Author Topic: Hacking the Rigol MSO5000 series oscilloscopes  (Read 901211 times)

0 Members and 6 Guests are viewing this topic.

Offline c_pi

  • Newbie
  • Posts: 2
  • Country: de
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1850 on: October 06, 2020, 07:25:51 pm »
Hello,

I just registered here to ask the following question:

I ordered a MSO5074 to use it with the patch @350MHz and with the options enabled.
Today I received a MSO5104 with FW 00.01.03.00.01 instead of the MSO5074.
I tried to apply the patch via USB-Stick with the files from

https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3024342/#msg3024342 and
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3025330/#msg3025330

... but the Scope shows the "wrong check sum" error.

Am I doing something wrong? Or does the patch not work with the MSO5104?

Thank you for your help!
 

Offline riccardo.pittini

  • Regular Contributor
  • *
  • Posts: 67
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1851 on: October 06, 2020, 07:28:53 pm »

I just wanted to highlight one thing (MSO5074):
- I tried patching a scope (v00.01.03.00.01, hw1.01) however checksum was wrong, the scope had a build (v00.01.03.00.01) dated mid may!!!
- Simply re-flashed the original build v00.01.03.00.01 from end of april. Patched and all was good :)

So it seems that they made two different build for v00.01.03.00.01, with different dates/contents. It would be interesting to understand if there are any real/important changes.
« Last Edit: October 26, 2020, 07:46:03 am by riccardo.pittini »
 

Offline riccardo.pittini

  • Regular Contributor
  • *
  • Posts: 67
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1852 on: October 06, 2020, 07:30:14 pm »
just reflash the v00.01.03.00.01 build from end of April, and try again.

Probably you gor a scope with a v00.01.03.00.01 build from mid may, hence the different checksum.
 
The following users thanked this post: neutron, c_pi

Offline c_pi

  • Newbie
  • Posts: 2
  • Country: de
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1853 on: October 06, 2020, 07:53:58 pm »
Thank you very much for your help!

It's great, that the patches are available - thanks for your great work!

In fact the firmware version 00.01.03.00.01 had a build stamp from 2020-05-18.

I reflashed the Firmware from the Rigol page and now It was possible to run the patches.
 
The following users thanked this post: neutron

Offline S. Petrukhin

  • Super Contributor
  • ***
  • Posts: 1140
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1854 on: October 08, 2020, 06:30:48 am »
I wish my Rigol had a battery option!  With the power analysis function it would be THE machine for solar power systems diagnostics!

Battary for you RIGOL:     :-//
And sorry for my English.
 
The following users thanked this post: dc8wan, srjaynes49

Offline neutron

  • Newbie
  • Posts: 2
  • Country: us
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1855 on: October 22, 2020, 09:02:26 pm »
just reflash the v00.01.03.00.01 build from end of April, and try again.

Probably you got a scope with a v00.01.03.00.01 build from mid may, hence the different checksum.

Thanks for posting this info!

I just got a MSO5074 with that same mid-May version of the v00.01.03.00.01 firmware (listed onscreen as Build:  2020-05-18 11:42:06)
The patch checksums didn't work.

After I rolled back to the April version of the v00.01.03.00.01 firmware (listed on-screen as Build:  2020-03-30 15:56:36), the patching worked!   ;D

Thank you to all who contributed to this effort!  It is impressive and apprecitated!
« Last Edit: October 22, 2020, 09:08:06 pm by neutron »
 

Offline dl9lc

  • Newbie
  • Posts: 1
  • Country: de
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1856 on: October 24, 2020, 08:09:59 am »
Last weeek i bought a 5074 and downgraded the firmware to the state of 2020-03-30.
Thanks to the easy summery everything works as charme.
The scope seems not so bad. The jitter in timebase seem to be around 250ps p/p referenced to a HP 10811 - not to bad for this class.
The genarator is not the best and a bit noisy, but better than nothing.
Many thanks to all how have made this patch possible.
vy 73 dl9lc
 

