Images of the G1's motherboard in HQ? - G1 Q&A, Help & Troubleshooting

Hey everyone,
I have a strong backing in electronics, and I have a G1. I don't dare open it because it's my only phone and I'm a college student, however, I want to study the circuit board to see how we can exploit the device.
My first idea I want to investigate is just building a chip flasher to flash the ROM. There's no way they could block that. I see the threads on working with the JTAG, however, I'm not familiar in that area. Wouldn't it make more sense to build a solderless chip flasher?
Regardless, does anybody have some high-res images of the board, front and back?

Wrong section, and I don't think many users will hold the high res pictures you are looking for...I could be wrong =)

protomanez said:
Wrong section, and I don't think many users will hold the high res pictures you are looking for...I could be wrong =)
Click to expand...
Click to collapse
I wasn't sure whether to put this in Q&A or not, as I wanted to discuss development of the chips once identified.

http://mikechannon.net/PDF Manuals/HTC Dream SM (A04).pdf
Does this help any? It has complete disassembly/assemby instructions, and lots of pictures

Moved as not Android Development.

Sent Move Request

mejorguille said:
http://mikechannon.net/PDF Manuals/HTC Dream SM (A04).pdf
Does this help any? It has complete disassembly/assemby instructions, and lots of pictures
Click to expand...
Click to collapse
I looked through it, unfortunately, it did not detail the main board. I really would like to just study the traces on the board. Does anybody have a front and back picture of the main board?

mejorguille said:
http://mikechannon.net/PDF Manuals/HTC Dream SM (A04).pdf
Does this help any? It has complete disassembly/assemby instructions, and lots of pictures
Click to expand...
Click to collapse
That'll probably help him all the way down to the bottom.
EDIT:
http://forum.xda-developers.com/showthread.php?t=591048
That should help you ;]

XBrav said:
Hey everyone,
I have a strong backing in electronics, and I have a G1. I don't dare open it because it's my only phone and I'm a college student, however, I want to study the circuit board to see how we can exploit the device.
My first idea I want to investigate is just building a chip flasher to flash the ROM. There's no way they could block that. I see the threads on working with the JTAG, however, I'm not familiar in that area. Wouldn't it make more sense to build a solderless chip flasher?
Regardless, does anybody have some high-res images of the board, front and back?
Click to expand...
Click to collapse
Look in the debricking JTAG testpoint thread in development. First post has some good pictures of the top (side that faces the inside part, toward the screen side) part of the board. I had mine open the other day but I didn't take any pics, sorry

Related

Case Remocal Do-it-Yourself Instructions ?

Has anyone purchased a new housing kit for their Kaiser/tilt who may be able to provide a do-it-yourself instructions to do so?.. if so.. please link me some reliable instructions so that i get it right the first time
Was the teardown that is already out there not complete enough?
ChumleyEX said:
Was the teardown that is already out there not complete enough?
Click to expand...
Click to collapse
where at? are you talking about the actual device or a page that shows things in detail?
The one that shows you with pictures how to take the phone apart.
Gamergee: Generally, most guys out here just plain hate newbies. I guess they were born with a kaiser already stuck in their butt and rather waste their time posting useless teasing crap instead of helping out or pointing the newbie into the right direction.
You can find the complete disassembly instructions here: http://www.pdacenter.ru/razborka/razbor_htc_kaiser/
This link was taken from the XDA-Wiki under Kaiser Devices. Check it out. It has tons of useful stuff.
Good Luck and let us know how it went.
Regards
Tony
tchavei said:
Gamergee: Generally, most guys out here just plain hate newbies. I guess they were born with a kaiser already stuck in their butt and rather waste their time posting useless teasing crap instead of helping out or pointing the newbie into the right direction.
You can find the complete disassembly instructions here: http://www.pdacenter.ru/razborka/razbor_htc_kaiser/
This link was taken from the XDA-Wiki under Kaiser Devices. Check it out. It has tons of useful stuff.
Good Luck and let us know how it went.
Regards
Tony
Click to expand...
Click to collapse
More like we worked for the knowledge and rarely had someone hold our hands through learning.
So just because you had it hard so lets make it hard for the newbies. That doesn't work for me. I appreaciate the Wiki feature but it isn't the answer to all things or this forum would be dead quiet.
This isn't personal. This thread has 4 posts and 70 views. What does that tell us? In my view it means:
20 newbies looked into it because of similar doubts hoping to find an answer that didn't come thru.
20 senior members looked into it and gave a crap about this newbie and didn't even bother to answer
20 variate members just browsed through it without any particular interest or knowledge to answer
the remaining 10 views are probably you, me and Gamergee
Something is wrong here.
You can download the HTC Service Manual that I have uploaded here:
http://rapidshare.com/files/148077399/HTC_Kaiser_Service_Manual.rar
It has a lot of things and how to disassemble the Kaiser.
Chris
Gamergee said:
Has anyone purchased a new housing kit for their Kaiser/tilt who may be able to provide a do-it-yourself instructions to do so?.. if so.. please link me some reliable instructions so that i get it right the first time
Click to expand...
Click to collapse
Where did you buy the case for tytnII, and how much is it? I have to replace mind too.
I just feel like the main rules to this forum should be followed, just as most senior folks have done. At least when I tell you that you didn't search I know the answer is out there.
Read and search before posting.
Reply to an existing thread before creating a new thread.
Redundant threads will be closed.

Bricking: What to know before you explore your device.

This thread was previous titled "How To Brick Your Phone" but because of confusion over the intent of the thread I decided to change the title.
I'm not sure if this would be helpful for everyone but I know some would benefit from knowing how one can brick their phone*. It may help early explorers to know what areas of their phone are for more seasoned SU's and what areas they can explore safely. So, if you know of a way to brick your device, please list it and give some detail leading up to the point of bricking**.
And if you have bricked your phone, please share your experience so that others do not follow in your steps.
* Please list ways to brick your phone other than using physical materials and not ways that are malicious in nature.
** Keep in mind, this thread is not intended for anyone to use as a way to defraud your carrier. The methods outlined are to serve as a warning on certain parts of the device to steer clear from (as a young learner) and to help people feel more comfortable exploring their phone's SU side.
-------------------------------------
Sent via the XDA Tapatalk App
Most commonly talked about way; flash a GSM radio to the CDMA Hero.
Austin3600 said:
Most commonly talked about way; flash a GSM radio to the CDMA Hero.
Click to expand...
Click to collapse
+1 for this. It's the only way I've ever heard of someone truly "bricking" their phone.
Re: How to brick your phone.
This is the most common way I've heard of as well. Can a radio baseband be included in a custom ROM or is this something that has to always be flashed OVER a ROM?
The xda-wiki has a great section listing various radios that are for CDMA Heros. Anyone have the link? I'm on my phone at the moment.
-------------------------------------
Sent via the XDA Tapatalk App
run over it with a truck then pay the 100 bucks to get a new one.
gunnyman said:
run over it with a truck then pay the 100 bucks to get a new one.
Click to expand...
Click to collapse
Indeed. I would say even a medium-size car could do the trick. Unless you have Ghost Armor.
This thread is offensive
There are plenty of ways to render your phone useless, but why?
Unless you're trying to defraud Asurion into getting a new device...
ridiculous
nebenezer said:
This thread is offensive
There are plenty of ways to render your phone useless, but why?
Unless you're trying to defraud Asurion into getting a new device...
ridiculous
Click to expand...
Click to collapse
I believe the intention was to make a list of things to avoid, rather than a list of things to try.
ethereal45 said:
I believe the intention was to make a list of things to avoid, rather than a list of things to try.
Click to expand...
Click to collapse
Ahhh, that makes sense.
In that case I would suggest the OP change the thread title to "How to NOT brick your phone"
A list of things to avoid is simply another way of saying "a list of things to do."
The right information in the wrong persons hands.
nebenezer said:
Ahhh, that makes sense.
In that case I would suggest the OP change the thread title to "How to NOT brick your phone"
Click to expand...
Click to collapse
I'm not going to change the thread title. The intention was to pose the question so people could STAY AWAY from those areas (ethereal45 hit the nail on the head). I'm not sure if there is anyone out there sincerely looking to brick their device. This idea is a bit ridiculous and if you're reading that into this thread you're clearly not seeing the ironic nature of the title Gunnyman's comment was completely sarcastic and funny (at least that's the way I took it in my reply...we're not trying to defraud anyone). But in all reality, no one is going to intentionally brick their phone. If they do, they've got issues larger than this forum can fix.
The intention is the opposite of what you're thinking. Just wanting to know what roads to avoid so that we don't brick our devices. I'm very fresh to this world and it can seem intimidating, so I thought this thread could help ease some of that anxiety.
joshuaharp said:
I'm not going to change the thread title. The intention was to pose the question so people could STAY AWAY from those areas (ethereal45 hit the nail on the head). I'm not sure if there is anyone out there sincerely looking to brick their device. This idea is a bit ridiculous and if you're reading that into this thread you're clearly not seeing the ironic nature of the title Gunnyman's comment was completely sarcastic and funny (at least that's the way I took it in my reply...we're not trying to defraud anyone). But in all reality, no one is going to intentionally brick their phone. If they do, they've got issues larger than this forum can fix.
The intention is the opposite of what you're thinking. Just wanting to know what roads to avoid so that we don't brick our devices. I'm very fresh to this world and it can seem intimidating, so I thought this thread could help ease some of that anxiety.
Click to expand...
Click to collapse
This is like posting a very detailed guide on how to break into a computer, and then saying it's so people can prevent.
Sure, some people will use it for what it's intended, but there are people who will misuse it because there's something they don't like about their Hero, and want to get a refurb or new phone or something.
abcdfv said:
This is like posting a very detailed guide on how to break into a computer, and then saying it's so people can prevent.
Sure, some people will use it for what it's intended, but there are people who will misuse it because there's something they don't like about their Hero, and want to get a refurb or new phone or something.
Click to expand...
Click to collapse
I find this VERY hard to believe. If someone is wanting to defraud their carrier and get a refurbished phone, do you think they will look online for how to 'brick' their root device? I doubt it. Why not just throw it in a pool or run over it with their car?
It's more like a help to not overheat your car. What are ways that you can overheat your car. No radiator fluid, running A/C through the mountains, etc. This is to give people a help on things to avoid. Sure, if someone has a desperate desire to overheat their car, they can follow the instructions and overheat it. But that's up to them.
I find that as I'm exploring the deeper side of my device, I'm constantly thinking thoughts like "wonder if doing this will brick my phone" and so I don't usually explore very far, because of this fear (and my wife and my conscience won't allow me to defraud Sprint, run over my phone and get a replacement). I'm just trying to be cautious that's all and wondering if there are any other ways (non-physical and non-malicious) to brick your device other than flashing a GSM Radio on a CDMA phone.
joshuaharp said:
I'm not sure if there is anyone out there sincerely looking to brick their device. This idea is a bit ridiculous and if you're reading that into this thread you're clearly not seeing the ironic nature of the title Gunnyman's comment was completely sarcastic and funny (at least that's the way I took it in my reply...we're not trying to defraud anyone). But in all reality, no one is going to intentionally brick their phone. If they do, they've got issues larger than this forum can fix.
Click to expand...
Click to collapse
If thats's how I read it? That's what you said... "How to brick your phone".
You might be surprised how many people do intentionally brick their phones. You might also be surprised (if you did just a LITTLE bit of searching) how many threads have been closed because people are openly trying to find out how to brick their phones with the intention of avoiding the $100 replacement charge.
joshuaharp said:
The intention is the opposite of what you're thinking. Just wanting to know what roads to avoid so that we don't brick our devices. I'm very fresh to this world and it can seem intimidating, so I thought this thread could help ease some of that anxiety.
Click to expand...
Click to collapse
If that's the intention then I don't understand why you mislabeled the thread.
There are only 2 ways I know of to brick a CDMA Hero. They are very, very easily avoidable. You almost have to go out of your way to brick a CDMA Hero and if you READ about what you are doing to your phone before you do it you will easily avoid it. And for that matter, as long as you make nandroid backups, forget bricking, it's hard even just to lose whatever info might be important to you.
That's fine though, whatever floats yer boat. I am well aware of how to AVOID bricking my phone so I'll leave your thread alone now.
http://forum.xda-developers.com/showthread.php?t=672131&highlight=brick
http://forum.xda-developers.com/showthread.php?t=663949&highlight=brick
Just to list two.
nebenezer said:
If thats's how I read it? That's what you said... "How to brick your phone".
