asciilifeform: this 1 claims rk3399 (same as in ye olde c101pa thing and various chinese boards)

asciilifeform: i find this intolerable on any box used for anything serious whatsoever, so my c101pa is presently gathering dust ☟︎

asciilifeform: then and only then , c101pa will turn into an item like rk, where you can operate strictly with self-built contents

asciilifeform: iirc phf did turn his c101pa into ~some~ form of usable

asciilifeform: i'm thinking the terraformed-c101pa is potentially saleable tho.

asciilifeform: even if i finally crack the puzzler of c101pa boot and encuntooation -- thing's palpably small.

asciilifeform: phf: c101pa would last ~week if power management thing worked...

asciilifeform: http://btcbase.org/log/2018-09-30#1856179 << generally i dun buy crippleware unless i a) have or b) plan to bake (e.g. c101pa) a crack. ☝︎

asciilifeform: !Q later tell phf lemme know if you want the magic pill recipe + patched flashrom util for c101pa . ☟︎

asciilifeform: uboot on c101pa promises to be a long and painful dig.

asciilifeform: in other noose, not only reading but writing the c101pa's boot rom worx. however, a build of rk3399 demo uboot does ~not~ bring up anyffing that produces debug uart output.

asciilifeform: ( for those who did not follow the orig c101pa threads : the box has ~three~ firmware turds: 1) main (8MB) bootloader 2) EC (little arm thingie, has own console , controls all of kbd but the power and reset lines, as well as various voltages, and battery charger) 3) cr50 -- controls power/reset lines, inits the charging brick, and 'god mode' debug over the other 2 chips, i.e. cpu and EC )

asciilifeform: http://www.loper-os.org/pub/current_c101pa_main.bin << current contents of the W25Q64DW rom.

asciilifeform: bahahaha i have spi rom read/write on c101pa.

asciilifeform: in other noose, i have what appears to be a cured c101pa.

asciilifeform: speaking of this, if any l1 folx wants the c101pa carcass, probes and all, and the spare MBs etc, plox to write in

asciilifeform: phf: are you in the midst of planting the thing on c101pa box?

asciilifeform: phf: fwiw i put my c101pa in the graveyard for nao, it was massive sink of time with ~0 to show for it

asciilifeform: however i used the evil kernel, haven't yet built a kernel for c101pa

asciilifeform: seen in http://www.loper-os.org/pub/c101pa/c101pa_unlock_nodice.txt , 'RO keyid: 0xaa66150f(prod)' corresponds to keyid of #0, and 'RW keyid: 0xde88588d(prod)' is #2 ; #1 is '0xb93d6539' and not seen in the sysinfo msg, but does show up in early vers of fw (e.g. https://chromium-review.googlesource.com/c/chromiumos/platform/ec/+/400418 ) and prolly is dedicated nsakey ☟︎

asciilifeform: (1) http://www.loper-os.org/pub/c101pa/ida/cr50_fritz_ro_sig.png (2) http://www.loper-os.org/pub/c101pa/ida/cr50_fritz_hitler_enforcer.png (3) http://www.loper-os.org/pub/c101pa/ida/cr50_fritz_hitler_enforcement_businessend.png (4) http://www.loper-os.org/pub/c101pa/ida/cr50_fritz_pinned_pubs.png ☟︎

asciilifeform: !Q later tell phf http://btcbase.org/log/2018-06-22#1828933 >> http://btcbase.org/log/2018-06-23#1829007 >> https://github.com/coreboot/chrome-ec/blob/master/chip/g/signed_header.h >>>>> http://www.loper-os.org/pub/c101pa/ro_signature.txt ( not the only 1, but illustrative ) ☝︎☝︎

asciilifeform: oh , for compleeetness, http://loper-os.org/pub/c101pa/cr50.bin.prod << the 0.3.4 cr50 fw currently installed in my box. ( the offsets above, are valid for it)

asciilifeform: so, meanwhile : finds : key id's seen in http://www.loper-os.org/pub/c101pa/c101pa_unlock_nodice.txt , lead to pay dirt,

asciilifeform: !#s c101pa

asciilifeform: any folx in l1 who would like to saw away at c101pa but lack the snake ? plox to write in .

asciilifeform: meaningful. i either get a pile of c101pa with rewritable cr50 256kB firmwares, or not.

asciilifeform: incidentally the whole fleet cost about 300 bux; i.e. the cost of 1 c101pa-tron.

asciilifeform: pretty clear imho. obtain a c101pa. obtain the snake ( schematic on asciilifeform's www . ) send to asciilifeform the output of the http://btcbase.org/log/2018-06-12#1824405 . then, judge prospective winners , under condition http://btcbase.org/log/2018-06-13#1824459 . if pill permits overwriting all 256k of the chip, with arbitrary contents , we have a winner. then month later, http://btcbase.org/log/2018-06-13#1824462 . ☝︎☝︎☝︎

asciilifeform: after $time , phf goes and buys, from amazon, a c101pa , and administers the pill. if it is cured just the same as his current one, the other half of prize is to be awarded. ☟︎

asciilifeform: phf: you will test using your c101pa. and so you will need the debug snake, i will need to put the output of sysinfo , ver , brd , etc cr50 console commands into the statement. ☟︎

asciilifeform: currently best i have is http://www.loper-os.org/pub/c101pa/h1.jpg

asciilifeform: the break would ideally be applicable via the http://www.loper-os.org/?p=2415 debug device; or, at worst, by attaching to the test pads on the http://www.loper-os.org/pub/c101pa/h1.jpg pcb.

asciilifeform: then, e.g. the c101pa, becomes a pretty useful, general-purpose arm64 box.

