yashsingh1/xdaforums huggingface dataset:
[Moto X General] twinkyz1979:
Dan and Jcase are good people who have in my opinion have been taken advantage of in certain ways and have had a sour taste put in their mouths due to some ungrateful people in the android community.

Neither of them needed to do what they have done they did it because they enjoy doing it. I for one want to see them keep doing it.

I mean look what happened with the last stuff Jcase released he wasn't going to release it till that conference thing he was going to do but then people started complaining and pressuring him until he finally released it before he wanted to. (referring to the last Motorola exploit)

They both have lives outside this community and we should respect that.
[Moto X General] peestandingup:
Well, has any developer in the community stated they are working on a tool to take advantage of the exploit yet? Or will it have to come straight from the source?
[Moto X General] samwathegreat:
We don't know yet.

All we know at this point is that Dan did release enough details for someone skilled enough to make an exploit -per jcase.

Everything else is speculation. AFAIK, no one has stepped up to the plate yet. Hopefully Dan himself will release a tool. Whomever does, though - the credit and the bounty belongs to Dan as far as I'm concerned and he can do with it however he pleases.

Everyone is welcome to their own opinions...
[Moto X General] peestandingup:
Yeah, I feel the same way. I mean, I guess a little credit would go to the developer who's smart enough (and way smarter than me) to make the tool, but ultimately it falls on Dan for everything he's done to make it even happen in the first place.

I have a feeling this'll be one of those things where the tool will just pop up somewhere without any kind of pre-announcement at all.
[Moto X General] aviwdoowks:
Not that It would make a diff to me, but is there a link to a PDF? I only saw a photo.
[Moto X General] :
https://drive.google.com/folder/d/0B-08cf6G1LDJLWF5WU90ZXIzems/edit
[Moto X General] aviwdoowks:
OK. Now I can see all the glorious details.
[Moto X General] Verttex:
Most of our reactions.
[Moto X General] doitinthedirt:
thats funny!!
[Moto X General] GandalfTehGray:
Ha ha yep, didn't even bother to look.
[Moto X General] samwathegreat:
I'm kinda partial to this one:
[Moto X General] HardBoiledGregg:
What this picture shows is that he probably has some intention of releasing is. He calls it a "High value target"
[Moto X General] natezire71:
That's incorrect. Jcase wasn't going to release it because he had discovered the vulnerability, and didn't want to share until August. However, another security-something detailed the exploit before he did--so he went ahead and released his version.

This is straight from the OP for the Pie for MotoX thread:
[Moto X General] rommanager:
Just got the code, it's 3I5AUMP6KXI6T6X54I26

hope it helps:D
[Moto X General] touchpro247:
Reflections on Trusting TrustZone - Black Hat.pdf

http://imgur.com/TXKDpOI
[Moto X General] aviwdoowks:
A DUP of the previous link.

OK. I will handle the TIMA thingy, :p !

Edit: TIMA is Samsung only. :). Done!
[Moto X General] samwathegreat:
Well, just FYI: I wanted to have a look at Dan's last BL exploit (for the Razr M) - "Motopocalypse" so I disassembled the unlock file with hex-rays. Want to talk about complicated? WOW! He makes it sound so simple in his vulnerability report, but it looks like actually executing such a vulnerability is far, far beyond complicated (it is to me, anyways). Of course, this is coming from someone with very little experience, but just wow! A tool exploiting this vulnerability is probably something that will only come from someone like Dan himself or maybe [MENTION=2376614]jcase[/MENTION] .

Without those guys help, I really don't see getting your bootloaders unlocked. Jcase mentioned on reddit that Dan disclosed enough info to exploit this vulnerability, but I'm not sure we have any members in our community that might be skilled enough to develop a tool other than those guys (maybe geohot?). This stuff is so far over my head it's unreal....just amazing that this vulnerability was even discovered or that those guys are capable of doing the kind of work they do. That's some serious skill...
[Moto X General] HardBoiledGregg:
Remember, geohot sold out.
[Moto X General] samwathegreat:
I'm not exactly sure where you are going with that statement. Very recently, geohot gave us TowelRoot. TowelRoot was never intended to work on Moto devices because of write-protection. It was intended mostly for Samsung devices. It DID have a convenient side-effect of giving us temp-root as well.

If you are referring to the fact that the latest version of TR does not work on the X, I don't think that geohot "sold out" at all. I think he optimized v3 for the devices it was intended for, and that happened to have a side-effect of no longer working on the X. I seriously doubt it was intentional.

Since he is still making contributions to our community, I'm really not sure what you are implying there. There could certainly be something I'm not aware of, but as far as his employment or the whole iOS 7 thing...a Dev has the right to do what they please with their own work.

As always, everyone is welcome to their own opinions...
[Moto X General] HardBoiledGregg:
Like you said, TowelRoot gave us a temp-root, right? Not anymore. He changed the download to a botched version that wouldn't even give us temp-root. Someone gave his old version of TR, and that works. Oh well!
[Moto X General] twinkyz1979:
and hear we go again another person saying something without facts to prove such and they wonder why Dan and Jcase have a foul taste in their mouths. now someone is trying to do the same to another developer. how about instead of saying such things without proof you just don't say them or better yet just close out your obviously new account and speak from your real account if you have one.
[Moto X General] HardBoiledGregg:
Hey man, I'll record evidence, if you want.
[Moto X General] samwathegreat:
​

So imagine you use a paperclip to eject your CD-ROM drive... And then the paperclip manufacturers release a new and improved paperclip....

​

Well the new paperclip doesn't work for ejecting your CD-ROM drive...

So by the above logic, the paperclip manufacturers "Sold Out"......

Oh but wait! It's a ---paperclip---- not a CD-ROM drive eject tool. It was never intended to be used as an ejection tool. It just had a convenient side effect of doing so. And low and behold...the NEW paperclips actually do a better job of their intended purpose: ---keeping papers attached together----

C'mon guys... geohot deserves better than that....

TowelRoot was for SAMSUNG DEVICES. It says so right on the website. We got lucky that the old version gave us temp root. That was never its intended purpose. The NEW version is actually better at doing what it was actually made for -- rooting -Samsung- devices.

I don't understand the DEV-bashing. :eek: Can't we just be grateful that he gave us anything at all?

There is/was no secret conspiracy to "botch" the apk so us lowly Moto X users couldn't use it...
[Moto X General] nexus15:
just filled out the form. middle man in china unlocked mine march 27th.

F*ck AT&T (and VZW, but mine is of the AT&T flavor). I got the phone for free. I completely own it and take full responsibility if I brick it yet I don't get a box to sign or check acknowledging this. Even more so with now with the device installment payment plans they can not be allowed to tell us what we can do with a device we fully own.

Very happy to help. Love Motorola to death as their most recent phones have been stellar. Only thing I wish is one OEM would start to stand up against the carriers and tell them that they are going unlocked boot loaders and if they don't want to carry that tough.
[Moto X General] toroloco73:
so, are there news about unlocking BT witout Motorola tools?
[Moto X General] bigv5150:
Lol classic just friggin classic.

sent from "my kungfu is stronger then yours" XT1080
[Moto X General] jeffgt14:
This is just fantastic.
[Moto X General] KidJoe:
Not yet.

I'm sure once a tool based on this exploit is released, we'll see a BIG thread on it.

Until then, just sit back relax and hope some developer builds the tool.
[Moto X General] chrisp6825:
Or take it as an initiative to start learning your self! ;)

tapa'd on my moto x
[Moto X General] HardBoiledGregg:
If said paperclip company said "THIS IS THE SAME PAPERCLIP" they'd be flat out lying, correct? Get hot, on the Towel root website, released v3 that worked for me. I uninsured ot
[Moto X General] EcHoFiiVe:
Dude, really? Just stop, you're making yourself look bad and you're making everyone else look bad. Geohot didn't do crap to us okay? And even if he did, you're complaining about something he gave, that's right, GAVE you something FOR THEE FREE. Go take a shower.
[Moto X General] HardBoiledGregg:


---------- Post added at 04:15 PM ---------- Previous post was at 04:09 PM ----------

Point taken, but he works for Google now, so that could raise a flag.
[Moto X General] toroloco73:
in the meantime i hope that motorola does not make a patch
[Moto X General] EcHoFiiVe:
Thanks for understanding man. We're a community, not a fighting zone. Anyways, it doesn't matter that much that he's working for Google, as we are talking about Dan and he bootloader exploit and once we are able to unlock, rooting is a breeze.

That my friend is why you don't take any OTAs until he releases a method of unlocking. personally am still on 4.4 lol. Can't live without root and write-protection.
[Moto X General] toroloco73:
Unfortunately, I have updated to 4.4.4
[Moto X General] KidJoe:
But you have an XT1052, right? (at least according to your signature)

Have you checked if you can get your bootloader unlock code direct from Moto? See -> https://motorola-global-portal.cust...e/bootloader/unlock-your-device-a/action/auth If you can, just unlock the bootloader, and flash TWRP Recovery to root.
[Moto X General] toroloco73:
But i don't want to lose warranty

Inviato dal mio Motorola Moto X XT 1052
[Moto X General] super65man:
Even if the exploit worked on 4.4.4 it will still void your warranty.
[Moto X General] samwathegreat:
super65man is 100% correct, toroloco73.

You see, bootloader lock status is controlled by blowing a "qfuse", which just like a regular fuse can never be "un-blown". Regardless of HOW you unlock (China Middleman, Official Moto Website, future exploit tool), your warranty is null and void anyways.

(Before someone corrects me - the exception is the DEV editions. They retain warranty even after being unlocked)

Moto can easily tell that you have unlocked. Even if you subsequently re-lock, you can NEVER go back to the virgin locked state (status 0).

Why not just get the unlock code from Moto if you are waiting on Dan's tool? It makes no difference HOW you unlock...
[Moto X General] murso74:
I unlocked my phone through the Chinese guy, broke my screen a month later, got a free replacement from moto, sent them back the unlocked phone and they never said a word
[Moto X General] dB Zac:
The unjustified entitlement that comes for some people blows my mind. It is no one's fault people buy bootloader locked phones, but there own. My self included. If we are lucky enough to be gifted a unlock method, that's what it is. It's a gift. Whether or not that gift is shared doesn't make anyone a bad person. Please ease up.
[Moto X General] samwathegreat:
Yes, I have seen multiple reports from people who had Moto honor the warranty even though they unlocked. This is great, but the warranty does say it is void if unlocked. Hopefully they will honor it anyways, but I don't want to advise anyone that they definitely will, because this might change. The could start denying warranty claims for unlocked people since their official stance is that it does void warranty.

Thanks for sharing your experience.
[Moto X General] kdog350:
Also on Motorola's website it says once you ask for the code then your warranty is void. This might mean that they can't tell if your phone is unlocked.
[Moto X General] samwathegreat:
ANYONE can tell that you have unlocked....not just Moto. Did you read my post?

All you have to do is look at the status in the Bootloader. If it isn't "status 0", you have unlocked. Period. You can't un-blow a qfuse....

They are just being nice honoring the warranty on unlocked phones. Again, this could change in the future. Their official stance is unlock=warranty void (except for DEV editions).
[Moto X General] kdog350:
What I'm saying is that they may only look at if you requested the unlock code, not if you actually unlock it.
[Moto X General] murso74:
Someone opens the box and tosses it in a pile... anyway, the point is, if you're going to unlock your boot loader it's going to be unlocked doesn't matter if you do it the "right"way or not
[Moto X General] KidJoe:
Its likely because they can't see/check the X's bootloader screen through the telephone, to see if you've actually used the code or not, when you call in.

Their customer service person/people, who does the initial trouble shooting when you call in, may use record of the web site request to say "I see you've requested your bootloader unlock code. I'm sorry since you don't have a Dev Edition, your warranty is void. The repair will cost you $xxx, do you still want to send it in?"

The alternative would be.. receiving a phone, checking the bootloader screen, seeing its unlocked/voided, call the customer back, potential for "phone tag" and voice mails, tell them, give them an approximate price, asking if they still want to proceed, and waiting on an answer from the customer. Not to mention the delay to the customer (I could have got a new phone already had I known..). The customer being upset at having to pay to send it in when it wasn't covered, etc.

Exactly. :good:
[Moto X General] eliguy620:
Back to the unlock codes

Since none of us are sure if a tool will be released, shouldn't we pick back up on the unlock codes idea?
[Moto X General] samwathegreat:
Feel free to continue submitting codes! Just a little update for everyone:

I cleaned all of the bogus data that was entered to the form. Some users went so far as to put their XDA username in as curse words in addition to their -obviously fake- codes....real grown-up, guys.

Anyways, we currently have 111 valid submissions. A few are of the same "build data", and have completely unique codes, so assuming this info is correct Moto definitely did not use the same code for all units of a specific build date.

Also of interest is that SOME codes consist of nothing but letters, while most have both numbers and letters. We still have zero correlations and no indication whatsoever that a duplicate code was used to unlock more than one device. It isn't looking hopeful.

I'm still holding out hope that a tool will be released in the not-so-distant future. :good:
[Moto X General] chrisp6825:
Have you recognized the type of hash the codes use? I assume they could have used a custom type, but if it happens to match any other known types, that'd be a step forward.

http://psychocoderhc.github.io/Hash-Algorithm-Identifier/

I'm toying with a code someone posted, though I'm not 100% sure it's a legit code, same format and in its entirety.

tapa'd on my moto x
[Moto X General] Teksu:
I submitted 2 unlock codes from VZW DE's just now. One was my original purchased in January, the second was its replacement sent by moto ~ 4 weeks ago. Both codes from moto and worked.

I don't need it, but i have my fingers crossed for a boot loader unlock to be released. Moto should just let anyone unlock their boot loaders, maybe make non-dev phones jump through a couple more hoops, maybe a short test kinda like a Dell warranty tech cert. Just enough to deter the lazy people but let the determined ones proceed.
[Moto X General] samwathegreat:
Everything we know about the tokens is listed in the OP under "Token Validation Logic". I'm not the least bit interested in trying to break moto's encryption, or reverse their key personally. Let me know if you are interested in trying and I might be willing to share some of the data with you...

First, thanks for your submissions. Second, it's not Moto that enforces the locking of the bootloaders. It is done at the Carrier's request....specifically Verizon, AT&T, and Republic Wireless. Basically they tell Moto: 'Lock the bootloaders on our branded phones, or we will not buy them or allow them to be used on our networks'. Gotta put the blame where it belongs: on the carrier's, not Moto. Of course, the solution is to buy the developer editions (except for RW, which has no Dev edtion available). You see, the carrier's subsidize their branded phones and that is one of the reasons they are able to force Moto to not release unlock tokens for their devices.
[Moto X General] 640k:
this thread is getting WAY off topic. lots of unnecessary ranting.
[Moto X General] csytracy:
Just an idea:

How about building a tool or script that try to unlock the bootloader with every code in the dictionary and post the tool here and let everybody try that. If it works on some of us here, we can collect the information of these people and see whether there will be any findings.
[Moto X General] sivarticus85:
Bad idea.

I've already touched on this before in this thread. There could be a function within the bootloader that could cause a qfuse to blow when attempting too many invalid unlock codes which can permanently lock the bootloader forever. It's not confirmed this will happen, but would you be willing to risk never being able to unlock if a tested and proven unlock exploit is released?
[Moto X General] samwathegreat:
This was suggested very early in the thread: Post # 38 http://xdaforums.com/showpost.php?p=54490530&postcount=38

We aren't going to do that for a couple reasons. First, for the reasons listed in Post 38 -- the last thing I want is angry XDAers blaming me because their BL has been permanently locked and even the possible upcoming exploit cannot unlock it.

Additionally, code-submitters were assured the privacy of their codes from the very beginning. While the data might be shared among interested developers or the like, I will not betray their trust by making these codes public. There is no way to create a tool or script containing all of the codes without doing so.

To be completely honest with you, as I have said -multiple times- in the original post, and several more times throughout this thread, it isn't very likely that this will go anywhere. We have zero correlations so far, absolutely no evidence that the middleman has given more than one person the same code (the two individuals who apparently received duplicate codes advised me that it turned out that the middleman SWAPPED their codes....the non-working code for one member ended up unlocking the other member's phone).

Given all this information, my advice is that everyone interested in unlocking and all DEVs that are involved in this project should focus their efforts to building a tool based on Dan's vulnerability disclosure (and give him proper CREDIT, of course).

You can decompile the previous exploit "unlock" file using Hex-Rays. I've already done this. As I stated before, it's over my head but that doesn't mean someone with a decent intellect and the willingness to learn couldn't successfully build a working tool.

...My 2cents...
[Moto X General] miketoasty:
Not to be that guy but JCase just tweeted asking about the Moto X soak test for AT&T (Specifically if it has been released yet) which could be for a plethora of different reasons but the one I would be hoping for is that he is testing to see if the bootloader hack that Dan revealed has been patched yet.

Again, all he asked was if the soak test was out yet everything else I'm posting is pure speculation.
[Moto X General] samwathegreat:
Thanks for the info. Speculation or not, as we have advised previously, if you intend on using this possible upcoming exploit DON'T UPDATE!

If and when you are able to get unlocked, you can update afterwards. Once unlocked, you stay unlocked. If you take an update that patches the exploit before you have an opportunity to unlock....well you're out of luck. We already warned everybody....
[Moto X General] chrisp6825:
I wouldn't say I'm interested in "breaking" their encryption, but I am very interested in identifying their method and looking for known exploits that might be related. I'll shoot you a message if I decide to dig any deeper.

---

And I didn't even notice before that you had put 2 keys out publicly on the OP. That's all I need to run them through some identifiers.

---

[MENTION=2509024]samwathegreat[/MENTION] are all of the codes submitted so far alpha-numeric, only in CAPs? And 20 characters in length?

tapa'd on my moto x
[Moto X General] samwathegreat:
They are all 20 chars. They are all in CAPS. A few of them are capital letters only, and most have both capital letters and numbers.
[Moto X General] sorullo_xgrx:
Maybe just because he has an ATT moto x and wants the latest
[Moto X General] pjsockett:
He also made it seem like he had no intention of expanding SunShine into further devices. That could mean that there is still a great deal of work even with Dan's info, or that it wouldn't be profitable because he knows there is a free unlock on the horizon, or I could just be entirely wrong.

https://twitter.com/TeamAndIRC/status/498975590989307905
[Moto X General] miketoasty:
I read the twitter link that you posted, the beginning is just a general sense of someone asking about adding the exploit/unlock to Sunshine and JCase saying he doesn't plan to (If JCase is planning on releasing it I assume he would want to keep quiet until it is released to prevent the flood of ETA questions anyways), but then if you read the entire thread the same person asks JCase about Note 3 support using Dan's method. JCase basically states that the Note 3 will not work with the method but anytime the Moto X is brought up he says nothing about it.

Again, this is most likely me being over eager and again I'm trying to read between the lines, but I'll stay positive until I hear a definite no.
[Moto X General] pjsockett:
He also says no before any mention of the Note 3. The initial question was simply if there was any plan to update SunShine with Dan's exploit. I do agree that it would be best to keep quite until complete and he doesn't say he is absolutely not going to do it, just not at this time, but the talk of the Note 3 is completely irrelevant.
[Moto X General] miketoasty:
The Note 3 would be irrelevant if he didn't come out and say that it will not work. You would think that if that was the case for the other device mentioned (The Moto X) he would have also stated that it will not work.
[Moto X General] doitinthedirt:
with all the posting about this.... ummm if you all would invest the same amount of hours surfing about if how why where the app is going to show.... research... read... understand... develop.... you could have come up with it yourself... if one human can understand this stuff others can to... or you can underestimate yourself... I don't like that word
[Moto X General] Verttex:
Sorry, what?
[Moto X General] miketoasty:
He's basically saying that with all the hours we wasted talking about it here we could have learned how to do it ourselves.

Personally, I work at a full time job and go to school at night so I don't have the time or really the interest to try and develop vulnerabilities. If it's available I'll use it but it doesn't really bother me THAT much that my phone is locked.
[Moto X General] Verttex:
The person who discovered this method is a security expert. He has his own security firm and they do stuff like this all the time. This is his job. It wouldn't take hours to learn what he just discovered.
[Moto X General] Guicrith:
I have been trying but i dont have enough data to figure it out.
[Moto X General] peestandingup:
Just popped up on my AT&T X. C Mon, guys. Release the kraken!
[Moto X General] BADDINOROX99:
don't do it!!
[Moto X General] labrat321:
The update has started downloading on my Moto X. I turned off wifi to stop it from completing. How do I remove this and keep the update from downloading now? Don't want to lose root.