mNo edit summary |
mNo edit summary |
||
Line 104: | Line 104: | ||
"TS/SI-UMBRA" seems to be an NSA reference ("top secret, sensitive information"; UMBRA was a classification level ("most sensitive material") https://en.wikipedia.org/wiki/Sensitive_Compartmented_Information | "TS/SI-UMBRA" seems to be an NSA reference ("top secret, sensitive information"; UMBRA was a classification level ("most sensitive material") https://en.wikipedia.org/wiki/Sensitive_Compartmented_Information | ||
USB info, with "MSC" switch: | |||
<pre> | |||
[648774.212393] usb 2-2: new full-speed USB device number 75 using xhci_hcd | |||
[648774.359108] usb 2-2: New USB device found, idVendor=1b4f, idProduct=2500 | |||
[648774.359113] usb 2-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3 | |||
[648774.359116] usb 2-2: Product: SparkX SP250Psi | |||
[648774.359119] usb 2-2: Manufacturer: SparkFun | |||
[648774.360292] cdc_acm 2-2:1.0: ttyACM0: USB ACM device | |||
Bus 002 Device 075: ID 1b4f:2500 | |||
Device Descriptor: | |||
bLength 18 | |||
bDescriptorType 1 | |||
bcdUSB 2.00 | |||
bDeviceClass 239 Miscellaneous Device | |||
bDeviceSubClass 2 ? | |||
bDeviceProtocol 1 Interface Association | |||
bMaxPacketSize0 64 | |||
idVendor 0x1b4f | |||
idProduct 0x2500 | |||
bcdDevice 1.00 | |||
iManufacturer 1 | |||
iProduct 2 | |||
iSerial 3 | |||
bNumConfigurations 1 | |||
Configuration Descriptor: | |||
bLength 9 | |||
bDescriptorType 2 | |||
wTotalLength 75 | |||
bNumInterfaces 2 | |||
bConfigurationValue 1 | |||
iConfiguration 0 | |||
bmAttributes 0xa0 | |||
(Bus Powered) | |||
Remote Wakeup | |||
MaxPower 500mA | |||
Interface Association: | |||
bLength 8 | |||
bDescriptorType 11 | |||
bFirstInterface 0 | |||
bInterfaceCount 2 | |||
bFunctionClass 2 Communications | |||
bFunctionSubClass 2 Abstract (modem) | |||
bFunctionProtocol 0 None | |||
iFunction 0 | |||
Interface Descriptor: | |||
bLength 9 | |||
bDescriptorType 4 | |||
bInterfaceNumber 0 | |||
bAlternateSetting 0 | |||
bNumEndpoints 1 | |||
bInterfaceClass 2 Communications | |||
bInterfaceSubClass 2 Abstract (modem) | |||
bInterfaceProtocol 0 None | |||
iInterface 0 | |||
CDC Header: | |||
bcdCDC 1.10 | |||
CDC ACM: | |||
bmCapabilities 0x06 | |||
sends break | |||
line coding and serial state | |||
CDC Union: | |||
bMasterInterface 0 | |||
bSlaveInterface 1 | |||
CDC Call Management: | |||
bmCapabilities 0x01 | |||
call management | |||
bDataInterface 1 | |||
Endpoint Descriptor: | |||
bLength 7 | |||
bDescriptorType 5 | |||
bEndpointAddress 0x81 EP 1 IN | |||
bmAttributes 3 | |||
Transfer Type Interrupt | |||
Synch Type None | |||
Usage Type Data | |||
wMaxPacketSize 0x0010 1x 16 bytes | |||
bInterval 16 | |||
Interface Descriptor: | |||
bLength 9 | |||
bDescriptorType 4 | |||
bInterfaceNumber 1 | |||
bAlternateSetting 0 | |||
bNumEndpoints 2 | |||
bInterfaceClass 10 CDC Data | |||
bInterfaceSubClass 0 Unused | |||
bInterfaceProtocol 0 | |||
iInterface 0 | |||
Endpoint Descriptor: | |||
bLength 7 | |||
bDescriptorType 5 | |||
bEndpointAddress 0x02 EP 2 OUT | |||
bmAttributes 2 | |||
Transfer Type Bulk | |||
Synch Type None | |||
Usage Type Data | |||
wMaxPacketSize 0x0040 1x 64 bytes | |||
bInterval 0 | |||
Endpoint Descriptor: | |||
bLength 7 | |||
bDescriptorType 5 | |||
bEndpointAddress 0x83 EP 3 IN | |||
bmAttributes 2 | |||
Transfer Type Bulk | |||
Synch Type None | |||
Usage Type Data | |||
wMaxPacketSize 0x0040 1x 64 bytes | |||
bInterval 0 | |||
</pre> | |||
with "CDC" switch (identical, though on bnewbold's laptop, this switch mode results in ModemManager sending "AT" commands over the interface): | |||
<pre> | |||
[649048.893527] usb 2-2: new full-speed USB device number 76 using xhci_hcd | |||
[649049.040307] usb 2-2: New USB device found, idVendor=1b4f, idProduct=2500 | |||
[649049.040309] usb 2-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3 | |||
[649049.040310] usb 2-2: Product: SparkX SP250Psi | |||
[649049.040311] usb 2-2: Manufacturer: SparkFun | |||
[649049.041353] cdc_acm 2-2:1.0: ttyACM0: USB ACM device | |||
Bus 002 Device 076: ID 1b4f:2500 | |||
Device Descriptor: | |||
bLength 18 | |||
bDescriptorType 1 | |||
bcdUSB 2.00 | |||
bDeviceClass 239 Miscellaneous Device | |||
bDeviceSubClass 2 ? | |||
bDeviceProtocol 1 Interface Association | |||
bMaxPacketSize0 64 | |||
idVendor 0x1b4f | |||
idProduct 0x2500 | |||
bcdDevice 1.00 | |||
iManufacturer 1 | |||
iProduct 2 | |||
iSerial 3 | |||
bNumConfigurations 1 | |||
Configuration Descriptor: | |||
bLength 9 | |||
bDescriptorType 2 | |||
wTotalLength 75 | |||
bNumInterfaces 2 | |||
bConfigurationValue 1 | |||
iConfiguration 0 | |||
bmAttributes 0xa0 | |||
(Bus Powered) | |||
Remote Wakeup | |||
MaxPower 500mA | |||
Interface Association: | |||
bLength 8 | |||
bDescriptorType 11 | |||
bFirstInterface 0 | |||
bInterfaceCount 2 | |||
bFunctionClass 2 Communications | |||
bFunctionSubClass 2 Abstract (modem) | |||
bFunctionProtocol 0 None | |||
iFunction 0 | |||
Interface Descriptor: | |||
bLength 9 | |||
bDescriptorType 4 | |||
bInterfaceNumber 0 | |||
bAlternateSetting 0 | |||
bNumEndpoints 1 | |||
bInterfaceClass 2 Communications | |||
bInterfaceSubClass 2 Abstract (modem) | |||
bInterfaceProtocol 0 None | |||
iInterface 0 | |||
CDC Header: | |||
bcdCDC 1.10 | |||
CDC ACM: | |||
bmCapabilities 0x06 | |||
sends break | |||
line coding and serial state | |||
CDC Union: | |||
bMasterInterface 0 | |||
bSlaveInterface 1 | |||
CDC Call Management: | |||
bmCapabilities 0x01 | |||
call management | |||
bDataInterface 1 | |||
Endpoint Descriptor: | |||
bLength 7 | |||
bDescriptorType 5 | |||
bEndpointAddress 0x81 EP 1 IN | |||
bmAttributes 3 | |||
Transfer Type Interrupt | |||
Synch Type None | |||
Usage Type Data | |||
wMaxPacketSize 0x0010 1x 16 bytes | |||
bInterval 16 | |||
Interface Descriptor: | |||
bLength 9 | |||
bDescriptorType 4 | |||
bInterfaceNumber 1 | |||
bAlternateSetting 0 | |||
bNumEndpoints 2 | |||
bInterfaceClass 10 CDC Data | |||
bInterfaceSubClass 0 Unused | |||
bInterfaceProtocol 0 | |||
iInterface 0 | |||
Endpoint Descriptor: | |||
bLength 7 | |||
bDescriptorType 5 | |||
bEndpointAddress 0x02 EP 2 OUT | |||
bmAttributes 2 | |||
Transfer Type Bulk | |||
Synch Type None | |||
Usage Type Data | |||
wMaxPacketSize 0x0040 1x 64 bytes | |||
bInterval 0 | |||
Endpoint Descriptor: | |||
bLength 7 | |||
bDescriptorType 5 | |||
bEndpointAddress 0x83 EP 3 IN | |||
bmAttributes 2 | |||
Transfer Type Bulk | |||
Synch Type None | |||
Usage Type Data | |||
wMaxPacketSize 0x0040 1x 64 bytes | |||
bInterval 0 | |||
</pre> |
Revision as of 22:41, 25 November 2017
https://www.sparkfun.com/products/14379
Initial SD card: https://wills.co.tt/bitbucket/harp-sd.img.dmg
Help Menu: 1) Boot RF 2) Engage recorder 3) Mount file system e) Enable/Disable Local Echo: Enabled ?) Help >1 ERROR: System offline >2 File system offline Mounting file system ERROR: Unknown mount location >3 Current location: 0x1FFF Enter new mount location ('x' to exit): x Exiting >3 Current location: 0x1FFF Enter new mount location ('x' to exit): 0x14a2 System restart... Mounting file system SD Card : TYPE 2 File system : ENCRYPTED Power : GOOD A.I. : OFFLINE Decrypting media...Complete Transferring Intelligent Agent...Complete Dividing binaries Deploying binaries to parallel NPUs System halting. Please remove SD card.
