526 Reply by nilezon

  • nilezon
  • Member
  • Offline
  • Registered: 2017-10-18
  • Posts: 102

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

jodynek wrote:

Unfortunately, that´s possible. Cat and mouse game wink

tpe wrote:
jodynek wrote:

That's interesting find out smile

Quite surprising, and may be an indication that software is developed by 2 different teams. But we have to be careful as the future Windows versions may include the same controls as MacOS version, and it may prevent the hack to work.

Yes. I'll stick with 200m tags. It would be trivial for XYZ to block all 300m in both firmware and software.

527 Reply by mjf55

  • mjf55
  • Member
  • Offline
  • From: Raleigh, NC
  • Registered: 2017-06-01
  • Posts: 336

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

nilezon wrote:
jodynek wrote:

Unfortunately, that´s possible. Cat and mouse game wink

tpe wrote:

Quite surprising, and may be an indication that software is developed by 2 different teams. But we have to be careful as the future Windows versions may include the same controls as MacOS version, and it may prevent the hack to work.

Yes. I'll stick with 200m tags. It would be trivial for XYZ to block all 300m in both firmware and software.

Just block XYZ from updating, using the host file.  Works great.

528 Reply by nilezon

  • nilezon
  • Member
  • Offline
  • Registered: 2017-10-18
  • Posts: 102

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

mjf55 wrote:
nilezon wrote:
jodynek wrote:

Unfortunately, that´s possible. Cat and mouse game wink

Yes. I'll stick with 200m tags. It would be trivial for XYZ to block all 300m in both firmware and software.

Just block XYZ from updating, using the host file.  Works great.

The previously published list of hosts is not complete.
I analyzed the Windows application and found several hosts that were not in the proposed blocking list:
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com

Also, the Windows application is in at least one case accessing a web site using an IP address, not host, and that you cannot block in a hosts file.

I actually wrote a "plugin" for the Windows application that can fully block all Internet access, and also enable some hidden features of the application. If I get the time to make it a bit more user friendly I might release it.

529 Reply by carl_m1968

  • carl_m1968
  • carl_m1968
  • Member
  • Offline
  • From: Far North almost not Dallas
  • Registered: 2014-10-17
  • Posts: 6,512

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

nilezon wrote:
mjf55 wrote:
nilezon wrote:

Yes. I'll stick with 200m tags. It would be trivial for XYZ to block all 300m in both firmware and software.

Just block XYZ from updating, using the host file.  Works great.

The previously published list of hosts is not complete.
I analyzed the Windows application and found several hosts that were not in the proposed blocking list:
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com

Also, the Windows application is in at least one case accessing a web site using an IP address, not host, and that you cannot block in a hosts file.

I actually wrote a "plugin" for the Windows application that can fully block all Internet access, and also enable some hidden features of the application. If I get the time to make it a bit more user friendly I might release it.


Unless something has changed in Windows 10 you can use IP addresses in the host list as well. A host name simply resolves to an IP address and then the host file redirects that name/Address to the Address you specify when they try to connect back to your machine.

Printing since 2009 and still love it!
Anycubic 4MAX best $225 ever invested.
Voxelabs Proxima SLA. 6 inch 2k Mono LCD.
Anycubic Predator, massive Delta machine. 450 x 370 print envelope.

530 Reply by Bozotclown1970

  • Bozotclown1970
  • Bozotclown1970
  • Member
  • Offline
  • From: USA
  • Registered: 2016-01-05
  • Posts: 1,518

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

I just use a Virtual Machine and keep the network off.

531 Reply by nilezon

  • nilezon
  • Member
  • Offline
  • Registered: 2017-10-18
  • Posts: 102

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

carl_m1968 wrote:

Unless something has changed in Windows 10 you can use IP addresses in the host list as well. A host name simply resolves to an IP address and then the host file redirects that name/Address to the Address you specify when they try to connect back to your machine.

This is a common misconception. You can't, and as far as I know, you never could, re-map IP-addresses in the hosts file.
Try it, it will not work.
You could, however, use the routing table to re-route the IP.

532 Reply by mjf55 (edited by mjf55 2017-11-26 00:03:58)

  • mjf55
  • Member
  • Offline
  • From: Raleigh, NC
  • Registered: 2017-06-01
  • Posts: 336

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

nilezon wrote:
carl_m1968 wrote:

Unless something has changed in Windows 10 you can use IP addresses in the host list as well. A host name simply resolves to an IP address and then the host file redirects that name/Address to the Address you specify when they try to connect back to your machine.

This is a common misconception. You can't, and as far as I know, you never could, re-map IP-addresses in the hosts file.
Try it, it will not work.
You could, however, use the routing table to re-route the IP.

I have to agree with nilezon on this.  I tried to re-route an ip address not long ago on my win10 machine ( actually fount it in the xyzware I decompiled (think is some kind of test / super user hard coded ip ) and just using the host file did not work for me.

I actually like Mr Clowns idea, use a virtual machine.

533 Reply by nilezon

  • nilezon
  • Member
  • Offline
  • Registered: 2017-10-18
  • Posts: 102

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

The mysterious page 9 :-)

Here are the limits:
Pos 0: Always 0x00, but could probably be anything
Pos 1: Max 0x45
Pos 2: Min 0x31, max 0x43
Pos 3: Max 0x59

Easiest would be to stick with ASCII character "1" to "9" (0x31 to 0x39).

534 Reply by jodynek

  • jodynek
  • Member
  • Offline
  • From: Czech republic
  • Registered: 2017-11-19
  • Posts: 30

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

I did updated FW to the 1.2.2 version and NTAG stickers are working. So, it is safe. For getting new FW version you need temporary remove address www.xyzprinting.com from hosts file.

jodynek wrote:

Ok, so I don't have to block access to the following addresses:

127.0.0.1   xyz.com
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com

Is it right?

nilezon wrote:
cgrillo wrote:

There is no reason why the password/pack acceptance will be affected by upgrading the printer firmware.
Nilezon's solution should work for ALL XYZ printers that use the NFC cards whatever the firmware.

True.
Actually, I'm quite sure the firmware you are upgrading (the one in the Atmel chip) has no knowledge what so ever of the key/pack. The NXP chip controlling the NFC reader does all the kay/pack calculations and validations, and the Atmel chip is only getting the NFC tag contents.

535 Reply by Teddyz

  • Teddyz
  • Member
  • Offline
  • Registered: 2017-04-15
  • Posts: 31

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

jodynek wrote:

I did updated FW to the 1.2.2 version and NTAG stickers are working. So, it is safe. For getting new FW version you need temporary remove address www.xyzprinting.com from hosts file.

Same here. Yesterday I updated  Mini W FW from 1.1.2 to 1.2.2 and stickers still works. Also, disconnecting the memory ic still works, so I suppose I can re-load when needed.

I have never so far blocked any http traffic.

I have not yet tested > 200 meter.

I am very curious of what changes they have made in the FW.

536 Reply by mjf55

  • mjf55
  • Member
  • Offline
  • From: Raleigh, NC
  • Registered: 2017-06-01
  • Posts: 336

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

jodynek wrote:

Ok, so I don't have to block access to the following addresses:

127.0.0.1   xyz.com
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com

This is my list:
127.0.0.1   xyz.com
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com

537 Reply by nilezon

  • nilezon
  • Member
  • Offline
  • Registered: 2017-10-18
  • Posts: 102

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

mjf55 wrote:
jodynek wrote:

Ok, so I don't have to block access to the following addresses:

127.0.0.1   xyz.com
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com

This is my list:
127.0.0.1   xyz.com
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com

This is my list:

127.0.0.1   service.xyzprinting.com
127.0.0.1   xyzlog.xyzprinting.com
127.0.0.1   test-vm-02.eastasia.cloudapp.azure.com
127.0.0.1   xyzportal-plog.cloudapp.net
127.0.0.1   eu.xyzprinting.com
127.0.0.1   xyzprod.blob.core.windows.net
127.0.0.1   gallery.xyzprinting.com
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com
127.0.0.1   xyz.com

538 Reply by mjf55

  • mjf55
  • Member
  • Offline
  • From: Raleigh, NC
  • Registered: 2017-06-01
  • Posts: 336

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

nilezon wrote:
mjf55 wrote:
jodynek wrote:

Ok, so I don't have to block access to the following addresses:

127.0.0.1   xyz.com
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com

This is my list:
127.0.0.1   xyz.com
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com

This is my list:

127.0.0.1   service.xyzprinting.com
127.0.0.1   xyzlog.xyzprinting.com
127.0.0.1   test-vm-02.eastasia.cloudapp.azure.com
127.0.0.1   xyzportal-plog.cloudapp.net
127.0.0.1   eu.xyzprinting.com
127.0.0.1   xyzprod.blob.core.windows.net
127.0.0.1   gallery.xyzprinting.com
127.0.0.1   xyzprinting.com
127.0.0.1   us.xyzprinting.com
127.0.0.1   support.xyzprinting.com
127.0.0.1   xyzportal.cloudapp.net
127.0.0.1   www.xyzprinting.com
127.0.0.1   xyz.com

You win.  ;-)

539 Reply by maksor (edited by maksor 2017-11-30 14:53:26)

  • maksor
  • Newbie
  • Offline
  • Registered: 2017-11-30
  • Posts: 1

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

hi   i'm  new   a friend of my got a da vinci mini w  and his filament went out bought a  new one  on Ali now  he asked me to reset his tag   and  i m stuck with   the first steps

Using a S7 Edge with the German program  version 0.5.4  calculated the pass and only get  4 pages in black or 7 in red

any one

Tried alsothe andriod app NFX  but that one will say   tag empty

Post's attachments

Screenshot_20171130-145823.png 138.29 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

540 Reply by french250

  • french250
  • Newbie
  • Offline
  • Registered: 2017-12-05
  • Posts: 6

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Hello,

I'm completely lost

I have a Da Vinci Jr with 2.3.5 firmware sad

I can't downgrade ?

The only solution is EMUTAG (http://www.instructables.com/id/EMUTAG- … -Printers/) ?

Thank you very much

541 Reply by Bozotclown1970

  • Bozotclown1970
  • Bozotclown1970
  • Member
  • Offline
  • From: USA
  • Registered: 2016-01-05
  • Posts: 1,518

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

french250 wrote:

Hello,

I'm completely lost

I have a Da Vinci Jr with 2.3.5 firmware sad

I can't downgrade ?

The only solution is EMUTAG (http://www.instructables.com/id/EMUTAG- … -Printers/) ?

Thank you very much

No, you cannot downgrade.

If you read the threads you will find more solutions, some may even save you money.

542 Reply by french250

  • french250
  • Newbie
  • Offline
  • Registered: 2017-12-05
  • Posts: 6

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Thank you

I will read the threads this night wink

I was only see the EMUTAG solution

543 Reply by mjf55

  • mjf55
  • Member
  • Offline
  • From: Raleigh, NC
  • Registered: 2017-06-01
  • Posts: 336

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

french250 wrote:

Thank you

I will read the threads this night wink

I was only see the EMUTAG solution

Try these:
http://www.soliforum.com/topic/16909/xy … nfckeyxyz/ 

and post # 1 of this thread.

544 Reply by nilezon

  • nilezon
  • Member
  • Offline
  • Registered: 2017-10-18
  • Posts: 102

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

A small update that could be of interest to some of you:
I just successfully downgraded my miniMaker from v1.1.1 to v1.1.0.

545 Reply by Bozotclown1970

  • Bozotclown1970
  • Bozotclown1970
  • Member
  • Offline
  • From: USA
  • Registered: 2016-01-05
  • Posts: 1,518

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

nilezon wrote:

A small update that could be of interest to some of you:
I just successfully downgraded my miniMaker from v1.1.1 to v1.1.0.


This may e of interest to a lot of people if the process happens to be the same with all XYZ printers. Just hoping!

546 Reply by yizhou.he (edited by yizhou.he 2017-12-06 20:53:56)

  • yizhou.he
  • yizhou.he
  • Member
  • Offline
  • From: Boston, MA
  • Registered: 2017-07-05
  • Posts: 1,358

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

I will be very interested if we can flash Marlin or Repetitor-firmware or any other opensource firmware.

But if you can downgrade the firmware, I assume we will be able to go back to stock firmware if the opensource firmware approach doesn't work out.

Great job! Any instruction or guides coming soon?

(Da Vinci 1.0, Jr. 1.0 RAMPS, miniMaker) X4, (Creality CR-10S, CR-10 mini, Ender-3) X4, Anycubic MEGA X4, Anycubic Chrion X1, ADMILAB Gantry X2 (MonoPrice Maker Select V2, Plus, Ultimate)X4--Select mini X1, Anycubic photon X4, Wanhao duplicate D7 X1.
iNSTONE Inventor Pro X2, CTC Dual X2, ANET-A8, Hictop 3DP-11, Solidoodle Press, FLSUN I3 2017X1

547 Reply by yizhou.he

  • yizhou.he
  • yizhou.he
  • Member
  • Offline
  • From: Boston, MA
  • Registered: 2017-07-05
  • Posts: 1,358

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Just out of curiosity, after you downgrade the firmware, does your mini still remember the NFC tag UID/PWD/filament length? Will you be able you clear that area of memory by doing the downgrade?

(Da Vinci 1.0, Jr. 1.0 RAMPS, miniMaker) X4, (Creality CR-10S, CR-10 mini, Ender-3) X4, Anycubic MEGA X4, Anycubic Chrion X1, ADMILAB Gantry X2 (MonoPrice Maker Select V2, Plus, Ultimate)X4--Select mini X1, Anycubic photon X4, Wanhao duplicate D7 X1.
iNSTONE Inventor Pro X2, CTC Dual X2, ANET-A8, Hictop 3DP-11, Solidoodle Press, FLSUN I3 2017X1

548 Reply by nilezon

  • nilezon
  • Member
  • Offline
  • Registered: 2017-10-18
  • Posts: 102

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

yizhou.he wrote:

Just out of curiosity, after you downgrade the firmware, does your mini still remember the NFC tag UID/PWD/filament length? Will you be able you clear that area of memory by doing the downgrade?

I'm still investigating.
My first downgrade was made by flashing the chip using external hardware. I have since identified the version check in the firmware and are looking for ways to bypass it. The best way would be to break the encryption of the firmware files and then produce a custom firmware that doesn't check the version while upgrading.
I don't think the eeprom with old UIDs is cleared, but if I manage to create a custom firmware I could of course bypass the entire NFC check, rendering the eeprom useless.

549 Reply by mjf55

  • mjf55
  • Member
  • Offline
  • From: Raleigh, NC
  • Registered: 2017-06-01
  • Posts: 336

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

Nilezon, your accomplishments continue to amaze me and probably many others. 
I agree with yizhou.he, I would be great if you can figure out how to put opensource firmware on these machine, specifically the Jr and mini.

550 Reply by nilezon (edited by nilezon 2017-12-06 23:29:46)

  • nilezon
  • Member
  • Offline
  • Registered: 2017-10-18
  • Posts: 102

Re: XYZ Printing Da Vinci Jr (w) / Da Vinci Mini (w) Hacking

mjf55 wrote:

Nilezon, your accomplishments continue to amaze me and probably many others. 
I agree with yizhou.he, I would be great if you can figure out how to put opensource firmware on these machine, specifically the Jr and mini.

Thank you!
Is there any open source firmware available to try?