iiinova — where your digital self keeps evolving

Marcel @mgdproductions.com · 18/08/2025

Subway surfers on a vending machine payment terminal that somehow is in debug mode (the seller did not mention this fact, but thanks anyways lol)

070

Marcel @mgdproductions.com · 21/04/2025

Newer helios gen zebra devices have now also been unlocked by patching the bootloader signature check out and setting an automatic relock system to a very big number 😅 This uses the same concept as unlocking the quest VR headsets. Zebra lets you downgrade to a vulnerable bootloader!

010

Marcel @mgdproductions.com · 21/04/2025

So apparently the password for the zebra scanners bootloader unlock on the older atlas generation of devices is just hardcoded in the bootloader. With some help from claude i managed to figure it out, zebra_atlas. Could have even guessed that one tbh LOL Image credit: tamay_idk on the bird app

110

Marcel @mgdproductions.com · 13/04/2025

There are also tickets that have a HOLD or DELETED state. HOLD: IGNITE ($1,400): 300 FUEGO ($5,000): 200 PHOENIX ($25,000): 50 PROMETHEUS ($1,100,000): 8 DELETED: IGNITE ($1,400): 700 FUEGO ($5,000): 500 PHOENIX ($25,000): 1340 PROMETHEUS ($1,100,000): 0 (2/3)

110

Marcel @mgdproductions.com · 13/04/2025

Looking at the ticketing site for FYRE Festival 2 and i noticed it makes a request that returns a shit ton of data, turns out you can see how many tickets have sold. IGNITE ($1,400): 79 FUEGO ($5,000): 22 PHOENIX ($25,000): 6 PROMETHEUS ($1,100,000): 0 (1/3)

130

Marcel @mgdproductions.com · 13/04/2025

If there is anyone interested in messing with the playstation portal, dumps of a few different android rom versions (launch fw to current) have been made and are now on tadiphone. dumps.tadiphone.dev/dumps/playst...

120

Marcel @mgdproductions.com · 09/03/2025

Gotta say this emmc reader is the best thing i have purchased recently. Been dumping all sorts of android devices with it!

030

Marcel @mgdproductions.com · 23/02/2025

So as it turns out, the Humane AI Pin has debug pins that provide a usb connection behind the moon on the back. Currently it stays unauthorized in adb because it requires a certificate to authenticate. But i think the team is working on removing that so everyone can access it!

070

Marcel @mgdproductions.com · 20/02/2025

Yo @niagaralauncher.bsky.social fix your launcher, it doesn’t even work properly on the Ubiquiti G2 reader pro!!! /s

040

Marcel @mgdproductions.com · 20/02/2025

Cheating in geometry dash by seeing more of the level

141

Marcel @mgdproductions.com · 20/02/2025

Flappy bird impossible edition

3142

Marcel @mgdproductions.com · 17/02/2025

Full android firmware for the facebook portal is now available on tadiphone thanks to a dev unit falling into my hands: dumps.tadiphone.dev/dumps/facebo... If you like to break android devices open, we need you! Facebook is slowly nerfing these devices without providing a bootloader unlock! 1/4

130

Marcel @mgdproductions.com · 25/01/2025

Btw this is like a worldwide licencing deal across tons of brands which use the frameo software on their (cheap) picture frames

100

Marcel @mgdproductions.com · 25/01/2025

The frameo app also checks for "Blacklisted hardware" which in this case means that there is either a mic or cam present. Frameo frames are not allowed to include a camera or microphone.

100

Marcel @mgdproductions.com · 25/01/2025

All frameo picture frames get assigned a licence before they are allowed to work, this also makes it more secure so no one can just read/send arbitrary pictures to the frames because every frame uses a unique licence key to encrypt its data

100

Marcel @mgdproductions.com · 25/01/2025

If you own a picture frame that works with the frameo app, congrats, basically all of them ship with root access out of the box as per the manufacturer instructions that i was able to obtain through simple subdomain scanning and html inspecting the manufacturer dashboard...

131

Marcel @mgdproductions.com · 04/01/2025

Humane published their android open source notices and it confirms that the AI pin runs android 11 or 12 humane.com/legal/copyri...

010

Marcel @mgdproductions.com · 04/01/2025

I broke the windows terminal

120

Marcel @mgdproductions.com · 20/12/2024

New AI robot thing from looirobot.com has their api keys up for grabs when you decomp the android app. Also it's chinese crapware soooo yeahhhh

050

Marcel @mgdproductions.com · 13/12/2024

BTW THEY STILL HAVEN'T ROTATED THE KEY

020

Marcel @mgdproductions.com · 13/12/2024

Lies because a security noob (me) http inspected the app, changed a value and got access to someone else's chats lol

120

Marcel @mgdproductions.com · 13/12/2024

"Our device integrates GPT through a close collaboration with OpenAI, leveraging a specific API" Uhh no you are just calling the regular endpoints with the API key present on the device lol They also never acknowledged the security issue publically lololol

170

Marcel @mgdproductions.com · 09/12/2024

When you remove the passcode and are very quick at bootup, you can spot the "Phone is starting" android message on the Humane AI Pin Sorry for the horrible quality, this thing is very hard to film with a phone

110

Marcel @mgdproductions.com · 02/12/2024

What is this kiosk setting lmao

031

Marcel @mgdproductions.com · 30/11/2024

Including the fire hazard (and very reflective) egg case

The humane AI pin charge case, looks like an egg but metallic, very reflective and it is recalled because of a potential a fire hazard

230

Marcel @mgdproductions.com · 26/11/2024

Let go of my AI pin 😠

010

Marcel @mgdproductions.com · 23/11/2024

I escaped the locked down android environment on this phone, installed talking ben and remapped the pick up key event to the onscreen button 😅

070

Marcel @mgdproductions.com · 16/11/2024

Just opened my macbook because recently it has been freezing a lot on me. Turns out it wasn’t because it’s old, it is just cooking itself to death 💀 MacBook more like MacCook

170

Marcel @mgdproductions.com · 14/11/2024

I have to request the bus to stop by manually bridging two wires!

010

Marcel @mgdproductions.com · 13/11/2024

The playstation portal is unable to sign into your playstation account / connect to a ps5 on firmware version 2.0.5 This makes the hack by theflow0 impossible to execute, even if you obtain a fw 2.0.5 device.

050

Marcel @mgdproductions.com · 13/11/2024

Android recovery on the Playstation Portal is still accessible after they blocked rebooting from fastboot, however there is not much you can do with it as adb sideload does not get recognised on the pc and most options fail...

040

Marcel @mgdproductions.com · 06/11/2024

What is the reason that this is STILL ON BY DEFAULT

080

Marcel @mgdproductions.com · 28/10/2024

TLDR: NFC cards can launch apps apparently, kiosk mode can be disabled from settings, rom is userdebug so root access by default, a code is available to escape without an NFC card needed. Also found the update url to download the entire firmware.

140

Marcel @mgdproductions.com · 28/10/2024

Cracking into a Just Eat/Takeaway terminal with an NFC card

2110

Marcel @mgdproductions.com · 20/10/2024

Exploiting the IKKO Activebuds "AI powered" earbuds, running DOOM, stealing their OpenAI API key and customer data. My very first deep dive/blog post.

1110

Marcel @mgdproductions.com · 18/10/2024

well ok then, didn't even have me restart

010

Marcel @mgdproductions.com · 17/10/2024

i keep restarting my pc but it doesn't apply it and it asks me again to restart, how to fix

330

Marcel @mgdproductions.com · 17/10/2024

Playing geometry dash on it (this is insane)

130

Marcel @mgdproductions.com · 17/10/2024

Not gonna unlock the bootloader but damn would it be funny (this robot is like a thousand dollars, i am not gonna ruin it like that lmao) I got to lend it from the teacher for a few weeks for a project, definitely gonna dump the apps and rom from it in the meantime, this is interesting

100

Marcel @mgdproductions.com · 17/10/2024

In the gallery it has all the pictures it uses for the eyes and also some Chinese screenshots including IOS? It has 12GB of storage, 2gb of ram and a MediaTek MT6750 CPU

100

Marcel @mgdproductions.com · 17/10/2024

This stupid ass robot needs wifi to program, the only way to connect it to a wifi network is through the app which is locked to a licence. Our school did not bother to pay for the licence. What now? Well, it runs android 7 and has adb exposed, so i just used scrcpy lol

130

Marcel @mgdproductions.com · 15/09/2024

Dev options, adb and oem unlocking are enabled but i am unable to do anything with it as it doesn’t do data comms to the device. Here are some pics of the board.

000