yashsingh1/xdaforums huggingface dataset:
[Xperia Z5 Compact General] Sadman Khan:
Exactly. It doesn't really matter on which firmware the root is achieved. Any firmware would do. The later versions can just be flashed as prerooted zips
[Xperia Z5 Compact General] zippy01:
Does anyone know what this means in detail?

Thank you
[Xperia Z5 Compact General] the_brad:
I guess, it means, these apps are allowed to change system settings such as ringer mode, sync-accounts, etc...

nothing, that helps you root your phone (if that's, what's on your mind)
[Xperia Z5 Compact General] bruno$0:
We just can make a mod on this apk and try to perform the access to the TA folder. Maybe its better we focus on TA partition. The root comes after open bl.

Backup Ta->open lb->root->restore Ta.
[Xperia Z5 Compact General] dayofdoom:
i am out
[Xperia Z5 Compact General] langeveld024:
I'm out too..
[Xperia Z5 Compact General] yannik~:
If the submission contains any binaries necessary to obtain root, the author will have to provide sources for these binaries to be eligible for my pledge.
[Xperia Z5 Compact General] the_brad:
I'm out, too.

Gesendet von meinem E6853 mit Tapatalk
[Xperia Z5 Compact General] hipsterfont:
http://blog.trendmicro.com/trendlab...droid-vulnerabilities-allow-easy-root-access/

Here's our in, someone just needs to see which firmware version is vulnerable.
[Xperia Z5 Compact General] Elfeno:
It seems to be kernel related and our current kernel seems to be vulnerable :D Waiting for them to release more details about this exploits :D Hoping it will speed up rooting dev on LB :) Is kernel updated at each update and if yes can it be downgraded ?
[Xperia Z5 Compact General] zippy01:
It is easier to downgrade because it's signed.
[Xperia Z5 Compact General] langeveld024:
It was already found.

.11 fw is vulnerable at several points, however, rooting is not possible due to dm-verity and Sony ric which prevents modify system.

If u search this thread you'll find more about it.
[Xperia Z5 Compact General] cc546:
Anyway the most important thing at the moment is - does the "drm emulation" trick works on 6.0?
[Xperia Z5 Compact General] KbaB.BroS:
Please check the corresponding thread for the DRM emulation. That question has been answered at least 2 times.
[Xperia Z5 Compact General] cc546:
I read the last 10 pages of the thread and saw only 1 post by OP saying he had no problem on the concept build but no one mentioned if it worked in this final build.
[Xperia Z5 Compact General] KbaB.BroS:
Wrong thread, this is the one:

http://xdaforums.com/xperia-z5/development/sony-credentials-restore-unlocking-t3296383
[Xperia Z5 Compact General] emko7:
I'm out, don't have a Z5 anymore
[Xperia Z5 Compact General] the_brad:
But wouldn't it be enough to achieve temp root to being able to backup drm keys? Doesn't that need some working systemless root?
[Xperia Z5 Compact General] langeveld024:
Never heard of "systemless" root, but if someone invents it it might be possible.

Though I personally unlocked my bootloader as there's a fix now for Drm and it works on Marshmallow.
[Xperia Z5 Compact General] zippy01:
Chainfire released systemless root maybe the vulnerability can be used to gain systemless root and install a recovery so we can flash the z3 ricdisable

Probably not but I'll have a poke around anyway
[Xperia Z5 Compact General] the_brad:
http://www.xda-developers.com/chainfire-releases-root-for-android-6-0-without-modifying-system/

seriously? I mght get this wrong, but it seems to work that way...
[Xperia Z5 Compact General] AndroPlus:
For system less root, kernel patching is needed.

It is not for locked bootloader for now.
[Xperia Z5 Compact General] honam1021:
Lots of US carrier phones /w locked BL are getting new root methods in the last few days (Note 3, S6, V10), if I were you I would wait for a few more days to see if any of them can be ported to Z5
[Xperia Z5 Compact General] zacharias.maladroit:
But possibly will be soon:

I opened a thread about that topic:

http://xdaforums.com/xperia-z5/general/root-using-vulnerabilities-snapdragon-t3338173

http://buysoft.greatsoftline.com/vu...m-snapdragon-chip-allow-for-easy-root-access/

https://source.android.com/security/bulletin/2016-03-01.html

bummer :(
[Xperia Z5 Compact General] honam1021:
A tethered root for dumping TA partition is still better than nothing. You can backup your keys, unlock BL and install insecure kernel+DRM restore for root. It's pointless to keep your phone locked if you can backup your TA partition and able obtain an unlock code.
[Xperia Z5 Compact General] chronicfathead:
I'm in for $25.
[Xperia Z5 Compact General] ninestarkoko:
I agree. Moreover a temporary root access can satisfy the bounty requirements, as it's not specified that it must be permanent.

However, root exploits together with "live" or "tethered" root solutions seem to be the future for Android devices with locked bootloader, as Verified Boot is going to be widely adopted. Here's an article about US carrier versions of Galaxy s7

http://www.xda-developers.com/galaxy-s7-bootloader-lock-explained-you-might-not-get-aosp-after-all/
[Xperia Z5 Compact General] frostmore:
Quick question,

I saw on a forum post, whenever you use flash tool to flash ftf files, the messages it displayed shows that it can access TA partition (to read i guess).

So, if flash tool can access TA partition during flash, could it also be use(a hack of sorts) to backup TA partition?
[Xperia Z5 Compact General] ninestarkoko:
Nice question which needs a technical answer. Maybe it's too complicated to edit/hack the software or editing may prevent a signature-based process of phone recognition.

You could ask [MENTION=2807379]Androxyde[/MENTION] , which is the developer of a custom Flashtool edition (that added support for xperia Z3+/Z4)

http://xdaforums.com/showthread.php?t=920746
[Xperia Z5 Compact General] Flummi.FFM:
May i mention that we have actually a new discussion thread open about one more possibly method to achieve root?

I found a unfixed security hole in the 32.0.a.4.11 build i think..... Fingers crossed that someone will be able to use it......

For those who are interested in follow the thread:

http://xdaforums.com/xperia-z5/gene...oot-waited-t3343839/post66011376#post66011376

Greets and cheers!
[Xperia Z5 Compact General] idler1984:
[MENTION=5571967]ninestarkoko[/MENTION] notified me about this bounty. Myself is not using Sony devices anymore but anyone interested in making a working exploit could refer to the PoC I posted last Dec: https://github.com/idl3r/testcode. It works on Nexus 6P, which shall also work on Z5/Z5P as well. Just a kernel jop/rop chain and overwrite the ptmx_fops entry would do the job.
[Xperia Z5 Compact General] Smedslund:
Im in with 10€
[Xperia Z5 Compact General] uripiruli:
Is This bounty open yet???

If the answer is yes, Im in with 5€

Enviado desde mi E6653 mediante Tapatalk
[Xperia Z5 Compact General] bruno$0:
Yes. Some guys found interesting point a few days ago.
[Xperia Z5 Compact General] haoLink:
I wonder. If i throw in some money would you also try to do it for the Z5 Compact. I imagine it's similar enough and has the same vulnerability - and getting the TA partition would solve it.
[Xperia Z5 Compact General] zippy01:
Wasn't the thread based on the z5c anyway and in the compact forum ?
[Xperia Z5 Compact General] chronicfathead:
The first post needs updating, as several people have said they're out, and others have donated.
[Xperia Z5 Compact General] langeveld024:
Yeah looks like the OP is out too :p
[Xperia Z5 Compact General] Aeny:
kafisc	€	25.00
AiMwasNeD	€	20.00
mele80	€	10.00
Romka_by	€	10.00
limduldk	€	10.00
juupke76	€	00.00
yannik~	$	15.00	author will have to provide sources for these binaries to be eligible for my pledge.
williamgrant	€	20.00
gustav_b	€	50.00
hispanico957	€	05.00
Farfetch	€	20.00
ths_	$	50.00
CLShortFuse	$	25.00
CLShortFuse	$	00.00	if also successful on Z5P
girthmaul	$	10.00
FlipFlopHHJ	€	15.00
electusrum	€	20.00
burk3	$	100.00
criscodecookies	$	30.00
the fez	$	19.00
UggaBugga	€	15.00
Smartphone-tester	€	25.00
Ernstjan	€	25.00
clriis	€	20.00
Qery	€	10.00
Vibo2013	€	00.00
Lutanica	€	15.00
schmolch	€	20.00
the_brad	€	00.00
the_brad	€	00.00	if also successful on Z5P
Funkmasterchilla	€	10.00
DeanoBurrito	$	50.00
Roelosaurus	€	04,20
arjun.arora	$	50.00	If also successful on Z5P Dual
rib king	$	20.00
Orrorin	$	20.00
camaro322hp	$	20.00
kanthai	$	20.00
tgwhth	€	20.00
thedreamix	€	20.00
langeveld024	€	00.00
marksms	€	20.00
sxtester	€	50.00
hartmark	€	10.00
bahkata	€	20.00
lpchaz	€	10.00
xda_shinyda	$	10.00
xda_shinyda	$	05.00
inteltecra1700	$	20.00
halfblack	$	10.00
sovanyio	$	20.00
Aeny	€	20.00
Bruno$0	$	10.00	If the method works on Z3+ too
[NUMINIT]	€	20.00	If it also works on the Z3+/4
Aeny	€	20.00	If released with all source code
dayofdoom	€	00.00
cngn	$	100.00
Whitenight639	€	10.00
Deaix	€	15.00
GeramanX	$	25.00
LazyLucretia	$	05.00	For root without bootloader unlock
LazyLucretia	$	25.00	For all DRM functions on unlocked bootloader
Ciopik	$	05.00
Patrykinfo27	€	05.00
jzdhgkd	$	10.00
Indianmeister	$	10.00
drugone	$	10.00
Alex2221	€	15.00
honam1021	$	30.00
spyvsspy	$	20.00
ASLANOO	€	00.00
ali112	€	20.00
tsolx2001	€	25.00
stclem	€	10.00
Smokey_Steve	$	20.00
vacuumocean	$	40.00
theskig	€	10.00
Amadib	€	20.00
emko7	$	00.00
leobiagi	$	15.00
lexxm6	$	10.00	Please confirm
123Yamaha123	€	15.00
Paiji	€	20.00
langeveld024	€	00.00	Only if ali112 finds an exploit by himself
nikodicht	€	25.00	If root for locked BL Z5 Premium
chronicfathead	$	25.00
Smedslund	€	10.00
uripiruli	€	05.00

Total amount of euros	€	760.00
Total amount of dollars	$	854.00

-Those who are out have had their pledge set to 0.

-List updated with new pledges

-Next bounty: adding table and spoiler tags to this forum.. If someone else wants to format the mess correctly be my guest.

-If any users on my unofficial list want to get out since it's past the deadline be my guest. I'm still in though. I don't think that I have the power to extend the deadline, it's not my thread. Just keeping count until OP returns.

~Aeny
[Xperia Z5 Compact General] frostmore:
temp root Found!!

http://xdaforums.com/xperia-z5/general/cve-2015-1805-lb-root-waited-t3343839/page7#post66094536

does that mean the bounty can be claimed??
[Xperia Z5 Compact General] CLShortFuse:
I've already unlocked the bootloader on the Z5P, just just $25 for the Z5C. Hopefully this all pans out well.
[Xperia Z5 Compact General] bubimir13:
So far no, temp root is only for backing up TA part but there is yet no full usability for locked bootloader like on previous Z series. But i guess its better then nothing.
[Xperia Z5 Compact General] vibo2013:
Thought this would only go until 1st of march? Well, since I've unlocked my bl a while ago I'm out, sorry.
[Xperia Z5 Compact General] camaro322hp:
You are correct - according to the OP, this bounty expired on March 1.
[Xperia Z5 Compact General] bruno$0:
For my no worry about the money even just because we Will need that someone works in permanent root method. If the bounty date matters the people that join here dono need to indicate his out or a New joining. 10 dollars wont be make more poor...
[Xperia Z5 Compact General] chronicfathead:
I'm not bothered about deadlines, I just want the ability to back the TA partition and restore in the future. Without that I don't want to flash custom ROMs. Had to send my Z5 back as the finger print sensor is borked, so I'm glad I didn't unlock.

