Maybe the 1st problem we have to solve is to extract the chip from the PCB while taking care of the data on it. The data sheet said "Surface Mount Solder Reflow Temperature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260°C for 10 seconds" on P9. Actually I don't understand this sentence very much. Does that mean we have to heat up the PCB for 10s or more time at 260°C to get the solder melt, or the maximum time we can heat up is 10s, or anything else? Thanks.
David On Feb 1, 2008 10:05 PM, MsTiFtS <[EMAIL PROTECTED]> wrote: > Emmanuel Fleury schrieb: > > tof wrote: > > > >> this is a standard flash, with 1.8V power supply. > >> I can do it. > >> > >> desoldering could be difficult if it is glued. > >> > > > > So, if I do understand well, it would require to extract the chip from > > the iPod (without heating it too much to not loose the data) and then > > plug it onto another socket where we can read it. > > > These chips rather die completely than lose their data. > > What kind of hardware do people usually use for such desoldering without > > harm for the chip ? And where can we usually find it, and eventually how > > much does it cost ? > > > Usually it's best to heat up the PCB while pulling the chip away from > it. You will need about 260°C to make the solder melt, but the chip > should not be heated above that temperature for more than 10 seconds. So > you need something that heats up the PCB really quickly. One usually > uses some kind of hot air blowers for that, but if you want to take the > risk, you can try to do it with some kind of gas burner. > >> resoldering : its possible to solder each ball to a wire > >> > Well, if you have appropriate soldering equipment, it's possible to do > that. > >> readout : i have some avr capable of 2.7v operation. can be easily > >> interfaced with a 1.8v device. > >> > > If we could have the electronic schema of such reader (and some > > information on how to interpret the data once we get it) it would be > great. > > > Connect A0-A18 and DQ0-DQ15 to the AVR, CE#, OE# and Vss to GND, WE# and > Vdd to 1,8V. Depending of the kind of outputs the AVR has, you may also > need to use resistors for the Axx connections, or you may need to > connect Axx to 1,8V through some resistors. A datasheet of the AVR would > clarify this. > The data we will get out of it will probably be some kind of ARM > executable code, which can probably be disassembled by IDA Pro etc. > In case they should have taken precautions against that, the content of > that chip may also be encrypted with the decryption code and key being > in a small internal ROM in the ARM, supposed it has one. Then we would > need to "sniff" the contents of the RAM at runtime, or somehow record > the data transmitted by the ARM to the RAM at boot time. > > _______________________________________________ > Linux4nano-dev mailing list > [email protected] > https://mail.gna.org/listinfo/linux4nano-dev > http://www.linux4nano.org >
_______________________________________________ Linux4nano-dev mailing list [email protected] https://mail.gna.org/listinfo/linux4nano-dev http://www.linux4nano.org
