Author Topic: Is DS1054Z with firmware 00.04.02.04.07 hackable?  (Read 23923 times)

0 Members and 1 Guest are viewing this topic.

Offline Rilker

  • Newbie
  • Posts: 2
Is DS1054Z with firmware 00.04.02.04.07 hackable?
« on: February 19, 2015, 09:54:05 pm »
Hi,

I just bought the DS1054Z, and made the upgrade to the firmware version 00.04.02.04.07.

Looks like the hack is not working anymore. I tried DSFR and DSER options. Both, shows as invalid key.

Any thoughts or confirmation ? Anyway to downgrade to hackable version and then upgrade 00.04.02.04.07 (that fixes Timing / 5uv problem) ?

Cheers!

 :scared:
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 9644
  • Country: 00
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #1 on: February 19, 2015, 10:09:57 pm »
Hi,

I just bought the DS1054Z, and made the upgrade to the firmware version 00.04.02.04.07.

Looks like the hack is not working anymore. I tried DSFR and DSER options. Both, shows as invalid key.

Have you tried individual items?
 

Offline Solder_Junkie

  • Regular Contributor
  • *
  • Posts: 66
  • Country: gb
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #2 on: February 20, 2015, 04:03:05 am »
4.02 firmware certainly worked, maybe you updated too quickly to a later version?
Maybe Rigol have clamped down on the freeloaders and changed the encryption, that happened with the DSA-815 spectrum analyser.
 

Offline Solder_Junkie

  • Regular Contributor
  • *
  • Posts: 66
  • Country: gb
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #3 on: February 20, 2015, 05:51:08 am »
If Rigol have stopped the keygen hack by changing the keys, it should still be straightforward to change the low pass filter switching in hardware to increase the bandwidth to that of the 1104Z. The memory depth and triggering is a tougher job though. Dave Jones reverse engineered much of the input circuitry and shows the offending filter in a YouTube video.
 

Online ebastler

  • Super Contributor
  • ***
  • Posts: 2812
  • Country: de
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #4 on: February 20, 2015, 06:17:46 am »
I just bought the DS1054Z, and made the upgrade to the firmware version 00.04.02.04.07.
Looks like the hack is not working anymore. I tried DSFR and DSER options. Both, shows as invalid key.
Any thoughts or confirmation ?

Hate to spoil the fun of speculating -- but yes, the keygen still works fine with the latest firmware. (That's the version which identifies itself as 00.04.02 SP4 once installed on the scope, right?) 

As mentioned in the main 1054Z thread: Be sure to read the small print of the scope's serial number correctly, and try re-generating the key a couple of times on the web site, to make sure you get an updated and stable key.

Cheers,
Jürgen
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 9644
  • Country: 00
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #5 on: February 20, 2015, 06:32:10 am »
If Rigol have stopped the keygen hack by changing the keys, it should still be straightforward to change the low pass filter switching in hardware to increase the bandwidth to that of the 1104Z.

I don't know about 'straightforward'...  ;)

But really that's almost the least interesting of the upgrade options IMHO. In practice the 100MHz won't make much real difference to performance of the scope, all the other options are worth more (extra triggers, extra RAM, serial decoders..., etc.)

 

Offline Rilker

  • Newbie
  • Posts: 2
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #6 on: February 20, 2015, 09:10:15 pm »
4.02 firmware certainly worked, maybe you updated too quickly to a later version?
Maybe Rigol have clamped down on the freeloaders and changed the encryption, that happened with the DSA-815 spectrum analyser.

You are right :) I had install the latest release (00.04.02.04.07) too soon on this unit :(

Update FW Notes:
Folder Name: DS1000Z(ARM)Update_00.04.02.04.07
Filename: DS1000ZUpdate.GEL  @ Dec, 26 2014.
 

Offline Solder_Junkie

  • Regular Contributor
  • *
  • Posts: 66
  • Country: gb
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #7 on: February 20, 2015, 11:47:16 pm »
You are right :) I had install the latest release (00.04.02.04.07) too soon on this unit :(

Update FW Notes:
Folder Name: DS1000Z(ARM)Update_00.04.02.04.07
Filename: DS1000ZUpdate.GEL  @ Dec, 26 2014.
My firmware is also dated 26th Dec. When installed the scope shows software version 00.04.02.SP4, with board version 0.1.1

The hack works on mine and also removes completely with the uninstall command sent via USB, using Ultra Sigma software.

Your version appears to be different to the one widely downloaded and with the same date... Very strange.
 

Offline StevenTodd

  • Contributor
  • Posts: 5
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #8 on: April 14, 2015, 04:19:15 am »
When I key in my serial number, and the desired code (DSFR  or DSER) the private key doesnt populate and then when I press the Generate button, it gives and error:  invalid private key lenght.

how to solve?
 

Offline StevenTodd

  • Contributor
  • Posts: 5
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #9 on: April 14, 2015, 08:59:00 am »
i tried from a different pc, and it worked. |O
 

Offline figo

  • Contributor
  • Posts: 21
  • Country: pt
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #10 on: April 14, 2015, 10:57:03 am »
Hello friends
 I am also waiting for a DS1054Z and I have a doubt, which is the private key and where can I get?
 

Offline lukaq

  • Regular Contributor
  • *
  • Posts: 78
  • Country: si
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #11 on: April 14, 2015, 03:52:43 pm »
As far as I know, you don't input it, just serial and what options you would like to have (everything but 500uV)

this 500u will never work right, hardware limitation?

Offline rezasurmar

  • Newbie
  • Posts: 2
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #12 on: April 22, 2015, 10:01:33 pm »
This code generator http://gotroot.ca/rigol/riglol/  works perfectly on the version 00.04.02.04.07
 

Offline theDiver

  • Newbie
  • Posts: 4
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #13 on: May 09, 2015, 03:10:10 am »
I can confirm it works on Firmware 00.04.02.SP4 on a scope i got yesterday ;-)
 

Offline Mandarin47

  • Newbie
  • Posts: 2
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #14 on: July 23, 2015, 08:52:27 am »
Has anyone tried it on the newest firmware 00.04.03.SP1?
 

Offline Deathwish

  • Supporter
  • ****
  • Posts: 1426
  • Country: wales
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #15 on: July 23, 2015, 10:51:26 am »
If I could get through the confusion on doing it I will try, meantime I shouted beetlejuice three times and nope its the same DSO
Electrons are typically male, always looking for any hole to get into.
trying to strangle someone who talks out of their rectal cavity will fail, they can still breath.
God hates North Wales, he has put my home address on the blacklist of all couriers with instructions to divert all parcels.
 

Offline elswi

  • Newbie
  • Posts: 2
  • Country: ch
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #16 on: July 23, 2015, 05:43:54 pm »
Hello from Switzerland (not Sweden nor Swaziland  :))

Yesterday I tried to unlock my new Rigol DS1054Z (SW Ver. 00.04.02.SP4 and Board Ver. 0.1.1) with the Option DSER (all but 0.5mV).

Well, it worked very nice: the scope said something like "options installed successfully"! So I turned it off/on and now it shows Model "DS1104Z" and all the options are installed "official". So far so good...

I tried to check if I really have now a 100MHz scope the way Dave did it on the DS1052E.... (#70: changing of the rise time and higher horizontal resolution: 5ns->2ns)
But nothing changed! Maximum h-res is still 5ns and I have the exact same rise time on my square-wave signal…

Has the unlock failed, or is that normal? If normal, where is the benefit of 100MHz? At least the h-res should be higher with 100MHz, or not?
Is there another easy way to check if the unlock really worked?

Thanks and cheers!
 

Offline alsetalokin4017

  • Super Contributor
  • ***
  • Posts: 1872
  • Country: us
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #17 on: July 24, 2015, 01:55:41 am »
1. The unlocking DOES work with the newest firmware. Be very careful about entering your numbers: Don't mistake "5" for "S" or "0" for "O" for example. The best/easiest way to get the key into the scope is to use something like telnet over a LAN connection to the scope. This way you can store your valid unlocking key, and the SCPI commands to install and uninstall, in a text file, from which you can then simply copy-paste the correct code and the SCPI commands into the telnet application.
Code: [Select]
:SYSTem:OPTion:INSTall XXXXXXXXXXXXXXXXXXXXXXXXXXXX
to install the 28-character key (4 groups of 7 chars but with no hyphens)

Code: [Select]
:SYSTem:OPTion:UNINSTall
to go back to stock 1054z with no options (or "trial options" if you haven't run out your trial period yet)
 
If you make three mistakes in a row trying to install the code to your scope, you will be "locked out" and you must leave the scope turned on for 12 hours until the "penalty time" runs out before trying again.
 
If the serial number of the scope is hard to read on the "System Info" screen, look at the sticker on the back of the scope, or in your original calibration document that came with the scope. Carefully copy the SN into a text file and save it, so that you can just copy-paste it when you need to use it in the future (like entering it into the keygen program.)

2. The unlocking code DSER (all options except 500uV vertical)  is not documented or listed in the keygen program for the DS1054Z, but it works anyway. Don't even try the 500uV/div Vertical feature, the hardware of the 1054z does not support it and it can cause problems. I suggest downloading the .zip file from the website and using the stand-alone applications that are in the zipfile. This way you will not be dependent on the website, you can run the keygen locally on your own computer. The zipfile includes a working Windows stand-alone executable, an HTML file version that will open in your browser, a Linux version that can be compiled and run on your linux distro, and an OSX version (I have not tested the OSX but I can confirm that the other three work properly.)

3. The horizontal resolution does not change; the fastest timebase setting available will still be 5 ns/div after unlocking. The scope will report that it is now a DS1104Z when asked.

4. The higher bandwidth means that you will get more accurate display of high-frequency signals. The right way to test this is to use properly terminated, proper impedance cable connections from your signal source to the scope (not the "150MHz" probes that come with the scope) and a signal generator that can actually produce a fast risetime square wave or a sine wave of known amplitude. Since the DS1054Z has only a fixed 1megohm input impedance, you may need a 50 ohm feedthrough terminator-adapter or a 50 ohm T plus a 50 ohm terminator at the scope end of the 50 ohm connecting BNC cable from your 50 ohm output impedance signal generator.  Some people have tested the bandwidth (looking for the -3dB rolloff frequency of a known amplitude sine wave input) and have found that the scope actually exceeds the 50 MHz spec before, and exceeds the 100 MHz spec after, the unlocking.

Be sure to let the scope warm up completely and run the Self Calibration routine after applying the unlock key.
« Last Edit: July 24, 2015, 02:01:04 am by alsetalokin4017 »
The easiest person to fool is yourself. -- Richard Feynman
 

Offline Deathwish

  • Supporter
  • ****
  • Posts: 1426
  • Country: wales
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #18 on: July 24, 2015, 02:06:03 am »
When you say "This way you can store your valid unlocking key" do you mean the one it came with or the one you generated , I find that confusing because it is hardly valid in the term my mind is reading what you are saying if you generated it
Electrons are typically male, always looking for any hole to get into.
trying to strangle someone who talks out of their rectal cavity will fail, they can still breath.
God hates North Wales, he has put my home address on the blacklist of all couriers with instructions to divert all parcels.
 

Offline alsetalokin4017

  • Super Contributor
  • ***
  • Posts: 1872
  • Country: us
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #19 on: July 24, 2015, 02:15:17 am »
When you say "This way you can store your valid unlocking key" do you mean the one it came with or the one you generated ,
Huh? The scope doesn't come with any unlock keys unless you bought them from your vendor at the time of purchase.
Quote
I find that confusing because it is hardly valid in the term my mind is reading what you are saying if you generated it
I find this confusing because I can't make any sense of it. Perhaps a translation problem?

A "valid" unlock key is one that works. An "invalid" one doesn't work!


The easiest person to fool is yourself. -- Richard Feynman
 

Offline alsetalokin4017

  • Super Contributor
  • ***
  • Posts: 1872
  • Country: us
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #20 on: July 24, 2015, 02:20:19 am »
To get telnet working on your Windows computer:
https://kb.ctera.com/article/how-to-open-a-telnet-session-on-windows-7-or-windows-8-os-16.html

If you are using any of the popular Linux distros you probably already have telnet installed and working.

Use port 5555 to talk to the scope. Connect the scope to your LAN router and then in the Utility>IO Setting>LAN Conf. menu select "DHCP" and let the scope fetch an IP address from your router.

Then at a command prompt start telnet:

Code: [Select]
telnet 192.168.1.105 5555 (using your own scope's assigned IP address of course)



« Last Edit: July 24, 2015, 02:36:10 am by alsetalokin4017 »
The easiest person to fool is yourself. -- Richard Feynman
 

Offline commie

  • Regular Contributor
  • *
  • Posts: 235
  • Country: gb
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #21 on: July 24, 2015, 03:09:34 am »
I tried to check if I really have now a 100MHz scope the way Dave did it on the DS1052E.... (#70: changing of the rise time and higher horizontal resolution: 5ns->2ns)
But nothing changed! Maximum h-res is still 5ns

I have an official unhacked DS1104Z and it's quickest horizontal time is 5ns, so that's okay.
 

Offline Deathwish

  • Supporter
  • ****
  • Posts: 1426
  • Country: wales
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #22 on: July 24, 2015, 09:40:51 am »
When you say "This way you can store your valid unlocking key" do you mean the one it came with or the one you generated ,
Huh? The scope doesn't come with any unlock keys unless you bought them from your vendor at the time of purchase.
Quote
I find that confusing because it is hardly valid in the term my mind is reading what you are saying if you generated it
I find this confusing because I can't make any sense of it. Perhaps a translation problem?

A "valid" unlock key is one that works. An "invalid" one doesn't work!

I was unsure if the scope came with a "basic" key or not and then had to be issued another to unlock the options.

In my mind a valid key is one that is genuine from the supplier, as with some software that is cracked with a keygen and then reports home, or upon upgrades, it will pop up saying you have an "invalid" key and kill it.
Electrons are typically male, always looking for any hole to get into.
trying to strangle someone who talks out of their rectal cavity will fail, they can still breath.
God hates North Wales, he has put my home address on the blacklist of all couriers with instructions to divert all parcels.
 

Offline elswi

  • Newbie
  • Posts: 2
  • Country: ch
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #23 on: July 24, 2015, 04:17:38 pm »
Thanks alsetalokin4017 for your explanations!

Could you say a bit more to 4.? How can I measure the bw that way?

I have connected the trigger out to channel 2 while on ch 1 was a signal. I got a rise time of 2.6ns... does that help in any way?

 

Offline alsetalokin4017

  • Super Contributor
  • ***
  • Posts: 1872
  • Country: us
Re: Is DS1054Z with firmware 00.04.02.04.07 hackable?
« Reply #24 on: July 25, 2015, 02:28:01 am »

I was unsure if the scope came with a "basic" key or not and then had to be issued another to unlock the options.
[/quote]
Oh, I see. No, the scope doesn't come with any key, but is supplied with a time-limited trial period on all the options except 100MHz bandwidth. Once that trial period has run out I don't know any way to restore the time limited trial options. Installing the unlock key generated from the keygen makes all the options "Official". There probably is a way to restore/reset the time limited trial options but I don't know it; maybe someone else does.
Quote

In my mind a valid key is one that is genuine from the supplier, as with some software that is cracked with a keygen and then reports home, or upon upgrades, it will pop up saying you have an "invalid" key and kill it.
Well, that makes sense, but fortunately Rigol does not seem to work that way. Once a valid (my definition) key is used to make the options "Official" this isn't changed when firmware updates are installed (at least not so far; mine is on its third firmware update by now and I have uninstalled and reinstalled the options several times on each firmware revision). And these scopes never "phone home" over the internet. As far as I can tell, a valid key is the same, for each scope SN, whether it comes from an "authorized" source or not.
I also don't know if they store some data that would tell a technician whether or not the scope's options have ever been enabled, after the "uninstall" SCPI command has been used to reset the scope back to stock 1054z with no options enabled. I am guessing that they probably don't.
So when I talk about a "valid" key I just mean one that works when it is entered. An invalid key is one that doesn't work and would cause the scope to lock you out for the penalty 12 hours if you tried entering it three times.
By the way all of the keys I have seen for DSER options on the 1054z start with the same 2 initial 7-character groups. Only the last 2 groups vary according to your serial number.
The easiest person to fool is yourself. -- Richard Feynman
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf