yashsingh1/xdaforums huggingface dataset:
[Barnes & Noble Nook Tablet] Loglud:
Actually you should read the law cfoesch. The license explisitly states:

This is what he is taking about. We bought something licensed under the GPL, which means that we too should have a full source, and all the rights aka, the ability to modify that B&N have. You can sell a GPL licensed program, however as soon as you do, the owner of the program has the right to redistribute it,

Please off topic.
[Barnes & Noble Nook Tablet] cfoesch:
That is not the GPL stopping you. That's the economics of how the world works that is stopping you. Note, that SUSE and Red Hat both sell GPL code. They also pair it with service, because selling the code alone is not going to keep them in the black, but that holds pretty much for any operating system. (If you think Microsoft is making bank off the everyday user you're wrong, corporations with massive $$$ support contracts are propping up support.)

---------- Post added at 03:31 PM ---------- Previous post was at 03:26 PM ----------

And no matter how GPL the code is, I don't have to provide you source until I distribute the binary to you.

So, whether I am selling you the compiled binary, or access to the source code, either way, I am making having the source contingent upon you paying me.

Yes, there is nothing to stop you from turning around and releasing that source code yourself. In fact, there's also nothing to stop you from turning around and selling the source code yourself as well, and undercutting my price, or even charging more, if you can convince people to buy it from you.

TL,DR: the phrase "Everything about the GPL stops you from selling code for profit." is patently wrong.
[Barnes & Noble Nook Tablet] AdamOutler:
The purpose of GPL licensing is to turn code into a commodity. By releasing code under the GPL, you are basically saying this is totally free. The GPL is designed to prevent the sale of code that's its purpose. You make money by providing a service. I could easily put the company retailing sdcards out of business, and so can anyone who provides more of a service than just putting an sdcard in a box. Its not worth $50, especially when you can get class 10 16 gi. g sdcards for $20. To make a business out of open source, you must provides service otherwise the GPL will stop you.
[Barnes & Noble Nook Tablet] Loglud:
Source

This is what every one is talking about.
[Barnes & Noble Nook Tablet] spencer2294:
guys what piece of GPL'd code are you refering to? if you are talking about the android operating system as a whole, might i remind you that a large portion of it is under the apache license. it seems only the kernel is GPL'd, which i thought they just released the source code? maybe im missing something
[Barnes & Noble Nook Tablet] Loglud:
True however android was released under the open source clause of the Apache license.
[Barnes & Noble Nook Tablet] AdamOutler:
Yes, and thats what im taking about as well. If you're some doucgebag just putting someone else's work on an sdcard, your business model is unsustainable. You're providing nothing because what you are providing is a commodity and each person who gets your sdcard has rights to resell that in any form. If you're a developer, it would be a good way to fund your project... put your latest work on there. If you're just putting up a bounty, you're obviously just leaching off the community and your service can be made worthless by anyone who is actually performing work.
[Barnes & Noble Nook Tablet] spencer2294:
apache/gpl

the apache license is also a LOT more permissive of business' taking the code and improving it, then selling it. much more like the BSD license model than the gpl.

edit:

this is also the same license that google chrome uses. it takes the code developed by the community (chromium browser), adds some closed source code, (i guess if you count giving a product with ads in it as selling) then sells it.
[Barnes & Noble Nook Tablet] rapcon:
Wow what I'm reading here is uncharacteristic of the spirit of XDA. Gentlemen, please can we get focus back on the prize. Interested observer.
[Barnes & Noble Nook Tablet] nookabee:
Provided you supply the source (which can easiliy be provided on the SD card as well) you MAY sell it for profit. It may make you a douche, but, as far as I have understood, you can do it without violating the GPL.

Yes, you will be profiting from other peoples hard work, but there are many that wouldn't blink twice over that. Morale and profiteering seldom go hand in hand :eek:

Compare it to bottled water, a comodity that is sold with outragous markups! And those who buy it often have perfect water on tap! There is one born every minute...
[Barnes & Noble Nook Tablet] leucein:
Yeah, we found a way to get around B&N'S security, now lets all argue about something else... I dont mean to sound ungrateful for all you have done and are still doing, but with where we are now how does arguing about licensing do anything but waste time. I mean I saw 2 more pages in this thread from earlier and none of it was worth reading in imho.
[Barnes & Noble Nook Tablet] atomicpookavirus:
The thread is 44 pages long and becoming off topic.

