yashsingh1/xdaforums huggingface dataset:
[Sprint HTC One (M9)] kaosb0x:
yeah, get a refund or give up...editing the imei isnt like editing a build.prop heh...and if you cant get a refund get something for it as its now a paperweight, if you have money then just simply go buy a used one online from swappa, ebay etc..
[Sprint HTC One (M9)] sirbrent503:
Sorry to hear about your troubles. Sprint is a real bastard with FEC. This phone can do GSM, you could take it to T-mobile but you would first need to do a simunlock on the phone. There are two kinds, domestic sim unlock and international sim unlock. You will need to have a domestic sim unlock done on your phone before it will accept a t-mobile sim card. Also, the phone will do voice and 3g okay but LTE support is limited (sprint version does not support all of the lte bands which t-mobile uses).

Honestly you are probably better off selling the phone on Swappa (assuming you werent able to refund from seller). Phones with FEC problems will usually work on Sprint directly, but not with MVNOs. When buying a sprint phone for a MVNO always ask the seller to check the IMEI at your operators website or ask for the IMEI to check yourself.
[Sprint HTC One (M9)] kissyhot:
May be useful hint regarding Mismatch or FED problem

Old post, but there may be people searching high and low with this very problem and I hope this helps someone.

Domestically, it just may hypothetically be possible to go ahead and activate the phone with prepaid Sprint. Without purchasing a plan, even, just getting the number assigned. Maybe you would need to deactivate the phone online, or it may not even matter. Then, it's a possibility an mvno such as....ring+ may accept and activate the esn you provide when you check for the eligibility online.

Then after you have successfully gotten your assigned number, maybe an hour later you might decide that ring+ isn't right for you after looking at the prices and stipulations more closely and deactivate device.

Then, you may find that you are able to activate your phone on the mvno of your choice.

Maybe I know of someone who thought they were buying a brand-new never activated Sprint-branded phone that could be used on an mvno and ended up accidentally finding a way. ;) Or thought that since the phone was used and deactivated and had that Sprint brand on it but no indication that it was a prepaid device and not postpaid that a Sprint mvno of their choice would accept.
[T-Mobile Samsung Galaxy Note 3] kmsmts:
I have this phone in Greece now and i need to install Greek language which is not available with T-Mobile rom (5.0 now)

Is there a way to install it (i tried Language Enabler and MoreLocale 2 with no luck)

or if possible to install N900 rom to have it?

Thanx!
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] RAID Xero:
Hey guys, I know there's the massive thread about the ROMs that work for SafeStrap, but what about new(ish) TouchWiz ROMs for us Loki users? I've tried a few some months ago and they never worked right. Should I try some T-Mobile ROMs or i9505? Any help or suggestions are appreciated. Thanks a lot.
[Android Q&A, Help & Troubleshooting] assasss:
Hello guys. I need your advice.

So I wanted to downgrade from 5.1 Lollipop (official ROM) to 4.4.4 Official ROM, because the official 5.1 is just terrible (constant lags and issues) while the 4.4.4 was pretty good.

I found a tutorial online, followed it to the word and flashed the official 4.4.4 back to my phone. After that I noticed that I don't have IMEI or SN/PN. I have managed to restore IMEI but my SN/PN is still null.

Is there any way I can restore it? My friend has another P70 with 5.1, so not sure if I can use that phone somehow to restore my own NVRAM.

Thanks in advance for all of your help and advice.
[Android Q&A, Help & Troubleshooting] rudim:
hi, use engineering mod apk and find the forum how to use it on youtube
[Android Q&A, Help & Troubleshooting] bossko:
hi, did you solve this problem please? I have same problem with customers lenovo P70
[Android Q&A, Help & Troubleshooting] welle0509:
Root and use chamelephon

Download from play store
[Android Q&A, Help & Troubleshooting] bossko:
chamelephon can use if you have IMEI and want change to another. But, when have corrupted IMEI, cant use this
[Android Q&A, Help & Troubleshooting] lucosius01:
Any ideas how to solve same problem?
[Android Q&A, Help & Troubleshooting] anniemishews:
Did absolutely the same, and the Chamelephon app worked like a charm! Fixed the corrupted/missing IMEIs in no time.
[Android Q&A, Help & Troubleshooting] (dylanger):
Hey Guys,

I've been using the OnePlus One (Bacon) for the past year and I'd like to switch however the OnePlus One has no 'Secure Boot' not to be confused with 'Locked Bootloader'

I can modify partitions like the SBL (Secondary Bootloader), ABOOT (Android Bootloader) and the Modem without the phone not booting.

Can anyone recommend a phone that either ships without any boot verification chain or has the option to disable 'Secure Boot'
[Android Q&A, Help & Troubleshooting] binsol:
I would assume the OPX and OP2 and possibly the OPPO [Find] devices would be similar in this regard, given their relationship. I have access to the OPX/OP2 but haven't had the time to dig into them yet. The new Intels might also be an option with the `fastboot flash keystore` function, so that you can use your own key for boot verification. I haven't had a chance to dig into it yet to see how much you can modify, but from what I gather, they will try to verify boot using the user keystore, followed by the OEM keystore.
[Android Q&A, Help & Troubleshooting] (dylanger):
Cheers for your response. Yeah I haven't even looked at the new Intel CPUs yet, oooo damn a 'fastboot flash keystore' would be very nice. This feature should be on all devices? I wonder why vendors don't just give consumers full access to the hardware.

A quick question. Is the OEM Keystore stored on the Flash or CPU? I guess it would be protected once the OS has booted but that wouldn't protect it against JTAG if its stored on Flash.
[Android Q&A, Help & Troubleshooting] binsol:
I originally thought the OEM keys were burnt-in on a ROM chip, but the more I read about it, it sounds like they're stored in a protected partition on eMMC. The eMMC 4.x+ spec suggests this is the case with the "Replay Protected Memory Block," little kernel source has references to similar protected memory. I'm just starting to dig into into it, but I'm pretty interested to know if it can be DMA'd.

I'm expecting the fastboot flash keystore to become common with late M or N devices with how Google is pushing the verified boot stuff (alerting the user about tampered boot). This would give their warnings a lot more value, since then you could sign your own modifications and only be alerted if something else then made changes to the boot.

The flash keystore seems to have a bunch in common with the (Windows) UEFI secureboot. I would assume that's a reason Intel has a jump on it.
[Android Q&A, Help & Troubleshooting] (dylanger):
Interesting... I'm guessing Google will use qFuses to track weather or not the boot process has been tampered with. I wonder where the splash screens are located as I guess one could just replace the Tampered Boot screen with the normal boot one.

Surely all areas of the eMMC would be accessible via something like JTAG?

Hmm, yeah it would make sense for Little Kernel to check the OS'es Kernel integrity, something like Get Key from Keystore into a variable, then check against the actual Kernel image?

Little Kernel pretty interesting actually, from what I've gathered it controls stuff like entering modes (Holding Power + VolUp will enter Recovery or Fastboot etc) and Fastboot, have you ever tried to load LK into IDA? Integrating something like the Cerberus App into ABOOT would be awesome, Anti-Theft at the bootloader!
[Android Q&A, Help & Troubleshooting] binsol:
I would guess the splash screen is in aboot, since it's the first thing with graphics output, and its alerting you that boot.img onward has been tampered with. If you can replace the splash screens, I'd assume you could break the whole chain since you'd already be altering aboot.

I think if you had raw access to the eMMC, you could replace the keystore. Do you know if JTAG is accessible on the OPO or similar devices? I read somewhere that JTAG is generally disabled/removed from non-engineering devices with 800+ series snapdragons. I've had no luck tracking down the JTAG so far on the board. All I've been able to get is UART.
[Android Q&A, Help & Troubleshooting] (dylanger):
Ah true, I didn't know ABOOT was the first process with Graphics Output, cheers for that :)

Really!? I'd assume that JTAG access is enabled for support purposes? The whole "My phones doesn't work" so you send it in? And they'd just re-partition everything?

I bought a RiffBox along time ago (Never actually used it -_-), that allowed direct access to eMMC, read and write you could dump and write whole bin images.

Another quick question, it was my understanding that some of the boot process used ARM's TrustZone or TZ to store keys.
[Android Q&A, Help & Troubleshooting] binsol:
The source on the JTAG is evading me at the moment, but iirc the reasoning is that its a huge security hole (shocker...), and not really necessary as the new QC chips are generally regarded as unbrickable, though I have one here that would disagree. You can put the OPO into Qcom download mode and push stock images to the (logical) disk. Will get you out of most bricks, like if you delete boot/recovery and lock the bootloader. I haven't spent enough time digging into it yet to know if you can get raw emmc access that way.

TrustZone is used for secure execution and protected memory. From the LK source it looks like the eMMC keystore is dropped into TZ early in the boot. https://www.codeaurora.org/cgit/qui...rget/msm8974/init.c?h=LA.BR.1.3.2_rb3.16#n362
[Android Q&A, Help & Troubleshooting] (dylanger):
Oh the "Download" mode (The sort of last defence, I think its Power in + Volup + Power Button or something), would that be controlled by ABOOT or is it a SoC function? If it is controlled by ABOOT then it could be corrupted pretty easily.

If its controlled by the SoC then where would the code be stored?
[Android Q&A, Help & Troubleshooting] binsol:
The key combo trigger is in ABOOT: https://www.codeaurora.org/cgit/quic/la/kernel/lk/tree/app/aboot/aboot.c?h=LA.BR.1.3.2_rb3.16#n3280

However, I wouldn't be surprised if its stored in a different partition (ie dbi), then sbl could auto-boot it in the event of corrupt ABOOT. That would make sense to me, but I haven't purposefully erased or flashed a bad ABOOT yet to find out. The one I bricked here can still get into download mode, yet I cant get any other response from ABOOT if I boot it normally, pretty anecdotal, but leads me to believe the download mode is affected by corrupted ABOOT.
[Android Q&A, Help & Troubleshooting] (dylanger):
I've successfully nulled out some fastboot commands before for Anti-Theft, but I'm pretty sure if you have access to Qualcomm's download mode you should be able to re-flash the ABOOT partition and get out of that brick?

Do you think that OnePlus would ever make LK/ABOOT open source? I'd love to be able to create my own bootloader, I wonder if any vendors do this because I'd buy one of their phones immediately! :)

Going off topic a little bit:

Have you ever looked into Qualcomm's DIAG mode with QPST? A lot of interesting stuff, I know they lock the modem's NV data down with an SPC (Special Programming Code) its a 6 digit PIN. I wonder if anyone has tried to brute-force this PIN? Because the data would allow you to do lots of interesting stuff like have the phone run on completely unsupported frequencies.
[Android Q&A, Help & Troubleshooting] binsol:
I doubt they will, I think support is a pretty big reason they dont release it. That and the number of people who would actually roll their own would be pretty small. Though I would love if they did.

Were you able to make changes to the OPO ABOOT? I saw your IDA post the other day.

It's bee a while since I was digging around in QPST, there was quite a bit of research done for unlocking additional bands on the OPO, generally being inconclusive. http://xdaforums.com/oneplus-one/general/guide-unlock-aditional-bands-qualcomm-t2877031/page100

https://nathanpfry.com/wip-band-4-band-17-on-chinamobile-oneplus-one/
[Android Q&A, Help & Troubleshooting] (dylanger):
Indeed I was, I used a Hex Editor to null out (\x00) commands like "fastboot flash", "fastboot erase" and "fastboot oem"

Its very irritating, IDA can read everything up until the apps_init function.

