Questions tagged [hardware]

Any physical device analyzed for reverse engineering purpose. This tag is used to denote that the question is about hardware reverse engineering and not (only) about software reverse engineering.

Hardware reverse engineering differ drastically from software reverse engineering in terms of techniques and way of thinking and, last but not least, in term of budget.

Hardware reverse engineering often requires to break devices in order to understand their internal processes. And, on the contrary to software, breaking hardware devices is costly (and cannot be easily reverted) and required to get a lot of the analyzed device.

Most of the time, reversing a hardware device come together with trying to collect a lot of devices (possibly partially broken) from local reseller that collect broken devices or buy it from other individuals (mostly on Internet websites).

Another difference with software reverse engineering is that you will need to build specific devices to ease the communication with the device. A typical example is to connect a JTAG to the device to get a full memory access (and more) on it. This task is quite easy if the JTAG controller is still present on the device but quite tedious if you have to do it yourself.

Finally, hardware reverse engineering really differ in terms of knowledge and skills. Real competences in electronics (both in theory and practice), VHDL and how to set-up an FPGA, and so on, are needed to get through.

211 questions
36
votes
8 answers

Reverse engineering T-Disk barcodes for Tassimo coffee makers

In hope this is appropriate I have a Bosch Tassimo TAS2002EE coffee maker that uses T-Disks. Those contain coffee/milk/something else, and a barcode that is supposed to tell the machine how to deal with the disk. What I want to do is understand the…
GSerg
  • 460
  • 1
  • 4
  • 8
15
votes
4 answers

E Ink display interface protocol

I am particularly interested in the ED060XC3 that is in the kindle paperwhite (I think that is the right one anyway). I can't find a freely available datasheet. Would it be possible to reverse engineer a driver from the kindle firmware? There are…
cb88
  • 2,320
  • 2
  • 18
  • 33
12
votes
2 answers

What sources do you use for gaining information/intelligence about hardware products?

When reverse engineering consumer hardware products, it can often be helpful to gain as much information as possible outside of the device itself, including: Service manuals Installation/User manuals Circuit diagrams/block diagrams Description…
Cybergibbons
  • 1,762
  • 2
  • 17
  • 26
9
votes
1 answer

SCSI interface through USB

I'm trying to dump the storage of Xiaomi Home camera. It comes with USB port, that if inserted while RESET is pressed is recognized in Linux as a SCSI device. I tried mounting the SCSI disc with no success, any idea what's this interface for and how…
Mellowcandle
  • 4,795
  • 6
  • 34
  • 47
8
votes
1 answer

How was the Zero Flag implemented on Z80 ALU?

Z80 was a popular 8-bit processor with a 4-bit ALU. Implementing a zero flag for a register should be straight forward, it would be a logical NOR of all the bits on the register. Something like that would work for a small number of inputs. As for…
8
votes
2 answers

reverse engineering a printer cartridge chip

Is this stack only about reverse-engineering software and firmware? What about hardware? We have a few semi-industrial ink-jet printers (like $2,000 each so, whatever tier that means to you). It has these special ink cartridges that have chips in…
Daniel
  • 181
  • 1
  • 3
7
votes
1 answer

What safety steps are to be followed when opening up an unknown piece of hardware?

I recently found a plastic box with various dials and unknown sockets on it, in my Grandfather's attic. It is around 12"x8"x4". From the plastic, it appears to be of 1980's vintage. I asked around, and no one knows what it is. What safety…
6
votes
2 answers

How do I figure out the which CPU the Sony DPF C-1000 has?

Recently I received a Digital Photo Frame (Sony C-1000) and since I'll never use it as it is, I thought of playing with it and reprogram it. Anything like managing to print out to screen "Hello world" would be a win. I'm trying to understand which…
4
votes
1 answer

Hacking old gym equipment

Anyone reversed ifit? I just picked up a discounted NordicTrack Elite 11.0 Elliptical on Ebay, I want to hack it. I would like to extract performance data and it would be great if I could control the elliptical to increase/decrease the intensity? I…
4
votes
0 answers

How does cartridge protection distinguish an original vs fake cartridge?

Based on what explained here, genuine ink cartridges may come with cartridge protection embedded in their chip. Once an ink cartridge is installed, printer will mark it as protected. What is embedded in the chip? How can we make sure that it is…
Shabnam
4
votes
0 answers

How to reverse engineer an elliptical trainer?

I have a Schwinn 420 Elliptical Trainer (2012 model), and I want to reverse engineer it. Right now it has a big honking console that lets you increase/decrease the resistance and start a small handful of preprogrammed workout routines. The trouble…
soapergem
  • 141
  • 2
4
votes
0 answers

Reverse engineering Nord Lead 4 control board

I am reverse engineering a synthesizer named nord lead 4. I want to tap in between the control board and mainboard which has the microprocessor. I didn't start analyzing the signals on the board while it's powered on. I've just been mapping the…
Ali Somay
  • 141
  • 3
4
votes
2 answers

Trying to identify the JTAG/RS232 port on this board

I am doing some research into smart devices. I realized that the device is communicating with an Internet end-point but the communication is encrypted (and using a proxy tool doesn't work). I want to see if I can reverse engineer the firmware or…
Lucas Kauffman
  • 231
  • 2
  • 6
4
votes
1 answer

What is the encoding of some old arcade chips?

So I got a couple super old chips from what looked like an arcade. The game-board they game with is OK I think. The CRT monitor is wrecked, however the chips are still good. I stuck them in my Chip reader and did a dump of them.Had a poke around to…
3
votes
0 answers

"Sound Box" Custom Message

I am trying to put a custom message on a "sound box" in a stuffed animal. Here is a picture of the circuit board: The blue wires lead are connected to the speaker. I am thinking that those pads coming out of the chip that are not connected to…
NULL
  • 131
  • 2
1
2 3 4