You might be surprised how many people do intentionally brick their phones. You might also be surprised (if you did just a LITTLE bit of searching) how many threads have been closed because people are openly trying to find out how to brick their phones with the intention of avoiding the $100 replacement charge.
Click to expand...
Click to collapse
First of all, how am I going to find closed threads? Don't they remove them? I really didn't know people search on how to brick their phones with this intention. It seems asinine to me. I hope the mods don't think that's my intention, because I've described it pretty clearly and have even updated the description to be extra clear.
If that's the intention then I don't understand why you mislabeled the thread.
Click to expand...
Click to collapse
Because a thread that says "How to not brick your phone" is a complete waste of time (which this thread is quickly becoming). There are way more ways to NOT brick your phone than to brick it.
There are only 2 ways I know of to brick a CDMA Hero. They are very, very easily avoidable. You almost have to go out of your way to brick a CDMA Hero and if you READ about what you are doing to your phone before you do it you will easily avoid it. And for that matter, as long as you make nandroid backups, forget bricking, it's hard even just to lose whatever info might be important to you.
Click to expand...
Click to collapse
What are the two ways?! I only know of one for the CDMA Hero (GSM Radio flashing to CDMA phone). This is what I'm talking about. You have information that I've been unable to find. Please share.
When you're learning about rooting your device and someone says "this procedure may brick your phone" your mind wonders, what is it about this procedure that may cause my phone to become an invaluable paperweight? That's what I'm after. From a previous forum, I learned that radios are something to be extra careful with. So, that got my mind wondering, what other areas should I be looking out for.
While I agree with the purpose of this thread, the title is a little confusing.
However, On a different phone (HTC Kaiser) there was an android port that I was interested in. I managed to brick that phone by running the sudo rm code in Terminal Emulator. While I don't know if it will brick a Hero it did brick the poor Kaiser. As it was an AT&T phone I had no use for it anymore and thought I'd give the command a try just to see the consequences.
mbobino said:
While I agree with the purpose of this thread, the title is a little confusing.
However, On a different phone (HTC Kaiser) there was an android port that I was interested in. I managed to brick that phone by running the sudo rm code in Terminal Emulator. While I don't know if it will brick a Hero it did brick the poor Kaiser. As it was an AT&T phone I had no use for it anymore and thought I'd give the command a try just to see the consequences.
Click to expand...
Click to collapse
I don't think that would brick it, as we could still access the recovery partition to nandroid back.
Re: How to brick your phone.
While I agree with the purpose of this thread, the title is a little confusing.
However, On a different phone (HTC Kaiser) there was an android port that I was interested in. I managed to brick that phone by running the sudo rm code in Terminal Emulator. While I don't know if it will brick a Hero it did brick the poor Kaiser. As it was an AT&T phone I had no use for it anymore and thought I'd give the command a try just to see the consequences.
Click to expand...
Click to collapse
This is good to know. What would I be doing to have to use this command?
Thread name: Will probably change when I have computer access. I honestly didn't realize people search forums to intentionally brick their devices. I've been proven wrong on that one
-------------------------------------
Sent via the XDA Tapatalk App
mbobino said:
while i agree with the purpose of this thread, the title is a little confusing.
However, on a different phone (htc kaiser) there was an android port that i was interested in. I managed to brick that phone by running the sudo rm code in terminal emulator. While i don't know if it will brick a hero it did brick the poor kaiser. As it was an at&t phone i had no use for it anymore and thought i'd give the command a try just to see the consequences.
Click to expand...
Click to collapse
Code:
sudo rm ~/
lol

