Author Topic: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...  (Read 90849 times)

0 Members and 1 Guest are viewing this topic.

Offline gm0otb

  • Contributor
  • Posts: 17
  • Country: gb
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #75 on: October 04, 2011, 11:59:52 pm »
I would just like to say a big thank's to Drieg for unbricking my DS1052E after an unsuccessful firmware downgrade attempt.

While attempting a downgrade (don't ask why!) I never received the "Updata successful" message, after turning the scope off, i was never to see life in the old Rigol again, well that's until Drieg breathed new life back in it :)

Thanks Drieg, for the excellent speedy service,  It was with pleasure I made a small donation, you are a credit to the hobby!

Ray. :)
 

Offline Balaur

  • Supporter
  • ****
  • Posts: 525
  • Country: fr
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #76 on: October 06, 2011, 03:46:28 am »
Hello all,

I will like to ask you a few questions. Sorry for barging in like that. I have tried to do my homework, but I'm still at loss with some issues and I'm kindly asking for your help. Much appreciated, thank you.

I'm looking at buying an used Rigol on eBay. The seller modded the scope and it looks like the conversion was successful, in the sense that the model is identified as a DS1102E and the firmware version is 2.02 SP2.

Q1: The other picture shows the scope displaying the internal calibration signal at an amplitude of 300 mV and with a frequency of 1.000KHz (or something like that - the picture is small). Is there any way to check whether the calibration data has been corrupted or not from this very limited info?

Q2: I don't know the hardware revision. The scope seems to be an older version, with the UltraZoom label. Is the serial number useful? Does the HW rev matters?

Q3: Is any useful stuff in later DS1052 firmware revisions that will not longer work on the modded scope? Are newer DS1102 firmwares usable?

Thank you all,
Dan
 

Offline torch

  • Frequent Contributor
  • **
  • Posts: 339
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #77 on: October 06, 2011, 08:23:48 am »
AFAIK, while later hardware versions cannot run early firmware, the opposite is not true: early hardware versions can run the later firmware. (2.04 SP1 is as late as you would want though -- after that, the firmware seems to be buggy).

2.02 SP2 was the last firmware that allowed changing the model number (and hence, allowed the hack). In order to hack a later model, the firmware must first be downgraded to 2.02 SP2, model changed, then the firmware upgraded again before using the scope.

There is a hidden screen that will reveal the hardware version. Press Utility, then advance to page 3 of 3, then System Info. Now, to reveal the hidden screen:

Press Ch1 twice
Press Ch2 twice
Press Math once

Now the screen will show extra info, including the hardware version. H/W 58 is the later version that won't run properly on firmware 2.02. You could ask the seller to send you a picture of that screen.
 

Offline Balaur

  • Supporter
  • ****
  • Posts: 525
  • Country: fr
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #78 on: October 06, 2011, 10:37:36 pm »


Good suggestions. Thank you very much!
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #79 on: October 07, 2011, 01:17:56 am »
Q1: I'm afraid that a bit too little info. There is probably only wrong probe ratio selected (1:1 instead of 1:10), the amplitude of probe compensation output shoudl be about 3V. Try to ask if the hack was done vie serial or USB (USB is safe, while using serial cable there is a risk of corrupting calibration data).

Q2: There is not much diffrerence bewen them. Early units didn't have LED backlight for example, PM me s/n if you have it (3-6 initial numbers are enough) and I can tell you more...

Q3: No, hacked DS1052E scope is same as original DS1102E from the sw point of view. There is no way for the firmware to detect a modded unit (if the hack is done properly). All new firmwares works with older units.
« Last Edit: October 09, 2011, 12:13:05 am by drieg »
Bricked Rigol? This thread might be of any help.
 

Offline dougsisco

  • Newbie
  • Posts: 3
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #80 on: October 18, 2011, 12:54:09 am »
Thanks to Drieg for fixing my DS1052E!  After attempting the notorious serial port Rigol hack and using the 'enter' key instead of ALT-0-0-0, the delayed-trigger was broken and the hardware revision was scrambled. Drieg created a special 'repair' firmware which fixed the problem; very cool!
 

Offline jeremy

  • Frequent Contributor
  • **
  • Posts: 893
  • Country: au
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #81 on: October 20, 2011, 10:26:33 am »
Hey guys,

Drieg just helped me out with his scope, sent me a repair firmware and it works perfectly now. Somebody give this guy a job!

-jeremy
 

Offline dixis

  • Newbie
  • Posts: 2
  • Country: kz
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #82 on: January 23, 2012, 07:40:55 pm »
Hi to all,
A week ago i have received my ds1052e. The same day i hacked him in 1102E. The original firmware was 2.0.6. It was downgraded to 2.0.2 SP2. Then i changed  it`s serial number. He became 1102E. After that i upgrade him to 2.0.4 SP1. All was fine. After 30 minutes of playing i decided to upgrade it to it`s original 2.0.6 firmware. And then the problems started. Progress bar filled up only 70-80 percent and disappeared without "firmware is successful"  or something like that message. Without a second thought, I rebooted it. After power up it shows nothing. Only keyboard back lights were randomly lighting after each power-up. I have successfully read the firmware of spansion flash-memory via JTAG. Now I can not do anything because I do not know how the 4MB firmware placed in memory map. Could anyone help me? The board has some inscriptions 94V-0 and DEMO8 and a date 2010-12-20. Here is the external link to my broken 2.0.6 firmware (sorry, but i don`t know how to attach files larger than 1MB) http://hotfile.com/dl/143324806/25ead70/broken_2.0.6.bin.zip.html

Regards
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #83 on: January 25, 2012, 07:12:42 pm »
...solved via PM/email.
Bricked Rigol? This thread might be of any help.
 

Offline wkb

  • Frequent Contributor
  • **
  • Posts: 535
  • Country: nl
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #84 on: January 26, 2012, 06:41:42 am »
...solved via PM/email.

Another guy that owes you a couple of beers!  ;D 

Although my hack proved a smooth operation, knowing you were there in case it went south was what made me willing to take the risk!
 

Offline kvitekp

  • Newbie
  • Posts: 3
  • Country: us
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #85 on: February 01, 2012, 01:14:28 pm »
Hello all! What a fascinated reading!

Just got myself a brand new Rigol DS1052E with s/w 00.02.05. SP2 and h/w 58 and I'm considering a 100MHz hack. Just wanted to check if Drieg is still out there offering his lifesaving service?

/Peter
 

Offline jgbena

  • Contributor
  • Posts: 25
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #86 on: February 04, 2012, 05:06:02 am »
Yeah I just bought one of these... still in the Shipping phase and now I'm scared to try hacking it!!!
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #87 on: February 05, 2012, 08:39:52 pm »
Yes, I'm still here, ready to help with broken Rigol units (not only DS1052E/D, but also others)  8)
Bricked Rigol? This thread might be of any help.
 

Offline jbremnant

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #88 on: February 06, 2012, 02:20:39 pm »
Wow, I wish I found this thread before I tried out the hack.
I was on 2.05.02 firmware and tried to downgrade to 2.02.02.
Didn't work, and now my DS1052E scope is bricked with blank screen.

I am trying the warranty route since I got it only few days ago.
If I don't have any luck, I hope our "superhero" Drieg can help me out. 
 

Offline Yakovlev

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #89 on: April 11, 2012, 10:03:47 pm »
Thanks again to Drieg for restoring corrupted calibration on my 3 year old HW03 box.
Brgds, Rob
 

Offline matthewell

  • Contributor
  • Posts: 7
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #90 on: July 13, 2012, 01:40:23 am »
Hey has anyone got the jtag port working, i have been trying for a couple days and got only garbage from the TDO pin.

Any help would be great, Matt.
 

