-CountryDetector-getCountryCode(): US
[2018-08-12 21:56:26]
mr.vibez :
just to confirm, seems country code really make no difference on it's own
[2018-08-12 22:00:28]
mail451 :
does it say "US" or "us", because here the results are in lowercase
[2018-08-12 22:10:38]
mr.vibez :
I'll try again with "us" and see what happens
[2018-08-12 22:13:42]
mr.vibez :
still in CE :disappointed:
[2018-08-12 22:27:49]
mr.vibez :
That's me done for the day. If anyone wants a distraction, i'm looking to change the path for the flightplans from /data/data/com.parrot to the sd card. Nite all
[2018-08-13 08:35:23]
mail451 :
wait did you modify the strings ?
[2018-08-13 08:59:41]
mr.vibez :
for?
[2018-08-13 09:27:38]
mail451 :
Regarding the uppercase
[2018-08-13 11:48:17]
mr.vibez :
Yeah I just modified the smali
[2018-08-13 11:52:16]
mr.vibez :
Either way, override the values in countrydetector isn't quite enough
[2018-08-13 12:00:04]
mail451 :
Yes
[2018-08-13 12:24:52]
ender :
we know THAT since a looong time :slightly_smiling_face:
[2018-08-13 12:34:20]
mail451 :
i think the remote controller sets the TX not the app
[2018-08-13 12:56:11]
ender :
nope, dont think so.
[2018-08-13 12:56:28]
ender :
Had the Tx set to US, attached App and BOOM Controller back to DE
[2018-08-13 12:56:37]
ender :
but it could work more then one way of course.
[2018-08-13 12:56:47]
ender :
Maybe App just triggers refresh.
[2018-08-13 12:57:19]
ender :
but feel free, controller is available as root, so its in our hands :slightly_smiling_face:
[2018-08-13 13:07:50]
mr.vibez :
What if you connect via phone rather than controller.
[2018-08-13 13:08:00]
mr.vibez :
Does fake GPS still work?
[2018-08-13 13:08:57]
ender :
fake GPS now works again, yes, i can see in country code display on network page. No matter if directly via WiFi or via Controller. So i thill think App is “master” relaying to MPP & Anafi, whatever is connected. But thats just my impression !
[2018-08-13 13:09:33]
mr.vibez :
I would tend to agree but can't find the code responsible lol
[2018-08-13 13:09:44]
ender :
if you just grep the decompiled apk for country there are quite some interesting places, need time to get started again :slightly_smiling_face: MAN we really should beat aciid before his phone gets root :-))))
[2018-08-13 13:10:21]
mr.vibez :
The race is on lol
[2018-08-13 13:10:53]
ender :
That does NOT mean the App is the only place to patch. At some point (while connected to the Controller via USB) The app has to tell the Controller and the controller relays to the Anafi. So we can also intercept on Controller and change to to FCC country / power…
[2018-08-13 13:11:10]
ender :
would be nice to not need to inject google API key.
[2018-08-13 13:11:26]
ender :
I am very optimistic just need time to play…
[2018-08-13 13:12:05]
ender :
Fake GPS would never work if drone decides Country Code / TXPower based on its GPS itself.
[2018-08-13 13:12:40]
ender :
controller is wide open and “only” needs to find the right binary and some time in IDA.
[2018-08-13 13:12:52]
ender :
maybe wifid
[2018-08-13 13:37:02]
aciid :
**5 days until unlock**
[2018-08-13 14:21:01]
mail451 :
The race is on... after i fly my spark in sports mode for the first time
[2018-08-13 18:17:18]
mail451 :
well that was intense
[2018-08-13 18:21:05]
aciid :
how was i
[2018-08-13 18:27:38]
ender :
Did you at least kill the gimbal ? :slightly_smiling_face:
[2018-08-13 18:32:55]
mail451 :
when the spark stops it does not stop inmediatly it needs some space to stop, like a sports car, nearly crash it into a tree
[2018-08-13 18:44:49]
info616 :
@aciid is there a reason for torturing yourself with this xiaomi unlock count down while there are other phones available that can be easily rooted without even loosing warranty? I.e. One Plus 5T
[2018-08-13 18:45:51]
aciid :
well if Ill send you the phone now and buy One Plus 5T will you send me the 149€ I paid for Xiaomi Note 5 Pro
[2018-08-13 18:46:53]
aciid :
if you compare one plus features and xiaomi over how expensive oneplus is now adays you will see why I rather wait 20days than waste my money on that brand building shit
[2018-08-13 18:47:29]
aciid :
€ 463,68 - 490,43 / piece HAHAHHA
[2018-08-13 18:47:55]
aciid :
<https://www.aliexpress.com/item/Global-Version-Xiaomi-Redmi-Note-5-4GB-64GB-5-99-Full-Screen-Dual-Camera-Mobile-Phone/32854848418.html?spm=2114.search0104.3.1.12d62ad6sTua3K&ws_ab_test=searchweb0_0,searchweb201602_2_10152_10151_10065_10344_10068_10342_10343_10340_10341_5012515_10696_5012615_10084_10083_10618_10304_10307_10820_10821_10302_10059_100031_10103_10624_10623_10622_10621_10620,searchweb201603_6,ppcSwitch_5&algo_expid=e50877a1-e33e-4e36-9385-d76a4e6df55a-0&algo_pvid=e50877a1-e33e-4e36-9385-d76a4e6df55a&priceBeautifyAB=0>
[2018-08-13 18:47:57]
aciid :
yeah aint happening
[2018-08-13 18:50:55]
ender :
ohh @mail451 i thought you switched it to full manual aka acro :slightly_smiling_face:
[2018-08-13 18:51:16]
mail451 :
can that be done on spark?
[2018-08-13 18:53:10]
ender :
afair yes.
[2018-08-13 18:53:25]
ender :
I was too chicken to do it on the Pro so i did it on my spark.
[2018-08-13 18:53:42]
ender :
I really suck in acro but managed to keep it alive while playing around :slightly_smiling_face:
[2018-08-13 18:54:08]
ender :
On Pro it kills the gimbal quite fast, Spark can take a few flips :slightly_smiling_face:
(Actually no idea HOW bad it is for Spark gimbal, VERY bad for Pro Gimbal)
[2018-08-13 18:55:07]
aciid :
bah manual mode on mavic,childs play! i only wrecked my gimbal through 3 backflips
[2018-08-13 18:55:19]
ender :
see :slightly_smiling_face:
[2018-08-13 18:55:28]
aciid :
seriously don't try it
[2018-08-13 18:55:38]
ender :
Did you hear how much the Spark Gimbal can take ? I did 2 flips with spark and then i ended it.
[2018-08-13 18:55:39]
aciid :
that's what FPV is for
[2018-08-13 18:55:48]
aciid :
oh thats sensitive
[2018-08-13 18:56:12]
ender :
no, it was alive, i ended doing that :slightly_smiling_face:
[2018-08-13 18:56:29]
ender :
maybe one should simply leave the gimbal lock on…
[2018-08-13 18:56:41]
ender :
but as you said, its Bullshit anyways.
[2018-08-13 18:56:54]
ender :
Just wanted to brag about having flown a DJI in acro :slightly_smiling_face:
[2018-08-13 18:58:31]
ender :
@aciid: i would love to play in IDA a bit, did you identify which binary takes commands from the App and processes it (such as “set country code to XX”) ?
[2018-08-13 18:58:53]
ender :
on the mpp
[2018-08-13 18:59:42]
ender :
that binary must then do the iw set reg locally and pass it to the anafi as well..
[2018-08-13 19:00:06]
aciid :
I don't remember anymore I didn't take notes precautiosly much. theres probably some log files in MPP that will tell you the proces name at first and then what it logged and search for USB related stuff and youll find the manager
[2018-08-13 19:00:25]
aciid :
but yeah the binary could be a fast way, I just haven't done anafi things in a while, since FPV is my new
[2018-08-13 19:00:28]
aciid :
hobby I dunno
[2018-08-13 19:00:33]
aciid :
I have too many drones now
[2018-08-13 19:00:33]
aciid :
help
[2018-08-13 19:01:15]
ender :
any reason why you did not do that ? or just lack of time ? As you are waiting for root on your phone you seem to want to concentrate on the app side, right ?
[2018-08-13 19:02:06]
aciid :
I have so bad adhd and manic personality that I do stuff but usually when I find something its notable but when it doesnt lead to anything ill go elsewhere and
[2018-08-13 19:02:09]
aciid :
its a vicious cycle
[2018-08-13 19:02:17]
aciid :
i juts never got around doing that I was doing something else
[2018-08-13 19:02:54]
ender :
and the wall you hit making you leave the Anafi was that you were unable to get shell acess to the Anafi AC ?
[2018-08-13 19:03:05]
aciid :
I think that set me down a bit
[2018-08-13 19:03:15]
ender :
Understandably.
[2018-08-13 19:03:22]
ender :
i just accepted it for now.
[2018-08-13 19:03:59]
ender :
BTW you did dump the complete ANAFI Filesystem, right ?
[2018-08-13 19:04:20]
ender :
That UBI thing ?! Did you ever upload the decodes Filesystem somewhere ?!
[2018-08-13 19:04:45]
aciid :
AC filesystem?
[2018-08-13 19:04:48]
ender :
There are some ideas i like to follow when i got the time but i need to know the Anafi side of things
[2018-08-13 19:04:51]
ender :
yes AC FS
[2018-08-13 19:05:01]
aciid :
yeah thats been passed around too i can link it
[2018-08-13 19:05:07]
ender :
MPP is known thx to your ADB finding
[2018-08-13 19:05:22]
aciid :
wew
[2018-08-13 19:05:26]
ender :
i thoight so but either i stored it at the wrong place or …
[2018-08-13 19:05:42]
ender :
If you still got AC FS i’d be thankful.
[2018-08-13 19:06:12]
aciid :
<https://www.dropbox.com/s/83ojmy83ncwhknv/upiex.zip?dl=1>
[2018-08-13 19:06:36]
ender :
thx man !
[2018-08-13 19:07:43]
ender :
guess what, found the original files while downloading, ARGH sorry :slightly_smiling_face:
[2018-08-13 19:11:30]
ender :
yep, in the Anafi “control” binary there is…. “arsdk_cmd_desc_Wifi_Country”
[2018-08-13 19:16:37]
ender :
uhh thats better i guess: “arsdk_cmd_dec_Wifi_Set_country”
[2018-08-13 19:22:37]
ender :
i guess mppd handles the dirty work :slightly_smiling_face:
[2018-08-13 19:22:48]
ender :
on the MPP
[2018-08-13 19:25:52]
aciid :
tired of always downloading office and ida and shti ill start to store them on my dropbox now
[2018-08-13 19:40:55]
ender :
Funny, MPP CC default is in “/etc/libshsettings/wifi.cfg” if i set it to “US” and reboot the MPP (w/o Anafi) it will boot up to US if i edited above file to US
[2018-08-13 19:41:32]
ender :
but as soon as anfai gets connected its set to DE. This is found in “/data/lib/libshsettings/wifi.cfg”.
[2018-08-13 19:42:03]
ender :
If i change that to US and make it immutable it is still set to DE whan Anafi starts and i can see a wifi.cfg.tmp file :slightly_smiling_face:
[2018-08-13 19:42:56]
ender :
due to the chattr +i /data/lib/libshsettings/wifi.cfg the MPP will start again in US when rebooted w/o Anafi…
[2018-08-13 19:46:50]
mail451 :
"i guess mppd handles the dirty work :slightly_smiling_face:" knew it, the App just sets the mph/kph etc..
[2018-08-13 19:47:33]
mr.vibez :
I'm still convinced the app sends a message to the mppd
[2018-08-13 19:48:14]
mr.vibez :
via controller ap code
[2018-08-13 19:49:48]
ender :
yes of course it does Lee
[2018-08-13 19:50:07]
ender :
MPP can get CC from Anafi but both will accept CC from App
[2018-08-13 19:50:29]
ender :
and thats probably the command: “arsdk_cmd_dec_Wifi_Set_country”
[2018-08-13 19:52:47]
mr.vibez :
public boolean setCountry(@NonNull String code) {
Ardrone3WifiAccessPoint.this.sendCommand(Settings.encodeCountry(code));
return true;
}
[2018-08-13 19:53:04]
mr.vibez :
something like that looks like it could be responsible
[2018-08-13 19:53:17]
mr.vibez :
in Ardrone3WifiAccessPoint
[2018-08-13 19:55:42]
ender :
yes yes
[2018-08-13 19:55:59]
ender :
whats the path of that ?
[2018-08-13 19:57:03]
mr.vibez :
smali_classes2\com\parrot\drone\groundsdk\arsdkengine\peripheral\ardrone3
[2018-08-13 19:58:19]
mr.vibez :
[2018-08-13 19:58:52]
ender :
lookis good :slightly_smiling_face:
[2018-08-13 20:00:16]
mr.vibez :
Might do some logging later, not sure if arsdkengine & ardrone3 are actually used
[2018-08-13 20:00:42]
ender :
where did you find the SUPPORTED_COUNTRY_CODES
[2018-08-13 20:00:53]
ender :
might trim that down a bit :slightly_smiling_face:
[2018-08-13 20:01:16]
mr.vibez :
in Ardrone3WifiAccessPoint
[2018-08-13 20:01:27]
ender :
kay !
[2018-08-13 20:01:41]
mr.vibez :
If that did work, not sure how to test if it's actually worked though
[2018-08-13 20:01:57]
mr.vibez :
I doubt any changes there are reflected in the app
[2018-08-13 20:02:07]
mr.vibez :
although I guess we could trace the calls backwards
[2018-08-13 20:13:27]
ender :
will try to shorten the array to one element “US” and also the setcountry and oncountrychanged above. But then back to real work :disappointed:
[2018-08-13 20:15:25]
mail451 :
I thought ardrone3 was not used
[2018-08-13 20:16:39]
ender :
i have no friggin idea, what i do know is that location utils are used but not affecting WiFi region
[2018-08-13 20:16:58]
ender :
how do we know ardrone3 are not used ?
[2018-08-13 20:17:09]
ender :
(so i do not needless try patching it)
[2018-08-13 20:18:02]
aciid :
theres SDK files in /usr in AC
[2018-08-13 20:18:17]
aciid :
I think AR is used because its referd in ios and android
[2018-08-13 20:19:58]
mail451 :
ok
[2018-08-13 20:20:10]
mr.vibez :
I'll log it later and see if it is called
[2018-08-13 20:29:35]
ender :
it might just have worked…
[2018-08-13 20:30:42]
ender :
argh or not
[2018-08-13 20:32:10]
ender :
nope, sry
[2018-08-13 20:32:16]
ender :
dB spiked
[2018-08-13 20:32:21]
ender :
but was coincidence i guess
[2018-08-13 20:32:31]
ender :
next try
[2018-08-13 20:48:31]
mail451 :
might be worth a try but tracking how CountryDetector methods are used might give us a clue
[2018-08-13 20:54:36]
ender :
i put my pennies on reverse geocoder and THAT is used in the methods above…
[2018-08-13 20:55:28]
ender :
but i lost quite a lot of pennies by now tbh :slightly_smiling_face:
[2018-08-13 20:56:14]
ender :
because of the auto-tx-power thing its really not good to use a wifiscanner to prove FCC.
[2018-08-13 20:56:25]
ender :
But looking in the MPP gives a honest result.
[2018-08-13 20:56:58]
ender :
if i use fake gps to <anycountry> mpp will say <anycountry> and iwconfig shows the dB max.
[2018-08-13 20:59:01]
mail451 :
ardrone3WifiAccessPoint definitively looks interesting
[2018-08-13 20:59:08]
mail451 :
[2018-08-13 20:59:32]
ender :
i already patched quite some places there, FAIL right now. I again have set my hopes too high i fear
[2018-08-13 20:59:36]
mail451 :
So if mCountryCode is the US (or CA or IL) it sets bool1=false
[2018-08-13 20:59:44]
ender :
yes yes konrad, Lee & i am there…
[2018-08-13 21:00:19]
mail451 :
On spark the remote (via USB) obeys FCC hack
[2018-08-13 21:01:37]
mr.vibez :
Ender have you tried logging in ardrone3WifiAccessPoint yet? Seems you are one step ahead of me tonight
[2018-08-13 21:03:20]
ender :
i should WORK, goddamn it. You got me :slightly_smiling_face:
[2018-08-13 21:03:28]
ender :
i wanted the fast success so i did not log.
[2018-08-13 21:03:52]
ender :
WIll do after next fail i promise but might have to bail out to at least work 2 more hours tonight :slightly_smiling_face:
[2018-08-13 21:04:56]
mr.vibez :
No worries, just didn't want to duplicate effort
[2018-08-13 21:05:18]
ender :
yep, will post my smali in any case !
[2018-08-13 21:06:53]
mr.vibez :
brain fart but which is the value being set? v0 or v1?
[2018-08-13 21:06:55]
mr.vibez :
invoke-interface {v1, v0}, Lcom/parrot/drone/groundsdk/internal/device/peripheral/wifi/WifiAccessPointCore$Backend;->setCountry(Ljava/lang/String;)Z
[2018-08-13 21:08:29]
ender :
i guess there should be a move reslut object as next line, THERES your candidate, right ?
[2018-08-13 21:08:57]
ender :
like “move-result v2”
[2018-08-13 21:09:12]
mr.vibez :
it's above it
[2018-08-13 21:09:28]
ender :
ag sorry invoke…
[2018-08-13 21:09:30]
ender :
wait
[2018-08-13 21:09:50]
ender :
first is set IMO
[2018-08-13 21:09:55]
ender :
v1
[2018-08-13 21:10:31]
mr.vibez :
yeah it'll me v1
[2018-08-13 21:10:44]
mr.vibez :
why are some p0/p1 etc?
[2018-08-13 21:10:58]
mr.vibez :
Is there something special about 'p' locals?
[2018-08-13 21:11:35]
ender :
i wont have a clue for the life of me :slightly_smiling_face:
[2018-08-13 21:11:40]
mr.vibez :
:slightly_smiling_face:
[2018-08-13 21:11:49]
ender :
i THINK p are globals
[2018-08-13 21:12:04]
ender :
v are method locals and there can be even more local locals :slightly_smiling_face:
[2018-08-13 21:12:35]
mr.vibez :
spot on
[2018-08-13 21:12:51]
mr.vibez :
in java they look like "this.whatever"
[2018-08-13 21:13:27]
ender :
oh if only i wont shudder every time i here “java” except in a coffee shop :stuck_out_tongue:
[2018-08-13 21:14:25]
mr.vibez :
What is your preferred language?
[2018-08-13 21:15:41]
ender :
c++
[2018-08-13 21:15:52]
ender :
look, this is what i did patch ATM:
[2018-08-13 21:16:02]
ender :
[2018-08-13 21:16:24]
ender :
and
[2018-08-13 21:16:32]
mr.vibez :
c++ gives me a headache.
[2018-08-13 21:16:33]
ender :
[2018-08-13 21:16:42]
mr.vibez :
Yeah that's what i'm trying to log
[2018-08-13 21:16:51]
ender :
(see the v1 = true and the always executed sendDetectedCountry)
[2018-08-13 21:17:15]
ender :
and the array of allowed cc is only “US”:
[2018-08-13 21:17:36]
ender :
[2018-08-13 21:17:45]
ender :
i may remove US from the locked list as well…
[2018-08-13 21:18:26]
ender :
and i could also patch onCountryChanged
[2018-08-13 21:18:32]
ender :
But then i am out of ideas
[2018-08-13 21:18:58]
mr.vibez :
my toolchain is so slow. Compile, install apk, connect adb, logcat, grep etc etc
[2018-08-13 21:20:48]
validat0r :
lol .. been there, done that ..
[2018-08-13 21:21:26]
validat0r :
fast computer and ssd helps
[2018-08-13 21:24:41]
ender :
@lee, that was BS, pX is just parameter X i guess…
[2018-08-13 21:25:09]
ender :
but p0 might be special. ARGHHH I AM TOO lAZY TO READ UP ON SMALI AND THAT WILL BITE MY SORRY *SS :wink:
[2018-08-13 21:25:20]
ender :
next try :wink:
[2018-08-13 21:30:23]
ender :
maybe the REAL code is in the OBB, would be horrible :slightly_smiling_face:
[2018-08-13 21:32:37]
ender :
no another fail, here is the java file an dthe smali if you guys want to look into it:
[2018-08-13 21:33:08]
ender :
attempted US patch in Ardrone3WifiAccessPoint smali
[2018-08-13 21:33:43]
ender :
And the JAVA is here:
[2018-08-13 21:34:54]
ender :
[2018-08-13 21:35:17]
ender :
So i patched the cc list to just US, i edited the blocked cc’s to XX YY ZZ
[2018-08-13 21:36:12]
ender :
i patched sendDetectedCountry, onConnected, onCountryChanged
[2018-08-13 21:36:29]
ender :
The JAVA looks idiotproof “US” biased now but it doesnt do a thang…
[2018-08-13 21:36:49]
mr.vibez :
it's not called :disappointed:
[2018-08-13 21:36:56]
mr.vibez :
nothing in logcat
[2018-08-13 21:37:00]
ender :
Do you think or know ?
[2018-08-13 21:37:12]
mr.vibez :
Based in my logging anyway
[2018-08-13 21:37:13]
ender :
naaahhhh
[2018-08-13 21:37:15]
ender :
:wink:
[2018-08-13 21:37:31]
mr.vibez :
Wouldn't mind a 2nd opinion
[2018-08-13 21:37:37]
ender :
i have no idea but could they technically have the real code in the OBB download ?
[2018-08-13 21:37:43]
ender :
is that allowed ?
[2018-08-13 21:37:52]
ender :
Would somehow bypass Android security IMO
[2018-08-13 21:37:57]
ender :
would be nasty
[2018-08-13 21:38:44]
ender :
In the good ol’ days i always hid critical code in dead sections of GIF images in the resources…
[2018-08-13 21:38:59]
ender :
(was a games coder once when dinosaurs ruled the world)
[2018-08-13 21:39:53]
ender :
BTW Fake GPS waórks flawless right now, if only i knew how i managed to be locked in until the next bigger (3km ??) position change…
[2018-08-13 21:40:23]
ender :
I set region with FakeGPS and then did “something” and it stayed there..
[2018-08-13 21:40:54]
mr.vibez :
Damn it man, remember!
[2018-08-13 21:41:08]
mr.vibez :
We'll pay for hypnotherapy :slightly_smiling_face:
[2018-08-13 21:41:57]
mail451 :
need help with logging in smali?
[2018-08-13 21:44:09]
mr.vibez :
i'm logging ardrone3WifiAccessPoint but can't see anything in logcat. Either my code is wrong or ardrone3WifiAccessPoint is not being used
[2018-08-13 21:44:44]
ender :
yes, pls doublecheck !
[2018-08-13 21:45:26]
ender :
but if you look at the java of my patched smali, what could go wrong ?!
[2018-08-13 21:47:32]
mail451 :
I can corroborate that
[2018-08-13 21:47:40]
mail451 :
Logging Ardrone3wifiaccesspoint
[2018-08-13 21:47:55]
mail451 :
stil... this is what i get
[2018-08-13 21:48:16]
mr.vibez :
That's a different class
[2018-08-13 21:49:28]
mail451 :
Yes, nothing logged from ardrone3wifiaccesspoint
[2018-08-13 21:49:37]
ender :
ouch :slightly_smiling_face:
[2018-08-13 21:50:59]
mr.vibez :
Ok, well as Sherlock would say "Once you eliminate the impossible, whatever remains, no matter how improbable, must be the truth."
[2018-08-13 21:51:11]
ender :
so you got an anafi by now konrad ?
[2018-08-13 21:51:50]
mail451 :
not yet, I already spent 450 EUR on the spark, gotta use it
[2018-08-13 21:52:14]
ender :
THEN we cannot be sure as that code is probably only accessed when connected.
[2018-08-13 21:52:21]
mail451 :
ah
[2018-08-13 21:52:22]
ender :
I am quite sure about that
[2018-08-13 21:52:38]
mr.vibez :
Ender please log it
[2018-08-13 21:52:48]
ender :
YESYESYES nasty man !
[2018-08-13 21:52:57]
mr.vibez :
:slightly_smiling_face:
[2018-08-13 21:53:16]
mr.vibez :
I want to move to the next target but want to make sure I haven't missed anything :stuck_out_tongue:
[2018-08-13 21:53:24]
mr.vibez :
CountrySettingCore looks interesting
[2018-08-13 21:53:42]
ender :
i say mppd on Controller is much more beefy :slightly_smiling_face:
[2018-08-13 21:54:11]
ender :
if we would sack and the secret EIRP table we could also not only go to FCC on the controlelr but maybe even more.
[2018-08-13 21:54:13]
ender :
BOOST
[2018-08-13 21:54:30]
mr.vibez :
boost would be very nice
[2018-08-13 21:56:55]
mail451 :
EIRP table?
[2018-08-13 21:57:08]
mail451 :
Also does the app use Google Maps or Baidu Maps?
[2018-08-13 21:57:23]
ender :
google maps
[2018-08-13 21:57:47]
ender :
EIRP: the iwconfig knows the gain of the Antenna and factors that in when setting output dB.
[2018-08-13 21:58:04]
ender :
okay, where to put that patched BuildConfig.smali ?
[2018-08-13 21:58:10]
ender :
to enable logging…
[2018-08-13 21:59:46]
ender :
i did not write that down, guys, please help me out ?!
[2018-08-13 22:00:09]
mail451 :
what?!?
[2018-08-13 22:00:21]
mr.vibez :
const-string v1, "Anafinessed-CountryDetector-getCountryCode()"
invoke-static {v1, v0}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I
[2018-08-13 22:00:39]
mr.vibez :
you need to increase the number of locals in the method
[2018-08-13 22:01:06]
mr.vibez :
v1 needs to be the next available v number in the method
[2018-08-13 22:01:16]
mr.vibez :
v0 is the param you want to log
[2018-08-13 22:01:26]
ender :
yes yes but i need to enable logging first, right ?
[2018-08-13 22:01:31]
mr.vibez :
no
[2018-08-13 22:01:47]
mr.vibez :
it uses default android logging
[2018-08-13 22:01:53]
ender :
but aciid once posted that patched buildconfig.smali ?!
[2018-08-13 22:01:58]
mr.vibez :
just grep logcat for your tag
[2018-08-13 22:02:10]
mr.vibez :
yes but it wasn't required in the end
[2018-08-13 22:02:17]
ender :
ahhh
[2018-08-13 22:02:19]
mail451 :
yes
[2018-08-13 22:02:24]
mail451 :
that's what I was surprised lol
[2018-08-13 22:02:33]
ender :
so wheres the log after all ?
[2018-08-13 22:02:42]
ender :
i thought in a freeflight6 folder on sd
[2018-08-13 22:02:47]
mr.vibez :
it only enabled logging that parrot had decided to log, obviously we want to log more than that :slightly_smiling_face:
[2018-08-13 22:02:55]
mail451 :
<https://bitbucket.org/aciid/anafinessed/commits/d1cc186ba32150d70066de6c4a0a795b81233c42>
[2018-08-13 22:02:58]
mail451 :
Use that for now
[2018-08-13 22:03:01]
mr.vibez :
which log? parrots or ours?
[2018-08-13 22:03:07]
mail451 :
Ardrone3WifiAccessPoint
[2018-08-13 22:03:17]
mail451 :
That's a mod of mine, logs several instances of CC
[2018-08-13 22:05:10]
ender :
yes but WHERE can i see that logged output ?
[2018-08-13 22:05:17]
mr.vibez :
logcat
[2018-08-13 22:05:28]
ender :
adb shell on phone?
[2018-08-13 22:05:29]
mr.vibez :
you need to grep for the tag
[2018-08-13 22:05:30]
mail451 :
getCountryCode() is used in Ardrone3WifiAccessPoint, WifiFeatureWifiAccessPoint, MapViewFactory
[2018-08-13 22:05:38]
mail451 :
adb logcat | grep Anafinessed
[2018-08-13 22:06:56]
mr.vibez :
@mail451 it's getting late here but if you want to roll me an apk with the logging I can try it on my device
[2018-08-13 22:07:04]
mail451 :
ok
[2018-08-13 22:07:33]
mail451 :
[2018-08-13 22:08:05]
mail451 :
@mr.vibez file uploaded
[2018-08-13 22:08:28]
mr.vibez :
downloading now
[2018-08-13 22:08:38]
ender :
:+1:
[2018-08-13 22:08:45]
ender :
trying same and then its time for bed
[2018-08-13 22:08:56]
mail451 :
same here its getting late
[2018-08-13 22:10:52]
ender :
lee its only 23:08 for you, come on :slightly_smiling_face:
[2018-08-13 22:12:43]
mr.vibez :
I'm a morning person :slightly_smiling_face:
[2018-08-13 22:15:52]
mr.vibez :
uh data synchronisation takes soo long
[2018-08-13 22:16:08]
mail451 :
yup
[2018-08-13 22:16:13]
mail451 :
something to think about
[2018-08-13 22:18:40]
ender :
the grep takes forever..
[2018-08-13 22:19:34]
ender :
wait, it will not return (the grep) so it did not find my log, right ?
[2018-08-13 22:20:01]
mr.vibez :
the apk crashed for me once connceted to the drone
[2018-08-13 22:20:34]
ender :
easy to mess up registers
[2018-08-13 22:22:33]
ender :
i only logged one place (onconnected) but can not see it in the logcat :disappointed:
[2018-08-13 22:23:31]
mail451 :
Ok that's interesting.
[2018-08-13 22:24:04]
mail451 :
Lee Smith can you get a logcat of it if its not much to ask? adb logcat | grep parrot
[2018-08-13 22:24:07]
mail451 :
before crashing
[2018-08-13 22:25:15]
ender :
lolz
[2018-08-13 22:25:22]
ender :
guys i am locked to the US again
[2018-08-13 22:25:35]
ender :
what i did was:
[2018-08-13 22:25:48]
ender :
i still had fake gps running on my phone.
[2018-08-13 22:25:57]
aciid :
sounds like a funny problem tbh :smile:
[2018-08-13 22:26:02]
ender :
then i connected to WIFI DIRECT to the anafi
[2018-08-13 22:26:27]
ender :
phone had fake gps, drone no gps (living room)
[2018-08-13 22:26:44]
ender :
i saw cc = US and realized i still had fake gps running
[2018-08-13 22:26:51]
ender :
switched off fakegps
[2018-08-13 22:26:54]
mr.vibez :
@mail451 08-13 23:19:25.192 6862 6862 E AndroidRuntime: FATAL EXCEPTION: main
08-13 23:19:25.192 6862 6862 E AndroidRuntime: Process: com.parrot.freeflight6, PID: 6862
08-13 23:19:25.192 6862 6862 E AndroidRuntime: java.lang.IncompatibleClassChangeError: Expected 'java.lang.String com.parrot.drone.groundsdk.internal.device.peripheral.wifi.CountrySettingCore.mCode' to be a static field rather than a instance field (declaration of
[2018-08-13 22:27:00]
ender :
phone aquired real cc
[2018-08-13 22:27:06]
ender :
still shown cc = US
[2018-08-13 22:27:18]
ender :
put drone outside to get gps, STILL cc = US+
[2018-08-13 22:27:43]
ender :
switched of phone wifi, switched on controller, attached phone (with gps lock in germany), STILL cc US
[2018-08-13 22:28:02]
ender :
i dont really get that.
[2018-08-13 22:28:13]
ender :
goooood night !
[2018-08-13 22:28:36]
mr.vibez :
night
[2018-08-13 22:29:50]
mr.vibez :
[2018-08-13 22:30:59]
mail451 :
Thanks will look at it tomorrow
[2018-08-13 22:34:52]
mr.vibez :
@ender did it show CC in app or MPP when locked?
[2018-08-13 22:34:59]
aciid :
one of the stock themes on xiaomi :smile:
[2018-08-13 22:35:45]
mr.vibez :
lol iphone wannbe
[2018-08-13 22:36:05]
aciid :
i have the X so I'm not even mad
[2018-08-13 22:36:35]
aciid :
its heavy as fuck
[2018-08-14 07:24:51]
ender :
@mr.vibez YES, until now the patched “show CC” in network prefs is consistent with “iw reg get” on the MPP
[2018-08-14 07:52:44]
mr.vibez :
So
[2018-08-14 07:53:09]
mr.vibez :
fake gps running on phone.
connect to WIFI on the anafi
switched off fakegps
[2018-08-14 07:53:18]
mr.vibez :
That's the steps?
[2018-08-14 08:33:30]
ender :
i am not sure, i think its a waste of time to exploit that glitch
[2018-08-14 08:34:02]
ender :
between wi connect to the anafi and switc off fakegps i switched off the anafi
[2018-08-14 08:34:24]
ender :
but as i said, i think its a dead end as its reset after a position change (did so this morning)
[2018-08-14 08:43:19]
mr.vibez :
Fair enough
[2018-08-14 09:14:42]
mail451 :
@mr.vibez Thanks for the bug report, I pushed a new patch.
[2018-08-14 10:16:34]
aciid :
trying google play switching country detection soon
[2018-08-14 10:16:47]
aciid :
need solid vpn fo that too
[2018-08-14 10:27:02]
ender :
windscribe ?
[2018-08-14 12:45:50]
fredz :
Seems many Anafis are crashing when in the air, according to FB posts. Parrot is aware of the problem and says it’ll soon release a new firmware, one FB post shows. Not sure if it’s true but fact is many are just falling down, straight.
[2018-08-14 13:03:28]
mail451 :
I've heard the same, it seems like it's a problem with powering off when landing.
[2018-08-14 13:22:30]
aciid :
battery's power circuitry is stupid as hell. why don't they have implemented debouncing clicks for example to the power button itself. it goes off with a twitch or anything that could cause the circuitry to close
[2018-08-14 13:36:29]
mr.vibez :
Yep very worrying
[2018-08-14 14:02:46]
ender :
i am not sure if this isnt hysteria, in “our” Forum i get the impression that very few cases make a lot of noise but of course i cannot be sure..
[2018-08-14 14:23:52]
fredz :
What forum?
[2018-08-14 14:24:47]
aciid :
parrotpilots probably
[2018-08-14 14:33:26]
mr.vibez :
Question about the repo, what are we expected to do with the diff files? How are you applying them to the .smali files?
[2018-08-14 14:39:14]
mr.vibez :
The paths in the patches seem to be absolute paths, does that matter? e.g. /home/osboxes/Desktop/MetricsServant.smali
[2018-08-14 14:47:28]
mail451 :
not if you pass -p0 which will take . as the absolute path
[2018-08-14 14:48:35]
mr.vibez :
:slightly_smiling_face:
[2018-08-14 21:28:25]
ender :
After my Waterloo patching the APK yesterday i am looking in the mppd with IDA. Surely interesting stuff, right now over my head but very interesting…
[2018-08-14 22:15:28]
ender :
@aciid: uhh can you recall where the mppd logs stuff ?
[2018-08-14 22:16:13]
ender :
i found a very interesting mppd function that SEEMS to receive a CC and to sent it to the Anafi AND to its own wifid…
[2018-08-14 22:16:19]
ender :
but i need to see the log…
[2018-08-14 22:18:35]
aciid :
I don't but I can check
[2018-08-14 22:18:43]
ender :
thats great !
[2018-08-14 22:18:44]
aciid :
i have mpp somwhere here
[2018-08-14 22:18:48]
ender :
:slightly_smiling_face:
[2018-08-14 22:18:58]
ender :
you SHOULD :wink:
[2018-08-14 22:21:34]
aciid :
can't find a usb-c cable
[2018-08-14 22:21:37]
aciid :
still looking
[2018-08-14 22:24:50]
aciid :
place is a mess
[2018-08-14 22:25:35]
ender :
dont get me started :slightly_smiling_face:
[2018-08-14 22:26:02]
ender :
imagine your mess & two children roaming in your room from time to time and you got the picture :slightly_smiling_face:
[2018-08-14 22:28:24]
aciid :
funny thing is I have like 1 type-c
[2018-08-14 22:30:43]
ender :
btw the command you gave us “sprop persist.debuggable 1” sets a property, OK. How are properties stored ?
[2018-08-14 22:31:14]
aciid :
persist is one which it fallsback to if ro and rw are not set
[2018-08-14 22:31:24]
ender :
I found this”ro.factory.country_lock” and that sounds interesting
[2018-08-14 22:31:27]
aciid :
it was in boxinit scripts
[2018-08-14 22:31:32]
aciid :
oh
[2018-08-14 22:31:46]
aciid :
yeah propget gprop what ever it is should give you alist of variables
[2018-08-14 22:32:37]
ender :
like this: “propget gprop” ? doesnt work ?!
[2018-08-14 22:32:59]
ender :
well the log is probably more important right now :slightly_smiling_face: mppd is full of interesting stuff…
[2018-08-14 22:33:04]
aciid :
no
[2018-08-14 22:33:13]
ender :
?
[2018-08-14 22:33:15]
aciid :
i don'trembemrer how its typed
[2018-08-14 22:33:25]
aciid :
its gprop, getprop, propget, prop
[2018-08-14 22:33:26]
aciid :
something
[2018-08-14 22:33:30]
aciid :
that "gets the value"
[2018-08-14 22:33:32]
aciid :
or is it prop
[2018-08-14 22:33:37]
aciid :
or is it just sprop without value
[2018-08-14 22:33:43]
ender :
ah okay
[2018-08-14 22:34:23]
ender :
its gprop
[2018-08-14 22:34:56]
aciid :
shold give you a list
[2018-08-14 22:35:04]
aciid :
if you go without values and parameters
[2018-08-14 22:35:09]
aciid :
if i remember correctly
[2018-08-14 22:35:42]
ender :
yes it does.
[2018-08-14 22:36:26]
ender :
and ro. properties are read only, right ?!
[2018-08-14 22:37:26]
ender :
ro properties i can find are stuff like MAC, serial Number…
[2018-08-14 22:43:31]
ender :
hmm, in /etc/build.prop is only a small subset of these
[2018-08-14 22:53:55]
ender :
Well, adding “ro.factory.country_lock=US” did not do the job :slightly_smiling_face:
[2018-08-14 22:54:09]
ender :
gprop shows it after next reboot but MPP & anafi are not impressed :slightly_smiling_face:
[2018-08-14 22:54:39]
ender :
well, if you realize where the log is stored i would be thankful !!!!
[2018-08-14 22:56:29]
ender :
ohhh that property should just contain a char…
[2018-08-14 22:56:39]
ender :
[2018-08-14 22:56:46]
ender :
v15
[2018-08-14 23:01:25]
ender :
It IS interesting, later you find stuff examining the stored locked cc saying “Wifi-ap locked to country %s”" and stuff…
[2018-08-14 23:01:35]
ender :
I need the log… hmmm
[2018-08-14 23:05:21]
ender :
in dmesg i find stuff like:
[2018-08-14 23:05:22]
ender :
[ 12.351919] cfg80211: Calling CRDA for country: US
[ 12.353018] cfg80211: Regulatory domain changed to country: US
[ 12.355923] cfg80211: DFS Master region: FCC
[2018-08-14 23:06:16]
ender :
hmm no crda binary, damn $%&§*
[2018-08-14 23:08:54]
ender :
well good night, so few time…
[2018-08-14 23:13:11]
aciid :
i'll try to find tha tcabling tommorrow
[2018-08-15 06:42:31]
mainframe :
hi guys! Do I understand correctly that currently there is no known and working access method to Anafi?
[2018-08-15 06:55:30]
aciid :
no sure way into, but thers a few vectors like uploading services
[2018-08-15 06:55:59]
aciid :
buffer -> stack -> rop
[2018-08-15 07:14:59]
mainframe :
does anybody know what webserver they use on anafi? web application seems to be based on quasar/vuejs frameworks.
[2018-08-15 07:16:30]
mainframe :
any success on unpacking firmware binaries?
[2018-08-15 07:33:48]
ender :
hi @andres:
[2018-08-15 07:34:19]
ender :
the ufi filesystem of the ANAFI was unpacked by aciid, so we have that, i can upload the zip
[2018-08-15 07:34:37]
ender :
We have root access to the Controller due to a glitch they did NOT disable ADB.
[2018-08-15 07:35:27]
ender :
just connect the Controller (calling itself MPP or mpp3) to an OSX or Linx machine and it will fire up Network via USB RNDIS. Once that happened you can do:
[2018-08-15 07:35:28]
ender :
adb connect 192.168.53.1:9050
[2018-08-15 07:35:36]
ender :
and voila you are root on the MPP :slightly_smiling_face:
[2018-08-15 07:36:02]
ender :
so technically we have all files on the Anafi decoded and root access to the mpp
[2018-08-15 07:36:27]
ender :
I am just goblin assistant to aciid but as long as he is away i can provide what i know :slightly_smiling_face:
[2018-08-15 07:37:01]
ender :
Meanwhile i try to use my **very** limited knowledge of IDA to play around with the (seemingly) centralo demon running on the MPP : mppd
[2018-08-15 07:38:08]
ender :
Main goals right now: Get permanent FCC power for us poor sobs living in CE countries and getting root access or remote access to the Anafi to change the RTH Altitude (It is set in a reference.cfg file amongst other interesting stuff but we cannot get there).
[2018-08-15 07:39:05]
ender :
Firmware wise aciid managed to flash FW to the MPP (using an older FW file but its easy to fake that its newer). He was unable to do so for the Anafi, lets say he reached 75% there but security kicked in…
[2018-08-15 07:41:33]
mainframe :
yeah controller adb access I had already figured out - not much different than with SC2 really. Ufi fs zip would be helpful :slightly_smiling_face:
[2018-08-15 07:43:34]
mainframe :
are Anafi firmware images signed - ie not possible to boot customized firmware images?
[2018-08-15 07:44:02]
ender :
that seems to be the case but aciid knows more details when he is back here…
[2018-08-15 07:44:14]
ender :
Wait i’ll upload the Anafi FS !
[2018-08-15 07:45:48]
ender :
P.S. Great that you followed through our conversation on PP :slightly_smiling_face:
[2018-08-15 07:46:05]
ender :
@andres: heres the beef: <https://we.tl/fabE6185WI>
[2018-08-15 08:06:55]
mainframe :
thnx
[2018-08-15 08:07:54]
ender :
DO some magic on it mainframe :slightly_smiling_face:
[2018-08-15 08:10:47]
mainframe :
well we will see what can be digged up there…
[2018-08-15 08:11:53]
ender :
:wink:
[2018-08-15 08:12:21]
ender :
ask aciid about the current anafi FW upload status, but it was kind of a wall he was hitting…
[2018-08-15 08:18:06]
ender :
@andres: are you experienced in IDA ?!
[2018-08-15 08:18:36]
mainframe :
whats IDA? :slightly_smiling_face:
[2018-08-15 08:18:47]
ender :
shit :slightly_smiling_face:
[2018-08-15 08:18:56]
ender :
binary reverse engineering tool.
[2018-08-15 08:19:14]
mainframe :
no havent done any binary rev eng
[2018-08-15 08:19:15]
ender :
i only got the white belt (== know how to SPELL I-D-A)
[2018-08-15 08:19:23]
ender :
need one with black belt :slightly_smiling_face:
[2018-08-15 08:20:24]
mail451 :
Been ages since I've used IDA lol
[2018-08-15 08:20:26]
mail451 :
Hero 3 days
[2018-08-15 08:25:54]
ender :
:wink:
[2018-08-15 08:26:55]
ender :
a bird yesterday dropped IDA 7 so lets see if the decompile works better as my ARM assembly knowledge is really poor. Last time i was “versed” in Assembly was on the Motorola 68k and its DSP cousins :slightly_smiling_face:
[2018-08-15 08:27:11]
ender :
(When dinosaurs roamed the woods)
[2018-08-15 09:39:26]
mail451 :
[2018-08-15 09:48:57]
aciid :
@shell did you find your way here
[2018-08-15 09:49:36]
aciid :
called out a parrot community developer
[2018-08-15 09:49:44]
ender :
@mail451 yeah theres also wifid-cli
[2018-08-15 11:07:30]
mainframe :
Anafi power button seems to have the following events:
press
short release
long press
long release
[2018-08-15 11:08:12]
mainframe :
not sure yet what all of these do thou. 15 sec longpress was resetting battery stats - thats documented.
[2018-08-15 11:12:13]
mainframe :
mhm it seems that button only supports power-on, power-off, factory-reset
[2018-08-15 11:15:02]
mainframe :
no adb/telnet activation support :stuck_out_tongue:
[2018-08-15 11:17:28]
mainframe :
usr/bin/debugauth
Usage: %s <directory>
<directory>: directory to scan for certificates
[2018-08-15 11:30:04]
ender :
yep, i searched for that at first in memory of Bebop 1 & 2 :wink:
[2018-08-15 11:30:51]
ender :
presumably a file can be put on SDCard with the right key (tuned to Serial Number) to enable debug mode aka ADB, right ?
[2018-08-15 11:33:30]
mainframe :
# start console only if debug is enabled
on property:rw.debuggable=1
start console
[2018-08-15 11:33:53]
mainframe :
from etc/boxinit.console.rc
[2018-08-15 11:39:55]
ender :
thats our grief
[2018-08-15 11:40:07]
mainframe :
and from etc/boxinit.dragonfly.services.rc
on property:user.storage.status=ready:rw.debuggable=0
start upd-chk-strg
[2018-08-15 11:40:28]
ender :
i wonder if MPP has the right to set properties on the Anafi
[2018-08-15 11:40:54]
mainframe :
I dont think so
[2018-08-15 11:40:59]
mail451 :
Anafi has ambarellla chip right?
[2018-08-15 11:41:19]
ender :
we also tried atatching a keyboard to anafi to blindly type stuff (like “reboot”) as there is a HID driver.
[2018-08-15 11:41:25]
ender :
Yes
[2018-08-15 11:41:32]
ender :
Ambarella H22 if i recall correctly
[2018-08-15 11:41:37]
mail451 :
Sweet
[2018-08-15 11:41:57]
mail451 :
I know a thing or two about amba reverse engineering
[2018-08-15 11:42:07]
ender :
we also tried attaching 5 different USB2Ethernet Adapters and hoped Network access
[2018-08-15 11:42:15]
ender :
that is GOOD konrad !
[2018-08-15 11:42:34]
ender :
I guess the guys from dashcam hacking also know a lot (those improving action cams)
[2018-08-15 11:42:40]
mail451 :
<https://github.com/konradit/autoexechack>
[2018-08-15 11:42:48]
mail451 :
some ambarella stuff I did a few years ago.
[2018-08-15 11:43:15]
mail451 :
Check if the drone executes /MISC/tcp_tuner.sh or /autoexec.ash
[2018-08-15 11:43:51]
ender :
could you provide files that would do something we recognize ?! (liek reboot or stuff) ?
[2018-08-15 11:44:23]
ender :
one should find thise filenames “autoexec.ash” when grepping in Anafi Filesystem, right ? we have that decoded thx to aciid.
[2018-08-15 11:44:23]
mail451 :
busybox is usually available on the Amba iTRON side
[2018-08-15 11:44:29]
mail451 :
yes
[2018-08-15 11:44:43]
mail451 :
is there a H22 firmware unpacker?
[2018-08-15 11:44:50]
ender :
it was UFI
[2018-08-15 11:44:54]
ender :
afaik
[2018-08-15 11:44:57]
ender :
aciid is da man
[2018-08-15 11:45:16]
ender :
konrad, look here: Anafi decoded FS:
[2018-08-15 11:45:18]
ender :
<https://we.tl/fabE6185WI>
[2018-08-15 11:46:02]
mail451 :
Yes i downloaded that
[2018-08-15 11:46:32]
mail451 :
that's the linux side, iTRON side is /tmp/ points mounted to A:\, D:\ etc...
[2018-08-15 11:46:39]
mail451 :
usually cam stuff happens there
[2018-08-15 11:47:16]
mainframe :
find . -name “auto*”
./etc/debug.d/autopilot.conf
./etc/libshsettings/autopilot.cfg
./usr/bin/autopilot
[2018-08-15 11:47:20]
mainframe :
no autoexec
[2018-08-15 11:47:24]
ender :
ah okay, i wonder if it was in the FW update file, possibly only in there if things change on the cam side, right ?
[2018-08-15 11:47:36]
mainframe :
find . -name “tcp*”
./usr/sbin/tcpdump
[2018-08-15 11:47:38]
ender :
yep my grep came out empty as well :slightly_smiling_face:
[2018-08-15 11:48:18]
ender :
konrad: personal question: as you dont have anafi, why do you care ? Hacking fun or planning to get one or learning or ?!? Just beeing curious :slightly_smiling_face:
[2018-08-15 11:48:40]
ender :
(and tell me if i am too curious)
[2018-08-15 11:49:02]
mail451 :
Yes just for fun, I haven't hacked Amba in a while, I know my Hero5 has Amba chipset and I am currently working on getting full telnet + root + wifi upload access.
[2018-08-15 11:49:24]
ender :
would be cool to get higher res / more FPS then intended out of the Anafi :slightly_smiling_face:
[2018-08-15 11:49:28]
mail451 :
Lots of people have asked me about Hero5 hacks so I finally found time to do it
[2018-08-15 11:49:37]
ender :
Although Horizontal EIS complicates things
[2018-08-15 11:49:56]
mail451 :
It depends on resolution table, bitrate etc... defined in firmware
[2018-08-15 11:50:07]
ender :
i know, did SOME small work on my Yi
[2018-08-15 11:50:09]
mail451 :
GoPro limited some stuff Hero4+ forwards, Xiaomi did not
[2018-08-15 11:50:15]
mail451 :
Yes I have yi as well
[2018-08-15 11:50:24]
mail451 :
y1, yi4k, yi4k+, yi lite
[2018-08-15 11:50:39]
mainframe :
[2018-08-15 11:51:06]
mail451 :
In fact the reason why I joined this is through hostile who I met doing some Ambarella work on DJI vision camera
[2018-08-15 11:51:08]
mainframe :
havent seen yet how this property is initialized
[2018-08-15 11:51:18]
ender :
ahhh
[2018-08-15 11:52:44]
ender :
BTW @aciid, here is my “turn Android phone into night vision gogles” rig :slightly_smiling_face: Either directly plug in the port or attach to Cardboard and use split FPV UVCCam Viewer :slightly_smiling_face: Freaky but fun…
[2018-08-15 11:52:53]
ender :
[2018-08-15 11:53:22]
mail451 :
where is the Anafi firmware ?
[2018-08-15 11:53:42]
ender :
usually is in OBB in Freeflight6 or do i get you wrong ?
[2018-08-15 11:54:11]
ender :
P.S. planning on writing a little Android UVC reading app that does stacking of images to get more Lux out of it…
[2018-08-15 11:54:30]
mail451 :
Oh ok, I assume Parrot does OTA updates (as in small batches and not the full firmware)
[2018-08-15 11:54:39]
mail451 :
[gopro.com/update](http://gopro.com/update)
[2018-08-15 11:54:54]
mail451 :
gopro just gives the whole firmware so it's easy to rollback if needed
[2018-08-15 11:54:56]
ender :
i have not looked closely at the different FW oackages but structure is based on Bebop FW
[2018-08-15 11:55:21]
ender :
and from that i would think its always the full FW, MAYBE EXCEPT Ambarella.
[2018-08-15 11:55:36]
ender :
Please ask aciid if he has any leads on that, i do not know.
[2018-08-15 11:55:44]
mail451 :
ok. what is he up to?
[2018-08-15 11:55:59]
ender :
planning to rule the world, like always :slightly_smiling_face:
[2018-08-15 11:56:03]
mail451 :
haha
[2018-08-15 11:56:16]
ender :
and probably looking here in a few minutes and roffling :slightly_smiling_face:
[2018-08-15 11:57:17]
ender :
argh, as sad as it is, i need to be afk for a while to do real world work, sorry, i’ll be back later if i can be of help !
[2018-08-15 11:58:46]
mainframe :
Im wondering if the rw.debuggable could be simply boot option read from SD card?
[2018-08-15 12:00:03]
mail451 :
I think it might be easier to get a telnet/usb rs232 to the Amba side and then figure out a way to talk to the Linux side
[2018-08-15 12:00:24]
mail451 :
Hmm Anafi runs Andorid?
[2018-08-15 12:02:31]
mainframe :
Android kernel but custom linux base to my knowledge
[2018-08-15 12:03:40]
mail451 :
Ahh
[2018-08-15 12:31:44]
mainframe :
less etc/default.prop
service.adb.tcp.port=9050
ro.debuggable=0
ro.gps.no_firmware=1
persist.ftr.legs=0
persist.user.usb_mode=mass_storage
[2018-08-15 12:33:42]
mail451 :
hmm
[2018-08-15 12:34:20]
mail451 :
@ender does this work on Android? <https://www.youtube.com/watch?v=afAalkHOb0s>
[2018-08-15 12:35:10]
ender :
It did not work for me, FakeGPS works for me but of course sucks because of wrong distance etc. PP
[2018-08-15 12:36:12]
ender :
sometimes anafi gets stuck on one countrycode… @andres: i patched a layout file in the APK so we can see the CountryCode it currently uses.
[2018-08-15 12:36:44]
ender :
So we can see if FakeGPS (or method above) works. To measure TxPower is a bit hard as there is also automatic power leveling active.
[2018-08-15 12:37:06]
ender :
and ADB to controller with iw reg get or iwconfig also shows the truth.
[2018-08-15 12:37:28]
ender :
But until now IF modded apk shows “USA” then FCC is activated…
[2018-08-15 12:38:09]
mainframe :
has anybody seen some hints what file should be present on SD card for setting properties on boot - like rw.debuggable?
[2018-08-15 12:38:26]
ender :
aciid followed that lead, may ask him please.
[2018-08-15 12:38:33]
ender :
but hes at work atm
[2018-08-15 12:38:53]
mainframe :
@aciid? :slightly_smiling_face:
[2018-08-15 12:38:55]
mail451 :
Found a camera online that uses H22 chipset, might get us a better idea...
[2018-08-15 12:38:59]
ender :
But he was pretty sure file has to be signed individually on Serial Number
[2018-08-15 12:39:13]
ender :
hes at work as i said :slightly_smiling_face:
[2018-08-15 12:39:24]
mainframe :
later :slightly_smiling_face:
[2018-08-15 12:39:30]
mail451 :
maybe I should buy the camera
[2018-08-15 12:39:36]
mail451 :
yeah I should be working as well lmao
[2018-08-15 12:39:47]
ender :
dito :wink:
[2018-08-15 12:40:01]
mainframe :
Im not so sure this file has to be signed - as I havent seen any hints at all…
[2018-08-15 12:40:47]
mainframe :
first it would be great to understand what file it has to be :slightly_smiling_face:
[2018-08-15 12:41:20]
mainframe :
perhaps its similar to default.prop
[2018-08-15 12:51:01]
ender :
BTW i have ZERO idea of that stuff but as the Anafi offers a webpage and FTP, maybe there are vulnerabilities there to execute something nice ?! (like set property) ?!
[2018-08-15 12:51:35]
mail451 :
maybe, what kind of website? Is t powered by cherokee?
[2018-08-15 12:52:03]
mail451 :
GoPro has /gp/gpExec?p= which executes command inside /usr/lib/share/gopro, maybe there's something similar for anafi
[2018-08-15 12:53:17]
ender :
i have no idea :slightly_smiling_face: You got the Filesystem, its all there :slightly_smiling_face:
[2018-08-15 12:53:39]
mainframe :
webserver seems to be custom binary - nothing standard
[2018-08-15 12:54:06]
ender :
i found some netscape traces, maybe based on that ?!
[2018-08-15 12:54:22]
mainframe :
web app is quasar/vue.js javascript stuff
[2018-08-15 12:55:04]
mainframe :
what we need is a write access to /etc/default.prop probably
[2018-08-15 12:55:22]
mainframe :
or boxinit.d/50-adb
[2018-08-15 12:56:42]
mail451 :
if the firmware can be repackaged then you can modify /etc/default.prop and flash it back
[2018-08-15 12:56:56]
mail451 :
how did aciid get the filesystem dump
[2018-08-15 13:00:11]
ender :
out of FF6 OBB
[2018-08-15 13:00:20]
ender :
and then unpacked UFI afair
[2018-08-15 13:01:12]
ender :
i have update files here for anafi / mpp older versions but…) anafi = 50 MByte
[2018-08-15 13:01:26]
ender :
e.g. anafi_update_1.0.0.tgz
[2018-08-15 13:02:53]
ender :
[2018-08-15 13:03:00]
ender :
structure of such a tgz
[2018-08-15 13:04:41]
aciid :
MPP FS can be repacked and flashed. but AC has signed FW, so it cannot be done the same way
[2018-08-15 13:05:18]
aciid :
FS is in update.bin, can be identiefd with "binwalk" applicaiton,
once you find the entrypoint for the UBIFS you can carve it out with dd
[2018-08-15 13:06:44]
aciid :
<https://gist.githubusercontent.com/Aciid/1d3b1479994cfd1e22f65cda9fb577a7/raw/7670b4e4608826b0f811368e8d4218ee9a0c4bae/readme.md>
[2018-08-15 13:08:21]
mail451 :
Oh cool
[2018-08-15 13:08:47]
mainframe :
@aciid - did you unpack anafi fw same way?
[2018-08-15 13:08:53]
aciid :
yes
[2018-08-15 13:09:04]
aciid :
check pinned messages on athis channel
[2018-08-15 13:09:54]
mail451 :
Its 2014 all over again
[2018-08-15 13:11:30]
mail451 :
there's ituner.txt and cal.txt hmm
[2018-08-15 13:13:50]
mail451 :
doubt autoexec.ash will work
[2018-08-15 13:13:52]
mail451 :
Usage: t parrot hwtest usb mode [val]
[2018-08-15 13:14:02]
mail451 :
maybe that helps set at least usbrs232 shell
[2018-08-15 13:15:29]
mail451 :
writing to Linux (non Amba side) should work: rpc clnt exec1 [command] (execute command in Linux and return the result)
[2018-08-15 13:38:54]
ender :
wait, can you spell that out for a dummie ?! Are you saying that this could patch files in the upgrade process ?
[2018-08-15 13:46:49]
mail451 :
no. This is similar to <https://github.com/konradit/autoexechack>
[2018-08-15 13:48:42]
mail451 :
Basically allows to run commands from Amba side every time the drone boots. Like on the Yi cameras
[2018-08-15 13:49:37]
ender :
okay, but we dont know the amba side of the anafi, right ? Or do you suspect it will still look at the autoexec.ash ?!
[2018-08-15 13:49:50]
ender :
(if it can “see” the sdcard at all)
[2018-08-15 13:50:06]
ender :
hmm, well it does pour vids & pics on it so it probably can “see” it…
[2018-08-15 13:52:10]
mail451 :
I don't know, try writing
[2018-08-15 13:52:27]
mail451 :
to autoexec.ash in sd card
[2018-08-15 13:55:11]
ender :
sec
[2018-08-15 13:55:42]
ender :
where doyou think “c:” resides ?! SD card ?!
[2018-08-15 13:56:02]
mail451 :
yes, just like GoPro cameras (educated guess)
[2018-08-15 13:56:16]
ender :
ambarella…
[2018-08-15 13:56:18]
mail451 :
<https://github.com/konradit/gopro-firmware>
[2018-08-15 14:03:03]
ender :
nope.
[2018-08-15 14:03:12]
ender :
second try was this to be sure:
[2018-08-15 14:03:14]
ender :
help > c:\helloc.txt
help > d:\hellod.txt
help > e:\helloe.txt
help > f:\hellof.txt
help > g:\hellog.txt
help > x:\hellox.txt
help > y:\helloy.txt
help > z:\helloz.txt
help > hello.txt
[2018-08-15 14:04:00]
ender :
so if we would have the amba side of things we would know if there is such a hook, right ?
[2018-08-15 14:04:10]
mail451 :
lmao, it's C:\, c:\, e:\, d:\
[2018-08-15 14:04:12]
mail451 :
yes
[2018-08-15 14:05:06]
ender :
so you say i should try uppercase too ?
[2018-08-15 14:05:27]
mail451 :
yes
[2018-08-15 14:05:30]
ender :
brb
[2018-08-15 14:06:07]
ender :
any other filenames while i am at it ? (in root dir i presume) ?
[2018-08-15 14:06:35]
mail451 :
make sure autoexec.ash has LF line endings (not Windows)
[2018-08-15 14:06:59]
mail451 :
autoexec.ash just for now, cal.txt does not seem to do anything in this fw release
[2018-08-15 14:08:26]
ender :
yes unix style, did so.
[2018-08-15 14:08:29]
ender :
next try is:
[2018-08-15 14:08:38]
ender :
help > a:\helloa.txt
help > b:\hellob.txt
help > c:\helloc.txt
help > d:\hellod.txt
help > e:\helloe.txt
help > f:\hellof.txt
help > g:\hellog.txt
help > u:\hellou.txt
help > v:\hellov.txt
help > w:\hellow.txt
help > x:\hellox.txt
help > y:\helloy.txt
help > z:\helloz.txt
help > A:\helloA.txt
help > B:\helloDB.txt
help > C:\helloC.txt
help > D:\helloD.txt
help > E:\helloE.txt
help > F:\helloF.txt
help > G:\helloG.txt
help > U:\helloU.txt
help > V:\helloV.txt
help > W:\helloW.txt
help > X:\helloX.txt
help > Y:\helloY.txt
help > Z:\helloZ.txt
help > hello.txt
[2018-08-15 14:10:03]
ender :
nope :wink:
[2018-08-15 14:10:06]
ender :
was fun anyways
[2018-08-15 14:10:12]
mail451 :
hmmm
[2018-08-15 14:10:35]
mail451 :
well you guys sure do need that certificate then
[2018-08-15 15:59:13]
ender :
Does anyone here have a RPI handy and could dump me the “tcpdump” binary ?
RPI = original Raspi
[2018-08-15 15:59:21]
mail451 :
Yes
[2018-08-15 16:00:13]
ender :
oh that would be nice
[2018-08-15 16:00:41]
ender :
as the tcpdumpon the MPP is broken i would love to try the easy thing if RPI is compatible.
[2018-08-15 16:00:47]
mail451 :
wasn't installed, downloading now
[2018-08-15 16:00:48]
ender :
Surprisingly often it is…
[2018-08-15 16:00:51]
ender :
thx
[2018-08-15 16:01:05]
ender :
i was running RPI stuff on the spark as well…
[2018-08-15 16:02:40]
mail451 :
hope this helps :slightly_smiling_face:
[2018-08-15 16:03:28]
ender :
thx trying
[2018-08-15 16:04:36]
ender :
tcpdump: error while loading shared libraries: libcrypto.so.1.0.2
[2018-08-15 16:04:51]
ender :
got that as well ? :slightly_smiling_face:
[2018-08-15 16:04:57]
ender :
haha probably 200 more :slightly_smiling_face:
[2018-08-15 16:05:06]
ender :
static tcpdump would be nice :slightly_smiling_face:
[2018-08-15 16:08:57]
mail451 :
[2018-08-15 16:09:13]
mail451 :
Here is a static binary i found online: <https://github.com/andrew-d/static-binaries/blob/master/binaries/linux/arm/tcpdump>
[2018-08-15 16:09:26]
ender :
cool !
[2018-08-15 16:14:15]
mail451 :
libraries
[2018-08-15 16:15:35]
ender :
holy crap the static one works
[2018-08-15 16:15:57]
ender :
But i guess the stock one maybe too with a twist…
[2018-08-15 16:21:45]
ender :
the stock one works as well ?! @aciid, didnt it cause you trouble ?!
[2018-08-15 16:23:00]
ender :
tcpdump -i wlan0 > wlog.txt & results in a growing log file
[2018-08-15 16:25:40]
aciid :
oh
[2018-08-15 16:25:48]
aciid :
yeah if you run just without parameters it crashrs
[2018-08-15 16:25:53]
aciid :
use piping it wont crash it seems
[2018-08-15 16:26:59]
shell :
Finally made it over. Are we seriously locked out of ADB / telnet? I may be able to get the current SDK to work. Around mid 2017 Parrot disguised the Anafi as UNKNOWN_PRODUCT_5. I can find the anafi via discovery but none of the capabilities are mapped. Fortunately I know a bit about the build system and may be abke to generate the required configs for basic operations.
[2018-08-15 16:28:09]
ender :
muhaha and virtualhere also works parallel to ANAFI / MPP ;-)need to eat lunch
[2018-08-15 16:48:28]
ender :
btw @aciid: the static tcpdumo konrad found seems to be newer & mightier than the stock one. Not that i have any idea if that makes a difference.. Did you have a chance to look where the mpp log is ?!
[2018-08-15 16:48:47]
aciid :
have you checked strings tcpdump
[2018-08-15 16:49:13]
aciid :
that binary is made in somewhere where people wear propelhats with drink-straws
[2018-08-15 16:49:14]
ender :
what do you mean ?
[2018-08-15 16:49:20]
aciid :
that is no original tcpdump
[2018-08-15 16:49:31]
aciid :
which is used in parrot devices
[2018-08-15 16:49:41]
ender :
the static one ?!
[2018-08-15 16:49:49]
ender :
of course not
[2018-08-15 16:49:50]
aciid :
also hi @shell great that you find your way in here
[2018-08-15 16:50:09]
aciid :
that tcpdump has SDR capabilities
[2018-08-15 16:50:42]
aciid :
thats not the one in github
[2018-08-15 16:51:36]
ender :
Sorry to beeing dumb, does that matter for the task at hand ?!
[2018-08-15 16:53:15]
ender :
brb, connecting to anafi network to play with virtualhere :slightly_smiling_face:
[2018-08-15 16:55:21]
aciid :
[2018-08-15 16:55:23]
aciid :
[2018-08-15 16:55:27]
aciid :
here are both anafi and mpp tcpdump
[2018-08-15 16:55:31]
aciid :
I cannot remember which is from which
[2018-08-15 16:55:38]
aciid :
but I don't think they are the same that on github
[2018-08-15 16:56:16]
aciid :
@shell we don't have a straight way into Anafi drone yet
[2018-08-15 16:57:45]
ender :
bump log file :stuck_out_tongue:
[2018-08-15 17:02:44]
ender :
@shell, i wrote most of our current status as known to me for new member mainframe just a day before, so please just read up a bit:
[2018-08-15 17:03:17]
ender :
starting 10h before
[2018-08-15 17:04:36]
ender :
see also the pinned stuff, okay ?
[2018-08-15 17:12:12]
shell :
RTHAltitude will likely get nerfed. I noticed Parrot pulled it out of the reference.cfg on the Bebop.
[2018-08-15 17:13:12]
shell :
It too
[2018-08-15 17:19:27]
ender :
nerfed = ?
[2018-08-15 17:19:34]
ender :
built into GUI ?
[2018-08-15 17:19:48]
ender :
I bother them about it since prelaunch of B1
[2018-08-15 17:20:00]
ender :
i cnanot get why they are so stubborn about it.
[2018-08-15 17:20:13]
ender :
always single most asked feature and so friggin easy to do.
[2018-08-15 17:28:04]
shell :
nerfed = removed
[2018-08-15 17:30:59]
shell :
I see nothing in the current command / event set to indicate the ability to modify the RTH altitude
[2018-08-15 17:31:29]
shell :
pulled from <http://192.168.42.1/api/v1/sdk/description>
[2018-08-15 17:31:54]
shell :
however, I should be able to use this listing to build the descriptors necessary to get the actual SDK to work
[2018-08-15 17:34:11]
shell :
there is a listener on the anafi I don't recognize.... I'll need to power up my bebop but the listener on port 9898 seems odd.
[2018-08-15 17:34:31]
shell :
monkeycom?
[2018-08-15 17:36:05]
shell :
I'm not all that interested in actual tcp dumps.... that's just data we'd expect to see flying across the wire. did someone take a look at the contents of the power button shell scripts ... they're in /bin/powerOnOff or similar.
[2018-08-15 17:40:06]
shell :
I can't believe they locked us out
[2018-08-15 17:40:10]
ender :
@shell, how about the RTH ALt in common:
[2018-08-15 17:40:11]
ender :
minHeightToReturnHome = 20.0;
[2018-08-15 17:40:34]
shell :
I believe you'll find that is for mavlink / flight plan
[2018-08-15 17:40:50]
ender :
okay, seems so. BTW, hi Shell :slightly_smiling_face:
[2018-08-15 17:41:05]
ender :
this is Nils
[2018-08-15 17:41:35]
shell :
this is the script I used to use on the bebop ... and as of last firmware it is now nerfed
[2018-08-15 17:41:42]
shell :
<string name="rth_altitude_command" formatted="false" translatable="false">mount -o remount,rw /;sed -i \'s/heightToReturnHome = [1-9][0-9]*.[0-9];/heightToReturnHome = %.1f;/\' /etc/colibry/common/reference.cfg;sync;mount -o remount,ro /\n</string>
[2018-08-15 17:41:58]
shell :
yo!
[2018-08-15 17:42:00]
ender :
please read up until about 11 hours before, i layed out the current status to mainframe (another new member)
[2018-08-15 17:42:41]
ender :
in short: ADB access to MPP, YEAH, root on Anafi: noooo
[2018-08-15 17:43:02]
ender :
adb easy to decompile but lots of dead code that we can patch, important stuff better hidden…
[2018-08-15 17:43:16]
ender :
IDA likes MPP binaries :slightly_smiling_face:
[2018-08-15 17:44:27]
ender :
I have to accept your deeper knowledge of RTH Alt change beeing removed as you are really up-to-date on that :disappointed:
I cannot think why they would do that, did you ever get a hint why they resist that since day 1 of the B1 ? (maybe even ardrone) ?
[2018-08-15 17:48:27]
shell :
I have no idea. I haven't asked and they likely wouldn't tell me either way
[2018-08-15 17:49:18]
ender :
:wink:
[2018-08-15 17:49:28]
shell :
there is some hold up on getting me early access to the SDK.... there were all excited about opening it up to me a month or two ago and now they're barely even responding
[2018-08-15 17:49:40]
shell :
*they were all excited
[2018-08-15 17:49:50]
ender :
There were rumours right now that they will implement in the next FF6 & FW. If they finally bow to the pressure ?!
[2018-08-15 17:50:07]
ender :
coming up 2 days before
[2018-08-15 17:50:11]
shell :
that will be nice because it'll get integrated into the SDK / commandset
[2018-08-15 17:50:15]
ender :
Lets be surprised :slightly_smiling_face:
[2018-08-15 17:51:14]
shell :
I read up on current stats.... SC3 adb access doesn't excite me that much. it is just a headless FF6 client
[2018-08-15 17:51:41]
shell :
we need shell access
[2018-08-15 17:51:52]
ender :
well, one of my goals is to get FCC at will, so if i can patch the mediator the message will be changed :slightly_smiling_face: (CC detected)
[2018-08-15 17:52:01]
ender :
but yes, agreed…
[2018-08-15 17:52:25]
ender :
but that might be a thorny way… I do not know if you read up here but it seems plastered with sigs
[2018-08-15 17:53:46]
shell :
it is going to be something silly once we figure it out... yeah, possibly a cert or something is required... hell, they may even have it stripped completely from the production versions of the anafi. I'm guessing the power button scripts have been reviewed? I saw we have 2-3 of them
[2018-08-15 17:54:27]
ender :
yep yep, like i say, pls read up the last 9 hours,pretty much all has been repeated, the beefier details are at aciids pinned posts
[2018-08-15 17:54:38]
ender :
button script was my FIRST try of course :slightly_smiling_face:
[2018-08-15 17:57:10]
ender :
hmm, neither the built in nor the adb pushed tcpdump seems to support the -r file.cap command ?! how can that be ?!
[2018-08-15 17:57:10]
shell :
anyway, I'm dropping out for a bit... have a concert to go do with my daughter tonight
[2018-08-15 17:57:17]
ender :
enjoy !
[2018-08-15 17:57:23]
ender :
Great you’re here…
[2018-08-15 17:57:30]
ender :
need to … WORK, baaah
[2018-08-15 17:57:39]
ender :
but will play around some more :slightly_smiling_face:
[2018-08-15 17:58:06]
mr.vibez :
Synman, are you an app developer?
[2018-08-15 17:58:11]
shell :
I'll keep pestering the dev team for sdk access... but I'm pretty confident I can get the basics going on my own
[2018-08-15 17:58:33]
shell :
yup
[2018-08-15 17:58:47]
mr.vibez :
Which app?
[2018-08-15 17:58:52]
shell :
[AR.Pro](http://AR.Pro)
[2018-08-15 17:59:00]
ender :
the … BEST :wink:
[2018-08-15 17:59:07]
shell :
been playing with parrot drones since 2011
[2018-08-15 17:59:09]
ender :
^--- blushing
[2018-08-15 17:59:24]
mr.vibez :
Nice, can't wait for the SDK so you can add anafi to it.
[2018-08-15 18:00:26]
mr.vibez :
Ff6 is so dumbed down in terms of photo options AEB, bracketing etc.
[2018-08-15 18:01:03]
mr.vibez :
Lack of panos too...
[2018-08-15 18:02:49]
shell :
@ender, you see I finally flew my disco?
[2018-08-15 18:02:56]
shell :
two freaking years of it collecting dust
[2018-08-15 18:02:59]
ender :
actually no i did not !
[2018-08-15 18:03:03]
ender :
haha lolz :slightly_smiling_face:
[2018-08-15 18:03:11]
shell :
and I got crazy and just did it this past sunday
[2018-08-15 18:03:30]
ender :
Still have left 2 Bebop 1 in poor conditions and parts to build 3 more except cameras :slightly_smiling_face:
[2018-08-15 18:03:36]
ender :
Yihaaaaa :slightly_smiling_face:
[2018-08-15 18:04:07]
shell :
<https://youtu.be/32dWqcYrF4g>
[2018-08-15 18:04:51]
ender :
You finally earned your wings :slightly_smiling_face:
[2018-08-15 18:05:35]
ender :
looks like a slightly rough landing
[2018-08-15 18:05:37]
shell :
mavlink / flight plan wasn't working... very limited subset of mavlink commands was implemented on the disco... I figured it out last night and will probably run out one day this weekend to verify I've got mavlink working on it.... filling in the time since I'm active again waiting for things to break free with the anafi
[2018-08-15 18:07:50]
shell :
and still dorking around with object tracking. I've got it pretty freaking close but the open source detection / tracking libraries out there leave a lot to be desired
[2018-08-15 18:08:47]
shell :
would love to figure out what libraries parrot used... I'm certain it is a flavor of TLD or similar and they are not sharing
[2018-08-15 18:09:05]
ender :
you might love the Tello, did you play with it ?
[2018-08-15 18:10:13]
shell :
nah... anyway... sorry for the tease... wife is about to yell at me... I promised to mow before heading out for Bad Wolves / Nothing More / FFDP / Breaking Benjamin with the kid tonight ... I may be hoarse tomorrow
[2018-08-15 18:10:25]
ender :
:slightly_smiling_face:
[2018-08-15 18:10:33]
ender :
Sounds better then working anyways !
[2018-08-15 18:20:06]
ender :
just captured a session where i changed CC from DE to US and back to DE :slightly_smiling_face: lets see if its idiot proof…
[2018-08-15 18:38:32]
ender :
i can see that the Anafi is reporting (or telling) the Controller which CC it has (or to set) . Also the country list is retrieved from Anafi to Controller, funny ! Thats why my first mppd patches did zilch.
[2018-08-15 18:38:52]
ender :
i can also where i set to US, then the command goes from MPP to Anafi and is acknowledged…
[2018-08-15 18:39:06]
ender :
Not that this leads me somewhere right now but its exiting…
[2018-08-15 18:49:22]
ender :
yep, it seems to belike this: Anafi “reports” its current CC to MPP regularly, also the list of possible countries (that MIGHT has been asked for by MPP but if so i can not see it). At some point the MPP orders the Anafi to change CC (i activated FakeGPS to USA), Anafi sometimes reports “old” cc one more time but then start reporting new. and so on when i changed back to “DE” with Fake GPS.
[2018-08-15 18:50:51]
ender :
i guess if MPP gets no lead from APP it uses reported CC from Anafi to set its own CC. So [App > Anafi > MPP] is “CC Priority chain of command” it seems. Fits to behaviour observed and makes some sense.
[2018-08-15 18:52:02]
ender :
does anyone want the cap file ? a lot of RTP you need to filter, then i found CC stuf by searching for “US” and “DE” in dta packages, was very easy. structure does NOT seem to be mavlink but my mavlink knwledge is rusty, maybe its newer or modded Mavlink.
[2018-08-15 18:52:25]
ender :
@shell: maybe you can take a look when you got time, i guess you are versatile in mavlink…
[2018-08-15 18:53:59]
mr.vibez :
Isn't mavlink just for flight plan type activities?
[2018-08-15 18:57:14]
aciid :
its all sortsa data
[2018-08-15 18:57:45]
aciid :
but yeah for flightplans in anafi
[2018-08-15 19:00:42]
ender :
okay, so normal comands wont follow mavlink. Did not look like it, just wanted to be assured. Synman could also add some wisdom to that i guess…
[2018-08-15 19:01:01]
ender :
Papparazzi turns the bebops to mavlink but i never know how much “turning” was neccessary…
[2018-08-15 19:25:27]
ender :
okay !
[2018-08-15 19:26:21]
ender :
the reception & transmission of CC is via port 9988 and guess who is listening on that port: YES mppd !
[2018-08-15 19:26:25]
ender :
Satisfying !
[2018-08-15 19:54:38]
aciid :
@ender libPOMP
[2018-08-15 19:54:54]
ender :
yes ?!
[2018-08-15 19:55:12]
aciid :
from what I remember all comms is wrapped in that
[2018-08-15 19:55:19]
aciid :
in the high ports
[2018-08-15 19:55:20]
ender :
ahh Printf Oriented Message Protocol
[2018-08-15 19:55:23]
ender :
okay
[2018-08-15 19:55:38]
aciid :
printf oriented proramming sounds like "babbys first php script"
[2018-08-15 19:55:50]
aciid :
"letme debug this real quitck
echo $myvariable"
[2018-08-15 19:55:53]
aciid :
"still not working"
[2018-08-15 19:55:54]
aciid :
xD
[2018-08-15 19:56:22]
ender :
:wink:
[2018-08-15 19:56:37]
mainframe :
guys - can you enlighten me why you belive that for enabling adb/debugging certificate is needed? Have you found any evidence hinting that?
[2018-08-15 19:56:48]
ender :
aciiiiiiiiiid !
[2018-08-15 19:57:14]
ender :
i will learn a bit about POMP meanwhile…
[2018-08-15 19:57:16]
mainframe :
Im just curious about findings so far
[2018-08-15 20:01:31]
ender :
@aciid: care to comment on “why we need sig / certificate” ?
[2018-08-15 20:02:13]
aciid :
oh well
[2018-08-15 20:03:01]
ender :
i know…
[2018-08-15 20:03:25]
aciid :
MPP arrived with debuggable = 1
adb was on
new firmwares can be modified via loopfs NAND emulation and then repacked
they can be flashed when MD5 is changed in FREEFLIGHT6 and it works
I've flashed succesfully twice with a modified firmware binary
now comes AC specs.......... hold on
[2018-08-15 20:08:35]
aciid :
Firmware uses a separate updater binary
Updater binary referes to signature file
Signature file contains Public Key ( Mceliece DER FORMAT ), Linaro firmware public key [linaro.org](http://linaro.org) and signature that is calculated of the update.bin with the private key of the public key in the first row, this can then be verified.
Attack vectors which are probably usable, in order of attainability:
SD-CARD FTDI + LOGIC LEVEL CONVERTER: See 5 test pins on sd-card pcb, 2Serial lines,(tx,rx) one goes to MCU Ambarella H22 shell, other one goes to Linux Android shell
Mavlink Flightplan Upload: Buffer overflow, ROP, enable adb.
Mavlink Firmware Upload: Buffer overflow, ROP, enable adb.
TOSHIBA 2GB NAND chip JTAG:
[2018-08-15 20:10:01]
aciid :
I have read succesfully from the testpins on SD-card pcb, no need to dismantle the drone to do that.
You need a logic analyzer for it or a logic level converter to boost the signal. it's non standard FTDI voltage so serial cable wont pick it up othervice
[2018-08-15 20:10:05]
ender :
may PIN that :slightly_smiling_face:
[2018-08-15 20:10:43]
aciid :
<https://www.sparkfun.com/products/12009>
[2018-08-15 20:10:52]
aciid :
you need this to make serial cable working
[2018-08-15 20:11:28]
aciid :
I used this combination with Xbox360 dvd-drive modding back when I was 14yo
[2018-08-15 20:11:53]
ender :
so you DID try the anafi test points ?! No shell i assume :slightly_smiling_face:
[2018-08-15 20:12:04]
mainframe :
well it seems that firmware is signed and hence loading custom firmware might not be possible - but for enabling adb I see only that there is a kernel/boot options ro.debuggable and rw.debuggable - and currently I have not found how this boot option is going to be set.
[2018-08-15 20:12:04]
aciid :
I have the dump still on my computer
[2018-08-15 20:12:24]
aciid :
I got whole lot of data from both pins and it's readable
[2018-08-15 20:12:29]
aciid :
boot up sequence and such
[2018-08-15 20:12:29]
mainframe :
in Sphinx drone emulator its set as:
cmdline: /sbin/boxinit ro.hardware=mk3_sim_pc ro.debuggable=1 ro.boot.console=/pts/10
[2018-08-15 20:12:32]
aciid :
but its 1 symbol per row
[2018-08-15 20:12:34]
aciid :
so I cant read it
[2018-08-15 20:12:34]
mainframe :
<https://developer.parrot.com/docs/sphinx/firmwared.html>
[2018-08-15 20:12:58]
aciid :
the csv would need to be read in python and split by 80 characters I believe per terminal width for a new row
[2018-08-15 20:13:30]
aciid :
I've tried sphinx with a offline drone, but what does it do with a online drone`?
[2018-08-15 20:13:37]
aciid :
does it really run the boot up sequence to the drone?
[2018-08-15 20:13:49]
aciid :
It wanted me to connect, at the time I didn't have it
[2018-08-15 20:13:59]
aciid :
I have a virtual machine where I installed it but I need to install it again
[2018-08-15 20:14:23]
aciid :
need t read up on sphinx what kind of comms it uses to the drone
[2018-08-15 20:14:31]
aciid :
it does comm with it per parrot videos I've seen
[2018-08-15 20:15:14]
aciid :
and anafi contains sphinx references why? :smile:
[2018-08-15 20:15:35]
aciid :
they have not released the commits probably to sphinx yet to see on the sphinx side
[2018-08-15 20:15:56]
aciid :
but does someone have filesystem open of bepop?
[2018-08-15 20:16:03]
aciid :
does it have sphinx references
[2018-08-15 20:16:12]
mainframe :
no sphinx is not usable for us - I just referred to boxinit boot option example.
[2018-08-15 20:16:30]
aciid :
yeah boxinit is what I modified with MPP firmware when I flashed
[2018-08-15 20:16:32]
aciid :
just to see if it works
[2018-08-15 20:16:38]
aciid :
I added a comment there also "aciid was here"
[2018-08-15 20:16:47]
aciid :
but it cant be done like that on AC
[2018-08-15 20:16:50]
aciid :
anafi
[2018-08-15 20:16:50]
mainframe :
how could we find any traces how boot options could be set through SD card content?
[2018-08-15 20:17:08]
aciid :
there are a few, but that is also secured
[2018-08-15 20:17:31]
aciid :
there is something called not literally from my memory
libdebugauth
[2018-08-15 20:17:34]
mainframe :
any hints about file names - that are going to be looked at boot time?
[2018-08-15 20:17:37]
aciid :
grep -R "debugauth" *
[2018-08-15 20:17:49]
mainframe :
yeah I saw that file
[2018-08-15 20:17:50]
aciid :
i have not found the filename it looks for
[2018-08-15 20:18:00]
aciid :
but there is a sd-card controller which does the job
[2018-08-15 20:18:07]
mainframe :
hmm
[2018-08-15 20:18:15]
aciid :
and there is the debugauth library which contains authentication against your keyfile
[2018-08-15 20:18:23]
aciid :
I asked PARROT ASA for this file
[2018-08-15 20:18:28]
aciid :
got sent to wrong department
[2018-08-15 20:19:15]
aciid :
<https://forum.developer.parrot.com/t/applying-for-anafi-developer-certificate-we-want-root-adb-shell/7832>
[2018-08-15 20:19:34]
aciid :
I saw your question there too
[2018-08-15 20:19:55]
aciid :
break-in pft. it needs to fuck up the internals, so probably need to emulate thee webserver and the websockets
[2018-08-15 20:19:59]
aciid :
for the control processes
[2018-08-15 20:20:00]
aciid :
on qemu
[2018-08-15 20:20:06]
aciid :
to make that thing crash
[2018-08-15 20:20:14]
mainframe :
debugauth calls dbgauth_scan_directory function
[2018-08-15 20:20:33]
aciid :
I didnt get very far with finding the filename
[2018-08-15 20:20:38]
aciid :
maybe it scans all files
[2018-08-15 20:20:45]
aciid :
that could also be exploited
[2018-08-15 20:21:17]
aciid :
but the OG's who were responsible for DJI exploits are either busy or busy
[2018-08-15 20:21:32]
aciid :
and I'm a a new face here trying to control this chaos
[2018-08-15 20:22:01]
aciid :
I've been very down about this whole sitsuation with hitting my head into the wall with anafi so I went to FPV to cool off
[2018-08-15 20:22:10]
aciid :
I bough x220s and 105s
[2018-08-15 20:22:26]
ender :
again, last time. you should pin part of this or you will be there again eventually :slightly_smiling_face:
[2018-08-15 20:22:51]
aciid :
ender has been so graceful to give me project components to loan and inspect , thank you for that
[2018-08-15 20:23:10]
ender :
found the SET CC Command in libarsdk and its usage in mppd, need to smarten up in ARM Assembler
[2018-08-15 20:23:35]
aciid :
well IDA never diassemled that into readable string then
[2018-08-15 20:23:38]
aciid :
or you are a ninja?
[2018-08-15 20:23:41]
ender :
(which doesnt help your quest for root, just saying)
[2018-08-15 20:23:50]
ender :
actually it did
[2018-08-15 20:23:52]
aciid :
libpomp could be something.
[2018-08-15 20:24:08]
aciid :
recompile libpomp -> make it print everything in FIFO
[2018-08-15 20:24:16]
aciid :
then cat /tmp/libpompsocket
[2018-08-15 20:24:19]
ender :
hmm, i dont think i need more execpt learn how to patch it. I got the command and the executor
[2018-08-15 20:24:20]
aciid :
tail -f
[2018-08-15 20:24:22]
aciid :
more like
[2018-08-15 20:24:28]
aciid :
which binary?
[2018-08-15 20:24:31]
aciid :
app or mpp
[2018-08-15 20:24:36]
ender :
mpp
[2018-08-15 20:24:43]
ender :
libarsdk.so & mppd
[2018-08-15 20:24:44]
aciid :
so arm thumb small
[2018-08-15 20:24:55]
aciid :
I did my time there its possible in IDA too
[2018-08-15 20:24:59]
aciid :
I can teach you
[2018-08-15 20:25:06]
ender :
lets see :slightly_smiling_face:
[2018-08-15 20:25:12]
mainframe :
would it be possible to “decompile” debugauth and libdebugauth.so?
[2018-08-15 20:25:28]
aciid :
yyes, but attacking public key encryption is not something that leads to anywhere
[2018-08-15 20:25:35]
aciid :
need to exploit it
[2018-08-15 20:25:46]
ender :
IDA could do it but --> aciid is right
[2018-08-15 20:25:52]
mainframe :
looking at the strings inside these binaries - indeed there seems to be dev certificate that is needed
[2018-08-15 20:26:27]
aciid :
so you need to have this open in a second monitor
<http://armconverter.com/>
<http://armconverter.com/hextoarm/>
[2018-08-15 20:26:29]
aciid :
both links
[2018-08-15 20:26:33]
mainframe :
yeah - need to hack webserver/js app - and get rw on boxinit scripts :slightly_smiling_face:
[2018-08-15 20:26:45]
aciid :
oh sorry
[2018-08-15 20:26:47]
aciid :
and this <http://armconverter.com/branchfinder/>
[2018-08-15 20:26:49]
aciid :
in tabs
[2018-08-15 20:27:06]
aciid :
webserver js gives you rw.debuggable if ro.debuggable is 1
[2018-08-15 20:27:07]
aciid :
xD
[2018-08-15 20:27:12]
aciid :
and usbmode
[2018-08-15 20:27:26]
aciid :
but the js end has interesting things
[2018-08-15 20:27:27]
aciid :
the uploader
[2018-08-15 20:27:29]
aciid :
check it
[2018-08-15 20:27:35]
aciid :
put the files into jsbeautifier service
[2018-08-15 20:27:39]
aciid :
there are some 10 files
[2018-08-15 20:27:46]
aciid :
they are per "feature" of the webserver
[2018-08-15 20:27:59]
aciid :
one is for flightplan page one is for uploader page of firmware and so on
[2018-08-15 20:28:25]
aciid :
easy part is getting ANAFI to crash
[2018-08-15 20:28:32]
aciid :
hard part is getting the print out
[2018-08-15 20:28:35]
aciid :
need those pins
[2018-08-15 20:28:46]
aciid :
my mate left me a logic levle converter somewhere in my apartment
[2018-08-15 20:28:49]
aciid :
SOMEWHRE
[2018-08-15 20:29:07]
aciid :
found it
[2018-08-15 20:29:09]
mainframe :
mhm…but root filesystem is ro by default anyway - need root access to mount it rw first
[2018-08-15 20:29:25]
aciid :
what does that help you, you cant write to it
[2018-08-15 20:29:27]
aciid :
via js
[2018-08-15 20:29:52]
aciid :
running arbitary commands is hard
[2018-08-15 20:29:57]
aciid :
fucking up memory is easy
[2018-08-15 20:29:58]
mainframe :
IF js app or webserver could be exploited
[2018-08-15 20:30:10]
aciid :
well I'd just run sprop rw.debuggable = 1
[2018-08-15 20:30:11]
aciid :
:smile:
[2018-08-15 20:30:16]
aciid :
and reboot
[2018-08-15 20:30:21]
mainframe :
does anybody know what service listens on 9898?
[2018-08-15 20:31:02]
ender :
uhhh
[2018-08-15 20:31:19]
ender :
sec
[2018-08-15 20:31:35]
ender :
9899 ?
[2018-08-15 20:31:38]
ender :
maybe ?
[2018-08-15 20:31:49]
ender :
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:554 0.0.0.0:* LISTEN 204/streamd
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 181/inetd
tcp 0 0 0.0.0.0:6007 0.0.0.0:* LISTEN 203/mppd
tcp 0 0 0.0.0.0:44444 0.0.0.0:* LISTEN 203/mppd
udp 0 0 0.0.0.0:5004 0.0.0.0:* 204/streamd
udp 0 0 0.0.0.0:5005 0.0.0.0:* 204/streamd
udp 0 0 0.0.0.0:9899 0.0.0.0:* 198/wifid
udp 0 0 0.0.0.0:55004 0.0.0.0:* 204/streamd
udp 0 0 0.0.0.0:55005 0.0.0.0:* 204/streamd
udp 0 0 0.0.0.0:5353 0.0.0.0:* 178/avabye
udp 0 0 0.0.0.0:67 0.0.0.0:* 242/dnsmasq
[2018-08-15 20:31:57]
ender :
or on anafi ?
[2018-08-15 20:31:59]
ender :
this is mpp
[2018-08-15 20:32:25]
ender :
if anafi its probably “control” binary
[2018-08-15 20:32:36]
ender :
or the wifid on the other side
[2018-08-15 20:34:01]
ender :
oh damn @aciid: i know i am a bugger but could you find out where the log is on mpp ? Oyu told me once but stupid Slack swallowed it
[2018-08-15 20:35:33]
aciid :
I can't for the life of me remember
[2018-08-15 20:35:37]
aciid :
ill fnis this circuitry
[2018-08-15 20:35:39]
aciid :
lets see then
[2018-08-15 20:37:21]
ender :
Question:
[2018-08-15 20:37:22]
aciid :
no 5vpin what the heck
[2018-08-15 20:37:24]
aciid :
yes
[2018-08-15 20:37:36]
ender :
[2018-08-15 20:37:51]
ender :
i dont get that: a2 is labled as int
[2018-08-15 20:38:09]
ender :
then v2 = a2, THEN see line 15:
[2018-08-15 20:38:20]
ender :
so is v2 = a2 a string or an int ?!
[2018-08-15 20:38:23]
aciid :
scoping of variables
[2018-08-15 20:38:25]
ender :
thats why i’d love log
[2018-08-15 20:39:04]
ender :
wherever “ulog_cookie_drone_manager” logs to … but i recall i ave seen such strings when you pointed me at mpp log.
[2018-08-15 20:39:16]
ender :
so if i patch there i an see the result in the log.
[2018-08-15 20:39:30]
ender :
But at first i dont get if its an int or a string, SHOULD be a string
[2018-08-15 20:39:54]
ender :
just a int pointer to a string ?
[2018-08-15 20:40:03]
ender :
this is IDA recompiled of course
[2018-08-15 20:41:56]
ender :
the stuff above finally leads to pomp_ctx_send which we assume it should…
[2018-08-15 20:42:06]
ender :
as i saw it in wireshark
[2018-08-15 20:42:16]
aciid :
found usbc
[2018-08-15 20:42:21]
aciid :
now wher eis MPP
[2018-08-15 20:42:23]
aciid :
ah found
[2018-08-15 20:42:44]
ender :
haha
[2018-08-15 20:42:52]
ender :
probably battery empty :slightly_smiling_face:
[2018-08-15 20:44:26]
aciid :
lol
[2018-08-15 20:44:26]
aciid :
this was the device that didn' work with window
[2018-08-15 20:44:30]
aciid :
luckily i have vmware
[2018-08-15 20:44:41]
ender :
:wink:
[2018-08-15 20:44:44]
mail451 :
@ender do you still have that pcap file?
[2018-08-15 20:44:48]
ender :
yes !
[2018-08-15 20:44:58]
ender :
sec.
[2018-08-15 20:45:42]
ender :
<https://we.tl/FALWszju6U>
[2018-08-15 20:45:52]
ender :
please dont spread serial numbers and stuff..
[2018-08-15 20:46:09]
mail451 :
No no worries I just want to see how the CC changes
[2018-08-15 20:46:31]
ender :
simply look at in wireshar, filter out !rtcp and search for US or DE
[2018-08-15 20:46:32]
mail451 :
Is there any way to just patch the APK/IPA and have the CC changed?
[2018-08-15 20:46:40]
ender :
commands are:
[2018-08-15 20:46:51]
ender :
From MPP to Anafi “US”
0000 04 0b 11 12 00 00 00 87 00 09 00 00 00 00 00 55 ...............U
0010 53 00 S.
[2018-08-15 20:47:00]
ender :
From Anafi to MPP “US”
0000 04 7e 43 12 00 00 00 87 00 0a 00 00 00 00 00 55 .~C............U
0010 53 00 S.
[2018-08-15 20:47:06]
ender :
so 18 Byte payloads
[2018-08-15 20:47:58]
ender :
i found those signatures 87 00 09 in libarsdk.so on mpp, command is named “g_arsdk_cmd_desc_Wifi_Set_country” = BINGO
[2018-08-15 20:50:26]
ender :
answer from anafi also is found: 87 00 0a is called “g_arsdk_cmd_desc_Wifi_Country_changed”
[2018-08-15 20:50:32]
ender :
so its what we want
[2018-08-15 20:51:06]
ender :
need t patch the change in MPP to always US and to find a place to inject Set to US without a change triggered by the app
[2018-08-15 20:51:08]
mail451 :
Where are those commands executed?
[2018-08-15 20:51:17]
ender :
in / from mppd
[2018-08-15 20:51:27]
mail451 :
mppd?
[2018-08-15 20:51:37]
ender :
open in ida, search for “country” in strings
[2018-08-15 20:51:45]
ender :
mppd binary on Controller ?
[2018-08-15 20:51:56]
mail451 :
ahh on the remote controller
[2018-08-15 20:52:04]
mail451 :
so its a mpp daemon
[2018-08-15 20:52:39]
ender :
yes, patching on remote would have the advantage that we dont need to reinject GOOGLE API in patched APK and iOS users can benefit as well and we can update the app
[2018-08-15 20:52:55]
aciid :
cat /factory/FVT3.txt is a interesting file
[2018-08-15 20:53:12]
aciid :
"programming of the device" from oven
[2018-08-15 20:53:37]
aciid :
this is probably one of the two serial interfaces present too in anafi
[2018-08-15 20:53:43]
aciid :
there are pins in MPP too
[2018-08-15 20:54:01]
aciid :
and nowhere havee I seen that pins would be locked
[2018-08-15 20:55:05]
ender :
thats a cool file :slightly_smiling_face:
[2018-08-15 20:55:35]
aciid :
root@mpp3:/data # cat /factory/FVT3.txt
SPI040443AA8F017332
CPARROT
PFVT3
pDashinesz
NDashineAFMMPP3005
[2018-08-15 20:55:49]
aciid :
[2018-08-15 20:55:53]
aciid :
interesting connection
[2018-08-15 20:56:35]
ender :
you just want to deflect from the fact that you did not find the log file by now, right :wink:
[2018-08-15 20:57:01]
aciid :
yes
[2018-08-15 20:57:02]
aciid :
:smile:
[2018-08-15 20:57:11]
aciid :
but im looking
[2018-08-15 20:57:13]
aciid :
I promise
[2018-08-15 20:57:21]
ender :
almost worked “look shiny things” OHHHHH
[2018-08-15 20:57:37]
aciid :
you read these <https://fccid.io/2AG6IANAFI>
[2018-08-15 20:57:43]
aciid :
ill try to find the log now
[2018-08-15 21:01:56]
aciid :
@ender /update/log
[2018-08-15 21:02:20]
aciid :
use tail -f /update/log
[2018-08-15 21:02:28]
aciid :
then do your thing you want to catch
[2018-08-15 21:04:08]
ender :
ahhhh
[2018-08-15 21:04:10]
aciid :
its good to turncate that file
[2018-08-15 21:04:13]
aciid :
if you are starting now
[2018-08-15 21:04:22]
aciid :
use
echo "" > /update/log
to clear it
[2018-08-15 21:04:37]
aciid :
then you can cat the whole file and its not full o f 1 year stuff
[2018-08-15 21:05:03]
ender :
wait, if i connect mpp to anafi and macbook to anafi wifi again i can connect adb via wifi ip i think :slightly_smiling_face:
[2018-08-15 21:05:13]
ender :
that should work.
[2018-08-15 21:05:28]
ender :
and if i connect ethernet to mac i dont loose internet :slightly_smiling_face:
[2018-08-15 21:05:30]
ender :
+trying…
[2018-08-15 21:05:52]
mainframe :
yes that worked for me
[2018-08-15 21:06:22]
aciid :
yesthat works
[2018-08-15 21:07:11]
ender :
works :slightly_smiling_face:
[2018-08-15 21:08:03]
aciid :
if you ever need a second wireless module for usb I can send a youi rpi 802.11n mini modules
[2018-08-15 21:08:10]
aciid :
I have a dozen they were cheap :3
[2018-08-15 21:08:22]
ender :
i can build a house out of my wifi hardware :slightly_smiling_face:
[2018-08-15 21:08:26]
ender :
(bragging)
[2018-08-15 21:08:33]
aciid :
if you dont set gateway for the devices you connect to
[2018-08-15 21:08:36]
aciid :
then internet will work
[2018-08-15 21:08:40]
aciid :
set manual IP
[2018-08-15 21:08:50]
ender :
all fine !
[2018-08-15 21:08:52]
aciid :
ok!
[2018-08-15 21:09:59]
ender :
ahhhh
[2018-08-15 21:10:00]
ender :
U 08-15 21:09:30.299 I cfg80211_wifid(wifid-198) : wifid: get country auth
U 08-15 21:09:30.299 I wifi (mppd-203) : wifi_country_changed: name:‘DE’, selection mode:Manual, regulation known:1, outdoor_mode:Outdoor
[2018-08-15 21:10:18]
aciid :
how about
[2018-08-15 21:10:19]
ender :
so wifid asks the app and app tells mppd i guess
[2018-08-15 21:10:26]
aciid :
we parametrise whe wifi via kernel?
[2018-08-15 21:10:27]
aciid :
:smile:
[2018-08-15 21:10:43]
ender :
dont want to hurt your feelings but we can only do on MPP
[2018-08-15 21:11:04]
aciid :
I'm ok with that, hopefully Anafi copies the settings from MPP
[2018-08-15 21:11:10]
aciid :
since phone tells to MPP
[2018-08-15 21:11:15]
aciid :
and MPP connects to Anafi
[2018-08-15 21:11:19]
aciid :
if MPP has wrong info?
[2018-08-15 21:11:20]
aciid :
:smile:
[2018-08-15 21:11:26]
aciid :
lets put this to test
[2018-08-15 21:11:29]
aciid :
ill stat my shit
[2018-08-15 21:13:17]
ender :
whew that happens when i fakeGPS to US:
[2018-08-15 21:13:24]
ender :
[2018-08-15 21:14:07]
aciid :
oh mpp doenst connect wihtout a phone
[2018-08-15 21:14:08]
aciid :
weird
[2018-08-15 21:14:12]
aciid :
we need to fix this too
[2018-08-15 21:14:13]
ender :
huh ?
[2018-08-15 21:14:16]
aciid :
there are times you want to go headless
[2018-08-15 21:14:20]
aciid :
like mavic
[2018-08-15 21:14:20]
ender :
what do you say ?!
[2018-08-15 21:14:27]
aciid :
without a phone
[2018-08-15 21:14:29]
aciid :
just the controller
[2018-08-15 21:14:30]
ender :
it connects w/o phone
[2018-08-15 21:14:33]
aciid :
it does?
[2018-08-15 21:14:35]
ender :
just fine
[2018-08-15 21:14:45]
ender :
1.0.8 here but it did it from the beginning
[2018-08-15 21:14:50]
aciid :
well then these are notbinded or the usb is fucking it up
[2018-08-15 21:14:56]
aciid :
does adb restrict that?
[2018-08-15 21:15:00]
ender :
nope
[2018-08-15 21:15:05]
ender :
doing that all the time
[2018-08-15 21:15:06]
aciid :
ill check whats going on
[2018-08-15 21:16:25]
ender :
and switching off FakeGPS <sigh>:
[2018-08-15 21:16:33]
ender :
[2018-08-15 21:16:34]
mainframe :
from etc/boxinit.d/20-usbd.rc
## if debug mode is forced, we don’t need to wait sdcard that can update debug mode (with certificate)
[2018-08-15 21:17:24]
aciid :
uh
[2018-08-15 21:17:49]
mainframe :
ok there seems to be enough evidence that certificate is required in order to enable adb
[2018-08-15 21:17:54]
aciid :
well our hypothesis early was that certain usb device id or vendor id may turn adb on
[2018-08-15 21:18:01]
aciid :
but we didn't get far with that
[2018-08-15 21:18:10]
ender :
nope
[2018-08-15 21:18:37]
mainframe :
I wonder if there is any other hack to set boot options…
[2018-08-15 21:22:10]
aciid :
oh look country_code mode is read only in kernel
[2018-08-15 21:22:38]
aciid :
root@mpp3:/sys/module/wlan/parameters # echo US > country_code
root@mpp3:/sys/module/wlan/parameters # cat country_code
US
root@mpp3:/sys/module/wlan/parameters #
[2018-08-15 21:22:40]
aciid :
lel
[2018-08-15 21:22:49]
aciid :
i dunno does that work tho need to stat checking
[2018-08-15 21:24:49]
aciid :
```
root@mpp3:/sys/module/wlan/parameters # iw reg get
country FI: DFS-ETSI
(2402 - 2472 @ 40), (N/A, 20), (N/A)
(5170 - 5250 @ 80), (N/A, 20), (N/A), NO-OUTDOOR
(5250 - 5330 @ 80), (N/A, 20), (0 ms), DFS
(5490 - 5710 @ 160), (N/A, 27), (0 ms), DFS
(5850 - 5870 @ 10), (N/A, 30), (N/A)
(5860 - 5880 @ 10), (N/A, 30), (N/A)
(5870 - 5890 @ 10), (N/A, 30), (N/A)
(5880 - 5900 @ 10), (N/A, 30), (N/A)
(5890 - 5910 @ 10), (N/A, 30), (N/A)
(5900 - 5920 @ 10), (N/A, 30), (N/A)
(5910 - 5930 @ 10), (N/A, 30), (N/A)
(57240 - 65880 @ 2160), (N/A, 40), (N/A), NO-OUTDOOR
root@mpp3:/sys/module/wlan/parameters #
```
[2018-08-15 21:24:50]
aciid :
oh "ok"
[2018-08-15 21:25:01]
ender :
i guessed so :slightly_smiling_face:
[2018-08-15 21:25:19]
ender :
and quit that route as it would be ( Tadaaaaa ) MPP only
[2018-08-15 21:25:28]
aciid :
```
root@mpp3:/sys/module/wlan/parameters # iw reg set US
root@mpp3:/sys/module/wlan/parameters # iw reg get
country US: DFS-FCC
(2402 - 2472 @ 40), (N/A, 30), (N/A)
(5170 - 5250 @ 80), (N/A, 24), (N/A)
(5250 - 5330 @ 80), (N/A, 24), (0 ms), DFS
(5490 - 5730 @ 160), (N/A, 24), (0 ms), DFS
(5735 - 5835 @ 80), (N/A, 30), (N/A)
(5842 - 5863 @ 5), (N/A, 30), (N/A)
(5850 - 5870 @ 10), (N/A, 30), (N/A)
(5860 - 5880 @ 10), (N/A, 30), (N/A)
(5865 - 5885 @ 20), (N/A, 30), (N/A)
(5870 - 5890 @ 10), (N/A, 30), (N/A)
(5880 - 5900 @ 10), (N/A, 30), (N/A)
(5890 - 5910 @ 10), (N/A, 30), (N/A)
(5895 - 5915 @ 20), (N/A, 30), (N/A)
(5900 - 5920 @ 10), (N/A, 30), (N/A)
(5910 - 5930 @ 10), (N/A, 30), (N/A)
(57240 - 63720 @ 2160), (N/A, 40),
```
[2018-08-15 21:25:30]
aciid :
WEWE
[2018-08-15 21:25:37]
ender :
yes yes yes
[2018-08-15 21:25:44]
ender :
did you not follow my posts :slightly_smiling_face:
[2018-08-15 21:26:16]
ender :
question is why only 25dB and not 30 (iwconfig)
[2018-08-15 21:26:26]
ender :
i guess the crda is calibrated to Antenna gain
[2018-08-15 21:26:34]
ender :
where THE HECK is that CRDA database
[2018-08-15 21:26:38]
aciid :
no
[2018-08-15 21:26:41]
aciid :
x
[2018-08-15 21:26:41]
aciid :
i want to learn
[2018-08-15 21:26:44]
aciid :
xxxx
[2018-08-15 21:27:09]
ender :
i looked at the usual positions. maybe its linked into the wifi binaries
[2018-08-15 21:27:22]
shell :
The API reports on readiness state for a ton of stuff. A tcpdump will show the drone reporting on everything under the sun.
[2018-08-15 21:27:36]
ender :
(see above)
[2018-08-15 21:27:48]
ender :
uploaded a cap file
[2018-08-15 21:28:20]
aciid :
@shell since you are familiar with many things from earlier Parrots
maybe you could try finding if we can modify the setting of preferences over the API and such
[2018-08-15 21:28:23]
aciid :
and exploit it in various ways
[2018-08-15 21:29:24]
ender :
@aciid: could you tell me if the type int here is meant as a pointer to the CC string: <https://dji-rev.slack.com/archives/CBMKLBXEF/p1534365456000100>
[2018-08-15 21:29:48]
ender :
(from earlier), because NOW we know its a string from log output
[2018-08-15 21:30:07]
ender :
and if i want to patch that thing i need to know how :slightly_smiling_face:
[2018-08-15 21:30:14]
shell :
Give me a couple days to establish a a profile for the anafi in the SDK and things will start to light up.
[2018-08-15 21:30:43]
ender :
Any hope you are still allowed to set country manually via SDK ?
[2018-08-15 21:30:47]
shell :
Bear with me
[2018-08-15 21:30:50]
ender :
its all in there…
[2018-08-15 21:30:57]
ender :
of course :slightly_smiling_face:
[2018-08-15 21:31:15]
shell :
[2018-08-15 21:31:39]
aciid :
cute gal
[2018-08-15 21:32:12]
ender :
and you are back already ?!
[2018-08-15 21:32:56]
aciid :
drone logs like 10 rows per second to log MPP log
[2018-08-15 21:32:57]
aciid :
:smile:
[2018-08-15 21:33:00]
aciid :
"landed landed landed "
[2018-08-15 21:33:04]
aciid :
tell me about it
[2018-08-15 21:33:16]
ender :
haha
[2018-08-15 21:33:27]
ender :
panic is “taking off in 10 9 8 …”
[2018-08-15 21:34:16]
aciid :
ook I think you know this already, but MPP stays in US
[2018-08-15 21:34:22]
aciid :
ill try to reboot it
[2018-08-15 21:34:26]
aciid :
cache is in the drone it seems
[2018-08-15 21:34:37]
aciid :
even if I connect my phone
[2018-08-15 21:34:39]
aciid :
it stays in US
[2018-08-15 21:34:49]
aciid :
how do I reload the config
[2018-08-15 21:37:15]
ender :
wait
[2018-08-15 21:37:25]
ender :
stays in US after you did what ?
[2018-08-15 21:37:44]
ender :
but not connected to anafi ?
[2018-08-15 21:41:17]
aciid :
I hard reseted anafi
[2018-08-15 21:41:26]
aciid :
anafi resolved country via GPS
[2018-08-15 21:41:32]
aciid :
MPP stays in US
[2018-08-15 21:41:59]
aciid :
even with phone
[2018-08-15 21:42:03]
aciid :
when you are in freeflight
[2018-08-15 21:42:21]
aciid :
i hard reseted Anafi
[2018-08-15 21:42:45]
aciid :
started Anafi
[2018-08-15 21:42:48]
aciid :
mpp conneted
[2018-08-15 21:42:55]
aciid :
reseted as i would think
[2018-08-15 21:44:50]
ender :
after the kernel thing or just the iw set reg ?
[2018-08-15 21:44:54]
ender :
i did the iw set reg a zillion times…
[2018-08-15 21:46:04]
ender :
well i told you i got mine locked a few times. Could Fake GPS to Russia and whatnot, all stayed in US
[2018-08-15 21:46:54]
ender :
so while i am patching my *rse off you simply lock it to the US smart guy :stuck_out_tongue:
[2018-08-15 21:49:51]
aciid :
<https://bpaste.net/show/de9300552030>
[2018-08-15 21:49:58]
aciid :
this event shows when I set regulatory US
[2018-08-15 21:50:10]
aciid :
then I start Anafi
[2018-08-15 21:50:12]
aciid :
and it finds anafi
[2018-08-15 21:50:17]
aciid :
and Anafi tell MPP its in Finland
[2018-08-15 21:52:41]
ender :
yes but MPP still outputs 25dB ?
[2018-08-15 21:52:51]
ender :
then its your parameter country_code change
[2018-08-15 21:52:56]
ender :
but drone is in FI
[2018-08-15 21:53:17]
aciid :
yes
[2018-08-15 21:53:25]
aciid :
thats what I said im trying to decode is it GPS
[2018-08-15 21:53:27]
aciid :
or cache
[2018-08-15 21:53:32]
ender :
cache
[2018-08-15 21:53:34]
aciid :
Ill start spoofing anafi now
[2018-08-15 21:53:36]
ender :
in the anafi
[2018-08-15 21:53:38]
aciid :
ill tell it's in russia
[2018-08-15 21:53:42]
aciid :
then see what MPP says
[2018-08-15 21:53:45]
ender :
ah yes you can do
[2018-08-15 21:53:50]
ender :
lets bet :slightly_smiling_face:
[2018-08-15 21:54:06]
ender :
wifi.cfg --> cache is my bet
[2018-08-15 21:54:15]
ender :
i bet the WiFi booster :slightly_smiling_face:
[2018-08-15 21:54:21]
ender :
dont cheat :slightly_smiling_face:
[2018-08-15 22:02:41]
aciid :
phone also tells
[2018-08-15 22:02:43]
aciid :
the regulatory
[2018-08-15 22:02:45]
aciid :
AGDFGSgf
[2018-08-15 22:05:48]
ender :
?
[2018-08-15 22:06:14]
aciid :
sorry
[2018-08-15 22:06:20]
aciid :
its stored in multiple places
[2018-08-15 22:06:26]
ender :
yes we now !
[2018-08-15 22:06:58]
ender :
what i said is communication flow usually is : MPP & anafi only: anafi ---> MPP
[2018-08-15 22:07:10]
aciid :
its been a while
[2018-08-15 22:07:12]
aciid :
pls
[2018-08-15 22:07:15]
ender :
app & mpp & anafi: app --> mpp --> anafi
[2018-08-15 22:07:27]
ender :
priority is app > anafi > mpp
[2018-08-15 22:07:37]
ender :
:wink:
[2018-08-15 22:07:44]
aciid :
i wanna look into the socketdata
[2018-08-15 22:08:57]
ender :
IDA: do you have any idea how to patch sub_1C8D0 to send “US” to sub_29438 ? (pointer to string is probably R1 or R5)
[2018-08-15 22:09:03]
ender :
in mppd ?
[2018-08-15 22:10:38]
ender :
hmm, i could at least NOP it, then start all with normal mppd, then use fake GPS, then rip out app and exchange with nopped mppd
[2018-08-15 22:10:51]
ender :
will try that before going to bed :slightly_smiling_face:
[2018-08-15 22:11:01]
ender :
ohhh i suck so bad in arm assembler…
[2018-08-15 22:11:55]
aciid :
intersting output
[2018-08-15 22:11:59]
aciid :
```
root@mpp3:/etc # netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ] DGRAM 8224 @/org/kernel/udev/juba-provider-device
unix 2 [ ] DGRAM 9278 @/org/parrot/jubamountd
unix 2 [ ] DGRAM 8365 /tmp/wpa_ctrl_174-1
unix 2 [ ] DGRAM 8367 /tmp/wpa_ctrl_174-2
unix 4 [ ] DGRAM 4037 /var/run/wpa_supplicant/wlan0
unix 2 [ ] DGRAM 8221 @/org/kernel/udev/udevd-juba
unix 3 [ ] STREAM CONNECTED 8352
unix 3 [ ] STREAM CONNECTED 8317
unix 3 [ ] DGRAM 8228
unix 3 [ ] STREAM CONNECTED 9283
unix 3 [ ] STREAM CONNECTED 3154
unix 3 [ ] STREAM CONNECTED 709
unix 3 [ ] STREAM CONNECTED 8329 @qcom-charger
unix 3 [ ] STREAM CONNECTED 13468
unix 3 [ ] STREAM CONNECTED 8308 @qcom-charger
unix 3 [ ] STREAM CONNECTED 3155 @/org/kernel/udev/juba-provider-server
unix 3 [ ] STREAM CONNECTED 773
unix 3 [ ] STREAM CONNECTED 3151
unix 3 [ ] STREAM CONNECTED 9282
unix 3 [ ] STREAM CONNECTED 8332
unix 3 [ ] STREAM CONNECTED 13467
unix 3 [ ] STREAM CONNECTED 8326
unix 3 [ ] STREAM CONNECTED 9350
unix 3 [ ] STREAM CONNECTED 8316
unix 3 [ ] STREAM CONNECTED 8377 @wifid
unix 2 [ ] DGRAM 9279
unix 3 [ ] STREAM CONNECTED 774
unix 3 [ ] STREAM CONNECTED 3152
unix 3 [ ] STREAM CONNECTED 12817
unix 3 [ ] STREAM CONNECTED 9658 @sensorsd
unix 3 [ ] STREAM CONNECTED 8319
unix 3 [ ] STREAM CONNECTED 8327 @streamd
unix 3 [ ] STREAM CONNECTED 9666
unix 3 [ ] STREAM CONNECTED 796 @qcom-charger
unix 3 [ ] STREAM CONNECTED 708
unix 2 [ ] DGRAM 3153
unix 3 [ ] STREAM CONNECTED 12816
unix 3 [ ] DGRAM 8227
unix 3 [ ] STREAM CONNECTED 8328
unix 3 [ ] STREAM CONNECTED 8320
```
[2018-08-15 22:12:15]
aciid :
patch ASM, no it's patch ARM ASM
[2018-08-15 22:12:47]
aciid :
<http://armconverter.com/branchfinder/>
[2018-08-15 22:12:51]
aciid :
this is to be used when hacking ARM
[2018-08-15 22:12:57]
aciid :
<https://imgur.com/SYeU7Io>
[2018-08-15 22:13:00]
aciid :
how to use!
[2018-08-15 22:13:02]
aciid :
here
[2018-08-15 22:14:54]
ender :
is that better then ida ?!
[2018-08-15 22:15:04]
ender :
i would want to switch to hex view and nop it ?!
[2018-08-15 22:15:15]
ender :
(if i can recall which code NOP is again :-)
[2018-08-15 22:15:19]
aciid :
ar3sdk port 44444?
[2018-08-15 22:15:34]
ender :
idk ?!
[2018-08-15 22:15:41]
ender :
i dont know what you are up to atm :slightly_smiling_face:
[2018-08-15 22:17:47]
aciid :
<https://github.com/Parrot-Developers/libARController/tree/master/Python>
[2018-08-15 22:17:49]
aciid :
this should work
[2018-08-15 22:17:54]
aciid :
hmm
[2018-08-15 22:17:57]
aciid :
ill see
[2018-08-15 22:23:58]
mainframe :
there is <https://github.com/N-Bz/bybop>
[2018-08-15 22:24:20]
mainframe :
it seems he has added Anafi support already
[2018-08-15 22:24:49]
ender :
okay, so you want to sent “set country” commands from that but as soon as the app chimes in its zilch, right ?
[2018-08-15 22:24:55]
ender :
so: just playing ?!
[2018-08-15 22:46:32]
ender :
hmm, my patch & swap approach failed, good luck to you guys, gonna get some sleep :slightly_smiling_face:
[2018-08-16 04:44:29]
shell :
44444 is the command/ event stream. I believe 44445 is rtsp (video) stream.
[2018-08-16 05:25:14]
aciid :
I watched the stream once, you need a custom librtsp build to get it looking right
[2018-08-16 05:25:36]
aciid :
they have a modded build to cut down lag I think
[2018-08-16 05:25:41]
aciid :
it's on parrot's github
[2018-08-16 16:07:34]
jcarlo :
Ive been waiting for this one
<https://www.swellpro.com/spry.html>
[2018-08-16 16:08:04]
jcarlo :
Oops wrong channel
[2018-08-16 20:09:37]
aciid :
[2018-08-16 20:09:45]
aciid :
my xiaomi project
[2018-08-16 20:10:43]
aciid :
@jcarlo <http://www.walkera.com/index.php/Goods/info/id/47.html> have you seen this
[2018-08-16 20:22:58]
mail451 :
@aciid What??
[2018-08-16 20:23:33]
mail451 :
I think MIUI has root access built in
[2018-08-16 20:24:26]
mail451 :
Nope only on China ROM: <http://en.miui.com/thread-295130-1-1.html>
[2018-08-16 20:38:42]
aciid :
@mail451 ill wait
[2018-08-16 21:19:58]
ender :
guys doing my first resin print of my life, wish me luck :slightly_smiling_face:
[2018-08-16 21:39:01]
mr.vibez :
What printer you got?
[2018-08-16 21:39:53]
ender :
Anycube Photon, noob Printer
[2018-08-16 21:40:06]
ender :
for rough things i got a CR-10
[2018-08-16 21:40:26]
ender :
kids want customized LEGO thats beyond FDM
[2018-08-16 21:41:02]
mr.vibez :
I had a CR-10. My lad called it the lego factory
[2018-08-16 21:41:33]
mr.vibez :
[2018-08-16 21:41:58]
mr.vibez :
[2018-08-16 21:42:29]
ender :
thats JUMBO, cheating :slightly_smiling_face:
[2018-08-16 21:42:42]
mr.vibez :
:stuck_out_tongue:
[2018-08-16 21:42:56]
ender :
or did you manage minifigs in 1:1 ?
[2018-08-16 21:43:32]
mr.vibez :
nah, tolerances are no where near enough at that scale
[2018-08-16 21:43:48]
mr.vibez :
Real lego has insane tolerances
[2018-08-16 21:43:56]
ender :
stuff like adding the knobs to normal models is okay
[2018-08-16 21:44:22]
ender :
Spaceships with LEGO sized knobs so they can build on that…
[2018-08-16 21:45:47]
aciid :
damn how tall that lego man is
[2018-08-16 21:45:49]
aciid :
that skeleton
[2018-08-16 21:46:31]
mr.vibez :
16" I think
[2018-08-16 21:47:07]
mr.vibez :
This is my biggest print (glued obviously)
[2018-08-16 21:48:11]
ender :
whoa
[2018-08-16 21:48:14]
mr.vibez :
Anyway, this subject makes me sad. I had a fire in the garage. Turns out smoke and metal don't mix well
[2018-08-16 21:48:22]
ender :
a toy or Art or ?
[2018-08-16 21:48:33]
mr.vibez :
Toy
[2018-08-16 21:48:36]
ender :
(rocket)
[2018-08-16 21:48:53]
mr.vibez :
See the rust on my rails now
[2018-08-16 21:49:59]
ender :
oh crap
[2018-08-16 21:50:22]
mr.vibez :
Yep. Totally wrecked
[2018-08-16 21:50:41]
ender :
fogging everything with WD-40 ?! well, too late probably
[2018-08-16 21:51:39]
mr.vibez :
Far too late. Even the circuit board is rusted. Custom build too. At least it gives me a chance to make a better one once the insurance company pays out
[2018-08-16 21:54:47]
ender :
Thats something at least !
[2018-08-16 23:41:20]
shell :
heh
[2018-08-16 23:42:56]
shell :
my prusa clone (rebranded Wanhao i3 V2.1)
[2018-08-17 00:10:07]
shell :
here’s what i’ve been working on today. i may take a crack at anafi SDK work tonight. just need to get motivated
[2018-08-17 00:10:12]
shell :
<https://youtu.be/I9DI84xEbek>
[2018-08-17 10:13:26]
pedrocab :
Thank you for the capture ender !!
[2018-08-17 10:14:09]
pedrocab :
It's amazing to see how SDK is still the same from Bebop1&2 for Anafi
[2018-08-17 10:14:13]
ender :
You’re welcome :slightly_smiling_face:
[2018-08-17 10:14:47]
pedrocab :
Do you take-off and fly the Anafi in this capture ?
[2018-08-17 10:15:12]
ender :
nope, i was only interested in switching from US to DE
[2018-08-17 10:15:18]
pedrocab :
ok
[2018-08-17 10:16:26]
pedrocab :
If you can just once, I will appreciate if you can capture commands: take-off, move something and then land, for example
[2018-08-17 10:16:50]
pedrocab :
I think Parrot is using the same as Bebop1&2
[2018-08-17 10:16:56]
pedrocab :
you we can inject comnands
[2018-08-17 10:16:59]
pedrocab :
:slightly_smiling_face:
[2018-08-17 10:17:11]
ender :
its very easy to do ? Do you have the Anafi ?
[2018-08-17 10:17:36]
ender :
you just adb to the controller and start capturing, then you do whatever you want, reconnect the controller and transfer your cap file-
[2018-08-17 10:17:41]
pedrocab :
Nop, I don't. That's the reason I'm asking you if can send this capture
[2018-08-17 10:18:30]
ender :
ahh i see. What do you need ?
START CAPTURE --> connect, takeoff, land, STOP CAPTURE ?
[2018-08-17 10:18:50]
ender :
But yes, we all assume the POMP commands are related to B1 & B2
[2018-08-17 10:19:21]
pedrocab :
yes please, thats all I need
[2018-08-17 10:19:45]
pedrocab :
I have B1, B2 and Disco, too much money spent in this drones, just for personal research
[2018-08-17 10:19:53]
ender :
i hope to do that for you just after lunch !
[2018-08-17 10:20:02]
pedrocab :
Now I cant't afford an Anafi, may be after summer
[2018-08-17 10:20:10]
pedrocab :
:slightly_smiling_face: :slightly_smiling_face: :slightly_smiling_face: :slightly_smiling_face:
[2018-08-17 10:20:17]
pedrocab :
Thank you so much Ender
[2018-08-17 10:20:41]
pedrocab :
If I find commands, I will let you know and you will be able to test the injection
[2018-08-17 10:33:02]
ender :
like i said, it looks like standard libPOMP commands in the cap, dont you agree ?
[2018-08-17 10:33:38]
pedrocab :
yep
[2018-08-17 10:33:48]
pedrocab :
looks like
[2018-08-17 10:34:17]
pedrocab :
04 0b 11 12 .....
[2018-08-17 10:34:35]
pedrocab :
and then 04 7e 43 12 ...
[2018-08-17 10:34:41]
pedrocab :
(the ACK)
[2018-08-17 10:35:00]
ender :
:+1:
[2018-08-17 22:16:55]
pedrocab :
Woow, analyzing @ender capture, looks like Anafi is sending video streaming using RTSP !! :slightly_smiling_face:
[2018-08-17 22:18:41]
pedrocab :
And good news @hostile, I found some old friends commands in the capture "All Settings" --> "04:0b:02:0b:00:00:00:00:04:00:00"
[2018-08-17 22:19:55]
pedrocab :
When I come back from holidays I should buy an Anafi
[2018-08-17 22:23:02]
pedrocab :
[2018-08-17 22:31:20]
aciid :
@pedrocab rtsp was already known, you can watch the stream with VLC. but to get rid of the lag you need to compile librtsp with parrot's own modifications
[2018-08-17 22:32:03]
aciid :
<https://developer.parrot.com/blog/2016/play-bebop-stream-on-vlc/>
[2018-08-17 22:32:17]
aciid :
<https://github.com/Parrot-Developers/librtsp/commits/master>
[2018-08-18 07:15:09]
pedrocab :
Thank you @aciid
[2018-08-18 19:37:30]
shell :
<https://github.com/Parrot-Developers/libARDiscovery/commit/77e5d9485b410a99cd00ab920dd9f2457689334f>
[2018-08-18 19:38:13]
shell :
silly parrot forgot to remove the anafi from a public pull request some time in 2017
[2018-08-18 20:51:11]
shell :
that was too easy
[2018-08-18 20:53:00]
shell :
<https://photos.app.goo.gl/qQecRz5WxDn5wwVW9>
[2018-08-18 20:53:33]
shell :
The video stream is broken
[2018-08-18 20:54:05]
shell :
there are a number of command messages the SDK doesn’t recognize
[2018-08-18 20:54:50]
shell :
but with minimal effort i got a good compile of the SDK adding basic support
[2018-08-18 20:54:59]
shell :
i can even fly
[2018-08-18 20:57:39]
shell :
beyond reverting the commit I linked above in ARDiscovery you need to add the following to packages/libARController/Xml/deviceControllers.xml
[2018-08-18 20:57:50]
shell :
<ARController_Device name=“Anafi” product=“ANAFI” flags=“can_be_extension”>
Anafi project
<feature name=“common”/>
<feature name=“ardrone3”/>
<feature name=“generic”/>
<feature name=“follow_me”/>
<feature name=“controller_info”/>
<feature name=“animation”/>
<feature name=“thermal_cam”/>
</ARController_Device>
[2018-08-18 20:59:46]
shell :
and add the following in packages/libARController/Python:
[2018-08-18 21:00:03]
shell :
‘090c’: ‘Bebop 2’,
‘0914’: ‘Anafi’,
‘090e’: ‘Disco’,
[2018-08-18 21:00:30]
shell :
the 0914 entry is the one you want to add to DEVICE_TO_STRING
[2018-08-18 21:01:05]
shell :
and that is it!
[2018-08-18 21:13:24]
shell :
i’ll go after the SC3 next… i need to grab its USB ID and figure out what it’s internal device code is
[2018-08-18 21:16:58]
mr.vibez :
@shell do you know anything about the flight plans? I'm trying to create my own plans but when I copy them to the data/data/com..parrot/files/folder, ff6 never recognises them. I know they are valid .json files as I ripped them directly from the phone
[2018-08-18 21:21:28]
shell :
mavlink is not json
[2018-08-18 21:21:39]
shell :
your files will look something like this on the drone:
[2018-08-18 21:21:59]
shell :
EVINRUDE
QGC WPL 120
0 0 3 16 0.000000 5.000000 0.000000 254.264709 40.205559 -75.639755 50.000000 1
1 0 3 16 0.000000 5.000000 0.000000 38.953522 40.206261 -75.639008 50.000000 1
2 0 3 16 0.000000 5.000000 0.000000 315.491791 40.206654 -75.639511 50.000000 1
3 0 3 16 0.000000 5.000000 0.000000 156.561432 40.205460 -75.638832 50.000000 1
4 0 3 16 0.000000 5.000000 0.000000 215.424866 40.204979 -75.639282 50.000000 1
5 0 3 21 0.000000 0.000000 0.000000 215.424866 40.204979 -75.639282 50.000000 1
6 0 3 2501 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 1
[2018-08-18 21:22:09]
mr.vibez :
The anafi flight plans are json that get converted to mavlink
[2018-08-18 21:22:37]
mr.vibez :
[2018-08-18 21:22:54]
shell :
that is the parrot file format
[2018-08-18 21:23:15]
mr.vibez :
yup
[2018-08-18 21:23:27]
shell :
FF uses that json file to load the plan inside the actual app
[2018-08-18 21:24:18]
shell :
and then uses libARMavlink to convert the json nodes into MissionItems
[2018-08-18 21:24:52]
shell :
and libARMavlink spits out mavlink file like what I showed above
[2018-08-18 21:24:59]
mr.vibez :
Yeah i've seen that happening in the code. I'm trying to write my own plans but when I copy that json to the flightplans folders, they don't get detected. It could be a permissions issue?
[2018-08-18 21:25:01]
shell :
and that is what gets uploaded to the drone
[2018-08-18 21:25:09]
shell :
ah
[2018-08-18 21:25:23]
shell :
so you’re just trying to share the flightplan across devices?
[2018-08-18 21:26:20]
shell :
i’m guessing you’re using a rooted device?
[2018-08-18 21:26:28]
mr.vibez :
Sort of. I'm generating my own co-ordinates in my own app. My app generates the files in the format I created above
[2018-08-18 21:26:34]
mr.vibez :
Yes it's rooted
[2018-08-18 21:26:49]
shell :
FFPro (I haven’t looked in FF6 yet) kept all its flightplan json files in an internal storage directory (the actual app sandbox)
[2018-08-18 21:27:21]
mr.vibez :
Yeahs it's data/data/com..parrot/files/flightplans
[2018-08-18 21:27:26]
shell :
yup yup
[2018-08-18 21:28:00]
shell :
you don’t even get an option to load them in FF6?
[2018-08-18 21:28:19]
mr.vibez :
No, I can edit existing but not create new.
[2018-08-18 21:29:00]
mr.vibez :
If I copy an existing plan to my pc, delete all the flight plans from my device and reupload the existing plan, it doesn't load it
[2018-08-18 21:29:41]
shell :
perhaps permissions / ownership
[2018-08-18 21:29:50]
shell :
you may need to chmod / chown them
[2018-08-18 21:30:12]
shell :
check out the permissions for an existing plan (and the owner:group) and make sure any you upload are the same.
[2018-08-18 21:30:34]
mr.vibez :
how can I inspect the current permissions / ownership?
[2018-08-18 21:30:48]
shell :
ls -la
[2018-08-18 21:30:58]
mr.vibez :
Ok let me try
[2018-08-18 22:18:51]
mr.vibez :
before
[2018-08-18 22:19:00]
mr.vibez :
[2018-08-18 22:19:09]
mr.vibez :
after
[2018-08-18 22:19:19]
mr.vibez :
[2018-08-18 22:20:09]
mr.vibez :
still not showing :disappointed:
[2018-08-18 22:21:55]
mr.vibez :
Permissions and ownership are identical as far as I can see
[2018-08-18 22:37:27]
shell :
do a world write on your savedPlan.json
[2018-08-18 22:37:38]
shell :
chmod ugo+rwx savedPlan.json
[2018-08-18 22:39:05]
shell :
old school that is chmod 777 savedPlan.json
[2018-08-18 22:40:11]
shell :
so this is a little different
[2018-08-18 22:40:22]
shell :
they are generating a guid for the plan directory
[2018-08-18 22:41:02]
shell :
i have no idea why but a guid indicates they are doing something funky
[2018-08-18 22:41:34]
shell :
try the world read/write/execute but without understanding what they are doing with the freaking guid you may still have problems
[2018-08-18 22:41:35]
mr.vibez :
[2018-08-18 22:41:51]
mr.vibez :
That is the code for reading the list of flightplans
[2018-08-18 22:42:22]
mr.vibez :
the guid is just used to give each plan a unique id
[2018-08-18 22:42:32]
mr.vibez :
777 didn't work either
[2018-08-18 22:43:37]
shell :
are you seeing anything in logcat when you try to open the plan list in FF6?
[2018-08-18 22:44:01]
shell :
a big stacktrace would indicate it died trying to parse your file
[2018-08-18 22:44:09]
mr.vibez :
i'll take a look
[2018-08-18 22:44:20]
mr.vibez :
my java is rusty but what does this mean?
[2018-08-18 22:44:23]
mr.vibez :
for (String uuid : childrenFolders) {
[2018-08-18 22:44:47]
mr.vibez :
nevermind I get it, it's assigning the folder names to uuis
[2018-08-18 22:44:52]
mr.vibez :
*uuid
[2018-08-18 22:44:59]
shell :
String[] childrenFolders = savedPlanFolder.list();
[2018-08-18 22:45:23]
shell :
is a string array of all entries in the flightplan folder (your guid dirs)
[2018-08-18 22:46:17]
shell :
that’s a fancy for next is all
[2018-08-18 22:46:47]
mr.vibez :
it calls this function
[2018-08-18 22:47:02]
shell :
for (int x=0; x< childrenFolders.size(); x++) {
[2018-08-18 22:47:11]
mr.vibez :
[2018-08-18 22:47:21]
shell :
final string uuid = childrenFolders[x];
[2018-08-18 22:47:22]
shell :
…
[2018-08-18 22:47:23]
shell :
}
[2018-08-18 22:47:31]
mr.vibez :
CACHED_JSON_FILE_PATH
[2018-08-18 22:47:43]
mr.vibez :
SAVEPLAN_LIST_FOLDER
[2018-08-18 22:47:52]
mr.vibez :
wonder why there are 2 dirs
[2018-08-18 22:48:48]
mr.vibez :
uh, failed to decompile is correctly
[2018-08-18 22:49:03]
mr.vibez :
[2018-08-18 22:49:23]
mr.vibez :
I just have a feeling the file is saved to cache somehow
[2018-08-18 22:49:37]
shell :
i have no idea why they are doing that
[2018-08-18 22:49:39]
shell :
seems stupid
[2018-08-18 22:50:24]
shell :
basically it is a keyset of parsed paths flightplans/uuid/savedPlan.json entries
[2018-08-18 22:50:38]
shell :
if it doesn’t find an entry it just builds it
[2018-08-18 22:50:52]
shell :
oh duh
[2018-08-18 22:50:56]
shell :
that is for creating a new one
[2018-08-18 22:51:40]
mr.vibez :
getAllSavedPlanGeneralInfos?
