No Privacy patch not working

Custom Firmware / Bootloader HackieboxNG - Bootloader for CC3200 (V1, V2)
1

Hey there,

I tried using the `noPrivacy` patch, but sadly it doesn’t seem to be working, or I misunderstood how it works.

First, that’s my ngCfg.json:

{
    "general": {
        "activeImg": "ofw2",
        "_descWaitForPress": "Waits for an earpress on startup",
        "waitForPress": false,
        "_descWaitForBoot": "Waits for an earpress before firmware boot",
        "waitForBoot": false,
        "waitTimeoutInS": 60,
        "_descMinBatteryLevel": "Divide through 2785 to get voltage",
        "minBatteryLevel": 8869,
        "ofwFixFlash": "/sys/pre-img.bin",
        "_descSerialLog": "Logging only works with the debug build!",
        "serialLog": false,
        "_descLogLevel": "0:Trace - 5:Fatal",
        "logLevel": 0,
        "_descLogColor": "Use colors in log output",
        "logColor": false
    },
    "ofw1": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true,
        "bootFlashImg": true,
        "flashImg": "/sys/pre-img.bin"
    },
    "ofw2": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": true,
        "patches": ["blockCheck.310", "noPass3.310", "uidCheck.307", "noPrivacy.310", "altCa.305", "altUrl.305"]
    },
    "ofw3": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "patches": ["altCa.305", "altUrl.tc.fritz.box"]
    },
    "cfw1": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "cfw2": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "cfw3": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "add1": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,        
        "patches": ["blockCheck.310", "noCerts.305", "noPass3.310", "noPrivacy.305", "uidCheck.307"]
    },
    "add2": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,
        "patches": ["altCa.305", "altUrl.305"]
    },
    "add3": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,
        "patches": ["altCa.305", "altUrl.305"]
    }
}

These are my firmware versions:

C:\Users\andy\Documents\Toniebox\toniebox\tools>python firmware_info.py ..\..\Backup\ExtractedFromBox\sys\mcuimg.bin
['09c6374', 'Fri Sep  2 14:15:01 CEST 2016']

C:\Users\andy\Documents\Toniebox\toniebox\tools>python firmware_info.py ..\..\Backup\ExtractedFromBox\sys\mcuimg1.bin
Firmware Version:       PD_V3.1.0_BF5-0
Firmware Version:       master

Creation Date:          15 Feb 13:41

Read SHA256:            5a25756293f7263013ad70f875ed35412cae1b1d6662e5860bf36b81292a807e
Calculated SHA256:      5a25756293f7263013ad70f875ed35412cae1b1d6662e5860bf36b81292a807e
GIT Shorthash:          b6e1515

C:\Users\andy\Documents\Toniebox\toniebox\tools>python firmware_info.py ..\..\Backup\ExtractedFromBox\sys\mcuimg2.bin
Firmware Version:       EU_V3.1.0_BF2-0
Firmware Version:       3.1.0_BF2_EU

Creation Date:          06 May 20:21

Read SHA256:            36ef76a6937a128d3bf125d7f08c0c120387e44f7b0d346203a7171f828dafbe
Calculated SHA256:      36ef76a6937a128d3bf125d7f08c0c120387e44f7b0d346203a7171f828dafbe
GIT Shorthash:          2640c1f

mcuimg3.bin throws an error

So I’m using a 310 patch, where it exists, as for the `noPrivacy` patch. I also tried the `noPrivacy.305` patch, but it also doesn’t work.

Behavior: When I place a Tonie on the box and remove it, I can still not read it with my phone; it’s not recognized, so it still/again seems to be in privacy mode. I thought that’s what its supposed to do, or did I misunderstand what it does? Or is it really broken?

Thanks for the help and greetings,

Andy!

2

Looks like your phone doesn’t support the tags or you are holding it wrong. Phones have smaller antennas and you’ll need to find the right spot for it to work.

3

Pretty sure it’s not an antenna issue. I tested it with different real Tonies and different Travel Tonies (using RFIDFriend tags), they’re all not detected. I can read fresh RFIDFriend NFC tags just fine, no problem. Also other NFC chips (my ID card, an access chip I have, etc…) work well. Only real Tonies and Travel Tonies that have seen the box once are not detected.

So I’m pretty sure the patch is not working for me for some reason :confused:

I also tried removing other patches and only have these three: `“patches”: [“noPrivacy.305”, “altCa.305”, “altUrl.305”]`, but sadly still not working :confused:

4

It is unlikely new Tonies have privacy mode disabled.

Use the debug version of the bootloader, be sure UART log output is enabled in the config and check the output on boot.

5

Nono, you misread/understood: That “have seen the box once” was related to Travel Tonies/RFIDFriend tags. I’m not saying that new Tonies have privacy disabled :wink:

I currently don’t have wires soldered to the PCB and don’t have a fitting clamp (yet). When I have it, I gonna hook it up via UART and check the debug output.