So I'm an idiot. (Lets get that out of the way...) While setting my passcode in a moving vehicle, I thought "wow, its picky about timing and position of button presses". And so, as expected, the code is lost. (I'm really glad I didn't do something silly like set up autolock...)

I'm not finding it anywhere on the filesystem, but /dev/mtdblock1 seems to hold config info. Has anyone decoded this yet, or found a tool that does so?

(For what its worth, the partition layout seems to be:
/dev/mtdblock0 - bootloader
/dev/mtdblock1 - config info
/dev/mtdblock2 - kernel
/dev/mtdblock3 - initrd (jffs2)
/dev/mtdblock4 - root fs (jffs2)
..)

Can you put it into developer mode and just re-flash the firmware? You would lose all your settings/documents, but have a working device again. I think details are on the Maemo site.

I'm just brainstorming here, and haven't tried this myself yet.

Yes, I think re-flashing the firmware should work.

While updating to the latest firmware I noticed that the lock code was gone. It only came back after doing a full restore from a backup.

Just a thought, in case you have a previous backup, maybe restoring it will bring back the old lock code or remove it if none was set.

I saw the exact opposite.

After flashing from version 45-7 to 45-8, the lock code /wasn't/ reset to 12345, but stayed as the lock code I'd specified after my first bootup.

jc

When I first boot 45-8 it didn't ask for a lock code so I assumed that it was reset. I'll check when the next update is available.