[2018-08-18 22:52:25]
shell :
there’s got to be something after
[2018-08-18 22:52:27]
shell :
stringBuilder.append(str2).append(File.separator).append(uuid).append(File.separator).append(JSON_FILE_NAME).toString();
[2018-08-18 22:52:46]
mr.vibez :
This is the full file
[2018-08-18 22:52:46]
shell :
damn.. i how slack renders stuff
[2018-08-18 22:52:53]
shell :
RETURN stringBuilder.append(str2).append(File.separator).append(uuid).append(File.separator).append(JSON_FILE_NAME).toString();
[2018-08-18 22:52:57]
mr.vibez :
[2018-08-18 22:53:10]
shell :
anyway, it looks like it should work
[2018-08-18 22:54:08]
shell :
kinda funny
[2018-08-18 22:54:11]
shell :
i’ve seen this code before
[2018-08-18 22:54:22]
shell :
a couple years ago i did the same for ffpro
[2018-08-18 22:54:28]
shell :
doesn’t look like it has changed much
[2018-08-18 22:54:59]
mr.vibez :
Yeah you can see there is a lot of redundant code from previous versions off FF
[2018-08-18 22:56:26]
mr.vibez :
wow
[2018-08-18 22:56:29]
mr.vibez :
how strange
[2018-08-18 22:56:40]
shell :
my guess is it is failing in either fileToJsonObject or generalInfo.initWithJsonObject
[2018-08-18 22:57:30]
mr.vibez :
if I teamviewer into my phone and replace the contents of my json with a copy and paste from my local copy, it works
[2018-08-18 22:57:55]
shell :
do you have the source to SavedPlanGeneralInfo?
[2018-08-18 22:58:28]
shell :
well that’s one way to do it
[2018-08-18 22:58:33]
mr.vibez :
[2018-08-18 22:59:56]
shell :
there should be a method in it called initWithJsonObject
[2018-08-18 23:00:38]
shell :
doesn’t look like any of the getters/setters or other methods were generated with the decompile of that object
[2018-08-18 23:01:13]
mr.vibez :
No idea why that happens
[2018-08-18 23:01:24]
shell :
decompilers are not perfect
[2018-08-18 23:01:28]
mr.vibez :
So
[2018-08-18 23:02:00]
mr.vibez :
to get it to work, I have to open the json file in a text editor on the device and paste the json contents in
[2018-08-18 23:03:08]
mr.vibez :
so either it's something to do with eol/encoding, permissions or voodoo
[2018-08-18 23:05:59]
mr.vibez :
08-19 00:05:04.256 15460-15460/? E/SavedPlanParser: file not exist : /data/user/0/com.parrot.freeflight6/files/FLIGHTPLAN/69dae55d-e67a-4ecc-98e7-622540213830/savedPlan.json
[2018-08-18 23:06:05]
mr.vibez :
^logcat
[2018-08-18 23:07:23]
mr.vibez :
but I can see it
[2018-08-18 23:07:29]
mr.vibez :
[2018-08-18 23:10:28]
mr.vibez :
so a quick google reveals /data/user/0 is a symlink to /data/data
[2018-08-18 23:17:57]
shell :
there it is
[2018-08-18 23:18:04]
shell :
your logcat
[2018-08-18 23:18:08]
shell :
very bottom of fileToJsonObject
[2018-08-18 23:18:40]
shell :
are you on windows?
[2018-08-18 23:19:03]
mr.vibez :
yes
[2018-08-18 23:20:14]
shell :
<https://developer.android.com/reference/java/io/File.html#isFile()>
[2018-08-18 23:21:19]
shell :
attach your “winblows” file
[2018-08-18 23:21:36]
mr.vibez :
[2018-08-18 23:21:48]
mr.vibez :
I do use LF rather than CR LF
[2018-08-18 23:25:34]
shell :
[2018-08-18 23:25:56]
shell :
download … don’t copy/paste
[2018-08-18 23:27:51]
mr.vibez :
still no :disappointed:
[2018-08-18 23:30:17]
mr.vibez :
I'll try creating that file from code rather than uploading it via android studio
[2018-08-18 23:30:27]
mr.vibez :
it may be doing something funky to it
[2018-08-18 23:34:45]
aciid :
Hey ill test unlocking the bootloader now
[2018-08-18 23:34:49]
mr.vibez :
Anyway it's getting late here. Thanks for your help
[2018-08-18 23:36:40]
mr.vibez :
@aciid fingers crossed! Would really like to bottom this issue
[2018-08-18 23:38:32]
aciid :
oh shit its unlocked now
[2018-08-18 23:38:34]
aciid :
wooooo
[2018-08-18 23:38:50]
aciid :
now i need something like exposed or lineageos
[2018-08-18 23:38:57]
aciid :
something that can hook mostly everything
[2018-08-18 23:39:00]
mr.vibez :
Finally the wait is over
[2018-08-19 00:23:04]
aciid :
Anndd it has rollback prevention
[2018-08-19 00:23:10]
aciid :
So i need to figure that outt
[2018-08-19 09:54:47]
mainframe :
nice work @aciid :slightly_smiling_face:
[2018-08-19 10:45:50]
aciid :
annd now its in a bootloop
[2018-08-19 10:45:51]
aciid :
xD
[2018-08-19 10:46:00]
aciid :
tryinna figure this out
[2018-08-19 16:08:58]
mr.vibez :
I give up, even creating the savedPlan.json on the device using java still throws the error.
[2018-08-19 16:09:01]
mr.vibez :
08-19 17:08:47.657 1147-1147/? E/SavedPlanParser: file not exist : /data/user/0/com.parrot.freeflight6/files/FLIGHTPLAN/69dae55d-e67a-4ecc-98e7-622540213830/savedPlan.json
[2018-08-19 16:33:40]
mr.vibez :
[2018-08-19 18:12:17]
d95gas :
Hi Lee..... Is that flexible height setting when doing Flight Plans? I heard you could define the setting beyond the 20m FF6 sets
[2018-08-19 18:46:45]
ender :
@mr.vibez: is that a patched APK or latest release or ??? (I just returned from a family vacation so i know NADA) :slightly_smiling_face:
[2018-08-19 18:49:44]
mr.vibez :
Apparently it's from the beta.
[2018-08-19 19:00:18]
ender :
Great, as i said there were rumours of choosable RTH Alt in my forum…
[2018-08-19 19:00:53]
ender :
combine this with our still-to-do FCC hack and Shells reports that [Ar.Pro](http://Ar.Pro) is close to working with the Anafi and we’ll get a nice Package :slightly_smiling_face:
[2018-08-19 19:03:46]
d95gas :
This is excellent news that Parrot do seem to listening :grinning:. And of course the elements you guys are working on is going to make this an awesome app
[2018-08-19 19:46:05]
mr.vibez :
We are also getting the ability to set saturation, contrast, sharpening etc
[2018-08-19 21:23:54]
aciid :
this xiaomi is giving me a headache
[2018-08-19 21:37:01]
mr.vibez :
I can imagine
[2018-08-20 04:08:33]
shell :
If all it took was an app update (iOS FF6) to support RTH altitude then it is safe to assume it is already baked into the firmware.
[2018-08-20 07:10:06]
ender :
well it could be a parallel update of App & FW, right ?
[2018-08-20 07:14:32]
mr.vibez :
Could be
[2018-08-20 07:14:44]
mr.vibez :
other rumours here
[2018-08-20 07:14:52]
mr.vibez :
[2018-08-20 10:48:49]
aciid :
well i have a rooted xiaomi with miui now
[2018-08-20 10:48:57]
aciid :
gotta see today if I can hook it
[2018-08-20 13:01:33]
mail451 :
Please end the mystery of how to to permanently change CC from inside the APK
[2018-08-20 13:02:42]
ender :
i still prefer MPP, will continue there when i got time :slightly_smiling_face:
[2018-08-20 14:54:27]
shell :
made a bunch of progress on integrating the SC3 into the current SDK last night
[2018-08-20 14:54:44]
shell :
my efforts ended with a segfault (post connection)
[2018-08-20 14:56:14]
shell :
A/libc: Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0xffffffffffffffe0 in tid 4670 (muxThread), pid 4584 (re.arpro3.debug)
[2018-08-20 17:58:58]
mr.vibez :
Closed modules looks interesting. Going to try setting it up now
[2018-08-20 22:21:56]
mr.vibez :
Nice, just did my first xposed hook on ff6
[2018-08-20 22:22:41]
mr.vibez :
[2018-08-20 22:23:56]
mr.vibez :
Now to see if I can override anything interesting
[2018-08-20 22:24:18]
mr.vibez :
Shame you have to reboot the phone after every change to a hook
[2018-08-21 00:24:56]
shell :
question
[2018-08-21 00:25:20]
shell :
has anyone been able to play the anafi video stream on something like VLC yet?
[2018-08-21 04:50:23]
aciid :
@shell yup it works
[2018-08-21 04:51:13]
aciid :
but its quite slow
[2018-08-21 04:51:16]
aciid :
and laggy
[2018-08-21 04:51:38]
aciid :
you need a librtsp version from parrot
[2018-08-21 04:51:48]
aciid :
removes latency and stuff
[2018-08-21 04:52:03]
aciid :
its available on github and evident on both ios and android apps
[2018-08-21 12:35:59]
shell :
I like Nicolas's answer better :) <https://forum.developer.parrot.com/t/anafi-vlc-rtsp-stream/7872/2>
[2018-08-21 12:40:03]
shell :
That librtsp library you referenced I'm assuming is the same one that is packaged with the SDK. What I was really looking for was the rtsp stream name (/live) and Nicolas delivered.
[2018-08-21 13:21:55]
mr.vibez :
Anyone know how to use negative poi heights? Trying to create a plan of a lighthouse that is 50m below my take off point.
[2018-08-21 13:31:29]
d95gas :
Lol that should be interesting Lee
[2018-08-21 13:32:17]
d95gas :
never thought of trying negative value, but one would assume if it knows your take off height then it should be able to calculate that its good.
[2018-08-21 14:11:03]
mr.vibez :
I might have to edit my plan manually and see if it has any affect
[2018-08-21 18:22:04]
mr.vibez :
OK it seems negative values works great. Time to hack the slider to allow up to -150
[2018-08-21 20:08:50]
mr.vibez :
[2018-08-21 20:08:53]
mr.vibez :
Hmm, can/t enter a negative in the POI popup box, can anyone see anything in this code that would be preventing negatives?
[2018-08-21 21:05:29]
mr.vibez :
dialog_flightplan_item_property_edition.xml is responsible for preventing negatives. I've modded that but the values still don't stick
[2018-08-21 22:46:39]
shell :
Check the listener(s)
[2018-08-21 22:47:35]
shell :
Interface is AltitudeChangeListener
[2018-08-21 22:48:00]
shell :
And the method is onPointAltitudeChanged
[2018-08-21 22:48:31]
shell :
Likely in the main FP edit activity
[2018-08-21 22:49:18]
shell :
Don't be surprised if it sticks your camera beyond its range
[2018-08-21 22:49:47]
shell :
FP is really buggy when it comes to camera orientation.. I can see it freaking out
[2018-08-22 07:12:16]
mr.vibez :
Nothing interesting there
[2018-08-22 07:12:24]
mr.vibez :
[2018-08-22 07:15:44]
mr.vibez :
ah could be this
[2018-08-22 07:15:51]
mr.vibez :
[2018-08-22 08:04:49]
mr.vibez :
Ta-da!
[2018-08-22 10:58:16]
aciid :
whats this
[2018-08-22 11:29:12]
ender :
flight plan waypoing going dooooooown (-99m)
[2018-08-22 11:37:36]
aciid :
been busy at work new offices opening so I havent been working on drones for a while
[2018-08-22 11:54:21]
shell :
Parrot is clearly going to great extent to keep poi altitude >= 2 ... Be careful the first time you execute this plan.
[2018-08-22 12:04:55]
mr.vibez :
Just done a few test flights at -70m and the camera tracked well :grin:
[2018-08-22 12:28:58]
ender :
yes of course !
[2018-08-22 15:43:57]
abdo054 :
Hey guys, a new Anafi owner, is it safe to upgrade the bird to the latest FW?
[2018-08-22 15:57:09]
ender :
If its not very recent (today or yesterday) then its safe as far as we know. Controller is easy to get root access, Bird is not accessible right now. OR did a new FW come out today or yesterday (i did not check) ?!
[2018-08-22 16:08:32]
mr.vibez :
Hurrah! <https://helpx.adobe.com/camera-raw/kb/supported-lenses.html>
[2018-08-22 16:08:56]
mr.vibez :
Anafi lens correction
[2018-08-22 16:21:21]
abdo054 :
Thanks @ender
[2018-08-22 17:03:52]
ender :
@mr.vibez: did you already try the profiles ? My Lightroom CC refuses to update from 7.4 to 7.5, is the mentioned 7.5 already out ?!
[2018-08-22 17:04:31]
mr.vibez :
Yes I got a popup when I opened lightroom
[2018-08-22 17:04:39]
ender :
hmmm, strange
[2018-08-22 17:04:48]
mr.vibez :
The. Downloaded it via creative cloud
[2018-08-22 17:04:52]
ender :
also my creative cloud updater insists that i got the latest version
[2018-08-22 17:05:11]
mr.vibez :
Let me double check my version
[2018-08-22 17:05:13]
ender :
maybe the German version istmt ready yet
[2018-08-22 17:05:57]
mr.vibez :
yeah 7.4 (English)
[2018-08-22 17:06:03]
mr.vibez :
sorry
[2018-08-22 17:06:05]
mr.vibez :
7.5
[2018-08-22 17:06:53]
ender :
yeah i got 7.4/10.4
[2018-08-22 17:08:21]
mr.vibez :
Hopefully it will come soon. I can try and grab the profile for you?
[2018-08-22 17:08:25]
ender :
strange, i did not find a way to trigger lens profile update separately
[2018-08-22 17:08:40]
ender :
no, thanks, not urgent, just wanted to compare to my manual corrections…
[2018-08-22 17:09:06]
ender :
on the other hand.. is it easy to export ? never did that :slightly_smiling_face:
[2018-08-22 17:09:12]
ender :
(only with user profiles)
[2018-08-22 17:44:26]
mr.vibez :
Just off to the club. Will grab the profile when I get back.
[2018-08-22 20:57:27]
mr.vibez :
Strange, can't seem to find it
[2018-08-23 06:21:44]
ender :
np
[2018-08-23 06:22:39]
ender :
haha, it updates right now, Photoshop & CC. Staggered updates or because of German language :slightly_smiling_face:
[2018-08-23 06:35:35]
ender :
Lens Correction is great, better than what i was able moding an existing FC200 !!!! GREAT :slightly_smiling_face:
[2018-08-23 08:27:51]
info616 :
have access to a friend’s brand new Anafi with 0.8.4-beta6 firmware. Is it useful for you (the firmware not the Anafi :wink:)? Probably not a rare thing as every Anafi currently sold seems to come with this version.
[2018-08-23 08:47:32]
mainframe :
Do you have a firmware file?
[2018-08-23 09:15:26]
ender :
I believe we had that one, not 100% sure…
[2018-08-23 09:15:45]
ender :
I think its == 0.99
[2018-08-23 09:17:29]
ender :
If you have ADB access to your Bird the FW would be priceless :slightly_smiling_face:
[2018-08-23 09:17:48]
ender :
in known FW versions debug is off and so is ADB…
[2018-08-23 09:18:09]
mainframe :
@info616 so if you have the file of 0.8.4-beta6 fw please share :slightly_smiling_face:
Actually fw files should be downloadable from [parrot.com](http://parrot.com) - just one has to know exact link.
[2018-08-23 10:10:45]
info616 :
No file, just bird. Could install ADB on Linux and see, whether it is accessable. adb devices should give me some output if it is, right?
[2018-08-23 10:30:49]
ender :
i guess you dont even need linux, could be anything as you are supposed to connect via Wifi with your Desktop and then do adb connect 192.168.42.1:9050
[2018-08-23 10:31:15]
ender :
if that works we are golden but i di not think so. @aciid: was the port on the Anafi also == 9050, i dont recall…
[2018-08-23 10:31:32]
ender :
But again, i GUESS this is a known Firmware that was also closed…
[2018-08-23 10:31:33]
aciid :
same port
[2018-08-23 10:31:49]
aciid :
adb devices shows rc controller yah on linux
[2018-08-23 10:32:01]
aciid :
doesnt work on windows because the driver stack has not been configured
[2018-08-23 10:32:22]
ender :
yep but anafi should not work via USB RNDIS but via WiFi if debug would be set to “1” i guess…
[2018-08-23 10:32:30]
ender :
so windows could work, right ?
[2018-08-23 10:36:34]
mainframe :
@info616 telnet 192.168.42.1 9050 is sufficient for test - port not open Im sure :slightly_smiling_face:
[2018-08-23 11:14:55]
info616 :
I’ll check later today.
[2018-08-23 11:15:29]
ender :
@info616 If in doubt lets have a telephone call :wink:
[2018-08-23 11:25:40]
shell :
I can track down the official download urls if needed. Parrot uses a consistent device/product id scheme for all their firmware downloads.
[2018-08-23 11:40:11]
mainframe :
yep it does
[2018-08-23 16:16:19]
c.binetti :
how do you track down the urls @shell?
[2018-08-23 16:16:57]
shell :
I reverse engineered ARUpdater a couple years ago.
[2018-08-23 16:17:19]
c.binetti :
so the software you use on your computer/mac for the parrot drones?
[2018-08-23 16:18:03]
c.binetti :
I am actually looking for getting the urls for another drone and dont know where to start looking for
[2018-08-23 16:21:31]
shell :
android, but yeah
[2018-08-23 16:21:40]
shell :
all “modern” parrot drones
[2018-08-23 16:21:41]
shell :
stand by
[2018-08-23 16:23:21]
shell :
first you need to know the product ids for the drone “codenames”
[2018-08-23 16:23:27]
shell :
// BLE Service
[ARDISCOVERY_PRODUCT_MINIDRONE] = 0x0900,
[ARDISCOVERY_PRODUCT_MINIDRONE_EVO_LIGHT] = 0x0907,
[ARDISCOVERY_PRODUCT_MINIDRONE_EVO_BRICK] = 0x0909,
[ARDISCOVERY_PRODUCT_MINIDRONE_EVO_HYDROFOIL] = 0x090a,
[ARDISCOVERY_PRODUCT_MINIDRONE_DELOS3] = 0x090b,
[ARDISCOVERY_PRODUCT_MINIDRONE_WINGX] = 0x0910,
// NSNet Service
[ARDISCOVERY_PRODUCT_ARDRONE] = 0x0901,
[ARDISCOVERY_PRODUCT_JS] = 0x0902,
[ARDISCOVERY_PRODUCT_SKYCONTROLLER] = 0x0903,
[ARDISCOVERY_PRODUCT_JS_EVO_LIGHT] = 0x0905,
[ARDISCOVERY_PRODUCT_JS_EVO_RACE] = 0x0906,
[ARDISCOVERY_PRODUCT_BEBOP_2] = 0x090c,
[ARDISCOVERY_PRODUCT_POWER_UP] = 0x090d,
[ARDISCOVERY_PRODUCT_EVINRUDE] = 0x090e,
[ARDISCOVERY_PRODUCT_UNKNOWNPRODUCT_4] = 0x0911,
[ARDISCOVERY_PRODUCT_SKYCONTROLLER_NG] = 0x0913,
[ARDISCOVERY_PRODUCT_ANAFI] = 0x0914,
[ARDISCOVERY_PRODUCT_CHIMERA] = 0x0916,
// USB Service
[ARDISCOVERY_PRODUCT_SKYCONTROLLER_2] = 0x090f,
[ARDISCOVERY_PRODUCT_SKYCONTROLLER_2P] = 0x0915,
[ARDISCOVERY_PRODUCT_SKYCONTROLLER_3] = 0x918,
// Unsupported Service
[ARDISCOVERY_PRODUCT_TINOS] = 0x0912,
[ARDISCOVERY_PRODUCT_SEQUOIA] = 0x0917,
[2018-08-23 16:28:13]
shell :
this url will get you the latest version
[2018-08-23 16:28:18]
shell :
<https://download.parrot.com/Drones/{product> id}/update.php?product={product id}&serialNo=0000&version=0.0.0&platform=Android&appVersion=5.0.2
[2018-08-23 16:28:37]
shell :
for example
[2018-08-23 16:29:35]
shell :
<https://download.parrot.com/Drones/0914/update.php?product=0914&serialNo=0000&version=0.0.0&platform=Android&appVersion=5.0.2>
[2018-08-23 16:31:05]
shell :
will get you a pipe delimited response for the latest anafi firmware (keep in mind that appVersion will sometimes limit the version served — parrot apparently did not set a version restriction (yet atleast) on the anafi as i’d expect appVersion to be 6.x
[2018-08-23 16:31:36]
shell :
so what does the pipe delimited response mean?
[2018-08-23 16:31:39]
shell :
5|<http://download.parrot.com/Drones/0914/1.0.1/ALL/anafi_update.tar.gz>|07fadcdc40a54e7f5a11c8146d66def4|54892020|1.0.1
[2018-08-23 16:31:42]
shell :
stand by
[2018-08-23 16:32:46]
shell :
if you split by | you’ll see them in array of similar format:
[2018-08-23 16:32:49]
shell :
final String responseStatus = versionResults[0];
final String downloadUrl = versionResults[1];
final String downloadMd5 = versionResults[2];
final String versionName = versionResults[4];
[2018-08-23 16:33:33]
shell :
i think versionResult[3] is the file size
[2018-08-23 16:33:58]
shell :
but i ignore it and rely on just the Url and Md5 … download the file and then do an MD5 check against the provided checksum
[2018-08-23 16:35:24]
c.binetti :
how do you got the beginning of the url? through the ARUpdater?
[2018-08-23 16:35:48]
shell :
if you know prior firmware version numbers you can then use the URL provided in the response above as a basis for pulling them down
[2018-08-23 16:36:14]
shell :
you’ll notice the firmware version name is in the path for the actual binary download
[2018-08-23 16:36:41]
shell :
yes, i got all of this out of reviewing the libARUpdater source code
[2018-08-23 16:37:16]
c.binetti :
so would there be any possibility to get it through the android app?
[2018-08-23 16:37:26]
shell :
what do you mean?
[2018-08-23 16:38:20]
shell :
actually, this is the first time i’ve taken a look at the anafi firmware download url
[2018-08-23 16:38:22]
c.binetti :
the app also ask you to perform an update if there is a newer firmware available so there must be request through the app as well
[2018-08-23 16:38:38]
shell :
interesting… they provide it as a gzip … all prior firmwares have been served as the binary itself
[2018-08-23 16:39:52]
shell :
yes, app uses the exact same request and likely does an additional version check… additionally, my assumption is the anafi has the same prior version flash prevention logic as all the other drones so the only way you’re going to be able to flash an old firmware currently quite complex
[2018-08-23 16:48:36]
shell :
you’ll have to spoof [download.parrot.com](http://download.parrot.com) and serve up similar responses directing the app to your alternate file — you’ll also need to present a version # greater than the one currently on the drone, and you’ll need a hex editor to actually modify firmware bin file version string to match the version # you go with
[2018-08-23 16:49:08]
shell :
doing so would make the drone think it is getting a newer firmware when in reality you are sneaking in whatever version you want
[2018-08-23 16:50:06]
shell :
words of warning…. on the bebop we had one firmware update that could not be downgraded without manually triggering an internal bdlc (motor firmware) reflash. we had bebops flip flopping on takeoff as a result… very ugly
[2018-08-23 16:51:30]
mr.vibez :
Think some of that needs pinning or adding to a wiki before it gets swallowed by slack
[2018-08-23 16:51:40]
shell :
if the anafi firmwares are signed (as in encrypted with a cert / key pair) then good luck hacking the bin file
[2018-08-23 16:52:47]
shell :
i seriously doubt parrot went that far though… if they did it is a clear sign they are locking us out
[2018-08-23 16:53:12]
mr.vibez :
I think @aciid found it was signed
[2018-08-23 16:53:55]
shell :
if it is just the md5 (like the older drones) then all you need to do generate the md5 for your hacked firmware file
[2018-08-23 16:54:10]
shell :
and present that modified md5 in your elaborate spoofing solution
[2018-08-23 16:55:19]
mr.vibez :
@aciid did that but for some reason it failed about 2/3rds of the way through the flash
[2018-08-23 16:55:40]
mr.vibez :
@aciid can you confirm?
[2018-08-23 16:59:54]
shell :
flashing older firmwares is much easier when you have telnet/adb/ftp access
[2018-08-23 17:00:28]
shell :
you upload the firmware to the update folder, zero out the version.txt file on the drone itself, and reboot… poof…. firmware flash
[2018-08-23 17:01:35]
aciid :
Mpp flashing works if you know the procedure check pinnef messages
[2018-08-23 17:06:17]
info616 :
Concerning the Anafi with with 0.8.4-beta6 firmware: Seems it is not accessable through ADB.
telnet 192.168.42.1 9050
Trying 192.168.42.1...
telnet: Unable to connect to remote host: Connection refused
adb connect 192.168.42.1:9050
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
unable to connect to 192.168.42.1:9050: Connection timed out
Wifi connection is working as I can connect via HTTP.
In case you do not want me to try other stuff, I'd flash it with current firmware, so the bird can fly.
Parrot must have changed something with Wifi in the later firmwares. In the 0.8.4-beta6 firmware I see the overlayed signals strength graph (location Germany). In current firmware this graph is missing.
[2018-08-23 17:08:31]
aciid :
If that is the drones ip it has never had afb enabled as for as i know yet
[2018-08-23 17:09:11]
aciid :
But interesting if there would be new findings
[2018-08-23 17:09:16]
aciid :
If someone still has beta
[2018-08-23 17:09:22]
aciid :
You can skip updating
[2018-08-23 17:09:27]
aciid :
Tje forced update
[2018-08-23 17:09:32]
aciid :
Via plist or xml
[2018-08-23 17:09:38]
aciid :
In rooted ios or android
[2018-08-23 17:09:47]
aciid :
Or just update if you want
[2018-08-23 17:10:42]
shell :
do you have the gzip of the 0.8.4 firmware? i’m curious to know what it is named?
[2018-08-23 17:11:59]
shell :
it is not easily accessible on their download site….
[2018-08-23 17:12:04]
shell :
<http://download.parrot.com/Drones/0914/0.8.4/ALL/anafi_update.tar.gz>
[2018-08-23 17:12:08]
shell :
goes boom
[2018-08-23 17:14:11]
shell :
just took a look at the gzip for 1.0.1
[2018-08-23 17:14:26]
shell :
they have adopted an android like flash process
[2018-08-23 17:14:38]
shell :
looks like they even deliver a custom bootloader as part of the gzip
[2018-08-23 17:14:45]
shell :
and yup… a signature
[2018-08-23 17:15:42]
shell :
it’s a shame they are keeping us locked out
[2018-08-23 17:54:53]
info616 :
I have no gzip of the firmware. Just access to the Anafi with the 0.8.4-beta6 firmware.
[2018-08-23 18:07:01]
d95gas :
Guys.... what would be the recommended Fake GPS app on Android to ATTEMPT to use on Anafi here in the UK
[2018-08-23 18:38:48]
mr.vibez :
Floater works for me
[2018-08-23 21:40:06]
aciid :
@shell I haven't found 0.8.4 yet either
[2018-08-23 21:41:18]
aciid :
the controller was easy to flash with a modified firmware.
on the aircraft side could be that Ambarella as a company wants signature to be implemented and stuff so people wont end up with bricks, bad for company image
[2018-08-24 05:38:17]
d95gas :
@mr.vibez ..... Thanks, Will give it a go
[2018-08-24 08:31:05]
mainframe :
looks more like Ambarella doesnt want anybody to peek into their SoC
[2018-08-24 10:17:19]
mail451 :
So Anafi has dolly zoom and hyperlapse, same as Mavic 2...
[2018-08-24 10:17:43]
mail451 :
and is 300EUR cheaper...
[2018-08-24 10:21:14]
mail451 :
based on youtube videos, hyperlapse could use some work, not as good as Mavic 2 hyperlapse.
[2018-08-24 10:21:23]
mail451 :
still, nice to see some competition
[2018-08-24 10:21:37]
kilrah :
and dolly obviously won't be as good since it's a software crop
[2018-08-24 10:22:13]
mail451 :
good enough for me: <https://www.youtube.com/watch?v=EznGeTf2Cfs>
[2018-08-24 10:29:35]
mr.vibez :
Dolly zoom is nearly always greyed out for me :disappointed:
[2018-08-24 10:37:52]
kilrah :
apparently you need good GPS signal on the mobile device for it to work...
[2018-08-24 10:40:34]
mr.vibez :
That's the issue, I don't want to Dolly zoom myself. I want to Dolly zoom other things
[2018-08-24 11:48:23]
shell :
I would think you could setup a POI and do it that way. The SDK supports that path. It doesn't have to be the controller.
[2018-08-24 11:49:15]
ender :
i guess i have seen someone doing that…
[2018-08-24 11:49:26]
ender :
cant recall where…
[2018-08-24 11:50:12]
shell :
The underlying mavlink code may even support it (flight plan).
[2018-08-24 12:46:03]
mr.vibez :
You override where it points at the start but like I said, it then goes greyed out for me
[2018-08-24 12:48:21]
info616 :
just a last reminder: if anyone of you wants me to try something with the 0.84 Anafi, please tell me. I plan to flash it to 1.0.1 this evening (MEZ).
[2018-08-24 13:21:14]
aciid :
I cant think of anything
[2018-08-24 15:03:41]
mainframe :
@aciid did manage to get out of boot loop? :slightly_smiling_face:
[2018-08-24 15:12:50]
aciid :
yea
[2018-08-24 15:13:35]
aciid :
I installed twrps using something called 64Bit_TOOLKIT_TWRP_REDMI NOTE 5 WHYRED
[2018-08-24 15:14:00]
aciid :
then used "antirolbakc" fix on that same utility
[2018-08-24 15:52:15]
mainframe :
(y)
[2018-08-25 12:56:10]
ender :
Question again, anyone good in ARM IDA ? I have detected the function i want to patch and i know what i would like to do but i dont know how to do it. PLEASE PM if you can help…
[2018-08-25 13:17:35]
ender :
@shellI i saw a new BETA (.5) out now, anything to test / check with Anafi or only updates for the older birds ?!
[2018-08-25 13:22:47]
shell :
Just fixed a couple bugs behind the scenes and removed the SC3 usb trigger
[2018-08-25 13:24:04]
shell :
I got the rtsp stream going between the anafi and the framework .... Now the h.264 parser is choking.
[2018-08-25 13:25:15]
ender :
so is there an image but laggy or no image yet ?
[2018-08-25 13:26:50]
shell :
No image
[2018-08-25 13:28:48]
shell :
I'll probably strip anafi references after some additional testing and finally push this release to prod. It's been 9 months since I've made anything public
[2018-08-25 13:28:48]
ender :
ahhh too sad :slightly_smiling_face:
[2018-08-25 13:29:18]
ender :
Yep, Beboppers and the others deserve a new Release!
[2018-08-25 13:29:19]
shell :
Then put the anafi stuff back in and reseed beta channel
[2018-08-25 13:30:17]
shell :
Dude... Full Disco support man
[2018-08-25 13:30:29]
ender :
:wink:
[2018-08-25 13:30:49]
ender :
Actually quite a few new customers i hope…
[2018-08-25 13:31:15]
ender :
BTW i wont mind paying again if you label your Anafi version to version 4…
[2018-08-25 13:31:32]
shell :
And I can finally put this object tracking tangent behind me. I've tested more libraries than I care to admit this past year.
[2018-08-25 13:32:45]
shell :
I still haven't decided. A new app does give me the opportunity to debloat and optimize stuff... But it's a shiton of work.
[2018-08-25 13:33:24]
ender :
i have no idea if it makes sense moneywise (how much Anafi owners already have a ARPro License)…
[2018-08-25 13:33:35]
ender :
Do you have a feeling for those numbers ?
[2018-08-25 13:35:24]
shell :
It's never been about the money. I love the extra income ... Affords me a means to feed my drone habit
[2018-08-25 13:35:40]
ender :
that honors you…
[2018-08-25 13:36:57]
shell :
Seeing what parrot does with the adk will likely drive the direction. If I have to refactor everything I'll likely split the code. If they make it easy I'll keep it together.
[2018-08-25 13:38:48]
shell :
Assuming the Bebop is dead now does make sense to split it too... Otherwise I'm carrying forward 1000s of lines of code that serve no purpose
[2018-08-25 13:39:37]
ender :
:wink: no biggie, thats about 500.000 lines in my current comercial work but i get ya :slightly_smiling_face:
[2018-08-25 13:41:17]
shell :
As far as personal projects go, [ar.pro](http://ar.pro) has grown to be the largest. But yeah, I run a team @ work that maintains close to a million lines spread across 3 different languages / platforms
[2018-08-25 13:43:02]
shell :
My team at work has grown significantly this past year too. Alot of stuff competing for my time
[2018-08-25 13:43:06]
ender :
i was talking of 500k lines of dead unused and even harmful code, MAN such a shitty project i need to revive…
[2018-08-25 13:43:33]
ender :
We just lost programmers so its not getting better…
[2018-08-25 13:44:08]
shell :
Lol.. I hear ya. Code sniff at work indicates we have about 30 years of tech debt.
[2018-08-25 13:44:49]
ender :
haha
[2018-08-25 13:45:53]
ender :
Do you happen to be an IDA wizard ?! I am onto the mppd binary of the Anafi controller…
[2018-08-25 13:46:30]
shell :
We bought our closest competitor this year so we have a lot of consolidation going on... We'll likely look for optimization in the next year or two which will probably mean staffing cuts of our own...
[2018-08-25 13:48:12]
shell :
I would need to read up on it. I'm guessing you mean working with big blobs / images.
[2018-08-25 13:49:04]
ender :
not exactly. i found 2 very interesting functions, the arsdk command dispatcher and the actual function setting the country code it got from the app
[2018-08-25 13:49:18]
ender :
i like to change the latter and the former is very informative.
[2018-08-25 13:49:38]
ender :
so i know where and what to change only i dont know how as i suck in ARM assembler…
[2018-08-25 15:33:36]
shell :
Yeah, I'm falling for that trap, lol... I'd be lost in assembler for weeks... Been there done that.
[2018-08-25 15:34:39]
ender :
for my simple Bebop tasks i only needed to nop out jumps / decisions or change “less or eqal zero” to “greater zero” or the like.
[2018-08-25 15:34:51]
ender :
No i relly need to change code, needing to relocate stuff..
[2018-08-25 15:35:17]
shell :
Staying up gawd awful hours at night to be at work by 9.. I do that enough as it is
[2018-08-25 15:37:42]
ender :
yup i definately need a pro showing me the way, hopefully Bi0 will answer my distress calls. Thats the guy showing me the first baby steps in IDA so i was able to do my Bebop things.
[2018-08-25 15:38:48]
shell :
I remember reading code on the drone that inspected geolocation data provided by nearby hotspots. Can't remember the name of the standard but it was never fully adopted. Parrot tried really hard to enforce regulations
[2018-08-25 15:39:16]
mail451 :
I only use IDA for the strings window (shift f12)
[2018-08-25 15:39:25]
mail451 :
but if I knew more I'd help you.
[2018-08-25 15:40:23]
shell :
Now I'm annoyed... I can't remember the name of that freaking standard
[2018-08-25 15:42:44]
shell :
Wired into 802.11 in some manner
[2018-08-25 15:42:55]
shell :
Ug... This is going to annoy me all day now
[2018-08-25 16:34:44]
aciid :
@ender what you need to get done?
[2018-08-25 16:34:47]
aciid :
I can help you with IDA
[2018-08-25 16:35:02]
aciid :
I've done ARM IDA before and I think I can help you if the binary is not checked on boot
[2018-08-25 16:35:23]
ender :
Great, lets do it via PM not to bother the others
[2018-08-26 15:49:15]
shell :
question for folks: any idea where the orientation/magneto sensor calibration file may be on the SC2?
[2018-08-26 15:49:44]
shell :
or if not stored in a file a trigger or similar to clear its state?
[2018-08-26 15:50:20]
shell :
i poked around and all i could find was the daemon itself and a couple shellscripts to testing it
[2018-08-26 15:52:56]
shell :
i imagine the SC3 has a similar sensor
[2018-08-26 15:55:33]
shell :
i worked out a unique way to connect to the SC2 today too (probably nothing new and would likely work the same with a netscan on the anafi + sc3 … leveraged my bebop’s AP while it was connected to the SC2 to get the SC2's ip from netstat then while still connected to the bebop’s AP i adb’d into the SC2
[2018-08-26 19:24:06]
ender :
yes that works the same way with the Anafi Controlelr, did that.
[2018-08-26 19:24:28]
ender :
but of course “usually” easier if done by USB RNDIS ADB
[2018-08-26 19:25:24]
ender :
but no: no idea where the file is.
[2018-08-26 19:26:07]
ender :
Strange that the iOS App uses the Controlelr mag but the Android App doesnt. Would be good as it reports the orientation of many smartdevice sensors 90 degree rotated…
[2018-08-26 19:59:01]
shell :
osx does not support rndis
[2018-08-26 20:55:38]
ender :
hmm, it does on my mac :slightly_smiling_face:
[2018-08-26 20:56:21]
ender :
attach controler, do a
adb connect 192.168.53.1:9050
and then a
adb shell and voilá…
[2018-08-26 20:59:49]
ender :
[2018-08-26 21:02:11]
ender :
this should work on most flavours of Linux and OSX
[2018-08-26 21:02:34]
ender :
for windows you need to modify existing drivers and disable certification…
[2018-08-26 21:36:56]
shell :
Nicolas had said no go
[2018-08-26 21:37:51]
shell :
yeah, just the other freaking day
[2018-08-26 21:37:54]
shell :
Connecting the SkyController3 to your computer with the USB-C cable (with no smartphone connected) should create an RNDIS interface on your computer (linux shoud work out of the box, Windows requires a driver install, and to my knowledge there is no RNDIS driver available on macOS :confused: )
[2018-08-26 21:38:07]
shell :
LIAR
[2018-08-26 21:38:48]
shell :
i still would like to find the stupid calibration file for the magneto sensor
[2018-08-26 21:39:12]
shell :
or a command i could pipe to the sensor itself it is something it stores in cmos or similar
[2018-08-27 06:15:51]
ender :
I read what he wrote but at least on the latest OSX its no problem, dont believe us, just try :slightly_smiling_face:
[2018-08-27 07:46:38]
mail451 :
that's the controller shell or Anafi drone shell?
[2018-08-27 07:46:44]
mail451 :
type 't' :slightly_smiling_face:
[2018-08-27 07:47:37]
ender :
controller, if it were the Anafi shell you would bow down and call me “Master of the Universe” :stuck_out_tongue:
[2018-08-27 07:47:49]
mail451 :
yes
[2018-08-27 07:48:10]
ender :
:slightly_smiling_face:
[2018-08-27 07:50:16]
ender :
As aciid detailled, we could buy electronics to be able to access the NAND Filesystem and set that darn debug flag to “1” on the Anafi so its the cheapest way i know of to be “Master of the Universe” :slightly_smiling_face: We could easily crowdfund an amount like that but the Problem is that we are much less then sure if we could derive something from it to root all other birds. and $1500 just to root & adb ONE bird is freakin’ expensive :wink:
[2018-08-27 07:51:08]
mail451 :
Yes, much cheaper to buy a 200$ camera with the same chipset and try and get autoexec.ash with t ipc working...
[2018-08-27 07:51:46]
mail451 :
the flag is set on the Android side right? (the not-amba side)
[2018-08-27 07:52:05]
ender :
yes, BUT how come you are so sure that the camera chipset could modify files (aka flip said debug flag) on the “main” chipset ?
[2018-08-27 07:52:30]
ender :
exactly, its in the UFI extracted Filesystem that we shared.
[2018-08-27 07:52:43]
mail451 :
I'm not sure, but I did that with Yi 4K and GoPro 5 (start Busybox on Linux side from amba with gpauto)
[2018-08-27 07:52:56]
ender :
And the problem to just change that and reflash is that the flash file needs to be signed with an unknown key.
[2018-08-27 07:53:12]
mail451 :
ok now they got you.
[2018-08-27 07:53:24]
ender :
they got us all :slightly_smiling_face:
[2018-08-27 07:53:51]
ender :
On the DJI side they were stupid enough to have just that key stored somewhere in plaintext :stuck_out_tongue:
[2018-08-27 07:54:21]
ender :
and different mechanism, i am oversimplifying…
[2018-08-27 07:56:39]
mail451 :
This is telnet on GoPro 5 (GoPro connected to my external WiFi with wifi-sta.sh)
[2018-08-27 07:56:51]
mail451 :
All done by calling telnetd from autoexec.ash (modded FW)
[2018-08-27 07:57:33]
ender :
yes yes i played those games on the Yi cams i owned. (NOT developed it, just trying out what i found in [dashcamtalk.org](http://dashcamtalk.org))
[2018-08-27 07:58:08]
mail451 :
But it depends a lot on the non-amba side (if that flag can even be changed or is it Readonly)
[2018-08-27 07:58:16]
ender :
So dont get me wrong, its still a good possibility that the Amba has root access to the main chipsets System, i just have no idea how big the chances are…
[2018-08-27 07:58:30]
ender :
yep yep, i guess we are in sync now :slightly_smiling_face:
[2018-08-27 07:59:07]
mail451 :
and root on the anafi will provide FCC?
[2018-08-27 07:59:15]
mail451 :
or is that just on the controller
[2018-08-27 07:59:37]
ender :
i am PRETTY sure that FCC can be gained easier. If only i werent so dumb in IDA…
[2018-08-27 07:59:56]
ender :
Like i detailled elsewhere, the CC propagation seems to run this way:
[2018-08-27 08:01:14]
ender :
--> Anafi will report its CC to MPP in connection/init process. MPP will THEN use the CC of Anafi. When the APP connects it will calculate CC and send to the MPP, MPP will relay it as “set CC” command to Anafi. Anafi will respond with “this is my new CC” and THEN MPP will use it for itself.
[2018-08-27 08:01:43]
ender :
Thats the way the captured wifi packages, the log file and the structures i see in the mppd binary from MPP look.
[2018-08-27 08:04:05]
ender :
There seem to be some corner cases (maybe timestamp of last GPS position and / or movement form last GPS position < 3km) when the CC is “locked”. But i never figured that out scientifically as i am only interested in the core case of FORCING CC to “US”.
[2018-08-27 08:04:27]
mail451 :
So theoretically if the app skips the calculation and just sends "us" to MPP it will use FCC. Because App decision comes after Anafi decision.
[2018-08-27 08:04:36]
ender :
Once that is done we can look at crda info at least on MPP to get the missing 5dB that the MPP might can go even above FCC specs.
[2018-08-27 08:04:46]
mail451 :
Yes I saw coordinates settings but those are used by geofence.
[2018-08-27 08:05:32]
ender :
yes Konrad exactly, way to force FCC is via APP (that seems pretty much obfuscated by intention or by bad coding & bad code) or by simply patching of mppd binary.
[2018-08-27 08:05:58]
ender :
the latter is my preference as its more idiot proof to APP updates and we can still use google maps without own API key.
[2018-08-27 08:06:23]
ender :
WE can do it both ways but the general public will like a mppd patch much better :slightly_smiling_face:
[2018-08-27 08:08:31]
ender :
Just to be sure everyine follows here is a link to the thread where konrad & me MAINLY talk about CC setting (to gain FCC):
<https://dji-rev.slack.com/archives/CBMKLBXEF/p1535317189000100>
[2018-08-27 08:12:45]
ender :
@shell could it be this stored as a property ?
[2018-08-27 08:12:47]
ender :
./data/property/persist.magneto.bias
[2018-08-27 08:13:02]
ender :
contents e.g.:
120.087082;462.817993;-360.638885
[2018-08-27 08:14:36]
ender :
seems to make sense to have it in /data :slightly_smiling_face:
[2018-08-27 08:15:08]
ender :
also controller keymapping, bound anafi and wifi cfg is stored, so lots of stuff to play with for [Ar.Pro](http://Ar.Pro)
[2018-08-27 08:15:40]
ender :
i once successfully changed mapping but i had to reset the anfai before it “copied through” the MPPD settings as template…
[2018-08-27 12:02:49]
shell :
I'll have to see if that file lives on the SC2. I thought I looked there but perhaps not.
[2018-08-27 12:03:35]
ender :
in your notation the Anafi Controller aka MPP is SC3, right ?
[2018-08-27 12:04:47]
shell :
Yup. Not sure why we are calling it mpp tbt. SC2 is mpp too.
[2018-08-27 12:05:29]
shell :
My hunt for magneto calibration started on the SC2
[2018-08-27 12:05:31]
ender :
ah okay the sc3 identifies itself as mpp3 as you cansee on the screenshot above.
[2018-08-27 12:05:43]
ender :
So that might be the correct name.
[2018-08-27 12:06:10]
shell :
When u adb into the SC2 it presents itself similarly
[2018-08-27 12:06:16]
ender :
okay
[2018-08-27 12:06:30]
ender :
i thought french is the key but “contrôleur de ciel” would be CDC3 :wink:
[2018-08-27 12:08:30]
ender :
“My Pretty Pad” 3 :slightly_smiling_face:
[2018-08-28 13:21:00]
ender :
new FF6 seems to be out with RTH Selection and 2,7k
[2018-08-28 13:21:15]
ender :
:+1:
[2018-08-28 13:22:05]
ender :
And guess what i am currently testing my FCC patch. Its on the Controller so new FF6 versions wont bother it :slightly_smiling_face:
[2018-08-28 13:22:33]
ender :
If anyone wants to Alpha test it please PM me. Needed is OSX or Linux (even as VM) as we need USB-RNDIS access to the Controller.
[2018-08-28 13:36:37]
ender :
may wait a sec or so before upgrading the controller as i do not know if FCC patch still works on it.
[2018-08-28 13:36:46]
ender :
or if we have ADB access still…
[2018-08-28 13:50:14]
ender :
DAMN, aciids pinned “how to unpack Controller FW” is lost in history buffer, can someone repost it ?
[2018-08-28 13:51:26]
validat0r :
maybe start a wiki?
[2018-08-28 13:51:49]
ender :
yes we have a start but i guess aciid did not put it there and me neither :stuck_out_tongue:
[2018-08-28 13:51:54]
ender :
let me triplecheck :slightly_smiling_face:
[2018-08-28 14:10:49]
ender :
btw start of a common repo is here:
[2018-08-28 14:10:50]
ender :
<https://bitbucket.org/aciid/anafinessed/src/master/>
[2018-08-28 14:11:00]
ender :
but obviously its lacking contents atm.
[2018-08-28 14:34:21]
ender :
okay, i wanted to check if new MPP update will lock us out.
[2018-08-28 14:34:31]
ender :
pinned stuff of aciid id gone. aciid is busy.
[2018-08-28 14:35:25]
ender :
Found this to extract ubi FS. Was too complicated for my taste, and i have OSX, no linux handy ATM so i did NOT do that bit just as an info source:
<https://gist.github.com/naodesu/10620506>
[2018-08-28 14:35:42]
ender :
BUT i found a seemingly easy mehtod to access stuff in an UBI image:
[2018-08-28 14:35:52]
ender :
<https://github.com/nlitsme/ubidump>
[2018-08-28 14:36:05]
ender :
after some wrestling with lzo i got it running on my OSX.
[2018-08-28 14:36:23]
ender :
i extracted some files, does someone remember how to find out if ADB is open on MPP ?
[2018-08-28 14:36:32]
ender :
something with boxinit…
[2018-08-28 14:38:37]
ender :
i have access to all those files now but still dont have a clue how to check :slightly_smiling_face:
[2018-08-28 14:44:32]
ender :
well, we’ll wait until aciid has time…
[2018-08-28 14:46:28]
ender :
btw didnt know that tbh but adb pull & push can worke with directories & recursively on the MPP3
[2018-08-28 14:46:35]
ender :
save a bunch of work :slightly_smiling_face:
[2018-08-28 14:54:15]
c.binetti :
Did you mean busybox?
[2018-08-28 15:00:55]
ender :
pardon ? where did i mention that ?
[2018-08-28 15:36:50]
ender :
----- You can safely upgrade your controller, ADB still open, AT LEAST if you set the debuggable property as proposed by aciid ----
[2018-08-28 15:37:05]
mainframe :
adb on SC3 is enabled by default if I remember correctly
[2018-08-28 15:37:43]
mainframe :
at least it was on 1.0.7
[2018-08-28 15:38:07]
ender :
YES but the problem is we did not know for NEW firmware 1.1.0
[2018-08-28 15:38:16]
ender :
It is at least if you set persistent property
[2018-08-28 15:38:34]
ender :
sprop persist.debuggable 1
[2018-08-28 15:38:36]
ender :
on old FW
[2018-08-28 15:38:39]
ender :
to be safe
[2018-08-28 15:38:49]
mainframe :
on Anafi fw it was under /etc/boxinit.d/somewhere
[2018-08-28 15:38:54]
ender :
we need someone to update without that to be sure
[2018-08-28 15:39:08]
ender :
yes found it, synced with aciid to be sure, i am on 1.1.0 now
[2018-08-28 15:39:18]
ender :
all good.
[2018-08-28 15:39:38]
mainframe :
do we have a changelog for 1.1.0?
[2018-08-28 15:39:57]
ender :
more or less in the app info.
[2018-08-28 15:42:33]
mainframe :
mhm mine still shows 1.0.8 and no update
[2018-08-28 15:51:08]
ender :
believe me, there is…
[2018-08-28 15:52:39]
ender :
HA FCC patch works as well :slightly_smiling_face:
[2018-08-28 16:11:11]
ender :
does anyone have latest anafi FW as file ? i focussed too much on MPP3
[2018-08-28 16:23:07]
c.binetti :
@ender sorry for the confusion. I thought you are searching for busybox^^
[2018-08-28 16:23:21]
ender :
nope :slightly_smiling_face:
[2018-08-28 16:23:33]
ender :
all is well now, FCC patch also works on 1.1.0
[2018-08-28 16:23:43]
ender :
need some tester confirmation then i post the procedure here.
[2018-08-28 16:23:50]
ender :
patch runs on the Controller
[2018-08-28 16:23:56]
c.binetti :
great job guys
[2018-08-28 16:24:02]
ender :
so App update poses no problem.
[2018-08-28 16:24:15]
ender :
Thanks also to Bi0H4z4rD and aciid !!!!!!
(and aunt IDA :wink: )
[2018-08-28 17:11:50]
ender :
Wrote up a small howto for the FCC patch, if aciid verifies that it works for him as well then i post it here.
[2018-08-28 17:24:18]
abdo054 :
does the how to guide require any programming knowledge or doable by anyone?
[2018-08-28 17:25:47]
ender :
no progging, needs Linux or OSX machine right now, even VM
[2018-08-28 17:32:17]
abdo054 :
Great news
[2018-08-28 17:32:34]
ender :
just lets verify !
[2018-08-28 17:32:44]
abdo054 :
:+1:
[2018-08-28 18:37:40]
d95gas :
Fantastic work guys. Been away for a few days and come back to loads happening both here and Parrot
[2018-08-28 19:51:18]
ender :
FCC tests are not good, new FW did change structure, trying to resolve, ARGH :slightly_smiling_face:
[2018-08-28 19:51:25]
ender :
now back to CE…
[2018-08-28 19:52:11]
fredz :
Fake gps doesn’t work anymore?
[2018-08-28 20:01:03]
d95gas :
Oh that’s a real shame but I have no doubts you guys will crack it
[2018-08-28 20:09:47]
info616 :
so on 1.1.0 the patch can be applied but doesn‘t increase signal strength? And fakeGPS doesn‘t work any more?
Then situation for FCC is now worse than a week ago, where we could at least use fakeGPS with all it‘s limitations. :thinking_face:
[2018-08-28 20:13:23]
ender :
on 1.1.0 the patch does not work in its previuos state. I have NOT tested FakeGPS at the moment. Just try it and report.
[2018-08-28 20:17:14]
ender :
ahhh there is a new arsdk dispatcher in town :slightly_smiling_face: Probably to cope with new rth Altitude command :slightly_smiling_face:
[2018-08-28 20:32:47]
info616 :
wish you success to make it work again. :crossed_fingers:
[2018-08-29 02:19:41]
shell :
interesting
[2018-08-29 02:19:54]
shell :
parrot hasn’t updated their downloader yet
[2018-08-29 02:19:55]
shell :
<https://download.parrot.com/Drones/0914/update.php?product=0914&serialNo=0000&version=1.0.0&platform=Android&appVersion=6.1.0>
[2018-08-29 02:20:27]
shell :
i’m guessing 1.1 is bundled in the app update… probably buried in the 200mb download
[2018-08-29 02:21:06]
shell :
i noticed i had the update for the sc3 and the anafi immediately
[2018-08-29 06:19:01]
ender :
@shell: if you can extract the update file that would be great. I am a bit depressed as i got a working FCC patch… until yesterday :slightly_smiling_face: So i have to restart Analysis to get the Controller patched again… Would you think a downgrade is easy to achieve for the Anafi ?
[2018-08-29 07:17:03]
aciid :
<https://www.dropbox.com/s/04lakxxl957q1de/parakeets.zip?dl=1> some earlier firmwares if anyone needs
[2018-08-29 07:20:10]
ender :
is it: anafi 0.9.9, anafi 1.0.0, mpp3 1.0.5 or more ?
[2018-08-29 07:20:41]
ender :
(= old parakeets package)
[2018-08-29 07:20:42]
aciid :
those
[2018-08-29 07:20:59]
ender :
okay, got those AND mpp3 1.1.0 if someone wants it
[2018-08-29 07:21:07]
ender :
NOT anafi 1.1.0
[2018-08-29 07:21:18]
ender :
and especially missing latest versions before 1.1.0
[2018-08-29 07:21:56]
aciid :
I havent been looking at this too much again now, since parrot turned me down
[2018-08-29 07:21:58]
aciid :
priks
[2018-08-29 07:23:33]
ender :
oh you sissi :wink:
[2018-08-29 07:54:38]
fredz :
@ender Can I apply the FCC patch on my Anafi with old firmware? How?
[2018-08-29 07:55:01]
ender :
Anafi & mpp has old FW ?
[2018-08-29 07:57:59]
info616 :
isn't there a version 1.0.1 pinned on 22. Jul by aciid, see left?
[2018-08-29 07:58:54]
info616 :
see right. :wink:
[2018-08-29 08:02:24]
ender :
the pinned stuff is all lost in the premium timescale :disappointed:
[2018-08-29 08:04:01]
info616 :
just clicked on it and it downloaded an anafi_update.tar.gz
[2018-08-29 08:04:22]
fredz :
@ender You just wrote above that your FCC patch works on the "old" version before the new update didn't you?
[2018-08-29 08:04:51]
ender :
yes thats why i am asking you if your MP and Anafi are on the last versions before 1.1.0 :slightly_smiling_face:
[2018-08-29 08:05:05]
ender :
The patch is applied to the MPP so thats most interesting.
[2018-08-29 08:05:58]
fredz :
sorry what's MPP? The SkyController 3?
[2018-08-29 08:06:53]
ender :
yes MPP3 to be precise :slightly_smiling_face:
[2018-08-29 08:07:09]
fredz :
what does MPP stand for?
[2018-08-29 08:07:42]
ender :
i haven’t the foggiest idea. But thats how it identifies itself
[2018-08-29 08:08:07]
fredz :
:see_no_evil:
[2018-08-29 08:08:23]
fredz :
I'm afraid I'm on quite old firmware though, not the latest before the new update, I think.
[2018-08-29 08:08:45]
kilrah :
MPP is Mavic Pro Platinum, maybe use SC3 :smile:
[2018-08-29 08:09:22]
ender :
:stuck_out_tongue:
[2018-08-29 08:09:28]
info616 :
That's inside the archive:
102 1 Jan 1970 etc
386132 24 Jul 19:03 fwupdater.bin
56 24 Jul 19:03 header
2215 24 Jul 19:03 signature
90884558 24 Jul 19:03 update.bin
[2018-08-29 08:09:50]
ender :
well i have the package ready to send for the latest FW versions before 1.1.0…
[2018-08-29 08:10:07]
ender :
Pete, what is that ? 1.0.1 anafi ?
[2018-08-29 08:10:53]
ender :
if so please upload so i can put it in my archive
[2018-08-29 08:11:21]
ender :
Thats what i got right now:
[2018-08-29 08:11:25]
ender :
[2018-08-29 08:11:39]
ender :
so i am missing quite a few :slightly_smiling_face:
[2018-08-29 08:12:02]
ender :
@aciid: should we upload those to your anafinessed site ?
[2018-08-29 08:12:17]
aciid :
welp it's private so shouldnt be a problem
[2018-08-29 08:12:34]
aciid :
also the fw's are public anyway by parrot
[2018-08-29 08:13:06]
info616 :
you can download it yourself: <https://firmware.parrot.com/Drones/0914/1.0.1/ALL/anafi_update.tar.gz>
[2018-08-29 08:17:34]
info616 :
and <https://firmware.parrot.com/Drones/0918/1.0.7/ALL/mpp3_update.tar.gz>
[2018-08-29 08:18:18]
info616 :
I think that should be the last before 1.1.0
[2018-08-29 08:23:03]
ender :
ah yes, shell posted that, THANKS
[2018-08-29 08:24:40]
ender :
(how could i forget, same as with Bebops / DISCO)
[2018-08-29 08:29:21]
ender :
P.S. about FCC, rethinking i am actually a bit thankful the update came before i “published” the FCC patch as things are different but they did not introduce countermeasures (#1: close ADB on MPP3). So i need to repatch (which ended in a desaster yesterday night) but i guess its possible without too much hassle… Optimistic way of looking onto things. BTW is Fake GPS still working ?
[2018-08-29 08:31:31]
ender :
Just tried, for me it still works :+1::+1::+1:
[2018-08-29 08:31:45]
ender :
sorry for asking but then i decided i should try myself :slightly_smiling_face:
[2018-08-29 08:34:19]
info616 :
out of interest ... is it possible to flash back Anafi from 1.1.0 with these oder firmwares files?
[2018-08-29 08:34:57]
ender :
i posed aciid the question.
[2018-08-29 08:35:17]
ender :
hes not sure but lets focus on that if it needs to be :slightly_smiling_face:
[2018-08-29 08:35:30]
ender :
On MPP no problem i guess but on Anafi maybe a problem
[2018-08-29 08:40:58]
info616 :
probably not worth to spend much time in this as it is hardly an option to stick with 1.0.1/1.0.7 just to have a working FCC patch, given the improvements Parrot put into 1.1.0. Maybe they even silently fixed some security bugs without commenting, i.e. connection issues, motor shutoffs etc.
[2018-08-29 08:47:15]
ender :
yes, 99% agreed unless it turns out neccessary. THEN even a FW mix is thinkable.
[2018-08-29 10:28:03]
aciid :
the firmware updater checks version from "somewhere" according to the update binaries
[2018-08-29 10:28:42]
aciid :
theres even a string that it logs "older firmware no reason to flash" , its not written like that, but something like that
[2018-08-29 12:07:44]
ender :
so at least it would be some work… So lets forget about that until later…
[2018-08-29 17:15:21]
shell :
Bebop, Disco, even the original ar.drones relied on a local file called version.txt
[2018-08-29 17:16:22]
shell :
Free flight has historically relied on the URL pattern I covered previously
[2018-08-30 06:45:58]
aciid :
@kilrah what was the name of the rom & kernel that was almost like designed for hooking and hacking apps
[2018-08-30 06:46:45]
kilrah :
huh?
[2018-08-30 07:10:32]
ender :
For your android phone ?
[2018-08-30 07:22:17]
aciid :
I think I got the wrong guy
[2018-08-30 07:22:40]
aciid :
@mail451 that android rom / kernel you suggested
[2018-08-30 07:23:22]
aciid :
IIRC
[2018-08-30 07:27:32]
ender :
Are you talking of Xposed ?
[2018-08-30 07:28:10]
ender :
<https://www.lifewire.com/xposed-framework-4148451>
[2018-08-30 07:59:13]
mail451 :
Xposed yeah
[2018-08-30 08:10:08]
ender :
:+1:
[2018-08-30 08:37:53]
mail451 :
It should be easy to log everything there, and also change FCC more easily. Like having a prompt.
[2018-08-30 18:53:16]
quad808 :
anafi update...real world use. Just got back from holiday on US mainland...brought the Anafi. Performed and flew like a champ, even in high winds that I was nervous about flying in, up high above the Columbia river in Washington state. Great drone. Simple to setup, simple to fly and not intrusive to nearby people. Excellent video too!
[2018-08-30 19:09:47]
ender :
:+1:
[2018-08-30 19:26:15]
quad808 :
Thanks to you @ender! And the others in this channel...made me pick up one, and can't be happier with it!
[2018-08-30 19:32:20]
ender :
I just came back shooting some aerial photos of a festival going on here (i did NOT fly over of course, just from a distance). No one heard it, no NFZ trouble (festival is on temporary closed airfield). And as i did it at 20:00 low light capabilities were much better than Mavic Air, GREAT :slightly_smiling_face:
[2018-08-30 19:35:11]
quad808 :
:+1:
[2018-08-31 10:20:42]
ender :
btw, here is a quick’n dirty DCP for the Anafi, will do a more solid one (sunny & cloudy) next week…
[2018-08-31 10:20:52]
ender :
[2018-08-31 17:24:03]
quad808 :
I have no idea what I am looking at @ender
[2018-08-31 17:28:55]
d95gas :
<https://rawpedia.rawtherapee.com/How_to_get_LCP_and_DCP_profiles>
[2018-08-31 17:44:10]
quad808 :
Nice! Thanks @ender and @d95gas My brain is on vacation today
[2018-08-31 18:01:32]
d95gas :
I wish mine was on holiday:grin:
[2018-09-01 06:48:59]
d95gas :
Morning all (Morning here in Sunny UK). Whats the current status on the Anafi FCC Hack ? is it going to be doable or is this a no go as far as patching goes? Looking at trying the Xcode method later today to get the iPhone in FCC mode. But would be nice to have a more fixed method of switching to FCC mode. Thanks for all your work so far.
[2018-09-01 07:34:26]
ender :
Current status is that i have to redo the mppd patch and i have no time this weekend as 5 friends visit us :slightly_smiling_face: But i am optimistic about it and will let you guys know. But i sure hope someone else beats me to it as i can be lazy then :slightly_smiling_face:
[2018-09-01 07:36:06]
ender :
But while we are at that: @shell any news of [AR.Pro](http://AR.Pro) support ? Still fighting with video feed and non-persistant settings ? Any sign of sticky country selection as that would make “my” FCC patch superfluous ? and any chance for a 360° panorama macro ? :wink:
[2018-09-01 11:47:43]
d95gas :
@ender Thanks for the update. and I appreciate you dedicating time to this. Looking forward to trying some distance work on FCC..... also looking forward to AR.Pro.... Seems the Anafi is getting more use than the MP these days..... Will have to get the MP out whilst we have decent weather and blow the cobwebs off.... Anafi is just so much easier to grab n go.
[2018-09-01 13:00:05]
shell :
A little behind the scenes banter with the parrot devs but nothing solid. The h264 parser in the SDK requires an overhaul. I think they are so busy focusing on usability of the base project that they simply don't have time for anything else at the moment. The Anafi video pipeline has some serious resource requirements. In a way a good thing because it immediately kills access to all the shoddy devices out there,..
[2018-09-01 13:02:06]
shell :
Lots of compatibility issues even for decent hardware. The Shield K1 can't even connect to the mpp3 or Anafi wifi.
[2018-09-01 13:04:14]
shell :
On my own front I'm leaning towards a complete rewrite / new app for the Anafi. I'll continue to leverage the existing [ar.pro](http://ar.pro) beta stream in the meantime.
[2018-09-01 13:17:36]
d95gas :
Ooohhhh new app would be nice :slightly_smiling_face:
[2018-09-01 20:20:46]
aciid :
@shell how did you get to them? I've filed official tickets and all. Got nothing. I requested an official developer's certificate. Told them that I'd love to help reporting security vulnerabilities
got nothing
[2018-09-01 21:12:53]
shell :
They've always been helpful when they can. There are also blackouts like now where they are not allowed to share much, if anything.
[2018-09-03 11:14:13]
trulala69 :
After reading a lot about the Anafi and inspired by your enthusiasm I decided to buy a quiet Anafi instead of another noisy DJI upgrade. I was following your channel now for quite a while and I’m looking forward for more... I’ve been looking into the FCC topic. ATM there seem to be two possibilities, one involving XCode and IOS, but only temporarily and hopefully one day your patch, which seem to be the more convenient option... or have I missed another option?
[2018-09-03 11:17:26]
ender :
Hi ! I am not THAT versed in iOS but i believe you are right. The same thing on Android is using a FakeGPS App which is more comfortable but results in the same effect. I hope to work on the patch soon again :slightly_smiling_face:
[2018-09-03 11:17:47]
ender :
This channel will learn it forst if i or someone else managed to do the patch for the new FW versions.
[2018-09-03 11:39:54]
trulala69 :
I found a video describing the procedure with XCode for the MA, seems to be the same for the Anafi. I could try Floater on my S6, but does RTH work after faking the location?
[2018-09-03 11:47:36]
d95gas :
I have floater on my Wundaphone and it works a treat. RTH still comes back to its take-off point.
[2018-09-03 11:49:51]
trulala69 :
The basic rule seems to be then to avoid any connection to the internet after switching to FCC, right?
[2018-09-03 11:52:19]
ender :
RTH does work as the Anafi uses its own takeoff position for RTH. But the distance display (stupidly) uses the Smartdevice position andthe GPS based follow me / smartshots stuff does not work either. So its a bad & flawed method but for manual flight its okay.
[2018-09-03 11:54:12]
trulala69 :
I’m a photographer... well still waiting for an automated panorama function but the introduction of AEB shots was a step forward in my decision process...
[2018-09-03 11:54:50]
trulala69 :
So, let’s hope for a patch then ... good luck!
[2018-09-03 11:55:35]
fredz :
@ender Indeed! For those who fly manually the fake gps works fine
[2018-09-03 12:27:06]
aciid :
@ender when should we take a look at the recent firmware fcc IDA again?
[2018-09-03 12:27:53]
ender :
I hope to find some time tomorrow…
[2018-09-03 12:27:57]
ender :
evening
[2018-09-03 12:28:40]
aciid :
oki
[2018-09-03 17:16:54]
trulala69 :
Just a short maiden flight, but damn is it quiet in comparison to the spark. Impressive!
[2018-09-03 17:56:36]
ender :
and believe me, compared to the Air its pure Bliss…
[2018-09-03 17:56:55]
ender :
@trulala69, i made a D50 sunny DCP if you want it
[2018-09-03 19:52:53]
trulala69 :
Are you in a german forum as well under a different name? If so, I’ve already grabbed it ... if not, I would be pleased to try it!
[2018-09-03 19:54:09]
trulala69 :
I was sooo tempted to get the MA but I think I made the right choice after all...
[2018-09-03 20:01:00]
ender :
I am, i am “Copta” there :slightly_smiling_face: so you got it and will get the improved ones…
[2018-09-03 20:20:01]
trulala69 :
Thanks, mate!
[2018-09-04 23:11:04]
quad808 :
Just an Anafi update/incident. I recently went on holiday, took the Anafi. Was walking through some dense forest on the way to a look out to fly...decided to take out the Anafi and fly ahead of me, just for some interesting shots. Didn't wait for sats, since I am fully capable of manual flying in ATTI, or full manual. Took about 10 steps...Anafi kept going higher and higher towards the tree branches...throttle had NO response at all, but all other functions were working, but no altitude control. Finally had to hit LAND on screen, or it would have crashed. Movement was very slow, gaining altitude, but throttle did nothing, even held completely down. Weird. Went to the lookout, waited for Sat lock, and flight, including RTH was completely normal. Glitch, I figure.
[2018-09-05 06:08:35]
kilrah :
just saw an anafi in store yesterday, it's way smaller than it looks on photos/videos
[2018-09-05 06:50:50]
ender :
@kilrah and very fragile as well…
@quad808: was it climbing directly after launch ? i did do 2 or three flights taking off w/o GPS so that svery interesting (and scary) for me…
[2018-09-05 06:55:56]
kilrah :
yeah it did seem "light"...
[2018-09-05 06:56:07]
kilrah :
but less than a foamy bebop
[2018-09-05 06:56:20]
kilrah :
guess as long as you don't crash it's ok...
[2018-09-05 07:21:52]
ender :
Hope would be that stuff doesnt break so easily as it is light and flexible…
[2018-09-05 08:37:48]
ender :
compared to it the Spark & Air & Pro feel like bricks. I believe for crash-safety the light & fragile approach is more successful then the “i am a brick” strategy :slightly_smiling_face:
[2018-09-05 08:45:05]
validat0r :
have you had crashes with the anafi yet?
[2018-09-05 08:45:50]
makingthisnameup :
daily here
[2018-09-05 08:47:02]
makingthisnameup :
the props are amazingly bendable
[2018-09-05 08:51:38]
ender :
daily crashes ? :wink:
I have had one very stupid one where i overlooked branches. But it just went down 2m on the lawn. Nothing happened but i expect the Air to survive that one as well. But i guess the Anafi’s terminal velocity is about 50% of the Air’s terminal velocity. That could help for **real** crashes :slightly_smiling_face:
[2018-09-05 10:22:55]
info616 :
@quad808 the loss of throttle control is scary. I assume you flew in manual control mode no special modes like Follow Me. Those sometimes behave strange. Did you change your altitude aka. walking downhill?
@ender the legs are somewhat flexible which helps for rough landings. As the battery is the heaviest part and it is located off-center, if the motors stop in flight due to a crash or malfunction, the Anafi falls with the battery pointing downwards and the little latch that holds the foot of the rear leg breaks instantly. Then there is a gap between the upper part of the leg and the foot. More a cosmetic issue but still a bit annoying.
[2018-09-05 10:23:37]
ender :
@info616: uhh Peter, how often did you try that :slightly_smiling_face:
[2018-09-05 11:00:14]
info616 :
you find dozen of pictures on the internet of this issue. Sometimes an unlucky handlanding is enough to make it happen.
You can 3D print PU protectors or buy them from Dirty J for peace of mind. :wink:
[2018-09-05 11:05:11]
ender :
I’ll look into that, @info616: do you have a link ?
[2018-09-05 11:39:09]
ender :
Hmm, found them at Dirty J but was unable to find STL files, please let me know where you found it…
Dirty J link:
<https://www.dirtyjdesigns.com/collections/anafi/products/landing-leg-protectors-for-parrot-anafi>
[2018-09-05 17:56:44]
info616 :
Don‘t have STLs. For those in the US, I‘d get them from Dirty J, the price is reasonsble and printing PU needs a printer which is capable. El cheapo 3D printer usually don‘t. Dialing in a new filament takes a lot of time and generates a lot of wasted prints. Not worth for just printing 4 protectors.
If you print PU regularilly and for those outside of the US things are a bit different as shipping abroad is pretty hefty. Maybe someone comes up with his own design and shares the STLs.
[2018-09-05 18:08:57]
quad808 :
@info616 @ender Anafi was hand launched on the walking trail, flew ok for a few seconds, so I was able to walk a bit. Then started to slowly raise up, and kept going up but very slowly. I could still direct it, but full throttle down, did nothing. Manual mode. Only thing I could do was to hit land. No idea why it did this, but this has been the only "glitch" so far with the Anafi.
[2018-09-05 18:09:39]
ender :
okay, good to know. Knowing it could save us all as we gained some microsecond processing time now :wink:
[2018-09-05 19:23:11]
trulala69 :
I’ve started to design something, nothing too fancy. I’ve to print and adjust it several times. I’ll let you know once it’s finished...
[2018-09-06 01:18:54]
shell :
yo
[2018-09-06 01:19:20]
shell :
so i may have been mistaken about the b2 and RTH altitude adjustment being removed from reference.cfg
[2018-09-06 01:19:28]
shell :
perhaps just renamed
[2018-09-06 01:19:51]
shell :
i’ll need to test but i went back to an older firmware and did some comparisons
[2018-09-06 01:20:21]
shell :
minReturnToHomeAltitude is in the act same position in the file that returnToHomeAltitude was in previously
[2018-09-06 01:21:08]
shell :
i those fckers just added min to the beginning of it to annoy me
[2018-09-06 01:21:19]
shell :
gawd can’t type tonight
[2018-09-06 01:21:27]
shell :
*I think….
[2018-09-06 05:58:49]
trulala69 :
First prototype printed in PLA, needs some adjustments, but basically done. I guess I’ve to get some TPU for the final ones
[2018-09-06 06:34:54]
ender :
great, i looong for the STL files :slightly_smiling_face: Does it still fit the Parrot case ?
[2018-09-06 06:35:38]
ender :
BTW i tried myself on the FCC frontier yesterday night :slightly_smiling_face: All fail but at least no more crashes. Will continue to struggle :slightly_smiling_face:
[2018-09-06 06:38:32]
trulala69 :
Well, it’s not the protector, which is too tight, it’s the case :joy:
[2018-09-06 06:40:06]
trulala69 :
It’s the first prototype version and I’ve to do some tweaking. But I guess the important thing is to print it in TPU for the flex, which I’ve never done before
[2018-09-06 06:40:50]
trulala69 :
Too sad you didn’t find a hook for FCC again
[2018-09-06 06:55:09]
ender :
The search just begun :wink:
[2018-09-06 06:55:37]
ender :
I’ll try to print flexible resin…
[2018-09-06 07:21:02]
trulala69 :
Nice!
[2018-09-06 07:29:22]
ender :
Just starting with DLP, flexible resin has yet to arrive. Just pass me over a STL when you feel its good :slightly_smiling_face:
[2018-09-06 08:30:46]
trulala69 :
Ok
[2018-09-06 12:52:26]
info616 :
The protectors from Dirty J are very thin and likely do their magic through the extrem pressure they put on the feet of the Anafi. You have to pull really hard on the top bridge to apply them.
But they generate no problem at all with the original case.
No tests so far whether they have any negative effect on the antennas. Given the strange Wifi boost pattern the Anafi shows (aka. signal strength occasionally jumping from almost zero to full when you ignore warnings and fly further) it will be hard to detect minor impact anyway.
[2018-09-06 13:20:01]
aciid :
I still havent bought a creality 3d :<
[2018-09-06 13:20:06]
aciid :
I bought a new drone ;_;
[2018-09-06 13:56:33]
info616 :
good decision. I‘ve bought one 2 years ago and it ate approx. 3 month of my life so far for tweaking it and I‘m still not done.
The Prusa I got later has a much better print time vs. tweaking rate. Well it is smaller and more expensive. There is no free lunch. :wink:
[2018-09-06 14:01:55]
trulala69 :
Tweaking is endless with 3D printers, there’s always the next “enhancement” due...
Ok, from what I’ve seen I’ve to redesign the protector to make it thin. TPU is ordered already and shipped...
[2018-09-06 19:24:09]
quad808 :
More Anafi adventures for me, and this one pissed me off. Updated Freeflight6, and knew there was a firmware update, so used my "wunderphone" that I used to fly with for the update. Whats a "wunderphone" you ask? Oh, just about the cheapest, brightest phone you can use for your drone flying...here: <https://www.walmart.com/ip/AT-T-PREPAID-Huawei-Ascend-XT2-16GB-Prepaid-Smartphone-Silver/854006794> Well....I start up the controller, connect to the phone, start the drone. App starts and immediately quits after the spash screen., started it again. Same thing. WTF? Restart everything. Same thing. Update in the app? I uninstall it and reinstall. Same. So I turn off wifi on the huawei phone. Connects, app runs just fine now. Tells me there is a update, so I try updating the controller. I sit and wait...and wait...and wait. Nothing. App says firmware going to RC. Nope. Let the RC sit for at least 5 minutes. Nothing. another WTF? Connect to drone, try updating that. Same thing. Somethings up. Try turning on wifi, turning off wifi...nada. Shut everything down and connect with my Samsung S9+....connects, updates firmware everything good, as it should be. Weird. Shut everything down with the new firmware, and switch back to the Huawei with wifi on. App loads then shuts down. The only way to get it to connect is to turn off wifi, connect to drone, then once connected, turn wifi back on...maps load, all is well. Anyone have any clue? It must be the Huawei for some reason. I connected with a Amazon Fire tablet just fine with wifi on. Since I can get the Huawei working, it's not that big of a deal, but this only started with the updated app.
[2018-09-06 19:32:56]
ender :
thats strange, the latest Apps finally work with the latest Huawei / Honor..
[2018-09-06 19:32:56]
quad808 :
@trulala69 Good work so far! I refuse to pay $19.99 for a tablet holder...any chance you can design something? I have a printer at work...LOL
[2018-09-06 19:33:06]
ender :
but not in this case..
[2018-09-06 19:33:07]
quad808 :
<https://www.dirtyjdesigns.com/collections/anafi/products/parrot-anafi-7-8-small-tablet-adapter>
[2018-09-06 19:33:16]
ender :
quad i printed a cheap one !
[2018-09-06 19:33:18]
quad808 :
@ender yah, weird
[2018-09-06 19:33:19]
ender :
sec…
[2018-09-06 19:33:27]
quad808 :
GREAT!!
[2018-09-06 19:33:51]
quad808 :
I need one for my EVO too...I can print up today, since I am at work...hehehehe
[2018-09-06 19:34:04]
ender :
This one is rock solid with iPad Mini and generic Android 8" pad:
[2018-09-06 19:34:05]
ender :
<https://www.thingiverse.com/thing:3023595>
[2018-09-06 19:34:28]
ender :
it just “extends” the clamp.
[2018-09-06 19:34:39]
ender :
its easy to shorten or enlongate…
[2018-09-06 19:34:45]
quad808 :
Thats funny....I saw that and didn't act on it
[2018-09-06 19:34:45]
ender :
(in 3d editor)
[2018-09-06 19:35:01]
ender :
i wondered “why didnt he search thingyverse” :slightly_smiling_face:
[2018-09-06 19:35:04]
quad808 :
I will give it a shot, simple is great!
[2018-09-06 19:35:11]
ender :
yep
[2018-09-06 19:35:24]
quad808 :
thanks, and glad it works....wahoooo!! Now I gots to fire up the printer....
[2018-09-06 19:35:35]
ender :
yihaaaa, smell the fumes…. :stuck_out_tongue:
[2018-09-06 19:35:55]
quad808 :
OMG...yes....I hope it doesn't cause cancer, since I should be dead already
[2018-09-06 19:36:10]
trulala69 :
Just thought the same as Ender, because I’ve seen that on Thingie as well...
[2018-09-06 19:37:02]
trulala69 :
Depends on the material you use, e.g. ABS is not very healthy...
[2018-09-06 19:37:29]
ender :
i print PETG on my FDM
[2018-09-06 19:37:34]
quad808 :
I do have a question on the leg clamp thingys you are working on...what is the purpose again? Make them stronger?
[2018-09-06 19:37:48]
ender :
against small falls, YES
[2018-09-06 19:38:04]
quad808 :
ahhhh....thats what I thought I read.
[2018-09-06 19:38:18]
quad808 :
looking very good so far
[2018-09-06 19:38:55]
quad808 :
off topic...but I am not one to bash...but the MP2 Pro video looks very soft to me
[2018-09-06 19:39:02]
quad808 :
VERY
[2018-09-06 19:39:29]
ender :
maybe DJI chose not to completely destroy video by default by applying primitive matrix Sharpness to it ? :slightly_smiling_face:
[2018-09-06 19:39:41]
ender :
would be a relieve
[2018-09-06 19:39:42]
trulala69 :
The ones I’ve “designed” are in PLA, so they won’t help. The next revision will be for TPU which is more flexible and should protect the Arm a bit. Will work on them tomorrow...
[2018-09-06 19:58:54]
quad808 :
printing has begun...lets see what I get in an hour
[2018-09-06 21:39:54]
shell :
@trulala69 stl please :)
[2018-09-06 21:42:11]
shell :
There's a tablet holder on thingiverse that works well enough. I printed mine using PLA although I've been on a big PETG kick lately. I have some TPUish filament I might use for the feet supports. Works decently with my i3 v2.1
[2018-09-07 06:57:37]
ender :
I would think if the feet are printed too flexible they wont have any effect…
[2018-09-07 07:49:21]
trulala69 :
But PLA/PETG brakes easily, never seen PTU, but seems to be more rubber like...
[2018-09-07 07:51:49]
trulala69 :
BTW what is the issue with the new FW and FCC.... curiosity...
[2018-09-07 07:58:18]
ender :
PETG does not break easy.
[2018-09-07 07:58:50]
ender :
and rubber like will not do any good as crash protection.
[2018-09-07 07:59:28]
ender :
its the first 100g shock that needs to be absorbed, not the longer lasting 10g.
[2018-09-07 08:02:15]
ender :
ot to put it in other word: flexible is a physical high-pass filter but we NEED to absorb the high freq, not let it pass… And its NO problem if the protectors break, if push comes to shove thats what they are there for if the absorb the high gee hig freq shock.
[2018-09-07 08:02:47]
ender :
i though we need a bit of flexibility to fit them, if that is not the case go for PLA / ABS and **just maybe** PETG.
[2018-09-07 08:04:21]
ender :
OKAY someone print in every material, buy as much Anafis and let them fall down from 3m. Please send pics :slightly_smiling_face:
[2018-09-07 08:04:43]
ender :
(rich & dumb engineers method)
[2018-09-07 08:47:06]
trulala69 :
Ok, I see... printing V2 atm...
[2018-09-07 09:22:47]
info616 :
I think PU though somewhat flexible is pretty good at resisting the first shock. Otherwise the smartphone protection cases made of PU would no work so well. I dropped my iPhone several times and it landed with the edge hitting concrete without any damage.
I think you need some flex to attach the protector firmly to the foot.
[2018-09-07 09:38:42]
ender :
@info616: thats different, for smartphones you need flex to absorb the shock. The feet on the anafi break because of the lever, only hard stuff can help there, flexible stuff will only protect it from scratches but not from breaking at the joint.
[2018-09-07 09:39:10]
ender :
but if we need flex to fit them its a moot discussion, THEN i would co for the least needed flex to fit them…
[2018-09-07 09:45:38]
trulala69 :
I’ll try both. V2 in PLA is looking good, but I had to reprint... damn bed adhesion...
[2018-09-07 09:48:39]
trulala69 :
But if the joint (arm to foot connection) should be protected, I’ve to rethink the design again. Let’s wait for V2 and then go on from there.
[2018-09-07 09:59:09]
trulala69 :
BTW anyone got a picture from a snapped arm?
[2018-09-07 12:11:18]
info616 :
Typically looks like this. Gap can be more or less. For drops from low height you may hardly notice it.
[2018-09-07 12:16:26]
trulala69 :
Very helpful... perfect!
[2018-09-07 12:17:09]
info616 :
[2018-09-07 12:17:46]
info616 :
That is better as the tab actually snapped.
[2018-09-07 12:19:16]
trulala69 :
This is V3 now, I’m on V4 for a better fit and a version to keep the back arms foldable.
[2018-09-07 12:21:21]
trulala69 :
Looking at Pete’s snapped arm, I doubt that we need this flat extension at all. What do you think?
[2018-09-07 12:22:44]
info616 :
For the records: Picture is not from my Anafi. :wink:
[2018-09-07 12:26:45]
info616 :
Flat extension only helps, if it touches the leg. Force is from the left when it crashed and breaks.
[2018-09-07 12:32:58]
info616 :
Due to the rigid carbon fiber upper part of the leg, this might be the direction of the force.
[2018-09-07 12:34:24]
trulala69 :
Ok, but I think just having a frame around it should keep it together, or?
[2018-09-07 12:36:25]
trulala69 :
Good news is, it fits into the case on the front arms, I have to cut off the extension on the back arms, so the can be completely folded.
[2018-09-07 12:36:51]
info616 :
I think so. The frame would help even if the tab is already broken. :wink:
[2018-09-07 12:37:33]
trulala69 :
:joy: yeah! Thanks for your input, Pete! Highly appreciated!
[2018-09-07 12:39:48]
info616 :
You're welcome. Do you post your final design on Thingiverse?
[2018-09-07 13:17:30]
trulala69 :
Don’t know yet, I’ll definitely share it here...
[2018-09-07 16:16:11]
trulala69 :
Ok, folding again, fits the case, but the extension is still not completely touching the arm... next iteration...
[2018-09-07 18:12:11]
makingthisnameup :
very cool direction. @trulala69 much more elegant then my super glue fix
[2018-09-07 20:21:08]
quad808 :
@trulala69 Thank you for working on this...I am liking it more and more!! 3D printing has opened up a whole new world for tweakers
[2018-09-08 15:23:09]
shell :
The pain is real. Waiting for the Anafi SDK to drop is killing me. I picked up a swing on eBay for $20 to hold me over.
[2018-09-09 15:16:53]
trulala69 :
I think I’ve got it now with V16...
[2018-09-09 15:18:22]
trulala69 :
Sits very tight and prevents the bending of the non carbon leg inwards...
[2018-09-09 15:34:29]
trulala69 :
Up on Thingiverse, I was about to say, test it, but yeah, print it, put it on and tell me if you think, it meets your requirements ... <https://www.thingiverse.com/thing:3091679>
[2018-09-09 20:54:02]
info616 :
Good job :+1:
For those testing it (I can‘t because to remove my Dirty J protectors I‘d likely have to cut them in pieces due to the tight fit) check as well whether they have any impact on the antennas.
[2018-09-09 23:59:03]
quad808 :
@trulala69 Nice! I will be able to print some tomorrow at work and test when I get home...heck, forget that. I will bring the Anafi in to work and take a look at the fit.
[2018-09-10 06:59:41]
trulala69 :
Just updated the STL with some minor adjustment.
[2018-09-10 12:53:06]
ender :
Anycubic Photon stock Resin
[2018-09-10 12:54:50]
ender :
Perfect snap to fit with latest version of your STL, great !
[2018-09-10 12:57:59]
trulala69 :
Wow! How about the stability of the arm? Better than without? I still hope the protector forces nothing else to break on a rough landing...
[2018-09-10 12:59:49]
trulala69 :
BTW how long did it take to print with resin?
[2018-09-10 13:05:23]
ender :
uhh all 4 feet were approx 2 hours ?!
[2018-09-10 13:05:50]
ender :
0,05mm layer could’ve used 0.1mm of course does not matter but forgot to switch :slightly_smiling_face:
[2018-09-10 13:06:25]
ender :
@trulala69: YES of course that could make the arms break, i am yet unsire if i want to try :slightly_smiling_face:
[2018-09-10 13:08:00]
trulala69 :
I think it’ll prevent the snapping... nearly snapped one of my arms with a version which was too tight. Cool printout!
[2018-09-10 13:14:27]
ender :
DLP / SLA is SO cool..
[2018-09-10 13:14:50]
ender :
small bed of course for the money i am willing to spend
[2018-09-10 13:18:09]
trulala69 :
Still very fast, one print takes approx 1h on my FDM
[2018-09-10 14:15:33]
d95gas :
@ender for the newbie 3D dude..... what the heck is "DLP / SLA" thats so cool :slightly_smiling_face: @trulala69 spill the beanz on "FDM" ..... So much to learn!!!
[2018-09-10 14:16:45]
kilrah :
FDM is your standard filament printer
[2018-09-10 14:16:48]
ender :
Just look at “Anycubic Photon” or “Wanhao D7" to get an idea. Those “printers” use UV-Resin
[2018-09-10 14:16:50]
kilrah :
SLA is UV-cured resin
[2018-09-10 14:17:42]
ender :
It just has one movable axis and uses masked UV light (by means of a LCD Display) or a UV laser (expensive machines) to harden layer after layer moving up the model
[2018-09-10 14:18:53]
trulala69 :
I soo like to have one, but my administration will go crazy, if she detects another toy ...
[2018-09-10 14:19:20]
ender :
yep, i know that problem :wink:
[2018-09-10 14:20:01]
trulala69 :
Anycubis seem to be quite affordable ... but I guess the rein makes it expensive ...
[2018-09-10 14:20:06]
trulala69 :
resin
[2018-09-10 14:20:43]
trulala69 :
BTW any tries on FCC again?
[2018-09-10 14:31:29]
ender :
--> Resin: yes, printing costs in total might be abou 4x to 6x FDM.
[2018-09-10 14:31:38]
ender :
But results are XXX x impressive :slightly_smiling_face:
[2018-09-10 14:32:20]
ender :
FCC: i tried again and now i think i know (thx to Jan) what my problem is but need time to solve that riddle and try again, sorry real life is f*cking with me a lot these days :slightly_smiling_face:
[2018-09-10 14:34:49]
ender :
btw it was pure curiousity to print those leg protectors in Resin and not on my CR-10 :wink:
[2018-09-10 14:35:51]
trulala69 :
Take your time, mate ... I know what you're talking about, it was exactly the same reason, why the protector took so long, and printing 16 versions of it each with different problems. And hoestly I'm not a CAD guru either :smile:
[2018-09-10 15:54:50]
aciid :
does someone have experience with resin in real life and not "technology is awesome youtube life"
[2018-09-10 15:54:59]
aciid :
I'm seriously thinking about the health risks of resin printing
[2018-09-10 16:43:09]
trulala69 :
Testing with only 2 protectors on the rear legs completed. Better visibility of the Anafi, because I had only red PETG. No problems with flight stability. Range in CE land is about the same I guess, you never know. Overall the hovering is not on spot as with my spark, a little bit of drifting all the time, but I think that’s related to the Anafi.
[2018-09-10 18:02:55]
quad808 :
[2018-09-10 18:03:05]
quad808 :
[2018-09-10 18:03:15]
quad808 :
[2018-09-10 18:03:59]
quad808 :
@trulala69 Had to print in ABS, cause thats all we have atm...printed at 102%. Tight fit, is the space supposed to be there, 1st pic?
[2018-09-10 18:04:25]
quad808 :
I likey
[2018-09-10 18:13:42]
trulala69 :
Yes, perfect, looking good. I wasn’t able to get the part curved in a way to follow the arm and being able to put it on, that‘s why... but the tip should do it’s job hopefully.
[2018-09-10 18:15:01]
trulala69 :
Again, my CAD skills are limited, but mostly I get the part I want. This one was quite difficult for me.
[2018-09-10 18:19:54]
quad808 :
Just checking, and since I printed at 102%, it is a perfect snug fit. LOL...I guessed at 102%! First print. Thanks!
[2018-09-10 18:30:35]
quad808 :
I think I will put 2 reds in back and 2 blacks in front, although with the shape of the Anafi, don't think we could mistake the back for the front....lol
[2018-09-10 18:43:00]
trulala69 :
:+1:
Let’s hope the part will prevent the snapping and doesn’t brake anything else on a rougher landing. Someone has to test it now :joy:
[2018-09-10 22:34:10]
shell :
i’ll have to print these out tonight
[2018-09-10 22:41:52]
shell :
is this how the layering should look for this end?
[2018-09-10 22:42:06]
shell :
[2018-09-10 22:42:14]
shell :
[2018-09-10 23:31:07]
quad808 :
Thats how mine printed...looking at it now @shell
[2018-09-10 23:34:44]
quad808 :
[2018-09-11 00:50:04]
shell :
mine are almost done… about 20 minutes left on the printer
[2018-09-11 00:50:14]
shell :
[2018-09-11 02:25:29]
shell :
i’m calling it a night… print has been done for a while but i didn’t get around to pulling it off the bed
[2018-09-11 02:26:09]
shell :
curious… will these feet impact fitting the anafi in its cool travel case?
[2018-09-11 03:04:31]
quad808 :
FITS!! It is tight, but not too tight in the case. Wahoooooo
[2018-09-11 05:30:43]
trulala69 :
I had a look at mine and they were sliced the same. It’s an „error“ from the design processbut shouldn’t make a difference
[2018-09-11 07:38:52]
trulala69 :
Ok, it's not visible in the model, my S3D slices it the same. I know what happend and fixed, slicing ok now. The face wasn't even, on side was 1.06mm and the other 1.12mm. Good find, thanks!
[2018-09-11 12:08:04]
shell :
Did u go down to 1.06 or up to 1.12?
[2018-09-11 12:18:24]
sotiris.tripolitsioti :
Hi to all. Any news on the updated FCC hack for ver 1.1.0 of Anafi Firmware?
[2018-09-11 13:41:33]
trulala69 :
Question was answered yesterday ...
[2018-09-11 13:59:18]
trulala69 :
answer was not yet
[2018-09-11 14:45:44]
trulala69 :
@shell I went up to 1.15 as far as I can remember
[2018-09-11 18:51:58]
ender :
@aciid: well i own a Anycubic Photon since 2 weeks or so. Which real life experience do you need ?
[2018-09-11 19:11:54]
ender :
Seems like i will get plenty of time on the weekend to tinker with FCC, so lets hope :slightly_smiling_face:
[2018-09-11 19:29:09]
trulala69 :
Good luck!!
[2018-09-11 19:56:51]
shell :
<https://youtu.be/aB2yqeD0Nus>
[2018-09-11 20:40:04]
quad808 :
@ender remember my flight that I had where the Anafi kept going higher by itself and the only way to stop it was to hit land? Found out this happens frequently to the Anafi if you are in atti mode and it gets moved off course....it will keep going higher by itself with no throttle control. Lets hope Parrot fixes this. Still researching this.
[2018-09-11 21:31:27]
aciid :
@quad808 had that experience too, drifted towards woods. did not respond to any other than throttle
[2018-09-11 21:31:33]
aciid :
well down it came then
[2018-09-11 21:36:58]
quad808 :
quite alarming with no throttle control!
[2018-09-11 22:59:52]
info616 :
Today had a hard time to use FCC with fakeGPS. So far FCC worked as soon as I set US location with fakeGPS, even when I‘ve switched in mid-flight.
Today I’ve set location to US and Freeflight immediately showed distance to Anafi some 10000 km. But signal didn‘t improve. So hovered Anafi in front of me and wanted to switch to a 5 GHz channel but it didn‘t stick. Switched immediately back to prior 2.4 GHz channel. Landed Anafi and power-cycled it, same behavior. Was almost sure fakeGPS doesn’t work any more.
Tried more, closed and reopened app, pulled USB cable etc. and at some point switching to 5 GHz suddenly worked and signal was strong during the flight.
Is there a special order you have to follow when using fakeGPS? So far thought it doesn‘t matter.
Really hope ender can revive his hack so we do not need to use fakeGPS any more.
[2018-09-11 23:05:27]
info616 :
@trulala69 what did you use to design your protector, Fusion 360?
[2018-09-12 01:39:59]
shell :
installed my feet tonight…. they went right on once I figured out how to insert them
[2018-09-12 05:00:39]
trulala69 :
I wish I had the time to learn Fusion, I did it with 123D design
[2018-09-12 06:24:11]
ender :
About FakeGPS --> FCC Sometimes the Anafi gets “stuck” in whatever Country Code it is. I di never figure out when / how…
[2018-09-12 07:16:42]
ender :
Here is a little howto about “how to change button mapping / axis mapping / inversion on the Anafi Controller, please let me know what you think, i tried it several times but more checks cant hurt :slightly_smiling_face:
[2018-09-12 07:17:25]
ender :
How to change Anafi Controller mapping
[2018-09-12 08:34:29]
ender :
@shell: before i invest more time in the FCC patch, do you have reason to believe that you can simple set the country manually via SDK and thus gain FCC power ?
[2018-09-12 08:34:45]
shell :
nope
[2018-09-12 08:35:13]
shell :
the sdk will have its own restrictions, just like with the bebops
[2018-09-12 08:35:35]
ender :
Okay, so thats dead code in the apk :disappointed: Because in the APK “manual country mode” is all over there, og course disabled…
[2018-09-12 08:36:00]
ender :
--> but on the bebops we COULD set CC manually (or did tha not work in later SDK versions ?!)
[2018-09-12 08:36:33]
shell :
the drone itself will disallow any country code settings if it is in the US
[2018-09-12 08:36:57]
ender :
oooo kay … and outside of the US (much more interesting)
[2018-09-12 08:36:59]
shell :
i remember playing with this on the bebops
[2018-09-12 08:37:14]
shell :
outside the US it would allow changing the country code
[2018-09-12 08:37:27]
shell :
or so folks reported because i exposed that option
[2018-09-12 08:37:29]
ender :
i tried with your BETA to no success
[2018-09-12 08:37:35]
ender :
hmmm…
[2018-09-12 08:37:46]
ender :
i may have to try again…
[2018-09-12 08:37:49]
shell :
yeah, none of that stuff works on the anafi yet
[2018-09-12 08:38:00]
ender :
ah so you were talking bebop ?
[2018-09-12 08:38:06]
shell :
i’m not even sure what the anafi is doing with those commands
[2018-09-12 08:38:20]
shell :
likely ignoring them
[2018-09-12 08:38:21]
ender :
Any chance for an “alpha” to quickly try ?
[2018-09-12 08:38:32]
ender :
well the Parrot APP is clearly able to det CC
[2018-09-12 08:38:39]
ender :
(by arsdk)
[2018-09-12 08:38:47]
shell :
we already established that the anafi is not honoring any of the settings commands
[2018-09-12 08:39:04]
shell :
arsdk gets that info from the drone itself
[2018-09-12 08:39:15]
ender :
no wait, thats not true
[2018-09-12 08:39:47]
shell :
actually it is … at least what i wrote…. the entire country selection process is driven by the drone
[2018-09-12 08:39:50]
ender :
the chain of info is like this: App tells controller, Controller tells Anafi, Anafi acknowledges to controller, controller then sets own CC to the same as anafi
[2018-09-12 08:40:03]
ender :
the above is tested and verified
[2018-09-12 08:40:12]
ender :
you can also see in the logs on mpp3
[2018-09-12 08:40:37]
ender :
so anafi has priority over mpp3 but app is boss
[2018-09-12 08:40:43]
shell :
the actual country list comes from the drone too
[2018-09-12 08:40:51]
ender :
yes agreed
[2018-09-12 08:41:04]
shell :
let me see if i can find the bebop docs
[2018-09-12 08:41:12]
ender :
but app can change (otherwiese fakeGPS would not work, agreed ?!)
[2018-09-12 08:41:52]
ender :
at least on 1.07 i am 99% sure on App-->Mpp3-->Anafi--AMpp3 sequence
[2018-09-12 08:41:54]
shell :
here’s the event
[2018-09-12 08:41:57]
shell :
<https://developer.parrot.com/docs/reference/all/index.html?java#country-changed>
[2018-09-12 08:42:23]
shell :
and here’s the set command
[2018-09-12 08:42:25]
shell :
<https://developer.parrot.com/docs/reference/all/index.html?java#set-the-country>
[2018-09-12 08:42:49]
ender :
yes, thats what the anafi sends to the mpp3 in the end of the command chain
[2018-09-12 08:43:02]
ender :
i looked in the arsdk.so lib
[2018-09-12 08:43:11]
ender :
and as i said, it can be found in the logs.
[2018-09-12 08:43:20]
shell :
and then there are the “auto” events and commands
[2018-09-12 08:43:25]
shell :
<https://developer.parrot.com/docs/reference/all/index.html?java#auto-country-changed>
[2018-09-12 08:43:33]
ender :
yup but manual is my thing :slightly_smiling_face:
[2018-09-12 08:43:37]
shell :
<https://developer.parrot.com/docs/reference/all/index.html?java#enable-auto-country>
[2018-09-12 08:44:52]
ender :
Is there any reason you cannot believe the above mentioned sequence:
App-->Mpp3-->Anafi--Mpp3
[2018-09-12 08:44:53]
shell :
yeah, and here’s the 802.11x thing that i researched back in the day. interesting they actually mention it
[2018-09-12 08:44:55]
shell :
Enable auto-country.
If auto-country is set, the drone will guess its Wifi country by itself by checking other Wifi country around it.
[2018-09-12 08:45:15]
ender :
yes all that is POSSIBLE but seems not to be used
[2018-09-12 08:45:26]
shell :
the drone sniffs APs around it and will set its country code to what they broadcast
[2018-09-12 08:45:55]
ender :
Like i said, FakeGPS works…
[2018-09-12 08:46:31]
ender :
and the MPPD patch on 1.0.7 as well, injecting “US” hardwired in the chain of commend.
[2018-09-12 08:47:06]
ender :
i **do** hope that 1.10 did not flip the switch in all other aspects :slightly_smiling_face:
[2018-09-12 08:47:08]
shell :
are you disabling auto country?
[2018-09-12 08:47:16]
ender :
nope
[2018-09-12 08:47:30]
ender :
i am simply intercepting App CC “set wifi country” command
[2018-09-12 08:47:43]
ender :
i just FAIL as the ARMv7 Thumb adressing modes are so weird
[2018-09-12 08:48:12]
ender :
But i am open(and vulnerable) to the idea that they changed stuff in 1.1.0
[2018-09-12 08:48:29]
ender :
My successful implementation was 1.0.7
[2018-09-12 08:48:44]
shell :
i wonder what the value of auto country is
[2018-09-12 08:49:16]
ender :
IF i manage to inject US successful again and IF it does not enable FCC permanently THEN i care…
[2018-09-12 08:50:00]
ender :
Coming back to the beginning, any chance of an alpha from you that tries to set wifi cc to “US” hardwired ?
[2018-09-12 08:50:56]
shell :
i do remember from the bebops … and parrot is notorious for re-using code … manual country selection is completely nerfed if your drone is physically in the US (assuming it can figure that out via the geolocation AP sniffing stuff)
[2018-09-12 08:51:28]
ender :
but for US citizens its dumb to change FCC anyways, so …
[2018-09-12 08:51:35]
shell :
having never taken my drone out of the US i have personally never seen the manual stuff in action but coded it as such
[2018-09-12 08:52:47]
ender :
Yep you are living in txPower wonderland :slightly_smiling_face:
[2018-09-12 08:52:54]
shell :
there are a handful of 5ghz channels that are only available in like Japan from what i (vaguely) recall
[2018-09-12 08:53:19]
ender :
yes and also changes in indoor / ooutdoor txpower and stuff
[2018-09-12 08:53:21]
shell :
i have the original parrot chart around here somewhere
[2018-09-12 08:53:25]
shell :
yup yup
[2018-09-12 08:53:32]
ender :
That one is not precisely correct
[2018-09-12 08:53:51]
ender :
Lets say US have 90% of all goodies handy by default :slightly_smiling_face:
[2018-09-12 08:54:30]
shell :
yeah.
[2018-09-12 08:54:44]
shell :
last page of this doc (i pasted it into my documentaiton)
[2018-09-12 08:54:46]
shell :
<http://ee.shellware.com/ARPro3/ARPro3_Manual.pdf>
[2018-09-12 08:55:37]
ender :
As i said, at the time i found it its not 100% accurate but thats nitpicking…
[2018-09-12 08:55:40]
shell :
looking at it i’m trying to remember why i even wanted to try to change countries
[2018-09-12 09:02:47]
shell :
i think just to say i could
[2018-09-12 09:02:58]
ender :
Just tried as you made me Panic: Fake GPS still works even if Anafi has GPS lock for itself and could sense several CE WiFi Networks
[2018-09-12 09:03:00]
shell :
which i never could because i’m in the US lol
[2018-09-12 09:03:41]
shell :
i’m going to guess that your “EU / Non US” drone has auto country disabled by default
[2018-09-12 09:03:48]
ender :
when i try to launch your older Anafi BETA it quits back immediatly, timebomb ?
[2018-09-12 09:04:21]
shell :
i think i left the anafi code in .. just didn’t broadcast it
[2018-09-12 09:04:21]
ender :
(or sensing there is a newer version)
[2018-09-12 09:04:39]
shell :
remember, i never got mpp3 working. it will crash
[2018-09-12 09:07:27]
ender :
strange, the older BETA just quits on me, even if i switch of WiFi and reset App
[2018-09-12 09:07:41]
ender :
will upgrade to latest if you say Anafi stuff is still in there :slightly_smiling_face:
[2018-09-12 09:09:07]
shell :
it’s in there
[2018-09-12 09:09:08]
shell :
if (ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_ARDRONE.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_BEBOP_2.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_EVINRUDE.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_ANAFI.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_MINIDRONE.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_MINIDRONE_EVO_LIGHT.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_MINIDRONE_EVO_BRICK.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_MINIDRONE_EVO_HYDROFOIL.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_MINIDRONE_WINGX.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_MINIDRONE_DELOS3.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_POWER_UP.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_SKYCONTROLLER.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_SKYCONTROLLER_2.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_SKYCONTROLLER_2P.equals(product) ||
ARDISCOVERY_PRODUCT_ENUM.ARDISCOVERY_PRODUCT_SKYCONTROLLER_3.equals(product)) {
[2018-09-12 09:10:11]
ender :
updated to latest version, no go.
[2018-09-12 09:10:26]
ender :
WAIT i have to use it via wifi direct, NOT via mpp, me == idiot
[2018-09-12 09:10:31]
shell :
current beta is 1.5.1.3 i think
[2018-09-12 09:11:02]
shell :
build #162
[2018-09-12 09:11:26]
shell :
whoops
[2018-09-12 09:11:28]
shell :
versionCode 164
versionName “1.5.1.4”
[2018-09-12 09:12:50]
shell :
heh
[2018-09-12 09:12:54]
shell :
i just got your crash log
[2018-09-12 09:13:02]
shell :
i freaking love firebase and fabric
[2018-09-12 09:13:07]
shell :
43 | 08:57:25:552 (UTC) | D/CrashlyticsCore c: Start discovering
44 | 08:57:25:552 (UTC) | D/CrashlyticsCore DiscoveryActivity: onDronesListUpdated count=0
45 | 08:57:25:772 (UTC) | D/CrashlyticsCore DiscoveryActivity: adding Skycontroller 3 libmux over USB network
46 | 08:57:25:772 (UTC) | D/CrashlyticsCore DiscoveryActivity: onDronesListUpdated count=1
47 | 08:57:26:544 (UTC) | D/CrashlyticsCore DiscoveryActivity: DiscoveryRunnable
48 | 08:57:26:546 (UTC) | D/CrashlyticsCore DiscoveryActivity: DiscoveryRunnable connect
49 | 08:57:26:551 (UTC) | D/CrashlyticsCore DroneDataService: Service Intent com.shellware.arpro3.action.CONNECT received
50 | 08:57:26:618 (UTC) | D/CrashlyticsCore b: onStateChanged=ARCONTROLLER_DEVICE_STATE_STARTING
[2018-09-12 09:14:10]
shell :
followed by a segfault
[2018-09-12 09:14:13]
shell :
Crashed: Thread
SIGSEGV 0x00ffffffffffffe0
[2018-09-12 09:15:46]
shell :
and yeah, you’re a couple versions back too
[2018-09-12 09:16:02]
shell :
Version 1.5.1.1 (159)
[2018-09-12 09:16:22]
shell :
holy crap
[2018-09-12 09:16:31]
shell :
you only have 3% RAM free on your little CLT-L29
[2018-09-12 09:16:46]
ender :
Okay, using wifi direct i was able to connect with latest version but playing with CC does not change txpower. Back to FF6 & FakeGPS then worked again…
[2018-09-12 09:17:02]
ender :
yeah CLT-29 is old and outdated :slightly_smiling_face:
[2018-09-12 09:17:30]
shell :
i’m surprised it isn’t OOM’ing
[2018-09-12 09:17:40]
ender :
oh whats that ?
[2018-09-12 09:18:26]
shell :
out of memory
[2018-09-12 09:18:30]
shell :
go boom
[2018-09-12 09:18:41]
ender :
ah
[2018-09-12 09:19:02]
shell :
pretty impressive it is running with only 3% RAM available. it is not even trying to trim either
[2018-09-12 09:19:24]
ender :
I wonder if thats correct as i did not have high app load
[2018-09-12 09:21:24]
ender :
Nevertheless to summarize: changing CC in [Ar.Pro](http://Ar.Pro) does not help, if you dont have an idea to do it “differently” the MPPD patch seems the only good way to gain FCC in CE countries besides crappy FakeGPS that for some unknown reason does not ALWAYS work… Agreed ? Or any idea on that ?
[2018-09-12 09:21:56]
ender :
And right now i still stand behind my CC chain of command :stuck_out_tongue:
[2018-09-12 09:28:16]
shell :
for now, definitely. i need to be able to vet out the sdk because none of the settings commands are actually doing anything today
[2018-09-12 09:32:09]
ender :
I better reformulate my CC to:
CC Code propagation:
APP ---> MPP3(mppd) ---> ANAFI ---> MPP3(wifid)
[2018-09-12 09:32:41]
ender :
to be understood like: mppd just “routes through” the cc code and wifid really sets it for the MPP3
[2018-09-12 15:45:35]
shell :
or
[2018-09-12 15:46:06]
shell :
APP ---> MPP3(mppd) --> ANAFI --> MPP3(wifid) --> APP
[2018-09-12 15:46:18]
shell :
MPP3 is just a forwarder / gateway / proxy
[2018-09-12 15:48:01]
ender :
mppd is just a forwarder, yes
[2018-09-12 15:48:10]
ender :
wifid is a setter (for controller).
[2018-09-12 15:48:21]
ender :
And having the same start & end point makes no sense in this case IMO :slightly_smiling_face:
[2018-09-12 15:48:41]
ender :
Like i said: FakeGPS works so smartdevice is highest Prio.
[2018-09-12 15:48:50]
ender :
( == APP)
[2018-09-12 15:49:23]
ender :
It might be that app finally would display Anafi CC but thats not enabled by default in the APP and irrelevant to us…
[2018-09-12 16:52:38]
shell :
be thankful that the 802.11x geolocation stuff was never widely adopted…. otherwise everyone would be forced into auto mode. I am willing to bet the reason why it is locked like this in the US is because the FCC said it had to be enforceable by the vendor (Parrot).
[2018-09-12 16:53:22]
shell :
and Parrot is just getting lucky getting it past EU regulators
[2018-09-12 16:58:51]
ender :
i am, i am
[2018-09-12 17:14:27]
ender :
But Parrot (and any other drone manufacturer) would also seriously loose sales in every CE country without easy means to enforce FCC. As range sucks without it…
[2018-09-12 17:45:38]
shell :
i can’t state the obvious. i’m sure it is known.
[2018-09-12 17:46:40]
shell :
they could face fines and other penalties if they knowingly allowed their equipment to be used in a manner that violates restrictions imposed by the big government regulators
[2018-09-12 18:22:43]
ender :
Thats extremely hypothetical as long as they dont step on somebodies toes. As all drone manufacturers prove since years…
[2018-09-12 19:16:05]
trulala69 :
Guys , what is your max vertical speed? I’ve set it to max, but had a very scary decend. Ok I must admit it was straight down so I got into the prop wash... Jep and CE definitely sucks...
[2018-09-12 21:08:22]
info616 :
I think ender is right. The dismiss „your drone is set to the wrong country“ dialog to get FCC on DJI drones is really laughable. The fact that DJI leaves that hole open clearly states they play devils advocate in fear of loosing sales in the CE world in case they close it.
I‘m wondering why Parrot made things so overly complicated with setting the cc. The fact, that they are unable to activate even the allowed 5GHz channels in Germany makes the impression they got lost in their own programming.
[2018-09-12 21:26:17]
kilrah :
They made a blog post back in the bebop days on how the regulations per country were complex and how they did a good job of looking everything up, except they actually made a bunch of mistakes and never corrected them
[2018-09-13 05:42:01]
sotiris.tripolitsioti :
@info616 Parrot has been fined by French Civil Aviation Authority for leaving "open doors" in their firmware and app (like the ability for the user to choose signal band found on previous Freeflight versions), so its CEO made a bold statement last year, that he will "obey" the "rules" in their next drone (aka Anafi), hence the restrictions. Do not forget that Parrot is in an EU country with much more strict rules to follow. S
[2018-09-13 12:30:57]
ender :
@sotiris.tripolitsioti seeing what DJI, Parrot and others are doing i wonder why we DO still have drones beeing allowed to be sold & flown in the EU to be honest :slightly_smiling_face:
[2018-09-13 12:36:45]
sotiris.tripolitsioti :
@ender Good question! From suppliers view point EU is a huge market (despite the strict regulations) that they don't want to loose. So they "act" according to the rules but leave "back doors" open for "further tweaking". EU officials do not care, simple as that. And we, the users, are caught in between :slightly_smiling_face:
[2018-09-13 18:42:55]
crazycuban :
@sotiris.tripolitsioti not doubting you, but do you have an article you can reference about Parrot being fined? Would be great to read it.
[2018-09-14 08:13:36]
sotiris.tripolitsioti :
@crazycuban I am afraid there is no article that I know of. This information came into my knowledge via a close friend that interviewed Parrot Executives some time ago. In any case, this is also reflected in the new Freeflight 6 app (specific for anafi), that does not allow country or signal change, like in previous versions of the app. S
[2018-09-15 06:58:35]
mainframe :
@ender parrot communication protocol is unauthenticated. If one would know exact comm sequence for setting drone country we could actually alter traffic on skyctrl - and possibly even without patching mppd.
[2018-09-15 09:05:35]
ender :
@andres yes that was another line of thinking. And for CC code setting we do know the sequence. (i posted the log earlier here).
[2018-09-15 09:34:55]
mainframe :
Do you have also bootup udp packet dumps for both EU and US locations?
[2018-09-15 10:11:30]
trulala69 :
Just in case you missed this. Someone on FB used a flightplan for shoots pano... interesting approach...
[2018-09-15 10:57:45]
ender :
yes, t69, i already did that as well. Nevertheless Parrot should integrate it.
[2018-09-15 11:35:42]
trulala69 :
Yes they should! Didn’t try it yet. My problem is, I don’t see how to change this for another waypoint or photo location without creating all the steps again?!
[2018-09-15 14:11:35]
shell :
There was a post regarding this on the Dev forum... Not sure if it is the same plan (perhaps he learned). His first attempt caused the FP to stall and the drone to throw an SD card read/write error until rebooted.
[2018-09-16 19:47:47]
ender :
any FCC Beta testers ?
[2018-09-16 19:47:51]
ender :
:slightly_smiling_face:
[2018-09-16 19:48:49]
ender :
(make that ALPHA)
[2018-09-16 20:19:40]
info616 :
@trulala69 the whole flightplan is just one waypoint. So you load this flightplan and move that waypoint to your current location. You might need to change the height as well.
[2018-09-16 20:22:01]
info616 :
@ender I‘m happy to test. :wink:
[2018-09-16 20:23:21]
ender :
aciid just testing but here you go:
[2018-09-16 20:23:27]
ender :
[2018-09-16 20:27:04]
ender :
Pete & all, you need to testflight, measuring on the Anafi is SO hard because of that autopower levelling.
[2018-09-16 20:29:20]
ender :
Aciid has a first positive result with HackRF measurement
[2018-09-16 20:31:04]
ender :
Before hack in Aciids lab
[2018-09-16 20:31:24]
ender :
After hack in Aciids lab
[2018-09-16 20:34:40]
aciid :
I'll add to this, that the RX antenna in SDR was heavily attentuated. so this result is accurate as in that FCC gain result can be validated from decibels relative to full scale on spectrum.
thanks @ender for your hard work on this patch and your friends who have helped you to trace the disassembly
[2018-09-16 20:36:39]
ender :
friends namely: aciid, BiOhazard, Jan
[2018-09-16 20:39:34]
ender :
@info616: As soon as you got positive “real world” results i will post in our home forum…
[2018-09-16 20:39:51]
ender :
I will fly tomorrow as well if its not raining cats&dogs
[2018-09-16 20:49:52]
mr.vibez :
Well done @ender
[2018-09-16 20:56:02]
ender :
I AM sure that we got the same improvement as with FakeGPS. I am not 100% if we got BOTH devices boosted, Anafi and Controller. Measurements will show later :slightly_smiling_face: But for now i am happy as a puppy :slightly_smiling_face:
[2018-09-16 20:59:26]
ender :
good night guys, needsome sleep, tough weekend :slightly_smiling_face:
[2018-09-17 05:17:41]
d95gas :
@ender Nice work, you got there with determination and fingers crossed it all pays off. I wont be able to test till the weekend as I am on the road all week, but Anafi will be with me and I will see what I can squeeze in.... well done :thumbsup_all:
[2018-09-17 06:17:44]
trulala69 :
Well done, @ender! I have no idea how to apply the patch, but sure I‘m willing to test it!
Thanks for the hint, @Pete!
[2018-09-17 06:32:43]
trulala69 :
@quad808 I just came across the “discussion” about the design of the leg protectors on rcgroups. It seems to be always the same... thanks for defending me!
[2018-09-17 07:02:34]
ender :
@channel : @all: this was JUST for testing, please dont redistribute outside the group as you are on the wrong side of the law. The archive contains a patched binary (c) by Parrot. I’ll write a patch app…
[2018-09-17 07:08:41]
d95gas :
Fully understood @ender
[2018-09-17 07:12:10]
ender :
Thx, i should have mentioned that in the first place, dont want to get anyone in trouble :slightly_smiling_face:
[2018-09-17 07:17:41]
trulala69 :
Thanks and understood...
[2018-09-17 07:33:23]
d95gas :
Now I just need to see if the patch will work running Linux (WSL) on Windows 10, or Kali
[2018-09-17 07:39:37]
d95gas :
Quick read indicates WSL gives no USB Support...... Looks like there are a couple of work arounds, but to be honest its probably going to be quicker and easier just to boot my Linux VM and do the patch that way
[2018-09-17 08:19:33]
kilrah :
uuuh you don't need no linux there?
[2018-09-17 08:22:10]
ender :
you can also connect the pc / machine via wifi to the anafi and do the adb connect to the controller IP in the anafi network… No need for USB adb then…
[2018-09-17 08:22:14]
ender :
let me check the ip…
[2018-09-17 08:24:24]
ender :
btw quick’n easy ADB installation for windows is here:
<https://www.chip.de/downloads/Minimal-ADB-and-Fastboot_62500183.html>
[2018-09-17 08:24:38]
ender :
(in german, sorry, otherwise search for “minimal adb”
[2018-09-17 08:26:28]
ender :
If you dont use USB connection but wifi you can reach controller by:
adb connect 192.168.42.9:9050
[2018-09-17 08:48:59]
d95gas :
Will have a look at that :wink: thanks
[2018-09-17 08:57:28]
trulala69 :
Ok, thanks again to all who spent so much time to free our Anafis...
[2018-09-17 08:57:28]
d95gas :
Downloaded and installed, works fine, just have to be careful as it trys to install 2 crapware apps...... Fortunately I knew "Nein" was "No" :slightly_smiling_face:
[2018-09-17 08:57:53]
ender :
:+1:
[2018-09-17 08:58:23]
trulala69 :
So, you just upload the patches binary via adb then, right?
[2018-09-17 08:58:35]
trulala69 :
Patched
[2018-09-17 08:59:27]
ender :
and dont forget chmod 755 :slightly_smiling_face:
[2018-09-17 08:59:47]
ender :
as inthe howto. if you detect faults in the howto, please say so !
[2018-09-17 09:18:22]
trulala69 :
Ahh, perfect, instructions for OSX ... I'm a Unix guy anyway, so shouldn't be a problem.
[2018-09-17 12:07:40]
ender :
I got a batch file & tool ready to pull the original file, patch it and reup it. So that archive (after testing) could be shared without getting in conflict i’d say… Still testing, my practical test was 100% okay, seemingly same improvement as using FakeGPS but with okay distance & radar display.
[2018-09-17 12:22:51]
ender :
As a sidenote: nearly crashed as i still had a axis inversion (yaw) in place for testing to change the controller mapping, some leaves sadly lost their connection to the branch and my props are slightly green now :wink:
[2018-09-17 12:50:05]
trulala69 :
Oh dear... BTW what app do you use to measure the Wi-Fi signal strength? I know lots of silly questions today...
[2018-09-17 13:02:36]
ender :
I used the MacBook built in tool. But it sucks bad. Real life test beats it especially because of the auto power levelling…
[2018-09-17 13:02:55]
ender :
My hardware RF-Meter is going haywire :slightly_smiling_face:
[2018-09-17 13:03:20]
ender :
The controller can be asked about his current TxPower so that side is 100% acknowledged.
[2018-09-17 13:03:40]
trulala69 :
Ok, thanks
[2018-09-17 13:03:46]
info616 :
replaced mppd and rebooted Controller.
Hmm, only channels 1 - 11 and 151, 155, 159. 15x are not selectable. With FakeGPS set to US I see much more channels and all are selectable.
So if your patch should give the exact same results as FakeGPS set to US I’d say no, doesn’t work.
[2018-09-17 13:05:00]
ender :
How about the real test, range ?
[2018-09-17 13:06:24]
ender :
BUT: you are right, the APP does not see US as it does with FakeGPS..
[2018-09-17 13:07:23]
ender :
I was under the impression that the app gets the allowed bands from the Anafi, lets check…
[2018-09-17 13:09:02]
info616 :
Just wanted to do that but was puzzled about the channel display. Also signal strength overlay is not displayed as with FakeGPS.
[2018-09-17 13:09:04]
ender :
I can see & select 1-11, 151, 155, 159, same as you Pete ?
[2018-09-17 13:09:43]
info616 :
Yes and 151, 155, 159 do not stick. Same as with stock.
[2018-09-17 13:09:56]
ender :
“do not stick” means ?
[2018-09-17 13:10:06]
ender :
(i never fly 5G so i dont know)
[2018-09-17 13:10:50]
info616 :
You can select one but it jumps back to the last 2.4 Ghz channel.
[2018-09-17 13:11:30]
ender :
i definately can select one but it will not connectthen :slightly_smiling_face: Anafi becomes invisible for law abiding german WiFi settings :slightly_smiling_face:
[2018-09-17 13:11:33]
info616 :
I don’t use 5GHz either. But it can be handy in crowded areas
[2018-09-17 13:11:39]
ender :
i know
[2018-09-17 13:12:12]
ender :
if you connect the controller via adb and get a “adb shell” and type “iwconfig” and “iw reg get” you’ll see the truth.
[2018-09-17 13:12:32]
ender :
== high output (hopefully) of 23 dB instead 14 dB. and US instead of DE
[2018-09-17 13:12:56]
ender :
could you try ?
[2018-09-17 13:13:00]
info616 :
Before 1.1.0 you could use 15x channels without using the controller.
[2018-09-17 13:13:17]
ender :
so its a 1.1.0 problem ?!
[2018-09-17 13:14:52]
info616 :
Nope with controller it was always that the 3x 15x channels are displayed but they don’t stick.
[2018-09-17 13:16:48]
info616 :
Btw. the 4x channels are allowed in Germany but they are not displayed at all unless you use FakeGPS. Parrots whole Wifi channel management is badly broken.
[2018-09-17 13:17:13]
ender :
yup. could you please check TxPower by Controller ADB ?
[2018-09-17 13:17:48]
ender :
So would you think we still could use FakeGPS for channel selection and then switch it off ?
[2018-09-17 13:18:56]
ender :
As i personally dont care i wont patch the app just for channel selection which will probably fixed in the next releases. And “normal” users cannot do it as you need to insert Google API key to have maps. SO its not something one can generally release as patch even if one finds the stuff to patch.
[2018-09-17 13:18:58]
ender :
:disappointed:
[2018-09-17 13:22:24]
info616 :
iwconfig says 25 dBm
Don’t see anything about US or DE
[2018-09-17 13:29:26]
ender :
25 is great
[2018-09-17 13:29:28]
ender :
iw reg get
[2018-09-17 13:29:36]
ender :
will give you CC but its US.
[2018-09-17 13:29:45]
ender :
DE is 14 dB
[2018-09-17 13:29:52]
ender :
yihaaaaaaaaaa :slightly_smiling_face:
[2018-09-17 13:37:35]
info616 :
Yep iw reg get gives: US, DFS-FCC
[2018-09-17 13:39:33]
info616 :
I’ll go out and do some real world tests …
[2018-09-17 13:44:56]
ender :
:+1:
[2018-09-17 13:47:46]
info616 :
Weird, selected channel 48 while FakeGPS was running. Shut FakeGPS off, channel switched to 6 but all US channels were still available. Switched again to 48 and now it stayed without FakeGPS. Well Anafi has no GPS currently as I’m indoors, so no real test.
[2018-09-17 13:48:05]
ender :
yep, fooled me once…
[2018-09-17 14:09:19]
info616 :
Seems it works even with a GPS lock on the Anafi. Channel always switches to a 2.4 Ghz channel on disabling FakeGPS but all the US 5 Ghz channels are still selectable and stick if you choose one.
You must be in manual channel selection mode for this and it only works until you relaunch of the app.
[2018-09-17 14:16:09]
ender :
okay, like i said, i dont care for that too much, its Parrots task to fix it :slightly_smiling_face:
[2018-09-17 14:16:12]
ender :
But GREAT :slightly_smiling_face:
[2018-09-17 16:59:17]
hostile :
@bryanhalf you probably wanna be in here too
[2018-09-17 16:59:19]
bryanhalf :
@bryanhalf has joined the channel
[2018-09-17 17:04:41]
ender :
Hi there, got an Anafi already ? :slightly_smiling_face:
[2018-09-17 17:53:08]
info616 :
first results: Range is almost identical to range I get with FakeGPS. Around 800m before I get the first yellow warning. Flew further till 1200m without noticeable dropouts.
Strangly on iOS first yellow warning was around 500m but could also fly further to about 900m, when video started to degrade.
All flights were done at 50m height due to restrictions in this area. Range is probably bigger at 100m height.
While I‘m overall pleased with the range, I think we in CE country do not gain that much range as expected with FCC. At the same location I flew 800m as well with CE power. BUT it took 2 steps in-between where signal strenght jumped up from zero to full strength. I suspect after the 2nd boost, the controller is almost sending with FCC power. Don‘t know whether this is legal but maybe the CE power limit may be legally exceeded for a short period of time.
In FCC mode whether with your hack or via FakeGPS I do not see such a boost at certein distances. When the yellow warning is displayed, it stays until you fly back.
But even if the range is not so much bigger in FCC mode not having to wait until the signal boost kicks in is welcome.
[2018-09-17 18:04:07]
ender :
You should “forget” the range warnings.
[2018-09-17 18:04:39]
ender :
You can easyíly fly twice as far if not more. The warning is very pessimistic OR it does not factor in auto power levelling.
[2018-09-17 18:06:58]
ender :
But there is one thing i still dont know, maybe aciid can measure it: I know for 100%that the Controller output is greatly boosted. I do NOT now for sure if the Anafi TxPower is also boosted. I know its the same power behavior as FakeGPS but it do NOT know if its identical to “being in a FCC country” behaviour.
Its only a little doubt as the Anafi acknowledges the setting to US in the logs. But i would prefer measurements that prove it beyond doubt.
Not that we can do much against it if it turns out NOT to boost the Anafi as long as its not open ( == shell access on root level).
[2018-09-17 18:07:55]
ender :
There is an option in the Controller to use constant high power instead of auto power, will play with it when i got the time.
[2018-09-17 18:09:07]
ender :
Maybe its not wise as high power Wifi can loose connection nearby because ofsignal saturation but I’ll learn :slightly_smiling_face:
[2018-09-17 18:10:53]
ender :
Beeing curious , have a link ? Better then soap opera probably :slightly_smiling_face:
[2018-09-17 18:12:52]
quad808 :
@ender GREAT WORK!!
[2018-09-17 18:17:39]
ender :
BTW there might be ways to boost power beyond FCC….
[2018-09-17 18:26:55]
quad808 :
Just posted an Anafi video I made on a recent trip. Yes I could have edited better, and well...the music kind of sucks, but it was free to use. It was very, VERY windy...wasn't sure if the Anafi would return...LOL <https://www.youtube.com/watch?v=TqudPdD64Gk>
[2018-09-17 18:27:37]
quad808 :
and never mind the danger of trying to land among trees and threading the needle.
[2018-09-17 18:28:24]
ender :
Whoa Jagerbomb must really have had a bad day (or two)… Nuff said, hilarious…
[2018-09-17 18:30:21]
ender :
Looks great, you should just cut off the last 25 secs as we see you were too chicken to hit the trees :stuck_out_tongue:
[2018-09-17 18:30:36]
quad808 :
bwahahahahaha
[2018-09-17 18:30:58]
ender :
“No good flight without a broken prop” goes the sayin’
[2018-09-17 18:31:06]
quad808 :
needs to be way shorter video...I was in a hurry....spouse pressure and all
[2018-09-17 18:32:22]
quad808 :
She is the non-clapping one at the end...
[2018-09-17 18:39:09]
ender :
lolz
[2018-09-17 18:39:24]
ender :
Does she already hate drones or is she neutral yet ?
[2018-09-17 18:48:56]
kilrah :
lol that guy is a total moron
[2018-09-17 18:57:05]
quad808 :
No...she likes them, even if I have a crap ton of them.
[2018-09-17 19:01:22]
ender :
lucky bastard :slightly_smiling_face:
[2018-09-17 19:18:51]
trulala69 :
@quad808 No problem with sharing it, but this kind of rant was why I was really thinking about publishing it on TV at all as it isn’t too far away from the other design, but in the end I thought it would help people. It wasn’t my intention to copy or make any money out of it. BTW nice video of a nice place to be :+1:
[2018-09-17 20:22:48]
info616 :
@ender I know you can ignore the warning and fly further. The difference between CE and FCC is, in CE you can get bad video stream until the signal boost kicks in. In FCC I do not see that periodic signal boost. Either they do it smoother in FCC mode or they don’t do it at all.
Maybe aciid can shed some light on this weird signal boost thing.
Anyway it is great to be able to fly up to 1 km and beyond without signal loss or stuttering video feed. Great job you’ve did. :+1:
[2018-09-17 20:25:26]
info616 :
I hope Parrot doesn’t screw it with the next firmware update.
[2018-09-17 20:30:49]
ender :
I experience the same behaviour on FCC, MAYBE it is smoother which is nice :slightly_smiling_face: But as i said maybe one can play with constant TxPower…
[2018-09-17 20:39:57]
info616 :
if it is smoother, why are they doing it differently in CE. Makes no sense.
I believe they use constant TxPower on FCC and do this boost thing on CE to be in compliance with EU regulations but at the same time can advertise longer range. Maybe there are exceptions in the EU regulations that you may use more power for a shorter period or if you switch to a pulsed transmission protocol. All pure speculations, I havn’t done any research.
[2018-09-17 21:03:33]
ender :
no they dont.
[2018-09-17 21:03:46]
ender :
you can look in the driver files, no need to speculate
[2018-09-17 21:03:58]
ender :
maybe to you it seems smoother.
[2018-09-17 21:04:16]
ender :
maybe it IS on that power level but the driver setup stays the same.
[2018-09-17 21:04:48]
ender :
does that nitpicking matter ? The real question is whether modification of the driver config is accepted THEN the games can start.
[2018-09-17 21:15:20]
info616 :
concerning our discussion this afternoon about dBm. You’ve said my 25 dBm signal is great and de usually is only 14 dBm.
Are these really positive values. -30 dBm is said to be a very strong signal for a Wifi router. Can’t be the same scale or the controller would emit the power of 100000 routers ?!?
[2018-09-17 21:15:54]
ender :
thats just the output of iwconfig.
[2018-09-17 21:16:06]
ender :
for dB the only interesting is the difference 25-14 0 11
[2018-09-17 21:16:26]
ender :
and in that “language” the max for FCC is 30
[2018-09-17 21:16:45]
ender :
the missing 5 dB are to make up for Antenna gain to not exceed 30 EIRP
[2018-09-17 21:17:35]
ender :
Look here:
[2018-09-17 21:17:36]
ender :
<https://www.rapidtables.com/convert/power/dBm_to_mW.html>
[2018-09-17 21:18:20]
ender :
Thats works, 14 + 5 = 19 = 80 mW, slightly under German / CE 100mW EIRP
[2018-09-17 21:18:51]
ender :
(assumed that Antnna gain is 5, probably between 5 & 6 and they play it safe. You can find Antenna gain calibration logs in the Controller)
[2018-09-17 21:20:12]
info616 :
each 10 dBm is a difference of 10x right?
[2018-09-17 21:20:39]
ender :
no
[2018-09-17 21:21:01]
ender :
well it depends :slightly_smiling_face:
[2018-09-17 21:21:16]
ender :
in this dB to mW yes
[2018-09-17 21:21:25]
ender :
but not generally speaking.
[2018-09-17 21:21:54]
ender :
Whats your point ? We try to get optimized TxPower, evrything else is mumbo jumbo
[2018-09-17 21:22:32]
info616 :
Just understanding thing ...
[2018-09-17 21:22:37]
ender :
If you dont believe the numbers that iwconfig and crda deliver you have to measure. I guess they are pretty exact seeing all the calibration that happened
[2018-09-17 21:22:51]
ender :
understanding is easy: more is better until melting point :slightly_smiling_face:
[2018-09-17 21:23:14]
ender :
Nahhh joking. Some chipsets have imploding SNR when they go high but thats too complex for this place
[2018-09-17 21:23:40]
ender :
SNR is more important then raw dBm but as we cannot change it we better care for dBm
[2018-09-17 21:24:26]
ender :
I still love my $20 XIamomi Nano YOuth Router with approx 90mW output that blows away a 100 Euro TPLink with 500mW as it is EXCELLENT.
[2018-09-17 21:24:42]
ender :
Also i have a 500mW Amp that blows away a Sunhans 5W
[2018-09-17 21:25:08]
ender :
but it depends of the stuff you want to penetratem just distance or noise or matter.
[2018-09-17 21:25:21]
ender :
then comes MIMO 2x2 Strategy, Beam forming, etc. PP
[2018-09-17 21:25:37]
ender :
10 years and one still doesnt know much in that sector
[2018-09-17 21:26:27]
aciid :
@ender xiaomi 90mW output on which band?
[2018-09-17 21:27:33]
ender :
2,4 GHz :slightly_smiling_face:
[2018-09-17 21:27:48]
ender :
They are SO hard to get as everyone accepted they are a GEM. I have still 2, had 5
[2018-09-17 21:27:52]
ender :
Gave 3 to friends
[2018-09-17 21:28:16]
ender :
saw one going for > 150 Euro, lol
[2018-09-17 21:29:18]
ender :
Guys, need to catch some sleep :slightly_smiling_face: @info616:i really hope to play with the way the power is regulated soon… NIGHT :slightly_smiling_face:
[2018-09-17 21:29:29]
info616 :
huh, I’m loosing track ...
But according to the conversion table 30 dBm is 1000 mW. So roughly 12x CE.
[2018-09-17 21:31:59]
aciid :
well yeah, but that doesnt mean measured mW's
[2018-09-17 21:32:14]
aciid :
@ender hows that RF power meter measurement coming along
[2018-09-17 21:32:50]
aciid :
iwconfig is just what it "sets", antennas and every speck of solder all add up to what the final reading is.
[2018-09-17 21:35:46]
info616 :
yes, of cause. Was just a theoretical comparison.
I thought you are doing these RF measurements.
[2018-09-17 21:46:30]
aciid :
yeah but they are relative to my physical attentuors
[2018-09-17 21:46:42]
aciid :
I don't have a calibrated source
[2018-09-18 12:01:09]
shell :
[2018-09-18 12:21:28]
ender :
:+1:
[2018-09-18 12:21:55]
ender :
Jagerbomb had some outbursts before in the MP thread. Dont feed the trolls, ignore him.
[2018-09-18 18:46:47]
trulala69 :
I was just about to try to transfer the patched bin and I realised I don’t have a USBA to USBA cable.
[2018-09-18 19:01:07]
ender :
you dont need
[2018-09-18 19:01:16]
ender :
usb to usb c will be fine :slightly_smiling_face:
[2018-09-18 19:01:30]
ender :
but you can do it via wifi as well
[2018-09-18 19:05:04]
trulala69 :
Really? Great, thanks for the hint!! I thought the USBc is just for charging the remote...
[2018-09-18 19:12:50]
ender :
adb usb you need linux or osx !
[2018-09-18 19:12:56]
ender :
win needs to be done via wifi
[2018-09-18 19:39:57]
trulala69 :
Had to wait for a wife free slot ... job done, howto works perfectly ... iw reg get claims to be in GB though, where I was over the wekend, but I haven't connected it to the phone/app yet ... more testing tomorrow.
[2018-09-18 19:40:55]
trulala69 :
Btw done with osx
[2018-09-18 22:06:00]
shell :
It has been a lllooonnng time since I used my rcg account
[2018-09-18 23:37:57]
shell :
I need a wife free slot. Pointers welcome ;)
[2018-09-19 05:57:52]
trulala69 :
:joy:
[2018-09-19 06:07:32]
ender :
:wink:
[2018-09-19 06:08:17]
ender :
@trulala69: yep you have to connect the app the the Controller so the APp sends a CC that the patch can modify :slightly_smiling_face:
[2018-09-19 06:08:50]
ender :
yep, only in times of big need should thou read RCG, beliver !!!
[2018-09-20 12:15:18]
trulala69 :
@ender After a short flight it’s now US! So far so good :+1: Can’t do a range test as I forget a wife free slot doesn’t mean automatically kids free zone :see_no_evil:
[2018-09-20 12:15:35]
ender :
haha same world i am living in
[2018-09-20 12:15:56]
trulala69 :
Daddy home alone...
[2018-09-20 12:16:34]
trulala69 :
BTW my Anafi is drifting a lot in comparison to the Spark. Normal or is there any cure?
[2018-09-20 12:18:47]
ender :
hmm it should be very stable after latest updates. Really try too do a smooth mag calibration in the middle of the lawn (no metal).
[2018-09-20 12:19:03]
ender :
Since latest FW and GOOD calibration its very solid for me.
[2018-09-20 12:21:49]
trulala69 :
Ok, I did a very quick calibration as I've read doing it to slow like I do with my DIY Controllers is breaking the calibration. Will do one again ...
[2018-09-20 12:30:31]
trulala69 :
Ok, don't trust the internet and it's "experts". I did it like I'm ised to do it, slowly, and now it's far more stable! Thanks again, mate!
[2018-09-20 12:43:01]
ender :
yihaaaa
[2018-09-20 19:31:14]
quad808 :
This is a good tip...I need to recalibrate mine too.
[2018-09-20 21:32:08]
vo :
ARSDK supports Anafi yet? Last I read the flight commands work but no word on video
[2018-09-20 21:33:15]
vo :
on the Bebop2 I've been doing something similar to the 4G thing at [uavpal.com](http://uavpal.com) but with wireless mesh networks
[2018-09-20 21:33:31]
vo :
hoping i can get my Anafi set up the same way
[2018-09-21 06:43:37]
ender :
Hi !
[2018-09-21 06:45:22]
ender :
@vo: ARSDK supports the Anafi already but there are difficulties (live stream, parameters set are not consistent, crash when connecting to MPP3).
@shell is here in the group, Author of [Ar.Pro](http://Ar.Pro) and connected with wifi you can already control the Anafi (no live stream as mentioned).
SO: half YES and half NO
[2018-09-21 08:41:20]
kilrah :
anyone have some photo samples from the anafi in RAW?
[2018-09-21 08:47:16]
ender :
yep of course. i did a lengthy comparison in kopterforum.
[2018-09-21 08:47:30]
ender :
i am “nearly” on the road, let me check.
[2018-09-21 08:47:59]
ender :
latest adobe products have the lens profile integrated, its quite distorted.
[2018-09-21 08:48:11]
ender :
normal light ? or low light ?
[2018-09-21 08:51:22]
kilrah :
normal
[2018-09-21 08:52:25]
ender :
damn i only got a fewlocal and server is already down, i’ll packthem up and send a link via wetransfer. Pretty low light (cloudy, 19:40).
[2018-09-21 08:52:43]
ender :
can get you perfect-light ones on Sunday if you want, just remind me.
[2018-09-21 08:52:56]
kilrah :
ok, no rush
[2018-09-21 08:53:35]
ender :
need to rush, stuff packed, wife yellin’
[2018-09-21 08:57:46]
trulala69 :
Oh, this the same at your place with the question "What are you doing now? HUUURRRYY!" ? Everywhere the same :slightly_smiling_face: ...
[2018-09-21 08:58:11]
ender :
LAST time i forgot all copters, MAN was i p*ssed..
[2018-09-21 08:58:40]
ender :
now i got a few minutes as everything is packed but one batch job for work is still executing :slightly_smiling_face:
[2018-09-21 09:02:08]
trulala69 :
Even worse, last time I had all copter related things packed AND forgot my mobile phone ... Pissed too as I had to beg my wife for her phone all the time (guess that was the plan anyway) :smile:
[2018-09-21 11:05:58]
kilrah :
oookay, will have an anafi tonight...
[2018-09-21 12:32:05]
vo :
anyone managed to get the Parrot toolchain to compile custom kernel drivers?
[2018-09-21 12:32:25]
vo :
some of their linux stack seems a little broken
[2018-09-21 12:32:59]
vo :
in particular, configuring wireless
[2018-09-21 13:17:52]
ender :
@vo, you also probably have to ask Synman if he did that. NOT ME, i did stuff on the old SDK on the Bebop but not yet on the latest SDK & Anfafi…
[2018-09-21 13:20:52]
ender :
Does someone having an anafi also have a Crystalsky and tried if one can run FF6 on it ?
[2018-09-21 14:45:24]
abdo054 :
Yeah I tried on a rooted CS@ender everything seemed working but the camera feed was green and you couldn't see a thing from the camera!
[2018-09-21 14:55:38]
kilrah :
dang
[2018-09-21 14:56:02]
vo :
what arch is the CS? armv7l?
[2018-09-21 18:42:50]
ender :
@abdo054 thanks, will pass the Info... Maybe Ar. Pro will run once its ready...
[2018-09-22 10:28:01]
kilrah :
sooo first flight today, can is really nice, but that video link... :unamused:
[2018-09-22 13:08:53]
aciid :
<https://www.banggood.com/4Pcs-Heighten-Extender-Raise-4cm-Landing-Gear-Skid-for-Parrot-ANAFI-RC-Drone-p-1355841.html?rmmds=newArrivals>
[2018-09-22 13:08:58]
aciid :
saw this today
[2018-09-22 13:20:15]
shell :
Ooo
[2018-09-22 13:22:15]
shell :
I thought I was going to see T69s protectors
[2018-09-22 13:23:13]
shell :
@vo what are you trying to do with wifi?
[2018-09-22 13:23:48]
vo :
i want to connect both skycontroller and drone to an access point
[2018-09-22 13:25:16]
vo :
with bebop i kinda have that working but the skycontroller mppd process gets stuck waiting to connect to an access point thats emitting the serial number in the ie payload of the beacon frames
[2018-09-22 13:25:36]
vo :
i haven't dug into the anafi yet
[2018-09-22 13:26:21]
shell :
You'll actually see that in the broadcom_setup.sh shell script on the B2
[2018-09-22 13:26:38]
shell :
You won't be able to in the anafi
[2018-09-22 13:26:55]
shell :
Parrot won't let us in
[2018-09-22 13:27:26]
vo :
also on the b2 it takes a long time to associate to an ap
[2018-09-22 13:27:46]
shell :
You the same person on the Dev forum trying to get QGC working?
[2018-09-22 13:27:58]
vo :
no
[2018-09-22 13:28:45]
shell :
I'm assuming you are using wpa_supplicant on the drone
[2018-09-22 13:29:14]
shell :
Or a very old firmware with bcmwl
[2018-09-22 13:29:24]
vo :
yeah, i found a copy of wpa_supplicant from somewhere
[2018-09-22 13:30:34]
vo :
it complains a lot about the driver being busy. then after about a minute it gets lucky and associates successfully
[2018-09-22 13:30:38]
shell :
Just the . conf or the binary?
[2018-09-22 13:31:00]
vo :
binary. b2 doesnt have wpa supplicant
[2018-09-22 13:31:35]
vo :
so i just got a copy of wpa supplicant for armv7 and it runs and works but takes forever
[2018-09-22 13:32:15]
shell :
That's what I thought too. I literally tried to help someone two nights ago to do something similar and couldve swore I couldn't find it. But he mentioned it in his solution
[2018-09-22 13:32:25]
shell :
Stand by... Will get you link
[2018-09-22 13:33:24]
shell :
Will be interesting to see how you mimic the serial # briadcast
[2018-09-22 13:33:56]
vo :
yeah the serial # thing is more of a problem on the skycontroller side.
[2018-09-22 13:34:15]
shell :
<https://forum.developer.parrot.com/t/launch-bebop-2-driver-as-client/8007>
[2018-09-22 13:34:54]
vo :
because even if you get the bebop 2 connected to a wifi network and controllable by the SDK, you still have the problem of the skycontroller not connecting to a network unless it mimics the serial # broadcast
[2018-09-22 13:35:08]
vo :
thing is, i want to connect multiple skycontroller 2's to the same network
[2018-09-22 13:35:36]
shell :
Only one will ever be able to control a drone at a time
[2018-09-22 13:36:03]
vo :
that's fine, but i want to have 12 bebops controlled by 12 skycontrollers
[2018-09-22 13:36:23]
shell :
And I'm pretty sure the SC2 is hardcoded to connect to 192.168.42.1
[2018-09-22 13:36:41]
vo :
i got around the 192.168.42.1 thing through routing and iptables rules.
[2018-09-22 13:37:09]
shell :
Yeah, that might work
[2018-09-22 13:37:19]
vo :
just route add 192.168.42.1 via 10.0.0.25 or whatever, then use iptables DNAT
[2018-09-22 13:38:01]
vo :
that actually works for the older firmware SkyController 2 (but not the 2P)
[2018-09-22 13:38:27]
vo :
it's kind of frustrating.
[2018-09-22 13:40:14]
vo :
i did get in touch with a parrot employee about this stuff and they really didn't want to help. i tried to convince them that they'd be able to sell tons of these things if they let me connect them as a swarm, but he was like "talk to a sales person about that"
[2018-09-22 13:40:43]
shell :
2P is for the bluegrass isn't it? I've never got my hands on one
[2018-09-22 13:41:04]
vo :
2P is just the newer version with black rubberized control sticks
[2018-09-22 13:41:33]
vo :
it's pretty much the same functionality, newer firmware
[2018-09-22 13:41:50]
shell :
Yeah, then I guess I do have one but it presents itself as a normal SC2
[2018-09-22 13:42:43]
vo :
annoyingly in the parrot sdk, they actually show up as two different product codes, so if you are using the sdk and doing anything with buttons you have to be aware of that
[2018-09-22 13:42:56]
vo :
because they changed the button map for some reason
[2018-09-22 13:43:04]
vo :
even though it is the same darn layout
[2018-09-22 13:43:06]
shell :
References to it are in the discovery lib but I can't say I've ever seen the actual product code be presented... Or I just didn't look close enough
[2018-09-22 13:43:45]
shell :
Rabbit hole, but now I'm curious
[2018-09-22 13:44:32]
shell :
You may have just pointed out a latent bug for me
[2018-09-22 13:45:47]
vo :
the SkyController 2P also switched to libevdev for instead of linux joystick api
[2018-09-22 13:46:02]
shell :
Maybe you can can insert the serial # using an open source router firmware ... Like the wrt stuff
[2018-09-22 13:46:47]
vo :
hmm, yeah probably. i have a Mikrotik Routerboard and might be able to do that. maybe make all the controllers think they're connecting to the same serial # drone
[2018-09-22 13:47:09]
shell :
A dummy message just might do it
[2018-09-22 13:48:14]
shell :
Don't be surprised if parrot does something mean like compare the ssid and actual drone name / serial #
[2018-09-22 13:48:39]
shell :
They do stuff like that to screw with us in the name of security
[2018-09-22 13:48:48]
vo :
not as mean as DJI
[2018-09-22 13:48:55]
vo :
mean / evil
[2018-09-22 13:49:01]
shell :
Yeah, no thanks
[2018-09-22 13:49:57]
shell :
But I think you could get around that if it happens too... Just a matter of hacking config files on the drone perhaps
[2018-09-22 13:51:28]
shell :
If you need to see exactly how the drone is inserting the serial # take a look at broadcom_setup ... Sounds like you may already know that though
[2018-09-22 13:51:52]
vo :
good tip, i haven't honestly looked though
[2018-09-22 13:52:13]
shell :
It just pipes it in
[2018-09-22 13:54:00]
shell :
Hacked into the ssid broadcast I think. I didn't pay much attention to it but it's there plain as day
[2018-09-22 13:56:47]
shell :
<https://github.com/tnaegeli/multiple_bebops?files=1>
[2018-09-22 13:57:10]
shell :
U use this supplicant?
[2018-09-22 13:57:27]
vo :
yeah i took only the supplicant from there
[2018-09-22 13:58:07]
vo :
i also tried to compile my own using the parrot toolchain but i was getting tired of the dependency hell
[2018-09-22 13:58:43]
shell :
There are a bunch of shared objects / libraries there too but I haven't tried any of that
[2018-09-22 13:59:27]
shell :
Ok, maybe just one
[2018-09-22 13:59:47]
shell :
I have no idea what they are doing with the rest of the iw binaries
[2018-09-22 14:00:38]
shell :
Probably would be clear if I looked at the shellscripts
[2018-09-22 14:02:08]
shell :
Best of luck, your project sounds really cool
[2018-09-22 14:03:53]
vo :
thanks!
[2018-09-22 14:04:52]
vo :
i _think_ what i want to do is quite simple. just connect multiple bebop 2 with skycontroller in the loop to an access point
[2018-09-22 14:05:27]
vo :
(and then, eventually, the anafi)
[2018-09-22 23:39:23]
aciid :
well well I tested the 3W UV led modules I bought for Anafi to scare off birds from it
[2018-09-22 23:39:36]
aciid :
I blinded myself and my eyes hurt now
[2018-09-22 23:39:48]
aciid :
it was like a second and a pure accident
[2018-09-23 01:58:17]
quad808 :
oh no....take it easy...might need to see eye doctor to make sure no damage!!
[2018-09-23 02:48:42]
shell :
I've got the the little 3V (fishing lure) ones but haven't gotten around to designing a mount for them yet
[2018-09-23 02:49:39]
shell :
They use little cr322 cells and yeah... I was seeing spots the first time I powered them up and stared into them
[2018-09-23 10:53:58]
aciid :
I think I'm fine I slept over it. , felt that I couldnt focus last night anymore after the accident
[2018-09-23 10:54:00]
aciid :
but I feel better now
[2018-09-23 10:54:14]
aciid :
but scary it was
[2018-09-23 11:15:04]
kilrah :
:confused:
[2018-09-23 11:15:19]
kilrah :
wtf, the anafi doesn't like my laptop's built in wifi adapter
[2018-09-23 11:18:18]
kilrah :
that's ridiculous!
[2018-09-23 11:20:34]
kilrah :
if i try to connect my laptop to the anafi using the built in wifi, within seconds the aircraft's AP dies for good until the next aircraft reboot
[2018-09-23 11:21:00]
kilrah :
no issue with my desktop, and if i plug another wifi adapter in my laptop and connect with that it's perfectly fine as well
[2018-09-23 11:23:08]
kilrah :
of course i found out about that while in flight :confused:
[2018-09-23 12:19:07]
aciid :
oh
[2018-09-23 12:19:22]
aciid :
how bad is it?
[2018-09-23 12:20:45]
kilrah :
well i believe it just did the failsafe rth
[2018-09-23 12:22:45]
kilrah :
i was pretty much right above home point so i didn't see it specifically move to it, but it descended to 1.5m AGL and just hovered there. Tried rebooting the controller, then with no success decided to give a try to connecting phone directly, and that's where i saw that the wifi AP was just gone. So caught the aircraft from below and flipped it to stop (had read that this worked just a bit earlier on forum)
[2018-09-23 17:53:18]
quad808 :
@kilrah besides the wifi issue, how are you liking the Anafi??
[2018-09-23 17:55:45]
kilrah :
it looks ugly and incredibly toyish/flimsy, but the tiny size and weight are cool and the camera is great
[2018-09-23 17:55:53]
kilrah :
has its quirks and bugs though...
[2018-09-23 17:56:22]
kilrah :
had "SD error" twice, had to land, read card from PC (no issue there) then reformat, both times, seems ok with stock card but the other is a nice extreme UHS-3 that works great in everything else
[2018-09-23 17:56:37]
kilrah :
the camera died completely at some point, no more feed at all, got it back by switching back and forth between photo and video mode
[2018-09-23 17:56:52]
kilrah :
and in one location I had really bad video transmission
[2018-09-23 18:45:04]
quad808 :
I have had the sd card "error" too...and like you, use a quality card. don't know whats up with that with the Anafi. Frustrating. It should just work.
[2018-09-23 18:52:59]
kilrah :
what card size?
[2018-09-23 18:53:30]
kilrah :
mine is 64G... which normally should format in EXFAT but the anafi seems to insist on formatting as large FAT32, could be becasue of that
[2018-09-23 18:59:37]
quad808 :
64 also, sandisk...but I will check to make sure
[2018-09-23 19:01:57]
kilrah :
i'm trying the sdformatter
[2018-09-23 19:02:18]
kilrah :
and will probably try a 32G card if it still craps
[2018-09-23 19:02:42]
kilrah :
i know i have one, just not where...
[2018-09-23 19:03:26]
quad808 :
correction 64 Samsung EVO select class 10 UHS 3
[2018-09-23 19:04:24]
quad808 :
I think I got that message maybe twice...seems very random, but could have happened when I stopped and started video recording right after each other...stop - start-stop...something like that
[2018-09-23 19:04:36]
quad808 :
other than that...ok
[2018-09-23 19:05:00]
kilrah :
mine happened twice, and didn't clear after a reboot - both times had to format within the anafi for it to work again
[2018-09-23 19:05:15]
kilrah :
after copying the contents on a pc, which didn't complain at all
[2018-09-23 19:06:21]
quad808 :
Yah, I always format in the device too...safer that way
[2018-09-23 20:53:49]
kilrah :
ah also the controller is really awkward
[2018-09-23 20:54:29]
kilrah :
sounds like someone said "hey we made the aircraft so light that for some reason we absolutely have to compensate for that by making the controller a brick"
[2018-09-23 20:55:00]
kilrah :
doesn't fit well in hands IMO, tilt control is a bit poor, and easy to hit the shoulder buttons by mistake
[2018-09-24 07:47:40]
ender :
haha yes the controller is strange to me as well.
[2018-09-24 07:48:26]
ender :
all those things (immature App, bricky CTRL) was in my long lost pro & con list so that could have save you some surprises… :wink:
[2018-09-24 08:03:18]
kilrah :
Oh I wasn't expecting anything different
[2018-09-24 08:03:57]
kilrah :
can totally live with it for the camera, it's jsut awkward, like all of parrot's controllers lol
[2018-09-24 08:05:24]
ender :
haha
[2018-09-24 08:06:16]
ender :
But the SkyController classic really was a Battleship, you sure draw more looks then with the puny Mavic Controller :stuck_out_tongue:
[2018-09-24 08:08:47]
kilrah :
yes it was completely ridiculous lol, friend had one
[2018-09-24 08:10:19]
ender :
I could not BELIEVE it was so big when i unpacked it. Next day built a amped repeater, 2 days later sold it :slightly_smiling_face:
[2018-09-24 08:10:32]
ender :
(used NVIDIA Shield portable + amp mostly)
[2018-09-24 08:14:06]
kilrah :
ok
[2018-09-24 08:46:04]
trulala69 :
In the other hand, it’s not DJI and it draws looks just because of that. I once told a guy, this is from Parrot in France... he responded: “ They can build THIS?” :joy:
[2018-09-24 09:00:31]
ender :
:wink:
[2018-09-24 09:07:21]
kilrah :
LOL
[2018-09-24 09:08:41]
kilrah :
yup they finally managed to make something that isn't foam and that has a good camera lol
[2018-09-24 09:21:16]
ender :
I have nothing against foam but otheriwise AMEN :wink:
[2018-09-24 10:20:12]
kilrah :
there, got my 2 overpriced batteries...
[2018-09-24 11:32:43]
ender :
Then,feel overly joyed :stuck_out_tongue:
[2018-09-24 11:49:38]
kilrah :
let's print some prop guards...
[2018-09-24 12:10:30]
trulala69 :
The one's from Thingyverse?
[2018-09-24 12:21:18]
kilrah :
yea based on your protectors (that I've printed as well)
[2018-09-24 12:21:35]
kilrah :
think it isn't very well thought out but meh
[2018-09-24 12:21:50]
kilrah :
no motivation to make my own at the moment :stuck_out_tongue:
[2018-09-24 12:32:08]
ender :
i just ordered protectors at amazon for low $$$
[2018-09-24 12:32:43]
ender :
<https://www.amazon.de/gp/product/B07HFVYHF9>
[2018-09-24 12:32:52]
ender :
forthat price including legs i dont print :slightly_smiling_face:
[2018-09-24 12:34:47]
kilrah :
haven't found any that would ship here, that shop is as usual one that ships Germany only
[2018-09-24 12:49:16]
trulala69 :
FYI the remix changes the print orientation by 90 degrees, which weakens the arm protector ...
[2018-09-24 13:00:09]
aciid :
@kilrah there some new legprotectors up in banggood probably aliexpress too
[2018-09-24 13:00:38]
kilrah :
tried ali but didn't find (looked for propguards, not leg protectors)
[2018-09-24 13:00:47]
kilrah :
don't care much about leg protectors really
[2018-09-24 13:00:54]
aciid :
ahh sorry
[2018-09-24 13:02:07]
kilrah :
ordered the controller case though
[2018-09-24 13:02:09]
kilrah :
and some filters
[2018-09-24 13:02:47]
ender :
kilrah you should have a basket of mp filters, many work
[2018-09-24 13:03:10]
kilrah :
i only have the original dji ones
[2018-09-24 13:03:32]
kilrah :
well and another set, but i wasn't using them becasue they weren't good, so i still won't use them :stuck_out_tongue:
[2018-09-24 17:23:20]
quad808 :
Speaking of the controller....did I read correctly that they put lead weights in there to make it heavier?
[2018-09-24 17:40:00]
d95gas :
waiting for you to strip it open and publish pics :slightly_smiling_face:
[2018-09-24 17:58:05]
ender :
Well it sure looked empty inside for its weight :joy:
[2018-09-24 17:59:50]
d95gas :
From a design perspective, I find it a very odd shape and a bit cumbersome in the hand
[2018-09-24 18:00:26]
d95gas :
But its French ..... I mean look at that Citroen they do that has the padding on the doors!!!
[2018-09-24 18:02:30]
d95gas :
Citroen Cactus with Airbump protection
[2018-09-24 18:12:06]
kilrah :
[2018-09-24 18:12:16]
kilrah :
[2018-09-24 18:18:33]
quad808 :
Gotta take that out and see with a phone attached if it is totally unbalanced
[2018-09-24 18:19:18]
quad808 :
Its HEAVY! IT SCREAMS QUALITY!!!
[2018-09-24 18:22:55]
kilrah :
well it sure is a bit better balanced with them, but doesn't seem like it would be really noticeable in practice... I think i'll rather save the weight
[2018-09-24 18:24:59]
quad808 :
dang....I will do that as well first thing when I get home and test it out.
[2018-09-24 18:25:06]
kilrah :
good, the controller isn't heavier than the drone anymore
[2018-09-24 18:27:19]
kilrah :
just need a long T6 screwdriver
[2018-09-24 18:37:49]
d95gas :
Guess whose stripping his controller at the weekend :slightly_smiling_face:
[2018-09-24 19:51:51]
ender :
haha
[2018-09-24 19:54:59]
trulala69 :
113 g of weights? Really? That’s what I/we paid for? Going to take them out as well...
[2018-09-24 20:02:12]
ender :
No you paid for the guys who reduced the weight by 113g and the Marketing guys who then decided its too light and to add lead :slightly_smiling_face:
[2018-09-24 20:39:57]
info616 :
Did anyone do rangetests with ender‘s FCC patch? I‘ve posted my findings but haven’t read anything since.
[2018-09-24 23:24:13]
shell :
that is nuts… 1/10 kg is a bit of ballast
[2018-09-25 00:11:03]
makingthisnameup :
I completely didn't think of removing anything from the rc when adding the titan
[2018-09-25 00:11:22]
makingthisnameup :
But now that I'm not scared of it
[2018-09-25 00:11:32]
makingthisnameup :
Last words
[2018-09-25 00:24:33]
makingthisnameup :
[2018-09-25 00:32:19]
makingthisnameup :
[2018-09-25 00:32:40]
makingthisnameup :
Pretty sure I showed you guys this. But...
[2018-09-25 02:06:25]
quad808 :
wait. Its backwards. Or are my eyes wrong?
[2018-09-25 02:56:18]
shell :
When he unfolds it it'll be just right
[2018-09-25 06:14:18]
ender :
@info616: on the weekend i reached 2,5km max @100m Altitude but no disconnect. 3 or 4 times the signal went to 1 bar and yellow or red alert before showing 3bars again. That Txpower ramping sure isnt smooth.
[2018-09-25 06:16:59]
info616 :
Hmm, I havn‘t seen this Txpower ramping since using your FCC patch. I‘ve had this always while on CE.
[2018-09-25 06:19:51]
info616 :
2,5 km is great. Never reached more than about 1,5 km. Have to try again in remote areas with litte Wifi disturbance and no height limits.
[2018-09-25 06:25:07]
info616 :
I assume you‘ve got pixelated and stuttering video stream when reaching red alert, right? That is not an issue when doing range tests and you simply fly further but for anything else it compromises usability.
[2018-09-25 06:41:15]
ender :
To be clear, my 2000m+ flights all have been done in very rural surrounding (like : maybe 3 houses “near” the flight path,more then 200m distance from flight path) or even over the ocean.
[2018-09-25 06:41:29]
info616 :
@ender problem with comparing range with and without FCC patch is, you need 2 controllers one patched one not, which I don‘t have. I don‘t think I can disable the patch while I‘m on location.
I‘ve did it the other way round, enabled FakeGPS and checked whether I see a difference in range. The approach with an unpatched controller running in CE mode would be better IMO.
[2018-09-25 06:42:06]
ender :
I DO realize the Anafi can have bad range when in WiFi crowded areas. I NEVER did a flight in 5G band up to now (asone needs fake GPS for it).
[2018-09-25 06:42:47]
ender :
@info616: agreed for the test mode.
[2018-09-25 06:44:26]
ender :
I did just that, took my Notebook to the test range and reached “only” 1,3km in CE until connection loss and then 2,5k+ with patch before i turned around as i accepted that as proof…
[2018-09-25 06:44:34]
ender :
Far from scientific but…
[2018-09-25 06:45:21]
ender :
And as i did some fakeGPS flight up to that distance it “felt” the same as FakeGPS induced FCC.
[2018-09-25 06:45:50]
kilrah :
the location where I had shit range was more isolated than the other 2 which ere in a city and in an industrial zone... :confused:
[2018-09-25 06:46:24]
kilrah :
i can patch/unpatch on location with no issue, but since i only had one battery i couldn't really do a comparison
[2018-09-25 06:46:36]
kilrah :
now have 3 so it's ok, but we're having a long lasting storm now...
[2018-09-25 06:46:40]
info616 :
is the Anafi changing channels during flight if it detects Wifi issues and you are in automatc mode? Or is it just choosing a channel while grounded or even only when starting the app?
[2018-09-25 06:47:11]
ender :
@info616, asked myself that Question and dodged it as i prefer manual setting.
[2018-09-25 06:47:50]
kilrah :
i would say only on ground since it doesn't let you manually switch in the air
[2018-09-25 06:49:02]
info616 :
I could swear I‘ve switched already in the air.
[2018-09-25 06:49:05]
kilrah :
and i never saw it change the highlighted one on auto
[2018-09-25 06:50:57]
info616 :
... but my brain occasionally creates its own reality. :wink:
[2018-09-25 06:51:27]
info616 :
I‘ll try to switch next time flying.
[2018-09-25 06:55:47]
ender :
why would you ? we dont even know if the scan is done by controller or anafi or smartdevice ?!
[2018-09-25 06:56:07]
ender :
(DAMN sticky spacebar)
[2018-09-25 06:59:43]
kilrah :
well if you have a shit link you could try changing channel
[2018-09-25 07:00:18]
info616 :
@ender the on location patching is a good test. :+1: I have no real evidence that the patch is not working other than the suprisingly short range in some locations. But I’ve always had the same crappy range with Fakegps then. So it is likely not a FCC thing but the sensitivity of the Anafi against Wifi disturbance.
[2018-09-25 07:01:33]
ender :
yep
[2018-09-25 07:01:52]
kilrah :
i will take my rf explorer next time...
[2018-09-25 07:02:43]
ender :
apart from humidity i know my “range and penetration test area” quite damn well since testing my DIY copters since 7 years :slightly_smiling_face:
[2018-09-25 07:03:27]
info616 :
@ender btw. how do you know which channel to choose manually without the signal overlay displayed in de?
[2018-09-25 07:03:30]
ender :
obviously humid / snowy trees have a different blocking bahaviour then dry leaves :slightly_smiling_face: but i get the feeling for that by now as well
[2018-09-25 07:03:48]
ender :
Well, in the testrange there is NOTHING so i choose 2,4 / 6
[2018-09-25 07:04:07]
ender :
if in doubt elsewhere i use fakegps and scan, then switch it off
[2018-09-25 07:06:07]
info616 :
too bad they disabled the overlay in de after the initial beta firmware.
[2018-09-25 07:07:02]
ender :
strange, isn’t it ?! Is there a .de or CE rule against freq scanning ?!
[2018-09-25 07:07:27]
ender :
can be patched very easily but renders the google api key invalid
[2018-09-25 07:08:05]
ender :
but i guess in the end we got to find a FCC-for-app-as-well patch and need to struggle with google api key which makes it useless to noobs
[2018-09-25 07:09:24]
info616 :
... and iOS users. :wink:
[2018-09-25 07:09:45]
ender :
yes there is that :slightly_smiling_face:
[2018-09-25 07:10:27]
kilrah :
well ios can likely be done with frida like for dji
[2018-09-25 07:11:05]
ender :
of course,but alot of work just for that stuff,meh
[2018-09-25 07:13:17]
ender :
actually its 2 things we want,right: freq scan and ability to choose 5g
[2018-09-25 07:13:32]
info616 :
stopped jailbraking my devices after iOS9. Too much hassle to stay up to date
[2018-09-25 07:14:32]
info616 :
@ender right, with these 2 things it would be perfect.
[2018-09-25 07:14:33]
ender :
doyou need that with frida ?! ( i dont mess with my workios devices and privately i tossed iOS since years)
[2018-09-25 07:14:53]
kilrah :
no, only someone to provide the initial decrypted app
[2018-09-25 07:15:10]
ender :
:+1:
[2018-09-25 07:16:09]
info616 :
well then I should have a look at frida, thanks for mentioning it.
[2018-09-25 07:22:25]
info616 :
funny idea: With FCC patch + frequ scan patch + 5 GHz patch we would actually get Fakegps functionality but with real location.
If it only would be possible for the app to use the FakeGPS location for everything Wifi and the real location for controller/smartphone location.
[2018-09-25 07:25:28]
ender :
@info616: yes but the app refused to be patched in that way :slightly_smiling_face:
[2018-09-25 07:26:32]
ender :
Konrad and i tried but we always seemed to have patched dead code that is unused. Then i also liked the beauty of patching mppd as its platform, independend and harder to detect from parrot.
[2018-09-25 07:50:42]
kilrah :
<https://www.dropbox.com/s/ruj2gvz1b5gwknf/FreeFlight6%206.1.1%20%28decrypted%29.ipa?dl=1>
[2018-09-25 07:50:52]
kilrah :
may not have all assets, was downloaded on device
[2018-09-25 07:54:26]
info616 :
Frankly I wouldn’t mind about a new Google API key. Have already one in use with the GO4 mod app.
[2018-09-25 07:57:50]
kilrah :
yup, if patcher asks for it and does all the job it isn't even hard for people
[2018-09-25 08:01:56]
info616 :
Btw. testing whether the Anafi is doing any frequ. scanning should be easy by placing the controller outside the house and monitoring the signal strength overly and then moving the Anafi indoors close to a 5 GHz router.
[2018-09-25 08:07:04]
info616 :
@kilrah of couse the patcher must handle it. I’ve meant generating the key on Goggle site and supplying it to the patcher should be no problem for most users.
[2018-09-25 08:09:00]
ender :
Pete, for most all but downloading and double clicking is WAY too much.
[2018-09-25 08:09:44]
ender :
generating the key and putting it somewhere willlimt the patch to 1% of Anafi users if at all. (IMO (c) )
[2018-09-25 08:13:05]
info616 :
@ender for 99% of people downloading an STL and printing it is completely outside their scope. Still there is a vivid community for the 1% of us. :wink:
[2018-09-25 08:19:48]
info616 :
So adding back signal strength overlay would be an easy task (for you :wink:) but activating 5 GHz channels in de is probably a real challenge?
[2018-09-25 08:22:43]
kilrah :
ok, the scan comes from the aircraft
[2018-09-25 08:22:55]
kilrah :
but the freaking display is reversed!
[2018-09-25 08:23:08]
ender :
ah okay kilrah ! Did you try ?
[2018-09-25 08:23:12]
ender :
reversed ?
[2018-09-25 08:23:42]
kilrah :
it shows high if the channel is clean!
[2018-09-25 08:42:27]
kilrah :
ok, i really can't get reliable US with just the patch...
[2018-09-25 08:42:48]
kilrah :
or i'm misunderstanding when the app sends a command
[2018-09-25 08:47:19]
ender :
w00t
[2018-09-25 08:47:41]
ender :
are we talking about txpower or that darn diagram ?!
[2018-09-25 08:56:08]
kilrah :
iw reg get
[2018-09-25 08:56:29]
kilrah :
pretty much can't get it on us reliably, even with fakegps
[2018-09-25 08:56:52]
kilrah :
over like 6 power cycles of everything i got it on us only once
[2018-09-25 08:57:05]
kilrah :
might seem that once the aircraft gets gps you can forget about switching
[2018-09-25 08:57:55]
kilrah :
[2018-09-25 08:58:04]
kilrah :
[2018-09-25 08:58:19]
kilrah :
here's for the pesky diagram
[2018-09-25 08:59:43]
kilrah :
so now when the storm is over i need to go fly at the same place and NOT select the channel with the lowest status on the graph...
[2018-09-25 09:01:15]
ender :
so iw reg get shows ch ?
[2018-09-25 09:01:35]
ender :
I tried with gps lock and without of course but the app has to be connected to the mpp3…
[2018-09-25 09:02:41]
ender :
(that space button kills me)
[2018-09-25 09:03:02]
kilrah :
[2018-09-25 09:03:57]
kilrah :
last time i got it to switch i had fakegps on and it chnaged after i got into the "fly" interface then clicked on the map and it put itself in the US
[2018-09-25 09:04:10]
kilrah :
but i tried to repeat and it didn't work again
[2018-09-25 09:04:19]
kilrah :
the difference might be that aircraft had no gps the first time
[2018-09-25 09:04:34]
kilrah :
but not sure of that, can't even see gps reception in detail
[2018-09-25 09:06:28]
ender :
There ARE and WERE occasions when the Anafi was locked on a certain country. (while we & i was playing with CC & FakeGPS & MNC/MCC and whatnot.
[2018-09-25 09:09:05]
ender :
That always went áway after anfi & app reset OR after a certain (unknown) timeout and or location change more then a certain amount of km (there is a 3km refresh found in the app). So that might happened to you. SINCE i did not bother with patching theapp and/or using FakeGPS extensively i never had that. I always check iw reg get when i return home or have doubts about the range (like in the holiday where i had bad range and it turrned outto be heavy wifi pollution doe to a camping site behind the trees). So for me it seems to work out fine. NOT talking about the App CC & scan diagram madness of course :slightly_smiling_face:
[2018-09-25 09:13:41]
kilrah :
seems you have to check iw reg get while on the field before taking off then, doing so at home later is irrelevant as it can have changed just when you powered up now
[2018-09-25 09:14:17]
kilrah :
and still seems there's actually no sure way to have it change regardless of both the patch and fakegps
[2018-09-25 09:14:56]
trulala69 :
Hmmm, I did an iw reg check after I came back from the UK and it still was set to UK. It changed after, I connect the app ...
[2018-09-25 09:15:55]
kilrah :
i also once had everything on and running and on us, rebooted the aircraft without touching the rest, and it was back in CH
[2018-09-25 09:19:56]
ender :
will try later,no time now but DID check it after test flights in the field at least twice. And i DO get the range performance i hoped for but of course too few statistical samples :wink: Will increase those.
[2018-09-25 09:28:35]
ender :
(Photokina fair starts tomorrow and i have to meet deadlines for 2 Projects until then, ooompf)
[2018-09-25 09:29:26]
kilrah :
ouch :stuck_out_tongue:
[2018-09-25 09:30:27]
ender :
yep
[2018-09-25 10:12:59]
trulala69 :
Hmmm, but I checked without the bird being connected, so there was no GPS for the controller...
[2018-09-25 10:34:34]
info616 :
controller gets GPS from the phone IMO
[2018-09-25 10:48:41]
info616 :
btw. is there a way to install ADB on Android so we could do an iw reg check on the controller from the phone? Lugging around a Laptop isn’t very convenient.
[2018-09-25 11:09:00]
kilrah :
<https://play.google.com/store/apps/details?id=com.cgutman.androidremotedebugger> ?
[2018-09-25 11:11:09]
ender :
oh yes i always wanted to do that, thx !
[2018-09-25 15:33:29]
ender :
Guys, as i finished ONE of my tasks i tried to look at iwconfig while flying.
[2018-09-25 15:34:18]
ender :
So let the anafi hover outside and connected a phone to the mpp & ff6 and attached to the anafi wifi with my macbook and adb’ed to the mpp3.
[2018-09-25 15:34:27]
ender :
All was on “de” !!!!
[2018-09-25 15:34:56]
ender :
tried again,couldnt believe. looked at log. it showed a switch from “us” to “de” seemingly when i connected via wifi.
[2018-09-25 15:35:15]
ender :
Soit seems the wifi connection to a country branded wifi forces the switch.
[2018-09-25 15:35:21]
ender :
Second more “realworld” try:
[2018-09-25 15:35:58]
ender :
erased log on mpp3. power cycled all devices, mpp, anafi,phone (no fakegps).
[2018-09-25 15:36:20]
ender :
Connected, fly around for some minutes,of course GPS locked phone & anafi.
[2018-09-25 15:36:31]
ender :
landed. switched off anafi.
[2018-09-25 15:36:40]
ender :
connected mpp via USB, adb’ed.
[2018-09-25 15:36:53]
ender :
checked iwconfigand iw reg get,all US,25 dB FINE
[2018-09-25 15:37:04]
ender :
Log showed: only switch to US, none to DE.
[2018-09-25 15:38:52]
ender :
So i am stillconfident about the patch,i guess a wifi connection (as i stated above) forces to CC of connecting device, thats hopefully how @kilrah got his readings.Kilrah, do you see a fault in my real world test (just looking at the logs afterwards,no interference during the act ? If so,would you repeat it in CH ? If not,would you give me a hint ? Back to work,one of two deadlines met,needed the break :slightly_smiling_face:
[2018-09-25 15:45:41]
kilrah :
ooh intersting
[2018-09-25 15:45:51]
kilrah :
yeah always connected via wifi, never usb
[2018-09-25 15:45:58]
ender :
(Crossing fingers)
[2018-09-25 15:46:08]
kilrah :
will try that (tomorrow probably)
[2018-09-25 15:46:11]
ender :
I DID find stuff like that (many sources for CC) in the app
[2018-09-25 15:47:12]
ender :
But i was very unsettled at first,nasty stuff. I mean i DID those flights but you got me:-)
[2018-09-25 15:55:27]
ender :
in the qualcom config file on the MPP you find: “gEnableAutomaticTxPowerControl=1” i will set it to “0",lets seeif that changes things… (damn txpower pumping) MAYBE it overloads nearby and one looses connection, ofcourse we cannot change that value on the drone.
[2018-09-25 16:12:07]
aciid :
@ender should we try to add a Low noise amplifier to Anafi AC
[2018-09-25 16:12:23]
aciid :
this way we wouldn't need to hack the firmware for the receiving gain
[2018-09-25 16:12:28]
ender :
naaahhh :wink:
[2018-09-25 16:12:33]
ender :
why not hack FW. DONE
[2018-09-25 16:12:42]
ender :
ahhh anafi,sry :slightly_smiling_face:
[2018-09-25 16:13:09]
ender :
my estimation is Anfi IS on FCC as it receives and acknowledges the CC
[2018-09-25 16:13:11]
ender :
(log)
[2018-09-25 16:13:27]
ender :
unless proven otherwise…
[2018-09-25 16:14:49]
ender :
need to continue work, sry :disappointed: Want to test if my change of “gEnableAutomaticTxPowerControl” to “0" changes auto power behaviour…. Grrr
[2018-09-25 16:14:58]
ender :
see you later guys !
[2018-09-25 16:52:41]
ender :
I just flew 3500, the last 900 with red warning. That wasnt the end, i chickened out. I am sure thats FCC :laughing:... But still txpower ramping :face_with_rolling_eyes: maybe its the drone not the mpp...
[2018-09-25 23:17:55]
quad808 :
1st thing I did yesterday was take the weights out of the Anafi RC.
[2018-09-26 06:27:36]
ender :
Will do so as well :slightly_smiling_face:
[2018-09-26 06:58:01]
kilrah :
heh
[2018-09-26 07:03:52]
ender :
@aciid: please let me know: did you ever try the UART ports on the Anafi ? If so, do you remember which voltage you needed, i guess somewhere in my trash i have 5V, 3,3V & 1,8V Adapters…
[2018-09-26 07:54:17]
aciid :
@ender I never got around hooking the logic level converters, but yes it needs a step up to get a normal FTDI working
[2018-09-26 07:55:04]
aciid :
i did verify that I was receiving , via Saleae Logic
[2018-09-26 07:57:43]
ender :
Which Voltage did that UART work on ? And what kind of output did you see ?
[2018-09-26 18:06:54]
kilrah :
went flying 2 batts today, didn't attempt anything fancy this time, no connecting to wifi but still had about same performance, jsut a bit better now i chose a channel with the new knowledge of the diargam's workings... 1.2km max (but only "comfortable" up to 500).
[2018-09-26 18:07:25]
kilrah :
tried connecting adb to the RC via cable but must have been doing it wrong, didn't find a device...
[2018-09-26 18:09:52]
kilrah :
tomorrow have a photo job in a city, will see how it is
[2018-09-26 18:10:05]
kilrah :
but I won't need to go >100m or so, so should be good
[2018-09-26 18:10:17]
kilrah :
this thing will serve me for that kind of jobs as planned
[2018-09-26 18:10:30]
kilrah :
m2 for the real fun
[2018-09-26 19:26:36]
aciid :
@ender I'm not sure I think i'm more comfortable with making a bench for Anafi than trying to debug it with batteries again
[2018-09-26 19:26:47]
aciid :
I've already opened one battery to accomplish this but its sketchy as hell
[2018-09-26 19:26:54]
aciid :
and I don't have bogo pins
[2018-09-26 19:27:05]
aciid :
*press to fit pins
[2018-09-26 19:27:13]
aciid :
pogo pins
[2018-09-26 19:38:15]
aciid :
ill take the measurements and whip up a board from jlcpcb for the pins
[2018-09-26 19:38:19]
aciid :
thesrs no alternative way
[2018-09-26 19:56:21]
ender :
uhhh good luck !
[2018-09-26 19:58:48]
aciid :
@ender can you measure for me is the sd-card pcb olevel with the plastic it's sitting on
[2018-09-26 20:00:07]
aciid :
mine has a little play
[2018-09-26 20:00:30]
aciid :
when I push the sd-card pcb down
[2018-09-26 20:00:36]
aciid :
like 0,1mm :smile:
[2018-09-26 20:03:37]
ender :
uh, what should i measure i did not get it ?
[2018-09-26 20:05:26]
aciid :
i think its just the glue
[2018-09-26 20:05:44]
aciid :
I mean the metal bracket on the sd-card scratches my battery almost
[2018-09-26 20:06:08]
aciid :
I've removed the sd-card pcb it has some weird adhesive
[2018-09-26 20:08:02]
ender :
Ah okay. I just took a look, the microSD metal case is very precisely on the same level as the other base plate plastic.
[2018-09-26 20:08:23]
aciid :
have I tried to explain this earlier? doing anything really with anafi is pretty hard, because the compromise is to break a battery
[2018-09-26 20:08:41]
aciid :
I have not tried supplying voltages yet from my power supply since I recon it wants data
[2018-09-26 20:08:49]
aciid :
to the small pins
[2018-09-26 20:28:36]
aciid :
ok so i have this battery again
[2018-09-27 06:47:12]
trulala69 :
For those removing the controller weights, the screwdriver for the props works perfectly for opening...
[2018-09-27 06:47:33]
trulala69 :
Anyone already opened a battery pack?
[2018-09-27 06:50:23]
kilrah :
hah, forgot there even was more stuff in the box :smile:
[2018-09-27 06:57:39]
ender :
I think aciid opened a battery but not 100% sure…
[2018-09-27 07:01:11]
trulala69 :
They deliver the tools for the weight removal :+1:
[2018-09-27 07:03:36]
trulala69 :
I experimented with Lion battery packs on my small diy endurance copter and thought about enhancing the capacity a bit...
[2018-09-27 07:09:48]
ender :
The ones in the Anafi should also be LI-HV i guess…
[2018-09-27 07:10:02]
ender :
(4,35 max Voltage)
[2018-09-27 07:26:39]
kilrah :
yup they are
[2018-09-27 07:27:22]
ender :
I ordered some cells as i may want to extend Mavics and/or Anafis flight time.
[2018-09-27 07:27:34]
ender :
But i guess the weight of the Anafi will make additions nearly useless.
[2018-09-27 07:27:54]
ender :
But my cheap MP1 (used as Stereo VR Camera carrier) could take a bit more i guess :slightly_smiling_face:
[2018-09-27 07:28:21]
ender :
btw: hell do i enjoy Ocusync with Boost mode. Only Battery is the limit :slightly_smiling_face:
[2018-09-27 07:29:28]
ender :
Anafi would be more than satisfactory for me if i could easily choose 5G for WiFi polluted areas and if the TxPower ramping would not be so nerve wrecking…
[2018-09-27 07:30:28]
trulala69 :
True...
[2018-09-27 07:31:45]
kilrah :
was gonna say about increasing anafi flight time, i don't see what i would do within a 500m radius for more than 20min...
[2018-09-27 07:32:04]
trulala69 :
Also true...
[2018-09-27 07:32:25]
kilrah :
i think i only saw one ramping step, and hard to say
[2018-09-27 07:33:17]
trulala69 :
You were mentioning, you’re using the M2 for the fun, what kind of fun? Long distance?
[2018-09-27 07:33:48]
ender :
kilrah, if you dont chicken out its 3 ramping steps :slightly_smiling_face: And the last warning goes form yellow to red and at least >> 800m mor on red. First it lags bad then quality (Bitrate) goes down and it gets sort of fluid again…
[2018-09-27 07:34:22]
ender :
^--- me using cheap & repaired M1 for Fun, kilrah using m2Z for making loads of money i guess :slightly_smiling_face:
[2018-09-27 07:34:32]
kilrah :
chicken out? i would think complete loss and rth is enough...
[2018-09-27 07:34:41]
ender :
yes thats enough :slightly_smiling_face:
[2018-09-27 07:34:49]
ender :
maybe it wanted to ramp up again too slow.
[2018-09-27 07:35:05]
ender :
could very well be the case if conditions get worse very fast
[2018-09-27 07:35:36]
ender :
I would ramp up when signal goes from 3 to 2 bars not when it stayed at 1 bar long enough…
[2018-09-27 07:36:14]
ender :
The comments in the MPP2 WiFi chipset ini suggests that a (close) copy is used on the Anafi as well…
[2018-09-27 07:36:41]
ender :
the change i made did no (noticable) good.
[2018-09-27 07:36:57]
ender :
Ramping felt as rough as before.
[2018-09-27 07:39:11]
ender :
Actually it was me chickening out when i did that 3500m test as wind came up. Turned out i still had 20% bat left when i was home, started with 95% :slightly_smiling_face:
[2018-09-27 07:39:23]
kilrah :
I've never had as many failsafe rth with any other aircraft before... and that's with only 5 packs flown
[2018-09-27 07:39:54]
ender :
I only had one that i did not anticipate…
[2018-09-27 07:40:03]
ender :
The rest was somewhat forced.
[2018-09-27 07:40:43]
kilrah :
fun = flying with goggles and going to some random places that theres no way you should be able to manage to go to and see what's around...
[2018-09-27 07:40:53]
ender :
YEP
[2018-09-27 07:41:23]
ender :
I love dicovering “secret” places in the forest and then going there.
[2018-09-27 07:41:30]
kilrah :
thats what ive been doing with the m1 since i got it
[2018-09-27 07:41:32]
ender :
(kids also love that)
[2018-09-27 07:42:06]
kilrah :
but its nearly 2 years now, time to switch to the new one that will be even better for that
[2018-09-27 07:42:24]
kilrah :
don't actually have the 2 now... tomorrow hopefully
[2018-09-27 07:42:26]
ender :
Zoom of Anafi is great for scouting as well. OF COURSE M2Z is too
[2018-09-27 07:42:59]
kilrah :
yup used the 1.3x zoom and it's cool, cant wait for 2x
[2018-09-27 07:44:34]
kilrah :
ah, how do you adb with cable to the rc?
[2018-09-27 07:46:55]
ender :
umh. USB-C Connector in rc, USB-A in Linux or Mac, then ADB
[2018-09-27 07:46:59]
ender :
no secrets
[2018-09-27 07:47:12]
kilrah :
ok, got nothing at all...
[2018-09-27 07:47:14]
ender :
On PC coldflake tries to adapt a RNDIS driver to also make it simple
[2018-09-27 07:47:19]
ender :
nothing ?!
[2018-09-27 07:47:34]
ender :
Platform ?
[2018-09-27 07:48:24]
ender :
oh damn
[2018-09-27 07:48:27]
ender :
+forgot
[2018-09-27 07:48:43]
ender :
--> as it is rndis you need to adb connect 192.168.53.1:9050
[2018-09-27 07:49:57]
ender :
@kilrah: did you do that ?
[2018-09-27 07:55:38]
trulala69 :
@ender, I saw you discussing HDMI options in the german forum... still got Cinemizers and thought about using them with the Anafi... but I have no idea how to connect them...
[2018-09-27 07:56:06]
ender :
Einfach :slightly_smiling_face:
[2018-09-27 07:56:18]
trulala69 :
“Scouting” never thought of that! Brilliant...
[2018-09-27 07:56:37]
trulala69 :
Really?
[2018-09-27 07:56:51]
ender :
yep, arent you german ?
[2018-09-27 07:57:03]
trulala69 :
Jahaaa...
[2018-09-27 07:57:07]
ender :
siehste.
[2018-09-27 08:00:11]
trulala69 :
Mach ich :+1:
[2018-09-27 20:10:02]
info616 :
@ender what kind of secret places are these you discover. I too fly over the forest but I usually see tress and occasionally a path or a clearing. But with about 400 m radius around me to fly savely (I start on a clearing so no line of sight after 100 m) there usually is not much interesting to detect.
[2018-09-27 21:00:25]
ender :
I have to admit i dont give a rats ass on LOS :wink: And yes, clearings and open water is what is there to be found.
[2018-09-27 21:01:25]
ender :
Also we do some geocaching and sometimes that helps to find a better path then the usual straight line :slightly_smiling_face:
[2018-09-28 00:39:38]
aciid :
droning sounds so cheating in geo'ing if you are in the woods
[2018-09-28 06:36:13]
ender :
nahhhhhhh :stuck_out_tongue:
[2018-09-28 07:22:43]
kilrah :
did my job with the anafi yesterday
[2018-09-28 07:23:12]
kilrah :
output is decent, but that thing is really a toy, way too quirky and flimsy
[2018-09-28 07:23:19]
ender :
quirky ?
[2018-09-28 07:24:01]
kilrah :
got sd card errors even with stock card this time, and camera crashed on me once (black screen, unable to revive without power cycle)
[2018-09-28 07:24:29]
kilrah :
first time i powered up the aircraft and controller never connected even after a couple of minutes
[2018-09-28 07:26:00]
kilrah :
video link in city - well about 100m max, with seconds of dropouts even at 50m
[2018-09-28 07:27:32]
kilrah :
when i removed the card at then end and packed the friggin sd card cover popped off, only noticed when about to put the card back in after backing up when i was long gone form the location
[2018-09-28 07:28:00]
kilrah :
fortunately was going to pass pretty close again in the evening, so went back and yep it was there on the ground
[2018-09-28 07:29:25]
ender :
woah lucky..
[2018-09-28 07:30:45]
ender :
You sure have a lot of microSD card probs. At first it would not accept any of my > 16 GB UHS cards. With the latest FW my 64GB is accepted (Samsung), my 128 and 200 NOGO. But after i formateed the card internally i had no problems. But MANY people report of flaky behaviour, they got to improve on that…
[2018-09-28 07:31:12]
ender :
100m is bad, i guess you did not watch if that was “before” a ramping up or after ?
[2018-09-28 07:31:31]
ender :
It really goes on my nerves they let the link Quality degrade so much before ramping up.
[2018-09-28 07:31:59]
ender :
So you can fly within CE range on FCC and still have a lousy link that gets better if you fly further away as it then steps up power…
[2018-09-28 07:32:32]
kilrah :
it can't be a question of ramping since it was just bad at all times
[2018-09-28 07:33:12]
ender :
Well, if it would have gone to full power it probably would have been better i guess but insisted to try at low power, dont you agree ?
[2018-09-28 07:33:36]
ender :
GPS XD+ did Antutu of 90000 thats fine, GRRR FF6 lag…
[2018-09-28 07:33:49]
ender :
DJI GO really looked very good.
[2018-09-28 07:35:15]
kilrah :
no! it must have been full already - any further /worse and it jsut dropped completely.
[2018-09-28 07:38:58]
ender :
okay, bad. I guess you didnt have time or nerve to fakeGPS and use it on 5G ?
[2018-09-28 07:39:44]
kilrah :
i did fakegps but didn't get the 5G channels - and indeed didn't have time to muck around more
[2018-09-28 07:39:52]
ender :
thought so…
[2018-09-28 07:40:22]
ender :
I will have to try it it urban surrounding, its very rare for me but i want to have a solution if it comes to that…
[2018-09-28 07:40:27]
ender :
(or know there is none)
[2018-09-28 07:43:53]
kilrah :
in this case it worked, cause for a building photo shoot you're close anyway
[2018-09-28 07:44:02]
ender :
yep
[2018-09-28 07:44:23]
kilrah :
but if it was video and you'd have to at least do 2-300m "passes" it would have been harder with only a feed 1/4th of the time
[2018-09-28 07:44:35]
ender :
of course..
[2018-09-28 21:45:15]
aciid :
@ender internal format with larger cards works most of the time
[2018-09-28 21:55:29]
ender :
I know, but not on all and for some it works but they stay unreliable.
[2018-09-29 04:18:20]
shell :
i know this isn’t an anafi but i finally built a mount for my cr322 LEDs on the bebop (partial remix)
[2018-09-29 04:19:11]
shell :
i think it turned out decent
[2018-09-29 04:20:15]
shell :
i may remix T69's leg protectors to add similar mounting points on the anafi
[2018-09-29 05:00:27]
trulala69 :
@shell give me a shout if you need something...
[2018-09-29 05:14:38]
trulala69 :
Should be fairly easy to add the led’s...
[2018-09-29 12:42:09]
ender :
Damn, now i am curious, cannot open those links…
[2018-09-29 16:02:35]
shell :
Stupid Google cache
[2018-09-29 16:04:13]
shell :
<https://photos.app.goo.gl/yyim3vRzUPwyLDoy7>
[2018-09-29 16:28:48]
trulala69 :
Can you switch them on and off? Or just on for a looong time?
[2018-09-29 17:53:54]
ender :
@shell: why dont you just use those “el-cheapo” finger lights ?
<https://www.aliexpress.com/item/4PCS-lot-Fashion-Party-LED-Finger-Light-Bright-Finger-beautiful-Unique-Ring-Dancing-Lights-Rave-Party/32670780796.html?spm=2114.search0604.3.61.49554fa1nCzq7O&ws_ab_test=searchweb0_0,searchweb201602_1_10320_10065_10068_10843_10547_10059_10884_10548_10887_10696_100031_10319_10084_10083_10103_10618_10304_10307_10820_10821_10302,searchweb201603_60,ppcSwitch_0&algo_expid=0434b29b-8a72-423e-9104-39364aadf509-8&algo_pvid=0434b29b-8a72-423e-9104-39364aadf509&priceBeautifyAB=0>
[2018-09-29 17:54:10]
ender :
you can get hundred for $10 if you search enough…
[2018-09-29 17:54:51]
shell :
I have some of those actually
[2018-09-29 17:54:59]
ender :
me too, 40 left :slightly_smiling_face:
[2018-09-29 17:55:11]
ender :
had my whole Bebop fleet equipped with it
[2018-09-29 17:55:32]
shell :
These cr322 cells are reversible
[2018-09-29 17:55:53]
shell :
You simply reverse the battery and they turn off
[2018-09-29 17:56:02]
shell :
Plug and play
[2018-09-29 17:56:12]
ender :
that works with all batteries, only stuff melts :slightly_smiling_face:
[2018-09-29 17:56:21]
shell :
And the batteries are pretty cheap at Amazon
[2018-09-29 17:56:29]
shell :
Lol
[2018-09-29 17:57:15]
shell :
Apparently these light are big with fish wranglers
[2018-09-29 17:57:43]
shell :
I have no reason why but apparently they are integrated with lures
[2018-09-29 17:58:12]
ender :
i always like to strap a pair of Cree’s to my drones if its misty & near sunset outside. Great light show :slightly_smiling_face:
[2018-09-29 17:58:57]
ender :
Had those for the Air :slightly_smiling_face:
<https://www.aliexpress.com/item/Drone-accessory-1-Pair-LED-Headlamp-for-DJI-Mavic-Air-Drone-Night-searching-shooting-Rotatable-Cree/32860968577.html?spm=2114.search0604.3.1.1a431a87Wj4jtw&ws_ab_test=searchweb0_0,searchweb201602_1_10320_10065_10068_10843_10547_10059_10884_10548_10887_10696_100031_10319_10084_10083_10103_10618_10304_10307_10820_10821_10302,searchweb201603_60,ppcSwitch_0&algo_expid=d433525a-3eb9-4829-a873-01cf51b2bd5a-0&algo_pvid=d433525a-3eb9-4829-a873-01cf51b2bd5a&priceBeautifyAB=0>
[2018-09-29 17:59:28]
shell :
Now we're talking
[2018-09-29 17:59:37]
ender :
see, just ask Ender :stuck_out_tongue:
[2018-09-29 18:00:08]
ender :
(they can be had much cheaper, only first link i found)
[2018-09-29 19:54:51]
trulala69 :
I would extend the design a bit at the bottom and drill a hole to put the cr 322 at the bottom of the leg to keep the print orientation ...
[2018-09-29 19:55:26]
trulala69 :
What is the diameter of the “lures”?
[2018-09-29 20:24:11]
shell :
4.75mm
[2018-09-29 21:00:09]
shell :
something like this
[2018-09-29 21:00:33]
shell :
[2018-09-30 05:11:16]
trulala69 :
Yep... :+1:
[2018-09-30 07:50:36]
kilrah :
<https://imgur.com/a/J5pMpzu>
[2018-09-30 07:56:56]
trulala69 :
Nice! I like the colors of the sun and the sky ... Sunset or Sunrise?
[2018-09-30 07:58:07]
trulala69 :
Ok, in autumn it must be sunset, I guess ...
[2018-09-30 08:03:17]
kilrah :
sunset
[2018-09-30 08:03:29]
kilrah :
sunrise is too early and cold for me :smile:
[2018-09-30 08:04:40]
trulala69 :
Agreed ... I wish I would have the nerve to get up early to get a foggy sunset here...
[2018-09-30 08:05:04]
kilrah :
i manage that once or twice a year lol
[2018-09-30 08:05:35]
kilrah :
gonna wait for the mavic 2 for that though, not bothering with anafi
[2018-09-30 08:05:53]
kilrah :
with the humidity video link would be shit again :smile:
[2018-09-30 08:08:17]
trulala69 :
I really do hope this is getting better somehow. I did a "shooting" at a wedding 3 weeks ago (countryside) stiull on CE and connectionwise it was awful in comparison to the Spark (ok in FCC) ...
[2018-09-30 08:09:19]
trulala69 :
On one hand the Anafi is really better than all the restricted DJI stuff, but on the other hand I also was tempted to get an Air, if it wasn't that loud ...
[2018-09-30 08:09:24]
kilrah :
for me even with patch (if that works...) i consider it worse than spark was
[2018-09-30 08:09:46]
kilrah :
spark ce had short range, but at least up to that it worked pretty reliably.
[2018-09-30 08:10:09]
kilrah :
anafi is "ok you can do 1.5km, except when you can only do 50m"
[2018-09-30 08:10:11]
trulala69 :
Jup ... I had my moments in Indonesia, where I nearly lost it twice, but it did my the favor of RTH ... ufff ...
[2018-09-30 08:10:37]
trulala69 :
The spark ...
[2018-09-30 08:16:42]
trulala69 :
But then again the Spark was neat with it's limited HDR mode ... <https://imgur.com/wrd4UJv>
[2018-09-30 08:18:00]
ender :
To repeat my personal impression: In areas with no interference i got WAY better performance in FCC compared to Spark in FCC. And noticably better performance compared to the Air in FCC. In WiFi congested Areas my experiences are not that rich or comparable but ti would agree the Anafi seems much more susceptible to problems there. I did NEVER try 5G in those situations as i just learned that one could do so with FakeGPS. Thats my 2 Eurocent :wink:
[2018-09-30 08:18:59]
trulala69 :
Might be, because my Spark always was on 5G by default ... but on a congested hotel area I didn't get very far with the Spark either ...
[2018-09-30 08:21:10]
trulala69 :
Another one <https://imgur.com/UAZ5WtK>
[2018-09-30 08:26:21]
kilrah :
I never got less than 1km with mavic air in FCC even in the worst places
[2018-09-30 09:36:15]
trulala69 :
I know both of you own an Air. How does it compare to the Anafi image quality? Still thinking about getting an Air and trying to get it quieter with Anafi props...
[2018-09-30 09:54:04]
kilrah :
i got the anafi becasue i wasn't happy with the air image quality...
[2018-09-30 09:59:02]
trulala69 :
Ok...
[2018-09-30 10:34:58]
makingthisnameup :
the anafi imo feels more camera then drone
[2018-09-30 10:35:34]
makingthisnameup :
a few shots i grabbed with the anafi I wasn't trying to take. They just sorta happened. it's quality for sure
[2018-10-01 06:47:41]
trulala69 :
@shell Just out of curiosity, how did you convert the STL back to something editable?
[2018-10-01 07:21:28]
ender :
you can edit STL witout converting.
[2018-10-01 07:21:36]
ender :
(I suck at it big time but you can)
[2018-10-01 07:32:40]
mainframe :
f**k, managed to brick SC3 with FCC patched mppd install. Not sure whats wrong - after reboot cannot connect FreeFlight to it anymore.
[2018-10-01 07:32:52]
mainframe :
is there any known way to reset SC3 firmware?
[2018-10-01 07:37:31]
ender :
@andres Hi, uh thats bad, can you adb to it ?
[2018-10-01 07:37:52]
mainframe :
no - no connection at all anymore
[2018-10-01 07:38:09]
ender :
i mean direct USB connection to linux or osx --> then adb connect & adb shell
[2018-10-01 07:38:23]
ender :
messing up mppd **can** only mess up connection mppd to anafi
[2018-10-01 07:38:27]
mainframe :
I havent yet tried USB rndis - but all other channels are dead
[2018-10-01 07:38:35]
ender :
yes thats clear.
[2018-10-01 07:38:39]
mainframe :
usb -> freeflight does not work
[2018-10-01 07:38:39]
ender :
i did that often :-9
[2018-10-01 07:38:46]
ender :
yes thats also clear
[2018-10-01 07:38:55]
ender :
i am talking usb to linux or osx.
[2018-10-01 07:39:03]
ender :
Do you have OSX or linux
[2018-10-01 07:39:05]
ender :
?
[2018-10-01 07:39:19]
ender :
(lets go to PM to not spam people, ok ?)
[2018-10-01 07:39:55]
mainframe :
I cannot connect usb ethernet to macbook - as interface does not work on mac side - some hw related problem with auto-mdix
[2018-10-01 07:40:00]
mainframe :
ok
[2018-10-01 07:46:06]
kilrah :
ah good, found how to install rndis on win
[2018-10-01 07:46:08]
trulala69 :
@ender Yes, I know, e.g. with MeshMixer, but his screenshot looks like he's converted it ...
[2018-10-01 07:47:49]
ender :
@kilrah: for use with MPP3 ? if so, please share so i can reshare if needed…
[2018-10-01 07:47:59]
kilrah :
<https://developer.toradex.com/knowledge-base/how-to-install-microsoft-rndis-driver-for-windows-7>
[2018-10-01 07:48:15]
kilrah :
driver's built in but doesn't get selected automatically
[2018-10-01 07:48:16]
ender :
will try asap !
[2018-10-01 07:48:41]
ender :
did you use that same method on W10 or are you using W7 ?
[2018-10-01 07:48:46]
kilrah :
same on 10
[2018-10-01 07:49:13]
ender :
cool
[2018-10-01 07:52:48]
kilrah :
lets do that on the gpd win2 as well for field use...
[2018-10-01 07:54:51]
kilrah :
there, perfect too
[2018-10-01 07:55:27]
ender :
@kilrah: do you get dhcp ? i needed to assign static ip on windows.
[2018-10-01 07:55:39]
ender :
other then that its working :+1:
[2018-10-01 07:56:01]
kilrah :
yes it's ok on dhcp on both machines
[2018-10-01 08:03:02]
ender :
strange.
[2018-10-01 08:03:33]
ender :
@kilrah: but terminal emulation is messy for you as well, right ? (if doing adb shell)
[2018-10-01 08:03:36]
mainframe :
ok guys - fuckup was my fault entirely - not following the instructions to the letter…I was assuming that cp gets mppd the target permissions (like normally on linux) - but it didnt - and I skipped chmod later.
[2018-10-01 08:03:48]
ender :
never skip :slightly_smiling_face:
[2018-10-01 08:04:15]
mainframe :
now up and running with FCC patch. Thanks @ender for quick reaction and help!
