log
▁▁▁▁▁▁▁⏐▁
deedbot: http://www.loper-os.org/?p=2403 << Loper OS - Open Problem: Debug Accessory Mode on the Asus C101PA
phf: if you manage to build suzy-q replica at home you absolutely must name it siouxsie sioux
trinque: Mocky: I'll have something for you to try out in a few days, if you like.
Mocky: great, looking forward to it
trinque got the cuntoo to build again, need to gather up all needed distfiles so we aren't fucked the next time shitworld's tectonic plates shift.
mircea_popescu: good idea.
phf: trinque: is cuntoo pure musl?
trinque: yep, musl and libressl
mircea_popescu: spyked, i will have you know that ~all~ the trainee sluts agree -- my version is good, yours isn't. SO THERE!\
phf: asciilifeform: so the idea is to get into that npcx, which is running "chrome OS EC firmware"?
mircea_popescu: !!up fromdeedbot
deedbot: fromdeedbot voiced for 30 minutes.
mircea_popescu: are you here for the sexy time fromdeedbot ?
fromdeedbot: just stopping in.... i haven't read the logs from the last month
mircea_popescu: your loss hehe.
mircea_popescu: meanwhile in traps, https://78.media.tumblr.com/6b6f4f7fca17d852a510a64fa77b81d0/tumblr_p95alsJhPu1wlblsko1_1280.png
fromdeedbot: where ever i go there i am, and all time is sexy on freenode
phf: apparently that thing does everything, "ap power sequencing, battery charging, thermal management, keyboard scan matrix, buttons and switches, backlights, indicator LEDS, board-specific peripherals, USB-PD controller, case-closed debug controller, usb type-c power brick"
fromdeedbot: if my aunt had a dick, she'd have been my uncle
fromdeedbot: decepticons.... she needs a shave though
fromdeedbot: namecoin is the new black..... as soon as earthlings sort their shit out
fromdeedbot: namecoin and deedbot... i cant think of a better use case
asciilifeform: phf: ec uart is separate and i dun need it
asciilifeform: phf: idea is to get at the standard rockchip uart
phf: hmm
asciilifeform: bahaha i have uart.
asciilifeform: sbu1/sbu2 is a ~usb~ d+/d-.
phf: hax
mircea_popescu: win
asciilifeform: well, possibly i spoke in haste, it ain't a cp201/ftdi/etc, but some google strange.
asciilifeform: but 1st step.
asciilifeform: article updated.
asciilifeform: aajajajaja i have console...
phf: what kind of console is it? does it respond to "version"?
mircea_popescu: dun dun dun
mircea_popescu: phf, i hope it's amiga :D
phf: C64 of course
asciilifeform: article updated again.
mircea_popescu: nah, commodore was almost sane
phf: well, it'll be like discovering alt-tmsr or lizard hitler, the way asciilifeform always wanted
asciilifeform: http://www.loper-os.org/pub/c101pa/usb2spew.txt << spew.
asciilifeform bbl.
phf: "Console is enabled; type HELP for help."
mircea_popescu: why not "Console might be enabled; type HELP ME LIZZARD HiTLER for finding out."
mircea_popescu: or i guess HLTIER for max payn.
mod6: hey this Borsec is pretty decent
mircea_popescu: o it got there ?
mircea_popescu: nice.
mod6: Yeah, bought 6 bottles (which, only plastic ones were available). One bottle was broken, so I really only got five. But w/e. Good stuff.
mircea_popescu: wait, a ~plastic~ bottle was broken ?!
mircea_popescu: holy shit i never heard of that before, they survive highway crashes those things
mod6: yeah, somehow the bottom of one of the bottles got a crack in the bottom.
mod6: i pulled out the whole pack and one was totally empty. i lul'd.
mod6: stranger, it was packed pretty well. pack of six was in a rigid corrugated box stuffed with foam peanuts.
mod6: hopefully next pack will be all intact.
mircea_popescu: supposedly it's good for you.
mod6: good to hear, thanks for the suggestion.
asciilifeform: https://irclog.whitequark.org/linux-rockchip/2018-06-07#22280508 << oblig whisperers who 'helped'
spyked: http://btcbase.org/log/2018-06-06#1820987 <-- sure thing. actually it may be a great idea to try to get them published. they're usually not coherent enough to make a blog post, but worth giving a shot.☝︎
a111: Logged on 2018-06-06 16:23 BreakingRae: Hey Spyked, I'd love to see your notes on what we discussed if you'll show me.
spyked: mircea_popescu, version of what?
mircea_popescu: surisul fetei din tramvai
spyked: ah, okay. re that, I think it's a good assignment for philology students, so I'm actually making it a point to mention it to ppl in the field.
spyked: actually meeting one tomorrow, so now that you mentioned it... I'm definitely going to ask her to do a japanese translation!
mircea_popescu: it's un fucking translatable. aaaand, to quote the last one, "lol hes in denial".
spyked: lol. mircea_popescu, I'm not denying nor admitting! the fact remains that your version has a borken metre, i.e. the last two lines don't match the first two. for ref., http://btcbase.org/log/2018-04-18#1802222 dunno how much this counts for mircea_popescu, but it does for me.☝︎
a111: Logged on 2018-04-18 20:55 mircea_popescu: spyked, apparently you have no comments ? anyway, "the smiling girl i saw today bewitched my soul entirely ; another line goes in a diary that's read by me, and Mr. Sorrowly."
mircea_popescu: hey, i don't enter into it -- i'm asking sluts. if not sluts, who is to arbiter poetry ?
spyked: that's a fair point I guess. the wave of self-aggrandazing poetry critics seems dead today, and that didn't mean much to begin with.
mircea_popescu: other than sexual, i know of no function of poetry.
spyked: mircea_popescu, what about music? (I'm asking because I find the two inseparable)
mircea_popescu: nah, music is math.
spyked: lol! I was just going to say that I kinda enjoyed barbilian's poems-as-puzzles back in highschool.
mircea_popescu: :p
mircea_popescu: anyway, it's not the last two, it's just the last one.
deedbot: http://www.loper-os.org/?p=2415 << Loper OS - The secret of the Debug Accessory Mode Adapter.
asciilifeform: ^ complete schematic.
mircea_popescu: aaaa
asciilifeform: the seekrit is out...
mircea_popescu: this is pretty cool!
asciilifeform: bonus, should also work , in principle, to control intel.nsa rootkit ( https://archive.li/PCptx derpery & in other 'seekrit whisperings' )
asciilifeform: reportedly they use same seekrit plug.
mircea_popescu: how the fuck did you find that 5.1 value
asciilifeform: see prev. post.
asciilifeform: it was buried in a megalith standards committee pdf crapola.
mircea_popescu: aaaa
asciilifeform: phf: i built it from junk box, you can make it in about 10min.
asciilifeform: the only 'exotica' is the usbc breakout plug; these are on lulzazon ( part http://a.co/hus7Yyh ) and prolly elsewhere.
asciilifeform brb,teatime
mircea_popescu: wellearned tea.jpg
BingoBoingo: Holy shit on the Open problem to resolved problem tea.
mircea_popescu: he's talented, isn't he.
BingoBoingo: Seriously. Breaker of tard worlds
asciilifeform: the trickiest part of this magic trick still remains to be done, because -- if google's shitpile is to be believed -- one of those /dev/ttyUSBn is actually a spi bridge
asciilifeform: and in principle can be used to rewrite the eeprom without fancy solderings...
mircea_popescu: aaaa
asciilifeform: possibly even ~two~, there are two roms, 1 is the bootloader, the other is the embedded controller
deedbot: http://qntra.net/2018/06/hfpa-insists-former-heads-groping-of-george-of-the-jungle-was-a-joke/ << Qntra - HFPA Insists Former Head's Groping Of 'George of the Jungle' Was A Joke
mod6: mornin'
BingoBoingo: mornin
asciilifeform: ohai BingoBoingo
BingoBoingo: asciilifeform: Congrats on the victory against the googleists/Intelards
asciilifeform: ty BingoBoingo . small victory tho, yet.
BingoBoingo: Small victory in the same sense being the first to summit a mountain is a small victory. There's this impossing and incomprehensible mass of rock, eventually someone makes his way to the top, documents or creates a human navigable path, etc, etc.
BingoBoingo: It's a small victory in the direction of capturing USB-C as a Republican standard
asciilifeform: it'll be interesting to try the plug with a recent intel box ( i dun have any, currently, with usbc ); see earlier derpery link re why
BingoBoingo: Right
mod6: <+asciilifeform> ^ complete schematic. << I've been catching up on your posts here, this is pretty great!
asciilifeform: http://p.bvulpes.com/pastes/XPFXr/?raw=true << console crapola
asciilifeform: some of the cmds (e.g. 'i2cscan', 'reboot') return 'access denied', will have to find why.
asciilifeform: interestingly, the ec console works when box is 'off'..
mircea_popescu: kinda the point of these neh
asciilifeform: aaha
asciilifeform: controls battery charger, power button, etc
ben_vulpes: in other lols, sbcl.org is down
asciilifeform: yep looks dead
phf: !#s sbcl down
a111: 9 results for "sbcl down", http://btcbase.org/log-search?q=sbcl%20down
asciilifeform: prolly it's hosted on some d00d's home dsl, lol
phf: they should just let cracauer host it on cons.org
mircea_popescu: zing
mircea_popescu: in other lulz, https://medium.com/@MartinCracauer << "Read writing from Martin Cracauer on Medium. Lisp, FreeBSD, Shift-Tilt Photography and Symphonic Metal. Every day, Martin Cracauer and thousands of other voices read, write, and share important stories on Medium."
mircea_popescu: there's basically nothing left inside these schmucks, "joe and thousands others [just like him]" isn't even perceived as insulting.
mircea_popescu: https://hackernoon.com/software-development-at-1-hz-5530bb58fc0e << how lisp is all about mouse twitching, long live RTS/MOBA and what is turn-based strategy even!!!
mircea_popescu: https://medium.com/@MartinCracauer/cognitive-inertia-programmers-at-work-and-why-useless-information-is-so-much-easier-to-remember-5a5fea466d3c << other insanely irritating anal childhood bullshit.
mircea_popescu: oh, neoteny of postmodernism, how ye keep telling yourself you're ok and what a disgusting slimy maggot ye are...
phf: well, the "1hz" point comes up periodically in lisp conversations, and there's a value behind it. asciilifeform attacks in various forms, naggum talked about it also, though i'm failing to find relevant article. cracuer is just surprisingly neotenic to express the point coherently
mircea_popescu: im writing it up.
asciilifeform: https://irclog.whitequark.org/linux-rockchip/2018-06-07#22285756; << moar c101pa lulzies
mircea_popescu: you've not been excommunicated yet ?
asciilifeform: not only not excommunicated, but the informant still grudgingly drips hints
asciilifeform: tho i suspect that he's running dry
phf: asciilifeform: can they put a bot here so it'll quote for us? :)
asciilifeform: lol
mircea_popescu: lmao
mircea_popescu: NOT IN LIKE TEN YEARS
mircea_popescu: but you can talk to the whitequark dood, explain how bot works, see if he can add it.
asciilifeform: whole thread worth reading. presently i have doubt that the project is even worth the candles. ( tldr: there is a nsa rootkit chip on the board )
mircea_popescu: in the rk ?
asciilifeform: not rk
asciilifeform: standalone thing
asciilifeform: ok, d00d left; https://archive.li/FFROT << whole thread snapshot.
mod6: yeah, thanks for posting the thread. "just trust the hardware that you have"
asciilifeform: the impatient can read from the end, backwards.
mod6: It's not long, worth the full read if one has a few extra mins.
mircea_popescu: thanks, was going through the botlink and meh.
asciilifeform: prolly will have to bite the bullet and throw out c101pa , and try the c100pa .
asciilifeform: ( supposing d00d told the truth re the latter )
mircea_popescu: asciilifeform, "20:18 <amstan> if you're paranoid you can probably cut the ap spi flash and ec spi flash traces around it " << i was thinking, it can be just cut out
asciilifeform: mircea_popescu: nope, controls powersupply
asciilifeform: 'glued on with broken glass'(tm)
mircea_popescu: fuck the "controls power supply". how's it gonna fail.
asciilifeform: can't switch on without it
asciilifeform: they rerouted the power button and voltage regulator sequencing, through it.
mircea_popescu: pshaw. i'm willing to pay for the board this is tested on.
asciilifeform: specifically against uppity orcs
asciilifeform: mircea_popescu: i'd happily cut it, but looking at the board, i suspect that they buried the traces
asciilifeform: ( it's a 16-layer pcb )
mircea_popescu: rip the fucking ic off the board.
asciilifeform: ( and will point out, if i have to cut traces on these, the units will be produces at the rate of one per month, likely )
mircea_popescu: sometimes, pencildick designs benefit immensely from liberal application of mailed fist.
asciilifeform: mircea_popescu: i'ma definitely lift it, prior to throwing out board, but suspect that d00d was telling the truth re the power button, it doesn't seem to be routed though the old ec controller any moar
mircea_popescu: a de-alphabet'd item that has no functioning power button is actually acceptable.
asciilifeform: ugh how do you intend to switch the thing on ?
asciilifeform: or is it for use as hammer ? ( it ain't a very good hammer )
mircea_popescu: you'll figure out how to perma-on it and that's that.
mircea_popescu: all this switching bs... not like power needs state.
asciilifeform: prolly worth examining the c100pa 1st
mircea_popescu: notrly, considering it was his suggestion.
asciilifeform: which seems to be an almost exactly same machine ( i had it confused with c100 original ) but sans the cr50
deedbot: http://trilema.com/2018/martin-cracauer-is-a-fucking-moron/ << Trilema - Martin Cracauer is a fucking moron.
mircea_popescu: generally these go like "darling, this is maybe an assfuckin chair you don't object to ?"
mircea_popescu: phf, ^
asciilifeform: should be able to test the truth of the allegation tho.
mircea_popescu: reason he made the suggestion is that he bets on your failing to accurately test it.
asciilifeform: 2015 box ? 2015 box. does have cr50 ? my probe + naked eye, will say
asciilifeform: once it's open
asciilifeform: http://www.loper-os.org/pub/h1_fritz_chip.jpg << suspect, labeled
asciilifeform: very tellingly, 0 datashit on the net, 0 mentions of the part anywhere
mircea_popescu: i expect they're mandated in all usg-"technology" since many years back.
asciilifeform: erry device maker gets own variant, to keep life interesting
mircea_popescu: so no, you're not going to find "a board without". you might find one where it's poorly attached and can be hammered off. but that's all.
asciilifeform: afaik most simply shove it into the cpu die.
mircea_popescu: kinda what i'm saying.
asciilifeform: recall thread where mircea_popescu explained to a n00b, 'even when typhus epidemic rages, does not excuse you from washing hands' ?
mircea_popescu: "oh, use this other one instead, terrorist, as you seem hell bent on breaking the chip off. this other one has it in the die, so you can't see it, will be all good"
asciilifeform: why would 2015 box have it in the die, but 2017 external ?
asciilifeform: or is the idea that the 2015 is fraudulently labeled, and really made last month ?
mircea_popescu: asciilifeform, my suspicion is that your "no cr 50" will simply mean "they put it in the die of a diff ic, and you can't find it"
mircea_popescu: i don't explain the cockoraches, mr alfstein. i just exterminate them.
asciilifeform: let's recall that the whole thing is an exercise in junkyard wars, i can only stomp the obvious cockroaches
mircea_popescu: what's the full name of this cr50 item btw ?
asciilifeform: it is called cr50. also seems to go by 'h1 secure microcontroller'
asciilifeform: no public datashit.
mircea_popescu: aka esp-w09 ?
asciilifeform: ( d00d even mentioned, 'we get it with seekrecy')
asciilifeform: mircea_popescu: how do you figure ?
mircea_popescu: i dunno, i'm trying to figure.
asciilifeform: i mean, re 'aka esp-w09'
asciilifeform: i'ma guess you used a search engine and found http://courses.daiict.ac.in/mod/resource/view.php?id=1403 , random indian d00d with no connection
mircea_popescu: i went through list of jtag-sitters, saw that and whatever atmel bs.
mircea_popescu: are you basically saying this is not an ennumerable class ?
asciilifeform: it's a google in-house product.
asciilifeform: ( they dun have, afaik, a fab, the 'TWN' suggests they contracted out to e.g. infineon )
mircea_popescu: i do not beleive it is. i expect they just bought something.
asciilifeform: well, not bought, were issued.
mircea_popescu: and there's not THAT much to buy.
mircea_popescu: yes, but
asciilifeform: they also distribute a ball of src which they ~claim~ (unverifiably, afaik, see thread) runs in it.
mircea_popescu: interesting link btw. what is this, the indians are taking over the usg "compliance" part altogether ? to the point the blather is taught in india but not us ?!
asciilifeform: the chip itself does not match the description of any old fritztron familiar to asciilifeform (e.g. infineon's, intel's)
asciilifeform: mircea_popescu: link is generic sad, orcish technicum curriculum, doesn't seem to have any useful connection with subj
mircea_popescu: hey, at least it mentions the atmels insistently.
asciilifeform: lol
mircea_popescu: which, afaik, is the most widely deployed fritzchip in empire.
asciilifeform: the #1 choice of tardano vendors, certainly
asciilifeform: at any rate, if d00d was telling even half the truth re 'we had a cpld, in prev machines, and moved it, among else, to cr50 when we got to make own die' then it prolly is not a standard konsoomer loltron.
asciilifeform: the problem is that i cannot answer any useful question about it other than at brainmelting expense ( see the bolix thread ).
asciilifeform: i can heat it to 400C and pull it off the board and see if power still goes ( chances are , it won't, d00d was telling the truth re other boobytraps previously ) , but that's about it.
asciilifeform: this approach threatens to turn the project into 'phd assembly line', sorta half the point of this machine was that it could be conjured up from the konsoomer shelf version with 10min of effort and 100% yield
asciilifeform: even supposing that cr50 were cleanly removable (the designers would have to be idiots, to make it cleanly removable, really)
asciilifeform: anyway it is asciilifeform's teatime, and so i'ma bbl, inclined folx can puzzle over this puzzler .
phf: http://btcbase.org/log/2018-06-07#1821238 << crafty little strategy "we built a device with an open EC" "..." "we now have a sikrit cheap making sure our EC is not too open"☝︎
a111: Logged on 2018-06-07 20:41 asciilifeform: ok, d00d left; https://archive.li/FFROT << whole thread snapshot.
phf: *chip
phf: and as much as i sometimes scoff at the lizard hitler suggestion, the whole narrative, tacitly supported by the relevant designer, is very much it.
phf: "hey guys why don't we publish the secret chip bypass? -- what are you, some kind of terrorist/tinfoil??"
phf: http://btcbase.org/log/2018-06-07#1821267 << right about. i was mostly just embarrassed for him when i read his blog..☝︎
a111: Logged on 2018-06-07 20:50 deedbot: http://trilema.com/2018/martin-cracauer-is-a-fucking-moron/ << Trilema - Martin Cracauer is a fucking moron.
mircea_popescu: scoff all you want, but as burl ives put it, "it's always there in the morning, ain't it".
phf: it reminded me of how sometimes russian academics had problems with their american peers: some of those russians learned english from VHS, so found it acceptable to use ebonics in speech.
mircea_popescu: that shit's hysterical.
mod6: lmao
phf: i mean, it's a different scenario, but that must be the feeling americans felt in the situations like that
mircea_popescu: i don't get it, are you proposing german axehandles learned english from special ed courses ?
phf: no no, i'm trying to clarify the sort of embarrassed i felt when i read his blog. but in the case of russians it was misunderstanding, in this case though it's something else entirely..
phf: http://btcbase.org/log/2018-06-07#1821289 << https://lkml.org/lkml/2016/7/19/957 https://lkml.org/lkml/2016/7/27/523 (i'm sure ascii saw already, adding for logs)☝︎
a111: Logged on 2018-06-07 21:03 asciilifeform: it is called cr50. also seems to go by 'h1 secure microcontroller'
mircea_popescu: so then cr50 is the firmware, and the hardware is actually some kind of bulk chip ?
asciilifeform: if it's a shelf chip with title sanded off, neither i nor apparently anybody else knows which
mircea_popescu: but i suspect it ~IS~.
phf: that's what it looks like, H1 B2C on ascii's photo. no mentions of it anywhere on nets, outside of google marketing material
mircea_popescu: you mean no mentions google shows you ?
asciilifeform: google had various crapola fabbed in the past, it wouldn't be a first
mircea_popescu: it wouldn't.
phf: right, i did try mouser/digikey first
asciilifeform: i've been looking for it since it was first mentioned in last wk's thread with the d00d
mircea_popescu: i was hoping maybe the firmware might indicate.
asciilifeform: so far no dice, not in ru sphere either
asciilifeform: fw (or what claims to be the fw, i cannot verify re actual iron) is a c proggy, for what looks like an arm
phf: this is the kind of stuff phrack was supposed to talk about, but meanwhile the community was gutted..
mircea_popescu: indeed!
asciilifeform: but this tells us ~nothing to narrow it
mircea_popescu: asciilifeform, well, it's an 1 in 1 out chip is it ?
asciilifeform: quite likely, the fella was telling the truth, it's a google.nsa die
mircea_popescu: neither of these have fabs.
asciilifeform: what means 1 in 1 out ?
mircea_popescu: nor either of these has the mental acuity to fab.
mircea_popescu: they exist out of "mandating" ie, posturing what the actual people should od.
asciilifeform: stamp reads TWN , taiwan
asciilifeform: lotsa folx have no own fab . e.g. sun microsystems didnt
asciilifeform: owning fab is not usually +ev
mircea_popescu: lotta folks don't have women, owning women is not usually +ev bla bla. virgins.
mircea_popescu: anyway, back to it : the cp50's point of interest is, that it has a connection to power button. this is a single line, is it ?
asciilifeform: vertical integration is a thing, google bought a few power plants; but afaik not fab yet
asciilifeform: not single line, seems to handle the keyboard matrix also ( for reset combo ) and possibly vregs also
asciilifeform: hard to say without schems or xray
mircea_popescu: hm
asciilifeform: pretty strange, that they put the kbd through both
asciilifeform: has the appearance of a hasty and gnarly glue job
asciilifeform: ( why even keep the orig ec )
mircea_popescu: yes. which is also why i think this is where the levee should break
asciilifeform: what does mircea_popescu propose ?
asciilifeform: cuz i'm stumped
mircea_popescu: http://btcbase.org/log/2018-06-07#1821257 / http://btcbase.org/log/2018-06-07#1821251☝︎☝︎
a111: Logged on 2018-06-07 20:48 mircea_popescu: sometimes, pencildick designs benefit immensely from liberal application of mailed fist.
a111: Logged on 2018-06-07 20:47 mircea_popescu: pshaw. i'm willing to pay for the board this is tested on.
mircea_popescu: smash it out.
asciilifeform: no kbd, no power
mircea_popescu: usb kbd ? short the powerline ?
asciilifeform: matrix kbd
mircea_popescu: i dunno, if it was ACTUALLY apply hammer, i'd have done it myself\
asciilifeform: thing scans it
asciilifeform: it's the kbd cobtrolr
asciilifeform: controller
phf: asciilifeform: smash it out carefully, could mail it to zeptobars, maybe get some idea what sort of beast we're dealing with..
mircea_popescu: something like that.
mircea_popescu: understand, the cost of failure here is minimal.
asciilifeform: phf: they ever did the bolix?
mircea_popescu: not afaik.
asciilifeform: and bolix is a 2um; this thing is prolly 22nm
asciilifeform: one's 50k$ of work, other 5mil
phf: asciilifeform: no need to, i have all the relevant bits, just need to package them for you
asciilifeform: but know what, i'ma lift it before throwing out whole board, for phf
phf: i'm sure a russian with an electron microscope would love nothing more than do a careful job on a bonafide fritz chip
mircea_popescu: let those "warrants" fly
phf: worse case he'll just fail, but probably at the limit of what he can do
asciilifeform: maybe by 2040 he finishes
mircea_popescu: holy shit i'm not waiting that long for nudies.
asciilifeform: hence q, wat do
phf afk
asciilifeform: brb
mircea_popescu: me3.
asciilifeform: https://chromium.googlesource.com/chromiumos/platform/ec/+/master/board/cr50/ << for threadcompleteness -- the purported src.
asciilifeform: i have reasons to suspect that if it indeed has anything to do with the physical item, it is only partial picture.
asciilifeform: https://chromium.googlesource.com/chromiumos/platform/ec/+/master/board/cr50/gpio.inc << claims to be the i/o mapping .
asciilifeform: the 'PINMUX' bit suggests that the informant d00d was telling the truth, thing indeed controls vreg bringup, at least the 3.3v rail
asciilifeform: ( so far errything he said, such that asciilifeform was able to probe, turned out to be troo. if he's a liar, he's a very high-quality liar )
asciilifeform: https://github.com/coreboot/chrome-ec/blob/master/board/cr50/tpm2/rsa.c#L651 << magic pubkeyz in the rom
asciilifeform: https://chromium.googlesource.com/chromiumos/platform/ec/+/master/extra/cr50_rma_open/cr50_rma_open.py << last piece of lulz, for nao: claims to be 'tester's' defuse for the boobytrap. however dun work with my box, it has the 'ccd' console command locked out
asciilifeform: but suggests that the thing is a standard arm chip, with flash ram, that can be rewritten