DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?

[Bud]

Well looks this Keysight baby put in dust Dave's oscilloscope mud drugging survival test. 

[Marchello]

to ELIK:
Snimay shlyapu!!!
BEST WORK!!!

[Andrey_irk]

Ha-ha-ha, yes, crazy job.
Thanks for knobs measuring

Congratulations!

But how did you repair the case? I mean, at the back of the instrument. It looked exploded.

[ELIK]

Thanks for your kind words.
Yes, next step will be mount of touchscreen (one version by tablet may be applicable, just in a way from china), and soldering of new BNC connector "Gen.Out" - it was was hardly damaged. After ending of all internal repairs - yes of course, I will work with a file in hands... 

But how did you repair the case? I mean, at the back of the instrument. It looked exploded.

- all pictures have names, please see carefully. 

[HardDrive]

The infiniivisionLauncher.exe --help on the latest firmware for the MSO3000T Series 7.10.2017042905 seems to display the help menu.
As was hinted by ELIK, there is a way to unlock the options on the MSOX3000T series.

I have not yet been able to make it permanant, but what I have done is:
1. Extract infiniiVisionLauncher.exe from 3000XSeriesT.7.10.2017042905.ksx -> infiniiVisionSetup\%InstallDir%\infiniiVisionLauncher.exe using the tools from abyrvalg's post
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg480432/#msg480432

2. Login with telnet with username:infiniivision and password from your scope mac address, using scripts posted by memset
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg1115338/#msg1115338

3. Copy the extracted infiniiVisionLauncher.exe to "\Program Files\infiniiVision\infiniivisionLauncher.exe" (via usb)
4. Execute "\Program Files\infiniiVision\infiniivisionLauncher.exe" -l WAVEGEN (or whatever options you want)

Code: [Select]

\windows> "\Program Files\infiniiVision\infiniivisionLauncher.exe" -l WAVEGEN
System has been running 1475.297974 seconds
*** Installing License: WaveGen license
System has been running 1484.592041 seconds

I do get some "System concerns detected" relating to Secure Storage being uninitialized. But the WAVEGEN option works now

[adranp]

:HardDrive

Excellent discovery, though I have one question for you..

Have you installed the new fw 7.10 before doing this test? Or are you using the infiniiVisionLauncher.exe from 7.10 in a scope with older fw?

Thanks in advance.

[Hydrawerk]

Oh, I hope that your new scope will work OK after that terrible incident and surgery.
It is like some people in Russia never give up.

[Dubbie]

Has anyone managed to do the 1Ghz upgrade yet?

[TK]

3. Copy the extracted infiniiVisionLauncher.exe to "\Program Files\infiniiVision\infiniivisionLauncher.exe" (via usb)

Thank you for this information.  Was there a file named infiniiVisonLauncher.exe in the target directory before you did the copy?  What size does the extracted infiniiVisionLauncher.exe have?

[HardDrive]

Have you installed the new fw 7.10 before doing this test? Or are you using the infiniiVisionLauncher.exe from 7.10 in a scope with older fw?

This is after upgrading the scope's FW to 7.10, did not try using the exe directly. Seem remembering --help not returning anything on 4.08.
However, on my scope, there were more features enabled in 7.10 compared to 4.08. I did not have the 'Training Signals' EDK option on 4.08.

Was there a file named infiniiVisonLauncher.exe in the target directory before you did the copy?

Yes, there was a file with the same name. I just replaced it, but it wont be permanent. Going to try the 'modified startup lnk files' way.

What size does the extracted infiniiVisionLauncher.exe have?

The extracted infiniiVisionLauncher.exe is 402376 bytes; the one in '\Program Files\InfiniiVision' is 5632 bytes; and another one in '\Secure\InfiniiVision' is 12104 bytes.
Strange thing about this is that I couldn't find the larger infiniiVisionLauncher.exe anywhere in the scope. The 12104 bytes one '\Secure\InfiniiVision' in doesn't start.

[Bud]

I have not yet been able to make it permanant,

What do you mean ?

[TheSteve]

I have not yet been able to make it permanant,

What do you mean ?

He means having it enabled automatically every boot.

[adranp]

:HardDrive - thanks for your reply.. Starting with 7.10 Training Signals EDK  is a free option..

Probably the \Program Files\InfiniiVision file is just an envelope for the real executable and does strip the possibility to issue options..

I'll try this myself soon.. Thanks again..

[Safar]

Ha-ha-ha, yes, crazy job.
Thanks for knobs measuring

Vpechatlyaet.....

Is it Tek mod BNC on 3d channel?[emoji15]

Sent via Tapatalk

[ELIK]

Please don't crypt your talk, it's a public forum.
Use traditional english.

[Safar]

Please don't crypt your talk, it's a public forum.
Use traditional english.

No problem It's like "so impressive"

And is it Tek mod indeed?

Sent via Tapatalk

[ELIK]

Sorry, understand now. 
Yes, channels 3 and 4 was moded for TEK differential probes like P5205.
I thought no one will notice... 

[Safar]

Sorry, understand now. 
Yes, channels 3 and 4 was moded for TEK differential probes like P5205.
I thought no one will notice... 

Very interesting. Is it DIY PCB or you mounted standard Tek connector?
I have several Tek probes, and think about same mod.

Sent via Tapatalk

[ELIK]

There is no additional DIY pcbs. Just the sectors cutted of copper ring with CNC router, the holes drilled  at the outer edges of sectors, powered by the small wires soldered thru these holes. all additional was soldered at the bottom side of main buttons pcb. On the buttons pcb already mounted inverter with -14v output, I use it for cooking of +14V (shottky diode +inductor +tantal capacitor). And resistor for detect of probe by the tool, of course.
It's not best solution but enough for powering of P5205 probe.
I can do the pictures when open the tool next time.

[Safar]

I can do the pictures when open the tool next time.

Perfect! Very interesting mod. And picture also.

I think that +-12V would be enough for my probe (6245, 6249, 6330 - actually there only +15V pin used for convert it to +7V, so it work perfectly on +12V, and +-5V of course).

Anyway I think that your work deserve for separate topic (especially since we slightly deviated from this one). I believe that everyone will be interested to see this restoration.

Sent via Tapatalk

[ELIK]

Yes, you right. Little bit later will do it.

On the face pcb, the +12v and -12v is presented and stable (regulated) as I remember, will be good to use it.

[Safar]

Yes, you right. Little bit later will do it.

On the face pcb, the +12v and -12v is presented and stable (regulated) as I remember, will be good to use it.

Yes here was topic with Autoprobe interface description (hp patent actually), but 3000 series have lite version. There are  +-12 and -+5V unregulated and 400mA on all ports summary

Sent via Tapatalk

[Bud]

1. Extract infiniiVisionLauncher.exe from 3000XSeriesT.7.10.2017042905.ksx -> infiniiVisionSetup\%InstallDir%\infiniiVisionLauncher.exe using the tools from abyrvalg's post

I did with no tools, just rename .ksx to .zip, dive into it and in the .CAB file find the file with 402.376 bytes size. Extract and rename to infiniiVisionLauncher.exe

In subsequent firmware revisions the size may change though, but you get the idea.

[Bud]

4. Execute "\Program Files\infiniiVision\infiniivisionLauncher.exe" -l WAVEGEN (or whatever options you want)

Did you try other options, can you confirm they work?

[adranp]

I can confirm - BW50 and -ALL

Do any of you found a way to make this permanent? Haven't had the time to do some tests myself but I will soon if no one found a solution already..

Thanks..