Liberate the bees — AdaCam firmware toolkit, recon, and liberation scripts
- usb-updater installs .mender bundles with no signature verification - /etc/mender has no artifact_verify_key (confirmed from firmware extraction) - Also: movisoc-fwu updates bootloader from USB, also unsigned - Camera pipeline is GStreamer+kmbcamsrc (not DepthAI) — key adacam insight - 4K H.265 video recorded continuously (undisclosed — reinforces CVE-5) |
||
|---|---|---|
| recon | ||
| security | ||
| CVE-LOG.md | ||
| liberate.sh | ||
| README.md | ||
adacam
Liberating bees from the hive.
Toolkit for converting Hivemapper Bee (HDC-S) dashcams into AdaCam devices — feeding AdaMaps instead of Hivemapper/HERE.
Repos
adacam-api— Replacement for odc-api (Flask, lean, no CVE)recon/— Factory firmware baseline recon (HDC-S, firmware 5.7.88)liberate.sh— One-shot liberation script (in progress)
Recon
Factory baseline captured from a fresh HDC-S unit (firmware v5.7.88, Intel ESE Yocto dunfell, kernel 5.10.32).
Key findings documented in recon/recon_*.log.
Status
- Factory recon baseline
- adacam-api v0.1 (Sulkta-Coop/adacam-api)
- liberate.sh
- AP subnet reconfiguration (10.42.0.0/24)
- Reverse tunnel to Rackham
- Routing fixes (LTE metric, wlp1s0f0 conflict)