log☇︎
44900+ entries in 0.01s
asciilifeform: this one is 'bob'
asciilifeform: swiftgeek: here's a flatbed scan of the board, http://btcbase.org/log/2018-06-11#1822396 ☝︎
asciilifeform: http://www.loper-os.org/pub/c101pa_open.jpg << machine
asciilifeform: nope
asciilifeform: aa
asciilifeform: 'H1B2C'
asciilifeform: marked in purple
asciilifeform: the h1 is the item in the right hand side of the photo
asciilifeform: the c101pa itself was introduced in '17
asciilifeform: ( it's the bootloader fw, btw )
asciilifeform: that winbond's been in production since early 2000s
asciilifeform: !!up swiftgeek
asciilifeform: i uncrated it in end of april
asciilifeform: swiftgeek: 2018
asciilifeform: ( i cannot rule out the possibility that it was built in cooperation with, or at the facility of , infineon; it is stamped 'TWN' so this is at least theoretically hinted )
asciilifeform: google baked it as a replacement for the infineon.
asciilifeform: it is not an infineon, this is more or less certain
asciilifeform: swiftgeek: to complete the picture, my initial interest in cr50 was in the debug functionality; the thing can override #WP signal and rewrite the EC and boot roms , via usb snake. so it'd be quite convenient to have access. however the factory firmware locks it.
asciilifeform: but perhaps that's just me
asciilifeform: personally, i'd consider a box with no trackpad function, to be usable ☟︎
asciilifeform: but this is for much later.
asciilifeform: i also have a sample fw blob
asciilifeform: thus far i know nothing about it aside from the update/reflash mechanism (it is done via the ec)
asciilifeform: c101pa also includes a trackpad with flashable blob fw
asciilifeform: neato
asciilifeform: swiftgeek: i actually started with attempt to port generic coreboot to c101pa, and ended up finding the cr50 by accident
asciilifeform: aa
asciilifeform: we have several people here, using it
asciilifeform: swiftgeek: if you are a thinkpad aficionado, there is a patched x60 bios in the logs, iirc 2015
asciilifeform: having used ~every thinkpad made.
asciilifeform: swiftgeek: i definitely noticed the change.
asciilifeform: |\n: only chromebook. afaik all recently-rolledout units, have it
asciilifeform: |\n: best suspicion thus far is that it is a 'hardcopy fpga' (cheap, relatively, method for getting chip baked, they apply a custom metallization mask to a stock crystal)
asciilifeform: not currently
asciilifeform: ( i do not yet know what is in the 201pa )
asciilifeform: to be clear, asciilifeform is working with c101pa .
asciilifeform: i'm on my 2nd board..
asciilifeform: not really possible to thoroughly reverse things without creating a pile of rubbish, sadly
asciilifeform: ultra-low budget project ?
asciilifeform: swiftgeek: why do you need a dead unit, why not buy fresh one
asciilifeform: ^ instructions
asciilifeform: !!help
asciilifeform: swiftgeek: if you register a gpg key with deedbot, you will be able to voice yourself
asciilifeform: !!up |\n
asciilifeform: aah
asciilifeform: coreboot dev ?
asciilifeform: swiftgeek: out of curiosity, what's your interest in this particular box ? ☟︎
asciilifeform: ( if you simply lift it, there'll be no signals, board doesn't come up )
asciilifeform: and get a trace of all of the signals
asciilifeform: what you'd want, is to solder an interposer b/w the cr50 and the pcb
asciilifeform: soldering however many balls are under it, to bodge wires, and attaching logic analyzer etc, is the headache
asciilifeform: yes anybody can lift bga ( tricky to do without cracking the board, but doable if you are patient )
asciilifeform: sticking point is to solder to the balls
asciilifeform: that's not the sticking point
asciilifeform: i have a very similar machine
asciilifeform: sadly i am not currently equipped for such an experiment
asciilifeform: swiftgeek: if you'd like to take a c101pa and deball the bga and try this, and post article, i promise to read
asciilifeform: and as soon as we start doing it, they'll start pouring epoxy, and then cost goes up yet again
asciilifeform: which makes it of secondary interest to us
asciilifeform: however this approach is expensive, in manual labour, and its cost borders on that of simply making new machines from 0
asciilifeform: that ~only~ brings up 3v, etc
asciilifeform: google's src already contains everything you need, in theory, to make a hypothetical benign replacement for cr50
asciilifeform: sure, but i want 1000+ units, rather than 1 elaborately handcrafted.
asciilifeform: makes sense ?
asciilifeform: swiftgeek: asciilifeform's orig plan was to sell cleansed c101pa machines. if this said cleansing requires lifting a bga, and attaching a manufactured replacement , we will be talking about considerably different cost than if the machines can be cleansed in 10min via software, via debug snake.
asciilifeform: not once, but for each unit
asciilifeform: swiftgeek: the way it is connected now, the box won't actually power up without it
asciilifeform: but conceivably you could , at some expense, come up with a pad-for-pad substitute, and lift the thing, then solder to the balls
asciilifeform: so far we know that it handles the power button signal; the reset magic combo on the kbd; and the 3.3v rail bringup. it also handles the usb debug functionality that you get with the cable linked earlier
asciilifeform: swiftgeek: see https://chromium.googlesource.com/chromiumos/platform/ec/+/master/board/cr50/gpio.inc ( what is known of the pin functions )
asciilifeform: they moved power supply init into it
asciilifeform: unfortunately it is
asciilifeform: black boxing ?
asciilifeform: if these are found, and found to work, it is likely to be the shortest path to proper jailbreak
asciilifeform: swiftgeek: in re cr50, i am specifically interested in whatever factory test pads exist , with which the thing may be filled up with initial fw on manufacture
asciilifeform: ( the cr50 rom is ~not~ kept in the winbond spi rom where the boot loader ( google's crippled coreboot ) lives )
asciilifeform: it also has onboard flash
asciilifeform: all i've been able to find is that 1) it is an arm cortex-m , prolly licensed 2) started life as fpga ( see google's src, comments repeatedly refer to earlier vers as 'fpga' , then , later, 'g-chip' )
asciilifeform: yes
asciilifeform: but ideally yes, would strip it properly
asciilifeform: swiftgeek: even simple xray would give you basic info, such as the number of balls in the bga, and possibly the routes of the test pads (it ain't a very crowded pcb)
asciilifeform: and definitely interested in getting one xrayed. you got an xray machine, swiftgeek ?
asciilifeform: i am however accumulating a pile of c101pa boards
asciilifeform: swiftgeek: i do not currently have a 201
asciilifeform: you will get a (very limited, pretty much all you can do is to read version strings and gpio voltages) command prompt
asciilifeform: cr50 will appear on /dev/ttyUSB0
asciilifeform: swiftgeek: if you want to talk to the cr50 in your unit, all you need is the simple cable in http://www.loper-os.org/?p=2415 article
asciilifeform: swiftgeek: slightly better photo from today, http://btcbase.org/log/2018-06-11#1822393 ☝︎
asciilifeform: swiftgeek: hello ?
asciilifeform: !!up swiftgeek
asciilifeform: |\n: use what you have.
asciilifeform: the english people are clinically retarded. let's try the civilized world, how about.
asciilifeform: |\n: how about you go and fix this
asciilifeform: |\n: i noticed today that there is 0 discussion of cr50/h1 in ru net
asciilifeform: |\n: as trinque points out -- you will get much more enthusiastic audience if you introduce yourself, and register a key, establish as person
asciilifeform: |\n: recommend to read the logs, and make use of the search
asciilifeform: alternatively , somebody might give you voice, such as now , and you can speak for 30min.
asciilifeform: |\n: ideally, you go and register gpg key with deedbot. then , let's say i rate you, and then you can speak whenever you have something to say.
asciilifeform: |\n: hello ?
asciilifeform: !!up |\n