I-Appliance BBS
The Official Source for Internet Appliance Upgrades and Mods

Click Here!
BBS Main List | Sign In | Sign Up | Search | Help | Linux-Hacker.netReply to Thread | Printer |

Home / Other I-Appliances / Compaq IA
Hacking an "un-hackable" IA-1
Need help! There MUST be a way.

New MessageHacking an "un-hackable" IA-1 (modified 0 times) Questro
Profile
Greetings,

Unfortunately it looks like I got an "unhackable" version. I'm hoping all is not lost and there *still* must be a way to hack this box using the "failsafe" mode.

I reset the bios as instructed, booted, saw the mem count..then it says 162-system options not set. It pauses, reboots and starts MSN. I was able to get to the "failsafe" bios mode where you can get updated MSN software (this one was v1.0) but MSFT has discountinued service for the MSN companion and the website is down. I thought at least with v2.0 I could use the device with my ISP and the MSN client.

After trying that update, the unit is now hosed because the MSN image is half there. So on boot you get an error about not finding an image file. It looks like this:

Error opening OS image file c:nk0 .bin
Error opening OS image file c:nk1 .bin
Error opening OS image file c:nk0 .bin
Please call technical support at (888) 386-6497


Here's my idea: If there is no way to get into the bios because it is set to "reset itself", then maybe there is a way to "spoof" the failsafe update process and have the IA-1 download an image of another OS to get control of the device, kind of like a TFTP process for flashing a router. Maybe even have it load something that will allow a reflash of the bios to get complete control of the device. I have to believe that there has *got* to be a way for someone much smarter than me to get into this thing. After all, it is just a VIA based PC motherboard with a restricted bios. If not, then I've only lost $48 on eBay!

I can get into the failsafe mode every time by pressing CNTL-U right after the Compaq logo disappears and before it starts loading the MSN remnants.

Once you have entered the failsafe info, it will start the MSN software, dial the ISP, connect and begin the update process. Ultimately it will fail because the website does not exist any longer.

Any help would be appreciated.

More details on the failsafe screen:
----------------------------- Modem Settings ------------------------------
| UserName: [ uoobeosr1@reg.msn.com ] |
| Password: [ ******** ] |
| |
| Phone Number: [ ] Tone Dialing: [X] |
| Wait for Dial Tone: [X] |
| Dial Audibly: [X] |
| Dial Quickly: [ ] |
| |
| Post Data: [CurrentVersion=0&Component=Mariner;Compaq-1-1;409&SSN=1 ] |
| URL: [https://webcdownload.msn.com/clientman/clientman.dll?DownloadImage ] |
| |
---------------------------------------------------------------------------
| < OK > < CANCEL > |
---------------------------------------------------------------------------

09-28-2004 20:09:07

New MessageRE:Hacking an (modified 2 times) pug_s
Profile
http://www.linux-hacker.net/cgi-bin/UltraBoard/UltraBoard.pl?Action=ShowPost&Board=MSNCompanion&Post=185&Idle=0&Sort=0&Order=Descend&Page=10&Session=

Can you press the 'compaq' button and see the bios menu once when you see the unit boot up?

10-22-2004 15:54:28

New MessageRE:Hacking an (modified 0 times) mattozan
Profile | Email
Questro-

Did you ever slove this issue? Mine is doing the same thing...

thanx,

matt0zan

07-16-2005 21:23:54

New MessageRE:Hacking an (modified 0 times) mattozan
Profile | Email
Questro-

Did you ever slove this issue? Mine is doing the same thing...

thanx,

matt0zan

07-16-2005 21:24:07

New MessageRE:Hacking an (modified 0 times) keith721
Profile
If you can enter the BIOS using gdcera's post about shorting the BIOS CLEAR jumpers while booting, then you can use a 32 or 64 MB CF card to restore either your MSN software, FreeDOS, or Linux. Let me know if you're still trying to restore your IA-1.
10-18-2005 07:21:22

New MessageRE:Hacking an (modified 0 times) johanja
Profile
Hi, I recently bought such an IA-1 (blue) and I'm having the same problem...

Is there a solution for this??

02-04-2006 16:33:15

New MessageRE:Hacking an (modified 0 times) AFrenchPea
Profile
I just bought one of these 1-a1 used for my grandmother. I just want to use the MSN Companion stuff but can't seem to get rid of the old user's information. Is there anyway to reset it? PLEASE HELP!!!
02-10-2006 12:58:11

New MessageRE:Hacking an (modified 1 times) cyberstyles
Profile
Unplug Unit First!

OK for those who don't I believe I have this same unhackable ipaq so here is what you do to get in the bios.
you will have to take the cover off to complete this.
yes take the lcd panel off and then pop the cover off

next make sure the unit is facing in the direction of normal use

you will notice that there is a heat sink on top of a grey cover that protects the systemboard I do not recommend you take this off in less you have some more thermal compound to go between the heatsink and processor.

now if you had a computer for some time and you have done work to it or even opened it the you know what a c-mos reset pin is.

now with the unit facing in proper direction take a look at the holes in the top of the grey cover closes to you and the right side you will see a pin through the holes you will need a paper clip to do it this way but you need to use two of the holes one for each end of the paper clip (flashlight will help)set one end of the paperclip in ontop of the pin with the switch block that you would move if you removed the cover now in the hole next to it going toward you stick the other end of the paperclip in and move it left and right toward the other end of the paperclip do this with ease not to get rough.

now assuming you plugged the lcd panel back in its sockets leaving the cover off for testing plug you unit in and dont shock yourself hold the lcd panel in your hand and make sure your keyboard is in place now watch the screen on topleft you should see a memory count ok on the right a curser block will appear now during memory check you can start hitting the compaq button or your f10 key this will bring up bios mode listen close to this


GO THROUGH ALL MENUS AND ENABLE EVERTHING BUT DONT ENABLE SILENT BOOT! NOW THIS WILL ALLOW YOU TO GET TO BIOS ON EVERY RESTART. REMEMBER TO USE THE COMPAQ OR F10

ok ill quit yelling now

as for access to bios here it is still working on other model how to's as I found most in hear worth less so Ill do the job lammers think they can do!

07-21-2006 21:01:17

New MessageRE:Hacking an (modified 1 times) cyberstyles
Profile
nevermind
07-21-2006 21:27:56

New MessageRE:Hacking an "un-hackable" IA-1 (modified 0 times) sunrise
Profile
I'm in a Catch 22 and DESPERATELY NEED SOME HELP --- PLEASE!
I've been scouring this board & links on it. There are lots of posts about the 'un-hackable' BLUE version of the IA-1. I have just bought one of these, and used ekempen's method (search this BBS) to get into the BIOS, ie
- remove power
- remove the case
- move the jumper for 2 secs to clear the bios settings
- replace the jumper
- apply power
- move the jumper during memory count
- AS SOON AS memory count completes, press F10/Compaq key when flashing block cursor shows at top right
- move jumper back, and bios language choice is shown.
BUT I STILL CAN'T GET IT TO BOOT FROM THE CF CARD!
The problem:
Once in the bios, I can enable the secondary ide
If I look in 'Boot order', it is BLANK (ie there is no description for the boot devices)
I CAN set the top line to 'second' and the second line to 'first' (even though they are blank)
When I save settings, the ia-1 tries to reboot, but just hangs BEFORE the Compaq logo. If I unplug power & plug in, the ia-1 seems to realise the bios settings have changed, and reloads the default values and reboots again - straight back into BeOS.

So I can never get it to boot from the CF, and therefore cannot either flash the BIOS, or copy Jailbait / DSL onto the internal Sandisk.

My ia-1 is a blue one, and came from Belgium. When it boots it goes straight into a screen which is in Dutch (which I don't understand), so I assume that this has a custom image on the Sandisk.

Doea anyone have any idea how I can get it to boot from the CF?

08-08-2006 06:22:19

New MessageRE:Hacking an (modified 0 times) bogus123
Profile
I also have a blue ia-1 with Beos and also from Belgium.

Mine boots from the card slot if I pull the plug and replug it in immediately after exiting the bios via the compaq key. I carried out the same steps to get into the bios and in the bios itself as you described. In the Bootorder menu I selected the bottom entry.

If the replugging was fast enough, you should see just the compaq screen without the memory counter. I used the eltorito image which i simply dd'ed (dd if=eltorito.img of=/dev/sda or sdb..) to the CF card in Linux. That worked fine. It booted to the prompt.

The bad news is that I wasn't able to overwrite the internal flash. After I tried that, the BEOS recovery would come up the next time I did a restart.

And as the BIOS settings are reset on each start, the only option I see is to replace the BIOS with a more friendly one, that keeps its settings ? Maybe from a white IA-1 ?

I also wonder from where the Beos recovery is started, from the bios or from a (hidden) flash section or ...?

09-19-2006 09:34:48

New MessageRE:Hacking an (modified 0 times) IAN442
Profile | Email
I HAVE SEVERAL OF THESE MACHINES THAT ARE HACKABLE...The original easy to hack type and im more than willing to part with them.

Let me know if you are interested.

I have i think 4 or 5 at least.

09-20-2006 13:50:04

New MessageRE:Hacking an (modified 0 times) Obcd
Profile
Hi,

i just noticed that there is still some life on this BBS. As I read that some people are having trouble with their Blue IA-1's and it's locked Bios, I will describe the evolution of my experiments with it in the hope it might clear things up (or the opposite).

First of all, there is the "gdcera" or "E. Kempen" trick to get in the Bios. I replaced the CMOS reset jumper with a toggle switch. This way, I can reassemble the unit, and toggle the switch without the possibility of getting electrocuted ... I have 3 blue IA-1 unit's, and they all behave pretty much the same. They all come from the Belgium market, and have a VDAB label on the upper side of the unit.
My unit's (usually) come into setup if I toggle the switch during the displaying of the Red Compaq logo. I just toggle the switch for a couple of seconds (equivalent to placing the jumper in the other position) Usually, after this action I see a memory count. Sometimes, after this memory count, a error is displayed. After that, I get 3 windows at the bottom which propose selections with the function keys, or I get a language selection menu, after wich the unit enters the bios setup. In case of the 3 windows at the bottom, if you press the 'compaq' button (equivalent with F10 in bios), you get the language screen.
I don't have to smash the compaq key during the memory count, and doing so probably doesn't make any difference at all.
My unit's boot from a bootable CF disk, even if nothing is altered in the bios setup. So, basically, you don't need the CMOS jumper trick.
A problem lies in the bootable CF card itself. Most people use a USB cardreader to manipulate the contents of the CF card, and these usually doesn't allow to make the CF bootable. There exists the "HP Drive Key Boot Utility" which does allow to make it bootable. In my case, such a card doesn't boot in the IA-1. After altering the bios settings, it does boot from this card. The best trick to find out if your card is actually bootable, is disabling the primary IDE controller and enabling the secundary one. This way, the internal sandisk is disabled, so the IA-1 can only boot from the CF card slot. (Or won't boot at all)
I never had the idea that the bios settings reverted to default after a setup entry. I do see that the unit sometimes reboots. This for instance happens when a CF card is inserted in the slot. Probably, the Bios adds the drive parameters to the cmos NVram, and reboots with the new settings. This is indicated by the red compaq logo dissapearing for a couple of seconds, and coming back afterwards. At that moment, the IA-1 has reset itself.
I made a CF card dos bootable with the standard dos tools. (Fdisk and format)I used a old Pc and a IDE to CF adaptor to do this. This disk booted in the IA-1 without any Bios setup modifications. The IDE to CF adapter makes the CF card appear to the computer as a normal harddisk.
I did notice that when the IA-1 boots from it's CF slot, the internal sandisk is not accessible trough Bios. Compaq has propably done this to protect the internal Sandisk BeIa OS from being overwritten. All attepts to use "Dolly" or the Seagate "DiskManager" didn't work.
I read here that some people reflashed their Bios. They used "Uniflash" to do this. They had to tell the program the type of flash chip that was in the IA-1. Some flash blocks gave a verify error. I tried that to (being desperate). After the operation, my IA-1 behaved exactly as before. In my opinion, the Bios hasn't changed. Probably some parts of the new and the old bios are equal, so it is normal that the program doesn't give a verify error for this blocks. The ones that were different, gave the verify error.
If you flash a wrong bios to your IA-1, your unit will die at early age. The only way to recover from such a situation is reprogramming the Bios flash chip in a external programmer. In my case, this chip is directly soldered on the mainboard. Unsoldering it and placing a socket, will probably void the warranty of your unit...., and without special equipment, I wouldn't know how to realise this.
I managed to reflash the internal sandisk without reflashing the Bios. If there are people interested, give a yell on this BBS. I will than explain how I managed to do it.
I guess most people reading this fell to sleep already. Besides, I am running out of (valueable) time.

regards.

09-21-2006 02:24:54

New MessageRE:Hacking an (modified 0 times) bogus123
Profile
hi Obcd,

my unit is the same as yours. It also has the VDAB label on it.

I experienced the same things as you did. The unit will only boot from the CF card if the internal IDE is disabled. If I have the primary IDE enabled as well, it will boot into either into BeIA or recovery mode.

It would be really great, if you could describe how the internal sandisk can be reflashed !

09-24-2006 05:19:14

New MessageRE:Hacking an (modified 0 times) Obcd
Profile
Hi,

check this link:

http://www.badongo.com/file/1456166

the zip includes a txt file with some explanations.

have fun.

09-25-2006 11:49:06

Reply to Thread | Printer |
All times are PSTPowered by UltraBoard v1.62



Copyright © 2000, Netmake Inc. All Rights Reserved.
See Terms and Conditions for more information.




i-opener opener laptop notebook computer help drivers dll free windows dos repair fix linux mac macintosh 2000 95 98 nt pc configure hardware software sound video netscape explorer network networking lan wan software cmos fat bios printer card mouse modem ide scsi cd rom controllers scanner tape hard drive cgi scripts source code mp3