Fluke Camera Hacking

[Chanc3]

Has anyone had any joy modifying Fluke Thermal Imaging Cameras? I've currently got a TiS20 in front of me, which has a similar sort of setup to FLIR, however they use Linux instead of Windows CE. When connected via USB it is assigned an IP address of 10.0.205.229 and a default server IP of 10.0.205.230. If I plug that into Chrome, it takes me a page which says: "You aren't allowed here!" which leads me to believe that it may be possible to gain access into the onboard files (they must exist as the camera has onboard memory, which you cannot access unless you use their software. Any ideas how I could investigate further? I'm not an expert in this area!

[Chanc3]

I've managed to download the source files from the camera, but I have no idea what I'm looking at. Lots of .patch files and src.tar.gz files! Don't know anything about Linux!

[Zermalmer]

src.tar.gz are compressed source files... depending on your OS there is out there also a 'unzip' tool for the linux zipped files.

That's the easy part... but if you understand the source is written in another book 

[nidlaX]

Decompress obvious archives like .tar and .gz first. When you find binaries / unknowns, use binwalk.

[ixfd64]

I'd love to see a teardown of a Fluke camera.

[Chanc3]

Fraser has taken apart an old Raytheon, which fluke bought out. There is a thread on it somewhere.


Sent from my iPad using Tapatalk

[Fraser]

Slight correction, A division of Raytek designed the Ti30 and they were the ones acquired by FLUKE.

I do own a Raytek Ti30 but have not had time to open her up. I did open the charging dock to fit a new USB cable. That is detailed in my Ti30 thread on this forum.

Fraser

[Chanc3]

Slight correction, A division of Raytek designed the Ti30 and they were the ones acquired by FLUKE.

I do own a Raytek Ti30 but have not had time to open her up. I did open the charging dock to fit a new USB cable. That is detailed in my Ti30 thread on this forum.

Fraser

Ah yes, my mistake, I was going from memory (albeit not a great one) and was on my iPad, so it was going to be a pain to copy the link!

[Razvan_N]

I have a Fluke TiR4FT in great condition that I would like to explore.

Is it OK to remove the SD card when the camera is off? I would like to copy its contents to another SD card
in order to have a spare. Is it possible? Or the original SD card is registered somehow (s/n maybe)?
Do I risk anything playing with the spare? If I mess with its contents, will the camera get back to its original
condition if I plug back the original SD card?

[Fraser]

Removing the memory card with the camera unpowered will not harm it, the files on it or the camera chassis.

Be very careful what you do with that card when plugging it into a PC though. Set the “read only” switch on the card (that is not 100% write protection however). Do not allow the PC to correct any detected file “errors” or to scan the card for errors. Any changes to the SD card could render it useless in your camera. If you wish to copy the card, use a cloning tool to create a clone of the original on a new card. Use of the clone card will not corrupt your camera but do be careful if you decide to start modifying the contents of that card in an effort to hack the firmware. This is unknown territory as I have not seen any hacking guides for FLUKE cameras. It is likely hard to damage the camera chassis using a corrupted SD card, but I cannot be certain of that so tread carefully.

Fraser

[fantengkuo]

Hello, how can I repair the broken chip under my Fluke TI10?

[Fraser]

That TMS320 processor contains Flash,OTP Memory, Boot memory and security defences. If those areas of the IC contain Fluke data, you will not be able to buy a new IC from Digikey or Mouser and repair the camera by fitting it. This is likely a “Return to FLUKE” job and they will charge for a complete PCB plus programming and calibration. Sadly this will be expensive.

[Walterjnr]

I have an open Ti10. It is not recognizing the SD card. I didn't notice any broken solders on the card socket. I think the customer formatted the card on a PC. Maybe you deleted some original Fluke files from the card. As it is out of line, Fluke will hardly support it.

[Bud]

You can try copying the boot sector from a working camera SD card using one of the disk editor software tools onto the failed card. This trick worked for Flir E4 cam.

[Fraser]

Just try another common photographic type SD card. Make sure it is a small capacity as these cameras may not recognise modern high capacity cards. The SD card does not need Fluke files to be used in the Ti10 as it is just the saved picture repository.

Fraser

[f14]

Hi
I have Fluke Ti27 with problem like this picture below. no thermal detect and temp raise up slowly to 42 43oC
seem the thermal sensor is dead?. because it use DRS U3510 sensor and hard to find
thank you!

[Fraser]

Do you hear the FFC flag activating soon after boot ? It could be the FFC flag stuck and blocking the optical path. >40C is higher than I would have expected for the FFC flags surface but still worth checking.

Fraser

[f14]

Hi
it working perfectly. I hear it serveral time when the camera working
thanks

[f14]

Hi
I have open this camera and check/clean. not thing strange inside . now the problem is the temp range very small 70-100oC scale( auto or manual range are same issue) and not accurate (300oC it show 100oC. and room temp ~30oC it show 70oC )
have any idea? I have clean the blue tap connector between sensor and the pcb

[radioorizont]

Hi Chanc3,
Could you please advise how you connected to the cam,era's IP?
I also see a network device with:
Interface: 10.0.5.193 --- 0x2a
  Internet Address      Physical Address      Type
  10.0.5.194            00-c0-17-05-c2-00     dynamic
  10.0.5.195            ff-ff-ff-ff-ff-ff     static
The problem is i can't connect in a browser window.
Did you use Total Commander , was there a password required to access the folders like in Flir thermal cameras?

Thanks,
Dan.