Wyze Cam v4 w/T41

[Craig-Powell]

I was just gifted a problematic (stuck on LED, not sure why but assume hardware issue) Wyze Cam v4. I've opened it up and confirmed it is using an Ingenic T41 SoC, ATBM6062 WiFi module, and 16MB XT25F128F-W storage. I haven't identified the imaging module. It looks like there isn't a lot of info here yet on the T41 SoC although it is mentioned in the T40XP discussion and I see some related commits a few weeks ago.

I'm moderately familiar with Linux, have done a number of firmware flashes using my RPis and flashrom, I may have even done some UART/JTAG work some time ago although I'd need to refresh myself first to use those again. Anything I can do to assist in getting support for this module in thingino or is this model already being covered and worked on?

[gtxaspec]

We are working on adding support for T40/T41 platforms as we speak. In regards to the Wyze V4, it will be supported eventually, but with some caveats. You will need to physically replace the SoC chip with a spare one that does not have secureboot enabled. The Soc has a QFN96 footprint. We have folks that have swapped the T31 (QFN88) and the T40XP (BGA356) sucessfully to escape secureboot on these and other similar units. The sensors can vary, the V4 has a lottery of 3 different sensors I believe:
os04d10
gc4653
sc401ai

[Craig-Powell]

Ugh, that's a pain. I've got hot air rework gear but am still very much a novice at it. It looks like it is a T41NQ chip sepcifically and I can get those for about $6 ea on Ali Express. Might throw a couple on a future order and take a crack at it. I'm not going to use the camera with the stock firmware and it didn't cost me anything anyway, so I'd only be out my time and the cost of a new chip.

Is the secureboot on these cameras something new, or was it something found on other models but was able to be worked around?

[gtxaspec]

introduced with the Pan V3, and found on the Roku variants, as well as all the newer ingenic based devices. No known workarounds since they validate the bootloader signature.

[Craig-Powell]

OK, we'll see what I can pull off with rework and if it looks like it survives I'll be back to get thingino. Really not looking forward to trying to deal with that huge center pad under the chip. I've now got a second freebie camera in my hands that (for the moment) doesn't have an open source firmware it can take. The other one is a Wyze C1 and I haven't been able to do anything with that one yet either.