dslreports logo
 
    All Forums Hot Topics Gallery
spc
uniqs
28

toro
join:2006-01-27
Scarborough, ON

toro to locked

Member

to locked

Re: [Unlock] Unlock SPA2102-R restricted access domains

said by locked:

said by toro:

... If you are good with soldering you can remove the flash chip and wipe an area which stores the customization data.

Thanks toro. I can consider this. I have old collegues friends in an electronics facility that could help: do you know which one is the chip? Are there tutos around that say how to wipe (this mean the same chip will be resoldered once done, or a new one?)

See this »Re: [General] The new PAP2 v2.0
It's for SPA2002 but I believe it applies to other SPA series.
The flash chip is the MX one on the back (see »/r0/do ··· ttom.jpg)
locked
join:2013-01-28

locked

Member

Again another 40+ pages topic

toro
join:2006-01-27
Scarborough, ON

toro

Member

No, just the 1st post
locked
join:2013-01-28

locked

Member

OK toro: assumed these flash addresses are ok for spa2102 and firmware 5-2-13, please let me know this way is the good one:
unsolder the chip
dump with an e²prom programmer device (ie backup ?)
fill addresses to FF
re-solder
plug
enjoy freedom?

BTW: possible to do that without unsolder?

toro
join:2006-01-27
Scarborough, ON

toro

Member

said by locked:

OK toro: assumed these flash addresses are ok for spa2102 and firmware 5-2-13, please let me know this way is the good one:
unsolder the chip
dump with an e²prom programmer device (ie backup ?)
fill addresses to FF
re-solder
plug
enjoy freedom?

Yes.

BTW: possible to do that without unsolder?

I don't think so.
If you want to confirm the addresses, try to contact meister_sd See Profile, I believe he's using that procedure.
locked
join:2013-01-28

locked

Member

Thx toro
I feel like seing the goal
locked

locked

Member

hummmm, he seems to have been offline for ~1year, twice more than DogFace05... let's wait
floriantet
join:2006-03-04
Rochester, MI

floriantet to toro

Member

to toro
Spa2102 settings are kept in flash starting at the following addresses
0x1000
0x8800
0x11000
0x18800
also to make it factory rest safe you need to ff
from address 0x1f0090 to 0x1f00a0