Dumped the firmware and some important areas😀(am I missing any other important ones from the nRF52?)
Thanks to @colinoflynn for the test point mapping (and nerdsniping me with the AirTags in the first place), and also for listening to my rambling/cursing/etc :)
Similar to most Apple embedded devices, the AirTags also seem to run RTKit... And this is where it gets interesting: It's a DEBUG build - debug builds have more functionality, and sometimes more logs & co - this is good news!
My Nintendo Game and Watch arrived a day early! Let’s tear it down and see how it works - and how easy it is to hack it!
For opening it up you unfortunately need some Y-style screwdrivers - let’s see what’s underneath!
Interesting, an STM32H7B0VBT6 is the main processor! Cortex-M7, 128 KBytes Flash, 1024 KBytes of RAM. Also some unpopulated headers close by that expose SWD (the Arm Cortex-M debug interface)!