You are not logged in. Please login or register.
SoliForum - 3D Printing Community → XYZ Printing Hacks & Mods → XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking
Still my question is still the same, do we know for sure that all 7 bytes of the UID is use calculate the 4-byte password?
Yes, all 7 bytes are used.
Updated this post according to our new findings. See the changelog in the first post.
It would be great if we could find some Da Vinci mini (w) users which can test a little bit with their tags and their printers, so that we can add more informations for them too.
I have a Da Vinci minimaker (not the wireless version) I am happy to do any testing you need, just let me know. This is the version of the software I am running, the model of the printer, the printer firmware version and the cartridge I am working with. It is a 100 meter yellow demo roll that came with the printer.
Hello, I just bought 2 new reel and I would like to know advent of the connetecte to my inprimente version 2.7.7 if it was possible to put the chips NFC has more than 200M style 300M or 500M see more lol like its once The empty reel I could use the card to the end of the other reel what made the card life last?
thank you
Another update online! See changelog for everything that has changed!
Ok, here's how to calculate page 21 (0x15):
Take page 20 (0x14), remaining length, and XOR it with 0x54321248
For example (bytes has to be reversed before writing to chip):
page 20: 0x00030d40 (200m)
page 21: 0x00030d40 XOR 0x54321248 = 0x54311F08 (in reverse order 0x081F3154)
Example 2:
page 20: 0x00028d4b (176.243m)
page 21: 0x00028d4b XOR 0x54321248 = 0x54309F03 (in reverse order 0x039F3054)
I've tried this at full roll, empty roll and two different remaining lengths and all check out true.
Ok, here's how to calculate page 21 (0x15):
Take page 20 (0x14), remaining length, and XOR it with 0x54321248For example (bytes has to be reversed before writing to chip):
page 20: 0x00030d40 (200m)
page 21: 0x00030d40 XOR 0x54321248 = 0x54311F08 (in reverse order 0x081F3154)Example 2:
page 20: 0x00028d4b (176.243m)
page 21: 0x00028d4b XOR 0x54321248 = 0x54309F03 (in reverse order 0x039F3054)I've tried this at full roll, empty roll and two different remaining lengths and all check out true.
That's brilliant - well done.
Ok, here's how to calculate page 21 (0x15):
Take page 20 (0x14), remaining length, and XOR it with 0x54321248For example (bytes has to be reversed before writing to chip):
page 20: 0x00030d40 (200m)
page 21: 0x00030d40 XOR 0x54321248 = 0x54311F08 (in reverse order 0x081F3154)Example 2:
page 20: 0x00028d4b (176.243m)
page 21: 0x00028d4b XOR 0x54321248 = 0x54309F03 (in reverse order 0x039F3054)I've tried this at full roll, empty roll and two different remaining lengths and all check out true.
Sounds good, but what does it mean?
kallt_kaffe wrote:Ok, here's how to calculate page 21 (0x15):
Take page 20 (0x14), remaining length, and XOR it with 0x54321248For example (bytes has to be reversed before writing to chip):
page 20: 0x00030d40 (200m)
page 21: 0x00030d40 XOR 0x54321248 = 0x54311F08 (in reverse order 0x081F3154)Example 2:
page 20: 0x00028d4b (176.243m)
page 21: 0x00028d4b XOR 0x54321248 = 0x54309F03 (in reverse order 0x039F3054)I've tried this at full roll, empty roll and two different remaining lengths and all check out true.
Sounds good, but what does it mean?
We know how to set any value as remaining length but we also know that page 21, 22, 23 are changed when the remaining length changes but so far we have not known how, so we can only reset to values where we know what page 21-23 should be, like on new rolls, when the remaining length is 200m we know the values. But if we want to set the value to something else like 250m or 50m or whatever other than 200m then we might need to calculate these values.
We still need to figure out page 22 and 23. There is logic operations involved for sure but it's not just an XOR like in page 21.
totalitarian wrote:kallt_kaffe wrote:Ok, here's how to calculate page 21 (0x15):
Take page 20 (0x14), remaining length, and XOR it with 0x54321248For example (bytes has to be reversed before writing to chip):
page 20: 0x00030d40 (200m)
page 21: 0x00030d40 XOR 0x54321248 = 0x54311F08 (in reverse order 0x081F3154)Example 2:
page 20: 0x00028d4b (176.243m)
page 21: 0x00028d4b XOR 0x54321248 = 0x54309F03 (in reverse order 0x039F3054)I've tried this at full roll, empty roll and two different remaining lengths and all check out true.
Sounds good, but what does it mean?
We know how to set any value as remaining length but we also know that page 21, 22, 23 are changed when the remaining length changes but so far we have not known how, so we can only reset to values where we know what page 21-23 should be, like on new rolls, when the remaining length is 200m we know the values. But if we want to set the value to something else like 250m or 50m or whatever other than 200m then we might need to calculate these values.
We still need to figure out page 22 and 23. There is logic operations involved for sure but it's not just an XOR like in page 21.
We could then also try 400m, 500m etc..
i have swapped my jr board for ramps 1.4 so i have a virgin board sitting up stairs that i can use for testing and/or molesting
Just putting in some of the findings done in other threads:
- Chips that have not been used in a specific printer can be modified and used. This has been confirmed.
- At least on the Jr a chip can be reset to 300m without the proper values in page 21-23 and the printer will fill in those pages with valid numbers after the first print. Unknown if the Mini does the same.
- With the above in mind it should be possible to change new rolls from 200m to 300m before the first use to gain an extra 50% use before needing to swap the chips.
- This should be valid values for resetting to 299,722 of 300m (almost full 300m roll) and full 200m:
Page 299.722m 200m
10,11 E0930400 400D0300
20 CA920400 400D0300
21 82803654 081F3154
22 DA3EEECE 50B1E0CE
23 DC6D4D76 52E74F76While setting page 20 to full 300m even without the proper values in page 21-23 has been confirmed to work on the Jr I would go with better safe than sorry and use the 299.722m values above.
Not sure if anyone have tried 300m on a Mini yet?
i will try it got the swap chip .. try it to 300...
Thanx for info Kalter Kaffee ;-)
Thanks to experimenting by Bozotclown1970 we now have the page 21-23 values for a perfect 300.000meter reset.
Page 300m/300m
10,11 E0930400
20 E0930400
21 A8813654
22 F03FEECE
23 F26E4D76I wish I had found this forum earlier, I have the mini w but I have already tried every roll I have, so I cannot set them to 300 I guess. Would be interested in doing a swap at some point. I have: black, clear red, clear green, clear yellow. All 200m except yellow which was 100. Let me know if you want me to try anything or need any further info. After reading though some of the forums, I am considering doing a ramps conversion to be able to print TPU and cheaper filament.
Not sure if anyone have tried 300m on a Mini yet?
I still haven't got a non-blacklisted chip to work with but I did some experimenting with my blacklisted chip and my Mini and most likely 300m will not work on the Mini.
If I set page 10 and 11 and 20 to 300m (with 21-23 to their proper values) it will show the roll as 300m/0m (%inf) and refuse even to try sending the print to the printer. XYZware is smart enough to realize something is wrong and complains.
I then tried restoring page 10 and 11 to 200m and now the roll shows up as 300m/200m (150%). Sending a print is not possible. Once again stopped by XYZware and not the printer.
I then also set page 20 to 200m (but not changing page 21 23) and now it shows up as 200m/200m (100%). Sending a print works but is blocked by the printer (angry red led).
Interesting observation is that afterwards page 21 to 23 had been changed to the correct values for a full 200m roll.
Test were made with FW 1.1.4.
Conclusion: Mini does not support 300m rolls. Do not try to reset new rolls to 300m before first use unless you have a Jr.
I wish I had found this forum earlier, I have the mini w but I have already tried every roll I have, so I cannot set them to 300 I guess. Would be interested in doing a swap at some point. I have: black, clear red, clear green, clear yellow. All 200m except yellow which was 100. Let me know if you want me to try anything or need any further info. After reading though some of the forums, I am considering doing a ramps conversion to be able to print TPU and cheaper filament.
If you're interested in swapping tags - check this thread out..
http://www.soliforum.com/topic/15907/da … -tag-swap/
kallt_kaffe wrote:Not sure if anyone have tried 300m on a Mini yet?
I still haven't got a non-blacklisted chip to work with but I did some experimenting with my blacklisted chip and my Mini and most likely 300m will not work on the Mini.
If I set page 10 and 11 and 20 to 300m (with 21-23 to their proper values) it will show the roll as 300m/0m (%inf) and refuse even to try sending the print to the printer. XYZware is smart enough to realize something is wrong and complains.
I then tried restoring page 10 and 11 to 200m and now the roll shows up as 300m/200m (150%). Sending a print is not possible. Once again stopped by XYZware and not the printer.
I then also set page 20 to 200m (but not changing page 21 23) and now it shows up as 200m/200m (100%). Sending a print works but is blocked by the printer (angry red led).
Interesting observation is that afterwards page 21 to 23 had been changed to the correct values for a full 200m roll.
Test were made with FW 1.1.4.
Conclusion: Mini does not support 300m rolls. Do not try to reset new rolls to 300m before first use unless you have a Jr.
We're getting conflicting info on the mini and 300m rolls as one chap has got it to work.
http://www.soliforum.com/post/130468/#p130468
We're getting conflicting info on the mini and 300m rolls as one chap has got it to work.
http://www.soliforum.com/post/130468/#p130468
Yes, I saw that. I have only tried with an already blacklisted chip but it was stopped by XYZware without even sending it to the printer. For me XYZware showed the roll as 300m/0m (%inf) while they got 300m/200m (150%).
I believe an important difference might be that I am using the MacOS version of XYZware, version 2.2.12. It may be that the Windows version handles it differently.
I cannot try the Windows version myself right now because I managed to physically damage my only empty NFC chip so I'll have to wait until one of rolls goes empty before trying it again.
There are two of us who have got it working, myself and franklichters.
I am using the windows version of XYZware-2.1.15.1 and my printer version is 1.0.0.
Here is a link for Windows version XYZware-2.1.15.1: http://www.filedropper.com/xyzware-21151
Also I set my hosts file as follows to prevent updates:
127.0.0.1 xyz.com
127.0.0.1 xyzprinting.com
127.0.0.1 us.xyzprinting.com
127.0.0.1 support.xyzprinting.com
127.0.0.1 xyzportal.cloudapp.net
127.0.0.1 www.xyzprinting.com
For those that are interested in how we get the passwords for the cards...
The hardware we're using is the EMUTag
http://www.ebay.co.uk/itm/MIFARE-ULTRAL … 237ac626b4
If you order one - just put a comment that "cgrillo" referred you 
It's just getting a "password sniffer" firmware upgrade too - so there will be no need to even have a logic sniffer.
Just set the UID, give it to the printer and try to do something.
It will fail, but the password that was sent by the printer will be stored in the card now - and you'll be able to read it back.
This way anybody with one of these will be able to help out with passwords - not just the two of us..
ALSO
For those with Minis - this card can also be used to fully replicate the NTAG cards you have and so using the CSV file in page 1 of this thread (http://www.soliforum.com/post/128854/#p128854) - you can use the UID, Password and most importantly - the PACK to set your card up.
When it's "empty" just select a new ID and the corresponding password and PACK.
For those that are interested in how we get the passwords for the cards...
The hardware we're using is the EMUTag
http://www.ebay.co.uk/itm/MIFARE-ULTRAL … 237ac626b4If you order one - just put a comment that "cgrillo" referred you
It's just getting a "password sniffer" firmware upgrade too - so there will be no need to even have a logic sniffer.
Just set the UID, give it to the printer and try to do something.
It will fail, but the password that was sent by the printer will be stored in the card now - and you'll be able to read it back.
This way anybody with one of these will be able to help out with passwords - not just the two of us..
ALSO
For those with Minis - this card can also be used to fully replicate the NTAG cards you have and so using the CS file in page 1 of this thread - you can use the UID, Password and most importantly - the PACK to set your card up.
When it's "empty" just select a new ID and the corresponding password and PACK.
Ok i think i understand it...
But any turorial... Use the emutag and the CS files.. And so on
cgrillo wrote:For those that are interested in how we get the passwords for the cards...
The hardware we're using is the EMUTag
http://www.ebay.co.uk/itm/MIFARE-ULTRAL … 237ac626b4If you order one - just put a comment that "cgrillo" referred you
It's just getting a "password sniffer" firmware upgrade too - so there will be no need to even have a logic sniffer.
Just set the UID, give it to the printer and try to do something.
It will fail, but the password that was sent by the printer will be stored in the card now - and you'll be able to read it back.
This way anybody with one of these will be able to help out with passwords - not just the two of us..
ALSO
For those with Minis - this card can also be used to fully replicate the NTAG cards you have and so using the CS file in page 1 of this thread - you can use the UID, Password and most importantly - the PACK to set your card up.
When it's "empty" just select a new ID and the corresponding password and PACK.Ok i think i understand it...
But any turorial... Use the emutag and the CS files.. And so on
CSV file on P1 - was a typo sorry.
I can't give a tutorial for the phone as I reckon the app won't allow writing to Pages 0 & 1.
You need your own app or Arduino code of your own to do this.
Giving a tutorial on my own app wouldn't too good - unless I wanted to distribute my own source code... which is fine, but also tied to the hardware i'm using with the Arduino. The hardware being a PN532
I looked at these the other day, do they work ? Have you successfully managed to write the UID and PACK and the printer accepts it ?
For those that are interested in how we get the passwords for the cards...
The hardware we're using is the EMUTag
http://www.ebay.co.uk/itm/MIFARE-ULTRAL … 237ac626b4If you order one - just put a comment that "cgrillo" referred you
It's just getting a "password sniffer" firmware upgrade too - so there will be no need to even have a logic sniffer.
Just set the UID, give it to the printer and try to do something.
It will fail, but the password that was sent by the printer will be stored in the card now - and you'll be able to read it back.
This way anybody with one of these will be able to help out with passwords - not just the two of us..ALSO
For those with Minis - this card can also be used to fully replicate the NTAG cards you have and so using the CSV file in page 1 of this thread (http://www.soliforum.com/post/128854/#p128854) - you can use the UID, Password and most importantly - the PACK to set your card up.
When it's "empty" just select a new ID and the corresponding password and PACK.
I looked at these the other day, do they work ? Have you successfully managed to write the UID and PACK and the printer accepts it ?
cgrillo wrote:For those that are interested in how we get the passwords for the cards...
The hardware we're using is the EMUTag
http://www.ebay.co.uk/itm/MIFARE-ULTRAL … 237ac626b4If you order one - just put a comment that "cgrillo" referred you
It's just getting a "password sniffer" firmware upgrade too - so there will be no need to even have a logic sniffer.
Just set the UID, give it to the printer and try to do something.
It will fail, but the password that was sent by the printer will be stored in the card now - and you'll be able to read it back.
This way anybody with one of these will be able to help out with passwords - not just the two of us..ALSO
For those with Minis - this card can also be used to fully replicate the NTAG cards you have and so using the CSV file in page 1 of this thread (http://www.soliforum.com/post/128854/#p128854) - you can use the UID, Password and most importantly - the PACK to set your card up.
When it's "empty" just select a new ID and the corresponding password and PACK.
Yes, it can fully replicate the NTAG cards we use.
SoliForum - 3D Printing Community → XYZ Printing Hacks & Mods → XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking
Powered by PunBB, supported by Informer Technologies, Inc.