Few comments after reading Wiki

[Werner Almesberger]

Marcin Wiacek wrote:
> 6.microswitch for real hardware blocking flashing (to prevent changing
> firmware)

Flash protection is planned for the "later this year" aka "getting
everything right this time" model.

The idea is to have an emergency/recovery u-boot in a separate Flash
chip, which can be activated if the regular boot process got broken.

This recovery Flash should never need to be changed, so making it
easy to do so isn't a particularly high priority. (As in "soldering
iron" instead of "switch".)

Our current hardware doesn't allow Flash protection to be done
sensibly :-( So software/user input can in fact brick a machine to
the point where the only recovery possible is through JTAG, e.g.,
with the debug board.

- Werner

-- 
  _________________________________________________________________________
 / Werner Almesberger, Buenos Aires, Argentina     werner at almesberger.net /
/_http://www.almesberger.net/____________________________________________/