HH 2.0A firmware recovery mode

[catphish]

I have a HH 2.0A running 8.1.H.U

I notice that when booting the device with the 'Wireless association' button held down, the device enters a network firmware recovery mode, issues a BOOTP request, then begins to download a file from a TFTP server. What I cannot determine is what format this file should be, or whether is needs to be signed. In all my attempts to use this, the device has rebooted after downloading the first kB of the file (assuming because a check on the file has failed).

I'd appreciate some idea of whether this mode can be used for firmware flashing (either in a locked or an unlocked device). In the meantime I will JTAG my device with an unlocked image. Sorry if this has already been covered,

Charlie

[naroekie]

What file did you put for it to try and download?

[catphish]

I have tried a number of files, primarily the RUI images available here: http://download.modem-help.co.uk/mfc...rmware/r8-1-H/ and the ROM dumps found here: http://www.psidoc.com/showthread.php...re-flash-files

Should I be using a different format with this loader?

[naroekie]

Not to sure what files to use be it gives us something else to look into

[catphish]

I think this procedure is fairly standard for all speedtouch Ethernet devices, but the file format is well beyond my comprehension. I would assume that psi has been over this?

Actually there is some limited information here regarding the format (assuming little has changed since the old devices): http://paulbanks.org/projects/homehub/

[catphish]

See also: http://www.psidoc.com/showthread.php...ricked-my-2.0A