Bush Internet Surf Set

[Pace ]     {After Acorn ]

 Introduction

Bush Internet was a joint venture between Alba (80%) and Virgin (20%); created specifically to sell simple "one button connect", low cost, mass market Internet devices aimed at the average person in the street. The various devices they jointly launched included, Internet enabled TV and external set top boxes which enable a colour TV to become Internet connected. Pace designed the Internet Surf Set for Bush. It is OS is based on NCOS from the Acorn Network Computers. It has an IR Keyboard, remote control and a built-in 33.6k modem. In simple terms you plug it in (modem, TV, power) switch on and select connect to the Internet and off you go surfing!

Unfortunately the Internet Surf Set was a commercial failure. The target of 500,000 sales in the first 12 months of operation was over optimistic, with a total of only 186,000 sold to retailers and only 115,000 actually in consumers' homes. It originally sold for £149 with Alba providing a £45 subsidy. The retail sales at the subsidised price of £149 were still very dissapointing. The price was reduced to £99 in June 2001. And finaly in December 2001 they threw in the towel having lost around £17,900,000. But Internet Surf Sets ended up selling for £20 in Toys‹RUs and finally then being given away by Time as a freebie if you bought something else!

If you want an Internet Surf Set, there are usually several up for auction on ebay. Try searching for "internet surf set" in the "computing" category.

Because it is, basically, a RISC OS computer, various people have discovered how to do interesting things with it in particular to convert it into a RISC OS desktop computer. How to do this is summarised belowSome options are:

  1. Explore the Internet Surf Set software
  2. How to get a RISC OS "*" prompt
  3. How to get a RISC OS Desktop .

Manuals and documents

None.

Computers

There are serveral different models:

IBX100

The box contains a ten metre telephone cable; power supply; remote control and batteries; a 29-page manual; quick-start guide; email guide; warranty card; SCART cable and, of course, the Surf Set itself. The telephone cable plugs into one of the three sockets on the back of the box and a standard phone socket, providing a second socket for any devices whose connection may have been "borrowed". The remote control is much larger than usual and has a limited set of buttons for navigating web pages whilst closed. However, when flipped open it reveals a QWERTY keyboard for typing emails and URLs which, although small and rubbery, is adequate for typing reasonably long emails - with practice. The documentation is well written: both clear, concise and technically accurate. It guides users though the installation process in easy steps, but a peak-rate helpline is available for those who get stuck. Setting it up and connecting to the internet is pretty easy and worked first time.

The IBX100 has an ARM750FE clocked at 48MHz with 8MB memory on single EDO SIMM. The modem is an on-board Lucent modem (which appears as podule 0). There is support of either the IR keyboard supplied or a serial PS/2 keyboard. Only(!) 3 printers are supported -  Lexmark 1000/1100, Canon BJC-1000, and Canon BJC-2000. Unlike the Acorn RISC OS computers, the IBX100 does not have CMOS memory to store configuration data instead it has a small NVRAM. Also there is no Real Time Clock (RTC), so the IBX100 will always think the date is 1 Jan 1970. There is no sound support hardware.

An Iomega PPA ZIP100 can be connected to the parallel port, but the disc must be formatted in the Argo Internet format, and is documented in the Argo Zip Driver . Modern ZIP drives are not supported, nor are other (e.g. PC format) 100MB ZIP discs.
 
Here are some pictures:

IBX100 box front  

IBX100 box (front)

IBX100 box back

 IBX100 box back

IBX100 in box

 IBX100 in box

In the box with the IBX100 is the remote control on the left, the modem cable in the top left, the psu in the top right and the SCART cable in the bottom right. There are also the instructions.

IBX100 front

IBX100 (front)

IBX100 back

IBX100 (back)

The back view of an IBX100, showing from left to right, the 6V DC Power socket, SCART TV connector, Parallel printer and modem socket.

IBX100 bottom

 IBX100 (bottom)

IBX100 open

 IBX100 open

With the top cover removed, you can see the IBX100 motherboard. The main feature is the big square ARM7500FE CPU in the middle and the two NCOS ROMs next to it. At the front, in the middle is the 8MB EDO SIMM. On the right is the TV module feeding the SCART socket.

