This thread is not about crack the SXOS, but may able to clone it.
The approach may only working on SAMSUNG emmc (details will explain below)
A brief illustrate, will update time to time:
a,how sxos bundle with your console ?
1, when sxos boot.dat running up, it read the emmc CID(16byte) and CSD(16byte), then combine them to generate 32byte "Fingerprint"
2, send the fingerprint to Server, generate licence file that only valid for the single fingerprint (from step one)
3, every time, when power-up(after lunch the fusee) SXOS scan the emmc, and compare the fingerprint and license.
b, about CID and CSD
1,CID and CSD are unique for each emmc chip, and normally speak：read only not rewrite able.
2,There always an exception ! SAMSANG emmc5.1 and below chips are able to write the CID, CSD (RCA, DSR and OCR as well)
3,So, if we can 100% clone an emmc chip, that means we can clone SXOS as well.
c, emmc on tiny pcb (with 30 pin mezzanine)
1, Switch use 32G 5.1 emmc chip from SAMSUNG and TOSHIBA， with a tiny PCB connected to the main board. that's convince for apply mode/hack.
Detail, please google: ifix+switch
2, TOSHIBA chip:THGBMHG8C2LBAIL (32GB -20~85 deg.C, 153 BGA) ; SAMSUNG chip:KLMBG2JENB-B041(32GB, 153BGA) ;
15X2 mezzanine： Molex 51338-0374, SlimStack™ 0.40mm Pitch Board-to-Board Connectors
d, emmc pcb pin-out v.s. BGA-pot analysis (come later)
e, Build microSD-emmc adapter (come later)
f, Build mezzanine connector break-out cable for SD adaptor (come later)
g, Migrate SXOS to another console
this is easy, e.g. migr from A to B ：
1， just back-up NAND of B, buck-up the boot.bin and licence file as well
2， move emmc pcb from A and mount to B
3， recover NAND of B from step-1
4, copy boot.bin and licence to TF(microSD) card on B, or simple unplug it from A the plug into B.
e, How to edit SAMSUNG emmc CID，CSD， RCA， DSR， OCR (come later)
f, How to Clone the SXOS to SAMSUNG emmc (details come later)
like section-g
1, Patch SAMSUNG emmc, make up it, acting as SXOS licenced emmc.
note: SXOS on any type of emmc, can clone to SAMSUNG emmc (no matter TOSHIBA, SAMSUNG or maybe other vendor)
2, same procedure as step 1,3,4 (skip 2).
I will try to upload pictures, but seems I am not able to do it yet (new member)
The approach may only working on SAMSUNG emmc (details will explain below)
A brief illustrate, will update time to time:
a,how sxos bundle with your console ?
1, when sxos boot.dat running up, it read the emmc CID(16byte) and CSD(16byte), then combine them to generate 32byte "Fingerprint"
2, send the fingerprint to Server, generate licence file that only valid for the single fingerprint (from step one)
3, every time, when power-up(after lunch the fusee) SXOS scan the emmc, and compare the fingerprint and license.
b, about CID and CSD
1,CID and CSD are unique for each emmc chip, and normally speak：read only not rewrite able.
2,There always an exception ! SAMSANG emmc5.1 and below chips are able to write the CID, CSD (RCA, DSR and OCR as well)
3,So, if we can 100% clone an emmc chip, that means we can clone SXOS as well.
c, emmc on tiny pcb (with 30 pin mezzanine)
1, Switch use 32G 5.1 emmc chip from SAMSUNG and TOSHIBA， with a tiny PCB connected to the main board. that's convince for apply mode/hack.
Detail, please google: ifix+switch
2, TOSHIBA chip:THGBMHG8C2LBAIL (32GB -20~85 deg.C, 153 BGA) ; SAMSUNG chip:KLMBG2JENB-B041(32GB, 153BGA) ;
15X2 mezzanine： Molex 51338-0374, SlimStack™ 0.40mm Pitch Board-to-Board Connectors
d, emmc pcb pin-out v.s. BGA-pot analysis (come later)
e, Build microSD-emmc adapter (come later)
f, Build mezzanine connector break-out cable for SD adaptor (come later)
g, Migrate SXOS to another console
this is easy, e.g. migr from A to B ：
1， just back-up NAND of B, buck-up the boot.bin and licence file as well
2， move emmc pcb from A and mount to B
3， recover NAND of B from step-1
4, copy boot.bin and licence to TF(microSD) card on B, or simple unplug it from A the plug into B.
e, How to edit SAMSUNG emmc CID，CSD， RCA， DSR， OCR (come later)
f, How to Clone the SXOS to SAMSUNG emmc (details come later)
like section-g
1, Patch SAMSUNG emmc, make up it, acting as SXOS licenced emmc.
note: SXOS on any type of emmc, can clone to SAMSUNG emmc (no matter TOSHIBA, SAMSUNG or maybe other vendor)
2, same procedure as step 1,3,4 (skip 2).
I will try to upload pictures, but seems I am not able to do it yet (new member)
