yashsingh1/xdaforums huggingface dataset:
[LG G Flex 2] z.coniglietti:
great great great thank you guys that you are at least trying something
[LG G Flex 2] superdioz:
in the developer options there is a "allow oem unlock" option, if you check it an alert says "device's protection functionalities will not work if this option is enabled" and than you can cancel or confirm.

what is that?
[LG G Flex 2] k3lcior:
Long story short, it does nothing.
[LG G Flex 2] superdioz:
i suspected that.. :)

let's hope just that the mm update will bring an unlocked bootloader for us.
[LG G Flex 2] cadavar:
Count me in for $50 if this ever happens.
[LG G Flex 2] yellowman82:
What's crazy is that when MM drops for this device Android N will be out already for some devices.
[LG G Flex 2] le grande magnetto:
Nah.. N probably will be released in second half of the year. By this time we will either have M for quite some time or we will not receive it at all. Why would LG bother with it by then? Unless LG would not manage to make it by then and would want to lose too much work already invested in it. I'm just guessing here, IDK neither when N will be released nor what are LG plans for Flex2. Anyway I would expect M for Flex2 in next two months.

On the other hand, all other OEM acts in a similar way, so Flex2 owners are not some kind of exception.
[LG G Flex 2] yellowman82:
Well your right about second half. So far google already have N first preview out already and they're estimating around July or after for the official N rollout to begin for nexus devices.
[LG G Flex 2] adds08:
Could anyone deassemble the flex2 aboot.img...

Can someone provide?
[LG G Flex 2] stars2:
I tryed fastboot before months ago (If the device can't boot from laf, revert to fastboot mode)

Fastboot is useless, says for all 'remote: unknown command' except some getvar getvar ...

We can flash anything, without fastboot, ind download mode, or if the device is rooted.

The very big problem is the signature check, device allows only signed kernel / signed boot .

I disassembled the aboot with IDA Pro, but can't see any interesting (my knowledge is not enough)

Kexec? If not disabled completely in stock kernel
[LG G Flex 2] le grande magnetto:
Yeah, I know about preview, however AFAIK new version usually comes out with new nexus. Nobody knows, it was just a mere speculation. ;)
[LG G Flex 2] n00b_dr0id:
Please accept my $10 contribution. I am broke right now.
[LG G Flex 2] fergy:
It was dissasembled...

HERE
[LG G Flex 2] adds08:
Thanks

I'll try to make some human readable algorithms and charts out of it if i have time xD
[LG G Flex 2] Liffeyman:
I'll throw 20 euro in the pot
[LG G Flex 2] NicolaeAlexandru:
100 Euro , I want bootloader unlocked for our smartphone :)
[LG G Flex 2] le grande magnetto:
100e from acc with only one forum msg. seems legit. :D
[LG G Flex 2] Robert-:
This guy is also Romanian,don't take him serious. He dosen't have 100Euros.
[LG G Flex 2] lyphe:
Romania is smart enough not to use that junk
[LG G Flex 2] EROMITLAB:
I have $100 for bootloader ?
[LG G Flex 2] NicolaeAlexandru:
Why do you think I have no money ? simply because I am Romanian ? :)) we're both from romania. If you do not have money does not mean I do not have . I have two pieces of LG G Flex 2 and I can not support that can not install modified software on it .
[LG G Flex 2] 736992911:
全是英文
[LG G Flex 2] fergy:
Start address (You will need it) 0x0f900000

;)
[LG G Flex 2] fergy:
In a mean time, project BOOTLOADER started with reverse engineered...

HERE
[LG G Flex 2] fergy:
Well then, I'll get glasses and make a deeper look :P Kiddin'. If I can make something, will do it. No need for any "bounty" or ****. We can put that money to meeting someday and drink something.

Cheers and happy Eastern
[LG G Flex 2] psone1:
[MENTION=352916]fergy[/MENTION] you bring rakija, I'll get some wódka and bimber and I think it will be fun:D

Wysłane z mojego LG-H955 przy użyciu Tapatalka
[LG G Flex 2] fergy:
I don't drink "hard" alcohol. Only mix wine and mineral water. Rakija can get with Me but if You promise that just You will drink it. :D No, kiddin'. Let We fix this mess.
[LG G Flex 2] stars2:
Anyone can try to flash unsigned boot or recovery image to laf partiton?
[LG G Flex 2] fergy:
fergy@fergy-EP35-DS3L:~/Development/flex2$ fastboot flash laf recovery.img
target reported max download size of 536870912 bytes
sending 'laf' (29570 KB)...
OKAY [ 1.301s]
writing 'laf'...
FAILED (remote: unknown command)
finished. total time: 1.302s
fergy@fergy-EP35-DS3L:~/Development/flex2$ fastboot reboot
rebooting...
finished. total time: 0.001s

Tried. No lucky.
[LG G Flex 2] fergy:
adb shell
su
dd if=/storage/external_SD/recovery.img of=/dev/block/platform/f9824900.sdhci/by-name/laf

security error

Restoring backup of laf partition

adb shell
su
dd if=/storage/external_SD/laf.img of=/dev/block/platform/f9824900.sdhci/by-name/laf

works like charm
[LG G Flex 2] stars2:
fergy thanks for all!

I deleted laf to get fastboot, before I rooted, and now my phone is not rooted, and no download mode! :(

OTA update can't work, LG RCT (LG Root Check Tool) modified, and after I install the OTA, installation aborted, and after reboot, device pop up a message, "the device is root suspicious, ota update not available for rooted devices" but not rooted, just tryed...

The fastboot mode is useless, all command is disabled (except getvar), see in the source that shared by you...

And one more fastboot command work, this is the update from update.zip (this is not a recovery zip format) this is require boot.img, recovery.img system.img and the signature files (boot.sig, recovery.sig, system.sig) I tryed with empty signature files, and can't work, says again "unknown command".
[LG G Flex 2] underscorenorm:
http://xdaforums.com/announcement.php?a=81

Forum rules 论坛规则
[LG G Flex 2] fergy:
EDIT: Can You boot phone? If yes, then You can reflash LAF.

EDIT2:

LAF DOWNLOAD

I don't get You why was You do that without backup LAF???

Everything You wrote was I test before and make ATTENTION that noone do that.... Anyway, I will upload LAF image on Gdrive and put link to it.

Also, there out is rooted stock 5.1.1 which can be flashed.
[LG G Flex 2] stars2:
fergy my phone is bootable, working fine

* no download mode, because laf erased

* not rooted before I erase laf, and now I can't root, and not possible to root without exploit or known vulnerability for 5.1.1

so... I can't restore laf (but I have backup (I backup all partitions, before this), or without backup, the laf is extractable from the kdz)

Only the LG Service can help for me, or I desolder the EMMC, and flash directly (because no known pinouts on PCB)
[LG G Flex 2] raspdeep:
Edit: Nvm, forgot download mode is needed even using LG flashing tools
[LG G Flex 2] fergy:
Well, that's suck.... Jtag box can help indeed. Anyway, good luck until someone find 5.1.1 bug for root.
[LG G Flex 2] behzad_rad:
Bootloader

Hi

Any progress about unlocking bootloader?
[LG G Flex 2] bidzer:
I don't believe anyone owes you an answer to this. If you can't read the thread and understand it's a WIP. Don't ask such silly questions. It will be posted whether there's progress or not. Gosh.
[LG G Flex 2] behzad_rad:
All those who are trying to respect me , I really did not know which made ​​public , I'm sorry about this question......................
[LG G Flex 2] fergy:
[UPDATE]

Some research point Me to this:

DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 ELF, 32-bit LSB executable, ARM, version 1 (SYSV)
4520 0x11A8 Certificate in DER format (x509 v3), header length: 4, sequence length: 1362
5886 0x16FE Certificate in DER format (x509 v3), header length: 4, sequence length: 1107
6997 0x1B55 Certificate in DER format (x509 v3), header length: 4, sequence length: 927
357920 0x57620 SHA256 hash constants, little endian
384132 0x5DC84 Android bootimg, kernel size: 0 bytes, kernel addr: 0x6E72656B, ramdisk size: 27749 bytes, ramdisk addr: 0x646D6172, product name: "rt"
384472 0x5DDD8 Private key in DER format (PKCS header length: 4, sequence length: 323
384508 0x5DDFC Certificate in DER format (x509 v3), header length: 4, sequence length: 287
384800 0x5DF20 Private key in DER format (PKCS header length: 4, sequence length: 315
384828 0x5DF3C Certificate in DER format (x509 v3), header length: 4, sequence length: 287
404184 0x62AD8 Certificate in DER format (x509 v3), header length: 4, sequence length: 720
417647 0x65F6F Unix path: /openssl/crypto/bio/b_print.c
418467 0x662A3 Unix path: /openssl/crypto/asn1/a_bitstr.c
418787 0x663E3 Unix path: /openssl/crypto/asn1/ameth_lib.c
418975 0x6649F Unix path: /openssl/crypto/asn1/tasn_dec.c
421991 0x67067 Unix path: /openssl/crypto/bn/bn_add.c
424507 0x67A3B Unix path: /openssl/crypto/evp/pmeth_lib.c
451835 0x6E4FB Unix path: /openssl/crypto/objects/obj_dat.c
476059 0x7439B Unix path: /openssl/crypto/objects/obj_lib.c
476807 0x74687 Unix path: /openssl/crypto/rsa/rsa_lib.c
476967 0x74727 Unix path: /openssl/crypto/rsa/rsa_sign.c
477579 0x7498B Unix path: /openssl/crypto/x509v3/v3_cpols.c
478503 0x74D27 Unix path: /openssl/crypto/x509v3/v3_crld.c
480190 0x753BE Unix path: /../../vendor/lge/fota/platform/android/services/devices/storage/internal/istorage_partition_gpt.c

That's about security key. I was create "issue" on My github.
[LG G Flex 2] fergy:
LAF partition details

DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 Android bootimg, kernel size: 24368664 bytes, kernel addr: 0x8000, ramdisk size: 9810118 bytes, ramdisk addr: 0x2000000, product name: ""
1664640 0x196680 SHA256 hash constants, little endian
14160016 0xD81090 Linux kernel version "3.10.49-perf-g928d3fb-00001-g5546062 (lgmobile@si-rd10-bx56) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREE"
[LG G Flex 2] Sauliuz:
Just something to take a look to:

There is some fresh eMMC backdoor found http://theroot.ninja/disclosures/SAMDUNK_1.0-03262016.pdf

Flex 2 is Qualcomm based, and apparently uses Samsung eMMC:

Should we consider looking into how this goes further?
[LG G Flex 2] fergy:
Nice work!
[LG G Flex 2] Sauliuz:
Yeah, but there is no dev-edition Flex 2, so no aboot image of it, and no CID of dev phone. And then... LG vendor blob and commands in it is for sure different. Would be nice to know how to work with IDA Pro and understand assembler...
[LG G Flex 2] fergy:
I will research things tonight. Maybe I can get jtag for few days and try with self compiled aboot. Will report back.
[LG G Flex 2] Fobos531:
Wow, that's some great news. Would this be applicable for the LG Spirit? However, it has some hynix or hunix MMC, not Samsung. Regarding IDA disasessembler, contact this guy. He'll understand you even if you use Google Translate.
[LG G Flex 2] fergy:
I don't need ida instructions...someone other was mentioned. [emoji6]

Regarding spirit, no, that is for samsung brand of chip. Hynix will use other things
[LG G Flex 2] sensationvsgalaxy:
It is possible

just bumping ...and wanted to say that there are geniuses in this world that are above what we can imagine.. I just met one (though skype) for a FRP Lock Problem on Marsmallow that i had on a s7 -which everyone said it was impossible to unlock.. he did it in 30 sec REMOTELY even if I didnt even have USB Debugging ON. Then after seeing his amazing genius i showed him this thread and he said he has this problem fixed since 10 Months ago.. but I dont think he will share his solution with us..(idk if bounty not enough or what??)..I just wanted to say IT CAN BE DONE !! there ARE more intelligent people out there than those at LG
[LG G Flex 2] fergy:
Great...i can bet that He work in Nasa or CIA then... Nevermind. We will unlock it on this or that way... And please, don' t spam thread if You don't have smarter solution.

Thank You

Edit: btw 10 months ago We wasn't have 5.1.1.

Cheers
[LG G Flex 2] sensationvsgalaxy:
well duhhhh :silly: i said i was just bumping thread to keep it among first threads..so no spam intended here..:eek:also after your joke with NASA or CIA i'm not sure you believe me..but thats your loss..(also he is from India so that answers that)
[LG G Flex 2] fergy:
First You need to proove that He Was do...whatever He say that was.

Second, strange that nowhere is any blog, comment or anything what can prove that. So, there are no reason to We believe in story at all.
[LG G Flex 2] n00b_dr0id:
He is lying. This bounty is more than he would get elsewhere. As for the FRC thing, one guy makes the software and sells it. The rest then open their own shop. You want the software for FRC? Make a search on ebay there are dozens of them and the sellers aren't necessarily geniuses. :)
[LG G Flex 2] sjmik:
Did you read the paper?

It say it works for those specific phones due to the way Samsung was checking for bootloader unlock.

Namely, comparing a hash of the eMMC's unique identifier (he describes a method for changing this) to a Samsung-signed value stored in aboot.

The exploit isn't applicable to LG, although it was interesting.
[LG G Flex 2] Sauliuz:
Thanks captain obvious :) I don't want to repeat, but - LG blob and how it check things are obviously different (but we don't know anything about that so we can't confirm nor deny that). It's just to prove that everything is possible even on newer phones with somewhat similar things in common and we should not loose belief and investigate on everything what is possible. That's it.
[LG G Flex 2] Fobos531:
What things will Hynix use?
[LG G Flex 2] fergy:
Hynix chipsets cannot use specific Samsung code.

Please refer to wikipedia, google...whatever and don't spam thread.

Thank You

---------- Post added at 11:49 PM ---------- Previous post was at 11:41 PM ----------

We know something about... Samsung and LGE have completely different protection in LK bootloader.

root@z2:/storage/external_SD # ./samsung_cid
[+] CID at boot time is/was: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
[-] RTFC!! ./samsung_cid [NEW_CID]
10|root@z2:/storage/external_SD # ./samsung_unlock

============================== samdunk unlock 0.0.1 ==============================

this application comes with NO WARRANTY (express or implied)
this binary may not be rehosted, repackaged, one-clicked, etc.
there is no support provided for this application
this application has been tested on the Verizon Galaxy S5 only
it may work on the AT&T Galaxy S5, and possibly other similar Galaxy devices
there are no compatibility checks, do your research first
if run on an incompatible phone, it will likely permanently ruin the device
we STRONGLY advise against running any binary not obtained from the official source
official source is available at http://github.com/beaups/SamsungCID
SD card is required, all data on the SD card will be destroyed
changing to this developer CID may have other implications
the psn derived from the CID may be used for critical services
changing this psn may cause unexpected behavior or loss of services
continue at your own risk, you've been warned

aboot dev signature research credit to ryanbg
http://xdaforums.com/member.php?u=766721

eMMC vulnerability, exploit, and the code you are running by beaups (sean beaupre)
http://xdaforums.com/member.php?u=711482

Do you understand the implications of these warnings?

(Yes/No)
No
[-] sorry you can't agree to the terms :(

Cheers for now.
[LG G Flex 2] UkuS:
the LG g4 was easy to bootloader and the smartphone has launched after the Flex 2?
[LG G Flex 2] Liffeyman:
Everyone, WORK HARDER
[LG G Flex 2] z.coniglietti:
:silly:
[LG G Flex 2] Dreamisdead:
G4 bootloader was not hacked and bounty for that is at 3000 usd already.

Also G4 and Flex 2 share same bootloader I think.

I honestly don't get people whining in this thread. You bought this phone knowing well that LG doesn't give a **** about you wanting unlock.

