[Tiptoi] Tiptoi hacking

[Bjoern]

Hi Matthias,

When I read out the NAND directly by a Raspberry Pi, the data was not 
really reliable because some bits always toggled.
Is your reading method giving accurate, reproducable results or are 
toggled bits an inherent effect of reading raw data from NANDs (hence 
using ECC is mandatory) or ?

I have meanwhile managed to enter the BIOS of the TT. This BIOS offers 
the following commands:
- download
- setvalue
- go
- dump

 From what I could see so far, only two memory sections contain data:
section 1:    0x0000'0000 - 0x0000'FFFF
section 2:    0x0800'0000 - 0x0802'FFFF

Section 1 is almost sure the BIOS itself, about the meaning of section 2 
I have no idea (RAM?).
If you think it might support you with your efforts, I can describe the 
steps for entering the BIOS mode more in detail.

Cheers
Björn



Am 30.12.2017 um 18:22 schrieb Matthias Weber:
> Hi Werner and list,
>
> up to my current knowledge, nobody is able to perform a firmware update
> of the pen. If I'm wrong, I'd be happy to read how it is done.
>
> So far we've taken a dump of a tiptoi pen's flash memory and are trying
> to find out how the firmware update is done or how we can get a
> workaround to flash new firmware.
>
> It will be helpful to understand the memory mapping of the peripherals
> connected to/ used by the ARM core (UART, flash interfaces). That's what
> Sven has started to work on. We'd be happy to get any support here.
>
> Cheers,
> Matthias
>
>
> Werner Beroux wrote:
>> I updated the
>> bug https://github.com/entropia/tip-toi-reveng/issues/171 as I kind of
>> bricked my Tiptoi. Wondering if you had some known way to unbrick the
>> device, flash it, or change language on a working device?
>>

-------------- nächster Teil --------------
Ein Dateianhang mit Binärdaten wurde abgetrennt...
Dateiname   : Snowbird2 BIOS.png
Dateityp    : image/png
Dateigröße  : 29206 bytes
Beschreibung: nicht verfügbar
URL         : <https://lists.nomeata.de/pipermail/tiptoi/attachments/20171230/021c233c/attachment.png>