XboxHacker BBS
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 25, 2013, 02:55:00 PM


Login with username, password and session length


Pages: 1 2 3 4 5 6 7 8 »
  Print  
Author Topic: experiments with HDD logicboards  (Read 55440 times)
MODFREAKz
Master Hacker
****
Posts: 440



View Profile
« on: March 31, 2006, 02:03:19 PM »

Hallo,

I have done some experiments with two same XBOX360 Hitachi hard disks.
I have changed the logicboards between two Hitachi drives and find following. The HD drive works no more in the XBOX and also no recognition in the PC.

I get Error E68
http://www.freepler.de/userdaten/38928917/bilder/xbox360/e68.jpg
http://www.freepler.de/userdaten/38928917/bilder/xbox360/light_error.jpg

swapped it back and all works properly again.


Here also the logicboard pictures!!

Hitachi      http://www.freepler.de/userdaten/38928917/bilder/xbox360/hitachi.jpg
Samsung      http://www.freepler.de/userdaten/38928917/bilder/xbox360/samsung.jpg
100GB Toshiba   http://www.freepler.de/userdaten/38928917/bilder/xbox360/toshiba.jpg

If somebody has other ideas, so let it me know.
now I will do more other tests with serial number.

PS: sorry for my bad english, I´m german.
« Last Edit: March 31, 2006, 02:07:05 PM by Team MODFREAKz » Logged

uberfry
Xbox Hacker
*****
Posts: 862



View Profile
« Reply #1 on: March 31, 2006, 02:11:32 PM »

i have an idea...could you try copying the data from the original xbox360 hdd to the 100gb toshiba, then put the original xbox360 hdd logic board on the 100gb toshiba?
Logged
MODFREAKz
Master Hacker
****
Posts: 440



View Profile
« Reply #2 on: March 31, 2006, 02:20:12 PM »

No, this will not work, the logicboards are different!!
Logged

TheSpecialist
Global Moderator
Xbox Hacker
*****
Posts: 782


View Profile
« Reply #3 on: March 31, 2006, 02:25:23 PM »

Great work !! Respect ! So it indeed seems that the FW on the board contains a specific serial number that is hashed on disc ...

Maybe you could try to copy the 'hashed' info, change the boards and see if it then works ? (make sure to back up the info before of course, hehe Wink

I don't know if you have hardware to dump the flashes on the boards, but this would also be VERY VERY interesting to compare ...

About that samsung board: that controller, is that a 'mediatech' ? Can't find anything on that chip. Then we have a 64M bit SDRAM chip and that '5AAN8ETAG4 TLS2502' will be the flash memory I assume ? Also can't find any info on it ...
« Last Edit: March 31, 2006, 03:04:43 PM by TheSpecialist » Logged
Geremia
Xbox Hacker
*****
Posts: 600


View Profile
« Reply #4 on: March 31, 2006, 03:04:47 PM »

On the hitachi board, U6 S93C668 seems to be a 93C66 Microwire serial eprom, also the pin layout seems to be classical microwire connection.
Anyway marriage between electronic/mechanic is present also in some standard PC HD as far i've seen

Damn, i'm still without any 360 box  Roll Eyes
Logged
Speed8ump
Member
**
Posts: 10


View Profile
« Reply #5 on: March 31, 2006, 03:11:44 PM »

Maybe you could try to copy the 'hashed' info

Its been a while since I read through the ATAPI spec but I seem to recall that there was a provision for the drive to set aside a region on the disk for non-accessible storage (for saving things like private hashes and passwords).  It may, therefore, not be (reasonably) possible to transfer everything you need from one drive to another.  If you are serious about it I would look through the security portions of the ATAPI spec.
Logged
TheSpecialist
Global Moderator
Xbox Hacker
*****
Posts: 782


View Profile
« Reply #6 on: March 31, 2006, 03:15:35 PM »

Anyway marriage between electronic/mechanic is present also in some standard PC HD as far i've seen

Hmm... didn't know that. How is this marriage done ?
*EDIT* I didn't read the first post right, so the HD didn't work on the PC either ... Then this marriage explains why Smiley

As the serial nr is also on disk, maybe all there is to the disk/board marriage is a simple compare: serial on disc against serial in FW ? And the hashed info is only checked by the 360, to verify the serial ?