After removing SD Card:
250Psi Imprint Carrier Online >? Prototype v1.2 Help Menu: 1) Boot RF 2) Engage recorder 3) Mount file system e) Enable/Disable Local Echo: Enabled ?) Help >1 ERROR: System offline >2 ERROR: Recorder offline >
>4 Can you help me? 588872943124282030399478301168915802302423130847520232836494683907672278768724884179218375754768
This is a "SparkX Carrier Board" revision v42.
Digikey IC Part: https://www.digikey.com/products/en?keywords=SP25BIOS-0042-ND
Data matrix code on the back: "There is no game"
Datasheets and what we've done with them:
SP250Ψ_DATASHEET.pdf Just an overview? Has content from other sheets greyed out SP250Ψ_DATASHEET_ERRATA-AM_CSNR_(REV. A).pdf Indicates how to read out the serial number (?) using RF broadcast on a specific GPIO pin SP250Ψ_DATASHEET_ERRATA-BIOS_COMPATIBILITY_(REV. A2).pdf USED: gave us the part number to order from Digikey SP250Ψ_DATASHEET_ERRATA-BOOT_PROCEDURE_(REV. A).pdf USED: Gave us the code to boot... might use more? SP250Ψ_DATASHEET_ERRATA-RF_CONSIDERATIONS_(REV. B).pdf Indicates spot to look at SP250Ψ_DATASHEET_ERRATA-USB_ID(REV. A).pdf USED: told us to add a resistor, which unlocked serial USB menu SP250Ψ_DATASHEET_ERRATA-VORTEXS_SYSTEM_(REV. A).pdf Indicates a specific pin ("smaller drill hole") that we can read out voltage codes using multimeter/oscilloscope. Then had a table to look up codes... but redacted. "VORTEX" codes SP250Ψ_THERMAL_SUPPLEMENTAL.pdf Indicates that we should freeze the device
Other things to try/not-forget:
- RC1,RC2 holes
- big number we got out (96 digits)
- video files and photodiode in response to "Neuromorphic Processing Unit Failure" error message (when we get that)
- serial/SPI data on "middle of 3" GPIO pin; ~38kHz periodicity, ~5MHz bit rate, 16 bit words sometimes double or more (32bit), based on terminal status (but continuous)
"TS/SI-UMBRA" seems to be an NSA reference ("top secret, sensitive information"; UMBRA was a classification level ("most sensitive material") https://en.wikipedia.org/wiki/Sensitive_Compartmented_Information
USB info, with "MSC" switch:
[648774.212393] usb 2-2: new full-speed USB device number 75 using xhci_hcd [648774.359108] usb 2-2: New USB device found, idVendor=1b4f, idProduct=2500 [648774.359113] usb 2-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [648774.359116] usb 2-2: Product: SparkX SP250Psi [648774.359119] usb 2-2: Manufacturer: SparkFun [648774.360292] cdc_acm 2-2:1.0: ttyACM0: USB ACM device Bus 002 Device 075: ID 1b4f:2500 Device Descriptor: bLength 18 bDescriptorType 1 bcdUSB 2.00 bDeviceClass 239 Miscellaneous Device bDeviceSubClass 2 ? bDeviceProtocol 1 Interface Association bMaxPacketSize0 64 idVendor 0x1b4f idProduct 0x2500 bcdDevice 1.00 iManufacturer 1 iProduct 2 iSerial 3 bNumConfigurations 1 Configuration Descriptor: bLength 9 bDescriptorType 2 wTotalLength 75 bNumInterfaces 2 bConfigurationValue 1 iConfiguration 0 bmAttributes 0xa0 (Bus Powered) Remote Wakeup MaxPower 500mA Interface Association: bLength 8 bDescriptorType 11 bFirstInterface 0 bInterfaceCount 2 bFunctionClass 2 Communications bFunctionSubClass 2 Abstract (modem) bFunctionProtocol 0 None iFunction 0 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 0 bAlternateSetting 0 bNumEndpoints 1 bInterfaceClass 2 Communications bInterfaceSubClass 2 Abstract (modem) bInterfaceProtocol 0 None iInterface 0 CDC Header: bcdCDC 1.10 CDC ACM: bmCapabilities 0x06 sends break line coding and serial state CDC Union: bMasterInterface 0 bSlaveInterface 1 CDC Call Management: bmCapabilities 0x01 call management bDataInterface 1 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x81 EP 1 IN bmAttributes 3 Transfer Type Interrupt Synch Type None Usage Type Data wMaxPacketSize 0x0010 1x 16 bytes bInterval 16 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 1 bAlternateSetting 0 bNumEndpoints 2 bInterfaceClass 10 CDC Data bInterfaceSubClass 0 Unused bInterfaceProtocol 0 iInterface 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x02 EP 2 OUT bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0040 1x 64 bytes bInterval 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x83 EP 3 IN bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0040 1x 64 bytes bInterval 0
with "CDC" switch (identical, though on bnewbold's laptop, this switch mode results in ModemManager sending "AT" commands over the interface):
[649048.893527] usb 2-2: new full-speed USB device number 76 using xhci_hcd [649049.040307] usb 2-2: New USB device found, idVendor=1b4f, idProduct=2500 [649049.040309] usb 2-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [649049.040310] usb 2-2: Product: SparkX SP250Psi [649049.040311] usb 2-2: Manufacturer: SparkFun [649049.041353] cdc_acm 2-2:1.0: ttyACM0: USB ACM device Bus 002 Device 076: ID 1b4f:2500 Device Descriptor: bLength 18 bDescriptorType 1 bcdUSB 2.00 bDeviceClass 239 Miscellaneous Device bDeviceSubClass 2 ? bDeviceProtocol 1 Interface Association bMaxPacketSize0 64 idVendor 0x1b4f idProduct 0x2500 bcdDevice 1.00 iManufacturer 1 iProduct 2 iSerial 3 bNumConfigurations 1 Configuration Descriptor: bLength 9 bDescriptorType 2 wTotalLength 75 bNumInterfaces 2 bConfigurationValue 1 iConfiguration 0 bmAttributes 0xa0 (Bus Powered) Remote Wakeup MaxPower 500mA Interface Association: bLength 8 bDescriptorType 11 bFirstInterface 0 bInterfaceCount 2 bFunctionClass 2 Communications bFunctionSubClass 2 Abstract (modem) bFunctionProtocol 0 None iFunction 0 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 0 bAlternateSetting 0 bNumEndpoints 1 bInterfaceClass 2 Communications bInterfaceSubClass 2 Abstract (modem) bInterfaceProtocol 0 None iInterface 0 CDC Header: bcdCDC 1.10 CDC ACM: bmCapabilities 0x06 sends break line coding and serial state CDC Union: bMasterInterface 0 bSlaveInterface 1 CDC Call Management: bmCapabilities 0x01 call management bDataInterface 1 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x81 EP 1 IN bmAttributes 3 Transfer Type Interrupt Synch Type None Usage Type Data wMaxPacketSize 0x0010 1x 16 bytes bInterval 16 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber 1 bAlternateSetting 0 bNumEndpoints 2 bInterfaceClass 10 CDC Data bInterfaceSubClass 0 Unused bInterfaceProtocol 0 iInterface 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x02 EP 2 OUT bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0040 1x 64 bytes bInterval 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x83 EP 3 IN bmAttributes 2 Transfer Type Bulk Synch Type None Usage Type Data wMaxPacketSize 0x0040 1x 64 bytes bInterval 0