Hacking the Rigol MHO900 Scope

[norbert.kiszka]

Current results:

• All options available.
• 1 GHz bandwidth.

[norbert.kiszka]

V0.0.1 is released.

Changelog:

• Unlocked all options.
• Unlocked bandwidth 1 GHz (for all MHO900 models).
• Added bandwidth manual options (separately for each channel): 350 MHz, 500 MHz, 800 MHz.
• Optimizations.
• Minimum time base changed to 200 ps.

[0xdeadbeef]

I just wonder why your version displays 9 options instead of 7. The "options" #1 and #2 are always there and not listed on a "normal" MHO98 or MHO900. I.e. they are actually no options.

[SiliconWizard]

Interesting.

[norbert.kiszka]

I just wonder why your version displays 9 options instead of 7. The "options" #1 and #2 are always there and not listed on a "normal" MHO98 or MHO900. I.e. they are actually no options.

I just hardcoded all options to be enabled all the time.

Actually, there is 12 of them:

[0xdeadbeef]

Following this logic, there would be even one more, namely the 50MHz AFG option.
But it doesn't really make much sense to list options that are either always built in or overlap (e.g. the bandwidth upgrade from 350MHz and 500MHz to 800MHz).

[norbert.kiszka]

Number of options actually doesn't matter if everything works.

I just looked into AFG and max is 50 MHz, but it should be 100 MHz. I will take a look why is that.

[0xdeadbeef]

As a side note: the current firmware looks a bit like a Beta given that the embedded English manual is lacking a lot of chapters and even a title or table of contents.
Plus there are some quite obvious bugs like the LA threshold settings, the WLAN stick not detecting any networks at every 2nd boot or even the license activation not working as described (lic file in root of USB stick).

So, I would expect a first update of the firmware soon and would hesitate to spend money on a hack at this time (if I was in need for a hack, which I ain't anyway).
Just my 0,02€ though.

[norbert.kiszka]

They used both hardware design and firmware from DHO800/900.

My DHO924S buttons and knobs are working correctly. While DHO1000/4000 app when I press power button, it changes waveform offset...


In the datasheet, AFG has sample rate 1 GHz. So I think it should be possible to do about 320-350 MHz instead of just 50 or 100. Currently Im working on it.


Edit: their whole firmware is not even alpha. It was bad before first code line came in. And they started with a bad selection of OS.

[EEVblog]

V0.0.1 is released.
Changelog:

• Unlocked all options.
• Unlocked bandwidth 1 GHz (for all MHO900 models).
• Added bandwidth manual options (separately for each channel): 350 MHz, 500 MHz, 800 MHz.
• Optimizations.
• Minimum time base changed to 200 ps.

Cool, but selling a hack is inviting legal action.

[norbert.kiszka]

No license text means everybody can do whatever they want with it.

Same thing I can say to Rigol, because they used somebody else software code without giving a sh*t to license conditions.

[norbert.kiszka]

Going back to AFG frequency limits problem. They obfuscated the code a little bit. But finally I found it just right now after couple hours   

[EEVblog]

No license text means everybody can do whatever they want with it.
Same thing I can say to Rigol, because they used somebody else software code without giving a sh*t to license conditions.

Are you saying you have not generated any license codes?
If so, what did you do, by pass the license code checking or something?

[norbert.kiszka]

Are you saying you have not generated any license codes?
If so, what did you do, by pass the license code checking or something?

I modified the scope app mostly in Assembly. The least known programming language, because it's most complex and requires knowledge of how the CPU is doing the "things".

Exactly the same I did with DHO800/900 and DHO1000/4000 firmware. Not only hacked but also improved - especially DHO800/900 as in the attachments.

[gsobol]

I've noticed you are working with MHO934.  Will this work on MHO954?

[TUMEMBER]

I've noticed you are working with MHO934.  Will this work on MHO954?

Forget that you'll get an answer here. Don't you see that administrator Simon took offense and banned Norbert on November 16, 2025? This is a specific reward for his significant contribution to modifying the broken Rigol software. You can try asking Norbert a question on the Patronite page.

[ptluis]

I've noticed you are working with MHO934.  Will this work on MHO954?

Forget that you'll get an answer here. Don't you see that administrator Simon took offense and banned Norbert on November 16, 2025? This is a specific reward for his significant contribution to modifying the broken Rigol software. You can try asking Norbert a question on the Patronite page.

How do you know that? his account doesn't display any ban info.

Edit: never mind, I just noticed the BAN Smiley

[ptluis]

I've noticed you are working with MHO934.  Will this work on MHO954?

Forget that you'll get an answer here. Don't you see that administrator Simon took offense and banned Norbert on November 16, 2025? This is a specific reward for his significant contribution to modifying the broken Rigol software. You can try asking Norbert a question on the Patronite page.

60 bucks for cracked dho800/900 full feature version, and 30 bucks for a non finished cracked version of MHO900 is not a contribution to anybody on this forum. Its a financial contribution to his pocket.

Also who knows if he injected some malware code on the files? He injected some protection code on his "cracks/mods" to not run on several machines.

For me a contribution is something that everybody could use for free.

So not a big contribution.

[TUMEMBER]

I've noticed you are working with MHO934.  Will this work on MHO954?

Forget that you'll get an answer here. Don't you see that administrator Simon took offense and banned Norbert on November 16, 2025? This is a specific reward for his significant contribution to modifying the broken Rigol software. You can try asking Norbert a question on the Patronite page.

60 bucks for cracked dho800/900 full feature version, and 30 bucks for a non finished cracked version of MHO900 is not a contribution to anybody on this forum. Its a financial contribution to his pocket.

Also who knows if he injected some malware code on the files? He injected some protection code on his "cracks/mods" to not run on several machines.

For me a contribution is something that everybody could use for free.

So not a big contribution.

Have you analyzed this software, or are you just fabricating? Norbert can't answer for himself, but you can insinuate.

Nothing comes for free, and knowledge costs money. Have you seen free McDonald's?

[egonotto]

Hello,

there are already some people here who don't charge anything for their work.

Best regards,
egonotto

[ptluis]

I've noticed you are working with MHO934.  Will this work on MHO954?

Forget that you'll get an answer here. Don't you see that administrator Simon took offense and banned Norbert on November 16, 2025? This is a specific reward for his significant contribution to modifying the broken Rigol software. You can try asking Norbert a question on the Patronite page.

60 bucks for cracked dho800/900 full feature version, and 30 bucks for a non finished cracked version of MHO900 is not a contribution to anybody on this forum. Its a financial contribution to his pocket.

Also who knows if he injected some malware code on the files? He injected some protection code on his "cracks/mods" to not run on several machines.

For me a contribution is something that everybody could use for free.

So not a big contribution.

Have you analyzed this software, or are you just fabricating? Norbert can't answer for himself, but you can insinuate.

Nothing comes for free, and knowledge costs money. Have you seen free McDonald's?

I don't fabricate anything it's written on his patreon page that his mods are used on two machines and you have to activate them. Its kind of hypocrisy that he removes rigols protections and creating his own...

And of course knowledge must be paid but not this way. There are many users on this forum that created their own custom firmware and charge nothing, and they're getting their support through donations.

[ptluis]

I even add this, the first user that hack the licensing file for dho800/900 doesn't charge anything and even shared the info to everybody. All the others take advantage of his information to release their own on a paid style.
The spirit of every forum is to share knowledge, help each other,  isn't it?

What he is doing is assuming the cracking activity and jeopardizing the functioning of this forum, which could lead to its closure.

[Fungus]

I've noticed you are working with MHO934.  Will this work on MHO954?

Forget that you'll get an answer here. Don't you see that administrator Simon took offense and banned Norbert on November 16, 2025? This is a specific reward for his significant contribution to modifying the broken Rigol software. You can try asking Norbert a question on the Patronite page.

a) He tried to sell his upgrade hacks here.

b) He was very insulting to people who called him out over certain things.

He got a seven day ban. He'll be back next week (if he wants to).

[ptluis]

I've noticed you are working with MHO934.  Will this work on MHO954?

Forget that you'll get an answer here. Don't you see that administrator Simon took offense and banned Norbert on November 16, 2025? This is a specific reward for his significant contribution to modifying the broken Rigol software. You can try asking Norbert a question on the Patronite page.

a) He tried to sell his upgrade hacks here.

b) He was very insulting to people who called him out over certain things.

He got a seven day ban. He'll be back next week (if he wants to).

I even add this little thing: people here post the MHO files for FREE and he take them and rush to release a PAID CRACK, so he got something for free and charge in return? nobody ask him to crack software, he did it because he want to, and because he is a smart guy and know how to do it,  but he must realize that nobody here really liked that attitude (except a few guys that didn't realized the seriousness of the action).

The approach to the subject was totally wrong. Seems like he's trying to get a high monthly income from cracking and that's not acceptable. There are special places to upload cracks and all illegal stuff without compromising others.

He could argue all he can about licences but he messed the rigols code and assume publicly that action.

Still need to learn a few things about conduct and yes conduct does exist between crackers and one is that a cracker never charge for his "work" and seek for world recognition.

[tatel]

Well, not sure how the ban came in, but I would say i'm not interestedin anything android if I can avoid it. So currently leanig to siglent, not rigol.

I wouldn't pay a dime for any cracked android. But, should I need one of these MHO900, and sould this man be able to substitute Debian for android, i would be glad to pay him for that work. BTW, if that is possible, it would mean nothing would be cracked, but open source.

Last but not least: I see android as just a way to use privative software with linux. Which I don't think fits the spirit of linux. I don't know how exactly how they got rid of the GPL. To me, android is a cracked linux and google gets away with it. So I avoid using it as much as reasonably possible. Only exception is my very cheap cell phone. I recently got a Redmi 7 from aliexpres and put lineageOS in it. Including binary privative blobs. All in all, 45€ delivered and working fine.

Of course I understand admins will care about maintaining this forum free of legal hassle. But, are we sure what this man is doing is illegal? LineageOS doesn't seem to have any legal problems. Substituting Debian for android in these devices would make sure there's nothing illegal going on. Should I have an MHO900 I would gladly help him to do that, which wouldn't be a minor feat.