yashsingh1/xdaforums huggingface dataset:
[Sony Xperia P, U, Sola, Go] pcarvalho:
ur file is interesting as its a b4 bootloader unlocked

now if u did the unlock procedure we might see what changed and what did not

i havent seen this yet

been waiting 4 a while on this now

hope someone does it so we can see what happens

cheers
[Sony Xperia P, U, Sola, Go] spahbod:
A proposal:

You can create this post for all xperia with good "TA" until found tester.

Sorry for my bad english
[Sony Xperia P, U, Sola, Go] XperianPro:
Thanks,I see one new address for bootloader unlock 000009F6,but it might be pointless because we need TA from SAME device before and after bootloader unlock.

Until that happens we can not be sure what we need to add to TA and what to change in TA

Also at address 000008B2 there is located unlock key,but it has 16 characters but TA reads it as 10,that does not make any sense.
[Sony Xperia P, U, Sola, Go] pcarvalho:
10 is 16 in Hex...

and if i may say so... TA from same device b4 and after unlock and from more then one device... so we can find the correct changes...

again... this is just all theory on my side...

cheers
[Sony Xperia P, U, Sola, Go] XperianPro:
I just got message from tester,mod is there and phone works normally,if custom kernel boots OK on his phone I guess we found way how to unlock all bootloaders without losing DRM.
[Sony Xperia P, U, Sola, Go] romanialibera:
any progress?
[Sony Xperia P, U, Sola, Go] joeldq:
I offer myself for testing too
[Sony Xperia P, U, Sola, Go] zxc79:
Guys maybe ask any better dev for help e.g. Blagus, the_laser. We can donation him for it
[Sony Xperia P, U, Sola, Go] king960:
[MENTION=3206945]XperianPro[/MENTION] [MENTION=5075211]Patrick4[/MENTION]

Sorry for disturbing, but have you tried doing something about this? Any progress? :)
[Sony Xperia P, U, Sola, Go] XperianPro:
To do this,kernel needs to be patched.
[Sony Xperia P, U, Sola, Go] king960:
So no chance already?
[Sony Xperia P, U, Sola, Go] XperianPro:
It is kinda very complicated,yoj can check source and you will se where is the problem.
[Sony Xperia P, U, Sola, Go] king960:
Maybe lets make a bounty to encourage devs to work on it? I guess many people struggle with this problem.
[Sony Xperia P, U, Sola, Go] Andrewasth:
Our kernel is building static modules (For wifi bt...think of it as a driver) what munjeni was trying to do was implement kexec as a module but in a way that kernel would run it and work. In order to achieve that the output modules should be the exact same as stock ones provided with official jb (or ics which he didn't try). Then he could run the kexec module with no problems (?) but apparently he didn't manage to or he didn't try enough
[Sony Xperia P, U, Sola, Go] king960:
So lets start a bounty. Lets see how much we can offer. Nowadays such problems are solved by this way.

If somebody would manage to unlock /kexec our locked devices, it would be great. If no, then stop flying in the clouds and end the topic forever.
[Sony Xperia P, U, Sola, Go] neXus PRIME:
Someone found this... its relevant to current discussion but not specifically xperia devices.

http://www.epiccm.org/2012/07/kexec-and-proof-of-concept-source-built.html?m=1
[Sony Xperia P, U, Sola, Go] XperianPro:
That was my original idea,but I never managed to get anything from fota kernel (recoverery) partition.
[Sony Xperia P, U, Sola, Go] idlestranger:
the stock software on the phone given that the carriers add their additional security in case ure on a contract.

Sry for a dumb question but if we re-restore the stock rom from the carrier to a universal sony stock rom it may remove the network security but before that it should be unlocked for the sim...and the see if the status changes because on most phones the bl is not unlockable as i have read onother threads that sony has nothing to do with it as they claim its

frm the network provider and when u try to speak the network providers the ppl u face just ask

you what application are you trying to download lmao!!!!

There is work being done on how to unlock locked which is very much appreciated but it will take time since very a diff task cuz only by simple additions u can hard brick ure phone but if we change the core software on which the phone is running will it not give us an opportunity to add more commands as the secrity on it will break loose a lil.

I dont think that even once u are out of ure contract u will be able to ask ure network providers to unlock the bootloaders....
[Sony Xperia P, U, Sola, Go] XperianPro:
Wtf?
[Sony Xperia P, U, Sola, Go] Cristiano Lira:
[MENTION=3206945]XperianPro[/MENTION]

This guy gets UART debugging working. Also have a lot of info about bootloader and lowlevel stuff on Xperias.

Check if you can get anything from it.

thread: http://xdaforums.com/showthread.php?t=2081762

The 2011 Xperias are having the same trouble to unlock the bootloader, since phones manufactured after 12W11 have new security and can't be unlocked by SETool (paid) or S1Tool, the only way is the official method by Sony but, just as me a lot of users are getting "Unlock Bootloader Allowed: No". So no way to unlock bootloader :(. See if you can help us .

Thanks.
[Sony Xperia P, U, Sola, Go] XperianPro:
It did not help a lot but since protocols are similar,anyway scanning device ram and try zo see where thing for blocking fastboot is it might help.
[Sony Xperia P, U, Sola, Go] bulanula:
Sorry to be pointing out the obvious here but I recently saw this on the homepage :

http://www.xda-developers.com/android/cyanogenmod-11-and-slimkat-for-the-locked-xperia-sp/

"Bagyusz also shared his sources on Github, so everyone can now try his/her hand at creating a port to the SP or other Sony device. After all, it’s most likely the case that this hijacked ramdisk method works with other models."

http://xdaforums.com/showthread.php?t=2735975

Can we use the same method on our locked bootloader Xperia P or Xperia U ?
[Sony Xperia P, U, Sola, Go] king960:
I asked a guy from xs forum, he said its possible 1 version forward (for us 4.2.2) I dont know why
[Sony Xperia P, U, Sola, Go] Olivier:
Who said this? The Xperia X8 (Stock 2.1) has AOKP 4.0.4 for LB... ;)

Gesendet von meinem Xperia S mit Tapatalk
[Sony Xperia P, U, Sola, Go] mirhl:
Hijacking the ramdisk is nothing new

On xperia S I'm quite sure it had already been done

What we'd like to achieve is loading a completely new kernel

With kexec or by breaking bootloader chain of trust
[Sony Xperia P, U, Sola, Go] neverdies:
Wouldn't be easier to compile a new bootloader for our xperias than unlock it?

I think the U8500 soc is supported by u-boot.
[Sony Xperia P, U, Sola, Go] mirhl:
Cool

But would you make the phone using it then?
[Sony Xperia P, U, Sola, Go] Patrick4:
You could use the leaked u8500 sources, they contain the bootloader source, if we recompile it we could flash it on to the device and bootloader unlock it :fingers-crossed: Another possibility would be to create kernel modules that would enable kexec and use kexec to load custom kernels.
[Sony Xperia P, U, Sola, Go] king960:
Will somebody accept this Challenge?
[Sony Xperia P, U, Sola, Go] mirhl:
I'm pretty sure flashing a new bootloader isn't as easy as flashing a kernel

Cool stuff here

And it seems that with locked bootloader loading new kernels modules is hard as hell

http://xdaforums.com/showthread.php?t=2630488

http://xdaforums.com/showthread.php?t=2495152
[Sony Xperia P, U, Sola, Go] Patrick4:
The s1 bootloader is located at /dev/block/mmcblk0p1 ;)

heres the output from the s1 bootloader:
[Sony Xperia P, U, Sola, Go] mirhl:
Ok, you got me

Anyway I wouldn't swear that's the first bootloader.. I mean, it could be the second or even the third.

Thus, its checksum could be checked

Here's more about qualcomm's chain of trust

I don't actually know what could be the corresponding for novathor devices though
[Sony Xperia P, U, Sola, Go] Patrick4:
It's not the first, infact it's the last bootloader, it checks the TA partition and it determines wether the bootloader is locked or unlocked. If we could replace it with another bootloader we wouldn't have a problem loading a custom kernel :victory:

the previous bootloader is ISSW and looking at the sources I don't think it checks the signature .

---------- Post added at 08:35 PM ---------- Previous post was at 08:29 PM ----------

The only way to check would be to flash a custom bootloader :laugh:
[Sony Xperia P, U, Sola, Go] mirhl:
You are convincing

But bear in mind JTAG will be required if something isn't perfect and screws up the phone
[Sony Xperia P, U, Sola, Go] neverdies:
I think that is possible to flash the bootloader through terminal emulator.

I do not know how Patrick4 got the bootloader log, but maybe he used the UART or the USBtty interface, and in this case is likely that the bootloader can be reflashed trought the first or second stage bootloader, so we don't need to use the JTAG to recover the phone.
[Sony Xperia P, U, Sola, Go] emppu:
Suggestion

hi guys, ok , I know this is out of context and my phone forum , but if u need some help with your thread ,i could help with material for the 2013 line devices(xperia l,xperia z,....), and iam willing to test anything if u want !

If u are doing this research for the 2012 devices , i think u could help many ppl in the 2013 device lines too.jusst a sugestion .:laugh:

Keep up the good work

Ps: sorry for posting in this thread aboout another devices
[Sony Xperia P, U, Sola, Go] Patrick4:
Would it be possible to bruteforce the kernel signature key ? If someone could explain to me how the whole signature thing works I could try to write a program which will bruteforce the signature key :p
[Sony Xperia P, U, Sola, Go] mirhl:
bruteforce would be possible certainly..

but only if you had a gazillions of cpu.. they certainly didn't use abc123 as password

anyway, theory is here

http://xdaforums.com/showthread.php?t=2562649

http://xdaforums.com/xperia-z/orig-development/tutorial-backup-ta-partition-to-drm-t2234627/page30

http://xdaforums.com/xperia-z/orig-development/tutorial-backup-ta-partition-to-drm-t2234627/page34

http://xdaforums.com/xperia-z/orig-development/tutorial-backup-ta-partition-to-drm-t2234627/page36

http://xdaforums.com/showpost.php?p=41700648&postcount=39
[Sony Xperia P, U, Sola, Go] Patrick4:
I've got Ubuntu running on my PS3 so it should have enough processing power to brake the encryption, It's just a matter of writing a program that's going to use all the CPU cores to achieve the best cracking performance :laugh: The best way would be to learn PowerPC assembly, at the moment I only know c++.
[Sony Xperia P, U, Sola, Go] king960:
You crazyguy i like you :D
[Sony Xperia P, U, Sola, Go] SapoPT:
Don't you think it's going to take too long? The key looks pretty big and random to use bruteforce :X

Anyway good luck, I wish you success!
[Sony Xperia P, U, Sola, Go] AndroidHoneyComb:
PS3 is not so powerful for those tasks..
[Sony Xperia P, U, Sola, Go] Galcactus:
Feel free to try, but that's the whole point of encryptions: to be secure. Brute forcing is not really an option, it'll take far far too long...
[Sony Xperia P, U, Sola, Go] neverdies:
[MENTION=5075211]Patrick4[/MENTION]

I've been reviewing the latest posts in the thread, and realized that you got the bootloader log, trough uart.

Did you have the list of all available commands in bootloader?

I wonder if it's possible to flash files directly to phone through the bootloader
[Sony Xperia P, U, Sola, Go] Patrick4:
It doesn't accept any commands, I've already tried :(
[Sony Xperia P, U, Sola, Go] neverdies:
But you can stop the boot process?

I was thinking that if it fails to stop the boot process the uart rx line on the phone can be bad.

Did you tested the uart in the android using terminal emulator or maybe the Serial Port API Sample app?

I apologize for being doubting you, but we need to consider all possibilities.

I'm sorry for my bad english.
[Sony Xperia P, U, Sola, Go] ocd_amp:
Amazing thread, Please keep it up guys!

Out of context post. Please do with it as you wish but I have something to say here.

I joined XDA out of frustration :( Got an Xperia Ray which the carrier says they cannot unlock. That is a bunch of baloney sandwich. They cannot unlock it until I open and account with them, buy this and that, and then they can do it. People of the world are fed up with this. Everyone has a cell phone. Everyone needs a cell phone. What people of this planet do not need are lock downs and technological prisons. Europe and North America are falling behind because of the closed systems. As if 3 year binding contracts are not enough, they lock down the phones more. Network locks, bootloader locks. Then they stuff phones with Bloatware. They discourage the use of Wifi at home. Stock browser keeps giving errors. This thread gives me hope. I urge anyone with resources and brain power to continue the good fight to free us to practice our basic right of communication using tools we "own". These phones, we paid for them. Now contract is over. Do we not own them?

Xperia Ray st18a (evil carrier Telus Mobility, Canada)

Bootloader Unlock allowed = No. (Baloney Sandwich lie)

ICS (Crashing, Rebooting randomly)

Painful research. Found gingerbread from Central Europe. Now running good. No way to make nandroid.

Without fastboot, cannot do a damn thing but I did Root it and removed the junk.

I don't care about losing DRM. That TA block looks like it has what we need. Thank you guys. Keep pushing!
[Sony Xperia P, U, Sola, Go] Olivier:
Sorry but you shouldn't get your hopes up. I also owned a locked down (network and bootloader) device and I do know it's not easy. The phone just doesn't make fun anymore. But there's unfortunately no way to change this (you may want to check if your device can be unlocked using the testpoint method though). It's sad, but true. I think some of us have learnt something.

Gesendet von meinem Xperia S mit Tapatalk
[Sony Xperia P, U, Sola, Go] ocd_amp:
Yes, lesson learned. Never buy locked down hardware. Sony refuses to unlock it. Carrier refuses to unlock it. And from what I can tell, network unlocking will not unlock the bootloader. I am sure there is someone out there who knows how to help, here is to hoping they make their way into XDA and reveal to us how. :)
[Sony Xperia P, U, Sola, Go] idlestranger:
Root available on 402 update with locked bootloaders... Has any one tried it yet http://xdaforums.com/showthread.php?t=2787168
[Sony Xperia P, U, Sola, Go] Patrick4:
We should try to run the s1 bootloader using qemu, this way we could experiment with the TA partition without risking anything. I've already tried to do it

but it doesn't execute probably because I've emulated the Versatile Express board and the s1 bootloader is compiled for the U8500 chipset. If we could run the bootloader in qemu there's quite a high chance of finding a way to change the bootloader unlocking status from no to yes :good:
[Sony Xperia P, U, Sola, Go] ocd_amp:
Let's wait and see if....

....someone at Sony who knows this process finds their way in here and helps us on our way to unlock these bootloaders. These 2011 Sony Ericsson phones are now out of warranty, contracts are over, I don't see why they should still be locked down to this level. Bootloader Unlock Allowed: NO. If there is a NO there, I am certain it can be turned into a Yes. Let's keep thinking and communicating.
[Sony Xperia P, U, Sola, Go] XperianPro:
You understand this phones are still selling under 2 years warranty
[Sony Xperia P, U, Sola, Go] ocd_amp:
No I was actually unaware of that thanks for letting me know. I was under my own impression so I get your point. My contract is over. My warranty I'm pretty sure is over as well since I've managed to root it and turn my Xperia Ray ST18A into an ST18i with a European (CE) Gingerbread because I could not find a North American gingerbread FTF Format ANYWHERE and I looked up and down for it. I wish someone would post it on here so I can atleast have 3g access because the European version changed my Baseband and my phone thinks its an ST18i and gets no 3G with Canada's Rogers/Fido.

I am still confused about whether to go with WotanServer or FastGSM to unlock my bootloader and Sim. But the point is, this type of thing should not cost us who have paid our contracts and phones. This secretive society needs to be opened up for those who are willing to help others and free ourselves from the tyrannical grip of these Carriers. I understand that Sony and many other manufacturers are willing to bend over backwards for these Carriers. Sim lock is not enough, they have to lock down our devices so we cannot have functionality and GUI that we want. Horrible practices. But you know what I think, someone here is gonna do it. They will do it and it will not cost a thing. The problem is the DRM Keys have to somehow be incorporated into the new loader or have a second Loader on boot. I have tried CWM and the phone never went into fastboot. It's all about control. They want to control us. Like Sheep.
[Sony Xperia P, U, Sola, Go] darQ96:
well, my XU was at the end of warranty period, so, I've flashed it with modified TA...went to operator centar and they send it to service centar...

today, I've received phone call from service center, they offered me xperia L instead of repairing my XU...they said they don't make them anymore or something along those lines...

anyway, I've accepted XL :victory:
[Sony Xperia P, U, Sola, Go] ocd_amp:
My phone not under warranty because it is 2014 now, Phone is from 2011. However, for less than the price of Shipping this from Canada (even within Canada) the price to ship is higher than what it cost me with an Unlock service.

Carrier could not unlock it unless I opened a new account with them. Cost. Then buy a Sim Card. Cost. Then pay them to unlock. Another Cost.

Sony claimed they have no info. According to advice here, DO NOT use ANY Sony method to unlock Bootloader, I have read here that you lose the DRM, related to Mobile Bravia engine which is related to Camera functions and Audio functions.

I emailed both Wotan and FastGSM, Wotan never replied, So they lost. I was able to unlock Bootloader, Unlock SIM, they made it very extremely easy that even a nincumpoop can do it. After doing this to my already Rooted xperia Ray, I reflashed it again with Central European Gingerbread FTF I found on this Forum. Flashed baseband 86 which I also found here. Then Flashed a CWM based Recovery, AND another stock based ROM. I can now go into Fastboot mode, into Recovery, and Backup the Phone. I have not tried to Restore it. If anyone needs to know the links just message me. All the files I got are from this forum.

Xperia Ray st18a (now an "i") running Gin2KitKat ROM smooth and unlocked. Telus, and Sony, I am laughing at you. So you will spend money but in return, they FGSM makes process very easy, provide drivers, and two free Flashes. That's ok by me. However, I urge everyone to not buy Locked phones. The security they offer is an excuse by the Carriers. There is no such thing as security. Everything can be hacked.
[Sony Xperia P, U, Sola, Go] mirhl:
Then scrape that damn provider

Freedom could be worth some additional fees

Anyway did you realize you read information about just xperia Z1?

And only in its first ~5 months?

You only loose your DRM keys with official unlock

They are only required by bravia engine (=oversaturating colours) and by.. What else? Walkman auto tagging feature?

It is worth it
[Sony Xperia P, U, Sola, Go] ocd_amp:
You mean it is NOT worth it :)

Yes about the Xperia Z1, still an Xperia ;) Still a Sony.

I have read that DRM causes problems with the Camera, that is all, not a lot of details. But I did not want to take the risk so I used to Test Point unlock method and was only $11 total. That's not bad at all. In this case, cost me less to get it locked, than to get it brand new unlocked.
[Sony Xperia P, U, Sola, Go] mirhl:
It's not a risk. Camera works with every unlocked phone now. It was just a bug with the new 20MP camera back in those days

If you had the luck to own one of the unofficially unlockable xperias then, better for you
[Sony Xperia P, U, Sola, Go] ocd_amp:
Ok, well that clears it up... Thank you. On to other problems then :)
[Sony Xperia P, U, Sola, Go] SapoPT:
Thinking if I should do the same with my Xperia Go and Xperia U i got. Do you think the same applies in other countries? Because I've seen some Xperia Go/U being sold around here some months ago
[Sony Xperia P, U, Sola, Go] darQ96:
well, you can try ;)

they maybe trying to sell old batches of phones, but main reason why I was offered another model is because Sony stopped making spare parts...well, that's what they said to me...
[Sony Xperia P, U, Sola, Go] Galcactus:
People, this thread claims to have Kexec:

http://xdaforums.com/showthread.php?t=2747215

Anyone want to check the work? It's for the TX...
[Sony Xperia P, U, Sola, Go] Lean946:
I think kexec-hardboot requires the host kernel to be patched, the same as multiboot.

Did anyone try 2ndboot with GB kernels? It worked for the Defy/Milestones where kexec failed.
[Sony Xperia P, U, Sola, Go] deconfrost:
how about Z and Z1?
[Sony Xperia P, U, Sola, Go] mirhl:
It's even harder than on 2012 series. So nothing
[Sony Xperia P, U, Sola, Go] 95A31:
Someone here is able to take UART log with custom kernel ? AOSX is working on 3.4 kernel and we need boot debug log.
[Sony Xperia P, U, Sola, Go] DaniPhii:
I'm using BraveKernel, but I don't have any Serial UART. :(
[Sony Xperia P, U, Sola, Go] zxc79:
I have UART cable nokia ca-42 but my phone cant be unlock :(
[Sony Xperia P, U, Sola, Go] ssamjh:
https://mega.co.nz/#!gI4lyATZ!-MJa85lLbUuGYUpwP3TzbLgplC0jZQWCr6BMUrMbvWE there is my ta file and i pm'ed you my bootloader unlock code
[Sony Xperia P, U, Sola, Go] mirhl:
You are 2 years late. No hopes left here. You are probably stuck there.
[Sony Xperia P, U, Sola, Go] ssamjh:
Well it was worth a try
[Sony Xperia P, U, Sola, Go] vigneshchase:
my phone doesnt go into fastboot,and bootloader unlock allowed says no,is ther any way i can unlock the bootloader?,pls help!

-xperia sp
[Sony Xperia P, U, Sola, Go] Patrick4:
I've managed to compile U-boot from the leaked sources but looking at the source code I don't think it's going to work. It doesn't support fastboot, it uses a different partition layout and it boots a uImage instead of a zImage. There's also LK (Little Kernel) which looks a lot better, the only problem is that it's a part of an android build so it has to be built alongside android, it's impossible to build it using the makefile as it uses libraries that need compiling but don't contain makefiles, only android.mk. So the only way to do it would be building it with android, most likely Ginger bread, I've tried to do it with a Jelly bean source but it gave me lots of errors. I'll try it with a Gb source, I hope it's going to compile. Once we compile it I'm 99% sure it's going to work :victory: .
[Sony Xperia P, U, Sola, Go] Garcia98:
I think that leaked sources were based on Jellybean 4.1.1 ;)
[Sony Xperia P, U, Sola, Go] 95A31:
Congratulations :)
[Sony Xperia P, U, Sola, Go] sagrero:
my TA backup and my ulock bootloader key

If you want to test PM me with following info.

1. Your bootloader Unlock key

2. Your TA backup

Send me this info and I will send you instructions and patches for your phone.

------------------------------------------------------------------------------

How to backup TA:

You need:

1. Flashtool

2. Notepad++

3. Phone?

-------------------------------------------------------------------------------------

i´m from mexico and send u my TA file and my unlock code

Your unlock code: E3210B9956D20277

thanks in advance
[Sony Xperia P, U, Sola, Go] velizarcho123:
Flashtool has Advanced menu grey, no recognition of device......................
[Sony Xperia P, U, Sola, Go] Hedi.Karray:
did this work for anyone yet ?
[Sony Xperia P, U, Sola, Go] fralyx:
Is there such a way that I can set the Bootloader Unlock Allowed to yes by myself?
[Sony Xperia P, U, Sola, Go] nacho4444:
I offer to send my TA

Hello, the TA comes from a Xperia U (ST25i) with locked bootloader, from Spain, company Orange

bootloader unlockable=no

unlock boot loader key from Sony: EBAF5833B85C06E5

Sorry for my english.