Talking Reverse Engineering with an Absolute Legend!

Поделиться
HTML-код
  • Опубликовано: 8 фев 2025

Комментарии • 204

  • @CarputingYT
    @CarputingYT 19 часов назад +45

    One of the best RUclips channels of modern time no stupid 2-3 minutes of un-related intros. No many minutes of sponsorships for random crap. Usagi Electric is awesome hope this channel keeps making this kind of awesome content for a long time to come

    • @Irilia_neko
      @Irilia_neko 18 часов назад

      Sponsors are ok if it's related to the video like (PCB way, jlcpcb).
      Obviously the useless long intro are useless.

    • @pe1dnn
      @pe1dnn 16 часов назад +5

      This is how YT should be. Highly informative and something you never ever would see on commercial TV. There are others like curiousmarc. I really enjoy how Usagi Electric takes us along for the journey. YT itself is in a terrible state, unwatchable without preventive measures. I hope I will able to see this series to completion before I have to abandon RUclips for good, and hope, if it ever happens, there will be a backup to still follow along. Very good content en very enjoyable you letting us watch it all.

    • @ct6502c
      @ct6502c 14 часов назад

      ​@pe1dnnMy biggest frustration right now is the ads! It's becoming completely unwatchable. YT might as well be renamed to AdTube.

    • @The_Ballo
      @The_Ballo 13 часов назад

      Yeah, the only problem is RUclips itself

  • @jj74qformerlyjailbreak3
    @jj74qformerlyjailbreak3 18 часов назад +21

    I have a backplane. When i get home ill look for the specific numbers and check back later

  • @tiredofliars
    @tiredofliars 19 часов назад +26

    The battery cable idea is genius!

  • @RadNeck-s2t
    @RadNeck-s2t 19 часов назад +30

    an x-ray will clearly show inner layers. PCB x-ray machines are easily found at pcb assembly houses where they are used for solder inspection

    • @dan3a
      @dan3a 14 часов назад +2

      We're finally getting one at my workplace, PCB reverse engineering is going to be so much better

  • @ovalteen4404
    @ovalteen4404 14 часов назад +2

    One thing I'd point out with schematics is that it's far more readable to have inputs on the left and outputs on the right, as much as possible. When I started reversing something, I'd use the largest page size that KiCad supported so that things can be spread out and then cleaned up as interconnects begin to make sense. If you've ever looked at the schematics that IBM published for their PC 5150 or XT 5160, you'll see some clean design: Inputs arrive on the left of the page, the signal flow goes (mostly) left to right, and outputs leave on the right side of the page.
    Also, for long runs, a tone generator/wire tracer duo has some potential to at least help you find the general area that a trace is heading for.

  • @Pistoletjes
    @Pistoletjes День назад +45

    Unleash your inner Ken Shirriff!

    • @MichaelAStanhope
      @MichaelAStanhope 19 часов назад +3

      Ken Sherriff is another epic reverse engineerer!

    • @Derpy1969
      @Derpy1969 19 часов назад +3

      All hail Ken!

    • @fgaviator
      @fgaviator 19 часов назад +3

      Ken is awesome! He also has a great blog. In fact, he is working on a lot more projects than those visible on CuriousMarc's channel.

  • @No_hazmats
    @No_hazmats 2 дня назад +30

    My reverse engineering experience is limited and a lifetime ago. One particularly challenging problem was a bit-slice processor board for a fighter aircraft's radar. New boards worked fine when installed in the aircraft. But on our test bench, we would connect a console that was tied to all the data & address lines in the CPU to allow us to read and write to the memory. When the console was connected, the CPU would randomly reset. It was an edge case: some boards would never reset. Others would run for hours before resetting. I spent weeks with a logic analyzer trying to isolate the issue.
    We had the schematics, but the 6 or 8 layer PCBs were outsourced and we couldn't easily get our hands on the layout. And once we got the PCB layout, it didn't really help in finding such a rarely occurring issue. After weeks of trying we finally found the problem. To account for a part change, the board had been re-laid out by the vendor. Of the many changes to the traces, one turned out to be the problem. One of the databus traces lines connected two pins that were only about an inch apart. But the trace was routed all the way across the board where it made a u-turn around a single pin then all the way back across the board. The pin it looped around was (you guessed it) RESET. When the console cable & console were connected, the added inductance was just enough to cause the reset to get triggered once in a great while. A simple mod to isolate the trace and use a short soldered jumper wire between the two pins solved the problem for good.

    • @rivimey
      @rivimey 2 дня назад +6

      Sounds like very bad design on the part of the vendor. They should have known better!

    • @alexanderstohr4198
      @alexanderstohr4198 18 часов назад +4

      to me that sounds like a total no-go for a military design. but as you are talking about it, i have to believe its really true.
      some "student" had done a design, no one did look after it, no one did a review, and finally no one did any in deep testing or simulation.
      you indicated it was a long time ago - maybe when there were not so much simulations and EMC test facilities around to make sure that anything is mostly sane.

    • @kensmith5694
      @kensmith5694 16 часов назад +2

      I have seen stuff like that on PCBs. When you go to add a trace all of the obvious paths are taken up. If you are not willing to shift traces to make room, you get long runs.

  • @peterh1512
    @peterh1512 19 часов назад +8

    Eric has a Bunch of Amigas in the Background, must be a good guy! 😆

  • @humidbeing
    @humidbeing 15 часов назад +3

    I really like when channels like this take a few minutes to pause their projects and talk to all the people involved. This was fantastic. I have TubeTime's book and have built some of his recreations. Awesome convo.

  • @DevilishDesign
    @DevilishDesign 19 часов назад +13

    Those shelves behind Eric need a pay rise. They are doing some serious heavy lifting overtime! (Did pause to look at all the goodies!)

  • @Ben-says-you-are-AWESOME
    @Ben-says-you-are-AWESOME 19 часов назад +14

    Someone somewhere must have a schematic for that PCB, there's going to be some long forgotten bits of paper lurking in a dusty file drawer somewhere!

  • @ChristopherHailey
    @ChristopherHailey 15 часов назад +2

    I've done quite a bit of reverse engineering for work, but for software instead of hardware and I learned here that there are some interesting philosophical similarities with hardware reverse engineering. I've had tasks where it's basically "Here's this black box, make one just like it but with different hardware and system software" and often I had little or no documentation or even any software source. I would have to probe around on the inputs and outputs and figure out what the heck it was up to. Really interesting and different video this week for my usual Sunday morning coffee tradition.

  • @deechvogt1589
    @deechvogt1589 18 часов назад +4

    Another wonderfully informative video. Great to see people working together to solve problems in retro-tech. Thanks again!

  • @rickhole
    @rickhole 17 часов назад +3

    This is one of the most fascinating interviews I have ever seen. To Eric I hereby award the designation of d'Apollo, to be added to his name, such as PhD would be added.

  • @Andy-fd5fg
    @Andy-fd5fg 14 часов назад +1

    I've had "Open Circuits" on my shopping list for a while now...... just clicked the button to buy it.

  • @RobSchofield
    @RobSchofield 17 часов назад +6

    A book on the Centurion would be excellent - you already have a customer! 🤓👍

    • @ChristopherHailey
      @ChristopherHailey 15 часов назад +1

      I've recently been messing around with '70s era TTL ICs building some really basic circuits, seeing a complete system built from this tech is really interesting to me!

  • @Digital-Dan
    @Digital-Dan 14 часов назад +2

    I'd suggest attempting a similar conversation with another Curious Marc colleague, known there most often as Master Ken. He has reverse engineered individual chips, electromechanical beasts, and even more marvelous things.

  • @Poorehouse
    @Poorehouse 18 часов назад +9

    It was nice to see someone aware of the camera location and talking direct to the viewer and not looking elsewhere when speaking (to us).

  • @davidszacik2326
    @davidszacik2326 19 часов назад +4

    In the early 1980's I worked for CAMBION, the Cambridge Thermionics company, in Pittsfield NH where we did the metal stamping and screw machine production of pins and standoffs as well as the molding of the IC sockets. At our Cambridge facility we did automated backplane wire wrapping where we passed the pin location and a cut/continue code.
    Could be a fun exercise to drive a 3D controlled wire wrap tool!

    • @alexanderstohr4198
      @alexanderstohr4198 18 часов назад

      i guess he might rather want to go for a PCB with traces - but the traces density could be too high, and the signal integrity might be in danger. furthermore patching such a board in the case of an error can be a horror up to non-solveable.
      good luck to him - and indeed such an automated solution could be a very valueable time saver.

  • @jecelassumpcaojr890
    @jecelassumpcaojr890 15 часов назад +1

    In 1982 a friend reverse engineered the IBM PC motherboard and CGA board. He found that putting a drop of water on the board would allow him to see the inner layers. So he would trace them by slowly pushing the drop around with his finger.

  • @retronick1155
    @retronick1155 17 часов назад +4

    The battery cable wire trick is an awesome idea.

  • @kensmith5694
    @kensmith5694 16 часов назад +1

    From my little experience doing this sort of thing:
    1) Go get the datasheet and application notes for any complex chip. You are likely to find that the circuit you are working on looks a lot like what is in the application note. Once you have found that section of circuits, you can kind of draw a box around it and treat it like a module in your thinking about the rest of the board.
    2) Although no rule says the pins of a buffer chip have to be used in order, you will often find that a bus goes to, lets say, an 8 bit buffer using the gates in the order on the datasheet. If not try the reverse order.
    3) Verifying the power supply connections on all of the chips can get you quickly past the question of whether this thing has multiple supply voltages. This only applies to things that might have that for some reason.
    4) Chip placement on a PCB often follows the placement on the schematic but it may be rotated or mirrored
    5) Multiple monitors on your PC can help a lot because you can have more stuff in view

  • @boylinux
    @boylinux 16 часов назад +2

    I wish you the best of luck. Excellent insight to a fascinating world. Ty. 👍

  • @mrthreeplates
    @mrthreeplates 18 часов назад +4

    Stop reading comments already! Go get "Open Circuits" right now, seriously fascinating exploration of components at microscopic level. Beautifully photographed with very approachable explanations. I've had the pleasure of working with Eric for a couple of years and he is hands down one of the most brilliant engineers and nicest people I know. Eric, I want my copy signed.... Usagi, this looks like a super cool project, best of luck! I can't wait to see where it goes.

