On Fri, Feb 10, 2006 at 11:01:52PM -0800, Mike Cherba wrote: > Subject: Re: [Eug-lug] look... i have some chip-info. > From: Mike Cherba <[EMAIL PROTECTED]> > To: Eugene Unix and Gnu/Linux User Group <[email protected]> > Date: Fri, 10 Feb 2006 23:01:52 -0800 > X-Mailer: Evolution 2.0.4 > > Jamie, > I've got an Antistatic workstation and boards which have sockets for > the standard 48pin TSOP flash parts. Lets do it here. What time do you > want to get together? > > I have a set of routines which are supposed to mimic the challenge > response, I've just got to get them working in my desktop setup. I've > got no way of testing without a camera and connector though. > > -Mike sounds like we will need to remove the chip... do you have flux, solder, solder wick ?
If not, i should try to get some at norvacs before i come over... I can bring both camera, so we have a referece.. probably around noon would be good... its about 2am now, and i will need to run errands before comming over. Jamie > > > > On Fri, 2006-02-10 at 20:42 -0800, LinuxRocks! wrote: > > On Fri, Feb 10, 2006 at 06:01:54PM -0800, Mike Cherba wrote: > > > Subject: Re: [Eug-lug] look... i have some chip-info. > > > From: Mike Cherba <[EMAIL PROTECTED]> > > > To: Eugene Unix and Gnu/Linux User Group <[email protected]> > > > Date: Fri, 10 Feb 2006 18:01:54 -0800 > > > X-Mailer: Evolution 2.0.4 > > > > > > So there are really 3 ways to go about this. > > > > > > 1.) create an app which uses raw USB reads and writes to reach and > > > extract the data you care about. It also needs to be able to clear the > > > flash for re-use. basiacally what the maushammer guy did. > > > > > > 2.) write a driver that acts as a shim layer to make the data partition > > > available to mount as normal storage. > > > > > > 3.) hack the device's firmware to add support for the USB storage > > > standard commands. Could be done but would require hand coded assembly > > > and careful insertion into the threadX based firmware thats already > > > there. > > > > > > I'd start by redoing #1 which is simple command prompt based for linux. > > > Then I'd see what it takes to turn that level of functionality into #2. > > > Once you can get to that point things get really interesting. Jamie, > > > where did you get your cameras? any chance we could get together at my > > > place this weekend and hack on this thing? > > Mike, > > I got the camera at rite aid (near you...) I have a couple usb > > connectors, i can put them on fairly quickly if you want build your > > own... > > Yeah, lets work on it this weekend... you can come over here if > > also... either way... > > > > I doubt we are going to be able to get in w/out either breaking the C/R, > > or a hardware hack to gain access to flash. > > > > I tried to compile the linux version, but it wouldnt make. I do have > > win98 lappy with the current OPS .16, and libusb 0.1.10.1 > > > > Im seriouly considering unsoldering the flash, and putting it on a usb > > flash drive... but ugh... i dunno if it will make it! > > > > Jamie > > > > > > > > -Mike > > > > > > The object-oriented model makes it easy to build up programs by > > > accretion. What this often means, in practice, is that it provides a > > > structured way to write spaghetti code. --- Paul Graham > > > > > > > > > On Fri, 2006-02-10 at 17:47 -0800, Mike Cherba wrote: > > > > Jamie, > > > > The 1GB NAND Flash part probably has all the storage for the > > > > videos and the Actual OS code. the SDRAM part likely provides buffering > > > > and stack/execution space. Most likely a tight loop and no real OS, a > > > > true traditional RTOS It looks like Zoran provides most of the magic as > > > > a set of libraries. > > > > > > > > The coach7 part seems to be obsoleted, but it and the coach8 parts are > > > > MIPS 4KE based. > > > > > > > > http://www.zoran.com/COACHTM-8?var_recherche=coach+7#nogo > > > > > > > > I found a datasheet for a Coach 5 which based on the same MIPS core, but > > > > it doesn't bring out the JTAG pins. They have a way to single step, but > > > > thats all. If we had access to logic analyzer I'd say boot the thing > > > > with the analyzer on the FLASH bus and grab an assembly level view of > > > > the code to see. > > > > > > > > The guy at maushammer has some neat tools he's put together, but I > > > > didn't see any actual disassembly of the firmware on his site. > > > > > > > > I did grab his download app which goes through a chanllenge and response > > > > routine before accessing the data. This is a good candidate for the > > > > next LUG meeting as his APP is MAC based and would require some rework > > > > to compile on a linux box. the command line stuff should be doable, but > > > > it'd be nice to test it with someones MAC next week and then rewrite for > > > > PC. > > > > > > > > -Mike > > > > > > > > The trouble with the world is that the stupid are cocksure and the > > > > intelligent full of doubt. --- Bertrand Russell > > > > _______________________________________________ > > > > EUGLUG mailing list > > > > [email protected] > > > > http://www.euglug.org/mailman/listinfo/euglug > > > > > > _______________________________________________ > > > EUGLUG mailing list > > > [email protected] > > > http://www.euglug.org/mailman/listinfo/euglug > > _______________________________________________ > > EUGLUG mailing list > > [email protected] > > http://www.euglug.org/mailman/listinfo/euglug > -- > Mike Cherba > Cavium Networks > 883 Brookside Dr > Eugene, OR 97405 > phone: (541) 684-3820 > Cell: (541) 914-2188 > [EMAIL PROTECTED] > www.caviumnetworks.com > _______________________________________________ > EUGLUG mailing list > [email protected] > http://www.euglug.org/mailman/listinfo/euglug _______________________________________________ EUGLUG mailing list [email protected] http://www.euglug.org/mailman/listinfo/euglug
