I've recently put some effort into reverse engineering several PAL's and other (slightly) more complex programmable logic devices that have had their security fuse blown. Would folks here be interested in a general summary of the methods, pointers to tools and hardware, etc? This *isn't* rocket science, and it isn't putting the device in the output end of a particle accelerator either :-). What I've done here so far involves simple scanning circuits constructed from common-as-dirt parts, and software to process the results of the scans. -- Tim Shoppa Email: shoppa(a)trailing-edge.com Trailing Edge Technology WWW: http://www.trailing-edge.com/ 7328 Bradley Blvd Voice: 301-767-5917 Bethesda, MD, USA 20817 Fax: 301-767-5927