±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35875
New Yesterday: 3 Visitors: 148

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

iPad 2 Chip off

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

Deltron
Senior Member
 

iPad 2 Chip off

Post Posted: Feb 21, 17 00:53

Anyone know what SD Chip reader from teeltech is needed to read the ipad 2?
Doing research right now, but if anyone knows.
www.teeltech.com/mobil...ader-kits/  
 
  

Igor_Michailov
Senior Member
 

Re: iPad 2 Chip off

Post Posted: Feb 21, 17 00:54

I've used PC 3000 Flash.
_________________
Computer, Cell Phone & Chip-Off Forensics

linkedin.com/in/igormikhaylovcf 
 
  

Bolo
Senior Member
 

Re: iPad 2 Chip off

Post Posted: Feb 23, 17 00:40

iPhone/iPad doesn't uses eMMC memory (integrated controller with NAND) but NAND flash instead - you cannot then use SD card reader to connect with such types of memory since communication are not held over CLK/CMD/DAT lines so eMMC protocol but over NAND (CE, RE, R/B, I/O signals). If you will look to NAND you can compare it to memory used in older phone or in USB sticks (PenDrive) or SD Cards.

There are many of devices which support NAND protocol as PC3000 (AceLab), FE or VNR (Rusolut) - some info about NAND structure in iPhone 4 as example here - web.archive.org/web/20...fdff9.pdf, you will have more information on Internet
_________________
Multi-COM - Bogusław Rzepka 
 
  

Deltron
Senior Member
 

Re: iPad 2 Chip off

Post Posted: Feb 23, 17 01:14

- Bolo
iPhone/iPad doesn't uses eMMC memory (integrated controller with NAND) but NAND flash instead - you cannot then use SD card reader to connect with such types of memory since communication are not held over CLK/CMD/DAT lines so eMMC protocol but over NAND (CE, RE, R/B, I/O signals). If you will look to NAND you can compare it to memory used in older phone or in USB sticks (PenDrive) or SD Cards.

There are many of devices which support NAND protocol as PC3000 (AceLab), FE or VNR (Rusolut) - some info about NAND structure in iPhone 4 as example here - web.archive.org/web/20...fdff9.pdf, you will have more information on Internet


Thanks this is very helpful.
Any advice on where to get resources to further my education on this topic.
My main experience has been hands on.  
 
  

Bolo
Senior Member
 

Re: iPad 2 Chip off

Post Posted: Feb 23, 17 01:19

I think that best will be start from ONFI which standard created for biggest companies producing NAND flash (Hynix, STM, Micron, Phison etc) - look at www.onfi.org/~/media/o...0_gold.pdf

If you are looking for training from NAND I can suggest to contact Sasha from Rusolut and apply for such training class - you will for sure not disappoint after Wink

P.S
iPhone/iPad uses LGA52 socket if you wish to read them out
_________________
Multi-COM - Bogusław Rzepka 
 
  

segumarc
Newbie
 

Re: iPad 2 Chip off

Post Posted: Feb 23, 17 18:42

Maybe you could look to the Ipbox2, it seems to support the ipad2  
 
  

Bolo
Senior Member
 

Re: iPad 2 Chip off

Post Posted: Feb 24, 17 01:23

If somebody ask for a equipment for this you got right - you can use any device which support NAND protocol so even very old programmers at 10 US only or very sophiscated NAND readers which you can analyse Data Area (of course you will need describe Spare/ECC too) as also get access to Unallocated space .... my question in this particual case is: for what ?

Question for what is because starting from A5 chip (used in this case so iPad 2) NAND are encrypted with 256bit AES at the hardware level - after chip off you will get something usually called "noise" Wink So you cannot parse it at any way... only approach for such one was already been given on forum and is similar to latest models - you will need to swap NAND, processor and eprom to new board (if this one is damaged/flooded) and then you can perform data extraction for recovery analysis (ofcouse I assume you got passcode for it - if not then next step need to be done)
_________________
Multi-COM - Bogusław Rzepka 
 

Page 1 of 2
Page 1, 2  Next