yi-hack-v4 icon indicating copy to clipboard operation
yi-hack-v4 copied to clipboard

YI Dome Camera 1080p

Open v1ct0rv opened this issue 6 years ago • 27 comments

Hi,

I have a YI Dome Camera 1080p model YHS.2016, I follow all the steps but nothing happens, this specific model is not supported?

v1ct0rv avatar Oct 17 '19 13:10 v1ct0rv

Same here:

  • Formatted the microSD card in FAT32
  • Placed rootfs_h20 and home_h20 in the root of the microSD
  • Unplugged the camera from power and inserted the microSD
  • Plugged the power to the camera

The camera just boots up as it normally does and nothing changes.

baglio avatar Oct 25 '19 16:10 baglio

Hi, same here, any details?

Dude88 avatar Oct 29 '19 17:10 Dude88

Same here. I’ve got the following model though, which is advertised as Yi Dome 1080p on AliExpress and works fine with the Yi IoT app (firmware version 7.0.00.73a_201812031453) but looks different.

IMG_20191029_191143

GilDev avatar Oct 29 '19 18:10 GilDev

Mine is from the amazon https://www.amazon.com/gp/product/B01CW4BLG8 same symptoms.

VitalyFedyunin avatar Oct 30 '19 03:10 VitalyFedyunin

Found my problem, my serial number starts with BFUS, not 6FUS ..... Seems that there is a new revision..... , Just ordered all cameras from the local stores, hopefully there will be one with 6FUS

Dude88 avatar Oct 30 '19 05:10 Dude88

Found my problem, my serial number starts with BFUS, not 6FUS ..... Seems that there is a new revision..... , Just ordered all cameras from the local stores, hopefully there will be one with 6FUS

Interesting. How can I check my serial number? Is it located directly on the product or is it shown somewhere inside the phone app?

baglio avatar Oct 30 '19 13:10 baglio

Hi, im in the road at the moment, but there is a QR code on the box for the serial number, not the one for the app, maybe there is also one on the ground of the camera but not sure.

Dude88 avatar Oct 30 '19 13:10 Dude88

one on the ground of the camera

yes

VitalyFedyunin avatar Oct 30 '19 15:10 VitalyFedyunin

The QR Code on mine (weird variant I posted just above) is A0000000091WBN181011… I think I’ll never be able to install this firmware on it, too bad… 😕

GilDev avatar Oct 30 '19 23:10 GilDev

The QR Code on mine (weird variant I posted just above) is A0000000091WBN181011… I think I’ll never be able to install this firmware on it, too bad… 😕

Hi Gil, do you have any update ? My cam have the same label. thks

michele8gr avatar Nov 02 '19 16:11 michele8gr

Well no, I don’t know if the firmware is easily adaptable and if someone will ever try to do it. I personally don’t have time nor lots of knowledge in this area to dig more right now…

GilDev avatar Nov 02 '19 16:11 GilDev

Well no, I don’t know if the firmware is easily adaptable and if someone will ever try to do it. I personally don’t have time nor lots of knowledge in this area to dig more right now…

I hope that someone solve the issue. This is the printscreen when i try to access using telnet (other port are closed)

image

michele8gr avatar Nov 02 '19 16:11 michele8gr

Nice, at least it's something!

GilDev avatar Nov 02 '19 22:11 GilDev

guys help us please to solve the issue. Thank you in advance.

michele8gr avatar Nov 21 '19 21:11 michele8gr

same problem whit serial BFUSY, i'll send back the cam :( sob

Hataru80 avatar Dec 06 '19 20:12 Hataru80

The solution for BFUSY cam is use this firmware https://github.com/roleoroleo/yi-hack-MStar

Hataru80 avatar Dec 07 '19 09:12 Hataru80

Damn, mine has “XY-R9820-K2(N)” on the back sticker, is there a way?

GilDev avatar Dec 09 '19 21:12 GilDev

Damn, mine has “XY-R9820-K2(N)” on the back sticker, is there a way?

I have the same Serial Number and have the same telnet output as @michele8gr. Flashing the Yi Dome 1080p (as it should normally be) is not working. Any pointers to a working solution is appreciated.

GillesC avatar Dec 09 '19 22:12 GillesC

Having there same output as @michele8gr. Same s/w and no firmware that seems to work on this camera. Hope someone finds a solution.

ghost avatar Jan 03 '20 11:01 ghost

Mmm how did you open telnet.. ? Seems on my version xy-r9820-k2 this is even blocked...

Happyboy0980 avatar Jun 22 '20 16:06 Happyboy0980

Mmm how did you open telnet.. ? Seems on my version xy-r9820-k2 this is even blocked...

I simply run telnet 192.168.1.70 , no port details or anything.

LuckyBenski avatar Jun 25 '20 16:06 LuckyBenski

Hello, I have an XY-R9820-G1 with the Firmware 7.1.00 Can you give me a tip which firmware works here? I can't get a connection over Telnet. A00160 .....

RalfEngelberth avatar Jan 29 '21 16:01 RalfEngelberth

Hello, I opened the camera and took a picture of the circuit board. Can someone give me a tip on how to hack or open RTSP?

image

image

RalfEngelberth avatar Feb 03 '21 18:02 RalfEngelberth

Take a look to https://github.com/cjj25/Yi-RTS3903N-RTSPServer

rauko70 avatar Aug 10 '21 12:08 rauko70

Hello, I opened the camera and took a picture of the circuit board. Can someone give me a tip on how to hack or open RTSP?

image

image

Thanks for the mention @rauko70

@RalfEngelberth if you're interested in accessing UART on that MVT9632 then drop me a message :)

The unpopulated header you see in the top left, it's the middle two pads.

I've managed to patch the uboot bootloader to enable UART for this board but annoyingly YI have used the RX/TX pins as dedicated GPIO too, so as soon as the driver loads.. no more UART. You can kill the init.sh before hand, useful for debugging nevertheless!

cjj25 avatar Aug 22 '21 23:08 cjj25

@cjj25 how do you get the UART to work on the MVT9632? I have a camera with the same board (not the same camera, in fact it uses tuya instead of yi) specifically labeled MVT9632-SC2303_QJ.V1.1 and I wired up those pads but got nothing. I assumed from left to right they are ground, tx/rx, and 3.3v (measured), and I tried the tx and rx both ways.

bondiblueos9 avatar Feb 10 '22 21:02 bondiblueos9

@cjj25 how do you get the UART to work on the MVT9632? I have a camera with the same board (not the same camera, in fact it uses tuya instead of yi) specifically labeled MVT9632-SC2303_QJ.V1.1 and I wired up those pads but got nothing. I assumed from left to right they are ground, tx/rx, and 3.3v (measured), and I tried the tx and rx both ways.

Check your two middle pins are connected to the RTS3903N chip using continuity mode on your multimeter.

UART_RX = 39 UART_TX = 38

Note: they might be the other way around, but they're the right pins!

Pin one is marked with the white triangle, using the image above, the pin numbers are going upwards.

If you need any more help, create an issue on https://github.com/cjj25/Yi-RTS3903N-RTSPServer

Edit: I'd love to have a copy of your Tuya firmware dump

cjj25 avatar Feb 13 '22 16:02 cjj25