Jump to content


Photo

Possible Efuse Faker?


  • Please log in to reply
25 replies to this topic

#1 bifnewman

bifnewman

    X-S Young Member

  • Members
  • Pip
  • 34 posts

Posted 14 June 2010 - 02:59 AM

I'm no expert on this but I was trying to understand more about the IBM eFUSE and how it works and I came across an xbox 360 cpu datasheet with the eFUSE pinouts. I was thinking about how when you install 8948 and it blows eFUSES or if you have an updated CB and it would blow the eFUSES, would it be possible to take the efuse enable and the efuse vcc pinouts and wire them to a modchip and cut the tracks for the efuses and rewire them so you could send back a different signal and boot an older kernel? Would something of the sort be possible? Why or why not?

Thanks,
bifnewman

#2 supersdude1691

supersdude1691

    X-S Member

  • Members
  • Pip
  • 118 posts

Posted 14 June 2010 - 03:51 AM

The efuses are completely contained inside the CPU chip itself, it does not have a trace leading outside the motherboard.

#3 bifnewman

bifnewman

    X-S Young Member

  • Members
  • Pip
  • 34 posts

Posted 14 June 2010 - 06:20 AM

How does the southbridge know wether to boot the system or not? Also if you were to desolder the cpu from the mobo and wire it or put a chip between the two, would this sort of thing be possible?

#4 No_Name

No_Name

    X-S Freak

  • Members
  • PipPipPipPipPip
  • 1,154 posts

Posted 14 June 2010 - 05:30 PM

No.

#5 bifnewman

bifnewman

    X-S Young Member

  • Members
  • Pip
  • 34 posts

Posted 14 June 2010 - 09:31 PM

QUOTE(No_Name @ Jun 14 2010, 12:30 PM) View Post

No.


Care to explain? thanks for response

#6 No_Name

No_Name

    X-S Freak

  • Members
  • PipPipPipPipPip
  • 1,154 posts

Posted 14 June 2010 - 10:10 PM

QUOTE(bifnewman @ Jun 14 2010, 01:31 PM) View Post

Care to explain? thanks for response


There is really not anything to explain. just that what you want to do is just not possible.

The reason is the Efuses are inside the CPU.. Unless you happen to have a fab plant capable of reproducing the same CPU as in the 360 with the Efuses unburnt then there is no way to bypass them once they are burnt.

Even then unless you know what fuses to burn to start with and how to burn the right sequence its pointless.

Not to mention you will end up with IBMs law team coming after you for fabricating their intellectual property.

See No was a nice simple answer that is not super complicated.

#7 bifnewman

bifnewman

    X-S Young Member

  • Members
  • Pip
  • 34 posts

Posted 15 June 2010 - 12:21 AM

QUOTE(No_Name @ Jun 14 2010, 05:10 PM) View Post

There is really not anything to explain. just that what you want to do is just not possible.

The reason is the Efuses are inside the CPU.. Unless you happen to have a fab plant capable of reproducing the same CPU as in the 360 with the Efuses unburnt then there is no way to bypass them once they are burnt.

Even then unless you know what fuses to burn to start with and how to burn the right sequence its pointless.

Not to mention you will end up with IBMs law team coming after you for fabricating their intellectual property.

See No was a nice simple answer that is not super complicated.


ok sorry

#8 Syn201

Syn201

    X-S Senior Member

  • Members
  • PipPip
  • 257 posts
  • Xbox Version:none
  • 360 version:v4.0 (jasper)

Posted 18 June 2010 - 11:28 AM

unblowing efuses is not financially viable ..

#9 inspuration

inspuration

    X-S Member

  • Members
  • Pip
  • 131 posts

Posted 28 July 2010 - 04:49 AM

QUOTE(Syn201 @ Jun 18 2010, 11:28 AM) View Post

unblowing efuses is not financially viable ..


There is a team of people looking at this right now. http://www.xboxhacke...p?topic=15456.0

#10 freeloader247

freeloader247

    X-S Enthusiast

  • Members
  • 21 posts

Posted 08 August 2010 - 06:18 AM

Ok I understand that the eFuses are located in side the cpu, but they must send some type of signal out telling the xbox to boot? Or how would the xbox know what kernals to blacklist and not boot?

#11 majinsoftware

majinsoftware

    X-S Freak

  • Members
  • PipPipPipPipPip
  • 1,416 posts
  • Xbox Version:v1.6b
  • 360 version:v4.0 (jasper)

Posted 08 August 2010 - 07:11 AM

Theres no external comuncation of it. You ask how it knows it doesnt.
It just eather boots (when has right fuses burnt) or it doesnt boot.

Sort of think of it like a door the lock is the efuses, the kernal is the key. Stick the wrong key in and nothings going to happen the door will stay locked and not open.

Then the xbox will relise and give you a error.

#12 slasherking823

slasherking823

    X-S Young Member

  • Dev/Contributor
  • Pip
  • 42 posts
  • Xbox Version:v1.6
  • 360 version:v4.0 (jasper)

Posted 27 August 2010 - 01:23 AM

the southbridge doesent decide to boot, the cpu does...

#13 juggahax0r

juggahax0r

    X-S Expert

  • Members
  • PipPipPip
  • 603 posts
  • Location:Dayton, OH
  • Xbox Version:none
  • 360 version:v5.0 (360S - trinity)

Posted 02 September 2010 - 06:54 PM

Efuse Document


This is a very good short document on Efuses. Won't give you any hope in faking them, but it will show you that once they are blown they are indeed gone for good, At least in most cases certainly in the case of the Xbox360.

#14 lehbel

lehbel

    X-S Enthusiast

  • Members
  • 4 posts

Posted 27 October 2010 - 08:13 PM

I have an idea - to make off for the bus address 0x8000 0200 0000 0104 on the data bus of the processor to set the 15th bit to 1, and the processor receives an address for the transition is shifted to 0x8000.
At 0x8000 0200 0000 8000 to connect the 32 bit ROM with an alternative 1BL. Solder wires have a lot of ...
In the performance of the program from the ROM, the processor must operate at a reduced rate because ROM is slow.

#15 Grandmaster56

Grandmaster56

    X-S Member

  • Members
  • Pip
  • 64 posts
  • Location:Glasgow,UK
  • Xbox Version:v1.6
  • 360 version:v1 (xenon)

Posted 30 October 2010 - 10:22 AM

Your not taking into consideration the LDV.Also changing those values would break the signature of the bootloader and the console would not boot.Its not possible.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users