Hacking eMMC and not a NAND

[greyneon]

Might just be me but the 3DS have a eMMC and not a NAND so why are people reffering to it as a NAND? It is just like the so calles JTAG hack on xbox 360 its an SMC hack via the JTAG port. Finding it binda annoying... Anybody else?

 

[bkifft]

Might just be me but the 3DS have a eMMC and not a NAND so why are people reffering to it as a NAND? It is just like the so calles JTAG hack on xbox 360 its an SMC hack via the JTAG port. Finding it binda annoying... Anybody else?

because NAND is the technology used by said eMMC chip to store the information, just like most SD cards (which are kinda lika a sibling of eMMC)

 

[justinkb]

This is the chip on the original 3DS that houses the (encrypted) firmware

https://chipworks.secure.force.com/...GBM2G3P1FBAI8&viewState=DetailView&cartID=&g=

It's a NAND flash.

/thread

 

[Cyberdrive]

More info:
http://en.wikipedia.org/wiki/Flash_memory#NAND_flash
http://en.wikipedia.org/wiki/EMMC#eMMC

Photos are available at:
http://3dbrew.org/wiki/Hardware

 

[greyneon]

Ahh i see. Thank you for clearing that up :-)


Edit:

Could we solder on a SD card to store the data while the 3ds still sees the NAND? Or even replace NAND with the SD?

 

[Abcdfv]

Isn't the eMMC the controller, and NAND the type of memory being controlled?

 

[Cyberdrive]

Wiki links above tell me that eMMC = flash memory + controller in one BGA package, and NAND is the type of flash memory.
Speaking of replacing NAND with SD - who knows, hardware NAND dumping/flashing is done via SD/MMC interface. But even if it's theoretically doable, there's still firmware encryption to be figured out.

 

[greyneon]

Wiki links above tell me that eMMC = flash memory + controller in one BGA package, and NAND is the type of flash memory.
Speaking of replacing NAND with SD - who knows, hardware NAND dumping/flashing is done via SD/MMC interface. But even if it's theoretically doable, there's still firmware encryption to be figured out.

But hardware wise it's doable? For example to simplify up and downgrade via a SD card? Maybe even use sparkfuns SD sniffer as a man-in-the-middle?

 

[justinkb]

Technically, if you can produce an alternate controller which is interfaced with in the exact same way as the eMMc, you could even hook it up to a punch card machine type storage device. It's a basic block box principle, the eMMC controller doesn't (or shouldn't) expose any of the internals of the actual storage package.

Whether or not anyone is both skilled and insane enough to pursue any effort like this is debatable, of course.

 

[greyneon]

hmm... interesting actually...