Yi 1080p Home RFUS 9.0.35* is hackable?

[barnab2000]

Hello,
In the list of supported cameras, there is the Yi 1080p Home RFUS Firwmare 9.0.36* and I have the Yi 1080p Home RFUS Firwmare 9.0.35*. Do you think the y211ga file will work with my camera?

Thank you.

[blfriedman]

I am using it now - with 9.0.35*

Base Version 9.0.35.00_202111291330
Model Suffix y211ga

I have not noticed any major issues, but the saved image filenames are different than the Yi-Hack M*Star platform, and the name of the directories created for saved video files is on GMT, I believe rather than localtime.

[barnab2000]

Hello blfriedman,

Thank you for your reply.

[roleoroleo]

Please, send me a copy of your backup.
I will check it.

[barnab2000]

Hello roleoroleo,
Thank you for your help. Here is my backup.
backup.tar.gz

[roleoroleo]

Your cam is a y291ga.
At the moment is partially supported.
To complete the support I need a copy of the file /dev/shm/fshare_frame_buf

[roleoroleo]

And to make a copy (and transfer) of the file you can use scp.

[barnab2000]

Hello,
Sorry for my newbie questions but I often use SSH to connect to my raspberry and it requires a username and password. What are the ID and password to enter the camera?

[Montaraz1]

user root, password can be set in cam configuration

[barnab2000]

It does not work, I had already tried with root. Here is what I get:

Is there an SSH server on the original firmware on the camera or do I have to install the hack to have ssh access and get the /dev/shm/fshare_frame_buf file?

[Montaraz1]

i did ssh with hack installed

[Montaraz1]

Hi,
im in the same situation RFUS 9.0.35 , y211ga 0.2.2
here my file /dev/shm/fshare_frame_buf

fshare_frame_buf.zip

[roleoroleo]

Please try this beta:
y291ga_0.2.2.tar.gz
Let me know if it works.

[gl2007]

I saw this behavior of blank screen and nothing working when I had authentication setup for the camera (including ssh etc). I wasn’t able to get into the page at times. Once I got in after multiple reboots, I removed the authentication and not seen that till now. May not apply in your case.

[roleoroleo]

I saw this behavior of blank screen and nothing working when I had authentication setup for the camera (including ssh etc). I wasn’t able to get into the page at times. Once I got in after multiple reboots, I removed the authentication and not seen that till now. May not apply in your case.

Maybe I understand now.
I have some unfinished changes on the authentication part.
I need to complete them.

[roleoroleo]

Please, try this beta:
y291ga_0.2.2.tar.gz

[blfriedman]

I get the same result as earlier - Yi software works, but tcp ports 22 and 8080 are closed from nmap and do not respond to putty or chrome, respectively.

[barnab2000]

Hi,
Me too, same behavior as before like blfriedman.

[roleoroleo]

Damn!
Are you able to enter with telnet and check the system?
ps, top, etc...

[barnab2000]

Hi,
Everything works like for krakowski.

Thank you for your work and your perseverance!

[barnab2000]

I made a small donation to thank you 🙂

Thomas A.

[krakowski]

Looking at the IPC messages and using watch one the record folder it seems that there are messages which occur whenever a media file is created on the sd card. These are the messages I found :

Sending MOTION_START to queue #1
Sending MOTION_START to queue #2
Sending MOTION_START to queue #3
Sending MOTION_START to queue #4
Sending MOTION_START to queue #5
Sending MOTION_START to queue #6
Sending MOTION_START to queue #7
Sending MOTION_START to queue #8
Sending MOTION_START to queue #9

...

01 00 00 00 10 00 00 00 e8 00 e8 00 00 00 00 00 53 01 00 00  // This is where the first media file E255M22S38.mp4 is created

...

Sending MOTION_STOP to queue #1
Sending MOTION_STOP to queue #2
Sending MOTION_STOP to queue #3
Sending MOTION_STOP to queue #4
Sending MOTION_STOP to queue #5
Sending MOTION_STOP to queue #6
Sending MOTION_STOP to queue #7
Sending MOTION_STOP to queue #8
Sending MOTION_STOP to queue #9

...

01 00 00 00 10 00 00 00 e8 00 e8 00 00 00 00 00 95 01 00 00  // This is where the second media file E256M00S60.mp4 is created

I don't know if this is normal behaviour, but my camera creates two media files. The first one contains the actual motion and is saved a few seconds before the MOTION_STOP event while the second one contains the whole next minute (from second 0 to 59) and is saved some seconds (>10) after MOTION_STOP.

EDIT 1

I also got

02 00 00 00 04 00 00 00 07 10 01 00 0f 00 00 00 2f 74 6d 70 2f 6d 6f 74 69 6f 6e 2e 6a 70 67

at the end of the message is an ASCII string containing the following path /tmp/motion.jpg.

[roleoroleo]

I made a small donation to thank you 🙂

Thomas A.

Thank you very much for your donation!

[roleoroleo]

@krakowski
You are right, the message 01 00 00 00 10 00 00 00 e8 00 e8 00 00 00 00 00 xx xx xx xx is sent when a file completes and is sent near the end of the minute.
You could wait for this message, wait 3 seconds and get the file based on the date/time.

[GeorgeNovak]

Add me as the newest test monkey :)
I just purchased a new YiCam Home 1080p and I'm very interested in this hack. My cam is brand new, but firmware is 9.0.35
I installed an SD with your firmware y211ga and it does work, but modifying any settings tends to break things. Once I try to change anything, the cam will stop transmitting video and you have to perform a hardware reset. Using the backup files from the SD doesn't work, you have to push reset, then redo the Yi app setup again. I then flash the SD and put a fresh version of the y211ga hack back into it.
My main purpose is just to produce an RTSP for ispy. I have several cameras doing this, but as they get old I've found it very difficult to find replacement cams with RTSP support. Using these cheap cams will save me time and money.
I have noticed that the app stops working once the hack is loaded. This isn't a huge issue for now, but I would like it to work eventually.
Let me know if there are any files you need from me, and I will monitor this page for updates. Great work on the hack, thank you!

[GeorgeNovak]

y291a works much better than y211ga, and the camera continues to stream RTSP after a power reset.
Also, the apps starts working after a while. You have to give it a few restarts.
That's the good news, bad news is:
The camera will not retain any setting made in the Yi Hack webpage after a reset. It defaults back to original settings. This isn't a huge issue since the Yi app allows me to control motion detection.

[roleoroleo]

Try to clean the cache of your browser.

[GeorgeNovak]

Nope, even tried using a different browser. Settings don't save after a restart.

[roleoroleo]

Remove the SD card and check it with a desktop OS.
Maybe the card is partially corrupted and the cam is not able to mount it in read/write.

[GeorgeNovak]

That was it! For some reason, if I format the SD in the camera, Win10 sees it as a corrupted drive. I first formatted it in the cam, then let Win10 fix it, then added the hack files back in. Seems to work fine now. Mainly wanted to kill Telnet and FTP.

[mrdis]

Hi, just want to let you know that the last beta you provided is working fine also on my Yi 1080p Home RFUS with firwmare 9.0.35.
Thank you very much!

[ethempekin]

Is this one: https://github.com/roleoroleo/yi-hack-Allwinner-v2/files/8862996/y291ga_0.2.2.tar.gz