Ideally I'd want to turn it into a camera I can take pictures with. I'd also be interested in running it as a video camera. I don't wanna go thru the effort of buying a sync module or anything. Is there anything I can realistically do with it?

I have a cheap t70 smart watch that I want to jailbreak to add small games any help would be appreciated

It uses a bc 417 as a main chip

Hi everyone!

I'm trying to make a backup of the Flash memory from a Hanshow Nebular electronic shelf label. The controller on my board is marked Hanshow HS9118, which may be related to the Telink TLSR835x family, particularly the TLSR8359. I also have an NT083V electronic display equipped with a TLSR8359 chip.

I'm not interested in programming the microcontroller, writing code, or flashing alternative firmware. My only goal is to read the original memory contents and save them to a BIN file, if the chip allows it.

I want to preserve the original contents of the memory. I don't want to erase anything, change the chip's configuration, or modify the firmware.

What hardware and software should I use?

I've found the following tools and documentation related to Telink chips:

• TLSRPGM: https://github.com/pvvx/TLSRPGM
• Official Telink BDT for the TLSR9 series: https://wiki.telink-semi.cn/wiki/IDE-and-Tools/Burning-and-Debugging-Tools-for-TLSR9-Series/
• Official Telink BDT for other series: https://wiki.telink-semi.cn/wiki/IDE-and-Tools/Burning-and-Debugging-Tools-for-all-Series/
• TLSR835x series documentation: https://wiki.telink-semi.cn/wiki/chip-series/TLSR835x-Series/
• Telink BDT for Windows documentation: https://doc.telink-semi.cn/doc/en/software/res/tools/bdt_wins/bdt_wins_en/
• Telink IoT Studio: http://wiki.telink-semi.cn/wiki/IDE-and-Tools/Telink_IoT_Studio/

The board has several test points labeled SWS, NRST, VCC, and GND.

I'm considering using TLSRPGM or the official Telink BDT software, but I'm not sure which solution supports the TLSR8359 and allows Flash memory to be read. I'm also unsure whether I need a dedicated Telink programmer or if another interface would work.

Questions for anyone experienced with Telink TLSR835x chips

1. Does TLSRPGM support the TLSR8359 or the Hanshow HS9118 controller?
2. Can the official Telink BDT software read the Flash contents of this chip and save them to a BIN file?
3. Which specific programmer and software would you recommend for this task?
4. How should the programmer be connected to the SWS, NRST, VCC, and GND test points? Are any additional components or logic-level converters required?
5. Would a standard USB-to-UART adapter, such as a CH340 or CP2102, be useful, or is a different interface required for SWS communication?
6. Has anyone successfully read the original firmware from these electronic shelf labels without replacing it with OpenEPaperLink?

I also found this programmer on AliExpress and would appreciate feedback on whether it is suitable:

https://pl.aliexpress.com/i/1005008282301532.html

My main priority is confirming hardware compatibility and finding a safe way to read the memory. I don't want to perform any erase or write operations. I understand that reading the Flash may depend on the security settings enabled on the microcontroller, and I'm not looking for ways to bypass those protections.

I'd appreciate specific recommendations for a compatible programmer, the appropriate software, and instructions on how to connect everything correctly.

Thanks in advance for any help!

An update on the Saudi who attempted to bug OpenAI’s executive conference room, including pictures of the device. The first reporting said it had memory and only recorded offline, but the Seeed Studio 2.4 GHz antenna is telling another story... ☁️

Can anyone identify it?
https://www.cnbc.com/2026/10/19/openai-bugging-suspect-alfozan-saudi-royal-family.html

EDIT2: Better photos of the implant from the FBI complaint: https://imgur.com/gallery/gnQSNSk#7QlpXVf

EDIT: FBI's 11-page complaint https://storage.courtlistener.com/recap/gov.uscourts.cand.480828/gov.uscourts.cand.480828.1.0.pdf

Is it possible to program this HC 03 module . The module has processor, flash and several IO pins and uart so is there any way to program this like an MCU

Anyone share me for hardware hacking learning material guys

Is there any engineer or person who can tell me by looking at the motherboard of the ID machine, the machine that breaks the readings, whether it is programmed by hacking or without hacking?

Look at the indicator, the external display, and the 'GM mode' positioned in between. Notice that the indicator shows 'No DLC'—yet, the display above it reads 'zero'. This clearly indicates that a 'hacking' program is fully active. If this weren't a hack, the display would either show dots or remain blank; I have operated this type of machine before, and I know that when 'No DLC' appears, the machine's display should show '---'. Since the machine is effectively signaling that it has no connection to the vehicle's data link, how is it possible for the external display to show 'zero'?

Is there any engineer or person who can tell me by looking at the motherboard of the ID machine, the machine that breaks the readings, whether it is programmed by hacking or without hacking?

There's a 14-pin U1 chip with a number on the bottom. It savs XDS12A RCBLB000O 2038ABSAR. I think this might be an EEPROM. Is it read/writeable? ?

Just thought I'd post this here too. I repurposed a really crappy goordik lapel mic as an intervalometer for my Camera. (Basically, fancy shutter button that can do things like 5 minute exposures, astrophotography, etc..) Yay for saving something from becoming e-waste.

I don't know if this is the right place to ask these questions.

I bought a lock-picking kit a few weeks ago, and I became obsessed with it. I wanted to open every door and padlock (I never open anything without authorization). But now I want to open electronic locks and electric gates. Does anyone know where I can start? . Does anyone know if I can use it to open a door like the one in the picture?

Hey everyone,

Smart TVs running on Realtek silicon (like the ubiquitous TCL 40" RT41 chassis) have always been a nightmare to research: JTAG is permanently fused off at the factory, and flashing experimental firmware or modified kernels carries a high risk of hard-bricking the BGA eMMC.

To solve this, I reverse-engineered the hardware layout and built the first bare-metal QEMU machine model for the Realtek RTD2841 / RTK284x SoC:

🔗 GitHub: https://github.com/rubenthampy890-del/qemu-rtd2841

Key reverse-engineered blocks:

- Cortex-A53 quad-core forced into 32-bit AArch32 mode (matching TV firmware)

- GIC-400 interrupt controller with 256 IRQs mapped to match silicon SPI routing

- Realtek TC0–TC7 27 MHz decrement timer engine and hardware watchdog

- 16550A UART0 console with 4-byte stride at `0x18062300`

- Hardware SDHCI eMMC host controller at `0x18010800`

Includes flat-binary baremetal test payload, device trees, and upstream QEMU patches.

So I have this pretty cheap shitty smartwatch I bought from online that turned out to be a dupe apple watch, i900 ultra smth, and doesn't really work that well. It's battery life is okayish without connected to Bluetooth. You can only really see the time and customize the wallpaper but even then it's not the best or customizable just adding a pic. No alarms. Fake BPM and BP. Basically just a phoney. It works with hiwatch pro app or smth. Anyway to delete the current software and install a new one that's perfect with the hardware so I can do basic stuff like alarm or customizing and the normal stuff that comes with it? Downloading apps or anything like the real ones aren't important but I'd like that too if possible. I just want to keep it useable till I save up for a new more expensive better watch. I also don't wanna open the watch cause I'm not engineer. 🙏🏼

x-post from r/videosurveillance

Been poking at a 2024-era Vizio D-series (model VFD40M-0810, board E022M773-B2) and wanted to share what I’ve found and see if anyone has gone further on this SoC family.

Hardware:

- SoC: MediaTek MT5583 (SoC Type: mtk5583, platform: mt5583_cast)

- RAM 1GB

- eMMC: Samsung KLM4G1FETE-B041 (4GB, BGA-153)

- WiFi: external USB module (MT7663)

- OS: ViziOS 1.6.1537.1 (Ubuntu-based), firmware 3.720.9.1-1

What I’ve done:

- Found the labeled UART header (ON/GND/RX/TX) and get a clean boot log at 115200 8N1.

- Boot log shows it auto-logs in as root (VizioTV login: root (automatic login)) and reaches a $ prompt, but the Linux console appears to be output-only. TX wiring is confirmed good (loopback tested), RX pads reflowed and swapped, but no input is accepted at the shell.

- Caught the bootloader by interrupting autoboot. Prompt is << M7332 >>#. help returns “forbidden command, please use [ce] to unlock console.”

- ce issues a crypto challenge/response (random challenge printed, wants a matching response). Verified boot (AVB2.0) is also active. boot log shows Boot state is: Green, dm-verity on the system partition, A/B slots.

Questions:

- Has anyone gotten interactive access on an MT5583 / mt5583_cast ViziOS device, via the Linux console or U-Boot?

- Is the read-only Linux console a known ViziOS behavior, or am I missing something (baud flip to high-speed mode, a different tty, flow control)?

- Anything documented about the ce console-unlock on MStar/MTK U-Boot of this generation?

- Mainly: what’s the realistic ceiling on this platform? Trying to gauge whether it’s worth more time or whether this generation is effectively locked down.

Happy to share the full boot log and board photos if useful. Thanks.