[HTC Wildfire S] no.human.being:
Ok, I have disassembled my phone and connected to the board via JTAG using OpenOCD 0.5.0.

It was quite easy to get "some sort of response" from it, however, there are still errors and I can't communicate. This is the current OpenOCD script.

interface ft2232
ft2232_device_desc "Olimex OpenOCD JTAG ARM-USB-TINY-H"
ft2232_layout olimex-jtag
ft2232_vid_pid 0x15ba 0x002a

jtag_khz 6000
reset_config trst_and_srst srst_pulls_trst

set _CHIPNAME ARM1136EJS
set _ENDIAN little
set _CPUTAPID 0x203c00e1

set CPU_TYPE arm
set CPU_NAME arm11
set CPU_ARCH armv6
set CPU_MAX_ADDRESS 0xFFFFFFFF
set CPU_NBITS 32

jtag newtap $_CHIPNAME cpu -irlen 5 -ircapture 0x1 -irmask 0xf -expected-id $_CPUTAPID
target create marvel $CPU_NAME -endian $_ENDIAN -chain-position $_CHIPNAME.cpu

And OpenOCD response.

$ sudo openocd -f ~/test.cfg
Open On-Chip Debugger 0.5.0 (2012-01-14-15:04)
Licensed under GNU GPL v2
For bug reports, read
http://openocd.berlios.de/doc/doxygen/bugs.html
Info : only one transport option; autoselect 'jtag'
6000 kHz
trst_and_srst srst_pulls_trst srst_gates_jtag trst_push_pull srst_open_drain
Warn : ARM1136EJS.cpu: nonstandard IR value
Info : max TCK change to: 30000 kHz
Info : clock speed 6000 kHz
Info : TAP ARM1136EJS.cpu does not have IDCODE
Warn : Unexpected idcode after end of chain: 1 0x00000000
Warn : Unexpected idcode after end of chain: 33 0x00000000
Warn : Unexpected idcode after end of chain: 65 0x00000000
Warn : Unexpected idcode after end of chain: 97 0x00000000
Warn : Unexpected idcode after end of chain: 129 0x00000000
Warn : Unexpected idcode after end of chain: 161 0x00000000
Warn : Unexpected idcode after end of chain: 193 0x00000000
Warn : Unexpected idcode after end of chain: 225 0x00000000
Warn : Unexpected idcode after end of chain: 257 0x00000000
Warn : Unexpected idcode after end of chain: 289 0x00000000
Warn : Unexpected idcode after end of chain: 321 0x00000000
Warn : Unexpected idcode after end of chain: 353 0x00000000
Warn : Unexpected idcode after end of chain: 385 0x00000000
Warn : Unexpected idcode after end of chain: 417 0x00000000
Warn : Unexpected idcode after end of chain: 449 0x00000000
Warn : Unexpected idcode after end of chain: 481 0x00000000
Warn : Unexpected idcode after end of chain: 513 0x00000000
Warn : Unexpected idcode after end of chain: 545 0x00000000
Warn : Unexpected idcode after end of chain: 577 0x00000000
Error: double-check your JTAG setup (interface, speed, missing TAPs, ...)
Error: Trying to use configured scan chain anyway...
Error: IR capture error at bit 4, saw 0x20 not 0x...3
Warn : Bypassing JTAG setup events due to errors
Error: unexpected ARM11 ID code
Polling target failed, GDB will be halted. Polling again in 100ms
Polling target failed, GDB will be halted. Polling again in 300ms
Polling target failed, GDB will be halted. Polling again in 700ms
Polling target failed, GDB will be halted. Polling again in 1500ms
Polling target failed, GDB will be halted. Polling again in 3100ms
Polling target failed, GDB will be halted. Polling again in 6300ms
Polling target failed, GDB will be halted. Polling again in 6300ms

Compared to when I disconnect the JTAG interface from the board.

Error: JTAG scan chain interrogation failed: all ones
Error: Check JTAG interface, timings, target power, etc.

So it's getting "some sort" of response, but I'm not there yet.