Hacking ARM TrustZone / Secure Boot on Amlogic S905 SoC

Amlogic S905 processor used in many Android TV boxes and ODROID-C2 development board implements ARM TrustZone security extensions to run a Trusted Execution Environment (TEE) used for DRM & other security features. However, Frédéric Basse, a security engineer, worked with others and managed to bypass secure boot in one Amlogic S905 powered Android TV box, namely Inphic i7, but any other device based on the processor would have made the same thing possible. He explains the steps they went through and how they managed to exploit vulnerability to bypass secure boot in a detailed technical blog post. They first started by looking for info in Amlogic S905 datasheet, but most info about TrustZone had been removed from the public version. So not that much help here except a potential address for BOM Root (ROMBOOT_START   0xD9040000). The next step was to connect the UART pins in order to access the serial console, but he could not read the BootROM from …

Support CNX Software – Donate via PayPal or become a Patron on Patreon

Amlogic S905X Boards Showing Up for Eny Technology and Inphic TV Boxes

While NEXBOX A5 was the first Amlogic S905X TV box to be announced, it’s still not available, and others has started to show off their products such as Xiaomi Mi Box (US), and I got specs and pictures of boards for Inphic Spot i7 Pro and Eny TV box. Eny TV Box Board and Specifications That’s actually two boards before separation, and fitted with Amlogic S905X-H processors. If you look closely are the “silkscreen” however, you’ll find that it has been edited in a photo editor to add ENY_X_V0.93. I’m not quite sure why they felt they had to do this… Eny TV box specifications: SoC –  Amlogic S905 or S905X-H quad core ARM Cortex-A53 @ up to 1.5GHz or 2.0 GHz with penta-core Mali-450MP GPU @ 750 MHz System Memory – 1 or 2GB DDR3 Storage – 8 or 16GB flash + micro SD card slot Video Output – HDMI 2.0a up to 4K @ 60 Hz, and AV …

Support CNX Software – Donate via PayPal or become a Patron on Patreon

Inphic SPOT i5 Android Media Player Costs only $25 (Promo)

If the trend continues, they’ll soon just giveaway TV boxes. After writing about Beelink X2 TV box selling for $31.99 shipped yesterday, I learned that Inphic is organizing a promotion for the launch of their cute Inphic SPOT i5 media player based on Amlogic S805 processor. While the regular price is $26 plus shipping, they’ll offer the first 100 samples for just $13 plus shipping starting at midnight on October 27 (GMT-8), which amounts to $24.22 to my location, and about $25.15 to the US. Inphic i5 specifications: SoC – Amlogic S805 quad core ARM Cortex A5 @ 1.5GHz with Mali-450MP GPU System Memory – 1 GB DDR3 Storage – 8 GB NAND flash + micro SD slot up to 32GB Video & Audio Output – HDMI 1.b up to 1080p60 with CEC support Connectivity – 10/100M Ethernet, 802.11 b/g/n Wi-Fi (Realtek) USB – 1x micro USB OTG port Misc – IR receiver, power button and LED Power Supply – …

Support CNX Software – Donate via PayPal or become a Patron on Patreon

Inphic i8 Android Media Player Supports VP9 and H.265 Video Codecs, Features Allwinner H8 Processor

Allwinner H8 a new octa-core Cortex A7 processor for low cost Full HD media players with H.265 & VP9 codec support, and one the first product using the new Allwinner H-Series processor is Inphic i8, which sells for as low as 349 CNY (~$57) on JD.com and it’s also available on Taobao for 499 CNY (~$80). Some Inphic i8 boxes are available on Aliexpress, but so far all models are based on Allwinner A31s, promoted as quad core processor eight core GPU boxes, so don’t be fooled. Inphic i8 (Allwinner H8) specifications: SoC – Allwinner H8 octa-core Cortex-A7 processor @ 2.0GHz with PowerVR SGX544 GPU up to 720MHz System Memory – 1GB or 2GB DDR3 Storage – 8, 16, or 32GB internal storage Video Output – HDMI up to 1080p, Composite output (RCA) Audio Output – HDMI, and Left / Right RCA connectors Video Codecs Multi-format [email protected] video playback, including H.264 BP/MP/HP, VP8, MPEG1/2, MPEG4 SP/ASP GMC, H.263 including Sorenson …

Support CNX Software – Donate via PayPal or become a Patron on Patreon