Develop Bugs

[Q] Help - New to rooting

All -
I am not sure where to go. I am new to a Verizon GNex running stock ICS v4.0.4 and using a mac laptop, and looking to possibly get into rooting. It appears CM9 is popular specially since they appear to have added several of the SIII's new features.
I have read several posts on several sites talking about rooting the GNex. There seems soooooo many different ways to root i'm going crazy. Since I am new to rooting, I am not sure what is the best/easiest way to get started to ensure I don't loose anything.
Any help on the right way to go, any forum posts to start with, etc....would be very much appreciated!!
Thanks!

use this method: http://forum.xda-developers.com/showthread.php?t=1529058
dont use a toolkit either. you'll be better off with the knowledge of what you are doing and people will be more apt to help you if things go wrong.

Zepius said:
use this method: http://forum.xda-developers.com/showthread.php?t=1529058
dont use a toolkit either. you'll be better off with the knowledge of what you are doing and people will be more apt to help you if things go wrong.
Click to expand...
Click to collapse
+1

Thanks
Thank you both for replying, but....I am working on a MacBook and the link you provided appears only to be for a Windows Machine. I luv the walk-thru what exists in the forum - I just need it for a Mac..
Thanks again!

Should be the same deal... just with terminal.
Here is a zip with ad and fast boot needed for Mac. It may also have the recovery and su.zip but ignore those use what the windows tutorial says.
http://db.tt/RDgw4XlM
Sent From My Sprint Galaxy Nexus via XDA Premium

p.cooper said:
Thank you both for replying, but....I am working on a MacBook and the link you provided appears only to be for a Windows Machine. I luv the walk-thru what exists in the forum - I just need it for a Mac..
Thanks again!
Click to expand...
Click to collapse
its basically the same steps just use terminal

ok, thank you. I will look a the zip provided and go from there. Thank you all!

p.cooper said:
Thank you both for replying, but....I am working on a MacBook and the link you provided appears only to be for a Windows Machine. I luv the walk-thru what exists in the forum - I just need it for a Mac..
Thanks again!
Click to expand...
Click to collapse
Exact same method, but use Terminal instead of Command Prompt, and put a "./" in front of every command. For example:
Code:
./adb devices

no counter root for sgs3 att is odin 100% necessary?

Hey guys, I'm on linux here and unfortuantely I do not have a windows computer. I'm pretty new to the android game, sgs3 is my first android phone.
My question: Since I don't have windows will mounting my phones internal flash drive and then using dd to flash the stock image with root enabled over to my phone work the same as odin? or does odin do something further? Also will heimdall work for this purpose? I suppose I can always bring up windows in the hypervisor but it seems like this would be easier. I am also just curious as to what odin does.

Odin is used to flash firmwares, modems, kernels, and recoveries. As far as I know, Heimdall doesn't support the S3, unless it's been updated and I don't know about it. That would be up to you to find out.
As for your first question about using dd, I haven't got a clue. Best wait for someone more knowledgeable then me to come in and answer that one.

miztaken1312 said:
Odin is used to flash firmwares, modems, kernels, and recoveries. As far as I know, Heimdall doesn't support the S3, unless it's been updated and I don't know about it. That would be up to you to find out.
As for your first question about using dd, I haven't got a clue. Best wait for someone more knowledgeable then me to come in and answer that one.
Click to expand...
Click to collapse
Thanks for the reply, in linux dd is a terminal program that writes images to disk, among other things, be it usb, flash drive, hard drive etc. Like if you downloaded the ubuntu image for your computer and then wanted to install it to usb drive for a live image from which make an install on another computer you would use dd if=/image_pathway of=usb drive or flash drive or whatever media you wish to install it to. I have a pandaboard, and have actually used dd to write linaro android to the pandaboard's flash drive before, but I figure theres a good chance that the phone is more complex and may have hardware/software to prevent someone from simply using dd to write a disk image to the phones internal flash drive.

Actually, I believe I've heard of people being able to dd custom recoveries onto the phone. I don't remember where I saw this though.
Sent from my GS3

I think you need an unsecure kernel to the dd thing. I think.

Thanks for the replies. I just loadedup windows in the hypervisor and rooted that way. I wish I had a second phone to test stuff like this on lol. I have pandabaord to test software on but it's not quite the same.

radiumX said:
Thanks for the replies. I just loadedup windows in the hypervisor and rooted that way. I wish I had a second phone to test stuff like this on lol. I have pandabaord to test software on but it's not quite the same.
Click to expand...
Click to collapse
Does anyone know who develops odin? Is it someone on this forum? Was thinking maybe they'd be willing to allow me to port it to linux.

radiumX said:
Does anyone know who develops odin? Is it someone on this forum? Was thinking maybe they'd be willing to allow me to port it to linux.
Click to expand...
Click to collapse
Heimdall will work for you.
Life is a prison, death and release.

Odin is leaked software from Samsung.

prata said:
Heimdall will work for you.
Life is a prison, death and release.
Click to expand...
Click to collapse
Anyone else confirm? I can use heimdall to flash roms, and the root injected stock image to my sgs3 from within linux?

Odin is samsung software. We have a few samsung tablets that come in for repair where I work and Odin is what samsung gave us to flash their software onto the tablets.

Upgrading to stock JB on Mac OSx

Got an Australian Gnex running 4.04. The OTS jellybean update is months away according to Vodafone AU so ive been looking into manual solution that causes the least disruption possible. Very tough diciphering the language on here. My apologies but there doesnt seem to be a specific thread that can help.
From what i have read - I can open the Bootloader and somehow flash the factory image without rooting?
Was on the dev page at google to get the latest firmware? - ive DL'd yakju Android 4.1.1 (JRO03C)
I have already unlocked the bootloader with a toolkit for mac found here on XDA. i just dont know what to do next? The file is a .tgz which ive never heard of? dont you normally copy the whole zip file to the SD card then boot into recovery and somehow flash the new firmware? Help.

bigdave78 said:
Got an Australian Gnex running 4.04. The OTS jellybean update is months away according to Vodafone AU so ive been looking into manual solution that causes the least disruption possible. Very tough diciphering the language on here. My apologies but there doesnt seem to be a specific thread that can help.
From what i have read - I can open the Bootloader and somehow flash the factory image without rooting?
Was on the dev page at google to get the latest firmware? - ive DL'd yakju Android 4.1.1 (JRO03C)
I have already unlocked the bootloader with a toolkit for mac found here on XDA. i just dont know what to do next? The file is a .tgz which ive never heard of? dont you normally copy the whole zip file to the SD card then boot into recovery and somehow flash the new firmware? Help.
Click to expand...
Click to collapse
All the info you need is in this post: http://forum.xda-developers.com/showthread.php?t=1626895

Petrovski80 said:
All the info you need is in this post: http://forum.xda-developers.com/showthread.php?t=1626895
Click to expand...
Click to collapse
Thanks - i had read that thread but im stuck at the directory commands. its not working on mac.

Did you download the proper platform tools for your OS?
Sent from my Galaxy Nexus using Tapatalk 2

Petrovski80 said:
Did you download the proper platform tools for your OS?
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
Yes. i dont know how use commands and directories. The thread is not clear for mac users.
The 'NEW!Install Stock Jelly Bean / Unroot to Stock Jelly Bean [Odin for Mac] ONLY GSM!' one click method didnt work.
Such a shame this has to be so complicated. Im stuck and now just have a wiped phone still on 4.04 and i cant ask any pertinent questions in the appropriate threads because im a new member.

Petrovski80 said:
Did you download the proper platform tools for your OS?
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
bigdave78 said:
Yes. i dont know how use commands and directories. The thread is not clear for mac users.
The 'NEW!Install Stock Jelly Bean / Unroot to Stock Jelly Bean [Odin for Mac] ONLY GSM!' one click method didnt work.
Such a shame this has to be so complicated. Im stuck and now just have a wiped phone still on 4.04 and i cant ask any pertinent questions in the appropriate threads because im a new member.
Click to expand...
Click to collapse
Question remains - once the bootloader is unlocked - can you install the downloaded google factory image from recovery without any complex commands?

bigdave78 said:
Yes. i dont know how use commands and directories. The thread is not clear for mac users.
The 'NEW!Install Stock Jelly Bean / Unroot to Stock Jelly Bean [Odin for Mac] ONLY GSM!' one click method didnt work.
Such a shame this has to be so complicated. Im stuck and now just have a wiped phone still on 4.04 and i cant ask any pertinent questions in the appropriate threads because im a new member.
Click to expand...
Click to collapse
It is not complicated at all. If you don't know how to open a terminal window and type in commands, it has nothing to do with android or flashing. It has to do with knowing how to use your computer.
I already replied to you in the other thread: to switch directories in a terminal, you use the cd command, i.e., cd /this/is/where/my/files/are
Lack of knowledge on how to use your Mac should not be confused with anything Android... not related at all.
Sent from my Galaxy Nexus using Tapatalk 2

efrant said:
It is not complicated at all. If you don't know how to open a terminal window and type in commands, it has nothing to do with android or flashing. It has to do with knowing how to use your computer.
I already replied to you in the other thread: to switch directories in a terminal, you use the cd command, i.e., cd /this/is/where/my/files/are
Lack of knowledge on how to use your Mac should not be confused with anything Android... not related at all.
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
I genuinely appreciate the help, but realise that 95% of computer users will never open a terminal and type a command. Ive typed your commands in terminal but its not working and i dont understand directories. If i dont ask questions ill never learn will i? I cant see your reply anywhere??

bigdave78 said:
I genuinely appreciate the help, but realise that 95% of computer users will never open a terminal and type a command. Ive typed your commands in terminal but its not working and i dont understand directories. If i dont ask questions ill never learn will i? I cant see your reply anywhere??
Click to expand...
Click to collapse
Asking questions if you don't understand is perfectly fine... and I'm willing to help. But complaining that a procedure is complicated and lengthy when it actually is not, is not cool.
As for your issue (although I've never used MacOS): if you save the files in a directory call junk, and junk is located in myname, the the command to reach junk would be something like: cd /myname/junk. Or, find a way to open a terminal in the junk directory to begin with -- I'm sure if you search any Mac help site (with something like how to open a terminal) you can easily find that out, no?
Sent from my Galaxy Nexus using Tapatalk 2

efrant said:
Asking questions if you don't understand is perfectly fine... and I'm willing to help. But complaining that a procedure is complicated and lengthy when it actually is not, is not cool.
As for your issue (although I've never used MacOS): if you save the files in a directory call junk, and junk is located in myname, the the command to reach junk would be something like: cd /myname/junk. Or, find a way to open a terminal in the junk directory to begin with -- I'm sure if you search any Mac help site (with something like how to open a terminal) you can easily find that out, no?
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
The fact ive sat here for more than 4 hours reading through threads, searching forums, reading tech sites, asking friends, unlocking the bootloader, downloading firmware, trying desperately to make 'terminal' work with your method, and leaving posting in this forum as the last resort - is testmanet to how complicated this is to a new user - especially one on a mac system. Ive used one click root methods previously when i had access to windows - unfortunately i dont anymore. I think the guides are easy to follow as a PC user, not necessarily for a mac. Ive tried to use terminal to locate the files, i cant do it. dont understand the basic principals involved to understand the mistakes im making.

bigdave78 said:
The fact ive sat here for more than 4 hours reading through threads, searching forums, reading tech sites, asking friends, unlocking the bootloader, downloading firmware, trying desperately to make 'terminal' work with your method, and leaving posting in this forum as the last resort - is testmanet to how complicated this is to a new user - especially one on a mac system. Ive used one click root methods previously when i had access to windows - unfortunately i dont anymore. I think the guides are easy to follow as a PC user, not necessarily for a mac. Ive tried to use terminal to locate the files, i cant do it. dont understand the basic principals involved to understand the mistakes im making.
Click to expand...
Click to collapse
I think you are making it more complicated that it really is. When you open a terminal, in which directory does it open? In other words, what is the prompt that you see? THAT is the directory that you should download and extract all the files to.

That's the problem you need to fix. Read some basics about macosx. Get comfortable using it. Then proceed with flashing your gnex.
This looks like a good tutorial:
http://guides.macrumors.com/Terminal
Sent from my Galaxy Nexus using Tapatalk 2

I'm now rooted with super user acces. followed techfanatic9's guide in the Mac thread and keyed in the commands in terminal. But now how do i install the factory image from Google?Yakju-jro030c? Its not a rom is it??
Do i still need to learn terminal commands???

bigdave78 said:
I'm now rooted with super user acces. followed techfanatic9's guide in the Mac thread and keyed in the commands in terminal. But now how do i install the factory image from Google?Yakju-jro030c? Its not a rom is it??
Do i still need to learn terminal commands???
Click to expand...
Click to collapse
Another issue you are having is that you are trying too many different methods, and confusing them. There was no need to root if you are flashing a new rom.
Sent from my Galaxy Nexus using Tapatalk 2

efrant said:
Another issue you are having is that you are trying too many different methods, and confusing them. There was no need to root if you are flashing a new rom.
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
Okay, so now there is no way i can do this because im rooted? ...im a frustrated, technically struggling user that just wants to try and get jelly bean stock image - nothing more extravagant than that. ive tried to follow every instruction to the letter.....aside from having to learn terminal language for OSx, im doing my best. come on dude, not everyone has that kind of time

bigdave78 said:
Okay, so now there is no way i can do this because im rooted? ...im a frustrated, technically struggling user that just wants to try and get jelly bean stock image - nothing more extravagant than that. ive tried to follow every instruction to the letter.....aside from having to learn terminal language for OSx, im doing my best. come on dude, not everyone has that kind of time
Click to expand...
Click to collapse
You can still flash the stock jb as per my instructions. It's just that rooting made no difference - it was a wasted step.
And as I said before, you don't have to learn the commands, as I've written them out for you. You just need to find out how to save the files and open a terminal in the same folder, which doesn't seem like a difficult thing to do. Google should be able to tell you how to open a terminal in a specific folder. Or, as I mention before, save the files in the folder which you already have your terminal open.
The whole purpose of my guide was to learn -- and you are have a more difficult time than others because you have taken shortcuts (I.e. 1-click methods) in the past.
I agree, not everyone has that kind of time: I have 3 kids (with everything that comes along with that), work a high-stress, 70 hour a week job, and no IT/tech/linux/android background, but I managed.
Sent from my Galaxy Nexus using Tapatalk 2

efrant said:
You can still flash the stock jb as per my instructions. It's just that rooting made no difference - it was a wasted step.
And as I said before, you don't have to learn the commands, as I've written them out for you. You just need to find out how to save the files and open a terminal in the same folder, which doesn't seem like a difficult thing to do. Google should be able to tell you how to open a terminal in a specific folder. Or, as I mention before, save the files in the folder which you already have your terminal open.
The whole purpose of my guide was to learn -- and you are have a more difficult time than others because you have taken shortcuts (I.e. 1-click methods) in the past.
I agree, not everyone has that kind of time: I have 3 kids (with everything that comes along with that), work a high-stress, 70 hour a week job, and no IT/tech/linux/android background, but I managed.
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
I didnt find how to move the terminal command subject and i did try many different pages via google and many different ways of phrasing the query. So i just dumped all the files onto the desktop as that was where terminal seemed to be referringand it seems to be working. im waiting for the final reboot - its taking a long time. :fingers-crossed:

bigdave78 said:
I didnt find how to move the terminal command subject and i did try many different pages via google and many different ways of phrasing the query. So i just dumped all the files onto the desktop as that was where terminal seemed to be referringand it seems to be working. im waiting for the final reboot - its taking a long time. :fingers-crossed:
Click to expand...
Click to collapse
I think you got it! The first boot will take significantly longer than usually.
Sent from my Galaxy Nexus using Tapatalk 2

efrant said:
I think you got it! The first boot will take significantly longer than usually.
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
Still waiting. should it take 15 minutes plus??

40 minutes. Stuck on the black screen with google and the lock at the bottom?
take it this is bad news.

[XYBOARD][RECOVERY] Funding for Dev to create Recovery/Rom

I would like to know how many forum members would be willing to donate funds to any developer willing to seriously work at creating a recovery program and maybe one rom for the Xyboard 10.1 4G/LTE device.
I realize the bootloader is still locked, but devs have managed to bypass the bootloader on other devices using some very creative thinking. The bootloader on my Droid Razr is still locked, but we have Safestrap, CWM
There is also a member i saw that would be willing to donate a xyboard for testing.
I would be willing to donate $100 towards this project.
We need to show the manufacturers that our platform is truely OPEN SOURCE?

so, here we meet again, chumboy
well i'm in, offering 50$ for unlock/bypass

nchantmnt said:
so, here we meet again, chumboy
well i'm in, offering 50$ for unlock/bypass
Click to expand...
Click to collapse
welcome! hey again.
fair amount of views, not many investors.
surprised, it's verizon's main tablet that has 4g (besides the galaxy tab 10.1 which i heard is discontinued).
patience.

I would get in on this. I have actually been trying to figure out Hash's safestrap to see how it is replicated for different devices.
Sent from my Droid3 using xda app-developers app

I know it can be done...it's just a matter of interest. Is some dev interested in spending time to figure it out.
we have recovery for many, many devices whose bootloaders are locked.
SafeStrap would be great....or TWRP.
So far, we have $150 available for anyone who creates a recovery. Come 'n git it, devs!

why not create a simmilar thread at xoomforums.com... guess the most of interested useres aren't reading much @ XDA since atm there is no development going on for this device.
if you do so, just be sure to link to each other thread, list the users & amount and sync those two threads in their first post like:
"chumboy (xda/xoomforums) - 100$
nchantmnt (xda/xoomforums ) - 50
.....
hopefully many many more
_____
total funds until 28th of Sept - 150$
ill try and see if i can get some users @ androild-hilfe.de to join in
maybe u know of some other forums as well
cheers

25 from me if the recovery will working for international xoom2 too.

Hello guys,
i want to help you to get a custom recovery for your XOOM2,
because i´ve long waited for a cwm that could be used on my phone - Motoluxe XT615.
And i got sick of all those devs out there who don´t want to help us to make it even easier.
So my mates and me tired a lot together. Finally a chinese developer team got it.
So i hope i can charge my knowledge with you.
My first few questions are:
- Any tries of implementing 2nd init?
- Which type of internal storage (MTD, EMMC)?
- Locked bootloader (realy think so )?
- Can you upload the init.* script in the root of your phone?
I hope you have rootaccess

luxxx123 said:
Hello guys,
i want to help you to get a custom recovery for your XOOM2,
because i´ve long waited for a cwm that could be used on my phone - Motoluxe XT615.
And i got sick of all those devs out there who don´t want to help us to make it even easier.
So my mates and me tired a lot together. Finally a chinese developer team got it.
So i hope i can charge my knowledge with you.
My first few questions are:
- Any tries of implementing 2nd init?
- Which type of internal storage (MTD, EMMC)?
- Locked bootloader (realy think so )?
- Can you upload the init.* script in the root of your phone?
-and yes we have root
I hope you have rootaccess
Click to expand...
Click to collapse
for 2nd init i really lack the knowledge of how to do this, but atm trying to get to know more about it. is this even working on ics?
internal storage should be mtd if i'm not totally wrong...
the bootloader is locked, we are sure about that and about the init... will upload it for you later... first got to recharge^^
what kind of approach is it that you have in mind? i may lack the knowledge about bootstrapping etc, but i'm eger to learn

nchantmnt said:
for 2nd init i really lack the knowledge of how to do this, but atm trying to get to know more about it. is this even working on ics?
internal storage should be mtd if i'm not totally wrong...
the bootloader is locked, we are sure about that and about the init... will upload it for you later... first got to recharge^^
what kind of approach is it that you have in mind? i may lack the knowledge about bootstrapping etc, but i'm eger to learn
Click to expand...
Click to collapse
The 2nd init should not be a problem. Internal storage is /mnt/sdcard/ external drive can be loaded on /mnt/usbdisk_1.0/
The bootloader is locked, Motorola has not released this yet. However, I did decode a file that had the agreement for unlocking the bootloader so this leads me to believe it will happen in the future.
My knowledge of bootstrapping is limited as well but I do know that if Motorola's system catches anything of another system trying to run, it will reject it and either bootloop or reboot. The secret is in the boot stage not interacting with factory boot at all.

wow...you guys are talking way over my head. i understand somewhat, but at this time, i can't contribute anything but funding.
and emotional support !!!
let me know what a non-coder like myself can do to help you.
so far, we have $175 available to dev who creates recovery.

Devs,
Just want to make sure you dev's are working on the Xyboard 10.1" with LTE connectivity and not just the wifi only device.
It's the Xyboard MZ617 7444.

Realy guys i don´t want your money
On my phone we got a CWM recovery via hijacking battery_charger.
That means when your phone is of and connect it to any kind of power supply it normaly starts this huge battery loading animation.
We simlinked this battery_charger script to a folder that excutes the CWM.
So everytime i shutdown the phone and connect it to powersupply i´ll enter CWM.
I´m quite sure this will work on your tablet, too.
I just can help you with this kind. When your aim is to get a real 2nd Init i can´t help you,
because there my knowledge ends too.
But for beginning i think it would be nice to have any kind of custom recovery, or?
To beginn i realy need the init scripts guys. Open your filebrowser and go to internal storage root, there they should be.

Sorry was abroad for some days
Yes, any kind of custom recovery would be nice. Here you go with the init.
Any information on how you are going to do this would be nice so we can alter this to our needs (thinking about some bootloader to choose weather to load cwm or automatic just charge after some seconds would be nice)
What are the limits of this way? Guess we will not be able to flash kernels, right?

First off, sorry for double-posting
having read myself enough into 2nd init i guess there will be no way to get this running on our xoom2/xyboard models, as the devices need to be running some froyo-kernel to get this working. Maybe even a tweaked gingerbread-kernel can be used for 2nd init, but it should not be possible with honeycomb or even ics. So i guess our best bet is to concentrate on the option luxxx123 is going to give us.

Wow...interest seems to be picking up! That's great.
the Xyboard is really a pretty good tablet.
What you guys are discussing is slightly over my head so i'll just lurk and help when i can.

The kernel version is 3.0.8 Does froyo go into the 3's? I thought it stopped at 2.6.
Sent from my Droid3 using xda app-developers app

Youre right... Froyo stopped at 2.6 but if i recall it correctly the hijack of 2nd init doesnt work with newer kernel versions. But i would be glad if i was wrong here
Gesendet von meinem XOOM 2 mit Tapatalk 2

I tried pulling the 2nd init and hijack from my Droid 3 which has Hash's Safestrap. I customized a few things for my Xyboard and put the files in place but it put it into a bootloop. You just may be right.
Sent from my Droid3 using xda app-developers app

I'll save you guy some trouble, boostrap and safestrap won't work, bootstrap hijack method will not work, bootstrap is open source and you can find all the stuff on github by koush, safe strap by hashofcode will not work, it utilizes the same hijack binaries of bootstrap, this is also open source on his github,
Both can be built from the source, with the recovery files build from cm9 or cm7 .
I have built the recovery and the bootstrap they simply do not work.
That said i have gotten rid of my two (I even at one point offered to send one of mine to a known developer, not one took me up on the offer that's why I learned how to do it myself.
Now someone here brought up a way that peaked my interest, syslinking the charge while battery off script to a custom script to boot into a custom recovery' (cwm or twrp) this seems like the most likely at this could be done.
Someone with some time could find the script in question and post it I'm sure myself or someone else could get something going.
Sent from my Nexus 7 using Tapatalk 2

Fedora on Fire TV

Is anyone tried to do this https://github.com/freedreno/freedreno/wiki/FireTV
It looks like it's possible and done by Rob Clark even in start of May. But lack of root prevent us to use it widely.
Booting process a little bit unclear for me.
Also check this out

I've just asked Rob about locked bootloader on G+, his response was:
To run custom kernel (ie. to get drm/msm driver) you would need an unlocked bootloader. Root the device, and then as root 'pm disable com.amazon.dcp' to block further updates (to avoid existing bootloader being updated). Hopefully the relevant people will be able to release more info about bootloader exploits soon.. having root is the first part of being able to do something useful w/ bootloader.
Click to expand...
Click to collapse

Hey, guys!
Rob posted some details about vulnerability allowing to unlock bootloader in his blog http://bloggingthemonkey.blogspot.ru/2014/06/fire-in-root-hole.html?showComment=1403624931085#c3252639689847494536
Also check the demo using this hole and providing ability to write to physical memory https://github.com/robclark/kilroy
Just need to figure out how to use it, is anyone have an ideas o hints?

iRet said:
Hey, guys!
Rob posted some details about vulnerability allowing to unlock bootloader in his blog http://bloggingthemonkey.blogspot.ru/2014/06/fire-in-root-hole.html?showComment=1403624931085#c3252639689847494536
Also check the demo using this hole and providing ability to write to physical memory https://github.com/robclark/kilroy
Just need to figure out how to use it, is anyone have an ideas o hints?
Click to expand...
Click to collapse
anyone know what this stuff does?
https://github.com/robclark/firetv-grub
unfortunately it seems like there aren't a whole lot of users here with the knowledge to put this information to good use, while i understand what is happening i couldnt begin to make use of any of that information Rob posted. maybe we could we start a bounty on unlocking the bootloader? or should we all just wait it out for jcase and rclark? once the exploits are patched and a update is released im pretty sure your going to see the bootloader unlock made public. Great job in advance to jcase and robclark!

nhumber said:
anyone know what this stuff does?
https://github.com/robclark/firetv-grub
unfortunately it seems like there aren't a whole lot of users here with the knowledge to put this information to good use, while i understand what is happening i couldnt begin to make use of any of that information Rob posted. maybe we could we start a bounty on unlocking the bootloader? or should we all just wait it out for jcase and rclark? once the exploits are patched and a update is released im pretty sure your going to see the bootloader unlock made public. Great job in advance to jcase and robclark!
Click to expand...
Click to collapse
GRUB is a most popular and widely used linux bootloader for PCs
This repo looks like a fork tuned to use in fire tv, I think this one will be used to boot linux on AFTV.
Talking with Rob, he expected, exploit will be issues as soon as amazon will release update.

iRet said:
GRUB is a most popular and widely used linux bootloader for PCs
This repo looks like a fork tuned to use in fire tv, I think this one will be used to boot linux on AFTV.
Talking with Rob, he expected, exploit will be issues as soon as amazon will release update.
Click to expand...
Click to collapse
any new updates on this recently? maybe Robs installation could be easier now that we have the custom recovery option available? pretty interested in getting this running if i can use it for a dedicated xbmc box with proper 24hz support. maybe we could start a bounty for someone who can make an installation that works with cwm if theres interest.

nhumber said:
any new updates on this recently? maybe Robs installation could be easier now that we have the custom recovery option available? pretty interested in getting this running if i can use it for a dedicated xbmc box with proper 24hz support. maybe we could start a bounty for someone who can make an installation that works with cwm if theres interest.
Click to expand...
Click to collapse
Still no news, you could try to ask Rob directly on G+. Not sure if it could be possible through cwm. As for bounty I will pay my $5.
The one thing confusing me, how Rob achieved result in video. Probably there is a way, but some guy still want to make money on it. Another option is a hardware modification.
Yep with linux this box will be very interesting, with Fire OS it's a very specific devise, far from perfect.

iRet said:
Still no news, you could try to ask Rob directly on G+. Not sure if it could be possible through cwm. As for bounty I will pay my $5.
The one thing confusing me, how Rob achieved result in video. Probably there is a way, but some guy still want to make money on it. Another option is a hardware modification.
Yep with linux this box will be very interesting, with Fire OS it's a very specific devise, far from perfect.
Click to expand...
Click to collapse
i did ask him on G+, he said he could upload a pre built boot.img and pointed me to the kernel branch hes using on his firetv, https://github.com/freedreno/kernel-msm/commits/firetv-drm , rbox said its possible if we can get the kernel on there via his recovery.. its all just out of my league. Rob documents how he did it minus the bootloader and root on this page https://github.com/freedreno/freedreno/wiki/FireTV , the instuctions are there so is it possible to flash the kernel with cwm ? and then is it possible to do everything he does with partitioning and file moving via recovery? or if someone gets it on there via his directions is it possible to just make a backup or flashable zip of the whole system? that people can just restore? I'll donate 5$ myself, so that puts the bounty at 10$ i guess.

nhumber said:
i did ask him on G+, he said he could upload a pre built boot.img and pointed me to the kernel branch hes using on his firetv, https://github.com/freedreno/kernel-msm/commits/firetv-drm , rbox said its possible if we can get the kernel on there via his recovery.. its all just out of my league. Rob documents how he did it minus the bootloader and root on this page https://github.com/freedreno/freedreno/wiki/FireTV , the instuctions are there so is it possible to flash the kernel with cwm ? and then is it possible to do everything he does with partitioning and file moving via recovery? or if someone gets it on there via his directions is it possible to just make a backup or flashable zip of the whole system? that people can just restore? I'll donate 5$ myself, so that puts the bounty at 10$ i guess.
Click to expand...
Click to collapse
If he can provide a kernel and the missing link of what to do once you have the kernel and an empty root fs... is it doing an install or is it copying a premade rootfs, then I could probably make some kind of flashable package. I won't have time until next week though.

rbox said:
If he can provide a kernel and the missing link of what to do once you have the kernel and an empty root fs... is it doing an install or is it copying a premade rootfs, then I could probably make some kind of flashable package. I won't have time until next week though.
Click to expand...
Click to collapse
wow guys,
this sounds and looks amazing. This should also enable to run something like OpenELEC natively. Would prefer this much more than having to run Android with all the refresh rate issues.
My box is still in preorder, Amazon says it will ship in about 6weeks. Think this could be an amazing toy
https://github.com/freedreno/kernel-msm/commits/firetv-drm
From some of the commits here, it looks like the Linux kernel does actually support the GPU more or less? Anyone knows if this means 2D/3D or what exactly?

freezer2k said:
My box is still in preorder, Amazon says it will ship in about 6weeks. Think this could be an amazing toy
Click to expand...
Click to collapse
If by preorder you mean Germany/UK... it's going to come with 51.1.3.0 which isn't currently rootable.

rbox said:
If by preorder you mean Germany/UK... it's going to come with 51.1.3.0 which isn't currently rootable.
Click to expand...
Click to collapse
Yes Germany,
Pretty sure it will either be possible due to another exploit by then or worst case with a little bit of soldering The eMMC thing looks promising.

freezer2k said:
Yes Germany,
Pretty sure it will either be possible due to another exploit by then or worst case with a little bit of soldering The eMMC thing looks promising.
Click to expand...
Click to collapse
I wouldn't put too much faith in a new exploit coming out by then, but I guess wishful thinking... The eMMC "hack" is the best route, but I don't think anyone has actually figured it out yet.

Just to update this for those who care, We've got a pre compiled kernel now (located here) and i was informed using the prebuilt fedora f21 images (located here) should include everything needed for graphics drivers to work out of the box with the ftv. Rbox said he would try and throw something together when he gets some time which is great but i figured i'd still throw it out there for anyone else who was curious. I was told a good approach would be to flash the kernel and have the fedora file system on an external USB leaving the amazon file system alone, maybe one day it will be possible to kinda select between two kernels and be able to boot either fedora from external usb or the stock amazon OS from the onboard storage. Bounty is still at 10$

nhumber said:
Just to update this for those who care, We've got a pre compiled kernel now (located here) and i was informed using the prebuilt fedora f21 images (located here) should include everything needed for graphics drivers to work out of the box with the ftv. Rbox said he would try and throw something together when he gets some time which is great but i figured i'd still throw it out there for anyone else who was curious. I was told a good approach would be to flash the kernel and have the fedora file system on an external USB leaving the amazon file system alone, maybe one day it will be possible to kinda select between two kernels and be able to boot either fedora from external usb or the stock amazon OS from the onboard storage. Bounty is still at 10$
Click to expand...
Click to collapse
This sounds great,
would love to try it Biggest issue remaining would probably be rooting the devices that are shipped out now...

Just saw this:
http://bloggingthemonkey.blogspot.de/2014/06/fire-in-root-hole.html
Looks like there is a CVE that allows to root the FireTV, which is different from Towelroot?
Anyone knows if this has been fixed by Amazon?
Here is some proof of concept code:
https://github.com/robclark/kilroy

nhumber said:
Just to update this for those who care, We've got a pre compiled kernel now (located here) and i was informed using the prebuilt fedora f21 images (located here) should include everything needed for graphics drivers to work out of the box with the ftv. Rbox said he would try and throw something together when he gets some time which is great but i figured i'd still throw it out there for anyone else who was curious. I was told a good approach would be to flash the kernel and have the fedora file system on an external USB leaving the amazon file system alone, maybe one day it will be possible to kinda select between two kernels and be able to boot either fedora from external usb or the stock amazon OS from the onboard storage. Bounty is still at 10$
Click to expand...
Click to collapse
Thanks for links, I'm going to try. One thing confusing me, Rob mentioned we have to use diag partition for kernel and rename it to boot because boot is not big enough. Will play around this weekends.

freezer2k said:
Just saw this:
http://bloggingthemonkey.blogspot.de/2014/06/fire-in-root-hole.html
Looks like there is a CVE that allows to root the FireTV, which is different from Towelroot?
Anyone knows if this has been fixed by Amazon?
Here is some proof of concept code:
https://github.com/robclark/kilroy
Click to expand...
Click to collapse
iRet said:
Thanks for links, I'm going to try. One thing confusing me, Rob mentioned we have to use diag partition for kernel and rename it to boot because boot is not big enough. Will play around this weekends.
Click to expand...
Click to collapse
Yes, UK/GER/UnRooted-US FTV's, there is a Santa Claus"

iRet said:
Thanks for links, I'm going to try. One thing confusing me, Rob mentioned we have to use diag partition for kernel and rename it to boot because boot is not big enough. Will play around this weekends.
Click to expand...
Click to collapse
I gave some tips in the cwm thread on how to avoid bricking. I don't even know of how you'll boot in to recovery from a running linux in the first place. Unless you know how to write the bootloader message.
Y314K said:
Yes, UK/GER/UnRooted-US FTV's, there is a Santa Claus"
Click to expand...
Click to collapse
Except that post is extremely old.

rbox said:
I gave some tips in the cwm thread on how to avoid bricking. I don't even know of how you'll boot in to recovery from a running linux in the first place. Unless you know how to write the bootloader message.
Click to expand...
Click to collapse
Can we patch this boot image outside your cwn to try it with fastboot boot?