# Latest

**URL:** https://discourse.securinghardware.com/latest.md

[Latest](https://discourse.securinghardware.com/latest.md) · [Categories](https://discourse.securinghardware.com/categories.md)

---

## [Welcome to Discourse](https://discourse.securinghardware.com/t/welcome-to-discourse/7)

<div class="topic-metadata">

**Author:** [@system](https://discourse.securinghardware.com/u/system)\
**Replies:** 1\
**Last updated:** [July 26, 2021, 9:38am UTC](https://discourse.securinghardware.com/t/welcome-to-discourse/7 "2021-07-26T09:38:03Z")

</div>

Discussion boards for topics related to Applied Physical Attacks classes as well as general hardware hacking tools and techniques.

---

## [DOA and Customer Support](https://discourse.securinghardware.com/t/doa-and-customer-support/120)

<div class="topic-metadata">

**Author:** [@incibe-lab](https://discourse.securinghardware.com/u/incibe-lab)\
**Replies:** 0\
**Last updated:** [March 3, 2026, 2:04pm UTC](https://discourse.securinghardware.com/t/doa-and-customer-support/120 "2026-03-03T14:04:18Z")

</div>

I keep listening along the videos about contacting you for help, but i had an issue and sent an email but still no response yet. My microscope cam arrived broken and need a replacement, but don’t know who to ask it for,…

---

## [SPI - subtitles broken, English missing](https://discourse.securinghardware.com/t/spi-subtitles-broken-english-missing/117)

<div class="topic-metadata">

**Author:** [@dusk7425](https://discourse.securinghardware.com/u/dusk7425)\
**Replies:** 3\
**Last updated:** [September 2, 2025, 8:10pm UTC](https://discourse.securinghardware.com/t/spi-subtitles-broken-english-missing/117 "2025-09-02T20:10:14Z")

</div>

Selecting subtitles or transcript on at least the first two SPI topics has the languages misconfigured, so selecting English gets you Japanese, selecting Japanese gets you Spanish, and selecting Spanish still gets you Sp…

---

## [JTAG 3 - No IDcode](https://discourse.securinghardware.com/t/jtag-3-no-idcode/113)

<div class="topic-metadata">

**Author:** [@jawn](https://discourse.securinghardware.com/u/jawn)\
**Replies:** 1\
**Last updated:** [June 16, 2025, 9:23pm UTC](https://discourse.securinghardware.com/t/jtag-3-no-idcode/113 "2025-06-16T21:23:09Z")

</div>

I have my TIGARD (set to 3.3V and JTAG) connected to the router: 0 = TDO 1 = TDI 2 = TMS 3 = CLK 4 (WAN) = TRST\_N I have the ground on my TIGARD connected to the ground pin on the UART. I have quadruple-checked my…

---

## [Uart frame errors](https://discourse.securinghardware.com/t/uart-frame-errors/107)

<div class="topic-metadata">

**Author:** [@rce\_hwd](https://discourse.securinghardware.com/u/rce_hwd)\
**Replies:** 1\
**Last updated:** [November 15, 2024, 1:06am UTC](https://discourse.securinghardware.com/t/uart-frame-errors/107 "2024-11-15T01:06:09Z")

</div>

Is it common in the captures for uart to have frame errors after applying the analyzers? I even used different wiring harness and got pretty much the same results.

---

## [Unable to connect bitmagic with Mac M1 pro](https://discourse.securinghardware.com/t/unable-to-connect-bitmagic-with-mac-m1-pro/104)

<div class="topic-metadata">

**Author:** [@jayantsh](https://discourse.securinghardware.com/u/jayantsh)\
**Replies:** 3\
**Last updated:** [July 25, 2023, 9:49am UTC](https://discourse.securinghardware.com/t/unable-to-connect-bitmagic-with-mac-m1-pro/104 "2023-07-25T09:49:02Z")

</div>

I have Ubuntu running on Parallels on mac m1 pro. Ubuntu is again ARM based similar to M1.

---

## [Xiaomao default install](https://discourse.securinghardware.com/t/xiaomao-default-install/99)

<div class="topic-metadata">

**Author:** [@o2f6bsqpc4](https://discourse.securinghardware.com/u/o2f6bsqpc4)\
**Replies:** 1\
**Last updated:** [March 13, 2023, 8:39pm UTC](https://discourse.securinghardware.com/t/xiaomao-default-install/99 "2023-03-13T20:39:52Z")

</div>

When we received the course and Xiaomao software was already installed on it. I can’t seem to find that default sketch. Can anyone point me to where it is. Thanks

---

## [Dropping reset line low without the switch](https://discourse.securinghardware.com/t/dropping-reset-line-low-without-the-switch/95)

<div class="topic-metadata">

**Author:** [@mdulin](https://discourse.securinghardware.com/u/mdulin)\
**Replies:** 3\
**Last updated:** [January 30, 2023, 7:06pm UTC](https://discourse.securinghardware.com/t/dropping-reset-line-low-without-the-switch/95 "2023-01-30T19:06:18Z")

</div>

Hey! For dumping the SPI flash chip, the reset line needs to be low (since it’s active low). On this board, you added a switch to make it easy. How would you go about dropping that line low normally? I want to be able to…

---

## [SSD 6: correlating behavior](https://discourse.securinghardware.com/t/ssd-6-correlating-behavior/93)

<div class="topic-metadata">

**Author:** [@jamesm](https://discourse.securinghardware.com/u/jamesm)\
**Replies:** 2\
**Last updated:** [October 19, 2022, 2:05am UTC](https://discourse.securinghardware.com/t/ssd-6-correlating-behavior/93 "2022-10-19T02:05:50Z")

</div>

I am having trouble making it through all of the steps for this lab. I got some commands together that let me read and write to/from the ssd and I believe I can halt/resume individual cores, but I don’t seem to be getti…

---

## [Fixing serial not taking stdin input for vim](https://discourse.securinghardware.com/t/fixing-serial-not-taking-stdin-input-for-vim/91)

<div class="topic-metadata">

**Author:** [@mdulin](https://discourse.securinghardware.com/u/mdulin)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 5:24am UTC](https://discourse.securinghardware.com/t/fixing-serial-not-taking-stdin-input-for-vim/91 "2022-10-13T05:24:18Z")

</div>

You mentioned that you left this on purpose, Joe. How would you go about fixing it though?

---

## [SPI8 - Alternative connection for Tigard](https://discourse.securinghardware.com/t/spi8-alternative-connection-for-tigard/89)

<div class="topic-metadata">

**Author:** [@kiteboarder4lyfe](https://discourse.securinghardware.com/u/kiteboarder4lyfe)\
**Replies:** 0\
**Last updated:** [August 27, 2022, 8:12pm UTC](https://discourse.securinghardware.com/t/spi8-alternative-connection-for-tigard/89 "2022-08-27T20:12:07Z")

</div>

Can you please share the alternative setup for wiring between Tigard and the router. Went back to the lessons, and the only setup i see is the chip clip. I tried was able to connect to the pins on SPI with the Tigard wir…

---

## [Resetting Router to out of the box settings](https://discourse.securinghardware.com/t/resetting-router-to-out-of-the-box-settings/88)

<div class="topic-metadata">

**Author:** [@kiteboarder4lyfe](https://discourse.securinghardware.com/u/kiteboarder4lyfe)\
**Replies:** 0\
**Last updated:** [August 26, 2022, 9:43pm UTC](https://discourse.securinghardware.com/t/resetting-router-to-out-of-the-box-settings/88 "2022-08-26T21:43:55Z")

</div>

Trying to figure out how to reset the router to how it was out of the box. I tried option (1) from the unbricking instructions by flashing with the openwrt-ramips-mt7620-wr8305rt-squashfs-sysupgrade.bin. It did not work.…