Milestone JTAG

Hi,
i've been following the progress on Milestone hacking quite a while now.
Some days ago i started intensive research on the Milestone hardware myself
So here's the some interesting discovery.
Thanks goes out to XVilka for putting this down on the wiki so fast
Of course this is just the starting point for a new hunting....
As you might see many signals are not identified yet.
Essential:
TDO
TDI
TMS
TCK
RTCK
Possible:
EMU0
EMU1
Optional:
DEBUG_UART_RX
Someone needs unsolder the CPU and trace these signals on the mainboard.
So if you got a broken mainboard it would be welcome for scientific examination
This of course would not give us an open bootloader, but might open the door for some promising attempts to debug the platform more intensely.
UPDATE:
All signals had been identified. Unfortunately JTAG access to ARM core and other units is blocked.
EDIT:
O.k. now that xvilka had put my detailed pics in the droid-developers wiki, no need to hide it anymore
Find my updated pics attached.
In fact JTAG access is blocked by the security mechanism on the Milestone.
So all that is accessible is the main TAP controller... everything else is blocked.
No access to the ARM core... nothing except ID could be retrieved.
Have a look at my resignation post here:
http://forum.xda-developers.com/showpost.php?p=11759352&postcount=54
Anyway the journey was a fun thing and i learned a lot of the ARM core internals including TAP units inside OMAP
The craziest thing was, to realize that all this incredible security stuff really depends on one hard-coded bit... called the "HS-Bit".
If you need more infos tell me!!
Cheers,
scholbert
Software tool
We might use the famous OpenOCD for debugging, once we got the full pinout.
Look here for further details about it:
http://elinux.org/BeagleBoardOpenOCD
Have fun!
scholbert
This looks very much fun, but how is this going to benefit an end user?
^^ How does "unlocked bootloader" sound to you
Well said and nice to see some reaction here also.
Sure that's fun... at least for me... and it's to widen your knowledge
I've joined this forum some time ago and it is still called xda-developers.
Maybe i'm little old-fashioned but that's what is still driving me... development
By initiating this thread i was aware there's no benefit for the end user right now,
but the more people stumble over here, the more there's a chance to find some other enthusiasts following this path.
I'm aware that the magic parts are missing.
We need someone willing to do wicked stuff and equipped with professional equipment to unsolder parts from the mainboard.
Once to the remaining signals could be traced, there's a lot play with.
Unlike other devices the core elements of the hardware residing in the Milestone are pretty well documented and lot of software tools exist.
I'm pretty sure there's a way to find a nicer backdoor on this locked down device.
The market is fast though and maybe some day there'll be a device you could use to fly with... even as an end user
Anyway, would be nice to talk about.
Best regards,
scholbert
if thats true, then that'd be great. but the guy says "This of course would not give us an open bootloader" in his first post.
good luck scholbert!!
AbdouRetro said:
if thats true, then that'd be great. but the guy says "This of course would not give us an open bootloader" in his first post.
Click to expand...
Click to collapse
Yes, having a working JTAG is not going to open the bootloader. But will give something very important - access to the CPU and flash without having any working code - read "bootloader development".
Sent from my Milestone using Tapatalk
scholbert, if u have flash access then u can write to some very privileged areas, does that mean u can make the processor boot into general purpose mode?
AbdouRetro said:
scholbert, if u have flash access then u can write to some very privileged areas, does that mean u can make the processor boot into general purpose mode?
Click to expand...
Click to collapse
Privileged areas is a nice word
....but yes, if it's in NAND you may access it easily using JTAG.
AFAIK the HS mode is hard coded into OMAP3430, so booting into GP mode will never happen i guess.
EDIT:
Just had a short glimpse at the OMAP3430 TRM, there's the register CONTROL_PRODUCTION_ID @ 0x4830_A210 to check for GP mode (ID = 0xF0).
On milestone this ID is obviously different and it is hardcoded with efuse.
The ROM bootloader checks this register and could not be rewritten because it's OTP.
Regards,
scholbert
scholbert said:
Privileged areas is a nice word
....but yes, if it's in NAND you may access it easily using JTAG.
AFAIK the HS mode is hard coded into OMAP3430, so booting into GP mode will never happen i guess.
EDIT:
Just had a short glimpse at the OMAP3430 TRM, there's the register CONTROL_PRODUCTION_ID @ 0x4830_A210 to check for GP mode (ID = 0xF0).
On milestone this ID is obviously different and i guess it's hardcoded.
The ROM bootloader checks this register and could not be rewritten because it's OTP.
Regards,
scholbert
Click to expand...
Click to collapse
Sir, I was wondering if a bricked device would be okay for this (by bricked I mean someone [not me of course ] flashed some ****ty firmware and it doesn't boot now), if it is so then I think I visit a few shops and ask around in the "black" market for a bricked device.
