From fdubois@netcom.com Sat Oct 14 07:42:09 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!netcom!fdubois From: fdubois@netcom.com (Freya Dubois) Newsgroups: comp.sys.m68k Subject: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct14.074209.4401@netcom.com> Date: Sat, 14 Oct 1995 07:42:09 GMT Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: TIN [version 1.2 PL2] Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Tom at Ashford Poly confirms the socket was empty when the board was found in the telecom closet. -- === Freya Dubois === Dept of Electrical Engineering, NETCOM On-Line Communication Services "The carrier frequency does not drift by accident." From ytanaka@demon.co.uk Sat Oct 14 09:23:09 1995 Path: ashpoly!cascade!bigsur!demon!ytanaka From: ytanaka@demon.co.uk (Yuki Tanaka) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct14.092309.5976@demon.co.uk> Date: Sat, 14 Oct 1995 09:23:09 GMT References: <1995Oct14.074209.4401@netcom.com> Organization: Demon Internet Services UK NNTP-Posting-Host: demon.co.uk X-Newsreader: NewsWatcher 2.0b24 Lines: 10 In article <1995Oct14.074209.4401@netcom.com>, fdubois@netcom.com (Freya Dubois) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > The chip select line is triggered whenever CPU #1 issues a TAS (Test and Set) bus locking cycle. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. -- Yuki Tanaka Opinions expressed are solely my own and not those of Demon Internet Services UK. ------------------------------------------------------------ From bnakamura@netcom.com Sun Oct 15 22:18:09 1995 Path: ashpoly!cascade!transat!ukc!fennimore!netcom!bnakamura From: bnakamura@netcom.com (Brian Nakamura) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct15.221809.7418@netcom.com> Date: Sun, 15 Oct 1995 22:18:09 GMT References: <1995Oct14.074209.4401@netcom.com> <1995Oct14.092309.5976@demon.co.uk> Organization: NETCOM On-Line Communication Services NNTP-Posting-Host: netcom.com X-Newsreader: NewsWatcher 2.0b24 Lines: 9 In article <1995Oct14.092309.5976@demon.co.uk>, ytanaka@demon.co.uk (Yuki Tanaka) writes: > That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Brian Nakamura Zyxel U-1496E @ 14,400 bps "We don't sign stars. We build them." From mkang@mit.edu Mon Oct 16 12:45:09 1995 Path: ashpoly!cascade!transat!eunet-fr!teletel!mit!mkang From: mkang@mit.edu (Marisol Kang) Newsgroups: comp.sys.m68k Subject: Re: Discussion: Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Oct16.124509.3074@mit.edu> Date: Mon, 16 Oct 1995 12:45:09 GMT References: <1995Oct14.074209.4401@netcom.com> <1995Oct14.092309.5976@demon.co.uk> <1995Oct15.221809.7418@netcom.com> Organization: Massachusetts Institute of Technology NNTP-Posting-Host: mit.edu X-Newsreader: WinVN 0.99.5 Lines: 8 In article <1995Oct15.221809.7418@netcom.com>, bnakamura@netcom.com (Brian Nakamura) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Marisol Kang -- Massachusetts Institute of Technology "Marcus is not one man."