I-Appliance BBS
The Official Source for Internet Appliance Upgrades and Mods

Click Here!
BBS Main List | Sign In | Sign Up | Search | Help | Linux-Hacker.netReply to Thread | Printer |

Home / Other I-Appliances / MailStation
Is MailStation 150 Hackable?

New MessageIs MailStation 150 Hackable? (modified 0 times) Youngert
Profile
Hi,

I am a newbie w.r.t MailStation, so please bear with me. Yesterday, I just picked up a unit from a local OfficeMax and today I had to go back to exchange my unit with another one since the unit I had had a broken key. Anyway. I did browse this forum and found only the key combinations of either FN+Shift+T or FN+Shift+Size are for MailStation 100 units. Is there any other key combinations to hack MailStation 150? It certainly would be nice to be able to hack this unit since it is FREE after a US$30 rebate from OfficeMax (not a manufacturer MIR).

09-15-2003 07:27:57

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) arrowpig
Profile
So far, there's no advice on hacking the BLUE mailstation 150 (which was also free at OfficeMax last week.)

If I press Settings, the top right says XTND: On V4.05D. And, yes, the DNS and server information appears to be locked.

I PROPOSE AN ORGANIZED HACK. Two ways to spoof the device may be 1) set up a mail server/network that is not on the internet but accepts dialup. Appearantly older Mailstations accept changes through commands embedded in e-mails, if I'm reading this forum correctly. Surely Earthlink left that option (to remotely redirect the mailstation) open for themselves! Anyone interested in trying that?

2) If a key sequence is the key to 'unlocking' the settings we want to change, then we'll be here for a while, without insider information, that is. So here's the 'organized' part of the hack: Try key sequences that have not been reported in this thread and then report back your results. NOTE: the unit runs off of 9V DC from the wall adapter, and 6V DC from the batteries, so try the sequences under battery or wall pack, but could it be possible that this makes a difference? Report your findings in this thread using the following format:
Sequence: Wall/Battery: Location? Results: Notes:
(for example)
SHFT-FCN-T Battery Power-Up Nothing Went to Settings-Details, still locked
SHFT-FCN-Tab Battery Settings/Details Nothing --

Who's game?

09-23-2003 14:07:07

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) Misunderstood
Profile
I am game for an organized attempt at unlocking this device. I have read the forum many times and would agree that the solution may be in the embeded email commands. I too have a new 150, and have yet to make the 1st call.

I have been trying to figure out how to intercept the packets for decoding. It doesnt appear that I can "sniff" a remote extention on my phone line. Any ideas? Maybe I will set my laptop up to dial out with an email client setup w/ the mailstation account info while running iris. I am concerned about getting all the packets for analysis.

I could potentially set up a dial-up server for testing? I am really curious about the number if interested people in this project.

09-26-2003 10:07:58

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) Youngert
Profile
If U have another computer (preferably Linux) that has a modem and is connected to the Internet through an ethernet card (NIC), then U certainly can setup this Linux machine as a dial-in server for Ur MailStation 150 through its RJ-11 port of the modem. All U need is to hook up a direct telephone cable from your MailStation 150 to your Linux machine and setup Ur MailStation 150 "NOT TO DETECT PHONE LINE". Then, use any sniffer software to sniff the packets that pass through your Linux modem line.
09-26-2003 16:15:16

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) dan4l
Profile | Email
I have a black, not yet hackable mailstation. You can fool it though. Though it requires a computer.
Basically, you run a dns server, and dial-in pppd, pop server and smtp. Setup the dns to lie mailstation,
Even if it can't be hacked per -say, after setting up a computer as mail-relay it could still be used. And perhaps be a starting point for more hacks. I got fairly far a long with that, but haven't touched it about 7 months, as other projects took precedence.
I did notice that the mailstation uses some popd extentions, that seem nonstandard, specific to mailstation. I started hacking on a opensource popd to getover some of the quirks. Another tack would be look at the rom files to see if any of the strings look like pop commands. As far as sniffing, you can do tcpdump on ppp0, or whatever, but I found it more useful to bind something to the ports (pop,smtp, etc) and type in the server responses (I used ckermit, but maybe netcat) and some point modified the popd software to log everything to file, though sniffing was good to see what services were being used...

WAIT.. If you're talking about sniffing the clipmail commands, it would be good to get as many of the files as possible.
Couple ideas. 1) Don't sniff. Instead use the info in the box, to setup a computer, and telnet into their pop server, type the session out (login, etc, pop is easy) and capture the sessions, and all messages. [ You may be able to keep the messages on the server ]
2) Go crazy with nat, firewall crap, and port redirectors, and setup so mailstation dials in to computer, computer dials in
to mailstation server. Computer Redirects and log everything. Limit computers modem speed to match max mailstations ( Mine is 14.4 ).

09-27-2003 11:48:09

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) Misunderstood
Profile
Thanks for the ideas, I have just pulled out the mailstation cause I have a free weekend. I am going to try to pass the connection through both linux and windows boxes to see what I can get. Maybe after enough clipmail we might be able to see a pattern.

Has anyone made any progress on button combinations? I would seem logical to have some sort of access for tech support in order to fix consumer issues! [Any earthlink folks are welcome to help us out! *** you can send Anonymous tips to: mailstation at snowynight dot com or snailmail: mailstation POB 25003 silverthorne CO 80497] HEHE, just though I would try!

Thanks everyone; I will report any significant findings.

10-03-2003 16:32:40

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) TomBombadil
Profile
All that I want to have the 150 be able to do, is use the e-mail feature to write text in as a cheap laptop, then get that info into the computer via a null-modem cable.

Main box runs Linux, but also Win4Lin, also have an old PowerMac.

Can this be done usefully, or do I need to look for an old Trash80 Model 100?

10-15-2003 11:43:45

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) thespicychicken
Profile
Not sure this helps much, but has anyone noticed if you press Function + d (on the MS 150, V4.04D) and press the hard reset button (with a paper clip) you'll get a slightly different menu dialog (the "Reset System Data" menu) after the memory scan? You have to keep holding Function + d after the reboot to see it.

The menu shows an additional item: "Restore Default Account".

03-28-2004 19:50:50

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) Youngert
Profile
Hi thespicychicken,

Sure, your technique helps up to a certain degree and it also works for MS 150 with V4.05D firmware. What next is yet to be determined or found. Hopefully, someone will soon come up with the complete hack after you have pointed out the difference in the "Restoration Menu" with the "Fnct+D" key.

03-29-2004 08:20:13

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) LEETEK
Profile
wow guys I just found a way to access the HEX editor in the maail station MAILStation DET1, after I hit the Function + #### + T right after a reset, a diagnostic screen will come. In the bottom right corner you'll see the quit button, press #### + quit and it will bring up a hex VIEWER I havent figured out how to edit. PRESS H FOR HELP. COOLL
05-30-2004 02:36:33

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) LEETEK
Profile
The forum has blocked a perfectly good word, #### <== it's actually the name of the key above the Control key in your standard computer keyboard. If u guys find a way to edit in the hex viewer I discribed above, please post it
05-30-2004 23:14:35

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) LEETEK
Profile
It's me again. The way to get to the hex editor on your Mail station is: press S H I F T/FUNCTION/T all together while doing a reset. This will bring up a diagnostic tests screen, to bring up the HEX screen press S H I F T + F4 (Function 4) this will bring up the HEX SCREEN press the H for HELP.
05-30-2004 23:34:01

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) Rabid_Rabbit
Profile | Email
Mailstaion 150, Blue, V4.04B:

I dont know if it helps but in the settings, while editing in any of the text fields, if you press Func + q or Func + w or any key on the top row, then that key is inserted into the text field. But, If you press Func + A or Func + x or Func + c or Func + v then no text is entered.

Maybe, these combinations are reserved for other functions?


