Story HD

Manufacturer : iRiver

Names : iRiver Story HD

Status : –

Open tickets : –

Packages architecture : armel

Kernel flavours : –

Hardware

• CPU: Freescale i.MX508? (  http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=i.MX508 )
• EPD controller: integrated
• Memory: 128MB (Samsung 1Gb MDDR)
• Storage: 2GB onboard + SD-slot
• Network: none (Basic) / AtherosWiFi (WiFi).
• There are three models of Story HD (each with its own line of official firmware versions):
  • WiFi: released in US, tied to Google Books. WiFi is only used for firmware updates and Google Bookstore.
  • Basic: released outside US. Hardware is identical (same board minus the Atheros chip)
  • WiFi Germany: released in Germany, with QWERTZ+ÄÖÜ keyboard, tied to German book vendor KNV. Hardware is identical (same board, same keyboard, only with different key labels).

Hacking

• EEVBlog iRiver Story HD teardown :  http://fpgatoday.tv/?post_type=external-videos&p=5109
• On the still shots taken by EEVBlog JTAG-pins are visible on the left side of the CPU.
•  HR still shot of the Story HD Basic. It's identical to the Wifi version, minus the Atheros chip.
• Firmware files appear to be ZIP-files with simple substitution cipher (based on patterns within the files), and from my investigation the files also have a zip-password.
•  iriver Story HD firmware / root includes root shell script and python snippets to decode the firmware files
• Custom firmware files can be created by reversing the decryption method described above
  • Password protected, ciphered ZIP file (reverse  iriver Story HD firmware / root)(error report:the Custom firmware file is full ciphered when filesize < 10m.)
  • Paths in the ZIP file have to start with /iriver/ (including the leading /). If your ZIP program does not include those, name the folder iriXver and replace it with /iriver in the ZIP file.
  • If the firmware contains a file /iriver/del_files.sh it will be executed with root permissions during the firmware upgrade.
  • This could be used to flash OpenInkpot on the device.

Vendors Files

• Firmwares:  http://www.iriver.com/support/download_search_result.asp?product_name=002&category=02
• Source code:  http://www.iriver.com/opensource.html
  • The website is somewhat broken. Mirror:  http://www.duckpunching.de/storyhd/source/
• German model Firmware:  http://www.lesen-leicht-gemacht.de  http://www.lesen-leicht-gemacht.de/iriver-services-support/iriver-updates.html