Re: A83: Re: Flash App Hacking
[Prev][Next][Index][Thread]
Re: A83: Re: Flash App Hacking
>Another speculation:
>can't we fake the validation part, and then jump to the part where the app
>gets written, or does the validation part involve flash writing too?
This is how the TI-ROM works:
1. Unlock Flash
2. Check If App Is Valid
If Yes Write
If Not lock Flash
There is no _unlockflash routine, the required code is implemented directly
before the validation sequence and if it fails flash is locked up. TI has
done a very good job, making it logically impossible to violate the system.
Physically it's another deal.
Solignac Julien
x1cygnus@xcalc.org
http://xcalc.org
Piracy is a victimless crime, like punching someone in the dark
Follow-Ups: