Audit Records/Hacking a PM4

Post questions and issues with Concept2 PM3 SDK
Post Reply
User avatar
jliddil
6k Poster
Posts: 717
Joined: February 7th, 2008, 11:44 am
Location: North Haven, CT

Audit Records/Hacking a PM4

Post by jliddil » March 26th, 2010, 12:27 pm

I work in an industry covered under 21CRF11 and do work in validated systems all day. So it got me thinking with IND_V and other logged data. Is it possible to hack a PM3/PM4 to alter the data even IND_V? Is there any underlying audit trail on the data? Sort of a curiosity more than anything.
JD
Age: 51; H: 6"5'; W: 172 lbs;

User avatar
Carl Watts
Marathon Poster
Posts: 4720
Joined: January 8th, 2010, 4:35 pm
Location: NEW ZEALAND

Re: Audit Records/Hacking a PM4

Post by Carl Watts » March 26th, 2010, 3:44 pm

Yes no doubt there is if you have the time and expertise to decrypt the number generated. I should imagine it would be pretty complex as it could use your drag factor, pace and time information, not only for the total race but more likley uses all the splits as well. Good luck in trying to figure that one out !!!

Having worked on my Concept 2 Model C both mechanically and on the monitors themselves it is far easier to modify the rower itself if you intended to cheat. I can think of a way to row about 25% faster according to the PM without actually having to do it. This would be all I would need to set some pretty amazing times.

Bottom line is either way your only cheating yourself and you would never be able to replicate your performance at any public organised race event where the rower is supplied.
Carl Watts.
Age:56 Weight: 108kg Height:183cm
Concept 2 Monitor Service Technician & indoor rower.
http://log.concept2.com/profile/863525/log

User avatar
Citroen
SpamTeam
Posts: 8062
Joined: March 16th, 2006, 3:28 pm
Location: A small cave in deepest darkest Basingstoke, UK

Re: Audit Records/Hacking a PM4

Post by Citroen » March 26th, 2010, 5:47 pm

Carl Watts wrote:Yes no doubt there is if you have the time and expertise to decrypt the number generated. I should imagine it would be pretty complex as it could use your drag factor, pace and time information, not only for the total race but more likley uses all the splits as well. Good luck in trying to figure that one out !!!
The plain text includes time of day, date, distance, pace and elapsed. If you set the PM3/PM4 clock wrong you can't use the verification code unless the row is logged on the correct date. The crypt is a 16char hex string.

The format of the data on your logcard isn't documented and C2 won't publish the header files (I've asked). The C2 utility will get a 32KB straight "image copy" of your card as an *.LCB file.

Reverse engineering may be illegal in your country, for the Americans it's probably going to be the DMCA that covers it. For the Europeans reverse engineering is covered by EU copyright, patents and trademarks legislation. (I work for a large American mainframe supplier, so I'm not allowed to do that stuff if I want to stay employed. There's even a bunch of hoops I have to jump through to work with open source/GPL/LGPL software so that I don't taint proprietary, confidential source code.)

Post Reply