Offline dixis

  • Newbie
  • Posts: 2
  • Country: kz
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #91 on: July 18, 2012, 09:25:24 pm »
Hi matthewell,
could you post the connection schematic which you have used for jtag and what the software that handles this
 

Offline sim

  • Newbie
  • Posts: 4
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #92 on: November 13, 2012, 01:00:59 pm »
Hello! My DS1052E purchased in January, 2010 has always displayed a blank "HardVersion" in (extended) System Info. It reads:

00.02.02.02.00
DSP: 02.15
FPGA:02.00
HardVersion:

I recently upgraded it to 2.06 to try to fix usbtmc timeouts (which turned out to be a host problem anyway). This seems to have introduced an ADC offset problem that causes about a half div noise at any voltage scaling, any channel. It is obvious with peak-detect at any sweep rate, or 200us or faster in normal mode. Calibration does not fix it, but reverting to 2.02sp2 makes it all good again. I'm thinking that the new software is defaulting to assuming a newer hardware rev if the field is blank, and breaking the ADC calibration. Any ideas on this? If it can be set, I wonder what it should be set to.
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #93 on: November 14, 2012, 08:58:54 am »
Hi sim,
we have to find out the hardware version of your unit (from the serial number or better from PCB version) and then we can fix it. Please contact me via PM/email.
Bricked Rigol? This thread might be of any help.
 

Offline sim

  • Newbie
  • Posts: 4
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #94 on: November 20, 2012, 07:31:11 am »
we have to find out the hardware version of your unit (from the serial number or better from PCB version) and then we can fix it.

So, we did this, and it fixed the problem! Restoring the "HardVersion" to 07 (my board was marked "DEM07") allowed me to upgrade to 2.06 without the ADC offset problem that was present before when the field was blank. It seems my assumptions about the software assuming a newer hardware version were correct. My realtrigdelay/equtrigdelay were also wiped to 0 and I decided to also calibrate those -- not sure what I did originally. Thanks, drieg!
 

Offline matthewell

  • Contributor
  • Posts: 7
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #95 on: November 23, 2012, 04:44:53 am »
Hi matthewell,
could you post the connection schematic which you have used for jtag and what the software that handles this

Hey i am using the bus blaster jtag device with urjtag, have you had any luck?


Thanks, Matt.
 

Offline equinoxefr

  • Contributor
  • Posts: 6
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #96 on: January 01, 2013, 06:13:10 am »
Hi Drieg,

I upgraded my DS1052E today from 3.01 to 2x, hack to 1102E then upgrade to 4.0. Everything has worked but now i've a blank hardversion instead of 58. Is it a problem ?

Regards

Pierre
« Last Edit: January 01, 2013, 06:14:54 am by equinoxefr »
 

Offline equinoxefr

  • Contributor
  • Posts: 6
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #97 on: January 16, 2013, 07:45:28 am »
Little update of my previous post.

Drieg helped me to fix my problem. I lost hw version but I also lost trigger delay calibration.

With the help of Drieg, I try to set calibration data but without success. I can enter calibration data but it was lost upon power off.  So I downgraded my scope from 4.0 version to 3.01 and try again to fix it. Now it work like a charm, I can input trigger delay and fix that annoying problem ;-)

A great thanks to Drieg, our Rigol doctor ;-)
 

Offline Blogs14

  • Contributor
  • Posts: 9
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #98 on: January 22, 2013, 08:25:22 am »
Hi equinoxefr,

I think I have the same problem as you did, but I can't seem to find 3.01 firmware file anywhere.
Where did you find it? Do you think you can post a link?

Thanks in advance.
 

Offline equinoxefr

  • Contributor
  • Posts: 6
Re: Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #99 on: January 22, 2013, 05:13:18 pm »
Hi equinoxefr,

I think I have the same problem as you did, but I can't seem to find 3.01 firmware file anywhere.
Where did you find it? Do you think you can post a link?

Thanks in advance.

Hi,

I found it on microcontroller.net a little Google search and you will find it. I ask me if you can't grab it.

Pierre

Envoyé depuis mon Nexus 7 avec Tapatalk
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf