max

[ed12]

this is u12/u13
u10 i am thinking about
legal for the site etc...
but this should get u going
remeber the dallas chip beside u13 is useless

ed

[mahkeymike]

What exactly are these u12/u13 purpose? Do they contain config data for specific game versions? I am willing to bet that these old XL/Maxx systems used Dallas square security chips that only hold the unique ROM ID to tell the software it matches. Then the u12/u13 would hold config data for specific game year and country?

Just trying to understand and compare to how Force/Ion works. In which the ibutton key contains both the unique ROM ID and the connfig data via Non Volatile memory (NVram).

[ed12]

ok this much we can go public with
u10 hold's the unquie key..which is hashed..that aside
u12 hold's all of the game's data
u13 which is a flash chip hold's the game id >hash routine< and serial #..
it is contained in flash so as to never be removed >power loss/battery loss< etc
but that said it is :flashed: so it can be re-writen on the fly..old school thinking here
that is the way to c it..
with the .img's u can in asci perty much see it and edit it..
but understand, u must which i know u do mike, understand hex-editor's
and hexcsum..
but these 2 file's put u square in the driver's seat
the key is olny used for the first and second layer chk's of there mbr..why i do not know?
but my best guess is to make sure it is the proper game,and harddrive..
seem's a little to controlling to me..but whom am i to guess the mind's of now un-paid eng's

ed

[mahkeymike]

Ok this is making more sense. When they switched to the ibutton key with XL/Maxx , did you still need u12/u13? Because the ds1995/6 ibuttons contain all of it (unique id, serial, game data)

[ed12]

all but game data..ie game's
but every thing else is contained in the i-button
reason is it is 512k + where the small chip is at best 1k
the hash take's place between the harddrive and the i-button
where in max it was done in the flash
this was the reason for the :branding's:
of the mbr..and not because of size..as most ppl had thought
i can blow that theroy out the door in a new york sec..
same with ppl saying u cannot run sata in a ion which came with a ide..i go wtf are u talking about?,it is board support layered...
but back on topic,if u disamble the eprom,u are more then 1/2 the way there...i cannot stress that enough...!!!!,the flash was inculde..so  could see the key is truly not required..
in the ion's they did a 4 chk-sum of the mbr layer..hence the reason u see the game reboot
serval time's /root/echo on,if i rem the cmd right..and u will see it do a chksum
that is it polling the :key:.......

the olny reason they went to the i-button which i should use the @r
is because dallas put the other 1 on the nla list..

ed

[mahkeymike]

hmm....
So your saying the unique id on the dallas sec chip/key was checked on the flash chips, not the software on the hard drive? What year did this change?

Are these u12/u13 chips on the Maxx IOboards aswell, or only on the XL?

[ed12]

the information i posted is good right to the i-button@r
once they went i-button@r that was the game changer
btw sorry about the @r but it is required of me from maxium/dallas

in the eprom dump and the flash scrool until u find the word merit
your hash is just above it

ed

[mahkeymike]

Ok but there is no ascii in a "i-button@r" lol
So no "merit" to find a hash above.
The data in the ds1995/6 are encrypted.

[ed12]

there is but it is in the hash,it was removed with the branding b.s we had to put up with..

and i know i have to lol at @r but if they find i post with out it
ring ring goe's the telle..mister so and so..u forgot to do some thing

ed

[mahkeymike]

Unless you work for maxim i doubt they care if you use there trademark but what ever floats ya boat brah.

Anyway, at this point im pretty much not even concerned with anything below 2006. I may play around with Crown but i need to look at the bottom of a Crown i-button@r 

Im pretty much just interested in Force and Ion. And i know alot about the inner workings of Force.

[ed12]

i'm with u
just alot of ppl do not unerstand the legacey stuff,...
radion/fource/ion, became all the same to me..after seeing the mobo swap's,i/o swap's
crt to lcd/power supply to power supply/hardrive's from ide to sata-to size..it became relative..
olny thing that never truly changed was the key# to the o/s
ie 06 must match 06 etc etc..until my little brain caught on to a neat little post i saw about linux ..i went yup yup that will do it fine and dandy ...

as to the @r if u are reged in dallas site u must end the line that way when refering to :there:
code,in any response to the code set..if not they get real anal..i took a 15 day ban for not doing it..if u are reged in the xlink ftp site it is right in there disclaimer....
or they ban u for 30 day's.

ed

[mahkeymike]

Yes, the post i made about a back door into Force/Ion is not illegal in anyway so feel free to mention it. I am only concerned about posting copy write code. I have posted no such thing. Honestly, I dont even know if they hold them anymore. The law states (at least US law) you are allowed to backup one copy of software/hardware as long as you own the original. These keys have a battery that has a shelf life of 10 years. 2004 keys are almost up. These keys cannot be copied because of the laser etched ROM ID. Technically they should have to replace these, or release the source code if enough people filed a lawsuit.

[ed12]

that is now in the work's
i will when it come's up post u the nessary site to go to..u can then log your compliant..
as it i it turns out merit did a major no no when they sold out to ami/rowe
because of the nda's..so as anyone would see it 10 year's key life..is not a reason to drop support...which ami/rowe did..so it end's up free rain..
so in truth we should beable to post key code's etc etc..
problem is they still lean on there dam nda..it's like into puriptiy
just never end's..
so i tend to not post it public..
this dose not mean i cannot guide u....
what i cannot post is the .hex/.img/.bin/de-compiled code for the key
but u can, and i can tell u can. catch on to what i am saying..
never said i cannot tell u were to look..and there handler's
xlink is a very handy little >programble gate arry<

ed

[mahkeymike]

Yes i do, and yes i have already. I will guide others in the right direction, but i will not sugar coat it. But while were at it, i see no reason to stop 1/2 way. If you know what im say'n. Having a copy of a key you own is nice, but while were at it, why have the need for a key at all. Especially when the company wont support the hardware, the software, or the damn key.