34 replies to this topic

[EOSHD]

Edited by Someone 1.00

Currently hacked cameras list: A33, A55, Nex3, Nex5 and VG10.

First custom firmware for a55.
Firmware replaces Setup menu -> Demo mode item with "Someone1." string (English menu only).
Version number will be 2.01

A55 firmware patcher https://rapidshare.c...9/FWPatcher.zip


Please note that this process is not reversible yet.

Usage:
download a firmware http://esupport.sony...LOC=3#/howtoTab into some specific folder
unpack all the content with 7zip (detailed guide https://dl.dropbox.c...king/index.html)
make sure that FirmwareData_user_21.10.02.2011033010_203_02_loader.dat exists in SLT-A55V2_Update1105a subfolder.
download, extract and run patcher
select FirmwareData_user_21.10.02.2011033010_203_02_loader.dat and press go
run SPUFirmwareUpdater.exe from SLT-A55V2_Update1105a subfolder

I hope this instruction will be polished and updated soon.



I guess this video is not necessary anymore.




Here is the hacker demonstrating how it possible to open the firmware of the NEX 5 in a HEX editor. The camera is based on a Linux CE powered operating system.
Unconfirmed reports are that 46Mbit bitrate is possible in 1080p similar to the GH2, which would be a very nice improvement on the standard 24Mbit and yield more detail too.

[Someone1.00]

46Mbit bitrate is not correlated to me anyhow.
This topic lost very important stuffs. I can decode A33, A55, Nex3, Nex5, VG10 firmware only.
I cannot decode A57, A65, A77, Nex5n and Nex7 since i dont have this cameras.

About the video. The end of the file was not extracted properly. It's the only difference at this moment.

[EOSHD]

Thanks for clearing that up, but the NEX 5N and 7 bodies are what you need so if we think of the hack in terms of those, it will help.

[MichalGajdos]

46Mbit bitrate is not correlated to me anyhow.
This topic lost very important stuffs. I can decode A33, A55, Nex3, Nex5, VG10 firmware only.
I cannot decode A57, A65, A77, Nex5n and Nex7 since i dont have this cameras.

About the video. The end of the file was not extracted properly. It's the only difference at this moment.

Does it mean that hack for NEX5 is already out there or this is only a proof of how to get into the firmware of the camera? I am amateur in this field and my question may be a little cheeky but i would like to see answers. How can I improve/hack my SONY NEX5 at this moment ? is it possible? how much does it cost ? What are the specifications ?

Thank you very much

[REVENGE]

Does it mean that hack for NEX5 is already out there or this is only a proof of how to get into the firmware of the camera? I am amateur in this field and my question may be a little cheeky but i would like to see answers. How can I improve/hack my SONY NEX5 at this moment ? is it possible? how much does it cost ? What are the specifications ?

Thank you very much

The claim of "46mbps" was made by a user on the dvxuser forum. He has yet to provide any evidence to substantiate his claims.

[Someone1.00]

We speaking here about decryption only. Hack from my point of view is a custom firmware. I cannot force the camera to eat my modified firmware.

[Someone1.00]

Some updates here. I've being able to force the original updater to treat the modified firmware of an a55 as version 3. Don't checked this yet. It's too late and i want to check everything up. Updater executable was not modified.



Well. For now i have only 254 attempts to play with firmware inside the a55.

UPD: I've found a minor version. Ver.3 is not actual anymore. You can check this by yourself via custom firmware. No need to update camera.

[MichalGajdos]

Thank you for the explanation, I see it now. Please leave us updated with everything you're working on. we'll be more than willing to donate!

[Someone1.00]

At this exact moment i have brick instead my A55. So my personal research is over.

UPD I'm back in game Thank you unknown Japan developer for an ability to restore my brick!

So more details about update procedure. It is possible to restore original firmware anytime. I'm not limited in attempts anymore. The procedure is pretty clear. I just need to create firmware without some checks and flash it out with any version. Camera will hangs forever. Updater will ask to close it and restart. This time i can put an original firmware with any versions and it flash it out successfully.
Bad news here is that they have one more level of checks. I'm tired counting them

[Someone1.00]

Well it's really the end for my investigations at this moment.
I am able to create a custom firmware.
Below will go modifications that i did in menu of my a55.

I have to change a version in custom firmware.

I'll create a patch and everybody will be able to patch demo mode menu item with my nickname

[REVENGE]

I'll create a patch and everybody will be able to patch demo mode menu item with my nickname

Hehe, good stuff! Are you planning on modding userland yourself, or do you plan to give out the packing/unpacking tools? I imagine emulation would be very helpful, but it's completely unclear what kind of roadblock we're hitting at the moment.

[Someone1.00]

Hehe, good stuff! Are you planning on modding userland yourself, or do you plan to give out the packing/unpacking tools? I imagine emulation would be very helpful, but it's completely unclear what kind of roadblock we're hitting at the moment.

At this moment i'll prove that i am the person who crack A33,A55,Nex 3,5 and VG10 firmware and able to modify it. I hope to get the bodies for my latest experiments. If so i'll release my tools to extract firmware and repack it.

[Someone1.00]

I've updated first EOSHD post in this thread with information about patcher and custom firmware.

[dannytang]

Added the patching procedure to the wiki.

http://hackingalpha....roof_of_Concept

[EOSHD]

Nice job with the Wiki!

[Jah]

Really nice job guys, special thanks to Someone1.00. Will the method be published? I'd be glad to join the team

[Someone1.00]

Will the method be published? I'd be glad to join the team

If i'll got cameras for future development. I've started some topics here. You can pick one to join according to your skills.

[Incoe]

So it is now possible to make a custom firmeware. Will you develop this? It would be nice withmore diffrent options like the Alpha 57 have them. I'm looking in the magic lantern direction

[Someone1.00]

So it is now possible to make a custom firmeware. Will you develop this? It would be nice withmore diffrent options like the Alpha 57 have them. I'm looking in the magic lantern direction

My next move will be depended on bodies i'll have. At this current moment i want to solve this problem and then to move forward.

[quobetah]

Great job! My A55 is ready for its new firmware! I'll be happy to test and give feedback regarding this... I'lleven use the hacked camera for real jobs.

Some list of improvements and test footage will be much appreciated and will really rile up everyone so do it!