[Upgrading, Modifying and Unlocking] zxvf:
I did it just by chance, right as you start loading ur shipped rom using the himauptdate or what ever program u use.. it will first erase the rom/ram what I did, (risking my BA, but luckely it's still dummy proof at that point) was unplug the phone, from the cradle right as it hit the 100% (erased completed) then I plugged it right back in, and I got the BDG> instead of the usual USB> I decided to see what would be different and l was available, I didn't know how to use it at the time (now I know thanks to you). if u have a copy of the dumped bootloader u can use a hexeditor I use xvi32, which can be found in the xda-dev's FTP. if u look around, u can see some readable data, I've looked at it throughly and thus thats how I figured the password.. here's the part that shows the different modes, so u can see there is BDG> mode

Addr 0 1 2 3 4 5 6 7 8 9 A B C D E F 0 2 4 6 8 A C E

-------- ---- ---- ---- ---- ---- ---- ---- ---- ----------------

00002a00 4873 0390 0000 0000 0000 0000 0000 0000 Hs..............

00002a10 0000 0000 0100 0000 6c77 0000 7072 6f75 ........lw..prou

00002a20 7465 7200 6368 6563 6b73 756d 0000 0000 ter.checksum....

00002a30 7764 6174 6100 0000 6572 6173 6500 0000 wdata...erase...

00002a40 7262 6d63 0000 0000 7461 736b 0000 0000 rbmc....task....

00002a50 7365 7400 7368 6d73 6700 0000 6432 7300 set.shmsg...d2s.

00002a60 6c6e 6200 6c00 0000 7061 7373 776f 7264 lnb.l...password

00002a70 0000 0000 696e 666f 0000 0000 7374 7269 ....info....stri

00002a80 6e67 0000 6d77 0000 6d68 0000 6d62 0000 ng..mw..mh..mb..

00002a90 0a0a 2a2a 2a20 5365 7269 616c 2070 6f72 ..*** Serial por

00002aa0 7420 7761 7320 7265 2d69 6e69 7469 616c t was re-initial

00002ab0 697a 6564 2064 7565 2074 6f20 756e 6578 ized due to unex

00002ac0 7065 6374 6564 2070 726f 626c 656d 202a pected problem *

00002ad0 2a2a 0a0a 0000 0000 4442 473e 0000 0000 **......DBG>....

00002ae0 5553 423e 0000 0000 5345 523e 0000 0000 USB>....SER>....

00002af0 3f00 0000 0d00 0000 0820 0800 546f 6f20 ?........ ..Too

Addr 0 1 2 3 4 5 6 7 8 9 A B C D E F 0 2 4 6 8 A C E

-------- ---- ---- ---- ---- ---- ---- ---- ---- ----------------

00002b00 6d61 6e79 2061 7267 756d 656e 7473 0a00 many arguments..

00002b10 466f 7220 6120 6865 6c70 2073 6372 6565 For a help scree

00002b20 6e2c 2075 7365 2063 6f6d 6d61 6e64 203f n, use command ?

00002b30 206f 7220 680a 0000 4d61 7820 4379 6c69 or h...Max Cyli

00002b40 6e64 6572 203a 2025 752c 204d 6178 2048 nder : %u, Max H

00002b50 6561 6420 3a20 2575 2c20 4d61 7820 5365 ead : %u, Max Se

00002b60 6374 6f72 203a 2025 752c 2054 6f74 616c ctor : %u, Total

00002b70 2073 7061 6365 203a 2025 7520 4b42 0a0d space : %u KB..

00002b80 0000 0000 4669 7277 6172 6520 7265 7669 ....Firware revi

00002b90 7369 6f6e 203a 2025 730a 0000 4d6f 6465 sion : %s...Mode

00002ba0 6c20 6e75 6d62 6572 203a 2025 730a 0000 l number : %s...

00002bb0 2573 0a00 4346 5265 6164 5365 6374 6f72 %s..CFReadSector

00002bc0 572d 3a20 7743 796c 696e 6465 723d 2578 W-: wCylinder=%x

00002bd0 2c63 6248 6561 643d 2578 2c63 6253 6563 ,cbHead=%x,cbSec

00002be0 746f 723d 2578 2c62 5374 6174 7573 3d25 tor=%x,bStatus=%

00002bf0 780d 0a00 4346 5772 6974 6553 6563 746f x...CFWriteSecto

I'm about to try and see if I can get in the DBG> mode, hopefully it wasn't just a lucky shot and it's easy to duplicate again..

anyways i'll keep u posted