Jamie,
I've got an Antistatic workstation and boards which have sockets for
the standard 48pin TSOP flash parts. Lets do it here. What time do you
want to get together?
I have a set of routines which are supposed to mimic the challenge
response, I've just got to get them working in my desktop setup. I've
got no way of testing without a camera and connector though.
-Mike
On Fri, 2006-02-10 at 20:42 -0800, LinuxRocks! wrote:
> On Fri, Feb 10, 2006 at 06:01:54PM -0800, Mike Cherba wrote:
> > Subject: Re: [Eug-lug] look... i have some chip-info.
> > From: Mike Cherba <[EMAIL PROTECTED]>
> > To: Eugene Unix and Gnu/Linux User Group <[email protected]>
> > Date: Fri, 10 Feb 2006 18:01:54 -0800
> > X-Mailer: Evolution 2.0.4
> >
> > So there are really 3 ways to go about this.
> >
> > 1.) create an app which uses raw USB reads and writes to reach and
> > extract the data you care about. It also needs to be able to clear the
> > flash for re-use. basiacally what the maushammer guy did.
> >
> > 2.) write a driver that acts as a shim layer to make the data partition
> > available to mount as normal storage.
> >
> > 3.) hack the device's firmware to add support for the USB storage
> > standard commands. Could be done but would require hand coded assembly
> > and careful insertion into the threadX based firmware thats already
> > there.
> >
> > I'd start by redoing #1 which is simple command prompt based for linux.
> > Then I'd see what it takes to turn that level of functionality into #2.
> > Once you can get to that point things get really interesting. Jamie,
> > where did you get your cameras? any chance we could get together at my
> > place this weekend and hack on this thing?
> Mike,
> I got the camera at rite aid (near you...) I have a couple usb
> connectors, i can put them on fairly quickly if you want build your
> own...
> Yeah, lets work on it this weekend... you can come over here if
> also... either way...
>
> I doubt we are going to be able to get in w/out either breaking the C/R,
> or a hardware hack to gain access to flash.
>
> I tried to compile the linux version, but it wouldnt make. I do have
> win98 lappy with the current OPS .16, and libusb 0.1.10.1
>
> Im seriouly considering unsoldering the flash, and putting it on a usb
> flash drive... but ugh... i dunno if it will make it!
>
> Jamie
>
> >
> > -Mike
> >
> > The object-oriented model makes it easy to build up programs by
> > accretion. What this often means, in practice, is that it provides a
> > structured way to write spaghetti code. --- Paul Graham
> >
> >
> > On Fri, 2006-02-10 at 17:47 -0800, Mike Cherba wrote:
> > > Jamie,
> > > The 1GB NAND Flash part probably has all the storage for the
> > > videos and the Actual OS code. the SDRAM part likely provides buffering
> > > and stack/execution space. Most likely a tight loop and no real OS, a
> > > true traditional RTOS It looks like Zoran provides most of the magic as
> > > a set of libraries.
> > >
> > > The coach7 part seems to be obsoleted, but it and the coach8 parts are
> > > MIPS 4KE based.
> > >
> > > http://www.zoran.com/COACHTM-8?var_recherche=coach+7#nogo
> > >
> > > I found a datasheet for a Coach 5 which based on the same MIPS core, but
> > > it doesn't bring out the JTAG pins. They have a way to single step, but
> > > thats all. If we had access to logic analyzer I'd say boot the thing
> > > with the analyzer on the FLASH bus and grab an assembly level view of
> > > the code to see.
> > >
> > > The guy at maushammer has some neat tools he's put together, but I
> > > didn't see any actual disassembly of the firmware on his site.
> > >
> > > I did grab his download app which goes through a chanllenge and response
> > > routine before accessing the data. This is a good candidate for the
> > > next LUG meeting as his APP is MAC based and would require some rework
> > > to compile on a linux box. the command line stuff should be doable, but
> > > it'd be nice to test it with someones MAC next week and then rewrite for
> > > PC.
> > >
> > > -Mike
> > >
> > > The trouble with the world is that the stupid are cocksure and the
> > > intelligent full of doubt. --- Bertrand Russell
> > > _______________________________________________
> > > EUGLUG mailing list
> > > [email protected]
> > > http://www.euglug.org/mailman/listinfo/euglug
> >
> > _______________________________________________
> > EUGLUG mailing list
> > [email protected]
> > http://www.euglug.org/mailman/listinfo/euglug
> _______________________________________________
> EUGLUG mailing list
> [email protected]
> http://www.euglug.org/mailman/listinfo/euglug
--
Mike Cherba
Cavium Networks
883 Brookside Dr
Eugene, OR 97405
phone: (541) 684-3820
Cell: (541) 914-2188
[EMAIL PROTECTED]
www.caviumnetworks.com
_______________________________________________
EUGLUG mailing list
[email protected]
http://www.euglug.org/mailman/listinfo/euglug