Offline oliv3r

  • Frequent Contributor
  • **
  • Posts: 279
  • Country: nl
    • Rigol related stuff!
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1857 on: October 24, 2020, 11:08:39 am »
Just for those interested and didn't spot it yet, rigol now has a 'service manual'
  • It is only for the 5000-E but should be the same. It really only contains a blow up and a teardown/reassembly guide but still ... pretty cool.
  • [0]:
https://www.rigol.eu/Public/Uploads/uploadfile/files/ftp/%E6%96%B0%E8%B5%84%E6%96%99%E5%BA%93-%E5%90%AB%E6%89%8B%E5%86%8C%E5%9B%BA%E4%BB%B6%E8%BD%AF%E4%BB%B6/%E5%AE%98%E7%BD%91%E8%B5%84%E6%96%99/DS/%E6%89%8B%E5%86%8C/MSO5000-E/EN/MSO5000-E_ServiceGuide_EN.pdf

Offline oliv3r

  • Frequent Contributor
  • **
  • Posts: 279
  • Country: nl
    • Rigol related stuff!
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1858 on: October 24, 2020, 11:12:47 am »
Has anybody take them up on their offer? It does say it in quite verbatim:
Quote
The open source software is provided for free. RIGOL uses third-party open source
software subject to the specified licenses. You are entitled to use the open source
software subject to their respective license. If you or any third party wants to obtain
the complete corresponding source code for the software from us, please contact:
RIGOL (SUZHOU) TECHNOLOGIES
E-mail: service@rigol.com
Website: www.rigol.com
This offer is valid for three years after you received the software.

I did ask them for the software, so lets see what happens next :) (but would be nice to know if others already did this  too)

So I never received a reply. So yesterday, I've sent a request to the European office, and got a reply promptly. They asked where I've sent the previous request too, and that they would prepare the files I requested (I requested all sources for all products :p)

They said they'd send them to me on november 17th. No idea why it is taking so long, maybe that's the day they'll open their github.com/rigol repo?

Anyway, fingers crossed!

P.S. they moved the GPL pdf to the official download location (the old one yields a 404 now). so the new link for those that don't want to go into the sign-up wall is: https://www.rigol.eu/Public/Uploads/uploadfile/files/ftp/DS/MSO5000%20Open%20Source%20Acknowledgment.pdf (looks the same url though? hmm ...)
« Last Edit: October 24, 2020, 11:36:40 pm by oliv3r »
 

Offline S. Petrukhin

  • Super Contributor
  • ***
  • Posts: 1140
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1859 on: October 24, 2020, 02:01:36 pm »
Has anybody take them up on their offer? It does say it in quite verbatim:
Quote
The open source software is provided for free. RIGOL uses third-party open source
software subject to the specified licenses. You are entitled to use the open source
software subject to their respective license. If you or any third party wants to obtain
the complete corresponding source code for the software from us, please contact:
RIGOL (SUZHOU) TECHNOLOGIES
E-mail: service@rigol.com
Website: www.rigol.com
This offer is valid for three years after you received the software.

I did ask them for the software, so lets see what happens next :) (but would be nice to know if others already did this  too)

So I never received a reply. So yesterday, I've sent a request to the European office, and got a reply promptly. They asked where I've sent the previous request too, and that they would prepare the files I requested (I requested all sources for all products :p)

They said they'd send them to me on november 17th. No idea why it is taking so long, maybe that's the day they'll open their github.com/rigol repo?

Anyway, fingers crossed!

What a turn! You "blew up the bomb" and you will now be feared in Rigol.  :-DD
But, they can provide the code executed by the processor that runs in the OS. And this is just the user interface, if I'm not mistaken. The main work is done in the FPGA and they are not required to publicate this code.

Probably the Rigol guys are reading this thread. Guys, come out, don't be afraid of open source - third-party firmware that will inevitably appear will make your product even more popular.  :clap: I think people will love your product if you become open. This path was followed by PC-giving the opportunity to independently assemble computers and expand them, thereby sharply breaking away from the closed Apple, which is held in the market of show-offs.  :)

If this thread is not read by Rigol specialists, oliv3r, please pass these thoughts on to them. :)
« Last Edit: October 24, 2020, 02:05:28 pm by S. Petrukhin »
And sorry for my English.
 

