yashsingh1/xdaforums huggingface dataset:
[Google Chromecast] TVRemoteExploit:
Sooner or later it will be hard to get a rootable Chromecast. The community is limited by the number of people able to root their own devices. A remote exploit is desirable to expand the community. Please brainstorm and post progress in exploring the targets.

Targets:

Web interface

Chromecast executes commands to start netflix etc with user specified arguments. Arguments are sent through dial interface. From app.conf:

{ "app_name": "Netflix",
"external": true,
"command_line": "/bin/logwrapper /netflix/bin/netflix_init --data-dir /data/netflix/data -I /data/netflix/AACS -D QWS_DISPLAY=directfb -D LD_LIBRARY_PATH=/system/lib:/netflix/qt/lib -D NF_PLAYREADY_DIR=/data/netflix/playready -D KEYSTORE=/data/netflix/AACS -D KEYBOARD_PORT=7000 -D ENABLE_SECURITY_PATH=1 -D DISABLE_SECURITY_PATH_VIDEO=0 -D DISABLE_SECURITY_PATH_AUDIO=1 --dpi-friendlyname ${FRIENDLY_NAME} -Q source_type=12&dial=${URL_ENCODED_POST_DATA}",
"allow_empty_post_data": true,
"dial_info": "<port>9080</port><capabilities>websocket</capabilities>"
},

FFMPEG vulnerabilities

Intercepting updates (I know, the signatures would likely prevent this.)

Cable based attacks similar to current root methods

Soldering based attacks

Post your ideas and progress.

My chromecast is not rooted, so I can't get logs from netflix being run with different URL_ENCODED_POST_DATA, but we might be able to fork the command.
[Google Chromecast] scarygood536:
what if somehow we were able to attack it like jailbreakme used to. Looking at the developer options in chrome you could write a program for your phone that has the cast button when you click it, it'll tell chrome cast to go to the apps domain where it automatically roots for you. I'm no developer, so i don't even know if that kind of hack would even be possible. I did download the cast app for windows and it has a button for factory reset. Would it be possible to hack that chromecast program and change the factory reset to use a hacked pulled firmware?
[Google Chromecast] tchebb:
This would be extremely difficult to pull off, as you would need to both escape Chrome's sandbox and find a privilege escalation vulnerability in the Linux kernel or a setuid binary. Both Chrome and Linux are extremely mature and secure pieces of software, so vulnerabilities are few and far between and get patched quickly when they are found.
[Google Chromecast] TVRemoteExploit:
I tried tacking commands onto the tail of the netflix commands like this:

curl ****192.168.1.126:8008/apps/Netflix -X POST -d "intent=play&titleid=***%3A%2F%2Fapi.netflix.com%2Fcatalog%2Ftitles%2Fmovies%2F70138593;reboot"

, however I can't see the log file without root.
[Google Chromecast] scarygood536:
so is our best bet to find a vulnerability within the hardware level we could utilize and wouldn't have the chance of being patched?
[Google Chromecast] ddggttff3:
In all honesty, the best method of attack would be to figure out the JTAG port. with that, you could then simply just flash back on the rootable bootloader on any device, and go from there. I doubt any software methods will be found, and even if one is found, it will be patched by google within a month. The JTAG port however is at a hardware level, and unless it actually does signature checks (like the USB method does on updated devices), it would allow a person full control of the flash chip.

EDIT: To clarify, if the UART port is hardware based (like normal JTAG ports on wireless routers and such), then there should be no security checks. If, for whatever reason, it is software based though (so like fastboot, or Samsungs ODIN mode), then there is a chance it checks image files.
[Google Chromecast] tchebb:
Unfortunately (although I don't believe anyone has confirmed this on the Chromecast), all known GTV devices with this SoC ship with their JTAG port disabled. It may be possible to re-enable it in software, but (of course) that requires running your own kernel. The only hardware hack I know of that is sure to work is manually soldering a NAND flasher up to the memory chip and rewriting the partitions that way, which is expensive, error-prone, and extremely tricky to do right.
[Google Chromecast] ddggttff3:
The more you know.

Well, while looking through the chromecast's "fts" partition in a hex editor, I found the following variable show up in multiple places.

device_configured=true

makes me wonder what happens if this is flipped to false. I will look through the bootloader source more to see if it is used at a software level.

EDIT: Doesn't look like it does anything for us, seems to just enable the crash counter.
[Google Chromecast] jamcar:
Maybe I'm missing something, possibly am, but couldn't we dual boot firmwares? Have the normal factory firmware on the eMMC chip, then, install a rooted image to a USB stick. Next solder a different wire to each side of pin 26, finally solder a switch in between. This should force the device to load off the USB rather than eMMC. On paper it works. On the physical device? That could be a bit different. If you do try this, I'll do my best to help you and point you in the right direction.

The switch is to choose between the two firmwares, if however, you only want to boot from the USB, you could, possibly, just have a permanent jump of pin 26. That should force booting from the EMMC to fail every time forcing it to boot from USB.

NOTICE: none of these suggested ideas have been used and or tested. They work on paper only! The real device may, and possibly is, different! Attempt at your own risk.

OP, XDA, nor I am responsible for anything that happens to your device. If anything does happen it's completely on you! This is a dangerous hardware mod, I don't recommend if you don't know how to solder. Also, the points for pin 26 are very very small, smaller than some solder iron's tips. All of mine are way too big, and I have bought small tips to use on other mobile devices. If you mess this up there is none to very little chance of going back.

SECOND NOTICE: constantly jumping the 26th pin of the CPU could cause permanent hardware problems. If such problem does happen, it is not known at this time. Once again, this is a dangerous hardware mod that should not be attempted by those who aren't good with soldering.

The good news: if you do attempt this and it works, we could have a hardware way to be rooted. More good news is that if you mess up and can't fix it, then it's only $35 to get a new one.

Aaron Swartz, Rest in Pixels.
[Google Chromecast] ddggttff3:
Just to let you know, a permanent jump to pin 26 will cause the device to not boot, at all. It causes a read interrupt to the EMMC, so if jumped permanently the device will not see the flash, so it wouldn't even load the bootloader. Jumping the pin should ONLY be used if the standard button hold boot process does not work.
[Google Chromecast] tchebb:
This wouldn't work with any post-12072 bootloader, since the USB image's signature is still checked. The signature verification would simply fail and the device would fail to boot, same as if.you tried to boot from USB with a button press.
[One (M7) Q&A, Help & Troubleshooting] Vercynogetorix:
Hi,

guys ive got a serious problem, weve created an android app, and two managers who ordered it, both using HTC One (two different but stock phones, one i think andro 4.3 another 4.2.2, cant say exact since none of them have a faintest clue about it)

problem is in 5 devices which we have for testing, everything is fine...

on 2 devices they have some things doesnt work,

when i asked them to provide logs, they balded out, since they dont know how,

since they are in diff country i cant help them,

so question is, is there an app which can send logs automatically to an email? one which they just open after crash was found and then click send?
[One (M7) Q&A, Help & Troubleshooting] Vercynogetorix:
bump?
[Android Apps and Games] psycho123:
Hi guys, i've a request, if possible.

i'd like to have the contacts of pure jellybean (like in cynogenmod), or the contact fo miui in my distaster rom (it's a sammy based rom). Someone can help me? Please.. Thanks very much and sorry for my bad english
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] #Mike.G#:
Hey guys,

I'm new here and had a couple of questions regarding installing Xposed Framework on my I-337 on MF3. I rooted my S4 previous to being informed the bootloader could not be unlocked.

Since I can't flash any custom roms, Xposed sounds like a good idea but I'm still concerned about installing anything without being able to back anything up.

Is it safe to install the Xposed framework on an S4 running MF3?

Thanks.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] jd1639:
First, this should have been posted in q&a. But you might try here too http://xdaforums.com/showthread.php?p=45557002
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] #Mike.G#:
Oh...

Ok, thanks.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] dwanhala:
I've been researching this as well, one forum that I've found helpful is http://xdaforums.com/showthread.php?t=2383484 I have the Xposed framework downloaded, but like to read up on everything before I do anything that could lead to an issue. Obviously, most things that you do to your device involve a certain degree of risk, but if you fully prepare yourself, you minimize that risk. From what I've seen, it looks fairly safe, but I'm still reading. I'd imagine that you've seen this forum as well or you wouldn't be asking about this.....http://xdaforums.com/showthread.php?t=1574401 Anyway, I'll most likely be installing soon, if I do so before you, I'll let you know how it goes for me anyway.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] #Mike.G#:
Ok, yeah... If you could keep me updated that would be awesome. I'm itching to just try it but I think I'm gonna hold off.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] xbbdc:
I'd like to install xposed as well. Can you guys update this thread when you find out if we can or not?

Much appreciated.

Thanks.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] atari800:
I installed it without reading any info (I was in noob mode)

It installed just fine as I used it to apply Master Key Dual Fix, then later

Android Tuner Module

Greenify

Wanam Xposed

I am new so maybe you want a season veteran to comment.... but it works just fine

Quick and painless

*To cover my butt - I do not give this FACT that it works for me without any issue as a reason to blame me if it does not work for you
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] dharmil:
I installed it and everything worked fine for me. I had a problem once, when I installed xthemes a module one of the themes i installed using the module was not compatable and my phone then didn't boot up and just got stuck on the att logo. This point I was able to go into stock recovery and wipe everything and do a factory reset and phone worked just fine again. I still had root but all my data was gone.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] dwanhala:
OK, Just installed it and Wanam Xposed with no issues.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] #Mike.G#:
Good stuff.

Can you share the link to the installer apk?

Thanks again!
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] dwanhala:
You can find the Xposed framework installer in the links that I posted earlier. You can download Wanam Xposed from the Play store. Just follow the instructions and everything should go well.....did for me anyway.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] atari800:
Greenify is a good one too

It allows you to hibernate applications (not to be confused with FREEZING) which frees memory and states "increases battery duration".

It does appear to do this. I have been using Greenify for 3 days and I am getting 18 hrs of charge on this

*Normal phone calls - a few heavy games from time to time

battery life is incredible

Have fun fellas
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] blackguy101:
Any framework out there allow you to add lockscreen widgets while having a pattern lock? or able to access the camera from the lockscreen with a pattern? If this is possible ill root i a heart beat :)
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] #Mike.G#:
Great, thanks again.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] DeadlySin9:
There is one, in fact. If you have the newest version of xposed, you can get it from the download tab in the app (Galaxy S4 Multiple Widgets). I've been running xposed with Wanam, Maximize Lockscreen Widgets, and App Settings, and it works just fine as long as you don't install tweaks made for AOSP or that say they aren't compatible.
[Sony Ericsson Xperia Neo, Pro] mosi.sh:
hi my friends .

i want cyber shot mod for cm 10.1 (SJBX 4.5 rom )

can any one help me ?

is this a mode for cm 10 or only a theme ?

------------------------------------

(moProject 42 ) have this mode .
[Sony Ericsson Xperia Neo, Pro] deccan451:
stock camera itself has problems you want cyber shot on jb roms .. :P
[Sony Ericsson Xperia Neo, Pro] Narrry84:
Not Available. But devs are working on it.
[Sony Ericsson Xperia Neo, Pro] deccan451:
I wonder y r u bumping this old thread >:)
[Sony Ericsson Xperia Neo, Pro] Attitude.SSJ:
And I wonder who are the devs working on it...:p
[Sony Ericsson Xperia Neo, Pro] spirto82:
camera

Hello there!

I am a newbie here.

Can somebody explain me whether the camera function is associated to the kernel or the installed ROM?

I have an Xperia Neo V and I was experiencing problems with my front camera. It didn't recognize it after the ICS upgrade.

Now that I have my phone rooted, I have a problem with my back camera. It gives me red photos that are reversed.

Anybody can guide me through this forum, I would be pleased!

Thnx in advance!
[Sony Ericsson Xperia Neo, Pro] btiu:
Maybe you should try doing a factory reset or maybe even just a settings reset... I also don't know if kernel or ROM has anything to do with the camera. All I know is that proper drivers are needed for the processor to control the camera. so if the app (or maybe the rom) is made to work with qualcomm processors, it probably wouldn't work best with a different processor brand :P
[General Questions and Answers] galaxyras:
hey guys my android is recognizing the sim but it has no service,i tried the sim on another phone and it gets recognized with service no problems.I tried inserting another sim on my phone buy still the same problem persists,recognizes the sim(airtel) but has no signal pls help me out here guys really desperate here have no signal for like 10 hours.

thnx
[General Questions and Answers] immortalneo:
Compare the IMEI displayed in your phone with the IMEI given behind your battery. See if they are the same (do not post your IMEI here). :)
[General Questions and Answers] galaxyras:
Thnx for replying.And yea they are the same
[General Questions and Answers] NafeesTyagi:
u hv 2 reflash ur rom
[General Questions and Answers] galaxyras:
The problem still exists :(
[General Questions and Answers] immortalneo:
Which phone and what ROM?

"To err is human, to forgive is divine."

Sent from my SGS II
[General Questions and Answers] galaxyras:
Xolo a700 and stock rom I.c.s
[General Questions and Answers] immortalneo:
When did the issue start? What caused it?

Have you contacted your network provider to see if they have blocked your IMEI?
[General Questions and Answers] galaxyras:
Since yesterday,I think it happened whn the phone was dropped on the floor and no I haven't contacted them as I see no reason why they could have blocked my IMEI.
[General Questions and Answers] immortalneo:
Since it started after a fall, you should suspect some hardware issue mate. Take it to a Service Centre nearby and see. :)

"To err is human, to forgive is divine."

Sent from my SGS II
[General Questions and Answers] galaxyras:
Yea when I went outside and was near a tower I had 3 bars of signal.I think the problem is the antennae still I'll call up xolo care just to be sure or should I just give it to the local mobile stores here?
[General Questions and Answers] immortalneo:
Call Xolo Care first. :)
[General Questions and Answers] galaxyras:
Do u guys have any idea how much it would cost to repair the phone's antennae i.e the signal receiver
[Optimus L3, L5, L7 General] mircea89fzr:
Mircea Duman: Hello

Mircea Duman: I noticed there is an update for the LG E460 V10F firmware

Mircea Duman: could you tell me to what version and what are the changes that the update will bring?

Mobile Phone Support: ok

Mircea Duman: are you still online?

Mobile Phone Support: yes i am here

Mobile Phone Support: is this update available to you at this time through LG Mobile support tool?

Mircea Duman: yes

Mircea Duman: through the mobile support tool

Mobile Phone Support: just to clarify, what update is the software mean to be? The name of it :)

Mircea Duman: i doesn't say

Mircea Duman: i think i already have V10F

Mircea Duman: and it says just "Software upgrade is available"

Mircea Duman: Yes, I checked. I already have V10F and the mobile support tool says update available

Mobile Phone Support: it would be designed to adjust kinks and minor glitches.

Mircea Duman: ok, so nothing special. thank you

Mircea Duman: i hoped for android 4.3

Mobile Phone Support: I do not have the full details here as they come from a thrid party

Mobile Phone Support: i don't think that it will be that

Mircea Duman: what third party, isn't it lg?

Mobile Phone Support: the software is designed for LG Phones but it does not come from LG themselves

Mircea Duman: oh, but from whom does it come?

Mircea Duman: just for my information

Mobile Phone Support: Google

Mobile Phone Support: :)

Mircea Duman: oh, ok :) thank you. have a nice day!

Mobile Phone Support: you too :)

I didn't know google designs/develops android directly for lg phones.
[Optimus L3, L5, L7 General] azvlean:
Strange thing. Google develops for its Nexus but I've never heard that they develop for LG.
[Optimus L3, L5, L7 General] spunkylm:
The software is made by Google, ported by a 3rd party on behalf of LG and then distributed on LG phones is the most likely explanation
[Optimus L3, L5, L7 General] mircea89fzr:
no, more likely: software made by google, ported by lg, customized and distributed sometimes by carrier.
[JASJAR, XDA Exec, MDA Pro General] captaink:
Hi,

I'm looking to buy a Universal but I've a question on the USB port.

Has anyone tried connecting a USB hard drive directly to the Universal? I have a Archive Gmini 220 and I was wondering if the Universal would see it as an external drive and if this is the case can it run media on the drive such as MP3 or AVI files? Also has anyone tried connecting a card reader to read CF or Memory sticks etc.

Any rumours of a Universal with internal hard drive?

Captaink
[JASJAR, XDA Exec, MDA Pro General] hassan:
Olnly thing i've heard is it does support but peoples who already tried says nevr made it work.
[JASJAR, XDA Exec, MDA Pro General] RobvT:
That's because just as with a normal PC it needs drivers to work with your device.

It's just a matter of time........ :lol:
[JASJAR, XDA Exec, MDA Pro General] cr2:
Agreed. This picture

http://www.tekguru.co.uk/reviews/images/xda_exec/Exec_012.jpg

clearly shows the mini-AB receptacle

http://www.hardware-bastelkiste.de/usb.html
[JASJAR, XDA Exec, MDA Pro General] Pyrofer:
Having a USB socket doesnt mean its a USB host!!!

It has to have that mini usb socket so that you can sync and charge, as they dropped the old style 21pin connector now. Its just like the Magician with usb only now.

There have been rumours it supports USB host mode, but ive not heard any confirmation or proof.
[JASJAR, XDA Exec, MDA Pro General] Rudegar:
in this review of the device they say it does host

http://www.tekguru.co.uk/phpBB2/viewtopic.php?t=7031
[JASJAR, XDA Exec, MDA Pro General] cr2:
The PXA270 has a builtin USB host and

can operate as an OTG device. The guys

at HTC must be really sick if they have

not wired it.

I don't get only one thing: what USB 2.0

means here ? OTG ?
[JASJAR, XDA Exec, MDA Pro General] Rudegar:
in which case it seems that HP and DELL are sick aswell

http://xdaforums.com/viewtopic.php?t=26742&highlight=usb

8)
[Sony Ericsson Xperia Mini, Mini Pro, Xperia Pro, A] JovieBrett:
These customizable OPPO lockrings are only resized by me

for our Xperia Mini devices with LegacyXperia's CM10.1 and originally made by [MENTION=5266287]enricocid[/MENTION] for Galaxy Nexus.

Visit his thread and show your gratitude to him :fingers-crossed:​

OPPO Lockring

http://goo.gl/YQQfRN

​

OPPO Highlight Lockring​

http://goo.gl/3yRKHn​

OPPO Nexus w/ XDA dots Lockring​

http://goo.gl/oktMpN​

OPPO Nexus Lockring​

http://goo.gl/bBgQkg

OPPO Holo Stock Lockring

http://goo.gl/NHCZSl​

OPPO Holo Lockring​

http://goo.gl/XOZrGG​

Warning:

I am not responsible for those who are in trouble because of flashing this mod, you are the one who made these changes, please make a backup first before applying these changes.

Another thing, this is for Xperia Mini (Smultron) only and not for any other devices!

Instructions:

-Put the .zip file in the root of your SD card

-Power off the phone

-Boot in CWM recovery

-Install zip from sdcard

-Choose the downloaded .zip file

-Reboot

Undo.zip

http://goo.gl/mle2Pf

Credits:

[MENTION=5266287]enricocid[/MENTION] for these beautiful lockrings he made :good:

-Oppo

​
[AT&T LG Optimus G] theregkid:
After a fresh install of windows I went and plugged my phone in expecting it to work. Well it brought up the auto play menu, but there was no options..

I decides to try downloading the lg drivers myself, this didn't work either.

Any ideas?

I am currently using carbon ROM
[Samsung Galaxy Mega] carhigh:
I'm having issues with the stock video player (another topic) and am looking for something to replace it. I would like something that has a screen capture button like the stock one. Other than that the rest could just be as basic as the stock player. Paid app is OK too. Don't need anything with a million features.
[Samsung Galaxy Mega] koniakki:
I have been using MX Player for years now.

Thats what I use so thats my recommendation.

Dont know if it has a screen capture function. If its there I havent seen it.
[Samsung Galaxy Mega] carhigh:
yeah just tried that, mobo and some other one. Didnt like any of them because so many options. MX kept flashing and reloading when browsing the list of video. even stopped playing a video and threw me back to gallery.

I just want something simple like the stock player.
[Samsung Galaxy Mega] gx3k:
Have you tried Archos video player?
[Samsung Galaxy Mega] carhigh:
Im good now with the stock player. Light flow was screwing it up. Need something to replace light flow now
[Samsung Galaxy Mega] kipue:
Been using VLC media player with good results. Together with BS player no video will give trouble. BS player also can get subtitles files if necessary.
[Samsung Galaxy Mega] carhigh:
Light flow does same thing on wife's note 3. Weird.
[One (M7) Q&A, Help & Troubleshooting] altezza1:
Hello there!!!.....Really need some help form you HTC experts. Here is my problem, my htc is currently stuck at the screen where all i am seeing is the htc logo with four exclamation marks in the 4 corners. 1. whenever i tried to run the RUU (run as administrator) i would get a error 152, and this is with my bootloader locked. now i read through a few forums and this one guy told me to change back to S on, now that i have done so when ever i try to run the ruu i get error 132. can anyone please assist?
[One (M7) Q&A, Help & Troubleshooting] offwiththeface:
Do you have a custom recovery on your device? And a backup? If so hold your phone up to a light and hold power and volume down it should boot into fast boot from there boot into recovery and restore your back up
[One (M7) Q&A, Help & Troubleshooting] altezza1:
no custom rom installed.....no backup either.
[One (M7) Q&A, Help & Troubleshooting] CoryTallman:
Are you still on hboot 1.44?

If yes, s-off again.

If no, going s-on was probably a terrible mistake.
[One (M7) Q&A, Help & Troubleshooting] altezza1:
yes i am still on hboot 1.44. how do i s off with the device stuck in ruu?