MDO3000 hacking

[lavadisco]

Just as another data point: I was able to enable all the upgrades on my MDO3012 today, including AFG without losing calibrations, and then update the firmware from 1.12 (I think?) to 1.26. The upgrades remained and all is well.

[reynomj]

Recently was given a MDO3104  with firmware 1.26, "key.py" could only enable "Instrument Options" received invalid code whenever tried to enable "Application Modules"

Downgrade to firmware to 1.24, "key.py" could then enable all "Instrument Options" and "Application Modules"

Upgrade firmware to 1.30 all options & modules retained.

[darkfrog]

Has anyone gotten this to work with the MSO3000 series? I started taking a look at the software disassembly and it seems like it has the same AES encryption functions as the MDO3000.

Perhaps the two are simply one AES key apart then?

[r0d3z1]

as far as I rembember, MSO is supported....you have to use MSO3014 in the scope model....

[volvo_nut_v70]

Found this on the web, instruction was to change the extension to 7Z

[hhappy1]

Found this on the web, instruction was to change the extension to 7Z

Wow~ Thank you sir. Please.

You will be blessed. 

New mdo3 series is available?  I hope it's possible.

[BH3XON]

I have seen the post several times，But I still don't understand how to hack it.

I think the problem is that I don't know how these gen commands are sent to the oscilloscope.

USB? LAN? mod firmware？

told me, anyone, thank you!

[BH3XON]

as far as I rembember, MSO is supported....you have to use MSO3014 in the scope model....

Hi!

Have you successfully hack it?

I have seen the post several times，But I still don't understand how to hack it.

I think the problem is that I don't know how these gen commands are sent to the oscilloscope.

USB? LAN? mod firmware？

Can you help me ？thank you!

[RomDump]

I have seen the post several times，But I still don't understand how to hack it.

I think the problem is that I don't know how these gen commands are sent to the oscilloscope.

USB? LAN? mod firmware？

Can you help me ？thank you!

I don't own this product but a brief overview of what the tools does. By entering the Serial Number of your Tektronix MDO3000 into the application attached previously in the message thread, it will generate option keys which you must manually enter into the Oscilloscope. See this link on entering option keys into the oscilloscope.

[BH3XON]

I don't own this product but a brief overview of what the tools does. By entering the Serial Number of your Tektronix MDO3000 into the application attached previously in the message thread, it will generate option keys which you must manually enter into the Oscilloscope. See this link on entering option keys into the oscilloscope.

Oh, I see！thank very much!

Unfortunately, My model is DPO3014, and its interface is somewhat different.

Push Install Option on the side menu：

“All upgrades for this oscilloscope must be performed by an authorized Tektronix Service Center . Push Menu Off to remove this message . ”

Maybe related to the firmware version? The current version is V2.40.

Thank you for your reply!

[RomDump]

Unfortunately, My model is DPO3014, and its interface is somewhat different.

There is another thread in unlocking the MSO/DPO3000 however depending on your serial number you can only unlock the bandwidth with an option key. See link

For features to be unlock, you have to enter some GPIB commands to enable them for 30 days or put in a hacked Module.

[BH3XON]

Unfortunately, My model is DPO3014, and its interface is somewhat different.

There is another thread in unlocking the MSO/DPO3000 however depending on your serial number you can only unlock the bandwidth with an option key. See link

For features to be unlock, you have to enter some GPIB commands to enable them for 30 days or put in a hacked Module.

Thank you for your reply！

My oscilloscope serial number is C01XXXX, But can also use GPIB command to hack.

At present, I found a bug, and the Signal Path Compensation will fail after the hack.

All in all, a success by the method you provided, thanks again！

[analogRF]

I've just, ehm, found this link http://rghost.ru/download/57060583/0486bdb3f37075a5e1bb5ef3017f9218eb7c0e67/mdo3kgen.zip in a pastebin entry that had self-destructed on Ctrl-C 

Hi abyrvalg

could you please let me know how this tool can be downloaded? or if possible pm it to me?

thanks

[volvo_nut_v70]

See reply 154.

[analogRF]

See reply 154.

thanks 

damn it, how could I miss that 

[transio]

Hello everyone ,

I am new to the EEVblog forum.

I'm doing a bit in analog electronics or digital but I'm a donkey in computer software installation.

can i be explained how to install: pycrypto-2.6 on python-2.7.17.amd64.

I downloaded the following files:
pycrypto-2.6.1-CP35-none-win_amd64.whl
pycrypto-2.6.win32-py2.6.exe.asc

but the installation stops right from the start and asks me: "python version 2.6, which was not found in the registry."

it must be python 2.6 version and not 2.7?

regards,
Pierre

[transio]

problem solved .
I did not download the good pakage, it must be:  pycrypto-2.6.win-amd64-py2.7.

[supperman]

Has anyone compared the hardware between the 500mhz MDO3k and the 1Ghz version? Is it just the analog board? Or just the 2.5gs vs 5.0gs? I can't imagine that they would replace the main board in an upgrade. I bet it is simpler than that... Would love pictures if anyone has them.

[r0d3z1]

Has anyone compared the hardware between the 500mhz MDO3k and the 1Ghz version? Is it just the analog board? Or just the 2.5gs vs 5.0gs? I can't imagine that they would replace the main board in an upgrade. I bet it is simpler than that... Would love pictures if anyone has them.

Interesting question, here is the picture of dave teardown https://www.flickr.com/photos/eevblog/with/12979022035/

[supperman]

Nice.. and I happen to have a "500mhz" one.. do I open it? Did someone do this already?

[supperman]

Right off the bat I see lots of missing capacitors on the front end board.. interesting...

I know people tried to upgrade to 1ghz.. and did not succeed.. what precisely happened in that case? Probably an ID thing on aboard? Sample rate AND analog issues?

[supperman]

Just a note of caution... I was looking at firmware updates and noticed that ALL firmware files have been "touched" according to the date stamp on the Tek website. (They all list "Last Update: Tuesday, November 12, 2019") which I'm not sure I had seen before.. Probably nothing to worry about..

Anyone have a way to see if anything changed in the older ones.. and if so what?

[supperman]

Has anyone compared the hardware between the 500mhz MDO3k and the 1Ghz version? Is it just the analog board? Or just the 2.5gs vs 5.0gs? I can't imagine that they would replace the main board in an upgrade. I bet it is simpler than that... Would love pictures if anyone has them.

I finally opened my MDO3014. Bad news.. the analog front end board is completely different. There is of course a chance that it is just a new revision.. but there are no resistor networks or any obvious ways to change the ID of the board. There seem to be a Jtag header (not soldered) but someone braver than me would need to check that out. Given how different the board is I think that there are diminishing returns here.. It would probably just get you 5GS/s at some compromised bandwidth.. probably around 700mhz.. at best. (on 2 channels)

All other boards seem identical to the 1Ghz model including the main board.. (including all chip stickers / IDs)

[VDD]

Hi all. Do somebody tryed to do same on 5000 series (DPO5034) Tek?

[voicu]

Hello
I found you post regard Tektronix MSO/MDO 3000
My scope model is   MSO3014 and after i update to firmware 2.40 missing the trace and when the scope power on show the model screen after that the image is corrupted like ( pc video card corrupted)
I wold like to return on previous firmware just for see if is some difference.
what is the procedure for downgrade the firmware or if is possible to reinstall the scope software ?

Thank you in advance