UPDATE: People on IRC can confirm this hack works with MXIC memchips, no luck with Winbond but
the russians seem to think it is possible
UPDATE: This MAY work with a Winbond after all, the resistance is just more finicky. Will update with more news
Alright, so let me preface with anyone who tries this does so at
their own risk and that I'm just repeating information here.
However, sekil claims to have succeed with this and c4eva
claimed it was promising and that the JungleFlasher team were
looking into it.
What You'll Need
Locked dg-16d4s with mxic memchip
Latest version of JF
Russian unlock tool (http://hackfaq.net/download/Unlock_16d4s.rar)
(5 or) 10 - 20 ohm resistors
You'll need to cut and repair a trace, be prepared
Steps
1. Cut the trace shown as a red line on thispage
2. Wire a 10ohm resistor from the orange circle (C59?) to GND, if you have problems try higher and lower resistances.
If you want to give a Winbond a shot, know that a variable resistor (ie, potentiometer) would be ideal. Will update this
3. Put the drive into vendor mode with JF
4. Use the MTK Unlock tool by sekil (unclear on this, will update later)
5. Erase And Write the drive like normal through JF, may take multiple tries (exactly how many is a matter of "patience and imagination")
6. Repair the trace (and remove the resistor)
Video proof of concept:
Social Networking Bookmarks