News for hackers. Stuff that matters.
Re:Secure ROM extraction on iPhone 6S by mschuster91 on Monday December 05, 2016 @04:43PM (#13109960)
Wow. That's some serious skill that went into this.

If the author is reading: how did you develop that multi-layer board? Do you have a PCB fab that can print a board in, say, one or two days time? And how did you assemble that PCIe inject board, given those ultra small SMD parts? Did you order a fully-built PCB or did you do all this by hand?

Re:Secure ROM extraction on iPhone 6S by 5cactuses on Monday December 05, 2016 @06:20PM (#13110821)
Not the author but I can answer your questions. Anyone can have a multilayer board fabbed by uploading the Gerbers to a fab house -- the board shows up on your doorstep anywhere from a day to a month later, depending how much you want to pay. Fine pitch SMD parts can be hand soldered with hot air and a binocular microscope; rework techs routinely do it every day.
Re:Secure ROM extraction on iPhone 6S by mschuster91 on Monday December 05, 2016 @06:33PM (#13110905)
I always tend to burn up PCBs when I try to de-solder broken parts with a hot air station. I usually use 300°C and a small nozzle... but always until the solder melts at the first pin, the PCB turns black-ish. What do I do wrong there?
Re:Secure ROM extraction on iPhone 6S by jeff_marshall on Monday December 05, 2016 @07:43PM (#13111296)
Something I've found helpful is pre-heating the board (e.g., with an under-board IR heater) before breaking out the hot air. As another poster has mentioned, chip-quick is also great stuff.
Re:Secure ROM extraction on iPhone 6S by arcticbull on Monday December 05, 2016 @06:40PM (#13110946)
If you're trying to de-solder a BGA component, I can't help, but any other surface mount stuff check out Chip Quik Alloy. It's a super-low melting point solder that you can use to take off pretty much any non-BGA component with a standard iron and a pair of tweezers. Cleans off with braid.
Re:Secure ROM extraction on iPhone 6S by jrowley on Monday December 05, 2016 @08:01PM (#13111384)
Why not use a plate/skillet for BGA desoldering?
Re:Secure ROM extraction on iPhone 6S by mschuster91 on Monday December 05, 2016 @06:44PM (#13110972)
Thanks for the hint!
Re:Secure ROM extraction on iPhone 6S by lgeek on Tuesday December 06, 2016 @03:09AM (#13113006)
Use higher airflow (including a larger nozzle) and lower temperature. The temperature calibration might be a bit off if the soldermask gets damaged by air at 300°C. Preheating, which has already been mentioned, also helps.
Re:Secure ROM extraction on iPhone 6S by arcticbull on Monday December 05, 2016 @06:38PM (#13110932)
If you want a multi-layer board done up on the cheap (or fast, pick one haha) Oshpark is my go-to. They do 4-layer PCBs for $10/sq in.

Small Batch Assembly (haven't used them yet) should be able to put it together for you if you'd rather not DIY. If you'd like to, though, Osh Stencils, tweezers, some solder paste and a rework station (or a heat gun if you're feeling brave) and you can do a lot at home.

Re:Secure ROM extraction on iPhone 6S by potrebitel on Monday December 05, 2016 @04:49PM (#13110024)
Also, designing a FPGA board is 'half' of the job, putting a verilog or VHDL code is a totally different thing.

The DDR3 routing, the BGA chip, everything on this board 'screams' very hard work, probably not by a single person ( i have to admin I checked the FPGA/board part only )

Re:Secure ROM extraction on iPhone 6S by striking on Monday December 05, 2016 @11:27PM (#13112257)
This could all be done by a single person. A very talented person, sure, but one person could do all of this.

I'm not certain about routing the DDR3 traces, but DIY soldering on a BGA chip isn't the absolute worst thing in the world, and VHDL/Verilog aren't that bad, especially when using the Xilinx tooling. A lot of that code is written for you (and you usually don't have to purchase IP cores... usually)

Re:Secure ROM extraction on iPhone 6S by revelation on Tuesday December 06, 2016 @03:21AM (#13113054)
BGA soldering difficulty seems like somewhat of a persistent myth. Sure, it's difficult to get right if you want to solder a BGA as part of a production line and need to get 99.9% right or it becomes too costly.

But iPhone repair technicians and others are very blase about just using hot air guns and a ton of flux to solder all kinds of BGA chips, and they generally seem to work just fine.

Now DDR3 and USB3 routing is very annoying, but you generally just copy the reference design of the FPGA manufacturer and possibly adjust for your board layup.