Reading embedded firmware from device (TSOP48 Nand flash)

[tomputer]

Dear all,


I would like to read the content of a nand flash that is in a device.
Preferably it should be done in a forensically sound way and without having to unsolder the chip.
Ooh and of course, to make it easy, the budget is close to zero.

The device has JTAG. However it seems to be disabled (?!).

What would be the best way?

This method scares me a bit:
http://busydizzys.com/index.php/2010/12 ... ut-removal

I know that test clamps exist for TSOP48 chips. I've never used them. To what does one connect the clamps (on the computer side, I mean)?

Is there anyone that wants to share his/ hers hands on experience with reading nand flash from an embedded device?


Kind regards,
Tom

[BlackST]

I remove them and with pro equipment is 99.9 percent safe.

[fzabkar]

I've always considered doing something similar, especially on SSDs where I expect that the chips would share a common data bus. In fact it may be quite easy on those SSDs where one side of the board is not populated.

Perhaps you could make up a flex cable with an identical pitch and attach it to the SSD using 3M Scotch 9703 conductive tape:

http://products3.3m.com/catalog/ca/en00 ... utput_html

"Tape 9703 is an isotropic, electrically conductive, pressure
sensitive adhesive (PSA) transfer tape. It is a permanently tacky
system consisting of a PSA matrix with aligned conductive particles.
These particles allow electrical conduction through the adhesive
thickness ("Z-axis"), but not in the plane of the tape."

[BlackST]

About 70$ for a reel of 9703 1/2" , about 100$ for the 1" that maybe is better .
Add the flex,shipment and the rest (and to me it's not going to work)

Quote :

Preferably it should be done in a forensically sound way and without having to unsolder the chip.
Ooh and of course, to make it easy, the budget is close to zero.


Maybe it's better to unsolder or ask someone who has the right probes to do the job (I paid such probes a lot of money years ago :S) or tell that some digging in the pockets is necessary if data is really needed.
Still a suitable programmer is needed for dumping the contents, depending on the chip.

[pcrecovery]

Just spend the money and get a good clip. Good contact is essential, besides, if you are doing real forensics, the cost of the clip is insignificant IMHO. Something like this: http://adapt-plus.com/products/test_clips_probes/pdf/8800-0150.pdf should work. If this isn't what you had in mind, check with Emulation technology, as they have things most don't.

[rameez]

My friend it is easier to remove and solder it .