Nano 2G

[markun]

We now have a tool which lets us run code directly from RAM through the DFU mode of the Meizu players (which have the same Samsung CPU as the Nano 2g and Shuffle 2g)

I've seen some posts online about Nanos and Shuffles being stuck in DFU mode. Does anyone know how to trigger this mode? The Meizu's have a special key combo, but perhaps it only works with a broken firmware on the apples.

If we can get our code running we could try to dump the internal firmware by flashing the backlight for example

[tucoz]

Maybe the tools found on this page will help. They say can be used to communicate with ipods, which looks promising.
http://www.jungo.com/st/usb_ipod_driver.html
http://www.jungo.com/st/usb_dfu_driver_firmware_upgrade.html

[saratoga]

We now have a tool which lets us run code directly from RAM through the DFU mode of the Meizu players (which have the same Samsung CPU as the Nano 2g and Shuffle 2g)

I've seen some posts online about Nanos and Shuffles being stuck in DFU mode. Does anyone know how to trigger this mode? The Meizu's have a special key combo, but perhaps it only works with a broken firmware on the apples.

If we can get our code running we could try to dump the internal firmware by flashing the backlight for example

Shorting out some of the data pins or the chip enable pin on the NAND would be a good bet.

[LambdaCalculus]

I've taken the liberty of whipping up a very preliminary wiki page for the 2nd gen nano:

http://www.rockbox.org/twiki/bin/view/Main/IpodNano2GPort

Any good, useful information anyone has can go up there now.

(EDIT) I found DFU Mode on the 2nd gen nano. Basically I reset the iPod while it was attached to the PC, then hit BACK+PLAY. This brought up an image of the dock connector with the Apple support URL printed underneath.

Do be warned, however, that you have to destroy the firmware partition first!

lsusb -v in Linux shows this:

Code: [Select]

Bus 003 Device 025: ID 05ac:1240 Apple Computer, Inc. 
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0 (Defined at Interface level)
  bDeviceSubClass         0 
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  idVendor           0x05ac Apple Computer, Inc.
  idProduct          0x1240 
  bcdDevice            0.01
  iManufacturer           1 Apple Computer, Inc.
  iProduct                2 iPod Recovery
  iSerial                 3 87010000000001
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength           27
    bNumInterfaces          1
    bConfigurationValue     1
    iConfiguration          0 
    bmAttributes         0x80
      (Bus Powered)
    MaxPower              100mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           0
      bInterfaceClass       254 Application Specific Interface
      bInterfaceSubClass      1 Device Firmware Update
      bInterfaceProtocol      2 
      iInterface              0 
Device Qualifier (for other device speed):
  bLength                10
  bDescriptorType         6
  bcdUSB               2.00
  bDeviceClass            0 (Defined at Interface level)
  bDeviceSubClass         0 
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  bNumConfigurations      1
Device Status:     0x0000
  (Bus Powered)

Looks like we're starting to get somewhere now.

[Donny]

I have a 2nd gen ipod nano 8gb, and I was wondering if there is anyway that I can do tests like thease.

[GodEater]

Sure, there's no-one stopping you.

[Donny]

I meant to ask if somebody could help me figure out how, i have no idea how to even attempt this.

[NicolasP]

I'm afraid this is a situation where no one can hold your hand and guide you through the process. If you want to help, you'll have to educate yourself to be able to achieve it. You can learn an awful lot, but getting up to speed requires great motivation, patience and plenty of time. This is especially true in the case of the Nano 2G, because of the encryption.
Basically, if it were simple enough that someone could tell you what to do to get things going, they would already have done it.

[sinless]

I have two nano2G,a 4GB RED and a 2GB sliver,Last week the 4GB one was broken...Then i removed its flash to the 2gb one,and it works well now.....Also,I dumped all the chips from the broken one(use the hot air),Can it help port rockbox onto nano2g?

[saratoga]

What chips did you dump?  And how did you do it?

[sinless]

cpu ram....all the chips.but i don't how to do next..(see this http://home.gna.org/linux4nano/dumping_SST39WF800A.html)
I dumped them successfully.but can't do any more.

[saratoga]

You mean you removed them from the PCB?

[sinless]

Yes,I removed all the chips from the pcb.

[boxerorange]

Hi. I recently took apart a 2nd Gen Nano and have high resolution photos of it.

I am hoping to help contribute to the scene.

[LambdaCalculus]

Those photos should go to the wiki, then.