EEVblog #977 – Keysight 1000X Hacking – Part 1

How to find and inspect hidden serial UART terminal ports inside equipment.
Dave finds the uBoot Windows CE UART part in the new Keysight 1000 X-Series oscilloscope and uses the info to find some of the product mode configuration pins. A hardware hack shows that changing product configuration modes in hardware is possible.
Forum HERE

About EEVblog

Check Also

EEVblog #1334 – Mystery Dumpster Teardown

Mystery dumpster teardown time! With the most amazing mechanical mains power switch you’ll ever see! ...


  1. Ah. the Spear600. I worked on that chip when Agilent called it the P600 platform. (This was back in 2010-2011)

    Windows CE does not start up a prompt. The serial port is purely for debug messages only, of which once the apps start up, they may not necessarily output anything if they are not compiled to do so.

    Agilent has an interesting way to starting up Windows CE – they use U-boot to chain load the CE bootloader, and from the CE bootloader they use it to boot the CE OS image and run it.

    (I did CE development for a long while.). Heck, I worked on the P600 platform trying to get something else on Windows CE working.

  2. How many people noticed the wargames referance when Dave typed joshua into his terminal

  3. Hi there! I know this is kind of off-topic but I neededto ask. Does operating a well-established blog such as yours take a massive amount work?I am brand new to operating a blog howeverI do write in my journal on a daily basis. I’d like to start a blog soI can share my personal experience and thoughts online.Please let me know if you have any kind of recommendations ortips for brand new aspiring bloggers. Appreciate it!

Leave a Reply

Your email address will not be published. Required fields are marked *