For many scopes the process is simply to "run backdoor command X", "run keygen Y" or "overwrite byte ZZ of the EEPROM", it's unusual to see a cool fully documen

For many scopes the process is simply to "run backdoor command X", "run keygen Y" or "overwrite byte ZZ of the EEPROM", it's unusual to see a cool fully documented reverse engineering effort on a model previously unexplored, which is why I submitted this article. Interestingly, since the manufacturers' revenues come from selling to enterprise users under service contracts, they usually don't care about a hardware hackers or two on the web at all.