Missing the Z5, and it's only been a couple of days, so the device is fantastic, and this is my first Sony!
[Xperia Z5 Compact General] bruno$0:
If ric's Blocks Write directly on system and the custom kernel does, why we just make the backup of TA, open the bootloader, root, then reatore TA and White original kernel again? This cause some problem? Bootloop?
[Xperia Z5 Compact General] arhangel78ru:
- DM-Verity: Android is now using dm-verity to verfy the integrity of the system partition. Until you switch it off your phone won't boot after modifying /system

- SONY RIC: RIC is blocking the write access to the system partition

http://xdaforums.com/xperia-z5/development/root-automatic-repack-stock-kernel-dm-t3301605
[Xperia Z5 Compact General] zxz0O0:
Guess I'll claim this bounty now if there is still someone in

http://xdaforums.com/crossdevice-dev/sony/iovyroot-temp-root-tool-t3349597/
[Xperia Z5 Compact General] bruno$0:
But this was my method to root my older Z1. Sony add some checks to void this?

Currently the only way to get root is open the BL?
[Xperia Z5 Compact General] chronicfathead:
Not able to try at the minute, as I'm PC and Z5 less. Is it a case of unzipping and then running iovyroot which calls the script files to backup or restore?

To be clear, can you temp root and backup the TA partition, unlock bootloader etc and then at a later date, restore the TA partition so Sony won't really seeing that anything has been done using your method?

If so I'm happy.

Can anyone confirm this as working and that zxz0O0 should be allowed to claim the bounty? I haven't been following recently.

EDIT:

Read the thread from start to finish and your tool meets all my needs.

Sent my $25.
[Xperia Z5 Compact General] bubimir13:
You should... And buy a frickin Z5 series device so we have more goodies from you :laugh:
[Xperia Z5 Compact General] mele80:
Have you tried reach op? Do you know if this temp root is accessible on MM in future?
[Xperia Z5 Compact General] hartmark:
I have donated now.
[Xperia Z5 Compact General] FlipFlopHHJ:
Donated my pledge :)
[Xperia Z5 Compact General] mele80:
Bounty Z5 Lineup - Root with locked bootloader &amp; working DRM-keys

Donation done!
[Xperia Z5 Compact General] limduldk:
donated...
[Xperia Z5 Compact General] bruno$0:
How to donate?
[Xperia Z5 Compact General] mele80:
Bounty Z5 Lineup - Root with locked bootloader &amp; working DRM-keys

Check zxz0O0's paypal account from member info page
[Xperia Z5 Compact General] Aeny:
Donated however much was still in my PayPal account.

~Aeny
[Xperia Z5 Compact General] camaro322hp:
Pledge paid. Thanks for all your hard work over the years on the Xperia line [MENTION=3975929]zxz0O0[/MENTION]
[Xperia Z5 Compact General] girthmaul:
Donation made, thank you!
[Xperia Z5 Compact General] Quick999:
[MENTION=3975929]zxz0O0[/MENTION]

Donation made 20 bucks to show some respect!

Greetings from CH
[Xperia Z5 Compact General] kerngehirn:
am i missing something?

this isn't a root with locked bootloader is it?

i don't want to unlock my bootloader.
[Xperia Z5 Compact General] LazyLucretia:
I'm a little lost here so correct me if I'm wrong. So with this tool I can backup my TA pattition, then I can use another tool by another developer to non-temporary root my device with all DRM functions still working, then if something goes wrong I can flash stock rom and restore my TA partition to have my DRM keys back right?
[Xperia Z5 Compact General] zxz0O0:
You can use my tool to backup TA partition. After unlocking bootloader you can use the other tool and it will basically inject your DRM keys from the TA backup to your current TA and make the phone believe the bootloader is actually locked thus keeping all DRM features intact while having the possibilty of booting custom kernels.

With the TA backup you can also properly relock the bootloader again.
[Xperia Z5 Compact General] camaro322hp:
Technially, yes, you are correct. This is not root with a locked bootloader.

However, you are essentially getting the same thing if you back up your TA first. After unlocking your bootloader and rooting, there is a procedure to restore all the TA functionality lost by unlocking the bootloader, so you're not losing any functionality there. Also, if you need to relock your bootloader and restore your TA partition for warranty service or something else, you can do that with the TA backup you made first. So, yes, you are unlocking your bootloader, but the risk is very low thanks to the TA backup. The availability of this TA backup was enough for me to go ahead and unlock the bootloader.
[Xperia Z5 Compact General] kerngehirn:
So what about my warranty?

Sony knows I unlocked my device. I need to get an unlock code with my IMEI. Don't they check that in case of warranty claims?
[Xperia Z5 Compact General] Sadman Khan:
They will check. But if you restore your TA backup, you will get your warranty back. It'll be as though you never unlocked it. The thing is, JUST BECAUSE you took the code from Sony, does NOT mean that you USED it. So just because you took the code, it doesn't mean that your warranty is void. It will only be void when you proceed to unlock it with that code. But if you make a ta backup before, and restore it afterwards, you get your drm keys back and bootloader will be locked again and hence your warranty will be back
[Xperia Z5 Compact General] uripiruli:
Donation done!!

Thanx zxz0O0
[Xperia Z5 Compact General] kerngehirn:
Okay, thanks. After this process i will have a rooted device with a locked bootloader? Do i need to unroot before RMA?

Thanks
[Xperia Z5 Compact General] xsacha:
Thanx zxz0O0.

Lucky someone actually gave you bounty :P I got first unlocked z2 root and received $0.

Happy to just watch this one -- thanks for the tool.
[Xperia Z5 Compact General] mele80:
Too bad if people doesnt do what they promised.

Dont know if op is active, but maybe he should send private message to the pledgers. Maybe that way zxz0O0 would receive more donations.
[Xperia Z5 Compact General] xuke5664:
What's going on? zxz got no bounty?
[Xperia Z5 Compact General] mele80:
Bounty Z5 Lineup - Root with locked bootloader &amp; working DRM-keys

Well of course i dont know how many has give bounty for zxz, but only few has said to do so. Zxz has only asked bounty once and no private message about bounty from op or zxz

Edit: actually zxz should ask pledge via private message as said in op.
[Xperia Z5 Compact General] zxz0O0:
I'm not messaging people because I'm not begging. Those who are honest and appreciate my work fullfill their pledge. As of today I received around 250$, thanks to those who kept their word. Of course technically the root tool is also one month late since the OP says the bounty will expire on March 1st.

It's very common that less than 30% of the actual bounty is donated that's probably why some devs like jcase started selling their tools.
[Xperia Z5 Compact General] mele80:
That's true you were little bit late :). But thanks to you i have now rooted phone, backup from ta and drm restored :).

Well hopefully more people will give you donation, because it is also way to keep developers interested.
[Xperia Z5 Compact General] mhaha:
Here's the thing. The bounty had very specific terms to which pledgers agreed. Technically speaking, zxz0O0 did not meet the terms, therefore pledgers are not obligated to donate.

No promises were broken. Any donations he received now is out of pure goodwill from people who appreciate his work regardless of the terms of this bounty.

Personally, I do believe he deserves more recognition for his accomplishment in many ways including monetary-wise.

However, it should not (and zxz0O0 admirably does not) be demanded from pledgers in this bounty, and pledgers definitely should not be shamed for not donating.
[Xperia Z5 Compact General] williamgrant:
What is the method. If I just pay with the donate button is okay or wait for the bounty close?
[Xperia Z5 Compact General] zxz0O0:
Yes you can donate via the Donate button :)
[Xperia Z5 Compact General] williamgrant:
Done. :)
[Xperia Z5 Compact General] the fez:
i'm one of them that didn't pay

the reason is that i don't want to unlock my bootloader. even thought i can re-lock and restore dmr keys.

that's it!

unfortunately i broke my front glass (and sometimes the touchscreen) to many times and in this case i don't wanna trouble when i bring the phone to assistence

in past i've donate in the z3c post and zxz can confirm this, but when i've partecipated to this bounty i'll do it for root with locked bootloader.

obviously i appreciated all effort of zxz and thank him for all his work

but after i9000, p1000, xperia z, z3c, and now the z5c i'm tired to do many passages for any phone (the worst user of xda, user who wants everything right away without concussions :D)

cheers
[Xperia Z5 Compact General] void1333:
just a thought..

if we can get to our drm keys and back them up, and simulate new ones.. why can't we simulate our own keys..

---------- Post added at 01:13 PM ---------- Previous post was at 01:05 PM ----------

or use our own keys?
[Xperia Z5 Compact General] federico9292:
I just don't get it.

We have to unlock the bootloader, thus losing DRM keys, to gain root permission, so we can backup the TA Partition (opening a su shell to copy the protected TA folder and the key previously lost) with Backup-TA tools?

sorry guys. I don't understand. can someone explain?

we unlock BL -> losing DRM keys --> but gaining root privilege --> for the backup TA folder with DRM Keys inside

doesn't make sense
[Xperia Z5 Compact General] caqo71:
No. With temporary root, you can first backup your TA partition (with DRM keys), and then unlock your bootloader. So. fist backup your TA, and then unlock.
[Xperia Z5 Compact General] mele80:
Bounty Z5 Lineup - Root with locked bootloader &amp; working DRM-keys

You will first gain temp root access after that --> backup TA folder --> unlock booloader --> access root again --> and after you can also restore DRM keys with specific tool

Edit: too slow
[Xperia Z5 Compact General] federico9292:
oh thanks, that part was clear to me, but the program says unsupported device... i've got z5c 32.1.A.1.185, obviously with debug and oem unlock activated
[Xperia Z5 Compact General] mele80:
You will have to first flash to Lollipop, it wont work with Marshmallow. After that you can get back to Marshmallow
[Xperia Z5 Compact General] federico9292:
aaah ok ok now it's clear! I think that i'll wait for a root with untouched bootloader then, since I care for my data and don't like to backup and restore and bla bla xD

ah... I miss the sweet towelroot time. Miss it so much... no worries and simple as downloading an apk.
[Xperia Z5 Compact General] chronicfathead:
I think you will be waiting a long time, if it ever comes.

The solution we have now allows us to backup the important info on our phones so we can do what we want. In the future you can use the backup to restore back to factory for selling on or warranty return.
[Xperia Z5 Compact General] GeramanX:
You just need to give it a try, even me, an average user did it.

Just take your time, follow the steps and believe in yourself.
[Xperia Z5 Compact General] MrThumb:
i took your advice. but at the first hurdle im stuck.

in flashtool, i connect my phone while holding down volume down as per instructions with USB debugging enabled. and i get ..

09/034/2016 12:34:28 - INFO - Device connected with USB debugging off

09/034/2016 12:34:28 - INFO - For 2011 devices line, be sure you are not in MTP mode

i cant even get it to flash. any ideas?
[Xperia Z5 Compact General] GeramanX:
I'm not an expert but let's see what I can do for you before I go to bed and meanwhile someone else come to help.

Did you install the Z5 drivers already?
[Xperia Z5 Compact General] MrThumb:
I already have the sony companion installed, i installed the flash tool. and after i installed the flash tool drivers while driver signature mode was disabled.

i made sure debug mode was on, and its failed every time. i also tried turning it off with volume UP and power to ensure its was all the way off.
[Xperia Z5 Compact General] ronniem88:
Any chances to get root with locked bootloader in near future ? if it is then im in with 10$ NZD.

Cheers
[Xperia Z5 Compact General] GeramanX:
Not likely.

Now MrThumb, back to you, the same happened to me, I had to use my Windows 7 desktop pc to do it, that's what worked for me.

Try it.
[Xperia Z5 Compact General] mhaha:
The log file says you don't have USB debugging enabled.

Are you positively sure you enabled developer mode, and turned on USB debugging within the developer mode settings?
[Xperia Z5 Compact General] MrThumb:
100%. i even turned it off and tried it incase the switch was bugged. hah