disassembled_devices:galakto_player_toylino
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| disassembled_devices:galakto_player_toylino [2025/12/01 07:23] – grammar correction admin | disassembled_devices:galakto_player_toylino [2025/12/01 08:00] (current) – ["Hacking" the toy token] admin | ||
|---|---|---|---|
| Line 16: | Line 16: | ||
| Or is it? Can we verify the claim and see if it's even possible with the chosen technical approach? Let's find out! \\ | Or is it? Can we verify the claim and see if it's even possible with the chosen technical approach? Let's find out! \\ | ||
| - | Although it is a player for the German market, I still like to do my write-ups in english. Use [[https:// | + | Although it is a player for the German market, I still like to do my write-ups in English. Use [[https:// |
| ===== Disclaimer ===== | ===== Disclaimer ===== | ||
| Line 30: | Line 30: | ||
| ===== Music Tokens ===== | ===== Music Tokens ===== | ||
| - | As Music Tokens / cards are the only way to play music with the player, I consider it the core component. As of 06/2025 there are 148 Galakto Tokens [[https:// | + | As Music Tokens / cards are the only way to play music with the player, I consider it the core component. As of 06/2025, there are 148 Galakto Tokens [[https:// |
| ==== Music Tokens Hardware ==== | ==== Music Tokens Hardware ==== | ||
| Line 36: | Line 36: | ||
| The music tokens / cards connect to the pogo pins of the player and are held in place magnetically. \\ | The music tokens / cards connect to the pogo pins of the player and are held in place magnetically. \\ | ||
| The plastic housing is welded and cannot be opened easily (I used a rotary tool to cut it open) \\ | The plastic housing is welded and cannot be opened easily (I used a rotary tool to cut it open) \\ | ||
| - | Looking at the PCB we can see a flash memory chip from SKhynix model **H9TQ64AAETAC** with **2GB**. On the other side of the PCB, there is a USB 2.0 Flash Disk Controller IC, type **AU6989SNL-CA2** from ALCOR MICRO. On the left side, there are pads for USB on the PCB. There are remains of broken off connection pins, which lead to the conclusion that these pins are probably used in production to put the content on. | + | Looking at the PCB, we can see a flash memory chip from SKhynix model **H9TQ64AAETAC** with **2GB**. On the other side of the PCB, there is a USB 2.0 Flash Disk Controller IC, type **AU6989SNL-CA2** from ALCOR MICRO. On the left side, there are pads for USB on the PCB. There are remains of broken off connection pins, which lead to the conclusion that these pins are probably used in production to put the content on. |
| {{gallery>: | {{gallery>: | ||
| Line 53: | Line 53: | ||
| - | The POV of the PCB is the front of the token card (Flash IC is the backside of the card). So if you hold the token and look at the front then VCC is left. \\ | + | The POV of the PCB is the front of the token card (Flash IC is the backside of the card). So if you hold the token and look at the front, then VCC is left. \\ |
| < | < | ||
| Line 213: | Line 213: | ||
| {{gallery>: | {{gallery>: | ||
| - | If you don't want to cut up your token, you can alternatively open the player, solder | + | If you don't want to cut up your token, you can alternatively open the player, solder |
| For dumping partitions once, the most simple way would be to stick tape with USB-wires onto the outer contacts (validate your dumps!). \\ | For dumping partitions once, the most simple way would be to stick tape with USB-wires onto the outer contacts (validate your dumps!). \\ | ||
| The cleanest way would be to [[galakto_player_toylino# | The cleanest way would be to [[galakto_player_toylino# | ||
| Line 363: | Line 363: | ||
| dd if=mbr_swapped.bin of=/dev/sdX bs=512 count=1 | dd if=mbr_swapped.bin of=/dev/sdX bs=512 count=1 | ||
| </ | </ | ||
| - | or do it directly on /dev/sdX instead of mbr_swapped. To reverse just write back mbr_backup or change partition address accordingly. | + | or do it directly on /dev/sdX instead of mbr_swapped. To reverse, just write back mbr_backup or change partition address accordingly. |
| ==5. Flush & Wash & Rehash== | ==5. Flush & Wash & Rehash== | ||
disassembled_devices/galakto_player_toylino.1764570230.txt.gz · Last modified: by admin
