Flir E4 Thermal imaging camera teardown

[mikeselectricstuff]

TL;DR :
26 Dec 2016  Updated method for firmware V2.11 ( no need to downgrade to 2.3)
10 Jan 2016 There is a new firmware, V2.8, which needs to be downgraded to 2.3 for the hack to work. Instructions in This post
30 Mar 2015 Link to step-by-step guide for 2.3 firmware
12th Jan 2015  Link to hack instructions for 2.3 firmware
24th Oct 2014
It appears that V2.3 firmware has now been successfully hacked, but only for increased resolution - see This post and the few that follow for more details.
13th July 2014
New units are shipping with firmware V2.3, which appears to have an encrypted config file. Details of how this version it affects hackability are not yet established - check the end of the thread for updates.
(An earlier version, 2.1 appeared briefly but was reported to have connectivity issues.) 
One user has reported that an old unit sent back for repair was upgraded to 2.3 during repair, but was still hackable afterwards. See follow-ups to this post for more info.

1.2x has countermeasures against the original hack, however  1.21  and 1.22 have now been successfully hacked.
This post will be updated with any important developments, however always
check the end of the thread for latest info

newbie Q&A thread - please post questions about implementing existing hacks there and not in this thread

Marphy's TIConfig utility for one-click upgrade of all current firmware versions

1.21/1.22 firmware hack info

DaveWB's video tutorials for old and new firmware versions

Link to old firmware hack info for all 1.19.x versions b

Link to Taucher's menu hacks (Beta - for advanced users) These enable extra features not even available on the E8 like manual temperature mode, additional pallettes and measure modes, and digital zoom.
check the end of the thread[/b] for any very recent updates.

Info on hacking E30 to E60

Link to Nersut's detailed guide to hacking the i series
Link to older i3 hack info

Tomas123's links on post- processing and measurements using E4 images

Jolly's raspberry Pi E4 video recorder

Links to useful files and documents :
Aurora's Useful  information thread, including log of versions and serial numbers
 
Flir Tools http://www.flir.com/thermography/americas/us/view/?id=54865

Direct (non-registration required) link to Flir RNDIS driver http://cdn.cloud.flir.se/swdownload/assets/other/flir_device_drivers.exe

Tech notes documenting network modes using RNDIS http://www.imc-store.com.au/v/vspfiles/assets/images/flir%20a310%20technical%20notes.pdf

Info on console commands etc. http://support.flir.com/DocDownload/Assets/75/English/T559504$A.pdf


There is  lots of other useful info in this thread so well worth a read.

Yes, it has a 320x240 60fps sensor - same as the £4700 E8 model and even more expensive Ex0 series

[mrflibble]

Perfect timing sir!  I just got me some tea + fresh banana bread!

*watches*

[Fraser]

Thanks Mike,

Something interesting to watch on a Sunday morning, rather than 'Sunday Brunch' on Channel 4 !

Fraser

UPDATE:

I have posted a UK supplier recommendation here

https://www.eevblog.com/forum/testgear/flir-e4-thermal-imaging-camera-teardown/msg328110/#msg328110

Message  #1109

The company is willing to offer a discount to EEVBlog members.


UPDATE:

I have created an E4 'Useful information' thread here:

https://www.eevblog.com/forum/reviews/flir-e4-the-useful-information-thread/

[niflheimer]

Just watched it - impressive how they've managed to reduce both the BOM and the cost of the sensor. I wouldn't be surprised if the only things different on the other models are the add-on boards for wifi/BT and a slightly different firmware and caps table.

The X-ray is new though - film type ?

[M. András]

another software locked hardware i see   wonder what it actually cost  to sell the same thing for cheaper than the advanced optioned ones

[Fraser]

Mike,

Another excellent video. thank you. I have commented in the other thread but I noted the 2009 micro-bolometer date. The FLIR TAU engine is looking like a more likely candidate than ever. It's relatively old, so development costs have likely been recovered, and this is just stripping it back to basics for usage in consumer grade products. Sadly I cannot find any internal pictures of the TAU.

[Hypernova]

Oh man, imagine if we can change the limitation just by rewriting the EEPROM!

[amyk]

Excellent video!

I would've pulled on the various different-coloured parts of the "snout" first before putting more force into the button. The x-ray didn't reveal those screws behind the snout?

At 30:08 you can see Mg marked on the frame so it very clearly is magnesium. The exposed bond wires were unexpected and disturbingly fragile; I'm a little surprised they didn't encapsulate them with epoxy like a COB, although that might have something to do with the thermal requirements.

The CPU has an Ethernet interface - maybe it's broken out on one of the pads.

[alm]

Mike commented on this the first time he discussed the PCB.

[mrflibble]

Oh , I was wondering g what that little cutout on the pcb was!

Thermal sensor.

[mikeselectricstuff]

Mike,

Another excellent video. thank you. I have commented in the other thread but I noted the 2009 micro-bolometer date. The FLIR TAU engine is looking like a more likely candidate than ever. It's relatively old, so development costs have likely been recovered, and this is just stripping it back to basics for usage in consumer grade products. Sadly I cannot find any internal pictures of the TAU.

I'd love to know how much the cheapest Tau costs - could be some scope for hacking there - chances are it has the same datastream inside

[mos6502]

The Tau 640 is around 10k ... maybe you can interpolate from that.

Problem with the Tau is that they fall under the ITAR regluations ... dunno if they even talk to you unless you're an international corporation.

BTW, excellent videos Mike. I love 'em.

[zapta]

Dave, have you considered to include great teardown videos like this one in your official eevblog? 

You can have a short introduction and summary as a host and have the guest's  contributed video in between.

[Noize]

Is the x-ray machine from the luggage scanner that you had? I thought that you had sold it? Love to have one of those!

[mikeselectricstuff]

Is the x-ray machine from the luggage scanner that you had? I thought that you had sold it? Love to have one of those!

No it's a mailroom x-ray I picked up a while ago. Have shot half a teardown but not got round to finishing

[Hypernova]

Maybe someone who know more about this can chime in but doesn't exposing the die present a major failure point from corrosion?

[Stonent]

Is the x-ray machine from the luggage scanner that you had? I thought that you had sold it? Love to have one of those!

No it's a mailroom x-ray I picked up a while ago. Have shot half a teardown but not got round to finishing

I had just figured you scrapped as much of the metal as you could and condensed the unit, but now that I think about it, the luggage xray was made to be in motion and this one was still.

[l3iggs]

Hey Mike, thanks for taking the time to put together a very interesting tear down. Have you attempted to coax the data stream out of the sensor module without the main board attached?

[mikeselectricstuff]

Hey Mike, thanks for taking the time to put together a very interesting tear down. Have you attempted to coax the data stream out of the sensor module without the main board attached?

No but may look at some point -My guess is FPGA could be generating some of the timing signals. Will probably need to make a riser adapter to get at the pins though - need to see if I can ID and obtain the board-board connectors.

[firewalker]

X-raing the sensor could reveal something?

Alexander.

[mikeselectricstuff]

X-raing the sensor could reveal something?

Alexander.

Yes but unfortunately my x-ray doesn't have the resolution.

[Stonent]

X-raing the sensor could reveal something?

Alexander.

Yes but unfortunately my x-ray doesn't have the resolution.

It would be interesting to xray it while it was on and capture the video from the flir.

[algorath]

great video as always. and yes, your trigger torturing really did hurt hehe

[tesla500]

Can you try using another thermal camera to look through the top window of the E4's sensor?

[mikeselectricstuff]

Can you try using another thermal camera to look through the top window of the E4's sensor?

I did try but close-focus on my other TIC isn't good enough to see anything