[Other SmartWatches] ghatothkach:
hi

I got my hands on this smartwatch

https://www.amazon.com/gp/product/B07XTCGD7B

It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.

It seems to be running Android...

It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"

I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.

I bet someone make a USB data cable which also has connections to those middle pins.

[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]

Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?

Any hints on putting this device into recovery mode or fastboot mode ?

G

Update: 2020-09-26

I got a 4 pin smartwatch fast charging cable

from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.

lsusb -v

Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1

PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)

[PS => Political Statement :cyclops: )

Some more Info:

https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/

https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/

https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8

https://naijarom.com/infinity-chinese-miracle-2-spd-v124

https://forum.hovatek.com/thread-21776.html

https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html

LEMFO is one of the manufacturers/brand names

Its using SC9820E from http://www.unisoc.com/sc9820e

https://sc9820e-datasheet.com/

The Wireless MAC on the device starts with

"40-45-DA" which is for...

Spreadtrum Communications (Shanghai) Co., Ltd.

Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd

Shanghai 201203

The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.

I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00

Looks like the Nokia 3310-4G is also powered by the same chipset

https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/

The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)

Does anyone have the Nokia 3310-4G model #TA-1077