Hacking Hardware Picofly - a HWFLY switch modchip

[FruithatMods]

Maybe you are doing something wrong? I have dumped soldered EMMC nand chips with 3.3v logic levels before.

 

[evil_santa]

Maybe you are doing something wrong? I have dumped soldered EMMC nand chips with 3.3v logic levels before.

What hardware you are using?

 

[FruithatMods]

I can't tell what you are doing wrong based on the hardware alone. Even if you apply the correct voltage level it is possible to fail establishing a connection with the EMMC interface. There are other factors too.

You can try the following to see if your EMMC will support 3v3 logic levels. Simply use a lab power supply in the circuit with 3v3 and 1v8. That will give you the answer.

Some emmcs support it and some don't. I haven't ever had the case where I fried the chip by applying 3v3 to a 1.8v chip.

Post automatically merged: Jan 13, 2023

https://www.absunshine.com/en/parts/H26M74002HMR-SK-HYNIX-5061071

Here is another data sheet for the Hynix EMMC nand chip inside the oled switch. It clearly says

Package

FBGA-153

Voltage

3.3 V

It is a BGA package type, or "soldered chip", as you like to call it. I will forgive you for the semantics as English is not your first language, but if official data sheets don't convince you nothing else will.

Do you understand how you claiming that all "soldered" nand chips are using 1v8 logic levels is simply untrue?

 

[Hannes-Campidell]

i think the soc broke with the picofly prototypes

 

[binkinator]

Here you can reed why 3,3V not working whit a soldered emmc.

http://solderwiresandplastic.com/20...the-amazon-firetv-to-achieve-root-privileges/

Prior to today, I didn't know that a FIB was a focused ion beam.

After today I still don't know what a FIB is but I feel like I want one!

 

[Hannes-Campidell]

FIB sound like a 1M$+ device

 

[impeeza]

I Just receive:
View attachment 347257

View attachment 347258

Well, I think I will make a old PC joystick DB15 to USB adapter!

by the way are two differents Picozero rp2040, different set of pins on the external holes.

Post automatically merged: Jan 13, 2023

Prior to today, I didn't know that a FIB was a focused ion beam.

After today I still don't know what a FIB is but I feel like I want one!

Female Inspectors of Body?

 

[binkinator]

FIB sound like a 1M$+ device

But I could corner the market on repairing everyone’s burnt fuses when the Switch goes EOL and somebody announces they can do cold boot hax on FW 13.2.1. I’d make all my money back in 90 days.

 

[impeeza]

But I could corner the market on repairing everyone’s burnt fuses when the Switch goes EOL and somebody announces they can do cold boot hax on FW 13.2.1. I’d make all my money back in 90 days.

or found some point like on one of the xboxes where you can defeat the security drilling a hole.

 

[evil_santa]

I can't tell what you are doing wrong based on the hardware alone. Even if you apply the correct voltage level it is possible to fail establishing a connection with the EMMC interface. There are other factors too.

You can try the following to see if your EMMC will support 3v3 logic levels. Simply use a lab power supply in the circuit with 3v3 and 1v8. That will give you the answer.

Some emmcs support it and some don't. I haven't ever had the case where I fried the chip by applying 3v3 to a 1.8v chip.

Post automatically merged: Jan 13, 2023

https://www.absunshine.com/en/parts/H26M74002HMR-SK-HYNIX-5061071

Here is another data sheet for the Hynix EMMC nand chip inside the oled switch. It clearly says

Package

FBGA-153

Voltage

3.3 V

It is a BGA package type, or "soldered chip", as you like to call it. I will forgive you for the semantics as English is not your first language, but if official data sheets don't convince you nothing else will.

Do you understand how you claiming that all "soldered" nand chips are using 1v8 logic levels is simply untrue?

ok i am now unsure and will ask a few more people who are more familiar with it

Post automatically merged: Jan 13, 2023

@FruithatMods
https://github.com/ignasurba/mmcblkNX/issues/1

Her is a good explanation

 

[FruithatMods]

What exactly are you trying to do @evil_santa ?

First you were linking to a tutorial about dumping the emmc on an amazon fire.
Then you were posting incorrect information about bga emmc chips.


None of this is relevant to this discussion anyway. The emmc is powered by the cpu, which is powered by the battery. The modchip can be powered by one of the 3v3 rails. This can't be the reason for the bricked switches.

Perhaps I could help you with whatever you are trying to do. That would require you to explain what you are trying to achieve.

 

[evil_santa]

The picofly needs to communicate whit the emmc right?
He can't communicate whit it while no 1v8 on rp2040. How did the creator from this chip this? we don't know and is this the problem that we don't see it ?
Doesn't matter

 

[CompSciOrBust]

The picofly needs to communicate whit the emmc right?
He can't communicate whit it while no 1v8 on rp2040. How did the creator from this chip this? we don't know and is this the problem that we don't see it ?
Doesn't matter

The same way every other glitch chip works on the Switch. It lets the Switch hardware handle powering the eMMC and the chip just sniffs the data bus / sends data on the bus (it only writes during first time setup when it detects the custom BCT / bootloader isn't installed). The chip doesn't need to power the eMMC because it's powered by the official hardware already.

 

[Mansi]

Hi.
RP2040 good work on 3.3v
And perfectly work via emmc & MicroSD card.

Post automatically merged: Jan 14, 2023

Im find firmware for rp2040, but dont know fow to dump it(
I have rp2040 with firmware and need dump it

 

[iolo57]

Hi.
RP2040 good work on 3.3v
And perfectly work via emmc & MicroSD card.

Post automatically merged: Jan 14, 2023

Im find firmware for rp2040, but dont know fow to dump it(
I have rp2040 with firmware and need dump it

You need picotool to dump the firmware: https://github.com/raspberrypi/picotool

 

[Hannes-Campidell]

Hi.
RP2040 good work on 3.3v
And perfectly work via emmc & MicroSD card.

Post automatically merged: Jan 14, 2023

Im find firmware for rp2040, but dont know fow to dump it(
I have rp2040 with firmware and need dump it

can you please post a picture/scan of the board from both sides

 

[HeadstrongWolf]

I tried Google but didn't get far and I apologize for being slightly off topic.

As this chip isn't compatible with the original model switch, is there a modchip I CAN look into?

Unfortunately it was patched before coming out of the box so a softmod isn't possible (until homebrew develops for it in 6 years.)

 

[Mansi]

picotools does not see the device

 

[iolo57]

picotools does not see the device

Did you put the pico in bootsel mode?

 

[Mansi]

yea. Im tested in windows.
Need install linux