Just want to say thanks to anyone devoting their time trying to unlock the phone! :fingers-crossed:
[LG G Flex 2] fergy:
Bootloaders are NOT same as hardware are NOT same...first of all POLED inside flex2 is not inside G4...so forget it.
[LG G Flex 2] NinjaFlex:
Successfully Unlocked Bootloader

Unlocked Lg G Flex 2 Bootloader
[LG G Flex 2] le grande magnetto:
good. where can we transfer the bounty money?
[LG G Flex 2] MisterOne1:
It you unlocked the bootloader I think you should create a new Thread and add some details/photos etc.
[LG G Flex 2] fergy:
Seems like fake...
[LG G Flex 2] Silverbot2:
troller flex !!
[LG G Flex 2] fergy:
Think that I have solution. Not bl unlock but system change. Will try to reflash tonight and come back with solution (if it will be).

Stand by. Thx
[LG G Flex 2] mauchito:
What's a system change?
[LG G Flex 2] fergy:
We can flash other system image without problem.
[LG G Flex 2] psone1:
Are you serious?;) woow you are awesome! But recovery still isn't available? I get my finger crossed, good luck

Wysłane z mojego LG-H955 przy użyciu Tapatalka
[LG G Flex 2] fergy:
We cannot sign boot or recovery image but can flash system :)
[LG G Flex 2] fyter:
It is basically the same method as when we root the phone flashing the system.img, right?

Doing this can we compile a Cyanogenmod rom for our device, generate the system image and then flash it?
[LG G Flex 2] fergy:
Ya. Exactly.

---------- Post added at 11:14 PM ---------- Previous post was at 11:12 PM ----------

Only problem is some kernel headers in media....but...maybe it can work with present kernel. I'll check soon
[LG G Flex 2] XTheArrowX:
So you have to make a kdz or tot file for the Rom?
[LG G Flex 2] fergy:
No. img
[LG G Flex 2] XTheArrowX:
Oh wow, would it work on the AT&T version?
[LG G Flex 2] fergy:
Don't have idea at all. If You can flash that rooted system image and it work then this will also work. We will see soon.
[LG G Flex 2] Dreamisdead:
Are you talking about same method we use to root?

(flashing custom image with dd command to system partition)

I thought we can't like flash cyan system with current kernel? And I even tried to insmod modules to kernel to no avail (modules have to be signed)
[LG G Flex 2] fergy:
Yes. I am talking about dd command. Modules will not be a problem as I know but as I say above, We will see soon.

Edit: can You provide me dmesg when insmod modules please?
[LG G Flex 2] Nick80835:
I have a developer edition of the phone that may have an unlocked bootloader.
[LG G Flex 2] Xanthos58:
What model number, and firmware?
[LG G Flex 2] Nick80835:
I dont exactly have it yet, but its an H950 32GB, you can find my thread about this device in the help/qa section for the G Flex 2.
[LG G Flex 2] Dreamisdead:
Oh man, we need a dump of your bootloader partition! Just may be it will work.
[LG G Flex 2] Nick80835:
Device will be here monday, so if its unlocked, ill dump and upload.
[LG G Flex 2] Dreamisdead:
I was trying to insmod a custom module for netfilter firewall (since i need it for tethering),

but there was error:

"init_module 'xt_HL.ko' failed (Required key not available) "

I tried signing module with supplied keys, generated certs and not signing at all, same error :(

I used kernel source from lg.
[LG G Flex 2] fergy:
Please check if You have in defconfig following enabled:

CONFIG_MODULE_SIG=y
CONFIG_MODULE_SIG_FORCE=y
CONFIG_MODULE_SIG_ALL=y
CONFIG_MODULE_SIG_SHA1=y
CONFIG_MODULE_SIG_HASH="sha1"
[LG G Flex 2] Dreamisdead:
Sadly I don't have a phone now to test, it is in repairs currently, and I also nuked my test environment for kernel building.

Well I experimented with these values, but the problem was LG enabled FORCED module signing in current kernel, and didn't supply kernel source with needed keys obviously.

