Yea it's hackable. There's a 4 pin connector near the rear panel pinout as follows (looking from front of unit):
0 0 0 0
| | | |
| | | +-- +5v
| | +---- serial out
| +------ serial in
+-------- ground
You'll need a CMOS to RS232 converter, the hook up a serial terminal @ 19200
and .... (drum roll)
Link Up (0000)
Storlink EMAC address = 0014d7030395
Ethernet eth0: MAC address 00:14:d7:03:03:95?IP: 192.168.2.71, Default server: 0.0.0.0
RedBoot(tm) bootstrap and debug environment [ROMRAM]
Storlink release, version S000.9018 - built 17:22:11, Jul 15 2005
Platform: Storlink Sword (ARM9)
Copyright (C) 2000, 2001, 2002, Red Hat, Inc.
Use Internal PCI Clock
Processor: SL3316a3
IDE0 Enable
AHB Bus Clock:116MHz Ratio:3/2
RAM: 0x00000000-0x04000000, 0x00049250-0x03fef000 available
FLASH: 0x70000000 - 0x70800000, 135 blocks of 0x00010000 bytes each.
==> enter ^C to abort booting within 3 seconds ......
Start Copy 1572864 bytes from 0x70020000 to 0x1600000
Start Copy 2097152 bytes from 0x701a0000 to 0x800000
Go
Uncompressing Linux.................................................................................................. done, booting the kernel.
Linux version 2.6.10_dev-versatile926ejs (root@localhost.localdomain) (gcc version 3.4.4) #1 Thu Jan 11 13:43:13 CST 2007
CPU: FA52Xid(wb) [66015261] revision 1 (ARMv4)
CPU0: D VIVT write-back cache
CPU0: I cache: 8192 bytes, associativity 2, 16 byte lines, 256 sets
CPU0: D cache: 4096 bytes, associativity 2, 16 byte lines, 128 sets
Machine: Sword sl2312
Ignoring unrecognised tag 0x00000000
Memory policy: ECC disabled, Data cache writeback
Built 1 zonelists
Kernel command line: root=/dev/ram0 rw console=ttySL0,19200 initrd=0x0800000,16M
PID hash table entries: 512 (order: 9, 8192 bytes)
Bus: 116MHz(3/2)
Console: colour dummy device 80x30
sl2312 console setup :
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 64MB = 64MB total
Memory: 45184KB available (2347K code, 756K data, 100K init)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
CPU: Testing write buffer coherency: ok
spawn_desched_task(00000000)
desched cpu_callback 3/00000000
ksoftirqd started up.
desched cpu_callback 2/00000000
checking if image is initramfs...desched thread 0 started up.
it isn't (no cpio magic); looks like an initrd
Freeing initrd memory: 16384K
NET: Registered protocol family 16
PCI: bus0: Fast back to back transfers disabled
SCSI subsystem initialized
usbcore: registered new driver usbfs
usbcore: registered new driver hub
sl2312 Gpio init
GPIO initial OK
NetWinder Floating Point Emulator V0.97 (double precision)
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
Installing knfsd (copyright (C) 1996 okir@monad.swb.de).
NTFS driver 2.1.22 [Flags: R/O].
Initializing Cryptographic API
ipsec_init : cryptographic accelerator
ipsec tx_desc = ffc00000
ipsec rx_desc = ffc01000
ipsec tx_desc_dma = 0179c000
ipsec rx_desc_dma = 0179d000
Real Time Clock Driver v0.10
Storlink Power Control Initialization
ttySL0 at MMIO 0x22000000 (irq = 6) is a SL2312
io scheduler noop registered
RAMDISK driver initialized: 4 RAM disks of 16384K size 1024 blocksize
Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
ide 1: physical = 52800000, virtual = c480e000, irq = 3
ide0: MMIO-DMA , BIOS settings: hda:pio, hdb:pio
hda: WDC WD102BA, ATA DISK drive
HD speed:U4 (0x44)
elevator: using noop as default io scheduler
ide0 at 0xc480e020-0xc480e027,0xc480e036 on irq 3
hda: max request size: 128KiB
hda: 20028960 sectors (10254 MB) w/2048KiB Cache, CHS=19870/16/63, UDMA(66)
hda: hda1 hda2 hda3
SL2312 MTD Driver Init.......
SL2312 MTD Driver Init Success ......
sl2312-ohci sl2312-ohci: new USB bus registered, assigned bus number 1
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
usbcore: registered new driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
Initializing USB Mass Storage driver...
usb 1-1: new full speed USB device using sl2312-ohci and address 2
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
mice: PS/2 mouse device common for all mice
md: raid1 personality registered as nr 3
md: md driver 0.90.1 MAX_MD_DEVS=256, MD_SB_DISKS=27
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 4096 bind 8192)
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 15
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
emac_init_module:EMAC initialized for A3 Chip !
Support NAPI Driver.
eth0: Dropping NETIF_F_SG since no checksum feature.
Configure VID 1
Support NAPI Driver.
eth1: Dropping NETIF_F_SG since no checksum feature.
Configure VID 2
Get ADM identifier ffffffff
ADM699X not Found
md: Autodetecting RAID arrays.
md: autorun ...
md: ... autorun DONE.
RAMDISK: Compressed image found at block 0
VFS: Mounted root (ext2 filesystem).
Freeing init memory: 100K
Mounting proc filesystem...
2.6.10_dev-versatile926ejs
Mounting tmpfs to copy file from flash...
2.6.10_dev-versatile926ejs
HardDiskBootUp=NO
Boot up from flash
Checking and Mounting filesystem(s) ...
Copy hddapp.bz2 from flash to Ramdisk...
~[????????????{ⷾ??߷?㾿??߇|????~϶???ן??o??o????뿿???o?kk?ﶫ???刺?翟뷦?zϿ???ǟ?̿߿????8448+0 records in
8448+0 records out
2.6.10_dev-versatile926ejs
Using /lib/modules/loop.ko
loop: loaded (max 8 devices)
2.6.10_dev-versatile926ejs
SkinnyNAS found, mount /system
return value=0
EXT3-fs: unable to read superblock
EXT2-fs: unable to read superblock
cramfs: wrong magic
FAT: unable to read boot sector
FAT: unable to read boot sector
NTFS-fs error (device md0): read_ntfs_boot_sector(): Unable to read primary boot sector.
NTFS-fs error (device md0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
NTFS-fs error (device md0): ntfs_fill_super(): Not an NTFS volume.
mount: Mounting /dev/md0 on /system failed: Invalid argument
SkinnyNAS found, mount /system
return value=0
ext3: No journal on filesystem on hda1
EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended
/system/hddapp already exists keep /etc/proftpd.conf /etc/exports and /etc/samba/*
Extract hddapp.tgz to /system
/dev/hda2 is not FAT32
ext3: No journal on filesystem on hda2
EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended
Quotaon on /mnt/IDE1.
mounted device=/dev/hda1
/dev/md0 is not FAT32
EXT3-fs: unable to read superblock
EXT2-fs: unable to read superblock
cramfs: wrong magic
FAT: unable to read boot sector
FAT: unable to read boot sector
NTFS-fs error (device md0): read_ntfs_boot_sector(): Unable to read primary boot sector.
NTFS-fs error (device md0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
NTFS-fs error (device md0): ntfs_fill_super(): Not an NTFS volume.
mount: Mounting /dev/md0 on /mnt/MD1 failed: Invalid argument
mount /dev/md0 failed !!!
Activating swap partitions ...
Adding 512056k swap on /dev/hda3. Priority:-1 extents:1
2.6.10_dev-versatile926ejs
Umount tmpfs...
*************************
* tx_desc = ffc07000
* rx_desc = ffc09000
* tx_desc_dma = 033ce000
* rx_desc_dma = 02a26000
*************************
Link Up (786d) reg_val = 1
100M/Half
Flow Control Disable.
Storlink eth0 address = 0014d7030395
Disable MAC Flow Control...
2.6.10_dev-versatile926ejs
Using /lib/modules/rt2561ap.ko
rt2561ap: module license 'unspecified' taints kernel.
Starting syslogd...
Starting inetd...
Starting crond...
Running constructor /usr/sausalito/constructor/00_construct_start
Running constructor /usr/sausalito/constructor/01_construct_network
Running constructor /usr/sausalito/constructor/09_construct_time
Running constructor /usr/sausalito/constructor/10_construct_dhcp
Running constructor /usr/sausalito/constructor/12_construct_syslog
Running constructor /usr/sausalito/constructor/20_construct_disk
Running constructor /usr/sausalito/constructor/20_construct_usb_disk
Running constructor /usr/sausalito/constructor/21_construct_disk_crypt
Running constructor /usr/sausalito/constructor/25_construct_admin
Running constructor /usr/sausalito/constructor/30_construct_foldershare
Running constructor /usr/sausalito/constructor/30_construct_guest
Running constructor /usr/sausalito/constructor/50_construct_ftp
Running constructor /usr/sausalito/constructor/50_construct_grp_passwd
Running constructor /usr/sausalito/constructor/50_construct_nfs
Running constructor /usr/sausalito/constructor/50_construct_printer
Running constructor /usr/sausalito/constructor/50_construct_samba
Running constructor /usr/sausalito/constructor/50_construct_telnet
Running constructor /usr/sausalito/constructor/90_construct_errorNotification
Running constructor /usr/sausalito/constructor/91_construct_bonjour
Running constructor /usr/sausalito/constructor/99_construct_stop
Done
pwc ioctl successly
waiting INT
Local package initialization:start syslogd
syslogd: Already running.
start crond
start thttpd
GetUDN: rand=5dbb0c43
GetInterfaceName: ethernet interface name=eth0
GetUDN: UDN=5dbb0c43-L121-7607-70aa-014d73395
GetInterfaceName: ethernet interface name=eth0
GetIPaddr: IP address=192.168.123.113
main: HTTP_buf=http://192.168.123.113:80
UPnPCreateMicroStack: UUID=uuid:5dbb0c43-L121-7607-70aa-014d73395
.
Fri May 2 09:15:04 PDT 2008
MetalGearBoxNAS login: root
BusyBox v1.00-rc3 (2007.01.11-05:43+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.
MetalGearBoxNAS>
Yes, that's right ... no password is set for the root user. Too easy.
