yashsingh1/xdaforums huggingface dataset:
[Xperia Z5 Compact General] williamgrant:
First:

1. Install a fresh flashtool, install your phone's adb and flashmode drivers.

2. Click the black XF button (XperiFirm).

3. Find the correct model of your phone (Z5 Compact Suzuran -> E5823 etc)

4. Click the Check All button

5. Click 1299-8716 Internal Promoter line

6. Click Aviable releases side 32.0.A.6.200 / R2B, then click Download

7. If the download finished, close it, and wait while the Flashtool makes an FTF file, be patient.

8. Click the Flash button, choose flashmode , OK, find the 32.0.A.6.200 line in the device list, check the Wipe APPS_LOG, DIAG, USERDATA, and click FLASH button.

9. When finished, remove the phone, restart phone, Wait a lot of time to boot :), and go to the Settings, About phone, click 5 times to Build number to reach developer mode, set USB debugging and Allow mock locations in the Developer settings.

10. Download the fresh Ivyroot Tool (now v4), Plug the USB cable to the phone, wait while the Win install drivers, and:

11. ALLOW THE DEBUGGING USB CONNECTION WITH PC IN THE PHONE (don't do anything, while that not allowed)

12. Now run the "tabackup.bat" file. If everything was fine, you find a TA-xxxxxx.img file in the Ivyroot directory. This file is the backup of your TA partition (while stored the DRM keys etc).

13. Rename the file (you will find easily later) - TA-my_z5compact_save.img, and copy it safe places.

14. Open your bootloader from sony site (google: sony open bootloader)

15. Use any root method, install twrp, special kernels, SuperSu etc. (google: root z5 compact xda)

16. Restore the DRM functions with "tarestore.bat" or use Ta-Backup etc. Important, you must use stock kernel when restoring the TA partition.
[Xperia Z5 Compact General] MrThumb:
anyone in southwest uk who would do this for me? i cant even flash back to lolipop. driving me insane.
[Xperia Z5 Compact General] MrThumb:
ok I managed to get quite far last night (up until 4am) I followed twigs guide to the letter.

http://twigstechtips.blogspot.co.uk/2016/04/sony-z5-compact-root-without-losing-ta.html?m=1

and I dont appear to have a root and superSU does not work. (there is no SU binary installed)

First thing i did is ensure that superSU was in the kernal folder and did that part again.

I reflashed the kernel_patched.elf using flashtool.

booted back up and super SU gives the same error.

I uninstalled superSU and reinstalled it from the play store and it gives the same error.

i then reflash the drm keys thinking it would help to no avail.

any ideas gents?

heres the status of the phone.

SuperSU problem.
[Xperia Z5 Compact General] MrThumb:
I believe i done it. I had to use a USB 3 port for flashtool to work. and I had to use the later version of superSU 2.71 and it worked.
[Xperia Z5 Compact General] nkod:
https://youtu.be/c4krMSdyMV4

BL Lock or unlock ?
[Xperia Z5 Compact General] LazyLucretia:
So if this is true I think I'm going to donate to both devs for their awesome work. : )
[Xperia Z5 Compact General] Croc_X:
I used the BETA SuperSU for patching the kernel and I've also flashed the same BETA SuperSU (.zip) in the recovery right after flashing the patched kernel (reboot your phone and wait until the LED turns yellow, then press Volume Up and you'll get to the TWRP recovery). Don't know which one really helped (the BETA version or reflashing of SuperSU in recovery).
[Xperia Z5 Compact General] Guto ViP:
Some news about?
[Xperia Z5 Compact General] kxf41:
Please add me to list, £20 gbp for root access with locked bootloader
[Xperia Z5 Compact General] gabbodj95:
any news?
[Xperia Z5 Compact General] hartmark:
Pay up and go home guys!

edit: see post #304 http://xdaforums.com/showpost.php?p=66188629&postcount=304
[Xperia Z5 Compact General] theskig:
So sad anything happened. :(

I want to keep my Z5p for a long time, need root!! :o
[Xperia Z5 Compact General] hartmark:
we already have root, read up previous posts
[Xperia Z5 Compact General] Laplazer:
I really wonder why people in this thread cant read or are just blind.The threads name is "Root z5 series with LOCKED bootloader" the "root" method someone came up with lets see ohh u have to unlock bootloader nice really nice. Where is the mod and why did he even accept this method?
[Xperia Z5 Compact General] mele80:
It was with permanent root with locked bootloader or temp root to take ta-backup before unlocking bootloader. Its all in op.

Topic is wrong, but requirements are in op
[Xperia Z5 Compact General] Laplazer:
The requirements state that someone needs to be the first person to create or find a method to obtain root access in any software release on any device from the Z5 series, without neither unlocking the bootloader nor compromising (or affecting) the TA partition in any way that could prevent a correct and successful backup of it.
[Xperia Z5 Compact General] mhaha:
Technically no one has been able to satisfy all requirements of this bounty, you are correct in that sense.

However, you should also understand what the bounty is truly about. Gaining root access was never the problem, the issue lies in that once you unlocked the bootloader to root, you also lose the TA partition with no way of getting it back. That's why many people held off from rooting, and why this bounty was created. The terms are based on what were achievable in the past with previous phones and earlier Android versions, but the real goal is much simpler. People just wanted the ability to restore their phone to its original state with DRM intact.

Due to the way modern system security and integrity is designed, there will probably never be a way to root with a locked bootloader. Months after this bounty has expired, when many people have given up on the possibility of a reversible root, zxz0O0 announced that he found a way to backup the TA partition before unlocking the bootloader, blessing us with the ability to revert the phone to original state after rooting. There was no way to do so prior to his announcement. Thus, with the main concern for rooting gone, many pledgers felt that it is a good enough solution to warrant a donation of their pledge to zxz0O0 in appreciation for his work regardless of the original terms of this bounty. Nobody's blind here.
[Xperia Z5 Compact General] ninestarkoko:
Which is the unsatisfied part of the bounty requirements? Could you underline it to me please?
[Xperia Z5 Compact General] zippy01:
Root with locked bootloader.

The requirements state that root must be achieved without unlocking the bootloader nor affecting the TA partition.

Not that I'm bothered as I didn't pledge to start with and this method is fine for most people
[Xperia Z5 Compact General] ninestarkoko:
Infact he did get root access on locked bootloader
[Xperia Z5 Compact General] mhaha:
Right, but it's only a temporary root that would not survive a reboot. I suppose you could debate whether temp root qualifies as the bounty defined "root", but I think you'll agree that isn't what any of the pledgers had in mind when they agreed to the bounty terms.
[Xperia Z5 Compact General] mele80:
I was happy with the outcome. TA-backup done, DRM fix injected to kernels
[Xperia Z5 Compact General] mhaha:
I'm not arguing against that, I feel the same way.
[Xperia Z5 Compact General] ninestarkoko:
I just would like not to see other people repeating that the bounty requirements were not satisfied: technically they were completely fulfilled, if it wasnt for the expired timing (infact zxz00o didn't do it for money and said that any pledger was free to donate or not).

Yes I believe that most of the pledgers thought about permanent root management solution ( =SuperSu in their mind) but it has been said widely that this kind of solution will never ever exist because of the new dm-verity chain of trust that uses the bootloader to check device partitions.

So please stop repeating the same false thing: written sentences are there. If anyone was let down it's because their thoughts were different from the brutal reality.

We should only be grateful to a developer/hack expert (2 of them to be precise, one that I personally contacted from another forum and that kindly shared the skeleton of the exploit continued by zxzooo) that without any interest (Noone of them owned a Z5 line device) put his time and efforts for this achievement.
[Xperia Z5 Compact General] mhaha:
You lost me, I have completely no idea what you're babbling on about. Either something is wrong with your reading comprehension, or you've mistakened me for someone else. I voiced my opinion against calling people blind and clearly stated my reasons, even though there wasn't really anything worth discussing at this point. I'm not going to bother responding any further on this matter
[Xperia Z5 Compact General] mindyabiznis:
Just thought i'd chuck my 2 cents in... Got a z5 compact in mint condition today and the bootloader unlock is not allowed... I have dealt with this problem once before on a phone I sold about a week later and suffered the consequences of having NO phone rather than one that had NO modding ability.

I F*"#!^G HATE that they make it so you can't unlock the bootloader... WHY? Its my phone I want to be able to do whatever I want with the software and by proxy, the hardware. Yet some C*#!? Has thought it necessary to make it so I don't have the ability to do so, for what gain?

Who benefits from making it so you can't unlock the bootloader?

...seriously regretting chucking my z1c at the wall now that phone was still going strong until about a week ago when I broke it :(
[Xperia Z5 Compact General] nilezon:
FYI: DRM keys can (most likely) be dumped using system privileges, which is easier to achieve than root.

Gaining system privileges is claimed to be possible using a Stagefright exploit, but I have not yet succeeded.
[Xperia Z5 Compact General] kafisc:
Thank you so much for your response. Please let me know if i can support you in any way.

I wish you luck.
[Xperia Z5 Compact General] daanp123:
In for 15eu

---------- Post added at 07:49 PM ---------- Previous post was at 07:45 PM ----------

Isn't there a website or something where you can pledge and directly deposit the funds?

I think it would be more interesting if everyone put their money on the table right away.
[Xperia Z5 Compact General] farfetch:
I'm in for 10€
[Xperia Z5 Compact General] ths_:
Count me in for $50.
[Xperia Z5 Compact General] criscodecookies:
Only Stagefright 2.0 (CVE-2015-3876 and CVE-2015-6602) are available on the first original Z5c firmware so I'm just curious how you're trying it when the proof of concept is not publicly available.

Unless you're creating one by looking at the code?
[Xperia Z5 Compact General] TheEndHK:
so I think there is still no way to dump TA in near future? I want to unlock my Z5c now.
[Xperia Z5 Compact General] nilezon:
That is incorrect:

http://youtu.be/-HCIsBKg6z4
[Xperia Z5 Compact General] CLShortFuse:
Put me down for $25 for Z5C and another $50 for Z5P
[Xperia Z5 Compact General] girthmaul:
I pledge $10 to the cause.
[Xperia Z5 Compact General] FlipFlopHHJ:
I'm in for 15€
[Xperia Z5 Compact General] electusrum:
Count me in with 20 ‎€ too.
[Xperia Z5 Compact General] burk3:
I'll throw in $100 for this.
[Xperia Z5 Compact General] criscodecookies:
I'm in for $30
[Xperia Z5 Compact General] the fez:
un altro monzese su xda... che storia :D

like the z3compact bounty i'm in for 19 dollars :)
[Xperia Z5 Compact General] UggaBugga:
Count me in for 15 €
[Xperia Z5 Compact General] Birba:
Chrome Exploit Allegedly Gives Root Access to Virtually Any Android Device

Will this link help to get root?

http://gadgets.ndtv.com/mobiles/new...access-to-virtually-any-android-device-764811
[Xperia Z5 Compact General] Drakorcarnis0:
I think this thread should be replicated in Z5 and Z5 premium forums as those phones are almost the same (except the screen).
[Xperia Z5 Compact General] smartphone-tester:
I pledge 25€ for a root exploit that will keep DRM keys on the TA partition intact.
[Xperia Z5 Compact General] Barthlon:
I'm in for 10 euros
[Xperia Z5 Compact General] kxf41:
I'm guessing the reason is to cut down on warranty claims from people wandering into the carriers high street stores with bricked or internally melted devices, as i have once done with an old Xperia T. They had to replace the device they couldn't prove it was me that caused the internals to meltdown by messing with kernel settings i had no idea about lol

Anyway, I'm hoping this dirty cow bug that has been discovered is a possible way to get permanent root on our devices with non unlockable bootloaders.......
[Xperia Z5 Compact General] mindyabiznis:
Yeah could be awesome, I'd still like a little more than just root though I mean it's better than nothing but I'm much more comfortable when I have access to the kernel and can boot custom ones for hw tweaks I know I'm safe to do... That and FauxSound :laugh:
[Xperia Z5 Compact General] Laplazer:
Has anyone attempted to try rooting with dirty cow bug? Can someone confirm that it is indeed possible to root phones with locked bootloader with that bug.
[Xperia Z5 Compact General] ninestarkoko:
Unfortunately it will never be possible to have permanent root SuperSu because you cannot modify boot or system partition. Unless someone creates a layer for the temporary root and run it on every boot redirecting requests to SuperSu in some way to have "basic" root access for apps.

There was a way somewhere in HTC forums to use titanium backup using SuperSu from a folder in /data after gaining temporary root access through an exploit. It worked if I remember well
[Xperia Z5 Compact General] Baradoura:
So it'll be possible someday or not? I can't understand
[Xperia Z5 Compact General] bruno$0:
as promissed i will donate the value that i told to [MENTION=3975929]zxz0O0[/MENTION] that create a method to extract the TA partition.
[Xperia Z5 Compact General] DarkHertZ:
some notice?

I come from z3 compact and there if it can be root with bootloader locked :c
[Xperia Z5 Compact General] schumifer:
It might be so now that sony turns a blind eye and covers phones with relocked bootloaders but

NOTHING

guarantees that one day sony won't simply decide that

all mobiles that come in for a repair under warranty will be double-checked against the b/l unlock database.
[Xperia Z5 Compact General] smartphone-tester:
root seems to be necessary

At least on the Z3 compact (on which I have root with DRM keys intact), the /dev/block/mmcblk0p1 partition is readable by group "tad", which the "system" uid/aid doesn't seem to be a member of. At least su'ing to user system does not grant read access to the block device. I therefore don't believe that system privileges will be enough without further escalation.

Maybe somebody with root (unlocked BL with TA partition wiped) on the Z5 compact could confirm the permissions for reading this partition?
[Xperia Z5 Compact General] nilezon:
You are right, the TA partition is readable by root user and tad group.

However, the tad user is used only for running the tad_static binary (in init scripts), which exposes a stream socket at /dev/socket/tad.

This socket is readable by system user, and as far as I can see, it will give us the required DRM keys.
[Xperia Z5 Compact General] Ernstjan:
€25,- for me
[Xperia Z5 Compact General] Roelosaurus:
Put me up for €4.20. The one that find it is straight up baller and deserves all the riches for it!
[Xperia Z5 Compact General] clriis:
I'll add €20
[Xperia Z5 Compact General] qery:
count me in for 10 euros.
[Xperia Z5 Compact General] vibo2013:
I'm in with 15€
[Xperia Z5 Compact General] smartphone-tester:
tad_static binary

Interesting - I didn't look at the binaries executed with those privileges so far. Do you have some docs on what tad_static actually does and what the protocol is on /dev/socket/tad? Does it allow to fully dump the partition (in terms of bytewise copying) or "only" some sub-parts of it? In the latter case, do we know how to recreate the partition after it has been cleared by the bootloader?

I have 2 Z5 compact in a research project and 1 Z3 compact that is already rooted with DRM keys backed up. Unfortunately, my time is very limited right now, so I may be able to assist with some testing but am highly unlikely to get too deeply into reversing binaries etc.
[Xperia Z5 Compact General] nilezon:
I have not been able to dump the partition using tad socket. I can read specific parts, including DRM keys. I'm not sure if it is enough to re-create the TA partition - probably not.

However, since this socket is what's used by Sony's code to check DRM keys, we can of course retrieve the DRM keys, and then intercept future requests to tad socket and spoof the response with correct DRM keys, i.e. a replay attack.
[Xperia Z5 Compact General] lutanica:
I'm in with 15€

I'm in with 15€
[Xperia Z5 Compact General] schmolch:
20€ from me
[Xperia Z5 Compact General] the_brad:
Count me in with 10€ and another 20€,when successful for z5p, too.
[Xperia Z5 Compact General] Funkmasterchilla:
I think Z5 and Z5P should be added since they share the same software and this thread moved to cross device general maybe? Z4+ users could be interested too as they're facing the same situation. I'm in for 10€!
[Xperia Z5 Compact General] bubimir13:
i agree with this, if joined with Z5 and Z5P there will be a lot new pledgers and bounty would be much higher
[Xperia Z5 Compact General] raptuz:
€25
[Xperia Z5 Compact General] tania247260:
Hello are you going to do something or this is just namely
[Xperia Z5 Compact General] daanp123:
Agreed, add the other ones, makes sense.
[Xperia Z5 Compact General] farfetch:
Since water gone in my unlocked Z5c and I mighty have to buy another one, I raise my offer from 10 to 20 €

(for root, basically, w/o lose warranty & drm)
[Xperia Z5 Compact General] DeanoBurrito:
$50
[Xperia Z5 Compact General] ninestarkoko:
sorry for being off topic but I do have to ask:

did sony refuse to replace the phone?

i see we're in the same country so i'm interested in the subject
[Xperia Z5 Compact General] farfetch:
With unlocked BL it is useless to ask.

:(
[Xperia Z5 Compact General] harrywarry:
I had waterdamage and unlocked bootloader.

Received a new phone under waranty (z2 in the Netherlands)
[Xperia Z5 Compact General] langeveld024:
Interesting, im from Netherlands too. What region, store and provider?

I got my Z repaired 2 months before end of warranty, but just to be on the safe side I restored my DRM keys/bootloader before returning it. (Which I luckily have in a backup)
[Xperia Z5 Compact General] Flapperbol:
Like Harrywarry states, you should be able to have it repaired under warranty.

Sony can state you'll lose your warranty after unlocking the bootloader, but that's just (partially) bluffing.

If you unlock the bootloader and screw up software wise (e.g. bricking) then it's probably no use asking Sony to repair it since you are responsible for the damage

If you unlock the bootloader and have a hardware defect that is in no way related to the unlocking of the bootloader -> You'll still have warranty for that.
[Xperia Z5 Compact General] harrywarry:
Deleted...

---------- Post added at 06:21 AM ---------- Previous post was at 06:17 AM ----------

I bought it at Belcompany with a Vodafone contract in Zwolle
[Xperia Z5 Compact General] farfetch:
They refused to repair it under warranty.

It isn't worth to pay for it, since they have to fix 'waterproofing', check both cameras, check display, and check all other stuff... Sorry for the OT
[Xperia Z5 Compact General] arjun.arora:
I'm in with 30$ if it can successfully root Z5P Dual..
[Xperia Z5 Compact General] ninestarkoko:
sorry to hear that... if it was me i would have insisted, if it wasn't my responsibility for the disaster but Sony's unreliable waterproof certifications. I don't know if warranty is void on bootloader unlocking, but if it is so, it must be written somewhere.

Thanks for the info, closing off topic
[Xperia Z5 Compact General] williamgrant:
The 1 of January is coming, and no any interesting news... :(
[Xperia Z5 Compact General] nvrd:
Doesn't the EULA when unlocking the BL just state that it "MAY void warranty"?

Either way, I'm having a hard time believing that Sony could argue their case in court or against any sort of consumer watchdog body, atleast in Sweden where I live.

Edit: I'll chip in 20 usd to whoever manages root without unlocked BL.
[Xperia Z5 Compact General] rib king:
I'm in for 20$
[Xperia Z5 Compact General] Barthlon:
i know there are different time zones in the world, but do you just 'skip' entire months where you live?

be patient young padawan
[Xperia Z5 Compact General] williamgrant:
Relax, I know when starts the new year. But the (winter :) ) January is coming, and

no any interesting news.
[Xperia Z5 Compact General] orrorin:
I'm in for $20
[Xperia Z5 Compact General] camaro322hp:
20 USD
[Xperia Z5 Compact General] kanthai:
$20 for my Z5 please
[Xperia Z5 Compact General] tgwhth:
20€ for my Z5
[Xperia Z5 Compact General] thedreamix:
20 € for Z5
[Xperia Z5 Compact General] langeveld024:
€20
[Xperia Z5 Compact General] zippy01:
I agree as I don't think all the people who put a bounty would pay up in the end and if 100 people pledged then that would be a lot of work for the person claiming. If that was to happen I would pledge some monies and pay otherwise I'll not bother
[Xperia Z5 Compact General] :
15€ for Z5
[Xperia Z5 Compact General] langeveld024:
But if nobody reached the goal at the end of the line(which - unfortunately- is very likely), all the money has to be transferred back.

Anyway, I don't mind both ways, I just need root before unlocking lol.
[Xperia Z5 Compact General] sartheris:
Why people don't wait for the 6.0 upgrade first?
[Xperia Z5 Compact General] marksms:
i'll add 20 for z5c or z5p duo
[Xperia Z5 Compact General] zippy01:
Because if we get one rooted rom then pre-rooted roms maybe possible. Sorry little offtopic
[Xperia Z5 Compact General] sxtester:
Please read the OP again, all money is being transferred upon root exploit only. So, nothing to transfer back or such.

Bit short period to my mind, would suggest to extend at least till end of Feb. 2016.

Anyway, count me in for 50 EUR, no matter whether I keep my Z3C or not. :p

As I'm getting tired of this whole procedure over and over again, I've actually suggested Sony to protect their valid stuff by other means in future devices here: http://xdaforums.com/showpost.php?p=64038010&postcount=50
[Xperia Z5 Compact General] langeveld024:
I understand what's in OP. Read the post quoted in my post.
[Xperia Z5 Compact General] sxtester:
Haha, never mind, my misunderstanding it seems. :o
[Xperia Z5 Compact General] ninestarkoko:
you were completely ignored, unfortunately.

For the expiration date thing, maybe it was also enstablished to prevent people magically finding root exploit on September 2016 or abusing in other ways the bounty opportunity. So clearing and restarting the bounty might help. Or simply, if anyone doesn't find an exploit, some people might lose the interest in the Z5 line and choose another phone. Don't know which was the OP's intention
[Xperia Z5 Compact General] sxtester:
True, but this is a thing that takes time. Anyway, I've not given up my hopes that one fine day...

That's correct, but all the SD810 devices (not only those from Sony) anyways are somewhat an intermediate thing to me. I mean, yes, they appear to have it under control now (heat and all), but not too long and the SD820 will be ready, I suppose.
[Xperia Z5 Compact General] hartmark:
I'd like to pledge 10€
[Xperia Z5 Compact General] vansmuk:
20 EUR here, on a Z5Premium contingency :)
[Xperia Z5 Compact General] lpchaz:
Z5 here and 10€
[Xperia Z5 Compact General] sxtester:
[MENTION=4238616]kafisc[/MENTION]

Looks like you missed to update/reflect my 50 EUR in the list. Should go between "marksms - 20€" and "hartmark - 10€". ;)
[Xperia Z5 Compact General] kafisc:
pledge added

Thank you for pointing that out. I've added your pledge. :)
[Xperia Z5 Compact General] xda_shinyda:
i pledge 10$, and 5$ for z5p
[Xperia Z5 Compact General] inteltecra1700:
I pledge $20USD
[Xperia Z5 Compact General] williamgrant:
Useless offtopic question... Another better: Is this a problem for you? Why?
[Xperia Z5 Compact General] halfblack:
10$ on Z5.