If I were a mod, I would lock this thread.

Let's see seperate threads for current state of the hardware mod, current state of the software mod,

And leave the general forum for general question.

My 2¢…
[Barnes & Noble Nook Tablet] sungod88:
How about we just let the devs keep us updated on their progress and we stop arguing about stuff that holds little weight to the current situation. They already said they would lock thread if we kept getting off topic...let's all just relax let them work and read the progress because I personally would like to keep up to date and not piss anyone off
[Barnes & Noble Nook Tablet] AdamOutler:
You're right. Ill ask a mod to remove mine and others comments including the bounty for 2.3.3. Its three pages of bull**** and the bounty comment should be in another thread
[Barnes & Noble Nook Tablet] Loglud:
True we are getting off topic. We can create an entire thread on this debate as it has been going on for years. DO NOT SHUT DOWN THIS THREAD. The devs have spent a long time communicating in this thread, and it should not be punished. If you are interested in debating this topic, please create a thread for this topic, and debate in there.

THIS THREAD IS FOR BOOTLOADER DISCUSSION. THANKS.
[Barnes & Noble Nook Tablet] cfoesch:
Except that it is devs that are having the primary argument. (AdamOutler and I).

He keeps talking about the spirit of the GPL, and I keep telling him that that is all good and happy in fantasy land, but the letter of the GPL doesn't hold up to his argument. (Same with the Nook Tablet EULA...)
[Barnes & Noble Nook Tablet] ftokc:
You are still off-topic, lol
[Barnes & Noble Nook Tablet] AdamOutler:
I think the page you wanted to reference was here: http://nookdevs.com/index.php?title=Portal:NookTablet&oldid=22155

Here it is: http://paste.ubuntu.com/740881/ Very cool.

xloader starts from lines 1-3 which launches uboot (Bootloader).

Bootloader performs several checks. Initializes DRAM, UART, MMC, and max17042. max17042 is the Power Management Integrated Circiut.

The PMIC init is from lines 19-49.

I'm not sure what the values from 50-64 are, but they are loading and verifying data of some kind and line 64 says everything is verified on the PMIC.

Line 65 says the System On a Chip, OMAP4430 is 90% booted.

Line 66 shows efused board revision.

I'm not sure if lines 67 and 68 are waiting for initialization of the MMC or if the Uboot is some custom version.. Either way they don't seem relevant.

Line 70 begins reading of the PIT.

The pit is read from lines 71-81..

ptn 0 name='xloader' start=256 len=131072
ptn 1 name='bootloader' start=512 len=262144
ptn 2 name='recovery' start=1024 len=15728640
ptn 3 name='boot' start=32768 len=16777216
ptn 4 name='rom' start=65536 len=50331648
ptn 5 name='bootdata' start=163840 len=50331648
ptn 6 name='factory' start=262144 len=387973120
ptn 7 name='system' start=1019904 len=641728512
ptn 8 name='cache' start=2273280 len=446693376
ptn 9 name='media' start=3145728 len=1073741824
ptn 10 name='userdata' start=5242880 len=64991232

These lengths and starts don't seem to line up. I wonder why that is.

line 82-again an mmc read failed.. this is odd.

84 reads some bytes, but from where?

85 What is a BCB?

Lines 87-91 attempted to use a device but was unable

Line 92 booting into android.. I am wondering if this is the start of a new partition.. Maybe it is bootdata, or maybe it is simply loading the kernel.

93,94, more invalid reads

97, bootcnt 2.. This is obviously boot count and line 99 writes one byte, probly to increment boot count again.

line100 looks very interesting, like we might be able to get some sort of UART control over the device.

on 101-105 the kernel and swap is loaded

Kernel is started at line 107

A shell prompt is obtained at line 624! Awesome

And from there on all I have to say is cool story bro.. TMI.

This looks interesting. Any idea what he did to get to this point?
[Barnes & Noble Nook Tablet] AdamOutler:
I just received a PM..

