yashsingh1/xdaforums huggingface dataset:
[Streak 5 Android Development] Razak RK:
~•~•~•~•~

[MENTION=2010230]hunderteins[/MENTION],

Thank you for your reply.

Here is the checksum I get when I run in Terminal Emulator:-

$ export PATH=/data/local/bin:$PATH

$sha1sum /system/framework/core.jar

1291fcce44f4be036e2209ccb46d3313b65bdfdc /system/framework/core.jar

$md5sum /system/framework/core.jar

19bd48b8eac1bb123a823d039415a344 /system/framework/core.jar

$

So, they are NOT the same.

I don't have knowledge of how to decompile (smali) of core.jar, applying the patch-file, compile (smali) it again and replace classes.dex in my core.jar. Nope... I'm stuck to go further.

As for Firefox mobile on my Streak PCM7, I have check the menu and settings, here is NO option as per you mention.

Reason I'm interested to know is to set my Streak at best.

BTW, I'm currently installing and testing all the Streak Custom ROMs in XDA, trying to find a ROM that would probably best for my daily use = Performance+Save Power+Other Features. I probably end up having to learn to mix some ROMs into my own personal use...if I got the time to do it though... :P

Dell Streak | InnerSD 8GB | ExternalSD 32GB | Custom ROM
[Streak 5 Android Development] hunderteins:
basically you need http://code.google.com/p/smali/downloads/list

a good tutorial how the framework is decompiled/updated can be found at

http://xdaforums.com/showthread.php?t=1084850

for how to apply a patch to a source-file consult the manpage of patch

back to topic. I updated core.jar http://ge.tt/api/1/files/7F3UKbv/0/blob?download

Now DHE-RSA-AES256-SHA is included in the list of useable ciphers.

This way in stockbrowser/nakedbrowser the same encrpytion is used as in opera/firefox

look into attached image.

Patch is also included for thoose who find it useful.

Have a nice weekend,

hunderteins
[Streak 5 Android Development] hunderteins:
didn't post in that thread, did I?
[Streak 5 Android Development] sinan33:
Sorry dude; just eagerness :)
[Streak 5 Android Development] Strephon Alkhalikoi:
Confirmed working on Traveller DSC. ROM updates will be coming shortly.

Flashable zip for core.jar patch suitable for DSC and Traveller DSC: MediaFire | Mega
[Streak 5 Android Development] hunderteins:
Elliptic curve Diffie–Hellman Key exchange

Hello,

the libssl 1.0.0a on the streak supports elliptic curve Diffie–Hellman key exchange.

With the right server, this speeds up https compared to normal Diffie–Hellman key exchange.

So I had to change the core.jar again to support these cyphers.

With this update I removed the know weak ciphers (export, 56bit etc)

I attached a openssl command for the commandline, to check libssl.so for features. It might

be useful elsewhere.

Have fun,

hunderteins
[Streak 5 Android Development] hunderteins:
TLSv1.1 and TLSv1.2 protocol

Hello,

SSLv3/TLSv1.0 are known to be problematic with stream ciphers (the cbc ones) and

as mentioned before, I had to compiled a more recent version of libssl to support

the modern TLS variants.

Attached are the openssl binary and the libssl.so and libcrypto.so of openssl 1.0.1e.

They work on my streak and I get a clean https TLSv1.2 connection to the testserver.

Next step is, to modify core.jar again to get the modern GCM streaming methods

and SHA384 hashes.

Have a nice evening,

hunderteins
[Streak 5 Android Development] hunderteins:
GCM streaming, sha384 hashes and server name indication (SNI)

Hello,

as mentioned before, I modified core.jar to match the ciphers from libssl 1.01e. So we get modern ciphers like ECDHE-RSA-AES256-GCM-SHA384 which are considered strong cryptographie. That's even more recent than Android 4.4 KitKat.

But Android Gingerbread has another serious flaw: SNI (server name indication) is not supported with Apache Http Client. Google fixed this *tada* in Honeycomb.

I looked into that problem, but we have to change framework.jar for that, too.

I attached the patches against the backsmalied core.jar and framework.jar. Together with openssl 1.0.1e I get a very beautiful https connection to the testservers (attached screenshots): ECDHE-RSA-AES256-GCM-SHA384 with TLS V1.2 and SNI - in stock android 2.3 browser.

Please confirm my findings. I'll try to make an streakmod compatible update.zip to spread that little security to the masses. If you point me to your core.jar/framework.jar I will consider to integrate your rom into that update.zip.

Have fun,

hunderteins
[Streak 5 Android Development] Strephon Alkhalikoi:
So if I understand how you put the update.zip together, the update patches the files rather than simply copying a new version of the file over the existing one?

BTW, the PDroid version is working perfectly.
[Streak 5 Android Development] hunderteins:
Thank you for your feedback.

Update.zip deploys openssl 1.0.1e into /system/lib and /system/bin. It replaces classes.dex inside framework.jar and core.jar when the sha1_check is correct. That is mostly like replacing the files itself, because classes.dex is the main ingredient.

An elegant way would be to baksmali/smali on the device itself, but that didn't work because of memory constraint.

have fun,

hunderteins
[Streak 5 Android Development] hunderteins:
openssl 1.0.1g for android 2.3

Hello,

you may have heard of the heartbleed bug [1] before. The 1.0.1e version of openssl I did build for the Dell Streak last autumn is affected. So I made an updated package and attached it. Just put the files into your /system/bin and /system/lib and reboot.

Good luck,

hunderteins

[1] http://heartbleed.com/
[Streak 5 Android Development] Strephon Alkhalikoi:
I'll make a flashable zip for this shortly as well as release an update to Traveller DSC.
[Streak 5 Android Development] hunderteins:
I stand corrected. The 1.0.1e version was build with -DOPENSSL_NO_HEARTBEATS. So it was not affected at all. Tested it with the stock browser and naked browser against pacemaker [1].

Anyway, 1.0.1g is not affected, too.

warning: Stock browser on Android 4.1.1 is affected.

[1] https://github.com/Lekensteyn/pacemaker
[Streak 5 Android Development] Strephon Alkhalikoi:
Regardless, the upgrade to 1.01g should improve performance slightly, shouldn't it?
[Streak 5 Android Development] hunderteins:
I don't think so. As of today in 1.0.1-versions of openssl there are only bugfixes. New, improved features are in 1.0.2. [1]

The changelog between 1.0.1e and 1.0.1g shows detailed bugfixes:

Changes between 1.0.1f and 1.0.1g [7 Apr 2014]

*) A missing bounds check in the handling of the TLS heartbeat extension
can be used to reveal up to 64k of memory to a connected client or
server.

Thanks for Neel Mehta of Google Security for discovering this bug and to
Adam Langley <agl@chromium.org> and Bodo Moeller <bmoeller@acm.org> for
preparing the fix (CVE-2014-0160)
[Adam Langley, Bodo Moeller]

*) Fix for the attack described in the paper "Recovering OpenSSL
ECDSA Nonces Using the FLUSH+RELOAD Cache Side-channel Attack"
by Yuval Yarom and Naomi Benger. Details can be obtained from:
http://eprint.iacr.org/2014/140

Thanks to Yuval Yarom and Naomi Benger for discovering this
flaw and to Yuval Yarom for supplying a fix (CVE-2014-0076)
[Yuval Yarom and Naomi Benger]

*) TLS pad extension: draft-agl-tls-padding-03

Workaround for the "TLS hang bug" (see FAQ and PR#2771): if the
TLS client Hello record length value would otherwise be > 255 and
less that 512 pad with a dummy extension containing zeroes so it
is at least 512 bytes long.

[Adam Langley, Steve Henson]

Changes between 1.0.1e and 1.0.1f [6 Jan 2014]

*) Fix for TLS record tampering bug. A carefully crafted invalid
handshake could crash OpenSSL with a NULL pointer exception.
Thanks to Anton Johansson for reporting this issues.
(CVE-2013-4353)

*) Keep original DTLS digest and encryption contexts in retransmission
structures so we can use the previous session parameters if they need
to be resent. (CVE-2013-6450)
[Steve Henson]

