> That said, I'm really surprised that JTAG couldn't read out the ROM, in theory that is how you would program it. I'm no embedded expert, but I would assume s

> That said, I'm really surprised that JTAG couldn't read out the ROM, in theory that is how you would program it. I'm no embedded expert, but I would assume some devices let you write to them and upload new code using the JTAG interface, but still prevent you from reading if the author have signalled that he wants his code protected. Quick DDGing seems to suggest this is indeed a vendor/chip-specific capability: https://duckduckgo.com/?q=jtag+read+protection&t=ffsb https://duckduckgo.com/?q=jtag+read+protection&t=ffsb