StarChoice, 4DTV and Digicipher II

BDM (NT) on Star Choice
Alonso
Posts: 67
Joined: Sun May 03, 2009 8:46 pm
Location: Merida , Yucatan Mexico

Post by Alonso » Sat May 08, 2010 7:58 pm

havent found makers im about to borrow a microscope from a friend and then take photos
The cooper wires i meant are the ones conecting the pins from the soldered legs to the waffer i didnt broke them because i made the cut in front of them so they are safe and then i could trace the 3 volts from the battery to what ever they are going to.
To see if i could trace bus wires i need the microscope.
And tracing and injecting signals is something i havent solve yet because i will need super small needles to probe and some fine equipment to do that wich i dont know who can provide it yet.

GideonOmega
Posts: 225
Joined: Tue Nov 27, 2007 10:45 am

Post by GideonOmega » Sun May 09, 2010 9:37 am

you need a microprobe station for that -- that will do the trick once you have access to the bus lines

Alonso
Posts: 67
Joined: Sun May 03, 2009 8:46 pm
Location: Merida , Yucatan Mexico

Definetly a microprobe station is needed

Post by Alonso » Wed May 12, 2010 11:26 pm

even the date shows this ic is old
sizes found inside are smaller than what i imagined.

any way i found an unprotected memory close to the corner were 3 volts from battery come from
But due to size couldnt probe to find were it goes
but position sugests it could be the ram.
Sorry for the poor quality but special equipment is needed to go far beyond.
i think this thread could be closed as the conclution almost shows memory is unprotected by the position i think its the ram.
to be completely proven just have to hear the multimeter beep from 3 volts to wafer to ram location.
By the photos and videos of the scan by microscope NOW YOU CAN BE THE JUDGE.
SERVER FROM THIS FORUM WONT ALLOW ME TO HOST PHOTOS
EACH PHOTO IS 780 KB
EACH LITTLE VIDEO IS 1.4 MB
CAN THE ADMINS HOST THIS INFO???
30 MB ALL VIDEOS AND PHOTOS FROM MICROSCOPE. not zipped of course.
cant even attach one photo
dont want to attach to a link outside from here because when link erases photos then is not even worth to waste time reading forums
Photo say more than a million words.

Alonso
Posts: 67
Joined: Sun May 03, 2009 8:46 pm
Location: Merida , Yucatan Mexico

Post by Alonso » Wed May 12, 2010 11:28 pm

of course can be closed after the photos are uploaded.
Hacking into this ic is other thread.

Alonso
Posts: 67
Joined: Sun May 03, 2009 8:46 pm
Location: Merida , Yucatan Mexico

Post by Alonso » Wed May 12, 2010 11:51 pm

Here have a taste of what im talking about.
Until forum admins decide what to do with this photos here you can taste them.
GENERAL WAFFER VIEW WATCH CAREFURLLY LOWER LEFT CORNER AS ITS CLOSE TO THE SAME CORNER THAT 3 VOLTS ARE.

http://www.youtube.com/watch?v=-Qg23HywlY4

Almost sure but not completly as i couldnt probe and hear the beep from the tester showing 3 volts goes to waffer and then to what in the waffer??? i cant see more deep than this special equipment is needed.

Alonso
Posts: 67
Joined: Sun May 03, 2009 8:46 pm
Location: Merida , Yucatan Mexico

Post by Alonso » Wed May 12, 2010 11:59 pm

im shure if i were us citizen i could go to neighbors house and borrow more special equipment, i have the knowledge but distance is a problem.

GideonOmega
Posts: 225
Joined: Tue Nov 27, 2007 10:45 am

Post by GideonOmega » Thu May 13, 2010 4:56 am

looks interesting -- it will be nice to see the pictures when they are available
nice work

Alonso
Posts: 67
Joined: Sun May 03, 2009 8:46 pm
Location: Merida , Yucatan Mexico

Post by Alonso » Fri May 14, 2010 9:05 pm

HERE ARE THE PHOTOS THAT BELONG TO XC78066-9 AS I PROMISED
DONT LIKE THE IDEA OF HOSTING THEM ON PHOTOBUCKET AS I DONT KNOW how much this free account will last.

http://s915.photobucket.com/albums/ac35 ... =slideshow

Image
Image
Image
Image

Alonso
Posts: 67
Joined: Sun May 03, 2009 8:46 pm
Location: Merida , Yucatan Mexico

Post by Alonso » Fri May 14, 2010 9:06 pm

Image
Image
Image
Image

Alonso
Posts: 67
Joined: Sun May 03, 2009 8:46 pm
Location: Merida , Yucatan Mexico

Post by Alonso » Fri May 14, 2010 9:08 pm

Image
Image
Image
Image

Alonso
Posts: 67
Joined: Sun May 03, 2009 8:46 pm
Location: Merida , Yucatan Mexico

Post by Alonso » Fri May 14, 2010 9:09 pm

Image
Image
Image
Image

Alonso
Posts: 67
Joined: Sun May 03, 2009 8:46 pm
Location: Merida , Yucatan Mexico

Post by Alonso » Fri May 14, 2010 9:10 pm

Image
Image
Image
Image

the only structure similar to a memory is in the corner of the 3.6 volt battery back up.
If that is the memory.... Let me tell you its totally unprotected.Completly vulnerable
If not protected by a sandwich as a secure chip patent says then we can almost conclude security was not a priority when designing it.
Worth try the vulnerabilities associated to motorola chips.
HOpe the admins of the forums backup this historic photos.
And when my account at photobucket is closed then you can post links that work.

usbbdm
Posts: 8627
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm » Fri May 14, 2010 9:41 pm

This is becomes interesting. But this is far beyond my knowledge. I hope you can really do something with it.

GideonOmega
Posts: 225
Joined: Tue Nov 27, 2007 10:45 am

Post by GideonOmega » Sat May 15, 2010 12:35 pm

looks good -- nice work -- its a pity that model number isn't clear -- just need to get a little bit closer :)

Harry181
Posts: 110
Joined: Sun Nov 26, 2006 3:13 am

Pics are really great

Post by Harry181 » Sat May 15, 2010 1:10 pm

Really GREAT work there Alonzo ... Man wish I had YOUR Drive ...

USBBDM ... Have U had any luck on FUID for the 405?


Hey GO ... Just noticed that I joined a FULL year ahead of you
Far East of the Western World

Locked