xbox-scene.com - your xbox news information source
Quick Links: Main Forums | Xbox360 Forums | Xbox1 Forums | PS3 Forums
Xbox-Scene Forum Help  Search Xbox-Scene Forums   Xbox-Scene Forum Members   Xbox-Scene Calendar

Giganews Usenet Offers: +1150 days binary retention, 99%+ Completion, and Unlimited Speed/Access!

360 ODD Emulators: X360 Key $99 | Wasabi360 FAT $99 | Wasabi360 Slim $99
C4E's iXtreme Burner MAX Drive: LiteOn iHAS124 DROPPED TO JUST $17


Welcome Guest ( Log In | Register )

 Forum Rules Rules
2 Pages V  1 2 >  
Reply to this topicStart new topic
> Possible Efuse Faker?
bifnewman
post Jun 14 2010, 02:59 AM
Post #1


X-S Young Member
*

Group: Members
Posts: 34
Joined: 11-June 10
Member No.: 439139



I'm no expert on this but I was trying to understand more about the IBM eFUSE and how it works and I came across an xbox 360 cpu datasheet with the eFUSE pinouts. I was thinking about how when you install 8948 and it blows eFUSES or if you have an updated CB and it would blow the eFUSES, would it be possible to take the efuse enable and the efuse vcc pinouts and wire them to a modchip and cut the tracks for the efuses and rewire them so you could send back a different signal and boot an older kernel? Would something of the sort be possible? Why or why not?

Thanks,
bifnewman
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
supersdude1691
post Jun 14 2010, 03:51 AM
Post #2


X-S Member
*

Group: Members
Posts: 118
Joined: 4-July 08
Member No.: 384796



The efuses are completely contained inside the CPU chip itself, it does not have a trace leading outside the motherboard.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
bifnewman
post Jun 14 2010, 06:20 AM
Post #3


X-S Young Member
*

Group: Members
Posts: 34
Joined: 11-June 10
Member No.: 439139



How does the southbridge know wether to boot the system or not? Also if you were to desolder the cpu from the mobo and wire it or put a chip between the two, would this sort of thing be possible?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
No_Name
post Jun 14 2010, 05:30 PM
Post #4


X-S Freak
*****

Group: Members
Posts: 1154
Joined: 28-January 03
Member No.: 21640



No.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
bifnewman
post Jun 14 2010, 09:31 PM
Post #5


X-S Young Member
*

Group: Members
Posts: 34
Joined: 11-June 10
Member No.: 439139



QUOTE(No_Name @ Jun 14 2010, 12:30 PM) *

No.


Care to explain? thanks for response
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
No_Name
post Jun 14 2010, 10:10 PM
Post #6


X-S Freak
*****

Group: Members
Posts: 1154
Joined: 28-January 03
Member No.: 21640



QUOTE(bifnewman @ Jun 14 2010, 01:31 PM) *

Care to explain? thanks for response


There is really not anything to explain. just that what you want to do is just not possible.

The reason is the Efuses are inside the CPU.. Unless you happen to have a fab plant capable of reproducing the same CPU as in the 360 with the Efuses unburnt then there is no way to bypass them once they are burnt.

Even then unless you know what fuses to burn to start with and how to burn the right sequence its pointless.

Not to mention you will end up with IBMs law team coming after you for fabricating their intellectual property.

See No was a nice simple answer that is not super complicated.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
bifnewman
post Jun 15 2010, 12:21 AM
Post #7


X-S Young Member
*

Group: Members
Posts: 34
Joined: 11-June 10
Member No.: 439139



QUOTE(No_Name @ Jun 14 2010, 05:10 PM) *

There is really not anything to explain. just that what you want to do is just not possible.

The reason is the Efuses are inside the CPU.. Unless you happen to have a fab plant capable of reproducing the same CPU as in the 360 with the Efuses unburnt then there is no way to bypass them once they are burnt.

Even then unless you know what fuses to burn to start with and how to burn the right sequence its pointless.

Not to mention you will end up with IBMs law team coming after you for fabricating their intellectual property.

See No was a nice simple answer that is not super complicated.


ok sorry
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Syn201
post Jun 18 2010, 11:28 AM
Post #8


X-S Senior Member
**

Group: Members
Posts: 257
Joined: 11-November 09
Member No.: 424531
Xbox Version: none
360 version: v4.0 (jasper)



unblowing efuses is not financially viable ..
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
inspuration
post Jul 28 2010, 04:49 AM
Post #9


X-S Member
*

Group: Members
Posts: 131
Joined: 7-June 10
Member No.: 438964



QUOTE(Syn201 @ Jun 18 2010, 11:28 AM) *

unblowing efuses is not financially viable ..


There is a team of people looking at this right now. http://www.xboxhacker.org/index.php?topic=15456.0
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
freeloader247
post Aug 8 2010, 06:18 AM
Post #10


X-S Enthusiast


Group: Members
Posts: 21
Joined: 30-December 09
Member No.: 429355



Ok I understand that the eFuses are located in side the cpu, but they must send some type of signal out telling the xbox to boot? Or how would the xbox know what kernals to blacklist and not boot?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
majinsoftware
post Aug 8 2010, 07:11 AM
Post #11


X-S Freak
*****

Group: Members
Posts: 1416
Joined: 5-February 05
Member No.: 195575
Xbox Version: v1.6b
360 version: v4.0 (jasper)



Theres no external comuncation of it. You ask how it knows it doesnt.
It just eather boots (when has right fuses burnt) or it doesnt boot.

Sort of think of it like a door the lock is the efuses, the kernal is the key. Stick the wrong key in and nothings going to happen the door will stay locked and not open.

Then the xbox will relise and give you a error.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
slasherking823
post Aug 27 2010, 01:23 AM
Post #12


X-S Young Member
*

Group: Dev/Contributor
Posts: 42
Joined: 9-December 09
Member No.: 427798
Xbox Version: v1.6
360 version: v4.0 (jasper)



the southbridge doesent decide to boot, the cpu does...
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
juggahax0r
post Sep 2 2010, 06:54 PM
Post #13


X-S Expert
***

Group: Members
Posts: 602
Joined: 28-January 10
From: Dayton, OH
Member No.: 431591
Xbox Version: none
360 version: v5.0 (360S - trinity)



Efuse Document


This is a very good short document on Efuses. Won't give you any hope in faking them, but it will show you that once they are blown they are indeed gone for good, At least in most cases certainly in the case of the Xbox360.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
lehbel
post Oct 27 2010, 08:13 PM
Post #14


X-S Enthusiast


Group: Members
Posts: 4
Joined: 27-October 10
Member No.: 445337



I have an idea - to make off for the bus address 0x8000 0200 0000 0104 on the data bus of the processor to set the 15th bit to 1, and the processor receives an address for the transition is shifted to 0x8000.
At 0x8000 0200 0000 8000 to connect the 32 bit ROM with an alternative 1BL. Solder wires have a lot of ...
In the performance of the program from the ROM, the processor must operate at a reduced rate because ROM is slow.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Grandmaster56
post Oct 30 2010, 10:22 AM
Post #15


X-S Member
*

Group: Members
Posts: 64
Joined: 26-December 09
From: Glasgow,UK
Member No.: 429081
Xbox Version: v1.6
360 version: v1 (xenon)



Your not taking into consideration the LDV.Also changing those values would break the signature of the bootloader and the console would not boot.Its not possible.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post





2 Pages V  1 2 >
Reply to this topicStart new topic

 

Lo-Fi Version Time is now: 19th June 2013 - 01:28 AM