    • @TubeTimeUS
      @TubeTimeUS 16 часов назад +1

      thanks for the kind words! drop me an email. :)

    • @daverichards2979
      @daverichards2979 14 часов назад

      And it is back to #1 best seller in the engineering section. Mine arrives tomorrow :)

    • @ct6502c
      @ct6502c 13 часов назад

      ​@@TubeTimeUSI just subscribed to your channel. 🙂 I can't believe after all the videos I've seen of you working with Curious Marc, I hadn't been to your channel yet!

  • @TD_YT066
    @TD_YT066 19 часов назад +10

    Someone send this man an ESD mat! It's winter and the air is dry.
    A useful tool is a TDR rig - Time Domain Reflectometer. You can measure the length (in time) of a trace and whether it has branches by looking at the scope. You can also touch a via with a metal probe and see that change in the impedance on the display if it's connected to the trace.

  • @3vi1J
    @3vi1J 17 часов назад +2

    Staying motivated: Treat it like a squirrel gathering nuts for winter. The squirrels not overwhelmed or discouraged by the size of the task because they're working on one acorn at a time. Forget the big problem; break it down into the smallest achievable goals you can. Concentrate on getting those small goals done and the rest will follow. This mindset has been the *only* way I've managed to power through some of the larger projects in my career. I apply it regularly when programming or reverse engineering legacy code, but it works for just about anything.

  • @ForgottenMachines
    @ForgottenMachines 2 дня назад +6

    Did I ever talk to you about how I reverse-engineered all the boards for the Entrex/Nixdorf Trapezoid Terminal? Or a "Mystery" Data General Nova-compatible board? We should compare notes on this! You've done, yet again, an EPIC job on this video!!!!

    • @sonosoneca
      @sonosoneca 19 часов назад

      It should be a great one year vídeo series, you both working together since taking PCB photos untill the complete schematics

  • @EarlySwerver
    @EarlySwerver 15 часов назад

    So nice to see two of my favourite people collaborating.
    Shine on you crazy diamonds.

  • @ForgottenMachines
    @ForgottenMachines 2 дня назад +5

    And, with ALL of my rambly comments, I must emphasize, Eric aka TubeTime has been one of my major inspirations for YEARS! And I LOVE that we all get to chat with him on a regular basis... Looking forward to our next discussion with him as a follow-up to this video!

    • @TubeTimeUS
      @TubeTimeUS 16 часов назад +1

      👍

    • @DougBirdacks
      @DougBirdacks 14 часов назад

      When will you start posting videos again?

  • @Derpy1969
    @Derpy1969 19 часов назад +3

    Even if it’s a four or six layer PCB, I think Usagi’s old PCBs are made where there are no buried vias.
    This means all vias go through the PCB. It also means no trace in the inner layers isn’t connected to a via on both sides of the PCB.
    Knowing this, you can ohm out every inner trace… eventually.

    • @DrKlausTrophobie
      @DrKlausTrophobie 18 часов назад +1

      It gets complicated for vias hidden by ICs.
      And yet, it's no problem after all with everything being through hole mounted...

    • @alexanderstohr4198
      @alexanderstohr4198 18 часов назад

      are you talking about the board having nothing like the things called "burried vias" - an item that will be in place since maybe short after 2000s?
      to my understanding the inner layers are first etched and then they will se application of vias. after that the outer layers are glued upon and the vias for them are added - with some doing as well giving contact to not only the outer but also some of the inner layers...
      i think it went popular when BGA and other dens grid package interfaces went into the industry. so folks could go for power and ground with just a single "drill hole". and at the same time the space for the data and control traces was a bit reliefed from pressure. also a reason why a lot of chip have ground pins in the center.
      (by the way, the GPU in the image had those interconnect metal layers areas with vertical traces on one layer and the horizontal traces on the other layer. so your chances as a designer to run out of space or have unexpected interactions have noticeably gone better during your overall design procedure - giving your better chances to solve the design riddle.)

  • @KeritechElectronics
    @KeritechElectronics 2 дня назад +4

    Thanks for Eric's insights! Much appreciated. Feels like The Amp Hour but with video, haha! It's a good thing. You could get in touch with Ken Shirriff (the one who works with CuriousMarc) - his insights will certainly help a lot, he's a genius in his own right after all.
    I agree, KiCad really could use a reverse-engineering feature! Truth be told, I don't know of any software that can do that by now, but that would make sense for dual layer boards. Not all that useful for multi-layer, though. And oh, I do get confused with the spaghetti mess a lot too.
    I wouldn't rely on a KiCad 3.0 tutorial, definitely use something newer as the software has changed a lot especially since 6.0, and we're at 8.0 now.
    Ha! I love that book, it moved me deeply when I took a first look at it and I made a review of it, which turned out to be the single best performing video on my channel: ruclips.net/video/Mqo_sgsdTRU/видео.html - take a look and grab the book, it's absolutely worth it! A thing of beauty, a joy for ever.

    • @miguelostermann9459
      @miguelostermann9459 18 часов назад

      but yes, I know a software that can do PCB reengineering: Target3001! from the company friedrichs in germany

  • @ForgottenMachines
    @ForgottenMachines 2 дня назад +3

    17:15 YES...I've used this procedure many times! Again, absolutely BRILLIANT idea! Oh, and you did EXCELLENT B-roll for that, too!

  • @alexcrouse
    @alexcrouse 14 часов назад +1

    How do you eat an elephant. One bite at a time.
    REing a board like this is a lot, but you just take it on piece at a time.

  • @noahprussia7622
    @noahprussia7622 18 часов назад +4

    19:50 He says you will never have two output pins connected together, I want to specify that he is not (or at least shouldn't be) referring to data bus lines nor tri-state logic circuits. Example: Chip A output, Chip B output, and Chip C input are all tied together on one node/net/connection that is referred to as "DATA". Either Chip A is outputting and Chip B output is floating, Chip B is outputting and Chip A is floating, or Chip A and B outputs are floating. You will typically see this with Digital circuits, and you should typically be able to tell based on the chip.

    • @kensmith5694
      @kensmith5694 16 часов назад

      Yes, and also open-drain or open collector circuits can often be part of a large "wire or" circuit.

    • @TheVirtualWatcher
      @TheVirtualWatcher 15 часов назад +1

      Also with 'wired-or' open collector outputs.

    • @kensmith5694
      @kensmith5694 15 часов назад

      @@TheVirtualWatcher .. and in a few cases things coming off of what really are the emitters of transistors. Some analog window detector circuits work like that. Multiple LM311s can be wired together like that sometimes.

  • @myleft9397
    @myleft9397 13 часов назад +1

    Step 1 assemble a mini computer. Check. Step 2 repair a vacuum tube computer. Check. Step 3 build a vacuum tube computer. Check. Step 4 do the impossible... he's working on it.

  • @chrisjpf33
    @chrisjpf33 День назад +3

    David: “How hard can it be?” - You are freaking hysterical!

    • @c1ph3rpunk
      @c1ph3rpunk 19 часов назад +2

      Those exact words have gotten me into more trouble than I care to admit. Repeatedly.

    • @revengefrommars
      @revengefrommars 17 часов назад +1

      RichRebuilds on RUclips has a sign in his shop: "We do not do things because they are easy, we do them because we thought they would be easy."

  • @finkelmana
    @finkelmana 16 часов назад +2

    I have always wanted to go to a VCF. The east one is in NJ - no one wants to go to NJ. However, I often visit my family in Texas in April... But wait... Why not go at the end of June and go to VCF SW? Why not, indeed! So I rearranged my trip so I can go!

  • @LittleFox94
    @LittleFox94 19 часов назад +2

    Those pictures of the isolation amplifier internals would make great wallpapers and posters and I would love to hang that on my walls - that bond-wire transformer is just beautiful :o

  • @johncloar1692
    @johncloar1692 19 часов назад +1

    Thanks for the video Eric is a good one to reference to. Good luck on the reverse engineering of the boards.

  • @rivimey
    @rivimey 2 дня назад +2

    Great video, thanks!
    Worth remembering that the copper for inner layers is normally thinner than that for outer layers. It would be interesting trying the brightest illumination you can find (500W spotlight) to illuminate the back or front of the board and then use a digital camera to photograph the other side. Do it for both sides. the digital image can be manipulated to show more detail than you will ever see with Mk 1 eyeball, and might mitigate some of the issues of not being able to remove the ICs.

    • @alexanderstohr4198
      @alexanderstohr4198 18 часов назад

      even the best LED light does a lot of heat. thats not good for such an old times PCB.

  • @chutipascal
    @chutipascal 16 часов назад +1

    Brilliant, you are both brilliant.
    The Kikad thing, the wire brush...

  • @PapasDino
    @PapasDino 19 часов назад +1

    Eric is always so darn positive (and one of my favorite guys on Marc's channel...well, they all are of course!).

  • @tubical71
    @tubical71 14 часов назад

    Hi,
    i did some RevEng myself when i was in the R&D biz. I/we also used an old Xray machine that came from a security checkpoint. It had make things a lot easier ;) also a bright light helped a lot and even we desoldered a board completely and put it on a modified copymachine which alowed us to brighten up the light and while the top was heaviely over exposed the inner traces had been nicely visible on the copy.
    And if you have some scrap boards you can burn out the inner traces and see where they conected by simply burn them down and see the damage. Also you can use a modified microwave oven, where you can switch the magnetron on/off with a dedicated switch, for a second and burn down the upper layers and peel them off afterwards leaving only the inner traces intact and lets you buzz them out a bit more easily. but these is only possible if you have some scrap boards as well.
    cheers.

  • @ForgottenMachines
    @ForgottenMachines 2 дня назад +4

    22:02 "symbols on the schematic with nothing connected to the pins". I have a different procedure where I create a preliminary net list based on what is already known about the chips, and then use that to track the changes on the PCB side, then use KiCad's feature to transfer the netlist back and forth between the Schematic and the PCB. Again, I'll show you!

  • @tux1968
    @tux1968 18 часов назад +1

    Eric seems like a great guy. Thanks for the video!

  • @michaelwessel4953
    @michaelwessel4953 16 часов назад

    Great interview and tips - ingenious, the brush! Thanks much! Regarding the rules of thumbs for re-engineering and "output -> input" schematics connections, I'd like to mention that there are (as always) exceptions to these rules. One exception would be if a developer intended to let current flow between OUTPUT = HIGH and OUTPUT = LOW pins, which is a very common use case for Microcontrollers if they are configured as PUSH/PULL. For example, if you intend to drive an LED (or LED Charlieplexing) with an ATmega MCU, you can't let current flow between an OUTPUT and INPUT pin. You can source current from an output, but not drain current with an input. Hence, to let current flow between GPIOs in PUSH/PULL config, you would need OTPUT = HIGH for the LED Anode, and OUTPUT = LOW for the LED Cathode, for example. So, indirect OUTPUT -> OUTPUT connections are a thing that you will see in practice.

  • @dipdoting
    @dipdoting 19 часов назад

    Really great discussion! Reverse engineering of vintage boards is on my bucket-list - that trick of using of the copper brush is gold!

  • @MichaelGajdos
    @MichaelGajdos 17 часов назад +1

    MAME is what came to my mind when I saw video title

  • @TheVirtualWatcher
    @TheVirtualWatcher 15 часов назад

    The size of the task may be a bit daunting but the process is relatively simple.
    Draw all the chips. Buzz out all the connections. As you discuss in the video, a lot of the connections are known, power and ground, and depending on the device function, the likely connections can be narrowed down.
    At least if all the chips have their part numbers functional areas can be identified (some years ago I reverse engineered a board, somewhat smaller than yours, which had all the chip numbers removed).
    Since you want to sort out your backplane, start with the edge connector. You may be able to determine sub-circuit function fairly rapidly.

  • @SergiuszRoszczyk
    @SergiuszRoszczyk 19 часов назад +1

    Eric is always so positive!

  • @delsydsoftware
    @delsydsoftware 13 часов назад

    Open Circuits is such a great book. It's the Modernist Cuisine of electronics books, when it comes to the cutaways.

  • @alexanderstohr4198
    @alexanderstohr4198 18 часов назад +1

    It is definitely huge.
    how about x-rays and especially using x-ray layer imaging? it will most likely be able to penetrate and unveil any burried traces not visible to the methodology you were speaking in the vid.
    i personally could imaginate, that HF probing would also be a cool method to track down not only the burried traces but any traces. (done it with just power wires in walls and an old phone amplifier coil that had originally a rubber suction knob to tap phone speakers. i do quite well remember these humming noises and how they did modulate their intensity with distance. - similar to that there were old style large CAD graphical tablets for digitizing with mice like cross hair centers - their front was a simple coil in a PVC glass piece and the backside was a straight grid of wires that helped locating that mouce center to a noticeably well precision. Just an MCU and some serial port required to hook it into any major CAD program.)
    something like an x-y axis system with a probe/sender on its tool handle (i have a cheap aluminium profile based china A3 laser model with maybe some options for alternate tools).
    so if you go for an edge connector set... as the second pole in the game - you can drive such a probe/sender hat across the board with a resolution as tiny as your steppers will allow.
    the edge connector might feed into a two-way "passive" CMOS transistor switch array and allow you to get one or more such external pins sample in a "divide the search space in halves" method. Lets assume you might be able to do one full edge connector scan (logical track down) per second. then you have 3600 such assignments per hour - and if its analog signal levels, its even more of worth. so depending on how sensitive such a setup might be... it can do maybe 100.000 or more such probings per weekend. - but i assume it will be even faste, because you have to expect lots of "blank" areas (from an edge connector view) where you can easily skip along much faster. also there is the option to go for certain pins and connections that are somewhere in the middle of the board by just connecting them with an extra measurement wire clip - letting the x-y axis system follow the trace in a smart way, giving something like a "flash" like direct trace reconstruciton, including even forks. Just make sure your probe leaves enough space to the board so that none of the boards components or any of the hand wired patching cables will ever get any damage.
    BUT:
    if out of a sudden, maybe triggered by your video presentation, someone pops up having a bunch of more schematics, pin out listings and similar in his hands - will that maybe obsolete the whole RE subject and kick you straight forward into recreating the machine - with all sorts of deviation analysis and also fixing broken things that a regular re-activation would bring with?

  • @chrisplatts2607
    @chrisplatts2607 16 часов назад

    This is fascinating - thank you!

  • @jeromethiel4323
    @jeromethiel4323 16 часов назад

    One exception to the "one output drives a line" is if the chips in use are "open collector." This type of chip wasn't used for very long and isn't used at all anymore as far as i know. But it allowed you to "wire or" outputs together, because there was an external collector resistor so the outputs didn't fight each other. Not uncommon in the 60's and 70's, because tri-state outputs either weren't invented yet or weren't popular yet. So check the chip ID to find out if it's an "open collector" chip or not.

  • @TastyBusiness
    @TastyBusiness 19 часов назад +3

    Tube Time sharing his secrets for successful reverse engineering.

  • @thomasbjarnelof2143
    @thomasbjarnelof2143 16 часов назад

    What about making a "dual X-Y plotter" that can measure what pins are connected to what pins ?
    1) Make a map of all connectors and output pins on the board. The possible signal sources
    2) Let one probe be stationary on a source, while scanning with the "starter-cable" probe in a zigzag motion over the backside of the board.
    3) repeat for all sources.
    Then there are a coarse map of connections.
    4) Refine the map for each sources by using a spring probe on the pins in the coarse map.

  • @chainq68k
    @chainq68k 14 часов назад

    Eric came online, and an Amiga 1000, 3000, 4000T (and some other models) sitting in the background. And me the Amiga guy be like "you had my curiosity, but now you have my attention".

  • @frankowalker4662
    @frankowalker4662 16 часов назад

    I hate to say it, but the easiest way is to remove all the components off the board and go through every pin and via with a continuity tester. Great chat to listen to.

  • @kadlerio
    @kadlerio 19 часов назад +1

    27:41 ahh, yes, the Unbreakable Kimmy Schmidt method. That's how I approached running training for a 5k.

  • @cesibley
    @cesibley 13 часов назад

    Before I retired, we successfully use a CT scan to get good images of internal layers. I would start there for the hidden lawyers.

  • @Candygirl3431
    @Candygirl3431 17 часов назад +1

    It looks like the Australian Computer Museum Society had one of these boards. Maybe they have some information for it.

  • @alexanderstohr4198
    @alexanderstohr4198 18 часов назад

    Big thanks for these definitely great lesson on RE in such a special field. No idea if i will ever get in need again of such things, but knowledge never ages.
    And of course these book seems to be a photographic and content wise marble - that i even have some guess i want to go for looking into it to get stunned. (y)

  • @DinoDiniProductions
    @DinoDiniProductions 19 часов назад

    You might see two outputs connected together that are open collector - often used on buses, right?

  • @AndrewRump
    @AndrewRump 19 часов назад +4

    Are tristate output pins not a thing anymore? Eric explains (19:30-20:00) that it is bad practice - but how would you avoid having several chips using the same (data/address) channels?

    • @davidthibodeau753
      @davidthibodeau753 18 часов назад

      I was wondering the same thing. I have multiple data registers outputting to the same internal data bus of my homebrew 6502 cpu. Seems to work fine

    • @AndrewRump
      @AndrewRump 18 часов назад

      @@davidthibodeau753 I also don't see any problems with it - as long as you make sure only on thing is controlling the "bus" at the same time.

    • @alexanderstohr4198
      @alexanderstohr4198 18 часов назад

      sometimes you see even bad practice on real world equipment.

    • @alexanderstohr4198
      @alexanderstohr4198 18 часов назад +1

      @@davidthibodeau753 bus systems are designed to that. and solving a bus is less of an issue when you have the basic signal clues. - thus the statement was made for any *other* logic on such a board.

    • @davidthibodeau753
      @davidthibodeau753 17 часов назад

      ​@@alexanderstohr4198I'm a bit of a novice on these matters. How is a bus designed to handle multiple outputs?Regarding other nets or logic with multiple outputs, one example is the IRQ pin on the 6502 which could be connected to multiple open drain outputs

  • @kenhouse3484
    @kenhouse3484 15 часов назад

    Cant wait to buy that book!

  • @Brainwizard.2
    @Brainwizard.2 14 часов назад

    Oh my god! I absolutely loved these tips!!! 🎉❤😊

  • @8bitwiz_
    @8bitwiz_ 19 часов назад

    I've had a few things recently that I've partially reverse-engineered to figure out how they work. One of them I have extra boards that I can desolder parts from, so it may be a good for trying out that new KiCad stuff.
    The battery cable brush is clearly so much better than trying to drag a mulitmeter lead down rows of chips! I think this alone will help me a lot.

  • @VincentGroenewold
    @VincentGroenewold 19 часов назад

    Ohh dude! Didn't realize he is tubetime on the socials. :) That's awesome.

  • @Bata.andrei
    @Bata.andrei 17 часов назад

    I also use the battery cable trick, only i use a very soft silicone coated wire, because it has a lot more wires inside and they are very thin

    • @TubeTimeUS
      @TubeTimeUS 16 часов назад

      yup, this is the best kind of wire for the trick.

  • @MrPwnageMachine
    @MrPwnageMachine 15 часов назад

    Just bought the book, it looks fascinating.

  • @TeslaTales59
    @TeslaTales59 19 часов назад

    Very good presentation.

  • @phill6859
    @phill6859 14 часов назад

    "Youre not going to see two outputs connected together" apart from any kind of bus.

  • @pdp11henkie
    @pdp11henkie 13 часов назад

    Holding up to show the boards ... I hope you took ESD precaution measures.

  • @glandeokrayo9956
    @glandeokrayo9956 16 часов назад

    What about a 'divide and conquer' approach? If most of the connections in the board are local (to the same IC or nearby ICs), and the board is divided in sections, of say, 3" by 3". Each section can be reverse engineered, and the 'external' connections for that section can be left for later.

  • @jamesblinzler7421
    @jamesblinzler7421 18 часов назад

    This is an awesome upload.
    I’m no where near this kind of ability.

  • @DereckWonnacott
    @DereckWonnacott 18 часов назад

    My first thought is that a CT scan would let you see the internal traces easily, you might even get to see inside the ICs

  • @MartinC-Retro
    @MartinC-Retro 19 часов назад +1

    Is anyone else getting cold sweats looking at those shelves behind Eric? They look like they could collapse at any moment. I know it's probably a trick of the lens, but still.

    • @TubeTimeUS
      @TubeTimeUS 16 часов назад +1

      they're quite sturdy. they're screwed to the wall and have earthquake straps across the front that i took down for this video. (they're back in place)

  • @Starchface
    @Starchface 13 часов назад

    Brilliant fellow, this Eric. He's certainly on another level from my lazy ass. The task appears monumental but you've completed equally monumental tasks before. I have full conf-oooh kitty! 🐈❤

  • @ForgottenMachines
    @ForgottenMachines 2 дня назад +1

    24:50 Organic and personalized process...Yes, AMEN!!!

    • @LeonDerczynski
      @LeonDerczynski День назад

      classical artisanal process. you listen and react to the material you're working with

  • @johanhansson9292
    @johanhansson9292 18 часов назад

    I have two TRW chips .. but those if I remember correctly was used In a video editor of some kind, and that used the same type of boards and backplane as your cards.

  • @colingale
    @colingale 19 часов назад +1

    I remember the mcga chip it also came inside the apriocot pc with MCA and cool security remote. it also had a strange mode $13 setup.

    • @alexanderstohr4198
      @alexanderstohr4198 18 часов назад

      for whatever reason - i feel like i either never heard about MCGA (because even standard compendium literature skips it due to lack of information?) - or just forgot about it as it not relevant to general computer users and coders. MDA, CGA, EGA, Hercules and of course VGA was the category i remember quite well (up to their relevancy degree). - maybe i will come across that in some sort by intention or by accident.
      (I also forgot about the Vectron game at some point - and re-discovered it on the internet, even if now can surely tell to have seen it in warehouses on display and in catalogs for maybe some 1 year until it was gone. decision: its not versatile and also does not cope with the home color TV - even if its definitely cool line graphics in contrast to pixelated fonts. today i would say: the concept barely scales and it would be a mess with digital video like youtube.)

  • @JonLordFan
    @JonLordFan 15 часов назад

    I would suggest to design a bed of nails to all the 3000 pins from the bottom of the board and run it via an ICT to derive the netlist automatically and import it into EDA.
    The tester itself could be DIYed as easy as a huge shift register a bunch of resistor arrays and an arduino...

  • @VorlonFrog
    @VorlonFrog 18 часов назад

    Back in the day, the Digital DR11C was the general-purpose interface for UNIBUS PDP-11 systems. Bitsavers has a manual for it.

  • @charlesjmouse
    @charlesjmouse 18 часов назад

    "How hard can it be?" Possibly the most famous of famous last words after "Hold my beer!"
    I wish you good fortune. I do hope for your sake somebody watching this video knows somebody who knows where a complete one of these might be stashed that you can crib from... what kind of companies / institutions had these? If any universities bought them it may be possible somebody still has one in a cupboard somewhere.
    Of course excellent advice. FWLIW, just in case it's helpful: When I'm doing this my workflow for the schematic tends to be:
    1) I try to lay out the IC's, connectors, and passives on the schematic much as they are on the physical board because that both helps keep track of where I am and the board is likely to have been laid out reasonably efficiently for connections - less of a rats-nets in the schematic. At the very least remember to give every IC it's own sensible name that alludes to it's (likely) function on the schematic!
    2) My schematics rarely use individual gate symbols. I prefer to use footprints for the IC's the gates come in as that's how the physical board is. I can always come back and change this at the end if doing so would make a more understandable result.
    3) I then fill in the power and grounds, along with their associated passives. Depending on how complicated the board is I may then move all the associated passives to their own block on the schematic to make it more readable.
    4) Then I try to fill in the clock(s), then all the data and address lines, as these tend to be the bulk of the connections and once you get going it usually becomes clear how the designer did them which helps enormously.
    5) Then comes the hard work - the remaining 10-30% of the connections that constitute how the board functions. Because there's every chance you won't understand these until the schematic is complete it's really, really easy to mess these up! check , check, and check again.
    6) Once it done, be paranoid and recheck everything. then consider doing a tidying pass to make the schematic more readable. But for your own sanity I'd advise keeping the components largely as they are on the board - it really helps with checking and bug-finding.
    7) Just my preference, and laziness! I use sensible labels for my connections rather than drawing them in if I possibly can! It really helps to keep things understandable and to avoid rats-nests of overlapping lines as the reverse-engineering goes on. If you build up the schematic pretty much in order of power, clock, data and address lines, then everything else, you don't usually run in to having to relabel too many instances because you gave them stupid or unhelpful names though lack of understanding - it's really important not to use arbitrary names for your labels even if you don't know what they do! If nothing else, use the schematic name of an IC they run to / from as part of the label.
    The final connections will then have room to be drawn as 'wires' if labelling them is either just stupid or you otherwise don't really know what they do.
    IMO: Doing it this way will help to preserve your sanity and result in a schematic that actually has a hope of working. Better yet, you tend to end up with all the 'generic' stuff you don't really care about as labelled connections that are easy enough to follow if you read them - even better a missing label on a bus will stick out like a sore thumb!
    The most important connections are highlighted for being 'wired' together in a fashion that hopefully indicates function, aiding understanding and readability. Also if your schematic takes more-or-less the form of the original PCB it really helps navigation from one to the other - of course some fiddling may be required if doing so proves more important for readability, but most people tend to lay their PCBs out with the same logic they put in to their schematic so this is rarely necessary.
    PS: I know lots of people like to add 'bus connections' to their schematics to aid readability. Each to their own, but I don't usually bother unless there is a very good reason as I find the approach of sensibly labelling everything is enough.
    Software? I'm an Eagle guy because when I learned this stuff Eagle was really the only sensible option... even though it's an utter sod to use because of terrible UI design. If I was learning today I'd probably use KiCad as it seems a little less 'nasty' and all the 'cool kids' are using it. Some day I'll probably make the leap as it's getting increasingly annoying converting useful Kicad schematics to Eagle by hand as neither package has useful import/export functions for the other! *sigh*
    Enough rambling. I hope that was slightly useful to someone - I shall certainly start using the battery cable brush technique!

