Okay so you might have seen this floating around on the internet CVS have started marketing this new disposable digital cameras but still and video and they run about 17 15 bucks American dollars for the stills and about 30 for the video. Problem is everything about them is proprietor you have to take it back to CVS have them pull the pictures or data off of them put them on CD for you and give them back. That is another like an 11 dollars charge so you are looking at like 30 or 40 dollars just about to get about 25 pictures, that my friends is a rip off. Alright so there are some geeks out there that agreed with me and they discover how to make these cameras reusable using some custom made softwares and tools they programmed and USB. Here are your lists of supplies, you are going to need a USB Female B connector soldering iron, solder, a multi meter a Dremel and some hot glue.
Okay before you take anything apart, what you are going to do is find out what firm ware version your camera is running. You do this by holding down the shutter button and the display button at the same time and then hitting the on button. It will come up on the LCD what firmware version you are using. Ours was using 65 50 and that is what all this is base of if you are running 65 20 you are lucky cause that is a lot easier. Okay now with the firm where is you can go ahead and disassemble the camera there are three screws in the back and a bunch of locking tabs all around it. Now take all the screws out and when you are popping the lock tabs be careful you need to save them try not to break them as much as possible. Once you open it up you will see the board in front of you with the LCD and on the left hand side you will see the proprietary connection that CVS uses and we are going to soldering lids on to that that lead to our USB connector. Okay we have a picture on the show notes telling you where pin 1 is on this proprietary connector and we are going to be using pins 6 7 8 and 9 pin 6 is your positive five volt USB pin 7 is the USB ground, pin 8 is your USB positive data and pin 9 is USB negative data.
Okay first of all now that you have it open, find a place that is going to be convenient for you to mount the USB female connector. Then from there you just follow the pin out diagram on the connector and solder accordingly to those proprietary pins. Okay now that you have all your connections made and your plug is mounted, just figure out where it is going to be on the case draw a little marker on it use your Dremel and cut out a hole so that way it is nice and tack away it does not look bad and you got easy access. From there go ahead and take the board mount it back to one half of the cover so you still have access to the back panel. Snug it up because now we are going to move on to software and we still need to access to that board.
Okay so now we can go ahead and start gathering all our tools software tools that we are going to need to do this. First of is going to be the PV2 tool 2.13 the lead USB 132 filter bend 0.1.8.0 and the lead USB 132 bend 0.1.8.0, from here we can go ahead and install the lead USB device bins and the filter bin. Now once they are installed gain access to the lid USB.inf file and you have to add strings for 27, 28, 2B, 2F and 30. We will have the full string line in the show notes for you. Now we can go ahead and run the PV2 tool and you just plug the USB cable in to the connection you made in to your computer.
Now with that board exposed please be careful and avoid at the flash capacity that is 200 to 300 volts, it is going to zap your heart. Now if PV2 tool running and the USB cable connected between the camera and the computer go ahead and click open PV2 tool hopefully you will see PID 27 if you are using the CVS red camera. Find the ram module behind the LCD starting on the bottom pin count up to the sixth one. Take the probe from you multi meter bridge pin six and seven while there is still bridge unplug the USB cable, wait a few seconds plug it back in. hopefully you will hear two depth beeps, they are very distinct to you will know what they are. If you did great we can move on if you did not just lather range repeat until you do.
At this point I am assuming that you have heard the two depth beeps go ahead and un-bridge 6 and 7 on the ram, click open in the PV2 tools and then find your SD ram key scan. What that is going to do is scan the keys in the firm ware and pull them down then click unlock. This is going to unlock the camera so that in the future uses we do not have to go to this process every time.
Okay at this point we can not take you any farther. We have this crazy little thing America called it the digital millennium copy right act which forbids this but the software will walk you trough it you are like 99% of the way there now so do not fret. We will have links on the show notes that will take you all the important information that is hopefully not on American servers but there you go that is how you hack the red CVS camera. All important information links on the show notes thanks al lot.
You have been watching a segment from Hak5
Get more great technolust at www.Hak5.com