IBX100 configuration screen

 IBX100 configuration screen

The initial screen gives two options, dial Bush Internet and connect to the internet on the left and Configuration options on the right.

IBX100 remote control

 IBX100 remote control

IBX100 remote control keyboard

 IBX100 remote control keyboard

IBX100 with RISC OS desktop

 IBX100 RISC OS desktop

 How to get an IBX100 to run a RISC OS desktop is described here . 

Some more nice pictures of the insides of an IBX100 can be found on Ian Spray's site  . Information on the pinouts on the motherboard can be found at Richard A Smith's IBX100 Set Top Box Information Page.

IBX200

The IBX200 is a redesigned IBX100 with a much improved motherboard layout and a VCR out SCART port so that it can be used with a TV and VCR. A full infrared keyboard is also included instead of the remote control supplied with the IBX100. Functionally the IBX200 is identical to the IBX100.
 
Here are some photographs:

IBX200 box front  

IBX200 box (front)

IBX200 inside the box

 IBX200 instide the box

In the box, the IR keyboard is on top with the IBX200 underneath. The SCART cable, modem cable and power supply are on the right.

IBX200 running a RISC OS desktop

 IBX200 running a RISC OS desktop

The IBX200 running a RISC OS desktop. To the left is the Iomega PPA ZIP100 drive which has the additional files required to boot the RISC OS desktop. The infra-red keyboard is on top of the IBX200.

IBX200 front  

IBX200 (front)

IBX200 back

 IBX200 (back)

On the back you can see, in the middle, the second SCART out socket for connection to a VCR.

IBX200 bottom

 IBX200 (bottom)

IBX200 open

 IBX200 with top cover off

The IBX200 motherboard is much neater than the IBX100. But the basic componenets are the same with the ARM7500FE in the middle, the 8MB RAM is the 4 chips below the ARM7500FA. The 2 RISC OS-NC ROMs are a later build than the IBX100. The SCART ports, at the top, are shielded.

IBX200 IR Keyboard

 IBX200 IR keyboard

 IBX202

The IBX202 is identical to the IBX200 except it is configured, by default, to connect to Freeserve (now Wanadoo part of France Telecom).
 
Here are some photographs:

IBX202 box front  

IBX202 box (front)

The IBX202 is the same as the IBX200 except for the default ISP which is Freeserve, instead of Bush Internet.

IBX202 front

 IBX202 (front)

IBX202 back

 IBX202 (back)

IBX250 

The IBX250 is based on the IBX100 but has 2 SCART sockets so it can support connection to a VCR. In side it has the same motherboard as the IBX100, but the SCART card is bigger with the 2 sockets.
 
Here are some photgraphs:

IBX250 box front

 IBX250 box (front)

IBX250 box back

 IBX250 box (back)

IBX250 front

 IBX250 (front)

IBX250 back

 IBX250 (back)

The 2 SCART sockets can be clearly seen on the left next to the power in socket. On the right is the printer interface and the modem cable socket.

IBX250 bottom

 IBX250 bottom

IBX250 open

 IBX250 with cover removed

With the IBX250's top cover removed, you can see the motherboard on the left which is the same as the IBX100, but on the right is the larger board supporting the 2 SCART sockets. On the IBX250 motherboard, the big square chip in the center is the ARM7500FE CPU with the 8MB RAM SIMM card below it. To the right are the 2 large RISC OS-NC ROMs.

IBX250 IR Keyboard

 IBX250 IR keyboard

This keyboard model number is KB200 and it is also used with the IBX200s.

Specifications:

ModelIBX100IBX200IBX202IBX250
Serial No.600044606078736042860C600624659
Dimensions (cm)25x17x5.527x17x4.527x17x4.530.5x20x4.5
Power Supply6V DC 1A 6W10V DC 850mA10V DC 850mA6V DC 1A 6W
Motherboard part no.2208,680 issue 3IBX200 Rev B
BJ83000G04A01
Funai/Pace
IBX200 Rev B
BJ8300G04A01
Funai/Pace
2208,680 Issue 3
Motherboard serial no.200112703n/an/a200609477
CPUCL-PS7500FE56QC-CCL-PS7500FE56QC-CCL-PS7500FE56QC-CCL-PS7500FE56QC-C
CPU Clock48MHz48MHz48MHz 48MHz
Memory8MB8MB8MB8MB
Modem (chip)Lucent 1670T28Lucent 1670T28Lucent 1670T28Lucent 1670T28
I/O controllerSMC FDC37C669SMC FDC37C669SMC FDC37C669SMC FDC37C669
OSRISC OS-NC 5.13RISC OS-NC 5.13RISC OS-NC 5.13RISC OS-NC 5.13
OS part no.2208,670-11
2208,671-11
2208,670-16
2208,670-16
2208,670-11
2208,671-11
2208,670-11
2208,671-11
BASICBASIC V
version 1.18 1989
BASIC V
version 1.18 1989
BASIC V
version 1.18 1989
BASIC V
version 1.18 1989
SSL(1)RC2-Export cipher
40bit key
RC2-Export cipher
40bit key
RC2-Export cipher
40bit key
RC2-Export cipher
40bit key
ISPBush internetBush InternetSupanetBush internet
Change ISP password81fhm29241mirror1357fk39x396624927dkan93

Notes
1. Tested at fortify.net 

 

 

Thing to do with an internet Surf Set

The Surf Set OS (RISC OS-NC) is based on RISC OS 3.60, which Acorn released with the RiscPC 700 in 1995. The version in the IBX100 is NC OS 5.13. The main (and only) application is NCFresco which supports:

It does not support:

From the main screen the following commands can be typed:

CommandDescription
dialThis is designed to allow automated testing. The unit will dial 101.
whodunnitDisplays the development team photo and names!
zipdebugging This clears the screen and redraws the main screen. Behind the scenes,
it replaced your printer selection with the magic option to enable booting
from an Argo formatted Zip disc.
39d8sk43k2This is a special access key that should work on the IBX-100 series,
and it provides access to the screen to reconfigure the ISP details. 

Other keys that have been discovered are:

BoxKey
IBX10039d8sk43k2
IBX10081fhm29421
IBX10025fh5n66as
IBX101muf1312129
IBX10186ilm37924
IBX200mirror1357
IBX202fk39x39662
IBX2504927dkan93
IBX260012603belt

The following commands can be entered from the URL bar:

CommandDescription
ncma:statusThis opens a brief status document, the Managed Access Status page.
meminfo:This opens a document detailing memory use, how much, where, and what.
file:/This doesn‹t work! It should open the file specified if it pointed to a valid
HTML file, nor will  Fresco will list directory contents if you give it a
directory path instead of a file path.
icontype: THIS WILL CRASH YOUR BUSH INTERNET BOX!!!
You may need to unplug the box to reset it!

RISC OS or How to get to the "*" prompt

  1. Disconnect the power,
  2. Open the keypad and hold down the big Shift, on the left. Keep it held down
  3. Plug in the unit, making sure it can detect the Shift keypress (ie, point the remote at the box).
  4. Keep on holding shift for a few seconds, then let go.
  5. Close the keypad, and press the yellow Internet button to enable the display.
  6. Open the keypad and press Enter a few times. You should see a "something not found" error. The "something" part may be off the top left of the screen.

To get a useable screen type:

This will put you into MODE 12, which is much easier to work with on a 14 inch television / monitor. 

To launch BASIC, type "BASIC" and press Enter.

If you interested in writing your own programs to dump various NVRAM information then the file you want to refer to is the resources.nvram.tags file which can be displayed as follows: *type resources.nvram.tags

To read the password to the ISP configuration page you can run this program:

DIM b% 255
SYS "NVRAM_Read", "ISPCAccessPassword", b%, 255 TO ,mycode$
PRINT mycode$
END

To display the Dial password you can run this program:

DIM b% 255
SYS "NVRAM_Read", "NCMAStartHiddenDialPassword", b%, 255 TO ,b$
PRINT b$
END

On a IBX-260 for example this program should return: "dial".
To display the ISP Phone Number, you can run this program:

DIM b% 255
SYS "NVRAM_Read", "NCMAHiddenPhoneNumber", b%, 255 TO ,b$
PRINT b$
END

On a IBX-260 this program should return: "121".

