yashsingh1/xdaforums huggingface dataset:
[X 2014 General] TokedUp:
Guys I need help spamming social media to try to get us Root. SRSroot, KingoRoot, Towelroot all have twitter/fb/g+/xda pages and all are active. If these can root a VZW Samsung S5 with all its knox crap, I dont see why we can't get root already. I feel like if there was more demand for VZW Moto X root maybe they would work on it more. Please guys take it to the web! Let them know the demand is there and there is $ to be made.
[X 2014 General] contesauce:
I used the "Chinese connection" to get my droid ultra bootloader unlocked, I emailed the same guy I used then when the moto x 2014 came out. He gave me the requisite 48 hours to get me my code, then he said there are no unlock codes available for the Vzn XT1096. This may have changed, since I did email him only a few days after the initial batch came out.
[X 2014 General] TokedUp:
Could u please email him again?
[X 2014 General] contesauce:
Sure I'll email him again, but the only way he was able to tell me last time was for me to purchase the unlock, which he refunded since it was unavailable. If it comes down to that I'm not buying it again just to test. I'll ask him if he knows though.

Update: sent him a message, there is a time difference though and sometimes it takes him until the next day to reply. I'll update again when I find something out.
[X 2014 General] Yegort:
put me down for $15 for root and $30 for BL
[X 2014 General] slogar25:
Does any you coders out there know if this exploit would work on our phones

https://twitter.com/returnsme/status/559617259484626944
[X 2014 General] Mocha_Bean:
I'm no dev, but doubt a Nexus 5 exploit would work on an XT1096.
[X 2014 General] slogar25:
Ya just reaching, its a Qualcomm exploit
[X 2014 General] BootloopedMillennials:
Don't see this variant getting rooted. Maybe it would help if a device was donated or let borrowed out to a developer. Just don't see a developer taking the initiative to purchase this version.
[X 2014 General] Mocha_Bean:
Or if they knew about this thread.

The bounty would more than pay for an XT1096, even more for a used unit, and even more for one with a cracked display.

A cracked, carrier-locked phone would go for pretty cheap on eBay or similar site.
[X 2014 General] TheBuzzard:
If someone cracked this then I would happily pay them $10.
[X 2014 General] JulesJam:
Agreed. The bounty system doesn't work as many people don't follow through with payment. I think one of the devs said they only collected 30% of the pledges.
[X 2014 General] TokedUp:
At this point I'm sure we could get way more than 30%
[X 2014 General] TheBuzzard:
This may be over-thinking things, but would it be possible to set up an escrow account of sorts? Get people to pay up now and have it held in trust until someone cracks the thing, or after a predetermined amount of time passes without results then the money gets refunded?
[X 2014 General] Mocha_Bean:
That doesn't sound over-thought at all; it'd probably be the best way to do this. It'd fix the huge problem with bounty collection.
[X 2014 General] genatsvale:
I'm in. Root $10 + Bootloader +$10
[X 2014 General] tacosrdelicioso:
Right? Still. Probably isn't enough demand
[X 2014 General] Michajin:
Pulling my pledge, moving on to a nexus 6. Maybe someday a DEV will get bored and root/unlock the x-2014 someday but i cant wait anymore. I love the x but moving on. I think verizon and Google finally have patched most loop holes. On to a nexus, Good luck!
[X 2014 General] JulesJam:
I know me too. Sucks b/c the Moto X 2014 is a good phone that would have been a great phone with root.

---------- Post added at 02:55 AM ---------- Previous post was at 02:39 AM ----------

"Held in trust" requires there be a trust document and a beneficiary. In some states you may be able to get away with an unknown beneficiary, idk, but do you see where this is going? Someone would have to know the law of the relevant state that would apply to the trust document and be qualified to draft the document (i.e., have a license to practice law in that state). Then someone has to be appointed trustee and agree to the fiduciary duties that some along with that title.

As for an escrow account, you still need an escrow agent and escrow agreement. I don't see how you could draft up an escrow agreement and take money from strangers and have an escrow agent hold the money for you without involving an attorney. Also, the escrow agents charge fees - who would pay them?
[X 2014 General] bits3rpent:
Put me in

$25 root+ $25 bootloader

EDIT:

Screw it, I want this

$50 root+ $50 bootloader
[X 2014 General] bits3rpent:
Possible root method

As you knok, Moto X 2014 Verizon comes with 4.4.4. For devices running <5 there is an object serialization bug. This has been tested and confirmed on a Nexus 5.

I do not have my device yet. Could someone test this?

https://github.com/retme7/CVE-2014-7911_poc
[X 2014 General] tacosrdelicioso:
Any way to downgrade back to kk?
[X 2014 General] Skeetch79:
Not sure how many Moto X 2nd Gen devices are running KK still. At this point even if you root KK, there doesn't seem to be a way to upgrade to rooted LP. If you are on KK and find a root solution, do not upgrade until a root solution for LP is found.
[X 2014 General] bits3rpent:
I am going to be working on a root exploit for kitkat, that installs SuperSU binary and/or unlocks the bootloader so that it is persistent.
[X 2014 General] Skeetch79:
GLWT. By which methods and what exploit?
[X 2014 General] bits3rpent:
the method is mentioned is above. Essentially the first vulnerability will save a file into /system, and that file is the second vulnerability that when such binary is executed as system, it gains root priviledges. My goal is to take those root priviledges and modify the bootloader and/or install SuperSU to make it a persistent root.
[X 2014 General] Pizzuto:
Lolipop:

run exploit as system privilege,with SELinux context such as "keystore","vold","drmserver","mediaserver","surfaceflinger"

If exploit successed,you will gain root privilege and "kernel" SELinux context

I have Lollipop and this did not work for me! I do not have a xt1096 on 4.4 left.
[X 2014 General] bits3rpent:
Yeah this does not support Lollipop since to run as system you need the first exploit to work ( but it was fixed in lollipop). I still need to do some port for the second exploitation to work on the Moto X 2014, but I should have it done in about a month or so.

TL;DR TEMP ROOT FOR MOTO X 2014 VERIZON 4.4.4 ONLY COMING SOON
[X 2014 General] Mocha_Bean:
Nice. Too bad I updated. :P

How likely do you think it will be for 5.0 to get root eventually?
[X 2014 General] bits3rpent:
Depends on who is really working on it. These things take time. My motivation is quite selfish, as I am receiving a new Moto X in the mail soon, and I _really_ want root because Verizon's bloating pisses me off.

My exploit depends on the fact that the moto x 2014 in its original form is still vulnerable, which I am still not completely sure yet..

Either way once I get root/unlocked bootloader I am switching to CyanogenMod immediately, so my development on rooting the Moto X will most likely stop there.

If people really like my exploit, and I have more free time on my hand I may consider shooting for a Lollipop rooting method, which will most likely take longer since as I mentioned earlier my current method is based off an existing vulnerability in <5.0.
[X 2014 General] Mocha_Bean:
This may be a silly or vague question, but how does one go about finding these exploits?
[X 2014 General] bits3rpent:
Not really the one to ask, I am quite new to the process. I highly suggest reading Android Hackers Handbook.. Explains stuff much better than I can
[X 2014 General] TokedUp:
If u get root for 5.0 all this bounty money is yours! I sure hope u find the time to help us out
[X 2014 General] bits3rpent:
Haha I do too! Let's see how the first exploit goes then we will see about lollipop ^^
[X 2014 General] tacosrdelicioso:
Delete
[X 2014 General] bits3rpent:
If you are talking about the bounty and the KitKat root I am working on, I am not expecting a bounty.
[X 2014 General] BootloopedMillennials:
You lose all the Moto functionality once on CM. Why start with a Moto X 2014 if that's your end point and motivation for rooting?
[X 2014 General] bits3rpent:
Don't really care _too much_ about the moto modifications.
[X 2014 General] TokedUp:
Its really funny how ppl ride those Moto apps like they are the second coming of technology. So overrated!
[X 2014 General] Mocha_Bean:
Nobody said they were the second coming of technology. They're convenient, which is the main thing.
[X 2014 General] en_pneumati@netzero.net:
well, i would be more than willing to give you a token of appreciation for a unlocked bootlader and root on my xt1096 KK Moto X. i really miss having root, but had to upgrade when my Droid Incredible finally gave up the ghost a few weeks ago.
[X 2014 General] slogar25:
Maybe reaching but have you looked into cve-2014-5206 and cve-2014-5207 for an exploitable vuln on lollipop? I'm not sure how to proceed testing.
[X 2014 General] TokedUp:
Reaching is better than nothing. I wish more ppl would reach
[X 2014 General] Mocha_Bean:
What do you mean by reaching? I feel like I'm missing something. Whatever you're doing, it sounds fun; I guess I'll do the same.

How about CVE-2015-1474? http://www.cvedetails.com/cve/CVE-2015-1474/

EDIT: Ooh, maybe I'm on to something. This vuln was mentioned in the AT&T Note 4 root progress thread as well. http://xdaforums.com/note-4-att/general/galaxy-note-4-root-progress-t2961974/page105 Like, it was pretty big. Jcase even got in on the discussion.

EDIT: CVE-2015-1474 is a rather major topic of discussion in that thread. I subscribed to it; they seem pretty close to a root that could potentially be applicable for all devices through at least 5.0, if cvdetails is accurate.
[X 2014 General] Mocha_Bean:
Sorry, (new here. lel.) but what's reaching?
[X 2014 General] TokedUp:
oh boy
[X 2014 General] Mocha_Bean:
Update: Trustable by Bluebox was updated to detect CVE-2015-1474 (GraphicsBuffer) vulnerability. Just tested on my phone; Verizon Moto X is vulnerable. Keep an eye on the ATT Note 4 thread; they'll probably be the first to have a root exploit.

Also, any OS update past 5.0 will probably fix this exploit (if nist.gov is accurate), so don't accept any soak tests or OTA's to 5.0.1+ until a new exploit is discovered. Maybe I'll ask some Nexus users running 5.0.1 or higher to install Trustable to see if they're affected by GraphicsBuffer.

ATT N4 thread: http://xdaforums.com/note-4-att/general/galaxy-note-4-root-progress-t2961974/

Trustable by Bluebox: https://play.google.com/store/apps/details?id=com.bluebox.trust
[X 2014 General] MrToxicTaco:
Nice find. Looks like we're well on our way to a Moto X with Xposed :fingers-crossed: :fingers-crossed:
[X 2014 General] en_pneumati@netzero.net:
i have refused OTA update to LP and am still on KK 4.4.4. any hopes this root if developed will work?

if it won't work with KK! and if the next version of LP gets pushed out, and the root only works with 5.0, will there be a way for me to upgrade to only LP 5.0 so i can root?
[X 2014 General] Mocha_Bean:
The new root will work with 5.0 and below, so you can update if you want.
[X 2014 General] TokedUp:
I would be careful giving ppl advice like that. You dont want to be the one to blame if Root can't happen on 5.0. We still arent even sure if this root method will work for the Moto X. Let them decide for themselves what to do with their phones. Im just saying be careful.
[X 2014 General] Mocha_Bean:
In theory, at least, it should work.

Heck, I'll probably be first to try it.
[X 2014 General] jcase:
what "root"? 5.0 brings some much more strict selinux policies, and even with root you guys still have a ways to go to make it really usable. Your going to have to hit the bootloader in some fashion.
[X 2014 General] TokedUp:
Holy Hell! If [MENTION=2376614]jcase[/MENTION] says so I believe it! Bad news for us, again! I appreciate you chiming in. Thanks!
[X 2014 General] Mocha_Bean:
I was referring to the potential exploit with CVE-2015-1474. (The one discussed on the ATT Note 4 thread.)

If the Moto X is vulnerable to CVE-2015-1474, and an exploit is developed, what specifically is preventing us from getting a usable root? How do the SELinux policies prevent that?

(I'm kinda new here, and to rooting in general. Hell, I've never rooted. I don't know any of this.)
[X 2014 General] jcase:
Thats a vulnerability, a bug.

An exploit is a a method or tool to abuse that bug. Where is one that has been developed? I've not seen a POC for it yet.

I'd have to look at the policies, and the bug, but SELinux is an access control system, it can and does mitigate bugs.
[X 2014 General] Mocha_Bean:
I meant the possible future exploit for CVE-2015-1474 and CVE-2014-4322, as discussed in the ATT Note 4 root thread. Sorry for the confusion.
[X 2014 General] Pizzuto:
This will not be easy if possible at all, as the video camera group where this bug resides will not have permissions to write SU.
[X 2014 General] Mocha_Bean:
I wasn't aware of this being about cameras.
[X 2014 General] ZPaul2Fresh8:
CVE's 2015-1474 & 2014-4322 are not about the camera groups. If you have a Qualcomm processor in your Moto then chances are your device is vulnerable to the 4322 bug as well. You'd just need a way to get System UID first. This is what I'm hoping 2015-1474 will do for us.
[X 2014 General] Mocha_Bean:
That's what I'd thought. Yes, the Moto X has a Snapdragon 801.
[X 2014 General] ksenter:
Very cool that you found this. I'd love to hear about your process for figuring out how to use it with the Moto X 2014, if you are able to get it to work. I have a OG Moto X that I bought used and unfortunately it had 4.4.4 on it already and the chinese guy didn't have a bootloader unlock code for it. So, I'd really like to get it working on a 2013 moto x.

I have no experience with exploits or anything on this level, but I've done some android programming. I know that I probably wouldn't be able to figure it out on my own, but if you come up with a process that works for the 2014, I might have a fighting chance. Unless there are any really good devs out there that still have an interest in writing one for the 2013, figuring out how to write one myself might be my only hope...
[X 2014 General] Mrembk76:
hmmm so I bought my phone updated already (through Swappa), so I am probably boned with my dream of a rooted phone, at least for a long while.
[X 2014 General] Mocha_Bean:
There might be an exploit coming soon for Lollipop. Nothing for sure, but I've got my fingers crossed. :P
[X 2014 General] JulesJam:
How do you test it?
[X 2014 General] TokedUp:
Been trolling most of the Root method threads on XDA to see if we could get some help. This is the response I got from one of the Devs. Has anyone tried any of these besides the obvious ones?

"Guys, if this doesn't work, there are other one click rooting methods. If your Kk you can try towelroot. There is also kingo root through your PC, Root X, and snap pea root through PC. Google them and they will be easy to find. One of these methods should work for you if Framaroot doesn't."
[X 2014 General] Mocha_Bean:
I don't think any of those would work on Lollipop. Also, I've heard bad things about Kingo Root.
[X 2014 General] bmwh0r3:
Kingo was best way to root my vzw note 3.

That said, friend who was going to buy my moto x decided he didn't want to pay me. Had a charging issue and asked me to send it in via moto care that I had purchased. He didn't pay. I got code to build new. I'm now using my vzw moto x on at&t. Have yet to find anything not working. Text and pictures send and receive. Calls in and out. Even data speeds similar to my nexus 6 on at&t.

So... Still no root? Sorry for the side tracking. Are there any devs working on it?
[X 2014 General] Mocha_Bean:
There's a vulnerability in Android that should, in theory, also be present in 5.0.

Some devs are working on an exploit of it for the Note 4, but I think it might work on the VZW Moto X. If it doesn't work on Lollipop, even though I believe it will, it will at least be more likely to work on KitKat. I'll update on this thread as soon as I find anything.
[X 2014 General] bmwh0r3:
I'm not complaining or anything. Xda's devs are awesome with all they do. I'm just somewhat shocked that no one has rooted this little guy yet. And yes I mean little. It feels so small compared to my n6. I'm more than willing to help test or whatever may come in the future. This is a backup phone now.
[X 2014 General] Mocha_Bean:
Well, just about anything is small compared to a Nexus 6. :P

I'll post here if I find anything.
[X 2014 General] JulesJam:
Android is getting more and more secure and there is a Pure Edition available for Tmobile and ATT. There just isn't much interest in trying to root the Verizon Moto X :(
[X 2014 General] bmwh0r3:
Yeah I was gonna try to sell this and buy a pure. But it works on at&t so screw it. If I want root and roms, I'll throw my Sim in the nexus. This phone is good to use for everyday use. Smaller and all that kind of stuff.
[X 2014 General] JulesJam:
On Verizon we need root to WiFi tether if we have unlimited data. So it is a big deal for us. I would have bought a pure edition in a heartbeat if one had been offered for Verizon.
[X 2014 General] TokedUp:
Quiet you.
[X 2014 General] Mocha_Bean:
Does anyone with a bit more of an adventurous spirit than I want to try this?

http://xdaforums.com/android/help/lg-tribute-development-t2953342/post59291717#post59291717

Edit: not yet; wait. Pretty sure this is LG only; I'll look into it.

Edit: I'm stupid. Ignore this.
[X 2014 General] mdmogren:
$50/root and $75/bl
[X 2014 General] supermandroid:
Absolutely. I had to pay off contract to keep my unlimited data with Verizon, and a Nexus 6 was/is too expensive in comparison. If the Pure Edition had been offered I would have gotten that, instead, as well.
[X 2014 General] JulesJam:
Check out this thread if you want to read about ways to use your upgrade and keep your UDP.

http://slickdeals.net/f/6964624-upgrade-and-keep-your-unlimited-data-with-verizon
[X 2014 General] supermandroid:
Thanks for the links! I've read about some success stories, but some of the horror stories make me really nervous. I'll certainly look more into it.
[X 2014 General] JulesJam:
If you lose UDP w/in the return period, you can return the phone, file an inactive pricing request and get it back.
[X 2014 General] supermandroid:
That's awesome to know. Thanks so much!
[X 2014 General] sonic1675:
I love all the talk about keeping UDP but let's try to stay on topic... That is the point of these threads isn't it...
[X 2014 General] purejoy:
Just a POC.

You can pull down the source and compile the project on your PC,then install the apk file under bin directory. Before running the app,you should enable "USB debugging" and "Mock locations" in Settings -> Developer Settings.

If your phone is vulnerable, running the app would create a dummy file named file.txt under system directory.
[X 2014 General] detonation:
With the root being achieved (but not yet released) on the Turbo let's hope the Moto X isn't far behind
[X 2014 General] TokedUp:
I sure hope so. Otherwise I'm jumping ship to the Nexus 6 next week.
[X 2014 General] hipsh0t:
hey guys just so ya know there is always hope... looks the turbo just achieved root yesterday.... im really excited about that now my moto x is next i hope....
[X 2014 General] JulesJam:
Wouldn't root for the Moto X 2014 be the same as on the DT? I mean I know they have different cameras, but other than the camera app, shouldn't the bootloader and system app be the same?

Also, I have read up on it, but is this for KitKat only or Lollipop, too?
[X 2014 General] Mayze23:
I would think it's for KitKat only since the turbo hasn't received Lollipop yet.
[X 2014 General] Mocha_Bean:
However, the exploit could very likely be exploiting a vulnerability that's present in 4.4.4 and 5.0.

For instance, CVE-2015-1474. It's present in KitKat, but it's also present up to 5.0 or 5.0.2.
[X 2014 General] moondeath:
What's going on... it's like super quiet as far as root goes for this phone, every Motorola verizon phone I've had has gotten root atleast even the ****tiest of them, why is this phone being ignored? :confused:
[X 2014 General] Mocha_Bean:
Generally, as an OS progresses, there are fewer bugs to exploit. However, there's already a root for the Droid Turbo, and it might work for us. So shhh.
[X 2014 General] purejoy:
Highly probable if the vulnerability is chipset-independent.
[X 2014 General] Mocha_Bean:
If it's CVE-2015-1474 (considerable possibility, I guess), then yes, it is chipset independent.
[X 2014 General] d33dvb:
$30 Root - $100 Bootloader
[X 2014 General] capripio:
Waiting

Nice, I am waiting to see if someone do that!
[X 2014 General] neh4pres:
So they have root for new galaxy phone,wtf. So it is possible to root lollipop. Just nobody cares about us.
[X 2014 General] Mayze23:
They have root for "unlocked" S6. They don't have root for the VZW version. The unlocked Moto X on lollipop has root as well.
[X 2014 General] Mocha_Bean:
You can just request a free bootloader unlock code from Motorola for the unlocked (pure edition) Moto X.
[X 2014 General] scoobaspeaz:
Why did you post that?
[X 2014 General] Mocha_Bean:
He said that both "had root."

I was specifying that the Moto X PE not only had root, but a manufacturer-provided bootloader unlock.

My wording of the comment didn't work in the way I intended; I meant it in the sense that the Pure Edition's root wasn't from an exploit.
[X 2014 General] Mayze23:
Please don't take this the wrong way but I'm pretty sure everybody in this forum knows the PE bootloader can be easily unlocked. I commented on the S6 post because the poster implied that the S6 has root while the "VZW" version of the Moto X doesn't. I can almost guarantee that the VZW version of the S6 won't have root for awhile.
[X 2014 General] Mocha_Bean:
Ah, okay.
[X 2014 General] TokedUp:
Im really getting tired of this locked down POS phone. Tried to get a N6 from VZW and got denied. I'm gonna try to see if I can trade for one or sell this thing and buy one off of Moto. If only I wouldve waited 3 months.... FML

And i'll bet anyone that the VZW S6 gets root before we do. Theres no development on the Moto X, no devs, no one cares.
[X 2014 General] sivarticus85:
You're absolutely right, and it's only because Galaxy phones are more popular that most. I honestly don't get it, TouchWiz is a messy and buggy UI with useless features, whereas you have the Moto X with arguably the best notification setup around, awesome voice dictation, pure un-skinned Android, and the customizability. It's really a shame they don't sell better than they do. People are always amazed at what my phone can do. Blame it on lack of advertising I guess.
[X 2014 General] TokedUp:
Its not advertising. The fact is anyone on VZW that wants a modded phone have/will go with the N6. Leaving us with nothing. The only hope I have is to buy the N6 from Moto/Googs. If I can use it for 6-7 years it really isnt much more cost than buying a new phone every 2 years.
[X 2014 General] MaliciousBoy:
Does anyone know if the newly release Droid Turbo Root will work with the Moto X?
[X 2014 General] Twistitup:
I read on the Droid Turbo thread that it would be if you downgraded back to Kit Kat, but I'm too lazy to do that. :p
[X 2014 General] MaliciousBoy:
If you were to downgrade to Kit Kat and then root, would it be possible to go back to Lollipop?
[X 2014 General] Twistitup:
You could, but you would lose root unless the exploit works for lollipop as well. (which it may)
[X 2014 General] TokedUp:
So whos gonna try it? I would love to guinea pig this phone. I might try when I get home
[X 2014 General] MaliciousBoy:
Well, considering how the Mofo exploit works, you probably would.

However, the Mofo exploit is simply a version of fastboot that doesn't check the signature of the file you're flashing. So if we could get a pre-rooted Lollipop img then I don't see why it shouldn't work because OTA updates don't update the bootloader itself to the best of my knowledge