Keith Matthews

I wear lots of hats, checkout these projects!


Project maintained by kmatthews123 Hosted on GitHub Pages — Theme by mattgraham

I hacked a sketchy solar tv for use as cheap mobile displays

Fixing a solar tv

This is a brief test article to explain how I was able to “fix” a “solar tv” that would normally be sold in Africa as best as I can tell. This tv has a drm lockout feature that uses the designers 12-volt power supply from a solar array and solar charge controller as the key to unlock the drm. As best as I can tell, either the 12-volt power supply has some kind of signal in the power that the tv can decode or there is a different cable used to unlock the tv assuming you have paid the company. For multiple reasons this bothers me so I took a bit of time to figure out what was going on here and how I could defeat it. I have a feeling that these TVs were purchased on Ali-express or a similar kind of site as it does not seem these things are sold normally in the US. I did not purchase these TVs but inherited them from a makerspace I was involved with, the story I got is someone got them off the back of a truck at burning man.

what first tipped me off to the tv having drm in the first place is that when turning on two of the several of these things I have access to they both had some strange behavior where the backlight would be on during initial power up, and then it would start flickering at a regular interval before shutting off altogether. at first this behavior looked like the tv was damaged and I put it aside and evaluated a second tv. When this second device exhibited the exact same behavior, I got very suspicious. I was powering the devices via a regular 12-volt dc barrel jack and adapter off the wall power. I knew that I was supplying enough current since the tv draws something like twelve volt thirteen watts and my 12-volt brick was rated for five amps of twelve volt, I tried with a second power supply that was rated for a similar power level. At this point I stopped and started googling the company that makes these things. I had help with this from my friend and we discovered that the manufacturer sells these devices as part of a solar electricity kit (more likely an addon to the base kits) in Africa. They have a payment plan system that I think is used to lock out users from their equipment if they do not have a current code. Id imagine that this lockout device is what’s used to plug the tv into power via the double sided 12 volt cable that came included with this machine, and then it sends some kind of handshake to the tv when powerup happens to verify you aren’t using just some random car battery and your sticking to their ecosystem. This sort of lockout is scummy in my opinion and it makes these TVs e-waste for me since I did not have the lockout device and no means of getting one outside of contacting the company, so I decided to keep digging. It turns out that this 12-volt tv is a pretty common piece of gear you can order from overseas. They seem useful for things like digital signage and storefronts where quality matters less than a variety mounting and power options for something that is going to display the same three things for its entire life. When I found a picture of the circuit boards in this style of 12-volt TVs, I decided to pop mine open as well and find out what was different.

Apon opening the tv I discovered that it appeared the main difference was the addition of a black PCB with the manufacturers name that brought in the “Inverter” wires (it’s all 12 volt so I’m not sure what’s getting “inverted” but that’s what the main board had as a label for that plug) and output 4 wires (2 black and 2 red and tied into the same plug) that traveled into the TVs body. I had a feeling these were the power wires for the backlight, but I was able to confirm this with a multimeter. during initial power up, the four wires showed a 9.75 - 10.25 DC potential over those two wires, the multimeter was a cheap one and the flickering was quick so the LEDs using the full twelve volts is not a huge leap. that power dropped off in time with the backlight going off on the monitor, so I was quite sure those four wires were for the LED backlight. The next step was to try and figure out how to defeat the lockout chip to get those LEDs on normally.

At this point I started poking around the little driver board that was between the tv backlight and the mainboard. This little board had several surface mount chips with one programable logic chip as its center. I was able to read the name of that chip, but I do not know enough to pull its code off. I also was working with a limited set of tools so ultimately; I focused on what was bringing the power into the board instead of trying to force the board itself to do something other than design. I probed the incoming eight “Inverter” wires from the main board and found that there were two that were carrying twelve volts directly from the power supply. There are other wires that are on and off at different voltage levels and for various times, these are used to tell the board what to do about power when the tv is plugged in but “turned off” via a remote or power button. This is because the mainboard is always powered and is always putting twelve volts out to the breakout “drm” board. My quick solution was to simply plug some jumpers between the twelve volts into the board and the LED plug. this did work but it does come with the drawback of the TVs backlight is always on. This is undesirable for obvious reasons in an off-grid type setup using something like solar or batteries but for my use case it does not matter. There is a compelling reason to get back in there and design some custom circuitry that could act to shut the tv on and off based on signal from the IR receiver but that is a problem for another day.