yashsingh1/xdaforums huggingface dataset:
[Galaxy S II Q&A, Help & Troubleshooting] jadellah177:
Hello

I'm willing to install Pound ROM (kk 4.4.2) On my Samsung Galaxy S II (intli9100)

I'm running stock JB with Stock kernel.

There are too many tutorials and they don't seem to be connected in steps. some steps are the same and for which i'm afraid that i don't want to do something twice causing a brick to my cell

I Rooted my phone through stock recovery with "CWM-SuperSU-v0.97" and did the update through google's playstore

I'm confused with both terms Clockworkmod and Kernel. i know what they stand for but i'm confused

Things i want to install:

STEP1- CWM 6.0.4.5 (KK Compatible recovery)

(i read tutorials that say it shall be installed after you install cwm6.0.2.9 through ODIN then flash 6.0.4.5 through the 6.0.2.9 you previously installed then do a recovery reboot)

After that step above, they say you shall install a KK rom instantly without rebooting. But i don't want to directly install the Rom, i want Gustavo's kernel!

STEP2-Gustavo's Kernel

STEP3-Pound ROM (it comes built-in with Gapps and pre-rooted as well) i read about it and it seems like the best KK rom so far for the i9100.

So my question is, Do i have to do (step 1) then (Step 2) or just (Step 2) through stock recovery (it allows to install zip from SD Card)? i'm confused

All i want is Gustavo's kernel + Pound ROM.
[Galaxy S II Q&A, Help & Troubleshooting] flasherruts:
okay . so here goes : you have to be running a proper - compatible recovery to flash kitkat roms . see this - and follow as it says ( http://xdaforums.com/galaxy-s2/general/cwm-kit-kat-compatible-t2546597 ) after you are done with that , flash the pound rom , and its compatible respective gapps ... let you phone boot up and set it self up . follow gustavo's guide and flash his kernel . since pound rom already has stweaks , you'd have to flash kernel-settings wipe and then flash the kernel ( all in recovery ) and boot up .after you have booted up , install stweaks from play store and you are good to go .

Let me sum up .. flash the correct recovery and its process ( link provided above ) and then flash the rom and gapps . let the rom boot up and settle itself . flash the kernel ( gustavo's [ be sure to follow his guide .. as you need to flash the kernel settings wipe as the pound rom also has the stwaeks app . ])

all the best and happy flashing
[Galaxy S II Q&A, Help & Troubleshooting] jadellah177:
Thanks!
[Galaxy S II Q&A, Help & Troubleshooting] flasherruts:
you are welcome and i hope i helped you .. happy flashing mate :D
[Galaxy Tab 10.1 Q&A, Help & Troubleshooting] scookied:
I got a problem on my samsung p7500 on wifi, before im using stock rock. Maybe its 4.0.3, then i decided to it and flash it using odin, i flash to CM 10.1 then. After flashing i connect my tab in my wifi i got poor signal and even im too close to modem, then i reflash it to ganbarou, still the same poor wifi sorry for my bad english
[Galaxy Tab 10.1 Q&A, Help & Troubleshooting] hombrez:
Hi scookied,

I'm using this ROM,

http://xdaforums.com/showthread.php?t=2098429

[ROM] [JB 4.3.1] CM10.2/SGT7 for P4WIFI and P4 [20140223]

on the same Tab, had no Problem with WiFi or other things....

Gesendet von meinem GT-P7500 mit Tapatalk
[Galaxy Tab 10.1 Q&A, Help & Troubleshooting] scookied:
hi thanks for your response

I tried to flash it from the boot up it looks fine but after that, everything gets down, theres a prompt says Cm unfortunately stop and othr application is the same, it continues goes unfortunately stop, the only one working is at the set up but when i get back at my homescreen and application it goes crash help please
[Galaxy Tab 10.1 Q&A, Help & Troubleshooting] Prowler665:
You might wanna give TWRP 2.6.3.0 a try to ensure a clean installation of the ROM. I had some issues using CWM too.

You can install TWRP by simply flashing the zip with your current custom recovery.

Using TWRP:

-Boot into recovery

-Factory reset

-Wipe system partition

-Install ROM

-Install gapps

Optionally you can reboot the system before installing gapps to avoid bootloops that might occure.
[iPAQ rw6828, XDA Atom General] ricky0252003:
my atom constantly pop up this message "pocket pc can't find network" I've got a sim card in my phone, and the gprs is permitted to get connected to interenet. What should I do to get rid of this message?
[One (M7) Q&A, Help & Troubleshooting] nijim:
Hello team,

I'm with one v 5, when I trying to uninstall app from the drawer the HTC sense is stopped and restarting.

any ideas?