Here's a snippet of the apps_init boot process from Reverse Engineering Android's Aboot book (http://newandroidbook.com/Articles/aboot.html)

[IMG="LK Apps Boot Process"]http://onedefence.com/public/ABOOT/Boot1.PNG[/IMG]

When IDA got to loading any app, I.E fastboot it would get obfuscated and just render as hex. Have you tried to play around with ABOOT before? So close to actually seeing ARM Assembly.
[Android Q&A, Help & Troubleshooting] binsol:
That's cool, I'll start probing around. I haven't messed with aboot in IDA at all, but I've used IDA a lot in a past.

Do you think the obfuscation is deliberate? Also have you tried some of the mbn scripts around? http://xdaforums.com/showthread.php?t=2641245

I've seen a few references to them when people are reversing bootloaders.
[Android Q&A, Help & Troubleshooting] (dylanger):
Really? Reverse Engineering is pretty fun, really getting into the mind of the developer.

Yeah use that plugin,

[IMG="IDA Loading MBN"]http://onedefence.com/public/ABOOT/IDA.PNG[/IMG]

Oooo I have have found the code that loads fastboot.c

[IMG="Perhaps code for loading in fastboot.c"]http://onedefence.com/public/ABOOT/IDA2.PNG[/IMG]

The obfuscation may have been my fault, I've loaded in ABOOT from Color OS and it looks like everything is okay now.

Woohoo! Check that out!

[IMG="IDA with all fastboot commands"]http://onedefence.com/public/ABOOT/IDA4.PNG[/IMG]
[Android Q&A, Help & Troubleshooting] (dylanger):
After poking around a little bit more, ColorOS is a KitKat ROM that uses an older ABOOT, that's why it successfully opened in IDA.

If I open ABOOT from OnePlus One's latest firmware (cm-12.1-YOG4PAS1N0-bacon-signed) I get this

[IMG="IDA with 5.1 ABOOT"]http://onedefence.com/public/ABOOT/IDA6.PNG[/IMG]

Now I think its doing this because the plugin provided by MemoryController is outdated, I have no idea how to create these scripts/plugins for IDA, if anyone does know please let me know, I think this could also unlock the ability to change the boot splash screens on newer firmware as the images in the LOGO partition are encrypted, the code inside of this newer ABOOT could contain the decryption process.

Back to the older KitKat ABOOT here is the boot.img (Kernel) loading code just FYI:

[IMG="IDA Boot Process"]http://onedefence.com/public/ABOOT/IDA5.PNG[/IMG]
[Android Q&A, Help & Troubleshooting] binsol:
We should probably move this thread over to your OPO topic, It'll probably get move views over there:

http://xdaforums.com/oneplus-one/general/oneplus-one-lk-little-kernel-bootloader-t3269111
[Android Q&A, Help & Troubleshooting] binsol:
This isn't specifically the source I was thinking of when I wrote that, but it also suggests that JTAG is generally disabled:

http://recon.cx/2013/slides/Recon20...uditing Android's Proprietary Bits-public.pdf

Slides 31,48
[Android Q&A, Help & Troubleshooting] (dylanger):
Ah yeah I've seen this, I'm actually digging into the vendor-ril driver (libril-qc-qmi-1.so) as I'd like to share the baseband of one device to another.

Interesting I've found come code referencing "QCRIL_EVT_HOOK_UNSOL_ENGINEER_MODE", UNSOL means Unsolicited Command, meaning its an incoming command from the base band to the upper layers of the RIL, looks kind of backdoor-ey to me, perhaps remote enabling of Engineer Mode?

[IMG="IDA QC Engineering Mode"]http://onedefence.com/public/ABOOT/IDA7.PNG[/IMG]

I've also just seen (I guess) is the SIM PIN and PUK verification code?

