Hmm, my trial period is up, so no excuse anymore :P Then I can finally stop switching off the scope all the time :D :D I'm surprised it lasted that long after all, I must use it too little.. Thank you very much for the video ! :)
+SDG Electronics - Thanks (again). Everything worked well. Your video is well articulated and edited. Great job. My only hurdle is that as an electronics tech of 24 years, I don't have extensive experience on the programing / coding side of things. But after reading some manuals for setting up drivers, hardware config, etc., I finally figured it all out. One thing that tripped me up was the need to call out the JTAG clock speed (adapter_khz [####]), I had to add it to the interface adapter script file. Terminal (on the Mac side of Parallels running) worked just fine with the same commands, unmodified.
Insetad of replacing the ventilator, wouldn't it be easier to put a resistor into the line so it runs slower and makes less noise? In my PC power supply I connected the 12V ventilator to 5V instead. It is nearly completely slient now. It blows less air, but the power supply does not become too hot.
small typo in your commands "./rigup scan mso1074z.bin mso1074z.txt" should be "./rigup scan mso1074z.bin > mso1074z.txt" to redirect the output- otherwise great job especially on the pinouts for the wiring - this worked fine on my ds1074z plus with the same olimex dongle
Hi, I have bricked my Rigol ds1302CA (HW DA07) after update fail, could I save memory dump from same model of Rigol DS1302CA and load it to my bricked?
Do you maybe know if a similar procedure has to be done for unlocking the MSO2074A or can the 2000 series scopes all be unlocked via the usual key gen method?
Do thees crimps really cost £412.00 uk.farnell.com/harwin/z22-020/crimp-tool-m22-series/dp/672579 That's half cost of the scope itself. Are they worth it? What alternatives would you suggest?
So i need to copy memory from scope, over JTAG using OpenOCD. Witch jtag box should i use, is any good aor some special? Then i use rigup tool to generate licenc key? Thank you very much for this video.
+Бојан Драшко Any tool supported by OpenOCD is fine - You can use the Olimex like in this video, or a genuine Segger J-Link or anything else that supports the ARM chipset.
Has anyone had any success with a MSO1104z ? I'm considering using the JTAG features of the bus pirate to snif out my keys after just receiving a legit quote to enable all my features for $499 Ya, thats gonna happen....
Windows 7 - 32 bit and ARM-USB-OCD-H (good installed with “zadig” program) At CMD: “Error: non device found” “Error: unable to open ftdi device with vid 15ba, pid 0003, description ‘olimes open ocd JTAG’ and serial ‘*’ What now? :-)
Are you referring to the process described by Daruosha at www.eevblog.com/forum/testgear/sniffing-the-rigol_s-internal-i2c-bus/4399/ or do you know of another tool/process?
This video could be far better. Instead of showing detailed how to make the cable you could explain with far more details what you are doing exactly. You could also provide a sharp screen video. You suppose that the people who look this video already know everything. So what do they need this video then? Your link is wrong. Instead of "...sniffing-the-rigol's-..." it should be "...sniffing-the-rigol_s-...". I hate to read all the garbage in a thread over 177 pages in a forum. A good summary about the hacking process is missing in your video.
Yes you can. You may just have a surprise depending on your model: the JTAG headers may not be there. You can try with female header just seating unsoldered in the PCB. It works at 5000 KHz.
Hmm, my trial period is up, so no excuse anymore :P Then I can finally stop switching off the scope all the time :D :D I'm surprised it lasted that long after all, I must use it too little.. Thank you very much for the video ! :)
+EcProjects Thanks, hope it works for you. The EEVblog thread may have some more up to date information if you have any trouble.
Hi Vintage Synthlab - You can modify the source to work on a Mac - I think the Mac related lines in the source are just commented out.
+SDG Electronics - Thanks (again). Everything worked well. Your video is well articulated and edited. Great job.
My only hurdle is that as an electronics tech of 24 years, I don't have extensive experience on the programing / coding side of things. But after reading some manuals for setting up drivers, hardware config, etc., I finally figured it all out.
One thing that tripped me up was the need to call out the JTAG clock speed (adapter_khz [####]), I had to add it to the interface adapter script file.
Terminal (on the Mac side of Parallels running) worked just fine with the same commands, unmodified.
Insetad of replacing the ventilator, wouldn't it be easier to put a resistor into the line so it runs slower and makes less noise? In my PC power supply I connected the 12V ventilator to 5V instead. It is nearly completely slient now. It blows less air, but the power supply does not become too hot.
i've got a memory read error :( maybe for the new rev. board?
I bought the mso5000
There wasn’t a software license certificate with it everything else looks new. Anything I can do?
Rigol didn't do this in the DS1054z. Do they actually want their customers to hack their scopes?
Any idea if this works on the MSO1074Z-S (with the sig gen installed)?
The sig-gen is just another board. Nothing to do with the topic here.
Does it support at 200 Mhz after the hack? If not what is the bandwidth after the hack?
Hi My rigol DS1074Z go in red screen dead please you can help me to give life again? I can have from you dump_image firmware ? Thank you.
Good job! You are is russian hacker? ))
small typo in your commands "./rigup scan mso1074z.bin mso1074z.txt" should be "./rigup scan mso1074z.bin > mso1074z.txt" to redirect the output- otherwise great job especially on the pinouts for the wiring - this worked fine on my ds1074z plus with the same olimex dongle
Hi, I have bricked my Rigol ds1302CA (HW DA07) after update fail, could I save memory dump from same model of Rigol DS1302CA and load it to my bricked?
Do you maybe know if a similar procedure has to be done for unlocking the MSO2074A or can the
2000 series scopes all be unlocked via the usual key gen method?
Hello! Will this work on the MSO1074Z-S? Thanks!
Yes, or at least it did at the time. Check the forum link for more info
It does as of today.
Do thees crimps really cost £412.00
uk.farnell.com/harwin/z22-020/crimp-tool-m22-series/dp/672579
That's half cost of the scope itself. Are they worth it? What alternatives would you suggest?
juliusvalentinas you can fold the crimp terminals with mini pliers and solder if you don't have a crimp tool
So i need to copy memory from scope, over JTAG using OpenOCD. Witch jtag box should i use, is any good aor some special?
Then i use rigup tool to generate licenc key?
Thank you very much for this video.
+Бојан Драшко Any tool supported by OpenOCD is fine - You can use the Olimex like in this video, or a genuine Segger J-Link or anything else that supports the ARM chipset.
SDG Electronics I am just afreid it is to complicated, but i am buying it anyways xD
Has anyone had any success with a MSO1104z ? I'm considering using the JTAG features of the bus pirate to snif out my keys after just receiving a legit quote to enable all my features for $499 Ya, thats gonna happen....
I like this method because it doesn't require you to change any file in the scope. I'm inclined to buy this scope.
Windows 7 - 32 bit and ARM-USB-OCD-H (good installed with “zadig” program)
At CMD:
“Error: non device found”
“Error: unable to open ftdi device with vid 15ba, pid 0003, description ‘olimes open ocd JTAG’ and serial ‘*’
What now? :-)
Now you can find the key generator on web. No need to read flash. Just from serial number
Are you referring to the process described by Daruosha at www.eevblog.com/forum/testgear/sniffing-the-rigol_s-internal-i2c-bus/4399/ or do you know of another tool/process?
This video could be far better. Instead of showing detailed how to make the cable you could explain with far more details what you are doing exactly. You could also provide a sharp screen video. You suppose that the people who look this video already know everything. So what do they need this video then?
Your link is wrong. Instead of "...sniffing-the-rigol's-..." it should be "...sniffing-the-rigol_s-...".
I hate to read all the garbage in a thread over 177 pages in a forum. A good summary about the hacking process is missing in your video.
Then I suggest you do your own video.
Can I use the same proceedure for the MSO1104Z-S...obviuosly I wont have to do the 100mhz option but are all the rest the same?
Yes you can. You may just have a surprise depending on your model: the JTAG headers may not be there. You can try with female header just seating unsoldered in the PCB. It works at 5000 KHz.