RISC OS Desktop

Do not follow the instructions to get a "*" prompt and then type "desktop". Various modules are missing from the desktop boot sequence, so it won't start. Because the Internet Surf Set NC OS does not have all the modules and files needed for the desktop, they have to be softloaded from a ZIP100 drive. You copy the missing files from a donor system (preferably RISC OS 3.7), onto the zip disc to be softloaded prior to starting the Desktop.

You will need:

  1. An Iomega Zip drive (the 100Mb parallel port type). If you don't have one, give up now. Or go and buy one off ebay.
  2. The Argo drivers. If you don't have them, give up or get the Argo drivers from somewhere (try asking on c.s.a.hardware)
  3. A computer running RISC OS 3.6 or later (e.g. RiscPC or A7000), to act as the donor system for the missing modules and files.
  4. A program to save modules from the OS ROMs e.g. !Zap (http://zap.tartarus.org/ ).
  5. RISC OS 3 Application disc 1 for !Scrap & !System
  6. Optionally, RISC OS 3.5  for !Edit, !Draw & !Paint, because they on disc in this release not in ROM.

Starting on the donor system:

  1. Connect the Zip drive the the donor system and install the Argo drivers, if they are not already installed. Put a disc in the ZIP drive and start !Zip.
  2. Open the ZIP disc, create 2 directories: Resources, Modules.
  3. Click the Menu button on the Apps icon and select Open $. Copy the following files to the Resources directory on the ZIP disc: Display, Filer, Pinboard, ResFiler, ResourceFS, Switcher, TaskWindow
  4. Copy the Wimp directory across too - Sprites, Sprites22, Tools as the majority are missing from RISC OS-NC.
  5. Using !Zap (or whatever), save the OS ROM modules from memory to the Modules directory of your Zip disc, the modules are: DisplayManager (as DisplayMan), DragASprite (as DragASpr), Filer, FilerSWIs, Pinboard, ResourceFiler (as ResourceFi), TaskManager (as TaskMan), TaskWindow
  6. You need some sort of utility to fake the mouse buttons. Use Martin Dann‹s keyrat module, available from Chris Sawer's site. It runs on the STB and sets the right shift key to act as the middle mouse button, and the "]" key to act as the right mouse button as the remote control keyboard doesn't have middle or right mouse buttons. Download and copy keyrat into the Modules directory.
  7. Most RISC OS applications require !Scrap and !System so copy these from the RISC OS 3 Applications Disc.
  8. Create an Obey file called ›Auto“ which contains the following: 
  9.  Create a Desktop (type &FEA) file called ›_DeskStart“ which contains something like:
  10.  The IBX100 does not have the standard RISC OS Apps in ROM, so you can create and Apps directory on the ZIP disc and copy the standard applications from the RISC OS 3 Applications disc. Also if you want Edit Paint & Draw, copy them from RISC OS 3.50 either from !Boot.RO350Hook.Apps or the RISC OS 3.5 Disc Image.
  11.  Now you have a suitable ZIP disc to boot the Desktop from on the IBX100. Dismount and detach the Zip drive from the donor system and attach it to the IBX100. Start up the IBX100 and go to the main options screen and type zipdebugging to enable booting from the ZIP drive and reboot the box to get a RISC OS desktop.

Linux

ARM Linux has been ported to the Internet Surf Set by Simtec amongst others. Some Linux resources can be found on Vince Sanders  site.

Resources

  1. Andrew Flegg: Hacking the Bush Internet Surf Set  
  2.  Fortify.net: SSL Check 
  3.  Ian Spray: Inside the Bush IBX100  
  4.  Richard Murray: Bush Internet Box IBX100  
  5.  The Bush Hacking mailing list: bush-hacking -- Discussion on hackery with the Bush Internet.tv 
  6.  Vince Sanders: Hacking the Bush Set Top Box