[IMG="IDA SIM PIN and PUK"]http://onedefence.com/public/ABOOT/IDA8.PNG[/IMG]

Should I create another thread? Would you be interested in discussing further?
[Android Q&A, Help & Troubleshooting] binsol:
There were a lot of interesting strings in the modem last time I looked, like stuff relating to http and hdmi (video drm?). Is this the OnePlus One modem? It would probably make sense to make a thread in that forum. I'm not sure how much interest it would generate here.
[Android Q&A, Help & Troubleshooting] (dylanger):
Its actually just the RIL interface for Qualcomm, located at /system/vendor/lib/libril-qc-qmi-1.so or if you look in the rild.libpath property. Its my understanding that the Modem is on a totally separate chip/area on the SoC and has its own rtOS and Kernel. The vendor RIL is just responsible for communicating stuff from the baseband to Android and vise-versa.

Do you have experience playing around with the actual Modem? Because no one really fuzzes this sort of stuff, like how the modem or vendor RIL handles incoming SMSes, Phone Calls etc.

Also I've created a new thread for Radio related stuff here: http://xdaforums.com/oneplus-one/general/discussion-qualcomm-ril-interface-modem-t3286683
[Galaxy S III Accessories] Angelo Azzurro:
Hello to everyone...

I have a s3 with broken display so, i would like to use it as media center...

If i buy an adapter with HDMI and otg powered by a power supply

Can i connect HDMI , otg and at the same time charging the phone??

Or i need a dock??

I saw in a video of a guy with the dock the phone was charging...

It's possibile??

Thanks
[Galaxy S III Accessories] Simon_29:
You need a dock for this. As long as you run the stock rom with stock kernel there is mhl support and everything should work. But i'll get such an adapter today so i can tell you.

Merry christmas :D

EDIT: Yes it charges.
[Galaxy S III Accessories] E36Nick90:
Not a bad idea for my current S3 once my M8 charging port comes in and I have time to replace it. could even make a little pocket for the S3 to sit in on the TV using some fiberglass or something.
[Galaxy S III Accessories] Angelo Azzurro:
Oh thanks...

My S3 will revive...

And merry Christmas... ;)
[MDA, XDA, 1010 Software Upgrading] sakurasyaoran:
gudday lupistefan, im reading all your thread, and finally decided to ask u for help, my qtek1010 crashed when upgrading to wm2003, it stops at 5%, nw all i can access is bootloader 5.15 woth gsm ok, how can i revive my device? need badly ypur help.. tnx in advance.. jhon
[MDA, XDA, 1010 Software Upgrading] LumpiStefan:
Lukily there are more people in the forum, that can help you.... ;-)

Stefan
[MDA, XDA, 1010 Software Upgrading] sakurasyaoran:
wow! i revived my qtek1010! tnx for all your help! this site is truly the best! thanks for all u guys!
[X Play Themes and Apps] Nico3d3:
It's mostly a battle between Chrome, Firefox and Opera but, maybe you tried a more obscure browser and it work great for you? I loved the old AOSP browser because it was light on memory and ressources but it's not being maintained anymore and using it pose a security risk. Google Chrome has all the bells and whistle and it support pretty much everything but it's also memory hungry, it eat so much memory that other app in the background are dropped out of your memory to make place for Chrome. It leads us to Firefox, it support less thing but, memory usage is not too bad. Opera is also good.
[X Play Themes and Apps] koimr:
I've tried quite a few and keep coming back to Firefox. :)

I don't really have a reason why as I suspect it's a tad slower than most and I see it pretty high on the battery usage on my tablet but it's always just been my "go-to" browser.

I had used Dolphin too for a long time and I can't remember why I stopped. I think it might've been that I didn't like the differences between the tablet and phone interfaces. I am apparently quite fussy. :)
[X Play Themes and Apps] Nico3d3:
I may give a try to CAF Chromium browser, it's a Chrome fork compiled with optimization for Qualcomm devices. I'll try it and see if it's better on memory usage. My main complaint with Chrome is that, it eat as much memory as it can, then other apps in the background are forced out of RAM. So, when you want to open other apps, they have to be completely reloaded instead of just restarting them from RAM. Also, I'm fussy too...
[X Play Themes and Apps] AtomicStryker:
Firefox. My beloved (and needed) extensions work on Android. And it's synchronized with my desktop too.
[X Play Themes and Apps] Gopinath15:
Chromium
[X Play Themes and Apps] rksomayaji:
Firefox i use linux on laptop so both phone and laptop are coordinated
[X Play Themes and Apps] thepepperman:
Been using Dolphin for a couple of years. The main initial reason was the cookies/browsing data clearing is only one swipe and click away when browsing, super handy as I read a newspaper every day which only allows 10 free articles a month lol. Clear data, instantly ready for another 10 articles.
[X Play Themes and Apps] brom25:
Been a fan of Opera since my first Android phone
[X Play Themes and Apps] ac4tw:
Used NoChromo for a while (built in adblocking) but now back to using opera mini or lightning. Use lightning with java script turned off, which makes for a super fast browser. Generally breaks discussion/commenting and some page navigation. But works equally well with java script turned on and is very lightweight.

Find chrome is far too resource hungry and I really don't like the firefox tab interface.
[X Play Themes and Apps] Ani0o7:
Most of popular like chrome, Firefox, Dolphin are good performer.... Depends upon your needs and usage..... But I am big fan of uc browser and using it for a long time... Better in memory management... Has in built ad blocker.... Its to had limited addons support.... Also has Flash compatability.... Most under rated browser of the store but works like butter for me switching tabs also easiest.... Give it a shot....
[X Play Themes and Apps] K.khiladi:
Using uc browser for browsing fb and downloading while chrome for browsing every other site.
[X Play Themes and Apps] Tim3tripp3r:
I have had good luck with Maxthon. I prefer a older version of it though.
[X Play Themes and Apps] pijes:
Previously using dolphin but now using ghostery as my main browser
[X Play Themes and Apps] ch3mn3y:
I'm using Boat Browser as it looks great, is stable and fast and has support (PRO) for Firefox account, so I can easily check my PC bookmarks from Waterfox.

Sent using XT1562 - stock 5.1.1
[X Play Themes and Apps] knives69:
Try Browser (Chromium) from XDA LABS, it is optimized to qualcomm devices, works perrrrrrrfect and fast
[X Play Themes and Apps] ch3mn3y:
M46 build from 19.12.2015 is the newest one?
[X Play Themes and Apps] Nico3d3:
Already tried CAF-Chromium, yes it's faster than official Google Chrome but there was still bugs and lags preventing me from using it as a daily driver. Sometimes, web pages get stuck and the app become totally unresponsive and I had to do a force close. For now, I'm back with Opera, not too bloated it's light on memory and it has all the features I need.
[X Play Themes and Apps] Kettleblack:
Using Firefox because I like the way it works. Interface is, to me, the best of the bunch and all in all it has the best performance. Used Opera a lot but had a lot of excellent | horrible experiences with it. That is, sometimes it was great but often things would not render properly or it would die. Chrome has generally been slower than FF for a couple years now and FF has been much more stable. Chrome blocks much more.

I just want a browser that doesn't make me care about which one I am using. FF is that. It just works.

Also, it gives me more control over crap like webrtc.
[X Play Themes and Apps] pritkudale:
I mostly use Opera mini as it loads page faster, it saves data, it consume less memory, and second choice is puffin Web browser it's lighting fast I bet. It supports flash, and had many more advantages.
[X Play Themes and Apps] FruitNuggets:
I always go back to Firefox. I need adblock. I've already accepted annoying ads in apps. So blocking adds in the browser is at least some satisfaction.