To Team Modfreakz: maybe an interesting experiment would be to backup the data from 1 hd and make a 1:1 clone of the HD onto the other HD, switch boards and check again ?
« Last Edit: March 31, 2006, 03:30:53 PM by TheSpecialist » Logged
TheSpecialist
Global Moderator
Xbox Hacker
*****
Posts: 782


View Profile
« Reply #7 on: March 31, 2006, 03:43:49 PM »

On the hitachi board, U6 S93C668 seems to be a 93C66 Microwire serial eprom, also the pin layout seems to be classical microwire connection.
Anyway marriage between electronic/mechanic is present also in some standard PC HD as far i've seen

Damn, i'm still without any 360 box  Roll Eyes

You also were the first I believe to dump the DVD drives' FW, hehe, do you think you can dump this one too ? Smiley And what happened to you 360 ? Smiley I believe your drive died, right ? But don't you have the HD ?
« Last Edit: March 31, 2006, 03:49:26 PM by TheSpecialist » Logged
MODFREAKz
Master Hacker
****
Posts: 440



View Profile
« Reply #8 on: March 31, 2006, 03:49:02 PM »

To Team Modfreakz: maybe an interesting experiment would be to backup the data from 1 hd and make a 1:1 clone of the HD onto the other HD, switch boards and check again ?

So, I made a backup of the HD1 and restored it into HD2. Than I swapped the logicboards - same thing, no join in Xbox - Error E68

Than I changed the serialnumber, hashdata and board again into original drive and both drive works normally!!!

here some pics:
http://www.freepler.de/userdaten/38928917/bilder/xbox360/5.gif
http://www.freepler.de/userdaten/38928917/bilder/xbox360/2.gif

 Grin I need hash for my Toshiba drive!
http://www.freepler.de/userdaten/38928917/bilder/xbox360/0.gif
« Last Edit: March 31, 2006, 04:09:10 PM by Team MODFREAKz » Logged

TheSpecialist
Global Moderator
Xbox Hacker
*****
Posts: 782


View Profile
« Reply #9 on: March 31, 2006, 03:50:27 PM »

To Team Modfreakz: maybe an interesting experiment would be to backup the data from 1 hd and make a 1:1 clone of the HD onto the other HD, switch boards and check again ?

So, I made a backup of the HD1 and restored it into HD2. Than I swapped the logicboards - same thing, no join in Xbox - Error E68
And also not working in the PC I guess ? Maybe there's some data on disc we dont' have acess to, like Speed8ump notes ... Hmm...
Logged
MODFREAKz
Master Hacker
****
Posts: 440



View Profile
« Reply #10 on: March 31, 2006, 04:05:48 PM »

Yes, it also does not work in the PC

Maybe there's some data on disc we dont' have acess to, like Speed8ump notes ... Hmm...

Yes, I also think so.
« Last Edit: March 31, 2006, 04:21:07 PM by Team MODFREAKz » Logged

TheSpecialist
Global Moderator
Xbox Hacker
*****
Posts: 782


View Profile
« Reply #11 on: March 31, 2006, 04:09:00 PM »

Yes, it also does not work in the PC

So, then it indeed seems there's some data on disc that you can't access 'normally'.

Still, it seems a bit weird ... why would a manufacturer marry the pcb-board to the drive ? And if the marriage key is in the FW, this would mean that they could not easily do a complete FW update ...

Anyway, next step would be I guess for someone to make some ATAPI logs (a little birdie is working on this already) and a dump of the FW's ...
Logged
MODFREAKz
Master Hacker
****
Posts: 440



View Profile
« Reply #12 on: March 31, 2006, 05:10:17 PM »

I have found maybe something interesting.

