M-Card opened.
-
- Junior Member
- Posts: 8979
- Joined: Mon Jul 18, 2005 9:33 pm
M-Card opened.
After I complete the pin finder I still cannot find the TDI for DCH70, maybe it is disabled?
I then opened the M-CARD. There is no XC chip (I thought it would have one).
There is a flash and a CPU I think with battery. I think if this CPU can be JTAGed then we can clone the M-CARD. There are a lot of test pins on back of the PCB board. The M-CARD should have the same function as XC chip as in other boxes.
Besides I saw BCM3349 in DCH3416, will it work the same as SB5101? Can I use SB5101 on the box so I can have a full function modem?
I then opened the M-CARD. There is no XC chip (I thought it would have one).
There is a flash and a CPU I think with battery. I think if this CPU can be JTAGed then we can clone the M-CARD. There are a lot of test pins on back of the PCB board. The M-CARD should have the same function as XC chip as in other boxes.
Besides I saw BCM3349 in DCH3416, will it work the same as SB5101? Can I use SB5101 on the box so I can have a full function modem?
-
- Junior Member
- Posts: 8979
- Joined: Mon Jul 18, 2005 9:33 pm
-
- Junior Member
- Posts: 38
- Joined: Sat Jul 22, 2006 4:59 am
Is it the same?
Is it a?
PCMCIA Cable card
if so why not try to plug it into a laptop and dump the data that way?!?
PCMCIA Cable card
if so why not try to plug it into a laptop and dump the data that way?!?
Chess, Electronics
-
- Junior Member
- Posts: 16
- Joined: Wed Jul 18, 2007 3:09 pm
Im playing with these at the moment as well.usbbdm wrote:Here are the pictures.
The SCF61000 must be the main CPU.
320W18 much be the flash.
Another chip should be ram (NVRAM). If we can access the JTAG on the CPU, we should be able to clone the flash.
The chip is a freescale product. I have not been able to find any data on these yet.
the freescale must be doing some sort of auth work. Considering the card has to have firmware applied to it before it can be provisioned. My guess is they provision them at the warehouse with the setup before they take them out into the field for installs.
The test points I am definitely interested in , if you feel like sharing I am more then willing to help out , seeing as I have 3 of these to play with.
-
- Junior Member
- Posts: 207
- Joined: Fri Feb 01, 2008 10:20 pm
Re: Where are the jtags?
I don't see any jtag points on there. Unless if Jtag points come in irregular size or type...
-
- Junior Member
- Posts: 16
- Joined: Wed Jul 18, 2007 3:09 pm
-
- Junior Member
- Posts: 4
- Joined: Tue Mar 25, 2008 5:41 pm
Which type of card was this? An image of the case would help.
I was able to social engineer a multi stream motorola cable card from a local Comcast office which I could possible sacrifice if needed. I could get more if needed, and if needed single stream cards as well.
Unfortunately scientific atlanta cards are harder for me to get in working order but I do have access to broken ones.
I'm sure we can get the datasheets for the Freescale part if we act as if we are a manufacturer in the US and contact one of the many Chinese suppliers who have access to such a part
edit: I'm going to guess this is a Moto M-Card because I just took one apart and it looks the same as above.
From section 3.2 on page twelve of this document http://www.opencable.com/downloads/spec ... 050331.pdf
So the physical spec is PCMCIA but the pinouts aren't necessarily. Section 4 on page 26 outlines the specific pin assignments and how they change if the device is running in backwards compatibility mode.
I was able to social engineer a multi stream motorola cable card from a local Comcast office which I could possible sacrifice if needed. I could get more if needed, and if needed single stream cards as well.
Unfortunately scientific atlanta cards are harder for me to get in working order but I do have access to broken ones.
I'm sure we can get the datasheets for the Freescale part if we act as if we are a manufacturer in the US and contact one of the many Chinese suppliers who have access to such a part
edit: I'm going to guess this is a Moto M-Card because I just took one apart and it looks the same as above.
From section 3.2 on page twelve of this document http://www.opencable.com/downloads/spec ... 050331.pdf
So the physical spec is PCMCIA but the pinouts aren't necessarily. Section 4 on page 26 outlines the specific pin assignments and how they change if the device is running in backwards compatibility mode.
Who is online
Users browsing this forum: No registered users and 1 guest