[Verizon LG G3] zachariahpope:
I'm not sure exactly how this method works, but I do have a couple of guesses..

First of all, THANK YOU to the devs behind this as I do realize it was a group effort..

I truly feel like you guys should be stacking money left & right from those unlock bounties ... Like everyone should be required to pay half their unlock pledge seeing as how this IS a work-around/semi-unlock...

I know the devs didn't ask my opinion, but I hope y'all are open minded enough to hear it... First of all, not to take away from your work, but I feel it should be made more clearly that this isn't a true unlock on the bootloader ... I found out about this from a google now headline that read "Unlock your LG G3 and flash TWRP recovery ALL variants"... It was a little misleading and don't get me wrong, I'm not one bit disappointed but rather 100% enthused about this. Yes, it's true that everyone should read every little detail when it comes to anything rooting/modding/unlocking, but this is XDA and we all know people don't read everything like they should... My fear is people will flash this with the belief they have total flashing control over their devices partitions (which they KIND of do), but they'll end up with bricked devices if they try to flash any insecure images. For instance, say I install this recovery with the impression that I'm unlocked or even I understand I'm not truly unlocked but I still feel like I can flash a Tmobile ROM because I know although I'm not unlocked I do have a working recovery so therefore surely I can flash some roms... People are going to make that mistake... When they do that, they're gonna hit a major wall with getting back to stock because they'll flash a new kernel in that ROM that does not match the VS985's kernel signing keys... So then they have to use LG flash tool to go back stock and then even that won't work because they've flashed a d851 build prop over that vs985 build prop and so flash tool will always throw you a cross download error and they'll be stuck with an unfixable brick UNLESS they can get into TWRP and restore a stock backup with the stock boot image that they made prior (hopefully) ... But I dont even see this as possible because once you brick your phone with an insecure image, it won't boot past the LG screen... Even if you power+volume down to get to the boot screen to Factory Reset the phone, that's not going to take you to twrp, its going to trip the LAF partition to Factory Reset through MiniOS so as I see it, you'll be bricked without a way out... I realize this is a lot to read but its important information I feel like people need to know.. I think the reason the devs stress the "this is entirely different from Loki" thing is because they know Loki is a bypass that allows insecure flashing... This however does not and will require every kernel and every recovery to be "Bumped" to accomodate the variation of the device. I feel like the devs have accomplished a lot with this... But people do need to be informed of the mechanism that this works on solely to protect or recover their devices from bricking. I'm not saying we deserve their source code or anything, but definitely more insight into how this works... My guess is that it's all in the key signing... They've either bypassed key signing in some way for flashing partitions or they've replicated the signing keys in the stock image... I'm thinking it's the latter of two, so the bootloader is tricked into flashing a properly signed image and then its implemented into one of the G3s extra partitions but somehow set to default as the original location of the "mirrored" stock image... In other words, this doesn't overwrite your stock recovery but rather lay over it so to speak but is stored in a different partition.. If this is true then think of this as a reverse engineered Loki... Whereas Loki bypasses the stock bootloaders security checks entirely, this plays on the stock bootloaders security by incorporating modified images like kernels and recoveries with properly signed keys so that it thinks you're flashing stock LG partitions... If that's the case, that's a lot more work for the devs, and all the more reason to DONATE... But that is solely my guess so please take it for the pure speculation that it is.

I hope all the devs feel appreciated and realize that I'm not complaining in any way. I am grateful... I just want people to keep their devices in a working state and not end up with an overpriced brick. This is truly the best advancement made in development thus far for this line of phones... Having a working recovery to flash mods with the ability to restore a working backup is just pure bliss.