*) Add option SSL_OP_SAFARI_ECDHE_ECDSA_BUG (part of SSL_OP_ALL) which
avoids preferring ECDHE-ECDSA ciphers when the client appears to be
Safari on OS X. Safari on OS X 10.8..10.8.3 advertises support for
several ECDHE-ECDSA ciphers, but fails to negotiate them. The bug
is fixed in OS X 10.8.4, but Apple have ruled out both hot fixing
10.8..10.8.3 and forcing users to upgrade to 10.8.4 or newer.
[Rob Stradling, Adam Langley]

It is sad, that on regular android devices, these bugfixes never see the light. Basically you can take these known bugs and rig most of the android 4.x devices.

reg. hunderteins

[1] http://www.openssl.org/news/changelog.html
[Streak 5 Android Development] Strephon Alkhalikoi:
Regardless, it's not a bad thing to have the latest version.
[Streak 5 Android Development] hunderteins:
chacha20poly1305 update

Hello,

google is advertising chrome for android with new algorithms for symmetric encryption [1]. They also included these into their webservers and desktop chrome for windows since 33. I took the liberty and ported their openssl patch to the dsc, pdroid and pcm7.

Please do not use the openssl 1.0.1g from above, cause they changed some constant values there (SSL_MODE_HANDSHAKE_CUTTHROUGH) that will not fit to our framework.

I did also change the preference of algorithms offered to the server. Now there are only two fallback algorithms for servers that don't use perfect forward secrecy (PFS)

Caution: The attached update.zip-files will not check your rom version/framework. Please choose solely the appropriate file for your rom.

have fun, hunderteins

[1] http://googleonlinesecurity.blogspot.de/2014/04/speeding-up-and-strengthening-https.html
[Streak 5 Android Development] Strephon Alkhalikoi:
[MENTION=2010230]hunderteins[/MENTION]: Do you have updated .patch files?
[Streak 5 Android Development] hunderteins:
patch for core.jar is attached.

patch against openssl is basically https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a8646510b with an armv7 optimized chacha_vec_arm.s. I'll attach details, if you are interested.

Have fun,

hunderteins
[Streak 5 Android Development] Strephon Alkhalikoi:
More information would be great. I'm trying to optimize CyanogenMod 7 for another phone (HTC Aria). What is interesting is that CyanogenMod doesn't appear to have an openssl file in the bin directory.
[Streak 5 Android Development] hunderteins:
That is o.k. I included that binary only for development purposes. This way I can check how /system/lib/libssl.so and /system/lib/libcrypto.so are working on the commandline.

You may skip this binary but may find it useful when upgrading things.

Attached is android/external/openssl from my build. Basically that is a https://android.googlesource.com/platform/external/openssl/+/android-2.3.7_r1

with http://www.openssl.org/source/openssl-1.0.1e.tar.gz and called import_openssl.sh.

Patches (chacah20poly1305, aead*) are from https://chromium.googlesource.com/chromium/deps/openssl/+/master/openssl/patches

Good luck,

hunderteins
[Streak 5 Android Development] hunderteins:
openssl-1.0.1i

cause of https://www.openssl.org/news/secadv_20140806.txt an updated ssl package for our DSC et. al.

I added the sslscan binary for my own convenience

Have fun,

hunderteins
[Android Q&A, Help & Troubleshooting] Gargantuantua:
I got the Otterbox Defender when I got my phone. I got it at the sprint store but I returned it through their website because the outer silicone cover Warped badly and no longer fit. It's doing it again now a days the silicone case is almost falling off.

I hear they've gotten stricter in returns. Is it likely they will replace mine again or am I going to have to buy a new case?
[One (M7) Q&A, Help & Troubleshooting] mustapharma:
Hi all

my device is s-on hboot v 1.54

unlocked costom recovery and costom rom

if I back to stock and relocked my bootloader

then i will receive OTA official update

now if I get all that will my firmware updated or still the same for 4.2.2

Thanks in advanced
[One (M7) Q&A, Help & Troubleshooting] mustapharma:
So no one replay
[One (M7) Q&A, Help & Troubleshooting] dagrim1:
Impatient much? Please wait 24hrs before kicking your own thread...

*Snip* Misread the question... No idea about firmware stuff.
[One (M7) Q&A, Help & Troubleshooting] mustapharma:
Read my question agian I am just asking dude
[One (M7) Q&A, Help & Troubleshooting] nkk71:
Well first things first, what firmware you on now, and what's you CID? Post a "fastboot getval all" (remove IMEI and s/n before posting).

The reason I'm asking, that as far as I know (could be wrong), I believe the latest available official OTA is for 4.2.2, firmware 2.24.401.8, with the exception of Taiwan and US Developer Edition.
[One (M7) Q&A, Help & Troubleshooting] mustapharma:
I get it now so I can if there is 4.3 OTA update over the world

Thanks dude :)
[HTC Rezound] iraqlover:
hi guys,

how can i back 2 stock rom from global stock rom???

thnx

:confused:
[HTC Rezound] acejavelin:
I am not really understanding your question... Are you asking how to downgrade? What versions?

BTW, the stock global ROM is a stock ROM, that is kinda the confusion here...
[HTC Rezound] iraqlover:
oh, i m sorry..i meant from stock global 4.03.605.2 to stock ics 3.14.605.12 cos it says my hboot is older n i cant flash!!!
[HTC Rezound] acejavelin:
That is correct, being S-On prevents that, you would need to S-OFF to downgrade.

Why back to 3.14.605.12? Is there a problem with the global leak you are currently using? The 4.3.605.2 ROM is stock, just not officially supported by Verizon.
[HTC Rezound] iraqlover:
i need 2 s-off my phone :crying:
[HTC Rezound] acejavelin:
Well... It isn't really that hard, the idea of how you do it and the stories are scarier than the reality of it.

But I will go back to the why, is there a specific reason your current ROM isn't sufficient?
[HTC Rezound] iraqlover:
i just wanna try updatin kernels..can i make s-off from my stock global rom ???
[HTC Rezound] acejavelin:
Yes
[HTC Rezound] iraqlover:
i will try linux veresion cos i already tried window version n i failed makin it s-off..somethin wrong with windows version!!!
[HTC Rezound] acejavelin:
There is nothing "wrong" with the Windows version, I have used it several times. The first time I tried it it took a good 10 times to get the timing down though, and the last two times I used it on phones with 4.3.605.x stock ROMs I have to run it a few times to get everything to shake out, it would error out, the phone would get stuck in HBoot, or something, and I would have to reboot and start over. The Windows version can be flaky, go to the Ubuntu version and try again... Make sure you watch some of the Youtube videos on going S-OFF on the the Rezound, they can help if you are doing it for the first time, the wire trick is the critical part, the timing has to be just right.
[HTC Rezound] iraqlover:
as u said my phone was stuck in hboot n it doesnt reboot in boot loader while the windows software says "do wire tick"..i downloaded wire tick repeated mp3 file just 2 do it right n it seems nothin wrong with wire trick but in steps or routine..i tried 2 watch n download some videos on youtube..its barely u find such a good enough video that leads u step by step...
[HTC Rezound] iraqlover:
i think if i had "htc rezound hasoon's s-off toolkit", i would make it easily but i googled about it n i had no hope 2 find it..i requested that tool here but still nobody attached it or gave me a viable mirror link!!!
[HTC Rezound] acejavelin:
It isn't available anymore for legal reasons if I recall correctly... Did you try this one?

http://xdaforums.com/showthread.php?t=2437371

[TOOL] [10.17.13] WinDroid HTC Rezound Toolkit v2.1 | Unlock | S-OFF | Root | Flash |

Note that I haven't used this tool... So I can't vouch for its use but it is the only one out there I know of.
[HTC Rezound] iraqlover:
i already tried that tool..s-off not workin functionally..it links u 2 the website only..thnx :rolleyes:
[HTC Rezound] REV3NT3CH:
thats because it links you to where and how to do it...if the windows s-off didnt work for that is your ONLY option to s-off....thats how most everyone else has to do it..also using the windows version make sure you read the instructions thoroughly....they will help...also make sure you have the proper type of wire...some wires just wont work
[Galaxy Note 3 Q&A, Help & Troubleshooting] Mark_B:
Hi there,

is it possible to mod whatsapp plus (without root) that is use the new HD Smileys coming with the Note 3? It would be very nice :highfive:
[Verizon Samsung Galaxy S 4] Bait-Fish:
Thanks Surge1223! I'm saying that a lot these days :cool: :beer:

--OctOS powered VZW GS4 Dev Edition
[Verizon Samsung Galaxy S 4] amoeller:
Are any of these modems dependent on the system/rom for any features?
[Verizon Samsung Galaxy S 4] Surge1223:
Yeah especially when it comes to safestrap. If you're using safestrap and you're on a ME7 rom, then you will only have wifi work on the ME7 modem, 4g will still work but wifi wont. Ive had some success on using the VRUDMI1 modem with ME7 roms in safestrap, but not reliably. The only reason I havent released the deodexed stock root VRUDMI1 rom is because I was only able to to get wifi and 4g both working with a ME7 bootloader once and havent been able to repeat. Loki'd people are at an advantage here when it comes to flashing modems.
[Verizon Samsung Galaxy S 4] lazer9:
Hrmm, Interesting. I'm still on stock ME7 with safestrap and Slot 1 Hyperdrive Rom, I flashed the VRUDMI1 modem to that slot and haven't noticed any issues with WIFI nor 4G. :p
[Verizon Samsung Galaxy S 4] zipkicker:
I've had awful connections with the md1 modern running HD and SS, thanks for the links, reverting back to ME7 now
[Verizon Samsung Galaxy S 4] amoeller:
I'm currently on MDK and installed the MI1 modem with no problems. 4G and WiFi work.
[Verizon Samsung Galaxy S 4] Eric214:
Yeah, I'm on MDK as well and have flashed all but the Dev GS4 modem and all are working with no flaws.
[Verizon Samsung Galaxy S 4] Easton999GS:
Im on safestrap but i wanted the old radios because they work better for me. I had no idea you could flash radios with safestrap.

this is how i feel right now..
[Verizon Samsung Galaxy S 4] Surge1223:
I'm running DIM1 with the ME7 boot loader...thats probably the issue
[Verizon Samsung Galaxy S 4] Lw00d:
any one see any improvement with the ML1 modems?

im correctly on ME7 modems CM10.2
[Verizon Samsung Galaxy S 4] equake:
How is the latest modem working on the Dev Ed?
[Verizon Samsung Galaxy S 4] Bait-Fish:
I tried MI1 twice and ME7 now. I'm confused. I thought it would change the baseband in 'About phone' but it hasn't budged from the dev stock OYUAMDK :confused: So, not sure if it's actually "taking" on my phone. I'm installing the zips in TWRP, apparently successful.

--OctOS powered VZW GS4 Dev Edition
[Verizon Samsung Galaxy S 4] Surge1223:
Its not you, its my links stupid box.com automatically changed it so that the file doesnt completely download (it downloads 99% but doesnt download that last one percent). Im changing the links now

Edit: Links have now been changed to a better file host.
[Verizon Samsung Galaxy S 4] emarietta:
Odin to ml1 flashed the ml1 modem in ss and lost WiFi. Flashed back to me7 modem and still no WiFi
[Verizon Samsung Galaxy S 4] an21281:
So im still confused, im on ME7 Firmware/update Rooted running SS. Will flashing modems work in my situation, or only if Im on stock MDK firmware?
[Verizon Samsung Galaxy S 4] Bait-Fish:
Cool. I'll re-d/l. I thought the MD5s on my end matched yours so I didn't expect any trouble.

I flashed someone else's ME7 from many months ago and that did change my baseband. I'll try yours again.

Update: New host, file MD5 matched the previous. It didn't change the baseband. I attempted the MI1. My baseband remained ME7. First reboot hung on initial splash and had to do a battery pull. But, I've had to do that occasionally anyway since going a non - stock ROM. Not sure why.

--OctOS powered VZW GS4 Dev Edition
[Verizon Samsung Galaxy S 4] Surge1223:
Try wiping cache/dalvik then fix permissions. Its prob because ss doesn't have stock modules
[Verizon Samsung Galaxy S 4] Surge1223:
Maybe I messed up the updater script in that one.. im looking into it.
[Verizon Samsung Galaxy S 4] Morrolan:
Flashed and everything seems fine. MDK with ME7 radio. BoneStock
[Verizon Samsung Galaxy S 4] kkeller87:
Can anyone tell me what nonhlos is?
[Verizon Samsung Galaxy S 4] wingdo:
Just a note that ML7 is actually MI7 (mi7).

---------- Post added at 05:28 PM ---------- Previous post was at 05:27 PM ----------

It's needed fir some older CM and AOSP ROMs. Do not use these on stock based ROMs.
[Verizon Samsung Galaxy S 4] kkeller87:
Thank you
[Verizon Samsung Galaxy S 4] Slowbalt:
Can I just flash the MJ7 radio zip file in SS? Im on me7 rooted. I flashed the MI7 radio in safestrap but will this be the same process?
[Verizon Samsung Galaxy S 4] lazer9:
Yes, and Yes.
[Verizon Samsung Galaxy S 4] what be up:
so if we flash the one with the hlos and have issues, we can just flash one without it and it'll fix any problems?
[Verizon Samsung Galaxy S 4] Surge1223:
No you flash the nonhlos and modem package for whatever bootloader you're currently on. Then you can flash whatever modem zip you want but remember to flash only the modem only zips
[Verizon Samsung Galaxy S 4] what be up:
ohh ok that makes sense lol yea I was that guy...thanks man
[Verizon Samsung Galaxy S 4] Alxoom33:
Not sure I unerstand you. Eg im on a TW based rom HD 10.1 on an MDK GS4. Do I flash the non-hlos and modem only MDK modems sequentially, or with separate flashes and wipes? Ps 4G working but my phone is unable to make a call. I was playing with MI7 and the Sammmie Service Mode app looking for band 4.:what:
[Verizon Samsung Galaxy S 4] dannyboy42670:
Flashed the NON-HSLO mj7 to my hyperdrived s4 w/ safetrap in recovery and it left me in a boot loop! What could have went wrong?
[Verizon Samsung Galaxy S 4] Surge1223:
I would flash the MDK nonhlos and modem package first, clear cache/dalvik then reboot and make sure phone/wifi/mobile data works. Now you know that everything works. Next, if you still want a different modem, flash the modem only zip, and test again if your phone/wifi/mobile data works. If all is good, then you are set.
[Verizon Samsung Galaxy S 4] Surge1223:
Why would you flash that? What bootloader are you on? ME7 or MI1? Well which ever one you are on then download the non-hlos and modem package for that build and flash it. Then flash the kernel modules for your build.
[Verizon Samsung Galaxy S 4] Alxoom33:
Thank you surge, it worked, I have my phone back! :thumbup::D
[Verizon Samsung Galaxy S 4] icebear8:
i am on MDK and Loki with CWM, do i flash the MJ7 modem within CWM or do i have to odin it?
[Verizon Samsung Galaxy S 4] wtherrell:
If it is a zip file, use your CWM Recovery to flash.
[Verizon Samsung Galaxy S 4] jova33:
So.... AOKP has problems with the MJ7 modem. Can I flash the MJ7 modem, and then MDK- nonhlos, and get it working?

Also, will this work with Hyperdrive?

Sent from your mom's smartphone
[Verizon Samsung Galaxy S 4] Surge1223:
No because I didnt include the nonhlos' separate from its corresponding modem. Flash MDK's modem and nonhlos and if everything works fine then flash the MJ7 modem. All of this is assuming your on the MDK bootloader.
[Verizon Samsung Galaxy S 4] Budwise:
Could you possibly add a release date next to each of them so we know which is newest/oldest?

I have been afk from here for a while and am not sure which one to flash :/
[Verizon Samsung Galaxy S 4] Bait-Fish:
Better yet, searching is the answer.

Samsung

Verizon

--OctOS Powered VZW GS4 Dev Edition
[Verizon Samsung Galaxy S 4] bsimpson1:
Just wanted to say how glad I am that you decided to share this.
[Verizon Samsung Galaxy S 4] ch.ch1:
I'm on ME7, going to SafeStarp for GPE rom. Which modems should I flash?
[Verizon Samsung Galaxy S 4] Alxoom33:
On ME7 I believe you can only flash TW roms in SS. I would stick to your ME7 modem.:cool:
[Verizon Samsung Galaxy S 4] hakisac78:
me7

Im on me7 and flashed mj7 modem. Works good here in central IL!