Thanks in advance
[Android Q&A, Help & Troubleshooting] Jakirovn:
I update gapps from zip file and then my phone can not star.

I only star with recovery mode.

But i neither mount ext sd card to get zip file for reupdate nor mount USB mod.

How can i copy file to phone stogare? (K-Touch Kiss U86)
[Android Q&A, Help & Troubleshooting] mrao:
If you're able to get into recovery, you can push the zip file through ADB. Just make sure you have the right drivers installed and ADB set up on your PC. Then just type in the following command

adb push file.zip /sdcard

Replace the word file with the name of your zip file
[Android Q&A, Help & Troubleshooting] dic1911:
well... I don't know if anyone uses line here... Me and my classmate got the same issue here(xposed frame and the xblast installed)

when using other apps, if somebody sent a message with line to me, LINE will display part of the message immediately on the screen ("Quadrangular" and the name of who sent the message will display too..) but there's strange grey border around it

any help is appreciate...
[Xperia Z1 Accessories] npoljak:
Hey guys.

I'm getting the Z1 in a couple of days, switching from my Alcatel OT995 (a tremendous little best-buy phone).

I'm getting acquainted with all the accessories and I spotted that there are MHL adapters out there that support CEC (meaning I can control the Z1 via a TV remote). I'm trying to avoid the official Sony one because of its price, so I scoured eBay a bit...

The typical usage scenario I am aiming at is connecting the Z1 to the HDTV and then watching movies through XBMC, while controlling playback via a remote (through the CEC protocol).

However, I am trying to confirm some eBay items that I found...

http://www.ebay.com/itm/Micro-USB-M...Phone_PDA_Cables_Adapters&hash=item2c731846ad

^^This one includes a little remote which supposedly allows controlling the Z1, it's $18.

Does anyone have any experience with this?

I also found this cheaper one ($9), but supposedly only for Samsung Galaxy. It looks like the exact same product for me, with the Samsung adapter included: http://www.ebay.com/itm/A-S0-Remote...Phone_PDA_Cables_Adapters&hash=item3f2e3709b3

If anyone has actual first-hand experience with this, it might be of help to a lot of people who wouldn't mind using the Z1 as a media center:)
[Xperia Z1 Accessories] Pokker:
MHL for Galaxy works fine with my Sony Z1

by for allyexpress 10$
[Xperia Z1 Accessories] npoljak:
With CEC remote function?
[Xperia Z1 Accessories] Pokker:
Yes with remote control.

I can not post the link: (

System does not allow.
[Xperia Z1 Accessories] npoljak:
Ah. Is it like the second ebay link from my original post?
[Xperia Z1 Accessories] torgamer:
I buy MHL follow http://www.youtube.com/watch?v=GI6r7SEiaOk but not work for Z1

SO SAD!!!!!
[Xperia Z1 Accessories] stealthj:
I recently ordered a bunch of cables and stuff from amazon for my nexus devices because I was having trouble with my Slimport piece of crap junk... I don't have a Z1... I lost mine but... my girl has a Z1S from t-mobile...

With my Z1, i used a MHL 1.0 adapter that i gave her, she wanted a MHL to HDMI cable ( no adapter, and possibly 2.0) so in my amazon order, i went ahead and got this....

http://www.amazon.com/gp/product/B00CUU6K5M/ref=oh_details_o00_s00_i00?ie=UTF8&psc=1

... it DID NOT WORK... so i returned it... and got this...

http://www.amazon.com/gp/product/B00ESM3TTA/ref=oh_details_o03_s00_i00?ie=UTF8&psc=1

this, also, DID NOT WORK on the Z1s.... so , i kept trying... and i ordered this...

http://www.amazon.com/gp/product/B00I5J6WVY/ref=oh_details_o02_s00_i00?ie=UTF8&psc=1

this one WORKED PERFECT....

Now, I noticed it came with an extra cable to increase the length of the part that goes into the phone (mircroUSB)... I noticed those two other cables that did NOT work, had the longer microUSB connection... so im concluding that there are two diff types of MHL? im not sure..... but the SHORTER microUSB connector is the one that works..

So if anyone needs a MHL to HDMI straight connector, that blue one is the one. unfortunately, it is out of stock right now, but i can CONFIRM, it works perfect with the Z1s

any questions? PM me or post here.
[Samsung Galaxy Core.] GalaxyCorePH:
Can someone know how to change the video player into the latest player with pop-up play feature?
[Samsung Galaxy Core.] pheonixxdark:
use DICE player

hey friend use the Dice player from playstore. its beter and support most of codecs. i use it all the time. easy.link bellow

https://play.google.com/store/apps/details?id=com.inisoft.mediaplayer.a

cheers
[Samsung Galaxy Core.] GalaxyCorePH:
Thanks...
[Windows RT Development and Hacking] Toxickill:
If you have nothing to add to this discussion please do not post. Thanks

Im hoping that we can make a list of requirements for this jailbreak to happen. Please read along with us and if you have any ideas regarding any of the steps please help us out...

Thanks,

Toxickill.
[Windows RT Development and Hacking] LolitaPlus:
In JB 8.0 we change a byte which indicates the sign level from "Microsoft" to "Unsigned".

Now this is protected by PatchGuard: you will get BSOD if you change it.

I think this is probably the only change.
[Windows RT Development and Hacking] Toxickill:
Well can we bypass patchguard? Because people over at easy hook have written a c# patchguard 3 bypass driver maybe we can build off of that?
[Windows RT Development and Hacking] master.peterm:
yeah patchguard has been bypassed I think https://twitter.com/standa_t/status/437972336705159169
[Windows RT Development and Hacking] Toxickill:
Ok so now that it can be done im going to fire up my surface and get working on a new jailbreak tool. If all succeeds then i will update accordingly. Hopefully bypassing patchguard is all that is needed to run old bypass methods. If patch guard stays bypassed then we can make the jailbreak persistent through sessions.
[Windows RT Development and Hacking] GoodDayToDie:
Well, the other problem is that you can't attach a debugger to CSRSS.EXE anymore. So you need a different way to change the relevant value (or a way to bypass the Protected Process restriction).

I think Myriachan already has a way to do that, though; she mentioned that she'd managed to jailbreak but Patchguard was causing the system to crash, so she was working on a way around that.
[Windows RT Development and Hacking] Toxickill:
Would patchguard bsod if we removed the protected process on csrss?

Also, would shell code be able to call ntdll.dll methods? We might be able to code arm shell code and call a method to temporarily revoke its protected process flag.

Edit:

Could we attach the debugger to a none protected process, execute shell code that removes process protection? Only problem is writing shell code is not my thing and especially for arm where its not documented as well.
[Windows RT Development and Hacking] Toxickill:
Also could someone PM me with a cdb.exe thats signed for windows rt 8.1? the one provided with the old jailbreak is only signed for 8.
[Windows RT Development and Hacking] GoodDayToDie:
... You do realize the Protected Process flag is in the kernel, right? How do you plan to remove it when, in order to modify kernel memory, you would need to attach to a protected process? It's not like this is the RO flag on a file or something.

The whole point of Windows protected processes is to avoid letting somebody debug them even if they have full control over the machine (they were originally designed for DRM). In testsigning mode or with a kernel debugger, they usually won't launch at all (CSRSS will - it's critical for all Win32 processes, including stuff like Explorer - but the DRM ones won't). This isn't something Microsoft is going to just allow people to turn off. We could theoretically patch around the restriction with the aforementioned kernel debugger or with a testsigned kernel-mode driver, but if we could put RT into Testsigning or use a KD on it we wouldn't need anything else at all anyhow; either of those are sufficient for an easy jailbreak.

When thinking about breaking into the system, think about what you want to accomplish. Then identify attack vectors to get there. Then think about how those attack vectors might be blocked. Then think about how you might bypass those blocks. Etc... If you can't get at least as far as the fourth step, you won't accomplish much (certainly not against a target as hardened as Windows).
[Windows RT Development and Hacking] Toxickill:
So just to clarify we can not use this undocumented API call that works in Win8.1 x64 on RT:

[DllImport("ntdll.dll", SetLastError = true)]
internal static extern int NtSetInformationProcess(IntPtr hProcess, int processInformationClass, ref int processInformation, int processInformationLength);
int enable = 0;
NativeMethods.NtSetInformationProcess(CSRSS.exe HANDLE, 29, ref enable, sizeof(int));

C# code of course but you could easily code in any language.
[Windows RT Development and Hacking] GoodDayToDie:
I don't see any way you can set the Protected Process flag this way... ProcessBreakOnTermination is not, so far as I know, in any way related (although CSRSS should have that flag set anyhow, and should have had it since before protected processes were even added to NT at all). If you could *set* the ProcessBasicInformation you could in theory overwrite the PEB, but supposedly that one is query-only (according to undocumented.ntinternals.net, which may be wrong). Also, you may find that you can't call OpenProcess with PROCESS_SET_INFORMATION on CSRSS, at least on RT 8.1. Worth trying though, perhaps...
[Windows RT Development and Hacking] Toxickill:
Well apparently when passing an int (29) as the ProcessInformationClass value that indicates a protected process, and it does work for enabling it and disabling it on other processes so far, process acts like csrss once enabled. We have to make sure to set the SeDebugPrivilege flag on the current process in order to make OpenProcess open a process with the flag PROCESS_ALL_ACCESS which is required for NtSetInformationProcess.

Looking into this, might be worth a shot.
[Windows RT Development and Hacking] GoodDayToDie:
Interesting. MSDN for NtQueryInformationProcess (http://msdn.microsoft.com/en-us/library/windows/desktop/ms684280(v=vs.85).aspx) says that value is ProcessBreakOnTermination and indicates a "critical" process, which I interpreted to mean one that cannot be safely exited (there are a few of these, and have been since XP or before, while protected processes were introduced in Vista and "lightweight protected processes" (the kind that CSRSS is, apparently) were introduced in 8.1. Still, worth a shot.

Administrator should have SeDebugPrivilege, and *probably* have it enabled by default. I'm still not sure you will be able to open the handle to CSRSS - it's explicitly not supposed to be possible to mess with it even if you *are* Administrator (or otherwise have debug privs) - but it's worth trying.

EDIT: There's a policy in Local Security Policy Editor (secpol.msc, yes it's present on RT at least 8.0, if not on 8.1 it's in the registry anyhow), under Local Policies -> User Rights Assignment. You can control what privileges (in the NT Se*Privilege sense) processes owned by given users have. For example, "Debug programs" (This user right determines which users can attach a debugger to any process or to the kernel. Developers who are debugging their own applications do not need to be assigned this user right. Developers who are debugging new system components will need this user right to be able to do so. This user right provides complete access to sensitive and critical operating system components.). You can add "ALL APPLICATION PACKAGES" to the assignees. In theory, this would mean that app packages now have SeDebug. They *might* not be able to use it anyhow (because of the lowbox restrictions) but if they are, that removes the need to use a debugger to inject code into a desktop process running as Admin; just write a native app that calls the relevant APIs.
[Windows RT Development and Hacking] Toxickill:
Great find, i'm away from my dev box until later today but i will try this out. I'm not use to finding the exploit, how ever i'm perfectly capable of writing code for one once its found. But ill dig deeper maybe powershell could still be a possibility.

Edit: Found a spreadsheet that documents all of the security registry keys for 8.1! I found Debug Programs flag for User Rights Assignment in the document for 8.1 and it says minimum requirement is Windows XP! So its most likely on 8.1, my dev box and surface are both on 8.1 so I can verify later I also have the registry key.

Also found load and unload device drivers flag, not sure if thats of any use.

Second Edit: "User Rights security settings are not registry keys" there is no registry key to edit so we would have to either use secpol.msc or figure out where these values are stored.
[Windows RT Development and Hacking] Toxickill:
Is there any way for us to figure out how csrss is being flagged as a protected process? Is that done in the kernel, with its createprocess params or is it done by the process itself?

Also has anyone checked if they modified Powershell's exe to prevent unsigned C# code from executing? And if so we also should check if we can use an 8.0 copy on 8.1 worth a shot as well but i'm almost positive it will not execute because of the "Windows cannot verify the digital signature of this application."

It would help if we could at least get cdb or WinDbg working on 8.1 even if we can't attach it to csrss.

I PMd netham45 about how he got cdb working on 8.1 but he has not replied yet. I've checked the WDK 8.1 release and everything is there even for arm except cdb. :rolleyes:

Edit:

Also i'm working with Spazzarama over at EasyHook to see how he wrote his Patchguard disabler. If I can get unsigned code running even if it means we need to use a dev id just to start the jailbreak like the original version of nethams tool it would be worth it if it means we can disable patchguard. I have a few ideas on how to go about this, possibly creating a blank app and compile it. Then disassemble the exe with ildasm and replace the entry point with code that includes desktop code, then stitch it back up with ilasm (command line args allow arm code creation and toggling app containers, as long as the tools that create an app package don't test command line args it should work ok and be valid because it wont load any desktop dll's if they are not called i've tested this on normal environments. Then we might be able to get desktop code running that will allow us to disable patchguard, modify the value and then remove the app.

Lots of me rambling on about that, hopefully we get somewhere.
[Windows RT Development and Hacking] LolitaPlus:
Have you tried the latest WinDBG that came with SDK 8.1? I'm using RT 8.0 so I cannot verify it, however it should work on RT 8.1 since it came with the 8.1 SDK

C\Program Files (x86)\Windows Kits\8.1\Debuggers\Redist

cdb is part of WinDBG
[Windows RT Development and Hacking] GoodDayToDie:
It's a flag passed to CreateProcess (presumably therefore also in NtCreateProcess), CREATE_PROTECTED_PROCESS. Only usable on binaries with a special Microsoft signature. It blocks most access to the process, causing an OpenProcess specifying those permissions to fail. http://msdn.microsoft.com/en-us/library/windows/desktop/ms684880(v=vs.85).aspx

EDIT: Creating a sideloadable app with desktop code is easy; we managed that over a year ago. The fancy/complex way of doing involves scanning the system libraries that are loaded into memory (using an allowed API, such as GetSystemTime() as a starting point) for the entry point of LoadLibrary, then calling that using a function pointer. The simple and straightforward way is to either modify the header files (which #ifdef out the relevant prototypes when compiling for WinRT) or just copy-paste those prototypes and definitions into our own headers, and then link against the relevant libraries (it's easy to extract .LIB files from DLLs). The latter approach has more initial time investment, and is probably easier to detect, but is "cleaner" (the source code looks exactly the same as would normally be used, aside from removing some checks in the headers) and slightly more performant on startup.
[Windows RT Development and Hacking] GoodDayToDie:
[MENTION=5515725]LolitaPlus[/MENTION]: The public debug tool downloads don't include ARM debugger binaries, so they won't run on RT...

They can debug ARM programs, but that's not sufficient for this purpose. Microsoft (and OEMs) have debugging tools that run on the devices directly, and they have leaked in the past; that's what's needed.
[Windows RT Development and Hacking] Toxickill:
Thats what i figured, for csrss, with the sideloadable app I was just wondering if it would be easier to do il modifications. But we are trying to get unsigned code anyway. Im home now and ill look into secpol.msc on my 8.1 tablet. It IS on my dev pc 8.1.

Edit:

Ok secpol.msc is available on my surface, and Debug programs is set to Administrators, what should I try modifying it to?
[Windows RT Development and Hacking] LolitaPlus:
I'm not talking about VS remote tools. I'm talking about WinDBG (version 6.3.xxxx, not the 6.2.xxxx) and it is on my Surface RT now.

Please correct me if you are not talking about this(WinDBG). If indeed that is what you want, give this link a try (I just uploaded it):

https://mega.co.nz/#!Rthz1aCC!chur33IsRLASnysWQOgNY9LJaeyv8oIsPaHDnwbuWCE
[Sprint Samsung Galaxy S 4 Q&A, Help & Troubleshoot] leenhia:
Anyone got hotspot mod for MK5? Will MK2 Hotspot hack work for MK5?
[Sprint Samsung Galaxy S 4 Q&A, Help & Troubleshoot] cruise350:
No there is not, and no, if you install the MK2 hotspot mod you will brick your phone and have to odin the MK5 tar to your phone. Until someone gives a L720T to a developer that can make the mod (fgr), or if someone that has the L720T has the know how to do it. You may be able to PM fgr and see if he can walk you through the mod. Don't know how much code needs to be changed, but he stated in an earlier post that he can not make an odexed version for the L720T unless he has phone in hand.
[Moto G Q&A, Help & Troubleshooting] sniper.12:
Hey there,

just flashed official CM11, but the touchscreen is kinda bugged. You cant scroll on this Rom correctly...

Any1 else expected that?
[Moto G Q&A, Help & Troubleshooting] Atomix86:
Yup, when it's charging it does it all the time. But off charger it's fine.
[Desire Q&A, Help & Troubleshooting] frehman:
3 down vote favorite

I have an HTC Desire (Bravo, A8181, GSM) sold in Sweden. I updated it to Android 2.3 using the official release, which is as of 2011-12-29 available at HTCdev with instructions from here.

Now I want to root it. I did some googling and it seems like it isn't possible to root a Desire that has been updated to the official Android 2.3. I tried following this guide, but it failed at step 6 in How to: Root. When I attempted to run unrevoked, the progress text running root... was followed by the error message Error: failed to get root. Is your firmware too new?.

I also tried searching for a way to downgrade it to Android 2.2, with no luc
[Desire Q&A, Help & Troubleshooting] Chromium:
What hboot version do you have?