Poll

Has the hackabiliy of the E4 made you buy one :  

Yes, I was already looking at the competition at a similar price, but the hack swung it to E4
238 (26.3%)
Yes, I'd not considered buying a TIC before, but 320x240 resolution at this price justifies it (as either tool or toy!)
425 (47%)
Yes, I was going to buy an E5/6/8 class of unit but will now get the E4
43 (4.8%)
No, but am looking out for a cheap i3 to hack
41 (4.5%)
Not yet, but probably will if now that a closed-box hack becomes is possible
158 (17.5%)

Total Members Voted: 780

Author Topic: Flir E4 Thermal imaging camera teardown  (Read 2633210 times)

0 Members and 3 Guests are viewing this topic.

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 8318
  • Country: gb
Re: Flir E4 Thermal imaging camera teardown
« Reply #25 on: October 16, 2013, 05:11:26 am »
Such thermal investigation would be a challenge as the temperature differential inside the Micro-bolometer FPA is intentionally very small. The sensing elements do not produce heat. The resolution of the FireFlIR (320x240) is also too low for die detail, even when using a close-up lens.
 

Offline tesla500

  • Regular Contributor
  • *
  • Posts: 145
Re: Flir E4 Thermal imaging camera teardown
« Reply #26 on: October 16, 2013, 05:32:18 am »
Such thermal investigation would be a challenge as the temperature differential inside the Micro-bolometer FPA is intentionally very small. The sensing elements do not produce heat. The resolution of the FireFlIR (320x240) is also too low for die detail, even when using a close-up lens.

Yes, but you could potentially hold a "light" (soldering iron?) over it and see differences in thermal reflectivity on the microbolometer.
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #27 on: October 16, 2013, 06:29:37 am »
Next time I have it apart, I will try with a halogen lamp
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline mamalala

  • Supporter
  • ****
  • Posts: 777
  • Country: de
Re: Flir E4 Thermal imaging camera teardown
« Reply #28 on: October 16, 2013, 07:12:34 am »
Next time I have it apart, I will try with a halogen lamp

If needed, i can send you a 600W HPS plus ballast. That should give you enough heat and light  :-DD

Greetings,

Chris
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 8318
  • Country: gb
Re: Flir E4 Thermal imaging camera teardown
« Reply #29 on: October 19, 2013, 01:06:21 am »


I found an interesting and enlightening document on Microbolometer design that had Inframetrics input. I have placed it under its own heading here:

https://www.eevblog.com/forum/projects/thermal-imaging-camera-microbolometer-design-detail/msg312455/#msg312455

Fraser
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #30 on: October 19, 2013, 09:30:48 am »
How exactly did you get the serial boot data off of the E4? Which pins, and with what PC adapter? Which serial format was it in?
38K4 baud on a pin on the unused FFC connector - I've not had time yet to figure out all the pins, but I2C, CPU reset and power button are on there.
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #31 on: October 19, 2013, 08:02:56 pm »
Pins I know so far - all I've done so far is test for input/output using pullup/pulldown resistor
 4 & 6 look good candidates for serial in.
Logic levels are 3.3v
Starting from end nearest to the unpopulated FFC connector
1 On/Off switch (to ground)
2 Power - Vbattery during run and charge - possibly via a FET switch as I didn't see continuity to bat terminal
3 Output
4 Input
5 Serial TXD 38K4
6 Input
7 0V
8 /Reset
9  Output
10 Input
11 Output
12 Input
13 Input
14 I2C SDA
15 I2C SCL
16 0V

Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #32 on: October 20, 2013, 01:21:14 am »
Someone emailed me last week with info on hacking the i series but was very wary of releasing - apparently there is a power-up key combination that gets you into a config screen, from which you can enable networking and do stuff like changing the resolution of i3 to i7, disabling the text overlay and reducing display noise - don't have it to hand ATM but I think it was something like holding play+down key at startup.
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline BravoV

  • Super Contributor
  • ***
  • Posts: 5872
  • Country: 00
Re: Flir E4 Thermal imaging camera teardown
« Reply #33 on: October 20, 2013, 01:58:04 am »
Damn, this is getting intense, sub'd, thanks Mike !  :-+

Offline Pinkus

  • Frequent Contributor
  • **
  • Posts: 596
Re: Flir E4 Thermal imaging camera teardown
« Reply #34 on: October 20, 2013, 02:25:53 am »
Edit: wrote I4 accidentely - I now corrected it to I3.

OHHHHH - if hacking an I3->I7 would be possible, I would purchase a I3 right away.
I doubt that hacking could be so unbelievable easy but  if Mike confirms during the weekend that there is a keyboard combination for enhancing resolution to 140x140 I am going to order one on monday.

The decision would be the same for me as with the Rigol product: only because of the available hacks I purchased DS2072 & DSA815-TG & DG4062: I am willing to spend some money for decent functionality but price/functionality- relation has to be a really good one.
« Last Edit: October 20, 2013, 02:47:47 am by PeterK13 »
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #35 on: October 20, 2013, 03:05:18 am »
Edit: wrote I4 accidentely - I now corrected it to I3.

OHHHHH - if hacking an I3->I7 would be possible, I would purchase a I3 right away.

Might be worth waiting to see what's possible on the E4, unless i3's are being heaviliy discounted. And no, I don't know anything yet before you ask, but haven't started seriously looking yet. 
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #36 on: October 20, 2013, 03:07:17 am »
Maybe worth splitting i-series discussion to a different thread to avoid confusion?
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 8318
  • Country: gb
Re: Flir E4 Thermal imaging camera teardown
« Reply #37 on: October 20, 2013, 05:21:03 am »
We could almost do with a Thermal camera section on its own....there is a lot of interest in these units and mush fun to be had with them  ;)

I thought about starting a thread that will contain pictures taken of electronics using such units to show what is possibkle with teh different models and resolutions.

I would support the i series hacking or investigations being in a separate thread to avoid too much criss crossing within the flow of conversations.

I feel sure that there will be many interested in the whole range of topics and Mike has already proven that many wish to know what 'magic' goes on inside the modern TIC.

All very interesting and informative stuff  :-+
 

Offline amyk

  • Super Contributor
  • ***
  • Posts: 6303
Re: Flir E4 Thermal imaging camera teardown
« Reply #38 on: October 20, 2013, 07:10:33 pm »
At a glance there are a ton more DMM and scope threads than TICs, and they don't get their own section...
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 8318
  • Country: gb
Re: Flir E4 Thermal imaging camera teardown
« Reply #39 on: October 20, 2013, 08:45:37 pm »
But DMMs and scopes are BORING in comparison !  :-DD
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #40 on: October 20, 2013, 09:01:15 pm »
So if you hold the 'load' button down during startup.....
Quote
Bootloader 16.3 for ASCO (May  6 2013 11:41:42)
PMIC wake up: R5=40h E_SEQ_RDY  R6=1h E_nONKEY
PMIC status:  R1=1h nONKEY  R2=a0h COMP_DET GP_FB2
Fuel gauge check: res=1, voltage=3704
Reset reason (0x00000000): Power ON

Press [ENTER] to force OS/FS image update (MSD) or [SPACE] to cancel.

Initiating image update in 0 seconds.
Launching flash image  ...
+InitSpecifiedEthDevice
INFO: Trying to initialize the built-in USB/MSD...
MSD:: initialization
MSD: USB initialization completed

..and if you then plug it into the PC
Quote
USB Attach: High speed
Appears as a drive, but just a couple of uninteresting text files - probably looking for a firmware file to be saved

« Last Edit: October 20, 2013, 09:42:17 pm by mikeselectricstuff »
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #41 on: October 20, 2013, 09:24:55 pm »
..and if you send a <space> to the UART during boot....
<quote>
SETTINGS:
0) IP address: 0.0.0.0
1) Subnet Mask: 0.0.0.0
2) Boot delay: 1 seconds
3) DHCP: Enabled
4) Reset to factory default configuration
5) Autoboot: NK from NOR
6) MAC address: 00:40:7F:0B:91:39
7) Host connection: (USB MSD)

ACTIONS:
S) Save configuration
D) Download image now
L) Launch existing flash image now
R) Launch existing flash image now in SAFE (restricted) mode
E) Erase flash file system area
B) Erase OS Image area
</quote>
Option 7 may be intersting - options are USB BSD, ETHERNET and USB RNDIS, which provides virtual ethernet over USB - fairly sure the latter is what enabled the i7 hack - unfortunately I've lost the email I had about that.
Safe mode doesn't do anything interesting
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 8318
  • Country: gb
Re: Flir E4 Thermal imaging camera teardown
« Reply #42 on: October 20, 2013, 10:01:06 pm »
Oh Mike.....you LOST the hack email   :palm:

Or did you hear the distinctive thump-thump-thump of the black helicopters rotors overhead ?  :scared:

If you ask GCHQ or the NSA nicely, they may provide you with their copy of the email  :-DD
« Last Edit: October 20, 2013, 10:06:41 pm by Aurora »
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #43 on: October 20, 2013, 10:23:01 pm »
Oh Mike.....you LOST the hack email   :palm:

Or did you hear the distinctive thump-thump-thump of the black helicopters rotors overhead ?  :scared:

If you ask GCHQ or the NSA nicely, they may provide you with their copy of the email  :-DD
Yep - hard disk on that laptop was failing around the time I got it - have tried to recover but no joy so far - may still be in there somewhere..

However.....
If you download the Ex firmware from Flir, and rename the .fif file to .cab  Many very interesting things appear.... Will take some time to examine....
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #44 on: October 20, 2013, 10:31:44 pm »
This looks interesting....
Quote
Restarting in high resolution mode/service mode
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline amyk

  • Super Contributor
  • ***
  • Posts: 6303
Re: Flir E4 Thermal imaging camera teardown
« Reply #45 on: October 20, 2013, 10:40:36 pm »
Especially after seeing those erase options I hope you've dumped the flash image and stored it in a safe place for backup... for recovering from any accidental bricking. One of the first things I do when RE'ing a device is try to get a complete firmware image.
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 8318
  • Country: gb
Re: Flir E4 Thermal imaging camera teardown
« Reply #46 on: October 20, 2013, 11:05:24 pm »
Ahhhh, the infamouse computer hard disk crash..... what you have to ask yourself is.....did it just 'die' or was it Killed by the Dark Net  >:D

With regard to the proding of the firmware in your camera.  A back-up would be prudent if possible as from what I have learn't each camera is calibrated, and the calibration data is vital to correct image appearance. My PM570 has this important Microbolometer calibration data on the same Flash chip as the OS firmware. It uses a block addressable 28F16 for all its Flash storage needs.
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #47 on: October 21, 2013, 02:41:33 am »
oooh look - I found another serial port...
Code: [Select]
List of all available commands (+ description)

  command /?     For more information on a specific command

?        List all available commands without description).
ALIAS    Sets, removes or shows aliases.
ATTRIB   Displays or changes file attributes.
BEEP     Beep the speaker.
CALL     Calls one batch program from another.
CD       Displays the name of or changes the current directory.
CHOICE   Waits for the user to choose one of a set of choices.
CLS      Clears the screen.
CMD      Starts a new instance of the FLIR command line interpreter.
COPY     Copies one or more files to another location.
DATE     Displays or sets the date.
DELETE   Deletes one or more files.
DIR      Displays a list of files and subdirectories in a directory.
ECHO     Displays messages, or turns command echoing on or off.
ERASE    Deletes one or more files.
EXIT     Quits the CMD.EXE program (command interpreter).
FOR      Runs a specified command for each file in a set of files.
FREE     (free) disc space.
GOTO     Directs the FLIR command line interpreter to a labeled line in
         a batch program.
HELP     Provides Help information for FLIR commands.
HISTORY  List all commands which has been used
IF       Performs conditional processing in batch programs.
MD       Creates a directory.
MKDIR    Creates a directory.
MOVE     Moves one or more files from one directory to another
         directory.
PATH     Displays or sets a search path for executable files.
PAUSE    Suspends processing of a batch file and displays a message.
POPD     Restores the previous value of the current directory saved by
         PUSHD.
PROMPT   Changes the command prompt.
PUSHD    Saves the current directory then changes it.
RD       Removes a directory.
REM      Records comments (remarks) in batch files.
REN      Renames a file or files.
RENAME   Renames a file or files.
REPLACE  Replaces files.
RMDIR    Removes a directory.
SCREEN   Move cursor and optionally print text.
SET      Displays, sets, or removes FLIR command line interpreter environment va
riables.
SHIFT    Shifts the position of replaceable parameters in batch files.
START    Starts a separate window to run a specified program or command.
         Executes command.
TIME     Displays or sets the system time.
TIMER    Allow the use of ten stopwatches.
TYPE     Displays the contents of a text file.
VER      Displays the FLIR command line interpreter and Windows CE version.

\>
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 8318
  • Country: gb
Re: Flir E4 Thermal imaging camera teardown
« Reply #48 on: October 21, 2013, 02:51:09 am »
Entry point into the command line for the Embedded Win CE computer ?.
Now how to extract and edit the boot batch files to change some settings  >:D
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 11933
  • Country: gb
    • Mike's Electric Stuff
Re: Flir E4 Thermal imaging camera teardown
« Reply #49 on: October 21, 2013, 03:19:49 am »
Looks like a boot filesystem and a 'working' one. Tons of config/cal data. Looks like model assignment may be baked into the cal process to some extent.

Looking to see if I can copy files between the flash Filesystem and the filesystem that's visible through the USB. Any 
CE experts out there?
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf