After spending time researching me and iamcheese found out a lot on the XeDK titian board. -The 16 pins at the top left are for debugging the ppc processor and those pins are the header for cpu debugging. https://www-01.ibm.com/chips/techli...872569D90050295E/$file/RW_UM_26Feb2010pub.pdf -The 7 pins in the bottom left is for a jtag programmable to read/edit the Xilinx chip. (different then the 6 pin jtag programmable used in the reset glitch hack) To read/edit this chip we assume you could use the same program as for the reset glitch hack because the chip was made by the same company. -The 4 dip switches control different debug modes -If the board isn't being used for debugging you can remove it after boot -The Dip switches can be changed after the console boots We are still trying to find out more on the titian and xedks in general, if you have found something else please post below.
I have research on a falcon MB that it has the ports for a titan board, but most of the components are removed.
I was wondering the same thing, also I wanna try and dumo the xilinx chip but I can't find the 7pin one from a us seller, they are all in china
You might be able to? I'm not sure. But for xedks atleast 1838.1 and below the cpu key is all 0s. More research is needed and we really hope the community helps and posts their findings like us.
Considering what was mentioned here about you being able to keep the machine running without it after boot and the units having all fuse bits set to 0 (non burnt) it's safe to assume that the reason the machine can't boot without the TITAN board is the fact that the fuses are BLANK. :shrug:
or becuse theres no bootloader on the cpu die, so they are using the titan board to overwrite that. (not that im sure but thats what im guessing)
Nope. We know that even the prototype CPUs have the ROM. An different version but they do have the ROM. Also it seems like that they block the newer dashboards from running on the old prototype chips (I suppose that it is because they have blank fuses, now everything makes sense) probably to prevent people from having too much freedom to tinker. Who know the details about this won't share with us, sadly ...
Wouldn't put it that way ... More like "Dynamic reconfiguration". Because they have the keys for everything they don't need to glitch anything on the system ... :lol: Of course machines with the Titan board were purposely disabled of working after a certain version of the SDK. Obviously they want these to be tossed away or not used anymore. It's obviously to protect the software from being abused on these old/early units. Fuses being not blown mean that the "custom JTAG" port the CPU uses is enabled and usable. And that's what the Titan board uses to talk with the CPU chip. :shrug: And there's no "tits" on the board so keep the "Titian" stuff away ... :lol:
thought about it, but the titan has a 7th pin which is an init pin? unsure what its for exactly, the rest of the header should be the same though
Simple still go check a data sheet for this chip and see what pins are used to program it, check accordingly with a multimeter (or trace them by eye) and connect your programmer to it. God but don't kill it >_> I would feel guilty lol.
It's easy to assume that the FPGA chip will have it's security bit set. :shrug: I would set it if I was them ...
1. Nice cold beer 2. some papers.. http://www.xilinx.com/support/documentation/spartan-3.htm 3. The hardware: And yeah..time..:033:
It would be amazing if you could send me the info you have retrieved from it. It will all remain confidential, I just want it for continued research.
How about we make it public so people who actually know what they are doing use it for research? I mean you do realize this won't even have a point on a retail 360 since all the cpu jtag points are disabled. I love how you edited you post to state just to send it to you tho.
