Pan v3 with unlocked soc for sale

[gtxaspec]

https://ronshed.com/product/t31x-wyze-cam-pan-v3-unlocked-soc-with-thingino-firmware/

My buddy Ron does component level electronics work, and has successfully transplanted a non secure boot ingenic CPU to the pan v3.

This unit doesn't run wyze software, it has the thingino custom firmware.

He's only got one right now, but we've confirmed it works well!

Just FYI for anyone interested. The price is fair for the level of work required.

[endertable]

This is very interesting, the question is, can Wyze firmware be burned back onto the camera. I imagine SecureBoot and the Wyze FW are unrelated after the camera gets past the initial boot process ?!?

[endertable]

Hi @CapnRon ,

I just wanted to clarify, I wouldn’t want it back in its original locked state, I was more inferring to be able to put the Wyze firmware back on there, but having a telnet or SSH access to it.

thanks.

[CapnRon]

The firmware doesn't lock the SOC, that requires applying a voltage to a specific pin to damage the e-fuses. The SOC is a brand new T31X that does not have damaged e=fuses so it is capable of running the factory firmware with, or without wz mini, Thingino or any other Ingenic t31 firmware.

It is like you said "SecureBoot and the Wyze FW are unrelated after the camera gets past the initial boot process". The new SOC does not have damaged e-fuses so it accepts any compatible firmware, where the factory SOC with the damaged e-fuses will only accept the factory wyze firmware.

[vasquezmi]

Let me make sure I am reading this correctly.
Wyze purposely applied a specific voltage to a pin on the SOC of their product and then packaged for sale to bypass the ability to right to repair. Like for CA law.

[gtxaspec]

Many vendors do this. They burn a specific encryption key to the device, or in this case, the processor, that can only be written once, so it will only boot their firmware, that they distribute, signed with their matching encryption key. It's a one way process that is irreversible.

I'm not sure what the specifics are in relation to the RTR laws in CA, but that's how the newer wyze devices work.

[CapnRon]

I don't think they are specifically trying to subvert the RTR law, but it is just a beneficial side effect for them. I think their main goal is locking the device to only allow the use of their paid cloud based service. I'm sure if they are called out on it they will claim it is for "safety and security".

[CapnRon]

[RauschUndNot]

Hello @CapnRon,

Are these still available? The link above isn't working.

[JoshuaSeidel]

https://ronshed.com/product/t31x-wyze-cam-pan-v3-unlocked-soc-with-thingino-firmware/

The website doesnt work @gtxaspec says error with database connection. are these still available for sale?