by userbinator
1 subcomments
- We could try to find this loading using static analysis, but remember that I’m not comfortable reverse engineering this firmware, and I want to demonstrate a more dynamic approach.
Perhaps this is a "two types of people" situation, but I would absolutely not do that; once you dump the flash you can analyse and inspect it carefully at your leisure as it is otherwise inert, but messing around with the device itself presents a very real risk of accidentally bricking it.
- It’s too bad Saleae prices are so high now. Their original models launched at a very affordable price point but that’s long gone.
In the past they’ve offered discounts to students and contractors if you know where to look and how to ask: https://blog.saleae.com/saleae-discounts/ If anyone is considering one, it’s worth a try to see if they still honor this.
The alternative logic analyzers mentioned in this article look interesting, but the software side leaves a lot to be desired. Some people get along okay with PulseView (or forks, like in this article) but I never enjoy using it.
by qingcharles
0 subcomment
- Interesting that someone else had previously found it too -- I wonder how they got hold of it?
https://github.com/up-n-atom/SWTG118AS/commit/514483b9c9e4d6...
by direwolf20
4 subcomments
- Very nice!
An 8051 with XIP SPI flash - that must be ancient tech.
- I know a community who invested in an Arm sbc to do photo management with a locked bootloader running a locked Linux kernel where the developers have walked away (Ukraine war)
Its the "Monument" device. The users would love it if somebody unlocked things this way.
- I'd be curious to know more about the switch reverse engineering. What was the ultimate goal for this password.
by dsrtslnd23
4 subcomments
- do you know the SPI clock frequency? I am trying to figure out the sampling rate required to reliably capture the trace. That determines the tier of logic analyzer needed I guess.
by pseudohadamard
0 subcomment
- Has anyone looked into what the "web managed" part of these switches involves? Is it a purely local web interface or is it exfiltrating traffic to some random server God knows where that's doing the managing on my behalf? This one seems to be purely local, https://cdn.shoplazza.com/06c9d3aa7743ce86dfca2f75e56a2faa.p..., but I've seen others that claim app-based management which probably aren't running that locally.
Hacker News