Print

[dingnecros]

Okay I am a n00b to the whole jtag thing can someone point me in the right direction to a USB-SPI programmer that the tutorial mentions. is this what I need?

http://www.digilenti...p;Prod=JTAG-USB

[kipper2k]

QUOTE(dingnecros @ Aug 29 2011, 04:23 AM)

Okay I am a n00b to the whole jtag thing can someone point me in the right direction to a USB-SPI programmer that the tutorial mentions. is this what I need?

http://www.digilenti...p;Prod=JTAG-USB

http://www.kipper2k.com/usbflash.html

 something like this, (i dont have any at the moment). Quite a few people on this forum i think make them also

[Grim187]

This looks promising, i might have to do another pcb, using a XC2C64A with the supplied diagram along side the usb spi i did over a year ago.

[kipper2k]

QUOTE(Grim187 @ Aug 29 2011, 04:48 AM)

This looks promising, i might have to do another pcb, using a XC2C64A with the supplied diagram along side the usb spi i did over a year ago.

 The board can be made real tiny as there is a lot of pins etc that are not needed, the board schematics are on the digilent webpage also

heres info on the chip...

http://search.digike...ame=122-1410-ND

only 17,004 in stock

[ruciz]

So. Hear me out. Radical idea but I think it has potential.
This is good for Xell, Booting on a slim xbox 360, this will give us our DVD key from the mainboard along with the CPU key.

Thats great!

But, considering we have unlocked the system, have we also unlocked the DVD drive?
Would it be possible to use Xell to boot linux and run a script to disable the SPI lock via software and flash custom firmware onto 360 DVD drive, then use xell to write the stock nand back to the unit and unsolder the glitch hack?

5 minutes to solder glitch hack and nand programmer onto mainboard, 5 minutes to USB dump 2 identical NANDs, and another 5 minutes to boot Xell. Then run a script, the 360's modded. Power off, boot up Xell and flash stock firmware back. power off and unsolder. All that takes 5 minutes. xbox is drive modded.

would a caveat be that the 360 will know it booted xell? how is that logged? would restoring the dump made before the glitch hack installed work or would counts be off?

Just thinking that I would rather spend the few minutes glitch hacking a slim winbond than drilling into the chip, possibly going too deep, and never being able to use the drive/being out $50 to replace... Plus doing it this way would get all the units keys incase we update when we shouldn't

[kipper2k]

QUOTE(ruciz @ Aug 29 2011, 05:13 AM)

So. Hear me out. Radical idea but I think it has potential.
This is good for Xell, Booting on a slim xbox 360, this will give us our DVD key from the mainboard along with the CPU key.

Thats great!

But, considering we have unlocked the system, have we also unlocked the DVD drive?
Would it be possible to use Xell to boot linux and run a script to disable the SPI lock via software and flash custom firmware onto 360 DVD drive, then use xell to write the stock nand back to the unit and unsolder the glitch hack?

5 minutes to solder glitch hack and nand programmer onto mainboard, another 5 minutes to boot Xell. Then run a script, the 360's modded. Power off, boot up Xell and flash stock firmware back. power off and unsolder. xbox is drive modded.

would a caveat be that the 360 will know it booted xell? how is that logged? would restoring the dump made before the glitch hack installed work or would counts be off?

Just thinking that I would rather spend the few minutes glitch hacking a slim winbond than drilling into the chip, possibly going too deep, and never being able to use the drive/being out $50 to replace... Plus doing it this way would get all the units keys incase we update when we shouldn't

Whatever code MS can run on a signed box then in theory  unsigned code can run on a jtagged machine so providing the community have the smarts then the doors are wide open again

[Aldanga]

No. It wouldn't work. Otherwise we'd be able to unlock them via software already. There's nothing special about Linux running on 360s, other than it's Linux running on 360s.

[Grim187]

@kipper2k thanks for the link.

the only things that are really stopping me from jumping on dev of this right now are
-will the XC2C64A need to be reprogrammed in the future (for an update or value change, i heard this was only %25 successful, not sure if thats true and if it is if its per boot or per console)
-i want to see a bit more development (from the rest of the community) before going out on a limb with a good chunk of my time and money, who knows it might not be necessary to keep in installed in a few weeks.

im definitely seriously considering it.

[uN0pEn]

QUOTE(Grim187 @ Aug 28 2011, 11:22 PM)

@kipper2k thanks for the link.

the only things that are really stopping me from jumping on dev of this right now are
-will the XC2C64A need to be reprogrammed in the future (for an update or value change, i heard this was only %25 successful, not sure if thats true and if it is if its per boot or per console)
-i want to see a bit more development (from the rest of the community) before going out on a limb with a good chunk of my time and money, who knows it might not be necessary to keep in installed in a few weeks.

im definitely seriously considering it.

Its 25% successful per glitch attempt. Which means if the attempt is unsuccessful it re-glitches until the attempt is successful.

[Aldanga]

QUOTE(ruciz @ Aug 28 2011, 10:22 PM)

Those with a locked SPI haven't been reflashed yet...

That's because it's a hardware lock, not a software lock. The limitation is within the DVD-ROM, not the console. They can't be reflashed.

[hardrock351w]

Great Work!!!

As happy as I am, I can't help but think that this is starting to look like the begining of the end for the 360,....I bet anything microsoft will start pushing for a new console.

LOL for security, the 360 has more holes than swiss cheese!

[jsawyer86]

QUOTE(Grim187 @ Aug 28 2011, 10:48 PM)

This looks promising, i might have to do another pcb, using a XC2C64A with the supplied diagram along side the usb spi i did over a year ago.

I know I would greatly appreciate it.

[kipper2k]

Thing about jumping on the wagon and spending time and money on this is that it may end up like the PS3 glitching where everyone bought all the boards for USB only to have them outdated almost within a few weeks.

  i can design a board for this and create the gerbers, it would need a fair bit of skilled soldering for the chip, but not that hard. If you are going to make a few of these then you can buy from digikey for example (they will pre-program them for a nominal cost). or create a little master board yourself and preprogram chips prior to placing on a final board

[ruciz]

QUOTE(Aldanga @ Aug 29 2011, 05:29 AM)

That's because it's a hardware lock, not a software lock. The limitation is within the DVD-ROM, not the console. They can't be reflashed.

I don't believe thats true.

Geremia said you could guess the software key when he released the drill mod.
Why would he say that if these could never be programmed by anyone who didn't have physical access to the machine?

[kipper2k]

QUOTE(alphachaosomega @ Aug 29 2011, 05:31 AM)

So if i get this chip what board should i use.. Sorry for noob ?... Also would it be better to get this instead XC2C64A CoolRunner-II CPLD development board found on www.seeedstudio.com or the other one if i decide not to build my own board???

 I would go with the one that is used in the development itself (the link i provided) that way if there are updates etc it should be easier to implement.

 I would never attempt to build a prototype myself of this, i would create the board layout and get it done professionally.  Prices aren't that bad if you intend on making a few