  • @goltuppen4341
    @goltuppen4341 14 часов назад

    I want that beautiful book! Wow!

  • @scootdadtx
    @scootdadtx 19 часов назад +1

    Such an interesting video. You have to put in the legwork to get’r dun.

  • @cetus471
    @cetus471 18 часов назад +1

    I wonder whether a professional (but, sadly, expensive) CAD tool could make it a lot easier. E.g. by translating changes made on the layout back into schematic? Considering the time saved and the more enjoyable experience, it might just be worth the money paid?
    Or better yet if the tool manufacturer provides a free copy to the cause like Keysight did.

    • @tubical71
      @tubical71 14 часов назад

      that´s why i still use an old Protel copy. you can always be sure schematics and layout stay 1:1, and you can either work in schem or Layout and the other being updated by the IDE.

  • @toddbu-WK7L
    @toddbu-WK7L 17 часов назад +2

    Gate array, or Gatorade? 🤣

  • @martinbzm
    @martinbzm 16 часов назад

    You, sir, are a brave man.

  • @xspager
    @xspager 16 часов назад

    That's a wholesome people right there.

  • @eliotmansfield
    @eliotmansfield 18 часов назад

    there must be one of these units in a computer museum somewhere that you can take a look at?

  • @Mr_Meowingtons
    @Mr_Meowingtons 19 часов назад +1

    I am so buying that book

  • @RayMillTN1
    @RayMillTN1 18 часов назад +1

    This vid was awesome..... 🤩

  • @davek.3581
    @davek.3581 19 часов назад +2

    Couldn’t multi model (vision capable) LLM’s help with some of this tedium of reverse engineering?

  • @RobSchofield
    @RobSchofield 18 часов назад

    @ 13:20 you can back-annotate between the PCB editor and the Schematic editor, in order to create a schematic from a board layout - any reason this is not being used?

    • @TubeTimeUS
      @TubeTimeUS 16 часов назад +2

      last time i tried i couldn't get it to work. but maybe it's worth another try, especially with the newest version.

  • @mrtnsnp
    @mrtnsnp 19 часов назад +3

    Keep in mind what your goal is: create a backplane and connect the FPS-100 to the PDP-11. For that you need the functionality of the bits in the edge connector. I’m not sure you need to fully reverse engineer the full board. You may end up with a complete schematic of the board, but that is a side effect of reaching your goal.

  • @seanys
    @seanys 18 часов назад +1

    Is that an A4000T I see beside your right shoulder, Eric?

    • @TubeTimeUS
      @TubeTimeUS 16 часов назад +2

      why yes, yes it is! it's a whole story, it took over a year to fix it, requiring recapping and repair of dozens of vias that had been etched through by capacitor juice.

    • @tubical71
      @tubical71 15 часов назад

      @@TubeTimeUS Also i encoutered an A1000 with its floppies, A double floppy A3000, a PET /80xx an A500....do you happen to have one of these rare tripple A boards..? ;)

  • @iggysfriend4431
    @iggysfriend4431 18 часов назад +1

    Please use some static control measures when handling any boards.

    • @nalinux
      @nalinux 15 часов назад +1

      No real problem when componants are soldered on a board.

    • @iggysfriend4431
      @iggysfriend4431 15 часов назад +1

      @nalinux Whilst the risk is reduced, it's not eliminated. Given that these boards are old and many of the components could be very difficult to source, it's worth taking precautions at all times. If some of these devices are PALs and they have their security fuse blown, then they will be impossible to replace.

    • @nalinux
      @nalinux 15 часов назад

      @@iggysfriend4431 IMHO, those old cards use mainly bipolar componants, not CMOS.
      And once again there are very few chances to destroy a soldered chips.
      I destroyed just once, not soldered, in 1992. A TDA 15xx amplifier.
      It never happened to me again since.
      I still don't use any antistatic device :)
      And I don't know anyone destroying a graphic card or anything else while plugging it in a computer.

  • @namelessdark925
    @namelessdark925 18 часов назад

    You may want to use an x-ray to view the internal layers of the board.

  • @DaniDaDino
    @DaniDaDino 15 часов назад

    Hey usagi! All of this talk reminded me of a reverse engineering project I've wanted to do on my own, and I was wondering if you knew of any good places to archive schematics or boardviews(If I ever get around to it).