FAQ
TL;DR: Bricked a cheap IP cam? On XF16/XR872 with 1 MB flash, community firmware boots but lacks camera drivers. "Our firmware can boot onto it"—no image/RTSP yet. This FAQ is for beginners seeking Home Assistant compatibility and safe recovery steps. [Elektroda, p.kaczmarek2, post #21543205]
Why it matters: You’ll avoid wrong firmware, recover functionality, and choose a workable HA integration path.
Quick Facts
- Board ID “XF16” corresponds to XR872; current community builds boot but provide no image due to missing camera driver. [Elektroda, p.kaczmarek2, post #21543205]
- Backup/restore via PhoenixMC over UART; skip PB02/PB03 grounding and connect USB‑TTL RX/TX directly. [Elektroda, divadiow, post #21554303]
- Typical console baud is 115200; look for boot logs on TX to confirm wiring. [Elektroda, divadiow, post #21553929]
- If you own a second identical unit, dump its 1 MB flash and write it to the bricked cam; MAC/AP names may differ. [Elektroda, p.kaczmarek2, post #21543214]
- No known RTSP firmware for this model; use cam‑reverse and Home Assistant’s MJPEG integration instead. [Elektroda, divadiow, post #21546390]
How do I identify my chipset if the PCB says XF16?
Board code XF16 indicates an XR872 SoC. Community firmware can boot on XR872, but the camera driver is missing. That means no image and no RTSP today. “Our firmware can boot onto it, but don’t have camera driver yet.” Back up the original 1 MB flash before any changes. This identification prevents flashing the wrong build and bricking the device. [Elektroda, p.kaczmarek2, post #21543205]
What’s the safest way to back up the flash over UART?
Use PhoenixMC with a USB‑TTL adapter. 1) Wire GND, RX, TX to the camera and power it normally. 2) Start PhoenixMC, choose UART, open the detected COM port, and verify it connects. 3) Dump the flash to a file and store the 1 MB image safely. This path avoids special boot pin tricks on XR872. [Elektroda, divadiow, post #21554303]
Do I need to short PB02/PB03 pads to back up on XR872/XF16?
No. For XR872/XF16 you can ignore PB02/PB03 when backing up with PhoenixMC. If the console is enabled, connect RX/TX and dump directly. This reduces risk and speeds up recovery. [Elektroda, divadiow, post #21554303]
I flashed the wrong firmware and the cam is in recovery. How do I unbrick it?
If you have a second identical camera, read its flash with PhoenixMC. Then write that dump to the bricked unit. Expect MAC address and AP name quirks after cloning. Avoid sharing paired dumps publicly to protect your account. [Elektroda, p.kaczmarek2, post #21543214]
Will XR809 firmware or OpenBK builds for XR809 work on XR872/XF16?
Do not flash XR809 files to XR872 hardware. An expert spotted XR809 was attempted on an XF16 board, which is XR872. Mixing targets risks soft‑brick or recovery loops. Match firmware strictly to the SoC. [Elektroda, divadiow, post #21543223]
Can I get RTSP from this camera in Home Assistant?
There’s no known RTSP‑capable firmware for this XR872 model right now. The most functional third‑party effort is cam‑reverse. Pair it with Home Assistant’s MJPEG integration to view the stream without RTSP. [Elektroda, divadiow, post #21546390]
What baud rate should I use, and how do I spot RX/TX?
Use 115200 baud for the console. Watch for readable boot logs on TX to confirm wiring. The two exposed pads discussed are the likely RX/TX points. Swap RX/TX if you see no output, keeping GND common. [Elektroda, divadiow, post #21553929]
Is it safe to share my flash dump publicly?
Avoid posting dumps publicly if the device was paired to a cloud account. Share privately with a maintainer if you need a reset and AP tests. This protects your account and network identity. [Elektroda, divadiow, post #21543223]
I have UART login but few commands. Can I still do a backup?
Yes. PhoenixMC speaks to the boot console and does not need a rich shell. Connect RX/TX, open the COM port, and dump the flash. Ignore PB02/PB03 on XR872 for this operation. [Elektroda, divadiow, post #21554303]
Are there alternatives to flashing if I only need video access?
Yes. Follow the shared guide for video access without flashing. It may work on this platform and avoid firmware risks. Test before attempting any write operations. [Elektroda, p.kaczmarek2, post #21543214]
Will restoring another unit’s dump clone my MAC and AP name?
It can. After restoring, the camera may carry the donor’s MAC and AP SSID. This edge case can cause network conflicts or bind to another account. Plan to adjust identities post‑restore. [Elektroda, p.kaczmarek2, post #21543214]
What should I share to get better help diagnosing my camera?
Provide clear photos of the PCB, labels, and the other side of the board. Share the flash dump privately if the unit was paired. Maintainers can reset, join the test AP, and reset again for analysis. [Elektroda, divadiow, post #21543223]
