Poll

Has the hackabiliy of the E4 made you buy one :  

Yes, I was already looking at the competition at a similar price, but the hack swung it to E4
274 (27.9%)
Yes, I'd not considered buying a TIC before, but 320x240 resolution at this price justifies it (as either tool or toy!)
444 (45.3%)
Yes, I was going to buy an E5/6/8 class of unit but will now get the E4
49 (5%)
No, but am looking out for a cheap i3 to hack
50 (5.1%)
Not yet, but probably will if now that a closed-box hack becomes is possible
164 (16.7%)

Total Members Voted: 803

Author Topic: Flir E4 Thermal imaging camera teardown  (Read 3769657 times)

TopLoser and 8 Guests are viewing this topic.

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #125 on: October 24, 2013, 09:35:39 pm »
Correction : FTP login flir / 3vlig does work, but not on all FTP clients - Windows command line FTP works, FTPsurfer doesn't

BTW flir/IRCAM doesn't work on web interface
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #126 on: October 24, 2013, 09:37:06 pm »
Another thing. It would be really interesting (at least for me if not for others also) what would happen if you enable the UVC mode for USB. Does this result in a USB video stream of thermographic video (basically like webcam)?
You can do that with the standard, unmodified product, as mentioned in the review.  Just plug in & it appears as a digital camera device & you can record video. Framerate is a bit messed up but it does work.
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline nitroxide

  • Contributor
  • Posts: 26
Re: Flir E4 Thermal imaging camera teardown
« Reply #127 on: October 24, 2013, 09:38:37 pm »
Oops, my bad! I may have skipped parts of the review...  :-[
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
Re: Flir E4 Thermal imaging camera teardown
« Reply #128 on: October 24, 2013, 10:20:56 pm »
Hey Mike,

Just to let you know that your tear down video and investigation is being watched closely by comapnies in the TIC industry. Three separate technical officers have mentioned it to me recently  ;)   You are causing a bit of a stir  :-+
« Last Edit: October 24, 2013, 10:23:07 pm by Aurora »
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline ixfd64

  • Frequent Contributor
  • **
  • Posts: 345
  • Country: us
    • Facebook
Re: Flir E4 Thermal imaging camera teardown
« Reply #129 on: October 24, 2013, 10:26:12 pm »
If you're going to void the warranty, you might as well go the whole nine yards. ;D

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #130 on: October 24, 2013, 10:29:09 pm »
OK Useful-ish Hack stage 1 is achieved.

UART console : usbfn RNDIS

Plug USB into PC (having loaded Flir device drivers from http://flir.custhelp.com/app/account/fl_download_software, PC softare (Thermography) -> device drivers)

Web login to service menu (192.168.0.2) with user flir, PW 3vlig

Enable service mode - reboots camera into service mode (takes about 45 secs)

Some E8 functions now available -Auto hotspot, Auto coldspot, more colour pallettes

Oh, and.....
320x240 resolution

Boot text in service mode
Quote
FVD_Init: Downsampling setting: 0x00
FVD_Init: re-read the hardware information x: 320, y: 240

On next  power-up boot :

Quote
APPLAUNCHER: Starting usb charge App
ProgressApp expecting 301 events
FVD_Init: Downsampling setting: 320 240
Timeprint (3518)
POST 20131025 00:08:42 -      appcore.exe: Application started
....
POST 20131025 00:08:44 -      appcore.exe: TSFpa: 303.000000 K
FVD_Init: Downsampling setting: 0x00
FVD_Init: re-read the hardware information x: 80, y: 60


Unfortunately sleep/restore doesn't seem to work to keep it in service mode as long as battery connected  :(
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 
The following users thanked this post: chili_red

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
Re: Flir E4 Thermal imaging camera teardown
« Reply #131 on: October 24, 2013, 10:33:19 pm »
RESPECT  :-+
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #132 on: October 24, 2013, 10:33:31 pm »
Hey Mike,

Just to let you know that your tear down video and investigation is being watched closely by comapnies in the TIC industry. Three separate technical officers have mentioned it to me recently  ;)   You are causing a bit of a stir  :-+
I wouldn't expect any less  8)
Saves them paying for one of those expensive reports from people like Systemplus.
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
Re: Flir E4 Thermal imaging camera teardown
« Reply #133 on: October 24, 2013, 10:41:13 pm »
If you achieve your objective, I predict a very sharp increase in E4 sales ...... FLIR will have a major seller on their hands. I wonder how they will feel about that ?

I am aware that industry will continue to buy the full cost units due to calibration etc, but the E4 would become the cheapest 320x240 on the market and built by a top class manufacturer ! The Consumer TIC Holy Grail.

Very interesting times  :)

Oh and forget about the black helicopters.... it will be the white van snatch squad from FLIR that you need to worry about.  :-DD
« Last Edit: October 24, 2013, 10:48:48 pm by Aurora »
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline mrflibble

  • Super Contributor
  • ***
  • Posts: 2051
  • Country: nl
Re: Flir E4 Thermal imaging camera teardown
« Reply #134 on: October 24, 2013, 10:44:20 pm »
Well done!   :-+

So basically an old school IP-over-USB + use the telnet/web/whatever interface and you're in service mode? awesome!  ;D
 

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #135 on: October 24, 2013, 10:45:39 pm »
One minor issue is in RNDIS mode you can't get USB access to the drive, but you can get at the files via FTP in net mode - an advantage of this is you can take pics and pull files with USB connected - in normal mode the filesystem can only be mounted by the PC or the camera at any time.

but you can do
usbfn Mass_Storage_Class
via telnet, which reverts it to mass storage ( and dumps the net connection, obviously)

If you only have Telnet, be careful with spelling as any misspelling will dump the RNDIS link but not start MSD



Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline nitroxide

  • Contributor
  • Posts: 26
Re: Flir E4 Thermal imaging camera teardown
« Reply #136 on: October 24, 2013, 10:52:18 pm »
That was quick. Good job Mike!  ;D

Have you tried the RNDIS_UVC_MSD mode instead of RNDIS?

On another topic, I've made some good progress on Hidden Service Menu investigation, but I'm too tired to finalize this. If someone wants to give it a try - disassemble facet_ui_qml.dll and search for "hidden" string.
 

Offline bean_dip

  • Contributor
  • Posts: 16
Re: Flir E4 Thermal imaging camera teardown
« Reply #137 on: October 24, 2013, 10:53:28 pm »
Much respect Mike!

I'm still playing around with key combinations...nothing great yet, but while charging if you press "Left" and "Right" at the same time you get charge statistics under the charging icon.  But, this does verify the presence of hidden key sequences.
 

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #138 on: October 24, 2013, 10:53:52 pm »
The only thing stopping this being done without opening the unit is finding the magic way to get to teh hidden menu to enable RNDIS.

..and of course potentially the next FLIR firmware update....

Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #139 on: October 24, 2013, 11:03:45 pm »
That was quick. Good job Mike!  ;D

Have you tried the RNDIS_UVC_MSD mode instead of RNDIS?

On another topic, I've made some good progress on Hidden Service Menu investigation, but I'm too tired to finalize this. If someone wants to give it a try - disassemble facet_ui_qml.dll and search for "hidden" string.
doesn't seem to work - it won't let me copy or FTP off usbfn.exe to look for strings
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Online tom66

  • Super Contributor
  • ***
  • Posts: 6679
  • Country: gb
  • Electronics Hobbyist & FPGA/Embedded Systems EE
Re: Flir E4 Thermal imaging camera teardown
« Reply #140 on: October 24, 2013, 11:05:09 pm »
OK, the E4 is seriously tempting me...



I expect a hackable E4 would not lead to a significant reduction in E8 sales, but would lead to a large increase in E4 sales to the hobbyist/budget market.
 

Offline Pinkus

  • Frequent Contributor
  • **
  • Posts: 768
Re: Flir E4 Thermal imaging camera teardown
« Reply #141 on: October 24, 2013, 11:05:45 pm »
Deleted - Sorry, I wrote rubbish .....  its too late now: 1:10 am
« Last Edit: October 24, 2013, 11:10:27 pm by PeterK13 »
 

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #142 on: October 24, 2013, 11:12:09 pm »
http://flir.custhelp.com/app/account/fl_downloads

Software -> PC Software (Thermography) -> FLIR Device drivers -> X86 or x64 as appropriate

You do need to register.
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline nitroxide

  • Contributor
  • Posts: 26
Re: Flir E4 Thermal imaging camera teardown
« Reply #143 on: October 24, 2013, 11:13:29 pm »
Direct link to drivers: http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe
Both x86 and x64 seem to point to the same file - correct me if I'm wrong.
 

Offline Pinkus

  • Frequent Contributor
  • **
  • Posts: 768
Re: Flir E4 Thermal imaging camera teardown
« Reply #144 on: October 24, 2013, 11:16:12 pm »
Quote
I expect a hackable E4 would not lead to a significant reduction in E8 sales, but would lead to a large increase in E4 sales to the hobbyist/budget market.

You bet! I already placed my order. Finally I can check my prototypes about hot spots and heat spreading. A resolution of 80x60 was nothing to write home about, but 320x240 for 1200 Euro (incl. VAT) is fair.... and as I side effect I can check my house for hidden problems.

 

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #145 on: October 24, 2013, 11:28:29 pm »
Just tried a few permutations of sleep mode to see if test mode can be sustained longer term, but it seems to flake out - if plugged int USB it sticks at the battery logo when you wake, if not, it sort of wakes up then crashes.
I suspect cockup over conspiracy on this one....

Of course until we find the secret key or fully hack it, a little PIC/AVR on a flex plugged into the test connector to say "usbfn RNDIS" when it sees the command prompt would do the trick...!
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #146 on: October 24, 2013, 11:34:00 pm »
Little snippet from resources when in service mode
Quote
.caps.config: (3)
name            "app E4 1.0 + app prodconvconf_std 999.9KaKaOnly"
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #147 on: October 24, 2013, 11:44:48 pm »
Update - although manually turning off from service mode crashes it, it seems like if you let the auto-power off time out, it wakes back up in service mode (with  RNDIS still running).
 
Incidentally I think the image resolution is being limited to some extent by the lens. Hard to tell if the temperature data is still accurate.
Question for any TIC experts - would a bigger lens affect the calibration? (looks like you probably could recal via service mode though)

oh and for the web experts - by looking through the .asp files etc. can you deduce anything about what it actually does when you hit the 'enable service mode' button? Even a snippet of text that could be looked for in executables might be interesting. I have seen references to something like "oneshotservicemode"
« Last Edit: October 24, 2013, 11:47:47 pm by mikeselectricstuff »
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline ixfd64

  • Frequent Contributor
  • **
  • Posts: 345
  • Country: us
    • Facebook
Re: Flir E4 Thermal imaging camera teardown
« Reply #148 on: October 25, 2013, 12:05:34 am »
I'm not sure if this helps, but I found these links to be quite interesting:

http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf
http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf (copy and paste the URL if it doesn't work)

Online mikeselectricstuffTopic starter

  • Super Contributor
  • ***
  • Posts: 13695
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #149 on: October 25, 2013, 12:12:22 am »
Your second hyperlink is broken -- copying the URL and pasting it in works, however.
I think that's the same doc I linked to previously
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf