Warning for Momitsu 899 and 799 and clones owners

[oldfart13]

I've just learned (but I didn't see it posted anywhere here) that taking the new firmware upgrade for these machines and their clones causes you to lose your multi-region playback. I'm still hoping someone somewhere is working on their own firmware so we can keep the good features and disable the bad ones (and losing the multi-region playback would be a bad thing, no?). Apparently though, you can downgrade the machine(s) back to an earlier version of the firmware if one is available so that's a bit of a relief. Still, you wonder if someone got through to Momitsu about the whole multi-region playback thing? No one will probably talk about it in a public form....

[Pandor]

These players seem to be build around a BroadCom BCM97601 reference design (http://www.broadcom.com/products/Consumer-Electronics/Blu-ray-High-Definition-DVD-Solutions/BCM7601), running a 2.6.24 linux kernel and userspace.

I've contacted the GPL Violations organisation to report that the sourcode and its modification are not freely available, so these manufactures are in violation with the GPL License.

Thus far i've reported these companies, with their respective hardware/clones:

Momitsu 799
Foehn & Hirsch ****
Limit BD-M100
Hiteker HTB-1026
Curtis 1102
Maidston MD-BR-2102
Ambiance AMB-1026


Custom firmware might be possible in time...

[oldfart13]

...begs the question...why would you do that? Why would you want these players removed from the marketplace or am I reading this wrong? If so, what is it you are asking for? The source code? If that is so, wouldn't it just be as easy to get it from the versions of the firmware that have been released? I guess time will tell about if we get any fan firmware....

[Pandor]

It is not my intention to get these removed from the market.
But these players are running an embedded linux kernel and userland.

the companies that release these players are releasing the firmware in compiled format.
But since the linux kernel is licensed under the GPLv2 they must adhere to the license and release the sourcecode.
They do not own the code.

If the sourcecode is released we should be able to make custom firmware.

...what is it you are asking for? The source code? If that is so, wouldn't it just be as easy to get it from the versions of the firmware that have been released? I guess time will tell about if we get any fan firmware....

Since these released firmwares are in pre-compiled format, you can not modify the code withouth reverse engineering. Which is illegal most of the time.

The updates include a 2.6.24 linux kernel and a userland (binaries) in a Squashfs filesystem

[oldfart13]

But according to some on this forum, these players themselves are illegal as they get around the region codes for Blu Ray players. Making hay of things might get them removed from the marketplace sooner or else get firmware updates that remove the offending code. This has just been done with the latest firmware upgrades for Momitsu and Sherwood that I know of. You can no longer use the deck to play back different region discs be they Blu Ray or standard DVD if you upgrade the player.

Thanks for the clarification though....

[Pandor]

if they add region lock, and release the source, one cold modify the source back to multi-region.

There are so much possibilities when the source would be released.
Depending on the hardware capabilities (memory, processor power etc..), one may be able to include ext3/4, ntfs filesystem support for usb attached media (support larger files), smb support (file streaming over windows file share), transferring media from disk based media to usb port (usb stick) or over network... The possibilities are only limited by the hardware itself.

So that's the reason i'm pushing forward for them releasing the sourcecode.

See how popular all those open (as in open-source, linux based firmware) routers e.g. are.
It would be nice if they would sell the hardware as a basic blu-ray platform, but have it backed up by an open-source community.
It's a win-win. The manufactures sell their platform and don't need to spent time on firmware development and user can add all the features they want/need to the platform.
See how this could also benefit sales?

[ojopaj]

Which specific firmware version are you talking about??? :-0

[Pandor]

all of the above mentioned players seem to be based on the same reference design.

Momitsu's firmware can be found here: http://www.momitsu.com/bdp_799_firmware.html
Limit's firmware here: http://www.sosmp3.com/mp3s.asp?id=26

they all have the same layout:
vmlinuz (llinux kernel)
squashfs image (can be mounted in a linux operating system or extracted under win with squashfs-tools for windows) - filesystem
cfe bootloader
splash image
...

[ytsejam]

You can add the Sherwood BDP-5004 to the clone list.

[oarsman]

The Insignia NS-BRDVD3 and NS-WBRDVD players are repackaged Desay models
based on the same Broadcom reference design. Does anyone know where the
firmware checksum is located and how to reseal a firmware update? I'm able to
modify the squash filesystem and repackage, the player will recognize the
firmware update and read it, but does not apply it since the checksum has changed.
Is this part of the Broadcom CFE environment?
Thanks,
-Ted

[cliive]

Add in the Allure brand from Clive Peeters / Rick hart (in administration) and AMTC brand from Dick Smith. Both Australia. Looks like more legal action against Broadcom is needed. They are blatantly using copyrighted code without a license.
This has happened before, and resulted in Cisco releasing the source for the WRT54G, which was very useful. http://en.wikipedia.org/wiki/Broadcom#GPL_violation
Is this the same chip & software that the Momitsu use? http://www.broadcom.com/products/Consumer-Electronics/Blu-ray-High-Definition-DVD-Solutions/BCM7601
http://forums.whirlpool.net.au/forum-replies-archive.cfm/1425396.html
http://forums.whirlpool.net.au/forum-replies.cfm?t=1405742 http://www.dse.com.au/cgi-bin/dse.storefront/en/product/GH7110

[Pandor]

For the reference, I've opened a ticket @ gpl-violations.org."momitsu BDP-799 Blu-Ray player - GPL violation"
Should anyone wish to contact them (rt@gpl-violations.org), include this in the subject line: [rt.gpl-violations.org #2858]

Haven't heard anything back from them though.

[lleedd]

Is there any news on the custon firmware front?

I just bought the Hiteker HTB-1026 on sale for 50 euro. Would be great if there would be custom firmware for it! Its a great player but it would be even better if it would recognize ntfs filesystems and would be able to attach a network harddisk.

[cliive]

I think the firmwares are signed. But you can connect to the serial port and get a root prompt - on my Allure firmware, at least. I was able to start telnetd and mount a remote NFS share. With a little work you could probably play video over NFS. I don't know if it has SMB support built in. If not, you could probably add it by cross-compiling a kernel module. It would be nice if their front-end (it is called app_player) supported streaming. How much work are you willing to do? I already have an HTPC.

[lleedd]

Im affraid i dont have a clue how to cross-compile a kernel module... I dont even have a serial port on my laptop..
Hopefully someone who does understand these things has figured out how to get ntfs disks to work and how to stream video of of a network harddisk...
I was hoping al i had to do was upload the new firmware...
Otherwise i just need to buy a mediaplayer.

[cliive]

Otherwise i just need to buy a mediaplayer.

Whats your address? I'll come over now, and hold your hand going to the shop.

[lleedd]

Would be great!!
Are you gona pay for it to?

[cliive]

re the GPL violation, last December the SFLC sued 14 companies including Best-Buy (a big US retailer) for similar Busybox violations. I don't see any updates on their website. article here: http://www.computerworlduk.com/community/blogs/index.cfm?blogid=14&entryid=2699

[oarsman]

Hi Cliive,
Can you provide a few more details? Was there a header installed on the
circuit board to plug in a cable? Did you build a level-converter cable
to connect TTL/CMOS <-> RS-232, or did you buy one? I'd like to experiment,
but will need a cable for the console port.
Thanks,
-Ted

> you can connect to the serial port and get a root prompt - on my
> Allure firmware, at least. I was able to start telnetd and mount
> a remote NFS share.

[cliive]

oarsman, There are two 4-pin 0.1&quot; pin-spaced headers, but only one is active.
I tried using an old level-convert cable from a cell-phone with no success.
Then bought a usb dongle from ebay on advice from gizmomelb on whirlpool.
http://forums.whirlpool.net.au/forum-replies.cfm?t=1425396&p=18
http://cgi.ebay.com.au/ws/eBayISAPI.dll?ViewItem&item=170484687886
Note my corrections to the original info. Do not connect power, just GND, Rx, Tx.
When connecting you get console debug output, and control of the UI (remote-control equivalent.)
Do control-C to kill that program and get a login prompt.
Please let us know how you go, and if your firmware differs.

[newgen2005]

I brought Maidston MD-BR-2102 from HMV (UK today) it had the Apr-10 fw which has the region hack removed. I installed the Limit firmware OK but now the Maidstone remote control is messed up! I am now in a little trouble as I can't find the original Maidstone firmware to flash back! I am unable to try the hack on the Limit firmware as I cannot locate number (7) on the remote.

Can anyone suggest anything? or have a copy of the original firmware, I have tried the Maidstone website but they don't have it listed.

I must say it is a great little player for £59.99

Thanks

[cliive]

See previous post. You can use serial port in lieu of IR remote. Sorry can't offer more.

[newgen2005]

Just managed to get the official firmware from Maidstone, but for some reason the player won't update from the usb stick as it did before! looks like the Limit update messed up the usb update!

Which post do you mean ref IR remote?

[newgen2005]

Update: burned the update to a UDF/ISO cd and it updated back to Apr-10, at least it is working as it should now. Would be nice to get the earlier software version though! To be fair to Maidston though their customer service (via email) is very good!

[Pandor]

updated my hiteker to latest firmware from Dyon (Horizon)

They seem to have to latest (kernel) update on hand.

cfe-2.1.22-7601-b0-v10-cfe-PRODUCTION-le-secure-signed.elf
ucfe-2.1.22-7601-b0-v10-ucfe-PRODUCTION-le-BK1-secure-signed.bin
squashfs-7601b0.img
vmlinuz-2624.7_524-7601

http://www.dyon.eu/downloads/firmware/Firmwareupdate_DYON_Horizon.zip

note: This is a European firmware, so will default to euro region.
Might not be region free anymore.

also updated the br5005 drive from ML93 firmware to MLBV firmware.

Thus far, the front buttons don't work anymore, and the Character LCD is all screwed up.
Must have a look on how these are driven in the fw.

$edit
Updated my hiteker from dyon firmware to the latest Foehn & Hirsch BD2101 firmware (same kernel version as the dyon).
Front panel buttons and LCD are working fine now. Seems like the hiteker and F&H are a better match hardware wise.

2gig limit should also be fixed according the f&h.

[Pandor]

Hi Cliive,
Can you provide a few more details? Was there a header installed on the
circuit board to plug in a cable? Did you build a level-converter cable
to connect TTL/CMOS <-> RS-232, or did you buy one? I'd like to experiment,
but will need a cable for the console port.
Thanks,
-Ted

> you can connect to the serial port and get a root prompt - on my
> Allure firmware, at least. I was able to start telnetd and mount
> a remote NFS share.

Serial connector is on the right (J15).
From left to right: GND | Rx | Tx | 3.3v

Jus a reminder, the board uses 3.3v signals, so DOT NOT use a 5v signal convertor.
Make sure it's a low voltage TTL convertor.

[newgen2005]

I wonder if the firmware can be dumped? I need to try and get Oct-09 fw for my Maidston. What are you guys trying to do? looks very interesting!

[Pandor]

I wonder if the firmware can be dumped? I need to try and get Oct-09 fw for my Maidston. What are you guys trying to do? looks very interesting!

If I remember correctly there is a nand dump tool available in the firmware.
Haven't played with those yet.

[cliive]

Anyone know if there is a low-level way to reload the firmware if it is corrupted? Some sort of ROM program like BIOS boot on a PC? Maybe a network boot like some PCs have? How did they load the original firmware to flash in the factory?

[cliive]

I see yours has a fan. Mine has just a small heatsink that gets too hot to touch. I was thinking it might be wise to put a bigger heatsink in, so still quiet.