These new fonts are great compared to other default fonts.
These fonts make the screen less busy.
You can take a look at the "SHARED" youtube video
These fonts make the screen less busy.
You can take a look at the "SHARED" youtube video
Showing posts with label TYT MD-380. Show all posts
Showing posts with label TYT MD-380. Show all posts
Tytera MD380 Jailbreak firmware now available for cheap digital walkie-talkie allowing DMR scanning
In the last years, DMR and MOTOTRBO (a.k.a. TRBO a Motorola Solutions branded DMR Radios ) has become a very popular digital voice mode on the UHF and VHF bands and the MD380 radio is the latest cheap DMR walkie-talkie to come out of China.
The question is, is it any good? The longer answer is slightly more complicated, and involves discussing the difference in price between this radio and other more expensive, but higher quality, radios. But i can tell you that a group of hams here recently purchased the Beihaidao DMR radio (also sold under brands like Tytera, KERUIER or Retevis) and have been having excellent results with them.
Every once in a great while, a piece of radio gear catches the attention of a prolific hardware guru and is reverse engineered. A few years ago, it was the RTL-SDR, and since then, software defined radios became the next big thing. Last Shmoocon, Travis Goodspeed presented his reverse engineering of the MD380 digital handheld radio.
The hack has since been published in PoC||GTFO 0x10 (donwload site) with all the gory details that turn a radio under $200 into the first hardware scanner for digital mobile radio. For comparison, the cost of a Motorola MotoTRBO UHF XPR 7550 DMR radio can reach $800.
The MD380 is a fairly basic radio with two main chips: an STM32F405 with a megabyte of Flash and 192k of RAM, and an HR C5000 baseband. The STM32 has both JTAG and a ROM bootloader, but both of these are protected by the Readout Device Protection (RDP). Getting around the RDP is the very definition of a jailbreak.
In Digital Mobile Radio, audio is sent through either a public talk group or a private contact. The radio is usually set to only one talk group, and so it’s not really possible to listen in on other talk groups without changing settings. A patch for promiscuous mode – a mode that puts all talk groups through the speaker – is now out.
Here in the US Project 25 (P25 or APCO-25) is a suite of standards for digital radio communications for federal users, but for state/county and local public safety organizations including police dispatch channels are using Mototrbo DMR digital standard.
How to install the Hacked Firmware for the MD380. ( Here is a YouTube Video on the Update Process to the Jailbreak of the Beihaidao Radio)
You need source code from https://github.com/travisgoodspeed/md380tools this download does not ship with firmware to avoid legal trouble. Instead it grabs firmware from the Internet, decrypts it, and applies patches to that revision. The output files have a .img extension when unencrypted, and a .bin extension when packaged for the official firmware updater.
Most radios use a serial interface for programming, however MD380 is native USB. Building a USB programming cable for your radio is as easy as soldering on the proper cable adapter. Third party cables are available from ebay.
Files from this process include:
unwrapped.img: factory firmware after decrypting.
prom-public.img and prom-public.bin: patched to monitor all talk groups.
prom-private.img and prom-private.bin: patched to monitor all talk groups, private calls.
experiment.img and experiment.bin: patched to monitor all talk groups, private calls, and sideload alternate firmware.
You can install any of these patched firmware files into your MD380 by using the respective .bin file with the Tytera Windows firmware upgrade tool, "upgrade.exe", available inside their firmware upgrade downloads. Here are the steps:
Turn off your MD380 using the volume knob.
Attach the Tytera USB cable to the SP and MIC ports of your MD380.
Attach the Tytera USB cable to your host computer.
Hold down the PTT and the button above the PTT button (not the button with the "M" on it).
Turn on your MD380 using the volume knob.
Release the buttons on the radio.
The status LED should be on and alternating between red and green, indicating you're in flash upgrade mode.
Start the Tytera "Upgrade.exe" program.
Click "Open Update File" and choose one of the .bin files produced from the process above.
Click "Download Update File" and wait for the flash update process to finish. It takes less than a minute.
Turn off your MD380 using the volume knob.
Disconnect the USB cable from your MD380 and host computer.
Turn the MD380 back on, and you should see the "PoC||GTFO" welcome screen.
The question is, is it any good? The longer answer is slightly more complicated, and involves discussing the difference in price between this radio and other more expensive, but higher quality, radios. But i can tell you that a group of hams here recently purchased the Beihaidao DMR radio (also sold under brands like Tytera, KERUIER or Retevis) and have been having excellent results with them.
Every once in a great while, a piece of radio gear catches the attention of a prolific hardware guru and is reverse engineered. A few years ago, it was the RTL-SDR, and since then, software defined radios became the next big thing. Last Shmoocon, Travis Goodspeed presented his reverse engineering of the MD380 digital handheld radio.
The hack has since been published in PoC||GTFO 0x10 (donwload site) with all the gory details that turn a radio under $200 into the first hardware scanner for digital mobile radio. For comparison, the cost of a Motorola MotoTRBO UHF XPR 7550 DMR radio can reach $800.
The MD380 is a fairly basic radio with two main chips: an STM32F405 with a megabyte of Flash and 192k of RAM, and an HR C5000 baseband. The STM32 has both JTAG and a ROM bootloader, but both of these are protected by the Readout Device Protection (RDP). Getting around the RDP is the very definition of a jailbreak.
In Digital Mobile Radio, audio is sent through either a public talk group or a private contact. The radio is usually set to only one talk group, and so it’s not really possible to listen in on other talk groups without changing settings. A patch for promiscuous mode – a mode that puts all talk groups through the speaker – is now out.
Here in the US Project 25 (P25 or APCO-25) is a suite of standards for digital radio communications for federal users, but for state/county and local public safety organizations including police dispatch channels are using Mototrbo DMR digital standard.
How to install the Hacked Firmware for the MD380. ( Here is a YouTube Video on the Update Process to the Jailbreak of the Beihaidao Radio)
Most radios use a serial interface for programming, however MD380 is native USB. Building a USB programming cable for your radio is as easy as soldering on the proper cable adapter. Third party cables are available from ebay.
Files from this process include:
unwrapped.img: factory firmware after decrypting.
prom-public.img and prom-public.bin: patched to monitor all talk groups.
prom-private.img and prom-private.bin: patched to monitor all talk groups, private calls.
experiment.img and experiment.bin: patched to monitor all talk groups, private calls, and sideload alternate firmware.
You can install any of these patched firmware files into your MD380 by using the respective .bin file with the Tytera Windows firmware upgrade tool, "upgrade.exe", available inside their firmware upgrade downloads. Here are the steps:
Turn off your MD380 using the volume knob.
Attach the Tytera USB cable to the SP and MIC ports of your MD380.
Attach the Tytera USB cable to your host computer.
Hold down the PTT and the button above the PTT button (not the button with the "M" on it).
Turn on your MD380 using the volume knob.
Release the buttons on the radio.
The status LED should be on and alternating between red and green, indicating you're in flash upgrade mode.
Start the Tytera "Upgrade.exe" program.
Click "Open Update File" and choose one of the .bin files produced from the process above.
Click "Download Update File" and wait for the flash update process to finish. It takes less than a minute.
Turn off your MD380 using the volume knob.
Disconnect the USB cable from your MD380 and host computer.
Turn the MD380 back on, and you should see the "PoC||GTFO" welcome screen.
TYT-TYTERA DMR Simplex Setup
I am also having trouble communicating with my 380 simplex digital to my CSI 750 digital. Anybody have pointers for what should be in each codeplug?
Set both radios up with
Color Code 1
Slot 1
TX Contact - Local TG9 - Not in the UK it's not
TX Admit - Always
And of course a single frequency simplex channel, a 2 frequency channel will not work.
Set both radios up with
Color Code 1
Slot 1
TX Contact - Local TG9 - Not in the UK it's not
TX Admit - Always
And of course a single frequency simplex channel, a 2 frequency channel will not work.
normally a simplex channel is used with time slot 1 and I prefer "all call" - others use TG 99 (but then TG 99 must be set on both devices). Screenshot of one of my simplex channels attached.
MD-380 setting.ini
Yes the file is setting.ini. The path for me with a default Windows 7 install is:
- C:\Program Files (x86)\MD_380\MD_380\SoftWare_EN\setting.ini
Note it is in the Programs folder so you will generally need to Administrator to modify.
I'm using MD_380 v 1.30. Here's what my setting.ini looks like:
[setup]
language=english
testmode=1
model=DR780
oemmodel=MD_380
oemindex=255
windowtext=CPS MD_380
readwrite=0
chcount=1000
zonecount=250
MD-380 calibration settings file
It looks like that is the radio's calibration settings.
Did you just stumble across that reading the .ini file?
The part of this that is quite helpful is that appears you can make a backup of your radio's
calibration data in case it is ever lost or corrupted. This could save your radio from being
a brick or needing a trip back to a dealer.
The steps to save the calibration data:
1. Change 'testmode=0' to 1 in the 'setup` section of the settings.ini file
2. connect the radio
3. Start MD-380
4. Hit Control-T which will read the data off the radio.
5. Click "Save Test Data" which will save a .test file with an 8 KB binary of the calibration data.
6. Put the .test file some place where you can find it if you need it.
Did you just stumble across that reading the .ini file?
The part of this that is quite helpful is that appears you can make a backup of your radio's
calibration data in case it is ever lost or corrupted. This could save your radio from being
a brick or needing a trip back to a dealer.
The steps to save the calibration data:
1. Change 'testmode=0' to 1 in the 'setup` section of the settings.ini file
2. connect the radio
3. Start MD-380
4. Hit Control-T which will read the data off the radio.
5. Click "Save Test Data" which will save a .test file with an 8 KB binary of the calibration data.
6. Put the .test file some place where you can find it if you need it.
MD-380 Official Speaker MIC
Here is a picture of the three mics side-by-side.... Quality has its price...
Comment below if you have the model numbers or names.
TYT Tytera customer warning
TYT Tytera customer warning
How does that go again...you can paint a old taxi a new color, but it's still a taxi?.....something like that?
I HIGHLY suspect the new MD-390 is NOT a improved model, but the same exact guts from a 380 with a larger battery.
I have lost any faith in TYT to produce a decent product. I had also ordered a quad band mobile from them. We sent that pile of crap (well it LOOKED nice) back to them (on their dime). The receiver was as selective as a crystal diode set.
TYT tried HARD really hard to screw us, but we had Paypal on our side.Paypal got involved and found in our favor 4 times! It got to the point were we contacted TYT and demanded to know how they wanted their shit sent home.They finally gave us a number to use with DHL (their account). Meanwhile we got threats from Joey Pan and his boss "Sophia", they were extremely angry at Paypal for refunding us and told Paypal they could not do that! (they need to read their Paypal agreement).
Would we do business with TYT ever again? NOT ON A BET!
All I can say is this.....buy from a store thats going to back the sale.They are going to be your backup.Ask this question...."What is the warranty period on this product and does it include postage".If you deal directly with TYT THERE IS NO WARRANTY.TYT never wants to see that shit again.
Now if spending $200 on a radio is "Expendable" like fruit that's going to spoil, you are golden, but if you see this as a INVESTMENT..think again.I would love to hear from others that have needed parts support from TYT.You drop your MD-380 and crack the case, or break a knob or control.So far as we see it, the only thing you can get is extra batteries and belt clips.If you have a Motorola, Kenwood, Icom,Yaesu..getting parts is no problem.
MD380 out of band reception
I have worked out how to program out of band. I have been able to enter RX freq upto 498.000mhz.
Change this in the setup.ini
Original value is
The last two numbers determines the frequency.
You can then enter any freq from the keypad you like upto around 498.
My radio works really well.
The only problem is that when you program your radio using the software it will only only you to enter VHF 136 - 174.
If you ever want to go back to original just change the values in the setup.ini back to original
It's likely chirp can be used to program out of band. A chirp plugin already exist although I don't know how complete it is. Just because the display says something it doesn't mean it will actually work. I'm sure there are filters in the radio to attenuate signals outside the bands it was meant for. This make the question now.
How far out of band can the radio TX/RX effectively?
[setup]
language=english
testmode=1
model=DR780
oemmodel=MD_380
oemindex=255
windowtext=CPS MD_380
readwrite=0
chcount=1000
zonecount=250
password=0
readmodel=0
exeflag=0
exepassword=777777
languagemenu=1
jstdefault=0
voiceencrypt=1
timesetting=1
[FreqRange]
freq0=[136-174MHz]
data0=60134017
freq1=[350-400MHz]
data1=00350040
freq2=[400-520MHz]
data2=00400052
freq3=[450-520MHz]
data3=00450052
I am able to program upto 498 and it receives fine, once I go over 498, it seems very deaf.
You need to program the radio with a codeplug that already has all your channels you need except for the ones above 480Mhz. You then add the extra out of band channels you need, write this to the radio, then you have to program each channel from the keyboard, you require above 480.
Make sure when you program the radio with the TYT software you set the DIGITAL or ANALOGUE before you write to the radio as you can not change this via the keyboard.
You can program from the keypad in a limited capacity. It's really only useful in circumstances where you are modifying a channel. There is no way to create a new channel. To do it you must enable the option using the software first. Then it will appear under utilities.
The chirp plug-in is available via github from travisgoodspeed. It's part of the 380usbtools package. It's incomplete and can only do the analogue programming. Furthermore it requires a manual read/write to the radio currently.
TYT MD-380 DMR UHF $129
TYT MD-380 DMR UHF HT Radio for MotoTRBO
$199.99 - $129
http://www.grapevineamateurradio.com/store/?model_number
Model Number: MD380
Battery Eliminator
Battery Eliminator - Car Adapter (+$14.99 per order)
Your Price: $129.00
40 Left in Stock
$199.99 - $129
http://www.grapevineamateurradio.com/store/?model_number
Model Number: MD380
Battery Eliminator
Battery Eliminator - Car Adapter (+$14.99 per order)
Your Price: $129.00
40 Left in Stock
MD-380 .rdt file Memory Map
[csidmr] .rdt file memory map
I have been writing the Zone Manager program and as a consequence had to re-created the memory map notes. I have now uploaded them to the yahoo.com user group [csidmr] files area.
This is far from a complete document. Only parts of the memory map have been decoded. But it should prove a starting point for anyone wanting to investigate further.
The format is valid for the original CS700 firmware and the MD380 firmware. It almost certainly is not correct for the CS700A or CS750.
I am not able to answer questions on this document. If you don't understand it then you probably shouldn't be playing about with .rdt files. There is a risk of bricking your radio if you do.
Contact lists for uploading to MD380
Here is a source, supposedly updated daily, with all DMR contacts sorted by nation and state.
The foxhollow server downloads & processes the nightly full database from the DMR-MARC website. If you know of someone that got a new ID today, the foxhollow download ZIP file will have that new ID by tomorrow morning.
I currently create the files in CS700/MD380 CSV format as well as CS750 XLSX format. If another type of file is needed, send me a message and I'll add it to the daily dumps.
Posted by: mark-yahoo@foxhollow.ca
TYT MD380 DMR HT - Firmware Upgrading Guidelines
TYT MD380 DMR HT - Upgrading Guidelines (V1.0.0)
Run ‘DMR Upgarde Setup vx.xx.exe’ to install the upgrading tool.
Install the USB driver if not already installed.
Then run the upgrading software tool, then
1) Open the upgrading object file (the firmware update .bin file);
2) Connect the radio to the PC by the programming cable;
3) Press the PTT & TopKey and then power up the radio;
4) Click ‘Download upgrade file’ button to start upgrading;
5) Wait and until the PC reminde Success or Failure (about 1minute);
6) Power Off the radio. hen run the upgrading software tool, then
Install the USB driver if not already installed.
Then run the upgrading software tool, then
1) Open the upgrading object file (the firmware update .bin file);
2) Connect the radio to the PC by the programming cable;
3) Press the PTT & TopKey and then power up the radio;
4) Click ‘Download upgrade file’ button to start upgrading;
5) Wait and until the PC reminde Success or Failure (about 1minute);
6) Power Off the radio. hen run the upgrading software tool, then
TYT-TYTERA] Unable to clear settings using CPS
This happens when the channel selector knob is set to a channel that is not programmed. Make sure you select a channel with the knob that is programmed. It will be necessary to use the CPS and program some channels if none of them are programmed.
MD-380 "Low" pwr. RF output too low
A friend of mine and I have found that our MD-380 HT's have in the "Low" RF output power setting ONLY 0.5 watt.
According to the manual it should be 1 watt.
Has anyone else found, using a FM signal on 440 MHz, the same?
My Firmware ver.: D002.030 CP ver.: V01.30
S/N 1505A54xxx
Could this RF output power be corrected in the firmware?
MD-380 motorboat sound
When I transmit with a MD-380 and a rubber-duck antenna, there is a "motorboat" sound on my transmit audio when using a Retelvis speaker mic. I opened the mic and observed that they are not using a shielded mic cable. When I transmit into a dummy load or an outside antenna the "motorboat" sound is gone.
Has anyone been able to fix this RF into audio problem and what speaker microphones do not have this problem?
The problem goes away when you use the proper mic for it... such as the following unit.
Digital Ham Radio / Amateur Radio
https://groups.io/g/DigitalHamRADIO
Amateur Radio Users Support Group
https://groups.io/g/AmateurRadio
North America - USA 🇺🇸 / Canada 🇨🇦 Amateur Frequencies
A shared discussion about North America Frequencies.
https://groups.io/g/Frequency
Radio Scanners
https://groups.io/g/Scanners
Whistler Scanners [Whistler, Uniden]
Tytera MD380 USB to Cable Pinout Diagram
Tytera MD380 USB to Cable Pin out Diagram:
Plug Diagram:
GND (USB 4)to 2.5mm plug Sleeve/Shield
D+ (USB 3)to 3.5mm Tip
D- (USB 2) to 2.5mm Ring
+5 (USB 1)N.C.
Digital Ham Radio / Amateur Radio
https://groups.io/g/DigitalHamRADIO
Amateur Radio Users Support Group
https://groups.io/g/AmateurRadio
North America - USA 🇺🇸 / Canada 🇨🇦 Amateur Frequencies
A shared discussion about North America Frequencies.
https://groups.io/g/Frequency
Radio Scanners
https://groups.io/g/Scanners
Whistler Scanners [Whistler, Uniden]
D+ (USB 3)to 3.5mm Tip
D- (USB 2) to 2.5mm Ring
+5 (USB 1)N.C.
Digital Ham Radio / Amateur Radio
https://groups.io/g/DigitalHamRADIO
Amateur Radio Users Support Group
https://groups.io/g/AmateurRadio
North America - USA 🇺🇸 / Canada 🇨🇦 Amateur Frequencies
A shared discussion about North America Frequencies.
https://groups.io/g/Frequency
Radio Scanners
https://groups.io/g/Scanners
Whistler Scanners [Whistler, Uniden]
Tytera TYT MD-380 DMR import contacts - update contact list
Tytera TYT MD-380 import contacts - update contact list
Can Someone tell me how to go to the DMR Database (www.DMR-MARC.net) and import contacts to my radio TYT MD380 Or upload a file that I can Import into my Tytera TYT MD-380
As to your question, you can go to Index of /DMR/Contacts
http://www.foxhollow.ca/DMR/Contacts/
Summary of files containing DMR IDs and Callsigns grouped by Country
http://www.foxhollow.ca/DMR/Contacts/ALL-DMR-Contacts-README.TXT
The CS700 files are saved as .CSV for easy import using the G4EML Contact Manager The CS750 files are saved as .XLSX as required by the CPS software *The MD380 uses the same files as the CS700 This file is updated daily and can be downloaded from: http://www.foxhollow.ca/DMR/Contacts/ALL-DMR-Contacts.ZIP
to get the ZIP file labeled ALL-DMR-Contacts.ZIP . Inside is a CS750 file broken down by state and area, as well as all the countries (and an entire US/ Canada) file. Here is the "unfortunately" part of the message- we are waiting for an update that will allow the software to import over 1000 contacts into your CPS CSI software to download to the radio. I assume you don't want to manually enter every contact, which is somewhere near 9000 contacts right now. The site is updating daily. The bottom line, you can probably import your home state, but the whole US is out of the question right now for importing until we get our software update, which we were told was happening very soon. It was not in the last update from 7-31.
Contact Manager V102
http://n0gsg.no-ip.org/contact-manager/ContactManagerV102.exe
ContactManager.exe (Version 1.02) Click here to download the program. This is the latest version of the program. The following enhancements and corrections are included in Version 1.02:
Can Someone tell me how to go to the DMR Database (www.DMR-MARC.net) and import contacts to my radio TYT MD380 Or upload a file that I can Import into my Tytera TYT MD-380
As to your question, you can go to Index of /DMR/Contacts
http://www.foxhollow.ca/DMR/Contacts/
Summary of files containing DMR IDs and Callsigns grouped by Country
http://www.foxhollow.ca/DMR/Contacts/ALL-DMR-Contacts-README.TXT
The CS700 files are saved as .CSV for easy import using the G4EML Contact Manager The CS750 files are saved as .XLSX as required by the CPS software *The MD380 uses the same files as the CS700 This file is updated daily and can be downloaded from: http://www.foxhollow.ca/DMR/Contacts/ALL-DMR-Contacts.ZIP
to get the ZIP file labeled ALL-DMR-Contacts.ZIP . Inside is a CS750 file broken down by state and area, as well as all the countries (and an entire US/ Canada) file. Here is the "unfortunately" part of the message- we are waiting for an update that will allow the software to import over 1000 contacts into your CPS CSI software to download to the radio. I assume you don't want to manually enter every contact, which is somewhere near 9000 contacts right now. The site is updating daily. The bottom line, you can probably import your home state, but the whole US is out of the question right now for importing until we get our software update, which we were told was happening very soon. It was not in the last update from 7-31.
Contact Manager V102
http://n0gsg.no-ip.org/contact-manager/ContactManagerV102.exe
ContactManager.exe (Version 1.02) Click here to download the program. This is the latest version of the program. The following enhancements and corrections are included in Version 1.02: