yashsingh1/xdaforums huggingface dataset:
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Zzan:
If you can get into bootloader you are NOT bricked.

However you will never get your phone recovered unless you do what was told to you in your other thread. You MUST flash a rom that matches your devices CID--if you are unsure AND your phone was bought from your carrier, go to your carrier's website and download from there. You MUST flash this from the bootloader. Try a different computer if the one you have been using isn't getting you anywhere. Only you have the ability to get the information and correct rom for your device. Your unlock process did not complete successfully and you are getting no where fast. Until you get your phone in a usable state no one is going to be able to help you any more than the others that have already tried.

If it were only one device I would say you have a hardware issue. Since the same issue is happening on 2 devices for you it is more than likely something that you are or are not doing. Providing your devices were G3's when you started and you didn't flash G3 bootloaders into G4 devices these phones can be recovered.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Zzan:
The fact that it flashes is good, you can get to bootloader you are not bricked.

The symptoms you describe are indicative of a CID locked device trying to recover a bad flash with custom roms.

The fact that your phone freezes at boot screen is that you have had a previous bad flash.

you are correct the flash is not working correctly. You MUST flash an official ROM from the carrier that your phones are CID locked to in order to "fix" the flashing issue.

Custom roms require that you have a full carrier rom flashed prior to flashing them, you will have issues if you do not have a successfully flashed Official rom prior to attempting a custom rom flash. Official roms require that if you are not CID unlocked that your CID matches that of the rom.

Any idea what it was before you started your upgrade/flash attempts originally?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] lokidan:
currently

Zzan, thanks for your reply.

My only issue flashing the original roms is this, it flashed to 100% complete, rebooted and still got stuck on boot screen.

Now i tried Very first rom that was on this device which i believe was this:

RUU_Prodigy_1060204_105_11210_TMO_UK_Ship

Result: 100% --> reboot --> stuck on boot screen.

NExt:

RUU_Prodigy_2210206_22102109_021911_TMO_UK_WWE_Ship

Result: 100% --> reboot --> stuck on boot screen.

So as you see, i am trying to flash with original roms....

Everyone says, as long as you can get to boot loader (tri colour) these devices are not bricked, so i can , so why wont the these devices go back to Tmo original....

Now, i am happy to give you any info you need.

Thanks.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] vippie:
This will work if the phone never gets past bootloader screen even after flashing:

http://xdaforums.com/showthread.php?t=276963
[8125, K-JAM, P4300, MDA Vario Software Upgrading] lokidan:
CID unlocked

Dont think you can use the r2sd all command with mtty as this requires the device to be unlocked, clearly mine isnt because i get security failure.

Is it worth using th emeicheck website?
[8125, K-JAM, P4300, MDA Vario Software Upgrading] Zzan:
it may be your only option :( From post 16 in the thread mentioned above it seems that their unlock process starts from the bootloader. You may need to talk to some people on the G4 forums to see exactly how this process works to determine if it has a chance for you.

It doesn't appear that anyone that has posted to that thread tried to unlock through their site once they were already stuck at the boot screens.

Good Luck. I hope this works for you.
[G2 Q&A, Help & Troubleshooting] nivren:
Hi, guys,

I met a problem. I have a LG-D800. At the beginning, I accidentally flash a F320S rom ( CloudyG2 3.0)on my phone. Then, my phone only has fastboot mode, no adb, no download, no recovery...

After some work, my d800 has download mode now. However, when I try to flash TOT back my phone(using d800 dll and d800 tot), the flash tool always said, "device model is different'. I think the tool consider my phone is F320S. I try using LGUP_8974.dll (someone said it is a general dll), the flashtool doesn't work too, it said" CrossDL [F320S] to [D800]. SWversion"

I have no idea to get my phone back. Who can help me ?

Thanks.
[G2 Q&A, Help & Troubleshooting] nivren:
I solve it by myself.

Hi, I just solve it.

1. Follow this thread to modify the tot file. http://xdaforums.com/lg-g2/general/lg-g2-cross-dll-device-model-fota-laf-t3003717

2. Download the general dll. http://goo.im/devs/androiduser00110001/ROM/G2/KK/D80220a/LGUP_8974.dll

Then, use the lgflashtool to flash your phone. You will get it. (ignore the error message at the end of flashing).

Thanks
[Moto 360] trungvn1790us:
Dear Okibi & Friends,

I’ve tried to install your rom code successfully BUT it can not pass the 1st boot to log in to Android wear OS. Then, I’ve tried to connect it into my PC (with windows 7, 64bits) to recover it and install the rom code again. The PC only recognized it as “F100” device from Device Manager table. Then it installed the driver as a “Motorola USB networking ”driver” and can not recognize it under ADB/Fastboot. So it almost can not do anything now except continuous booting until the battery is exhausted. Pls help me on this case with advised steps to recover my moto360 back so that I can install your rom code again. Tks okibi a lot and really appreciate for your kindly supports!!!

Tks All!

Trung,

Link for screenshots on my PC for your references:

https://drive.google.com/file/d/0B1cxZ43OIpuJb3VSRHh2a3dCMGc/view?usp=sharing

https://drive.google.com/file/d/0B1cxZ43OIpuJUGRwaVJyalhWU2M/view?usp=sharing

https://drive.google.com/file/d/0B1cxZ43OIpuJQzBoTG03eWtUblU/view?usp=sharing

https://drive.google.com/file/d/0B1cxZ43OIpuJTEd1RFd3YmtkU2M/view?usp=sharing
[Moto 360] SchmilK:
I had a lot of trouble keeping the data+ data- connections in contact long enough to get the device successfully configured and data flashed. You might try applying a little pressure on the rj45 connection to the phone to make sure everything is touching nicely.
[Moto 360] r3pwn:
This is in the wrong section. However, on to your issue, it appears that the device is not properly connected. Have/Do you use(d) Linux? Linux is much easier in regards to Android devices when it comes to adb/fastboot connectivity.
[Galaxy Note 3 Q&A, Help & Troubleshooting] PrestonP:
Dear community,

I own the phone since 1 1/2 years and so far I haven't had any problem, but since two days I have an issue with my N-900. My phone turns itself off several times per day. This happens when I don't use it for a while, or when I turn the screen off. Once it shut itself down, I can't even turn it on again. It behaves like a brick, it doesn't respond to any actions. Taking out the battery and put it in again, doesn't help. When I am lucky, it works after a while again, this can take between 5 minutes or half an hour. I already bought a new battery for the Note 3 and replaced the old one, it seemed like the most obvious reason, why I have this issue. Since I changed the battery yesterday the phone didn't make any issues, but this morning the problem occured again. So it can't be the battery. Currently I am doing a factory reset and reinstall android. My phone had been rooted. But smehow I think, it can't be a software related issue, otherwise it would be at least possible to turn the phone on all the time, wouldn't it?

Has anyone here exerpienced an issue like this before? Is it a hardware defect? If somebody had that issue before, what costs can I expect to fix it?

Thanks a lot guys!
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] vvondoom:
Hello I have a question regarding my GS4.

I have an sgh-i337 on 4.2.2 rooted and unlocked with regionlockaway and was wondering if I could update to 4.4.4 without losing my unlock?
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] guut13:
I'm 99% sure that once you are sim unlocked, you are good until you manually lock it again. Upgrading will not relock your device. In the off chance that I'm wrong, then NB1 base CAN be sim unlocked. Which is what you Odin before taking the latest update... http://xdaforums.com/showthread.php?t=2595457

That said, if your 4.2.2 is base MDL or earlier, by upgrading you will PERMANENTLY lock your bootloader with no work around and be stuck using touchwiz based KitKat ROMs with safestrap recovery. (no lollipop, CM, or GPE)
[General Questions and Answers] nelsonliu:
Hi Everyone,

I recently acquired an Acer Iconia One 7 B1-730, and I want to root it to uninstall bloatware. I've searched the forums extensively, but cannot find any device specific instructions for use on a Mac (although others have reported rooting it). How did those who rooted it do it?

Thanks!
[General Questions and Answers] Rajaks:
Use this instructions

http://xdaforums.com/android/help/root-acer-iconia-one-7-b1-740-steps-t2866575

If Worked ,then hit Thanks. :thumbup:
[Sharp Aquos Crystal] yous87uu2:
I have Sharp AQUOS Crystal 306SH.

it's update by internet. cause i think, we make virtual update server, and updating Root binary.

I captured 'OTA Update' packet. but i don't know networking. cause can't analyze...

i just know a bit infomation... (capture file attached.)

First, Update server is "h ttp://dm-sharp2.redbend.com/dm".

using "Red Bend OMA-DM Client FOTA solution".

but i can't know other infomation...

cause write this thread.

help to root!

--150505 add

i'm upload new pcap file.

it's captured to updating aquos crystal. but it's not including some infomation maybe.

and i'm get some url at this pcap file.

h ttp://dl-sharp3.redbend.com:8080/VrmDLServerWEB/servlet/RequestDPServlet/DD/120318848_dp/DomainName/DEFAULT

h ttp://409f588200cd1dedd915-465d1c61f856116a191db7e16fb24e1c.r52.cf3.rackcdn.com/120318848_dp

file is 2015_04_27_195348.zip
[Sharp Aquos Crystal] loonbg:
this is not the way it will be very hard..

p.p it will be more easy if we have some one without updated phone
[Sharp Aquos Crystal] AceDaMack:
What is the sw version of the non updated phone?
[Sharp Aquos Crystal] loonbg:
s8216	10/05/2014

updated is SA300	12/11/2014
[Sharp Aquos Crystal] whynot4444:
have a source code for 2 version, but this source code so different
[Sharp Aquos Crystal] Deltax82:
WOW

That would take a while to do and that is the very hard way to do that. but thanks for trying
[Sharp Aquos Crystal] richierich09:
Source Code

I have a brand new crystal just bought it, and of course the first thing i wanna do is root. If you still need the source code mine is still original. S8216 I would love to help.
[Sharp Aquos Crystal] AceDaMack:
I have original to how could I help
[Sharp Aquos Crystal] loonbg:
you can install https://play.google.com/store/apps/...e+box&pcampaignid=APPU_1_GCPtVKO_I4qvU_TKgOAG and show what vulnerability analysis report give you
[Sharp Aquos Crystal] Mielmano:
Bluebox screencap

I also have held up on updating my Crystal in hopes of root, bought it very close to its release date because of its looks but dint bother to check if it was rooted. Would like to help as much as i can dispite the limited knowledge i have. Heres a screenshot of the bluebox results.
[Sharp Aquos Crystal] loonbg:
Don't Update !

s8216	10/05/2014 - have bug in Object Input Stream Serilization - CVE-2014-7911 and CVE-2014-4322 - giefroot and other is CVE-2015-1474 (but we don't have still root for this last)

updated is SA300	12/11/2014 - if some one have updated like me only hope is CVE-2015-1474 and CVE-2014-4322
[Sharp Aquos Crystal] whynot4444:
hey i found somthing, i can get file from system/app or file in system without root
[Sharp Aquos Crystal] loonbg:
yes but you can't edit anything without root also you don't have access to data ..
[Sharp Aquos Crystal] whynot4444:
no, just pull file into internal device, then copy to pc to edit, and push it again
[Sharp Aquos Crystal] MrTriTanium:
I have tried giefroot, and posted my results, with both an un-updated and updated phone.

It fails either way.
[Sharp Aquos Crystal] SHM:
Not possible unless the given partition is set to RW. Without root or a custom recovery then it isn't happening.

With that said, I posted some questions over in a thread in the Q&A section. If anyone can assist let me know there or pm me.
[Sharp Aquos Crystal] jamer123:
Hes actually og t a point here, OTA is a huge flaw here even though its secured. The source file and everything should have the code to decode the OTA files correct? once we decode them we can basically recode them and use a man in the middle type deal and push the "update" to the phone and get root or maybe even custom roms.
[Sharp Aquos Crystal] SHM:
The OTA isn't coded it is merely stored on to their server. This device updates itself using the download method. It first downloads a pcap file which contains all the needed info to run checks, connect to it's server, and download the required files to later patch to the system of the device while in download mode. That's why it takes so long when an update comes around for this device and the update is accepted by the end user. They won't release the actual OTA unless they have a change of heart and to be honest, they are not obligated to do so. They are obligated to release the kernel source which they already have but it won't help to grab the OTA. Having the device rooted would make it somewhat easy to redirect the download to another directory for keepings but since the device doesn't necessarily have a bootloader this is an issue. It also doesnt help that the kernel uses write protection either and that the ramdisk secures the system preventing any permanent changes. Downloading the pcap file and tampering with it may bring a solution to all of our problems but if that person has no valuable skills than it is a dead end.

---------- Post added at 12:38 AM ---------- Previous post was at 12:25 AM ----------

Personally, I despise any company that uses such methods. For the average user it's whatever, but for development purposes it's bad for business on their part when word gets out about how they operate. But since Sharp also does many other things such as building TV's then I seriously doubt it will hurt them.

It's why I stick with HTC products because they are big on supporting developer's and they typically do not make much of a fuss on the matter. Huawei is another one but the downfall with them is getting a response back since they are originally out of China.
[Sharp Aquos Crystal] SHM:
If anyone is still focus on hacking this device I would suggest you focus on the aboot partition.
[Sharp Aquos Crystal] whynot4444:
still wait to root :v, we cannot hack bootloader sharp
[Sharp Aquos Crystal] :
/data/local/tmp is RW so it's possible to take advantage of that. Slim chance but possible.
[Sharp Aquos Crystal] whynot4444:
why we dont try root crystall like HTC J one, use rumrunner
[Sharp Aquos Crystal] :
Never heard of an HTC J One. Anyways, my experience with the more modern HTC devices is unlocking the bootloader first provided with an unlockcode.bin file which is given by HTC themselves over at htcdev.com via your email. Once unlocked the device will most likely be S-On and not S-Off so you still cannot write to any given partition such as your boot and recovery unless you use fastboot. To do it any other way would require being S-Off.

At minimum the bootloader has to be unlocked before you can root. Rumrunner nor firewater, nor moonshine, or any other HTC hack such as previously mentioned are designed to root but more so to trip the secureflag so that the Bootloader itself believes it is S-Off. Once the bootloader is unlocked on an HTC device then rooting is a piece of cake. Takes less than a minute to root lol.
[Sharp Aquos Crystal] whynot4444:
so we must unlock bootloader, right? i think i will ask sharpusa :D, i hope they will help us
[Sharp Aquos Crystal] :
This device does not use a bootloader similiar to what is seen with HTC, Huawei, Samsung and so forth since you can apply fastboot with them but not with Sharp. The aboot partition is it's bootloader but my bet on bypassing the bootloader is gonna be very similiar to the Loki hack used for OEM devices such as the LG which was created and founded by djrbliss. He has the source open to public on his github but it will need to be modified to be adapted to this Sharp device. With that said, the Loki hack cannot be used unless the device is rooted at minimum. Even a temp root would suffice, but unfortunately, without root, I do not see much of anything happening with this device. However, using the /data/local/tmp directory may make it possible to gain temp root but an average user won't be able to pull that off.

---------- Post added at 12:53 AM ---------- Previous post was at 12:47 AM ----------

I will be away for two months starting this Friday so I can't do anything at the moment. My son was also born just yesterday, so as you can see, my hands are a bit tied up at the moment. Come may, if no future development has come about then I will tackle the device since my wife owns it. Until then, it's a waiting game for someone else to take a look and see what they can do.
[Sharp Aquos Crystal] whynot4444:
ok, thanks you for your help, we will wait root from you :D
[Sharp Aquos Crystal] etirkca:
Ask this guy. He claims to have temp root. He also provided UICC unlock, so I think his work is legit.

http://xdaforums.com/aquos-crystal/...-simunlock-t2898454/post57654134#post57654134

http://xdaforums.com/aquos-crystal/general/sprint-aquos-crystal-uicc-unlock-program-t2943213
[Sharp Aquos Crystal] :
I'm going to be blunt and say [MENTION=1713470]tewilove[/MENTION] is an idiot (sorry). For one, he shared an apk which he states is easy to reverse but then also states that he does not want it's source shared publicly so that Sharp can't "patch" it. Though, he publicly provides a download link to the application.... here on XDA?! That is a huge contradiction. If he were truly concerned about it's "trickery" being revealed to Sharp then he would had done a better job at obfuscating his application plus some. Even then, it still doesn't take a rocket scientist to break down an apk for review or even to conduct reverse engineering on all of it's operations.

Second, if he actually did have temp root then there should be no reason why he couldn't share it. Root will always inevitably be possible for android devices one way or the other so fear of future patches is merely idiotic and paranoia at best. The fact that he claims this to be true and yet has not revealed it has cost me to lose all credibility towards this individual. I won't even waste my time on it.

Even worse about this character is that his application could possibly hinder your device useless according to him and since there is currently no way to restore the device effectively then why RELEASE IT......?

It all seems sketchy to me in my humble opinion.
[Sharp Aquos Crystal] tewilove:
Let me explain.

