Re: A83: Re: Flash App Hacking


[Prev][Next][Index][Thread]

Re: A83: Re: Flash App Hacking




>Another speculation:
>can't we fake the validation part, and then jump to the part where the app
>gets written, or does the validation part involve flash writing too?

This is how the TI-ROM works:

1. Unlock Flash
2. Check If App Is Valid
 If Yes Write
 If Not lock Flash

There is no _unlockflash routine, the required code is implemented directly
before the validation sequence and if it fails flash is locked up. TI has
done a very good job, making it logically impossible to violate the system.
Physically it's another deal.

Solignac Julien
x1cygnus@xcalc.org
http://xcalc.org

Piracy is a victimless crime, like punching someone in the dark




Follow-Ups: