yashsingh1/xdaforums huggingface dataset:
[LG V20 Guides, News, & Discussion] buttonbutton:
Question about the manual video camera controls

Hi all, I'm a new user and not sure where to post this question...

I've got the LGV20 H910 from AT&T. One of the main reasons I went for this one was the camera. I LOVE all of the manual controls. Do these remain in tact on the new ROM after the Dirty Santa root? I understand that there is currently no way to return to stock ROM, so I want to be sure that I won't lose the manual controls on this badass video camera.

I haven't seen any mention of this one way or the other in the pages I've been reading over the last several months since I got the machine.

Related to this, how about the HD Audio recorder and Hi-Fi Quad DAC? Are they in working order?

My guess is that because the new ROM was made for the V20, it should be fine. I just want to be sure before I take the plunge.
[LG V20 Guides, News, & Discussion] TheIronMaiden:
Yes only for the stock based ROMs. Custom ROMs like lineage and RR has lower quality audio​ and you'll lose the lg camera and it's capabilities
[LG V20 Guides, News, & Discussion] lotus55:
Long story short I need to retrieve deleted text messages for my case against my cheating ex husband. Will this work the LGV20 Sprint that has been factory rest?
[LG V20 Guides, News, & Discussion] elliwigy:
i thought once theyre gone theyre gone? if device was reset u might b out of luck im afraid.. you should be able to get message details but probably not actual content from the cell provider.

this is why i back up all my messages and store the backup on a cloud and sd card etc
[LG V20 Guides, News, & Discussion] me2151:
No. short and simple. try a data recovery company
[LG V20 Guides, News, & Discussion] ashyx:
If you have root then you can use various software to retrieve deleted files.

One of the best android apps is diskdigger pro.

If it's there this will recover it.

Another way is to create a raw image of the data partition then use a windows recovery program on the image.
[LG V20 Guides, News, & Discussion] hubrisnxs:
Respect to your past work, and yeah, you've made your opinion clear. Hope this didn't retag you... I've just enjoy your work on other phones, and thus, this
[LG V20 Guides, News, & Discussion] Nona25:
But how do you root a sprint LG v 20 without deleting every thing. I have the same issue I need ut for court.

---------- Post added at 01:08 PM ---------- Previous post was at 01:01 PM ----------

I need messages for court too. Were you successful in getting them. Also I have not done a factory reset.
[LG V20 Guides, News, & Discussion] RBEmerson:
I tried following the conversion and timed out around page 20.

I have a US Cellular LG-US996, running 7.0. LG says "no way" on unlocking the bootloader.

Can this thing be rooted or do I sell it and look for a V20 that can be rooted? And what, in the US market space, qualifies? I just want to run V4A and TI.

There's nothing on the phone I care about. AFAIK, an FDR was applied before it went out the door.
[LG V20 Guides, News, & Discussion] me2151:
I ran the file without having SU zip or busy box on the phone >.<
[LG V20 Guides, News, & Discussion] pro_granade:
#twrp

---------- Post added at 05:53 PM ---------- Previous post was at 05:52 PM ----------

We're in Download mode and found a program that can apparently send files and commands to the device while in this mode.

http://androidforums.com/threads/gu...5-1-1-and-unbrick-updated-on-9-2-2015.937446/

---------- Post added at 05:58 PM ---------- Previous post was at 05:53 PM ----------

on freenode
[LG V20 Guides, News, & Discussion] elliwigy:
what commands did you run and what was the output? also does it appear to be rooted and or stick after reboot meaning files still there on the device?
[LG V20 Guides, News, & Discussion] rickberg:
If your not rooted yet what did u do to get the sh to execute
[LG V20 Guides, News, & Discussion] me2151:
I literally ran sh lg_root.sh from the tmp directory after chmod +x lg_root.sh

EDIT: it was chmod 777 lg_root.sh not chmod +x
[LG V20 Guides, News, & Discussion] pro_granade:
chmod 0777
[LG V20 Guides, News, & Discussion] rickberg:
Ok but are you rooted
[LG V20 Guides, News, & Discussion] me2151:
Negative. It still does not have write access to the system directory so it fails.
[LG V20 Guides, News, & Discussion] rickberg:
If your not rooted try to install latest supersu from playstore

Uninstall previous version

Install new one and see if binaries are there
[LG V20 Guides, News, & Discussion] me2151:
Negative. No Binaries installed.

All it did was run the script. Nothing actually installed due to no write access.
[LG V20 Guides, News, & Discussion] rickberg:
**** ok try this

Run root.sh in dl mode

Pull battery

Reboot into recovery and try to run root sh from there as well maybe when it boots were losing it

My thought is that if we push the file and boot into recovery we can bypass the read write hopefully if the root.sh installed in the dl mode
[LG V20 Guides, News, & Discussion] me2151:
Issue I have there is no matter what i try to do in dl mode i get fail. i cannot even LS in dl mode.

Just get fail. Recovery I can't even use adb because my drivers won't install for there....

---------- Post added at 12:39 AM ---------- Previous post was at 12:24 AM ----------

Guys i just thought of something. On my old HTC device(m9) the boot loader contained a section that shows you the imei of the device(Almost exactly like ours does in imei display mode). What if this mode(VOL up+VOL dwn+ PWR) is part of the boot loader? We might be able to get somewhere with it.

---------- Post added at 12:44 AM ---------- Previous post was at 12:39 AM ----------

And thats a nope. USB is not used at all in that mode

---------- Post added at 12:51 AM ---------- Previous post was at 12:44 AM ----------

Managed to push the lg_root file to my sdcard. Im rebooting now to see if it stayed
[LG V20 Guides, News, & Discussion] elliwigy:
i could be way off but is there a way to push the file to tmp using adb then exploit dirtycow to change it to a file with escalated priv and then go into dl mode and execute it?
[LG V20 Guides, News, & Discussion] me2151:
Nope. Unless someone has some way of executing stuff through dl mode(every command fails through Send_Command). If we can figure out how to get stuff working right with dl mode then yes.
[LG V20 Guides, News, & Discussion] elliwigy:
so the push command works but the send command doesnt?
[LG V20 Guides, News, & Discussion] me2151:
That is correct. How ever we cannot confirm really that the push command works when we can't ls :)
[LG V20 Guides, News, & Discussion] rickberg:
Can we reverse engineer the send command binary and see where its failing at
[LG V20 Guides, News, & Discussion] me2151:
I cannot. Maybe someone else can. Im trying a bunch of other things so maybe it will work when I'm done
[LG V20 Guides, News, & Discussion] rickberg:
Ok keep me posted i will be nore help tomorrow
[LG V20 Guides, News, & Discussion] elliwigy:
i wish the likes of [MENTION=2684188]autoprime[/MENTION] or [MENTION=2376614]jcase[/MENTION] would help lol but what can you do.. theres plenty RD's around but apparently not many working with LG these dsys
[LG V20 Guides, News, & Discussion] jcase:
Seriously, my feelings/views on working on LG phones are fairly known. I would appreciate it if ppl would stop summoning me to LG threads when they know .
[LG V20 Guides, News, & Discussion] elliwigy:
just a habit of shout outs.. i apologize and it wont happen again...
[LG V20 Guides, News, & Discussion] jcase:
thanks, i understand, but it happens.... a lot by a lot of ppl, some people (not you) have used it as a way of harassment to try to get me to work on things
[LG V20 Guides, News, & Discussion] elliwigy:
lol man, i bet its annoying.. problems of a celeb status dev haha
[LG V20 Guides, News, & Discussion] rickberg:
Since it wont brick your phone try the dirty cow exploit again but instead of letting the phone reboot after the 3rd file flash as soon as adb says done pull the batt and boot into dl mode then try the send command
[LG V20 Guides, News, & Discussion] jcase:
Trying to use the dirttcow exploit to modify or replace files/partitions on this device CAN and WILL brick it depending on what you target
[LG V20 Guides, News, & Discussion] jcase:
Better yet, reverse download mode, as reversing sendcommand will give you nothing.

You will see download mode added a crypto-handshake.
[LG V20 Guides, News, & Discussion] jcase:
v20 has dm-verity enabled, and signature validation of pretty much every interesting partition.

Trying to root via download mode's backdoor will brick it unless you haev an additional exploit to deal with dmverity or hte bootloader
[LG V20 Guides, News, & Discussion] me2151:
I have found a way around the authentication for DL mode using Send_Command(thats why we get FAIL every time). I am about to attempt to root. I will keep you posted on the outcome
[LG V20 Guides, News, & Discussion] jcase:
I'd read my recent posts.
[LG V20 Guides, News, & Discussion] rickberg:
Ok thank you last i read on the forumn was since it didnt mount system as rw it wpuldnt brick
[LG V20 Guides, News, & Discussion] me2151:
I did. And I understand. Im more trying to get write access more than anything. I probably will not run anything other than maybe a mount command if I get this going
[LG V20 Guides, News, & Discussion] jcase:
If it is monted RO then you are not actually modifying anyhting, but if you then pivot and overwrite recovery, then you are modifying something
[LG V20 Guides, News, & Discussion] jcase:
ok, once you remount it you will break dm verity (assuming it was implemented correctly) and have a brick.
[LG V20 Guides, News, & Discussion] rickberg:
[MENTION=2376614]jcase[/MENTION] thanks for your advice good to see you on here i have never really messed with binaries etc most of my dev has been theming and working on xml files
[LG V20 Guides, News, & Discussion] me2151:
Ouch.
[LG V20 Guides, News, & Discussion] rickberg:
This guy has a great reputation on xda and lg devices just a warning if he says dont do it dont do it lol
[LG V20 Guides, News, & Discussion] me2151:
Yea. I know. Ive been following him on twitter since the LG optimus phones.(I was a dev on the Optimus S on android central)
[LG V20 Guides, News, & Discussion] Ryuk359:
It's so hard not to lose hope seeing all the fails. It's gone way over my head now in terms of code. You guys are doing the lords work tho. This is about the best device att has (for me at least) so I'll keep hoping and will help where anyone needs me. Just give the order.
[LG V20 Guides, News, & Discussion] me2151:
Since I have not explained what I have done so far I will state where my progress has left us. The Send_command program fails to PROPERLY connect to the v20 in DL mode. It will connect but you cannot do anything at all(This includes the push_files program too. It's not actually pushing the files). The reason this is not working right is due to what jcase mention earlier in this page. Authentication. I have managed to partially get around that by using LGUP to begin the handshake and unplugging my usb cable to prevent anything from actually being written to my phone(Im using the T-mo tot flashing to begin my connection) then closing LGUP and plugging my phone back in. The handshake is still active on my phone(the writing changes underneath the progress bar in DL mode) and i can attempt to use Send_command to do stuff. I no longer get a FAIL message when using the DIAG port(in my case Port COM3) BUT!!!! I am still unable to complete any commands since I am using a generic DLL through LGUP(I am using the 8994 DLL since the LS997 does not have one leaked yet).

At this point we need to either Bypass the handshake somehow(pretty sure not possible) or wait until the v20 has proper DLLs out on LGUP. Anytime you try to use Push_files it will ALWAYS say write(then the size) but its not doing anything. It will even say it if you disconnect your phone before anything "writes".

Now this is only based on my findings and we may have another method come out but if we want to use this method we need to wait until the LG DLLs are leaked. No way to use Send_Command before that.

Also, NEVER GIVE UP! There will obviously be a lot of fails before we get a working method!
[LG V20 Guides, News, & Discussion] justinswidebody:
We can try to contact wolfgart and get the tot and dll files. He some how is always able to get them.

---------- Post added at 03:22 PM ---------- Previous post was at 03:21 PM ----------

I sent him a message
[LG V20 Guides, News, & Discussion] nyfl2004:
Guys, I'm not sure that we will be able have root at all for the v20 and future devices on Sprint. They seem to be doing everything possible to prevent root. etc. I have not been very happy with Sprint since they started to lock bootloaders. In the last few days I have spoken with Sprint OKC several times and they state that they do not want root, do not support rooted devices and this will be the norm going forward. This has been my suspicion for a while now. I know that we have amazing devs here and hope that we can win this ongoing war.
[LG V20 Guides, News, & Discussion] me2151:
Sprint has never wanted you to root or supported rooted devices. You just hope they're not smart enough to check for root when you need support done. We will get this done. We always have and always will. Thats what devs are for. Just need the proper exploit and its done. If we can get Send_commands working(and verify that its permissive) we should just need an exploit that works in there. THEN we can possibly re-enable the boot loader and unlock it for proper everything.

I am aware this is very optimistic but we can do this. just don't give up hope.
[LG V20 Guides, News, & Discussion] nyfl2004:
It's good to see some dev support returning to Sprint. I appreciate everything that everyone is doing here. :svetius::svetius:
[LG V20 Guides, News, & Discussion] twistedvip:
Thank you jcase for letting us know some of these tips and helping some of us avoid bricking our phones. I understand your stance on any dev for LG phones but definitely do appreciate you keeping an eye out for us members.
[LG V20 Guides, News, & Discussion] jcase:
Sprint has always been one of the carriers not caring if you unlock or root a device, its LG most likely pushing for the lock.

SElinux is enforcing in v20 download mode, ive already verified.

Sendcommand isnt going to work, it is missing the handshake authentication support

Bootloader is enabled as it, i mean it boots up...

Really, barking up wrong tree going through download mode, dirtycow can provide more than download mode could, but you would still need an additional exploit to unlock the bootloader
[LG V20 Guides, News, & Discussion] elliwigy:
Agreed, a BL unlock is the way to go using dirtycow to somehow unlock it and then find a way to load custom recovery at which use a root that wont cause bootloops..

I wonder if theres a way to modify BL to an unlocked state or push the BL from tmobile in an unlocked state to our devices.. if we can get the BL unlocked, they already have a twrp and root in the tmo threads
[LG V20 Guides, News, & Discussion] jcase:
TMobile bootloader will brick device, modifying bootloader will brick device
[LG V20 Guides, News, & Discussion] Ryuk359:
I don't have much experience with Sprint but I'm assuming att is running the same circles as far as locked bl goes. This device is so rad tho just a little tweaking and itd be near perfect for me. I came from the g4 on cm13 so I'm somewhat lg loyal. I just hate T-Mobile gets all the fun because I refuse to go back to them. They hardcore ****ed me, my mom, and my uncle. 3 separate accounts. Anyway yeah I hope we can garner enough support for something to happen. We've got a few big hitters in here now. I still have faith in you guys.
[LG V20 Guides, News, & Discussion] elliwigy:
so we need to disable dm verity somehow as a first step it seems before we can do anything else lol then somehow make it to where we can use a custom recovery or make it to where the BL will allow a custom recovery then need a special systemless type root? lol dm verity sucks

---------- Post added at 07:40 PM ---------- Previous post was at 07:21 PM ----------

I think we need to go back lol in order to root i think we need to start with boot state or the device state (unlocked BL) as this will put us in an orange state where we can flash what we want which essentially we'll get a warning but ultimately it will disable the other verification checks.. this will allow custom recovery and ultimately root..

https://source.android.com/security/verifiedboot/verified-boot.html

---------- Post added at 07:43 PM ---------- Previous post was at 07:40 PM ----------

it does seem LG and Google screwed us lol. LG locks BL deoending on carrier requests and Googles implementation of verified boot being kicked into the next level in Android Nougat with the forced encryption on boot makes for a challenge.. I am sure with dirtycow we have an awesome tool/exploit but will take some serious brainpower lol
[LG V20 Guides, News, & Discussion] elliwigy:
so recowvery allows a permissive boot but dm verity reverts it and makes you boot in a normal state?

---------- Post added at 08:00 PM ---------- Previous post was at 07:58 PM ----------

if it works by all means try lol if its not possible however then dont waste time.. an unlocked BL to my knowledge disables all of that so if its easier to unlock the BL id suggest that route.. then again not sure how when we dont have fastboot on our devices or its not enabled lol
[LG V20 Guides, News, & Discussion] me2151:
That is correct. during reboot to recovery its caught as corrupt and reboots on its own and then its enforced again
[LG V20 Guides, News, & Discussion] elliwigy:
so it causes it to reboot in a red state.. maybe theres a way to change this in the fstab or a way to tell it to boot in orange or another mode
[LG V20 Guides, News, & Discussion] jcase:
Its not dm-verify keeping recovery from booting, dm-verity applies to system (and some times other partitions like oem or vendor). Your issue is that you have an unlocked bootloader and just blasted your recovery.

If it wont boot into android, then that means you blasted system, and you have a soft brick.
[LG V20 Guides, News, & Discussion] me2151:
I wouldn't count this as a soft brick though. It just said "No go **** yourself" in nice google words basically. then booted normally.
[LG V20 Guides, News, & Discussion] elliwigy:
I honestly think unlocking the BL would be the only way to go.. if you start getting into recowvery then you get into dm verity then other challenges instead of just unlocking a BL then it might be more of a challenge
[LG V20 Guides, News, & Discussion] jcase:
I miss read your post. You didnt modify system.

