I'm getting crazy: tried the "mount nfs" method like described in
this thread, also tried the "D) Disable diagnostics" way used by Duokan: no way...
I should find a way to unprotect the internal moviNand flash somehow (since I think it's something more deep than just a read-only filesystem mount).