This thing has been driving me to distraction, I purchased two units almost a year ago and have been unable to use them.

The company apparently went out of business, and only a "dealer" can reset them to factory defaults.

I have attempted to hack the unit and change the password(s) and have have absolutely no luck.

The system is designed around a DGE TX486 PC104 board and a proprietary Active-Imaging I/O board.

The TX486 has two AMD 29F016 flash chips for memory. The first 32k are used for BIOS and the rest become a bootable disk.

I have removed the TX486 from the unit and built an interface, I can access the BIOS and boot the unit with a 2.5" IDE drive.

I have been unable to obtain any drivers to mount the flash disk.

I hope someday to encounter someone who has the "backdoor" password(s) for the unit. Until then, it remains shelved.

With the help of Stephen Day I was able to obtain the backdoor password by dumping the flash disk.

Username "backdoor" password "ploppy" - keep in mind that the username can be changed by nw-admin, so it might not work for you.

Unfortunately, even with this password I was stumped as to what to do: I end up at a bash prompt with no available commands to edit or modify files.

The default shell for user "backdoor" is /bin/sh. The default shell for "nw-admin" is mvnet/etc/htdocs.

I tried to invoke sh with htdocs and received an error. (htdocs is a script to set passwords, ip's, ect.)  I hope that snippet will assist others and perhaps they can pass back to me what to do from the bash prompt once access is gained: I can post the instructions here for future users.

Further searching in the data dump finally turned up another set of passords. They were encrypted.

With a decryption program, we were able to finally figure out what the passwords were currently set to.

This process is beyond most users, however, and I hope to someday have a simpler answer.

It would be very nice to know just what the backdoor allows a service tech to accomplish. It is my hope that someday one will see this article and tell me!

MV1000 Manual

Technical Summary

l 1V pk-pk

l x1 - 768 x 576 (640 x 480)

l x2 - 384 x 288 (320 x 240)

l x4 - 192 x 144 (160 x 120)

l x8 - 96 x 72 (80 x 60)

l Frame

l Odd/even field

Configurable

l image transmission delay

l compression

l contrast

l chrominance

l brightness

l hue

l standard routers

l serial T/A

l serial modem

l configuration and debug

l serial modem or T/A

l 6 channels simultaneously

l 60ms switch and sync. time

l 2 images/sec from all 6 channels

l administrator

l user

l 16 presets

l Web page control

l video pages (optional)

l administration site

l Navigator

l Communicator

l 3.0x

l 4.0x

l 5.0x

l pan-tilt controller (optional)

l operation

l network traffic

l clean contact relays

l up to 1A 30VDC

l visible indicator

l Standard IEC connector

Remember: Questions can be posted in the FORUM section !