You guys are barking up the wrong tree
[LG V20 Guides, News, & Discussion] elliwigy:
so if he managed to unlock the bl but then recovery was shot, is there a way to push recovery in the same script prior to it rebooting?

---------- Post added at 08:26 PM ---------- Previous post was at 08:21 PM ----------

haha right.. i have no idea what im talking about.. i suppose brainstorming best i can..

it would be nice if someone could give direction as to what "tree" to climb lol.. of course any input is great, and we dont expect it
[LG V20 Guides, News, & Discussion] jcase:
Stop trying to flash twrp or install supersu, or "root" it, target bootloader.

I posted resources the other day that might help:

http://xdaforums.com/general/security/android-security-resources-learning-t3492567

More or less, either need some leaked sign bootloader from LG, or going to need someone capable of reverse engineering, and exploit development.

Honestly just trying randomish things here, is going to ruin phones.
[LG V20 Guides, News, & Discussion] me2151:
Since we should target the boot loader. Is it possible to use dirty cow to PULL a copy of the boot loader from the phone so we can work on it or no? Im not too familiar with boot loaders but if we can do it this way wouldn't we(theoretically) be able to compare it side by side with the T-mo boot loader to figure out fast boot?
[LG V20 Guides, News, & Discussion] jcase:
Yes, however its not about figuring out fast boot, and comparing to tmobile.
[LG V20 Guides, News, & Discussion] me2151:
Ok. I will set my current method(nuking recovery :)) aside and focus on trying to pull a copy of the boot loader.
[LG V20 Guides, News, & Discussion] me2151:
Send_command working but we don't get many commands. only 2 so far. ls and ps

---------- Post added at 10:15 PM ---------- Previous post was at 10:06 PM ----------

I have root access. Runs commands as root. I can view almost every single file in this phone with no permission denied however I cannot do anything else with them

EDIT: 3 commands. ps, ls and mkdir. Checking now to see if mkdir worked.

EDIT2: Nope. not after boot atleast
[LG V20 Guides, News, & Discussion] elliwigy:
i believe THAT is because if dm verity/write protection.. it fails to match so it reverts back

we need to somehow unlock the BL, wish i was of more help lol
[LG V20 Guides, News, & Discussion] Ryuk359:
So what happened to "open source"? I don't really feel secure until I root and lock it down myself. I build walls, they're HUGE.
[LG V20 Guides, News, & Discussion] Skripka:
The OS is by Google... The drivers, bootloader, and basically everything else is not.

Even on Nexus devices it has gotten maddening... The Nougat source posted needing a ton of work to even compile. Google seems to view the AOSP tree as nothing than a legal Apache or GPL requirement and not something that actually needs to be usable by someone lacking multiple computer science certs or degrees
[LG V20 Guides, News, & Discussion] Ryuk359:
Makes a lot of sense. Thank you sir.
[LG V20 Guides, News, & Discussion] me2151:
Alright new command available. and its not what we want to hear.

getenforce is an available command... and its Enforcing :(

more available commands:

dmesg

dumpstate
[LG V20 Guides, News, & Discussion] elliwigy:
lol does setenforce work?
[LG V20 Guides, News, & Discussion] me2151:
That would be a no. I wonder if I try dirty cow then go into download(since dirty cow sets permissive through the recovery reboot) would it be permissive.

EDIT: Didn't work...
[LG V20 Guides, News, & Discussion] me2151:
Well thats weird. Went to go hop on the IRC and I'm banned for some reason...
[LG V20 Guides, News, & Discussion] elliwigy:
to be honest, i feel as jcase said, i think we need to focus on the BL..
[LG V20 Guides, News, & Discussion] othermark:
Been doing research,

the laf partition is the download mode kernel right?
[LG V20 Guides, News, & Discussion] elliwigy:
to my knowledge yes.. the laf on lg is the download mode
[LG V20 Guides, News, & Discussion] me2151:
Yes that is correct. so if you can get a list of LAF command they should all(theoretically) work. If someone want to work on that throughdl mode just PM me and ill let you know how to get in. Tomorrow... im going to sleep. Night