---

## [JTAG 3 - not getting id](https://discourse.securinghardware.com/t/jtag-3-not-getting-id/79)

<div class="topic-metadata">

**Author:** [@ssheahan](https://discourse.securinghardware.com/u/ssheahan)\
**Replies:** 7\
**Last updated:** [June 3, 2022, 9:30pm UTC](https://discourse.securinghardware.com/t/jtag-3-not-getting-id/79 "2022-06-03T21:30:44Z")

</div>

I have the following hooked up on the router: 0 = TDO 1 = TDI 2 = TMS 3 = CLK 4 = TRST\_N Tigard is set to 3.3V. Mode is in JTAG. I am trying to interact with the JTAG TAP but getting weird results. Many times I ge…

---

## ["Vendor" Literature for BEST Model F?](https://discourse.securinghardware.com/t/vendor-literature-for-best-model-f/77)

<div class="topic-metadata">

**Author:** [@bergknacker](https://discourse.securinghardware.com/u/bergknacker)\
**Replies:** 2\
**Last updated:** [May 25, 2022, 11:53am UTC](https://discourse.securinghardware.com/t/vendor-literature-for-best-model-f/77 "2022-05-25T11:53:30Z")

</div>

I am just starting case study #2. The first lab suggests that I look through the fine print/disclaimers, marketing literature, etc. Other than the fine print on the Best Model F box, is there any other documentation I sh…

---

## [JTAG 6: Additional Topics - patching getty](https://discourse.securinghardware.com/t/jtag-6-additional-topics-patching-getty/73)

<div class="topic-metadata">

**Author:** [@m0rv4i](https://discourse.securinghardware.com/u/m0rv4i)\
**Replies:** 2\
**Last updated:** [May 9, 2022, 6:48pm UTC](https://discourse.securinghardware.com/t/jtag-6-additional-topics-patching-getty/73 "2022-05-09T18:48:29Z")

</div>

Hey, Just checking my understanding of what’s going on when we patch the getty binary: when the device boots the kernel loads and mounts the filesystems from the flash chip into memory, we’re patching this version of ge…

---

## [SPI 4: Observation - Alternate Wiring](https://discourse.securinghardware.com/t/spi-4-observation-alternate-wiring/70)

<div class="topic-metadata">

**Author:** [@m0rv4i](https://discourse.securinghardware.com/u/m0rv4i)\
**Replies:** 2\
**Last updated:** [May 9, 2022, 6:16pm UTC](https://discourse.securinghardware.com/t/spi-4-observation-alternate-wiring/70 "2022-05-09T18:16:56Z")

</div>

Hi, Just wondering if there any more details on why the chip clip → Tigard → Bitmagic setup doesn’t work and a firmware update etc was ever able to fix it (as it seems like useful functionality)? I tried it using the a…

---

## [JTAG: 3 onward .... registers showing only 0x00000000?](https://discourse.securinghardware.com/t/jtag-3-onward-registers-showing-only-0x00000000/49)

<div class="topic-metadata">

**Author:** [@kitemaker](https://discourse.securinghardware.com/u/kitemaker)\
**Replies:** 9\
**Last updated:** [May 9, 2022, 5:40pm UTC](https://discourse.securinghardware.com/t/jtag-3-onward-registers-showing-only-0x00000000/49 "2022-05-09T17:40:33Z")

</div>

Joe, I’m at a point where I think ‘the wheels came off the track’ … I definitely have openOCD connected to the router’s JTAG and the ‘halt’ command appears to be working, but ‘reg’ and the other related register command…

---

## [SPI 7: Target Preparation Thermal Paste](https://discourse.securinghardware.com/t/spi-7-target-preparation-thermal-paste/69)

<div class="topic-metadata">

**Author:** [@m0rv4i](https://discourse.securinghardware.com/u/m0rv4i)\
**Replies:** 1\
**Last updated:** [May 9, 2022, 5:19pm UTC](https://discourse.securinghardware.com/t/spi-7-target-preparation-thermal-paste/69 "2022-05-09T17:19:53Z")

