That's interesting. Thanks for posting it, Chris!
I wonder what chipset is in this device?
Earlier ECI models in the B-Focus range have been based on the Texas Instruments AR7 SoC which has a MIP32 core.[1] That CPU family was sold by TI to Infineon who then spun-off it off as a separate company, Lantiq.
The CPU in the BT HomeHub3 is a Lantiq XWAY ARX-168, which is also from the AR7 family. But the ARX-168 is only an ADSL2+ solution.
If the ECI is running on a Lantiq CPU, then it would be from the ARX-200 family of VDSL2 single chip solutions.
Are there any signs on the PCB for JTAG or UART? If not, the NAND flash IC could be lifted from the PCB with a hot air rework gun.
If the B-Focus does have a MIPS core, then it is almost certainly running MIPS Linux for which British Telecom and ECI are obliged to supply source code in accordance with the conditions granted under the GNU General Public License. [3]
EDIT:
There is sub-standard security in the ECI ONT for FTTP. [4]. Hopefully the ECI unit shipped for FTTC by BT Openreach doesn't have the same flaw:
habrahabr.ru discovered that a secure shell service is exposed on the WAN-side of the B-FOCuS O-4F2P device with a default username and password configured for every unit.
From those screenshots at [4], we can also see that the device is running MIPS Linux (kernel version 2.6.21.7). Making it even more likely that the ECI unit shipped by British Telecom is running MIPS Linux, too.
cheers, a
P.S. If you find a spare ECI B-Focus to hack, please give me a shout!
[1]
http://www.linux-mips.org/wiki/AR7
[2]
http://www.lantiq.com/products/broadband-customer-pr...
[3]
http://www.gnu.org/licenses/gpl.html
[4]
http://translate.google.com/translate?u=http://habra...
Edited by deleted (Tue 06-Dec-11 02:36:56)
Print Thread
deleted
