heyyyyyy. check this out

i bought one of those chinese motherboards which get the UEFI package from American Megatrends and then enable options with the guiding principle of "YES."

check out how many juicy bits it has

you can turn the memory scrambler on and off! it even tells you the seed it has on, i think, this specific boot?

@whitequark if you want this type of bios in mobile form factor, https://tpart.net , too. I bugged the ODM on wechat to give me a datasheet for the EC and a pinout for the EC debug header but sadly did not manage to get a schematic for how the EC GPIOs are hooked up
TP Art – ThinkPad is a work of art!

@joshua do you have a BSDL? if yes and you can access JTAG, I have a #GlasgowInterfaceExplorer applet for you that will tell you this in a single touch of a probe
@whitequark @joshua would the applet show pin state changes live with a pin number? I ask because I need to reverse the pinout on all these FMC headers. I wasn’t looking forward to doing it with OpenOCD…
@craigjb @joshua yes, just touch the pin with a probe and it tells you exactly which ball name it is (it parses BSDL)
@craigjb @joshua here's a demo
@whitequark @craigjb @joshua I think I know what's going on, but still, that seems magical

@pepper @craigjb @joshua it really is!

(i'm sending a pseudorandom waveform into a pin and then correlating it with everything in BSDL)

@whitequark @craigjb @joshua so slightly less magic than I was thinking, but more mathematically fun, I was thinking that that probe was not connected to anything, and you were somehow doing capacitive touch over JTAG
@pepper @craigjb @joshua that could also be made to work, however it would be much less stable & involve sending potentially destructive voltage down unknown components so i would not do that