</div>

Hi! My board had a big blob of thermal paste spilling over the side of the chip which made it impossible to count the pins when trying to locate the reset pin, I tried angling the board in the microscope but ended up ha…

---

## [SVF file generation using tigard](https://discourse.securinghardware.com/t/svf-file-generation-using-tigard/72)

<div class="topic-metadata">

**Author:** [@nsuazo](https://discourse.securinghardware.com/u/nsuazo)\
**Replies:** 1\
**Last updated:** [May 9, 2022, 5:10pm UTC](https://discourse.securinghardware.com/t/svf-file-generation-using-tigard/72 "2022-05-09T17:10:52Z")

</div>

I am on SSD 6 and I am attempting to work on .svf file generation so I can learn how it is done and utilized. I am unable to find any specific software other than that produced by AMD’s Xilinx and Intel’s Cyclone branche…

---

## [Typo on link in JTAG 3?](https://discourse.securinghardware.com/t/typo-on-link-in-jtag-3/61)

<div class="topic-metadata">

**Author:** [@angel](https://discourse.securinghardware.com/u/angel)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 6:31pm UTC](https://discourse.securinghardware.com/t/typo-on-link-in-jtag-3/61 "2022-03-03T18:31:21Z")

</div>

On lesson JTAG 3: Interacting, there’s a line that reads: Continue with the hardware setup we prepared in JTAG Lab 2. Where JTAG Lab 2 is a link to https://learn.securinghardware.com/courses/applied-physical-attacks-1…

---

## [I2c Wiring Harness?](https://discourse.securinghardware.com/t/i2c-wiring-harness/60)

<div class="topic-metadata">

**Author:** [@AndrewMohawk](https://discourse.securinghardware.com/u/AndrewMohawk)\
**Replies:** 2\
**Last updated:** [December 16, 2021, 8:31pm UTC](https://discourse.securinghardware.com/t/i2c-wiring-harness/60 "2021-12-16T20:31:54Z")

</div>

I’d like to know where one can purchase the i2c harness, I dont have one included with my tigard and i’d like to look at an EEPROM that is embedded on a device but connecting by hand to those pins is gonna make me sad, c…

---

## [UART 5: Powering router for UART data exchange](https://discourse.securinghardware.com/t/uart-5-powering-router-for-uart-data-exchange/57)

<div class="topic-metadata">

**Author:** [@angel](https://discourse.securinghardware.com/u/angel)\
**Replies:** 3\
**Last updated:** [October 22, 2021, 3:22am UTC](https://discourse.securinghardware.com/t/uart-5-powering-router-for-uart-data-exchange/57 "2021-10-22T03:22:05Z")

</div>

I don’t think I fully understand the purpose of the voltage selector on the Tigard board. On lab UART 5: Common Interfaces. We are asked to connect to the router through UART. The router has its own power source, why …

---

## [Firmware 5: Binary Manipulation (Spoilers)](https://discourse.securinghardware.com/t/firmware-5-binary-manipulation-spoilers/51)

<div class="topic-metadata">

**Author:** [@abc](https://discourse.securinghardware.com/u/abc)\
**Replies:** 3\
**Last updated:** [June 7, 2021, 7:06pm UTC](https://discourse.securinghardware.com/t/firmware-5-binary-manipulation-spoilers/51 "2021-06-07T19:06:38Z")

</div>

I have the modified kernel running! :tada: Key steps required: The uImage header contains 2 CRCs and an image size. These three values must be modified. The squashfs filesystem starts immediately after the compressed …

---

## [JTAG SVF recording + boundary scan](https://discourse.securinghardware.com/t/jtag-svf-recording-boundary-scan/44)

<div class="topic-metadata">

**Author:** [@abc](https://discourse.securinghardware.com/u/abc)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 11:21pm UTC](https://discourse.securinghardware.com/t/jtag-svf-recording-boundary-scan/44 "2021-05-04T23:21:10Z")

</div>

Is there a simple way to record an SVF? I ran the mww with openocd in debug mode and also recorded it with the BitMagic, but the output was quite busy with many commands so I wasn’t sure if it was all necessary. How wou…

---

## [UART: Memory map](https://discourse.securinghardware.com/t/uart-memory-map/45)

<div class="topic-metadata">

**Author:** [@abc](https://discourse.securinghardware.com/u/abc)\
**Replies:** 1\
**Last updated:** [May 3, 2021, 5:27pm UTC](https://discourse.securinghardware.com/t/uart-memory-map/45 "2021-05-03T17:27:53Z")

</div>

The SPI Flash data is mapped at 0xbc000000, but where is this address defined? Is it defined in the bootloader (and could actually be changed) or is the address part of the MT7620 specification? I found this memory map …

---

## [CPE Credit Value](https://discourse.securinghardware.com/t/cpe-credit-value/38)

<div class="topic-metadata">

**Author:** [@db9923](https://discourse.securinghardware.com/u/db9923)\
**Replies:** 1\
**Last updated:** [April 19, 2021, 5:32pm UTC](https://discourse.securinghardware.com/t/cpe-credit-value/38 "2021-04-19T17:32:27Z")

</div>

How many Continuing Professional Education (CPE) credits is the APA #1 class worth? Please pick a number that won’t change over time and ideally post it somewhere publicly on the course website. If you think the number…

---

## [SPI 5/6: Just wondered why we can't boot](https://discourse.securinghardware.com/t/spi-5-6-just-wondered-why-we-cant-boot/40)

<div class="topic-metadata">

**Author:** [@abc](https://discourse.securinghardware.com/u/abc)\
**Replies:** 1\
**Last updated:** [April 19, 2021, 5:21pm UTC](https://discourse.securinghardware.com/t/spi-5-6-just-wondered-why-we-cant-boot/40 "2021-04-19T17:21:54Z")

</div>

Why won’t the system boot fully with the SPI clips attached? Is there a way around this? I did a bit of investigation, and you can boot the system fine with 1, 2 and 5 connected, but attaching a probe to the clock messe…

---

## [SPI 7: Target Preparation - SPI vs. eMMC](https://discourse.securinghardware.com/t/spi-7-target-preparation-spi-vs-emmc/35)

<div class="topic-metadata">

**Author:** [@db9923](https://discourse.securinghardware.com/u/db9923)\
**Replies:** 1\
**Last updated:** [April 9, 2021, 12:26am UTC](https://discourse.securinghardware.com/t/spi-7-target-preparation-spi-vs-emmc/35 "2021-04-09T00:26:09Z")

</div>

My understanding is that the whole reason we have to force the MCU into a reset state is because we are powering the board and when the board is powered the MCU will try to control the SPI flash chip. The reason we are …

---

## [JTAG 2: Enabling](https://discourse.securinghardware.com/t/jtag-2-enabling/36)

<div class="topic-metadata">

**Author:** [@db9923](https://discourse.securinghardware.com/u/db9923)\
**Replies:** 1\
**Last updated:** [April 9, 2021, 12:02am UTC](https://discourse.securinghardware.com/t/jtag-2-enabling/36 "2021-04-09T00:02:06Z")

</div>

In order to enable JTAG we researched the CPU’s Bootstrapping Pins. Are Bootstrapping Pins a common feature on MCUs that we would expect to find on most devices or is this a rare occurrence and we just got lucky on this…

---

## [SPI 7: Target Preparation](https://discourse.securinghardware.com/t/spi-7-target-preparation/30)

<div class="topic-metadata">

**Author:** [@db9923](https://discourse.securinghardware.com/u/db9923)\
**Replies:** 3\
**Last updated:** [April 7, 2021, 5:32am UTC](https://discourse.securinghardware.com/t/spi-7-target-preparation/30 "2021-04-07T05:32:30Z")

</div>

It looks like you added a switch and push button between RC1 and R130. Connecting to RC1 makes sense because that is connected to the reset PIN (PORST\_N) which we are trying to short and it is larger than the neighborin…

[Next page](https://discourse.securinghardware.com/latest.md?page=1)