

<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Commentaires sur : Tear down and hacking around gumpack camera</title>
	<atom:link href="http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/</link>
	<description>sur un blog</description>
	<lastBuildDate>Sun, 29 Jan 2012 17:42:23 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>Par : Testando a camera de espionagem EKEN DVR808 &#171; Jonny Zone : hrkki eitkf</title>
		<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/comment-page-4/#comment-15013</link>
		<dc:creator>Testando a camera de espionagem EKEN DVR808 &#171; Jonny Zone : hrkki eitkf</dc:creator>
		<pubDate>Sun, 29 Jan 2012 17:42:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluc.fr/?p=327#comment-15013</guid>
		<description>[...] PHILIPPE conseguiu hackear o firmware de uma gumpack camera, que usa o mesmo chip da Eken 808, e removeu o [...]</description>
		<content:encoded><![CDATA[<p>[...] PHILIPPE conseguiu hackear o firmware de uma gumpack camera, que usa o mesmo chip da Eken 808, e removeu o [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Par : Gumpack-Explorer</title>
		<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/comment-page-4/#comment-7870</link>
		<dc:creator>Gumpack-Explorer</dc:creator>
		<pubDate>Thu, 27 Oct 2011 11:48:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluc.fr/?p=327#comment-7870</guid>
		<description>My Gumpack-Experience :

I also recently bought a micro camera (30fps and 720×480. Sunplus)  
and I got the wrong timestamp of 2008 too.
After reading the the whole stack of information  of all the gumpack-explorers
 I found the hints of &quot;where to save the &quot;DATE.TXT&quot;  where solving
the timestamp-problem.
After the timestamp was saved in the right way and place, the testvideos
showed the correct date and time each day.
Here is my Howto :

 Via USB you should see the memorycard
with its folder DCIM on your PC screen.
Opening this folder shows the next folder
(in my card 100MEDIA) In this folder
I have the testvideo-files and
a saved example of the timestamp-file &quot;prototype&quot;.
It should look as the manual wants

TAG.TXT
(in this textfile I wrote in) :

[date]

2011/10/26

17:15:00

Of course you write your
actual date and time
and you made the  blank lines
after each written line.
Now you save this &quot;prototype&quot;
in this last folder.

Now you copy the new created file &quot;TAG.TXT&quot;
and you save/paste it parallel
to the folder DCIM.

Insert the memorycard back to the camera.
If you take a video with the camera,
it grabs the actual date+time and delete the the file after,
because the camera  keeps the new date and time
as a computer  and from now it  writes the daily correct timestamp 
on each new video that is taken.
If you check the camera-memorycard with your computer,
you see no TAG.TXT file together with DCIM-folder.  The camera 
did the job.
If you ever need the TAG.TXT again (Battery down,or you reset the camera) find the first saved file, change the actual date+time or write completely new and copy as mentioned.

Happy gumpacking !</description>
		<content:encoded><![CDATA[<p>My Gumpack-Experience :</p>
<p>I also recently bought a micro camera (30fps and 720×480. Sunplus)<br />
and I got the wrong timestamp of 2008 too.<br />
After reading the the whole stack of information  of all the gumpack-explorers<br />
 I found the hints of &laquo;&nbsp;where to save the &laquo;&nbsp;DATE.TXT&nbsp;&raquo;  where solving<br />
the timestamp-problem.<br />
After the timestamp was saved in the right way and place, the testvideos<br />
showed the correct date and time each day.<br />
Here is my Howto :</p>
<p> Via USB you should see the memorycard<br />
with its folder DCIM on your PC screen.<br />
Opening this folder shows the next folder<br />
(in my card 100MEDIA) In this folder<br />
I have the testvideo-files and<br />
a saved example of the timestamp-file &laquo;&nbsp;prototype&nbsp;&raquo;.<br />
It should look as the manual wants</p>
<p>TAG.TXT<br />
(in this textfile I wrote in) :</p>
<p>[date]</p>
<p>2011/10/26</p>
<p>17:15:00</p>
<p>Of course you write your<br />
actual date and time<br />
and you made the  blank lines<br />
after each written line.<br />
Now you save this &laquo;&nbsp;prototype&nbsp;&raquo;<br />
in this last folder.</p>
<p>Now you copy the new created file &laquo;&nbsp;TAG.TXT&nbsp;&raquo;<br />
and you save/paste it parallel<br />
to the folder DCIM.</p>
<p>Insert the memorycard back to the camera.<br />
If you take a video with the camera,<br />
it grabs the actual date+time and delete the the file after,<br />
because the camera  keeps the new date and time<br />
as a computer  and from now it  writes the daily correct timestamp<br />
on each new video that is taken.<br />
If you check the camera-memorycard with your computer,<br />
you see no TAG.TXT file together with DCIM-folder.  The camera<br />
did the job.<br />
If you ever need the TAG.TXT again (Battery down,or you reset the camera) find the first saved file, change the actual date+time or write completely new and copy as mentioned.</p>
<p>Happy gumpacking !</p>
]]></content:encoded>
	</item>
	<item>
		<title>Par : Shaun</title>
		<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/comment-page-4/#comment-7188</link>
		<dc:creator>Shaun</dc:creator>
		<pubDate>Mon, 19 Sep 2011 19:53:19 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluc.fr/?p=327#comment-7188</guid>
		<description>I have a spy pen that scales up the video and records slowly because of this. Would I be able to get a better frame rate if I used a 35mhz crystal?</description>
		<content:encoded><![CDATA[<p>I have a spy pen that scales up the video and records slowly because of this. Would I be able to get a better frame rate if I used a 35mhz crystal?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Par : Alexander</title>
		<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/comment-page-4/#comment-6682</link>
		<dc:creator>Alexander</dc:creator>
		<pubDate>Tue, 23 Aug 2011 15:24:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluc.fr/?p=327#comment-6682</guid>
		<description>I&#039;ve discovered a very easy way to permanently remove the timestamp without any hardware or firmware modifications. AFAIK this isn&#039;t listed anywhere else on the Web.

Connect the camera to your PC, then create a file &quot;time.txt&quot; in the root directory of the camera, with contents e.g. &quot;2011.01.01 00.00.00 N&quot;. No quotes and no line breaks; file size must be exactly 21 bytes. This has already been documented in various places; the only remaining problem is that the firmware deletes the file upon booting.

But there is a trick to prevent that pesky delete from happening: just make the file read-only! :-) It&#039;s really that simple...</description>
		<content:encoded><![CDATA[<p>I&#8217;ve discovered a very easy way to permanently remove the timestamp without any hardware or firmware modifications. AFAIK this isn&#8217;t listed anywhere else on the Web.</p>
<p>Connect the camera to your PC, then create a file &laquo;&nbsp;time.txt&nbsp;&raquo; in the root directory of the camera, with contents e.g. &laquo;&nbsp;2011.01.01 00.00.00 N&nbsp;&raquo;. No quotes and no line breaks; file size must be exactly 21 bytes. This has already been documented in various places; the only remaining problem is that the firmware deletes the file upon booting.</p>
<p>But there is a trick to prevent that pesky delete from happening: just make the file read-only! <img src='http://www.pluc.fr/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' />  It&#8217;s really that simple&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>Par : Dan</title>
		<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/comment-page-4/#comment-6431</link>
		<dc:creator>Dan</dc:creator>
		<pubDate>Wed, 10 Aug 2011 02:42:55 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluc.fr/?p=327#comment-6431</guid>
		<description>Can someone here help me.  I have a pair of video eye wear that has a SunPlusmm chip inside.  Is this the same as SunPlus?  The video and time stamp work fine, but there is a small band along the right hand side of distorted video, like a mirror edge.  I&#039;ve been given a file called 1528.bin and told to place it in the TF card (which I can only assume is the micro SD card) and then to power up the glasses and the firmware will be updated.  Only it doesn&#039;t.  Is there a trick to this?  Can anyone help?  I can provide extra details...

Dan</description>
		<content:encoded><![CDATA[<p>Can someone here help me.  I have a pair of video eye wear that has a SunPlusmm chip inside.  Is this the same as SunPlus?  The video and time stamp work fine, but there is a small band along the right hand side of distorted video, like a mirror edge.  I&#8217;ve been given a file called 1528.bin and told to place it in the TF card (which I can only assume is the micro SD card) and then to power up the glasses and the firmware will be updated.  Only it doesn&#8217;t.  Is there a trick to this?  Can anyone help?  I can provide extra details&#8230;</p>
<p>Dan</p>
]]></content:encoded>
	</item>
	<item>
		<title>Par : Geoff</title>
		<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/comment-page-4/#comment-6334</link>
		<dc:creator>Geoff</dc:creator>
		<pubDate>Tue, 02 Aug 2011 12:06:45 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluc.fr/?p=327#comment-6334</guid>
		<description>A bit more info.

I&#039;ve read through the datasheet on the SPCA533A camera controller and there doesn&#039;t appear to be a way to control the frame rate there. It&#039;s streamed through an almost completely hardware path from sensor to SD card. The CPU on there is just looking after the UI (on cameras that have one) and a few minor housekeeping tasks. Initialization is handled by this CPU, which I guess is why I managed to alter the sensor configuration.

In hacking rather than reading, I&#039;ve experimented with the close_frame setting on the module again, but I can&#039;t get that to do anything. I can get a video of the sensor test signal, which looks like a TV test card, by setting a bit in a debug register.

The really bad news is that I&#039;ve now bricked my camera in a permanent looking way. It seems like the unbricking pads are permanently shorted, so I think I&#039;ve zapped it with static. I wasn&#039;t taking any precautions so I wouldn&#039;t be surprised by that.

If I can get the datasheet for the Sunplus SPCA1528 or SPCA1527a then I&#039;d love to read it and see what more can be done. Failing that, I think I&#039;m going to go for the hardware (555 timer or PIC) option to take one still image every 4 seconds.

Cheers,
Geoff.</description>
		<content:encoded><![CDATA[<p>A bit more info.</p>
<p>I&#8217;ve read through the datasheet on the SPCA533A camera controller and there doesn&#8217;t appear to be a way to control the frame rate there. It&#8217;s streamed through an almost completely hardware path from sensor to SD card. The CPU on there is just looking after the UI (on cameras that have one) and a few minor housekeeping tasks. Initialization is handled by this CPU, which I guess is why I managed to alter the sensor configuration.</p>
<p>In hacking rather than reading, I&#8217;ve experimented with the close_frame setting on the module again, but I can&#8217;t get that to do anything. I can get a video of the sensor test signal, which looks like a TV test card, by setting a bit in a debug register.</p>
<p>The really bad news is that I&#8217;ve now bricked my camera in a permanent looking way. It seems like the unbricking pads are permanently shorted, so I think I&#8217;ve zapped it with static. I wasn&#8217;t taking any precautions so I wouldn&#8217;t be surprised by that.</p>
<p>If I can get the datasheet for the Sunplus SPCA1528 or SPCA1527a then I&#8217;d love to read it and see what more can be done. Failing that, I think I&#8217;m going to go for the hardware (555 timer or PIC) option to take one still image every 4 seconds.</p>
<p>Cheers,<br />
Geoff.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Par : Видеокамеры &#8211; брелки &#187; Подручные Записки</title>
		<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/comment-page-3/#comment-6321</link>
		<dc:creator>Видеокамеры &#8211; брелки &#187; Подручные Записки</dc:creator>
		<pubDate>Mon, 01 Aug 2011 20:14:37 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluc.fr/?p=327#comment-6321</guid>
		<description>[...] is Philippe&#8217;s website with some details of what [...]</description>
		<content:encoded><![CDATA[<p>[...] is Philippe&#8217;s website with some details of what [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Par : Geoff</title>
		<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/comment-page-3/#comment-6263</link>
		<dc:creator>Geoff</dc:creator>
		<pubDate>Fri, 29 Jul 2011 06:14:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluc.fr/?p=327#comment-6263</guid>
		<description>STOP PRESS.

Now it&#039;s daylight an issue with the low frame rate hack has come to light. The camera seems to be too sensitive, pretty much anything filmed in daylight gives a complete whiteout.

I guess it&#039;s back to the drawing board to see if I can figure out some other frame rate control system.

Meanwhile, the 6 FPS hack seems fin indoors.

Geoff.</description>
		<content:encoded><![CDATA[<p>STOP PRESS.</p>
<p>Now it&#8217;s daylight an issue with the low frame rate hack has come to light. The camera seems to be too sensitive, pretty much anything filmed in daylight gives a complete whiteout.</p>
<p>I guess it&#8217;s back to the drawing board to see if I can figure out some other frame rate control system.</p>
<p>Meanwhile, the 6 FPS hack seems fin indoors.</p>
<p>Geoff.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Par : Geoff</title>
		<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/comment-page-3/#comment-6256</link>
		<dc:creator>Geoff</dc:creator>
		<pubDate>Thu, 28 Jul 2011 21:54:45 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluc.fr/?p=327#comment-6256</guid>
		<description>I&#039;ve had a bit pf time to play now...

The programming tool works MUCH better on my old XP laptop than it does on my nice shiny Windows 7 one. Even though it is 32 bit Windows 7. Only killed the camera once all night, and revived it with the short the two pads technique anyway.

Now down to details...

The sensor configuration is about 256 byes along from the word SENSOR. It&#039;s laid out as two byte pairs. The first byte is the address in the GC0308, the second is the value they put there. The address byte generally increment while the data bytes can be anything. Anyway there&#039;s a sequence like this...
0x26 0x02
0x28 0x00 
0x2F 0x01

The interesting part (to me) there is the middle row. Address 0x28 holds the clock divider, and duty cycle parameter. I think setting the second nibble to about half of the first is a good plan, but am ready to be corrected if anyone knows better. The first nibble will divide the clock by 1 plus the vlue set in here. If you push this too high, and therefore the clockrate too low, the camera won&#039;t boot. I&#039;ve found that I can set it to 0x42 and the camera will film at 6 FPS with the remaining frames filled in as dropped frames. Not completely sure, but I guess a 2Gb card will outlast the battery at that. There is a way to run the camera from the USB though. Just hold the record button down as you plug it in to do this.

Another experiment tonight was to try the frame rate setting parameters in the output section of the datasheet. I couldn&#039;t make anything work with this though.

Finally, I played around with the &quot;special&quot; effects. I hijacked the bit in the configuration data that sets byte 0x18 labelled as unused in the document to be able to set values in the special effect control byte. This byte is at 0x23 and is a bit field, the bits enable the 3 effects independently. Presumably you can use multiple effects at the same time. anyway here&#039;s my results.

0x01 - should be Invert colors - The image was in negative.
0x02 - should be CbCr fixed - The image was in black &amp; while.
0x04 - should be edge map - The image was all white.

Anyway, that&#039;s my research so far. I&#039;m sure I can make it do more if I try, it&#039;s just a matter of finding the time.

Feel free to post any questions and I&#039;ll try to answer them.

Happy Hacking.
Geoff.</description>
		<content:encoded><![CDATA[<p>I&#8217;ve had a bit pf time to play now&#8230;</p>
<p>The programming tool works MUCH better on my old XP laptop than it does on my nice shiny Windows 7 one. Even though it is 32 bit Windows 7. Only killed the camera once all night, and revived it with the short the two pads technique anyway.</p>
<p>Now down to details&#8230;</p>
<p>The sensor configuration is about 256 byes along from the word SENSOR. It&#8217;s laid out as two byte pairs. The first byte is the address in the GC0308, the second is the value they put there. The address byte generally increment while the data bytes can be anything. Anyway there&#8217;s a sequence like this&#8230;<br />
0&#215;26 0&#215;02<br />
0&#215;28 0&#215;00<br />
0x2F 0&#215;01</p>
<p>The interesting part (to me) there is the middle row. Address 0&#215;28 holds the clock divider, and duty cycle parameter. I think setting the second nibble to about half of the first is a good plan, but am ready to be corrected if anyone knows better. The first nibble will divide the clock by 1 plus the vlue set in here. If you push this too high, and therefore the clockrate too low, the camera won&#8217;t boot. I&#8217;ve found that I can set it to 0&#215;42 and the camera will film at 6 FPS with the remaining frames filled in as dropped frames. Not completely sure, but I guess a 2Gb card will outlast the battery at that. There is a way to run the camera from the USB though. Just hold the record button down as you plug it in to do this.</p>
<p>Another experiment tonight was to try the frame rate setting parameters in the output section of the datasheet. I couldn&#8217;t make anything work with this though.</p>
<p>Finally, I played around with the &laquo;&nbsp;special&nbsp;&raquo; effects. I hijacked the bit in the configuration data that sets byte 0&#215;18 labelled as unused in the document to be able to set values in the special effect control byte. This byte is at 0&#215;23 and is a bit field, the bits enable the 3 effects independently. Presumably you can use multiple effects at the same time. anyway here&#8217;s my results.</p>
<p>0&#215;01 &#8211; should be Invert colors &#8211; The image was in negative.<br />
0&#215;02 &#8211; should be CbCr fixed &#8211; The image was in black &amp; while.<br />
0&#215;04 &#8211; should be edge map &#8211; The image was all white.</p>
<p>Anyway, that&#8217;s my research so far. I&#8217;m sure I can make it do more if I try, it&#8217;s just a matter of finding the time.</p>
<p>Feel free to post any questions and I&#8217;ll try to answer them.</p>
<p>Happy Hacking.<br />
Geoff.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Par : Philippe</title>
		<link>http://www.pluc.fr/2010/02/tear-down-and-hacking-around-gumpack-camera/comment-page-3/#comment-6245</link>
		<dc:creator>Philippe</dc:creator>
		<pubDate>Thu, 28 Jul 2011 09:24:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.pluc.fr/?p=327#comment-6245</guid>
		<description>Hello Geoff,

That&#039;s great achievement ! You are not alone here, I am really following your work. Please keep us informed of your progress ;-)
Cheers,</description>
		<content:encoded><![CDATA[<p>Hello Geoff,</p>
<p>That&#8217;s great achievement ! You are not alone here, I am really following your work. Please keep us informed of your progress <img src='http://www.pluc.fr/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /><br />
Cheers,</p>
]]></content:encoded>
	</item>
</channel>
</rss>