A bit more on the partitions from http://www.omappedia.com/wiki/Android_eMMC_Booting

MLO --> x-loader/MLO
u-boot --> u-boot/u-boot.bin
boot.img --> need to create using zImage + ramdisk.img
recovery.img ---> need to create using zImage + ramdisk-recovery.img
system.img --> $mydroid/out/target/product/<platform>/system.img
cache.img -->
userdata.img --> $mydroid/out/target/product/<platform>/userdata.img
[Barnes & Noble Nook Tablet] jtbnet:
No trip of 'hidden' security measures... Just basic DON'T OVERWRITE the default recovery partition as it's required and NOT meant to be written to... Now we know... So an advance in knowledge due to loglud's effort and sacrifice... luckily he paid for extended warranty/insurance so just an 18 hr.s hiccup and royal pain/waste of time to return for him...
[Barnes & Noble Nook Tablet] Loglud:
I figured it would happen but im just having fun doing this.. ill get a new one tomorrow, and brick it again and then same thing...
[Barnes & Noble Nook Tablet] AdamOutler:
I have a couple of questions. I'm on a galaxy tab 7 so excuse my bad typing.

Will is enumerate usb with any key combinatios ?

What command did you execute?

Does it show any signs of life or just act like it has no battery ?

Can you just take it back to a barnes and noble store and get a new one?

Have you previously verified the validity of that file?

Is there actually a restore sd?

It would be helpful to find out if the same thing would happen by flashing the kernel partition.
[Barnes & Noble Nook Tablet] Loglud:
Yeah i wish i could fix it to fu** around with it more. Bur i havent had time. Adam i am on IRC if you want. I did your dd commands, and wrote over the block with a kernel, and mad a backup to an SD card. The validity was that i compiled it using the defs by BN.

Yeah i bought the accidental protection plan, so i can do what ever i want woot.
[Barnes & Noble Nook Tablet] pokey9000:
That would be mine. For more good bedtime reading look at the #nookcolor logs between 11/16 and 11/17.

That's the battery monitor. The TWL6030 or something like that is the PMIC.

SOC = State Of Charge. This is where u-boot decides whether to finish booting or hang out while a flat battery charges.

This u-boot will probe for an MBR and then look for FAT in partition 1 before trying to boot from a GPT formatted flash. This is the fallout I guess.

starts are in 512b blocks, lengths are in bytes

bootloader control block. This is how Android tells the bootloader to go into recovery or do other stuff.

Yes, if you have a serial port you can stop u-boot and **** around.

Solder.
[Barnes & Noble Nook Tablet] hwong96:
Line 441 Disabling unused clock "efuse_ctrl_cust_fck"

Does this mean efuse lock is not utilized?
[Barnes & Noble Nook Tablet] AdamOutler:
eFuses are not always security related. Example.. the device uses eFuse to identify the manufacturer of the chip (texas Instruments) and the type of board PVT. Also, eFuses are used for storage of alot of other information... such as what parts of the processor are used, camera, face recognition, jpeg processing... each of these have a dedicated eFuse which the manufacturer may or may not choose to blow. If an eFuse is blown, then it will always be blown.

Keep this in mind. Just because it's eFused, does not mean it's secure. I have yet to see anything in the UART boot sequence, processor manual, or any other source relating to THIS device which states there is a hash or signature on the SoC in any shape or form... meaning it is likely that there is still hope to get a custom xLoader, bootloader and kernel on the device.
[Barnes & Noble Nook Tablet] Loglud:
Ok i'm going to through something out there and hopefully it will rock all of your worlds.

There is no efuse for security.

on boot the devices displays the manufacture of Texas Instruments Inc. which is not 'N/A' As the user manual points out. If it was 'N/A' then we would be looking at an efuse, but since it is not, hate to say it but there is no efuse (the hate to say it is sarcasm)

Bus 002 Device 007: ID 0451:d00f Texas Instruments, Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.10
bDeviceClass 255 Vendor Specific Class
bDeviceSubClass 255 Vendor Specific Subclass
bDeviceProtocol 255 Vendor Specific Protocol
bMaxPacketSize0 64
idVendor 0x0451 Texas Instruments, Inc.
idProduct 0xd00f
bcdDevice 0.00
iManufacturer 33
iProduct 37
iSerial 0
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 32
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 1
bmAttributes 0xc0
Self Powered
MaxPower 100mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 255 Vendor Specific Class
bInterfaceSubClass 255 Vendor Specific Subclass
bInterfaceProtocol 255 Vendor Specific Protocol
iInterface 2
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
[Barnes & Noble Nook Tablet] AdamOutler:
I was talking to Luglod. His bricked device is enumerating in USB mode. This is a good thing. This means he bootstrap is actively seeking a upload from the peripheral PC. Read more here:

For those of you who weren't paying attention, Luglod attempted to flash a kernel into the recovery partition. The recovery partition is required for booting on this device... this is very odd... Anyways, the device won't boot now, however it is kicking the device into an apparent flashloader mode. This bootstrap allows the device to accept a flash over USB. We have the xLoader, Kernel, Recovery and System in the Factory.zip file.. We just need to figure out a way to feed the flashloader it's files. If anyone can get ahold of a working copy of usbload.. See here: http://pandaboard.org/content/usb-downloader-and-usb-second-stage-bootloader-omap4 it would be very helpful. I can't find a precompiled binary or compilable source anywhere. This is the program we need though.
[Barnes & Noble Nook Tablet] AdamOutler:
there are plenty of fuses.. Just none relating to security as far as I can see. The processor manual would have to specify that as a block of memory at a minimum.

From what I do see about M Shield, it appears to be a hardware-initiated chain-of-trust. it's purpose is to supply secure APIs for things like Netflix. I dont' think we need to even look at M Shield. It is irrelevatn.

Again, this is what we need... We need usbboot utility.. this tool is required to load firmware onto the device and bypass all bootloaders which enforce signatures on the next bootloader in line. http://pandaboard.org/content/usb-downloader-and-usb-second-stage-bootloader-omap4
[Barnes & Noble Nook Tablet] HMG10:
I'm assuming someone has looked at this, as I know little of the process but found the info on the previous linked site by Adam. Probably nothing, but I thought it looked interesting:

PandaBoard Validation

Software

Kozio, Inc. (www.kozio.com) has made available free use of their kDiagnostics® Suite, for owners of PandaBoard. Users of the PandaBoard have an interactive guided tour of the inner workings of the board, along with a full design verification and hardware validation solution.

PandaBoard loads and runs kDiagnostics directly from a Secure Digital (SD) card. Users quickly have the power to explore and understand their PandaBoard, verify proper performance, and have full access and control of both low-level hardware and high-level functionality in real-time. kDiagnostics initializes devices, enables the configuration of memory, isolates and easily reproduces faults within minutes, and provides other features beyond the boundaries of traditional verification or validation approaches.

The download is immediately available directly from the Kozio website http://www.kozio.com/services-and-supports/downloads.
[Barnes & Noble Nook Tablet] hwong96:
Here is the zip file. The tools folder has the USB c and h files
[Barnes & Noble Nook Tablet] AdamOutler:
Right. I tried compiling that source last week. It didn't compile for me.
[Barnes & Noble Nook Tablet] pokey9000:
FWIW, we are just noticing something similar on the Kindle Fire, which uses the same sort of GPT partitioning scheme. Flashing a non-stock recovery breaks our ability to get into fastboot in the bootloader. If I find anything out I'll pass it on here.
[Barnes & Noble Nook Tablet] pokey9000:
Attached, host tools built for i686, aboot built for pandaboard.

It's not going to work since aboot isn't signed. usbboot will hang waiting for aboot to respond.
[Barnes & Noble Nook Tablet] pokey9000:
I think hwong96's excerpt is pointing out that you can have TI fuse in your own custom descriptor information, so usb boot mode doesn't show up with the default TI descriptor. People seem to still be smoking the xbox360 crack in believing that efuse automatically means it's a security thing.
[Barnes & Noble Nook Tablet] AdamOutler:
Cool. thank you. Have you tried any-old signature? Have you tried the provided signing tool from the nook source?
[Barnes & Noble Nook Tablet] Indirect:
The efuse has nothing to do with security by itself on and device. Its how its implemented. It was made by ibm to be a quick programmable device.

Sent by breaking the sound barrier
[Barnes & Noble Nook Tablet] pokey9000:
No, I wouldn't know what to try. The signGP in the BN source is the one that ships with all public versions of x-loader. It just adds a boot header to the image. GP = GP OMAP4, so there's no associated key.

Presumably there's an M-Shield equivalent for HS parts that, as you might imagine, is closed source and only distributed to NDA participants.
[Barnes & Noble Nook Tablet] 150pilot:
Source

Wondering if bypassing some of this is possible?
[Barnes & Noble Nook Tablet] AdamOutler:
Did you try it? That seems to be all that is required. There is no efuse for boot signatures. Not a mention in the processor manual. M shield is required to access APIs for secure content.

What does UART say when you upload an image?
[Barnes & Noble Nook Tablet] pokey9000:
omap4boot contains "mkheader" which is functionally identical to signGP. The main difference is that signGP has some code to do some additional settings via configuration header like DRAM setup, but that code is #ifdef'd out anyway.

I don't get any UART output at all. aboot doesn't talk to any UARTs. I have hacked up omap4boot to work on Nook Color, and on a successful boot the first text you see is from u-boot. So I wasn't really expecting anything unless it made it to u-boot.
[Barnes & Noble Nook Tablet] AdamOutler:
Ok.. so here's where we are at now..

We need to bypass the security which is on the Nook tablet. I have some theories to test and check.

1. Mount and modify the kernel and recovery partitions while they are live on the device. It may be possible to modify the device in this way using adb, ssh/sftp or ftp. This will prove or disprove signature on the entire kernel/recovery blocks.

a. Remount the / filesystem RW and then add files into the /bin folder.

b. mount the recovery partition in any folder and then add a binary into its contents.

2. The processor does not have any documented security built in. This says to me that the xloader is most likely interfering with our usb upload. the xLoader must go.

WARNING: The following code block will brick your device

su
dd if=/dev/zero of=/dev/block/mmcblk0 &
dd if=/dev/zero of=/dev/block/mmcblk1 &
dd if=/dev/zero of=/dev/block/mmcblk2 &
dd if=/dev/zero of=/dev/block/mmcblk3 &
dd if=/dev/zero of=/dev/block/mmcblk4 &
dd if=/dev/zero of=/dev/block/mmcblk5 &
dd if=/dev/zero of=/dev/block/mmcblk6 &
dd if=/dev/zero of=/dev/block/mmcblk7 &
dd if=/dev/zero of=/dev/block/mmcblk8 &
dd if=/dev/zero of=/dev/block/mmcblk9 &
dd if=/dev/zero of=/dev/block/mmcblk10 &
dd if=/dev/zero of=/dev/block/mmcblk11 &
dd if=/dev/zero of=/dev/block/mmcblk12 &
dd if=/dev/zero of=/dev/block/mmcblk13 &
dd if=/dev/zero of=/dev/block/mmcblk14 &
dd if=/dev/zero of=/dev/block/mmcblk

Upon reboot, this should wipe the entire device and make it like it was fresh from the factory without any firmware on it. Which will ensure there is no way any firmware can be interfering with communication with the Blaze board itself. it might even be possible to load a kindle fire flash on the device at this point. If you attempt this, be sure to record the entire terminal output.

The goal at this point is to get a bootloader or recovery "Hello World". UART is required for this. We need to make U-Boot, Kernel, or Recovery print arbitrary lines of code. If we can get a Hello World, we can begin development.

I'm expecting my Nook Tablet to arive today. I will be sending it to Josh Groce at MobleTechVideos.com for JTAG location. Once he has located JTAG, and obtained firmware from the device, we have a rather difficult and expensive recovery option which can be used to restore a bricked device... However, it will work as a backup to be able to correct problems. For now, our only option is to return the device to Barnes and Nobel for a no-questions-asked return of an inoperative device. This is not a respectful thing to do and we should try to avoid this.

Once we have JTAG up, we can tackle both inexpensive recovery options and execution of arbitrary code without risk of killing the device. I believe the first priority should be recovery of a bricked device as it will take a lot of bricking in order to crack this.
[Barnes & Noble Nook Tablet] albertwertz:
did we purchase the insurance on it when we sent it to him?
[Barnes & Noble Nook Tablet] HMG10:
Insurance can be purchased within 60 days and returns without questions asked until Jan 30th for all nooks purchased between Nov 14 and Dec 31.

http://www.barnesandnoble.com/help/...c=AFFILIATES-_-Linkshare-_-je6NUbpObpQ-_-10:1
[Barnes & Noble Nook Tablet] Digital_Biped:
Anyone know the cost of the extended service plan in case we want to get a little collection put together?
[Barnes & Noble Nook Tablet] Indirect:
He doesnt need insurance and he plans on bricking it purposely to find the unbrickable mod.

Sent by breaking the sound barrier