18 comments on “Mercury MW150R: Turning an Epic Fail to an Epic Win

  1. Pingback: » bash + javascript + html + css = gpiohttpd Necromancer's notes

  2. Pingback: Upgrading a router with impeccable soldering skills - RaspberryPiBoards

  3. Pingback: rndm(mod) » Upgrading a router with impeccable soldering skills

  4. Pingback: Upgrading a router with impeccable soldering skills | Daily IT News on IT BlogIT Blog

  5. Pingback: Upgrading a router with impeccable soldering skills | SIECURITY

  6. What “USB hack” do you mean? If you just want to tap on the traces, why not just carefully scratch off some stop lacquer and solder directly onto the trace before it hides under the chip?

  7. Hey man good hack, very impressive. Linked from hackaday.com. I’m not familiar with the USB hack that you are talking of or modding routers so I might be in left field here. But since you could see the traces for both the USB data lines couldn’t you just do some trace scraping to get your usb connection in there, if it’s something you are really after.

  8. Pingback: Upgrading a router with impeccable soldering skills | Make, Electronics projects, electronic Circuits, DIY projects, Microcontroller Projects - makeelectronic.com

  9. @rigid: No, I couldn’t. The last pic is from WR703N, where usb is avaliable, unlike MW150R. I needed to find the pins, since no AR9331 pinout was avaliable.
    I was lazy to take a close up of MW150R in this part, there are just empty pads, no traces there.

  10. link to working usb mod

    basically you need to grind the chips epoxy with a dremel, tricky :)

  11. Pingback: Upgrading a router with impeccable soldering skills | Cool Internet Projects

  12. Pingback: La actualización de un router con impecable habilidad con el soldador - | Indagadores |Seguridad informatica |Seguridad en internet

  13. (plz delete my previous message, it’s wrong 😛 )
    I forgot to say, ART partition is only readable on openwrt, but in dd-wrt is both readable and writable.
    So you can dump /dev/mtd4 in openwrt, then flash dd-wrt, download the art data into /tmp and flash the new ART data by doing “mtd -f write /tmp/art_file board_config”
    Then flash openwrt and you’re done

  14. @dabyd64: yeah, I know about sandwich mode, but I prefer a dedicated programmer. Easier, less wireporn.
    ‘art’ can be easily made writeable by altering the partition table in arch/mips/* of the kernel tree, so no need to flash any dd-wrt whatsoever. I’ve done that a few homebrew devices to write the initial art there.

  15. >> The bad thing is, that buspirate is SLOW AS HELL <<
    Hi, did you ever tried openocd to flash via jtag? openocd still needs a patch for "openocd-0.6.1/src/jtag/drivers/buspirate.c" to get into fast mode:
    static void buspirate_jtag_set_speed(int fd, char speed):
    usleep(100);//add this line of sleep
    buspirate_serial_setspeed(fd, speed);

    usleep(100);//add this line of sleep

    On an Arm-Cpu openocd transfers now 7,6 kb/s instead of 0,6 kb/s.

  16. @b.there: No, I’m ditching the bus pirate right away. It sucks totally. Even an atmega8-based uISP I designed working via vusb flashes spi flash way faster. And in this hack I didn’t use OpenOCD, since there is no accessible JTAG.
    Instead, I’m now using an AT91SAM9260 board I have around, with OpenOCD on raw GPIO. This is really fast, even faster than Realview-ICE I use at work.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>