SB6190 Uncapping in process. Suggestions?

[markoco]

it looked like a tssop nand flash
where is spi flash then ?

there is no longer a SPI Flash,all the new modems are nand flash only. and they have Bad blocks to prevent it from being copied so far.

ok i got it
i saw also some modems had them in bga format
however the badblock isnt a problem
i didnt saw sb6190 but cpu could use otp key from nand memory for prevent copying it

really? bga been around forever man, wtf. must be good. I'll look into it. thx!!
yeah, snowden, I totally agree.
who cares about the uncrackable code snowden, the sb6190 firmware is open source. fuck copying it. plus I don't believe that it's uncrackable, give the code a cheeseburger, seriously, it'll let you right in. I know you understand.

sure
i even doubt i can see sb6190e version in future
at last there are only sb6120e and sb6180e
sb6180 in datasheet is noticed as E version also but i dont saw it in market yet
and available speeds there maximum 120mb for now
take second sb6190 and swap nand flash beetwen them
just desolder it with hotair gun 330c deegress clean the pins and solder again
if modem will start then there are no any otp keys in use or cpu signatures
later then you can think about ecc correction fix
some of expensiv commerciall programmers have some setups for ecc like elnec but the client devices on market usually have its own customised ecc
have there one up&up up828 but support is crap and propably over for now i pay alot of money for it and its adapters in past
also there are other ways to try snmp factory keys cli etc. so nothing end on soldering things

I have tried copying a 48 pin nand with a Xeltek 6100 i get bite flip
talked to Zeltek about the ECC , they can write a custom software to Handel the remapping for about 350.00 but we would need to find out what algorithm they use