So I bought an Apple Airport Express (2nd gen) the other day, and decided I wanted to tinker with it. Well the first thing I found were the UART pads, and soldered up some jumper wire to connect up a FTDI chip to the jumper wires. Then, I decided to record the entire boot process which can be found here, http://www.youtube.com/watch?v=5IY1mX3HqXQ
Does anyone here know how I could dump the current bootloader of the device?
Also, I take it I could load up a tftp server on my computer and see if I could reflash the device with openWRT, but I feel that would brick the device.