TYT-TYTERA] Unable to clear settings using CPS
This happens when the channel selector knob is set to a channel that is not programmed. Make sure you select a channel with the knob that is programmed. It will be necessary to use the CPS and program some channels if none of them are programmed.
TYT MD380 Firmware 2.32 Cps1.30
TYT MD380 Firmware 2.32 Cps1.30
Firmware 2.32 /Cps1.30 didn't solve the botom button preselection of "zone" . I programmed upper buton with scan ON/OFF : working fijne and lower one with zone selection : no action
We were having an issue and were told that it was because we used the old version of the programming software with the new firmware. Clearing the transceiver, reloading the firmware and reloading your code plug using the corresponding version of the programming software did the trick.
We programmed our units with the upper button for Power and Scan the lower for Monitor and Zone. All working fine.
Firmware 2.32 /Cps1.30 didn't solve the botom button preselection of "zone" . I programmed upper buton with scan ON/OFF : working fijne and lower one with zone selection : no action
We were having an issue and were told that it was because we used the old version of the programming software with the new firmware. Clearing the transceiver, reloading the firmware and reloading your code plug using the corresponding version of the programming software did the trick.
We programmed our units with the upper button for Power and Scan the lower for Monitor and Zone. All working fine.
[TYT-TYTERA] MD-380 Firmware Hacked
Just read this on hackaday.
Every once in a great while, a piece of radio gear catches the attention of a prolific hardware guru and is reverse engineered. A few years ago, it was the RTL-SDR, and since then, software defined radios became the next big thing. Last weekend at Shmoocon, [Travis Goodspeed] presented his reverse engineering of the Tytera MD380 digital handheld radio. The hack has since been published in PoC||GTFO 0x10 (56MB PDF, mirrored) with all the gory details that turn a $140 radio into the first hardware scanner for digital mobile radio.
The Tytera MD380 is a fairly basic radio with two main chips: an STM32F405 with a megabyte of Flash and 192k of RAM, and an HR C5000 baseband.
The STM32 has both JTAG and a ROM bootloader, but both of these are protected by the Readout Device Protection (RDP). Getting around the RDP is the very definition of a jailbreak, and thanks to a few forgetful or lazy Chinese engineers, it is most certainly possible.
The STM32 has both JTAG and a ROM bootloader, but both of these are protected by the Readout Device Protection (RDP). Getting around the RDP is the very definition of a jailbreak, and thanks to a few forgetful or lazy Chinese engineers, it is most certainly possible.
MD-380 "Low" pwr. RF output too low
A friend of mine and I have found that our MD-380 HT's have in the "Low" RF output power setting ONLY 0.5 watt.
According to the manual it should be 1 watt.
Has anyone else found, using a FM signal on 440 MHz, the same?
My Firmware ver.: D002.030 CP ver.: V01.30
S/N 1505A54xxx
Could this RF output power be corrected in the firmware?
STM32F Device in DFU Mode
| DM-380 Interface | |||||||
| STM32F Device in DFU Mode | |||||||
| Connector | Function USB | Function Acc | Colour | Kenwood Pin | USB Pin | MPU Pin | MPU Function |
| 2.5mm Sleeve | GND | GND | BLA | 6 | 4 | - | - |
| 2.5mm Ring | D- | - | WHI | 6 | 2 | 32 | PA11 |
| 2.5mm Tip | - | SPK | - | 1 | - | - | - |
| 3.5m Sleeve | - | PTT | - | 4 | - | - | - |
| 3.5mm ring | - | MIC | - | 2 | - | - | - |
| 3.5mm Tip | D+ | - | GRN | N.C. | 3 | 33 | PA12 |
Create a quick plug for the TYT MD-380
We have found a way to quickly create a code plug for the new DMR postage TYT of the MD-780. It is based on the code plug for the CS700 Dick, PH0DV. You kuntt this free Hex Editor here to download.
Open TYT MD380 code plug with the Hex Editor with extension xxxxx.rdt
Select RULE 0 T / M 120 and copy it (see picture)
Open TYT MD380 code plug with the Hex Editor with extension xxxxx.rdt
