yashsingh1/xdaforums huggingface dataset:
[General Topics] mnpolock:
I have a number of phones that I can donate.... I will get a list together ...can you let me know what you need to determine if they will work for you.... do I just need Manuf and model # or what would you like in the list to figure out if you want it for your testing (I have multiple carriers, phones, etc..).

Thanks,

TOny
[General Topics] AdamOutler:
I'm sorry... someone gave me some bad information. Only the iPhone4/pad will work. Removed from list.

the requirement is a hummingbird processor or a hummingbird based processor. They are all smartphones. Mostly Samsung, but some others as well. See the list on the first page.
[General Topics] AdamOutler:
if you can sacrifice the iPhone4 board and the iPad board, then I can remove the processor, get the proper modification documented, and we can move on from there with uploading unsecure code. The first part is to get the device into S5PC110 USB download mode.... this is several levels lower in the boot sequence then the DFU mode (SBL) which is used to reload Apple Software... Apple can patch over jailbreaks, but once we have this, then there's nothing Apple can do.

It is likely that we already have the proper interceptor bootloader ready. Rebello's HIBL may already work with it. The only question is if they have a funky sort of different signature check, in which case it may be necessary to disassemble the firmware and rewrite a HIBL. This is beyond me, however Rebellos is good with this type of stuff.

Send a pm to me.

Also, we are only interested in the devices on the list. The 3/3g/2/original devices are not going to work with this particular mod.. Maybe newer devices.

I'm not paying a dime. If you want this modification brought to your platform, then you can fork up the hardware and ill send it back when the work has been completed.
[General Topics] popfan:
I did check ARM's website and noticed that the Palm Pre is using the A8 chipset if you want to include this again on the first page.

http://www.arm.com/markets/mobile/palm-pre.php

Palm Pre

Palm Pre Image (View Larger Palm Pre Image)

Introducing Palm® Pre™, a phone so in sync with your life it feels like it's thinking ahead for you. Pre pulls your different online calendars into one view, bringing you the information you want without having to search for it. Pre links your contacts from different sources, giving you one place to find what you need. And Pre delivers incoming messages1 and notifications in an intuitively subtle way, letting you react or respond however you want. People, events, information that matters. With Palm Pre, it’ll come to you.

ARM Processor: Cortex-A8

Sources: TI Powers Palm Pre – EETimes Article
[General Topics] PatchesDM:
I have an Apple iPhone 4, where should I send it? (All apologies if I missed it somewhere)
[General Topics] duce102:
I request the SPH-D700 Samsung Epic 4G be added to the list.... Ill be on a hunt for bricked devices and refer them to this page and have them pm you.... :) im so freaking excited!!!!!
[General Topics] rhernz212:
No Galaxy S 4G?

If added, I'll post a link to this in the General section of the SGS4G forums.
[General Topics] AdamOutler:
PM sent

That is Samsung Exnyos processor. It is newer then the target of this thread. If you can find datasheets, I'll be on it.

I'll add that. Do you have the model number?
[General Topics] duce102:
Nope thats the SGSii Epic 4G Touch.... The SPH-D700 has a 1GHz Samsung S5PC110 RM CORTEX-A8 (Hummingbird)

http://en.wikipedia.org/wiki/ARM_Cortex-A8

http://en.wikipedia.org/wiki/Samsung_Galaxy_S

http://shop.sprint.com/mysprint/shop/phone_details.jsp?ensembleId=SPHD700BKS

As for the SGSII w/ Exynos, did you say you could possibly use this mod on that processor if I got you the data sheet? Cause I plan on getting the Epic 4G Touch and it would be awesome if we could get this mod on that device.....

EDIT: If I sent you my board, you take the processor off, and map the pins, could you put the processor back on the board to where it looks untouched long enough to have the phone rapid exchanged by insurance..... If this is messed up let me know cause I just want this so bad but I dont want to be phone-less afterwards :(
[General Topics] Nitro_123:
Guys i gut these links showing some pics of the I9000 mainboard

http://www.ubmtechinsights.com/repo...stigative-analysis/samsung-galaxy-s/teardown/

http://www.squidoo.com/disassembly-of-samsung-galaxy-s

http://www.careace.net/2010/06/09/disassembly-of-the-samsung-galaxy-s/

Hope it helps in locating the xOm5 resistors and everything
[General Topics] nubecoder:
There was someone supposed to be sending Adam an Epic 4G already. I thought Adam had even responded to the PM already... Maybe there is some confusion at hand.

Adam, hit me up in IRC sometime when you see me, if you need to get in touch with the guy again.

=]
[General Topics] AdamOutler:
I don't have the ability to replace the processor. I'm sorry. If you can deal without it for a while... maybe the processor can "fall off" and you can RMA it because it does not work anymore? dunno....

I would love to get the i9000 working. I need a sacrificial board in order to make resurrection possible using this technique. We can make guesses... and we know the i9000's resistor bank is on the opposite side of the "Pin 0" dot on the processor...

in this picture see 6 rows on the bottom right of the blue square app processor

However I don't know which one is which because they are likely not in any order as I have seen on the Captivate and Droid Charge...

Once I get a sacrificial board, it will be easy as moving a resistor, or removing a resistor and bridging two connections.... VERY similar to Droid Charge: http://xdaforums.com/showthread.php?t=1245391

Thanks for the links.

I've heard nothing about a i9000 board. I'd like to get one for decapitation and sacrifice to the UnBrickable gods :D

I'll hit you up on IRC now.
[General Topics] Rebellos:
If it does have OM pins (and probably does) - yes.

I'd love to see datasheet of Exynos, can you get it? Really? :D
[General Topics] Rebellos:
//nevermind, got too excited too soon, like I need to get some sleep.

To port WP7 into Hummingbird devices we would need package called "Windows Phone Builder", which is available only for OEM companies with Microsoft's agreement.
[General Topics] dandan86:
I've got a hard bricked I500 Galaxy S phone

Cellular South is the carrier but I500 model like the mesmerize and captivate I believe

Could this be useful?
[General Topics] Rebellos:
Yes! It has got S5PC110 CPU inside.
[General Topics] duce102:
I believe the Exynos is a Cortex-A9 processor so it seems like it would be very similar to the A-8 with added features....

Heres a link to the ARM website with all the resources - http://www.arm.com/products/processors/cortex-a/cortex-a9.php?setcookie=classic

Exynos Data Sheet available for download on Samsung website - http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=844&partnum=Exynos 4210

Edit: to get the data sheet you have to use company email address to register for an account on samsungs website. If anyone does this please post the document here :)
[General Topics] KarlosTheJackal:
I work for CeX in the UK & we get alot of non-working phones come though, Ill be on the lookout & if I see any that are of any use I will let you guys know :-)
[General Topics] treUse:
Awesome news, make sure to catch a NS :P
[General Topics] spartan.062:
What about the Fascinate? (SCH-i500) It also has an A8. (I don't have a bricked one, but it might be good to add to the list.)
[General Topics] FrostyWolf359:
Are you guys sure this won't work for any of the Texas Instruments Cortex A8 devices? Like the Droid, Milestone, Nook Color, Samsung i9003, Nokia N900, Palm Pre etc?
[General Topics] lilstevie:
AdamOutler or Rebellious are either of you available on IRC, there has to be a better way of identifying the xOM pins than lifting the CPU, I also have the P1000 and a schematic of most of the board .
[General Topics] AdamOutler:
It would be good to see that schematic, but we would still be shooting in the dark without some sort of mapping. Let me know if you want to help out... I can send it back when I get done.

Likely not, the Droid Charge has already been done, but mostly the items on the list and others as they are added.

Added, Thanks.

Great! As soon as you get one of those devices on the list, send me a PM and we can work it out somehow... Shipping from UK would be expensive, but maybe we can do something... slow boat, or I can tell you what to do, or we can figure out something. It's great that you are willing to help, we need more repair facilities helping here. It's a quick way to resurrect a phone and requires no jtag box. Technically, this is more valuable to the customer then JTAG ever would be.

We still need datasheets. That's the website where they hold them and reject anyone who requests them. I already requested some.
[General Topics] lilstevie:
also as a side note, I don't think you will find this working for hummingbird based iPhones and iPads (A4) as xOM affects IROM IIRC and SROM (The Apple written variant) is where DFU is implemented
[General Topics] AdamOutler:
DFU is the same as SBL. The modification we are trying to reach triggers a USB upload mode before booting from ROM. The phone will boot normaly.
[General Topics] lilstevie:
no, DFU is bootrom, apple layout is different, SROM is the first piece of code to run, is non updatable in the field (ergo why limera1n hasn't been patched). while the A4 is similar it is not identical. SBL is more like the equivalent of iBoot in the iPhone
[General Topics] AdamOutler:
AHH! I see

So, instead of putting bootloaders in OneNAND Apple put them in SROM and left a security hole. However, I was looking at the L1mera1n exploit and it is using the same commands that we access in the SBL prompt. See here for SBL> prompt: http://xdaforums.com/showthread.php?t=1209288

I was looking at the schematics for the A4 processor. It would appear that they have integrated 2 extra bits into their protected boot modes... http://xdaforums.com/showthread.php?p=17269178

We have begun hacking it and I believe someone has tipped me off about where those pins are located on the board. He will be getting voltage readings today sometime and we can begin working with the device...

Regardless, with the information that you have given me, it looks like L1mera1n will suffice for jailbreaking for now. I've been out of the Apple loop since I got my iPhone 3GS, decided it was garbage and got a Captivate. However, with the pins available, it may be possible to reload SROM if anything happens in future editions of the iOS/iPhone software. It's just a matter of completing it.

So, let me see if I got this.. the bootloader is written into the SROM on the System on a Chip and not the Flash Memory. It contains all the bootloaders needed to get the device to accept any flash. An exploit available for this bootloader allows insecure flashing.

I find it interesting that Samsung did not utilize the SROM as it could have been used. They store their bootloaders off-chip in the OneNAND and use the System-on-a-Chip platform as a processor with a ROM instead of an entire System-on-a-Chip. It seems that Apple used the chip more effectively and less securely.

It sound slike GeoHotz did a fine job, and we can cross it off the list, referring to the L1meRa1n exploit as it does basically the same thing in a different manner. Unless it would be worth while to get this hardware method working for some reason... Like I said, i've been out of the loop on Apple. Let me know what you think.
[General Topics] lilstevie:
it is actually implemented far more securely, by default unsigned code will NEVER run on the CPU. As for the prompt; iBoot implements a shell, DFU does not, it is a usb upload mode only, it accepts a signed binary under normal circumstances and nothing else. The very few bootrom exploits discovered have been luck really
[General Topics] AdamOutler:
Same on all S5PC110s.. we exploited a static memory jump to insert code which calls back code normally used to download secure code but this time we skip the signature checks. This is how the HIBL works. Normally there is a chain of trust, the HIBL compromises that and allows for unsigned code to run on the processor. It should be possible with the A4 as well.
[General Topics] lilstevie:
I wouldn't count on it working on the A4, it may or may not work. Apple have their own implementation, and memory layout, we could get lucky, very lucky if it also works on exynos (A5) :p
[General Topics] AdamOutler:
We'd just need to analyze the initial bootloader to find out. Its likely there are a few which will all work.
[General Topics] popfan:
I am not sure how much this will help out, but this got a good picture of a tablet with locational markers that uses an A9, also has a dev build there for Ubunto.

http://www.cnx-software.com/category/processors/samsung-exynos/
[General Topics] popfan:
I found the public manual for the Exynos4210

http://com.odroid.com/sigong/nf_file_board/nfile_board_view.php?keyword=&bid=64
[General Topics] AdamOutler:
The link is not working. Can you rehost the file on mediafire? Also, it must contain a pinout.
[General Topics] Rebellos:
I do believe that there is security hole which does SHAtter use, that even if hashes are generated in very complicated way by multiple SHA1 rounds, their size is in the end truncated to 32bits. So it makes "only" 4294967296 combinations of end-hashes possible, which does allow finding collision by brute-force realiable.
[General Topics] popfan:
I will have to post it when I get home. You can just do a google search for SEC_Exynos4210_pulbic_manual_Ver.0.00.01.pdf. There should be 3 entries for it. This thing is 734 pages long, I am sure this will have something you can use.
[General Topics] Rebellos:
Too bad its initial draft of manual, and it doesn't cover things like OM pins or iROM documentation. :(
[General Topics] gurinder:
if iphone 4 included in this, so this can be possible to repair mac address, imei of phone. coz i have 2 phones both have same problem, one handset automatically restart and after that i see that it has imei blank,mac address blank,bluetooth blank.. is this problem can be prepared then i will keep these baords with me and waiting for ur develeopment.

gurinder
[General Topics] Nitro_123:
NO SGS I9000 UNTIL NOW ??? I CANT BELIEVE IT!!! I MUST'VE READ AT LEAST 25 "BRICKED" TOPICS IN 1 MONTH AND STILL NO ONE DONATES!!! WTH??

Sorry for the rant :p

I Personally think this is THE most EPIC thing that has happened tho the SGS.....

Imagine triple-booting WP7, iOs, Android...... EPIC!!!

Excellent work devs and keep it up!!
[General Topics] Jose_Paramore:
Yes, it's incredible that a device that sold more than 14 millions units still doesn't have this feature... but in the other hand, if my Galaxy S get bricked, I'd try to repair it, don't you think? :D

A donation could be better... We donate a small amount of money, the devs buy a Galaxy S (bricked, new, whatever) and they start working :cool:

I'm also looking forward to try WP7!
[General Topics] AdamOutler:
I could manage that if you wanted to start a donation fund... just ensure everyone who donates posts in the thread, and mentions that they donated. and I will acknoledge that I received the money so that everyone knows there's nothing shadey going on. Then I would keep everyone updated so that they know where their money is going. I'm not too keen on "asking for money", however if you wanted to start that thread, then I'll play along and buy a busted i9000 from e-bay.

Or you could simply send me a device, and I can put it back together, send it back, then you can say.. OMG WHT HAPPND?!?! The processor came off! lol... i'm not recommending this... but hey.. it might work.
[General Topics] bulletproof1013:
I like rhe donate thing. Lemme know when yall set it up. Ill donate

Sent from my unbrickable cappy *bam*
[General Topics] venitex:
why not have the htc device??
[General Topics] AdamOutler:
Those would be platform speciffic software mods. That platform is not my specialty. I did link in the first page to someone who made their OMAP based device do the exact same thing. He's contacted me with that information.. no hardware changes are required.
[General Topics] AdamOutler:
UnBrickable Mod made hackaday and now PCWorld Magazine which is the first "news" site to feature it as classified by google. http://www.pcworld.com/article/239580/hummingbird_brings_your_bricked_phone_back_to_life.html.

Cool huh?

Get those junk devices together and send them to me! I can send them back if you want.
[General Topics] waxworkz:
ok sorry for asking, but i have read and not found an answer; is there/will there be an "unbrickable" mod for the htc? soon? i have an htc incredible that i think i bricked
[General Topics] AdamOutler:
If you can find datasheets with pinouts, we can get that system-on-a-chip working. Robellos and I have not been able to find pinouts.
[General Topics] Nitro_123:
Agree Adam... I guess you should start a donate fund :)
[General Topics] ZinovaS:
hi, I have 360 H1 or i8320 (if they differ) so there is also Cortex-A8 cpu. think they sould be on the list. my is working but I would love to use this mod before trying other os'es on this device...
[General Topics] AdamOutler:
Like I said before... I'm not going to ask for money. If someone else wants to start a thread in their respective forums and let me know about it, I'll make sure to post a goal and status updates to each thread if they want to maintain the first post. When someone donates they should specify it in the thread and the donation notes and I will post in the thread that I received it. I don't want to get wrapped up in thousands of unorganized donation dollars without a structure. Someone else should start the thread. I will keep it updated and buy the device, then return the results once complete.
[General Topics] popfan:
http://xdaforums.com/showthread.php?p=6647344

Found this on XDA for TV out, it contains the pinouts.
[General Topics] AdamOutler:
We need the processor pinout. Every electronic component or device has a pinout. Even a resistor, it's got 2 pins and that's enough to have a "pinout".
[General Topics] AdamOutler:
I need boards. The most requested device is the i9000, but noone seems to want to turn one over for inspection. We need one device for destructive inspection and then the mod will work. We've got 5 devices down, and about 10 to go.
[General Topics] ChauncyG:
T959 board available

Adam, I have a dead T959 Vibrant board you can have. I don't know why or how it died but you are welcomed to it. No apparent water damage. The JTAG pins are bad and the RF shielding is missing from one side (used it in another phone). I can include the SIM / SD carrier on the other side if you need it. If not I'll keep it. Camera is included but no speaker. Let me know where to send it and I'll get it out tomorrow.
[General Topics] AdamOutler:
PM sent. Thanks!
[General Topics] kmmxracer:
What about the Apple TV 2nd Gen. The hacking sceen for it is pretty weak. Would be nice to see the possibilities
[General Topics] AdamOutler:
We need pinout descriptions... I have access to mapping of the pins. I came across a gentleman with a totally unbuilt mainboard. He mapped out the pins already. All that's left is to get pinout descriptions.
[General Topics] Nitro_123:
LOL.... god knows where you people work (and what you people do at work...) :p :P anyways excellent work again. hoping for an I9000 mod..............
[General Topics] AdamOutler:
Rebellos is an engineering student. I'm a BMET. http://en.wikipedia.org/wiki/Biomedical_Equipment_Technician

Lets get those boards in! The more developement devices we have, the more software options we have.
[General Topics] Nitro_123:
Okay!! all i knew before was that you were too good at soldering :D and Rebellos was one hell of a coder/programmer combo

Am trying my best to spread the word around but no one seems to give this method a go. :mad:

---------- Post added at 12:41 PM ---------- Previous post was at 12:38 PM ----------

P.S. I was thinking of starting a thread appealing to all the devs to leave android development and their roms for a while :O and to PORT stuff like WP7, Ubuntu etc. after the mod is done on at least around 10 phones :D

BTW, you guys are the DFT of the SGS world IMO :D :D
[General Topics] AdamOutler:
Its OK. I'm sure it will pick up once people see the UnBrickable Droid Charge next week and the Vibrant coming after that.

Contact me and get that junk device out of the drawer. Put it to some good use for the community! Help others to help themselves. Bricked devices suck. We can cure the brick. Gentlemen, we can rebuild them. We have the technology.
[General Topics] popfan:
Insert Bionic Man theme here
[General Topics] AdamOutler:
That quote was actually from the 6 million dollar man...

[Youtube]HofoK_QQxGc[/YouTube]
[General Topics] bulletproof1013:
I got it man lol

Sent from my unbrickable cappy *bam*
[General Topics] popfan:
Sorry i forgot it was called 6 million dollar man

AKA bionic man = Steve Austin
[General Topics] lilstevie:
you might want to remove the P1010 from the list, the WiFi SGT7" uses the OMAP3 not hummingbird
[General Topics] Nitro_123:
Guys lets not clutter this thread :) might help :D

IF you can then please make a thread in the forums of the unbrickable phones saying that if a user has bricked a phone, there is still hope etc etc :) and then please link to this thread :D Might get us some boards :D :D

P.S. : Unbrickable phones = phones with cortex A8's = the list given in first post :)
[General Topics] hausmanis:
haha thats funny
[General Topics] AdamOutler:
Not so fast...

Just cracked the Exynos CORTEX A9 boards today.. :D

http://xdaforums.com/showthread.php?p=17638565#post17638565
[General Topics] AdamOutler:
Bump! I will be posting Epic and Vibrant plans soon. These should be easy. Droid charge is not going to be as easy as the captivate. The Epic and Vibrant should be easy.
[General Topics] AdamOutler:
T959 Vibrant plans are available. http://xdaforums.com/showthread.php?t=1273083
[General Topics] XXCoder:
How hard is it to make epic to unbrickable forever?
[General Topics] AdamOutler:
Just added plans for Epic and crossed off the list: http://xdaforums.com/showthread.php?t=1274999

Need moar boards!
[General Topics] AdamOutler:
The Vibrant is now UnBrickable! Go here: http://xdaforums.com/showthread.php?t=1277056
[General Topics] sublimeike:
This is amazing. Thank you for your work.
[General Topics] AdamOutler:
added Pandigital 9" tablet R90L200 to the list of wanted devices.
[General Topics] Nitro_123:
Adam please can you change the colour of the "plans available" text? it's pretty hard to read :D
[General Topics] kmmxracer:
I may be wrong, but would the pinout description on the Apple TV 2g be the same or similar to its iPhone counterparts? If it is, then getting together $99 for one might be easier then acuiring and iPhone 4 donation???
[General Topics] Omnichron:
I would love to help out. I have a dead Droid 2, where do I send it?:D
[General Topics] 6liuxa:
any help or.....

Hi m8.

Have galaxy tab gsm 7inch p1000 possibly bricked as it showing no charging when it's on charge and no reaction on power button...

Any advise whagt I can do with it as it belongs to my little sister.

I tried to upgrade via Kies when it was downloading something and PC fall in a sleep mode. On resume it had lots of tables while TAB had mobile+triangle+PC symbols.

Left it like that for couple hours and now it completely non reactive....

Any advice on this....

As I read you now developing program to make all Samsung + other brand mobile devices UNBRICKABLE...