"Although the information we release has been verified and shown to work to the best our knowledge, we cant be held accountable for bricked devices or roots gone wrong."
The Amazon Tap is a wireless bluetooth & wifi speaker featuring the "Alexa" voice assistant.
Buying devices is expensive and, in a lot of cases our testing leads to bricked equipment. If you would like to help support our group, site, and research please use one of the links below to purchase your next device. Purchase the Amazon Tap at Amazon
- Freescale [MCIMX6L8DVN10AB] i.MX 6 SoloLite Applications Processor
- KMNJ2000ZM eMMC/DRAM
- Broadcom BCM4343
You can find an excellent teardown of the Amazon Tap at [ifixit.com].
The Amazon Tap features UART pads that provides u-boot and kernel output, but allows for no practical input - no shells of any sort.
The UART pads can be found in the photo below, with the settings of 115200 8n1.
Gaining Bootloader Shell
The Amazon Tap implements a secure boot process, however a bootloader shell can be obtained by grounding the eMMC flash data pin while U-Boot is reading its own environmental variables into memory.
To access the bootloader shell.
- Connect to UART (keep your TX line disconnected!)
- Power on
- Wait for output over UART
- Ground resistor below the TP27 silkscreen
- U-Boot shell is available when presented with "=>"
The photo below illustrates the process.