Emmanuel Fleury schrieb:
> tof wrote:
>   
>> this  is a standard flash, with 1.8V power supply.
>> I can do it.
>>
>> desoldering could be difficult if it is glued.
>>     
>
> So, if I do understand well, it would require to extract the chip from
> the iPod (without heating it too much to not loose the data) and then
> plug it onto another socket where we can read it.
>   
These chips rather die completely than lose their data.
> What kind of hardware do people usually use for such desoldering without
> harm for the chip ? And where can we usually find it, and eventually how
> much does it cost ?
>   
Usually it's best to heat up the PCB while pulling the chip away from 
it. You will need about 260°C to make the solder melt, but the chip 
should not be heated above that temperature for more than 10 seconds. So 
you need something that heats up the PCB really quickly. One usually 
uses some kind of hot air blowers for that, but if you want to take the 
risk, you can try to do it with some kind of gas burner.
>> resoldering : its possible to solder each ball to a wire
>>     
Well, if you have appropriate soldering equipment, it's possible to do that.
>> readout : i have some avr capable of 2.7v operation. can be easily 
>> interfaced with a 1.8v device.
>>     
> If we could have the electronic schema of such reader (and some
> information on how to interpret the data once we get it) it would be great.
>   
Connect A0-A18 and DQ0-DQ15 to the AVR, CE#, OE# and Vss to GND, WE# and 
Vdd to 1,8V. Depending of the kind of outputs the AVR has, you may also 
need to use resistors for the Axx connections, or you may need to 
connect Axx to 1,8V through some resistors. A datasheet of the AVR would 
clarify this.
The data we will get out of it will probably be some kind of ARM 
executable code, which can probably be disassembled by IDA Pro etc.
In case they should have taken precautions against that, the content of 
that chip may also be encrypted with the decryption code and key being 
in a small internal ROM in the ARM, supposed it has one. Then we would 
need to "sniff" the contents of the RAM at runtime, or somehow record 
the data transmitted by the ARM to the RAM at boot time.

_______________________________________________
Linux4nano-dev mailing list
[email protected]
https://mail.gna.org/listinfo/linux4nano-dev
http://www.linux4nano.org

Reply via email to