Nand Pro for PS3 porting?

[vampirexx]

Hi people, what about a ps3 porting of Nand Pro 2.0b is it possible to have a tool that write nand from usb?

[boarder1042]

Yes and no.

It is possible to hook a jtag up to the ps3, but the jtag port was disabled on the ps3 after production.

So if we can find a way to enable the jtag port we CAN use something like nand pro otherwise you have to use another method. This will also only work on models CECHA-CECHG because anything after that has a NOR in it instead of a TSOP.

[cmal1492]

Nandpro doesn't use JTAG, it uses the SPI port of southbridge. If the ps3's system controller has something similar (a simple port to access more complex hardware), and it's not disabled... I'd think someone would have run into it by now?

[boarder1042]

lpt or usb. a "nand reader/writer" is a jtag.

usb jtag for nandpro


Jtag pinout for ps3

Syscon is the main power controller chip. It is responsible for powering up the various power systems and for configuring and initialising the CELL, RSX and southbridge. It communicates with these devices via seperate SPI busses. There is external access by JTAG (Which appears to have been disabled after factory programming) and Serial

[cmal1492]

Read the topic of the link you just provided:
How to JTAG XBOX 360 Using TIAO USB SPI Interface

JTAG hack on 360 is entirely separate from the NAND SPI access used for USB and LPT programming of the NAND contents; the GPU JTAG port used for the exploit has nothing to do with the NAND aside from the fact the exploit payload (with assistance from the SMC hack) loads data from 0x200 offset in NAND for rights elevation to HV mode.

But hey, if you want to argue about it... dig around xbox-hacker and see which of the two of us actually contributed work on the nandPro PIC USB interface code

Any rate, the second link you give is very interesting, it does seem that there are various SPI ports exposed to syscon including a southbridge one... but it would take better hardware than I have to sniff/brute force/test whether NAND/NOR is in that chain anywhere. One place to start I'd guess would be checking which of those ports are exposed to test interfaces, it's always seemed odd to me that the test points for NOR/NAND don't line up to any universal test jig.

[boarder1042]

I wasnt trying to argue. I just always considered them to be the same. The usbjtagNT can do both mips and spi and its called a usbjtag.

I was really stoked about the second link and tore my ps3 apart before i realized it said the jtag port was disabled. I would LOVE to see progress made on re enableing the jtag port but as for myself, i wouldnt know where to start.

I guess in the future ill keep my 2 cents to myself.


edit.

Actually, now that i re-read you post, reguardless of the xbox hack you still need to use a JTAG to acess anything. Thus the correction in your post

Nandpro doesn't use JTAG

The point i was trying to make was the nand reader/writer (commonly known as a jtag) is used with nandpro.

There is a such thing a differences in opinion. Not everything has to be an arguement.

[damox]

The point i was trying to make was the nand reader/writer (commonly known as a jtag) is used with nandpro.

The 360 makes use of an exploit that uses the GPU JTAG port.

The exploit is written to the XBOX360's nand <- This is done with the NAND SPI interface (i.e. not JTAG).

You don't just commonly call things a JTAG, it already has a very specific meaning.

EDIT: I missed cmal1492 post a couple of posts up. His post is more detailed.

[l_oliveira]

I wasnt trying to argue. I just always considered them to be the same.

Man you just don't know who you were arguing with ...

Anyway, It's so annoying that people keep calling the XBOX360 hack as JTAG.

Here's what JTAG is really about:
Joint Test Action Group - Wikipedia, the free encyclopedia

After you're done reading that, read this too:
Serial Peripheral Interface Bus - Wikipedia, the free encyclopedia

And then if you understand these texts, you will come to agree with me.
I'm not saying you're at fault or anything.
Just showing you how misleading the hack name is.

To cmal1492: Yes, the PS3 has that parallel port you know about, with the pins and the special pin to shut down the southbridge CPU. Sadly it's parallel and much more complex than the Serial Peripheral Interface on the XB360 XSB chip.

Because of that awkward design, unbrick an PS3 is a challenge ...

[boarder1042]

wonder why the term jtag is so loosely used.

Only reason i want to acess the tsop is to mess with coreos. For some reason i assumed the cable that attaches to the jtag port is called a jtag cable. (no sarcasm here) From there, you can access the tsop through mips or spi.

As far as remapping bad blocks goes.... Are my options limited to a willem programmer or are there other options im not aware of?


One more thing. About the jtag port being disabled on the ps3...... Could it be something as simple as the sb6120? bridge the line again?

[vampirexx]

Thanx for the answers people you are very technical and I guess you could develop something out with your knowledge, with a similar tool we could easily downgrade to 3.55 without tearing apart our ps3 maybe