Index

Platform index

24 platforms — digital mixing consoles, video switchers, video-over-IP converters, conference systems, installed audio systems and wireless microphone systems. Each entry records where the processing actually happens, what the silicon really is, how firmware is packaged and validated, and what remains unknown. Sort, filter and search below; every row on a detail page carries its own confidence label.

Also available as JSON, as plain text with every finding and its label, and as an Atom feed. Last updated 2026-09-15.

Yamaha QL1

Digital mixing console · 2014

A nine-processor console whose mixing DSPs have no instruction memory at all — the audio path is fixed-function silicon configured through a register file.

DocumentedFixed-function DSPµITRONSH-4ADanteSHARC

Yamaha DM3

Digital mixing console · 2023

Nine years newer than the QL and sharing almost nothing with it but the parameter framework — and, crucially, the same DSP philosophy: the signal path is fixed-function on both, however different the host looks. In 2026 the entry gained a second axis the firmware analysis never touched: the DM3's live **control plane**, captured and driven against a real console -- the first hardware any part of this entry rests on.

PartialLinuxNamed-component archiveDanteFPGARegister-configured DSP

Yamaha DM7

Digital mixing console · 2023

Not one console CPU but a small cluster of identical i.MX8M Mini computers running one Linux rootfs in four roles — and the only platform here that ships its entire mixer parameter model as plain XML.

PartialLinuxi.MX8M MiniNamed-component archiveXML parameter modelSHARC

Allen & Heath SQ-5

Digital mixing console · 2018

A 55 MB firmware image that contains none of the mixer. The audio path lives in FPGA fabric behind an undocumented AXI register map — and the fabric has now been opened far enough to read a pan-law table out of it.

DocumentedFPGA mixingZynq-7000Bare metalAMPNo signing

Allen & Heath Avantis

Digital mixing console · 2020

The structural inverse of the SQ: the control plane is a commodity x86 Linux box, and the mixing runs on a subordinate Xilinx FPGA the host programs at boot. OS updates carry integrity checksums but no signature.

Documentedx86 control hostXilinx FPGA DSPLinuxMD5-only updatesNo signing

Allen & Heath Qu-5 / Qu-6 / Qu-7

Digital mixing console · 2024

The 2nd-generation Qu is SQ silicon in a Qu suit, and not by analogy — it is the same Zynq part, running a mix bitstream of the same size, with the SQ's boot BSP and the Avantis's FX subsystem.

DocumentedZynq PS + discrete FPGABare metalSQ-derivedFDSP FX V2No signing

Allen & Heath Qu-16 / Qu-24 / Qu-32 (+ Qu-Pac / Qu-SB)

Digital mixing console · 2014

The original Qu is a 2014 multi-chip embedded design — an NXP Cortex-M control MCU, an Analog Devices Blackfin audio DSP and an FPGA — with every processing block included and no paid-add-on lock. It shares nothing but a brand with the SQ-derived 2nd-gen Qu.

DocumentedCortex-M + BlackfinFPGABare metalNo add-onsNo signing

Allen & Heath Dante option card (KLANTE)

Networked audio module · 2024

A&H's in-house replacement for the Audinate Brooklyn II Dante module, codenamed KLANTE: a Xilinx Zynq-7010 running embedded Linux that hosts Audinate's Dante IP core. It is the one A&H firmware in this index that is cryptographically signed.

DocumentedZynq-7010Dante IP coreEmbedded LinuxSWUpdateRSA-signed

Allen & Heath AHM-16 / AHM-32 / AHM-64

Installed system processor · 2019

The install processor whose control surface is half published. Allen & Heath document levels, mutes, routing crosspoints, preset recall and source selection — and nothing at all for EQ, delay, dynamics or metering. The other half lives in System Manager's own protocol and in its configuration files, and only the files have been opened.

PartialZone-based DSPSystem Manager .cfgPublished TCP protocolSilicon unidentifiedFirmware unopened

Midas HD96

Digital mixing console · 2021

The one console examined whose control plane is wide open: a full Linux computer speaking documented Thrift and Protobuf. The mixer still lives in FPGA fabric — but the bitstreams ship in the clear and the exact parts are known.

DocumentedLinux (Jetson TK1)Spartan-6 mixingProtobuf control busAES50No image encryption

Behringer WING Compact

Digital mixing console · 2022

The only platform here being studied to build on rather than to understand — and the only one where the container format was analysed, found opaque, and then declared off the critical path.

ActiveSHARCEfinix Trioni.MX 6AES50Clean room

Waves SoundGrid

Audio-over-Ethernet platform · 2010

Not a console, but the transport a great many of them hang off. Documented from both ends at once — the server firmware and the host driver are the same protocol version.

DocumentedLayer 2EtherType 0x8908Realtime LinuxNode modelInteroperability

Violet Audio dMix 128

Digital mixing console · 2024

A headless FPGA console that splits its work across three silicon tiers — a Zynq UltraScale+ running full Ubuntu for control, and a pair of dedicated Spartan-7 FPGAs doing the actual mixing — with an update package that quietly names the OEM behind the brand.

DocumentedZynq UltraScale+Spartan-7 DSPUbuntu 24.04 aarch64Signed updateVSKP/ECP/OSC

Stoatworks Labs LOOM

Reference design — open console

Not a teardown. The open console these teardowns keep pointing at — included because "what would you build instead" is the question every one of them ends on.

Reference designZynq UltraScale+FPGA mixingDanteAES67Milan

Allen & Heath dLive

Digital mixing console · 2016

Still essentially unexamined as a console — no firmware package, no silicon, no update path. What has been looked at is what its Director application writes to disk, and that turns out to be the Avantis format.

PartialShow files onlyDirector V2.11Console unexamined

Behringer / Midas X32 / M32

Digital mixing console · 2012

The container is solved to the byte and every payload inside it is encrypted — so the update image is simultaneously the most transparent and the least readable in this index. It is also the only platform here where a third-party project runs its own operating system on the hardware.

PartialDCP containerStream cipheri.MX253SHARCOpenX32

Analog Way Midra series

Video presentation switcher · 2013

Six models, one firmware, one set of bitstreams. The layer engine lives in FPGA fabric that is configured identically on every unit in the range, so the tier a machine sells as is decided by an integer it reads at boot.

DocumentedLPC43xx3 × FPGAADV7842HDBaseTOne image, six models

Analog Way LiveCore

Video presentation switcher · 2014

A card frame with an x86 PC inside it and a microcontroller on every card. Layer count is not a setting — it is how many processing cards are in the chassis.

PartialCard-basedx86 PC card14 microsAES-encrypted updaterDowngrade register

Analog Way LivePremier / Aquilon

Video presentation switcher · 2018

A COM Express Xeon-D module driving a card frame of Intel Arria 10 GX FPGAs, one microcontroller per card. The RS models are fixed card lists; the C models are the same chassis sold configurable.

PartialArria 10 GXCOM Express Xeon-DATSAM per cardST2110 / NDI / SDVoECustom chassis

Blackmagic Design ATEM (switcher family)

Live production video switcher · 2012

A decade of vision mixers that are all the same idea: a Xilinx FPGA does the video, and a CPU inside that FPGA runs a bare-metal control stack. The CPU changes generation to generation (PowerPC, then MicroBlaze, then ARM) and so does the fabric under it — Virtex-5, Virtex-6, Kintex-7, Zynq — but the FPGA-does-everything shape never does.

DocumentedXilinx FPGAPowerPC / MicroBlaze / ARMAVR32 panelsBare-metalUDP state-sync

Shure MXCW

Wireless conference system · 2018

A conference platform that is closed on the inside and unusually generous on the outside: every application payload in the access point is encrypted, while the control interface is plain ASCII on an open port that pushes a report every time anything changes.

PartialXilinx FPGAVxWorks + QtRSA-2048 signedAES-encrypted payloadsACN/DMP over WebSocket

BirdDog NDI converters (Studio / Flex / 4K / PLAY)

NDI video converter · 2018

A range sold as one family that is really three platforms. Every converter in it is FPGA-based — Zynq-7000 on the 1080p line, Zynq UltraScale+ with a hard video codec unit on the 4K line — except the decode-only PLAY, which has no programmable logic at all and is an ordinary Rockchip applications processor running Debian.

DocumentedZynq UltraScale+Rockchip RK3328LinuxModes are bitstreamsNo signing

Shure QLXD4

Wireless microphone system · 2014

A receiver whose documented control interface is plain ASCII on a TCP port — and which, mounted on a Yamaha console, does not use it. The console-mount path is standards-based ACN, discovered on a multicast group one digit off the registered one and driven entirely by subscriptions.

PartialANSI E1.17 ACNSDT + DMPSLPv2 discoveryPushed events at 8 HzPassive capture only

Sennheiser evolution wireless G3 (EM 300 / EM 500 G3)

Wireless microphone system · 2009

The G3 rack receivers are remote-controlled — but not by the ASCII "media control protocol" Sennheiser published. That one (UDP 53212, firmware ≥ 1.7.0) drew silence from our EM 500 G3 on every probe. What actually drives it is an undocumented binary protocol that Wireless Systems Manager speaks on UDP 8133, and once we had it we mapped the receiver's analog output level to a console's remote head-amp gain and drove one from the other on the bench.

DocumentedWSM binary protocolUDP 8133The documented protocol is deadAF-out is an indexSingle-master write lock