Z-Cam E2 Hacks Development Started

storyboardcreativity

I've found a stable way to make changes in firmware files for E2 (and even make any changes without full reflashing camera). That's all, folks :)

You can place here any your questions about this.

All detailed technical info during Z-CAM E2 research process will be posted here:

https://github.com/storyboardcreativity/Z-Camera-E2-Reverse-Engineering

Plans section

Idea is to cover most if not all cameras in E2 lineup

Issues list

Possible stop of all E2 production soon, see http://www.personal-view.com/talks/discussion/24341/z-cam-e2-cameras-lineup-production-can-suddenly-stop#Item_2

[VK - added structure a little]

spacewig

What viable modifications do you feel would make the camera more usable?

storyboardcreativity

@spacewig

In my opinion Z-Cam E2 is already a very nice camera with good firmware and support. I did not have any problems with it. But maybe I can make some little fixes for it.

For example, E2 has some delay while transmitting video via RTSP (in comparison with SSP, that works with a very tiny delay ~20-30 ms).

And, as I can see, there is a 14-bit sensor readout mode. Maybe we can use it for something...

Vitaliy_Kiselev

@storyboardcreativity

It can be also interesting to make some table about hardware stuff used in all E2 versions using firmware data, can you do it?

storyboardcreativity

@Vitaliy_Kiselev

E2 has Sony IMX299 sensor and HiSilicon Hi3559A V100 SoC on board.

https://www.sony-semicon.co.jp/products/common/pdf/IMX299CJK_Flyer.pdf http://www.hisilicon.com/-/media/Hisilicon/pdf/Surveillance_mobilecam/Hi3559AV100.pdf

Vitaliy_Kiselev

Thanks.

I mean all E2 variations

https://www.bhphotovideo.com/c/search?q=z-cam%20e2&filters=fct_category%3Adigital_cine_cameras_28624

Vitaliy_Kiselev

@storyboardcreativity

Btw about HiSilicon - this company wont be able to make SoC soon (if not already) due to US sanctions.

Do they have something else in other E2 cameras, as if they use only HiSilicon SoC chips it can be huge issue.

storyboardcreativity

@Vitaliy_Kiselev, to do this I need all these cameras :D

For example, if somebody shares his camera through the internet (via LAN connector and dedicated IP), I can download data from camera and get this info (for now I don't have stable way to repack fw files yet).

But I'm sure that all these cameras are almost same. The difference is in sensors. Here are all sensors for each model:

E2 - Sony IMX299
E2C - Sony IMX159
E2G - Sony IMX344
E2-S6 - Sony IMX571
E2-F6 - Sony IMX410
E2-F8 - Sony IMX455

storyboardcreativity

@Vitaliy_Kiselev

To find out all SoCs they use I need connection to cameras. Now I have only E2 (and won't buy any other).

Vitaliy_Kiselev

@storyboardcreativity

If they all use HiSilicon it can be biggest tragedy of amazing small camera company.

I posted in both E2 group and PV group, hope we'll find owners soon.

May be it is possible to make small utility to extract firmware data on place? I mean to avoid complex remote access things?

storyboardcreativity

@Vitaliy_Kiselev

Thank you. I'll prepare script to get camera info.

Yes, we can try to do it offline and then owners can send me collected data. It will be saved on camera's connected storage.

storyboardcreativity

@Vitaliy_Kiselev

Checked some firmwares: E2C and E2-F8 have HiSilicon on board too. But for now I'm not sure about chip version (maybe not Hi3559A V100).

Vitaliy_Kiselev

@storyboardcreativity

Interesting how it'll all unwind, as Z-CAM can only keep producing cameras if HiSilicon made stockpile of chips and I am not sure, as they clearly moved all focus to stock mobile LSI.

endotoxic

Hello. can I order a full double staked sensor with dual iso No extra noise. I would like to enlarge the sensor please, with chips make it double SoC.

don’t put on h265 on it since I’m allergic.

To take please.

Ohh I almost forgot. Please enlarge the well capacity too.

Thanks

storyboardcreativity

@Vitaliy_Kiselev

Z-CAM is a great company, I'm really fond of their cameras. Hope someday I'll do something similar...

Vitaliy_Kiselev

@storyboardcreativity

They are nice, but too emotional, kicked me out of their group for HiSilicon and hack posts (despite that PV and me promoted them as hell, did lot of interviews).

If you want to be public figure - you need to learn to talk to press (case it is not another ass lickers as they used to do).

storyboardcreativity

@Vitaliy_Kiselev

It's sad :c

I'm thinking of making a channel where I would talk about hacks. But I think this theme won't be popular - that stops me.

Vitaliy_Kiselev

@storyboardcreativity

Can make some nice summaries on PV channel if you like.

storyboardcreativity

@Vitaliy_Kiselev

Does anybody have "update.zip" files with version 0.84 and 0.86 for E2? Links for these firmware versions are present in Z-CAM Facebook page, but links are disabled (locked) - so, I can't download.

These old firmware versions could be very helpful for research.

storyboardcreativity

@Vitaliy_Kiselev

Thank you, but my english is not very good for doing something like this :)

If I start my works on this direction, I'll begin with russian-languaged videos.

Vitaliy_Kiselev

@storyboardcreativity

Well, not only everyone but few can speak english such way

storyboardcreativity

WARNING! Don't upgrade E2 firmware to 0.95! You won't have ability to flash back old version after that.

Vitaliy_Kiselev

@storyboardcreativity

Well, you can make small utility to mangle with version number to allow it, but they can have some reason.

storyboardcreativity

@Vitaliy_Kiselev

I still need to find 0.82, 0.84 and 0.86 versions...

storyboardcreativity

@Vitaliy_Kiselev

I've just got full control of camera from my computer, but only for old versions (0.87 and older). I'll need some time to understand how to do it for new versions, they use AES CFB encryption process for their firmwares and checking firmware correctivity with public keys using signatures (of course, I don't have Z-CAM private key LOL).

So, we can't make our new firmwares, but after special operations we can - it's like "JailBreak" for Z-Cam E2.

Vitaliy_Kiselev

@storyboardcreativity

It can be two step process - replacing public key in firmware as universal small patch (via remote control or such).

And next just using our own private key as now check will go through.

Howdy, Stranger!

Categories

Tags in Topic

Top Posters