hello everybody

i'm still there ;)

i don't have a lot of time thee days, but i plan to connect a FPGA onto 
the pads of the flash, to emulate the flash and store the read acess 
sequence
so of course i would need broken IN2Gs, with working mainboard ;)


the attack i plan :
- desolder the flash
- wire the flash pads to the FPGA
- wire a SRAM to the FPGA
- configure the fpga to emulate the flash with the content of the sram, 
have RW acess to the sram content, and log read acesses

- put the original bin in the ram, run the ipod to check the wiring
- alter the IVT, run the ipod, check that the ipod crashes
- replace the IVT with a loop to check that we can inject code
- replace the IVT with a program that reads the MROM and then performs a 
flash acess to the pointed data, effectively logging the MROM
- read out the log.


i will probably need 2 months to achieve a working thing,
however i will need the help of ASM specialists, to write and compile 
the little parts of ARM code...



Christoph



Sam a écrit :
> Emmanuel Fleury wrote:
>   
>> Sam wrote:
>>     
>>> Sounds good.  I just bought 2 damaged ones and one working one from 
>>> ebay.  Also bidded on another one with damaged lcd but I haven't won it 
>>> yet. (so 4 total possibly)
>>>
>>> What is a good shipping address?
>>>       
>> We have people in Europe and in Japan (still there tof ?). I had some
>> offer for hardware from Canada but it appears that it is more expensive
>> to ship it than buy broken hardware, so...
>>
>> Thus, the best way to start would be to tell us on what country you are
>> living. ;)
>>
>> Regards
>>     
>
>
> I am in the USA.  I am not too worried about shipping costs.  The 
> slowest is usually always pretty cheap but just takes a couple of weeks.
>
> On a side note to who ever is in charge of the email server, I am listed 
> in the black list at smtp.dnsbl.sorbs.net because of my dynamic address. 
>   I run a couple of servers myself and I have never had a problem with 
> spam coming from dynamic addresses.  I usually use this site to search 
> several black lists at a time and find good ones that don't black list 
> dynamic address:
> http://moensted.dk/spam/
>
> Currently I use these and am happy:
>
> sbl-xbl.spamhaus.org,
> bl.spamcop.net,
> psbl.surriel.com
>
> However it is your server so do as you please.  I just have to 
> unfortunately relay off of my ISP to post here and sometimes their queue 
> gets loaded up to over an hour :(
>
> Thanks,
> Sam
>
> _______________________________________________
> Linux4nano-dev mailing list
> [email protected]
> https://mail.gna.org/listinfo/linux4nano-dev
> http://www.linux4nano.org
>
>   


_______________________________________________
Linux4nano-dev mailing list
[email protected]
https://mail.gna.org/listinfo/linux4nano-dev
http://www.linux4nano.org

Reply via email to