-- Snarl! Hiss! Growl! --
06-01-2004 17:07:13

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) chicken_luva
Profile
um, about the "func. c, v, x, and a": these are copy and paste controls, similar to the control button. u can select text with "SHIFT" and copy it with "func. c", and paste w/ "func. v". "func. x" is cut and "func. a" is select all.
fish food baby!
09-02-2004 18:55:19

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) lorenzo
Profile
The Blue mailstation model 150 looks like it could have a Rabbit Semiconductor 3000 microprocessor, I traced several of the necessary in-circuit programming interface pins (10 total pins) to one of the Keyboard headders and also possibly the parallel port. Looks like pin 2 and 3 on the parallel port could be TTL serial port.

The Rabbit CPU is Z80 based and alos the right pin count, I bet they are using their boot loader, if someone has desoldered the FLASH paste the first 1024 HEX bytes and the last 1024 HEX bytes and I'll verify. RS in the part number could be Rabbid semiconductor!

Get your magnifier glass out and you can read the partnumber for the LCD controller on the flex cables containing the IC for the LCD.
Good luck,

04-18-2005 08:22:33

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) dan4l
Profile | Email
The hexedit is a cool find, but I can't seem to edit with it. fn-c, fn-a, mentioned don't seem to do anything here.
What's going on around 07fe00 ? ends with CD AB, interrupt AB? And around 07ffc0 seems to be the serial number?

On another note, while looking for some info on loop back cables, ( I want to make on see if anything opens up when connected )
http://www.lammertbies.nl/comm/cable/RS-232.html#loop
There I also found http://www.lammertbies.nl/comm/cable/plc.html#zwor
A serial cable to program microcontroller boards based on the Z180 and Rabbit series micro controllers, aren't the cpu's in the various
mailstation models Z80's and Rabbits?

04-23-2005 00:59:09

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) blakester
Profile
The mailstation 150 is hackable. All you have to do is reset the mailstation using the hard reset button while holding down Fn-D. Keep on holding Fn-D until you see a menu pop up. Select Restore system defaults and press enter. when it askes you if you are sure select yes. At the same time that you hit yes unplug the unit from the wall. the trick is to do it at the same time. when you restart it will ask you to make a new user account. Now you can enter all the information you need. Have Fun
04-25-2005 12:13:21

New MessageRE:Is MailStation 150 Hackable? (modified 1 times) fatdawgsmaw
Profile
I bought one of the MailStations for $9.00 at OfficeMax the other day. The firmware is V4.40E, and I'm not being successful with any of the combos anybody's got listed here. My mother's been BEGGING for one of these things because she's so technologically challenged, she can barely use a microwave. Right now, she has Dad bring up email, she types it in, and then hollers for him to send it. Any help would be appreciated.
05-01-2005 09:24:27

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) sracer_az
Profile
Okay. I picked up a Mailstation 150 today at OfficeMax for $9. I followed the instructions for hacking into the settings and was able to get all of the fields editable. (finding a free ISP is another issue. ;) )

The question I have is, has any found a way to hook up a cable between the MS and a notebook/desktop PC via the phone jack and transfer files? (null modem cable?)

Or how about some sort of parallel port laplink-type cable and have the MS "print" to the desktop PC?

This is a very neat-looking device and could be a fantastic note-taker better than the DreamWriter, AlphaSmart, etc.

Thanks in advance...

05-10-2005 21:48:42

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) qDot
Profile | Email
I just got a mailstation from OfficeMax too. I guess they're trying to clear out of them. Can't wait to start playing with it. :)
05-17-2005 12:33:54

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) prathfel
Profile
My Computer Glitched on the last thread reply. I am
re-entering my reply below: (prathfel)

OK - I have gotten a Mailstation 120 (Software Version V4.04E. I now have it
sending and receiving email just fine - works great. I am typing step by
step instructions below.

First - you have to get an email provider. The provider must use a static DNS
for dialup. JUNO, AOL, NETZERO do not - you can't use these.

I found: TOTALUSA.NET http://www.totalusa.net.

Their static DNS Numbers Are: 209.63.02.2 (primary) and 209.197.0.2 (secondary)

They are $1.99 for the first 3 months, and $7.99 thereafer. (Much better than
the earthlink price of $21.95 per month).