1. UICC Unlock works same as "UICC Unlock" in system settings, it's a result of reversing some APKs inside the phone. The vulnerability was SHARP did not deploy robust permission check on some interfaces. And there is full source in the thread. If you can dig deeper, e.g., reversing the radio, you will find this only turns off personalization indicators. I uploaded the radio dump, but no one seems to had noticed.

2. There is no *FASTBOOT* mode, really, don't waste time.

3. The reason I'm not willing to publish root exploit is that it's an old exploit exists in nearly all SHARP Android devices. You know it's harder and harder to gain root access on a modern bootloader *LOCKED* Android device. Don't say it's easy or it's a matter of time that someone would work out a powerful kernel exploit or Android exploit so that we can root it sooner or later. Don't see iOS JB?

Anyway, the Aquos Crystal US mod is (official) unlockable, so what's the problem with me?
[Sharp Aquos Crystal] :
You would be referring to a kernel exploit. And it isn't an exploit. If you root the device and reboot, but notice that root isn't working anymore or is gone, then this is called "write protection". Write protection is found in the kernel source and it is not some hard exploit to just highlight some text and press the delete key on your keyboard, then rebuilding the kernel to apply to the device and voila, root is permanent - heck, all changes are permanent even after reboot.

Here is an example of removing Write Protection which I did for the kernel on my HTC device. The concept will not be much different with this devices kernel.

However, without root, it is going to make it very difficult to push a modified kernel to this device to gain such privileges.

So, please, do me a favor, and stop doing whatever it is that you are doing or would call this game of yours.

In addition, I am already aware of fastboot or the lack thereof.

If you know something pertaining to root and do not wish to share it then simply leave and go else where. You are useless here at XDA.
[Sharp Aquos Crystal] tewilove:
Hi man, there are two types of WP.

One is hard coded in kernel eMMC driver, which you mentioned.

And another is WP through eMMC hardware. The WP on eMMC is power on WP and it's turned on in aboot stage or very early Android booting stage.

What does this mean? It means any thing you do after booting into Android(Linux kernel) is useless.

The possible way is, finding a kernel exploit, shutdown eMMC power, setting Qualcomm magic boot flags to force sbl1 boot into download mode.

Or, If you could do some reverse work on sbl1, you will find that what the thread saying "bootloader has been found" actually is. With USB VID=04DD PID=933A it's called force loader mode, which is used in manufacturing. I cannot utilize it, there are some RSA stuffs.

Last tips: some important data(or NV item) are stored in SHDIAG partition. If you want to work further you will have to dig into.
[Sharp Aquos Crystal] :
U

Take a look at the Loki hack and let your imagination run wild.

And what do you mean when you say "anything you do is useless when you boot into Android"...? Give an example because what you said made no sense.
[Sharp Aquos Crystal] :
[MENTION=1713470]tewilove[/MENTION], this conversation is over now :)

Guys, I may actually have found an exploit for gaining root on this device. It is very promising.

Bad news though... I have to leave today and won't return until the first to second week of May so I can't release modifications yet until I do some tests to confirm it's integrity on my wife's phone (trust me, she wants root just as much as you people do).

Good news - when I return and run the tests and should all go well with some minor adjustments here and there then I will definitely release this knowledge to you people.

---------- Post added at 02:45 PM ---------- Previous post was at 02:23 PM ----------

https://github.com/ModdingMyMind/backdoor_mmap_tools

I forked this repo, anyone with knowledge and skills should check this repo out while I am away. Very resourceful.

I also added an attachment. Do not use the attachment to root your device. It will need to be modified somewhat. Since I will be away and can't do anything on my end then hopefully someone else can and will. If not, then I will dive in on this when I return.
[Sharp Aquos Crystal] tewilove:
Deleted. You are such a noob. Play with yourself and be happy. I shouldn't reply when you mentioned me.
[Sharp Aquos Crystal] whynot4444:
calmdown, i think this device have a way to root and unlock this device, sharp and all device from japan has a write protection when device turn on, last time i have a panasonic P02E, i root it and mod a CWM from stock recovery, but when i flash it, this device will lock all connect from USB, JTAG, and only way to rescue it is go to japan and warantine
[Sharp Aquos Crystal] :
source code

Idk if this will help, but here's the source codes for the 306sh
[Sharp Aquos Crystal] etirkca:
No. Old news.