The exploits used by Ndless on production OS 3.1 are likely present on your development OS 3.1.

If Ndless 3.1 doesn't work, a special tool or light Ndless could be developped for your model.


I can see several ways for now:
- installing Ndless 3.1 and running Polydumper CX (which might not work if your OS is too different - you'll have to solve your battery problem first)
- sending the OS to another Ndlessed production TI-Nspire CM
- using specific tools exploiting some flaws, but developing them will be easier and faster if the OS is dumped first
- lending the calculator to one of us if you trust us

I solved the battery problem but it reboots while installing ndless.
I have a Clickpad and my parents won't let me to buy another CM
Lending the calculator seems to be a great idea,but I'm in mainland China,so It will take lot of money
I will try JTAG way but nobody succeed before...Any way to dump the OS with UART?

You should stop trying to install an OS on your prototype.

You may just manage to erase your special 3.1.0.236 development OS, and you can't install released production OSes on your prototype as it's using the development RSA keys instead of the production RSA keys.


We have never dumped any TI-Nspire CM development OS - if you erase the OS, the calculator will remain unusable - we'll have no way to repair it.


That's why the 1st priority should be to try to dump your 3.1.0.236 development OS.
If you find a production TI-Nspire CM, this can be performed quite easily.

I'm installing ndless,but failed

It boots up!
OS 3.1.0.236,BOOT1 3.0.99,BOOT2 3.10.0,128MB ROM
the broken inductor was 4R7(4.7uH),I used a 5uH one instead.

Quote from: zweb on June 04, 2013, 07:33:35 am

Quote from: critor on June 04, 2013, 05:34:10 am

The big hole is for the J04/debug connector which is supposed to have JTAG and is not

soldered on production models.

For now, can we have the OS/Boot2/Boot1 versions?


Thanks.

It doesn't boot up,and I don't know what to do now.Any pinout information about J04?I

have a Jlink

Unfortunately, as far as I know nobody has achieved (tried?) a JTAG connection on

TI-Nspire CX/CM for now.
It's a proprietary connector, we don't know much about the pinout.

Does it at least turn on or not at all?


Please, don't throw it away - even if your prototype is not working, it has the J04

connector missing on production models, and this could be very useful.


Could we have a picture of the back with its serial visible in order to identify what

kind of prototype it is?

Could we have a picture of the motherboard once opened with those strange wires

connections?

And could we have a big picture of the J04 connector, as you have the only one which

leaked in the world for now?



Thank you very much.

These strange wires were connected to some 0ohm resistors.I believe they were

jumpers.So I desoldered them and connected resistors back.They were marked in blue.
L01A(an inductor) was broken when I got it,I don't know the exact inductance,can

anybody tell me?I think it should be the same as CX's.

I'm sorry that my network is quite slow,so I have to upload photos in several posts.

The big hole is for the J04/debug connector which is supposed to have JTAG and is not soldered on production models.

For now, can we have the OS/Boot2/Boot1 versions?


Thanks.

It doesn't boot up,and I don't know what to do now.Any pinout information about J04?I have a Jlink

What?
I've posted in the cncalc.org topic, and my post has just disappeared...

Was my english considered as spam by some bot/script? Is english forbidden?...
http://www.cncalc.org/thread-8175-1-1.html

I found the reason,forum system don't understand English,so it was regarded as an advertisement and deleted automatically.Later,admin manually recovered that reply.