Offline oliv3r

  • Frequent Contributor
  • **
  • Posts: 279
  • Country: nl
    • Rigol related stuff!
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1860 on: October 25, 2020, 09:33:52 pm »
Has anybody take them up on their offer? It does say it in quite verbatim:
Quote
The open source software is provided for free. RIGOL uses third-party open source
software subject to the specified licenses. You are entitled to use the open source
software subject to their respective license. If you or any third party wants to obtain
the complete corresponding source code for the software from us, please contact:
RIGOL (SUZHOU) TECHNOLOGIES
E-mail: service@rigol.com
Website: www.rigol.com
This offer is valid for three years after you received the software.

I did ask them for the software, so lets see what happens next :) (but would be nice to know if others already did this  too)

So I never received a reply. So yesterday, I've sent a request to the European office, and got a reply promptly. They asked where I've sent the previous request too, and that they would prepare the files I requested (I requested all sources for all products :p)

They said they'd send them to me on november 17th. No idea why it is taking so long, maybe that's the day they'll open their github.com/rigol repo?

Anyway, fingers crossed!

What a turn! You "blew up the bomb" and you will now be feared in Rigol.  :-DD
But, they can provide the code executed by the processor that runs in the OS. And this is just the user interface, if I'm not mistaken. The main work is done in the FPGA and they are not required to publicate this code.

Probably the Rigol guys are reading this thread. Guys, come out, don't be afraid of open source - third-party firmware that will inevitably appear will make your product even more popular.  :clap: I think people will love your product if you become open. This path was followed by PC-giving the opportunity to independently assemble computers and expand them, thereby sharply breaking away from the closed Apple, which is held in the market of show-offs.  :)

If this thread is not read by Rigol specialists, oliv3r, please pass these thoughts on to them. :)

Course the 4 FPGA's are interesting too; but lets treat those as 'hardware' for now :)

once we know the interfaces between the hardware, FPGA and the software, we could even start to re-write the FPGA software :p

But for now, lets first see Rigol uphold the GPL :)

Offline S. Petrukhin

  • Super Contributor
  • ***
  • Posts: 1140
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1861 on: October 25, 2020, 10:20:01 pm »

Course the 4 FPGA's are interesting too; but lets treat those as 'hardware' for now :)

once we know the interfaces between the hardware, FPGA and the software, we could even start to re-write the FPGA software :p

But for now, lets first see Rigol uphold the GPL :)

I don't know much about licensing. If I'm not mistaken, using Linux with a GPL license requires publishing the source code of running programs? Can we apply to R&S in the same way?  :popcorn:
And sorry for my English.
 

Offline Sergey Astakhov

  • Contributor
  • Posts: 10
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1862 on: October 25, 2020, 11:57:01 pm »
I don't know much about licensing. If I'm not mistaken, using Linux with a GPL license requires publishing the source code of running programs?

Nope. It's depends on the type of use of the GPL code.
It's definitely required only if you include some GPL code or static link them.
Simple using GPL program do not impose publishing.
 

Offline Alfgan

  • Contributor
  • Posts: 18
  • Country: lt
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1863 on: November 01, 2020, 07:20:40 pm »
After a who day I managed to upgrade my MSO, thanks everyone for your hard work so that a young engineer like me could get such an amazing scope.

Whole bunch of projects ahead :)
 
The following users thanked this post: uski

Offline luky315

  • Regular Contributor
  • *
  • Posts: 226
  • Country: at
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1864 on: November 16, 2020, 11:32:19 am »
I tried to "have a look" on my DS7014 FW 01.02.00.05 (newest)
SSH is deactivated in this version, but it was possible to reactivate it with the script from mabl
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg2234076/#msg2234076

unfortunately the root:root login is not working, I only get an acces denied message:
login as: root
root@10.0.0.18's password:
Access denied

admin:rigol won't work either.

Has anyone more infos for this scope?
 

Offline S. Petrukhin

  • Super Contributor
  • ***
  • Posts: 1140
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1865 on: November 16, 2020, 11:38:56 am »
They said they'd send them to me on november 17th. No idea why it is taking so long, maybe that's the day they'll open their github.com/rigol repo?

Anyway, fingers crossed!


Tomorrow is the scheduled response date.  :popcorn:
And sorry for my English.
 

Offline srjaynes49

  • Contributor
  • Posts: 11
  • Country: us
  • 70 is the new 50!
Re: Hacking the Rigol MSO5000 series oscilloscopes - Battery Power
« Reply #1866 on: November 16, 2020, 03:59:36 pm »
I have a portable inverter with a fairly large battery.  It's not the same as having an internal battery.  Portable inverter, mine included, are notorious for having very poor A/C waveforms.  They're supposed to be "modified sine-waves" but they look much more like a square-wave when examined.  I hate to subject my equipment to such poor quality mains power.  I have a much older OWON 100MHz, 2-channel scope with battery option.  I'll likely continue to use that instrument in the field for my solar installation consulting.  /Users/stevenjaynes/Pictures/Inverter Waveforms/IMG_4918.jpg
Nothing clever to read here...
 

Offline Sergey Astakhov

  • Contributor
  • Posts: 10
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1867 on: November 16, 2020, 04:13:17 pm »
unfortunately the root:root login is not working, I only get an acces denied message:
login as: root
root@10.0.0.18's password:
Access denied

admin:rigol won't work either.

Has anyone more infos for this scope?

Try Rigol201
If password is differs from MSO5x, you can try to crack them, like this - https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg2072749/#msg2072749
« Last Edit: November 16, 2020, 04:14:55 pm by Sergey Astakhov »
 

Offline luky315

  • Regular Contributor
  • *
  • Posts: 226
  • Country: at
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1868 on: November 16, 2020, 04:48:10 pm »
Rigol201 works as password, but the SSH connection is not working: ls is showing an empty root directory.
Something has changed...
 

Offline S. Petrukhin

  • Super Contributor
  • ***
  • Posts: 1140
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes - Battery Power
« Reply #1869 on: November 16, 2020, 06:11:38 pm »
I have a portable inverter with a fairly large battery.  It's not the same as having an internal battery.  Portable inverter, mine included, are notorious for having very poor A/C waveforms.  They're supposed to be "modified sine-waves" but they look much more like a square-wave when examined.  I hate to subject my equipment to such poor quality mains power.  I have a much older OWON 100MHz, 2-channel scope with battery option.  I'll likely continue to use that instrument in the field for my solar installation consulting.  /Users/stevenjaynes/Pictures/Inverter Waveforms/IMG_4918.jpg

An uneven sinusoid is unpleasant to the reactive load, which likes harmonic waves. The oscilloscope has a switching power supply, the task of your inverter is just to charge the capacitors after the rectifier in the high part and maintain their charge, supplying energy.

Yes, the curvature of the sinusoid will also interfere with the charging of capacitors. But you don't do in the field, where there is no outlet, where you can't stretch an extension cord - that is, in the open field, laboratory high-precision measurements.  :-//
And sorry for my English.
 

Offline omgoleus

  • Contributor
  • Posts: 14
  • Country: us
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1870 on: November 18, 2020, 03:51:58 am »
Hi All! Just joined so I could post, after spending... well, multiple hours reading the history of this amazing journey.

just reflash the v00.01.03.00.01 build from end of April, and try again.

Probably you got a scope with a v00.01.03.00.01 build from mid may, hence the different checksum.

Thanks for posting this info!

I just got a MSO5074 with that same mid-May version of the v00.01.03.00.01 firmware (listed onscreen as Build:  2020-05-18 11:42:06)
The patch checksums didn't work.

After I rolled back to the April version of the v00.01.03.00.01 firmware (listed on-screen as Build:  2020-03-30 15:56:36), the patching worked!   ;D

Thank you to all who contributed to this effort!  It is impressive and apprecitated!

I also just got a MSO5072 with the mid-May firmware, same number and build timestamp listed above.
I went ahead and used the well-worn ssh enabler, ssh in, use the command line to copy the appEntry file onto a USB stick at /media/sda1 and took it to another computer to do the MD5.
If you have any kind of unix computer (linux or Mac) simply type
$ md5 /Volumes/USB_DRIVE/appEntry
or whatever the appropriate path is for you. md5 should be present by default in most unix-like systems.
MD5 (appEntry) = 783a31ebdc0d4acb7b9dc244155ba1c6
From everything I'm seeing here, it seems like this piece of info should be enough to get the patcher to work? Am I misunderstanding?
I'll try it and post a followup.
Thanks for this amazing community effort!
 

Offline srjaynes49

  • Contributor
  • Posts: 11
  • Country: us
  • 70 is the new 50!
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1871 on: November 18, 2020, 05:59:44 am »
The reason I loath "modified sine-wave" inverters:  the crappy wave-form is from a fairly expensive portable inverter with built-in Glass-Mat battery .  It can product 400 watts of crappy 120 volts.  The SMOOTH sine-wave is from my Xantrex 2.0 Pro 2KW inverter.  Cleaner than my local utility!  The Xantrex inverter is accompanied by FOUR 105 Ahr golf-cart batteries and is installed in my 5th wheel trailer with five 100 watt solar panels and associated charge controller, etc.  I HAVE powered my MSO5000 from the Xantrex's output and it is of course happy as a clam.  I won't subject the MSO5000 to the crappy 120 volt "modified sine-wave" inverter's output.

 1113556-01113552-1
« Last Edit: November 18, 2020, 06:13:05 am by srjaynes49 »
Nothing clever to read here...
 

Offline mabl

  • Regular Contributor
  • *
  • Posts: 120
  • Country: 00
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1872 on: November 18, 2020, 06:32:00 am »
Hi All! Just joined so I could post, after spending... well, multiple hours reading the history of this amazing journey.

[..]

I also just got a MSO5072 with the mid-May firmware, same number and build timestamp listed above.
I went ahead and used the well-worn ssh enabler, ssh in, use the command line to copy the appEntry file onto a USB stick at /media/sda1 and took it to another computer to do the MD5.
If you have any kind of unix computer (linux or Mac) simply type
$ md5 /Volumes/USB_DRIVE/appEntry
or whatever the appropriate path is for you. md5 should be present by default in most unix-like systems.
MD5 (appEntry) = 783a31ebdc0d4acb7b9dc244155ba1c6
From everything I'm seeing here, it seems like this piece of info should be enough to get the patcher to work? Am I misunderstanding?

Welcome! Unfortunately, just changing the initial MD5 before patching is not enough. The patch also has to fit the binary, and you need to know the MD5 after the patch. If you want to learn a bit more, I encourage you to try and replicate the patch for your binary.  For that, you have to compare the differences between a patched and unpatched appEntry, and replicate the same patch on your newly downloaded appEntry. Then you created the patch file, enter the correct md5, and you are done. :-) I found it well worth learning myself.
 

Offline omgoleus

  • Contributor
  • Posts: 14
  • Country: us
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1873 on: November 20, 2020, 05:14:41 am »
I'm not sure if it's too subtle or if I read it and not figured that was it.

"Easy way".

I'm continuing to fine-tooth-comb my re-reading and caught this...
But the license generator from r***n doesn't really seem to exist? Or, I noticed that some of their posts have apparently been deleted, was this license generator posted and then deleted?

 

Offline tv84

  • Super Contributor
  • ***
  • Posts: 3212
  • Country: pt
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1874 on: November 20, 2020, 12:19:17 pm »
Or, I noticed that some of their posts have apparently been deleted, was this license generator posted and then deleted?

No, such a thing was never made public.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf