<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>https://nurdspace.nl/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=Buzz</id>
	<title>NURDspace - User contributions [en]</title>
	<link rel="self" type="application/atom+xml" href="https://nurdspace.nl/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=Buzz"/>
	<link rel="alternate" type="text/html" href="https://nurdspace.nl/Special:Contributions/Buzz"/>
	<updated>2026-05-14T09:51:20Z</updated>
	<subtitle>User contributions</subtitle>
	<generator>MediaWiki 1.39.4</generator>
	<entry>
		<id>https://nurdspace.nl/index.php?title=DN42&amp;diff=16018</id>
		<title>DN42</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=DN42&amp;diff=16018"/>
		<updated>2026-05-13T14:15:05Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=DN42&lt;br /&gt;
|Participants=Sparcie&lt;br /&gt;
|Skills=Networking&lt;br /&gt;
|Status=Planning&lt;br /&gt;
|Niche=Infra&lt;br /&gt;
|Purpose=Learning&lt;br /&gt;
|Tool=No&lt;br /&gt;
|Location=space (and at $place where member puts net stuff&lt;br /&gt;
|Category=Infra&lt;br /&gt;
}}&lt;br /&gt;
dn42 (Decentralized Network 42) is a large, community-driven, decentralized peer-to-peer network that simulates the internet using BGP routing and VPN tunnels. It acts as a learning sandbox for networking enthusiasts to explore BGP, IPv4/IPv6 address spaces, and routing technologies without NAT.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Main contact for DN42: [[Sparcie]] and [[folkert]] (Others as well?)&lt;br /&gt;
&lt;br /&gt;
IPv6-prefix: fd24:18f2:d00f::/48&lt;br /&gt;
&lt;br /&gt;
IPv4-prefix: 172.23.89.160/27&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=DN42&amp;diff=16017</id>
		<title>DN42</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=DN42&amp;diff=16017"/>
		<updated>2026-05-13T14:14:35Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=DN42&lt;br /&gt;
|Participants=Sparcie&lt;br /&gt;
|Skills=Networking&lt;br /&gt;
|Status=Planning&lt;br /&gt;
|Niche=Infra&lt;br /&gt;
|Purpose=Learning&lt;br /&gt;
|Tool=No&lt;br /&gt;
|Location=space (and at $place where member puts net stuff&lt;br /&gt;
|Category=Infra&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
Main contact for DN42: [[Sparcie]] and [[folkert]] (Others as well?)&lt;br /&gt;
&lt;br /&gt;
IPv6-prefix: fd24:18f2:d00f::/48&lt;br /&gt;
&lt;br /&gt;
IPv4-prefix: 172.23.89.160/27&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=5_mei&amp;diff=16013</id>
		<title>5 mei</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=5_mei&amp;diff=16013"/>
		<updated>2026-05-04T10:45:02Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Event&lt;br /&gt;
|Name=5 mei&lt;br /&gt;
|Date=2026/05/05&lt;br /&gt;
|DateEnd=2026/05/05&lt;br /&gt;
}}&lt;br /&gt;
5 mei&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Avoid the crowds!&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
The ultimate geek retreat where you set the scene! Forget battling crowds—at our hacker-resort, you can dive deep into tabletop epics, coding challenges, or sci-fi relaxation in your own zone. Discover legendary fandom without sacrificing peace and quiet. Book your low-density nerd vacation today!&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=5_mei&amp;diff=16012</id>
		<title>5 mei</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=5_mei&amp;diff=16012"/>
		<updated>2026-05-03T13:49:26Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Created page with &amp;quot;{{Event |Name=5 mei |Date=2026/05/05 |DateEnd=2026/05/05 }} 5 mei&amp;quot;&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Event&lt;br /&gt;
|Name=5 mei&lt;br /&gt;
|Date=2026/05/05&lt;br /&gt;
|DateEnd=2026/05/05&lt;br /&gt;
}}&lt;br /&gt;
5 mei&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Boombox_Rollator&amp;diff=15994</id>
		<title>Boombox Rollator</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Boombox_Rollator&amp;diff=15994"/>
		<updated>2026-04-29T13:05:05Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Boombox Rollator&lt;br /&gt;
|Skills=Party,Fun&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Party&lt;br /&gt;
|Purpose=Use for all of Nurdspace party activity&lt;br /&gt;
|Picture=IMG_20260428_155828.jpg&lt;br /&gt;
|Tool=Yes&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
Reusable party rollator for various street rave/party needs.&lt;br /&gt;
&lt;br /&gt;
 20:46:47 &amp;lt;@__20h__&amp;gt; buZz-tel, the base is 32cmx24cm&lt;br /&gt;
 20:47:12 &amp;lt;@__20h__&amp;gt; buZz-tel, maximum height is 23 to 25cm.&lt;br /&gt;
 20:47:28 &amp;lt;@__20h__&amp;gt; But there we need to be careful, for attaching the basket we need to move it a bit.&lt;br /&gt;
 20:47:46 &amp;lt;@__20h__&amp;gt; Maximum height in basket is 17cm.&lt;br /&gt;
 20:51:22 &amp;lt;@__20h__&amp;gt; buZz-tel, we can also put something higher on seat.&lt;br /&gt;
 20:51:39 &amp;lt;@__20h__&amp;gt; Seat is 34cmx33.5cm.&lt;br /&gt;
 20:51:46 &amp;lt;@__20h__&amp;gt; But that seat can overlap.&lt;br /&gt;
&lt;br /&gt;
* https://www.amazon.de/dp/B00EOTLALQ?ref=jemoeder&lt;br /&gt;
* https://gsyuasa-es.com/products/np-series/np38-12/&lt;br /&gt;
&lt;br /&gt;
== een verhaal over een geverfde rollator met een bladerenslinger ==&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Het verhaal begint op de verlaten achtertuin van NURDspace. Harksma Rakemeniet (die we hier maar niet nodig hebben, zoals altijd) had een oude, verrotte rollator gevonden die niemand wilde ophalen. Hij liet het liggen tot het zomaar zelf begon te bewegen.&lt;br /&gt;
&lt;br /&gt;
De rollator was beschilderd met de meest bizarre combinaties van neonspraybussen: fluorescerend groen over oranje, met daarop een grote rode cirkel en het woord &amp;quot;BIJEN&amp;quot; in spijkerbroekkleurige letters. Aan de handgrepen waren twee lange takken bevestigd, aan de onderkant versierd met kunstmatige bladeren die constant zwaaiden alsof er een onzichtbare wind door de ruimte waait.&lt;br /&gt;
&lt;br /&gt;
De eigenaar van deze constructie was niemand minder dan de nieuwe beheerder van de NURDspace serverroom, een man genaamd Bartje die alleen sprak in ASCII-kunst en gedichtjes over fotosynthese. Hij noemde het project &amp;quot;De Fotossynthetische Verhuizer&amp;quot;. Volgens hem zou de rollator niet alleen mensen helpen lopen, maar ook hun geestelijke gezondheid verbeteren door ze te dwingen om regelmatig naar buiten te gaan voor een rondje maken terwijl ze luisteren naar de muziek van De Doei.&lt;br /&gt;
&lt;br /&gt;
Op een dag zag iemand die niet bij het team hoorde hoe Bartje met de rollator door de gangen liep. Hij zwaaidte enthousiast met de bladerenslinger en riep: &amp;quot;Kijk eens, dit is de toekomst van mobiliteit! Nu kunnen we ook nog even kijken of er nieuwe soorten schimmels groeien in het park!&amp;quot;&lt;br /&gt;
&lt;br /&gt;
De volgende dag verscheen er een tweede rollator, deze keer blauw geschilderd met een grote gele ster erop. De eigenaar was niemand anders dan de hoofdarchitect van het hackerspace, die verklaarde dat hij de eerste had geïnspireerd door zijn droom over een wereld zonder zwaartekracht.&lt;br /&gt;
&lt;br /&gt;
Vanaf toen werd het gewoon gebruikelijk dat iedereen bij NURDspace met zo&#039;n gekleurd en versierd apparaatje rondliep, vaak met een bladerenslinger die meedeed aan de chaos van het dagelijks leven. En als je ooit iemand tegenkomt die vraagt wat er nou precies gebeurt met al die rollators, zeg dan gewoon: &amp;quot;Ze wachten op de volgende stap in de evolutie van menselijke mobiliteit.&amp;quot;&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Boombox_Rollator&amp;diff=15993</id>
		<title>Boombox Rollator</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Boombox_Rollator&amp;diff=15993"/>
		<updated>2026-04-29T12:48:21Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Boombox Rollator&lt;br /&gt;
|Skills=Party,Fun&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Party&lt;br /&gt;
|Purpose=Use for all of Nurdspace party activity&lt;br /&gt;
|Picture=IMG_20260428_155828.jpg&lt;br /&gt;
|Tool=Yes&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
Reusable party rollator for various street rave/party needs.&lt;br /&gt;
&lt;br /&gt;
 20:46:47 &amp;lt;@__20h__&amp;gt; buZz-tel, the base is 32cmx24cm&lt;br /&gt;
 20:47:12 &amp;lt;@__20h__&amp;gt; buZz-tel, maximum height is 23 to 25cm.&lt;br /&gt;
 20:47:28 &amp;lt;@__20h__&amp;gt; But there we need to be careful, for attaching the basket we need to move it a bit.&lt;br /&gt;
 20:47:46 &amp;lt;@__20h__&amp;gt; Maximum height in basket is 17cm.&lt;br /&gt;
 20:51:22 &amp;lt;@__20h__&amp;gt; buZz-tel, we can also put something higher on seat.&lt;br /&gt;
 20:51:39 &amp;lt;@__20h__&amp;gt; Seat is 34cmx33.5cm.&lt;br /&gt;
 20:51:46 &amp;lt;@__20h__&amp;gt; But that seat can overlap.&lt;br /&gt;
&lt;br /&gt;
* https://www.amazon.de/dp/B00EOTLALQ?ref=jemoeder&lt;br /&gt;
* !? schrijf een verhaal over een geverfde rollator met een bladerenslinger&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Het verhaal begint op de verlaten achtertuin van NURDspace. Harksma Rakemeniet (die we hier maar niet nodig hebben, zoals altijd) had een oude, verrotte rollator gevonden die niemand wilde ophalen. Hij liet het liggen tot het zomaar zelf begon te bewegen.&lt;br /&gt;
&lt;br /&gt;
De rollator was beschilderd met de meest bizarre combinaties van neonspraybussen: fluorescerend groen over oranje, met daarop een grote rode cirkel en het woord &amp;quot;BIJEN&amp;quot; in spijkerbroekkleurige letters. Aan de handgrepen waren twee lange takken bevestigd, aan de onderkant versierd met kunstmatige bladeren die constant zwaaiden alsof er een onzichtbare wind door de ruimte waait.&lt;br /&gt;
&lt;br /&gt;
De eigenaar van deze constructie was niemand minder dan de nieuwe beheerder van de NURDspace serverroom, een man genaamd Bartje die alleen sprak in ASCII-kunst en gedichtjes over fotosynthese. Hij noemde het project &amp;quot;De Fotossynthetische Verhuizer&amp;quot;. Volgens hem zou de rollator niet alleen mensen helpen lopen, maar ook hun geestelijke gezondheid verbeteren door ze te dwingen om regelmatig naar buiten te gaan voor een rondje maken terwijl ze luisteren naar de muziek van De Doei.&lt;br /&gt;
&lt;br /&gt;
Op een dag zag iemand die niet bij het team hoorde hoe Bartje met de rollator door de gangen liep. Hij zwaaidte enthousiast met de bladerenslinger en riep: &amp;quot;Kijk eens, dit is de toekomst van mobiliteit! Nu kunnen we ook nog even kijken of er nieuwe soorten schimmels groeien in het park!&amp;quot;&lt;br /&gt;
&lt;br /&gt;
De volgende dag verscheen er een tweede rollator, deze keer blauw geschilderd met een grote gele ster erop. De eigenaar was niemand anders dan de hoofdarchitect van het hackerspace, die verklaarde dat hij de eerste had geïnspireerd door zijn droom over een wereld zonder zwaartekracht.&lt;br /&gt;
&lt;br /&gt;
Vanaf toen werd het gewoon gebruikelijk dat iedereen bij NURDspace met zo&#039;n gekleurd en versierd apparaatje rondliep, vaak met een bladerenslinger die meedeed aan de chaos van het dagelijks leven. En als je ooit iemand tegenkomt die vraagt wat er nou precies gebeurt met al die rollators, zeg dan gewoon: &amp;quot;Ze wachten op de volgende stap in de evolutie van menselijke mobiliteit.&amp;quot;&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Boombox_Rollator&amp;diff=15989</id>
		<title>Boombox Rollator</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Boombox_Rollator&amp;diff=15989"/>
		<updated>2026-04-28T18:38:51Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Boombox Rollator&lt;br /&gt;
|Skills=Party,Fun&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Party&lt;br /&gt;
|Purpose=Use for all of Nurdspace party activity&lt;br /&gt;
|Picture=Boombox-rollator-production-line-2026-04-26.jpg&lt;br /&gt;
|Tool=Yes&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
Reusable party rollator for various street rave/party needs.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* https://www.amazon.de/dp/B00EOTLALQ?ref=jemoeder&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Adtec_RD-60&amp;diff=15906</id>
		<title>Adtec RD-60</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Adtec_RD-60&amp;diff=15906"/>
		<updated>2026-04-11T23:19:18Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Images */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Adtec RD-60&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Sdr&lt;br /&gt;
|Tool=No&lt;br /&gt;
|Location=the roof&lt;br /&gt;
}}&lt;br /&gt;
== Adtec RD-60 IRD ==&lt;br /&gt;
The &#039;&#039;&#039;Adtec RD-60&#039;&#039;&#039; is a 1RU integrated receiver/decoder (IRD).&lt;br /&gt;
&lt;br /&gt;
It seems the Adtec RD-60 might expose &#039;&#039;&#039;DVB-S2 baseband frames (BBFrames)&#039;&#039;&#039; below the TS layer, this might be very useful as part of the &#039;&#039;&#039;dontlookup&#039;&#039;&#039; satellite interception paper replication project. See [[dontlookup]]&lt;br /&gt;
&lt;br /&gt;
= Reverse Engineering Notes =&lt;br /&gt;
== Hardware ==&lt;br /&gt;
[[File:Adtec_rd60_internals_overview.jpg|thumb|center]]&lt;br /&gt;
=== Main Unit ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Model:&#039;&#039;&#039; Adtec RD-60 MultiCODEC Receiver/Decoder (IRD)&lt;br /&gt;
* &#039;&#039;&#039;Hostname:&#039;&#039;&#039; &amp;lt;code&amp;gt;GOFFERT&amp;lt;/code&amp;gt;&lt;br /&gt;
* &#039;&#039;&#039;IP:&#039;&#039;&#039; 10.1.2.172 (DHCP)&lt;br /&gt;
* &#039;&#039;&#039;CPU:&#039;&#039;&#039; IBM PowerPC PPC405GPr @ 399 MHz (GemPPC Iolite platform)&lt;br /&gt;
* &#039;&#039;&#039;PLB bus:&#039;&#039;&#039; 133 MHz | &#039;&#039;&#039;PCI bus:&#039;&#039;&#039; 33 MHz&lt;br /&gt;
* &#039;&#039;&#039;Kernel:&#039;&#039;&#039; Linux 2.6.14-gemppc-iolite&lt;br /&gt;
* &#039;&#039;&#039;Front panel:&#039;&#039;&#039; Character LCD/VFD — text only, ~40 chars wide.&lt;br /&gt;
* &#039;&#039;&#039;Storage:&#039;&#039;&#039; CompactFlash card (8 partitions, 4 used)&lt;br /&gt;
&lt;br /&gt;
=== Demodulator Board ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Slot 2:&#039;&#039;&#039; &amp;lt;code&amp;gt;BA14&amp;lt;/code&amp;gt; — PC87 ver 1.4 (main decoder board)&lt;br /&gt;
* &#039;&#039;&#039;Slot 99:&#039;&#039;&#039; &amp;lt;code&amp;gt;7044BB&amp;lt;/code&amp;gt; — &#039;&#039;&#039;Newtec NTC/7044/BB DVB Demodulator&#039;&#039;&#039;&lt;br /&gt;
** PRM firmware: &#039;&#039;&#039;v2.34&#039;&#039;&#039; (20/03/13)&lt;br /&gt;
** FPGA bitfile: v1.01 (09/01/12)&lt;br /&gt;
** Hardware: v3.0&lt;br /&gt;
** Serial: &#039;&#039;&#039;30091216&#039;&#039;&#039;&lt;br /&gt;
** Software ID: NTC/6381 DVB Demodulator&lt;br /&gt;
** Product ID: NTC/7044/BB.BCDCBCAA.x.B&lt;br /&gt;
** License: &#039;&#039;&#039;165&#039;&#039;&#039; (includes Baseband Frames — see below)&lt;br /&gt;
** Communicates via I2C (&amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; kernel module)&lt;br /&gt;
** &amp;lt;code&amp;gt;BB&amp;lt;/code&amp;gt; suffix = BaseBand licensed and capable&lt;br /&gt;
&lt;br /&gt;
According to the official Newtec datasheet, the NTC/7044/BB supports explicit &#039;&#039;&#039;output mode switching&#039;&#039;&#039; between:&lt;br /&gt;
* Single transport stream&lt;br /&gt;
* Generic stream  &lt;br /&gt;
* &#039;&#039;&#039;Base Band Frames&#039;&#039;&#039; (BBFrames)&lt;br /&gt;
&lt;br /&gt;
The control interface is &#039;&#039;&#039;RMCPv2 protocol&#039;&#039;&#039; over async serial TTL or I2C — implemented by the &amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; kernel module. &lt;br /&gt;
This is the mechanism to switch output to BBFrame mode.&lt;br /&gt;
&lt;br /&gt;
See also this PDF: https://www.melcom.co.uk/uploads/newdvbdemodntc7044_01.pdf&lt;br /&gt;
&lt;br /&gt;
[[File:20250429 153804.jpg|thumb|center]]&lt;br /&gt;
&lt;br /&gt;
=== Inputs/Outputs ===&lt;br /&gt;
&lt;br /&gt;
* 2x RF/satellite inputs (RF1, RF2) — 950–2150 MHz, 256 kSym/s – 45 MSym/s&lt;br /&gt;
* DVB-ASI input/output (currently set to RECEIVE mode)&lt;br /&gt;
* 2x SDI outputs (SD scaling)&lt;br /&gt;
* CVBS output&lt;br /&gt;
* 3x Ethernet (eth0, eth1, eth2)&lt;br /&gt;
* Serial: ttyS0 @ 115200, ttyBA&lt;br /&gt;
* L-Band Modulator option slot — &#039;&#039;&#039;not populated&#039;&#039;&#039; (&amp;lt;code&amp;gt;/dev/ntmod&amp;lt;/code&amp;gt; = &amp;quot;No such device&amp;quot;)&lt;br /&gt;
&lt;br /&gt;
== Firmware / Software ==&lt;br /&gt;
&lt;br /&gt;
=== CF Card Partition Layout ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Partition !! Size !! Contents&lt;br /&gt;
|-&lt;br /&gt;
| p5 || 137M || GNU sysroot — gcc-3.4.4 / glibc-2.3.5, PPC cross toolchain&lt;br /&gt;
|-&lt;br /&gt;
| p6 || 1.1M || &#039;&#039;&#039;Firmware&#039;&#039;&#039; — adtec/RD-60/1.12.08 and 1.12.12&lt;br /&gt;
|-&lt;br /&gt;
| p7 || 3.4M || Minimal initrd (busybox, bash, minimal libs)&lt;br /&gt;
|-&lt;br /&gt;
| p8 || 24M || Runtime/data (logs, DVC profiles, media)&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
* Current firmware: &#039;&#039;&#039;1.12.12&#039;&#039;&#039; (symlinked at &amp;lt;code&amp;gt;/opt/pkg/oem&amp;lt;/code&amp;gt;)&lt;br /&gt;
* Previous firmware: &#039;&#039;&#039;1.12.08&#039;&#039;&#039; (symlinked at &amp;lt;code&amp;gt;/opt/pkg/oem_prev&amp;lt;/code&amp;gt;)&lt;br /&gt;
&lt;br /&gt;
=== p8 Runtime Directories ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Dir !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dvc/&amp;lt;/code&amp;gt; || Tuner device profile files (.DVC)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;keys/&amp;lt;/code&amp;gt; || Empty — key material generated at runtime&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;log/&amp;lt;/code&amp;gt; || Rotated system logs&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;media/&amp;lt;/code&amp;gt; || Media files&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;.meta/&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;freg.db&amp;lt;/code&amp;gt; — feature registry SQLite DB&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;mvl/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;osd/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;rdy/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;schmi/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;shd/&amp;lt;/code&amp;gt; || Runtime state dirs (mostly empty)&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
=== Key Binaries (&amp;lt;code&amp;gt;/usr/local/sbin/&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Binary !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;sysd&amp;lt;/code&amp;gt; || Main system daemon — tuner/demodulator config via XML&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;cmdld&amp;lt;/code&amp;gt; || Telnet API daemon (3 processes)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;menud&amp;lt;/code&amp;gt; || Front panel menu daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;fregd&amp;lt;/code&amp;gt; || Feature/license registry daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dtrans&amp;lt;/code&amp;gt; || TS transport handler (&amp;lt;code&amp;gt;--slot=2 --id=BA14&amp;lt;/code&amp;gt;)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dcmd&amp;lt;/code&amp;gt; || Device command interface for BA14&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;myles&amp;lt;/code&amp;gt; || Web API backend (SQLite)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;requestHandler&amp;lt;/code&amp;gt; || Apache CGI/FastCGI handler&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;snmpd&amp;lt;/code&amp;gt; || SNMP daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;snmpl&amp;lt;/code&amp;gt; || Internal SNMP poller — continuously queries Newtec MIB&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;vtosfifo&amp;lt;/code&amp;gt; || TS-to-FIFO bridge to &amp;lt;code&amp;gt;/dev/vtosfifo4&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;xcpServerd&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;xcpClientd&amp;lt;/code&amp;gt; || XCP protocol daemons (3 each)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pard&amp;lt;/code&amp;gt; || Parallel interface daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pnpd&amp;lt;/code&amp;gt; || PnP device daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;mirror&amp;lt;/code&amp;gt; || Mirror/redundancy daemon (runs as adtec)&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
=== Kernel Modules ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Module !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;newtec&amp;lt;/code&amp;gt; || Newtec 7044 demodulator driver — core BBFrame driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;newtec_dummy&amp;lt;/code&amp;gt; || Stub for absent optional demodulator hardware&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dvblite&amp;lt;/code&amp;gt; || DVB lite core (depends on newtec) — exposes &amp;lt;code&amp;gt;dvblite_ioctl&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; || I2C transport for Newtec RMCP protocol&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;vtosfifo&amp;lt;/code&amp;gt; || TS FIFO device driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;rddma_ip&amp;lt;/code&amp;gt; || &#039;&#039;&#039;IP-over-satellite receive DMA engine (FPGA-backed)&#039;&#039;&#039;&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;ip_ingress_main&amp;lt;/code&amp;gt; || IP ingress pipeline (GSE/MPE over satellite)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;frpanel&amp;lt;/code&amp;gt; || Front panel driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;fanctrl&amp;lt;/code&amp;gt; / &amp;lt;code&amp;gt;pc96&amp;lt;/code&amp;gt; || Fan controller&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;proxyimg&amp;lt;/code&amp;gt; || Image proxy&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;epb&amp;lt;/code&amp;gt; || EPB bus driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pnp&amp;lt;/code&amp;gt; || PnP device manager&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;fec&amp;lt;/code&amp;gt; / &amp;lt;code&amp;gt;ethfrm&amp;lt;/code&amp;gt; || Ethernet/FEC&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pc73a&amp;lt;/code&amp;gt; / &amp;lt;code&amp;gt;pc93&amp;lt;/code&amp;gt; || Front panel dependencies&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
Failed to load (hardware absent): &amp;lt;code&amp;gt;teamcast&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;nim&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnb_pwr&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;pc72&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== Device Nodes ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Device !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/dvblite0-2&amp;lt;/code&amp;gt; || DVB lite interfaces&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/vtosfifo0-5&amp;lt;/code&amp;gt; || TS FIFO char devices (major 240)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner0-3&amp;lt;/code&amp;gt; || Tuner interfaces (major 123)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner_ledgr0-3&amp;lt;/code&amp;gt; || Tuner lock (green) LEDs&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner_ledrd0-3&amp;lt;/code&amp;gt; || Tuner read LEDs&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner_rst0-3&amp;lt;/code&amp;gt; || Tuner resets&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/ntmod&amp;lt;/code&amp;gt; || Newtec modulator — &#039;&#039;&#039;not populated&#039;&#039;&#039;&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
== /proc Driver Interfaces ==&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/dvblite/fe0/info&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
NAME=NTC/7044/BB DVB Demodulator&lt;br /&gt;
FREQ_MIN=950000 / FREQ_MAX=2150000&lt;br /&gt;
SYMRATE_MIN=256000 / SYMRATE_MAX=45000000&lt;br /&gt;
S_QPSK=1/2, 2/3, 3/4, 5/6, 6/7, 7/8, AUTO&lt;br /&gt;
S_8PSK=2/3, 5/6, 8/9, AUTO&lt;br /&gt;
S2_QPSK=1/4, 1/3, 1/2, 2/5, 2/3, 3/5, 3/4, 4/5, 5/6, 8/9, 9/10&lt;br /&gt;
S2_8PSK=2/3, 3/5, 3/4, 5/6, 8/9, 9/10&lt;br /&gt;
S2_16QAM=3/4, 7/8, AUTO&lt;br /&gt;
S2_16APSK=2/3, 3/4, 4/5, 5/6, 8/9, 9/10&lt;br /&gt;
S2_32APSK=3/4, 4/5, 5/6, 8/9, 9/10&lt;br /&gt;
SOFTWARE_LICENSE=165&lt;br /&gt;
SOFTWARE_VERSION=v2.34   20/03/13&lt;br /&gt;
FPGA_BITFILE_VERSION=v1.01 09/01/12&lt;br /&gt;
HARDWARE_VERSION=v3.0&lt;br /&gt;
SERIAL_NUM=30091216&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/dvblite/fe0/stats&amp;lt;/code&amp;gt; (no signal) ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
LOCK=UNLOCKED&lt;br /&gt;
RECV_LEVEL=-70.00&lt;br /&gt;
INTRATE=41470588&lt;br /&gt;
MOD_FEC=QPSK_3/4&lt;br /&gt;
BB_CRC_ERRORS=N/A        &amp;lt;- populates with live signal&lt;br /&gt;
DUMMY_PL_RATIO=N/A       &amp;lt;- populates with live signal&lt;br /&gt;
ISI_FILTER_BYTE=N/A      &amp;lt;- populates with live signal&lt;br /&gt;
BASEBAND_LEN=N/A         &amp;lt;- populates with live signal&lt;br /&gt;
FRAMES_SEC=N/A           &amp;lt;- populates with live signal&lt;br /&gt;
ALARMS=0000110001011000&lt;br /&gt;
STATE=READY&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
fe1 has same structure but &amp;lt;code&amp;gt;NAME=NTC7044&amp;lt;/code&amp;gt; (no BB suffix, no license).&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/vtosfifo/chn&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
Channel 0 processed 16620 TS frames during session. Channel 4 processed 1619.&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/rddma/&amp;lt;/code&amp;gt; — FPGA DMA engine ===&lt;br /&gt;
&lt;br /&gt;
* Channel 3 active: Control=&amp;lt;code&amp;gt;49C003C0&amp;lt;/code&amp;gt;, Src=&amp;lt;code&amp;gt;03F01C00&amp;lt;/code&amp;gt; (FPGA mapped)&lt;br /&gt;
* 3.98M timer IRQs, 3.98M &amp;quot;No Data&amp;quot; — idle, no satellite IP stream&lt;br /&gt;
* PID &amp;lt;code&amp;gt;0x01E1&amp;lt;/code&amp;gt; (481) being tracked&lt;br /&gt;
&lt;br /&gt;
== Kernel Module Internals (&amp;lt;code&amp;gt;strings&amp;lt;/code&amp;gt; analysis) ==&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;newtec.ko&amp;lt;/code&amp;gt; — BBFrame symbols ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
BB_CRC_ERRORS / BB_CRC_ERRORS_CURRENT / BB_CRC_ERRORS_NEXT&lt;br /&gt;
BB_DATA_FIELD_LEN / BB_DATA_FIELD_LEN_CURRENT / BB_DATA_FIELD_LEN_NEXT&lt;br /&gt;
BB_FRAMES&lt;br /&gt;
BB_GAIN / BB_GAIN_CURRENT / BB_GAIN_NEXT&lt;br /&gt;
BASEBAND_LEN&lt;br /&gt;
ISI / ISI_CTRL / ISI_CTRL_STRUCT / ISI_CTRL_STRUCT_FIELDS&lt;br /&gt;
ISI_FILTER_BYTE / ISI_MASK&lt;br /&gt;
SAT_BB_GAIN&lt;br /&gt;
ntc_debug  (module param, uint)&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;BB_DATA_FIELD_LEN&amp;lt;/code&amp;gt; and &amp;lt;code&amp;gt;BB_FRAMES&amp;lt;/code&amp;gt; suggest the driver tracks individual baseband frames, not just statistics. Very promising for BBFrame capture.&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;dvblite.ko&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
Contains &amp;lt;code&amp;gt;dvblite_ioctl&amp;lt;/code&amp;gt; — a kernel ioctl interface on &amp;lt;code&amp;gt;/dev/dvblite0&amp;lt;/code&amp;gt;. Commands unknown — to be investigated with a live signal.&lt;br /&gt;
&lt;br /&gt;
== Network Services ==&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Service !! Port !! Notes&lt;br /&gt;
|-&lt;br /&gt;
| SSH || 22 || Legacy KEX only (diffie-hellman-group1-sha1)&lt;br /&gt;
|-&lt;br /&gt;
| Telnet API || 23 || &amp;lt;code&amp;gt;cmdld&amp;lt;/code&amp;gt; via xinetd&lt;br /&gt;
|-&lt;br /&gt;
| FTP || 21 || pure-ftpd&lt;br /&gt;
|-&lt;br /&gt;
| HTTP || 80 || Apache + myles + requestHandler&lt;br /&gt;
|-&lt;br /&gt;
| SNMP || 161 || Community &amp;lt;code&amp;gt;public&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| mDNS || 5353 || &amp;lt;code&amp;gt;GOFFERT.local&amp;lt;/code&amp;gt;&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
&amp;lt;syntaxhighlight lang=&amp;quot;bash&amp;quot;&amp;gt;&lt;br /&gt;
# SSH/SCP&lt;br /&gt;
ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -oHostKeyAlgorithms=+ssh-rsa root@&amp;lt;ip&amp;gt;&lt;br /&gt;
scp -oKexAlgorithms=+diffie-hellman-group1-sha1 -oHostKeyAlgorithms=+ssh-rsa root@&amp;lt;ip&amp;gt;:/path /local&lt;br /&gt;
&amp;lt;/syntaxhighlight&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Credentials (Default/Hardcoded — ZSL-2020-5603 / ExploitDB 48954) ==&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! User !! Password !! Notes&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;root&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;1root!&amp;lt;/code&amp;gt; || Full root SSH&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;admin&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;1admin!&amp;lt;/code&amp;gt; || Also root via sudoers&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;adtec&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;none&amp;lt;/code&amp;gt; || Telnet API / web UI&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;adtecftp&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;adtecftp2231&amp;lt;/code&amp;gt; || FTP only&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
* Password hashes: DES crypt — crackable in seconds with &amp;lt;code&amp;gt;john&amp;lt;/code&amp;gt;&lt;br /&gt;
* &amp;lt;code&amp;gt;apache ALL=(ALL) NOPASSWD: ALL&amp;lt;/code&amp;gt; in sudoers&lt;br /&gt;
* Diagnostic package passphrase: &#039;&#039;&#039;&amp;lt;code&amp;gt;iMoo3jio&amp;lt;/code&amp;gt;&#039;&#039;&#039; (hardcoded, leaks in &amp;lt;code&amp;gt;ps aux&amp;lt;/code&amp;gt;)&lt;br /&gt;
&lt;br /&gt;
&amp;lt;syntaxhighlight lang=&amp;quot;bash&amp;quot;&amp;gt;&lt;br /&gt;
gpg --passphrase &amp;quot;iMoo3jio&amp;quot; --batch --ignore-mdc-error --decrypt RD-60_*.tar.gpg | tar xf -&lt;br /&gt;
&amp;lt;/syntaxhighlight&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== APIs ==&lt;br /&gt;
&lt;br /&gt;
=== Telnet API ===&lt;br /&gt;
&lt;br /&gt;
Connect: &amp;lt;code&amp;gt;telnet &amp;lt;ip&amp;gt;&amp;lt;/code&amp;gt;, login &amp;lt;code&amp;gt;adtec&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;none&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
*.SYSD SHELLCMD &amp;lt;cmd&amp;gt;          # arbitrary root shell execution!&lt;br /&gt;
*.SNMP ADTEC-NT-DEMOD-MIB::satFeedType.0 = dvbs2   # configure tuner&lt;br /&gt;
*.SNMP ADTEC-NT-DEMOD-MIB::satFeedDownlink.0 = 10960000&lt;br /&gt;
*.SNMP .1.3.6.1.4.1.19587.6000.3.999.0 i 0         # commit/apply&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== SNMP — Newtec Demodulator MIB ===&lt;br /&gt;
&lt;br /&gt;
OID base: &amp;lt;code&amp;gt;.1.3.6.1.4.1.19587&amp;lt;/code&amp;gt;, MIB: &amp;lt;code&amp;gt;ADTEC-NT-DEMOD-MIB&amp;lt;/code&amp;gt;, community: &amp;lt;code&amp;gt;public&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;syntaxhighlight lang=&amp;quot;bash&amp;quot;&amp;gt;&lt;br /&gt;
snmpwalk -v2c -c public &amp;lt;ip&amp;gt; .1.3.6.1.4.1.19587&lt;br /&gt;
&amp;lt;/syntaxhighlight&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Key OIDs: &amp;lt;code&amp;gt;tunerLock&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;recvLevel&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;esNo&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;linkMargin&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;modFec&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;rolloff&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;pilot&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;fecFrameType&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;unCorrFs&amp;lt;/code&amp;gt;, &#039;&#039;&#039;&amp;lt;code&amp;gt;bbCrcerrors&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;basebandLen&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;dummyPlRatio&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;isiFilterByte&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;framesSec&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &amp;lt;code&amp;gt;satFeedType&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;satFeedDownlink&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;satFeedSymRate&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;satFeedModulation&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnbEnable&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnbPolarity&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnbTone&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== DVC Profile Format ===&lt;br /&gt;
&lt;br /&gt;
SNMP SET commands as tuner presets, applied via Telnet API or web UI.&lt;br /&gt;
&lt;br /&gt;
== Saved Tuner Profiles ==&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;prfturktest.DVC&amp;lt;/code&amp;gt; (2018-04-28) ===&lt;br /&gt;
&lt;br /&gt;
* DVB-S, &#039;&#039;&#039;10762 MHz&#039;&#039;&#039;, KU 9750 LO → &#039;&#039;&#039;1012 MHz&#039;&#039;&#039; L-band&lt;br /&gt;
* &#039;&#039;&#039;30 MSym/s&#039;&#039;&#039;, QPSK 3/4, roll-off 35%&lt;br /&gt;
* Was &#039;&#039;&#039;LOCKED&#039;&#039;&#039; at -32 dBm when saved&lt;br /&gt;
* &amp;lt;code&amp;gt;bbCrcerrors = 1&amp;lt;/code&amp;gt; — &#039;&#039;&#039;BBFrame counter was active and non-zero!&#039;&#039;&#039;&lt;br /&gt;
* Likely &#039;&#039;&#039;Türksat 42°E&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;prfMUX.DVC&amp;lt;/code&amp;gt; (2018-04-28) ===&lt;br /&gt;
&lt;br /&gt;
* DVB-S2, &#039;&#039;&#039;10960 MHz&#039;&#039;&#039;, KU 9750 LO → &#039;&#039;&#039;1210 MHz&#039;&#039;&#039; L-band&lt;br /&gt;
* &#039;&#039;&#039;8.352 MSym/s&#039;&#039;&#039;, 16APSK 2/3, roll-off 20%, pilot ON, normal frames, CCM&lt;br /&gt;
* Was unlocked when saved&lt;br /&gt;
&lt;br /&gt;
== Licensed Features (Key ID 165) ==&lt;br /&gt;
&lt;br /&gt;
DVB-DSNG + DVB-S2 + QPSK + 8-PSK + 16-QAM/16APSK + 32APSK + Symbol Rate &amp;lt;= 33 MBaud + ACM + &#039;&#039;&#039;Single TS/GS or Multiple Streams&#039;&#039;&#039; + &#039;&#039;&#039;(Baseband Frames)&#039;&#039;&#039; + no ACM client + no AES&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;BBFrame access is explicitly licensed and enabled.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Encryption / CA ==&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;BISS-1 key&#039;&#039;&#039; in &amp;lt;code&amp;gt;dtrans.xml&amp;lt;/code&amp;gt;: &amp;lt;code&amp;gt;69A969BBECA0&amp;lt;/code&amp;gt;&lt;br /&gt;
* &#039;&#039;&#039;Viaccess&#039;&#039;&#039; (CA ID 0x0005) feed seen in logs — no card present, could not decrypt&lt;br /&gt;
&lt;br /&gt;
== IP-over-Satellite ==&lt;br /&gt;
&lt;br /&gt;
The unit has a full satellite IP receive stack beyond TS decoding:&lt;br /&gt;
&lt;br /&gt;
* &amp;lt;code&amp;gt;rddma_ip&amp;lt;/code&amp;gt; — FPGA-backed DMA for IP-from-satellite&lt;br /&gt;
* &amp;lt;code&amp;gt;ip_ingress_main&amp;lt;/code&amp;gt; — GSE/MPE ingress pipeline&lt;br /&gt;
* FPGA Channel 3 active at &amp;lt;code&amp;gt;03F01C00&amp;lt;/code&amp;gt;&lt;br /&gt;
* Currently idle — no GSE/MPE stream configured&lt;br /&gt;
&lt;br /&gt;
== Security Summary ==&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Issue !! Detail&lt;br /&gt;
|-&lt;br /&gt;
| Default root creds || &amp;lt;code&amp;gt;root&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;1root!&amp;lt;/code&amp;gt; over SSH&lt;br /&gt;
|-&lt;br /&gt;
| Telnet RCE || &amp;lt;code&amp;gt;*.SYSD SHELLCMD&amp;lt;/code&amp;gt; = root shell with &amp;lt;code&amp;gt;adtec&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;none&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| Sudoers || &amp;lt;code&amp;gt;apache ALL=(ALL) NOPASSWD: ALL&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| Shared SSH host keys || Same across all units (stored on CF card)&lt;br /&gt;
|-&lt;br /&gt;
| Weak password hashes || DES crypt, trivially crackable&lt;br /&gt;
|-&lt;br /&gt;
| GPG passphrase leak || &amp;lt;code&amp;gt;iMoo3jio&amp;lt;/code&amp;gt; visible in &amp;lt;code&amp;gt;ps aux&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| Public exploit || ZSL-2020-5603 / ExploitDB 48954&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
== Other ==&lt;br /&gt;
== Front Panel ==&lt;br /&gt;
&lt;br /&gt;
* Driver: &amp;lt;code&amp;gt;frpanel.ko&amp;lt;/code&amp;gt; (depends on &amp;lt;code&amp;gt;pc93&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;pc73a&amp;lt;/code&amp;gt;)&lt;br /&gt;
* Device nodes: &amp;lt;code&amp;gt;/dev/frpanel0&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;/dev/frpanel1&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;/dev/frpanel2&amp;lt;/code&amp;gt;&lt;br /&gt;
* Display: 2 rows × 40 columns character LCD (PC93 I2C MCU)&lt;br /&gt;
* LCD API in &amp;lt;code&amp;gt;libsolib.so&amp;lt;/code&amp;gt;: &amp;lt;code&amp;gt;FpLcdKpInit()&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;LcdClear()&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;LcdWriteStr(char*, pos, len)&amp;lt;/code&amp;gt;&lt;br /&gt;
* Writing to &amp;lt;code&amp;gt;/dev/frpanel2&amp;lt;/code&amp;gt; activates the backlight&lt;br /&gt;
* &amp;lt;code&amp;gt;menud&amp;lt;/code&amp;gt; daemon owns the display — must be stopped before direct writes&lt;br /&gt;
* Proc interface: &amp;lt;code&amp;gt;/proc/driver/frpanel/&amp;lt;/code&amp;gt; (rows, cols, screen, type, version, access)&lt;br /&gt;
&lt;br /&gt;
== Images ==&lt;br /&gt;
&amp;lt;gallery&amp;gt;&lt;br /&gt;
Adtec_rd60_internals_overview.jpg&lt;br /&gt;
Adtec_rd60_internals1.jpg&lt;br /&gt;
Adtec_rd60_internals2.jpg&lt;br /&gt;
Adtec_rd60_internals3.jpg&lt;br /&gt;
Adtec_rd60_internals4.jpg&lt;br /&gt;
Adtec_rd60_internals5.jpg&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== TODO (requires dish connected) ==&lt;br /&gt;
&lt;br /&gt;
* [ ] Read &amp;lt;code&amp;gt;/proc/driver/dvblite/fe0/stats&amp;lt;/code&amp;gt; with live signal — observe all BB* fields&lt;br /&gt;
* [ ] SNMP walk full &amp;lt;code&amp;gt;.1.3.6.1.4.1.19587&amp;lt;/code&amp;gt; with live signal&lt;br /&gt;
* [ ] Investigate &amp;lt;code&amp;gt;dvblite_ioctl&amp;lt;/code&amp;gt; on &amp;lt;code&amp;gt;/dev/dvblite0&amp;lt;/code&amp;gt;&lt;br /&gt;
* [ ] Enable &amp;lt;code&amp;gt;ntc_debug&amp;lt;/code&amp;gt; module param and watch dmesg&lt;br /&gt;
* [ ] Try ISI multistream filtering via SNMP SET&lt;br /&gt;
* [ ] Investigate &amp;lt;code&amp;gt;rddma_ip&amp;lt;/code&amp;gt; with GSE/MPE satellite signal&lt;br /&gt;
* [ ] Lock on Türksat 42°E: 10762 MHz / 30 MSym/s / QPSK 3/4 (known working)&lt;br /&gt;
* [ ] Identify prfMUX transponder on Lyngsat (10960 MHz / 8.352 MSym/s / 16APSK 2/3)&lt;br /&gt;
* [ ] Explore Telnet API &amp;lt;code&amp;gt;*.NTC&amp;lt;/code&amp;gt; command namespace&lt;br /&gt;
* [ ] Investigate &amp;lt;code&amp;gt;xcpServerd&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;xcpClientd&amp;lt;/code&amp;gt; — XCP protocol capabilities&lt;br /&gt;
* [ ] Check if &amp;lt;code&amp;gt;schnv.DVC&amp;lt;/code&amp;gt; populates after a lock (empty offline)&lt;br /&gt;
* [ ] Read &amp;lt;code&amp;gt;freg.db&amp;lt;/code&amp;gt; contents — full feature registry dump&lt;br /&gt;
* [ ] Write to LCD display — cross-compile against glibc 2.3.5 and call &amp;lt;code&amp;gt;LcdWriteStr()&amp;lt;/code&amp;gt; from &amp;lt;code&amp;gt;libsolib.so&amp;lt;/code&amp;gt;&lt;br /&gt;
* [ ] Send RMCP command via &amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; to switch NTC/7044/BB output to BBFrame mode&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Adtec_RD-60&amp;diff=15905</id>
		<title>Adtec RD-60</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Adtec_RD-60&amp;diff=15905"/>
		<updated>2026-04-11T23:18:28Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Hardware */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Adtec RD-60&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Sdr&lt;br /&gt;
|Tool=No&lt;br /&gt;
|Location=the roof&lt;br /&gt;
}}&lt;br /&gt;
== Adtec RD-60 IRD ==&lt;br /&gt;
The &#039;&#039;&#039;Adtec RD-60&#039;&#039;&#039; is a 1RU integrated receiver/decoder (IRD).&lt;br /&gt;
&lt;br /&gt;
It seems the Adtec RD-60 might expose &#039;&#039;&#039;DVB-S2 baseband frames (BBFrames)&#039;&#039;&#039; below the TS layer, this might be very useful as part of the &#039;&#039;&#039;dontlookup&#039;&#039;&#039; satellite interception paper replication project. See [[dontlookup]]&lt;br /&gt;
&lt;br /&gt;
= Reverse Engineering Notes =&lt;br /&gt;
== Hardware ==&lt;br /&gt;
[[File:Adtec_rd60_internals_overview.jpg|thumb|center]]&lt;br /&gt;
=== Main Unit ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Model:&#039;&#039;&#039; Adtec RD-60 MultiCODEC Receiver/Decoder (IRD)&lt;br /&gt;
* &#039;&#039;&#039;Hostname:&#039;&#039;&#039; &amp;lt;code&amp;gt;GOFFERT&amp;lt;/code&amp;gt;&lt;br /&gt;
* &#039;&#039;&#039;IP:&#039;&#039;&#039; 10.1.2.172 (DHCP)&lt;br /&gt;
* &#039;&#039;&#039;CPU:&#039;&#039;&#039; IBM PowerPC PPC405GPr @ 399 MHz (GemPPC Iolite platform)&lt;br /&gt;
* &#039;&#039;&#039;PLB bus:&#039;&#039;&#039; 133 MHz | &#039;&#039;&#039;PCI bus:&#039;&#039;&#039; 33 MHz&lt;br /&gt;
* &#039;&#039;&#039;Kernel:&#039;&#039;&#039; Linux 2.6.14-gemppc-iolite&lt;br /&gt;
* &#039;&#039;&#039;Front panel:&#039;&#039;&#039; Character LCD/VFD — text only, ~40 chars wide.&lt;br /&gt;
* &#039;&#039;&#039;Storage:&#039;&#039;&#039; CompactFlash card (8 partitions, 4 used)&lt;br /&gt;
&lt;br /&gt;
=== Demodulator Board ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Slot 2:&#039;&#039;&#039; &amp;lt;code&amp;gt;BA14&amp;lt;/code&amp;gt; — PC87 ver 1.4 (main decoder board)&lt;br /&gt;
* &#039;&#039;&#039;Slot 99:&#039;&#039;&#039; &amp;lt;code&amp;gt;7044BB&amp;lt;/code&amp;gt; — &#039;&#039;&#039;Newtec NTC/7044/BB DVB Demodulator&#039;&#039;&#039;&lt;br /&gt;
** PRM firmware: &#039;&#039;&#039;v2.34&#039;&#039;&#039; (20/03/13)&lt;br /&gt;
** FPGA bitfile: v1.01 (09/01/12)&lt;br /&gt;
** Hardware: v3.0&lt;br /&gt;
** Serial: &#039;&#039;&#039;30091216&#039;&#039;&#039;&lt;br /&gt;
** Software ID: NTC/6381 DVB Demodulator&lt;br /&gt;
** Product ID: NTC/7044/BB.BCDCBCAA.x.B&lt;br /&gt;
** License: &#039;&#039;&#039;165&#039;&#039;&#039; (includes Baseband Frames — see below)&lt;br /&gt;
** Communicates via I2C (&amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; kernel module)&lt;br /&gt;
** &amp;lt;code&amp;gt;BB&amp;lt;/code&amp;gt; suffix = BaseBand licensed and capable&lt;br /&gt;
&lt;br /&gt;
According to the official Newtec datasheet, the NTC/7044/BB supports explicit &#039;&#039;&#039;output mode switching&#039;&#039;&#039; between:&lt;br /&gt;
* Single transport stream&lt;br /&gt;
* Generic stream  &lt;br /&gt;
* &#039;&#039;&#039;Base Band Frames&#039;&#039;&#039; (BBFrames)&lt;br /&gt;
&lt;br /&gt;
The control interface is &#039;&#039;&#039;RMCPv2 protocol&#039;&#039;&#039; over async serial TTL or I2C — implemented by the &amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; kernel module. &lt;br /&gt;
This is the mechanism to switch output to BBFrame mode.&lt;br /&gt;
&lt;br /&gt;
See also this PDF: https://www.melcom.co.uk/uploads/newdvbdemodntc7044_01.pdf&lt;br /&gt;
&lt;br /&gt;
[[File:20250429 153804.jpg|thumb|center]]&lt;br /&gt;
&lt;br /&gt;
=== Inputs/Outputs ===&lt;br /&gt;
&lt;br /&gt;
* 2x RF/satellite inputs (RF1, RF2) — 950–2150 MHz, 256 kSym/s – 45 MSym/s&lt;br /&gt;
* DVB-ASI input/output (currently set to RECEIVE mode)&lt;br /&gt;
* 2x SDI outputs (SD scaling)&lt;br /&gt;
* CVBS output&lt;br /&gt;
* 3x Ethernet (eth0, eth1, eth2)&lt;br /&gt;
* Serial: ttyS0 @ 115200, ttyBA&lt;br /&gt;
* L-Band Modulator option slot — &#039;&#039;&#039;not populated&#039;&#039;&#039; (&amp;lt;code&amp;gt;/dev/ntmod&amp;lt;/code&amp;gt; = &amp;quot;No such device&amp;quot;)&lt;br /&gt;
&lt;br /&gt;
== Firmware / Software ==&lt;br /&gt;
&lt;br /&gt;
=== CF Card Partition Layout ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Partition !! Size !! Contents&lt;br /&gt;
|-&lt;br /&gt;
| p5 || 137M || GNU sysroot — gcc-3.4.4 / glibc-2.3.5, PPC cross toolchain&lt;br /&gt;
|-&lt;br /&gt;
| p6 || 1.1M || &#039;&#039;&#039;Firmware&#039;&#039;&#039; — adtec/RD-60/1.12.08 and 1.12.12&lt;br /&gt;
|-&lt;br /&gt;
| p7 || 3.4M || Minimal initrd (busybox, bash, minimal libs)&lt;br /&gt;
|-&lt;br /&gt;
| p8 || 24M || Runtime/data (logs, DVC profiles, media)&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
* Current firmware: &#039;&#039;&#039;1.12.12&#039;&#039;&#039; (symlinked at &amp;lt;code&amp;gt;/opt/pkg/oem&amp;lt;/code&amp;gt;)&lt;br /&gt;
* Previous firmware: &#039;&#039;&#039;1.12.08&#039;&#039;&#039; (symlinked at &amp;lt;code&amp;gt;/opt/pkg/oem_prev&amp;lt;/code&amp;gt;)&lt;br /&gt;
&lt;br /&gt;
=== p8 Runtime Directories ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Dir !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dvc/&amp;lt;/code&amp;gt; || Tuner device profile files (.DVC)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;keys/&amp;lt;/code&amp;gt; || Empty — key material generated at runtime&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;log/&amp;lt;/code&amp;gt; || Rotated system logs&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;media/&amp;lt;/code&amp;gt; || Media files&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;.meta/&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;freg.db&amp;lt;/code&amp;gt; — feature registry SQLite DB&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;mvl/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;osd/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;rdy/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;schmi/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;shd/&amp;lt;/code&amp;gt; || Runtime state dirs (mostly empty)&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
=== Key Binaries (&amp;lt;code&amp;gt;/usr/local/sbin/&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Binary !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;sysd&amp;lt;/code&amp;gt; || Main system daemon — tuner/demodulator config via XML&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;cmdld&amp;lt;/code&amp;gt; || Telnet API daemon (3 processes)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;menud&amp;lt;/code&amp;gt; || Front panel menu daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;fregd&amp;lt;/code&amp;gt; || Feature/license registry daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dtrans&amp;lt;/code&amp;gt; || TS transport handler (&amp;lt;code&amp;gt;--slot=2 --id=BA14&amp;lt;/code&amp;gt;)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dcmd&amp;lt;/code&amp;gt; || Device command interface for BA14&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;myles&amp;lt;/code&amp;gt; || Web API backend (SQLite)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;requestHandler&amp;lt;/code&amp;gt; || Apache CGI/FastCGI handler&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;snmpd&amp;lt;/code&amp;gt; || SNMP daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;snmpl&amp;lt;/code&amp;gt; || Internal SNMP poller — continuously queries Newtec MIB&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;vtosfifo&amp;lt;/code&amp;gt; || TS-to-FIFO bridge to &amp;lt;code&amp;gt;/dev/vtosfifo4&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;xcpServerd&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;xcpClientd&amp;lt;/code&amp;gt; || XCP protocol daemons (3 each)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pard&amp;lt;/code&amp;gt; || Parallel interface daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pnpd&amp;lt;/code&amp;gt; || PnP device daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;mirror&amp;lt;/code&amp;gt; || Mirror/redundancy daemon (runs as adtec)&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
=== Kernel Modules ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Module !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;newtec&amp;lt;/code&amp;gt; || Newtec 7044 demodulator driver — core BBFrame driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;newtec_dummy&amp;lt;/code&amp;gt; || Stub for absent optional demodulator hardware&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dvblite&amp;lt;/code&amp;gt; || DVB lite core (depends on newtec) — exposes &amp;lt;code&amp;gt;dvblite_ioctl&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; || I2C transport for Newtec RMCP protocol&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;vtosfifo&amp;lt;/code&amp;gt; || TS FIFO device driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;rddma_ip&amp;lt;/code&amp;gt; || &#039;&#039;&#039;IP-over-satellite receive DMA engine (FPGA-backed)&#039;&#039;&#039;&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;ip_ingress_main&amp;lt;/code&amp;gt; || IP ingress pipeline (GSE/MPE over satellite)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;frpanel&amp;lt;/code&amp;gt; || Front panel driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;fanctrl&amp;lt;/code&amp;gt; / &amp;lt;code&amp;gt;pc96&amp;lt;/code&amp;gt; || Fan controller&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;proxyimg&amp;lt;/code&amp;gt; || Image proxy&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;epb&amp;lt;/code&amp;gt; || EPB bus driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pnp&amp;lt;/code&amp;gt; || PnP device manager&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;fec&amp;lt;/code&amp;gt; / &amp;lt;code&amp;gt;ethfrm&amp;lt;/code&amp;gt; || Ethernet/FEC&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pc73a&amp;lt;/code&amp;gt; / &amp;lt;code&amp;gt;pc93&amp;lt;/code&amp;gt; || Front panel dependencies&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
Failed to load (hardware absent): &amp;lt;code&amp;gt;teamcast&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;nim&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnb_pwr&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;pc72&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== Device Nodes ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Device !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/dvblite0-2&amp;lt;/code&amp;gt; || DVB lite interfaces&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/vtosfifo0-5&amp;lt;/code&amp;gt; || TS FIFO char devices (major 240)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner0-3&amp;lt;/code&amp;gt; || Tuner interfaces (major 123)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner_ledgr0-3&amp;lt;/code&amp;gt; || Tuner lock (green) LEDs&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner_ledrd0-3&amp;lt;/code&amp;gt; || Tuner read LEDs&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner_rst0-3&amp;lt;/code&amp;gt; || Tuner resets&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/ntmod&amp;lt;/code&amp;gt; || Newtec modulator — &#039;&#039;&#039;not populated&#039;&#039;&#039;&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
== /proc Driver Interfaces ==&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/dvblite/fe0/info&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
NAME=NTC/7044/BB DVB Demodulator&lt;br /&gt;
FREQ_MIN=950000 / FREQ_MAX=2150000&lt;br /&gt;
SYMRATE_MIN=256000 / SYMRATE_MAX=45000000&lt;br /&gt;
S_QPSK=1/2, 2/3, 3/4, 5/6, 6/7, 7/8, AUTO&lt;br /&gt;
S_8PSK=2/3, 5/6, 8/9, AUTO&lt;br /&gt;
S2_QPSK=1/4, 1/3, 1/2, 2/5, 2/3, 3/5, 3/4, 4/5, 5/6, 8/9, 9/10&lt;br /&gt;
S2_8PSK=2/3, 3/5, 3/4, 5/6, 8/9, 9/10&lt;br /&gt;
S2_16QAM=3/4, 7/8, AUTO&lt;br /&gt;
S2_16APSK=2/3, 3/4, 4/5, 5/6, 8/9, 9/10&lt;br /&gt;
S2_32APSK=3/4, 4/5, 5/6, 8/9, 9/10&lt;br /&gt;
SOFTWARE_LICENSE=165&lt;br /&gt;
SOFTWARE_VERSION=v2.34   20/03/13&lt;br /&gt;
FPGA_BITFILE_VERSION=v1.01 09/01/12&lt;br /&gt;
HARDWARE_VERSION=v3.0&lt;br /&gt;
SERIAL_NUM=30091216&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/dvblite/fe0/stats&amp;lt;/code&amp;gt; (no signal) ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
LOCK=UNLOCKED&lt;br /&gt;
RECV_LEVEL=-70.00&lt;br /&gt;
INTRATE=41470588&lt;br /&gt;
MOD_FEC=QPSK_3/4&lt;br /&gt;
BB_CRC_ERRORS=N/A        &amp;lt;- populates with live signal&lt;br /&gt;
DUMMY_PL_RATIO=N/A       &amp;lt;- populates with live signal&lt;br /&gt;
ISI_FILTER_BYTE=N/A      &amp;lt;- populates with live signal&lt;br /&gt;
BASEBAND_LEN=N/A         &amp;lt;- populates with live signal&lt;br /&gt;
FRAMES_SEC=N/A           &amp;lt;- populates with live signal&lt;br /&gt;
ALARMS=0000110001011000&lt;br /&gt;
STATE=READY&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
fe1 has same structure but &amp;lt;code&amp;gt;NAME=NTC7044&amp;lt;/code&amp;gt; (no BB suffix, no license).&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/vtosfifo/chn&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
Channel 0 processed 16620 TS frames during session. Channel 4 processed 1619.&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/rddma/&amp;lt;/code&amp;gt; — FPGA DMA engine ===&lt;br /&gt;
&lt;br /&gt;
* Channel 3 active: Control=&amp;lt;code&amp;gt;49C003C0&amp;lt;/code&amp;gt;, Src=&amp;lt;code&amp;gt;03F01C00&amp;lt;/code&amp;gt; (FPGA mapped)&lt;br /&gt;
* 3.98M timer IRQs, 3.98M &amp;quot;No Data&amp;quot; — idle, no satellite IP stream&lt;br /&gt;
* PID &amp;lt;code&amp;gt;0x01E1&amp;lt;/code&amp;gt; (481) being tracked&lt;br /&gt;
&lt;br /&gt;
== Kernel Module Internals (&amp;lt;code&amp;gt;strings&amp;lt;/code&amp;gt; analysis) ==&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;newtec.ko&amp;lt;/code&amp;gt; — BBFrame symbols ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
BB_CRC_ERRORS / BB_CRC_ERRORS_CURRENT / BB_CRC_ERRORS_NEXT&lt;br /&gt;
BB_DATA_FIELD_LEN / BB_DATA_FIELD_LEN_CURRENT / BB_DATA_FIELD_LEN_NEXT&lt;br /&gt;
BB_FRAMES&lt;br /&gt;
BB_GAIN / BB_GAIN_CURRENT / BB_GAIN_NEXT&lt;br /&gt;
BASEBAND_LEN&lt;br /&gt;
ISI / ISI_CTRL / ISI_CTRL_STRUCT / ISI_CTRL_STRUCT_FIELDS&lt;br /&gt;
ISI_FILTER_BYTE / ISI_MASK&lt;br /&gt;
SAT_BB_GAIN&lt;br /&gt;
ntc_debug  (module param, uint)&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;BB_DATA_FIELD_LEN&amp;lt;/code&amp;gt; and &amp;lt;code&amp;gt;BB_FRAMES&amp;lt;/code&amp;gt; suggest the driver tracks individual baseband frames, not just statistics. Very promising for BBFrame capture.&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;dvblite.ko&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
Contains &amp;lt;code&amp;gt;dvblite_ioctl&amp;lt;/code&amp;gt; — a kernel ioctl interface on &amp;lt;code&amp;gt;/dev/dvblite0&amp;lt;/code&amp;gt;. Commands unknown — to be investigated with a live signal.&lt;br /&gt;
&lt;br /&gt;
== Network Services ==&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Service !! Port !! Notes&lt;br /&gt;
|-&lt;br /&gt;
| SSH || 22 || Legacy KEX only (diffie-hellman-group1-sha1)&lt;br /&gt;
|-&lt;br /&gt;
| Telnet API || 23 || &amp;lt;code&amp;gt;cmdld&amp;lt;/code&amp;gt; via xinetd&lt;br /&gt;
|-&lt;br /&gt;
| FTP || 21 || pure-ftpd&lt;br /&gt;
|-&lt;br /&gt;
| HTTP || 80 || Apache + myles + requestHandler&lt;br /&gt;
|-&lt;br /&gt;
| SNMP || 161 || Community &amp;lt;code&amp;gt;public&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| mDNS || 5353 || &amp;lt;code&amp;gt;GOFFERT.local&amp;lt;/code&amp;gt;&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
&amp;lt;syntaxhighlight lang=&amp;quot;bash&amp;quot;&amp;gt;&lt;br /&gt;
# SSH/SCP&lt;br /&gt;
ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -oHostKeyAlgorithms=+ssh-rsa root@&amp;lt;ip&amp;gt;&lt;br /&gt;
scp -oKexAlgorithms=+diffie-hellman-group1-sha1 -oHostKeyAlgorithms=+ssh-rsa root@&amp;lt;ip&amp;gt;:/path /local&lt;br /&gt;
&amp;lt;/syntaxhighlight&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Credentials (Default/Hardcoded — ZSL-2020-5603 / ExploitDB 48954) ==&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! User !! Password !! Notes&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;root&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;1root!&amp;lt;/code&amp;gt; || Full root SSH&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;admin&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;1admin!&amp;lt;/code&amp;gt; || Also root via sudoers&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;adtec&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;none&amp;lt;/code&amp;gt; || Telnet API / web UI&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;adtecftp&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;adtecftp2231&amp;lt;/code&amp;gt; || FTP only&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
* Password hashes: DES crypt — crackable in seconds with &amp;lt;code&amp;gt;john&amp;lt;/code&amp;gt;&lt;br /&gt;
* &amp;lt;code&amp;gt;apache ALL=(ALL) NOPASSWD: ALL&amp;lt;/code&amp;gt; in sudoers&lt;br /&gt;
* Diagnostic package passphrase: &#039;&#039;&#039;&amp;lt;code&amp;gt;iMoo3jio&amp;lt;/code&amp;gt;&#039;&#039;&#039; (hardcoded, leaks in &amp;lt;code&amp;gt;ps aux&amp;lt;/code&amp;gt;)&lt;br /&gt;
&lt;br /&gt;
&amp;lt;syntaxhighlight lang=&amp;quot;bash&amp;quot;&amp;gt;&lt;br /&gt;
gpg --passphrase &amp;quot;iMoo3jio&amp;quot; --batch --ignore-mdc-error --decrypt RD-60_*.tar.gpg | tar xf -&lt;br /&gt;
&amp;lt;/syntaxhighlight&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== APIs ==&lt;br /&gt;
&lt;br /&gt;
=== Telnet API ===&lt;br /&gt;
&lt;br /&gt;
Connect: &amp;lt;code&amp;gt;telnet &amp;lt;ip&amp;gt;&amp;lt;/code&amp;gt;, login &amp;lt;code&amp;gt;adtec&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;none&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
*.SYSD SHELLCMD &amp;lt;cmd&amp;gt;          # arbitrary root shell execution!&lt;br /&gt;
*.SNMP ADTEC-NT-DEMOD-MIB::satFeedType.0 = dvbs2   # configure tuner&lt;br /&gt;
*.SNMP ADTEC-NT-DEMOD-MIB::satFeedDownlink.0 = 10960000&lt;br /&gt;
*.SNMP .1.3.6.1.4.1.19587.6000.3.999.0 i 0         # commit/apply&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== SNMP — Newtec Demodulator MIB ===&lt;br /&gt;
&lt;br /&gt;
OID base: &amp;lt;code&amp;gt;.1.3.6.1.4.1.19587&amp;lt;/code&amp;gt;, MIB: &amp;lt;code&amp;gt;ADTEC-NT-DEMOD-MIB&amp;lt;/code&amp;gt;, community: &amp;lt;code&amp;gt;public&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;syntaxhighlight lang=&amp;quot;bash&amp;quot;&amp;gt;&lt;br /&gt;
snmpwalk -v2c -c public &amp;lt;ip&amp;gt; .1.3.6.1.4.1.19587&lt;br /&gt;
&amp;lt;/syntaxhighlight&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Key OIDs: &amp;lt;code&amp;gt;tunerLock&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;recvLevel&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;esNo&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;linkMargin&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;modFec&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;rolloff&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;pilot&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;fecFrameType&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;unCorrFs&amp;lt;/code&amp;gt;, &#039;&#039;&#039;&amp;lt;code&amp;gt;bbCrcerrors&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;basebandLen&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;dummyPlRatio&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;isiFilterByte&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;framesSec&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &amp;lt;code&amp;gt;satFeedType&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;satFeedDownlink&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;satFeedSymRate&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;satFeedModulation&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnbEnable&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnbPolarity&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnbTone&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== DVC Profile Format ===&lt;br /&gt;
&lt;br /&gt;
SNMP SET commands as tuner presets, applied via Telnet API or web UI.&lt;br /&gt;
&lt;br /&gt;
== Saved Tuner Profiles ==&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;prfturktest.DVC&amp;lt;/code&amp;gt; (2018-04-28) ===&lt;br /&gt;
&lt;br /&gt;
* DVB-S, &#039;&#039;&#039;10762 MHz&#039;&#039;&#039;, KU 9750 LO → &#039;&#039;&#039;1012 MHz&#039;&#039;&#039; L-band&lt;br /&gt;
* &#039;&#039;&#039;30 MSym/s&#039;&#039;&#039;, QPSK 3/4, roll-off 35%&lt;br /&gt;
* Was &#039;&#039;&#039;LOCKED&#039;&#039;&#039; at -32 dBm when saved&lt;br /&gt;
* &amp;lt;code&amp;gt;bbCrcerrors = 1&amp;lt;/code&amp;gt; — &#039;&#039;&#039;BBFrame counter was active and non-zero!&#039;&#039;&#039;&lt;br /&gt;
* Likely &#039;&#039;&#039;Türksat 42°E&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;prfMUX.DVC&amp;lt;/code&amp;gt; (2018-04-28) ===&lt;br /&gt;
&lt;br /&gt;
* DVB-S2, &#039;&#039;&#039;10960 MHz&#039;&#039;&#039;, KU 9750 LO → &#039;&#039;&#039;1210 MHz&#039;&#039;&#039; L-band&lt;br /&gt;
* &#039;&#039;&#039;8.352 MSym/s&#039;&#039;&#039;, 16APSK 2/3, roll-off 20%, pilot ON, normal frames, CCM&lt;br /&gt;
* Was unlocked when saved&lt;br /&gt;
&lt;br /&gt;
== Licensed Features (Key ID 165) ==&lt;br /&gt;
&lt;br /&gt;
DVB-DSNG + DVB-S2 + QPSK + 8-PSK + 16-QAM/16APSK + 32APSK + Symbol Rate &amp;lt;= 33 MBaud + ACM + &#039;&#039;&#039;Single TS/GS or Multiple Streams&#039;&#039;&#039; + &#039;&#039;&#039;(Baseband Frames)&#039;&#039;&#039; + no ACM client + no AES&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;BBFrame access is explicitly licensed and enabled.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Encryption / CA ==&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;BISS-1 key&#039;&#039;&#039; in &amp;lt;code&amp;gt;dtrans.xml&amp;lt;/code&amp;gt;: &amp;lt;code&amp;gt;69A969BBECA0&amp;lt;/code&amp;gt;&lt;br /&gt;
* &#039;&#039;&#039;Viaccess&#039;&#039;&#039; (CA ID 0x0005) feed seen in logs — no card present, could not decrypt&lt;br /&gt;
&lt;br /&gt;
== IP-over-Satellite ==&lt;br /&gt;
&lt;br /&gt;
The unit has a full satellite IP receive stack beyond TS decoding:&lt;br /&gt;
&lt;br /&gt;
* &amp;lt;code&amp;gt;rddma_ip&amp;lt;/code&amp;gt; — FPGA-backed DMA for IP-from-satellite&lt;br /&gt;
* &amp;lt;code&amp;gt;ip_ingress_main&amp;lt;/code&amp;gt; — GSE/MPE ingress pipeline&lt;br /&gt;
* FPGA Channel 3 active at &amp;lt;code&amp;gt;03F01C00&amp;lt;/code&amp;gt;&lt;br /&gt;
* Currently idle — no GSE/MPE stream configured&lt;br /&gt;
&lt;br /&gt;
== Security Summary ==&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Issue !! Detail&lt;br /&gt;
|-&lt;br /&gt;
| Default root creds || &amp;lt;code&amp;gt;root&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;1root!&amp;lt;/code&amp;gt; over SSH&lt;br /&gt;
|-&lt;br /&gt;
| Telnet RCE || &amp;lt;code&amp;gt;*.SYSD SHELLCMD&amp;lt;/code&amp;gt; = root shell with &amp;lt;code&amp;gt;adtec&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;none&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| Sudoers || &amp;lt;code&amp;gt;apache ALL=(ALL) NOPASSWD: ALL&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| Shared SSH host keys || Same across all units (stored on CF card)&lt;br /&gt;
|-&lt;br /&gt;
| Weak password hashes || DES crypt, trivially crackable&lt;br /&gt;
|-&lt;br /&gt;
| GPG passphrase leak || &amp;lt;code&amp;gt;iMoo3jio&amp;lt;/code&amp;gt; visible in &amp;lt;code&amp;gt;ps aux&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| Public exploit || ZSL-2020-5603 / ExploitDB 48954&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
== Other ==&lt;br /&gt;
== Front Panel ==&lt;br /&gt;
&lt;br /&gt;
* Driver: &amp;lt;code&amp;gt;frpanel.ko&amp;lt;/code&amp;gt; (depends on &amp;lt;code&amp;gt;pc93&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;pc73a&amp;lt;/code&amp;gt;)&lt;br /&gt;
* Device nodes: &amp;lt;code&amp;gt;/dev/frpanel0&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;/dev/frpanel1&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;/dev/frpanel2&amp;lt;/code&amp;gt;&lt;br /&gt;
* Display: 2 rows × 40 columns character LCD (PC93 I2C MCU)&lt;br /&gt;
* LCD API in &amp;lt;code&amp;gt;libsolib.so&amp;lt;/code&amp;gt;: &amp;lt;code&amp;gt;FpLcdKpInit()&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;LcdClear()&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;LcdWriteStr(char*, pos, len)&amp;lt;/code&amp;gt;&lt;br /&gt;
* Writing to &amp;lt;code&amp;gt;/dev/frpanel2&amp;lt;/code&amp;gt; activates the backlight&lt;br /&gt;
* &amp;lt;code&amp;gt;menud&amp;lt;/code&amp;gt; daemon owns the display — must be stopped before direct writes&lt;br /&gt;
* Proc interface: &amp;lt;code&amp;gt;/proc/driver/frpanel/&amp;lt;/code&amp;gt; (rows, cols, screen, type, version, access)&lt;br /&gt;
&lt;br /&gt;
== Images ==&lt;br /&gt;
&amp;lt;gallery&amp;gt;&lt;br /&gt;
Adtec_rd60_internals1.jpg&lt;br /&gt;
Adtec_rd60_internals2.jpg&lt;br /&gt;
Adtec_rd60_internals3.jpg&lt;br /&gt;
Adtec_rd60_internals4.jpg&lt;br /&gt;
Adtec_rd60_internals5.jpg&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== TODO (requires dish connected) ==&lt;br /&gt;
&lt;br /&gt;
* [ ] Read &amp;lt;code&amp;gt;/proc/driver/dvblite/fe0/stats&amp;lt;/code&amp;gt; with live signal — observe all BB* fields&lt;br /&gt;
* [ ] SNMP walk full &amp;lt;code&amp;gt;.1.3.6.1.4.1.19587&amp;lt;/code&amp;gt; with live signal&lt;br /&gt;
* [ ] Investigate &amp;lt;code&amp;gt;dvblite_ioctl&amp;lt;/code&amp;gt; on &amp;lt;code&amp;gt;/dev/dvblite0&amp;lt;/code&amp;gt;&lt;br /&gt;
* [ ] Enable &amp;lt;code&amp;gt;ntc_debug&amp;lt;/code&amp;gt; module param and watch dmesg&lt;br /&gt;
* [ ] Try ISI multistream filtering via SNMP SET&lt;br /&gt;
* [ ] Investigate &amp;lt;code&amp;gt;rddma_ip&amp;lt;/code&amp;gt; with GSE/MPE satellite signal&lt;br /&gt;
* [ ] Lock on Türksat 42°E: 10762 MHz / 30 MSym/s / QPSK 3/4 (known working)&lt;br /&gt;
* [ ] Identify prfMUX transponder on Lyngsat (10960 MHz / 8.352 MSym/s / 16APSK 2/3)&lt;br /&gt;
* [ ] Explore Telnet API &amp;lt;code&amp;gt;*.NTC&amp;lt;/code&amp;gt; command namespace&lt;br /&gt;
* [ ] Investigate &amp;lt;code&amp;gt;xcpServerd&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;xcpClientd&amp;lt;/code&amp;gt; — XCP protocol capabilities&lt;br /&gt;
* [ ] Check if &amp;lt;code&amp;gt;schnv.DVC&amp;lt;/code&amp;gt; populates after a lock (empty offline)&lt;br /&gt;
* [ ] Read &amp;lt;code&amp;gt;freg.db&amp;lt;/code&amp;gt; contents — full feature registry dump&lt;br /&gt;
* [ ] Write to LCD display — cross-compile against glibc 2.3.5 and call &amp;lt;code&amp;gt;LcdWriteStr()&amp;lt;/code&amp;gt; from &amp;lt;code&amp;gt;libsolib.so&amp;lt;/code&amp;gt;&lt;br /&gt;
* [ ] Send RMCP command via &amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; to switch NTC/7044/BB output to BBFrame mode&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:20250429_153745.jpg&amp;diff=15904</id>
		<title>File:20250429 153745.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:20250429_153745.jpg&amp;diff=15904"/>
		<updated>2026-04-11T23:18:15Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153745.jpg to File:Adtec rd60 internals overview.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;#REDIRECT [[File:Adtec rd60 internals overview.jpg]]&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals_overview.jpg&amp;diff=15903</id>
		<title>File:Adtec rd60 internals overview.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals_overview.jpg&amp;diff=15903"/>
		<updated>2026-04-11T23:18:15Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153745.jpg to File:Adtec rd60 internals overview.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Adtec_RD-60&amp;diff=15902</id>
		<title>Adtec RD-60</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Adtec_RD-60&amp;diff=15902"/>
		<updated>2026-04-11T23:17:46Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Images */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Adtec RD-60&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Sdr&lt;br /&gt;
|Tool=No&lt;br /&gt;
|Location=the roof&lt;br /&gt;
}}&lt;br /&gt;
== Adtec RD-60 IRD ==&lt;br /&gt;
The &#039;&#039;&#039;Adtec RD-60&#039;&#039;&#039; is a 1RU integrated receiver/decoder (IRD).&lt;br /&gt;
&lt;br /&gt;
It seems the Adtec RD-60 might expose &#039;&#039;&#039;DVB-S2 baseband frames (BBFrames)&#039;&#039;&#039; below the TS layer, this might be very useful as part of the &#039;&#039;&#039;dontlookup&#039;&#039;&#039; satellite interception paper replication project. See [[dontlookup]]&lt;br /&gt;
&lt;br /&gt;
= Reverse Engineering Notes =&lt;br /&gt;
== Hardware ==&lt;br /&gt;
[[File:20250429 153745.jpg|thumb|center]]&lt;br /&gt;
=== Main Unit ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Model:&#039;&#039;&#039; Adtec RD-60 MultiCODEC Receiver/Decoder (IRD)&lt;br /&gt;
* &#039;&#039;&#039;Hostname:&#039;&#039;&#039; &amp;lt;code&amp;gt;GOFFERT&amp;lt;/code&amp;gt;&lt;br /&gt;
* &#039;&#039;&#039;IP:&#039;&#039;&#039; 10.1.2.172 (DHCP)&lt;br /&gt;
* &#039;&#039;&#039;CPU:&#039;&#039;&#039; IBM PowerPC PPC405GPr @ 399 MHz (GemPPC Iolite platform)&lt;br /&gt;
* &#039;&#039;&#039;PLB bus:&#039;&#039;&#039; 133 MHz | &#039;&#039;&#039;PCI bus:&#039;&#039;&#039; 33 MHz&lt;br /&gt;
* &#039;&#039;&#039;Kernel:&#039;&#039;&#039; Linux 2.6.14-gemppc-iolite&lt;br /&gt;
* &#039;&#039;&#039;Front panel:&#039;&#039;&#039; Character LCD/VFD — text only, ~40 chars wide.&lt;br /&gt;
* &#039;&#039;&#039;Storage:&#039;&#039;&#039; CompactFlash card (8 partitions, 4 used)&lt;br /&gt;
&lt;br /&gt;
=== Demodulator Board ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Slot 2:&#039;&#039;&#039; &amp;lt;code&amp;gt;BA14&amp;lt;/code&amp;gt; — PC87 ver 1.4 (main decoder board)&lt;br /&gt;
* &#039;&#039;&#039;Slot 99:&#039;&#039;&#039; &amp;lt;code&amp;gt;7044BB&amp;lt;/code&amp;gt; — &#039;&#039;&#039;Newtec NTC/7044/BB DVB Demodulator&#039;&#039;&#039;&lt;br /&gt;
** PRM firmware: &#039;&#039;&#039;v2.34&#039;&#039;&#039; (20/03/13)&lt;br /&gt;
** FPGA bitfile: v1.01 (09/01/12)&lt;br /&gt;
** Hardware: v3.0&lt;br /&gt;
** Serial: &#039;&#039;&#039;30091216&#039;&#039;&#039;&lt;br /&gt;
** Software ID: NTC/6381 DVB Demodulator&lt;br /&gt;
** Product ID: NTC/7044/BB.BCDCBCAA.x.B&lt;br /&gt;
** License: &#039;&#039;&#039;165&#039;&#039;&#039; (includes Baseband Frames — see below)&lt;br /&gt;
** Communicates via I2C (&amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; kernel module)&lt;br /&gt;
** &amp;lt;code&amp;gt;BB&amp;lt;/code&amp;gt; suffix = BaseBand licensed and capable&lt;br /&gt;
&lt;br /&gt;
According to the official Newtec datasheet, the NTC/7044/BB supports explicit &#039;&#039;&#039;output mode switching&#039;&#039;&#039; between:&lt;br /&gt;
* Single transport stream&lt;br /&gt;
* Generic stream  &lt;br /&gt;
* &#039;&#039;&#039;Base Band Frames&#039;&#039;&#039; (BBFrames)&lt;br /&gt;
&lt;br /&gt;
The control interface is &#039;&#039;&#039;RMCPv2 protocol&#039;&#039;&#039; over async serial TTL or I2C — implemented by the &amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; kernel module. &lt;br /&gt;
This is the mechanism to switch output to BBFrame mode.&lt;br /&gt;
&lt;br /&gt;
See also this PDF: https://www.melcom.co.uk/uploads/newdvbdemodntc7044_01.pdf&lt;br /&gt;
&lt;br /&gt;
[[File:20250429 153804.jpg|thumb|center]]&lt;br /&gt;
&lt;br /&gt;
=== Inputs/Outputs ===&lt;br /&gt;
&lt;br /&gt;
* 2x RF/satellite inputs (RF1, RF2) — 950–2150 MHz, 256 kSym/s – 45 MSym/s&lt;br /&gt;
* DVB-ASI input/output (currently set to RECEIVE mode)&lt;br /&gt;
* 2x SDI outputs (SD scaling)&lt;br /&gt;
* CVBS output&lt;br /&gt;
* 3x Ethernet (eth0, eth1, eth2)&lt;br /&gt;
* Serial: ttyS0 @ 115200, ttyBA&lt;br /&gt;
* L-Band Modulator option slot — &#039;&#039;&#039;not populated&#039;&#039;&#039; (&amp;lt;code&amp;gt;/dev/ntmod&amp;lt;/code&amp;gt; = &amp;quot;No such device&amp;quot;)&lt;br /&gt;
&lt;br /&gt;
== Firmware / Software ==&lt;br /&gt;
&lt;br /&gt;
=== CF Card Partition Layout ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Partition !! Size !! Contents&lt;br /&gt;
|-&lt;br /&gt;
| p5 || 137M || GNU sysroot — gcc-3.4.4 / glibc-2.3.5, PPC cross toolchain&lt;br /&gt;
|-&lt;br /&gt;
| p6 || 1.1M || &#039;&#039;&#039;Firmware&#039;&#039;&#039; — adtec/RD-60/1.12.08 and 1.12.12&lt;br /&gt;
|-&lt;br /&gt;
| p7 || 3.4M || Minimal initrd (busybox, bash, minimal libs)&lt;br /&gt;
|-&lt;br /&gt;
| p8 || 24M || Runtime/data (logs, DVC profiles, media)&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
* Current firmware: &#039;&#039;&#039;1.12.12&#039;&#039;&#039; (symlinked at &amp;lt;code&amp;gt;/opt/pkg/oem&amp;lt;/code&amp;gt;)&lt;br /&gt;
* Previous firmware: &#039;&#039;&#039;1.12.08&#039;&#039;&#039; (symlinked at &amp;lt;code&amp;gt;/opt/pkg/oem_prev&amp;lt;/code&amp;gt;)&lt;br /&gt;
&lt;br /&gt;
=== p8 Runtime Directories ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Dir !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dvc/&amp;lt;/code&amp;gt; || Tuner device profile files (.DVC)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;keys/&amp;lt;/code&amp;gt; || Empty — key material generated at runtime&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;log/&amp;lt;/code&amp;gt; || Rotated system logs&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;media/&amp;lt;/code&amp;gt; || Media files&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;.meta/&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;freg.db&amp;lt;/code&amp;gt; — feature registry SQLite DB&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;mvl/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;osd/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;rdy/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;schmi/&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;shd/&amp;lt;/code&amp;gt; || Runtime state dirs (mostly empty)&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
=== Key Binaries (&amp;lt;code&amp;gt;/usr/local/sbin/&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Binary !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;sysd&amp;lt;/code&amp;gt; || Main system daemon — tuner/demodulator config via XML&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;cmdld&amp;lt;/code&amp;gt; || Telnet API daemon (3 processes)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;menud&amp;lt;/code&amp;gt; || Front panel menu daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;fregd&amp;lt;/code&amp;gt; || Feature/license registry daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dtrans&amp;lt;/code&amp;gt; || TS transport handler (&amp;lt;code&amp;gt;--slot=2 --id=BA14&amp;lt;/code&amp;gt;)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dcmd&amp;lt;/code&amp;gt; || Device command interface for BA14&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;myles&amp;lt;/code&amp;gt; || Web API backend (SQLite)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;requestHandler&amp;lt;/code&amp;gt; || Apache CGI/FastCGI handler&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;snmpd&amp;lt;/code&amp;gt; || SNMP daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;snmpl&amp;lt;/code&amp;gt; || Internal SNMP poller — continuously queries Newtec MIB&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;vtosfifo&amp;lt;/code&amp;gt; || TS-to-FIFO bridge to &amp;lt;code&amp;gt;/dev/vtosfifo4&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;xcpServerd&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;xcpClientd&amp;lt;/code&amp;gt; || XCP protocol daemons (3 each)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pard&amp;lt;/code&amp;gt; || Parallel interface daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pnpd&amp;lt;/code&amp;gt; || PnP device daemon&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;mirror&amp;lt;/code&amp;gt; || Mirror/redundancy daemon (runs as adtec)&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
=== Kernel Modules ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Module !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;newtec&amp;lt;/code&amp;gt; || Newtec 7044 demodulator driver — core BBFrame driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;newtec_dummy&amp;lt;/code&amp;gt; || Stub for absent optional demodulator hardware&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;dvblite&amp;lt;/code&amp;gt; || DVB lite core (depends on newtec) — exposes &amp;lt;code&amp;gt;dvblite_ioctl&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; || I2C transport for Newtec RMCP protocol&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;vtosfifo&amp;lt;/code&amp;gt; || TS FIFO device driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;rddma_ip&amp;lt;/code&amp;gt; || &#039;&#039;&#039;IP-over-satellite receive DMA engine (FPGA-backed)&#039;&#039;&#039;&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;ip_ingress_main&amp;lt;/code&amp;gt; || IP ingress pipeline (GSE/MPE over satellite)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;frpanel&amp;lt;/code&amp;gt; || Front panel driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;fanctrl&amp;lt;/code&amp;gt; / &amp;lt;code&amp;gt;pc96&amp;lt;/code&amp;gt; || Fan controller&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;proxyimg&amp;lt;/code&amp;gt; || Image proxy&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;epb&amp;lt;/code&amp;gt; || EPB bus driver&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pnp&amp;lt;/code&amp;gt; || PnP device manager&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;fec&amp;lt;/code&amp;gt; / &amp;lt;code&amp;gt;ethfrm&amp;lt;/code&amp;gt; || Ethernet/FEC&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;pc73a&amp;lt;/code&amp;gt; / &amp;lt;code&amp;gt;pc93&amp;lt;/code&amp;gt; || Front panel dependencies&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
Failed to load (hardware absent): &amp;lt;code&amp;gt;teamcast&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;nim&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnb_pwr&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;pc72&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== Device Nodes ===&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Device !! Purpose&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/dvblite0-2&amp;lt;/code&amp;gt; || DVB lite interfaces&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/vtosfifo0-5&amp;lt;/code&amp;gt; || TS FIFO char devices (major 240)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner0-3&amp;lt;/code&amp;gt; || Tuner interfaces (major 123)&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner_ledgr0-3&amp;lt;/code&amp;gt; || Tuner lock (green) LEDs&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner_ledrd0-3&amp;lt;/code&amp;gt; || Tuner read LEDs&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/tuner_rst0-3&amp;lt;/code&amp;gt; || Tuner resets&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;/dev/ntmod&amp;lt;/code&amp;gt; || Newtec modulator — &#039;&#039;&#039;not populated&#039;&#039;&#039;&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
== /proc Driver Interfaces ==&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/dvblite/fe0/info&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
NAME=NTC/7044/BB DVB Demodulator&lt;br /&gt;
FREQ_MIN=950000 / FREQ_MAX=2150000&lt;br /&gt;
SYMRATE_MIN=256000 / SYMRATE_MAX=45000000&lt;br /&gt;
S_QPSK=1/2, 2/3, 3/4, 5/6, 6/7, 7/8, AUTO&lt;br /&gt;
S_8PSK=2/3, 5/6, 8/9, AUTO&lt;br /&gt;
S2_QPSK=1/4, 1/3, 1/2, 2/5, 2/3, 3/5, 3/4, 4/5, 5/6, 8/9, 9/10&lt;br /&gt;
S2_8PSK=2/3, 3/5, 3/4, 5/6, 8/9, 9/10&lt;br /&gt;
S2_16QAM=3/4, 7/8, AUTO&lt;br /&gt;
S2_16APSK=2/3, 3/4, 4/5, 5/6, 8/9, 9/10&lt;br /&gt;
S2_32APSK=3/4, 4/5, 5/6, 8/9, 9/10&lt;br /&gt;
SOFTWARE_LICENSE=165&lt;br /&gt;
SOFTWARE_VERSION=v2.34   20/03/13&lt;br /&gt;
FPGA_BITFILE_VERSION=v1.01 09/01/12&lt;br /&gt;
HARDWARE_VERSION=v3.0&lt;br /&gt;
SERIAL_NUM=30091216&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/dvblite/fe0/stats&amp;lt;/code&amp;gt; (no signal) ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
LOCK=UNLOCKED&lt;br /&gt;
RECV_LEVEL=-70.00&lt;br /&gt;
INTRATE=41470588&lt;br /&gt;
MOD_FEC=QPSK_3/4&lt;br /&gt;
BB_CRC_ERRORS=N/A        &amp;lt;- populates with live signal&lt;br /&gt;
DUMMY_PL_RATIO=N/A       &amp;lt;- populates with live signal&lt;br /&gt;
ISI_FILTER_BYTE=N/A      &amp;lt;- populates with live signal&lt;br /&gt;
BASEBAND_LEN=N/A         &amp;lt;- populates with live signal&lt;br /&gt;
FRAMES_SEC=N/A           &amp;lt;- populates with live signal&lt;br /&gt;
ALARMS=0000110001011000&lt;br /&gt;
STATE=READY&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
fe1 has same structure but &amp;lt;code&amp;gt;NAME=NTC7044&amp;lt;/code&amp;gt; (no BB suffix, no license).&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/vtosfifo/chn&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
Channel 0 processed 16620 TS frames during session. Channel 4 processed 1619.&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;/proc/driver/rddma/&amp;lt;/code&amp;gt; — FPGA DMA engine ===&lt;br /&gt;
&lt;br /&gt;
* Channel 3 active: Control=&amp;lt;code&amp;gt;49C003C0&amp;lt;/code&amp;gt;, Src=&amp;lt;code&amp;gt;03F01C00&amp;lt;/code&amp;gt; (FPGA mapped)&lt;br /&gt;
* 3.98M timer IRQs, 3.98M &amp;quot;No Data&amp;quot; — idle, no satellite IP stream&lt;br /&gt;
* PID &amp;lt;code&amp;gt;0x01E1&amp;lt;/code&amp;gt; (481) being tracked&lt;br /&gt;
&lt;br /&gt;
== Kernel Module Internals (&amp;lt;code&amp;gt;strings&amp;lt;/code&amp;gt; analysis) ==&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;newtec.ko&amp;lt;/code&amp;gt; — BBFrame symbols ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
BB_CRC_ERRORS / BB_CRC_ERRORS_CURRENT / BB_CRC_ERRORS_NEXT&lt;br /&gt;
BB_DATA_FIELD_LEN / BB_DATA_FIELD_LEN_CURRENT / BB_DATA_FIELD_LEN_NEXT&lt;br /&gt;
BB_FRAMES&lt;br /&gt;
BB_GAIN / BB_GAIN_CURRENT / BB_GAIN_NEXT&lt;br /&gt;
BASEBAND_LEN&lt;br /&gt;
ISI / ISI_CTRL / ISI_CTRL_STRUCT / ISI_CTRL_STRUCT_FIELDS&lt;br /&gt;
ISI_FILTER_BYTE / ISI_MASK&lt;br /&gt;
SAT_BB_GAIN&lt;br /&gt;
ntc_debug  (module param, uint)&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;BB_DATA_FIELD_LEN&amp;lt;/code&amp;gt; and &amp;lt;code&amp;gt;BB_FRAMES&amp;lt;/code&amp;gt; suggest the driver tracks individual baseband frames, not just statistics. Very promising for BBFrame capture.&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;dvblite.ko&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
Contains &amp;lt;code&amp;gt;dvblite_ioctl&amp;lt;/code&amp;gt; — a kernel ioctl interface on &amp;lt;code&amp;gt;/dev/dvblite0&amp;lt;/code&amp;gt;. Commands unknown — to be investigated with a live signal.&lt;br /&gt;
&lt;br /&gt;
== Network Services ==&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Service !! Port !! Notes&lt;br /&gt;
|-&lt;br /&gt;
| SSH || 22 || Legacy KEX only (diffie-hellman-group1-sha1)&lt;br /&gt;
|-&lt;br /&gt;
| Telnet API || 23 || &amp;lt;code&amp;gt;cmdld&amp;lt;/code&amp;gt; via xinetd&lt;br /&gt;
|-&lt;br /&gt;
| FTP || 21 || pure-ftpd&lt;br /&gt;
|-&lt;br /&gt;
| HTTP || 80 || Apache + myles + requestHandler&lt;br /&gt;
|-&lt;br /&gt;
| SNMP || 161 || Community &amp;lt;code&amp;gt;public&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| mDNS || 5353 || &amp;lt;code&amp;gt;GOFFERT.local&amp;lt;/code&amp;gt;&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
&amp;lt;syntaxhighlight lang=&amp;quot;bash&amp;quot;&amp;gt;&lt;br /&gt;
# SSH/SCP&lt;br /&gt;
ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -oHostKeyAlgorithms=+ssh-rsa root@&amp;lt;ip&amp;gt;&lt;br /&gt;
scp -oKexAlgorithms=+diffie-hellman-group1-sha1 -oHostKeyAlgorithms=+ssh-rsa root@&amp;lt;ip&amp;gt;:/path /local&lt;br /&gt;
&amp;lt;/syntaxhighlight&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Credentials (Default/Hardcoded — ZSL-2020-5603 / ExploitDB 48954) ==&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! User !! Password !! Notes&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;root&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;1root!&amp;lt;/code&amp;gt; || Full root SSH&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;admin&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;1admin!&amp;lt;/code&amp;gt; || Also root via sudoers&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;adtec&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;none&amp;lt;/code&amp;gt; || Telnet API / web UI&lt;br /&gt;
|-&lt;br /&gt;
| &amp;lt;code&amp;gt;adtecftp&amp;lt;/code&amp;gt; || &amp;lt;code&amp;gt;adtecftp2231&amp;lt;/code&amp;gt; || FTP only&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
* Password hashes: DES crypt — crackable in seconds with &amp;lt;code&amp;gt;john&amp;lt;/code&amp;gt;&lt;br /&gt;
* &amp;lt;code&amp;gt;apache ALL=(ALL) NOPASSWD: ALL&amp;lt;/code&amp;gt; in sudoers&lt;br /&gt;
* Diagnostic package passphrase: &#039;&#039;&#039;&amp;lt;code&amp;gt;iMoo3jio&amp;lt;/code&amp;gt;&#039;&#039;&#039; (hardcoded, leaks in &amp;lt;code&amp;gt;ps aux&amp;lt;/code&amp;gt;)&lt;br /&gt;
&lt;br /&gt;
&amp;lt;syntaxhighlight lang=&amp;quot;bash&amp;quot;&amp;gt;&lt;br /&gt;
gpg --passphrase &amp;quot;iMoo3jio&amp;quot; --batch --ignore-mdc-error --decrypt RD-60_*.tar.gpg | tar xf -&lt;br /&gt;
&amp;lt;/syntaxhighlight&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== APIs ==&lt;br /&gt;
&lt;br /&gt;
=== Telnet API ===&lt;br /&gt;
&lt;br /&gt;
Connect: &amp;lt;code&amp;gt;telnet &amp;lt;ip&amp;gt;&amp;lt;/code&amp;gt;, login &amp;lt;code&amp;gt;adtec&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;none&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
*.SYSD SHELLCMD &amp;lt;cmd&amp;gt;          # arbitrary root shell execution!&lt;br /&gt;
*.SNMP ADTEC-NT-DEMOD-MIB::satFeedType.0 = dvbs2   # configure tuner&lt;br /&gt;
*.SNMP ADTEC-NT-DEMOD-MIB::satFeedDownlink.0 = 10960000&lt;br /&gt;
*.SNMP .1.3.6.1.4.1.19587.6000.3.999.0 i 0         # commit/apply&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== SNMP — Newtec Demodulator MIB ===&lt;br /&gt;
&lt;br /&gt;
OID base: &amp;lt;code&amp;gt;.1.3.6.1.4.1.19587&amp;lt;/code&amp;gt;, MIB: &amp;lt;code&amp;gt;ADTEC-NT-DEMOD-MIB&amp;lt;/code&amp;gt;, community: &amp;lt;code&amp;gt;public&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;syntaxhighlight lang=&amp;quot;bash&amp;quot;&amp;gt;&lt;br /&gt;
snmpwalk -v2c -c public &amp;lt;ip&amp;gt; .1.3.6.1.4.1.19587&lt;br /&gt;
&amp;lt;/syntaxhighlight&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Key OIDs: &amp;lt;code&amp;gt;tunerLock&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;recvLevel&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;esNo&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;linkMargin&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;modFec&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;rolloff&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;pilot&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;fecFrameType&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;unCorrFs&amp;lt;/code&amp;gt;, &#039;&#039;&#039;&amp;lt;code&amp;gt;bbCrcerrors&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;basebandLen&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;dummyPlRatio&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;isiFilterByte&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &#039;&#039;&#039;&amp;lt;code&amp;gt;framesSec&amp;lt;/code&amp;gt;&#039;&#039;&#039;, &amp;lt;code&amp;gt;satFeedType&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;satFeedDownlink&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;satFeedSymRate&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;satFeedModulation&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnbEnable&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnbPolarity&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;lnbTone&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== DVC Profile Format ===&lt;br /&gt;
&lt;br /&gt;
SNMP SET commands as tuner presets, applied via Telnet API or web UI.&lt;br /&gt;
&lt;br /&gt;
== Saved Tuner Profiles ==&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;prfturktest.DVC&amp;lt;/code&amp;gt; (2018-04-28) ===&lt;br /&gt;
&lt;br /&gt;
* DVB-S, &#039;&#039;&#039;10762 MHz&#039;&#039;&#039;, KU 9750 LO → &#039;&#039;&#039;1012 MHz&#039;&#039;&#039; L-band&lt;br /&gt;
* &#039;&#039;&#039;30 MSym/s&#039;&#039;&#039;, QPSK 3/4, roll-off 35%&lt;br /&gt;
* Was &#039;&#039;&#039;LOCKED&#039;&#039;&#039; at -32 dBm when saved&lt;br /&gt;
* &amp;lt;code&amp;gt;bbCrcerrors = 1&amp;lt;/code&amp;gt; — &#039;&#039;&#039;BBFrame counter was active and non-zero!&#039;&#039;&#039;&lt;br /&gt;
* Likely &#039;&#039;&#039;Türksat 42°E&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== &amp;lt;code&amp;gt;prfMUX.DVC&amp;lt;/code&amp;gt; (2018-04-28) ===&lt;br /&gt;
&lt;br /&gt;
* DVB-S2, &#039;&#039;&#039;10960 MHz&#039;&#039;&#039;, KU 9750 LO → &#039;&#039;&#039;1210 MHz&#039;&#039;&#039; L-band&lt;br /&gt;
* &#039;&#039;&#039;8.352 MSym/s&#039;&#039;&#039;, 16APSK 2/3, roll-off 20%, pilot ON, normal frames, CCM&lt;br /&gt;
* Was unlocked when saved&lt;br /&gt;
&lt;br /&gt;
== Licensed Features (Key ID 165) ==&lt;br /&gt;
&lt;br /&gt;
DVB-DSNG + DVB-S2 + QPSK + 8-PSK + 16-QAM/16APSK + 32APSK + Symbol Rate &amp;lt;= 33 MBaud + ACM + &#039;&#039;&#039;Single TS/GS or Multiple Streams&#039;&#039;&#039; + &#039;&#039;&#039;(Baseband Frames)&#039;&#039;&#039; + no ACM client + no AES&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;BBFrame access is explicitly licensed and enabled.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Encryption / CA ==&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;BISS-1 key&#039;&#039;&#039; in &amp;lt;code&amp;gt;dtrans.xml&amp;lt;/code&amp;gt;: &amp;lt;code&amp;gt;69A969BBECA0&amp;lt;/code&amp;gt;&lt;br /&gt;
* &#039;&#039;&#039;Viaccess&#039;&#039;&#039; (CA ID 0x0005) feed seen in logs — no card present, could not decrypt&lt;br /&gt;
&lt;br /&gt;
== IP-over-Satellite ==&lt;br /&gt;
&lt;br /&gt;
The unit has a full satellite IP receive stack beyond TS decoding:&lt;br /&gt;
&lt;br /&gt;
* &amp;lt;code&amp;gt;rddma_ip&amp;lt;/code&amp;gt; — FPGA-backed DMA for IP-from-satellite&lt;br /&gt;
* &amp;lt;code&amp;gt;ip_ingress_main&amp;lt;/code&amp;gt; — GSE/MPE ingress pipeline&lt;br /&gt;
* FPGA Channel 3 active at &amp;lt;code&amp;gt;03F01C00&amp;lt;/code&amp;gt;&lt;br /&gt;
* Currently idle — no GSE/MPE stream configured&lt;br /&gt;
&lt;br /&gt;
== Security Summary ==&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Issue !! Detail&lt;br /&gt;
|-&lt;br /&gt;
| Default root creds || &amp;lt;code&amp;gt;root&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;1root!&amp;lt;/code&amp;gt; over SSH&lt;br /&gt;
|-&lt;br /&gt;
| Telnet RCE || &amp;lt;code&amp;gt;*.SYSD SHELLCMD&amp;lt;/code&amp;gt; = root shell with &amp;lt;code&amp;gt;adtec&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;none&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| Sudoers || &amp;lt;code&amp;gt;apache ALL=(ALL) NOPASSWD: ALL&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| Shared SSH host keys || Same across all units (stored on CF card)&lt;br /&gt;
|-&lt;br /&gt;
| Weak password hashes || DES crypt, trivially crackable&lt;br /&gt;
|-&lt;br /&gt;
| GPG passphrase leak || &amp;lt;code&amp;gt;iMoo3jio&amp;lt;/code&amp;gt; visible in &amp;lt;code&amp;gt;ps aux&amp;lt;/code&amp;gt;&lt;br /&gt;
|-&lt;br /&gt;
| Public exploit || ZSL-2020-5603 / ExploitDB 48954&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
== Other ==&lt;br /&gt;
== Front Panel ==&lt;br /&gt;
&lt;br /&gt;
* Driver: &amp;lt;code&amp;gt;frpanel.ko&amp;lt;/code&amp;gt; (depends on &amp;lt;code&amp;gt;pc93&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;pc73a&amp;lt;/code&amp;gt;)&lt;br /&gt;
* Device nodes: &amp;lt;code&amp;gt;/dev/frpanel0&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;/dev/frpanel1&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;/dev/frpanel2&amp;lt;/code&amp;gt;&lt;br /&gt;
* Display: 2 rows × 40 columns character LCD (PC93 I2C MCU)&lt;br /&gt;
* LCD API in &amp;lt;code&amp;gt;libsolib.so&amp;lt;/code&amp;gt;: &amp;lt;code&amp;gt;FpLcdKpInit()&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;LcdClear()&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;LcdWriteStr(char*, pos, len)&amp;lt;/code&amp;gt;&lt;br /&gt;
* Writing to &amp;lt;code&amp;gt;/dev/frpanel2&amp;lt;/code&amp;gt; activates the backlight&lt;br /&gt;
* &amp;lt;code&amp;gt;menud&amp;lt;/code&amp;gt; daemon owns the display — must be stopped before direct writes&lt;br /&gt;
* Proc interface: &amp;lt;code&amp;gt;/proc/driver/frpanel/&amp;lt;/code&amp;gt; (rows, cols, screen, type, version, access)&lt;br /&gt;
&lt;br /&gt;
== Images ==&lt;br /&gt;
&amp;lt;gallery&amp;gt;&lt;br /&gt;
Adtec_rd60_internals1.jpg&lt;br /&gt;
Adtec_rd60_internals2.jpg&lt;br /&gt;
Adtec_rd60_internals3.jpg&lt;br /&gt;
Adtec_rd60_internals4.jpg&lt;br /&gt;
Adtec_rd60_internals5.jpg&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== TODO (requires dish connected) ==&lt;br /&gt;
&lt;br /&gt;
* [ ] Read &amp;lt;code&amp;gt;/proc/driver/dvblite/fe0/stats&amp;lt;/code&amp;gt; with live signal — observe all BB* fields&lt;br /&gt;
* [ ] SNMP walk full &amp;lt;code&amp;gt;.1.3.6.1.4.1.19587&amp;lt;/code&amp;gt; with live signal&lt;br /&gt;
* [ ] Investigate &amp;lt;code&amp;gt;dvblite_ioctl&amp;lt;/code&amp;gt; on &amp;lt;code&amp;gt;/dev/dvblite0&amp;lt;/code&amp;gt;&lt;br /&gt;
* [ ] Enable &amp;lt;code&amp;gt;ntc_debug&amp;lt;/code&amp;gt; module param and watch dmesg&lt;br /&gt;
* [ ] Try ISI multistream filtering via SNMP SET&lt;br /&gt;
* [ ] Investigate &amp;lt;code&amp;gt;rddma_ip&amp;lt;/code&amp;gt; with GSE/MPE satellite signal&lt;br /&gt;
* [ ] Lock on Türksat 42°E: 10762 MHz / 30 MSym/s / QPSK 3/4 (known working)&lt;br /&gt;
* [ ] Identify prfMUX transponder on Lyngsat (10960 MHz / 8.352 MSym/s / 16APSK 2/3)&lt;br /&gt;
* [ ] Explore Telnet API &amp;lt;code&amp;gt;*.NTC&amp;lt;/code&amp;gt; command namespace&lt;br /&gt;
* [ ] Investigate &amp;lt;code&amp;gt;xcpServerd&amp;lt;/code&amp;gt;/&amp;lt;code&amp;gt;xcpClientd&amp;lt;/code&amp;gt; — XCP protocol capabilities&lt;br /&gt;
* [ ] Check if &amp;lt;code&amp;gt;schnv.DVC&amp;lt;/code&amp;gt; populates after a lock (empty offline)&lt;br /&gt;
* [ ] Read &amp;lt;code&amp;gt;freg.db&amp;lt;/code&amp;gt; contents — full feature registry dump&lt;br /&gt;
* [ ] Write to LCD display — cross-compile against glibc 2.3.5 and call &amp;lt;code&amp;gt;LcdWriteStr()&amp;lt;/code&amp;gt; from &amp;lt;code&amp;gt;libsolib.so&amp;lt;/code&amp;gt;&lt;br /&gt;
* [ ] Send RMCP command via &amp;lt;code&amp;gt;rmcp_i2c&amp;lt;/code&amp;gt; to switch NTC/7044/BB output to BBFrame mode&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:20250429_153812.jpg&amp;diff=15901</id>
		<title>File:20250429 153812.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:20250429_153812.jpg&amp;diff=15901"/>
		<updated>2026-04-11T23:17:09Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153812.jpg to File:Adtec rd60 internals5.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;#REDIRECT [[File:Adtec rd60 internals5.jpg]]&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals5.jpg&amp;diff=15900</id>
		<title>File:Adtec rd60 internals5.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals5.jpg&amp;diff=15900"/>
		<updated>2026-04-11T23:17:09Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153812.jpg to File:Adtec rd60 internals5.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:20250429_153808.jpg&amp;diff=15899</id>
		<title>File:20250429 153808.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:20250429_153808.jpg&amp;diff=15899"/>
		<updated>2026-04-11T23:16:55Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153808.jpg to File:Adtec rd60 internals4.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;#REDIRECT [[File:Adtec rd60 internals4.jpg]]&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals4.jpg&amp;diff=15898</id>
		<title>File:Adtec rd60 internals4.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals4.jpg&amp;diff=15898"/>
		<updated>2026-04-11T23:16:55Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153808.jpg to File:Adtec rd60 internals4.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:20250429_153759.jpg&amp;diff=15897</id>
		<title>File:20250429 153759.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:20250429_153759.jpg&amp;diff=15897"/>
		<updated>2026-04-11T23:16:28Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153759.jpg to File:Adtec rd60 internals3.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;#REDIRECT [[File:Adtec rd60 internals3.jpg]]&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals3.jpg&amp;diff=15896</id>
		<title>File:Adtec rd60 internals3.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals3.jpg&amp;diff=15896"/>
		<updated>2026-04-11T23:16:28Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153759.jpg to File:Adtec rd60 internals3.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:20250429_153750.jpg&amp;diff=15895</id>
		<title>File:20250429 153750.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:20250429_153750.jpg&amp;diff=15895"/>
		<updated>2026-04-11T23:16:15Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153750.jpg to File:Adtec rd60 internals2.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;#REDIRECT [[File:Adtec rd60 internals2.jpg]]&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals2.jpg&amp;diff=15894</id>
		<title>File:Adtec rd60 internals2.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals2.jpg&amp;diff=15894"/>
		<updated>2026-04-11T23:16:15Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153750.jpg to File:Adtec rd60 internals2.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:20250429_153804.jpg&amp;diff=15893</id>
		<title>File:20250429 153804.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:20250429_153804.jpg&amp;diff=15893"/>
		<updated>2026-04-11T23:15:30Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153804.jpg to File:Adtec rd60 internals1.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;#REDIRECT [[File:Adtec rd60 internals1.jpg]]&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals1.jpg&amp;diff=15892</id>
		<title>File:Adtec rd60 internals1.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Adtec_rd60_internals1.jpg&amp;diff=15892"/>
		<updated>2026-04-11T23:15:30Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:20250429 153804.jpg to File:Adtec rd60 internals1.jpg&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Operation_Blueshift&amp;diff=15832</id>
		<title>Operation Blueshift</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Operation_Blueshift&amp;diff=15832"/>
		<updated>2026-03-24T02:10:17Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Event&lt;br /&gt;
|Name=Operation Blueshift&lt;br /&gt;
|Date=2026/03/11&lt;br /&gt;
|DateEnd=2026/03/27&lt;br /&gt;
|Location=Kitchen&lt;br /&gt;
|Contact=Eis-T&lt;br /&gt;
|Attendees=Eis-T&lt;br /&gt;
}}&lt;br /&gt;
We&#039;re renovating and expanding the current kitchen with a free and blue one. For this &#039;operation blueshift&#039; we need all the help we can get. This is a link to the marktplaats advertisement: https://www.marktplaats.nl/v/huis-en-inrichting/keuken-keukenelementen/m2373169857-ikea-inbouw-keuken &lt;br /&gt;
&lt;br /&gt;
We will carefully deconstruct and collect this kitchen in the afternoon on Saturday the 21st of March. Please add your name below if you want to be part of this. &lt;br /&gt;
&lt;br /&gt;
[[File:keukenplan1.jpeg|500px]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
[[File:keukenplan2.jpeg|500px]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
=== 13 - 15 march: packing + ceiling demolition ===&lt;br /&gt;
* 13th from 19:00 safely store the kitchen stuff in moving boxes&lt;br /&gt;
* removing the ceiling above the kitchen.&lt;br /&gt;
&lt;br /&gt;
* going to de stort to trow away all the rubble (14th 10:00)&lt;br /&gt;
&lt;br /&gt;
* Clean up / prepare for bar moving (15th)&lt;br /&gt;
&lt;br /&gt;
=== Wednesday March 18: Bar moving day===&lt;br /&gt;
&lt;br /&gt;
We need strong folks to help us push the entire bar 20 cm out. Expect to be enlisted. We need extra space to accomodate one extra kitchen cabinet.&lt;br /&gt;
&lt;br /&gt;
Also we need to install the rachels for the ceiling.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Create demontage kit &lt;br /&gt;
&lt;br /&gt;
drills (charge them)&lt;br /&gt;
&lt;br /&gt;
plamurmes&lt;br /&gt;
&lt;br /&gt;
lang mes&lt;br /&gt;
&lt;br /&gt;
=== Friday March 20: Ceiling building===&lt;br /&gt;
&lt;br /&gt;
Final preparatons for placing the kitchen and install ceiling&lt;br /&gt;
&lt;br /&gt;
=== Saturday March 21: ===&lt;br /&gt;
- Pick up kitchen&lt;br /&gt;
&lt;br /&gt;
- 1 nurd with a car and a trekhaak: [[berend]]&lt;br /&gt;
&lt;br /&gt;
- 2 or 3 nurds to help transport and construct the blue kitchen in the afternoon: [[Eis-T]] (only in the morning)&lt;br /&gt;
&lt;br /&gt;
- 1 senior executive project lead to map out which cabinet goes where and what works nicely: [[_fun]]&lt;br /&gt;
&lt;br /&gt;
- 2 nurds to build up the new stuff and connect the pipes once the kitchen is moved in the week of the 22nd of March:&lt;br /&gt;
&lt;br /&gt;
=== Sunday March 22 until friday 27th : the aftermath ===&lt;br /&gt;
&lt;br /&gt;
- installing the cabinets&lt;br /&gt;
- the waterworks&lt;br /&gt;
- afzuigkap&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
=== Mailing list correspondance ===&lt;br /&gt;
Eis-T:&lt;br /&gt;
&lt;br /&gt;
Hi Nurds,&lt;br /&gt;
&lt;br /&gt;
An opportunity arose and I sniped a free kitchen on Marktplaats for the space. It is a major version upgrade on many fronts:&lt;br /&gt;
t is a major version upgrade on many fronts:&lt;br /&gt;
*    it is blue, like no kitchen you have ever seen.&lt;br /&gt;
*    it is not falling apart&lt;br /&gt;
*    top cabinets we can put above sink for extra storage space. I don&#039;t know the measurements but I expect these shelves fit expect terrabytes.&lt;br /&gt;
*    it includes an afzuigkap, perfect to mount above an airfryer. and a dishwasher that to replace the good ol&#039; Sven Vathwasser That has starting to show its age recently.&lt;br /&gt;
*    I don&#039;t know our cookie policy but it has a built-in oven, so we can bake our own cookies!&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Monday the 9th I&#039;ll do a go/no go moment, because if we can&#039;t/don&#039;t want this kitchen we should let the person giving it away well in advance.&lt;br /&gt;
&lt;br /&gt;
Hark on,&lt;br /&gt;
&lt;br /&gt;
Eis-T&lt;br /&gt;
&lt;br /&gt;
Dreamer:&lt;br /&gt;
&lt;br /&gt;
I really like the concept and drive, but timing wise it&#039;s kind of bad.&lt;br /&gt;
&lt;br /&gt;
Ceiling renovations have completely stalled and there is little to no room to manouver around the space. If the old maker-corner were empty and renovated I&#039;d say we&#039;d be in a good spot to move forward, but as has been clear so far this year things are not really happening ..&lt;br /&gt;
&lt;br /&gt;
These are my two cents. If people are fully motivated and organized to get this going and form a coherent group around the effort (and not let yet another renovation project stall indefinitely while blocking the rest of the space ..) I think it would be great. But ideally this would be well coordinated with ceiling and power infra renovations.&lt;br /&gt;
&lt;br /&gt;
 &lt;br /&gt;
Alexander/dreamer&lt;br /&gt;
secretaris Stichting tot Exploitation van een Volkshuis te Wageningen&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
ps; I heard plans/ideas to have transparent/glass cupboards instead of opaque, so this selection would go against that. I also have some reservations on how all of this would actually fit given our limited space.&lt;br /&gt;
&lt;br /&gt;
Freek:&lt;br /&gt;
&lt;br /&gt;
 Hmmm you expect to be able to take apart, move and rebuild an IKEA-product? I appreciate the plan to replace the kitchen, but if you demolish the current one and turn out unable to make the new one work you&#039;ve created a sub-optimal situation. &lt;br /&gt;
&lt;br /&gt;
Do you have a backup plan? Or do you have enough confidence in this plan? &lt;br /&gt;
&lt;br /&gt;
Met vriendelijke groet,&lt;br /&gt;
&lt;br /&gt;
Freek&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Eis-T: &lt;br /&gt;
Thanks Freek &amp;amp; Dreamer for the response and reality check. I hope the following arguments will help win you over to embrace #ProjectBlueshift (get it? The new kitchen is blue and we&#039;re moving at the speed of light 😎)&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Dreamer: I really like the concept and drive, but timing wise it&#039;s kind of bad.&lt;br /&gt;
&lt;br /&gt;
Thanks! Good point, though I do not think that there ever will be a perfect moment where the space is fully organized and ready. What I do know is that ADHD brains thrive with URGENCY and that a lot of things can happen in a short amount if time if we&#039;re in a frenzy. Maybe the arrival of the blue-est kitchen known to man will get the renovation project out of its stalled state? Or as we in the cooking committee like to say: you gotta break an omelet to bake eggs.&lt;br /&gt;
&lt;br /&gt;
Freek: if you demolish the current one and turn out unable to make the new one work you&#039;ve created a sub-optimal situation&lt;br /&gt;
&lt;br /&gt;
There are two half-ass arguments I&#039;d like to put forward that together make up one. The current kitchen is kind of demolishing itself. the drawers are falling out, the cabinet doors are crooked. Also the blue kitchen is twice as big as our current kitchen, so there will be plenty of spare parts if/when things get damaged during the transition. &lt;br /&gt;
&lt;br /&gt;
Do you have a backup plan?&lt;br /&gt;
&lt;br /&gt;
No, but this evening _fun and I will measure up the current kitchen and puzzle-out how things will fit together with the blue kitchen elements. We&#039;ll see if a we can think up a plan b. If anyone is interested in thinking along: feel welcome (oh and there&#039;s anime tonight! two reasons to join!) &lt;br /&gt;
&lt;br /&gt;
See you in the kitchen!&lt;br /&gt;
&lt;br /&gt;
Eis-T&lt;br /&gt;
&lt;br /&gt;
=== Update 15 march ===&lt;br /&gt;
On sunday we&#039;ve made significant progress getting the old kitchen ready. Stuff has been put into boxes and some has been thrown away. The ceiling has been stripped and Aetios&amp;amp;Peterr are hard at workputting in the new insulation. @buzz, heres an overview of the possibility of using the CV hot water lines: https://nurdspace.nl/File:Keuken_noboiler_warmwater.webm&lt;br /&gt;
&amp;lt;gallery mode=&amp;quot;packed&amp;quot; heights=&amp;quot;200&amp;quot;&amp;gt;&lt;br /&gt;
File:1503-kitchen1.jpeg|thumb|Empty kitchenette&lt;br /&gt;
File:1503-kitchen2.jpeg|thumb|Ceiling&lt;br /&gt;
File:1503-kitchen3.jpeg|thumb|Backwall ready for sink&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Buzz_waterworks.mp4&amp;diff=15816</id>
		<title>File:Buzz waterworks.mp4</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Buzz_waterworks.mp4&amp;diff=15816"/>
		<updated>2026-03-15T17:23:27Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:Buzz waterworks.mp4 to File:Keuken noboiler warmwater.mp4&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;#REDIRECT [[File:Keuken noboiler warmwater.mp4]]&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Keuken_noboiler_warmwater.mp4&amp;diff=15815</id>
		<title>File:Keuken noboiler warmwater.mp4</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Keuken_noboiler_warmwater.mp4&amp;diff=15815"/>
		<updated>2026-03-15T17:23:27Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Buzz moved page File:Buzz waterworks.mp4 to File:Keuken noboiler warmwater.mp4&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;Buzz waterworks&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Watt-Ever&amp;diff=15811</id>
		<title>Watt-Ever</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Watt-Ever&amp;diff=15811"/>
		<updated>2026-03-14T15:30:42Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Created page with &amp;quot;{{Project |Name=Watt-Ever |Skills=Electronics, 3D design + printing |Status=Planning |Niche=Music |Purpose=Use in other project |Tool=No }} == What ==    I want to make a batterypowered BT boombox that&amp;#039;s a bit too loud.    == Why ==    Soon there&amp;#039;s another streetrave. I want to push a cart along to play some alternative music.    == With ==    These are the collected parts thusfar.    &amp;lt;gallery&amp;gt;  WattEver-amp-XY-C50H.jpg  WattEver-speakers-MGX-422.jpg  &amp;lt;/gallery&amp;gt;    == We...&amp;quot;&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Watt-Ever&lt;br /&gt;
|Skills=Electronics, 3D design + printing&lt;br /&gt;
|Status=Planning&lt;br /&gt;
|Niche=Music&lt;br /&gt;
|Purpose=Use in other project&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
I want to make a batterypowered BT boombox that&#039;s a bit too loud.&lt;br /&gt;
&lt;br /&gt;
== Why ==&lt;br /&gt;
&lt;br /&gt;
Soon there&#039;s another streetrave. I want to push a cart along to play some alternative music.&lt;br /&gt;
&lt;br /&gt;
== With ==&lt;br /&gt;
&lt;br /&gt;
These are the collected parts thusfar.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;gallery&amp;gt;&lt;br /&gt;
WattEver-amp-XY-C50H.jpg&lt;br /&gt;
WattEver-speakers-MGX-422.jpg&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Web ==&lt;br /&gt;
&lt;br /&gt;
* https://www.lautsprechershop.de/tools/t_box_vented_hoges_en.htm&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:WattEver-speakers-MGX-422.jpg&amp;diff=15810</id>
		<title>File:WattEver-speakers-MGX-422.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:WattEver-speakers-MGX-422.jpg&amp;diff=15810"/>
		<updated>2026-03-14T15:29:03Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:WattEver-amp-XY-C50H.jpg&amp;diff=15809</id>
		<title>File:WattEver-amp-XY-C50H.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:WattEver-amp-XY-C50H.jpg&amp;diff=15809"/>
		<updated>2026-03-14T15:28:03Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15793</id>
		<title>Action BT Printertjes</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15793"/>
		<updated>2026-03-09T19:21:12Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Links */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Action BT Printertjes&lt;br /&gt;
|Skills=2D printing&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Printing&lt;br /&gt;
|Picture=Action-miniprinter.jpg&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
At the Action they sell/sold these tiny thermal BT printers for under 20 euros.&lt;br /&gt;
&lt;br /&gt;
This project is an attempt to collect knowledge about it. &lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
&lt;br /&gt;
It&#039;s made by &#039;Karsten&#039; seemingly, who import them from china for several customers and have some android apps for their line of printers.&lt;br /&gt;
&lt;br /&gt;
The actual manufacturer seems to be https://www.luckjingle.com/commodity?product=D1&lt;br /&gt;
&lt;br /&gt;
== Hackery? ==&lt;br /&gt;
[[File:Actionprinter-ownfont.jpg|thumb|right]]&lt;br /&gt;
On connecting the powered on printer to a USB port of a machine, you gain a /dev/usb/lp* (or similar). This will allow you to print &#039;directly&#039; to it.&lt;br /&gt;
&lt;br /&gt;
 echo -e &amp;quot;HARK&amp;quot; &amp;gt; /dev/usb/lp*  # prints one line in some built-in font of the printer, maximum is 32 characters per line, wraps around&lt;br /&gt;
 &lt;br /&gt;
 echo -e &amp;quot;\r&amp;quot; &amp;gt; /dev/usb/lp*    # feeds one line of paper&lt;br /&gt;
 echo -e &amp;quot;\n&amp;quot; &amp;gt; /dev/usb/lp*    # feeds two/three lines of paper&lt;br /&gt;
&lt;br /&gt;
Maybe this could allow the protocol as described in the blogpost under &#039;&#039;&#039;Links&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Ooooooo ==&lt;br /&gt;
&lt;br /&gt;
[[File:Actionprinter-longprint.jpg|480px]]&lt;br /&gt;
&lt;br /&gt;
== Links ==&lt;br /&gt;
&lt;br /&gt;
* https://atctwo.net/posts/2024/07/16/thermal-printer.html&lt;br /&gt;
* https://blog.dbuglife.com/reverse-engineering-fichero-label-printer/&lt;br /&gt;
&lt;br /&gt;
* https://www.luckjingle.com/commodity?product=D1&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lj.fichero     the &#039;official&#039; app&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.printer.lidloffice     a compatible app Karsten also made (doesnt seem to improve much)&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.dingdang.newprint     another compatible app, this time maybe by the actual manufacturer?&lt;br /&gt;
&lt;br /&gt;
* https://github.com/0xMH/fichero-printer  someone made a web-bluetooth app for the D11 printers :O (doesnt support D1 yet)&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Open_hackerspace_dag_2026&amp;diff=15787</id>
		<title>Open hackerspace dag 2026</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Open_hackerspace_dag_2026&amp;diff=15787"/>
		<updated>2026-03-08T02:19:57Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Posters */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Event&lt;br /&gt;
|Name=Open Hackerspace dag&lt;br /&gt;
|Date=2026/03/28&lt;br /&gt;
|DateEnd=2026/03/28&lt;br /&gt;
|Location=NURDspace&lt;br /&gt;
|Contact=info@nurdspace.nl&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
Nou mensen, de laatste zaterdag van maart 2026 zal er weer een &amp;quot;open hackerspace dag&amp;quot; zijn.&lt;br /&gt;
Laten we deze tot een succes maken, whatever succes is in deze context.&lt;br /&gt;
Het zou leuk zijn als mensen iets willen demo&#039;en, e.o.a. project ofzo.&lt;br /&gt;
Reclamen er voor maken zou wellicht ook wel een leuk idee zijn, zodat we &amp;gt;0 bezoeker(s) krijgen&lt;br /&gt;
&lt;br /&gt;
* folkert: schaakprogramma op een ESP32 of een PDP-11/70 emulator op een ESP32 of misschien iets met die ledboxen, eurorack dingen? maar dan met zelfgebouwde modules&lt;br /&gt;
* Melan: Wellicht een of andere AI demo, adsb op een scherm, powerbook g4/thinkpad t41 &amp;amp; sony vaio p showcase&lt;br /&gt;
* peterr: Primo (cmos poorten robot), Secundo [https://nurdspace.nl/Leaphy_Robot Leaphy robot], een HERO [https://en.wikipedia.org/wiki/HERO_(robot)], en meer.&lt;br /&gt;
* SPARCie: De HARK-OpenVMS cluster (als ze tijd kan vinden om het op tijd af te maken :3) (één van die 3 virtuale VAXen op mijn fysieke VT510 of de VT420 van de space?)&lt;br /&gt;
* Tathkev: Wellicht Full color Telegram sticker printer&lt;br /&gt;
* jij? ...&lt;br /&gt;
&lt;br /&gt;
== Posters ==&lt;br /&gt;
&lt;br /&gt;
=== AI slop ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;gallery&amp;gt;&lt;br /&gt;
Ohsd2026-poster-idee-gemini1.png&lt;br /&gt;
ChatGPTopendagfolkert.png&lt;br /&gt;
Copilotopendagfolkert.png&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== Artisanal ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;gallery&amp;gt;&lt;br /&gt;
Nurdspace-poster.png&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Open_hackerspace_dag_2026&amp;diff=15781</id>
		<title>Open hackerspace dag 2026</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Open_hackerspace_dag_2026&amp;diff=15781"/>
		<updated>2026-03-07T17:59:55Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Event&lt;br /&gt;
|Name=Open Hackerspace dag&lt;br /&gt;
|Date=2026/03/28&lt;br /&gt;
|DateEnd=2026/03/28&lt;br /&gt;
|Location=NURDspace&lt;br /&gt;
|Contact=info@nurdspace.nl&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
Nou mensen, de laatste zaterdag van maart 2026 zal er weer een &amp;quot;open hackerspace dag&amp;quot; zijn.&lt;br /&gt;
Laten we deze tot een succes maken, whatever succes is in deze context.&lt;br /&gt;
Het zou leuk zijn als mensen iets willen demo&#039;en, e.o.a. project ofzo.&lt;br /&gt;
Reclamen er voor maken zou wellicht ook wel een leuk idee zijn, zodat we &amp;gt;0 bezoeker(s) krijgen&lt;br /&gt;
&lt;br /&gt;
* folkert: schaakprogramma op een ESP32 of een PDP-11/70 emulator op een ESP32 of misschien iets met die ledboxen, eurorack dingen? maar dan met zelfgebouwde modules&lt;br /&gt;
* Melan: Wellicht een of andere AI demo, adsb op een scherm, powerbook g4/thinkpad t41 &amp;amp; sony vaio p showcase&lt;br /&gt;
* peterr: Primo (cmos poorten robot), Secundo [https://nurdspace.nl/Leaphy_Robot Leaphy robot], een HERO [https://en.wikipedia.org/wiki/HERO_(robot)], en meer.&lt;br /&gt;
* SPARCie: De HARK-OpenVMS cluster (als ze tijd kan vinden om het op tijd af te maken :3) (één van die 3 virtuale VAXen op mijn fysieke VT510 of de VT420 van de space?)&lt;br /&gt;
* Tathkev: Wellicht Full color Telegram sticker printer&lt;br /&gt;
* jij? ...&lt;br /&gt;
&lt;br /&gt;
== Posters ==&lt;br /&gt;
&lt;br /&gt;
=== AI slop ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;gallery&amp;gt;&lt;br /&gt;
Ohsd2026-poster-idee-gemini1.png&lt;br /&gt;
ChatGPTopendagfolkert.png&lt;br /&gt;
Copilotopendagfolkert.png&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== Artisanal ===&lt;br /&gt;
&lt;br /&gt;
&amp;lt;gallery&amp;gt;&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Open_hackerspace_dag_2026&amp;diff=15770</id>
		<title>Open hackerspace dag 2026</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Open_hackerspace_dag_2026&amp;diff=15770"/>
		<updated>2026-03-05T12:22:20Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Event&lt;br /&gt;
|Name=Open Hackerspace dag&lt;br /&gt;
|Date=2026/03/28&lt;br /&gt;
|DateEnd=2026/03/28&lt;br /&gt;
|Location=NURDspace&lt;br /&gt;
|Contact=folkert, ...&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
Nou mensen, de laatste zaterdag van maart 2026 zal er weer een &amp;quot;open hackerspace dag&amp;quot; zijn.&lt;br /&gt;
Laten we deze tot een succes maken, whatever succes is in deze context.&lt;br /&gt;
Het zou leuk zijn als mensen iets willen demo&#039;en, e.o.a. project ofzo.&lt;br /&gt;
Reclamen er voor maken zou wellicht ook wel een leuk idee zijn, zodat we &amp;gt;0 bezoeker(s) krijgen&lt;br /&gt;
&lt;br /&gt;
* folkert: schaakprogramma op een ESP32 of een PDP-11/70 emulator op een ESP32&lt;br /&gt;
* Melan: Wellicht een of andere AI demo, adsb op een scherm, powerbook g4/thinkpad t41 &amp;amp; sony vaio p showcase&lt;br /&gt;
* peterr: Primo (cmos poorten robot), Secundo [https://nurdspace.nl/Leaphy_Robot Leaphy robot], een HERO [https://en.wikipedia.org/wiki/HERO_(robot)], en meer.&lt;br /&gt;
* SPARCie: De HARK-OpenVMS cluster (als ze tijd kan vinden om het op tijd af te maken :3) (één van die 3 virtuale VAXen op mijn fysieke VT510 of de VT420 van de space?)&lt;br /&gt;
* Tathkev: Wellicht Full color Telegram sticker printer&lt;br /&gt;
* jij? ...&lt;br /&gt;
&lt;br /&gt;
&amp;lt;gallery&amp;gt;&lt;br /&gt;
Ohsd2026-poster-idee-gemini1.png&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Ohsd2026-poster-idee-gemini1.png&amp;diff=15769</id>
		<title>File:Ohsd2026-poster-idee-gemini1.png</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Ohsd2026-poster-idee-gemini1.png&amp;diff=15769"/>
		<updated>2026-03-05T12:21:54Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=NURD%27em_2026&amp;diff=15768</id>
		<title>NURD&#039;em 2026</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=NURD%27em_2026&amp;diff=15768"/>
		<updated>2026-03-04T16:10:57Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Event&lt;br /&gt;
|Name=NURD&#039;em 2026&lt;br /&gt;
|Date=2026/09/01&lt;br /&gt;
|DateEnd=2026/09/30&lt;br /&gt;
|Location=FC Wageningen&lt;br /&gt;
}}&lt;br /&gt;
This is a placeholder page, but;&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== What ==&lt;br /&gt;
Lets do a 50-100 people event (40-80 tents) at the footballstadium as Martin offered often.&lt;br /&gt;
&lt;br /&gt;
It has to be end of practiceseason so we can destroy the grass :D&lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
* buZz&lt;br /&gt;
* r3boot&lt;br /&gt;
* Fee&lt;br /&gt;
* Teun&lt;br /&gt;
* [[User:20h]]&lt;br /&gt;
* Fierman (maybe)&lt;br /&gt;
* Gwen (maybe)&lt;br /&gt;
&lt;br /&gt;
== Location ==&lt;br /&gt;
[https://www.openstreetmap.org/way/404106211 Stadion de Wageningse Berg]&lt;br /&gt;
=== Advantages ===&lt;br /&gt;
* there is a ready and proven entry/exit/overall security plan&lt;br /&gt;
* there is a company behind it to rent the stadium&lt;br /&gt;
* there is a ready-made fire evacuation plan&lt;br /&gt;
* there is toilets, showers, electricty, water, dust bins, garbage management&lt;br /&gt;
* there is a supermarket not far away&lt;br /&gt;
* in case of heavy rain we have the roofs over the guest podiums&lt;br /&gt;
** mud bathing will be fun&lt;br /&gt;
* there is four huge light towers, with electricity, which we can use for [[meshcore]]&lt;br /&gt;
** who is brave enough to climb them?&lt;br /&gt;
* nearby is a hotel for people who do not want to camp, hostel other hotels in town&lt;br /&gt;
* there is containers for organisation&lt;br /&gt;
* there is a car park for trailers too&lt;br /&gt;
* there is parking spaces for bicycles&lt;br /&gt;
&lt;br /&gt;
== Ideas ==&lt;br /&gt;
* make a hackathon to install [[meshcore]] and make it useful for the football club in the future&lt;br /&gt;
** entry control? electronics tickets?&lt;br /&gt;
** toilet quality / cleanup signal?&lt;br /&gt;
** live communication with the team? / the whole city? like local radio. result signage all over the city?&lt;br /&gt;
** other sensors with a nice graph/grafana for management?&lt;br /&gt;
** make something related to the botanical/nature/farming sensor theme of Wageningen?&lt;br /&gt;
* make a hackathon around refurbishing the stadium - the stadium should be cleaner and newer after we left&lt;br /&gt;
** fits to the surrounding of the stadium&lt;br /&gt;
** technology meets sports?&lt;br /&gt;
** LEDs, lights, signs, upcycling of signage?&lt;br /&gt;
* make a [[hark]]athon, where we take care of the grass on the stadium field&lt;br /&gt;
&lt;br /&gt;
* programtrack names?   /dev/iance0 ....&lt;br /&gt;
&lt;br /&gt;
== Media ==&lt;br /&gt;
&amp;lt;gallery&amp;gt;&lt;br /&gt;
Nurdem-gamebox-gemini.jpg&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=EMF_camp_2026&amp;diff=15755</id>
		<title>EMF camp 2026</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=EMF_camp_2026&amp;diff=15755"/>
		<updated>2026-03-03T12:16:49Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Created page with &amp;quot;{{Event |Name=EMF camp 2026 |Date=2026/07/16 |DateEnd=2026/07/19 |Location=Eastnor Castle Deer Park, Eastnor. }} * https://www.emfcamp.org/&amp;quot;&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Event&lt;br /&gt;
|Name=EMF camp 2026&lt;br /&gt;
|Date=2026/07/16&lt;br /&gt;
|DateEnd=2026/07/19&lt;br /&gt;
|Location=Eastnor Castle Deer Park, Eastnor.&lt;br /&gt;
}}&lt;br /&gt;
* https://www.emfcamp.org/&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Main_Page&amp;diff=15753</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Main_Page&amp;diff=15753"/>
		<updated>2026-03-03T05:20:11Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;__NOTOC__&lt;br /&gt;
{{DISPLAYTITLE:&amp;lt;span style=&amp;quot;display:none&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;}}= NURDspace =&lt;br /&gt;
&amp;lt;div style=&amp;quot;clear:both&amp;quot; &amp;gt;&lt;br /&gt;
&amp;lt;div style=&amp;quot;width:42%;float:right&amp;quot;&amp;gt;&lt;br /&gt;
== OPEN NIGHT ==&lt;br /&gt;
Usually open EVERY WEDNESDAY 18:00 - 0:00 at Vergersweg 22-24 in Wageningen.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;include src=&amp;quot;https://public.nurd.space/buzz_index.php&amp;quot; noesc nopre /&amp;gt;&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&amp;lt;div style=&amp;quot;width:50%;float:left&amp;quot;&amp;gt;&lt;br /&gt;
== Next events ==&lt;br /&gt;
{{#ask:  [[Category:Events]] [[Date::&amp;gt; {{CURRENTMONTHNAME}} {{CURRENTDAY}} {{CURRENTYEAR}}]] OR [[DateEnd::&amp;gt; {{CURRENTMONTHNAME}} {{CURRENTDAY}} {{CURRENTYEAR}}]]&lt;br /&gt;
|?Date&lt;br /&gt;
|?DateEnd&lt;br /&gt;
|order=ASC|sort=Date|searchlabel=|limit=8}}&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&amp;lt;div style=&amp;quot;clear:both&amp;quot;&amp;gt;&amp;lt;/div&amp;gt;&lt;br /&gt;
&amp;lt;div&amp;gt;&lt;br /&gt;
&lt;br /&gt;
[[Image:Nurdspace-frontside-streetview-aug2018.png|480px|right]]&lt;br /&gt;
&lt;br /&gt;
== You can find us at: ==&lt;br /&gt;
* Address: Vergersweg 22-24, 6707 HT Wageningen, the Netherlands&lt;br /&gt;
** [[Find Us| Directions to the space]]&lt;br /&gt;
** GPS coordinates: [https://www.openstreetmap.org/node/3014125291 51.973273, 5.669681]&lt;br /&gt;
* Phone: [tel:+31317794512 +31 317-794512]&lt;br /&gt;
&lt;br /&gt;
== You can find us on: ==&lt;br /&gt;
* IRC: [ircs://irc.oftc.net/#nurds irc.oftc.net #nurds] [https://webchat.oftc.net/?channels=nurds web client] and [https://nurdspace.nl/XMPP XMPP]&lt;br /&gt;
* Fediverse: https://hsnl.social/@nurdspace&lt;br /&gt;
* Mailinglist: https://lists.as65342.net/mailman/listinfo/nurds&lt;br /&gt;
* See https://nurdspace.nl/Communicatie for all our other chat channels!&lt;br /&gt;
* Merchandise: https://nurdspace.myspreadshop.net/&lt;br /&gt;
* Statistics of when people are in the space: [https://mapall.space/heatmap/show.php?id=NURDSpace mapall.space]&lt;br /&gt;
* Questions? Send an e-mail to: [mailto:info@nurdspace.nl info@nurdspace.nl]&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&amp;lt;div&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== What is NURDspace? ==&lt;br /&gt;
&lt;br /&gt;
NURDspace is a [[harkerspace]]. It first opened its door in February 2012 in [http://en.wikipedia.org/wiki/Wageningen Wageningen].  Everyone is welcome to [[Members|join]]! &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;A hackerspace is a community-operated physical place, where people can meet and work on projects. Or, according to Wikipedia: A location where people with common interests, usually in computers, technology, science, or digital or electronic art can meet, socialize and/or collaborate. Hackerspaces can be viewed as open community labs incorporating elements of machine shops, workshops and/or studios where hackers can come together to share resources and knowledge to build and make things.&#039;&#039;&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Please keep to the [[Rules and guidelines]].&lt;br /&gt;
&lt;br /&gt;
== What is the meaning of &#039;NURDs&#039;? ==&lt;br /&gt;
&lt;br /&gt;
* answer: Never Underestimate Real Development spaces&lt;br /&gt;
&lt;br /&gt;
== A fly-through ==&lt;br /&gt;
&lt;br /&gt;
{{#ev:youtube|urt3EG4QhKM|640|center|NURDspaceLoops}}&lt;br /&gt;
&lt;br /&gt;
== Some of our projects ==&lt;br /&gt;
{{ImageIncludeProject}}&lt;br /&gt;
&amp;lt;div style=&amp;quot;clear:both&amp;quot;&amp;gt;&amp;lt;/div&amp;gt;&lt;br /&gt;
  &lt;br /&gt;
&lt;br /&gt;
This wiki has; {{NUMBEROFPAGES}} pages, {{NUMBEROFEDITS}} edits and had lots of views.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;include src=&amp;quot;https://public.nurd.space/~zarya/power/wiki_power.php&amp;quot; noesc nopre /&amp;gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Main_Page&amp;diff=15752</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Main_Page&amp;diff=15752"/>
		<updated>2026-03-03T05:18:42Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* You can find us at: */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;__NOTOC__&lt;br /&gt;
{{DISPLAYTITLE:&amp;lt;span style=&amp;quot;display:none&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;}}= NURDspace =&lt;br /&gt;
&amp;lt;div style=&amp;quot;clear:both&amp;quot; &amp;gt;&lt;br /&gt;
&amp;lt;div style=&amp;quot;width:42%;float:right&amp;quot;&amp;gt;&lt;br /&gt;
== OPEN NIGHT ==&lt;br /&gt;
Usually open EVERY WEDNESDAY 18:00 - 0:00 at Vergersweg 22-24 in Wageningen.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;include src=&amp;quot;https://public.nurd.space/buzz_index.php&amp;quot; noesc nopre /&amp;gt;&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&amp;lt;div style=&amp;quot;width:50%;float:left&amp;quot;&amp;gt;&lt;br /&gt;
== Next events ==&lt;br /&gt;
{{#ask:  [[Category:Events]] [[Date::&amp;gt; {{CURRENTMONTHNAME}} {{CURRENTDAY}} {{CURRENTYEAR}}]] OR [[DateEnd::&amp;gt; {{CURRENTMONTHNAME}} {{CURRENTDAY}} {{CURRENTYEAR}}]]&lt;br /&gt;
|?Date&lt;br /&gt;
|?DateEnd&lt;br /&gt;
|order=ASC|sort=Date|searchlabel=|limit=8}}&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&amp;lt;div style=&amp;quot;clear:both&amp;quot;&amp;gt;&amp;lt;/div&amp;gt;&lt;br /&gt;
&amp;lt;div&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== You can find us at: ==&lt;br /&gt;
[[Image:Nurdspace-frontside-streetview-aug2018.png|200px|right]]&lt;br /&gt;
* Address: Vergersweg 22-24, 6707 HT Wageningen, the Netherlands&lt;br /&gt;
** [[Find Us| Directions to the space]]&lt;br /&gt;
** GPS coordinates: [https://www.openstreetmap.org/node/3014125291 51.973273, 5.669681]&lt;br /&gt;
* Phone: [tel:+31317794512 +31 317-794512]&lt;br /&gt;
&lt;br /&gt;
== You can find us on: ==&lt;br /&gt;
* IRC: [ircs://irc.oftc.net/#nurds irc.oftc.net #nurds] [https://webchat.oftc.net/?channels=nurds web client] and [https://nurdspace.nl/XMPP XMPP]&lt;br /&gt;
* Fediverse: https://hsnl.social/@nurdspace&lt;br /&gt;
* Mailinglist: https://lists.as65342.net/mailman/listinfo/nurds&lt;br /&gt;
* See https://nurdspace.nl/Communicatie for all our other chat channels!&lt;br /&gt;
* Merchandise: https://nurdspace.myspreadshop.net/&lt;br /&gt;
* Statistics of when people are in the space: [https://mapall.space/heatmap/show.php?id=NURDSpace mapall.space]&lt;br /&gt;
* Questions? Send an e-mail to: [mailto:info@nurdspace.nl info@nurdspace.nl]&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&amp;lt;div&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== What is NURDspace? ==&lt;br /&gt;
&lt;br /&gt;
NURDspace is a [[harkerspace]]. It first opened its door in February 2012 in [http://en.wikipedia.org/wiki/Wageningen Wageningen].  Everyone is welcome to [[Members|join]]! &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;A hackerspace is a community-operated physical place, where people can meet and work on projects. Or, according to Wikipedia: A location where people with common interests, usually in computers, technology, science, or digital or electronic art can meet, socialize and/or collaborate. Hackerspaces can be viewed as open community labs incorporating elements of machine shops, workshops and/or studios where hackers can come together to share resources and knowledge to build and make things.&#039;&#039;&lt;br /&gt;
&amp;lt;/div&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Please keep to the [[Rules and guidelines]].&lt;br /&gt;
&lt;br /&gt;
== What is the meaning of &#039;NURDs&#039;? ==&lt;br /&gt;
&lt;br /&gt;
* answer: Never Underestimate Real Development spaces&lt;br /&gt;
&lt;br /&gt;
== A fly-through ==&lt;br /&gt;
&lt;br /&gt;
{{#ev:youtube|urt3EG4QhKM|640|center|NURDspaceLoops}}&lt;br /&gt;
&lt;br /&gt;
== Some of our projects ==&lt;br /&gt;
{{ImageIncludeProject}}&lt;br /&gt;
&amp;lt;div style=&amp;quot;clear:both&amp;quot;&amp;gt;&amp;lt;/div&amp;gt;&lt;br /&gt;
  &lt;br /&gt;
&lt;br /&gt;
This wiki has; {{NUMBEROFPAGES}} pages, {{NUMBEROFEDITS}} edits and had lots of views.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;include src=&amp;quot;https://public.nurd.space/~zarya/power/wiki_power.php&amp;quot; noesc nopre /&amp;gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15726</id>
		<title>Action BT Printertjes</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15726"/>
		<updated>2026-02-24T18:47:40Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Action BT Printertjes&lt;br /&gt;
|Skills=2D printing&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Printing&lt;br /&gt;
|Picture=Action-miniprinter.jpg&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
At the Action they sell/sold these tiny thermal BT printers for under 20 euros.&lt;br /&gt;
&lt;br /&gt;
This project is an attempt to collect knowledge about it. &lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
&lt;br /&gt;
It&#039;s made by &#039;Karsten&#039; seemingly, who import them from china for several customers and have some android apps for their line of printers.&lt;br /&gt;
&lt;br /&gt;
The actual manufacturer seems to be https://www.luckjingle.com/commodity?product=D1&lt;br /&gt;
&lt;br /&gt;
== Hackery? ==&lt;br /&gt;
[[File:Actionprinter-ownfont.jpg|thumb|right]]&lt;br /&gt;
On connecting the powered on printer to a USB port of a machine, you gain a /dev/usb/lp* (or similar). This will allow you to print &#039;directly&#039; to it.&lt;br /&gt;
&lt;br /&gt;
 echo -e &amp;quot;HARK&amp;quot; &amp;gt; /dev/usb/lp*  # prints one line in some built-in font of the printer, maximum is 32 characters per line, wraps around&lt;br /&gt;
 &lt;br /&gt;
 echo -e &amp;quot;\r&amp;quot; &amp;gt; /dev/usb/lp*    # feeds one line of paper&lt;br /&gt;
 echo -e &amp;quot;\n&amp;quot; &amp;gt; /dev/usb/lp*    # feeds two/three lines of paper&lt;br /&gt;
&lt;br /&gt;
Maybe this could allow the protocol as described in the blogpost under &#039;&#039;&#039;Links&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Ooooooo ==&lt;br /&gt;
&lt;br /&gt;
[[File:Actionprinter-longprint.jpg|480px]]&lt;br /&gt;
&lt;br /&gt;
== Links ==&lt;br /&gt;
&lt;br /&gt;
* https://atctwo.net/posts/2024/07/16/thermal-printer.html&lt;br /&gt;
* https://www.luckjingle.com/commodity?product=D1&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lj.fichero     the &#039;official&#039; app&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.printer.lidloffice     a compatible app Karsten also made (doesnt seem to improve much)&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.dingdang.newprint     another compatible app, this time maybe by the actual manufacturer?&lt;br /&gt;
&lt;br /&gt;
* https://github.com/0xMH/fichero-printer  someone made a web-bluetooth app for the D11 printers :O (doesnt support D1 yet)&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15713</id>
		<title>Action BT Printertjes</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15713"/>
		<updated>2026-02-19T12:43:14Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Action BT Printertjes&lt;br /&gt;
|Skills=2D printing&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Printing&lt;br /&gt;
|Picture=Action-miniprinter.jpg&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
At the Action they sell/sold these tiny thermal BT printers for under 20 euros.&lt;br /&gt;
&lt;br /&gt;
This project is an attempt to collect knowledge about it. &lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
&lt;br /&gt;
It&#039;s made by &#039;Karsten&#039; seemingly, who import them from china for several customers and have some android apps for their line of printers.&lt;br /&gt;
&lt;br /&gt;
The actual manufacturer seems to be https://www.luckjingle.com/commodity?product=D1&lt;br /&gt;
&lt;br /&gt;
== Hackery? ==&lt;br /&gt;
[[File:Actionprinter-ownfont.jpg|thumb|right]]&lt;br /&gt;
On connecting the powered on printer to a USB port of a machine, you gain a /dev/usb/lp* (or similar). This will allow you to print &#039;directly&#039; to it.&lt;br /&gt;
&lt;br /&gt;
 echo -e &amp;quot;HARK&amp;quot; &amp;gt; /dev/usb/lp*  # prints one line in some built-in font of the printer, maximum is 32 characters per line, wraps around&lt;br /&gt;
 &lt;br /&gt;
 echo -e &amp;quot;\r&amp;quot; &amp;gt; /dev/usb/lp*    # feeds one line of paper&lt;br /&gt;
 echo -e &amp;quot;\n&amp;quot; &amp;gt; /dev/usb/lp*    # feeds two/three lines of paper&lt;br /&gt;
&lt;br /&gt;
Maybe this could allow the protocol as described in the blogpost under &#039;&#039;&#039;Links&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Ooooooo ==&lt;br /&gt;
&lt;br /&gt;
[[File:Actionprinter-longprint.jpg|480px]]&lt;br /&gt;
&lt;br /&gt;
== Links ==&lt;br /&gt;
&lt;br /&gt;
* https://atctwo.net/posts/2024/07/16/thermal-printer.html&lt;br /&gt;
* https://www.luckjingle.com/commodity?product=D1&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lj.fichero     the &#039;official&#039; app&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.printer.lidloffice     a compatible app Karsten also made (doesnt seem to improve much)&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.dingdang.newprint     another compatible app, this time maybe by the actual manufacturer?&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Actionprinter-longprint.jpg&amp;diff=15712</id>
		<title>File:Actionprinter-longprint.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Actionprinter-longprint.jpg&amp;diff=15712"/>
		<updated>2026-02-19T12:42:32Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=NewLine_Gent_2026&amp;diff=15707</id>
		<title>NewLine Gent 2026</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=NewLine_Gent_2026&amp;diff=15707"/>
		<updated>2026-02-18T14:20:51Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Created page with &amp;quot;{{Event |Name=NewLine Gent 2026 |Date=2026/05/29 |DateEnd=2026/05/31 |Location=Gent }} * https://newline.gent/&amp;quot;&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Event&lt;br /&gt;
|Name=NewLine Gent 2026&lt;br /&gt;
|Date=2026/05/29&lt;br /&gt;
|DateEnd=2026/05/31&lt;br /&gt;
|Location=Gent&lt;br /&gt;
}}&lt;br /&gt;
* https://newline.gent/&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=BoomToothBoxer&amp;diff=15700</id>
		<title>BoomToothBoxer</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=BoomToothBoxer&amp;diff=15700"/>
		<updated>2026-02-16T22:22:58Z</updated>

		<summary type="html">&lt;p&gt;Buzz: Created page with &amp;quot;{{Project |Name=BoomToothBoxer |Status=Planning |Niche=Music |Purpose=Infra |Tool=No }} == What ==    Someone gifted me (buZz) some old carspeakers of a honkytonk brand ( the MEGAVOX MGX-422 to be exact ).    The idea is combining this with a DC powered amplifier with BT reception, hence the name.    == Speaker Measurements ==    Yeah ok, this project is basically just to store these measurements somewhere.     9.8cm speaker radius   11.7cm(?) screwhole to screwhole diag...&amp;quot;&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=BoomToothBoxer&lt;br /&gt;
|Status=Planning&lt;br /&gt;
|Niche=Music&lt;br /&gt;
|Purpose=Infra&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
Someone gifted me (buZz) some old carspeakers of a honkytonk brand ( the MEGAVOX MGX-422 to be exact ).&lt;br /&gt;
&lt;br /&gt;
The idea is combining this with a DC powered amplifier with BT reception, hence the name.&lt;br /&gt;
&lt;br /&gt;
== Speaker Measurements ==&lt;br /&gt;
&lt;br /&gt;
Yeah ok, this project is basically just to store these measurements somewhere.&lt;br /&gt;
&lt;br /&gt;
 9.8cm speaker radius&lt;br /&gt;
 11.7cm(?) screwhole to screwhole diagonally&lt;br /&gt;
 13cm outside to outside on screwposts&lt;br /&gt;
 4 screwholes at 90 degrees&lt;br /&gt;
 extends 1cm forward, about 5.5cm back&lt;br /&gt;
&lt;br /&gt;
== Other stuff ==&lt;br /&gt;
&lt;br /&gt;
The amplifier i&#039;m targetting is some TPA3116 based thingy. It performs best at &amp;gt;12V input , so probably i will need some boost convertor later.&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15699</id>
		<title>Action BT Printertjes</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15699"/>
		<updated>2026-02-16T16:51:07Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Links */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Action BT Printertjes&lt;br /&gt;
|Skills=2D printing&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Printing&lt;br /&gt;
|Picture=Action-miniprinter.jpg&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
At the Action they sell/sold these tiny thermal BT printers for under 20 euros.&lt;br /&gt;
&lt;br /&gt;
This project is an attempt to collect knowledge about it. &lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
&lt;br /&gt;
It&#039;s made by &#039;Karsten&#039; seemingly, who import them from china for several customers and have some android apps for their line of printers.&lt;br /&gt;
&lt;br /&gt;
The actual manufacturer seems to be https://www.luckjingle.com/commodity?product=D1&lt;br /&gt;
&lt;br /&gt;
== Hackery? ==&lt;br /&gt;
[[File:Actionprinter-ownfont.jpg|thumb|right]]&lt;br /&gt;
On connecting the powered on printer to a USB port of a machine, you gain a /dev/usb/lp* (or similar). This will allow you to print &#039;directly&#039; to it.&lt;br /&gt;
&lt;br /&gt;
 echo -e &amp;quot;HARK&amp;quot; &amp;gt; /dev/usb/lp*  # prints one line in some built-in font of the printer, maximum is 32 characters per line, wraps around&lt;br /&gt;
 &lt;br /&gt;
 echo -e &amp;quot;\r&amp;quot; &amp;gt; /dev/usb/lp*    # feeds one line of paper&lt;br /&gt;
 echo -e &amp;quot;\n&amp;quot; &amp;gt; /dev/usb/lp*    # feeds two/three lines of paper&lt;br /&gt;
&lt;br /&gt;
Maybe this could allow the protocol as described in the blogpost under &#039;&#039;&#039;Links&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Links ==&lt;br /&gt;
&lt;br /&gt;
* https://atctwo.net/posts/2024/07/16/thermal-printer.html&lt;br /&gt;
* https://www.luckjingle.com/commodity?product=D1&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lj.fichero     the &#039;official&#039; app&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.printer.lidloffice     a compatible app Karsten also made (doesnt seem to improve much)&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.dingdang.newprint     another compatible app, this time maybe by the actual manufacturer?&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15698</id>
		<title>Action BT Printertjes</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15698"/>
		<updated>2026-02-16T16:49:58Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Links */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Action BT Printertjes&lt;br /&gt;
|Skills=2D printing&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Printing&lt;br /&gt;
|Picture=Action-miniprinter.jpg&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
At the Action they sell/sold these tiny thermal BT printers for under 20 euros.&lt;br /&gt;
&lt;br /&gt;
This project is an attempt to collect knowledge about it. &lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
&lt;br /&gt;
It&#039;s made by &#039;Karsten&#039; seemingly, who import them from china for several customers and have some android apps for their line of printers.&lt;br /&gt;
&lt;br /&gt;
The actual manufacturer seems to be https://www.luckjingle.com/commodity?product=D1&lt;br /&gt;
&lt;br /&gt;
== Hackery? ==&lt;br /&gt;
[[File:Actionprinter-ownfont.jpg|thumb|right]]&lt;br /&gt;
On connecting the powered on printer to a USB port of a machine, you gain a /dev/usb/lp* (or similar). This will allow you to print &#039;directly&#039; to it.&lt;br /&gt;
&lt;br /&gt;
 echo -e &amp;quot;HARK&amp;quot; &amp;gt; /dev/usb/lp*  # prints one line in some built-in font of the printer, maximum is 32 characters per line, wraps around&lt;br /&gt;
 &lt;br /&gt;
 echo -e &amp;quot;\r&amp;quot; &amp;gt; /dev/usb/lp*    # feeds one line of paper&lt;br /&gt;
 echo -e &amp;quot;\n&amp;quot; &amp;gt; /dev/usb/lp*    # feeds two/three lines of paper&lt;br /&gt;
&lt;br /&gt;
Maybe this could allow the protocol as described in the blogpost under &#039;&#039;&#039;Links&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Links ==&lt;br /&gt;
&lt;br /&gt;
* https://atctwo.net/posts/2024/07/16/thermal-printer.html&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lj.fichero     the &#039;official&#039; app&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.printer.lidloffice     a compatible app Karsten also made (doesnt seem to improve much)&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.dingdang.newprint     another compatible app, this time maybe by the actual manufacturer?&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15697</id>
		<title>Action BT Printertjes</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15697"/>
		<updated>2026-02-16T16:48:17Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Action BT Printertjes&lt;br /&gt;
|Skills=2D printing&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Printing&lt;br /&gt;
|Picture=Action-miniprinter.jpg&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
At the Action they sell/sold these tiny thermal BT printers for under 20 euros.&lt;br /&gt;
&lt;br /&gt;
This project is an attempt to collect knowledge about it. &lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
&lt;br /&gt;
It&#039;s made by &#039;Karsten&#039; seemingly, who import them from china for several customers and have some android apps for their line of printers.&lt;br /&gt;
&lt;br /&gt;
The actual manufacturer seems to be https://www.luckjingle.com/commodity?product=D1&lt;br /&gt;
&lt;br /&gt;
== Hackery? ==&lt;br /&gt;
[[File:Actionprinter-ownfont.jpg|thumb|right]]&lt;br /&gt;
On connecting the powered on printer to a USB port of a machine, you gain a /dev/usb/lp* (or similar). This will allow you to print &#039;directly&#039; to it.&lt;br /&gt;
&lt;br /&gt;
 echo -e &amp;quot;HARK&amp;quot; &amp;gt; /dev/usb/lp*  # prints one line in some built-in font of the printer, maximum is 32 characters per line, wraps around&lt;br /&gt;
 &lt;br /&gt;
 echo -e &amp;quot;\r&amp;quot; &amp;gt; /dev/usb/lp*    # feeds one line of paper&lt;br /&gt;
 echo -e &amp;quot;\n&amp;quot; &amp;gt; /dev/usb/lp*    # feeds two/three lines of paper&lt;br /&gt;
&lt;br /&gt;
Maybe this could allow the protocol as described in the blogpost under &#039;&#039;&#039;Links&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Links ==&lt;br /&gt;
&lt;br /&gt;
* https://atctwo.net/posts/2024/07/16/thermal-printer.html&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lj.fichero     the &#039;official&#039; app&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.printer.lidloffice     a compatible app Karsten also made (doesnt seem to improve much)&lt;br /&gt;
&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.dingdang.newprint     another compatible app, this time maybe by the actual manufacturer?&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lujiang.luislink      and another by them! also supporting massagesticks?&lt;br /&gt;
*&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15696</id>
		<title>Action BT Printertjes</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15696"/>
		<updated>2026-02-16T16:15:40Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Links */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Action BT Printertjes&lt;br /&gt;
|Skills=2D printing&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Printing&lt;br /&gt;
|Picture=Action-miniprinter.jpg&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
At the Action they sell/sold these tiny thermal BT printers for under 20 euros.&lt;br /&gt;
&lt;br /&gt;
This project is an attempt to collect knowledge about it. &lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
&lt;br /&gt;
It&#039;s made by &#039;Karsten&#039; seemingly, who import them from china for several customers and have some android apps for their line of printers.&lt;br /&gt;
&lt;br /&gt;
== Hackery? ==&lt;br /&gt;
[[File:Actionprinter-ownfont.jpg|thumb|right]]&lt;br /&gt;
On connecting the powered on printer to a USB port of a machine, you gain a /dev/usb/lp* (or similar). This will allow you to print &#039;directly&#039; to it.&lt;br /&gt;
&lt;br /&gt;
 echo -e &amp;quot;HARK&amp;quot; &amp;gt; /dev/usb/lp*  # prints one line in some built-in font of the printer, maximum is 32 characters per line, wraps around&lt;br /&gt;
 &lt;br /&gt;
 echo -e &amp;quot;\r&amp;quot; &amp;gt; /dev/usb/lp*    # feeds one line of paper&lt;br /&gt;
 echo -e &amp;quot;\n&amp;quot; &amp;gt; /dev/usb/lp*    # feeds two/three lines of paper&lt;br /&gt;
&lt;br /&gt;
Maybe this could allow the protocol as described in the blogpost under &#039;&#039;&#039;Links&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Links ==&lt;br /&gt;
&lt;br /&gt;
* https://atctwo.net/posts/2024/07/16/thermal-printer.html&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lj.fichero     the &#039;official&#039; app&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.printer.lidloffice     a compatible app Karsten also made (doesnt seem to improve much)&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.dingdang.newprint     another compatible app, this time maybe by the actual manufacturer?&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15695</id>
		<title>Action BT Printertjes</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15695"/>
		<updated>2026-02-15T21:51:23Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Hackery? */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Action BT Printertjes&lt;br /&gt;
|Skills=2D printing&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Printing&lt;br /&gt;
|Picture=Action-miniprinter.jpg&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
At the Action they sell/sold these tiny thermal BT printers for under 20 euros.&lt;br /&gt;
&lt;br /&gt;
This project is an attempt to collect knowledge about it. &lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
&lt;br /&gt;
It&#039;s made by &#039;Karsten&#039; seemingly, who import them from china for several customers and have some android apps for their line of printers.&lt;br /&gt;
&lt;br /&gt;
== Hackery? ==&lt;br /&gt;
[[File:Actionprinter-ownfont.jpg|thumb|right]]&lt;br /&gt;
On connecting the powered on printer to a USB port of a machine, you gain a /dev/usb/lp* (or similar). This will allow you to print &#039;directly&#039; to it.&lt;br /&gt;
&lt;br /&gt;
 echo -e &amp;quot;HARK&amp;quot; &amp;gt; /dev/usb/lp*  # prints one line in some built-in font of the printer, maximum is 32 characters per line, wraps around&lt;br /&gt;
 &lt;br /&gt;
 echo -e &amp;quot;\r&amp;quot; &amp;gt; /dev/usb/lp*    # feeds one line of paper&lt;br /&gt;
 echo -e &amp;quot;\n&amp;quot; &amp;gt; /dev/usb/lp*    # feeds two/three lines of paper&lt;br /&gt;
&lt;br /&gt;
Maybe this could allow the protocol as described in the blogpost under &#039;&#039;&#039;Links&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Links ==&lt;br /&gt;
&lt;br /&gt;
* https://atctwo.net/posts/2024/07/16/thermal-printer.html&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lj.fichero     the &#039;official&#039; app&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.printer.lidloffice     a compatible app Karsten also made (doesnt seem to improve much)&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15694</id>
		<title>Action BT Printertjes</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15694"/>
		<updated>2026-02-15T21:36:00Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Links */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Action BT Printertjes&lt;br /&gt;
|Skills=2D printing&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Printing&lt;br /&gt;
|Picture=Action-miniprinter.jpg&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
At the Action they sell/sold these tiny thermal BT printers for under 20 euros.&lt;br /&gt;
&lt;br /&gt;
This project is an attempt to collect knowledge about it. &lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
&lt;br /&gt;
It&#039;s made by &#039;Karsten&#039; seemingly, who import them from china for several customers and have some android apps for their line of printers.&lt;br /&gt;
&lt;br /&gt;
== Hackery? ==&lt;br /&gt;
[[File:Actionprinter-ownfont.jpg|thumb|right]]&lt;br /&gt;
On connecting the powered on printer to a USB port of a machine, you gain a /dev/usb/lp* (or similar). This will allow you to print &#039;directly&#039; to it.&lt;br /&gt;
&lt;br /&gt;
 echo -e &amp;quot;HARK&amp;quot; &amp;gt; /dev/usb/lp*  # prints one line in some built-in font of the printer&lt;br /&gt;
 &lt;br /&gt;
 echo -e &amp;quot;\r&amp;quot; &amp;gt; /dev/usb/lp*    # feeds one line of paper&lt;br /&gt;
 echo -e &amp;quot;\n&amp;quot; &amp;gt; /dev/usb/lp*    # feeds two/three lines of paper&lt;br /&gt;
&lt;br /&gt;
Maybe this could allow the protocol as described in the blogpost under &#039;&#039;&#039;Links&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Links ==&lt;br /&gt;
&lt;br /&gt;
* https://atctwo.net/posts/2024/07/16/thermal-printer.html&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lj.fichero     the &#039;official&#039; app&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.printer.lidloffice     a compatible app Karsten also made (doesnt seem to improve much)&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15693</id>
		<title>Action BT Printertjes</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=Action_BT_Printertjes&amp;diff=15693"/>
		<updated>2026-02-15T21:34:53Z</updated>

		<summary type="html">&lt;p&gt;Buzz: /* Hackery? */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{{Project&lt;br /&gt;
|Name=Action BT Printertjes&lt;br /&gt;
|Skills=2D printing&lt;br /&gt;
|Status=Active&lt;br /&gt;
|Niche=Printing&lt;br /&gt;
|Picture=Action-miniprinter.jpg&lt;br /&gt;
|Tool=No&lt;br /&gt;
}}&lt;br /&gt;
== What ==&lt;br /&gt;
&lt;br /&gt;
At the Action they sell/sold these tiny thermal BT printers for under 20 euros.&lt;br /&gt;
&lt;br /&gt;
This project is an attempt to collect knowledge about it. &lt;br /&gt;
&lt;br /&gt;
== Who ==&lt;br /&gt;
&lt;br /&gt;
It&#039;s made by &#039;Karsten&#039; seemingly, who import them from china for several customers and have some android apps for their line of printers.&lt;br /&gt;
&lt;br /&gt;
== Hackery? ==&lt;br /&gt;
[[File:Actionprinter-ownfont.jpg|thumb|right]]&lt;br /&gt;
On connecting the powered on printer to a USB port of a machine, you gain a /dev/usb/lp* (or similar). This will allow you to print &#039;directly&#039; to it.&lt;br /&gt;
&lt;br /&gt;
 echo -e &amp;quot;HARK&amp;quot; &amp;gt; /dev/usb/lp*  # prints one line in some built-in font of the printer&lt;br /&gt;
 &lt;br /&gt;
 echo -e &amp;quot;\r&amp;quot; &amp;gt; /dev/usb/lp*    # feeds one line of paper&lt;br /&gt;
 echo -e &amp;quot;\n&amp;quot; &amp;gt; /dev/usb/lp*    # feeds two/three lines of paper&lt;br /&gt;
&lt;br /&gt;
Maybe this could allow the protocol as described in the blogpost under &#039;&#039;&#039;Links&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
== Links ==&lt;br /&gt;
&lt;br /&gt;
* https://atctwo.net/posts/2024/07/16/thermal-printer.html&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.lj.fichero     the &#039;official&#039; app&lt;br /&gt;
* https://play.google.com/store/apps/details?id=com.printer.lidloffice     a compatible app they also made&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
	<entry>
		<id>https://nurdspace.nl/index.php?title=File:Actionprinter-ownfont.jpg&amp;diff=15692</id>
		<title>File:Actionprinter-ownfont.jpg</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=File:Actionprinter-ownfont.jpg&amp;diff=15692"/>
		<updated>2026-02-15T21:34:18Z</updated>

		<summary type="html">&lt;p&gt;Buzz: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Buzz</name></author>
	</entry>
</feed>