The full archive

Every teardown, tutorial and rant. New videos land on YouTube first; the best ones get writeups on the blog.

Fresh out of the lab

Unlocking Wyze: Ingenic SecureBoot Is Broken — the newest release. Every Ingenic T31 camera, unlocked.

The chip matrix

Where the walls came down
CameraSoCSecureBootthingino
Wyze V3 ProIngenic T31Off from factoryYes — easy installer
Wyze V4Ingenic T31Pwned (2⁻³² per trial)Yes — easy installer
Wyze Pan V4Ingenic T31Pwned (2⁻³² per trial)Yes — easy installer
Sonoff PT2Ingenic T31Not enabledYes — no-tools script
Most Ingenic T31 camsT31 / X31VariesCheck the thingino wiki

Can your camera run thingino?

Coverage from the Ingenic secureboot advisory — Josh validated and content-edited the advisory. Full camera list on the thingino wiki.

Advisory coverage at a glance
CameraSoCSecureBootthingino
Wyze Cam V3 ProT31XVulnerableYes
Wyze Cam V4T31XVulnerableYes
Wyze Pan V4T31XVulnerableYes
Sonoff Cam PT2T31XVulnerableYes — no-tools install
Vigilant VSR-60 (Uniview)Hi3516Not affectedNo — different SoC family

Full supported-camera list

Browse the archive

Start here

CH341A Flash Programmer, Fixed — the programmer everyone owns, the voltage bug that kills 3.3V chips, and the ten-minute fix. 31K views and counting.

No-Tools Thingino Install on the Sonoff PT2 — zero soldering, zero tools. The friendliest first step into open camera firmware.

The secureboot saga

Unlocking Wyze: Ingenic SecureBoot Is Broken — the T31 flaw, the math, and every camera it sets free.

Do You Really Own Your Devices? The SecureBoot Problem — why vendor lock-in masquerades as security.

Wyze Cam V4 Disassembly & Firmware Extraction — the full teardown that set this up.

Reverse engineering

We Reverse Engineered the IronKey — Kingston shipped a $165 encrypted drive with no Linux support. Two weeks of protocol archaeology later, it unlocks with our own tool.

Why "Encrypted" Doesn't Mean "Secure" — the lock icon on the box means nothing about what's protecting your data.

Lives & repairs

Thinkpad Repair LIVE — Touchpad Swap — replacing the touchpad on a Thinkpad 13 Gen 2 with chat along for the ride.

LIVE: Disassemble the Wyze V4 — the 38-minute session where the V4 got opened in real time.

This $10 Programmer Has a Fatal Flaw — the origin story of the CH341A fix.

Never miss an upload

New videos land on the channel regularly — teardowns, tutorials, and the occasional act of revenge against locked-down hardware. Subscribing is free, and the algorithm respects it more than it respects your watch history.

Subscribe on YouTube