yashsingh1/xdaforums huggingface dataset:
[Asus  Eee Pad Transformer Prime] ScottIsMyName:
Can someone that can read dalvik code look into the writeRecovery procedure to see what it does with the parameter passed in? Unfortunately, the decompiled java code does not properly decompile the code into Java for this procedure, and I don't know dalvik code enough to see what it's doing.

I am curious to see what if it is using the information that would be hardware specific...i.e. each devices bootloader has a different key to decrypt it.

Man in the middle is likely not going to work at all, and would be pointless. If we don't actually need information from Asus, then we could simply call the writeRecovery directly, bypassing any calls to Asus before (which is what I hope we can do).

My last thought is to at least modify the program to output information as it is running and communicating with Asus. Log everything. Then we can compare 2 users logs and see if the key being returned from Asus is unique or not. If it is not, then we will have a very easy time with this.

Oh yeah...what happens when someone who is already unlocked runs the tool? If nothing happens, they would be a good candidate for testers so that "new" users don't have to send their information to Asus.
[Asus  Eee Pad Transformer Prime] ImmanuelCunt:
Somebody wrote his SN of his broken Prime in the other thread:

http://xdaforums.com/showpost.php?p=22901156&postcount=33

Maybe it'll help you.
[Asus  Eee Pad Transformer Prime] dagrim1:
Ehm, it's not that simple is it?

If it uses the devices specific hardware id to generate a key needed to unlock (and decrypt?) that specific device using a fixed hardware is not going to work.

Knowing a number of hardaware-ids/unlock codes isn't going to help either. If properly implemented it seems pretty impossible to break imo.
[Asus  Eee Pad Transformer Prime] doddsie:
I've returned many things that i have tinkered with, 3 htc desires, 2 primes, and a desire hd, the people you are sending stuff back to have nothing to do with asus and in my case htc other than they pack them and send them off to their service centres. returning stuff is a joke, once returned the back cover of a phone instead of the phone and no one checked it, guessing that got all the way back to manufacturer before anyone noticed cos i never heard anything more about it
[Asus  Eee Pad Transformer Prime] smw6180:
Which illustrates my point that you shouldn't buy open box items, doesn't it? ;)
[Asus  Eee Pad Transformer Prime] Modded Darts:
Encryption Key

Does every tablet have a different encryption key or not?:confused:
[Asus  Eee Pad Transformer Prime] Red One:
More likely than not, yes. If you've ever made a Jtagged Xbox 360, then you know each one has a unique identifier. But, with the 360, you can inject a new. But this is all done with hardware modifications, something that no one wants to do with their device.

Now, the real question is if the key coming back from ASUS is the same across the board. The key being sent to them could just be for marking it in their system as void. The key coming to us could be the exact same one.

But i believe my theory is wrong. I'm just using it to hope for something better.
[Asus  Eee Pad Transformer Prime] DrWowe:
edit: it looks like this is already answered in the negative.
[Asus  Eee Pad Transformer Prime] kmdm:
Please please please absolutely DO NOT DO THIS.

Entirely ignoring the fact that this won't even dump the entire bootloader, the bootloader is encrypted with a per device encryption key (SBK) and flashing one person's bootloader to another person's prime will only give you a shiney new door stop.
[Asus  Eee Pad Transformer Prime] darksiiide:
Couldn't the ratchet tool, for unknown serial issue, be used to temporarily change the serial number to one that has been unlocked? Getting around it being blacklisted with Asus?
[Asus  Eee Pad Transformer Prime] bluewr:
This unlock tool is based on CPU serial, different serial number.
[Asus  Eee Pad Transformer Prime] lucasmoore:
What if we modify the unlock tool to log the value being returned by Asus. Then some of us who have already unlocked, or are planning on unlocking (I'd be happy to volunteer), can run the tool and compare the logged values.

This will tell us for sure if the "phone home" is purely to capture our serial numbers for warranty purposes, or if Asus is using it to generate a unique key for each device.
[Asus  Eee Pad Transformer Prime] Noxious Ninja:
I'm working on this now, actually. It's been a while since I last messed with this stuff, though, so I'm not sure how long it will take.
[Asus  Eee Pad Transformer Prime] lucasmoore:
Alternately, if the communication between the tablet and wherever it's phoning home isn't encrypted, I can setup a transparent proxy on my network and use the tool while running a packet capture on the proxy. If the packets aren't encrypted I'll be able to see the returned key. If someone else can do the same thing we can compare values.
[Asus  Eee Pad Transformer Prime] Diamondback:
No luck, it uses https :-P

Gesendet von meinem Desire HD mit Tapatalk
[Asus  Eee Pad Transformer Prime] lucasmoore:
I can create a hosts entry on my proxy server, pointing mdm.asus.com at another local server. On that server, I can setup an instance of stunnel with a self signed certificate, decrypt the traffic, and then forward it on re-encrypted to the real mdm.asus.com. Simple man in the middle attack. At that point using tcpdump to create a pcap file of the traffic while it is temporarily unencrypted is trivial.
[Asus  Eee Pad Transformer Prime] Hawkysoft:
you can or will? :)
[Asus  Eee Pad Transformer Prime] benefit14snake:
If this gets figured out I would be more than happy to buy a paid app version to make it worth the time. I'm sure others will also!
[Asus  Eee Pad Transformer Prime] qubz:
Hell, a fix for this problem would be with the price of the warranty. Someone should start a bounty thread.
[Asus  Eee Pad Transformer Prime] lucasmoore:
I will, but I need someone else to do it as well so we can compare the keys.

It will also be a few days until I can get to it (this weekend) as I'm a typically overworked IT professional. :)
[Asus  Eee Pad Transformer Prime] buxtahuda:
I'm a typically under-worked southern IT non-professional lol

Let me know what I need to do and I'll go along with it. I'm not particularly worried about my warranty but won't give it up just for what we currently have. In the name of research however...

I dual-boot Windows7 and Ubuntu (forgot what version, been ages since I touched it :o).
[Asus  Eee Pad Transformer Prime] lucasmoore:
Cool. I think I may be able to do it without setting up a proxy. I should be able to just add a hosts entry on the tablet and run the tool. The hosts entry will point at a server I setup with the stunnel for decryption/re-encryption.

I'll test it myself so I don't waste your time. Can anyone confirm if the unlock tool can be run more than once? If for some reason I unlock the tablet but the packet capture doesn't work, can I "unlock" again? I'm pretty confident about this method, but I'd like to know if I only have one shot at it.

I'll use a cloud server I have for the complicated bits, so if it works for me you can just add the hosts entry pointing at my server. You'll have to coordinate with me so I can run the capture at the same time, but it will save you a lot of work.
[Asus  Eee Pad Transformer Prime] buxtahuda:
Good stuff.

You should be able to email me through XDA with the line I'll need to add to the hosts file and what time you want me to run the unlock app. I'll receive the email (should) immediately.
[Asus  Eee Pad Transformer Prime] lucasmoore:
Sounds good. Theres some setup on my end that needs to be done. I _might_ be able to get something up tomorrow.
[Asus  Eee Pad Transformer Prime] Wordlywisewiz:
I still say find the site that it sends your serial to and DDOS attack it so the server will not be able to receive your serial number haha :p
[Asus  Eee Pad Transformer Prime] buxtahuda:
That just screams some kind of consequence.

Like ASUS most definitely not fully unlocking the bootloader and even bothering with trying to get us actual nvflash access..

Then we're most definitely reliant on someone just leaking something..
[Asus  Eee Pad Transformer Prime] Hawkysoft:
and not be capable to send the reply either... brainiac >.<

also xda does not approve these kind of idea's on their forums bro...
[Asus  Eee Pad Transformer Prime] qubz:
Totally OT, but I couldn't resist http://xdaforums.com/showthread.php?t=1282900
[Asus  Eee Pad Transformer Prime] buxtahuda:
Holy crap!

:runs to download:
[Asus  Eee Pad Transformer Prime] PoorCollegeGuy:
You talk big for someone who doesn't even bother declaring the variables in their signature ;) :P lol jk I'm just pushing buttons.

This is an awesome thread by the way.
[Asus  Eee Pad Transformer Prime] cfaberlle:
Now that is awesome :D
[Asus  Eee Pad Transformer Prime] Nieylana:
Just read thru this thread, and wanted to mention that Charles Proxy and Fiddler (both windows based) support https man-in-the-middle out of the box. not sure how useable it is for you guys but wish you the best of luck in your endeavors :)
[Asus  Eee Pad Transformer Prime] korax85:
As this apk looks to be signed as system, is there any way to make a change to a file and for it to be installable on the stock firmware?

Ive just created a ca to replace the keystore within the app to allow the https requests to be intercepted - more for interest then anything else :)
[Asus  Eee Pad Transformer Prime] Dexter_nlb:
i dont think XDA likes any posts that cannot be downloaded unless you pay, so this one is being reported.?

(reference SetCPU, free here, payable on market)

anyways back to topic.

On Acer A500 , Skrilax_CZ have found out quite some details on the tegra2 bootloader, that should be possible to use on our prime?

see this thread for all his dirty details and how Acer A500 got unlocked by patching bootloader. And yes, a500 had all the same kernel+recovery checksums in the bootloader as tegra3 now seems to have. plus the OEM unlock options which Xoom also goot.

question remains if prime got OEM unlock options enabled when enabling APX mode.

you do not replace any CA inside the stock APK's, if you only change code, you can just copy back the ca files from the stock and push to /system/app and it will load correctly.

so do not resign, but just keep original signature and place it in /system/app
[Asus  Eee Pad Transformer Prime] sparkym3:
I think it is most likely fine because you can get the free version (latest and older versions) from the project page that is link to in the OP.
[Asus  Eee Pad Transformer Prime] Hawkysoft:
thanks brah, next time read further in the thread, but cool beans further than that ;)
[Asus  Eee Pad Transformer Prime] Hawkysoft:
if anyone cares...

still trying.... now u know it even leaves traces... man this is starting to annoy me

so basically the unlock tools revokes the fastboot and nvflash, creates some trash on our devices so they can even see it if we bypass the asus site..

only solution is to get the info which is send and received during the process...

@lucasmoore, any luck so far?
[Asus  Eee Pad Transformer Prime] ImmanuelCunt:
Do you think it will ever be possible to get access to Nvflash with hacks or exploits? Or is this also encrypted?
[Asus  Eee Pad Transformer Prime] 1wayjonny:
Ah this is terrible news, I have contacted the Nvidia team a few times for the NVflash for windows and they do not respond. They also have a remark about if you need access to NVFlash for CardHU then contact your Nvidia Rep. This is a shame that we can not use the standard protocols to talk to the device.

This seems to be like HTC with S-OFF and S-ON, unlocked but also flagged clearly for the vendor to see.
[Asus  Eee Pad Transformer Prime] buxtahuda:
Yeah, it's like a nightmare opposite of my Desire Z release timeline lol

I don't see how they'll be able to keep this up. I got this device expecting dev's to have complete and utter control eventually, which would put this thing into the stellasphere.

Instead this is just becoming some stupid brawl reminiscent of those with Sony and their customer base: they have our money, yet they still think the device is in some form or fashion still theirs to regulate.
[Asus  Eee Pad Transformer Prime] DanoUF:
Someone correct me if I'm wrong here, but this statement seems to imply that there is no uniquely identifying information going back to ASUS. If the unlock tool sent the serial back, then it wouldn't matter if they gave you the ability re-lock and unroot the device as you still wouldn't be able to get it serviced under warranty. If that's the case the next question is whether the generic unlock key gets cached somewhere that it may be accessible somewhere in the process. Again, I may be totally off base.
[Asus  Eee Pad Transformer Prime] Hawkysoft:
you use the tool, your **** gets saved in their database and also it leaves traces in your device, see it as an 'just to be safe' point for them...

so far this entire crap is holding me off to unlock it... to bad because i really like to start developing stuff for it..
[Asus  Eee Pad Transformer Prime] barryflanagan:
They probably mean that if you had nvflash you would have no need to use the unlocker tool, and therefore no way of knowing you had unlocked your bootloader :mad:
[Asus  Eee Pad Transformer Prime] Hawkysoft:
@barryflanagan, than they could add the option after unlocktool has been used...
[Asus  Eee Pad Transformer Prime] malac0da13:
What do we need the nvflash tool for anyway?
[Asus  Eee Pad Transformer Prime] buxtahuda:
So that when we really pork things up we can still recover?

I think the real reason is it would give our dev's the tools to really play around with and unlock Tegra.
[Asus  Eee Pad Transformer Prime] malac0da13:
But not every device has such a means though? I mean yeah it would be nice but is it absolutely necessary?
[Asus  Eee Pad Transformer Prime] Hawkysoft:
not every device has an tegra3 processor either..... ur point?

and yes it is needed, especially the fastboot.
[Asus  Eee Pad Transformer Prime] Diamondback:
We have fastboot access and it works, just not the way we are used to ;)
[Asus  Eee Pad Transformer Prime] malac0da13:
Like I mean is there something comparable for the galaxy nexus or any of the nexus phones? I know the Samsungs have Odin tool but what about the nexus one. Did that have anything comparable? Is the Odin tool even comparable?

I didn't realize fast boot wasn't working properly though.
[Asus  Eee Pad Transformer Prime] rand4ll:
Yes, Odin can be compared to nvflash. Same concept and use case. I love Odin, works great and saved me a couple times. Not having nvflash is in no way around good thing. Having it is only a benefit so why not. It's not absolutely necessary but can be to recover some bricks.
[Asus  Eee Pad Transformer Prime] malac0da13:
Ah got it. I know RSDlite saved me and my Droid X a lot.
[Asus  Eee Pad Transformer Prime] NORCALkID:
Nvflash would make this device pretty much unbrickable..it can also allow you to install things like ubuntu or maybe even windows8 as a dual boot ..also resizing of partitions ..plenty other uses
[Asus  Eee Pad Transformer Prime] ImmanuelCunt:
Maybe we should protest on the ASUS Facebook page like we did it in the past. If there are enough people complaining they would unlock this too?! :)
[Asus  Eee Pad Transformer Prime] lilstevie:
for the nth time. No, Odin is not comparable to nvflash. Wipe SBL on your device and watch what happens, you will be bricked, meanwhile the same thing on a Tegra device would be recoverable with nvflash. Nowhere near the same thing.

Nexus devices have Fastboot, same as us, just our fastboot works slightly different, ours requires packing the images into blobs first
[Asus  Eee Pad Transformer Prime] Hawke84:
Hi all, ive just ordered my device, and just catching up on reading round the TFP forums, just so ive got this straight: we can unlock bootloader but the only way to do it (at the moment ;)) is asus unlock tool?
[Asus  Eee Pad Transformer Prime] Swiftks:
Correct

Sent from my CM7 Atrix 4G
[Asus  Eee Pad Transformer Prime] rand4ll:
So one aspect is different so they are completely incomparable? Odin just relies on the sbl as that is where the download mode is. Otherwise both allow direct flashing of partitions and repartitioning. Yes nvflash can do more but both are used for the same purpose.

The way they work technically is different but both are used to achieve a similar end result which is direct flash of a partition.
[Asus  Eee Pad Transformer Prime] REAVER117:
Hey lilstevie, any update on Ubuntu for the Prime? Is dual boot still a possibility with our semi-unlocked bootloader?
[Asus  Eee Pad Transformer Prime] lilstevie:
Odin is not an unbricking and debug tool, this is what nvflash is.
[Asus  Eee Pad Transformer Prime] rand4ll:
I agree that nvflash is more powerful than Odin. I just don't agree that they cannot be compared at all. And Odin certainly can fix some types of bricks, really anything as long as you can get your phone into download mode.

As I do not know as much about nvflash as you do what type of debugging does it do? I have tons of experience with Odin but have only used nvflash for flashing which is why I compare them, never used much of its more advanced or other features.
[Asus  Eee Pad Transformer Prime] lilstevie:
It has a lot of features that aren't documented anywhere so I can't really find much out about them, but it can connect to devices by jtag as well as usb. you can also use it to test bootloaders by uploading into ram and executing.
[Asus  Eee Pad Transformer Prime] Modded Darts:
Asus' App

So we have to use Asus' app to unlock the bootloader because their servers generate an unlock key based off our device and/or cpu serial number, right?:confused:

Does anyone know if Asus is doing a hardware fix for the gps issues or just software?
[Asus  Eee Pad Transformer Prime] FunkyMcBain:
What GPS?

Sorry had to do it :)
[Asus  Eee Pad Transformer Prime] rand4ll:
Well you did sorta answer the question. I would not count on any hardware changes or fixes for GPS as the spec is no longer part of the tablet.
[Asus  Eee Pad Transformer Prime] ickk:
has anyone tried snatching the packets asus sends when they generate the unlock keys?
[Asus  Eee Pad Transformer Prime] buxtahuda:
Never heard anything from lucasmoore. So no, if someone else would like to orchestrate such a thing I'd be OK going along with it though
[Asus  Eee Pad Transformer Prime] Hawke84:
Anyone what type of encryption the boot loader uses?
[Asus  Eee Pad Transformer Prime] buxtahuda:
Like the picture change lol

Not that I've read anywhere. That's why we would need to intercept a couple of people unlocking isn't it, and even then we may not be able to figure it all out.
[Asus  Eee Pad Transformer Prime] lilstevie:
AES-128, but this isn't touched with the unlock
[Asus  Eee Pad Transformer Prime] beckzz:
Hey guys,

anything new in this case? :)

thx for your work!
[Asus  Eee Pad Transformer Prime] Hawke84:
I don't think it's being looked at, we don't ha e any hardcore software engineers for prine...
[Asus  Eee Pad Transformer Prime] beckzz:
Ok *push*

Sice Asus itself is obviously unable to fix the unlock issue, regarding the posts in all the threads about this topic, i think i have to push this thread again...

looks like asus is screaming “piss off“ to all prime users and we are on our own...im more than just frustrated...

was thinking about selling my prime..but dont know which other pad to buy...the idea of the trasnsformer series is perfect for me..and i want it to work like its supposed to...

I still have hope..so pls guys, anybody out there able to scream back to asus somethin like “you pricks are way to stupid to support a 500bucks high-end tablet , so i did: heres the solution!“

I would really like to do that myself...but i cant...

Maybe we need to collect some money...to get some pros down here...anybody with me?
[Asus  Eee Pad Transformer Prime] Yuhfhrh:
A bounty may work, but I don't know how much would need to be raised until someone was interested.
[Asus  Eee Pad Transformer Prime] Jesse6749:
I would be down to put in some $$$ in a bounty for this cause. I have a replacement from Asus and since they have my serial number recorded already I cannot unlock the bootloader on my new Transformer and that sucks. I was hoping to install one of the CM10 roms just like I did on my Acer Iconia A510 man the Acer is awesome with Jelly Bean running on it :D :D :D. Maybe I may get a A700 and sell my Transformer, I have seen the A700 as low as $399 on Amazon.
[Asus  Eee Pad Transformer Prime] beckzz:
OK, so seriously:

How can we set this up? Where to collect the money, so that its really available if we find someone whos able to show Asus the finger?

I have no experience with this...but am willing to learn and to put some work on it...

lets see how many people reply to this in the next few days...maybe we should start a new thread for this approach and contact PoorCollegeGuy or somebody else to reach the public or at least some more people with the same problem.. i think there are many of them out there with this problem... xda forums and web has countless threads with this topic...

i'm following some other threads, were this is discussed...Tien, the official Asus-USA-employee here on xda, is trying to help people...but at this time, there seems to be no case, in which Asus really fixed the issue. Tien also said:

so bad news for me i think...no Asus support at all...im a little pissed off...
[Asus  Eee Pad Transformer Prime] Yuhfhrh:
http://xdaforums.com/showthread.php?p=32139594#post32139594

Here is a logcat after I sent my tablet in for RMA and they supposedly fixed the unlock issue (yet I still cannot unlock)

https://dl.dropbox.com/u/34538839/logcat.txt
[Asus  Eee Pad Transformer Prime] sparkym3:
This log looks like it shows a connection timeout. Are you on a network that has this traffic blocked? 2 things you can try on either a computer or the tablet who is on the same network.

1. in command prompt type "ping 103.10.4.96", without the quotes and confirm a reply is received to make sure the IP is not blocked.

2. in the web browser navigate to https://103.10.4.96 and confirm that you get text back that says "It works!" which is what I get. NOTE: notice that this is https and not http since it uses encrypted communication. Also, try this a few times because it didn't work every time for me.
[Asus  Eee Pad Transformer Prime] Yuhfhrh:
On my computer it works, but on my tablet, it says webpage not available. My home internet, tethered from my phone, and starbucks wifi all give me this message on the tablet.

Edit: It works on my tablet through the command prompt, just not the browser.
[Asus  Eee Pad Transformer Prime] sparkym3:
If that is the case then it sounds like ip is available but the port seems unavailable. I'm not sure what would be blocking it. Can you access any secure sites from your browser on the tablet (https)?
[Asus  Eee Pad Transformer Prime] Yuhfhrh:
Yeah paypal is working fine.
[Asus  Eee Pad Transformer Prime] beckzz:
Hmmmm *push*

Is anybody focused on this topic?
[Asus  Eee Pad Transformer Prime] TJet1.8:
Ya....would like to know as well.

I was foolish enough to update my tfp to jb before unlocking it....now I'm stuck with it....
[Asus  Eee Pad Transformer Prime] beckzz:
Did you try to unlock with JB? I did it myself last week with my second prime..worked perfectly
[Asus  Eee Pad Transformer Prime] abazz:
I'm under the impression that we can decompile, modify and recompile. Is it possible to just make this package debuggable?

Given its system and root access if we make it debuggable and install it I wanted to see what, if anything we could do to root unlocked JB using run-as
[Asus  Eee Pad Transformer Prime] beckzz:
hmm, does that thing have root privileges?

don't think that this this is doing anything to the os...its just receiving a key from the server to unock the bootloader...

but i didnt look so deep into it, so maybe my statement is just wrong..

Grz
[Asus  Eee Pad Transformer Prime] lilstevie:
it works fine on jb, if you cannot unlock on jb, you would not have been able to unlock on ics either