So first you need to go to totalusa.net and sign up for an account.
Please mention you were referred by prathfel@totalusa.net - I'll get a free month.

When you sign up, you'll get:

Username: THis is both your email username and your ISP username
Password: This is both your email password and your ISP password
Dialup Number: Be sure to go to the website map (bottom) click on your
state and get the access number for where the box will be.

Now you need to load the settings into the Mailstation.

I am re-writing the instructions below because I had some trouble.

I hold the mailstation sideways (screen facing left) and:

1. Power up the unit using the wall adapter - don't put any batteries in.
2. Push and continously hold "Function" and "D" keys.
3. Take a push pin and put the "Reset" button (in a hole on the back of the unit)
4. You should see some horizontal boxes on the screen lighting up
I DIDN'T TELL YOU TO LET GO of "Function" and "D" yet did I?
5. Next, the following menu comes up. ** MAKE SURE YOUR MENU MATCHES **

Reset System Data
No Clear
Restore Default Account **Very Important
Clean E-mail Data
Clean Address Book Data
Clear All Data

6. OK - Now you can let go of "Function" and "D" keys
7. Use the down arrow to go down one until

Restore Default Account - is in the black box

8. Push "Enter"
9. The next steps #10 through #11 - You have to be quick. Do it exactly as written.
10. Box comes up saying: Are you sure to clear?
Yes - is currently in the black box.
No
** Don't Push Anything Yet **
11. GET READY. You must set it up so you are ready to push "Enter" (not yet!), and
also, unplug the power plug out of the back of the unit, all within about
1/10th of a second.

Yes, 1/10th of a second to do all this.

I hold the unit in my lap with the screen facing me.
I use my left hand to reach around the back of the unit, grab the
power plug and get ready to unplug.
I use my right hand to get ready to hit the "Enter" key.

OK - GET READY - BE REALLY FAST

Push "Enter" and ALMOST SIMULTANEOUSLY PULL OUT THE POWER PLUG

Don't wait for the screen to change, don't count to "1" do it in 1/10th
of a second.

12. Now plug the power plug back in.

13. The scrolling horizontal boxes should "do their thing"

14. Then this menu should appear (** It's different from the last one)

Reset System Data
No Clear - This one is in the black box
Clear Email Data
Clear Address Book Data
Clear All Data

15. With the black box on "No Clear", push "Enter"

16. Now a new menu comes up saying:

Please create a new user account.
OK - OK is in a black box

17. Go ahead and push "Enter"

18. A new menu: User Setting comes up.

19. Fill out the menu with all the info (I write the instructions for this below).

HOW TO FILL OUT THE USER SETTING MENU with TOTALUSA.NET INFO

** Important - if you choose another service provider - you may need
to use different values.

User Name: YOUR WRITTEN NAME This is the name which will appear in
the email header.

Dial-Up No: Put the dialup telephone number here (if local dont use the area code).

(My Dialup number is 844-2008, so I enter here: 844-2008)

Reply-To: username@totalusa.net This is the user name you got when
you signed up.

E-Mail Address: username@totalusa.net Again - user name from signup
(same as Reply-To)

E-Mail Password: password the password you got when you signed up

POP3 Server: mail.totalusa.net
SMTP Server: mail.totalusa.net
ISP Account: username@totalusa.net The ISP Account name is the same as the
email account name.
(Same as Reply-To and E-Mail Address)
ISP Password: password The ISP password is the same as the
email password.
(Same as E-Mail Password)
Primary DNS: 209.063.000.002

*** RIGHT NOW - CHECK ALL YOUR ENTRIES ***


20. At the bottom, it says (in a black box) - Save.
Push the button below the black box to save.

OK - If you entered everything right when you push:

Get Mail

You will get your email.

If you don't get an error message - everything is OK.

TESTING

TOTALUSA does not send you an introduction email. So send yourself an email
to test the receive.

Now send an email from the mailstation to your self to test the sending function.

