Achievements.

[sbav1]

Well all I did to read/write to mem was to map the memory using mmu (like in dm3).
But without that there is no way to use /dev/mem directly.

dm3? You mean phone unlocking box?
You sure physical memory is not readable/writable in D-series using mere mmap()?
Unless I'm very much mistaken, 1st DDR bank should be at 0x60000000 in physical address space. Something like

Code: Select all

dd if=/dev/mem of=mem.001 bs=1M skip=1536 count=1

is not working too?
(not really important, I'm just curious)

[arris69]

1013.4 decrypted!
...

and what's new except the version number
pty support enabled in kernel

arris

[julianbb]

Could you try to decrypt BD-D6900 firmware ?
Maybe Samsung don't have spare keys on stock...

[langerhans]

Hey, Im buying a D series TV this week.
@zibri: I read in another Thread, that OTP is UNlocked on your TV? Is that true, have you checked that?
Then, is there really an uboot in bml0/1 and is it functional, or does secure bootloader jump directly to kernel after sig check? A working uboot could lead into some interesting stuff imho.
I stopped working on it on my B series TV because i f*cked up the uboot-env part once and TV greeted me with a nice
##ERROR compare failed(MAC) ##ERROR auth fail! SYSTEM DOWN
(But thats another story...)