[2018-10-01 08:04:31]
ender :
you’re welcome. You dragged yourself out 99% :slightly_smiling_face:
[2018-10-01 08:04:52]
ender :
well, you pushed yourself in 100% as well :stuck_out_tongue:
[2018-10-01 08:12:26]
mainframe :
thanks again! now some field testing is in order…
[2018-10-01 08:15:11]
mainframe :
btw from ulogcat:
I cfg80211wpactrl(wifid) : wpa_ctl : start
I cfg80211wpactrl(wifid) : wpa_ctl : cmd SET country US
[2018-10-01 08:15:49]
mainframe :
N main (wifid) : EVT:WIFI_COUNTRY;country=US
[2018-10-01 08:16:35]
ender :
yes, as said before, dont let txPower ramping scare you, signal bars jump up again after going to yellow or red alert …
[2018-10-01 08:16:49]
ender :
but of course when testing stuff like this be prepared for rth…
[2018-10-01 08:17:19]
ender :
(I noticed 3 ramps when doing my longest flight so far, 3,5km)
[2018-10-01 08:31:18]
mainframe :
ok good to know. Indoor txpower reading is 25dbm
[2018-10-01 08:31:41]
mainframe :
US max should be 30dbm. So it auto-adjusts?
[2018-10-01 08:39:24]
ender :
no, it seems to know about antenna gain and adjusts eirp to match 30 dB = 25dB + 5dB
[2018-10-01 08:39:29]
ender :
OR it maxes out :slightly_smiling_face:
[2018-10-01 08:39:37]
ender :
but before it was 14 so rejoice :slightly_smiling_face:
[2018-10-01 08:52:26]
mainframe :
right - I didnt take antenna gain into account :slightly_smiling_face:
[2018-10-01 08:53:43]
ender :
For me strangly it sometimes shows 23 dB. I dont know why.
[2018-10-01 08:54:24]
ender :
23 actually makes more sense as deep in the logs you can see the factory calibration measurements of the Antennae and thea yre between 6 & 8 dB so 7 dB average so 23dB should be max txpower.
[2018-10-01 08:54:35]
ender :
but i have not grokked the whole thing fully yet.
[2018-10-01 09:35:40]
ender :
ahhh adbputty, thanks…
[2018-10-02 08:05:11]
kilrah :
damn, the m2 is quieter than the anafi...
[2018-10-02 08:08:02]
ender :
measurements said otherwise. REALLY ? Or just more comfortable freqs ?
[2018-10-02 08:08:15]
ender :
That’d be great.
[2018-10-02 08:19:03]
aciid :
I'm trying to find a immersionrc power meter v2, but banggood is out of stock >,<
[2018-10-02 08:19:10]
trulala69 :
Really? If so, I've to save some money to get one :smile:
[2018-10-02 08:19:26]
trulala69 :
M2
[2018-10-02 08:23:47]
aciid :
[2018-10-02 08:23:55]
aciid :
oh look accurate measurements "soon" TM
[2018-10-02 08:29:59]
kilrah :
probably more comfortable freq, nothing high pitch
[2018-10-02 08:30:27]
kilrah :
level measured close is likely higher but you don't hear anything 100m away
[2018-10-02 08:31:00]
kilrah :
unless you're going full speed of course
[2018-10-02 08:36:47]
kilrah :
need to take both one day
[2018-10-02 08:39:00]
ender :
yep. Still wont buy w/o 4k60 but great that mass market drones are getting less noisy. People in general will be soothed…
[2018-10-02 08:39:12]
ender :
OR just double down on “spy camera” Bullshit
[2018-10-02 08:39:49]
ender :
Have not seen comments remarking that they are more quit then Platinum…
[2018-10-02 08:54:05]
trulala69 :
According to some mesurements on "YT" Platinum seems to be a bit quieter ...
[2018-10-02 09:28:04]
ender :
yep, thats what i saw. But as annoyance of sound is very subjective things can vary. I am actually much more interested how annoying & agressive a drone sounds at which distance then mere readings of a soundmeter (i have one and learned :slightly_smiling_face: ).
[2018-10-02 09:28:19]
ender :
Mavic pro never sounded as nasty as Air due to Airs high freqs…
[2018-10-02 09:37:55]
makingthisnameup :
the Mavic Air reminds me of someone who just got up one day at DJI and walked out, like fuck it. And no one touched the prop project until almost release
[2018-10-02 09:45:41]
makingthisnameup :
"has anyone seem Jim? new props for air", "Jim just walked out a few weeks ago", WHAT?
[2018-10-02 10:58:28]
trulala69 :
Just had a look at used MP Platinum prices, what a price drop meanwhile ...
[2018-10-02 11:34:45]
makingthisnameup :
Is is drastic? Let me check
[2018-10-02 11:35:00]
makingthisnameup :
Friend just got a used MP extras 666
[2018-10-02 11:43:21]
trulala69 :
$, € ?
[2018-10-02 11:53:28]
makingthisnameup :
$
[2018-10-02 11:58:12]
trulala69 :
MP are also cheaper now in €land ... everyone is upgrading... I'm still thinking about having a cheap one to play with ... Have no idea if the picture quality is far less than the Anafi, but I'm more interested in the range...
[2018-10-02 11:58:57]
makingthisnameup :
range is why i don't fly the anafi :disappointed:
[2018-10-02 15:21:53]
ender :
3,5km last week. Far enough for me :stuck_out_tongue:
[2018-10-02 16:12:14]
kilrah :
yeah when you're in the middle of nowhere
[2018-10-02 16:29:05]
ender :
and guess what: i AM lol :slightly_smiling_face:
[2018-10-02 16:29:31]
ender :
Just joking, i concede the Anafi sucks near other WiFi bot i yet have to try on 5G for those Situations…
[2018-10-02 16:52:17]
makingthisnameup :
yeah city noise makes it just not worth while
[2018-10-02 16:53:08]
makingthisnameup :
it's the only fault I'll give it because the anafi is superior in almost every other way
[2018-10-02 17:06:35]
kilrah :
i never managed to get the 5G choices to appear yet...
[2018-10-02 17:07:50]
kilrah :
maybe need to unpatch controller
[2018-10-02 17:22:08]
quad808 :
as far as noise goes....I will put a Platinum with CF props up against any similar sized drone. Low pitch sound in a hover. Don't know if less noise than an Anafi, but I will have to do a real world ear test. LOL
[2018-10-02 18:26:23]
mr.vibez :
The anafi is quieter than my M2P but lets put it this way, both are audible when flown overhead.
[2018-10-02 18:27:13]
mr.vibez :
My anafi is completely silent now ..... I had a flyaway
[2018-10-02 18:27:35]
mr.vibez :
Sent it on a flightplan, and it never came back
[2018-10-02 18:36:34]
quad808 :
Thats not good, and no fun at all.
[2018-10-02 18:41:35]
mr.vibez :
What makes it worse is parrot agreed to a replacement but asked me to send the drone back (which I don't have, hence why I raised a ticket with them) I now have a returns label and they have gone silent on me. They always email me with a donotreply type email address
[2018-10-02 19:02:47]
kilrah :
oops
[2018-10-02 19:05:07]
ender :
@mr.vibez SInce the beginning i had MUCH more success with them on the phone. They actually do not only hire drone type of people. So 1 of 2 or 3 calls usually has been successful whatever i wanted in reasonable limits.
[2018-10-02 19:06:15]
mr.vibez :
That will be my next steps thanks :slightly_smiling_face:
[2018-10-02 19:09:30]
kilrah :
was the flightplan "reasonable" or a bit edgy with expected battery life etc?
[2018-10-02 19:12:06]
kilrah :
**is charging anafi, M1 and M2**
[2018-10-02 19:12:38]
kilrah :
got a job tomorrow afternoon with M1, will take anafi as backup, but obviously have to fly the M2 in the morning first :stuck_out_tongue:
[2018-10-02 20:40:57]
mr.vibez :
it flew out of range (poor connection)
[2018-10-02 20:41:31]
mr.vibez :
normally it returns after the mission completes but this time it decided it didn't want to play nice
[2018-10-03 05:40:19]
aciid :
does anyone know when Typhoon Q is coming out?
[2018-10-05 22:55:01]
mainframe :
Anafi battery, inside out :slightly_smiling_face:
<https://www.youtube.com/watch?v=Gpz1UsszC3Q>
[2018-10-06 09:36:51]
validat0r :
@mr.vibez didn't you plan the last point of the flight plan to be close to your position?
[2018-10-09 10:39:26]
pedrocab :
Hi all, I finally received the Anafi this week :slightly_smiling_face:
[2018-10-09 10:42:45]
ender :
Congrats :slightly_smiling_face:
[2018-10-09 13:26:14]
trulala69 :
Happy flying!
[2018-10-09 16:37:56]
kilrah :
cool, done 2nd job with mine yesterday
[2018-10-09 19:59:50]
trulala69 :
:+1: How was the connection this time?
[2018-10-10 05:54:30]
kilrah :
better in this location
[2018-10-12 14:04:30]
aciid :
where the effff is my RF power meter
[2018-10-12 21:00:24]
ender :
@aciid welcome to my world :hugging_face:
[2018-10-12 22:05:54]
aciid :
i mean it has not arrived yet :smile:
[2018-10-12 22:06:01]
aciid :
but thanks :3
[2018-10-15 10:32:48]
mail451 :
Has anyone looked at update.bin from anafi? Seems it supports autoexec.ash and cal.txt :wink:
[2018-10-15 20:50:36]
aciid :
context?
[2018-10-15 20:51:03]
aciid :
can you make the firmware upgrade process execute arbitary files?
[2018-10-15 21:50:20]
mail451 :
No tcp_tuner.sh support sadly, these script execute off the SD card when the device boots. Might be able to interface with the non-AmbaRTOS side as well.
[2018-10-15 21:50:50]
mail451 :
SJCAM SJ8 Pro and Insta360 One X use the same Amba H22 image processing chip as Anafi.
[2018-10-16 08:37:35]
mail451 :
<https://gist.github.com/KonradIT/68e9988f7ea74bd49766344665a7f012>
[2018-10-16 08:37:59]
mail451 :
These are some notes from the firmware, telnetd is present and rpc clnt exec1 as well.
[2018-10-16 16:46:13]
aciid :
@mail451 where these from the extracted rom?
[2018-10-16 16:47:05]
aciid :
why is parrot not noticing us on the developer forum=?
[2018-10-16 16:48:39]
aciid :
@mail451 if it supports autoexec like with the gopro cameras, it means many things...
[2018-10-16 17:05:52]
mail451 :
Exactly :)
[2018-10-16 17:06:08]
mail451 :
Maybe I should re-open autoexechack
[2018-10-16 17:06:47]
mail451 :
Can you test if it works? A simple "help > c:\hello.txt" will do.
[2018-10-16 17:10:26]
aciid :
I can
[2018-10-16 17:11:48]
aciid :
which file am I looking for , or do I just write that to a file
[2018-10-16 17:12:02]
aciid :
I have not used this before lol
[2018-10-16 17:12:23]
aciid :
i type that shit to autoexec.ash?
[2018-10-16 17:12:27]
mail451 :
Yes
[2018-10-16 17:13:16]
mail451 :
See <https://github.com/KonradIT/autoexechack/blob/GoPro/README.old> for info
[2018-10-16 17:15:35]
aciid :
ah my card wasnot initialized
[2018-10-16 17:15:48]
aciid :
huge card
[2018-10-16 17:17:11]
mail451 :
Yes GoPros had issues with exFAT 64GB card and larger.
[2018-10-16 17:17:30]
mail451 :
Best to use a 32GB SanDisk Extreme
[2018-10-16 17:24:12]
aciid :
formatted and card worked, but no files were created
[2018-10-16 17:25:02]
mail451 :
hmmm
[2018-10-16 17:25:25]
mail451 :
so there are multiple ways to approach this: card does not work, autoexec.ash does not work. What firmware are you on?
[2018-10-16 17:25:32]
mail451 :
If you can try a different card.
[2018-10-16 17:26:18]
mail451 :
Try these new lines.
[2018-10-16 17:26:21]
aciid :
sorry I only have lexar 1000x 64gbs
[2018-10-16 17:26:25]
aciid :
ill try
[2018-10-16 17:26:34]
mail451 :
And make sure autoexec.ash is Linux line ending not CRLF.
[2018-10-16 17:26:38]
aciid :
oh
[2018-10-16 17:26:41]
aciid :
wlel that explains
[2018-10-16 17:26:44]
aciid :
probably
[2018-10-16 17:26:47]
aciid :
need to spin it from a vm
[2018-10-16 17:26:51]
aciid :
or a shell
[2018-10-16 17:27:20]
aciid :
can tehre be multiple lines_
[2018-10-16 17:28:21]
mail451 :
Use Notepad++ if you're on Windows
[2018-10-16 17:28:42]
mail451 :
There can be multiple lines. Make sure you leave an extra blank line at the end of the script.
[2018-10-16 17:31:39]
aciid :
trying npp+++ versaion now
[2018-10-16 17:32:34]
aciid :
nope still no file,. but ill try this one path I found from the bin logs
[2018-10-16 17:32:56]
aciid :
'/mnt/user/FDR/current/log.bin'
[2018-10-16 17:33:01]
aciid :
mnt/user is the sd-card
[2018-10-16 17:33:29]
mail451 :
Try that. Or e:\
[2018-10-16 17:36:43]
aciid :
noup
[2018-10-16 17:37:02]
aciid :
i need to go out for a bit friend is coming over to town, ill be back laterrr
[2018-10-16 17:37:10]
mail451 :
Try adding a "sleep 10".
[2018-10-16 17:37:11]
mail451 :
OK
[2018-10-16 17:37:13]
mail451 :
NP
[2018-10-16 17:37:23]
aciid :
we can continue from this
[2018-10-16 17:37:26]
aciid :
l8
[2018-10-19 09:06:12]
mail451 :
Maybe someone else with a different SD card can check if autoexec.ash is executed? Also which ports are open on WiFi?
[2018-10-19 12:49:48]
trulala69 :
Sure, what do I have to do?
[2018-10-19 12:53:42]
mail451 :
Hi @trulala69 check the earlier messages between aciid and me. The firmware on the anafi appears to read from autoexec.ash, like many Ambarella cameras. Theoretically a telnet session can be started or commands can be sent to the non AMBA side.
[2018-10-19 12:54:56]
mail451 :
Power off your Anafi and get the SD card out. Write this into a file called autoexec.ash in the root of your SD card, power back on your Anafi and power it off after a couple of seconds. Then see if a file called help.txt was created in the SD card.
[2018-10-19 12:57:39]
trulala69 :
Ok, I‘ll have a try later today...
[2018-10-19 13:33:27]
trulala69 :
What line breaks should I use? LF or CRLF?
[2018-10-19 13:51:26]
mail451 :
Linux LF
[2018-10-19 14:02:56]
trulala69 :
Ok...
[2018-10-19 14:22:11]
trulala69 :
I took a 64GB SanDisk Ultra, but no help.txt ...
[2018-10-19 14:23:51]
trulala69 :
Same with the original 16GB Card ...
[2018-10-19 14:45:36]
mail451 :
Hmmm, so it really does not execute autoexec.ash
[2018-10-19 14:45:41]
mail451 :
Was worth a shot. Thanks!
[2018-10-19 14:45:58]
mail451 :
Maybe try with: help > e:\help_e.txt
[2018-10-19 15:00:28]
trulala69 :
Unfortunatelly no success with e: ...
[2018-10-19 15:35:30]
mail451 :
There's support for cal.txt but I doubt any commands will work. Seems like Parrot has to provide the developer cert after all.
[2018-10-20 08:24:58]
aciid :
they are unsupportive in the forums
[2018-10-20 08:53:31]
aciid :
5pin row is same rx tx btw as in sdcard
[2018-10-20 19:46:56]
chipmangini :
<https://www.drone-world.com/parrot-anafi-work-4k-360-zoom-3d-mapping-drone?utm_source=email&utm_medium=emailer&utm_campaign=EM-ParrotAnafiWork-10-18-2018>
[2018-10-24 07:50:27]
ender :
Hi guys ! Been aways for holidays :slightly_smiling_face: 3,8km max flight distance with FCC mod, not too shabby although VERY laggy after 3km :slightly_smiling_face:
[2018-10-24 07:50:53]
ender :
I see you are probing autoexec.ash & UART stuff now, YAY, way to go !
[2018-10-24 08:00:58]
aciid :
autoexec was a nogo
[2018-10-24 08:01:13]
aciid :
probably requies debug to be active
[2018-10-24 09:14:14]
mail451 :
Yeah, shame. What's the FCC mod that works?
[2018-10-24 09:14:22]
mail451 :
TBF cal.txt exists...... Sooooo
[2018-10-24 09:59:59]
ender :
well the MPPD patch i published…
[2018-10-25 15:14:29]
ender :
new anafi app & FW (AC & RC).
[2018-10-25 15:15:08]
ender :
Until we learn if the new RC FW is also easy to mod may only update the AC, that works with not upgraded RC, i just tried, so you are not forced to upgrade FC….
[2018-10-25 15:32:26]
ender :
okay, checked positive, then flashed and YES i am still able to get root access on controller, YEAH, now lets see if the FCC patch can be adapted. If you need FCC dont upgrade the Controller yet.
[2018-10-25 15:38:15]
trulala69 :
Thanks for testing... I hope you‘ll get mppd patched again...
[2018-10-25 15:42:22]
trulala69 :
Any idea what has been fixed or added? Can’t find a link to some release notes...
[2018-10-25 17:26:18]
kilrah :
<https://www.rcgroups.com/forums/showpost.php?p=40393429&postcount=2466>
[2018-10-25 17:26:38]
kilrah :
just gimmicks lol
[2018-10-25 17:28:25]
aciid :
shit
[2018-10-25 17:44:30]
ender :
patch looks good guys…
[2018-10-25 17:44:48]
ender :
all shifted and moved but no extra level of obfuscation or protection.
[2018-10-25 17:54:04]
ender :
Here is the patched mppd (do not distribute, belongs to Parrot) AND the zip with a howto patch and patch file…
[2018-10-25 17:54:04]
ender :
<https://we.tl/t-K852cam2m4>
[2018-10-25 17:54:34]
ender :
BEWARE i did not do practical testing, so if you are cautious give me a day :slightly_smiling_face:
[2018-10-25 17:55:47]
ender :
@kilrah, @aciid: the version history is just for the app, we wont know if they only did changes in FW to accomodate the app changes or if they did more (e.g. smoothen that TxPower pumping)…
[2018-10-25 17:55:55]
ender :
cya !
[2018-10-25 18:13:26]
d95gas :
:ok_hand: Thanks @ender
[2018-10-25 18:17:38]
d95gas :
And incorporating into NLD..... that is just sooooo Awesome, you guys are bloody amazing :100:
[2018-10-25 18:28:59]
ender :
coldflake is :wink:
[2018-10-25 18:30:01]
d95gas :
Hey I know you also put a lot of work in as well, so take the credit :thumbsup_all:
[2018-10-25 19:17:35]
ender :
I meant for the NLD Integration :stuck_out_tongue:
[2018-10-25 20:30:36]
trulala69 :
Thanks, ender and coldflake, that was quick. I don’t know, if this is a fake, but this french site announced panorama shots in the next release in November :
<https://www.helicomicro.com/2018/10/25/parrot-anafi-mises-a-jour-majeures-en-approche/?fbclid=IwAR3RgEacSWf4rN9sXddWoo5C1az1YqNJPloGTiv8lm5rz2MrU7sd9xD8IZQ>
[2018-10-25 20:43:50]
ender :
Well, X-Mas is getting closer :wink:
[2018-10-25 20:53:54]
kilrah :
they're a very good source of info. so can believe it
[2018-10-25 20:54:22]
kilrah :
now to hope you can save panorama original RAWs like on DJI since the anafi jpegs are awful...
[2018-10-25 21:14:09]
ender :
They’ll need 1 or 2 revisions more for that i fear :wink:
[2018-10-26 05:24:14]
kilrah :
"It would seem they have patched the option to go higher then 150 meters. Flight plan will not allow you to enter anything more than 150 meters"
[2018-10-26 06:39:20]
ender :
yep, i just read in the forum. I **assume** thats patched in the app so maybe an older version can fix that. I just tried that ONCE as i do not need that method but for many people its important…
[2018-10-26 07:00:02]
kilrah :
yup probably app side
[2018-10-26 07:03:13]
ender :
did you try to simply edit the saved flightplan (on rooted Android) after saving it ? They probably also fixed THAT, but… :wink:
[2018-10-26 07:03:23]
ender :
(edit = root file editor)
[2018-10-26 07:35:07]
kilrah :
I have never even used flight plan
[2018-10-26 07:36:34]
trulala69 :
I hope they’ve implemented RAW,but I doubt it, cause saving them takes ages at least with my memory card...
[2018-10-26 07:40:54]
kilrah :
a second or 2 with original u3 one
[2018-10-26 08:20:00]
trulala69 :
And the screen freezes in the meantime, but whatever, now I can sell my spark and do the panos with the Anafi, yay!
[2018-10-26 08:22:50]
ender :
wait panos are not there YET, right ?
[2018-10-26 08:38:03]
ender :
@kilrah: you can still edit the Altitude in the flightplan json file to > 150m and load it up and it displays the edited Altitude. If it will finally execute & go to that Altitude i have not tried yet…
[2018-10-26 08:39:01]
kilrah :
yes i've tried a few minutes ago, reloading works
[2018-10-26 08:39:12]
kilrah :
havent tested either though, at work
[2018-10-26 08:39:29]
ender :
I tried signal strenght with 1.2.0 patch, seems great.
[2018-10-26 08:39:34]
kilrah :
cool
[2018-10-26 08:39:51]
ender :
It **might** be that they changed the way TxPower pumps to be more smooth.
[2018-10-26 08:41:02]
ender :
But my “from my terrace” test ground is not in calibrated mode, leaves are wet so signal levels are different, will have to try in open terrain flying straight away. would be great if they do NOT let signal Quality deteriorate to red warning & heavy lag before stepping up TxPower…
[2018-10-26 08:42:06]
ender :
This time i had No Yellow or red warning until final signal loss & rth
[2018-10-26 08:43:38]
ender :
Oh great it seems i can make a 5GHz connection (App sees DE countrycode, no Fakegps) without cheating US !!!
[2018-10-26 08:43:52]
ender :
(remember US cheating is only for AC & RC, not App).
[2018-10-26 08:43:57]
ender :
THAT would be great.
[2018-10-26 08:44:57]
ender :
stable on 149, not visible to other Wifi devices correctly working for de laws :slightly_smiling_face:
[2018-10-26 08:45:00]
ender :
haha great
[2018-10-26 08:47:11]
ender :
(as 149 is NOT allowed in Europe) Could anyone try NOT using my FCC patch ? I wonder if its a new sideeffect of my patch (appreciated) or a change in the app ?!
[2018-10-26 08:56:08]
trulala69 :
Going to update today and having a look before patching ... Panos are in the next update hopefully, right...
[2018-10-26 09:02:49]
ender :
even after power cycle good on 5Ghz, GREAT :wink: One time in holiday i needed 5Ghz as a huge hotel was behind me. got > 3km on 5G as there were no obstacles.
[2018-10-26 09:03:03]
ender :
Not Mavic(2) performance but sufficient for me…
[2018-10-26 09:04:41]
ender :
haha, my ipad sees it , my law abiding androids & pcs dont…
[2018-10-26 09:34:21]
ender :
some other guy in my german forum said he is now able to have a stable 5g connection on that forbidden 5g channel, lolz
[2018-10-26 10:44:47]
trulala69 :
Channel 149 confirmed without patch ... patching now ...
[2018-10-26 10:54:25]
trulala69 :
Hmm, my Controller is on 192.168.53.1:9050 ... had to use the AngryIP Scanner for MacOs to find it ... continuing to patch ...
[2018-10-26 11:00:48]
trulala69 :
Done ... Channel 149 still available :slightly_smiling_face: and reg get says US ... perfect!!! Thanks again, guys!
[2018-10-26 11:26:04]
ender :
yihaaaa
[2018-10-26 11:26:16]
ender :
53.1:9050 was expected did i write something else ?
[2018-10-26 12:04:14]
ender :
I wonder if this new feature opens up any new possibility:
“…Pairing of Skycontroller 3 and ANAFI using the provided USB-A to USB-C cable (a µSD card must be inserted into ANAFI)…” Sounds like a temporary RNDIS connection that the Anafi offers to the Controller ?!
[2018-10-26 13:18:08]
sotiris.tripolitsioti :
@ender Did you managed to work on channel 159 without patching in the new firmware/app at all or you used your patch as per above?
[2018-10-26 13:19:41]
trulala69 :
I had a connection on ch149 before patching already, if that helps ...
[2018-10-26 13:23:06]
trulala69 :
@ender you wrote in the DE patch hosto for 1.2.0 "adb connect 192.168.42.9:9050 or .28)" ... in the former 1.1 howto it was "192.168.53.1:9050", which worked in my case again ...
[2018-10-26 13:31:45]
ender :
usb adb is ..53.1, wifi is the above !
[2018-10-26 13:31:56]
ender :
so all is good & normal
[2018-10-26 13:32:13]
ender :
@sotiris.tripolitsioti: seems to work w/o patch which is great :slightly_smiling_face:
[2018-10-26 13:32:44]
ender :
strange the low 5g channela are not visible… and no channel 12 & 13 in de as well, seems they still have some work to do :slightly_smiling_face:
[2018-10-26 13:34:08]
sotiris.tripolitsioti :
@trulala69 @ender Thanks! I suppose that the switch to US via the patch, stays on even after reboot of drone and controller? Sorry if this is answered already ..
[2018-10-26 13:34:33]
ender :
yes
[2018-10-26 13:34:39]
trulala69 :
I was working through your new DE/EN howto and got the "new" IP's from there ...
[2018-10-26 13:34:53]
ender :
its in the Controller, it only goes away if you rewrite original mppd or update firmware on controller
[2018-10-26 13:35:08]
ender :
app does not see “US” but stays in rea country unless you fakeGPS..
[2018-10-26 13:37:39]
sotiris.tripolitsioti :
I will try with no patch (I am @ EU but not DE) to see how it goes with ch 159 and then I will patch and check again. Will post results here :slightly_smiling_face:
[2018-10-26 13:48:38]
ender :
great ! by the way (for me) it does not work if i try to set the 5g channel manually i need to press 5g button and the channel is auto select.
[2018-10-26 13:50:52]
sotiris.tripolitsioti :
In 6.2 you mean? If so, P@rrot must have leftover code there...
[2018-10-26 13:59:10]
ender :
in the latest, yes 6.20
[2018-10-26 13:59:27]
ender :
better then before at least where NO 5G channel selection would work in .de
[2018-10-26 14:07:42]
sotiris.tripolitsioti :
Very true! Lets see how it behaves in GR where I am located. Hopefully DE does not have a special treatment.. :slightly_smiling_face:
[2018-10-26 14:26:23]
sotiris.tripolitsioti :
Question is, does it truly switch to 5,8G (without the patch) or just shows it does. I happen to have an RF meter so I will check "in situ" :slightly_smiling_face:
[2018-10-26 15:35:27]
ender :
it DOES
[2018-10-26 15:35:31]
ender :
i scanned it
[2018-10-26 15:53:52]
sotiris.tripolitsioti :
Kudos then!
[2018-10-26 16:44:21]
d95gas :
Hi Everyone...... Have I missed something..... Been on the road all day, just looked at this and first post I seed is "does it truly switch to 5,8G (without the patch)" ..... Whats all that about?
[2018-10-26 17:03:50]
ender :
new with App & FW update, nothing to do with patch: you can just switch to 5G (manual does not work) and it will switch to 5g even in .de
[2018-10-26 17:03:58]
ender :
patch will then upgrade to fcc 5G :slightly_smiling_face:
[2018-10-26 17:04:26]
ender :
strangely upper ism channels that are not allowed in europe except srd 25mW wich the Anafi is certainly not. Parrot f*cked up.
[2018-10-26 17:05:56]
ender :
btw i got banned for a few days at home just because i wrote that it worked on 149+ channels :wink: Lolz
[2018-10-26 17:09:49]
sotiris.tripolitsioti :
Update: with app 6.2 on IOS, drone firmware 1.2.1, controller 1.2.0, 5g is not selectable in GR. Auto selection also disappear and only manual is available
[2018-10-26 17:10:24]
ender :
if you fakeGPS to DE its there ? (just to make sure)
[2018-10-26 17:11:26]
sotiris.tripolitsioti :
Fake gps does not play in iOS and FF6
[2018-10-26 17:11:35]
ender :
upp, okay ios !
[2018-10-26 17:11:46]
sotiris.tripolitsioti :
Sorry...
[2018-10-26 17:12:04]
ender :
why :slightly_smiling_face:
[2018-10-26 17:12:38]
sotiris.tripolitsioti :
Why sorry or why it doesn’t play? :upside_down_face:
[2018-10-26 17:12:59]
ender :
haha j/k, dont be sorry i forgot to state ANDROID in the first place :stuck_out_tongue:
[2018-10-26 17:14:11]
sotiris.tripolitsioti :
Start patching process :innocent:
[2018-10-26 17:15:32]
sotiris.tripolitsioti :
But b4, a nice reset to all, just in case
[2018-10-26 17:16:03]
ender :
i always do after fw update, old habit from the bebops :wink:
[2018-10-26 17:17:07]
sotiris.tripolitsioti :
Nice habit, not only for drones :nerd_face:
[2018-10-26 17:22:34]
kilrah :
need to see if they fixed the sd errors
[2018-10-26 17:35:36]
d95gas :
@ enders Thanks for the update, missed all that..... Guess Saturday is going to be "play day" then :slightly_smiling_face: Have a Roof inspection and Chimney inspection to do on Monday on an old skool country mansion
[2018-10-26 17:38:50]
sotiris.tripolitsioti :
5g NA even after reboot. Stuck at 2,4 manual only. @ender is your fw 1.2.1 as mine or 1.2.0 ?
[2018-10-26 17:54:20]
sotiris.tripolitsioti :
I guess DE makes some difference after all :slightly_smiling_face:
[2018-10-26 18:05:47]
sotiris.tripolitsioti :
Just made a short flight with new fw and app w/o patching. SD problem ironed, but the drone w good gps is drifting a bit
[2018-10-26 19:04:25]
kilrah :
there, anafi updated
[2018-10-26 19:42:57]
ender :
Yihaaaa, sotiris try to recalibrate **really** far away from all metal... Anafi is really sensitive. Mine is very solid ever after...
[2018-10-26 19:49:35]
quad808 :
question, since either I am think in the head or just not paying attention. If using the Anafi in the US, any patching needed for any advantages??
[2018-10-26 19:50:10]
quad808 :
or is the patching just for FCC mode?
[2018-10-26 20:20:06]
abdo054 :
Honestly thats a good question @quad808 :sweat_smile:
[2018-10-26 21:45:07]
ender :
patching tells controller and anafi that they are in the US. If you are there it does not make sense.
[2018-10-26 21:45:23]
ender :
I NEED to look deeper to maybe go beyond FCC TxPower…
[2018-10-26 22:08:58]
quad808 :
Thank you @ender thats what I thought, but just needed confirmation.
[2018-10-27 07:36:28]
kilrah :
oh, my chinese prop guards arrived
[2018-10-27 07:56:38]
ender :
got mine as well, probably never going to use it like the ones for the pro & air i still have but better have it :slightly_smiling_face:
[2018-10-27 07:56:55]
ender :
@kilrah: probably for your indoor jobs or if you fly close to people?
[2018-10-27 08:05:35]
kilrah :
same, have them just in case
[2018-10-27 08:05:53]
kilrah :
i've used the mavic ones twice for jobs, and would have been a pain not to have them
[2018-10-27 08:05:59]
kilrah :
never know what comes
[2018-10-27 08:06:55]
ender :
i cant recall where but in some countries you actually need prop guards for certain locations…
[2018-10-27 08:07:02]
ender :
Switzerland ? :wink:
[2018-10-27 08:31:37]
kilrah :
nope
[2018-10-27 15:22:09]
sotiris.tripolitsioti :
All lucky you in the US, 5G comes as standard :worried::worried::worried:
[2018-10-27 15:23:20]
sotiris.tripolitsioti :
While we at EU stuggle to achieve the same and not only with Anafi...
[2018-10-28 12:23:56]
shell :
I hardly ever bother with 5G
[2018-10-28 13:53:34]
d95gas :
@ender Having an issues with the Anafi and following your document to connect.
I power up both the Anafi and Controller (iPhone/Huawei) connected. On laptop (Windows 10) search for Anafi Wifi and enter passcode all connects fine.... all good to that point.
Quick scan shows controller on 192.168.42.55. Into "Minimal ADB", and by the time I have typed initial command, drone has disconnected and so has the laptop, and no Wifi network showing. That's all in around 2mins.
Where am I going wrong.
[2018-10-28 13:54:17]
d95gas :
Forgot to add, this is on the latest firmware for both drone and controller
[2018-10-28 15:06:51]
d95gas :
Connected Skycontroller to laptop via USB. put the correct RNDIS drivers in and established connection fine. Followed through all instructions and the feedback was that everything was going well. rebooted the controller ran the IW REG GET and its still showing as GB.
Patched both ways: Using your command in the text document, and via the win GUI
C:\Program Files (x86)\Minimal ADB and Fastboot>adb push mppd.fcc /usr/bin/mppd
mppd.fcc: 1 file pushed. 7.9 MB/s (158464 bytes in 0.019s)
[2018-10-29 13:19:50]
trulala69 :
Mine showed the local country code after patching as well until the Anafi had a valid GPS lock again, then the controller switched automagically to US ...
[2018-10-29 14:12:20]
d95gas :
Ah bugger, never thought of that as I was sat in the kitchen doing it. Will try again tonight as I recovered from backup yesterday. In the end I had to do it via USB RNDIS as everytime I connected laptop to the Anafi wifi, it dropped out after 2 mins
[2018-10-29 14:12:26]
d95gas :
But I found USB easier
[2018-10-29 16:11:15]
trulala69 :
Pano modes coming probably on the 26th!
<http://blog.parrot.com/2018/10/26/anafi-extended-stunning-photo-video-features/>
[2018-10-29 16:55:10]
trulala69 :
Ok, in one of the last lines it still says November ... but nevertheless ...
[2018-10-29 19:32:24]
kilrah :
we're the 29th...
[2018-10-29 19:32:35]
kilrah :
so obviously the 26th wouldn't be of this month but of november :smile:
[2018-10-29 19:54:59]
trulala69 :
True :joy: my mind was obviously not working or stuck in work...
[2018-10-30 19:37:06]
ender :
sorry guys, was busy, i hope @d95gas all is okay ? YES the CC is going to change to the US after the app is connected. The trick is that a message from the App “Detected County XY, please switch to it” is intercepted and bent to always switch to “US”. Before App sends this command nothing changes.
[2018-10-31 07:16:31]
d95gas :
@ender Thanks, will give it another go, as I reset it back to the backup version that was done as part of your instructions :slightly_smiling_face:
[2018-11-01 08:38:41]
aciid :
did anyone try to identify/ use programming pins on the controller
[2018-11-01 09:42:15]
trulala69 :
FYI (Interesting towards the end: Implemetation of precision hovering with the downwards camers) : <https://translate.google.com/translate?hl=de&sl=fr&tl=en&u=https%3A%2F%2Fwww.helicomicro.com%2F2018%2F10%2F31%2Fparrot-anafi-extended-les-questions-a-pascal-perrin-eric-simon%2F%3Ffbclid%3DIwAR17vUpn1Sdi8dDmlmQkBpli3VmGYj0bNTiTCYzl1YSOy3TfDBHy4fiAlCc&sandbox=1>
[2018-11-01 10:50:43]
ender :
JFYI, i conversed with the above threads author, “Fred”, he stated these panoramic modes will be available soon:
– vertical panorama
– horizontal panorama
– sphere (360)
– little planet
– tunnel
[2018-11-01 10:51:16]
ender :
sound good, i’d love 180° stereo Panorama as well but no one offers this right now so i still have to attach my VR180 to my Mavic :wink:
[2018-11-01 11:15:05]
mail451 :
Which VR180 do you have?
[2018-11-01 11:57:07]
ender :
afaik there is only one VR180 Cam from Lenovo, thats the one i have. Not to be confused with the goggles, i use the Oculus Go for Viewing…
[2018-11-04 21:57:04]
shell :
Really quiet here lately
[2018-11-05 07:19:26]
ender :
Well, i am satisfied with the current state of Anafi affairs and i wait for the next panoramic app update before i push the public FCC patch not to have the security hole fixed by anafi. The next update is hopefully something i could live for a while if they THEN fix the adb access :slightly_smiling_face:
[2018-11-05 07:19:33]
ender :
So: waiting for Panoramas :slightly_smiling_face:
[2018-11-05 15:08:32]
d95gas :
and waiting for Ender :slightly_smiling_face:
[2018-11-05 16:38:20]
ender :
why ?
[2018-11-05 16:38:26]
ender :
FCC Patch is up and running ?
[2018-11-05 18:57:18]
d95gas :
Ah but you indicated a new version after the update in Nov from Parrot...... So I either patch now or just wait till Parrot have given us the magic beans, then mix in your magic beans :grin: and given the current high winds, it could be a while before the Anafi comes out !!
[2018-11-06 12:30:47]
shell :
Reading of some oddities with latest firmware
[2018-11-06 12:31:15]
shell :
Poi (mavlink) is broke
[2018-11-06 12:32:08]
shell :
Also read about some wifi improvements ... Curious to see if my Nvidia k1 will now connect
[2018-11-06 12:32:35]
shell :
Poi is pretty important for anyone who does flight plan
[2018-11-06 12:36:50]
shell :
On a positive note my (new) Lenovo Tab4 10+ works fine so I have a nice big tab to test with once the SDK train starts rolling
[2018-11-06 12:45:04]
ender :
Cool, they said something like December for a working SDK, right ?
[2018-11-07 12:36:37]
shell :
I can neither confirm or deny if you get my gist :)
[2018-11-07 12:50:12]
ender :
yihaaaa
[2018-11-07 15:09:51]
mail451 :
Hmmmmmmmmmmm
[2018-11-08 01:48:48]
makingthisnameup :
god I wish this bird had better range or specifically wasn't so touche about noise
[2018-11-08 01:48:58]
makingthisnameup :
it's just sitting here, looking at me
[2018-11-12 18:56:01]
sotiris.tripolitsioti :
In cities no luck over 800 m. In ....deserts far better maybe 4 km
Let’s see the final patch from the hard working friends in this forum:slightly_smiling_face:
[2018-11-12 19:00:50]
d95gas :
Ender already has a patch out to force FCC mode, which should help in built up areas where you are getting a lot of noise. I believe others have reported good results.
[2018-11-13 07:48:23]
ender :
Hi, well, the patch is fine with current FW / App…
[2018-11-13 07:50:04]
ender :
It SEEMS the lastest App & FW updates also smoothed out the way that TXPower is regulated. I did not have time to fly much theses weeks but last weekend i went 3km straight away and never got down to yellow or red warning, the power jumped always up before it was critical unlike in earlier flights with older FW. Maybe i was lucky but MAYBE they changed the limits when to auto-increase TXPower… Fingers crossed :slightly_smiling_face:
[2018-11-13 07:51:27]
ender :
I for my part am very satisfied with the Anafis Performance now. I just wait for the Panorama function, and as far as i know that should be nostly if not all on the APp side… I mean its just a mocro of “turn / change angle / shoot”, --> Stitch. I actually dont need stitching in-App, post can do it much better anyways…
[2018-11-13 15:15:57]
makingthisnameup :
The updates certainly smoothed out the disconnects. It's at least usable now for hovering over my house. Just not a whole lot more though, but I'm mentality comparing it to the MP, which isn't particularly fair but still the decision I make when reaching for one of them.
[2018-11-13 15:21:17]
ender :
Sorry, thats BS, while the MP is superior without doubt Anafi is much better than Spark and rivals the MA.
[2018-11-13 15:31:00]
ender :
(In terms of range, in vid/pix Quality terms it outperforms them all)
[2018-11-13 16:57:04]
quad808 :
While the Anafi is "toy-like", don't make the mistake to think it is. Very capable drone that takes really good video, IMO. Very portable etc. Throwing from the hand is scary and great at the same time...hahahaha!
[2018-11-13 18:25:14]
makingthisnameup :
Wait no I agree with that
[2018-11-13 18:26:45]
ender :
The “scary” part ? :wink:
[2018-11-13 18:31:13]
makingthisnameup :
I love the anafi, I've said before it's superior to the MP in almost every way except range. It's compact handles elegantly superior to anything its same weight
[2018-11-13 18:32:28]
makingthisnameup :
I used it to get the smoke from the fires on vid
[2018-11-13 18:34:27]
quad808 :
ahhh...ok, just checking! :thumbsup_all:
[2018-11-14 13:02:29]
shell :
Some serious irony here
[2018-11-14 13:03:29]
shell :
Let's see who else picks up on it...
[2018-11-14 13:04:17]
ender :
uhhh i pass :slightly_smiling_face:
[2018-11-14 13:04:40]
ender :
Please tell the mental inferior :wink:
[2018-11-15 03:31:34]
makingthisnameup :
One might have to read more to get it
[2018-11-15 19:49:25]
sotiris.tripolitsioti :
Not trying to pick up anything :slightly_smiling_face:, I have both MA, M2Z and Spark and Anafi and agree 100% with @ender above
IMHO, obviously M2Z is a better overal package and it can only rivaled by Anafi camera under specific circumstances
Anafi comes close but primarily signal issues and secondary poor wind resistance are problematic sometimes
Air is very, very noisy and it just now became flyable with no issues, after almost a year after its initial release.
Spark is beautifully small and very capable, holding a category in its own
Just as M2Z is trying to displace Anafi as my drone I really like, Anafi is still there if video - photo is the target
But occusync 2 goes 5 km in the center of the city, with 1080 FPV, so ..... we shall see
Sotiris
[2018-11-16 13:42:40]
shell :
Re: irony
[2018-11-16 13:42:59]
shell :
We are in the dji slack channels
[2018-11-16 15:14:03]
ender :
nahhh this is Anfi sub(versive) channel :stuck_out_tongue:
[2018-11-16 19:24:21]
quad808 :
Good deals on Anafi from Parrot: <https://www.parrot.com/us/black-friday-promotions?utm_source=newsletter&utm_medium=email&utm_content=&utm_campaign=black_friday&xtor=ES-5-%5Bblack_friday%5D-%5B%5D-%5B%5D&utm_source=&utm_medium=&utm_content=&utm_campaign=&xtor=>
[2018-11-16 19:58:51]
mail451 :
Not bad.
[2018-11-18 13:41:15]
d95gas :
@ender - HELP :slightly_smiling_face: had another go with the Anafi changing to FCC. Followed your instructions to the letter, in fact all the commands were copied and pasted into ADB (Minimal ADB on Windows).
All commands completed successfully.
Rebooted controller and connected up to phone and anafi, waited until I got green lights to go. Powered off, back into ADB and check for US code, but no go. Output from IWCONFIG & IW REG GET:
root@mpp3:/ # iwconfig[Jpp3:/ #
wlan0 Qcom:802.11n ESSID:off/any
Mode:Managed Channel:0 Access Point: Not-Associated
Bit Rate:0 kb/s Tx-Power=0 dBm
RTS thr=1048576 B Fragment thr=8000 B
Encryption key:off
sit0 no wireless extensions.
dummy0 no wireless extensions.
lo no wireless extensions.
usb0 no wireless extensions.
7[r[999;999H[6nroot@mpp3:/ # iw reg get
country GB: DFS-ETSI
(2402 - 2472 @ 40), (N/A, 20), (N/A)
(5170 - 5250 @ 80), (N/A, 20), (N/A), NO-OUTDOOR
(5250 - 5330 @ 80), (N/A, 20), (0 ms), DFS
(5490 - 5710 @ 160), (N/A, 27), (0 ms), DFS
(5735 - 5835 @ 80), (N/A, 14), (N/A)
(5850 - 5870 @ 10), (N/A, 30), (N/A)
(5860 - 5880 @ 10), (N/A, 30), (N/A)
(5870 - 5890 @ 10), (N/A, 30), (N/A)
(5880 - 5900 @ 10), (N/A, 30), (N/A)
(5890 - 5910 @ 10), (N/A, 30), (N/A)
(5900 - 5920 @ 10), (N/A, 30), (N/A)
(5910 - 5930 @ 10), (N/A, 30), (N/A)
(57240 - 65880 @ 2160), (N/A, 40), (N/A), NO-OUTDOOR
Any advice? frustrating the hell out of me.
[2018-11-18 19:31:07]
kilrah :
how are you adb'ing, usb or wifi?
[2018-11-19 05:50:11]
d95gas :
@kilrah Using USB, dont have much success with WiFi at all (or didnt), so yes using USB Cable. Minimal ADB running under Windows 10 1809, and always running in Admin mode.
[2018-11-19 17:29:08]
d95gas :
Did NLD ever get around to doing the auto patcher for Anafi FCC ? I could of sworn I heard mention of it here
[2018-11-19 17:36:39]
quad808 :
not yet, as far as I know. Don't know what the status is for that...but I should...LOL
[2018-11-19 17:39:32]
hostile :
you can always bug @coldflake
[2018-11-19 17:39:35]
coldflake :
@coldflake has joined the channel
[2018-11-20 07:35:53]
ender :
@d95gas: sorry i was away for a few days... DID you fire up & connect the APp ? The patch starts working once the app sends stuff to the Anafi via Controller !
[2018-11-20 07:36:05]
ender :
Please do so if you did not and check iw reg get again
[2018-11-20 07:37:12]
trulala69 :
Hi ender, btw, has mppd changed with the last FW update?
[2018-11-20 07:38:29]
ender :
the latest = 1.20 ? YES it did and i updated the patch.
[2018-11-20 07:47:20]
trulala69 :
There was a bigfix release this week, 1.2.4 ...
[2018-11-20 07:47:25]
trulala69 :
bugfix
[2018-11-20 08:14:30]
ender :
i have to look at that, i heard its only anafi FW and NOT Mpp.
[2018-11-20 08:14:54]
ender :
tryin now...
[2018-11-20 08:18:21]
ender :
yep its drone-only. did the update just now, checking mpp region...
[2018-11-20 08:23:47]
trulala69 :
OMG, yes of course, mppd is for controller! I should think more before typing ... sorry ...
[2018-11-20 08:25:26]
trulala69 :
BTW MiraScreen Dongle works perfectly with the Cinemizer's ... Thanks again for the idea ...
[2018-11-20 08:37:57]
d95gas :
@ender Yes I fully connected to Anafi after the MPPD change, left it connected for around 10 mins and all was fine. Then connected back up to ADB and pulled the information I posted, which still showed GB.
[2018-11-20 08:40:31]
ender :
I just tried the full circle... Works fine (US).
[2018-11-20 08:40:41]
d95gas :
@hostile Yes could bug him....... but I guess they are working on the Christmas special of NLD :grinning: which is I guess more important .... Unless of course @coldflake wants to add it as a very special Christmas edition :+1: I Spend a great deal of time on the road for work, and only really get the chance to play with the Anafi & MP at weekends..... weather permitting
[2018-11-20 08:42:17]
ender :
I do get "DE" as long as i connect another device to the anafi via WiFi (like the PC i used for the adb command). so i can only check the really used Country code if using USB-ADB !!!!
[2018-11-20 08:45:26]
ender :
but i do see the 6 to 8 dB jump in my WiFI Scanner. I just did a short testflight and i am 100% i am on FCC, the range was commanding!
[2018-11-20 08:46:35]
ender :
I am also 90% sure they smoothened the TxPower ramping or start out with full power from the beginning as i had no problem at all going low & far with houses & trees in between :slightly_smiling_face: Actually now i am eager to drive to my real test site :slightly_smiling_face: But its stromy 6 cold ATM.
[2018-11-20 08:49:00]
d95gas :
Sounds good, yes weather in UK is also crap today, plenty of rain :disappointed: which makes driving, very depressing. Working this weekend so unable to work with Anafi. may have an opportunity on Friday and will try the process again. Might even just test by flying and see what I get.
[2018-11-20 09:19:26]
trulala69 :
Thanks ender for testing!
[2018-11-20 09:19:49]
trulala69 :
Can't wait for the panos to arrive, hopefully they work out of the box ...
[2018-11-20 10:25:29]
mail451 :
How's the Anafi modding scene? I still have code left from anafinessed and freeflight-modder lol
[2018-11-20 10:25:38]
mail451 :
Looking for some BF deals, Anafi is discounted.
[2018-11-23 14:35:10]
ender :
By the way: here are the latest Anafi & MPP3 FW files:
[2018-11-23 14:35:11]
ender :
<https://we.tl/t-pJVX5mb72R>
[2018-11-26 12:32:44]
aciid :
aircraft patching instructions <https://bpaste.net/show/9118784e777e>
[2018-11-26 12:33:03]
aciid :
hashing instructions for the aircraft <https://bpaste.net/show/a0fc124e583a> <- this has not been verified to work as it's unknown how the upgrade proces verifies the used public key which can be replaced with your own
[2018-11-26 14:06:35]
ender :
woah, hot stuff...
[2018-11-27 14:16:57]
jonas :
Hey! I calculated the signed_data of the signature from the signature-file in the Anafi-Firmware. It seems like to be a SHA256 Hash of 3 Files, but I could not figure out how exactly they are hashed together. Maybe one of you have an idea?
[2018-11-27 20:10:29]
aciid :
@jonas there is also a way to "enable" developer mode. /usr/lib/libdebugauth.so
[2018-11-27 20:13:03]
aciid :
All files that mention parrots internal way for authenticating
grep d2i
```
Searching 836 files for "d2i"
C:\bin\anafi\ext\lib\firmware\qwlan30.bin:
<binary>
C:\bin\anafi\ext\lib\firmware\utf30.bin:
<binary>
C:\bin\anafi\ext\usr\bin\openssl:
<binary>
C:\bin\anafi\ext\usr\lib\libcrypto.so.1.0.0:
<binary>
C:\bin\anafi\ext\usr\lib\libssl.so.1.0.0:
<binary>
C:\bin\anafi\ext\usr\sbin\wpa_supplicant:
<binary>
C:\bin\anafi\ext\usr\share\www\statics\tv_effect.gif:
<binary>
311 matches across 7 files
```
[2018-11-28 06:48:42]
mainframe :
@aciid did you manage to enable dev mode on Anafi?
[2018-11-28 07:07:21]
aciid :
@andres nope
[2018-11-28 07:07:57]
mainframe :
half way there? :stuck_out_tongue:
[2018-11-28 18:17:40]
ender :
well we knew that there are ways to enable debug mode (possibly file on sdcard encrypted also using Anafis SN). Can you USE that info to make it happen ?
[2018-11-28 18:40:01]
aciid :
im physically unable to get into this at the moment
[2018-11-28 18:41:44]
ender :
no anafi or are you too busy ? :wink:
[2018-11-28 18:42:11]
aciid :
need to see the doc tommorrow and "quickly study" to a ham-license exam later that evening :smile:
[2018-11-28 18:43:25]
ender :
good luck to both!
[2018-11-28 18:44:27]
aciid :
but after that we can take a fresh look at the given vectors again, most promising directions still are.
- try to emulate update-checker on similiar hardware ( armv7? ) or use emulator.
- ^ this
- there probably is no private key since there is a hash for correct public key
- try to crash update with a malicious firmware and reassign pointers and make debuggable = true
- ^ no toddler shit
[2018-11-28 18:46:11]
aciid :
I think my anafi will rip eventually from me opening and messing with it, but luckily it has been worth the experience :smile:
[2018-11-28 18:46:27]
aciid :
need to carve new carbon for it if it goes south
[2018-11-30 15:04:46]
mainframe :
fingers crossed for you @aciid … free beers on me when having a breakthrough on enabling dev access :stuck_out_tongue:
[2018-11-30 15:05:02]
aciid :
not going to be able to do anything alone
[2018-11-30 15:05:04]
aciid :
its a mess
[2018-11-30 15:05:06]
aciid :
whole platform
[2018-11-30 15:19:03]
mainframe :
I can help - but only from the adb access level… dont know much about low level stuff - like bootloaders and assembler…
[2018-12-04 08:31:58]
ender :
@shell: Uhhhhhh [Ar.Pro](http://Ar.Pro) 4 Announcement, BETA Tester, BETA Tester :wink:
[2018-12-04 11:25:18]
d95gas :
@ender how do we get on the bandwagon to assist? (your link not working for me)
[2018-12-04 11:26:34]
ender :
uh wich link ?!
[2018-12-04 11:26:42]
ender :
FCC patch ?!
[2018-12-04 11:32:47]
d95gas :
No no :slightly_smiling_face: the link in [Ar.Pro](http://Ar.Pro) above
[2018-12-04 12:02:58]
ender :
ah !
[2018-12-04 12:04:53]
ender :
That was just falsely detected as link, i was talking of Synmans Android App. In his google grouphe posted a screenshot without further comments. So i assume tht he goes into BETA testing soon. I want to participate :slightly_smiling_face:
[2018-12-04 12:10:37]
d95gas :
Ah right, yes would be definitely good to get in on the start of the application......
[2018-12-04 12:26:34]
ender :
Lets hope for the best :slightly_smiling_face:
[2018-12-04 13:46:09]
aciid :
oh parrot is going forward again
[2018-12-04 13:46:15]
aciid :
better to start thinking about ditching this bird then
[2018-12-04 13:46:16]
aciid :
fuck this
[2018-12-04 16:20:39]
d95gas :
@ender Hoping their SDK will allow the developer some flexibility in height limits. More than happy with the current setting, but nice to have the choice for the odd occassion
[2018-12-05 10:31:30]
ender :
@aciid: what are you talking of ? Anafi 2 ? Nevertheless i never understood why something working & good should be trash just because something better is out :slightly_smiling_face:
[2018-12-05 10:31:59]
aciid :
im just thinking of going back to selfbuilt shit :confused:
[2018-12-05 10:32:05]
ender :
@d95gas: does editing the waypoint list not work anymore ? (rooted android) ?
[2018-12-05 10:32:21]
aciid :
something like ardupilot i guess
[2018-12-05 10:33:12]
ender :
?
[2018-12-05 10:33:58]
ender :
ahhh well, got to be big birds then, no way to build good small birds DIY, trust me, got XX prototypes here. Flightime lije 6 minutes or so :slightly_smiling_face:
[2018-12-05 10:34:17]
ender :
My DIY micro Hexa really rulez... for 4 minutes :stuck_out_tongue:
[2018-12-05 10:36:07]
aciid :
have you tried bigger blades and lower rpm :3
[2018-12-05 10:37:02]
mail451 :
can a self built drone hover and stay stable like a dji spark/anafi?
[2018-12-05 10:37:27]
mail451 :
most self built copters are for racing and the camera is fixed in one location
[2018-12-05 10:37:39]
aciid :
depends on sensors and purpose built
[2018-12-05 10:38:15]
aciid :
many use lidars already, but I have not encountered positional cameras on racing drones lol
[2018-12-05 10:38:25]
aciid :
but IR cameras have been around for a long time
[2018-12-05 10:39:15]
aciid :
amaeur with a downward facing camera <https://www.youtube.com/watch?v=IICqtjW25MQ>
[2018-12-05 10:39:22]
aciid :
there are many people who are already doing it
[2018-12-05 10:40:00]
aciid :
you just need a large resolution cmos camera
[2018-12-05 10:40:09]
aciid :
or two if you are fancy like dji
[2018-12-05 10:41:00]
aciid :
then you add that to the mpu6050 pid loop
[2018-12-05 10:42:49]
aciid :
in anycase more sensors is better for stability
[2018-12-05 10:43:18]
aciid :
mavic made me dream about things, but betaflight made me learn
[2018-12-05 10:43:24]
mail451 :
haha
[2018-12-05 10:44:26]
mail451 :
separate cameras like GoPro are better than what's on the spark for instance. Even Hero4.
[2018-12-05 10:45:01]
aciid :
im not into photo/videography i just wanted to tinker
[2018-12-05 10:45:17]
mail451 :
So a stable drone + hero4 will be a good drone. just need to see what components i need. control the camera is easy with a esp8266 and the wifi api.
[2018-12-05 10:45:44]
mail451 :
my main focus on drones is photography, i don't really care about speed.
[2018-12-05 10:46:14]
aciid :
if you are ready to put esp8266 just use a commercial and ready made drone rx tx
[2018-12-05 10:46:46]
mail451 :
yeah Im thinking of that, the xiaomi fimi a3 has a uart port triggered by the remote
[2018-12-05 10:47:01]
mail451 :
so it's easy to put a secondary 4K camera there
[2018-12-05 10:47:06]
aciid :
<https://www.frsky-rc.com/product/r9m/>
[2018-12-05 10:47:10]
aciid :
+10KM range
[2018-12-05 10:47:14]
aciid :
totally illegal, but best in class
[2018-12-05 10:47:51]
mail451 :
wow thanks
[2018-12-05 11:02:24]
ender :
obviously
[2018-12-05 11:02:57]
ender :
DIY drones had optical flow before DJI or Parrot :slightly_smiling_face:
[2018-12-05 11:03:09]
ender :
Ardupilot rulez...
[2018-12-05 11:03:13]
ender :
And mavlink...
[2018-12-05 11:03:37]
ender :
BUT you cannot build small drones with okay flighttime, cant beat the integration of RTF drones.
[2018-12-05 11:17:53]
ender :
(with similar features of course)
[2018-12-05 11:18:46]
trulala69 :
I've also built some DIY's with INAV and ArduCopter. Last experiment was a small endurance copter with a flight time of nearly 60 minutes using a DIY LiON battery. I love building, but I stopped it for 2 reaseons. First the lack of possibilities controlling the camera (in my case a Sony RX1) = Integration and second, travelling is easier with a DJI or Parrot Drone because a DIY always causes problems at security checks ...
[2018-12-05 11:19:06]
trulala69 :
But the way, any rumors about the promised FW upgrade?
[2018-12-05 12:57:33]
ender :
nope, no news about fw / app upgrade, was scheduled for end November so someone is sweating :slightly_smiling_face:
[2018-12-05 12:58:46]
ender :
T69: 60 minutes is nice but on a small craft with complex features unthinkable.
[2018-12-05 18:02:59]
d95gas :
@ender Yes the waypoint still seems to be working, people just used it on the last firmware and application: <https://parrotpilots.com/threads/negative-altitude-pois-successful-workaround.653/#post-5463>
[2018-12-05 18:13:12]
ender :
so all is good :slightly_smiling_face:
[2018-12-05 18:35:37]
d95gas :
Yea .... when there's a will there's a way ...... and if that dont work, just hack the crap out of it :grinning:
[2018-12-06 15:54:46]
kilrah :
new firmware/app with pano
[2018-12-06 16:02:51]
d95gas :
Ooohh nice
[2018-12-06 16:20:34]
trulala69 :
Really! Oh yes, coool!
[2018-12-06 16:25:09]
d95gas :
In this major software update, we have implemented several improvements and new features:
- Panorama mode has five creative options: Vertical, Horizontal, Sphere, Little Planet and Tunnel.
- The Precise Home feature allows ANAFI to come back to its precise takeoff position.
- Two new color palettes “Styles” are available; INTENSE provides vivid colors and bright contrasts, whereas PASTEL has a more subtle nuance.
- Two new professional photographic tools; the luminance histogram which represents in real time the brightness distribution or "luminosity" within the image including the highlights, mid-tones and shadows. The ZEBRA pattern displays a stripy black and white motif on overexposed areas directly on your video live streaming.
- A new Gallery design and even more to discover!
[2018-12-06 16:44:50]
trulala69 :
@ender I'm curious, if they've changed mppd somehow or if you can do your magic again ...
[2018-12-06 19:17:22]
ender :
yep, just downloaded controller FW, need to check if it closes the loophole before flashing :slightly_smiling_face:
[2018-12-06 19:39:51]
ender :
uh oh boxinit.rc looks fishy
[2018-12-06 19:40:20]
ender :
i probably messed up but right now it looks as if they switch off (like: dont switch on) ADB…
[2018-12-06 19:49:00]
jonas :
That's bad news...
[2018-12-06 19:49:43]
ender :
sec, i mixed up files i compared…
[2018-12-06 19:49:56]
ender :
wanted to warn early but seems like BS
[2018-12-06 19:49:58]
ender :
sec
[2018-12-06 19:50:21]
ender :
Pheeewww, OKAY mpp3 still offers ADB.
[2018-12-06 19:50:51]
ender :
now updating Anafi to see if it still is able to be fooled by FakeGPS or my mppd patch
[2018-12-06 19:58:23]
ender :
YEAH, Anafi still falls for the magic of FakeGPS which means my mppd hack should be reworkable :slightly_smiling_face: Yihaaaaaaaaaa :wink:
[2018-12-06 20:12:03]
ender :
app now FINALLY shows freq scan in ce countries…
[2018-12-06 20:19:12]
ender :
ahhh the anafi 1.3.0 fw got deleted, can anyone updating via android save it ?, DAMN §$%&#*
[2018-12-06 21:18:32]
ender :
Panorama only working on iOS, Android needs another App update
[2018-12-06 22:06:31]
ender :
hmm, instead of /update/log the MPP3 now logs to /update/log.bin
The format is not cleartext anymore. anyone has an idea how to decode ?
[2018-12-06 22:08:25]
ender :
[2018-12-07 00:16:57]
mainframe :
in fw update release notes there is: Certificates and ANAFI SE support
what that could mean?
[2018-12-07 03:25:59]
shell :
Availability of the 5.8GHz Wi-Fi band in Europe caught my eye
[2018-12-07 09:14:39]
ender :
yes, 5Ghz looks even better.
[2018-12-07 09:15:13]
ender :
AND Panoramas on Androidare said to work id you are IN FLIGHT (which makes kind of sense). Will try as soon as it stops pouring :slightly_smiling_face:
[2018-12-07 09:18:27]
ender :
CONFIRMED, as soon as you are airborne Panorama Option is visible ! I tried in the living room :slightly_smiling_face:
[2018-12-07 09:29:28]
d95gas :
@ender thanks for confirming PANO in Android. People have been saying it works after take-off but nobody had confirmed. To windy here today to test. Bloody odd that IOS has it from start of application, I did email Parrot and will be interested to hear what they say.
[2018-12-07 09:30:13]
ender :
Well, it does not matter as long as it works :slightly_smiling_face:
[2018-12-07 09:30:43]
ender :
Yesterday i did a first try to FCC patch that failed although everything looked harmlessly similar to 1.20, hmmmm
[2018-12-07 09:33:38]
ender :
Ususally you have to break connection when the fw is uploading to the Anafi (so its downloaded already and uploading).
[2018-12-07 09:34:14]
ender :
or you can simply switch task from FF6 to ES File Explorer already sitting at the right location, do a refresh and a quick copy & paste.
[2018-12-07 09:35:06]
ender :
I forgot (excited) and treated it the same way as the controller but it will be deleted after the upgrade as you stated.
[2018-12-07 09:49:35]
kilrah :
i did that before but didn't see a thing... like if the window to do it is only a second or 2...
[2018-12-07 09:50:47]
kilrah :
guess i need to try to unplug the battery
[2018-12-07 09:54:23]
ender :
possibly. I have to confess that i PERSONALLY did this with 1.10 the last time. since then i got the Fw from others. So maybe they changed the timing.
[2018-12-07 09:55:05]
ender :
I have no idea if it would be easier on a jailbroken iOS device...
[2018-12-07 10:13:26]
kilrah :
where was it?
[2018-12-07 10:13:53]
kilrah :
i have the "firmwares" directory with "sky_controller_3" inside and that has the controller versions
[2018-12-07 10:13:58]
kilrah :
but i never saw another folder in there
[2018-12-07 10:15:02]
ender :
in /data/data/com.parrot.freeflight6/files/firmware/anafi
[2018-12-07 10:15:15]
kilrah :
yeah, i never saw an anafi folder
[2018-12-07 10:15:29]
ender :
(last 2 folders ar a guess as i cleaned up in between, no more folders on my phone)
[2018-12-07 10:15:43]
ender :
i had an existing anafi fiolder with 1.20
[2018-12-07 10:16:09]
kilrah :
never had one created
[2018-12-07 10:19:42]
kilrah :
nah, really nothing, even while *transferring to drone"
[2018-12-07 10:20:00]
kilrah :
ooh i found it
[2018-12-07 10:20:08]
kilrah :
it's in the obb!
[2018-12-07 10:20:09]
ender :
yihaaa
[2018-12-07 10:20:15]
ender :
where ?
[2018-12-07 10:20:24]
ender :
oh damn
[2018-12-07 10:20:27]
ender :
why ?
[2018-12-07 10:20:31]
kilrah :
so it never actually needs to download it, it'^s part of the app additional data coming from the play store
[2018-12-07 10:20:33]
ender :
i probably have it as well then
[2018-12-07 10:20:39]
kilrah :
don't even need root
[2018-12-07 10:20:46]
ender :
lol
[2018-12-07 10:21:07]
kilrah :
phone storage/android/obb/freeflight6, the file in there is a zip
[2018-12-07 10:21:23]
ender :
the obb ?
[2018-12-07 10:22:45]
ender :
so there are 2 methods: FW that is included in app update AND download versions thats why there are 2 locations / modes.
[2018-12-07 10:23:16]
kilrah :
do you have anafi 1.2.1?
[2018-12-07 10:23:34]
ender :
uhhhh
[2018-12-07 10:23:37]
ender :
sec
[2018-12-07 10:24:00]
ender :
please confirm, is the .obb a zip ? does not seem so here...
[2018-12-07 10:24:50]
kilrah :
yup
[2018-12-07 10:24:58]
kilrah :
opens with 7-zip
[2018-12-07 10:25:15]
ender :
i would swear i got the anafi 1.2.1 but cannot find it atm so better save it if you still got it :slightly_smiling_face: Its chaotic since i moved a lot of stuff to NAS.
[2018-12-07 10:25:21]
ender :
Need time to sort stuff
[2018-12-07 10:25:26]
kilrah :
i don't, that's why i asked
[2018-12-07 10:25:40]
kilrah :
only 1.2.4 and 1.3.0
[2018-12-07 10:26:01]
kilrah :
[2018-12-07 10:27:41]
ender :
if our life would depend on it i am sure aciid or jonasbsv have it somewhere. but please store the 124 & 130 as well :slightly_smiling_face:
[2018-12-07 10:27:52]
ender :
If you wetransfer it i would put it in the freezer as well
[2018-12-07 10:28:37]
ender :
okay, your zip seems to work, have to try on pc not with es file explorer built-in zip
[2018-12-07 10:28:58]
ender :
i have anafi 1.0.0 and 1.0.1
[2018-12-07 10:29:04]
ender :
(for completion)
[2018-12-07 10:29:20]
kilrah :
have those
[2018-12-07 10:29:30]
ender :
ok
[2018-12-07 10:30:05]
ender :
mpp3 needed, i have a lot (all ??)
[2018-12-07 10:30:14]
kilrah :
there, updated using the file from the webserver, worked :slightly_smiling_face:
[2018-12-07 10:30:28]
ender :
?
[2018-12-07 10:32:10]
ender :
7zip could open the obb/zip, YEAH
[2018-12-07 10:35:28]
kilrah :
instead of updating from the app i connected to the anafi wifi, went on its webserver page, and updated from there by uploading the file
[2018-12-07 10:35:33]
kilrah :
<https://www.dropbox.com/sh/gw9mpp6ppfcbrtd/AADYnx90uZidN3Zh9MvI36bla?dl=0>
[2018-12-07 10:35:36]
kilrah :
this is what i have
[2018-12-07 10:36:45]
mail451 :
I have anafi_update_1.1.0.tgz and anafi_update_1.0.1.tgz
[2018-12-07 10:37:06]
kilrah :
<https://www.dropbox.com/sh/gw9mpp6ppfcbrtd/AADYnx90uZidN3Zh9MvI36bla?dl=0>
[2018-12-07 10:37:08]
kilrah :
i have those
[2018-12-07 10:37:56]
mail451 :
nice
[2018-12-07 12:15:46]
kilrah :
just added anafi 1.1.0 and 1.2.1 to the above
[2018-12-07 12:21:10]
kilrah :
can't do much with it it seems though
[2018-12-07 14:00:12]
ender :
well one can extract them, only grief is that we can not mod & flash them (anafi). On mpp3 its easier but on the other hand not needed as ADB is still open with root access...
[2018-12-07 15:05:14]
kilrah :
can't even jsut downgrade
[2018-12-07 15:27:10]
ender :
I cannot remember if aciid tried that... @aciid, did you or do you see the possibility to do so ?
[2018-12-07 21:33:55]
jonas :
Hey, I found a XSS vulnerability on the Anafi-webserver. I don’t know if this is useful for anyone, because XSS is always client side, but maybe someone has an idea how to use it.
[2018-12-07 21:34:04]
jonas :
[2018-12-08 17:38:09]
shell :
if you have write access to the mpp via adb you can likely trigger a fw downgrade
[2018-12-08 20:52:38]
ender :
downgrade of Anafi, right ?
[2018-12-08 21:14:53]
shell :
no, just the mpp unfortunately
[2018-12-08 21:16:10]
ender :
yes that's something that aciid already tried if i recall correctly, Anafi is our black box :slightly_smiling_face:
[2018-12-08 21:18:25]
ender :
Now THAT sounds promising :wink:
[2018-12-08 21:19:17]
shell :
sorry
[2018-12-08 21:25:24]
shell :
the last we talked about this we summarized that it looks like Parrot has changed their approach to allowing folks direct access to the drones.
[2018-12-08 21:32:49]
shell :
again, sorry.
[2018-12-08 21:42:47]
ender :
:wink:
[2018-12-09 23:57:47]
jonas :
Did someone tried to path traversal Busybox FTPD on the Anafi like it was done on the DJI Mavic : <https://github.com/MAVProxyUser/P0VsRedHerring> ? On the Anafi Busybox FTPD is running at 192.168.42.1 on port 61.
[2018-12-10 07:30:09]
ender :
nope, not that i know!
[2018-12-10 12:20:07]
shell :
Port 61 is likely boxed in to the flight plan directory
[2018-12-10 12:20:57]
shell :
So unless you can traverse behind the context root all you're going to see are flight plans
[2018-12-10 12:21:10]
shell :
Reading article
[2018-12-10 12:22:42]
shell :
"BusyBox FTPD is running on all interfaces, but unlike Phantom 3, in Mavic it's restricted to '/ftp' directory."
"Luckily, there are underground 0day exploits for FTPD for path traversal."
"I can confirm that you can traverse out of the '/
[2018-12-10 12:23:34]
shell :
So it is definitely possible but we are probably still looking at a ro fs
[2018-12-10 12:23:59]
shell :
fs went ro by default with the bebop
[2018-12-10 12:29:48]
jonas :
Yes we don't know what happens when we traverse out of '/ , but maybe it is not ro
[2018-12-10 12:49:22]
aciid :
buy the gear and shit the nand in and out
[2018-12-10 16:07:33]
ender :
as you can unpack and look at the Anafi files you could find out which ftpd binary exactly it is and if it is vulnerable, right ?
[2018-12-16 12:56:03]
trulala69 :
Very quiet here ...
[2018-12-16 16:02:14]
ender :
yep sorry, a lot of X-Mas stuff happening :slightly_smiling_face:
[2018-12-16 17:31:52]
trulala69 :
Same here ... I was able to hide behind my 3D Printer for a while, but now the government found me :rolling_on_the_floor_laughing: again ...
[2018-12-26 12:41:58]
trulala69 :
Merry XMas everyone ... I was experimenting with mppd of V120 and the current FW by just exchanging it with the last patched version. Funny enough I don't get ADB over USB, but Wifi ... it turned out the controller does connect to the Anafi, but it is lacking the live stream ... after reverting to the original mppd I got the live stream back ...
[2019-01-07 22:01:34]
aciid :
I've found something, need to verify. this may justg brick my Anafi for good or unleash it
[2019-01-07 22:33:42]
quad808 :
uh oh...we don't want no stinkin' bricks around here
[2019-01-07 22:35:16]
aciid :
tried the old ftp method and it started creating funny files on this french patonque too
[2019-01-07 22:35:21]
aciid :
I just need to look in further....
[2019-01-07 22:44:31]
aciid :
I was trying to look for does traversal work here
[2019-01-07 23:09:35]
mainframe :
fingers crossed…
[2019-01-07 23:14:46]
quad808 :
The sphere panorama option on the Anafi is outstanding! <https://kuula.co/post/7Yvt8>
[2019-01-07 23:21:29]
aciid :
@shell do you have an idea if arsdk commands can create files?
[2019-01-08 14:35:28]
softice :
@kilrah for your dropbox collection: <https://firmware.parrot.com/Drones/0914/1.3.2/ALL/anafi_update.tar.gz>
[2019-01-08 16:13:05]
kilrah :
cool thx
[2019-01-08 16:13:11]
kilrah :
ddin't see there was a new update again
[2019-01-08 16:13:33]
aciid :
I hate this device so much ;_;;
[2019-01-08 16:32:30]
mail451 :
Why
[2019-01-08 16:36:48]
aciid :
been so close to rooting it, but so far
[2019-01-08 17:32:12]
aciid :
does anyone have any fresh ideas?
[2019-01-08 17:32:39]
aciid :
the pins on the sd-card need a logic level converter but I geuss there has not been anyone working with that yet+
[2019-01-08 17:32:49]
aciid :
there are serial pins there
[2019-01-08 17:54:42]
mail451 :
If the firmware can be flashed from the SD card
[2019-01-08 17:55:09]
mail451 :
then maybe the romfs could me modified (add a script to /etc/init.d to sh autoexec.sh)
[2019-01-08 17:55:14]
mail451 :
Other than that out of ideas.
[2019-01-08 18:03:50]
kilrah :
firmware's signed, so can't modify without first getting access to fool the check...
[2019-01-08 18:06:29]
aciid :
If I recall correctly autoexec,sh was tried on one aoccasion
[2019-01-08 18:06:34]
aciid :
it didn't execute
[2019-01-08 18:06:46]
aciid :
I'm thinking of trying to attack debug auth
[2019-01-08 18:07:01]
aciid :
it scans for certificate present on the sd-card and tries to load it
[2019-01-08 18:07:20]
aciid :
<https://bpaste.net/show/7ccaaab500d2>
[2019-01-08 18:07:33]
aciid :
but I have no iudea how to name the certificate so it even loads
[2019-01-08 18:38:20]
aciid :
HOLY FUCKING SHIT
[2019-01-08 18:38:24]
aciid :
[2019-01-08 18:38:31]
aciid :
parrot can go straight to the trash
[2019-01-08 20:14:52]
mainframe :
parrot dev forum?
[2019-01-08 20:31:04]
aciid :
yers
[2019-01-08 20:31:22]
aciid :
<https://forum.developer.parrot.com/t/applying-for-anafi-developer-certificate-we-want-root-adb-shell/7832>
[2019-01-08 20:31:26]
aciid :
tried to bump this
[2019-01-08 22:05:51]
kilrah :
did you actually write something or just post "bump"? Most forums filter that
[2019-01-08 22:14:28]
aciid :
I wrote a new reply
[2019-01-08 22:14:33]
aciid :
with additional information
[2019-01-08 22:14:40]
aciid :
probably went to review
[2019-01-08 22:14:53]
aciid :
I made a support ticket again to Parrot about the whole ordeal
[2019-01-09 06:48:03]
softice :
they deleted my reply to a post from the dev forum last week!! got so much time to censor their "forum", but nobody to write release notes for their firmware!!
[2019-01-09 06:48:52]
softice :
(anafi has at least something close to a change log, but Disco and Bebop 2 - nothing for the last few releases!)
[2019-01-09 10:09:23]
softice :
there was no approval process last week - probably they only introduced it after my post :smile: soooorry haha
[2019-01-10 18:54:19]
aciid :
This is Reem from Parrot support team and I am happy to be helping with your case # 1273932, concerning your Parrot Anafi.
Would you please confirm from where you get this error and please sent a screenshot from it.
It is always our aim at Parrot to provide you, our customer, with top quality service to the best of our ability.
[2019-01-10 18:54:24]
aciid :
GEZUS FUCKIN CHRIST
[2019-01-10 18:54:29]
aciid :
into the trash it goes
[2019-01-14 14:35:37]
softice :
anyone tried attaching a USB keyboard to the Anafi? As the USB controller can act in host mode (analogue to OTG in the USB 2.0 world), it might work - given that the USB HID drivers are built into the kernel or the modules loaded. Busybox should not ask for user/password on a tty console. A simple Return - and then try to start telnetd or the adb daemon blindly, might work - if we are lucky. :slightly_smiling_face:
[2019-01-14 14:36:42]
softice :
what about the built-in USB Ethernet capabilities in SC3? Does the Anafi have the same? Anyone tried? nmap results?
[2019-01-14 14:45:26]
mainframe :
I think how to properly launch adb is seen from unpacked firmware - so that should not be so “blind” action :slightly_smiling_face:
[2019-01-14 14:47:44]
softice :
clear. by blind, I meant that you can't see what you enter. By all means, I didn't mean a manual fuzzing attack :smile:
[2019-01-14 14:50:17]
mainframe :
hehehe…that would be fun :stuck_out_tongue:
[2019-01-14 14:51:19]
softice :
:ghost:
[2019-01-14 18:24:39]
jonas :
Yes the anafi has also USB ethernet. There is a usb.mode property, which is set to mass-storage by default. But "rndis" is also possible, which provides a usb ethernet connection.
[2019-01-14 18:39:54]
aciid :
@softice usb-c dongles were the first thing we actually tried here. what we need is someone with bunch of dongles and UART pins for serial connected
[2019-01-14 18:40:04]
aciid :
there are 5 pins on the SD-card pcb
[2019-01-14 18:40:13]
aciid :
those transmit debug from the linux
[2019-01-14 18:40:25]
aciid :
then you could see what could work and what doesnt
[2019-01-14 18:40:31]
aciid :
back then we didn't know about the serial
[2019-01-15 01:46:53]
softice :
I can't help much with that, don't own the Anafi yet. I plan to buy the hardware once we found a way to get in. But I can try to help with the software part of it. Will try to play around with the extracted firmware. Potentially run it (or at least parts of it) on different hardware to try some stuff.
[2019-01-15 18:08:02]
jonas :
I found this forum entry about an internal micro SD card : <https://parrotpilots.com/threads/anafi-disassembly.363/> .Does someone know more about that ?
[2019-01-17 18:26:49]
green.richard :
That was my post along with the video link. The internal SD card is purely a supposition based on what could be seen in the video. I do not intend taking mine apart to find out!
[2019-01-17 18:33:15]
green.richard :
Somebody on the ParrotPilots forum says that they have decompiled the FF6 apk and altered a flag that sets the power to either CE or FCC mode. <https://parrotpilots.com/threads/fake-gps-tutorial.646/page-4#post-9254> . Has anybody else found this?
[2019-01-17 18:42:58]
aciid :
we've tried out many of those methods, but there are certain flags it uses too. so it won't stick
[2019-01-17 18:43:06]
aciid :
it saves where it has been started the first time
[2019-01-17 18:43:13]
aciid :
from factory reset
[2019-01-17 18:43:25]
aciid :
and it wont "believe" the phone telling it's either CE / FCC
[2019-01-17 19:50:58]
green.richard :
Thanks for the info.
[2019-01-17 22:13:36]
mail451 :
Money talks, BS walks. Tell that guy to post the diff.
[2019-01-18 16:27:00]
jonas :
Does anyone know what service is running on the open tcp port 9898?
[2019-01-19 13:19:29]
softice :
9988?
[2019-01-19 16:12:22]
jonas :
no 9898 is open on my Anafi. Check with nmap
[2019-01-20 00:49:57]
softice :
no, then I'm not sure. 9988 is Bebop2/Disco. I don't have an Anafi (yet)
[2019-02-01 16:46:52]
mainframe :
all quiet in the western front? :slightly_smiling_face:
[2019-02-01 17:50:36]
mail451 :
Very.
[2019-02-01 18:02:58]
quad808 :
Quiet.
[2019-02-01 18:46:21]
d95gas :
Hey Quad808 did NLD get anywhere with the FCC mod for Anafi, I know some time back there was talk of trying to incorporate it into NLD?
[2019-02-01 19:07:31]
mainframe :
Im having an idea to test also one wifi boosting concept. Namely we already have RPi based datalink device for 4G links working with Disco/Bebop2 drones - and now Im also experimenting tunneling SkyController2/3 also over boosted wifi (separate wifi gear - not SC2/3). I have concept working on the ground - but I havent yet done any range tests - which would say how useful it would be in reality. Im hoping to get more range - but without Anafi side being boosted - Im not sure how much the improvement will be (if any). What do you guys think about the idea? It would allow unmodified SC3/Anafi to have boosted/more sensitive wifi link (on the ground that is).
[2019-02-01 19:26:05]
mainframe :
SC3 -> RPi -> boosted wifi link -> Anafi
[2019-02-02 00:51:42]
softice :
frame, I was thinking of doing the 4G mod without accessing Anafi: SC3 (modified) --wifi--> tethered phone --4G--> E3372h+RPi ZeroW --wifi--> Anafi.
the only change required is on SC3 side to connect to an alien hotspot, which should be easy as the mpp3 firmware looks similar to mpp2 (Skycontroller 2P).
Hope the Anafi can take the weight of the RPi Zero and the Huawei modem. The power provided by USB-C from the battery (while in host mode) should be enough for both devices
[2019-02-02 00:55:14]
softice :
@aciid did someone actually try/manage to access the serial console via the serial pins like you mentioned before? e.g. using a CP2102?
[2019-02-02 12:16:57]
aciid :
@softice I've read the pins with a Saleae debugger. but none of my cheap uart-converters detected it, i have some chinese usb shite
[2019-02-02 12:17:03]
aciid :
I think it needs a voltage step-up
[2019-02-02 12:21:12]
mainframe :
@softice - this could work in theory - worth to try. RPi zero does not weight too much in addition.
[2019-02-02 12:22:47]
aciid :
I've been thinking of selling my anafi, I just don't have interest & time for it anymore
[2019-02-02 12:23:02]
mainframe :
still we dont know how much extra weight anafi tolerates. I have only tried to add tracker weighting 50g - and it already seemed to affect some hovering stability (althou lifted ok).
[2019-02-02 12:24:19]
mainframe :
considering that anafis MTOW is below 400g normally - I dont think it would tolerate >100g extra. max 20% of normal MTOW perhaps.
[2019-02-02 12:26:39]
mainframe :
> mpp3 firmware looks similar to mpp2
yes it does look very similar
[2019-02-02 12:28:56]
mainframe :
unless we extend anafi-s flight time - 4g link would be a bit capped - as max flight range is short. Just short-range NLOS.
[2019-02-02 14:55:57]
shell :
Quiet on all fronts
[2019-02-02 15:10:33]
d95gas :
too quiet :disappointed: thought we might have a bit more on FCC hack by now...... Damn weather in UK doesn't help either, so no flying!!
[2019-02-02 15:14:25]
mainframe :
whats the latest mppd patch version?
[2019-02-02 15:26:36]
mainframe :
has anyone tried if anafi supports usb networking out-of-the-box?
[2019-02-03 14:46:53]
mainframe :
ok - Ive got some testing results while trying to tunnel SC3->Anafi via different wifi link. I could get pairing to work via FreeFlight 6 - and also video stream - but video updates are bulky. So either my current rpi wifi dongle is too slow for relaying anafi video stream with the bandwidth required - or we are missing some optimisation - that otherwise would be there.
[2019-02-03 14:51:49]
mainframe :
Good news is that as a concept it does work (at least it connects) - and FreeFlight 6 is happy with it. Need to dig more into streaming bandwidth issue.
[2019-02-03 14:56:01]
mainframe :
mhm when connected to Anafi hotspot, Bit Rate=6 Mb/s - thats too low I guess…
[2019-02-03 15:01:05]
mail451 :
6Mb/s for video feed?
[2019-02-03 15:02:04]
mainframe :
6MB/s is the link speed by default - when connecting to anafi (via usb wifi dongle on RPi). I wonder why is that…
[2019-02-03 15:02:15]
mainframe :
should be higher
[2019-02-03 15:02:19]
mainframe :
much higher
[2019-02-03 15:04:36]
mainframe :
its rt2800usb driver with RAlink RT chipset 5390, rev 0502 detected
[2019-02-03 15:08:13]
mainframe :
to my knowledge anafi sends h.264 720p stream to SC3 - so it can be around 5-7Mbit. But 6Mbit is clearly too few for smooth picture updates. I just wonder why my dongle does not connect with higher speed….wierd.
[2019-02-03 15:11:06]
mainframe :
Wierdest part is that 6Mbit is already coming from the wlan scan:
wlan0 Scan completed :
Cell 01 - Address: 90:3A:E6:36:FB:9C
Channel:1
Frequency:2.412 GHz (Channel 1)
Quality=69/70 Signal level=-41 dBm
Encryption key:on
ESSID:“ANAFI-XXXXXXX”
Bit Rates:6 Mb/s
Mode:Master
[2019-02-03 15:16:00]
mainframe :
mhm…so does Bebop2 as well. And normal hotspots advertise themselves up to 54Mbit….
[2019-02-03 15:24:01]
mainframe :
I guess SC3->Anafi have some sort of adaptive link bandwith mechanism - maybe they connect at 6Mbit initially - and upgrade then.
[2019-02-03 15:55:56]
kilrah :
makes sense limiting to 6 when you want range. 54 only works when close so allowing higher rates would do nothing but cause drops when it switches up and down all the time as soon as you're the slightest bit away.
[2019-02-03 16:04:15]
mainframe :
yes makes sense
[2019-02-07 21:03:11]
trulala69 :
Somebody already tried this method to keep FCC? <https://parrotpilots.com/threads/freeflight-6-mod-app.1338/>
[2019-02-07 21:29:50]
quad808 :
awww man...I bet he could remove the height restriction too....
[2019-02-07 22:54:22]
mail451 :
Backup of the thread in case it disappears: <https://pastebin.com/79KrRyWT>
[2019-02-11 17:30:59]
trulala69 :
Hmmm, I've been using apktool (for the first time) to verify the post ... quite interesting, but reading smali is quite hard, especially the referencing of values ... anyway reverse engineering is a lot of fun ... as far as i can see, his approach should work ... I've also found the magical "150" as the maximum value for geofencing ... the question is, is the altitude limited via geofencing ...
[2019-02-11 17:32:01]
trulala69 :
BTW where is ender? He's done a lot one previous fw versions ...
[2019-02-12 15:03:48]
aciid :
haven't seen him in a few months
[2019-02-12 15:03:54]
aciid :
hopefuly evertyhings good
[2019-02-13 10:50:43]
trulala69 :
Made my first own APK successfully and followed the instructions ... it work's! I've to avoid now to connect it with FF6 omn my IPhone as this would set it back. I was also trying to modify the height for geofencing, but I was only able to see the modification in the app once. Question is anyway, if that would have worked ...
[2019-02-15 14:10:31]
softice :
got my hands on an Anafi today from a friend and I can read-out the boot process from his Anafi via the serial pins - thanks @aciid
[2019-02-15 14:11:00]
softice :
[2019-02-15 14:11:56]
softice :
Using a cheapo ch340g USB to TTL (3.3V)
[2019-02-15 14:25:12]
kilrah :
new firmware and app today
[2019-02-15 14:32:16]
mainframe :
nice!
[2019-02-15 14:37:55]
mainframe :
@softice - which pins exactly?
[2019-02-15 14:41:44]
softice :
looking at the drone from behind: pins enum 1,2,3,4,5
[2019-02-15 14:41:59]
softice :
1=tx
2=rx
3=gnd
[2019-02-15 14:42:12]
softice :
literally from outer left to right
[2019-02-15 14:43:11]
aciid :
@softice see I was not mad
[2019-02-15 14:43:12]
softice :
baud rate 115200 and set 'implicit CR in every LF' to get the line endings right (in putty)
[2019-02-15 14:43:23]
softice :
never said :slightly_smiling_face:
[2019-02-15 14:43:44]
aciid :
wait did you get to type into ambashell
[2019-02-15 14:43:47]
aciid :
it says ambashell there :E
[2019-02-15 14:43:49]
softice :
no
[2019-02-15 14:43:53]
softice :
I saw
[2019-02-15 14:43:58]
softice :
a:\> lol
[2019-02-15 14:44:13]
softice :
I can't seem to interrupt the boot process
[2019-02-15 14:44:36]
aciid :
did you try the other 2 pins they should be connected too
[2019-02-15 14:44:42]
softice :
there are some tricks to invalidate the NAND flash by grounding a pin
[2019-02-15 14:44:51]
aciid :
4 RX 5 TX
[2019-02-15 14:44:58]
aciid :
to some kernel if I recall correctly
[2019-02-15 14:45:10]
softice :
nothing useful on the other two pins, but all of them 1.7V except for the middle one
[2019-02-15 14:45:54]
softice :
looking at the drone from behind: pins enum 1,2,3,4,5
1=tx
2=rx
3=gnd
literally from outer left to right
[2019-02-15 14:46:00]
softice :
let me try the others again
[2019-02-15 14:46:11]
aciid :
did you solder yourself to the pins? I think you could try hard reseting the drone
[2019-02-15 14:46:28]
aciid :
of course if it's not yours then its undesrtandable
[2019-02-15 14:46:31]
softice :
No, holding it there with one hand, feel like a cirus acrobat
[2019-02-15 14:46:47]
aciid :
I used small crimps and took apart the battery
[2019-02-15 14:46:59]
softice :
I wall-powered it (AC/DC)
[2019-02-15 14:47:09]
aciid :
I never figured out if that would work
[2019-02-15 14:47:12]
aciid :
obviously better
[2019-02-15 14:47:43]
aciid :
<https://cdn-shop.adafruit.com/1200x900/378-04.jpg> used saleae probes
[2019-02-15 14:47:52]
aciid :
they can be used with any dupoint cables
[2019-02-15 14:48:16]
softice :
you need to short the upper two pins of the male header, then + left and - right. I'm using an universal AC/DC adapter set to 7.5V
[2019-02-15 14:48:31]
aciid :
i used masking tape on the pcb side and made sure that each probe connected to the test pads
[2019-02-15 14:49:10]
softice :
cool :+1:
[2019-02-15 14:49:38]
softice :
yeah have to be a bit careful with this one as it's not mine. will try a few more things, if it looks promising, I might go and buy one
[2019-02-15 14:49:52]
aciid :
I can sell you mine if you are in the EU :3
[2019-02-15 14:50:27]
softice :
Asia here
[2019-02-15 14:51:01]
aciid :
tax problem :smile:
[2019-02-15 14:51:20]
aciid :
*duty tax
[2019-02-15 14:51:23]
softice :
yeah and shipping cost sucks :rolling_on_the_floor_laughing:
[2019-02-15 14:54:25]
softice :
oh ok, yeah the other two pins also work. different parts of the boot process. I can see boxinit starting processes.
[2019-02-15 14:54:29]
softice :
no console so far
[2019-02-15 15:10:16]
softice :
[2019-02-15 15:10:28]
softice :
kernel boot
[2019-02-15 15:12:58]
softice :
was looking at something like <http://colinoflynn.com/2016/07/getting-root-on-philips-hue-bridge-2-0/> to interrupt the boot process and set my own kernel command line
[2019-02-15 15:31:21]
mail451 :
Can you write to the AMBA shell over the debug pins?
[2019-02-15 16:17:51]
softice :
no
[2019-02-15 16:19:48]
softice :
but knowing it's an Ambarella SOC, I tried few other things that work on GoPro cams with ambsh, e.g. create an autoexec.ash on the SD card's root with
`sleep 25`
`lu_util exec 'busybox /usr/sbin/telnetd -l /bin/sh'`
[2019-02-15 16:20:13]
softice :
but no, would have been too easy :rolling_on_the_floor_laughing:
[2019-02-15 16:39:03]
mail451 :
Actually
[2019-02-15 16:39:33]
mail451 :
Lmaoo no lu_util exec is from A7 chips. Man the memories of using that in the HERO3 lol
[2019-02-15 16:39:47]
mail451 :
Try with t ipc rpc cltn exec1
[2019-02-15 16:40:10]
mail451 :
Also you can just try "help" and it will spit out supported commands
[2019-02-15 16:40:19]
mail451 :
Maybe it's time to bring back autoexechack
[2019-02-15 16:41:01]
aciid :
would be awesome to see if it prints an error to the serial when and if it reads autoexec files
[2019-02-15 16:41:22]
aciid :
nice to get a control line for once there, this is the first time we can see anything in real-time
[2019-02-15 16:44:04]
mail451 :
<https://github.com/KonradIT/xiaomi_yi4k/blob/master/autoexec.ash#L25>
[2019-02-15 16:44:11]
mail451 :
Usage for rpc command
[2019-02-15 16:46:12]
softice :
:+1::skin-tone-2: bedtime here. Thanks, will give it a shot tomorrow
[2019-02-15 22:34:59]
softice :
@mail451 no luck with `t ipc rpc clnt exec1` - looking at the debug output, there is zero indication that autoexec.ash even gets picked up
[2019-02-15 22:45:43]
mail451 :
As expected. So you can input commands? Autoexec.ash is disabled in the firmware.
[2019-02-15 23:12:21]
softice :
I managed to get into the boot shell
[2019-02-15 23:12:49]
softice :
[2019-02-15 23:13:19]
softice :
this is even before the ambshell (which would have been better)
[2019-02-15 23:14:07]
softice :
two ways of achieving this, press Enter at the time the drone powers up or simply short TX and RX during power up
[2019-02-15 23:15:18]
softice :
[2019-02-15 23:17:18]
mail451 :
Oh this is nice
[2019-02-15 23:17:30]
softice :
Haven't found a way to get to ambsh> (`a:/>`) yet, where I could potentially manipulate the kernel command (adding init=/bin/sh)
[2019-02-15 23:18:23]
mail451 :
The firmware does not ship the AMBA side. You'd have to dump and package it.
[2019-02-15 23:19:44]
softice :
well, I can see the ambsh during boot up in the debug console, I just haven't figured out how to stop
[2019-02-15 23:19:53]
softice :
[2019-02-15 23:45:06]
softice :
`amboot> boot ubi.mtd=LINUX_RFS ubi.mtd=DATA root=ubi0:linux rootfstype=ubifs console=ttyS1 nr_cpus=3 maxcpus=4 swiotlb=1024 boxinit.console=ttyS1 isolcpus=1 pstore.update_ms=5000 earlycon boxinit.revision=3 init=/bin/sh`
no luck yet
[2019-02-16 03:50:21]
softice :
Besides the fact that any parameters behind boot seem to get ignored anyways, I can‘t enter any characters other than alphanumerics, so all / : = get ignored
[2019-02-16 03:53:41]
softice :
I‘ll try and see if I can use writel to write directly on the flash to set the debug flag in the regarding confs in /etc
[2019-02-16 05:34:45]
softice :
Probably not, guess it‘s just for register manipulation like any Linux on ARM
[2019-02-16 07:41:42]
aciid :
@softice boxinit variables are present in /etc you, I'm not familiar with amboot but you are on the trail
[2019-02-16 07:41:53]
aciid :
you can probably command different prop variables too
[2019-02-16 07:42:35]
softice :
:+1::skin-tone-2:
[2019-02-16 07:44:25]
softice :
I’m out the entire day and night, won‘t be able to continue before Sunday. Any other ideas/things to try more than welcome, I‘ll try as soon as I can :grinning:
[2019-02-16 07:44:49]
softice :
Also my first time dealing with amboot
[2019-02-16 07:45:14]
aciid :
<https://images-na.ssl-images-amazon.com/images/I/61oJNmDwN0L._SL1200_.jpg>
[2019-02-16 07:45:23]
aciid :
i have this kind of thing, but drivers didn't work on windows
[2019-02-16 07:57:31]
softice :
How come you have a saleae but no $2.- cp2102 or ch340g adapter? :grimacing: Have you tried this cable on Linux? Most of the serial chipsets are supported out of the box.
[2019-02-16 07:58:18]
aciid :
messy life you can imagine how my desk looks
[2019-02-16 08:08:13]
softice :
Can imagine
[2019-02-16 09:05:59]
ender :
Hi guys, just dropping in to say i am still alive :slightly_smiling_face: My company has some first rate real-llife problems and i am working my a** off :slightly_smiling_face: Things brighten up and i saw Anafi has new FW yesterday so i am looking at it (hopefully= will report back if i got things done... SORRY !
[2019-02-16 09:18:47]
ender :
To save you the trouble, here are the FW files:
<https://we.tl/t-rtUwgGJWYm>
[2019-02-16 09:19:08]
ender :
I better look at the mpp fw first (does it still leave adb via tcpi open) before flashing :slightly_smiling_face:
[2019-02-16 09:45:10]
ender :
Just as a reminder i am using the ubidump tool to unpack the whole ubi or just the etc folder to look at things. Then i am checking if adb is still started by default (debug mode & console active):
<https://github.com/nlitsme/ubidump>
[2019-02-16 09:45:17]
ender :
Looks fine, will flash now.
[2019-02-16 09:48:05]
aciid :
good to hear you are allright man
[2019-02-16 09:48:38]
aciid :
softice here got around tooling the sd-card pins if you scroll up, theres an interactive shell session on boot
[2019-02-16 09:48:39]
ender :
Well i am basically, just my company is trying to go bellyup and we are all doing the best to soften that :slightly_smiling_face: --> Loads of work, probably for nothing…
[2019-02-16 09:48:57]
ender :
yes yes i have seen that, KUDOS @softice!!!
[2019-02-16 10:21:21]
ender :
oops 1.41 controller fw, arghhh checking again…
[2019-02-16 10:29:11]
ender :
okay, adb also active in 1.41, checked, flashed, logged into mpp3, OKAY :slightly_smiling_face:
[2019-02-16 10:29:45]
ender :
FakeGPS still working, so also parrotpilots apk patch should still work, TRYING
[2019-02-16 10:37:40]
ender :
afk
[2019-02-16 10:44:15]
ender :
Muss aufs GROSSE Testfeld, das hier ist der Anafi+FCC bei so gutem Wetter nicht gewachsen.
[2019-02-16 10:45:50]
ender :
oops wrong channel / chat sorry for babbling German, DELETED..
[2019-02-16 10:46:27]
ender :
Nevertheless tested with patched apk after securing US/FCC.
[2019-02-16 10:48:09]
ender :
GREAT performance, test setup near my couch is not enough. I **think** parrot improved auto-power-leveling again. Combined with FCC i am **now** convinced that it performs better then my Mavic Air & Spark with FCC ever did. Maybe even better then Mavic Air with modded Antennae. Of course not as good as MP on FCC but that bird got way too fat & loud for me anyways :slightly_smiling_face: GREAT. Will try more intense.
[2019-02-16 10:48:31]
ender :
Its very hard for me to get motivation to create mpp3 binary patch when modded apk works so well…
[2019-02-16 11:20:54]
d95gas :
@ender Nice to see you alive and kicking ..... your presence was missed. For Info, there is a new version of the Parrotpilots apk file.... don't know if you have caught up over there yet.
[2019-02-16 11:21:10]
ender :
yep
[2019-02-16 11:21:13]
d95gas :
Still hoping NLD will do something for the Anafi
[2019-02-16 11:21:16]
ender :
its working :slightly_smiling_face:
[2019-02-16 11:21:36]
ender :
(if we are talking about the 6.40 linked to in PP Forum)
[2019-02-16 11:21:44]
d95gas :
Cool, not installed yet, just having chill out morning ..... Sounds like my work life as been as hectic as yours
[2019-02-16 11:21:50]
d95gas :
Yes we are
[2019-02-16 11:21:51]
ender :
yep yep
[2019-02-16 11:28:18]
aciid :
@d95gas well NLD is acommunity effort. But dji is just more mainspread
[2019-02-16 11:31:37]
d95gas :
:+1:
[2019-02-16 12:32:09]
softice :
That‘s good to know, I‘ll need that as well. Danke!
[2019-02-16 12:34:38]
ender :
:+1::stuck_out_tongue:
[2019-02-16 12:46:57]
mail451 :
Wow all this progress I need to decide between Anafi, Fimi x8 se or save up for the M2pro
[2019-02-16 12:48:13]
ender :
You know MY answer to this :slightly_smiling_face:
[2019-02-16 12:50:31]
mail451 :
haha
[2019-02-16 12:50:47]
mail451 :
FIMI X8 se looks hackable enough, got all teh good stuff
[2019-02-16 12:51:54]
aciid :
My probelm with anafi is that its so delicate
[2019-02-16 12:52:01]
aciid :
Im afraid ill break it lol
[2019-02-16 13:24:42]
kilrah :
friend broke an arm on my anafi by sitting on it...
[2019-02-16 13:32:33]
trulala69 :
Really? :joy: Damn...
[2019-02-16 13:33:37]
ender :
thats strictly forbidden in the manual so rtfm :stuck_out_tongue:
[2019-02-16 18:06:10]
quad808 :
The Fimi x8 from Dustins testing looks legit
[2019-02-16 18:06:31]
quad808 :
range is not so great unless you boost or use those parablolic thinghys
[2019-02-16 18:07:32]
quad808 :
I never saw any need for front sensors, side sensors or back sensors....just don't fly into shit!
[2019-02-16 18:21:37]
d95gas :
According to Bangood specs..... 5Km range ..... Overall some decent specs. <https://www.banggood.com/Xiaomi-FIMI-X8-SE-5KM-FPV-With-3-axis-Gimbal-4K-Camera-GPS-33mins-Flight-Time-Foldable-RC-Drone-Quadcopter-RTF-p-1394905.html?utm_source=google&utm_medium=cpc_ods&utm_content=ysq&utm_campaign=RC-Sds-Feed&gclid=CjwKCAiAhp_jBRAxEiwAXbniXQRu2x2XXslCrUcdsjhz8TP077ao-4x5dPWuJujGjWpCwWB8Q4qX6hoC3REQAvD_BwE&cur_warehouse=CN#customerQA>
[2019-02-16 18:22:51]
quad808 :
LOL watch this: <https://www.youtube.com/watch?v=8E-StCq3Wb0>
[2019-02-16 18:23:37]
quad808 :
The gimbal and video look sweet!
[2019-02-16 18:23:59]
d95gas :
ideo resolution: 3840x2160 30/25/24fps
2560x1440 60/50/30/25/24fps
1080P 100/60/50/30/25/24fps
720P 200fps
[2019-02-16 18:24:24]
d95gas :
Bangood sales talk then on 5Km :slightly_smiling_face:
[2019-02-16 18:24:51]
quad808 :
I wonder...is it totally unlocked from NFZ and Altitude??
[2019-02-16 18:25:17]
quad808 :
sorry to take over the anafi channel...hehehe
[2019-02-16 18:28:07]
d95gas :
Says ceiling is set at 500M. And looking at the video, seems like turning left is a no go :slightly_smiling_face:
[2019-02-16 18:31:18]
quad808 :
I think he needed to do another compass calibration, but not sure. Banggood coupon 502C6B for $74.85 off
[2019-02-16 18:31:27]
quad808 :
I am so tempted
[2019-02-16 18:31:42]
quad808 :
IF it can be unlocked
[2019-02-16 18:32:00]
d95gas :
Have you not got enough to play with now :slightly_smiling_face:
[2019-02-16 18:32:17]
d95gas :
You know you'll use it once then stick it on the bench
[2019-02-16 18:33:01]
quad808 :
yah, I know....far too many drones, I have
[2019-02-16 18:34:59]
d95gas :
Surprised you have any time to work :slightly_smiling_face:
[2019-02-16 18:39:37]
quad808 :
LOL...I end up not flying, hardly ever
[2019-02-16 18:53:31]
mail451 :
Unlocked as in FCC Mode? To me it seems you can trigger FCC by selecting United States as region in the app
[2019-02-16 18:53:39]
mail451 :
otherwise the firmware looking good as well
[2019-02-16 18:53:54]
mail451 :
Might just end up getting the X8 cause more ways to hack it
[2019-02-16 18:59:37]
quad808 :
unlocked meaning no NFZ or altitude restrictions...think they can be unlocked? I would rather be in control as a pilot.
[2019-02-16 19:08:24]
aciid :
I'd rather not trust chinese drones with unlimited nfz and altitude
[2019-02-16 19:30:04]
mail451 :
DJI are chinese drones
[2019-02-16 19:39:49]
aciid :
oh yeah :smile:
[2019-02-17 11:59:23]
aciid :
@softice i wipped a nucleo to be my serial adapter now, can you describe which pins on Anafi you connected to boot with DC power
[2019-02-17 11:59:43]
aciid :
*** how to connect a powersupply to Anafi
[2019-02-17 12:01:54]
softice :
The upper two of the male header between + and -
[2019-02-17 12:06:48]
softice :
[2019-02-17 12:11:55]
softice :
So, amboot’s readl and writel are memory operations, the address base is 32bit.
[2019-02-17 12:15:17]
softice :
I was trying to find the kernel boot parameters somewhere in the RAM, hoping it will already be loaded at this time. So I could sneak in a init=/bin/sh, and just run “boot” from the amboot shell - but could not find it so far. Made a script to read out the mem contents one by one (no bulk reads possible, sigh!), so that’s quite slow and I need to hold the wires on the two pins the entire time the script is running :man-facepalming::skin-tone-3:
[2019-02-17 12:26:08]
softice :
Anyone knows what type the battery connector is? Some kind of special molex?
[2019-02-17 12:52:09]
aciid :
@softice loosk like "molex extreme" series
[2019-02-17 12:58:06]
aciid :
<https://www.molex.com/molex/products/datasheet.jsp?part=active/0465621001_PCB_RECEPTACLES.xml>
[2019-02-17 12:58:39]
aciid :
close but less signals
[2019-02-17 13:08:44]
softice :
Thanks, I check it out later. Will probably build a cable for it
[2019-02-17 13:09:55]
aciid :
the link I provided is not the same, connector but close. I actually took apart one battery and I think that is a more direct way to get one
[2019-02-17 13:10:12]
softice :
More $ too :)
[2019-02-17 13:10:39]
aciid :
i botched the battery alraedy, it's well "holding up" but it wont fly anymore. im not trusting it
[2019-02-17 13:10:41]
softice :
I can order the Molex stuff quite cheap here. Build a cable for the Bebop2 earlier
[2019-02-17 13:10:57]
aciid :
once you open it, it has adhesive to hold the components and once you take it apart its not going back nicely
[2019-02-17 13:12:05]
softice :
Ok, no I won’t open it unless it’s my own
[2019-02-18 08:20:02]
softice :
@aciid any luck with the serial adapter?
[2019-02-18 14:13:08]
softice :
by the way:
$ strings update.bin |grep autoexec
c:\autoexec.ash
e:\autoexec.ash
might not mean anything, but at least it's referenced in the firmware (1.3.2)
[2019-02-18 14:26:37]
softice :
$ strings update.bin |grep ambafs
/usr/local/share/script/sd_script.sh mount /tmp/SD0 c: ambafs
[2019-02-18 14:28:42]
softice :
@mail451 /tmp/SD0 would be correct, but ambafs is proprietary. It might work if we can format the SD card as ambafs instead of FAT32.
[2019-02-18 14:29:03]
mail451 :
Oh neat
[2019-02-18 14:29:21]
mail451 :
Yes I know SD0 but autoexec.ash cannot be read from there.
[2019-02-18 14:29:38]
mail451 :
Look into tcp_tuner
[2019-02-18 14:29:45]
mail451 :
Linux (non amba side)
[2019-02-18 14:31:27]
softice :
doesn't ring a bell
[2019-02-18 15:15:42]
aciid :
I haven't found my banana connectors for my psu
[2019-02-18 15:30:51]
aciid :
found them were in my droning bag
[2019-02-18 15:34:00]
softice :
:+1::skin-tone-2:
[2019-02-18 15:45:28]
aciid :
and I brought the wrong PSU
[2019-02-18 15:45:28]
aciid :
lol
[2019-02-18 15:45:45]
aciid :
goes only to 8v
[2019-02-18 15:46:00]
aciid :
made for HAM equipment need to go and get astepdown
[2019-02-18 15:52:35]
softice :
Otherwise connect it to the original battery via banana/crocodile connectors
[2019-02-18 16:52:29]
mail451 :
@softice did you try the autoexec.ash?
[2019-02-18 17:44:15]
aciid :
@softice how do you boot it? via the two pins on top?
[2019-02-18 17:45:33]
aciid :
got it
[2019-02-18 18:28:03]
aciid :
my connectors were not sticking, i got frustrated with the sd-card board
[2019-02-18 18:28:06]
aciid :
il try again later
[2019-02-19 04:35:44]
softice :
I’m holding two (needle) test probes in my left hand on the pins while typing commands with my right - horrible and inefficient, but still ok to do basic tests. I’ll probably stick a flat cable on the PCB going forward. If possible, I prefer not having to solder a cable to it.
[2019-02-19 04:37:18]
softice :
Only on the SD card itself. No success. How did you suppose I should try it?
[2019-02-19 09:24:53]
ender :
haha thats the way i used to flash my ESC's, GOOOOO softice!!!!
[2019-02-19 09:44:50]
softice :
:ghost:
[2019-02-19 10:55:15]
aciid :
I played with the idea to manufacture pogo-pins for that earlier, but It could have been overkill
[2019-02-19 10:55:36]
aciid :
I coulnd't find a good way to pitch them in eagle for manufacturing costs
[2019-02-19 11:14:02]
mail451 :
anybody has the latest FW on here too lazy to DL freeflite
[2019-02-19 11:14:14]
mail451 :
1.3.2 idk
[2019-02-19 11:49:07]
softice :
<https://firmware.parrot.com/Drones/0914/1.3.2/ALL/anafi_update.tar.gz>
[2019-02-19 11:52:48]
softice :
but the same URL scheme doesn't work for 1.4.0... interesting.
[2019-02-19 13:44:33]
ender :
i uploaded 1.40 here
[2019-02-19 13:45:16]
ender :
<https://we.tl/t-rtUwgGJWYm>
[2019-02-19 13:45:33]
ender :
mpp3 fw got quickly updated to 1.41
[2019-02-19 13:45:41]
ender :
but AC FW is still 1.40
[2019-02-19 15:10:31]
mail451 :
Hmm 1.40 does has autoexec.ash present as well
[2019-02-19 15:11:55]
ender :
@mail451 didnt you try to have that executed in many variations ? Or do you now assume that it only works if sd is formatted in that strange FS ?
[2019-02-19 15:13:24]
mail451 :
The script for mounting just prepares the SD0 (that's how linux interfaces with the SD card) to be read by the AMBA chip (in ambafs).
[2019-02-19 15:13:34]
mail451 :
We could try to edit the configs.txt
[2019-02-19 15:13:44]
mail451 :
but then how to push the FW back into the bird hmmm
[2019-02-19 15:14:26]
mail451 :
@aciid is it me or I remember you pushed downgraded/custom FW to the Anafi via iPhone? Or Man in the Disk attack?
[2019-02-19 15:14:43]
mail451 :
idk if anyone wants to have a go
[2019-02-19 15:18:29]
softice :
How will changing .config help?
[2019-02-19 15:22:42]
mail451 :
There are some I2C flags that might be interesting but not much. If 'cal.txt' does actually work there ***might*** be a way to start linux_once mode
[2019-02-19 15:22:48]
mail451 :
"_tapp usb linux_once"
[2019-02-19 15:23:28]
softice :
If a custom firmware can be pushed to the drone (possible), we still need to bypass the firmware’s signature check. The installation on the drone side is the same, including the same checks, regardless if it’s pushed via app or via ftp into /update (At least for Bebop2 and the Parrot Disco). But if we can bypass all of these, might as well just enable the debug flag in the regarding /etc conf file to enable adb/telnet. Am I missing the point?
[2019-02-19 15:26:06]
mail451 :
Yes that's the goal
[2019-02-19 15:29:10]
softice :
The other idea is to run webserverd or other interfacing binaries from the Anafi FW on e.g. a Raspberry Pi 3 (AArch64) and hook it up with IDA Pro remotely and do some live debugging. Certainly easier than doing static analysis on disassembled binaries.
[2019-02-19 15:31:39]
softice :
Live debugging could also be done on SC3 directyly (mppd process) via IDA Pro plugin and see how it’s interfacing with Anafi (I assume it’s still pomp). We could see what exactly happens during a firmware upgrade via App for example.
[2019-02-19 15:31:55]
softice :
Which could also be revealed via USB debugging...
[2019-02-19 15:33:31]
mail451 :
Does someone know what is macgyver
[2019-02-19 15:39:10]
ender :
that guy who was able to build anything from anything :slightly_smiling_face:
[2019-02-19 15:39:30]
ender :
j/k, it existed on bebop as well, let me check if i can references. Its loooong ago
[2019-02-19 15:43:15]
ender :
damn i am not sure.
[2019-02-19 15:43:49]
ender :
it could either be something for RC to FC binding OR something that observes and restarts FC if neccessary or something completely different of course :slightly_smiling_face:
[2019-02-19 15:43:53]
ender :
Thats not of much help.
[2019-02-19 15:44:03]
ender :
Its present on the MPP3 as well...
[2019-02-19 16:02:27]
mail451 :
Extracted linux FS of 1.4.0 for anyone who needs it: <https://mega.nz/#!1gMQXIbA!gzecucgIARj4Fy-HAJlRYFU4l_Cf1aWUSxVvx4IK2wM>
[2019-02-19 16:48:53]
aciid :
I need to order proper cables I havent find my adapter still. nucleo prints out gibberishh
[2019-02-19 16:49:13]
aciid :
ill probably just solder the pads soon too, probes are not holding
[2019-02-19 16:49:24]
aciid :
ill sell the bird for scrap if I fail lol
[2019-02-19 18:57:10]
shell :
Macgyver was on the ardrone
[2019-02-19 18:57:18]
shell :
Rc mod
[2019-02-19 18:57:32]
shell :
If memory serves correctly
[2019-02-19 23:57:01]
softice :
@aciid I had a hard time positioning all three test probes RX,TX,GND, also got gibberish most of the time. I then simply put GND on the SD card lid/cover. It has a small slit, perfect to put a cable through, close and it’s held in position.
[2019-02-23 16:35:43]
softice :
Not much progress on the serial side. I'm trying a few different things now. Got the webserver process running on a Raspberry Pi 3 with AArch64. It's reachable from my browser, no issues.
Before I start remote debugging it with IDA Pro, I'm doing some simple checks and test with the files being opened on the server side (strace). I'm focusing mainly on the Update upload process and try to understand what is happening on the server side and see if everything is properly input validated and sanitized to start with.
[2019-02-23 16:36:22]
softice :
Just wanted to check if that has been tried before. I'm a bit late in the game and there's is not a lot of channel history available anymore.
[2019-02-24 12:41:38]
aciid :
@softice that has not been tried to my knowledgment, but I've speculated that compabitle hardware exists, I didn't know that raspberry pi 3 would work. that sounds promising
[2019-02-24 12:42:53]
softice :
Yeah it does. I did not manage to boot the entire Anafi kernel on the RPi3, but the bins and libs work fine.
[2019-02-24 12:44:24]
softice :
It does not work with the standard Raspbian, as it's only a 32-bit kernel (for compatibility reasons with RPi0-RPi2, and limited performance benefits).
I flashed the SD with the build from here: <https://github.com/bamarni/pi64> (full AArch64)
[2019-02-26 20:38:04]
vo :
anyone know how to connect to ADB on the aircraft itself? is it a double-tap or triple-tap or something like on the Bebop 2?
[2019-02-26 20:42:57]
aciid :
aircraft does not have adb enabled because parrot chose not to open door for developers
[2019-02-26 20:43:40]
vo :
i c. i guess will have to use a external power supply like softice and connect to the serial port
[2019-02-26 21:03:52]
vo :
pretty cool ANAFI has a web interface you can see if you run `iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 192.168.42.1:80` on the SC3 and then go to 192.168.53.1 in the browser
[2019-02-26 21:05:03]
vo :
[2019-02-26 21:13:16]
mail451 :
What's in the media tab?
[2019-02-26 21:18:04]
vo :
you can see the list of video files on the sd card. and you can even view them right in the browser.
[2019-02-26 21:19:50]
vo :
it's actually kind of frustrating that they put so much effort into making a nice developer tool like this but didn't enable ADB.
[2019-02-26 21:19:57]
mail451 :
and 'update'? Does it allow for flashing images?
[2019-02-26 21:20:28]
vo :
update has text that says what version (1.4.0) and a button called "Select File..."
[2019-02-26 21:20:39]
vo :
i presume that allows you to upload an image.
[2019-02-26 21:28:08]
mail451 :
and 'sdk'?
[2019-02-26 21:38:16]
vo :
it shows rolling logs of SDK comms. all commands and telemetry sent over the SDK interface is logged there in human readable format
[2019-02-27 01:43:36]
softice :
No need for iptables forwarding. Just connect your PC to anafi’s Wifi and directly go to <http://192.168.42.1>
[2019-02-27 01:46:59]
softice :
Yes, update is to upload the firmware image. All the signature checks happen there too. That’s what I was looking into when I extracted the webserver daemon and ran it on the RPi3.
[2019-03-01 16:43:29]
ender :
Yep that website was there on B1 & B2 as well and maybe Ar.Drone as well, nice gimmick !
[2019-03-09 15:18:10]
shell :
The only web interface prior to anafi was the one a community member got running on the bebop
[2019-03-09 15:18:59]
shell :
Trying to remember his name... He was a lot of fun to work with
[2019-03-09 15:20:41]
shell :
Public Anafi sdk is coming soon... Not sure if y'all saw Jerome's public post on the dev forum
[2019-03-09 17:52:02]
mainframe :
havent seen
[2019-03-10 10:36:41]
aciid :
@shell dev forum has silenced me
[2019-03-10 10:36:51]
aciid :
my latest post was locked and hidden :smile:
[2019-03-16 03:19:43]
vo :
ah, i do not usually connect through anafi wifi, i've been using a USB to the SC3
[2019-03-16 03:20:16]
vo :
i managed to get 16 ANAFIs flying at the same time centrally controlled from my laptop, gonna try to do a video this weekend
[2019-03-22 21:56:45]
shell :
<https://forum.developer.parrot.com/t/anafi-sdk-availability/8847>
[2019-03-22 22:52:41]
mail451 :
first the mueller report and now this, friday is fruitful lol.
[2019-03-23 12:35:26]
mainframe :
whoa…I thought we never see the day…:)
[2019-03-23 12:36:03]
mainframe :
mkm…ok they havent actually released the SDK yet…
[2019-03-23 18:32:26]
shell :
I'm looking forward to sharing thoughts on it.
[2019-03-23 19:18:20]
d95gas :
Will you be further developing your app for the Anafi :grinning:
[2019-03-23 20:44:44]
mainframe :
So there will be SDK - but still no word about dev cert access - right?
[2019-03-24 14:39:17]
shell :
Yeah, nothing on physical access
[2019-03-24 14:40:11]
shell :
And after what happened to aclid I haven't bothered asking
[2019-03-25 12:13:33]
aciid :
I'm here
[2019-03-25 12:13:38]
aciid :
I'm just fed up with parrot, they delete my posts on the forum
[2019-03-25 12:14:33]
aciid :
the electronics on parrot are so tiny too that I'm whimping out on soldering anything there
[2019-03-25 13:41:33]
softice :
still trying the serial pins?
[2019-04-09 19:19:15]
aciid :
@softice nah, I'm interested in selling the anafi. I moved on from drones for a bit now.
[2019-04-09 19:19:37]
aciid :
if anyone in the EU is interested it's up for grab's it's intact and such
[2019-04-09 19:19:48]
mail451 :
How much?
[2019-04-09 19:22:44]
aciid :
380€+shipping
I have two batteries, but I'm not sure what shipping options are available. last time in the post office they just told me it's fine if they are separated from the device
[2019-04-09 19:23:09]
aciid :
just sold a OP3T for a commaai project last week, battery could not be removed but was discharged
[2019-04-09 19:23:58]
aciid :
I believe there is hope for rooting Anafi completely, but I just cant. I'm fed up with that device
[2019-04-09 19:45:20]
mail451 :
Tempting considering the lack of anafis for cheap here
[2019-04-10 14:59:12]
aciid :
@mail451 i'm keeping it intact until someone buys it off
[2019-04-10 15:00:13]
mail451 :
Spark 2, FIMI X8, etc... Lots of cheap drones suddenly
[2019-04-10 15:00:29]
aciid :
the hype is wearing off
[2019-04-15 14:04:32]
d95gas :
Parrot just announced Anafi with Dual Cameras. 21Mp and a Thermal Camera
[2019-04-15 14:04:40]
d95gas :
<https://www.parrot.com/uk/drones/anafi-thermal>
[2019-04-15 14:29:00]
mainframe :
Sensor resolution: 160x120
Very basic thermal sensor I would say…
[2019-04-15 14:30:01]
mainframe :
Yet cheapest thermal camera that flies I guess.
[2019-04-15 18:02:00]
d95gas :
Gives them another reason to bring out another model, and at a bit of a price as well.... I assume they have done their market research and found there is definitely a market for a mid range flying FLIR
[2019-04-18 12:47:07]
dkovar :
Anyone know how to pull log files from an Anafi without using the app?
[2019-04-18 12:49:19]
dkovar :
Ahh, it is in FDR, never mind.
[2019-05-06 22:24:24]
shell :
Sdk was released today
[2019-05-06 22:57:32]
mainframe :
yeah - we should experiment with set.Country stuff…
[2019-05-07 06:52:09]
nopcode :
for FCC?
[2019-05-07 11:44:00]
d95gas :
:+1:
[2019-05-11 15:26:30]
mainframe :
From my personal experience - DO NOT use Parrot Android apps. They are extremely buggy. Period.
[2019-05-11 15:27:10]
mainframe :
Especially lot of wierd problems related to live video stream.
[2019-05-11 15:28:19]
nocommie :
Well, when I only us android devices, that is kinda tough to do.
[2019-05-11 17:38:17]
quad808 :
I haven't had problems with my Anafi so far. Normally I use my Samsung S9 and it works well. I also have a huawei tablet m5 that works well too. Maybe it is your device? I agree about the batterys and the horrible controller. I opened it up and took out the weights. useless.
[2019-05-11 17:38:47]
quad808 :
Completely stupid design not to have a on off switch.
[2019-05-22 11:02:09]
nopcode :
no... off switch?
[2019-05-22 11:58:32]
nocommie :
Not from the factory. But mine does now.
[2019-05-28 21:22:10]
mail451 :
<https://www.theverge.com/2019/5/28/18642728/parrot-drones-us-military-department-of-defense-contract-china-dji>
ANAFI to come in camo color and blast Fortunate Son
[2019-05-29 07:18:27]
d95gas :
Ooohhh thats interesting :slightly_smiling_face: Hopefully DJI is NOT one of the 6 ...... would be nice to think so. This would mean more development for Parrot, which hopefully we would all benefit from in the long run, obviously not the "Spying" element", but this would put more money into their R&D.
[2019-05-29 07:20:37]
d95gas :
Parrot is receiving an undisclosed amount of an $11 million fund from the DOD to prototype next-generation reconnaissance drones that can “fly for 30 minutes straight at a range of up to three kilometers,” “weigh three pounds or less,” and “take less than 2 minutes to assemble and fit inside a soldier’s standard-issue rucksack.”
Anafi with some tweaks would fit the bill nicely :slightly_smiling_face:
[2019-07-13 16:25:20]
shell :
I'm gathering this channel is dead.. certainly no activity on my part.
[2019-07-13 16:29:30]
nocommie :
I have an anafi thermal I have been playing with. No hacking really. I WOULD like to find a way to install the latest Freeflight app that support the thermal (that requires android 7 or newer) on my rooted CS which is android 5.
[2019-07-13 18:55:33]
shell :
I can guarantee you any Android device stuck on lollipop won't have the processing power to handle the video processing demands of the anafi.
[2019-07-14 07:32:57]
d95gas :
Yep lots of guys on the ParrotPilot Forum have had to go and find new devices as Anafi just wouldnt work o Lollipop
[2019-07-14 12:53:47]
nocommie :
And on top of that, the one device I had that has a new enough android is my nvidia shield, and it has problems. About half the time (or more) it doesn't recognize the RC. I have actually been in contact with one of Parrots engineers and they have purchased a shield and have confirmed it. I just want a fukn tablet that is daylight readable with a new version of android. Oh, and prefer it isn't locked down like the CS. If it had an HDMI out, it would be a winner! Actually thinking about building my own. Whos in?
[2019-07-14 13:00:53]
d95gas :
I ended up with Huawei M5 8.4". Stunning 2k screen which is great in sunlight, peformance is fantastic on this, and runs the hacked version of FF6 without any issues at all.
yesterday Quad808 put this field monitor up which is around the same money as the Huawei
[2019-07-14 13:00:56]
d95gas :
<https://www.amazon.com/dp/B07KXN3QRB/ref=sspa_dk_detail_3?psc=1&pd_rd_i=B07KXN3QRB&pd_rd_w=hwk1d&pf_rd_p=8a8f3917-7900-4ce8-ad90-adf0d53c0985&pd_rd_wg=MvOXd&pf_rd_r=YWANQBR1NXY68W183NA7&pd_rd_r=af09a97c-a50b-11e9-ae22-ada3503c77e4&pldnSite=1>
[2019-07-14 13:07:00]
d95gas :
and for the UK member: <https://www.amazon.co.uk/Feelworld-Monitor-1920x1200-2200nit-Brightness/product-reviews/B07LG43R7T/ref=cm_cr_arp_d_viewpnt_rgt?ie=UTF8&reviewerType=all_reviews&filterByStar=critical&pageNumber=1>
[2019-07-14 13:40:54]
nocommie :
Yeah. I was going to use that screen to make my own tablet on ras pi. What do you mean hacked version of ff6? Is it hacked to unlock all the extra paid flight modes? If so, using the anafi thermal gets all those unlocked at no cost.
[2019-07-14 13:45:04]
nocommie :
I see the screen on the M5 is about 400 nits. That is just too low for me. I operate where it is sunny most of the time and and done with struggling to see the screen or using a hood etc.
[2019-07-14 15:43:06]
d95gas :
No, no point in hacking to get the apps, they only cost 1p in the first place, so not worth anyone's effort. Mainly hacked for FCC mode for extended power to those in CE Countries, like myself. In addition, of course you have the little backdoor option to go above approved height settings.
[2019-07-14 15:44:30]
d95gas :
M5 may be only 500 nits, but still bright as hell in direct sunlight. We have a mega day for sunshine today and I have been watching the F1 outside whilst I am cleaning the car. Despite the fact it was in bright sunshine, there was no issues in seeing all the excitement in this F1 race today. Possibly it being a 2k screen also helps....... I'm no expert, I know it works.
[2019-07-14 19:37:11]
quad808 :
@d95gas where is this modified FF6? Didn't know there was such a thing. The altitude limit on the Anafi is super low
[2019-07-14 19:50:18]
quad808 :
NM, reading about it now...
[2019-07-14 20:23:59]
shell :
Lenovo tab10 pro is decent
[2019-07-15 05:53:59]
d95gas :
@quad808 Morning bud, dont think it would be much use to you as its really only FFC mode, but you can find it in the following thread:
<https://parrotpilots.com/threads/freeflight-6-mod-app.1338/page-21>
[2019-07-15 05:54:49]
d95gas :
Altitude limit is exceeded by simply creating a single waypoint, then editing the .json file with whatever height you want, ie 900m :slightly_smiling_face:
[2019-07-17 14:15:54]
info616 :
Trying to get me updated on forced FCC mode for the Anafi …
Ender’s controller hack from last year is history, right? Well, just installing a modded APK is way easier than hacking into the controller but it only works on Android. So there is currently no more forced FCC mode on iOS?
[2019-07-17 16:46:14]
d95gas :
nope .... Nobody seems to be bothering with FCC hack on IOS....... In fact I am dumping my last IOS device in about 3 days time for another Android
[2019-09-03 17:11:01]
d95gas :
For those interested. It would seem that Parrot have released a developer version of firmware that sets the max altitude of the Anafi to 4km ..... yes 4km up :slightly_smiling_face: dont know if its one of those "Deliberate accidental" releases. Conincides with them releasing a new version of Freeflight 6, which itself makes no attempt to force any sort of upgrade to get rid of the 4km altitude settings. Extract from one of the JSON files, find by one of the users: "geofence":{"maxAltitudeRange":[0.5,4000],"maxDistanceRange":[10,4000]}.
As of yet, nobody has tested it to the limits, but all appears genuine. Not that the Anafi battery could make it up there and back.
[2019-09-03 17:14:58]
quad808 :
wow. Where is this firmware??
[2019-09-03 17:15:56]
quad808 :
looking now
[2019-09-03 17:39:17]
quad808 :
So, trying to understand what is going on. I uninstalled and re-installed FF6, latest version. Ran the app. Now I can turn off geofencing completely. Is this what you are talking about? I don't think you could turn it off completely before. @d95gas I am at work, so can't test this.
[2019-09-03 17:55:00]
d95gas :
Have to go back a couple of days. Parrot released a version of the FF6 APK which we believe to be a developer edition. When you install that version, it also has a new firmware update, someting like 1.61 rc2. That firmware has unlocked any Altitude restrictions.
So its a case of install that first. Do the firmware update, then remove the software and install the modded version of 6.6.6.0 Launch aircraft and you can go upto 4km altitude.... totally nuts, and there has been nothing said by Parrot or its developers. Its all very odd
[2019-09-03 17:55:45]
d95gas :
<https://www.parrot.com/files/s3fs-public/firmware/FreeFlight6-world-inhouse.apk>
[2019-09-03 17:56:18]
d95gas :
Even the APK name is very odd, but its genuine and works, dozens of us have installed and updated the firmware, and all genuine from Parrot
[2019-09-03 17:58:48]
d95gas :
Its the firmware that removes the altitude limit, so removing the sofware and putting the updated version on it, does not impact it. Guys are now flying about the previous 150m limit
[2019-09-03 18:03:23]
quad808 :
Thank you my friend. Will have to rush and do the firmware update before it's pulled or something. Surely must be planned release...
[2019-09-03 18:03:54]
quad808 :
Oh wait. The firmware is in the apk, yes?
[2019-09-03 18:06:57]
d95gas :
Yes :slightly_smiling_face:
[2019-09-03 18:07:20]
d95gas :
its like they wanted us to have this, but didnt want to do it officially if you know what I mean
[2019-09-03 18:07:42]
d95gas :
so thats the Anafi now with no NFZ and No restrictions
[2019-09-03 18:12:23]
quad808 :
I have to tell you...the Anafi is top 2 fav. drone that I have. It's excellent!!!
[2019-09-03 18:14:02]
quad808 :
Now, completely unlocked and all the features it has? Wow. Theory....maybe because of the tarriffs on the chinese drones, this is their way of getting the word out for more sales of the Anafi. Hmmmm....maybe have to pick up another one, just because of this unlock!!
[2019-09-03 18:15:20]
d95gas :
Yes very possible..... No announcement from Parrot on hiking up their prices. In fact the recent release of the Anafi FPV, is also a pretty good price.
[2019-09-04 03:25:01]
quad808 :
confirmed. Turned off geofence in Safety page, altitude and distance greyed out. Windy conditions, just flew 1000' straight up. Would have kept going, but started to loose signal. Time for boosters. LOL
[2019-09-04 06:42:04]
d95gas :
bloody awesome, the little beastie done good then :slightly_smiling_face:
[2019-09-04 17:26:02]
quad808 :
thanks for the heads up and for grabbing the file as soon as you could. Looks like Parrot may have made changes already...too late....LOL
[2019-09-04 17:58:47]
d95gas :
:slightly_smiling_face: Couple of peeps are reporting that when they go to take-off the Anafi bunny hops and shuts off, but they can hand launch just fine. But the majority of users are not reporting these issues. I think it guaranteed Parrot will release an updated firmware to close the door, but I am guessing at the moment they are getting swamped with requests regarding their dodgy firmware they released from their own website, to therefore have a responsibility to anyone who screws their drone up, or even lose it.......
[2019-09-04 18:08:05]
quad808 :
Hmmm....I did a hand launch yesterday...why would you ever not use hand launch? Its fantastic!
[2019-09-04 18:10:29]
quad808 :
Oh, and on the subject of hand launch....it took me forever to realize that once you turn on hand launch you don't need to touch the screen to launch, you can push the button on the RC...DOH!
[2019-09-04 18:13:46]
d95gas :
Never tried it, but yes you are right, why would you not use it if its there and safe, certainly keeps the drone away from crap and dust on the ground
[2019-09-04 21:14:47]
quad808 :
Just bought alientech mod for Anafi...will try external antenna...see if that helps boost signal reception
[2019-09-04 21:15:36]
quad808 :
Just to clarify....I didn't buy their panel antenna, just the mod for external antenna...looks like a nice solution
[2019-09-06 17:36:11]
d95gas :
have you seen one of the mods done by the guys on Parrot forum basically an aluminium dish around the antenna and he is getting just under 7Km
[2019-09-06 17:42:50]
quad808 :
yah, i saw that. Thought about doing that, but then went and ordered the Alientech mod anyway...
[2019-09-06 17:43:17]
quad808 :
I already have external antennas I can try.
[2019-09-07 04:30:16]
d95gas :
Be interesting to hear how you get on, along with some pics
[2019-09-07 22:07:12]
quad808 :
WIll post here for sure and let you know. Poke me if I forget!!
[2019-09-10 02:57:57]
quad808 :
@d95gas Anafi RC mod done. Easy and the alientech part fits like a glove. I just followed this video: <https://youtu.be/M5K242q9RAk>
[2019-09-10 02:58:22]
quad808 :
haven't tested yet, but super simple mod
[2019-09-10 02:59:26]
quad808 :
darn. Now I have to get a different case for it. RC won't fit anymore...LOL
[2019-09-19 18:22:50]
quad808 :
Just to give an update on changing the Anfi antenna. Finally did some testing with several antennas. Titan drones rubber duck antenna, FPVLR "boobie" antenna, Titan Drones long rubber duck antenna and after market antenna...none work as well as stock, 2.4 or 5.8 so far. I have the Alientech panel antenna on order. The antennas I have tried so far were not boosted, so stock. I did try the titan drones booster with the FPVLR antenna once, and the results were better, about on par with the stock antenna, but this was a very limited test. Will update when I get the alientech panel, which should be today.
[2019-09-19 19:13:13]
nocommie :
Wow, good info.
[2019-09-19 21:44:18]
quad808 :
The results could be because the antenna I used were all for 2.4ghz, and even though I put the FF network to manual and chose a 2.4g channel, which was better than 5.8 in results, still was not good. After I do all the external testing, if results are not any better, I will go back into the RC and connect up the stock antenna and test again to compare. Because of the design of the RC, you don't have to remove the stock antenna, just disconnect it.
[2019-09-23 02:13:13]
quad808 :
Still testing, but the Alientech panel antenna is a win so far. Because of the "swival" design, (brilliant really) so easy to keep it pointed at the drone.
[2019-09-23 10:14:33]
chipmangini :
@quad808 Are you amplified?
[2019-09-23 17:41:04]
quad808 :
I have tested both, but only tested the Alientech not boosted yesterday. The Titan Drones booster is easy to use on the Anafi RC, but that boosters amps are only 2.4G I believe. Not much difference, but have not tried the alientech boosted yet. I did test distance with the alientech and manually set FF to manual and chose a 5.8Ghz channel...wow. Solid signal over 2000' out, didn't lose a single bar, and this is over heavy wifi area. That was at the end of my battery, so will need to do more testing with that.
[2019-09-23 20:56:04]
chipmangini :
@quad808 Yeah, I have literally almost all of the Titan gear, including a Switch Amp, with all of the "Rubber Duck" omni's as well as 2 directional panels, and a Command Case Mini. All of them are 2.4. I also run a FPVLR amplified "Boobie" setup too. I just got that thing, and it shows real promise to be in the middle of directional's & the omni's. I haven't had the time to do some real comparisons, but where I live, in a valley in a heavily wooded area, the FPVLR Boobies have been awesom! <https://fpvlr.com/product/long-range-boosted-kit-for-phantom-4/>
[2019-09-23 20:59:18]
chipmangini :
As well, the Titan directional panels seem to get better penetration thru the woods, but are, well, directional, so you need to really be aware of where you are, and pointing the panel. You cannot fly behind you for any appreciable distance with the directionals..//
[2019-09-23 21:05:27]
quad808 :
Yep, my experience as well. The FPVLR boobies are my favorite antenna so far, but I haven't put it head to head with the Alientech antenna. That one does 2.4 and 5.8. The great thing about the Titan system is super easy to try different antennas for your flying area to see which works best. Love it. One of the best drone investments I have ever made. I can now use it on all my drones... Anafi, Evo, Mavic, P4adv.
[2019-09-23 21:07:44]
chipmangini :
Oh, and since I live where it's cold, and hot, I got the Titan Car Kit so I can fly from inside my car...<https://www.commandcase.com/online-store/Car-mount-kit-p95137918>
[2019-09-23 21:09:27]
quad808 :
LOL...I bought the same thing. I think I used it once...you?
[2019-09-23 21:10:55]
quad808 :
For extra stealth flying, you can fly from inside your house...just stick it out the window....LOL!
[2019-09-23 21:12:40]
chipmangini :
Haha, it's not cold enough yet, but trust me, in New Hampshire, I will this winter!
[2019-09-23 21:15:37]
chipmangini :
Just some of th"stuff"
[2019-09-23 21:16:54]
chipmangini :
And the "Boobies" with Crystal Sky..
[2019-09-23 21:17:38]
quad808 :
For any of you following along, if you fly in wifi congested areas, the Titan system is a sure WIN! Thats why I bought it. At a minimum it will ensure you have stronger signals from your RC to the drone and back. FCC mode will only get you so much improvement over CE mode, and running your RC boosted all the time is out of spec and "may" overheat your RF chips.
[2019-09-23 21:17:48]
quad808 :
Very nice!
[2019-09-23 21:19:12]
chipmangini :
I set up all of the FPVLR stuff with the same Quick disconnect connectors as the Titan stuff so I can swap antennas & amps too. Can you spell flexibility? :stuck_out_tongue_winking_eye:
[2019-09-23 21:20:20]
quad808 :
Yep, so great. Have you compared the FPVLR setup to the Titan? Performance must be similar if using the same antennas??
[2019-09-23 21:28:12]
chipmangini :
I'm pretty sure that they use the same amps, but the Titan setup is just sooooo easy to swap stuff out to suit what where & what you're doing. No reason for me to try the Titan antennas on the FPVLR amps, because the Switch, and Command case are so flexible. Because you brought it up, I may just go and compare next weekend!
[2019-09-23 21:45:23]
chipmangini :
@quad808 I had a Titan Command Case V1 which had the directional panels built in to the cover of the case, but decided that it was too cumbersome so I had James make me a Command Caser V2, and put the directional panels in this custom panel. It's huge, and heavy but works awesome!
[2019-09-23 21:46:08]
quad808 :
Now that is one huge panel antenna
[2019-09-23 21:46:37]
quad808 :
Must be two in there?
[2019-09-23 21:47:13]
chipmangini :
Yes!
[2019-09-23 21:47:22]
chipmangini :
I would imagine that all of these mods would work with the Anafi (Christmas?) with just a few modifications, right???
[2019-09-23 21:48:55]
chipmangini :
You would just need the adapter to the Anafi Controller., wouldn't you?
[2019-09-23 21:57:49]
quad808 :
Yes, thats what I did. Alientech sells an easy to use system, so I first bought the Anafi kit, then picked up their Panel antenna after I did some testing. <https://alienth.cn/products/the-bracket-with-cables-for-remote-control-rc-of-parrot-anifi-by-alientech-design?_pos=1&_sid=afee6f190&_ss=r>
[2019-09-23 22:00:06]
quad808 :
When I received it, it is different than the picture. The antenna leads were already mounted in it and there were no extra pieces as pictured. Super easy to mod. Open up the RC and replace the connections, leaving the internal antenna intact. You could easily swap back to stock if you wanted to.
[2019-09-23 22:05:54]
quad808 :
The bad with this bracket, is...tight for your finger to tilt or zoom the camera, AND the USB connection when using their Alientech panel, leaves it a little cramped around the usb connection area. I solved that with a USB angle piece.
[2019-09-23 22:07:53]
quad808 :
Perfect fit on the controller though. Just like it was factory made. I don't think it is 3D printed either, injection molded piece.
[2019-09-23 22:08:38]
quad808 :
I can take a picture of the setup when I get home and post it.
[2019-09-23 22:09:26]
chipmangini :
Yeah, I watched the video! It seems that they use the same QMA, quick disconnect jacks on them?? If they do and the Anafi runs in 2.4, our setups could be great for them too!
[2019-09-23 22:10:01]
chipmangini :
As Titan uses....:stuck_out_tongue_winking_eye:
[2019-09-23 22:32:46]
quad808 :
yes, same jacks...seemless
[2019-09-23 22:36:40]
quad808 :
Anafi runs both 2.4 and 5.8. My testing on manual selecting a 2.4 channel, and using the rubber duck, and FPVLR antenna was no better than stock(not boosted) It was a very poor test, and I only tested altitude, not distance. The same test using the Alientech panel, results were much better. (not boosted) Letting the FF software chose Auto signal was worse in results for all antennas. Setting FF to manual and picking a 5.8 channel, resulted in a way stronger signal, but I only tested a very short flight. I don't trust my results yet.
[2019-09-23 22:39:37]
quad808 :
The width between that antenna connects is exactly the same width as the other RC's, and Titan system, so you can snap on the Alientech to any controller the FPVLR can snap onto without changing anything.
[2019-09-23 23:14:42]
chipmangini :
@quad808 Thanks for that great information! My P4P runs both 2.4 & 5.8, but since I live in a rural community I don't really have any 2.4 interference. No need for 5.8, and it won't fly as far (without amps) as 2.4 just by the nature of the way frequencies work. As I continue to test with my system, I will keep you and the rest of the community apprised. Peace. Out......
[2019-09-24 18:52:58]
quad808 :
Alientech connected to Anafi RC. Lots of range of motion. Had to add a angle USB connector for easy connect and disconnect of cable. Normal USB cable can connect, but you need to remove the Alientech panel before connection. Easy pop off though.
[2019-09-24 18:54:26]
quad808 :
definitely plastic and not 3d printed. Very good fit to the RC, and not heavy, even though it looks heavy.
[2019-09-24 20:31:43]
chipmangini :
Wow, it lQQks nice! I like the ability to adjust the angle of it!
[2019-09-24 21:36:09]
quad808 :
Yes, definitely a plus! Thats what is missing with panel antennas. You are kind of forced to hold the RC, maybe at an unnatural angle to keep the drone in the "beam"
[2019-09-24 22:12:43]
chipmangini :
@quad808 Unless you're shooting for altitude, vs distance/penetration, they seem to work fine..
[2019-10-07 22:12:59]
chipmangini :
Not Anafi, but has a Parrot (based?) controller. Made in USA. Bought one to be delivered January: <https://www.theverge.com/2019/10/1/20892377/skydio-2-drone-autonomous-self-flying-camera-controller-price-release-date-announcement>
[2019-10-07 22:15:02]
nocommie :
Parrot controller but they don't share anything else. The Parrot SDK is not interchangeable as an example.
[2019-10-07 23:06:54]
quad808 :
yep, looks like we all signed up to get one...can't wait.
[2019-10-07 23:07:25]
quad808 :
I will definately be buying the RC.
[2019-10-13 04:01:55]
quad808 :
on off switch. Thanks to @nocommie for the idea and how to. This took way to long to do, but worth the time to do. You need to wire a switch to replace the one that is there. The Anafi RC does a shutdown procedure with the switch, so unknown if you just wire the battery to a switch if long term damage might happen since you just cut power.
[2019-10-15 14:20:54]
green.richard :
@quad808 Now that my Anafi is out of warranty I am interested in fitting an on/off switch. Your setup looks very neat. Do you have a link to the switch that you used?
[2019-10-16 01:57:28]
quad808 :
sure...<https://smile.amazon.com/gp/product/B07PRWBYR2/ref=ppx_yo_dt_b_asin_title_o01_s00?ie=UTF8&psc=1>
[2019-10-16 01:59:45]
quad808 :
@green.richard its a bit tricky. You need to take apart the controller to get to the switch, then take apart the switch, and solder wires to the pad in the switch...at least thats what I did. Then ran the wires to the switch, but I didn't hard wire it, I used JST connector, so I can take the RC apart if I want and remove the battery cable and unplug the switch.
[2019-10-16 02:02:37]
quad808 :
I wanted the on/off in a spot that my hands didn't touch, AND because I have a modded RC anyway with the Alien tech, I chose that spot. It fits there, but I then used JB Weld epoxy to hold it in place. It's not going anywhere...
[2019-10-16 14:49:55]
green.richard :
@quad808 Thanks for the detailed info. I am used to soldering small smd parts but I will take care. I like the idea of using a JST connector so that the two halves of the case can still be seperated.
[2019-12-26 09:49:04]
trulala69 :
Merry X-Mas everyone!
[2019-12-26 09:51:39]
trulala69 :
Anyone here who did experiments with Anafi's battery? Over in one of the Anafi FB groups there're discussing the probable cause of all those midflight motor stop problems. It seems the 2 LIPO cells are not loaded balanced ... so I'm interested in modding the battery to load them balanced via an extra plug for example ...
[2019-12-26 09:52:14]
trulala69 :
Or changing the LIPO's with LION cells ... anyone did this before?
[2019-12-26 14:22:59]
nocommie :
My anafi thermal had one bad battery. Charged fine but mid flight it would drop to 0 volts and force land. Contacted Parrot support and they confirmed it was a bad battery and replaced it. It never just completely cut the motors though.
[2019-12-26 15:14:42]
trulala69 :
I found some information on <https://www.rcgroups.com/forums/showthread.php?3072280-Parrot-s-New-Drone-Anafi/page193> ... but I need a bit more detailed information on the cabling etc, but there's nothing available ...
[2019-12-26 15:20:02]
trulala69 :
A bit more detailed: <https://www.rcgroups.com/forums/showthread.php?3072280-Parrot-s-New-Drone-Anafi/page189#post40786863>
[2020-01-05 23:36:12]
shell :
<https://youtu.be/LwGDL1PeGK0>
[2020-01-05 23:36:55]
shell :
and yes, there are no Wi-Fi channel /power restrictions
[2020-01-06 12:53:20]
d95gas :
Thats good new :slightly_smiling_face:
[2020-01-06 12:53:43]
d95gas :
Are you still progressing on alternative application for the Anafi now that the SDK has been released ?
[2020-01-06 17:30:10]
shell :
getting the anafi to work was the easy part
[2020-01-06 17:31:05]
shell :
it’s getting the bebop 1/2, disco, mambo, SC1, and SC2 to work that has generated a ton of work for me… major changes / additions to the core parrot sdk
[2020-01-06 17:31:52]
shell :
i plan on giving the “unified” sdk back to the community
[2020-01-06 17:32:35]
shell :
something that annoys me is that parrot unnecessarily restricted the SC1 and SC2 from controlling the anafi but there’s no reason technically why they can’t.
[2020-01-06 17:33:40]
shell :
there’s a device identifier they present during discovery. it could likely be changed with a hex editor but isn’t something for the masses…. is actually easier to do on the SC1 than SC2
[2020-01-06 18:38:31]
d95gas :
All sounds really good news for the community. Bit of a dirty trick by Parrot on the controllers, but I suppose from their point of view it meant something else they could make money out of, although if they had looked at it another way, they potentially would of sold far more Anafi's to existing Parrot users with controllers, as the Anafi would have been that much cheaper.....
If you end up wanting testers, by all means shout, but I guess you will be inundated with offers. Thanks for all the hard work.
[2020-01-06 20:01:13]
shell :
i think they needed to get it (the anafi) to market
[2020-01-06 20:02:16]
shell :
everything flows from a backwards compatibility perspective. i can tell the devs weren’t given the time to do anything but the anafi implementation.
[2020-01-14 03:45:11]
shell :
<https://github.com/synman/groundsdk-manifest>
[2020-01-14 20:07:03]
jonas :
Does someone know which GPS-chipset the Anafi uses excatley? I can only find "Parrot GPS (G456)", but does Parrot really manufacture their own GPS chip? Thanks for your help
[2020-01-15 16:06:55]
shell :
i just finished up some ephemeris work…. name is on the tip of my tonque….
[2020-01-15 16:07:03]
shell :
Ublox
[2020-01-15 16:07:51]
shell :
this bad by
[2020-01-15 16:07:53]
shell :
<https://www.u-blox.com/en/product/neo-m8-series>
[2020-01-15 16:30:40]
shell :
here’s some more goodies (yes, parrot gave away their access token for ublox ephemeris)
[2020-01-15 16:30:42]
shell :
```<!-- API token used for U-Blox ephemerides download. -->
<string name="ublox_api_token">oVx4Rd6fVUeYzHfSWtSapA</string>
<!-- main U-Blox server URL, used to download GPS ephemerides. -->
<string name="ublox_ephemeris_main_server">
<https://offline-live1.services.u-blox.com/GetOfflineData.ashx?token=%s;gnss=gps,glo;period=1;resolution=1>
</string>
<!-- backup U-Blox server URL, used to download GPS ephemerides. -->
<string name="ublox_ephemeris_backup_server">
<https://offline-live2.services.u-blox.com/GetOfflineData.ashx?token=%s;gnss=gps,glo;period=1;resolution=1>
</string>
<!-- minimal interval between two ephemeris data download, in hours. -->
<integer name="ephemeris_download_interval">48</integer>
<!-- period during which an ephemeris is considered valid and can be uploaded to a drone, in hours -->
<integer name="ephemeris_validity_period">96</integer>```
[2020-01-15 16:31:31]
shell :
```<https://offline-live1.services.u-blox.com/GetOfflineData.ashx?token=oVx4Rd6fVUeYzHfSWtSapA;gnss=gps,glo;period=1;resolution=1>```
^^^ working example
[2020-02-08 12:36:23]
d95gas :
Warning regarding upgrading to the recent RC1 application and Firmware:
Parrot pushed a new app to the play store "FF6 RC1", which once installed updated the drone to Firmware 1.64. Since the update I am now locked to CE channels only. Note even FakeGPS will bring in the FCC channels.
Some have been fortunate and get locked to FCC (Even though they are in EU), other like me are locked to CE.
Strongly worded email to Parrot, but no response yet. This is the same situation we had last year where they released a dodgy app and firmware. So proceed with caution.
[2020-02-08 18:07:53]
quad808 :
Excellent. Thanks for the warning!
[2020-02-09 13:29:56]
d95gas :
I am totally locked out of FCC Channels now, although the very odd thing is that my channels on the Anafi are the same as what you would see on DJI FCC:
1 to 11 then 149 153 157 161 165
Tried every trick in the book and still wont budge, waiting for Parrot response on what they plan to do as they released dodgy software AGAIN!!
[2020-02-09 14:35:49]
trulala69 :
@d95gas I‘ve modified the FF6 to be always FCC like our friend on Anafi pilots taught us. Haven’t tried it yet. I can share it , if you want to try it, but it’s not compatible with the apilots version as I sign it with a different key...
[2020-02-09 18:26:45]
d95gas :
@trulala69 very much appreciate that buddy...... Will try anything now as them gits at Pilots seem to have screwed some of us over again with their "internal only" releases to the public
[2020-02-09 18:49:16]
trulala69 :
Interesting...
[2020-02-10 13:15:46]
d95gas :
@trulala69 - Installed your APK and still no joy. Only showing 1 - 11 then 149 153 157 161 165
Other odd thing, the APK would not install on my Huawei M5 8.4 - Just gave App Not Installed. Installed on my Huawei XT2 without issue
[2020-02-10 13:26:31]
d95gas :
ignore the bit about "failed install". I had dual profiles on the MediaPad and there was already a verion of the APK installed on the other profile. Now installed but no change
[2020-02-10 13:30:30]
trulala69 :
Sorry about that. As a lot is buried in the AC's FW, this might be the reason for your problem.
[2020-02-10 15:02:30]
d95gas :
Yes I am positive in my mind that the last firmware update locked me down. Have pointed out to Parrot this is not acceptable given i travel
[2020-02-12 21:27:10]
shell :
should have one of you setup as an [AR.Pro](http://AR.Pro) beta tester
[2020-02-12 21:27:15]
shell :
country code is unlocked
[2020-02-12 21:28:29]
shell :
ideally whoever is having the problem….
[2020-02-12 21:28:41]
shell :
i can generate a license / coupon code
[2020-02-13 06:05:31]
trulala69 :
I’m in for a beta test
[2020-02-13 08:13:20]
d95gas :
@shell .... Yes its me having the issues. Since I used the RC 1 version of FF6 and then did the 1.64 update, it seems to have locked me down to CE mode. No matter what I do I cannot get FCC channels.
[2020-02-13 08:13:22]
d95gas :
Cheers
[2020-02-13 15:58:46]
shell :
@d95gas send an email to shell at [shellware.com](http://shellware.com)
[2020-02-13 15:59:21]
shell :
i’ll get a coupon cut for you and a beta invite
[2020-02-13 18:58:24]
d95gas :
Awesome. Thanks
[2020-02-14 15:13:41]
d95gas :
Finally response from Parrot after another one of their dodgy releases of FF6:
"*Kindly note that the EC-lock is in compliance with the European regulations, and there's no solution around it.*"
[2020-02-14 15:14:01]
d95gas :
I think they need to speak to the many 100's of users in CE who are using FCC :slightly_smiling_face:
[2020-02-14 15:36:49]
kilrah :
well what would you expect them to say when they are required to comply?
[2020-02-14 16:39:40]
d95gas :
:-)Well that wasnt the question that was asked of them. They were asked if they had locked it down because when in USA with the device, it is still locked to CE mode and no FCC channels....... Unlike the Mavic mini, the device isnt specific to the country of origin .
[2020-02-14 16:40:04]
d95gas :
The question to them was around the roaming and channel switching that seems to have been removed
[2020-02-14 18:22:35]
d95gas :
Looking at how Parrot has done this bit of trickery..... It looks like when the 1.64 update for the Anafi is pulled down, it looks at the FF6 app on the device to see what mode its in (CE or FCC), then locks the Anafi to what it finds.
How did I come to this conclusion...... Other who did the firmware update did so from the modded APK which forces FCC mode, so all those guys (and girls) have locked FCC mode.... which is great.
However, a load of us FIRST did the update of FF6 from Google Play, which was the FFC RC1 application, this defaulted us back to whatever mode we should be in for our Country.... CE in all our cases. Then did the 1.64 firmware update, which then looked at FF6 RC1, which by now was showing as CE mode, and therefore locked us into CE mode.
Had we stayed with the modded app, we would not have had this problem.
One option that I have thought about, was way back when Anafi first came out, the only way of getting FCC mode was to patch the "mppd" file. Just wondering if there might be some option through ADB to find where Parrot have done the lockdown? Something I will have a play with tomorrow, but my knowledge on these things is very limited...... but you have to give it a go.... Thats what got me into this trouble in the first place :slightly_smiling_face:
[2020-02-14 18:29:34]
trulala69 :
I wish you luck! If they've done a lock down, which is absolutly stupid, then probably in the AC FW. You've tried to inject FCC via the modded App, but it still stays in CE, from what I recall, mppd did the same, but on the AC. I hope you'll get that fixed and I still believe it's one of Parrots "accidents" again ... Somebody explained, Parrot has a very complex mechanism, which decides what channels and CE/FCC mode to chose depending on location and some more criteria and this mechanism is buggy ...
[2020-02-15 08:55:09]
d95gas :
Yes, I have a feeling I am not going to be very successful, but have to try. I have a new device setup, Region set to USA, Fake GPS running, and both Google Maps and the FF6 map shows me in the middle of New York. Later I will plug in the controller and do a reset on that, before attaching the Anafi, doing a full reset and booting it all up. I have the Modded APK on the device.
Apart from that there is very little I can do.
[2020-02-15 11:46:44]
d95gas :
@shell Just wanted to check you received my email ok? Weird crap going on with provider at the moment. Thanks
[2020-03-01 19:05:27]
shell :
yup
[2020-03-01 19:05:41]
shell :
responded today — have a been a smidge busy with other things
[2020-03-01 19:05:48]
shell :
a bunch of instructions included
[2020-03-01 19:05:57]
shell :
@d95gas
[2020-03-02 06:43:30]
d95gas :
:+1::grinning:
[2020-03-12 00:03:54]
shell :
<https://forum.developer.parrot.com/t/problems-with-country-selection/10352>
[2020-03-12 00:04:26]
shell :
Let’s see how this goes now that I’m able to recreate this myself.
[2020-03-12 00:20:09]
shell :
o.O
[2020-03-12 00:20:11]
shell :
<https://forum.developer.parrot.com/t/isocountrycode-doesnt-work/10340>
[2020-03-12 00:20:34]
shell :
the auriga guys complained too it seems
[2020-03-12 06:47:58]
d95gas :
:+1: I shall keep praying that Parrot realise what they have done and how this could impact their business...... Or we find an alternative away around this lock down thats screwing everyone over
[2020-03-12 14:15:26]
shell :
it could actually get them into trouble with regulators
[2020-03-12 14:15:34]
shell :
for example, I could take my drone to Japan right now
[2020-03-12 14:15:53]
shell :
and trounce over all the 5ghz channels that are not supposed to be used there
[2020-03-12 14:16:23]
shell :
the 5ghz channel list is considerably different for JP… i was able to capture it while my drone was briefly configured in Japan
[2020-03-12 14:18:10]
shell :
I think you’re right regarding the timing of the break
[2020-03-12 14:18:32]
shell :
it is based on whatever country code was active / stored when the 1.6.4 firmware was applied
[2020-03-12 14:18:58]
shell :
it’s a shame we can’t get remote access to the drone because it’d be as simple as hacking the onboard config file to work-around it
[2020-03-12 14:19:47]
shell :
hmm
[2020-03-12 14:19:57]
shell :
wait, you never actually traveled to France though
[2020-03-12 14:20:24]
shell :
so i dunno … i did ask at one point where you purchased your drone… not sure you said
[2020-03-12 14:20:46]
shell :
in all my years playing with parrot drones I’ve never seen a “country of origin” indicator
[2020-03-12 14:21:13]
shell :
maybe its baked into the bootloader
[2020-03-12 14:21:20]
shell :
bootloader / kernel
[2020-03-12 18:42:29]
d95gas :
Purchased from Amazon UK, so I suppose its possible its been set like that from the start, and with now having these issues, your work has discovered it :slightly_smiling_face: Remote access shouldnt be an issue, can always use either Bomgar or Teamviewer, or depending on where you are located, ship it to you.
I dont have the skillset to start writing to the filesystem, but always keen to learn...... I just want the bloody thing back to how it was..... I just hope Parrot are not taking a leaf out of DJI's books.
Just to say definitely appreciate the help you have given to bottom this out.
[2020-03-13 15:11:33]
shell :
that’s the problem… WE have no ability to gain r/w access to the FS
[2020-03-13 15:11:47]
shell :
Parrot continues to keep it under lock and key
[2020-03-13 15:12:08]
shell :
another thought I had was that FR might just be their “EU” designation
[2020-03-13 15:12:29]
shell :
i imagine regulations are consistent across EU states… even the UK
[2020-03-13 15:12:47]
shell :
my drone ALWAYS defaults to US … no matter what I try
[2020-03-13 15:12:57]
shell :
your drone ALWAYS defaults to FR
[2020-03-13 15:13:17]
shell :
I wonder what an “Asia” drone would default to…. one targeted for China vs Japan for example
[2020-03-13 15:13:58]
shell :
i’m guessing they (Parrot) bootloaders / localization defined roughly around regulatory boundaries….
[2020-03-13 15:14:26]
shell :
I may also be giving them too much credit….. Knowing what a “japan” drone defaults to would definitely confirm my theory
[2020-03-13 15:15:51]
shell :
prior to 1.6.4 the drone honored whatever country code we passed in so long as it is in “manual” mode … something configurable via the SDK.
[2020-03-13 16:10:16]
d95gas :
I shall give Japan a try later :slightly_smiling_face: This update and crippling users is causing a great deal of upset, many users put their Anafi up for sale, others asking for advice prior to purchase are being told to go find something else.
They have screwed it big time. Few guys in US and CA who are locked to CE, which would really hack me off. For me its not the end of the world, its keeping me legal so to speak, and if I really want to fly any distance I just fall back to the Mavic Pro.
The main issue people are having is the loss of faith in Parrot, the last 2 firmware updates have caused so many problems for people.
I know way back there was talk of "NLD" doing something for the Anafi..... Dont know if they have managed to gain write access or not.
We need someone to work the magic :slightly_smiling_face:
[2020-03-13 17:33:40]
d95gas :
@shell I understand that when you connect to the gui on Anafi via its IP address (192.168.42.1), there is a menu option to upgrade/downgrade the firmware. I have only come across one post where someone tried downgrading and kept failing.
Have you had a look at this area at all.?
We have a copy of the 1.63 firmware which is the good version, and the ideal scenario would be to rollback to that version, rather than the crap Parrot have pushed out.
[2020-03-13 17:54:50]
shell :
on the drone’s filesystem is a file called version.txt
[2020-03-13 17:55:02]
shell :
inside version.txt is the actual version # of the firmware
[2020-03-13 17:55:30]
shell :
if the version extracted from the firmware update is less than what is stored in version.txt the update will not continue
[2020-03-13 17:55:53]
shell :
we worked around this on bebops and ardrones by setting version.txt to “0.0.0”
[2020-03-13 17:56:56]
shell :
rinse and repeat
[2020-03-13 17:56:57]
shell :
WE have no ability to gain r/w access to the FS
[2020-03-13 17:57:22]
shell :
don’t bother trying to set it to JP
[2020-03-13 17:57:25]
shell :
it won’t matter
[2020-03-13 17:57:41]
shell :
the wifi channel list will change for about 1 second
[2020-03-13 17:57:50]
shell :
and then revert back to “FR” in your case
[2020-03-13 17:58:25]
shell :
it’s the other case that would be good to learn about…. someone who bought a drone in japan and lives there
[2020-03-13 17:58:45]
shell :
really any region that hasn’t different regulations from the US and EU
[2020-03-13 18:35:56]
d95gas :
Ok so looks like its a sitting and waiting game to see what they do with the next release of the firmware. To be honest it doesn't bother me too much being locked to EU channels, as I dont fly outside of VLOS anyway..... too chicken :slightly_smiling_face:
I just dont like manufacturers like DJI & Parrot, changing the makeup of the device AFTER I have spent good money to purchase it. In the case of Anafi advertising, misleading users into thinking they are going to get 4Km transmission range, instead of telling them you only get that if you are in a FCC area, you wont get that in EU :slightly_smiling_face:
Oh well, maybe time to dust of the MP and take that for a spin. Thanks for your help and advice. Still happy to continue doing stuff on AR.Pro4 :+1:
[2020-03-13 19:24:03]
quad808 :
@d95gas I totally agree with your point about changing the device's core abilities, AFTER purchase, without having the ability to roll those changes back if one wants to.
[2020-03-13 21:24:22]
d95gas :
Yep it's a real bummer..... DJI Trickery
[2020-03-13 21:25:04]
shell :
my gut tells me they are going to have a fix out in the next couple weeks. I’ve seen them turn stuff around fairly quickly once it’s spelled out.
[2020-03-14 10:32:47]
d95gas :
:+1:
[2020-03-20 23:38:43]
shell :
new firmware 1.6.7 is out
[2020-03-20 23:38:53]
shell :
or so i just read on FB
[2020-03-21 01:24:15]
shell :
no change
[2020-03-21 01:24:17]
shell :
still broke
[2020-03-24 14:07:45]
jcase :
@d95gas what did parrot do
[2020-03-24 14:12:16]
d95gas :
Synman is more knowledgeable in this area. But basically Parrot upgraded firmware to 1.64. Part of that firmware it seems they tried to lockdown the Anafi by preventing CountryCode being changed on the Anafi itself.
So now we have users in FCC area that are locked to CE mode, and Users in CE totally locked to that BUT, it seems they have locked it to the country of origin, ie in my case I am UK, but Anafi is locked to FR.
There are other issues with the firmware that caused birds to drop out of the sky, as well as other issues.
They pushed out a new Firmware 1.6.7 which was supposed to fix the CountryCode but it hasn't.
Developers of other software for the Anafi are screwed because of this country lock.
I did some logging with "Synman" and everytime I changed country, within 20ms it locked me back to FR.
[2020-03-24 14:27:59]
jcase :
intereting, how do you change it?
[2020-03-24 17:23:09]
d95gas :
Synman is developing an application for the Anafi. through his application there is a menu option to allow you to select your country [countrycode].
[2020-03-24 17:28:11]
d95gas :
Its allows me to select any of the available countries, which is all of them, but within 20ms it locks it back to FR. We cannot understand why FR as I am GB based, the only reasoning is the "Country of Origin". I purchased it in the UK, have never been to France, and never set it to work in FR, but the bloody thing is now locked to it.
Developers like Synman and others are very unhappy with Parrot, as at the moment it is stopping them releasing their software. What we need is the ability to have "write access" to the Anafi in order to find out what its doing and now to change this element.
Its pi$$ed Parrot users off massively, and has caused a significant number of Anafi's to literally fall from the skies. They just brought out v1.6.7 firmware a couple of days back, but I think this was just a rushed dirty fix because so many were dropping.
Look at their release notes, and it has guilt and blame written all over it:
**Regarding the stability issued that some users experienced with drone version 1.6.5, we did our utmost to deploy quickly version 1.6.7. It ensures our users stability and safety in their flights.**
**Battery firmware update is not supported in version 1.6.7, but it will be available again soon. This functionality is not linked in any way to the issues encountered on version 1.6.5, you can use updated batteries to fly without any risk.**
[2020-03-24 17:30:35]
jcase :
what is the difference if FR and GR as far as feature set
[2020-03-24 18:23:12]
d95gas :
With either UK, FR, GR, DE - These are all CE countries so lower output. US, CA = FCC = Higher Power. And we have all had access to FCC for some considerable time. Parrots way of trying to go all "Legal" and enforce users. Only they totally screwed it up :slightly_smiling_face:
[2020-03-25 12:49:01]
freaky123 :
I haven't followed this but are the drones falling out of the sky randomly?
[2020-03-25 18:56:29]
d95gas :
In general anything that did the 1.6.4 update and then did the 1.6.5 update which incorperated a full battery firmware update, seem to be dropping out of the skies. some have managed to get down to a low level and opt for the best case landing. Others have literally had them stop mid-flight and drop like a brick, and busting the Anafi.
Parrot accepted that this issue existed because they tried to rush a firmware update out, but in fact just added to the existing problems.
[2020-03-25 19:00:55]
d95gas :
1.6.4 is where it all starts. From that point on, its been a total disaster, so much so that users are now grounding their drones and waiting for the next release to see what that brings. The statement that Parrot put on their site, which were the firmware notes, left them wide open, I think nearly everyone I know has done a screenshot of that page as insurance :slightly_smiling_face:
Again.... We need write access in order to find out what the heck they have done.
Some users are reporting they have found a way around getting FCC back, as the FCC channels flash quickly on the screen. I personally just think what they are doing is a software switch, and they may see the FCC channels, but I doubt the Anafi has actually switched to the higher power that FCC offers.
[2020-03-26 14:22:36]
freaky123 :
I have problem to connect to the skycontroller adb
[2020-03-26 14:22:42]
freaky123 :
is that also blocked with the new firmware?
[2020-03-26 14:22:56]
freaky123 :
or is there a workaround?
[2020-03-26 14:23:12]
freaky123 :
@d95gas
[2020-03-26 15:28:55]
htcohio :
Hello,
I have previously asked questions about the DJI gimbals.
Below is one of the connections and PCB for the DJI Mavic Pro.
The mavic pro has MP6536 motor drivers on each axis.
The Mavic AIR appears to have the same motor driver installed on the main PCB instead.
Both appear to use STM32F303 MCU controllers.
My primary interest is being able to control tilt and yaw with traditional RC signals. I do not need the stock camera at all so, my primary objective is to be able to control the motors using the hall sensors + custom pcb breakout for motor control.
On the Mavic Pro it appears to be Hirose DF37 34 Pin connector.
Has anybody accomplished anything like this with any of the gimbals?
Also, as far as you know, are the drivers and MCU encrypted in any way or is it all open if the correct adapter PCB can be made?
Thanks.
[2020-03-26 16:45:16]
d95gas :
@freaky123 I haven't tried adb just lately but will give it a go over the weekend, but nobody has mentioned it being blocked.
[2020-03-26 18:22:52]
d95gas :
@htcohio Think you have posted in the wrong section - This is the ANAFI section
[2020-03-26 22:09:25]
htcohio :
Ahh, ok sorry, Thanks!
[2020-04-08 00:41:10]
shell :
next firmware will have the country code fix
[2020-04-08 05:13:28]
d95gas :
Yeahhhhh Fingers crossed :slightly_smiling_face:
[2020-04-11 22:08:11]
mainframe :
Auriga Anafi app beta seems to be out - should allow to set country code manually. Will test it out tomorrow if time permits.
[2020-04-12 06:41:05]
d95gas :
Wont allow it until Anafi push out and updated firmware with the corrected configuration. They locked out the Countrycode in 1.64. We are waiting for them to update the firmware, they have been promising the Devs that it will be released soon.... for weeks.
[2020-04-20 13:30:35]
shell :
It is my understanding they won't come out of beta until Parrot releases the fix.
[2020-04-20 15:31:02]
shell :
<https://www.sammobile.com/samsung/galaxy-tab-active-pro/specs/#SM-T540>
[2020-04-20 15:31:11]
shell :
i’m considering ^^^ as a new test device
[2020-04-20 15:31:45]
shell :
biggest driver is a solid GPS and barometer — good luck finding a tablet with a barometer
[2020-04-20 16:42:29]
d95gas :
Sounds perfect...... Just wondering if I can sneak one through work, We have dozens of the Samsung Tablets for the hospitals, sure they wont see me sneak one of these in :slightly_smiling_face:
[2020-04-20 16:49:12]
d95gas :
**Video Recording Resolution**
UHD 4K (3840 x 2160)@30fps Love it :slightly_smiling_face:
[2020-04-20 16:53:21]
d95gas :
£634 inc vat here in the UK, so not cheap, but has great specifications. would be interested to learn what its like out in the daylight, see how it would compare with something like the DJI Tablet.
[2020-04-20 17:12:13]
shell :
i just bought it
[2020-04-20 17:12:29]
shell :
found a “sealed NIB” one on ebay for like $450 USD
[2020-04-20 17:13:17]
shell :
i read some reviews (on a parrot forum actually) that say it’s solid for daylight…. built for it apparently … this tab may be the one they marketed for military
[2020-04-20 17:13:29]
shell :
or a variation of it
[2020-04-20 17:18:03]
d95gas :
Yes def validated for military according to what I have been reading. that is a fantastic price you just got it for. Be really interested in your feedback on it, especially using outside in the sunshine.
Just gone through a list of tablets, and the only other with the barometer is the iPad Air 2 - and I hate Apple with the passion. Sony Xperia Z4 has barometer, but no upgrade of Android beyond V5, which is a waste of space. I am going to be chasing work tomorrow to see if we can get any buy in discounts for "Testing Purposes" of course...... We already have around 2000 Samsung Tabs.
[2020-04-24 20:58:57]
shell :
@d95gas i see a crash in the beta
[2020-04-24 20:59:00]
shell :
related to settings
[2020-04-24 20:59:48]
shell :
the stacktrace is tied up in google land
[2020-04-24 21:00:19]
shell :
so i can’t determine what caused it (looks like i have an opportunity to add some more metadata
[2020-04-24 21:00:30]
shell :
do you remember which settings pane you tried to go into when you got the crash?
[2020-04-25 07:13:19]
d95gas :
The honest answer is no, I dont remember. But whats more, I didnt see it crash!. I was just going through all the panels to see what changes/options there were. I certainly didnt get the app crash out on me. I will run through them again this morning and see if I can replicate whatever it was.
[2020-04-25 12:01:41]
d95gas :
Just been through all the options again and all performed as expected. no crashes or anything. So its odd why you got that notification. Going to hook up the controller and Anafi after lunch and have a run through it with those connected.
[2020-04-26 15:50:47]
shell :
I've been pretty productive as of late on this update. All the mavlink compatibility issues have been addressed (ironically the Bebop handles progressive transitions much more smoothly than the Anafi). There are some additional track me items I want to pursue related to lookat and animations. And I need to finish up proper axis/button mappings for the SC1 and SC2.
[2020-04-26 15:52:12]
shell :
I'm sure there are some major regression issues for the B1. I need to decide how to carry features back to it when the drone firmware itself has zero provisions for the functions.
[2020-04-26 17:03:51]
d95gas :
Now we just need Parrot to correct their screw-up's. I emailed the CEO @ Parrot, unfortunately he didnt respond, but Chris Roberts the VP at Parrot responded and have been communicating with him over the issues and the amount of Anafi's that are now just a pile of broken bits because of their latest firmware and battery updates. He has said he will investigate and try and get information on when the issues will be corrected, so I'm keeping fingers crossed that they do actually listen and do something. Looking forward to al the developments you keep pushing out on your application :+1:
[2020-04-27 19:00:17]
shell :
the active tab arrived today
[2020-04-27 19:00:21]
shell :
this thing is really nice
[2020-04-27 19:00:40]
shell :
i’ve never been an ipad fan…. this thing puts it to shame IMHO
[2020-04-27 19:01:14]
shell :
did. some really cool stuff related to POIs and animations over night
[2020-04-27 19:01:35]
shell :
need to test it out in the real world today (there’s only so much you can do in sphinx)
[2020-04-27 19:02:29]
shell :
basically, drop a POI on a map, hit Track Me, drone goes into POI Piloting mode….. gaz/pitch/roll still works but the drone stays locked on to the POI
[2020-04-27 19:03:22]
shell :
you can then apply some animations like Candle, Dolly Slide, Parabola, and Vertigo to it
[2020-04-27 19:04:17]
shell :
I imagine FF6 has something similar… was neat to see it all come together last night
[2020-04-28 16:30:25]
d95gas :
Wow this sounds awesome. Very interested to hear what the tab is like in bright sunshine, as you said previously, hopefully should be good as its all based on Military specifications
[2020-04-28 16:30:43]
d95gas :
Lot of work gone into your application, just need Parrot to pull their finger out now.
[2020-04-29 00:58:51]
shell :
<https://youtu.be/rn6vMGl5pRA>
[2020-04-29 01:02:52]
shell :
<https://youtu.be/BnKR_Z4JsNU>
[2020-04-29 01:11:30]
shell :
<https://youtu.be/asHkyX5d07w>
[2020-04-29 01:12:37]
shell :
<https://youtu.be/hQn7pNGPUzE>
[2020-04-29 01:14:20]
shell :
<https://youtu.be/3Hz0C8eNwJ8>
[2020-04-29 07:37:17]
d95gas :
:+1: Awesome job ..... Now you are going to disappoint me and tell me they wont work on the Anafi :disappointed: Or will they be available to all via [Ar.Pro](http://Ar.Pro) once the full package is released?
[2020-04-29 13:00:13]
shell :
All of those videos were produced on the Anafi.
[2020-04-29 13:00:39]
shell :
The Bebop2 supports a subset of them (no vertigo)
[2020-04-29 13:01:05]
shell :
And the Bebop1 supports none (natively). All it'll do is flip.
[2020-04-29 13:01:26]
shell :
Except mavlink... Mavlink is supported across all goes aware drones.
[2020-04-29 14:14:05]
d95gas :
Aww wow, now you are giving me itchy thumbs :slightly_smiling_face: but must resist at the moment..... Crap weather, and worried about last firmware, another 3 on the forum lost their Anafi's this week, all on 1.6.7 and done the battery firmware.
So how long do you think before you go public Beta release? Whats the timescale you have planned to release date. Any problems with me linking the videos on the forum?
[2020-04-29 14:15:43]
d95gas :
Just watching the vids again and I have just noticed "no controller" you are doing everything from the tablet...... Awesome......
[2020-04-29 15:51:14]
shell :
i won’t do a public beta
[2020-04-29 15:51:31]
shell :
i may do a campaign to repopulate the internal test group
[2020-04-29 15:52:14]
shell :
i think i’m on beta 5 right now
[2020-04-29 15:52:40]
shell :
will release beta 6 once i’m done with some SC3 specific settings stuff i’m working on… i want to get the Settings panel for it wrapped up
[2020-04-29 15:52:52]
shell :
unblocks SC1/SC2 settings
[2020-04-29 16:44:33]
d95gas :
Cool...... Presume with the version I currently have, will I be able to test any of these once the weather clear's a little in the UK, although not supposed to be out, I do have exemption as a key worker, and can find some very private areas to do a little close flying.
[2020-04-29 18:26:59]
d95gas :
New firmware just came out, not going to have chance tonight to see if the Countrycode issue is resolved yet.
[2020-04-30 03:53:27]
shell :
I'll take a look
[2020-04-30 03:53:37]
shell :
Wait for beta 6
[2020-04-30 07:02:23]
d95gas :
:+1: Some of the users are already reporting that they can switch to FCC mode on the new firmware, using FakeGPS. Waiting for a couple to get back to us who are going to try the modded APK file, to see if that maintains FCC mode without the use of FakeGPS. Hoping that Anafi have sort of put it back to where we were with 1.6.3.
[2020-04-30 16:47:58]
d95gas :
Just had an email from Chris Roberts. Countrycode has been fixed. He also stated that it was never the intention of Parrot to lockdown either CE/FCC, but that again was down to Countrycode. He stated that the new firmware is basically 1.6.3 with some new additions. Users are already reporting that they have FCC back, and those that have been flying today are reporting that it seems to be back to how it should be. So fingers crossed. I have not done any update as of yet, and will hold off for now.
[2020-05-01 07:25:35]
softice :
Parrot Anafi 4G mod - working proof of concept :slightly_smiling_face:
(who needs FCC anyways) :p
[2020-05-01 14:18:07]
markusfriedl :
does anyone of you have experience with the anafi thermal version? are you satisfied with the quality of the thermal vision?
[2020-05-01 17:42:26]
d95gas :
Unfortunately I only have the standard Anafi. Plenty of users over on the Anafi forum have the thermal, may be better off asking there. <https://parrotpilots.com/forums/anafi.6/>
[2020-05-02 11:27:41]
d95gas :
The new firmware for the Anfi series is now proving a hit with users after the fiasco of the last 2 releases. Indication is that they used the 1.6.3 firmware as the base with a couple of minor tweaks, everyone is loving it. FCC is back, so its a Win Win for Parrot. Now we just need to get a commercial version of their proposed military spec Anafi :slightly_smiling_face:
[2020-05-02 14:55:45]
shell :
I've been busy mapping buttons and axes for the SC1 and SC2. Good to hear they fixed country code. I figured that was the case when auriga went generally available.
[2020-05-02 14:57:21]
d95gas :
Yes the Auriga team didnt hang about, it must have been the one tiny element stopping them go live. Back to having lots of happy Anafi people at last
[2020-05-02 14:57:30]
shell :
Also presents a good opportunity for me to test firmware updating. Wish me luck as I'll only get one chance lol
[2020-05-02 15:01:07]
d95gas :
Fingers crossed for you then :slightly_smiling_face:
[2020-05-02 21:28:05]
quad808 :
@d95gas this is great news!
[2020-05-03 06:39:02]
d95gas :
Yep sure is, basically back to how we were on 1.6.3 Where we had FCC and no height restrictions, so far everyone on the forum is very happy at last
[2020-05-03 11:13:53]
rickw001 :
glad to see you're making out ok,stay safe my friend
[2020-05-03 12:40:34]
d95gas :
Thanks Rick, hope everything is going ok for you and the family, and you are keeping safe over there.
[2020-05-04 16:44:16]
shell :
i’m still waiting for Parrot to publicly release the 1.6.8 firmware
[2020-05-04 16:44:25]
shell :
the update site still shows 1.6.7 as the latest version
[2020-05-04 16:44:49]
shell :
<https://download.parrot.com/Drones/0914/update.php?product=0914&serialNo=0000&version=1.6.7&platform=Android&appVersion=10.0.0>
[2020-05-04 16:45:37]
shell :
and
[2020-05-04 16:45:38]
shell :
<https://download.parrot.com/Drones/0914/update.php?product=0914&serialNo=0000&version=0.0.0&platform=Android&appVersion=10.0.0>
[2020-05-04 16:56:29]
d95gas :
Oh right, thats a bit bizarre when all those with Anafi's are upgraded to 1.6.8
I assume we are the beta testers for the firmware :slightly_smiling_face: before they release it to developers.
[2020-05-05 02:42:42]
shell :
lol
[2020-05-05 02:42:45]
shell :
i guess so
[2020-05-06 19:13:06]
mainframe :
I’ve been now testing out Auriga Anafi. So far so good. FCC mode setting works.
[2020-05-07 05:56:43]
d95gas :
:+1: I had a quick look at the Auriga write-up, I do have an Apple device I could use, you never know I just might get tempted over the weekend :slightly_smiling_face:
[2020-07-01 07:49:47]
d95gas :
Well the big announcement from Parrot came and went. Nothing at all for the hobbyist unless you are very rich and can blow 7k on a drone the size of the Anafi. For the USA Government its going to be good, French company, manufactured in USA and no intervention from China...... Guess that was Parrot's target with this.
[2020-07-01 07:50:32]
d95gas :
<https://dronexl.co/2020/04/22/parrot-anafi-ua-drone-search-and-rescue-operators/>
[2020-07-01 11:59:04]
mail451 :
Yeah the CEO took some stabs at DJI: [https://www.techradar.com/amp/news/parrot-slams-dji-drone-data-security-during-anafi-usa-launch](https://www.techradar.com/amp/news/parrot-slams-dji-drone-data-security-during-anafi-usa-launch)
[2020-07-01 12:03:13]
softice :
Oh well
[2020-07-01 12:03:49]
softice :
[https://dronexl.co/2020/06/30/parrot-henri-seydoux-accuses-dji](https://dronexl.co/2020/06/30/parrot-henri-seydoux-accuses-dji)
[2020-07-01 12:04:54]
softice :
They shd focus on their own product line instead of badmouthing competitors
[2020-07-01 13:49:51]
dkovar :
"... but he got his facts wrong according to DJI. See below for all the details and the response from DJI."
Is DJI really going to say that he got his facts right?
Various OGs -did- find questionable components in DJI Go which DJI did silently remove.
The article is wrong, not the CEO.
[2020-07-01 14:48:58]
d95gas :
yep he put himself out there and when challenged had nowhere to go...... terrible show
[2020-07-01 14:49:27]
d95gas :
If you are going to say these things to a public audience the first thing you is fact check, severely let themselves down
[2020-07-01 18:24:58]
trulala69 :
I want those propellers on my good old Anafi!
[2020-07-01 23:20:50]
quad808 :
Here is the thing about DJI. Ask yourself why they simply would not include a slider that shuts off ALL DATA to DJI? Like a privacy mode? They didn't do that. They came out with a stripped down version of GO instead. WHY?
[2020-07-02 07:02:00]
d95gas :
Yep, I still have a copy of that somewhere, the one where they just ripped everything out and made it totally useless and then said here's our Government edition :slightly_smiling_face:
[2020-07-02 15:42:39]
shell :
Fun fun....nice to see the channel active
[2020-07-02 15:43:23]
shell :
Has anyone tried retrofitting the FPV/Pro arms on to the original Anafi? I'm tempted to beef mine up.
[2020-07-02 15:54:44]
d95gas :
Yes one of the guys on the forum did it and they fit perfect, think the full set with motors is around £110 here in the UK, so a fairly cheap upgrade as far as drones go
[2020-07-02 15:55:00]
d95gas :
Will see if I can dig up the link for you
[2020-07-02 15:56:19]
d95gas :
<https://parrotpilots.com/threads/anafi-arm-replacement.2849/>
[2020-07-02 15:56:53]
d95gas :
the other positive things is that we have had no further issues with the latest firmware version, which is very positive for us.
[2020-07-06 02:16:11]
shell :
Nice... I'll have to pick up the kit
[2020-08-23 16:00:01]
shell :
Still waiting for the leg kit to ship. Has been backordered for like 6+ weeks now.
[2020-08-23 16:20:57]
d95gas :
Thats not good..... they will be running stock down given that they are not going to be catering for us hobby flyers going forward, bit of a stab in the back given that its the hobby flyers who put them where they are, very disappointing. Now looking at the Air 2 or something to replace the Anafi....... which is a massive shame
[2020-08-26 17:45:03]
shell :
i gave up on dronenerds … went to the parrot site, got a list of their distributors and found another
[2020-08-26 17:45:10]
shell :
<https://www.rmus.com>
[2020-08-26 17:45:22]
shell :
placed the order last night and got a shipping confirmation this morning
[2020-08-26 17:45:45]
shell :
now i just have to make sure dronenerds cancels my order…. there’s no easy way to do so via their site
[2020-08-26 17:47:50]
shell :
something that has me scratching my head is how they (Parrot) have the Anafi for work support setup
[2020-08-26 17:48:18]
shell :
it links over to senseFly and as part of signing up you have to provide an Anafi Work serial #
[2020-08-26 17:48:33]
shell :
i have no idea what is going on there
[2020-08-26 17:48:44]
d95gas :
I just (last night) ordered the full Anafi Thermal Mechanical kit, which comes with the new legs, motors, screws and a load of other bits. UK Amazon, and arriving Thursday this week (Tomorrow): <https://www.amazon.co.uk/gp/product/B07VHVWXB6/ref=ppx_yo_dt_b_asin_title_o00_s00?ie=UTF8&psc=1>
[2020-08-26 17:49:54]
shell :
i just did the legs kit …. i couldn’t bring myself to buying it on amazon….. they have the price jacked up like $70 …. $225 vs msrp of $150 ish
[2020-08-26 17:51:39]
shell :
oh wait
[2020-08-26 17:51:42]
shell :
this may be the same kit
[2020-08-26 17:51:43]
shell :
stand by
[2020-08-26 17:51:53]
d95gas :
Think the UK pricing on this kit was inline with Parrot and some of the other UK suppliers, given that you also get the motors which are not cheap. Have no need for it at the moment, but given that Parrot are giving the hobby flyer the middle finger, and spares are drying up very fast, I thought it would be good just to have them as spares
[2020-08-26 17:54:34]
shell :
hmm
[2020-08-26 17:55:45]
shell :
i think this is what you ordered
[2020-08-26 17:55:46]
shell :
<https://www.rmus.com/products/parrot-anafi-work-mechanical-kit-body-pack-arms-frames-antennas?_pos=3&_sid=32b1eb822&_ss=r>
[2020-08-26 17:56:05]
shell :
here’s what i ordered:
[2020-08-26 17:56:46]
shell :
<https://www.rmus.com/products/parrot-anafi-thermal-arms-motors-4-pack?_pos=1&_sid=f2687db75&_ss=r>
[2020-08-26 17:56:52]
shell :
they have the pictures all screwed up
[2020-08-26 17:57:05]
shell :
lots of bad data it seems
[2020-08-26 17:58:33]
shell :
your amazon link shows this as included
[2020-08-26 17:58:34]
shell :
• Pack Contents: The pack contains 2 front and 2 rear arms, 4 Wi-Fi antennas + 4 Reflectors, hinge and mounting bracket, LED + Fan, coaxial cable (rear x1, front x1), screws (x30), assembly tools.
[2020-08-26 17:59:32]
shell :
all i’ve got to go on is the actual short description for what i ordered (Parrot Anafi Thermal Arms & Motors (4 pack))
[2020-08-26 17:59:46]
shell :
so holler if you need motors lol
[2020-08-26 18:01:40]
shell :
and (of course) none of the part #s line up
[2020-08-26 18:02:23]
shell :
i can’t get over how screwed things are now …. as if it is going to be any better for “commercial” consumers
[2020-08-26 18:02:31]
d95gas :
That top ones says for the Anafi - Work - Work extended Whereas the one I ordered is for the Thermal, and on the Amazon pics clearly shows the motors on the legs. As you said, seems pics are screwed up and the descriptions dont seem right, so will be interesting to see what turns up tomorrow. I specifically got the THERMAL one as that has the new style legs.
[2020-08-26 18:03:22]
d95gas :
<https://www.amazon.co.uk/Parrot-Mechanical-Coaxial-Screws-Assembly/dp/B07PMLWHDD/ref=psdc_364222031_t1_B07VHVWXB6>
[2020-08-26 18:03:45]
d95gas :
shows the standard one for the Anafi which is just over £72.00
[2020-08-26 18:04:07]
d95gas :
They have definitely got their Ad's cocked up
[2020-08-26 18:04:31]
shell :
yeah…. that’s definitely not what we want
[2020-08-26 18:10:09]
shell :
this is all i could find on amazon
[2020-08-26 18:10:10]
shell :
<https://www.amazon.com/Parrot-Thermal-Mechanical-Antennas-Reflectors/dp/B07VHVWXB6/ref=sr_1_2?dchild=1&keywords=parrot+Anafi+Thermal+arms&qid=1598465317&sr=8-2>
[2020-08-26 18:10:59]
shell :
which i think is the same item you found on their uk site…. i cheaped out and just did the arms/motors kit (or so I think)
[2020-08-26 18:12:07]
shell :
we’ll have to compare notes in a couple days… i have a tracking # but no ETA yet
[2020-08-26 18:15:40]
d95gas :
Mine is landing tomorrow, so will let you know what I end up with :face_with_rolling_eyes:
[2020-08-26 18:15:59]
shell :
and my gut tells me its the same item i linked to from RMUS for $99 USD
[2020-08-26 18:16:58]
shell :
haven’t been following the pound / dollar lately…. but i’m guessing that loosely translates to the exchange rate
[2020-08-26 18:18:05]
d95gas :
Interesting to see why all the thermal kits show the motors, but not mentioned in the wording, unless for some odd reason they are part of the leg.....very odd
[2020-08-27 02:56:50]
mingtao :
Hi guys .. anyone see where i can buy a worked gimbal for anafi ? Like parts
[2020-08-27 06:35:54]
ender :
I must have some leftovers here you could have for free (well, shipping of ocurse).
I will have to searchm what do you need?
[2020-08-27 06:37:28]
d95gas :
Hmmm if there any other spares you want to get rid of for the Anafi :grinning:
[2020-08-27 09:15:53]
ender :
I can take a look :slightly_smiling_face:
[2020-08-27 09:16:06]
ender :
whole copter stuff is in a terrible mess :slightly_smiling_face:
[2020-08-27 09:16:24]
ender :
will try to take some photos in the weekend!
[2020-08-27 14:45:51]
d95gas :
Awesome, shall look forward to hearing from you :slightly_smiling_face:
[2020-08-27 14:52:36]
softice :
a working gimbal will not work on a different mainboard. they have to be paired, which to my knowledge can only be done by Parrot service personnel.
[2020-08-27 14:52:50]
softice :
if they are not paired, the camera will work, but the gimbal will not move
[2020-08-27 15:15:51]
d95gas :
With the Anafi that is not so. The Anafi Gimbal doesnt have any intelligence so to speak unlike the DJI stuff. We have a guy on another forum who does repairs on these and he has swapped out loads of Gimbals and there is no requirement for pairing.
[2020-08-27 15:18:50]
d95gas :
@shell Goods turned up this afternoon. Its the improved legs complete with motors, antenna's power cables, screws, brackets, tools, etc
[2020-08-27 16:19:21]
ender :
well i also have been told this "fact" (that you need to pair", and when i tried without it did not work but of ocurse it could have been soemthing else. I repoaired a lot of (only my own) Anafi stuff but only tried crossbreeding that one time and explained the Failure away with the "cannot pair" "fact" i later heard
[2020-08-28 00:18:53]
softice :
I have experienced it myself, didn't believe it at first when my buddy working for the official Parrot Service Centre in Singapore told me.
[2020-08-28 00:19:56]
softice :
if you literally mean the gimbal arms but not the camera, then you might be right. but if you swap the camera with it, it will not work if not paired
[2020-08-29 22:47:07]
shell :
mine came in today … arms, motors, antennas, screws, a screwdriver, and a couple brackets it seems
[2020-08-30 07:10:10]
d95gas :
excellent. Always handy to have spares, especially seeing as it looks like they are winding down the production side.
[2020-10-11 12:54:13]
abdo054 :
Hi .. Anyone can confirm fcc mod on latest firmware?
[2020-10-12 07:31:31]
d95gas :
Yes still working if you use the moddec FF6
[2020-10-12 15:17:48]
abdo054 :
Thanks!
[2020-10-12 15:35:34]
d95gas :
<https://drive.google.com/u/0/open?id=1oCzd_9xVR3JUgBGziISGBHBVvalyME_Z>
[2020-10-12 22:09:54]
abdo054 :
Thank you
[2020-10-14 17:37:23]
d95gas :
New version of Parrot Anafi Freeflight 6 out, with some interesting new features, seems like elements for the Anafi USA, and we get some benefit from it. I believe there is also a firmware update, but I am not touching that for a week or 2, but certainly the App is well worth a look at and play with the new features:
NAFI 1.7.0, ANAFI THERMAL 1.7.0, ANAFI USA 1.7.0, FREEFLIGHT 6.7.0 (IOS & ANDROID), SKYCONTROLLER3 1.7.0
We are thrilled to announce the launch of ANAFI USA and the compatibility with FreeFlight 6 latest update. This version offers new features for all drones of the ANAFI range:
ANAFI USA:
• Seamless support of ANAFI USA three cameras and compatibility with all thermal imaging tools.
• Encrypt the drone’s SD card to protect your media.
• New coordinates editor feature: enter manually a destination for the drone or extract the drone’s current position in real-time from the map.
All ANAFI drones:
• Advanced RTH features: choose the return position of the drone or enter a specific position. You can also choose the arrival behavior.
• Improved Flight Behavior when some magnetometer decalibration is detected.
• Support of French Direct Remote Identification system.
• Improved Flight Behavior when some magnetometer decalibration is detected.
• Sign in with Apple (iOS only).
New Security Edition features:
• Import cartography files into the FreeFlight 6 app. They will remain available on the map interface even without internet connection.
• RTH and flight logs can be deactivated.
• Anafi Thermal & Pix4D Mapper compatibility to create 3D thermal renderings.
• Improved MPP / drone pairing with a USB cable: it will now work even if there is no SD card in the drone.
• Bugfix for Flight Plans: the automatic landing on last waypoint was not always taken into account.
[2020-10-14 20:03:06]
quad808 :
is altitude still unlocked?
[2020-10-15 05:02:10]
d95gas :
Yep thats still unlocked, and there is a modified app available that ensures we all get FCC mode, I will grab the link and post here
[2020-10-15 05:03:11]
d95gas :
<https://drive.google.com/file/d/1QFu2ti9aGRS56TNjriivH-Zgkm0T3Jvu/view>
[2021-04-07 05:59:16]
meta :
<https://blog.yeswehack.com/yeswehack-news/parrot-launches-its-bug-bounty-in-partnership-with-yeswehack/>
[2021-10-28 18:08:54]
pixel :
pixel joined the channel.
[2021-10-29 08:24:33]
zkar :
zkar joined the channel.
[2021-10-29 18:56:05]
vortex :
atlantic joined the channel.
[2021-10-30 04:06:20]
crushedice2000 :
crushedice2000 joined the channel.
[2021-10-30 12:16:23]
jj :
madmaqx joined the channel.
[2021-10-31 00:18:11]
will :
will joined the channel.
[2021-11-09 17:17:23]
flyinghacker :
flyinghacker joined the channel.
[2021-11-10 16:49:49]
aszeszo :
aszeszo joined the channel.
[2021-11-12 10:32:48]
cs2000 :
cs2000 joined the channel.
[2021-11-12 10:33:02]
cs2000 :
dji-rev-bot added to the channel by cs2000.
[2021-11-12 10:33:08]
cs2000 :
@cs2000 left the channel.
[2021-11-19 23:16:57]
konraditurbe :
konraditurbe joined the channel.
[2021-12-07 00:35:49]
tissy :
tissy joined the channel.
[2022-01-03 18:16:31]
droneuser :
biosblob joined the channel.
[2022-01-18 00:47:59]
il1oo0 :
il1oo0 joined the channel.
[2022-03-26 22:54:23]
faineg :
faineg joined the channel.
[2022-03-30 10:58:17]
demion :
demion joined the channel.
[2022-04-01 10:57:45]
kon :
kon joined the channel.
[2022-04-03 14:57:32]
mangadiso :
midgelf joined the channel.
[2022-04-03 14:57:54]
ronykom :
ronykom joined the channel.
[2022-04-06 18:39:38]
quad_fan :
quad_fan joined the channel.
[2022-04-12 04:11:24]
eseven :
eseven joined the channel.
[2022-05-22 09:35:21]
jack117wb :
jack117wb joined the channel.
[2022-05-23 20:46:15]
jjbyrnes29 :
jjbyrnes29 joined the channel.
[2022-06-04 19:56:01]
mavic2reverser :
mavic2reverser joined the channel.
[2022-06-08 02:41:18]
skarzhevsky :
skarzhevsky joined the channel.
[2022-06-21 23:06:50]
deniss-i979 :
deniss-i979 joined the channel.
[2022-06-21 23:07:05]
deniss-i979 :
@deniss-i979 left the channel.
[2022-06-22 03:21:15]
kinev1337 :
kinev1337 joined the channel.
[2022-07-13 06:58:47]
ixoid :
ixoid joined the channel.
[2022-09-21 09:21:26]
johnny :
Anyone know if the default Wi-Fi password for Parrot Anafi is always the same for all drones if you do a factory reset on it, or does it differ between drones?
[2022-09-21 09:22:12]
johnny :
```
Power ANAFI on.
Press the power button and keep it pressed: after approximately 8 seconds, the battery’s LEDs turn on red, one after the other.
When the 4 LEDs are red, release the power button.
ANAFI reboots - a TXT file has been generated on ANAFI’s microSD card, which contains ANAFI’s Wi-Fi network’s password; that’s how you can check the hard reset has been successful.
```
[2022-09-21 09:22:50]
johnny :
Because I saw this when googling and wonder if maybe some of you guys here that have an Parrot Anafi drone can check for me which Wi-Fi network password you get after a factory reset if it's possible for you to do it
[2022-09-21 09:22:50]
johnny :
Because I saw this when googling and wonder if maybe some of you guys here that have an Parrot Anafi drone can check for me which Wi-Fi network password you get after a factory reset if it's possible for you do it
[2022-09-26 01:12:17]
jackmax :
jackmax joined the channel.
[2022-10-04 07:54:16]
xiaohuge365 :
xiaohuge365 joined the channel.
[2022-10-27 06:59:08]
crashing_bird :
crashing_bird joined the channel.
[2022-10-30 07:11:02]
bob.alki :
bob.alki joined the channel.
[2022-11-03 17:28:56]
theufodroner :
theufodroner joined the channel.
[2022-11-12 06:22:48]
pingspike :
pingspike joined the channel.
[2023-01-04 06:13:32]
kaleongo :
kaleongo joined the channel.
[2023-01-11 22:39:24]
creased :
creased joined the channel.
[2023-02-07 22:30:46]
accountfrompl :
accountfrompl joined the channel.
[2023-02-24 05:27:34]
ibndias :
ibndias joined the channel.
[2023-03-08 13:43:54]
mud :
mud joined the channel.
[2023-03-31 04:46:35]
moyditumla :
moyditumla joined the channel.
[2023-04-08 06:05:09]
gudvin :
gudvin joined the channel.
[2023-04-08 06:05:25]
gudvin :
@gudvin left the channel.
[2023-04-13 03:03:30]
retrocall :
retrocall joined the channel.
[2023-04-28 10:30:12]
supertester :
supertester joined the channel.
[2023-05-03 05:37:11]
sawman :
sawman joined the channel.
[2023-05-03 05:39:59]
sawman :
@sawman left the channel.
[2023-05-20 01:14:37]
joelg :
joelg joined the channel.
[2023-05-27 05:22:57]
drmsucks :
drmsucks joined the channel.
[2023-05-27 05:23:17]
drmsucks :
@drmsucks left the channel.
[2023-06-11 01:12:48]
milenovic :
milenovic joined the channel.
[2023-06-19 23:26:08]
martymcfly :
martymcfly joined the channel.
[2023-08-01 07:50:35]
revnmavic :
revnmavic joined the channel.
[2023-08-13 06:10:15]
deonisray :
deonisray joined the channel.
[2023-08-24 13:18:39]
seeyouas :
seeyouas joined the channel.
[2023-08-28 16:22:28]
aprentis :
aprentis joined the channel.
[2023-09-05 15:18:44]
ginostred :
ginostred joined the channel.
[2023-09-13 10:14:10]
molda :
molda joined the channel.
[2023-10-15 20:51:02]
dumldore_newbi :
dumldore_newbi joined the channel.
[2023-10-19 14:58:22]
w3c :
w3c joined the channel.
[2023-10-23 09:14:21]
jdan7387 :
jdan7387 joined the channel.
[2023-10-24 17:33:55]
caseygibson :
caseygibson joined the channel.
[2023-11-02 07:00:39]
dronedog :
dronedog joined the channel.
[2023-12-08 04:09:32]
seraph1573 :
seraph1573 joined the channel.
[2023-12-27 21:18:29]
dji-noob :
dji-noob joined the channel.
[2024-01-16 14:36:14]
zjm605186980 :
zjm605186980 joined the channel.
[2024-01-17 09:46:47]
photogrant :
photogrant joined the channel.
[2024-01-18 15:43:16]
basilius :
basilius joined the channel.
[2024-02-06 19:57:59]
ryantkasher :
ryantkasher joined the channel.
[2024-02-06 20:09:00]
ryantkasher :
@ryantkasher left the channel.
[2024-02-12 20:44:24]
lining-preps.0u :
lining-preps.0u joined the channel.
[2024-02-22 18:09:48]
otter :
otter joined the channel.
[2024-05-10 08:22:17]
dreamtree :
dreamtree joined the channel.
[2024-05-21 07:02:02]
wag-on :
wag-on joined the channel.
[2024-05-21 07:02:58]
wag-on :
@wag-on left the channel.
[2024-06-03 07:34:49]
mymail :
mymail joined the channel.
[2024-06-24 16:46:28]
devnull :
devnull joined the channel.
[2024-07-01 11:00:26]
wildwildo :
wildwildo joined the channel.
[2024-07-01 17:29:00]
mrsmith :
mrsmith joined the channel.
[2024-07-06 14:18:30]
chengcheng :
chengcheng joined the channel.
[2024-07-26 15:52:31]
ogini_ayotanom :
ogini_ayotanom joined the channel.
[2024-08-19 10:31:28]
zyxel :
zyxel joined the channel.
[2024-08-22 21:32:53]
clait :
clait joined the channel.
[2024-09-10 13:10:57]
blowfish448 :
blowfish448 joined the channel.
[2024-10-21 01:53:00]
supermario7331 :
supermario7331 joined the channel.
[2024-11-26 16:58:22]
ox3d :
ox3d joined the channel.
[2024-12-16 10:59:12]
c3podaniel :
c3podaniel joined the channel.
[2024-12-16 11:01:14]
c3podaniel :
@c3podaniel left the channel.
[2025-01-05 10:21:04]
grizzfu :
grizzfu joined the channel.
×
User Info
Username:
Last Login:
First Name:
Last Name: