1

Topic: DaVinci Junior cartridge reset

Has anyone managed to work out how to reset the filament RFID system on the Junior's filament yet please? I would like to use my own filament but obviously cant whilst the RFID system is in place. Everything I have read so far has been about the more expensive DaVinci and doesn't eem to be applicable to the Junior.

2

Re: DaVinci Junior cartridge reset

mark.pepper wrote:

Has anyone managed to work out how to reset the filament RFID system on the Junior's filament yet please? I would like to use my own filament but obviously cant whilst the RFID system is in place. Everything I have read so far has been about the more expensive DaVinci and doesn't eem to be applicable to the Junior.

If it is RFID and not three contacts like the larger units then there is currently no option for you. I seriously doubt you will see that much support and hacking for the Jr. First it is just too small and as of right now in a limited market.

3D Printing since the Cupcake (2009) and still addicted.
CT'c Duplicator Dual upgraded with MK10 extruders and Azteeg X3 Pro with Viki2 LCD with Marlin. Prints PLA, PET+, PETG, and ABS.

3

Re: DaVinci Junior cartridge reset

mark.pepper wrote:

Has anyone managed to work out how to reset the filament RFID system on the Junior's filament yet please? I would like to use my own filament but obviously cant whilst the RFID system is in place. Everything I have read so far has been about the more expensive DaVinci and doesn't eem to be applicable to the Junior.

There are plenty of RFID readers/writers, and if it is a newer NFC chip even an Android phone can read and write to it. I think someone will figure it out very soon smile

4

Re: DaVinci Junior cartridge reset

ceke wrote:
mark.pepper wrote:

Has anyone managed to work out how to reset the filament RFID system on the Junior's filament yet please? I would like to use my own filament but obviously cant whilst the RFID system is in place. Everything I have read so far has been about the more expensive DaVinci and doesn't eem to be applicable to the Junior.

There are plenty of RFID readers/writers, and if it is a newer NFC chip even an Android phone can read and write to it. I think someone will figure it out very soon smile

Maybe but NFC does havr a one write security bit that once flipped cannot be unflipped and the device can never be written to again. So you would need a blank chip that you could write to and hopefully fake out thr CRC checksum. The fact the security bit is not flipped will make the checksum different even if the contents is identical to factory. So it will be interesting to see what they comr up with..

The fact it only prints PLA will keep me away from it. I need to print things that can be placed outside and I need durability that PLA does not offer. So I must have an fot ABS as well.

3D Printing since the Cupcake (2009) and still addicted.
CT'c Duplicator Dual upgraded with MK10 extruders and Azteeg X3 Pro with Viki2 LCD with Marlin. Prints PLA, PET+, PETG, and ABS.

5

Re: DaVinci Junior cartridge reset

More complicated then that, attached is a scan of my Jr tag.

It is an

NXP Semiconductors NTAG213F tag

lots of password protected memory.

6

Re: DaVinci Junior cartridge reset

Maybe though, the data stream from the reader could be hacked or some other mechanism for defeating the DRM could be found. Maybe a firmware version hack/change??

Don't give up yet as I heard Father Robert Ballecer at TWIT suggest that he may have a way around the DRM, on his Know How podcast.

7

Re: DaVinci Junior cartridge reset

If you have a late model android you can get the contents of the rfid tag using the NXP Tag Info app. I'll start by posting mine:
Tag is unused, not installed in printer prior to read.

** TagInfo scan (version 3.0) 2015-05-14 16:04:00 **

-- INFO ------------------------------

# IC manufacturer:
NXP Semiconductors

# IC type:
NTAG213F

-- NDEF ------------------------------

# No NFC data set available:

# NDEF Capability Container (CC):
Mapping version: 1.0
Maximum NDEF data size: 144 bytes
NDEF access: Read & Write
E1 10 12 00                                     |....            |

# Control TLVs:
Lock Control TLV at address 0x04, offset 0
* Dynamic lock bytes at address 0x28, offset 0
    - 12 lock bits
    - 8 bytes locked per lock bit
01 03 A0 0C 34                                  |....4           |

-- EXTRA ------------------------------

# Memory size:
144 bytes user memory
* 36 pages, with 4 bytes per page

# IC detailed information:
Full product name: NT2H1311F0Dxy
Capacitance: 50 pF
RF field detection

# Version information:
Vendor ID: NXP
Type: NTAG
Subtype: 50 pF, FDP
Major version: 1
Minor version: V0
Storage size: 144 bytes
Protocol: ISO/IEC 14443-3

# Originality check:
Signature verified with NXP public key


-- TECH ------------------------------

# Technologies supported:
ISO/IEC 14443-3 (Type A) compatible
ISO/IEC 14443-2 (Type A) compatible

# Android technology information:
Tag description:
* TAG: Tech [android.nfc.tech.NfcA, android.nfc.tech.MifareUltralight, android.nfc.tech.Ndef]
android.nfc.tech.Ndef
android.nfc.tech.MifareUltralight
android.nfc.tech.NfcA
* Maximum transceive length: 253 bytes
* Default maximum transceive time-out: 618 ms


# Detailed protocol information:
ID: 04:02:13:92:A2:40:81
ATQA: 0x4400
SAK: 0x00

# Memory content:
[00] *  04:02:13 9D (UID0-UID2, BCC0)
[01] *  92:A2:40:81 (UID3-UID6)
[02] .  F1 48 00 00 (BCC1, INT, LOCK0-LOCK1)
[03] .  E1:10:12:00 (OTP0-OTP3)
[04] .  01 03 A0 0C |....|
[05] .  34 03 00 FE |4...|
[06] .  00 00 00 00 |....|
[07] .  00 00 00 00 |....|
[08] .p XX XX XX XX
[09] .p XX XX XX XX
[0A] .p XX XX XX XX
[0B] .p XX XX XX XX
[0C] .p XX XX XX XX
[0D] .p XX XX XX XX
[0E] .p XX XX XX XX
[0F] .p XX XX XX XX
[10] ?p XX XX XX XX
[11] ?p XX XX XX XX
[12] ?p XX XX XX XX
[13] ?p XX XX XX XX
[14] ?p XX XX XX XX
[15] ?p XX XX XX XX
[16] ?p XX XX XX XX
[17] ?p XX XX XX XX
[18] ?p XX XX XX XX
[19] ?p XX XX XX XX
[1A] ?p XX XX XX XX
[1B] ?p XX XX XX XX
[1C] ?p XX XX XX XX
[1D] ?p XX XX XX XX
[1E] ?p XX XX XX XX
[1F] ?p XX XX XX XX
[20] ?p XX XX XX XX
[21] ?p XX XX XX XX
[22] ?p XX XX XX XX
[23] ?p XX XX XX XX
[24] ?p XX XX XX XX
[25] ?p XX XX XX XX
[26] ?p XX XX XX XX
[27] ?p XX XX XX XX
[28] ?p XX XX XX XX (LOCK2-LOCK4, CHK)
[29] ?p XX XX XX XX (CFG, MIRROR, AUTH0)
[2A] ?p XX XX -- -- (ACCESS)
[2B] +P XX XX XX XX (PWD0-PWD3)
[2C] +P XX XX -- -- (PACK0-PACK1)

  *:locked & blocked, x:locked,
  +:blocked, .:un(b)locked, ?:unknown
  r:readable (write-protected),
  p:password protected, -:write-only
  P:password protected write-only

--------------------------------------

Post's attachments

TagInfo scan- NXP Semiconductors NTAG213F tag.xml 8.06 kb, 26 downloads since 2015-05-13 

You don't have the permssions to download the attachments of this post.

8

Re: DaVinci Junior cartridge reset

Nice, I already started printing on mine but I'll scan mine and post the results when I get home tonight.

9

Re: DaVinci Junior cartridge reset

I specifically asked Fr Robert about this and he said to look into "JTAG213 Clone" I did some searching and I can't find enough out about this to know where to go with it. Maybe you all can do something with it.

10

Re: DaVinci Junior cartridge reset

yea i did too. As near as i can gather JTAG is used for debugging and flashing new firmware. My guess is that he sucked the hex file from the printer board up into his comuter, modified the firmware, and re flashed it to the printer.

Also, my phone wouldn't read the NDEF data from my NFC tag sad

11 (edited by carl_m1968 2015-05-16 03:58:34)

Re: DaVinci Junior cartridge reset

e13jimenez wrote:

yea i did too. As near as i can gather JTAG is used for debugging and flashing new firmware. My guess is that he sucked the hex file from the printer board up into his comuter, modified the firmware, and re flashed it to the printer.

Also, my phone wouldn't read the NDEF data from my NFC tag sad

JTAG would allow you to pull the firmware from the mainboard. However it would be pulled as a .bin file and without knowing what XYZ used to compile the firmware with there is no way to decompile it. If there was then they would have done the same with the other Da Vinci printers rather than converting Repetier firmware to work on them.

I also think he meant NTAG213 and his phone or device auto corrected. NTAG213 is a security feature on newer tags that will make them pretty hard to crack. Give it a google.

3D Printing since the Cupcake (2009) and still addicted.
CT'c Duplicator Dual upgraded with MK10 extruders and Azteeg X3 Pro with Viki2 LCD with Marlin. Prints PLA, PET+, PETG, and ABS.

12

Re: DaVinci Junior cartridge reset

I asked him for another hint, this is what he gave us!

Fr. Robert Ballecer, SJ
Ok... so you can't do a straight clone b/c a JTAG213 can be protected against that.

HOWEVER, if you look around, there is a little soldering trick you can use to release that protection.

13

Re: DaVinci Junior cartridge reset

here's NXP documentation on the N21X series of NFC chips 

https://dangerousthings.com/wp-content/ … 15_216.pdf

14

Re: DaVinci Junior cartridge reset

So this solder trick must refer to the connection from the NFC reader to the control board...

I just wish I could get mine to print at all with the NFC. There won't be any point cracking it if I send it back

15

Re: DaVinci Junior cartridge reset

It looks like this could be more difficult than originally anticipated. Perhaps if this has been out long enough someone will make a whole new firmware for it that doesn't integrate the NFC at all. Of course all this is dependent upon the Davinci Junior actually performing and as of right now it sounds like there are allot of people with problems.

16

Re: DaVinci Junior cartridge reset

Hints, really? How quaint....

e13jimenez wrote:

I asked him for another hint, this is what he gave us!

Fr. Robert Ballecer, SJ
Ok... so you can't do a straight clone b/c a JTAG213 can be protected against that.

HOWEVER, if you look around, there is a little soldering trick you can use to release that protection.

17

Re: DaVinci Junior cartridge reset

has anyone runout of filmanet yet? Since I got my new spool (clear yellow) in I've been rather liberal with my filament usage so that I can finish the spool that came with my printer. I've noticed a few things:

  • The new PLA I received from xyz looks and feels so much nicer

  • I was incurring occasional clicking at the extruder stepper, but with the new spool this seems to have remedied itself

  • I ran out of Filament mid-Print (I didn't think this was supposed to happen)

I changed out the NFC tags because i didn't want to bother with it, but the old tag didn't kick me off the printer. I got a warning indicating that I was low on filament but nothing stopped me from carrying forward. Has an old tag prevented anyone from printing?

18

Re: DaVinci Junior cartridge reset

You make an interesting point. I have the filament that came with the printer still and it's down to about 5m left. I will have to try and finish it up to see what happens when it's low or empty. I thought it wasn't going to let you print if you didn't have enough left on the spool for the print job.

19 (edited by HyruleJedi86 2015-06-08 01:41:09)

Re: DaVinci Junior cartridge reset

Yesterday, out of curiosity I started a print that was going to take around 7 meters using a cartridge with the NFC chip that states that there is only 3m left and it didn't stop me from starting the print. It didn't even say that the filament is low, so I cancelled it so I didn't waste the last bit of filament. I think this weekend I'm going to go ahead and empty that roll and then see if it will allow it to start a print even though it thinks it's empty. If it does then this pretty much solves all our problems until they fix it with a firmware update. Which I wouldn't do unless it made some vast improvement.



UPDATE: I let it empty the stock filament and it wouldn't let me start a new print once it determined it was empty. Now we need to figure out how to disable the security on the cards to make them writeable.

20

Re: DaVinci Junior cartridge reset

forgive me if i am being over simplistic but would it not  be easier rather than trying to crack the NFC on the spool just replace the driver board? When it comes down to it its just a series of stepper motors driving the board.

Am i missing something?

SD2 - mirror bed - e3d v6 - extruder cooling fan - no enclosure.

21 (edited by HyruleJedi86 2015-06-09 14:00:34)

Re: DaVinci Junior cartridge reset

I think that would work, isn't that similar to what was done on the other Davinci printers? They flashed new firmware eliminating the filament checker and allowed them to print from other programs besides XYZware? The only advantage to cracking the NFC over what you suggested would be for warranty purposes. If someone wanted to keep everything stock but trick the system into allowing it to use other filaments you wouldn't have to void the warranty by hacking it.

Would it be possible to buy a blank NTAG203 NFC chip and try and copy the XYZ chip to it? Or is the XYZ chip secured against copying it's information?

22

Re: DaVinci Junior cartridge reset

i would think the the warranty part would not conern someone who wanted to break the DRM in the first place? for £300 i wouldnt really worry to much about breaking it or i would just not buy the jr and get a prusa kit

SD2 - mirror bed - e3d v6 - extruder cooling fan - no enclosure.

23

Re: DaVinci Junior cartridge reset

Normally, It wouldn't but I've used the warranty as my first unit was junk, the bed was completely unlevel, the X axis was unlevel, and The extruder was extruding poorly. Fortunately, they replaced it and its is working much better but I've found that their "Nature" filament prints poorly compared to black so that could have been part of the issue with the first one.

24

Re: DaVinci Junior cartridge reset

NTAG213 is password protected not encrypted, so trying to clone it without anyother mods won't work sad that father ballacer guy alluded to being able to clone the tag but I've found no documentation on releasing read protection. I did however have an idea on the way home from work today:

if we can trigger the lock bit in the card, the printer will never be able to write the filament changes to the card!

it will either (a)let us print forever with one tag or (b)brick the card and waste the remaining filament on the spool. This test would best be done on a spool thats low. I'm sure support would ship out a free spool if they heard their tag stopped working prematurely. I've heard one such case where the issue with the printer was misdiagnosed and they shipped the guy a whole new spool.

25

Re: DaVinci Junior cartridge reset

Sounds like as good of an idea as removing security of the tag so that it can be copied to a new blank tag. Wouldn't the problem be the same though, since it's password protected you can't lock it out? It's a great place to start and a good idea hopefully we can get something figured out because this XYZ filament is stupid expensive compared to something like hatchbox.