asciilifeform: into all currently available cr50 boards, but in particular the c101pa.

asciilifeform: pretty much whole trip asciilifeform was thinking 'mmm, if only had c101pa...'

asciilifeform: http://www.loper-os.org/pub/c101pa/mb_top.jpg << in far upper right.

asciilifeform: a chinese shop could, for instance, mount the http://www.loper-os.org/pub/c101pa_dbg.jpg ( 'google servo' ) connector, on to the vacant pads. BUT this does not give me anything that i do not already have via the 'suzyq'.

asciilifeform: according to amstan , the fella claiming to be a designer of c101pa , everything connected with cr50 is deeply trade secret, and shared with no one outside of google.

asciilifeform: swiftgeek: here, btw, is the factory boot rom (crippled coreboot) from that winbond : http://loper-os.org/pub/c101pa/factory_rom.bin

asciilifeform: c101pa finds various retailers, and, if you dig persistently, asciilifeform's www, and that's currently more or less it.

asciilifeform: September 1, 2017 Asus Chromebook Flip C101PA Bob rk3399 etc

asciilifeform: hence investigation of c101pa and similar

asciilifeform: http://www.loper-os.org/pub/c101pa_open.jpg << machine

asciilifeform: the c101pa itself was introduced in '17

asciilifeform: c101pa also includes a trackpad with flashable blob fw

asciilifeform: swiftgeek: i actually started with attempt to port generic coreboot to c101pa, and ended up finding the cr50 by accident

asciilifeform: to be clear, asciilifeform is working with c101pa .

asciilifeform: swiftgeek: if you'd like to take a c101pa and deball the bga and try this, and post article, i promise to read

asciilifeform: swiftgeek: asciilifeform's orig plan was to sell cleansed c101pa machines. if this said cleansing requires lifting a bga, and attaching a manufactured replacement , we will be talking about considerably different cost than if the machines can be cleansed in 10min via software, via debug snake.

asciilifeform: i am however accumulating a pile of c101pa boards

asciilifeform: not unless BingoBoingo can find a c101pa in uy

asciilifeform: ( btw another reason c101pa would be a spiffy orc lappy -- it's got no fans/ducts )

asciilifeform: for completeness, http://www.loper-os.org/pub/c101pa/mb_top.jpg + http://www.loper-os.org/pub/c101pa/mb_btm.jpg ( apologies for the sad photos, they came out of a flatbed, evidently not ideal tool for this job ) ☟︎

asciilifeform: http://www.loper-os.org/pub/c101pa/h1.jpg << observe, cr50 has buncha test pads. i bet half a dozen of these, are used for factory fillup. ☟︎

asciilifeform: ( naturally including the one for c101pa box )

asciilifeform: i was able to flash in the https://gsdview.appspot.com/chromeos-localmirror/distfiles/cr50.r0.0.10.w0.3.4.tbz2 image ; it supports a few moar commands, including 'rma open' returned-to-factory unlocker thing. but result was , unsurprisingly, 'with notes from hitler only' : http://www.loper-os.org/pub/c101pa/c101pa_unlock_nodice.txt ☟︎

asciilifeform: prolly will have to bite the bullet and throw out c101pa , and try the c100pa .

asciilifeform: https://irclog.whitequark.org/linux-rockchip/2018-06-07#22285756; << moar c101pa lulzies

asciilifeform: http://www.loper-os.org/pub/c101pa/usb2spew.txt << spew.

asciilifeform: speaking of which, it's still an open q, what to do re rng on c101pa

asciilifeform: http://www.loper-os.org/pub/c101pa/button_0_big.jpg << ipnojecam

asciilifeform: http://btcbase.org/log/2018-06-06#1820853 << incidentally, the c101pa has a camera of some kind. ☝︎

asciilifeform: http://www.loper-os.org/pub/c101pa_dbg.jpg << it's in there.

asciilifeform: http://btcbase.org/log/2018-06-06#1820855 << briefly returning upstack, once i find the uart pins and solder (under microscope, it will be a 1st class bitch) i can try starting with stock rk3399 loader, and welding on the c101pa peripherals init (which i've dug out of google's shitpile) ☝︎

asciilifeform: mircea_popescu: c101pa? currently stuck on 'how the fuck to build even google's orig bootloader , out of the fragmentarily pseudo-opensrc pieces', before can even consider backporting their init to coreboot ☟︎

asciilifeform: ( tho i am certainly hoping to begin selling pre-cured c101pa boxen in ~this~ mo )

asciilifeform: incidentally ~same pill will work to cure other arm64 chrome iron. afaik the c101pa is the only one with ips panel tho, currently.

asciilifeform: upstack -- rk3328-roc-cc , in case anyone forgot, is a 4core beast; c101pa is a rk3399 with 6 core. oughta be snappier for builds.

asciilifeform: ... this also means that c101pa ( as soon as i have a ready to roll firmware for it ) will be an out-of-the-box gnat dev station.

asciilifeform: and somewhere in http://www.loper-os.org/pub/c101pa_dbg.jpg is the uart, but currently i dun have time to find where.

asciilifeform: meanwhile, the http://btcbase.org/log/2018-06-01#1820197 folx were right : >> http://www.loper-os.org/pub/c101pa_spirom.jpg ☝︎☟︎

asciilifeform: unfortunately i cannot currently test the aarch64 one, my c101pa is across a table top in pieces just now

asciilifeform: in other potential finds, https://irclog.whitequark.org/linux-rockchip/2018-05-03 << d00d claims to have clean uboot for c101pa . no complete srcball posted tho, as far as i was able to find, yet