yashsingh1/xdaforums huggingface dataset:
[Nexus 7 General] bftb0:
Taking the lazy approach!

LOL

Hey phantom/oldblue910, check this out!

I figured, "So long as I've got a full backup and a rooted tablet, why even bother to roll back? Why not just kang into place the /system/build.prop file from old factory images into my current (rooted stock) ROM and see what happens?"

[size=+3]IT WORKS!**[/size] :D :D

So, even though I have a Dec 2012 32 GB N7, I got the OTAs as if I were running JRO03D and JRN84D releases ... while running JDQ39! LOL :D :D

So, even though I didn't get any new links (thephantom beat me to it), with this kang-hack I did verify the same results that thephantom got for earlier nakasi factory ROMs:

nakasi JRN84D -> JOP40D

nakasi JRO03D -> JDQ39

Probably the entire build.prop is not needed - it might only be one or two property values. I was too lazy to binary divide and conquer. But it does add a new trick to the bag. It might even be possible to determine nakasi OTA URLs on nakasig devices and vice versa. (I don't actually attempt to apply the OTAs - I just go into /cache and get the filename using adb).

I could get the JRO03C -> ?? or JRO03S-> ?? OTAs if somebody can provide the /system/build.prop file from either of those two factory releases. (It can be dug out of TWRP system.ext4.win files, as these are just .tar archives).

** Note I did have a little hiccup initially - I forgot to update the older build.prop files so they would have the line

ro.build.version.sdk=[b][color=green]17[/color][/b]

which corresponds to 4.2.2. This caused (I presume) something like a late hang of the JDQ39 boot; easily fixed though in a custom recovery.

To be extra safe (this kind of stuff makes me paranoid), I did a full nandroid backup before starting any of these fun and games and restored it afterward. It might be safe to do without that, but I didn't feel like taking any chances.

cheers
[Nexus 7 General] osm0sis:
Holy crap! Very nice work! Try it with just the fingerprint changed to the old version. That's my hunch for what the key value would be.

Now we just need to wireshark the packets it sends during an OTA check. That way we could spoof Google's servers so all their delta are belong to us. ;)

Edit: Just the fingerprint doesn't cut it, must be some combination.
[Nexus 7 General] thephantom:
You da man bftb0!
[Nexus 7 General] osm0sis:
Got it! :D

Building on bftb0's awesome find, the update check seems to look for only two things in build.prop; ro.build.date.utc and ro.build.fingerprint. :highfive:

Changing them to

ro.build.date.utc=1349214185
ro.build.fingerprint=google/takju/maguro:4.1.2/JZO54K/485486:user/release-keys

on my GN and then rebooting successfully triggers the OTA notification. :victory:

There does still seem to be a random element to whether the update check will work though. Sometimes it still says up-to-date. Going to try build info from farther back that should trigger more readily.

Edit: Bingo!

ro.build.date.utc=1334353881
ro.build.fingerprint=google/takju/maguro:4.0.4/IMM76I/330937:user/release-keys

got it on the first try. :D

Knowing this it should be fairly simple to find most nakasi/g deltas now since lots of places log the build.prop info: http://www.glbenchmark.com/phonedetails.jsp?benchmark=glpro21&D=Google+Nexus+7&testgroup=system

Problem is places like that don't necessarily log which go with which.

:good:

Edit 2: Which ones do you still want, oldblue? I'll see if I can find a better source for the info we need.

Edit 3: Ugh.. harder to find good sources for the build.date than you'd think. I wonder if the GLBench guys can be talked into making the corresponding values from their database more obvious..
[Nexus 7 General] oldblue910:
Guys, thanks so much. At this point all I need is JRO03S. You can find the build.prop fingerprint in the ROM found here: http://xdaforums.com/showthread.php?t=1913562.

Thanks again!!
[Nexus 7 General] osm0sis:
Awesome.

Since I don't have my N7 with me today I'm going to extract the build.prop and push this trick to the limit by trying the fingerprint and date.utc on my GN. :cowboy:

ro.build.date.utc=1345591833
ro.build.fingerprint=google/nakasi/grouper:4.1.1/JRO03S/444012:user/release-keys

Sit tight for results! ;)

---------- Post added at 10:16 AM ---------- Previous post was at 10:04 AM ----------

Hahaha doesn't boot. I'll see if I can pry the N7 out of my girl's hands when she gets home for lunch in a few hours. :p
[Nexus 7 General] oldblue910:
Thanks home slice. You're helping me out. As I've said before, all my devices are unrooted with the bootloader locked, so doing this stuff involves wiping my tablet. If nobody else can do it, I'll take one for the team, but I'm definitely thankful for all of you who do this for me! haha
[Nexus 7 General] osm0sis:
Turns out she didn't take the tablet to class today! :D

http://android.clients.google.com/p....signed-nakasi-JDQ39-from-JRO03S.1af7c0c1.zip

You really should take the plunge one of these days though. You can use my BootUnlocker Script to relock it after so it still looks pretty. :p
[Nexus 7 General] oldblue910:
It's more being rooted that I'm not interested in. It's a big security risk for me due to some sensitive financial stuff I keep on my devices. Since nothing I do on my devices requires root, it's a security risk I don't really feel the need to take. Maybe one day. haha

Thanks for the delta. I've updated the first post and am updating my website as I speak.
[Nexus 7 General] osm0sis:
As you well know from hanging out in efrant's threads, unlocking doesn't mean you have to root. You could even keep stock recovery on there and just use fastboot boot cwm.img when you need custom. ;)
[Nexus 7 General] oldblue910:
Yes, but even having an unlocked bootloader is a security risk purely for that reason...you can flash CWM on a whim and instantly have root access to the /data partition via adb. :) And the one-click bootloader lock/unlock only works if you have root. So it's kind-of a damned if you do, damned if you don't type of thing. The only thing I've thought about doing is encrypting the data partition using the built-in Android encryption. I guess that would solve the problem of having unauthorized access to the data partition.
[Nexus 7 General] osm0sis:
The BootUnlocker app doesn't work on the N7 at all, but my flashable script does. You're right though, you'd need it unlocked to fastboot boot cwm.img even, so that would necessitate flashing the custom recovery to the device. That said, rooting isn't even a security risk if you're running a proper control app like SuperSU. Very tinfoiled of you. :p

I've seen people go all out with the paranoia while still keeping custom recovery though: You encrypt your data, you get the modded TWRP that doesn't have adbd running by default, you feed TWRP your encryption key but then password protect TWRP, then you relock your bootloader with segv's app/my script depending on device. :cool:
[Nexus 7 General] oldblue910:
Well the other issue with root is that some of my apps won't run with it enabled...things like the Time Warner Cable live TV app (which I use regularly)...and though I know they've hacked a version of it to work with root, I like to keep things up to date. Regardless, I may unlock the bootloaders and just encrypt the data partition. That solves the immediate problem of the custom recovery having root access to the data partition since it'd be encrypted. That's really my only hangup.
[Nexus 7 General] osm0sis:
Rock and roll. :highfive:

Actually I made a BootUnlocker Script for the GN lately too, and that could easily be adapted to the N4 and N10, since only the location changed and the states are reversed. Since it's a flashable zip you could remain unrooted and still lock/unlock as you like once booted into your Fort Knox-like custom recovery. :D
[Nexus 7 General] oldblue910:
did you get my PM regarding the other deltas?
[Nexus 7 General] osm0sis:
..No? :confused:
[Nexus 7 General] thephantom:
So is oldblue now convinced and would start unlocking his bootloader? :D:D:D

Flowed and Tapped from my Nexus
[Nexus 7 General] Jack'O:
Hi guys, i bricked my N7, i wiped and formatted everything and now it don't boot up, I did not think that has not an external memory as my phone, i need to flash a firmware or a rom via fastboot or with a toolkit but don't know how, can someone of you tell me how to proceed?
[Nexus 7 General] thephantom:
You can use this: http://xdaforums.com/showthread.php?p=32075129

Do make sure you have the correct version of software for your device
[Nexus 7 General] ALD3:
FYI an app like time warner and Brighhouse will work if rooted, no altered app needed. Just make sure that you use SuperSU instead of superuser, then in system>app make sure SuperSU is not named superuser. If it is then rename to SuperSU. Last is in system change the build.prop to read release-keys instead of test-keys, if it is not already release-keys. That's it.

I have the BHTV app on Nexus 7 32G and several other devices. All rooted a and all run the TV app with no problem.
[Nexus 7 General] oldblue910:
Very good to know. Thank you!
[Nexus 7 General] bftb0:
Excellent!

The mind reels with the possibilities - who's to say that you couldn't use an old trout/G1 to find OTAs for a Nexus 10?... or use any rooted device as a proxy for any other device?

A caution in attempting this would be to avoid polluting your market account with phantom devices that you don't own. I think it should be sufficient to wipe your Google creds from the copy of the ROM you are using so that doesn't happen. (Either with the usual userland methods or brutally - "rm -rf /data/system/users/*")

I left out a detail about my experiment that adds some color to this: after I got the Android startup hang due to the mismatched SDK version token, I did a factory reset (wipe all of data except /data/media) under the presumption that I might have stuffed something up ... and then used a disconnected WiFi router to get past the initial setup. (it times out & continues after 2-3 min if it gets an IP but can't route). After setting up without entering a Google account cred, I connected to my actual WiFi and immediately got the OTAs. Anyway - the point is that the OTA process does not seem to be dependent on Google creds - which is what you would want anyway to avoid mucking up your market account with phantom devices.

Who wants to give it a roll? ;)
[Nexus 7 General] osm0sis:
Your fingerprint seems to at least need to match your hardware in order to boot. Trying for nakasi OTAs on my GN wouldn't boot past the Google logo. :p

Now if we didn't need Android OS to do the check we'd be in business. We need to capture what's sent to Google for an update check then mimic that.
[Nexus 7 General] bftb0:
Right. I knew there was something in your post that I breezed past a little too quickly. Derp.

If it happens via SSL/TLS then a man-in-the-middle is needed. I vaguely remember trying something similar a few years back but in a different context. The $64k question is whether the process punts after the slightest whiff of certificate troubles, or continues. Apps with UIs (e.g. browsers) have the option of asking the user, but background tasks have no such option; I suppose it is possible that the client side just continues. Setting it up though takes a fair bit of work ... dual NIC Backtrack machine and mess about with iptables.

-------------

[Edit] osm0sis check your pm
[Nexus 7 General] TheManii:
Continuing our discussion from [REF] Nexus 4 Stock OTA URLs pages 21-23+

JFN53N -> ?

ro.build.date.utc= [B][Unfortunately I dont have this one][/B]
ro.build.fingerprint=google/nakasi/grouper:4.1/JFN53N/370280:user/release-keys

JRN84D -> ?

ro.build.date.utc=1340674696000
ro.build.fingerprint=google/nakasi/grouper:4.1/JRN84D/392829:user/release-keys

JRO03C -> ?

ro.build.date.utc=1341437889000
ro.build.fingerprint=google/nakasi/grouper:4.1.1/JRO03C/398337:user/release-keys

Would anyone happen to know the timestamp for JVP15S/nakasig also?
[Nexus 7 General] oldblue910:
JRN84D only updates to JOP40D and JRO03C doesn't update anymore at all. This was verified earlier in this thread.
[Nexus 7 General] TheManii:
Ah ok I must have missed that, only thing left is to the GN then.

Would anyone happen to have the timestamps for JFN83N/JVP15S then?

We'll move onto the GN now as there is nothing for the N7 now.
[Nexus 7 General] osm0sis:
I guess we could do like you have and reverse the dates from GLBenchmark to narrow down which they'd be. Good thinking. :)
[Nexus 7 General] TheManii:
they're not on glbenchmark, otherwise I would have already gotten them

I can give a rough range for the dates at best
[Nexus 7 General] osm0sis:
AH damn. :) Best would be to extract from any dumps we can find if they exist. oldblue's already sleuthed out the majority of those in existence though, so I'm not too hopeful.
[Nexus 7 General] Picc0:
Root?

first: thank you for the download links :)

i assume its a dumb question, but i will ask it anyway: can i root after update with nexus 7 toolkit or we have to wait to a new kernel?
[Nexus 7 General] gravyplaya:
Thanks. When I try to go to recovery it gets stuck at the Google logo screen. Any ideas?
[Nexus 7 General] Picc0:
install cwm or rom toolbox rom market and go to recovery through those.
[Nexus 7 General] gravyplaya:
Thanks but those only work when rooted? Im stock unrooted.
[Nexus 7 General] morell2:
JZO54K from JRO03S LINK.?
[Nexus 7 General] oldblue910:
Nobody has posted it yet.
[Nexus 7 General] bigbop:
I just tried this update on my rooted and stock JRO03D ROM and the process aborted:

error in file /sdcard/update.zip

Status 7

No files found

Anyone else see this?
[Nexus 7 General] osm0sis:
Worked fine for me. I'm guessing you did some other modding? Revert your changes to get through the checks.
[Nexus 7 General] oldblue910:
That's a bug in the 3.34 boot loader. Boot the tablet up normally, turn on USB debugging, plug the tablet into USB and do adb reboot recovery from a command prompt. That works every time.
[Nexus 7 General] bigbop:
Well, I just tried installing the update again and it failed with the same error.

I then tried to update using the smaller recovery update that installed

Nexus7-Binary-Update-JRO03R.zip and it worked fine.

I looked inside the zip file and everything looks good so I don't know why its giving me the no files found error.
[Nexus 7 General] perthtrev:
Having same problem

---------- Post added at 08:17 AM ---------- Previous post was at 08:11 AM ----------

Having same problem with "system 7 error". How did you fix? By using another download?
[Nexus 7 General] bigbop:
No, the binary update was installed fine. The Google update still fails.

---------- Post added at 09:28 PM ---------- Previous post was at 09:24 PM ----------

I used ROM toolbox to get into the recovery mode. I start the install and it fails on the verification check
[Nexus 7 General] oldblue910:
Are you on JRO03D or JRO03S?
[Nexus 7 General] xdatastic:
Hi oldblue910, any chance you could add the approx date each OTA was released and the original OTA URL (not just your mirrored Google Docs links) on your randomphantasmagoria.com web site? would be quite handy to have for all the devices. Thanks, it's a useful site.
[Nexus 7 General] oldblue910:
The dates are a good idea...as far as the Google links...I find those unnecessary since the whole point of the site is to mirror the OTAs in case Google takes them down. I'll work on the dates. Good idea.
[Nexus 7 General] bigbop:
JRO03D
[Nexus 7 General] oldblue910:
Then it's failing because either you're running a custom kernel or because some file on your /system partition has been modified by some root app. You must be running a completely stock ROM in order for the OTA to succeed.
[Nexus 7 General] bigbop:
Actually, everything is stock except I added one line at the end of the system pref file to enable home screen rotation. I'll put it back to orig and try again.

Tnx
[Nexus 7 General] oldblue910:
That'll do it. Replace it with the original file and that should fix your problem.
[Nexus 7 General] osm0sis:
Didn't you also just say you flashed JRO03R somewhere along the line? That wasn't an official release, so those files might also be why verification isn't succeeding.
[Nexus 7 General] TheManii:
I believe JFN53N is permanently lost to time, JVP15S might not be lost
[Nexus 7 General] TheManii:
Could someone try this one for me?

Looking again at glbenchmark: that is a reasonable timestamp for JFN53N
[Nexus 7 General] oldblue910:
I'll try it. Hold on.
[Nexus 7 General] oldblue910:
Damn, man, I don't know how you nailed it, but you nailed it. That's the correct UTC date. It only updates to JRN84D, so it appears no further deltas have been released.
[Nexus 7 General] TheManii:
Only thing I'm missing now as far as the N7 is concerned is the bootloader used in JFN53N, as it's a diff one from JRN84D

The other is JVP15S's timestamp

Edit:

I believe I found JVP15S's timestamp:

JVP15S -> JDQ39

ro.build.date.utc=1351118509
ro.build.fingerprint=google/nakasig/tilapia:4.2/JVP15S/515026:user/release-keys
[Nexus 7 General] oldblue910:
Might want to ditch the trailing zeros.
[Nexus 7 General] joshuacul:
many thanks!!!!!
[Nexus 7 General] realpg:
thanks.

useful

marked
[Nexus 7 General] oldblue910:
That's why I do these threads. Everyone reverts back to stock eventually for one reason or another. Plus, when a device is end-of-lifed, it's neat to look at all the updates it received.
[Nexus 7 General] TheManii:
We seem to have found something interesting:

ro.build.timestamp.utc=1362427589 (still being confirmed)
ro.build.fingerprint=google/nakasi/grouper:4.2.2/JDQ39B/592281:user/release-keys

JDQ39B is tagged as android-4.2.2_r1.1

JDQ39B/JDQ39E have not been seen in the wild for any device, and it may simply be a preinstalled rom or simply not intended for release into the wild.
[Nexus 7 General] opg822:
Thanks!
[Nexus 7 General] capitansky:
great job I looking for that back to stock thanks
[Nexus 7 General] stealthita:
tanks
[Nexus 7 General] jackjsa:
nice !!
[Nexus 7 General] oldblue910:
Ok folks. There is definitely a JDQ39B ROM for the 3G Nexus 7. Does anyone have a device that came with it out of the box? If so, can you provide the bootloader and baseband versions? Thanks!
[Nexus 7 General] tbonezx11:
Not to be too dumb

Alright, I had to Factory Reset my device recently because of some odd behavior ... all of a sudden asking for a password to decrypt data, which I'd never encrypted...

ANYWAY...factory reset & it receives an OTA update to JOP40D shortly thereafter which I install.

From the first post I downloaded the JDQ39 from JOP40D .zip and tryed to flash in TWRP ... failing. I confirmed the MD5 checksum ... I'm rooted, unlocked on Wi-Fi only 32GB N7 ... lastest (I think) build of TWRP recovery. Stock otherwise...

What am I missing? What are you going to tell me I've forgotten that's going to make me facepalm because I haven't flashed a ROM in a while...

Thanks for putting up with stupidity...
[Nexus 7 General] oldblue910:
It would help if you could tell us what error TWRP is giving you.
[Nexus 7 General] oldblue910:
Alright, folks. The new Nexus 7's firmware name is "razor". The device name is "flo", and it ships with Android 4.3/JWR66N. I've got a page up for it on the website. http://www.randomphantasmagoria.com/firmware/nexus-7/razor.

I still need the bootloader version for JWR66N, so if anyone gets one, please post the bootloader version here. Going forward, please post future OTA links here and I'll put them in the first post.

EDIT: Bootloader version is FLO-03.05. I'm all set now until the first OTA comes out.
[Nexus 7 General] osm0sis:
So occam and razor. Interesting, given how close the N4 and N7v2 hardware is. ;)

Also they're giving up on fish names now, unless flo is Japanese for something.
[Nexus 7 General] sola fide:
I think the occam's razor reference is a nice touch from Google.

For "Flo", maybe they've been watching tons of Finding Nemo over and over. :silly:
[Nexus 7 General] osm0sis:
There's apparently a nice sushi restaurant in Bellevue, WA called Flo, or Fish Liver Oil ;), but yeah, so far it looks like they've given up on the fish code names. We'll have to wait and see what they do for the 2nd-gen N4.
[Nexus 7 General] oldblue910:
OK everyone, I'd say it's a fair bet that Android 4.3 will be coming to Nexus devices OTA in the next few days. This means I'm going to need someone to get the OTA URL for the following upgrade paths:

nakasi JDQ39 -> 4.3

nakasi JDQ39B -> 4.3

nakasig JDQ39 -> 4.3

I don't have a Nexus 7 anymore, so I'm relying on you guys to hook us up. Once the URLs are out, I'll throw them up in the first post.

Thanks!
[Nexus 7 General] tbonezx11:
Sorry for the delay...phone crapped out & was focused on fixing that...and using daughter's N7 haha.

So doing zip install... in the TWRP TermEm. window

updating partition details...

Installing '/sdcard...etc etc"

Checking for MD5 file...

Skipping MD5 check: no MD5 file found.

Verifying current system...

assert failed: apply_patch_check("/system/build.prop", "48f7593c2fff2fa85a147639f

E: Error in /sdcard/Download/big zipname of JDQ39 from JOP40D.zip (Status 7)

Error flashing zip 'zip name'

Updating partition details...

FAILED in red above the "home button" in TWRP

So it's thinking something isn't stock in my build.prop, but I've not installed anything that should have messed with it as far as I know (like Beats)
[Nexus 7 General] oldblue910:
I would just download the new 4.3/JWR66V factory images for your Nexus 7 and flash those in fastboot. http://developers.google.com/android/nexus/images.
[Nexus 7 General] osm0sis:
Yup just flash bootloader, system and boot so you won't lose any data or apps. :good:
[Nexus 7 General] Fotogravin:
After updating my husband's nexus 7 with the factory-image I was really glad to read your post so I could update mine without loosing apps and data. The update was successfull. Just lost root (as I expected)
[Nexus 7 General] casonswag:
Anyone gota mirror cause its going super slow!
[Nexus 7 General] oldblue910:
Download it from my website. http://www.randomphantasmagoria.com/firmware/nexus-7
[Nexus 7 General] rubber guard:
thanks OP.

still waiting for nakasig for 4.2.2 >4.3

Bump
[Nexus 7 General] 5m0k3:
Here it is, ladies and gentlemen: http://android.clients.google.com/p....signed-nakasi-JWR66V-from-JDQ39.ab67ca07.zip
[Nexus 7 General] julroy67:
Nice one, thanks mate. :D
[Nexus 7 General] casonswag:
How come i lost root after i rebooted a second time ? It was working fine after installment but after another reboot i lost root i flash the newer supersu and still no root?
[Nexus 7 General] smartdipu:
Anyone with OTA link for Nexus 7 3G(nakasig) ??
[Nexus 7 General] gaz617:
Koush explains it here not quite sure what a fix will be if you're running stock
[Nexus 7 General] casonswag:
I flashed the supersu he made for 4.3 but its still tiripping out it sucks not having root but ill wait and see if he fixes whatever bugs
[Nexus 7 General] gaz617:
Link to his 4.3 supersu? What happens is it just inconsistent root? You lose it and it comes back, or it's just gone for good?
[Nexus 7 General] osm0sis:
Reboot.
[Nexus 7 General] casonswag:
This https://plus.google.com/113517319477420052449/posts/WqS2E9kkN1L and it comes and goes for some reason
[Nexus 7 General] gaz617:
md5: 9b13c34df5490dc3bb42507025421291
[Nexus 7 General] casonswag:
Thats how i lost root the first time

---------- Post added at 05:34 AM ---------- Previous post was at 05:33 AM ----------

Okay i flashed the supersu again its working for now lets see if it stays

---------- Post added at 05:40 AM ---------- Previous post was at 05:34 AM ----------

Okay i think i know what it is it happens when i open up the supersu app the second time then" it says theres no su binary installed and super su cannot install it there is a problem!"
[Nexus 7 General] basuraunak:
No OTA's Till now!

Anyone Round the world has received it?
[Nexus 7 General] nexusmaniac:
Still haven't got it :( UK
[Nexus 7 General] francho_1985:
This is for wifi o 3G version? thanks