I don't think motorola has the capacity to manufacture things so different for the milestone and droid. its enough cost that they use different radios!!
I'm hoping its an external chip/trace that controls which mode it boots.
in the chip block diagram on the site, there's an internal boot rom, do we have that??
reminds me of the xbox360...
Quintasan said:
Sir, I was wondering if a bricked device would be okay for this (by bricked I mean someone [not me of course ] flashed some ****ty firmware and it doesn't boot now), if it is so then I think I visit a few shops and ask around in the "black" market for a bricked device.
Click to expand...
Click to collapse
Sure a bricked device would do, even a partly physical damaged device will do. As i said before the CPU needs to be unsoldered to trace some signals.
EDIT: Just a remark, because you talk about "black" market.... please don't buy any stolen phones or something.
AbdouRetro said:
I don't think motorola has the capacity to manufacture things so different for the milestone and droid. its enough cost that they use different radios!!
I'm hoping its an external chip/trace that controls which mode it boots.
in the chip block diagram on the site, there's an internal boot rom, do we have that??
Click to expand...
Click to collapse
Of course there's a boot ROM, all modern OMAP got this OTP memory implemented.
Have a look at:
https://www.droid-developers.org/wiki/Main_Page
You'll find very interesting and useful information....
Concerning capacities...
Sure they have and obviously Motorola is one of the big customers of Ti.
Apart form the device ID there are also different boot ROMs for different platforms.
This is simply called customizing
TI does it, Qualcomm does it, whoever builds ARM SoC's may do it.
Also Ti's eFuse technology gives the customer (e.g. Motorola) the opportunity to block certain parts of the chip by software setup.
And that's what they did on the Milestone.
Regards,
scholbert
when i said "do we have that"
i meant, do we have a dump of that code that is disassembled and looked into.
by checking here
Code:
droid-developers.org/wiki/Booting_chain
its obvious this has already been done
Hi again,
seems less interest here.... sure this is a very technical thread....
Anyway, see this picture of the mainboard.
https://www.droid-developers.org/images/d/dd/Photo-1.jpg
Seems to be taken from one of the first mass production units, or even a developers phone.
You see there's a FPC connector soldered on the mainboard (underneath the microSD connector).
After doing a little research, it seems that these connectors are used for professional environment:
http://www.hirose.co.jp/cataloge_hp/e58004008.pdf
Part.-No. FH19C-17S-0.5SH
Cheers,
scholbert
I have a dead phone. If someone can provide me with a pinout for the processor, I will be glad to trace out the rest of the jtag header.
Hi eustice!
eustice said:
I have a dead phone. If someone can provide me with a pinout for the processor, I will be glad to trace out the rest of the jtag header.
Click to expand...
Click to collapse
Wow, that 's great, let's crack that nut
I just created a map, bit small though, but i think everything could located...
BTW, on Milestone they seem to have used a OMAP3430 in CBC (S-PBGA-N515) package with POP-memory (see attached datasheet of the package).
Had to digg a little to find that out...
Tell me if you need further information!
Please be careful while removing the CPU, these little pads will easily rip of...
Good luck!!
scholbert
scholbert said:
Hi eustice!
Wow, that 's great, let's crack that nut
I just created a map, bit small though, but i think everything could located...
BTW, on Milestone they seem to have used a OMAP3430 in CBC (S-PBGA-N515) package with POP-memory (see attached datasheet of the package).
Had to digg a little to find that out...
Tell me if you need further information!
Please be careful while removing the CPU, these little pads will easily rip of...
Good luck!!
scholbert
Click to expand...
Click to collapse
Sir, well, I'm not sure if this is of intrest to us but
http://allegro.pl/okazja-jak-nowa-motorola-droid-i1386494285.html
This guys sell's DROIDs for 200 polish zloty, it's cheap. The main problem is that the guy says they were flooded during the transport, he also claims that they were not switched on since then. Are we interested in getting one and disassembling it?
Hey Qintasan,
thanks for the link!
Quintasan said:
This guys sell's DROIDs for 200 polish zloty, it's cheap. The main problem is that the guy says they were flooded during the transport, he also claims that they were not switched on since then. Are we interested in getting one and disassembling it?
Click to expand...
Click to collapse
Indeed the price is nice, but it's your decision, wether to buy one or not.
Personnally i got two working devices and i'm not willing to rip them apart.
By starting this thread i intended to draw some interest about this JTAG stuff and to collect information to gain access on the Milestone.
It is yet unknown, if it will ever work on this platform.
It might also be possible that the JTAG signals are physically connected, but had been disabled by e-fuses on the production units.
..... but if no one ever tries we'll never know.
Best regards,
scholbert
milestone jtag board and connector pic
attached are the pics for the jtag board and the connector on the phone.

