disassembled_devices:galakto_player_toylino
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| disassembled_devices:galakto_player_toylino [2025/10/02 22:50] – [Sound quality] admin | disassembled_devices:galakto_player_toylino [2025/12/01 08:00] (current) – ["Hacking" the toy token] admin | ||
|---|---|---|---|
| Line 16: | Line 16: | ||
| Or is it? Can we verify the claim and see if it's even possible with the chosen technical approach? Let's find out! \\ | Or is it? Can we verify the claim and see if it's even possible with the chosen technical approach? Let's find out! \\ | ||
| - | Although it is a player for the German market, I still like to do my write-ups in english. Use [[https:// | + | Although it is a player for the German market, I still like to do my write-ups in English. Use [[https:// |
| ===== Disclaimer ===== | ===== Disclaimer ===== | ||
| - | I do this for educational fun. I've seen the Galakto Tokens and just wondered what's inside. So in January 2025, I've decided on one of the available music tokens on Kleinanzeigen, | + | I do this for educational |
| - | I ended up having | + | I ended up getting |
| I am a curious person and like to share knowledge. I love the interesting stuff you guys do and share, YOU keep being brilliant! :) | I am a curious person and like to share knowledge. I love the interesting stuff you guys do and share, YOU keep being brilliant! :) | ||
| - | 🗒️ Note: I am not sponsored, I do not affiliate or try to do advertising even if providing links. I do not take any responsibility for external content. There is no piracy involved or encouraged here - I did only clone one token to itself as a POC. \\ | + | 🗒️ Note: I am not sponsored, I am not affiliated with anyone, and I do not engage in advertising, even when providing links. I do not take any responsibility for external content. There is no piracy involved or encouraged here - I did only clone one token to itself as a POC. \\ |
| - | Ultimately, I am here for freedom, | + | Ultimately, I am here for freedom, |
| - | ⚠️ I am in no sense responsible for what you to. Please think before doing and pressing return | + | ⚠️ I am in no way responsible for what you to. Please think before doing and pressing |
| ===== Music Tokens ===== | ===== Music Tokens ===== | ||
| - | As Music Tokens / cards are the only way to play music with the player, I consider it the core part. As of 06/2025 there are 148 Galakto Tokens [[https:// | + | As Music Tokens / cards are the only way to play music with the player, I consider it the core component. As of 06/2025, there are 148 Galakto Tokens [[https:// |
| ==== Music Tokens Hardware ==== | ==== Music Tokens Hardware ==== | ||
| - | The music tokens / cards connect to the pogo pins of the player and hold magnetically. | + | The music tokens / cards connect to the pogo pins of the player and are held in place magnetically. \\ |
| The plastic housing is welded and cannot be opened easily (I used a rotary tool to cut it open) \\ | The plastic housing is welded and cannot be opened easily (I used a rotary tool to cut it open) \\ | ||
| - | Looking at the PCB we can see a flash memory chip from SKhynix model **H9TQ64AAETAC** with **2GB**. On the other side of PCB there is a USB 2.0 Flash Disk Controller IC, type **AU6989SNL-CA2** from ALCOR MICRO. On the left side there are pads for USB on the PCB. There are remains of broken off connection pins, which lead to the conclusion that these pins are probably used in production to put the content on. | + | Looking at the PCB, we can see a flash memory chip from SKhynix model **H9TQ64AAETAC** with **2GB**. On the other side of the PCB, there is a USB 2.0 Flash Disk Controller IC, type **AU6989SNL-CA2** from ALCOR MICRO. On the left side, there are pads for USB on the PCB. There are remains of broken off connection pins, which lead to the conclusion that these pins are probably used in production to put the content on. |
| {{gallery>: | {{gallery>: | ||
| Line 53: | Line 53: | ||
| - | The POV of the PCB is the front of the token card (Flash IC is the backside of the card). So if you hold the token and look at the front then VCC is left. \\ | + | The POV of the PCB is the front of the token card (Flash IC is the backside of the card). So if you hold the token and look at the front, then VCC is left. \\ |
| < | < | ||
| Line 61: | Line 61: | ||
| - | So let's solder | + | So let's solder |
| ==== Music Tokens Content ==== | ==== Music Tokens Content ==== | ||
| Galakto card is **2GB FAT32** formatted flash storage connected to a **USB 2.0 Flash Disk Controller** IC, with **no write protecion**. \\ | Galakto card is **2GB FAT32** formatted flash storage connected to a **USB 2.0 Flash Disk Controller** IC, with **no write protecion**. \\ | ||
| - | Cloning the token to any other USB-Stick works just fine :) So you could solder a USB-Socket to the Player. \\ | + | Cloning the token to any other USB-Stick works just fine :) Therefore, |
| ⚠️ **WARNING: Always create a full block-level backup of the entire device!** | ⚠️ **WARNING: Always create a full block-level backup of the entire device!** | ||
| Line 196: | Line 197: | ||
| // | // | ||
| - | It is strange to see that the main directory is called " | + | It is strange to see that the main directory is called " |
| According to hex-dump of block device the tokens get cloned by Vinpower Digital machine. \\ | According to hex-dump of block device the tokens get cloned by Vinpower Digital machine. \\ | ||
| Line 212: | Line 213: | ||
| {{gallery>: | {{gallery>: | ||
| - | If you don't want to cut up your token, you can alternatively open the player, solder | + | If you don't want to cut up your token, you can alternatively open the player, solder |
| For dumping partitions once, the most simple way would be to stick tape with USB-wires onto the outer contacts (validate your dumps!). \\ | For dumping partitions once, the most simple way would be to stick tape with USB-wires onto the outer contacts (validate your dumps!). \\ | ||
| The cleanest way would be to [[galakto_player_toylino# | The cleanest way would be to [[galakto_player_toylino# | ||
| Line 362: | Line 363: | ||
| dd if=mbr_swapped.bin of=/dev/sdX bs=512 count=1 | dd if=mbr_swapped.bin of=/dev/sdX bs=512 count=1 | ||
| </ | </ | ||
| - | or do it directly on /dev/sdX instead of mbr_swapped. To reverse just write back mbr_backup or change partition address accordingly. | + | or do it directly on /dev/sdX instead of mbr_swapped. To reverse, just write back mbr_backup or change partition address accordingly. |
| ==5. Flush & Wash & Rehash== | ==5. Flush & Wash & Rehash== | ||
disassembled_devices/galakto_player_toylino.1759438206.txt.gz · Last modified: by admin
