On Fri, Feb 10, 2006 at 06:01:54PM -0800, Mike Cherba wrote: > Subject: Re: [Eug-lug] look... i have some chip-info. > From: Mike Cherba <[EMAIL PROTECTED]> > To: Eugene Unix and Gnu/Linux User Group <[email protected]> > Date: Fri, 10 Feb 2006 18:01:54 -0800 > X-Mailer: Evolution 2.0.4 > > So there are really 3 ways to go about this. > > 1.) create an app which uses raw USB reads and writes to reach and > extract the data you care about. It also needs to be able to clear the > flash for re-use. basiacally what the maushammer guy did. > > 2.) write a driver that acts as a shim layer to make the data partition > available to mount as normal storage. > > 3.) hack the device's firmware to add support for the USB storage > standard commands. Could be done but would require hand coded assembly > and careful insertion into the threadX based firmware thats already > there. > > I'd start by redoing #1 which is simple command prompt based for linux. > Then I'd see what it takes to turn that level of functionality into #2. > Once you can get to that point things get really interesting. Jamie, > where did you get your cameras? any chance we could get together at my > place this weekend and hack on this thing? Mike, I got the camera at rite aid (near you...) I have a couple usb connectors, i can put them on fairly quickly if you want build your own... Yeah, lets work on it this weekend... you can come over here if also... either way...
I doubt we are going to be able to get in w/out either breaking the C/R, or a hardware hack to gain access to flash. I tried to compile the linux version, but it wouldnt make. I do have win98 lappy with the current OPS .16, and libusb 0.1.10.1 Im seriouly considering unsoldering the flash, and putting it on a usb flash drive... but ugh... i dunno if it will make it! Jamie > > -Mike > > The object-oriented model makes it easy to build up programs by > accretion. What this often means, in practice, is that it provides a > structured way to write spaghetti code. --- Paul Graham > > > On Fri, 2006-02-10 at 17:47 -0800, Mike Cherba wrote: > > Jamie, > > The 1GB NAND Flash part probably has all the storage for the > > videos and the Actual OS code. the SDRAM part likely provides buffering > > and stack/execution space. Most likely a tight loop and no real OS, a > > true traditional RTOS It looks like Zoran provides most of the magic as > > a set of libraries. > > > > The coach7 part seems to be obsoleted, but it and the coach8 parts are > > MIPS 4KE based. > > > > http://www.zoran.com/COACHTM-8?var_recherche=coach+7#nogo > > > > I found a datasheet for a Coach 5 which based on the same MIPS core, but > > it doesn't bring out the JTAG pins. They have a way to single step, but > > thats all. If we had access to logic analyzer I'd say boot the thing > > with the analyzer on the FLASH bus and grab an assembly level view of > > the code to see. > > > > The guy at maushammer has some neat tools he's put together, but I > > didn't see any actual disassembly of the firmware on his site. > > > > I did grab his download app which goes through a chanllenge and response > > routine before accessing the data. This is a good candidate for the > > next LUG meeting as his APP is MAC based and would require some rework > > to compile on a linux box. the command line stuff should be doable, but > > it'd be nice to test it with someones MAC next week and then rewrite for > > PC. > > > > -Mike > > > > The trouble with the world is that the stupid are cocksure and the > > intelligent full of doubt. --- Bertrand Russell > > _______________________________________________ > > EUGLUG mailing list > > [email protected] > > http://www.euglug.org/mailman/listinfo/euglug > > _______________________________________________ > EUGLUG mailing list > [email protected] > http://www.euglug.org/mailman/listinfo/euglug _______________________________________________ EUGLUG mailing list [email protected] http://www.euglug.org/mailman/listinfo/euglug
