=====Serial Port=====
The serial port turned out to just be control data sent from the CPU board to the transceiver board, explained further below. Removing the flash memory is an option although it is a BGA package so not sure about soldering wires to it so it can be read out. Furthermore, the OMAP-L138<ref>Texas Instruments Component</ref> processor seems to have a few protection mechanisms. Encryption of the firmware is one of them so that route might be useless.
====Hardware Attack====
<br />
== References ==
<references />