After connecting only logicboard to XBOX I get also Error E68, it comes up shortly before dashboard screen.
But hard disk with not original logicboard there it happened immediately after turning the Xbox on.


Another interessting thing, I used PartitionMagic 8 and create 100% NTFS partiotion. Than connected the drive to xbox and it was recognized.  Huh
Logged

MacDennis
Xbox Hacker
*****
Posts: 614


View Profile
« Reply #13 on: March 31, 2006, 05:48:21 PM »

I have found maybe something interesting.

After connecting only logicboard to XBOX I get also Error E68, it comes up shortly before dashboard screen.
Console seems to do model/revision/firmware check early on. This check passes because model/revision is correct. But then it want to access the HDD just before dashboard screen, which fails.

But hard disk with not original logicboard there it happened immediately after turning the Xbox on.
This is the first check early on, makes sense. HDD is rejected because model/revision is not correct.
Logged
Speed8ump
Member
**
Posts: 10


View Profile
« Reply #14 on: March 31, 2006, 06:32:39 PM »

why would a manufacturer marry the pcb-board to the drive?

That's a good question.  I'm guessing to prevent exactly the type of tampering you are trying Smiley   It would seem to me that tying the drive media to the control circuitry would make unauthorized access of the drive media harder.  Security through obscurity.

And if the marriage key is in the FW, this would mean that they could not easily do a complete FW update ...

Unless the firmware knows how to update itself and preserve or update the stored information, which I'm sure it does.  What would be difficult would be recovering data from the drive if the control circuitry dies.  For that reason I would assume that there isn't anything random in the encryption process...it is pure obscurity.
Logged
n8thegr8
Member
**
Posts: 32


View Profile
« Reply #15 on: March 31, 2006, 11:38:33 PM »

Another interessting thing, I used PartitionMagic 8 and create 100% NTFS partiotion. Than connected the drive to xbox and it was recognized.  Huh

wait, so you mean you got the 360 drive recognized with a purely ntfs partition or the toshiba? Huh
Logged
MODFREAKz
Master Hacker
****
Posts: 440



View Profile
« Reply #16 on: April 01, 2006, 02:03:03 AM »

wait, so you mean you got the 360 drive recognized with a purely ntfs partition or the toshiba? Huh

It was original Xbox drive with ntfs partition.
Logged

MODFREAKz
Master Hacker
****
Posts: 440



View Profile
« Reply #17 on: April 01, 2006, 02:16:52 AM »

Today I have tried hot swapping Hitachi/Toshiba drives but I have still no luck with it.

http://www.freepler.de/userdaten/38928917/bilder/xbox360/hot_swap.jpg


The Xbox restarts automatically.  Sad

any idea??
Logged

Geremia
Xbox Hacker
*****
Posts: 600


View Profile
« Reply #18 on: April 01, 2006, 07:01:28 AM »

Reading HDDGURU website, seems like some HD have a serial port for debuggin and a "safe mode" state initiated by closing some jumpers. Hexediting some hitachi firmwares, it seems that some ascii text about serial interface degugging is present.

Have you a scan of the other side of the hitachi board?
Logged
MODFREAKz
Master Hacker
****
Posts: 440



View Profile
« Reply #19 on: April 01, 2006, 08:25:43 AM »

Have you a scan of the other side of the hitachi board?

Jopp, here is it.

Hitachi   http://www.freepler.de/userdaten/38928917/bilder/xbox360/backside_hitachi.jpg
Samsung   http://www.freepler.de/userdaten/38928917/bilder/xbox360/backside_samsung.jpg
100GB Toshiba   http://www.freepler.de/userdaten/38928917/bilder/xbox360/backside_toshiba.jpg
Logged

Pages: 1 2 3 4 5 6 7 8 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM