Hacking the Xiaomi Mijia 1080p camera (2018 version, white back)
| Desc | Picture |
|---|---|
| Getting into the camera is not as easy as before, the whole case is clipped together tight. It is only two pieces. It cannot be unscrewed like the old one. I had to go medieval on it. |  |
| There are two holes where it uncliped first. In hindsight, it might be possible to lift the front plastic and force it open. |  |
| After some wiggling it is out... The white back of the stand is not part of the camera module. |  |
| Better view of the stand. |  |
| The SoC is an Ingenic T20. They switched from Grain Media 8135/6S to what the Dafang has. Winbond W25Q128JVSO SPI flash (the ending O is not on the datasheet). Chipstar CS8122S audio amp. The serial interface is next to the flash chip (Tx Rx GND GND N/A). I could not interrupt U-Boot by pressing a key. bootlog |
 |
| Realtek wifi on the other side and the IR leds. |  |
Hook up the flash chip and read the firmware... Update: CH341A with the v1.29 software does not seem to know how to read W25Q128JV. Recovery firmware available from the MI Home app, help section.