YOUR DONE - HAVE FUN - GOOD LUCK

06-04-2005 18:20:19

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) mscdex
Profile | Email
I just would like to confirm what blakester said about easily hacking the Mailstation 150 (Blue). I just confirmed this a minute ago.

Hold down Function and D while pressing the reset on the back with a paper clip. Select "Restore Default Account." It'll prompt you yes or no. And at the same time that you hit yes, unplug the power from the wall. Wait a second, then plug it back in and it'll give you the same Reset menu, except now the "Restore Default Account" is gone. Select the Clear Email Data and you will get to a "User Settings" form where you fill out all the data (username, password, dialup no, dns servers, etc.)

Hope that helps you all. :)

06-26-2005 17:50:37

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) stmojo
Profile
Is this a one-time mod? I set up my new MS 150 per the instructions found above with a local ISP, works fine. I was going to change it to another ISP, but since the "Restore Default Account" option is missing, it won't go to the setup screen. Is there another way to edit the fields for phone#, username, password, etc.?
07-01-2005 12:01:22

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) prathfel
Profile
My Computer Glitched on the last thread reply. I am
re-entering my reply below: (prathfel)

OK - I have gotten a Mailstation 120 (Software Version V4.04E. I now have it
sending and receiving email just fine - works great. I am typing step by
step instructions below.

First - you have to get an email provider. The provider must use a static DNS
for dialup. JUNO, AOL, NETZERO do not - you can't use these.

I found: TOTALUSA.NET http://www.totalusa.net.

Their static DNS Numbers Are: 209.63.02.2 (primary) and 209.197.0.2 (secondary)

They are $1.99 for the first 3 months, and $7.99 thereafer. (Much better than
the earthlink price of $21.95 per month).


So first you need to go to totalusa.net and sign up for an account.
Please mention you were referred by prathfel@totalusa.net - I'll get a free month.

When you sign up, you'll get:

Username: THis is both your email username and your ISP username
Password: This is both your email password and your ISP password
Dialup Number: Be sure to go to the website map (bottom) click on your
state and get the access number for where the box will be.

Now you need to load the settings into the Mailstation.

I am re-writing the instructions below because I had some trouble.

I hold the mailstation sideways (screen facing left) and:

1. Power up the unit using the wall adapter - don't put any batteries in.
2. Push and continously hold "Function" and "D" keys.
3. Take a push pin and put the "Reset" button (in a hole on the back of the unit)
4. You should see some horizontal boxes on the screen lighting up
I DIDN'T TELL YOU TO LET GO of "Function" and "D" yet did I?
5. Next, the following menu comes up. ** MAKE SURE YOUR MENU MATCHES **

Reset System Data
No Clear
Restore Default Account **Very Important
Clean E-mail Data
Clean Address Book Data
Clear All Data

6. OK - Now you can let go of "Function" and "D" keys
7. Use the down arrow to go down one until

Restore Default Account - is in the black box

8. Push "Enter"
9. The next steps #10 through #11 - You have to be quick. Do it exactly as written.
10. Box comes up saying: Are you sure to clear?
Yes - is currently in the black box.
No
** Don't Push Anything Yet **
11. GET READY. You must set it up so you are ready to push "Enter" (not yet!), and
also, unplug the power plug out of the back of the unit, all within about
1/10th of a second.

Yes, 1/10th of a second to do all this.

I hold the unit in my lap with the screen facing me.
I use my left hand to reach around the back of the unit, grab the
power plug and get ready to unplug.
I use my right hand to get ready to hit the "Enter" key.

OK - GET READY - BE REALLY FAST

Push "Enter" and ALMOST SIMULTANEOUSLY PULL OUT THE POWER PLUG

Don't wait for the screen to change, don't count to "1" do it in 1/10th
of a second.

12. Now plug the power plug back in.

13. The scrolling horizontal boxes should "do their thing"

14. Then this menu should appear (** It's different from the last one)

Reset System Data
No Clear - This one is in the black box
Clear Email Data
Clear Address Book Data
Clear All Data

15. With the black box on "No Clear", push "Enter"

16. Now a new menu comes up saying:

Please create a new user account.
OK - OK is in a black box

17. Go ahead and push "Enter"

18. A new menu: User Setting comes up.

19. Fill out the menu with all the info (I write the instructions for this below).

HOW TO FILL OUT THE USER SETTING MENU with TOTALUSA.NET INFO

** Important - if you choose another service provider - you may need
to use different values.

User Name: YOUR WRITTEN NAME This is the name which will appear in
the email header.

Dial-Up No: Put the dialup telephone number here (if local dont use the area code).

(My Dialup number is 844-2008, so I enter here: 844-2008)

Reply-To: username@totalusa.net This is the user name you got when
you signed up.

E-Mail Address: username@totalusa.net Again - user name from signup
(same as Reply-To)

E-Mail Password: password the password you got when you signed up

POP3 Server: mail.totalusa.net
SMTP Server: mail.totalusa.net
ISP Account: username@totalusa.net The ISP Account name is the same as the
email account name.
(Same as Reply-To and E-Mail Address)
ISP Password: password The ISP password is the same as the
email password.
(Same as E-Mail Password)
Primary DNS: 209.063.000.002

*** RIGHT NOW - CHECK ALL YOUR ENTRIES ***


20. At the bottom, it says (in a black box) - Save.
Push the button below the black box to save.

OK - If you entered everything right when you push:

Get Mail

You will get your email.

If you don't get an error message - everything is OK.

TESTING

TOTALUSA does not send you an introduction email. So send yourself an email
to test the receive.

Now send an email from the mailstation to your self to test the sending function.

YOUR DONE - HAVE FUN - GOOD LUCK

07-02-2005 13:31:07

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) stmojo
Profile
Derr... When I actually read AND FOLLOW the instructions, everything works right.
07-05-2005 09:41:54

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) Youngert
Profile
Thanks everyone, I got my MS150 (blue one) unlocked. However, this procedure won't work on the MS 350 (wireless one). Is anyone working on hacking this MS350 unit?
07-29-2005 11:13:05

New MessageRE:Is MailStation 150 Hackable? (modified 0 times) brightraven
Profile
Thank you so much for all the valuable information in this thread.

First, my question: Is there a free dial-up service that can be used on the mailstation 150 (as opposed to the $7.99 one listed in this thread)?

Now the details. :)

I had a mailstation 150 that I've had for years. Though the service on it had been canceled, it would still allow me to send email for free (through earthlink and its original settings). I couldn't receive email on it anymore, but I could send it. This actually worked out perfectly for me because that's essentially all I needed the mailstation for -- sending email, and not receiving it. It's a long story as to why -- I am disabled, have neurological problems, etc -- it's much easier for me to type on the mailstation than a laptop.

Anyway, the LCD screen on my mailstation went dead, so I ordered a new mailstation 150 for $5 on ebay. However, unlike my old mailstation 150, this one won't let me send email even when I enter in all my old information on it. Regretfully, I can't see the screen on my old one, so I can't know what information allowed for this earlier loop hole (perhaps it used a different pop 3 server or primary DNS?).

While I could sign up for a low cost dial up, I really can't afford to as I have a very low income. So, I'm curious if anyone has had success with a free dial up. I'm also curious if anyone has any idea why my old mailstation still let me send email despite no longer having an account, and how I could maybe set that up to work on the new one.

Thanks for any assistance. Hope this made sense. I am having to type with my eyes closed. :)

02-02-2011 08:16:43

Reply to Thread | Printer |
All times are PSTPowered by UltraBoard v1.62



Copyright © 2000, Netmake Inc. All Rights Reserved.
See Terms and Conditions for more information.




i-opener opener laptop notebook computer help drivers dll free windows dos repair fix linux mac macintosh 2000 95 98 nt pc configure hardware software sound video netscape explorer network networking lan wan software cmos fat bios printer card mouse modem ide scsi cd rom controllers scanner tape hard drive cgi scripts source code mp3