I suggest to first check the USB ENUM messages, ideally on linux Look into linux' syslog (tail -f /var/log/messages) and watch the output while you connect the device to the PC via USB Paste here I wonder if Pali knows some details about an option to read out firmware using 0xFFFF. Gonna ask him on IRC if I find him Since you mentioned tools to access BB5 over in that other thread: N900 OS never runs on BB5 baseband, it has its own OMAP processor much similar to a Beagleboard-xM This might help: http://neo900.org/resources http://neo900.org/stuff/block-diagrams/n900/n900.html /j