[Android Q&A, Help & Troubleshooting] shadow#:
I couldn't get the CCX 400 method to work and gave up after trying around 10 times.

I did however have some success with J1, which is indeed the UART connector.

Pinout seems to be [ ?? | TX | GND | ?? ]

Here's what I got on normal boot:

[ABI] ISSW:init.
[ABI] ABI s/w version: Capri ABI V2.6
DDR40_PHY_INIT

SHMOO

[ABI] [LOADING] Loader #0
[ABI] [STARTING] Loader...
Set pmu mbc ctrl2 ...PMU at I2C PMU
pmu_mbc ctrl2 read bit 0-7 0x0(3)
i2c write 0x0(3)
pmu_mbc ctrl2 read bit 0-7 0x0(3)
Get pmu dev enb 2 ...PMU at I2C PMU
pmu_dev_enb2 bit 0-7 0x0(3)
Get pmu mbc read ...PMU at I2C PMU
pmu_mbc read bit 0-7 0x0(3)
Get adc reading ...PMU at I2C PMU
adc reading bit 8-9 index 0 0x0(3)
adc reading bit 0-7 0x0(3)
adc reading bit 0-15 0x0
Read PMU ID ...PMU at I2C PMU
PMU ID 0x0(3)
UNIDENTIFIED PMU
Row 5 OTP value = 0x0, csr_val = 0x0
Start setting CSR ...PMU at I2C PMU
PMU CSRCTRL1 before write 0x0(3)
i2c write 0x0(3)
PMU CSRCTRL3 read 0x0(3)
i2c write 0x0(3)
Start setting VSR ...PMU at I2C PMU
PMU VSRPMCTRL1 before write 0x0(3)
i2c write 0x0(3)
PMU VSRPMCTRL1 after write 0x0(3)
PMU VSRPMCTRL2 before write 0x0(3)
i2c write 0x0(3)
PMU VSRPMCTRL2 after write 0x0(3)
PMU VSRPMCTRL3 before write 0x0(3)
i2c write 0x0(3)
PMU VSRPMCTRL3 after write 0x0(3)
PMU VSRPMCTRL4 before write 0x0(3)
i2c write 0x0(3)
PMU VSRPMCTRL4 after write 0x0(3)
Start setting MMCLDO1PMCTRL1 ...PMU at I2C PMU
312MHz Clk setting
1000MHz Clk setting
Can't lock ARM PLL
+bootldr_crash_dump
crash signature not detected
-bootldr_crash_dump

********************************************************************************
Loader version 0.2 started. Built date: Aug 17 2016 Time 17:46:12d
********************************************************************************
Chip Name: CAPRI
Chip Variant: 28155
Chip Revision: A3
Mode: Little
********************************************************************************

PCG Mode = 0x0
+bootldr_memory_scramble
-bootldr_memory_scramble
+bootldr_boot_parms_init
part:u-boot start(0x11000) end(0x117FF)
part:dt-blob start(0x11800) end(0x119FF)
part:vc-firmware start(0x18000) end(0x1BFFF)
-bootldr_boot_parms_init
bootldr_flash_init
part:boot2 start(0x20000) end(0x23FFF)
plcm: Partition boot2 header at 4000000
plcm: Partition boot2 header data:
41,4e,44,52,4f,49,44,21
part:boot start(0x1C000) end(0x1FFFF)
plcm: Partition boot header at 3800000
plcm: Partition boot header data:
41,4e,44,52,4f,49,44,21
Select default boot partitions
plcm: Default validity 1
plcm: Alternate validity 1
plcm: U-boot flash address 2200000
plcm: VC flash address 3000000

+bootldr_nand_load_boot_parms (p = 0xa009aa24)
Loading parameter from address 0x50000 with size = 0x200
bootldr_nand_load_boot_parms: boot parms signature not match, use default.
Load DT-Blob to 0xa009885c from flash 0x01010101, size=0x2300000

dt_parser: dt-blob size 2202 bytes!
model: Broadcom board
compatible: Broadcom,
dt_parser: found pinmux node @0xa009890c!
reg: 0x35004800, 0x10c
data@0xa0098958, size=1072
dt_parser: found gpio node @0xa0098d98!
reg: 0x35003000, 0x47
data@0xa0098de0, size=568
Valid DT-Blob! dt_pinmux_nr=268
Configured pin-mux! 76 gpio pins!
Missing initial cfg for GPIO bank0 (mask=0x10)
Missing initial cfg for GPIO bank2 (mask=0x78000000)
Configured gpio!
Press a key for Boot Mode:
[N]Normal
[C]Calibration

+bootldr_load_main_image
Load MAIN Image: First Block
MSP Signature: =babeface
MSP Size: 0x3DC08
-bootldr_load_main_image
+bootldr_get_pcg_mode
+bootldr_get_pcg_mode_key
bootldr_get_pcg_mode_key: WARNING! no key press detected.
-bootldr_get_pcg_mode_key
•PCG Timtout, pcg_mode = 0xa
-bootldr_get_pcg_mode
Boot Mode = 0
+bootldr_load_main_image
Load MSP Image, size_to_load = 0x3cc08
-bootldr_load_main_image
+bootldr_load_ap_data
+Loading sysparm2_ind_blob.img from 0x0110000 to 0xa01b0000 with 0x40000 bytes
+Loading sysparm2_dep_blob.img from 0x0150000 to 0xa01f0000 with 0x10000 bytes
-bootldr_load_ap_data
+bootldr_load_cp_image
ERROR: Couldn't find 0xbabeface in comms image!!!
MSP SIG value =0 at addr=a0200000 offset=20
+bootldr_load_cp_data
+Loading sysparm_ind.img from 0x080000 to 0xa0100000 with 0x80000 bytes
+Loading sysparm_dep.img from 0x0100000 to 0xa0180000 with 0x10000 bytes
+Loading dsp_pram.img from 0x01f20000 to 0xa01a0000 with 0x4000 bytes
+Loading dsp_dram.img from 0x02000000 to 0xa1800000 with 0x200000 bytes
+Loading UMTS cal from 0x01d0000 to 0xa00e0000
Clear AP-DSP share memory
De-Initialize the USB
Checking VSR in the PMU.

VC BASE = 0x80000000

VideoCore image version = 1
VideoCore image address = 0 (0)
VideoCore image size = 4585504 (45f820)
VideoCore postmortem image offset =4587520 (460000)
VideoCore postmortem image size = 185152 (2d340)
VideoCore postmortem image address= 3749707776 (df800000)
VideoCore postmortem image valid
Videocore Boot Filesystem
address = 0x0035e000
magic = BOOTFS
stored_size = 0x00101800
num_entries = 5 (0x5)
alloc_entries = 5 (0x5)
offset = 0x00000020
off_main = 0x0035e000
file 0: 'persist.vmcs_android.dbg' (@0x000002a0), size: 418727, CRC: 7b49ce97, ''
file 1: 'splash.vll' (@0x00066660), size: 9272, CRC: c39fab0c, ''
file 2: 'dt-blob.bin' (@0x00068aa0), size: 13694, CRC: aa5595dd, ''
saving 'dt-blob.bin' - integrity CRC: aa5595dd
file 3: 'dt-blob.bin_2' (@0x0006c020), size: 15318, CRC: dfa34433, ''
saving 'dt-blob.bin_2' - integrity CRC: dfa34433
file 4: 'splash.ppm' (@0x0006fc00.

U-Boot 2011.06-00013-gee7ead9 (Sep 03 2015 - 17:49:12 PDT)

I2C: ready
DRAM: 696 MiB
Relocation Offset is: 0x2d778000
KEY: Kona Keypad initialized.
MMC: KONA SD/MMC: 0, KONA SD/MMC: 1
kona_mmc_send_cmd: waiting for status update
kona_mmc_send_cmd: waiting for status update
mmc->rpmb_size: 131072
In: serial
Out: serial
Err: serial
Disabling watchdog
kona_mmc_send_cmd: waiting for status update
kona_mmc_send_cmd: waiting for status update
kona_mmc_send_cmd: waiting for status update
Card did not respond to voltage select!
MMC init failed
Setting L2 MMU table for boot ROM -- not set in SWDEV mode
Core 1 patch function addr: 0xbb79e448
Core 1 patch function end addr: 0xbb79e484
Core 1 patch SRAM loc: 0x3404bf00
VC4 raw image detected
Booting VideoCore at 0xc0000200.
VC starting...
Hit any key to stop autoboot: 1 ... 0
find_boot_reason: SHUTDOWN REASON REG(0xf1) = 0x0
find_boot_reason: WAKE REASON REG(0xf0) = 0x0
shutdown_pmu: Default PMU_REG_PMU_GPIOCTRL1 = 0x0
shutdown_pmu: New PMU_REG_PMU_GPIOCTRL1 = 0x0
boot_reason = 14
VideoCore entry = 0xc0000200
VC init already called, skipping...
Loading DT Blob ...
MMC read: dev # 0, block # 71680, count 16
Booting from primary partition

100% (7966/7966 blocks)

100% (1475/1475 blocks)
Setting up param a0000124 a000012c header size 8 total 75 command line len 287:287 "console=ttyS0,115200n8 androidboot.console=ttyS0 mem=510M androidboot.systembuffer= androidboot.altsystembuffer=2 startType=0x00000002 vlanCfg=0x00000000 bcmmac=00:04:f2:ff:d5:ef sn=00:04:f2:ff:d5:ef wifimac=00:04:f2:ff:d5:f0 btmac=00:04:f2:ff:d5:f1 androidboot.macaddr=00:04:f2:ff:d5:f0" -1153996277
Setting up dt-blob tag ...@0xa0000260 from 0xbb7f8000
dt-blob size: 2202 bytes
Done dt-blob tag, 0xa0000b04

Starting kernel ...

Uncompressing Linux...

uncompression error

-- System halted..

Anything useful in there, a possible way to unbrick the device?

To get any further I will first need a connector for this port, as I was connecting ground somewhere else and just held a wire to the connector...

I'd need to find something like this with 4 pins:

Does anyone know what connector this is?

It connects top and bottom, which is why I thought it was 8 pins first.