Anyone got a busted phone?

I'm looking for a busted captivate for research. I belive we may be able to boot from a micro SD card.
I have to remove the processor and reverse engineer the board in order to find the power supply to the line called XOM5 in the processor manual. Once this line is found, it may be as simple as shorting, slicing the line, or popping a resistor off the board.
Repairing the phone afterwards would be beyond my capabilities.. I can't perform ball soldering. That takes some highly specialized tools. You would be doing a great service to everyone with a GalaxyS phone.
The phone does not need to work, and can be in horrible condition. It can be water damaged or physically broken. The only thing I need is the main board inside the phone.
bump......
Sorry man only got my every day phone. Ill keep an eye out in the island see if i can help with your project.
hey i have a 1008 phone. screen busted. possibly stuck in bootloop. its in a couple peices.
bulletproof1013 said:
hey i have a 1008 phone. screen busted. possibly stuck in bootloop. its in a couple peices.
Click to expand...
Click to collapse
can i just send you the main board?
Yes! that's all I need. I'll send you a PM.
AdamOutler said:
I'm looking for a busted captivate for research. I belive we may be able to boot from a micro SD card.
I have to remove the processor and reverse engineer the board in order to find the power supply to the line called XOM5 in the processor manual. Once this line is found, it may be as simple as shorting, slicing the line, or popping a resistor off the board.
Repairing the phone afterwards would be beyond my capabilities.. I can't perform ball soldering. That takes some highly specialized tools. You would be doing a great service to everyone with a GalaxyS phone.
The phone does not need to work, and can be in horrible condition. It can be water damaged or physically broken. The only thing I need is the main board inside the phone.
Click to expand...
Click to collapse
I would like to learn more how a CB works and how to trace certain things on a board as well as other parts. Any books or reference guides besides schematics that could help me? PM me if you will. Infact anyone that knows anything could help me, please PM. Thanks.
Jmurph3 said:
I would like to learn more how a CB works and how to trace certain things on a board as well as other parts. Any books or reference guides besides schematics that could help me? PM me if you will. Infact anyone that knows anything could help me, please PM. Thanks.
Click to expand...
Click to collapse
A better place for a newbie to start would be circuit bending... hopping electricity from one point on a circuit board to another to alter the operating state. This would be a great place to start... http://hackaday.com/2011/01/11/intro-to-circuit-bending/
Once you get familiar with how things work on a circuit board, start examining the individual components in greater detail. There's some datasheets in here http://forum.xda-developers.com/showthread.php?t=1111866 which you could use to understand how a couple of the major players on our phone works. Speciffically, the USB controller (FSA9480) and the Processor (S5PC110). It really takes some additional education to start reading processor manuals....
You could always start with something simpler like Arduino platform. The Arduino platform allows you to create a basic program which runs on a microprocessor and take inputs and outputs from it. I like the Arduino because it's so darn quick to pick up.
here's some of the stuff I programmed on the Arduino
Contest entry http://www.hyundaiaftermarket.org/f...utlers-hackaday-santa-pede-competition-entry/
Silly candle http://www.hyundaiaftermarket.org/forum/blog/3/entry-27-digital-candle/
This one would be a great first project. http://www.hyundaiaftermarket.org/forum/blog/3/entry-26-arduino-ef-meter/
If you really want to understand how a circuit board works, the best way is to go to school, or start playing with one... You could get started pretty cheap http://www.google.com/search?client...gc.r_pw.&fp=d4257c808144b93c&biw=1333&bih=651 or you can get a better one like in the Android Open Acessory Kit (it's actually an Arduino Mega with additional sensors) http://www.google.com/search?client...gc.r_pw.&fp=d4257c808144b93c&biw=1333&bih=651
So yeah... Learning electronics is reading, playing and doing.
AdamOutler said:
A better place for a newbie to start would be circuit bending... hopping electricity from one point on a circuit board to another to alter the operating state. This would be a great place to start... http://hackaday.com/2011/01/11/intro-to-circuit-bending/
Once you get familiar with how things work on a circuit board, start examining the individual components in greater detail. There's some datasheets in here http://forum.xda-developers.com/showthread.php?t=1111866 which you could use to understand how a couple of the major players on our phone works. Speciffically, the USB controller (FSA9480) and the Processor (S5PC110). It really takes some additional education to start reading processor manuals....
You could always start with something simpler like Arduino platform. The Arduino platform allows you to create a basic program which runs on a microprocessor and take inputs and outputs from it. I like the Arduino because it's so darn quick to pick up.
here's some of the stuff I programmed on the Arduino
Contest entry http://www.hyundaiaftermarket.org/f...utlers-hackaday-santa-pede-competition-entry/
Silly candle http://www.hyundaiaftermarket.org/forum/blog/3/entry-27-digital-candle/
This one would be a great first project. http://www.hyundaiaftermarket.org/forum/blog/3/entry-26-arduino-ef-meter/
If you really want to understand how a circuit board works, the best way is to go to school, or start playing with one... You could get started pretty cheap http://www.google.com/search?client...gc.r_pw.&fp=d4257c808144b93c&biw=1333&bih=651 or you can get a better one like in the Android Open Acessory Kit (it's actually an Arduino Mega with additional sensors) http://www.google.com/search?client...gc.r_pw.&fp=d4257c808144b93c&biw=1333&bih=651
So yeah... Learning electronics is reading, playing and doing.
Click to expand...
Click to collapse
Hey, thanks a lot. I'm sure I'll be able to get something out of it. Hopefully this will help with my job some too!
Hey , when and If your able to boot from micro sd...will this method be like the nook color?
bulletproof1013 said:
Hey , when and If your able to boot from micro sd...will this method be like the nook color?
Click to expand...
Click to collapse
Basically. that's the idea. perform a slight hardware modification, then boot from SDCard from then on. Of course, first, I'll be focusing on just recovering a bricked phone by providing the phone a PBL/SBL/SBL2 on a MMC card.
Any progress?
crispy1805 said:
Any progress?
Click to expand...
Click to collapse
Yes. the project is completed. Thank you Bulletproof1013.
See here: http://forum.xda-developers.com/showthread.php?t=1242466

Trusted boot jumper?

Not wanting to open up old threads and discussions about booting the atrix 4g, but i was just browsing the schematics i found on xda, and noticed what looks like a 'trusted boot' jumper. I don't know much about trust technology in these platforms but someone here may know more.
Brief searches show intel's trusted platform technology, I'm not sure the atrix contains something similar.
but if it does, would this jumper - if changed, allow us to boot anything perhaps?
I've attached a photo of the schematic (i found this trying to follow the good old 'FM radio not working' thread as well).
so yeah, thoughts from those more in the guts of trusted platforms?
please feel free to shut this thread down if I'm just total out of the ball park, but if this is a lead, all be it a hardware mod(depending where this jumper is and how easy it is to change its state on the board), it may be a way to unbrick perhaps.
I'm also aware the atrix 4G is getting a little older now, and interest maybe being depleted given other options in the market these days.
thanks
glegge said:
Not wanting to open up old threads and discussions about booting the atrix 4g, but i was just browsing the schematics i found on xda, and noticed what looks like a 'trusted boot' jumper. I don't know much about trust technology in these platforms but someone here may know more.
Brief searches show intel's trusted platform technology, I'm not sure the atrix contains something similar.
but if it does, would this jumper - if changed, allow us to boot anything perhaps?
I've attached a photo of the schematic (i found this trying to follow the good old 'FM radio not working' thread as well).
so yeah, thoughts from those more in the guts of trusted platforms?
please feel free to shut this thread down if I'm just total out of the ball park, but if this is a lead, all be it a hardware mod(depending where this jumper is and how easy it is to change its state on the board), it may be a way to unbrick perhaps.
I'm also aware the atrix 4G is getting a little older now, and interest maybe being depleted given other options in the market these days.
thanks
Click to expand...
Click to collapse
i have a question. why didnt u write this to a trusted dev for atrix?? because its not very useful to write this without 100% knowledge so it would have been the best to write it to a hardware dev that can proof this and test it.
thanks it was meant good, but still write this to a dev that know how to work with this.
Hai_Duong said:
i have a question. why didnt u write this to a trusted dev for atrix?? because its not very useful to write this without 100% knowledge so it would have been the best to write it to a hardware dev that can proof this and test it.
thanks it was meant good, but still write this to a dev that know how to work with this.
Click to expand...
Click to collapse
Understood, I'm all good intentions and thumbs and fingers.
could you suggest a dev to IM this too?
many thanks
glegge said:
Understood, I'm all good intentions and thumbs and fingers.
could you suggest a dev to IM this too?
many thanks
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=2016837
here these guys are the hope for ics kernel just write them if its useful they will reply.

Categories

Resources