So if i compile module with disabled signing it shows error, and if I compile it with generated keys - same error :(

You can try it out, maybe I missed something.
[General Questions and Answers] assayedali:
my galaxy note 10.1 2014 edition( p601 ) suddenly un connected to mobile network and get me a message of baseband version unknown, by searching IMEI code on mobile by *#06# it replies me IMEI ( null/null ) since that i cant use mobile network just wifi how can i fix it help plz I'm so depressed and i cant find any solution help me plz SOS SOS SOS SOS SOS SOS SOS SOS
[General Questions and Answers] sktctg:
i have same problem. and no backup efs and cert. any one can help me????
[ZenFone 2 Q&A, Help & Troubleshooting] remi13014:
Hello,

I post here because since some month i can't install any applications on my ZenFone 2 :mad:

I've a CM13 flashed and rooted Z008, and when I want install an .apk, it say insufficient memory. But I have 5.23 Go used on 14.99

I tried to uninstall some apsp and format my SD Card but it's the same problem. I also did dalvic cache, ccleaner, delete all .odex i've seen :cowboy:

Nothing is working, I still can't install .apk // But i can install anything by using the playstore :eek:

If someone have an idea ?

Thanks

RR
[ZenFone 2 Q&A, Help & Troubleshooting] Siddk007:
Just clean flash cm13 rom and gapps
[ZenFone 2 Q&A, Help & Troubleshooting] remi13014:
You mean back up all then format and flash again the rom + gapps ?

I don't really want :/

no other solutions ?
[Sony Xperia Miro, Tipo (Dual), J, E] AlimSobirin:
Inspired by my friend, who did not have a PC (can not use costume rom) :D

He wants to change the display status bar like Rom xperia on its common :good:

FEATURE :

Tinted via FMD

Blur Xpended

STYLE BATTERY

DOWNLOAD :

http://www.solidfiles.com/d/86152c7317/

HOW TO INSTALL :

Push Manuall to System/app​
[Sony Xperia Miro, Tipo (Dual), J, E] oganyan-arthur:
AlimSobirin, Please tell me how to do - Tinted statusbar , or instructions please show
[Sony Xperia Miro, Tipo (Dual), J, E] AlimSobirin:
Tinted via FMD Bro .

Only certain applications applications , you want???
[AT&T Samsung Galaxy S 5] fordman503:
I made the mistake of attempting to roll back my lollipop s5 to kitkat so I could root and install CM like I've done on many other devices, however, come to find out with att that is not possible due to a locked BL. Yes I know if I had listened to the forums I would have know not to attempt this but I didn't and ended up with a soft bricked gs5 stuck on the samsung splash screen still had access to the stock BL even after clearing the data and cache still would not boot. The only solution I could think of was to odin the 5.1.1 version back in however since the file was never released from att to samsung that was very difficult but trolling the internet I did find a copy of the att gs5 OTA update that I was able to place on my External SD card and install which did recover my soft bricked phone and I hope these instructions will assist someone else from having to take their phone to att to reflash the update.

Step 1: Download Zip from link PM me me cant post links yet

Step 2: Place Zip on external SD card

Step 3: Place Gs5 in Boot Loader Mode by removing and holding Home button and Volume Up with Power

Step 4: Use the Volume buttons to highlight "

apply update from external storage

" and select with the power button

Step 5: Highlight

G900A-OF3toOI5-ota-2400258.zip

and use power to select

Phone will now install the most recent AT&T OTA lollipop update this is a stock OTA no root stock BL also this came from an untrusted source so use at your own risk not responsible for stolen information or damage to phone.

original link PM me please i cant post links yet
[AT&T Samsung Galaxy S 5] fordman503:
Links

Download http://click.xda-developers.com/api...drive.google.com/file/d/0B_X...ew?usp=sharing

Original Post http://www.fanlesspc.org/vbb/f777/u...-g900aucu4coi5-5-1-1-ok-2019118-post11519477/
[AT&T Samsung Galaxy S 5] nicoh93:
thanks ! testing