Dumping and extracting the SpaceX Starlink user terminal firmware
Been meaning to do this myself!  Great to see it. :)> While we would have to perform some more tests it appears that a full trusted boot chain (TF-A) is implemented from the early stage ROM bootloader all the way down to the Linux operating system.This unfortunately means it will likely be somewhat difficult (or infeasible) to reflash it with a custom firmware that uses
actual GPS location for targeting of satellites but reports a couple km offset to the telemetry service APIs to keep my residence address somewhat private from my ISP.It's a bummer they didn't share the dumps.  It always bothers me when researchers act all coy about their results.  Now I have to get my hands on a dish myself and do what they didn't (namely, actually publish the data).