Liberate the bees — AdaCam firmware toolkit, recon, and liberation scripts
Find a file
Kayos de0c434942 docs: CVE-16 — unsigned USB firmware flash (physical RCE)
- usb-updater installs .mender bundles with no signature verification
- /etc/mender has no artifact_verify_key (confirmed from firmware extraction)
- Also: movisoc-fwu updates bootloader from USB, also unsigned
- Camera pipeline is GStreamer+kmbcamsrc (not DepthAI) — key adacam insight
- 4K H.265 video recorded continuously (undisclosed — reinforces CVE-5)
2026-03-14 10:54:42 -07:00
recon init: factory recon baseline, HDC-S fw 5.7.88 2026-03-14 08:59:41 -07:00
security docs: deep audit report — CVE-6 through CVE-15 2026-03-14 10:00:56 -07:00
CVE-LOG.md docs: CVE-16 — unsigned USB firmware flash (physical RCE) 2026-03-14 10:54:42 -07:00
liberate.sh feat: liberate.sh v0.1 2026-03-14 09:05:17 -07:00
README.md init: factory recon baseline, HDC-S fw 5.7.88 2026-03-14 08:59:41 -07:00

adacam

Liberating bees from the hive.

Toolkit for converting Hivemapper Bee (HDC-S) dashcams into AdaCam devices — feeding AdaMaps instead of Hivemapper/HERE.

Repos

  • adacam-api — Replacement for odc-api (Flask, lean, no CVE)
  • recon/ — Factory firmware baseline recon (HDC-S, firmware 5.7.88)
  • liberate.sh — One-shot liberation script (in progress)

Recon

Factory baseline captured from a fresh HDC-S unit (firmware v5.7.88, Intel ESE Yocto dunfell, kernel 5.10.32). Key findings documented in recon/recon_*.log.

Status

  • Factory recon baseline
  • adacam-api v0.1 (Sulkta-Coop/adacam-api)
  • liberate.sh
  • AP subnet reconfiguration (10.42.0.0/24)
  • Reverse tunnel to Rackham
  • Routing fixes (LTE metric, wlp1s0f0 conflict)