[Fire Android Development] hwmod:
[MENTION=8165603]DragonFire1024[/MENTION], [MENTION=8978978]Rortiz2[/MENTION]

I will be happy to share information that I am gathering and new achievements but the time is what I am currently missing most.

Unfortunately I don't have a HD 10 ... anyway some of the findings are similar for other models and I see there are many people interested in the HD 10.

So it is almost sure somebody will come up with solutions for the various models. It is just a matter of time and developers sharing info and code.

We have been waiting this to happen for so long that a few more weeks doesn't make a difference.

I don't know yet if the "bootloader unlocking" will be feasible and it may take longer ... however ...

.:HWMOD:.

---------- Post added at 08:45 AM ---------- Previous post was at 07:57 AM ----------

Yes both 5th Gen and 7th Gen are working with the same results by using the new hacks [MENTION=9667509]xyz`[/MENTION] and you have been working on.

Pproblem is the same, only the back-light is on ... the touchscreen need differentiation and conditional handling on each model.

Each kernel of the different models contains from 2 to 5 or even more touchscreen drivers but only one is the correct/working.

Nothing so special anyway, maybe you just need to access/initialize/refresh the touchscreen using a more abstract API to have

only one code base across several models instead of having a different one for each model but I am no authority on that :)

Also on the 7th Gen I discovered that there is another place about the same place of the currently used pad that ensures

a better fit and grants more percentage of success. The exact point lies between the two small resistor in the direction

of the SoC and the tablet buttons about 3-5 millimeters distance from the CMD pads you are using, also I use a 100ohm

resistor to ground to avoid damaging components. That point is a sure place, maybe one of the DAT[0-7] the SoC uses

I never missed a reset until now, while with the other advised pads it is always a war and a series of failures and retries.

Try yourself and report your outcomes, I will try to post a new image asap. The four holes positioned at the four angles

of the EMMC seems they have been made available to make it easier to poke at these connections without removing

the shield, the conductors of a resistor are the right size to go through these holes and short the pads and test points.

Another achievements I got is the extraction of the Austin "recovery.img" image that I will make available tomorrow.

With that it will be easier to build a specific TWRP for the Austin model (7th Gen). After that everything would be easier

Have my congratulations again for the time you put on this and for

quickly porting [MENTION=9667509]xyz`[/MENTION] awesome hack to the 5th Gen and the 7th Gen.

.:HWMOD:.

---------- Post added at 08:53 AM ---------- Previous post was at 08:45 AM ----------

Related to the "bootloader unlock", one thing I have been trying is capturing the Master AES "keys" in memory, though I have no evidence this is possible on the

Mediatek SoCs as it has been with the Qualcom SoCs but since I was able to compile the "LiME" module that does this on our SoCs it is worth trying and maybe

some with more knowledge on this may help and give us advice about this possibility.

The environment I am talking about is the same TEE (Trusted Execution Environment) used in the Qualcom breakage so we have a preceding case.

The relevant links were one can read about these "forensic" techniques are:

The "LiME" project: Linux Memory Extractor

Qualcom case: Keymaster Keys captured

I have easily compiled the "LiME" loadable module (lime.ko) and all components needed, now that we have all the models "rooted" we can maybe give this a try (this already works on 5th and 7th tablets).

If there is enough interest and other developers can confirm that this may work I am more than willing and happy to share the needed software and info I have collected (nothing special or difficult though).

Anybody can make the same easily it will take less than a couple of hours to grab the right kernel sources for the model one have and compile the "LiME" module and "AESKeySearch" for their tablet.

I imagine that the more people install this the easier will be that we can have a chance to grab the Keymaster keys like they did on Qualcom processors.

I don't have all this time, so developers capable of writing a simple to distributed APK package would be of great help to the attempt.

It will make this easier and available to anybody that wishes to contribute to the achievement (a collaborative hack).

Let's have fun,

.:HWMOD:.