[Q] JTAG without RIFF?

[UGART3]

Does anyone know how to initiate a JTAG with out the riff box. Im more than capable of jtaging and have tons of tools as I am an electrical engineering student. Im not getting definitive answers from people online they all want me to send the my phone and $50 to them. I know you can get RIFF software from theyre site but I wont pay $150 for the RIFF box.

 

[Dani897]

adam oulter has also suggested this is possible in a thread but he never tried it. he seems to have an idea of what you need. like a computer with a parallel port and software but i think he is trying to avoid the need to try it untill he has a way to force download mode and flash the normal way even with bad bootloaders or param.ifs. that is what he is actively developing and he wants the jtag to be a backup, and the riffbox service from connexion is a backup for his backup.

 

[UGART3]

re:

I spoke with someone from mobile tech videos on youtube about jtagging with out RIFF he said "ORT Tool or maybe the SPT box but both require the same level of soldering. I must warn you though, the Captivate is most likely harder to solder than anything you have ever done. It's pads are .1mm in size and spacing and I know many electrical engineers that consider it extremely challenging." Im just freaking out because my baby (captivate) is dead. Maybe Ill just go play dumb at AT&T or blame it on KIES since Ive seen people say the bricked the bootloader with kies

 

[TRusselo]

if the phone doesnt boot they cant prove anything.

Dont blame it on keis. none of the keis updates touch bootloaders. so this should not happen. dont blame bootloaders at all.

ALL YOU SAY "it stopped working. i woke up, it was dead"
THATS ALL YOU NEED TO SAY.

 

[AdamOutler]

adam oulter has also suggested this is possible in a thread but he never tried it. he seems to have an idea of what you need. like a computer with a parallel port and software but i think he is trying to avoid the need to try it untill he has a way to force download mode and flash the normal way even with bad bootloaders or param.ifs. that is what he is actively developing and he wants the jtag to be a backup, and the riffbox service from connexion is a backup for his backup.

That about sums it up... however we are exploring UART, I2C, Serial, USB, and all other methods of communications supported by the Application processor... maybe even tunnling though the call processor into the application processor... Basically, if we can get something into memory and then tell the processor to execute that code, we'd be in business.

There's about 25 total external pins available on the phone, two of which we believe make up the "EXT-I2C" bus. This would allow almost direct communication with the Application Processor and OneNand. .... Gotta find those pins.

There's nearly 20 test-points on the main-board inside the phone... 5 of those testpoints are likely the "OM" pins. If we can locate and apply 3.7VDC to OM5, then we can get the memory value OM=9 to change to OM=10+ which would allow booting from the external MMC card.

Research still needs to be done and the single diagnostic output we have located thus far is UART which uses the USB port... 619kohm resistor between pins 4-5, and read/write to D+ and D- on the USB port.


All of these things need help. You can help with your brick. Bricks will put out UART communications.

I spoke with someone from mobile tech videos on youtube about jtagging with out RIFF he said "ORT Tool or maybe the SPT box but both require the same level of soldering. I must warn you though, the Captivate is most likely harder to solder than anything you have ever done. It's pads are .1mm in size and spacing and I know many electrical engineers that consider it extremely challenging." Im just freaking out because my baby (captivate) is dead. Maybe Ill just go play dumb at AT&T or blame it on KIES since Ive seen people say the bricked the bootloader with kies

You can contact Connexion2005. He can JTAG your phone. it's been made easy now because I located the proper jacks and recepticals, and had a couple of receptical circuitboards made for JTAG.

 

[AdamOutler]

Just to clarify...... my definition of brick...

1. black screen
2. unresponsive to buttons or button combos
3. appears to operate equally with or without the battery
4. 301Kohm resistor between USB pins 4-5 is not effective

If it does not meet those qualifications, then it's not really bricked. it just needs to have software reloaded.

 

[UGART3]

Im gonna give the jig a whirl just in case. i think I got a waranty on my phone so if jig dont work I may just tell ATT its stolen, get a new one and use the old one for testing. Ill post results of the jig afterwards. Can I just use a micro usb wall plug for jig, I only got 1 USB-micro cable and I aint cutting it lol.

 

[AdamOutler]

Which jig? Usb or uart?

 

[UGART3]

I tried to just use resistors only and I had 270k and 39k ohms which reads 298.8k on my DMM and on mobile tech videos he said he did it with 295k so it should work......but it didnt. Ripped apart my ONLY micro usb cable cable tried to touch the leads to the resistors......nothing ://....soldering Iron is warming up gotta make sure leads are solid.

 

[UGART3]

Well I guess its off to AT&T lol cuz it aint doin nothin right now. Its $125 deductible If i say i lost it so no candidate for a lab rat. Now i gotta rock this busted old cracked screen samsung solstice til I get my new one. I appreciate your help immensely guys, this is why I love this community.

 

[connexion2005]

The RIFF will run you closer to $225 after shipping as it's all overseas and they only ship with big carriers and ground shipping.

 

[AdamOutler]

I've been pricing them at $190 on ebay.

 

[connexion2005]

I've been pricing them at $190 on ebay.

This is true if you can find the parcel post China sellers. Good luck if you ever need support though or a return! There are definitely some defective boxes floating around that will have you pulling out your hair until your realize it's a RIFF hardware defect. One of my boxes I believe has an issue with i897 ressurection and has me thinking it's why I was successful on the the i897 I did a few days back.

 

[fahad786]

Hi to all can someone tell me how to open riff jtag manager without box

 

[machv5]

Just to clarify...... my definition of brick...

1. black screen
2. unresponsive to buttons or button combos
3. appears to operate equally with or without the battery
4. 301Kohm resistor between USB pins 4-5 is not effective

If it does not meet those qualifications, then it's not really bricked. it just needs to have software reloaded.

I have a captivate board that you can have if you want it. I believe that it is softbricked. Though due to the busted screen I can't say for sure. I have a T959D screen that doesn't have a board which I have dremeled here and there to be able to accept the captivate board which you can have too.

If you can cover shipping it's yours or if I pay shipping could you help me with unbricking my SGH-I727R. I bricked it during a failed ODIN flashing of clockworkmod. For some reason the partition box got auto ticked the second time by the time I stopped my wide eyed loud inhale "OHHH NOO" it was all over.

I can get QHUSB mode. At least I was able to until the USB gave out. I had another USB board but it came from a corroded phone and during the cleaning I knocked off two resistors. I salvaged the same two resistors I knocked off from a the broken board. The person I got the phone from somehow managed to melt the USB cable to the phone, how this was achieved I haven't a clue.

Anyway I haven't gotten around to soldering the resistors to the board yet, I was waiting for a new soldering iron to come come in. It did the other day and I have to pick it up. Sorry for the rambling if you would like the captivate board to play with and or the T959D's screen let me know and we can arrange shipping etc...Thanks