# Hisense VIDAA (MT9603): firmware and local bridge findings

> Hisense VIDAA (MT9603) records an investigation of a TV firmware container and browser-facing local services. The notes map the phoenix:// message format, its WebSocket and HTTP transports, a 96-function bridge and permission checks, with sanitized probe outputs. The author reports that the encrypted firmware payload remained inaccessible.

- Type: Case study
- Targets: Firmware · Protocol
- Category: Independent reconstruction cases
- Relationship: Independent reconstruction project
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-08
- Original resource: <https://github.com/ipanalytics/Hisense-Vidaa-Reverse-Engineering>
- Primary source: <https://github.com/ipanalytics/Hisense-Vidaa-Reverse-Engineering/blob/c5f550c0cfb0595898a6ff4589e7ec99ebb4b9aa/README.md>
- Catalog page: <https://awesomerea.org/resources/hisense-vidaa-mt9603-case/>
- Record JSON: <https://awesomerea.org/resources/hisense-vidaa-mt9603-case/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/hisense-vidaa-mt9603-case/index.md)

## Requirements & limits

- **Scope:** Findings concern a Hisense VIDAA TV with MTK9603 and software version V0000.09.60V.Q0612.
- **Limits:** The firmware payload is encrypted; the studied ordinary browser page could not obtain usable filesystem access or a write path.
- **License:** Code and probe pages are MIT licensed; documentation is CC BY 4.0.

## Primary sources

1. <https://github.com/ipanalytics/Hisense-Vidaa-Reverse-Engineering/blob/c5f550c0cfb0595898a6ff4589e7ec99ebb4b9aa/README.md>
2. <https://github.com/ipanalytics/Hisense-Vidaa-Reverse-Engineering/blob/c5f550c0cfb0595898a6ff4589e7ec99ebb4b9aa/docs/03-phoenix-protocol.md>

## More in Firmware and hardware

- [WebTV PTL: documenting the set-top box listings format](https://awesomerea.org/resources/webtv-ptl-format-case/index.md) · Case study
- [SL-GlassesLed26x7: LED matrix pin mapping and replacement driver](https://awesomerea.org/resources/sl-glassesled26x7-case/index.md) · Case study
- [FIFINE SC3: firmware decryption and four-fader patch](https://awesomerea.org/resources/sc3-firmware-research-case/index.md) · Case study
- [HHKB Professional Classic: vendor HID and firmware investigation](https://awesomerea.org/resources/hhkb-professional-classic-case/index.md) · Case study
- [nano3-os: reconstructing the Avalon Nano 3 mining protocol](https://awesomerea.org/resources/nano3-os-miner-protocol-case/index.md) · Case study
- [gear360-raw: recovering RAW capture and calibration from the Gear 360 SM-R210](https://awesomerea.org/resources/gear360-raw-case/index.md) · Case study

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.