![]() |
2009-01-21
, 02:58
|
Posts: 6 |
Thanked: 0 times |
Joined on Dec 2008
|
#1
|
![]() |
2009-01-21
, 05:25
|
|
Posts: 220 |
Thanked: 41 times |
Joined on Oct 2008
|
#2
|
![]() |
2009-01-21
, 05:59
|
Posts: 1,213 |
Thanked: 356 times |
Joined on Jan 2008
@ California and Virginia
|
#3
|
![]() |
2009-01-21
, 10:09
|
Posts: 106 |
Thanked: 26 times |
Joined on Aug 2008
|
#4
|
![]() |
2009-01-21
, 11:32
|
Posts: 1 |
Thanked: 1 time |
Joined on Jan 2009
|
#5
|
The Following User Says Thank You to Zyxmon For This Useful Post: | ||
![]() |
2009-01-22
, 20:49
|
Posts: 89 |
Thanked: 6 times |
Joined on Jan 2008
|
#6
|
![]() |
2009-01-22
, 21:32
|
|
Posts: 4,930 |
Thanked: 2,272 times |
Joined on Oct 2007
|
#7
|
But the thing is, he needs it to turn on... so he won't be able to access xterm? Will he?
The Following User Says Thank You to Benson For This Useful Post: | ||
![]() |
2009-01-22
, 21:59
|
|
Posts: 4,274 |
Thanked: 5,358 times |
Joined on Sep 2007
@ Looking at y'all and sighing
|
#8
|
Never having found myself in that fix (or deliberately simulated it), I'm not sure what your options are. But one of the most general attacks that comes to mind is to reflash it (initfs only!) with a carefully constructed initfs giving you usb-serial console access, or better still, directly reading out or setting the lock-code on startup.
How to do that? Well, if you know how, it's fairly obvious, and if you don't, this won't help, but basically:
All of these steps should yield answers from brief searching (well, except 9.), but AFAIK nobody's put them all together for this purpose.
- Rip an initfs from one of Nokia's FIASCO images, preferably the same version you're running on the tablet, but the latest should work if you don't know.
- Mount the initfs image RW on your desktop.
- Add any necessary files: kernel modules, executable binaries, third-party scripts...
- Edit some key shell script that you know will be executed; linuxrc is the obvious choice.
- Add "appropriate" lines. Specifically, you need to somehow get the data out of the config partition, and display it onscreen somewhere with text2screen, or try for really advanced and set it to a known value.
- umount the image.
- Flash it to your tablet, like flasher-3.0 -f -n initfs.haxx0red.jffs2.
- Boot it and watch the screen for your message with the lock code.
- Go back to the desktop to find what you did to put it in a reboot-loop, repeating from 2.