Yi 1080p Outdoor EUR support

[fedyfausto]

Hello guys! I have a Yi 1080p outdoor EUR version and i'm wondering if i can help you to support this camera, can i give to you some informations?

[kolotiloff]

@mvklingeren, The firmware lasts 2 minutes. Maybe I need to wait longer, am I interrupting early? A steady yellow light comes on, the camera is silent and I turn off the camera.

[mvklingeren]

Wait 3 min after each process; Do not put firmware and the wpasupplicant.conf on the sdcard at the same time

[kolotiloff]

After yi-hack-v3 firmware, does the camera start talking? I have a brick after this. On SD, only firmware files are always. wpasupplicant.conf separately.

[kolotiloff]

Twice in a row I went round and round.

1. Install the yi-hack-v3 firmware. Result: permanent yellow light at the end of the firmware and after a reboot.
2. Installation https://mega.nz/#F!s9wVzZQZ!k6F3p8HcWCoWl-jla2Cxpw. Result: permanent yellow light at the end of the firmware and after a reboot.
3. Installing 3.0.0.0D. Result: the camera works as usual, you can even connect to WiFi through the application, but in the end there will be an error and the camera will not appear in the application.

Edit: Camera Model: YHS.3017

[shadow-1]

@shadow-1 @EpicLPer On my 1080P Dome I was also able to downgrade. I noticed the version check looks like this:

if [ $newver != $curver ]; then

Of course, a restriction could also exist in the updater binary, but I think at least on some devices it only cares that your version is different (greater or lower).

@drlarsen77 Correct. My mistake.

@EpicLPer I created a firmware image for the Yi Outdoor camera. If everything goes well, it should enable telnet on the camera and also automatically backup all partitions to microSD card. If everything works as expected, can you send me the mtd partition dumps from the camera?

I have made this firmware as un-intrusive as possible. Performing an official Xiaomi update should bring the camera back to stock and delete the modifications I made.

The firmware is based on version 3.0.0.0A. I am now hosting the official Xiaomi updates for the Yi Outdoor camera. I have firmware 3.0.0.0A, 3.0.0.0B and 3.0.0.0D available.

Firmware File Link: https://www.dropbox.com/s/az7xs4odbf2u2vn/home_h30?dl=0 Official Firmware Link: https://app.box.com/s/cibs7n1mgvhqaqjlidtveegu1uajt5yr

@kolotiloff Since your camera is bricked. You may as well try this firmware file to recover your camera. If all goes well, you will be restored to 3.0.0.0A firmware and you can perform the Xiaomi update to 3.0.0.0B.

[EpicLPer]

@shadow-1 @EpicLPer On my 1080P Dome I was also able to downgrade. I noticed the version check looks like this:

if [ $newver != $curver ]; then

Of course, a restriction could also exist in the updater binary, but I think at least on some devices it only cares that your version is different (greater or lower).

@drlarsen77 Correct. My mistake.

@EpicLPer I created a firmware image for the Yi Outdoor camera. If everything goes well, it should enable telnet on the camera and also automatically backup all partitions to microSD card. If everything works as expected, can you send me the mtd partition dumps from the camera?

I have made this firmware as un-intrusive as possible. Performing an official Xiaomi update should bring the camera back to stock and delete the modifications I made.

The firmware is based on version 3.0.0.0A. I am now hosting the official Xiaomi updates for the Yi Outdoor camera. I have firmware 3.0.0.0A, 3.0.0.0B and 3.0.0.0D available.

Firmware File Link: https://www.dropbox.com/s/az7xs4odbf2u2vn/home_h30?dl=0 Official Firmware Link: https://app.box.com/s/cibs7n1mgvhqaqjlidtveegu1uajt5yr

@kolotiloff Since your camera is bricked. You may as well try this firmware file to recover your camera. If all goes well, you will be restored to 3.0.0.0A firmware and you can perform the Xiaomi update to 3.0.0.0B.

Once I dump and upload it will there be any personal data like tokens, WiFi etc. in it? Should I factory reset the camera before dumping?

[EpicLPer]

Dump worked without any issues, just the Telnet server didn't work but that's probably not a big deal now :) Thanks @shadow-1! Just tell me where I can send them to you since those partitions likely contain private data, my camera does not factory reset after flashing a new firmware.

[shadow-1]

@EpicLPer There will be some personal data such as wifi as well as your cameras serial number.

So you may wish to perform a factory reset first to clear any possibility of personal data being backed up (besides your cameras serial number).

[shadow-1]

@EpicLPer Great news! I tried to include Telnet server just in case the partitions didn't get backed up due to a mistake in the script. Not a big deal that it did not work out since the partition dumps work.

You can send it to me any way you wish, Dropbox or other file sharing site probably best.

[EpicLPer]

@EpicLPer Great news! I tried to include Telnet server just in case the partitions didn't get backed up due to a mistake in the script. Not a big deal that it did not work out since the partition dumps work.

You can send it to me any way you wish, Dropbox or other file sharing site probably best.

I did a factory reset now and tried to flash the dump firmware again after going back to official for the factory reset, it doesn't seem to dump without first initializing the camera and connecting it to the cloud. Should I make a throwaway account, set the camera up and dump again or can you maybe change that too?

[shadow-1]

@EricLPer On the microSD card you should have 6 or 7 backup files.

The easiest way is if you can send me all of them except for the last two.

The last two partitions is where the personal information is stored (and to be honest, this information is not that interesting to us).

From memory the partitions go as follows:

1. U-Boot
2. Environment Variables (for U-Boot and potentially the kernel)
3. Kernel
4. Rootfs
5. Home
6. Xiaomi infornation (contains some personal information)
7. Xiaomi information (contains some personal information)

[EpicLPer]

@EricLPer On the microSD card you should have 6 or 7 backup files.

The easiest way is if you can send me all of them except for the last two.

The last two partitions is where the personal information is stored (and to be honest, this information is not that interesting to us).

From memory the partitions go as follows:

1. U-Boot
2. Environment Variables (for U-Boot and potentially the kernel)
3. Kernel
4. Rootfs
5. Home
6. Xiaomi infornation (contains some personal information)
7. Xiaomi information (contains some personal information)

I actually have mtd0 up to mtd7 which would make that 8 files, where to start counting now? 0 or 1?

PS.: Currently trying to flash your dump firmware a second time onto the camera and for some odd reason it does say "do_auto_update" at the start and detects that there is something, also says "update finished" but that happens in less than a second or so. So basically it doesn't do anything anymore when trying to flash your dump firmware again and just keeps telling me it'd be done updating.

[shadow-1]

@EpicLPer

I wrote the script to backup from 0 to 7. From the boot log we can tell what each partition is for. What I wrote was from memory that the last two partitions are used by the Xiaomi applications and only they contain any personal information including camera serial number.

Having issues reflashing is a common problem. My usual suggestion is to flash a different version of yi-hack-v3 or go back to stock before going back to yi-hack-v3. However we technically do not have another firmware file to flash (yet). Unless we brick the camera by flashing home partition from another camera before flashing back to this one.

The issue is that U-Boot firmware update facility is primitive. Each firmware file has a 'name'. U-Boot checks the 'name' which has been written to flash memory against the firmware update file on the microSD card. If they match, the firmware update is skipped.

[TheCrypt0]

@EpicLPer @shadow-1

The flash structure of the Yi Outdoor 1080p should be as follows:

0x000000000000-0x000000040000 : "boot"
0x000000040000-0x000000050000 : "env"
0x000000050000-0x000000060000 : "conf"
0x000000060000-0x0000001f0000 : "os"
0x0000001f0000-0x000000330000 : "rootfs"
0x000000330000-0x000000fe0000 : "home"
0x000000fe0000-0x000000ff0000 : "vd1"
0x000000ff0000-0x000001000000 : "ver"

[EpicLPer]

@shadow-1 Ah well, I'll send you those now without mtd6 and mtd7, if you still need them for some reason you'd have to DM me somewhere cause I don't want that info floating around publicly :)

YiOutdoor1080pDump_Excluded-mtd6-mtd7.zip

[TheCrypt0]

@EpicLPer

~I don't know if something is wrong with my extraction process (it worked on all the others images) but the mtd4 (rootfs) is missing the "bin" folder, mtd5 (home) is missing the "app" folder.~

@shadow-1 did you find the missing folders in the dump posted?

Edit: Something was indeed wrong, I used to strip off the uboot header (the first 64 bytes) and I did so with the dump to.. but apparently this isn't needed.

[EpicLPer]

IT'S ALIVE! :)

Left is SSH, right is Telnet.

[fn87]

Do you have FTP up and running in that firmware? Would love to add my outdoor cam to HASS.

[TheCrypt0]

Hi @fn87, yes, there is FTP, SSH and telnet support.

The screenshot @EpicLPer posted is the result of an evening of madness trying to get a stock dump from his camera. After that, I created a quick custom build of yi-hack-v4 (the new version I'm developing) to test if everything was working correctly, and indeed it was!

We are currently testing the new rtsp server and the results look promising.

[EpicLPer]

It's somewhat working :) It's just stops working after 3 minutes or so but in those 3 minutes it almost works flawlessly and with just 1-2 seconds delay!

[kolotiloff]

@shadow-1, Installed your firmware 3.0.0.0A, could not connect to the telnet. I installed https://mega.nz/#F!s9wVzZQZ!k6F3p8HcWCoWl-jla2Cxpw and was able to connect to telnet. I copied all the files, but the camera also does not connect in the Yi application. And in the Chinese version, Yi says that the camera is for use only in China.

[mvklingeren]

@TheCrypt0 next to rtsp, would it be possible to serve mjpg?

[shadow-1]

@kolotiloff Sounds like you have a Chinese version of the Yi Outdoor camera. If you want to use the official Yi smartphone app, the region lock needs to be defeated. To defeat the region lock, you will need a proper build of yi-hack-v3.

I will see if I can create a version of yi-hack-v3 for the Yi Outdoor relatively quickly.

[gkeiko]

@kolotiloff Sounds like you have a Chinese version of the Yi Outdoor camera. If you want to use the official Yi smartphone app, the region lock needs to be defeated. To defeat the region lock, you will need a proper build of yi-hack-v3.

I will see if I can create a version of yi-hack-v3 for the Yi Outdoor relatively quickly.

me need too 👍 my Chinese version of the Yi Outdoor camera need hack to work in Taiwan, please help :( thanks.

but this link files do not work Yi Outdoor h30 home_h30 rootfs_h30<< how to do? https://app.box.com/s/cibs7n1mgvhqaqjlidtveegu1uajt5yr/folder/63747474299

[TheCrypt0]

@mvklingeren

I've recently made a lot of progress with the RTSP, I'm now working on a kernel module which will provide get a clean H264 data stream from a block device to be fed to an rtsp server.

If I remember correctly, the camera encoder supports MJPEG. However this would need some work and documentation. The current objective is to have a stable and working RTSP server.

[Fa5g]

@shadow-1 @EpicLPer On my 1080P Dome I was also able to downgrade. I noticed the version check looks like this:

if [ $newver != $curver ]; then

Of course, a restriction could also exist in the updater binary, but I think at least on some devices it only cares that your version is different (greater or lower).

@drlarsen77 Correct. My mistake.

@EpicLPer I created a firmware image for the Yi Outdoor camera. If everything goes well, it should enable telnet on the camera and also automatically backup all partitions to microSD card. If everything works as expected, can you send me the mtd partition dumps from the camera?

I have made this firmware as un-intrusive as possible. Performing an official Xiaomi update should bring the camera back to stock and delete the modifications I made.

The firmware is based on version 3.0.0.0A. I am now hosting the official Xiaomi updates for the Yi Outdoor camera. I have firmware 3.0.0.0A, 3.0.0.0B and 3.0.0.0D available.

Firmware File Link: https://www.dropbox.com/s/az7xs4odbf2u2vn/home_h30?dl=0 Official Firmware Link: https://app.box.com/s/cibs7n1mgvhqaqjlidtveegu1uajt5yr

@kolotiloff Since your camera is bricked. You may as well try this firmware file to recover your camera. If all goes well, you will be restored to 3.0.0.0A firmware and you can perform the Xiaomi update to 3.0.0.0B.

Hi there, Could you re-post the "Firmware File Link" because it was disabled. I'm gonna try on my YI Outdoor Camera 1080p (USA). Thanks.

[shadow-1]

@kolotiloff @gkeiko @Fa5g I have just released a new version of y-hack-v3 which adds support for the Yi Outdoor camera. No other improvements have been made.

However this should give you something to start with (Telnet, SSH, FTP, Ability to defeat Region Lock etc). I do not have this camera, so the release is untested. However it is identical to all the other cameras that are currently supported.

Recovery images to go back to stock are located in the usual location: https://app.box.com/s/cibs7n1mgvhqaqjlidtveegu1uajt5yr

@Fa5g I removed the dropbox link because it did not achieve anything besides backing up the partitions on the camera. As @EpicLPer was kind enough to post the backup partitions on the camera, it was not needed anymore. It did not enable Telnet, SSH or any other features.

[gkeiko]

@kolotiloff @gkeiko @Fa5g I have just released a new version of y-hack-v3 which adds support for the Yi Outdoor camera. No other improvements have been made.

However this should give you something to start with (Telnet, SSH, FTP, Ability to defeat Region Lock etc). I do not have this camera, so the release is untested. However it is identical to all the other cameras that are currently supported.

Recovery images to go back to stock are located in the usual location: https://app.box.com/s/cibs7n1mgvhqaqjlidtveegu1uajt5yr

Chinese version of the Yi Outdoor camera don't work T_T change file name rootfs_h30"m"| home_h30"m" be not work too .

[shadow-1]

@kolotiloff @gkeiko @Fa5g I have just released a new version of y-hack-v3 which adds support for the Yi Outdoor camera. No other improvements have been made. However this should give you something to start with (Telnet, SSH, FTP, Ability to defeat Region Lock etc). I do not have this camera, so the release is untested. However it is identical to all the other cameras that are currently supported. Recovery images to go back to stock are located in the usual location: https://app.box.com/s/cibs7n1mgvhqaqjlidtveegu1uajt5yr

Chinese version of the Yi Outdoor camera don't work T_T change file name rootfs_h30"m"| home_h30"m" be not work too .

Changing the filename will not work. Can you describe what happens? Have you tried the recovery image? Does the yellow light flash for approximately 30 seconds the first time you flashed the firmware?

Remember to follow the guide on the main page. The microSD card must be formatted with FAT or FAT32. Larger SD cards (generally greater than 16gb) default to formatting using exFAT. It is possible to force a larger SD card to format to FAT32. However it is not trivial.

[gkeiko]

Changing the filename will not work. Can you describe what happens? Have you tried the recovery image? Does the yellow light flash for approximately 30 seconds the first time you flashed the firmware?

I TRY rootfs_h30| home_h30...but can't work too Chinese version camera just say....this camera can't .....maybe use in china (but i live in Taiwan) WiFi connection is normal but browser key camera IP address could not be found

my card>>>fat32 8gb @4

"Does the yellow light flash for approximately 30 seconds the first time you flashed the firmware?"

no,can't flash firmware....why??

[kolotiloff]

@shadow-1, Installed the firmware, does not connect to Telnet. The application does not connect. Last time I was able to connect to Telnet, but the files (rtsp2302, rtsp2302.sh, libstdc++.so.6, init.sh) are useless. The camera is not added in either the European or Chinese version of Yi.

[bloodhound83]

@kolotiloff , i have the same Problems. But i was able to activate telnet via the webconfig / System Configuration. But the APP doesn't work for me. So for me its currently useless...

I got an Error: ERROR: Could not connect to api.xiaoyi.com, ensure that the configured proxy servers are operational.

proxychains4 wget -O- -q -T 8 https://api.xiaoyi.com

[proxychains] config file found: /home/yi-hack-v3/etc/proxychains.conf [proxychains] preloading /home/yi-hack-v3/lib/libproxychains4.so error: no valid proxy found in config

So i have deactivated the ProxyChains-ng Configuration, but still have no access via the YI Home app.

european version.

[bloodhound83]

@kolotiloff , so the App is now connecting to the camera, if had to delete and reconnect it again.

@shadow-1 how it works to connect via rstp to the camera?

[kolotiloff]

@bloodhound83, no. I can not connect to the application. The maximum of what I achieved is a connection through Telnet to upload files (rtsp2302, rtsp2302.sh, libstdc ++. So.6, init.sh), but this does not help.

[bloodhound83]

@kolotiloff, but you see an yi-hack-v3 device in your network? Just to verify that the firmware is correctly installed.

i used the last version from https://github.com/shadow-1/yi-hack-v3/releases/tag/0.1.6

before that i used recovery firmware from https://app.box.com/s/cibs7n1mgvhqaqjlidtveegu1uajt5yr/folder/63747474299

[shadow-1]

@gkeiko Sounds like the firmware files are not being flashed. Sometimes there are issues with particular microSD cards. Try using a different card.

@kolotiloff SSH is enabled by default on this firmware. Telnet is disabled by default. This can be changed in the web interface.

It appears that you are not following the guide on the main page on how to defeat the region lock using a proxy server. Please follow the guide outlined here: https://github.com/shadow-1/yi-hack-v3#cameras-that-are-region-locked-to-mainland-china

This firmware used to parse for proxy servers automatically. However the website I used for this has shut down. So you will need to find appropriate proxy servers manually. There are numerous threads on this GitHub page on where to find and suggested proxy servers to use.

@bloodhound83 You are not using the Chinese version of the camera which is region locked (EU camera). To make the camera work, disable proxychains-ng in the web interface. You do not need this (it is only used to defeat the region lock).

Unfortunately I do not have RTSP implemented on this firmware. Check out the yi-hack-v4 project. It appears to be progressing well.

[kolotiloff]

@Bloodhound83, in a network I see, but I cannot be connected through Telnet.

[shadow-1]

@kolotiloff Try using SSH instead of Telnet.Telnet is disabled by default, this can be changed in the Web interface.

[kolotiloff]

@Shadow-1, Connected to the web interface, but did not understand how to make my proxy addresses?

[kolotiloff]

@shadow-1 Up to this point, I did a completely different instructions. Now I have done everything, as it is written here https://github.com/shadow-1/yi-hack-v3#cameras-that-are-region-locked-to-mainland-china and it works! Thank!

[Fa5g]

@kolotiloff @gkeiko @Fa5g I have just released a new version of y-hack-v3 which adds support for the Yi Outdoor camera. No other improvements have been made.

However this should give you something to start with (Telnet, SSH, FTP, Ability to defeat Region Lock etc). I do not have this camera, so the release is untested. However it is identical to all the other cameras that are currently supported.

Recovery images to go back to stock are located in the usual location: https://app.box.com/s/cibs7n1mgvhqaqjlidtveegu1uajt5yr

@Fa5g I removed the dropbox link because it did not achieve anything besides backing up the partitions on the camera. As @EpicLPer was kind enough to post the backup partitions on the camera, it was not needed anymore. It did not enable Telnet, SSH or any other features.

Thank you @shadow-1 for your excellent work. I applied the firmware following step by step your explanation in https://github.com/shadow-1/yi-hack-v3. The firmware is working fine as in my YI-Dome-1080p cam installed several months ago. This time I installed on YI Outdoor Camera 1080p International version. Best regards.

[shadow-1]

@kolotiloff @Fa5g Good to hear that everything is now working. :smile:

[dawsmac]

Hey guys,

I have been following the thread and it seem like you made some amazing progress. I am now going to try and enable the RTSP. Could someone point me to the best guide process.

Cheers

Rich

Sent from my iPhone

On 20 Jan 2019, at 11:04, shadow-1 notifications@github.com<mailto:notifications@github.com> wrote:

@kolotiloffhttps://github.com/kolotiloff @Fa5ghttps://github.com/Fa5g Good to hear that everything is now working. 😄

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://github.com/shadow-1/yi-hack-v3/issues/228#issuecomment-455856600, or mute the threadhttps://github.com/notifications/unsubscribe-auth/ACkLI5tMp0xAMnT7Yw-s-VfJe2W8Eafoks5vFE0ygaJpZM4WfzVV.

[mvklingeren]

@thecrypt0 any news on the kernel module for rtsp?

[TheCrypt0]

@mvklingeren

Yes, working on it. I'm currently facing a problem with the view file read/write time, I'm trying to optimize it by accessing user-space memory from kernel-space. This is a little bit hacky and shouldn't be done in generic cases, however since we are targeting a specific embedded system it should just work fine.

[skywluke]

Dear Sirs! How can i install yi-hack_v4 ?

Thanks

[aelg305]

@skywluke you got to the yi hack v4 git site and follow the steps (google if you dont know where is it): 1-download your version 2-drop into microsd 3-enjoy

.....this is an overly simplified version of what you would be doing....but fairly accurate. Keep me honest! :)

[junhau89]

Hi, mine Yi home 1080p since after upgrade from v3 0.1.4 to version v3 0.1.5 version. Then currently stuck at v3 0.1.5 version. Unable to update to latest version v3 or v4... also unable to recovery back to official version. Any idea to solve it??

[aelg305]

@junhau89 what steps have u taken?