yashsingh1/xdaforums huggingface dataset:
[Sony Cross-Device General] p0kemon:
Please read whole tread. Yes if you dumping with DD. But our tool is something diferent, it reconstructs unlocked trim area and make locked. Only unit 1046b is need for reconstruction. That unit can be dumped by system user and libta.so. Curently I'm trying to simulate usage of the unit 1046b, still have no idea what purpose is of that unit in ABOOT. How that unit is checked? If I menage to reconstruct unit 1046b we definitelly no need any root or system user! It would be grea if somebody skilled help me. Unit 851 which is a cert have something related to unit 1046b, unit 7da and unit 8b2, it would be great if somebody simulate hashing by that cert from unit 851 and bin from 1046b unit for example using openssl... Main question is how to check unit 1046b?
[Sony Cross-Device General] darknessmc:
Take a look to here http://xdaforums.com/showthread.php?p=70033982

He used someone's ta backup and made some modification to it and after some posts he said "done". He used XZ doul. I didn't understand what he did.
[Sony Cross-Device General] munjeni:
You misunderstanded that :) That's just backup with changed file extension to zip instead of img. Do in mind you can't use anybody trim area, it will hard brick your phone!
[Sony Cross-Device General] darknessmc:
No. If you read it from first you know what is about. He used it after did some modifications and didn't bricked his device.
[Sony Cross-Device General] munjeni:
I see. Yes thats a known thing, units can be modified but some only. If he touch some units which contains hashes his phone will dead. But what is a point on link you provided? I didn't see anything related to units 1046b, 8b2 and 7da which he trying to understand
[Sony Cross-Device General] :
only crucial unit is 2:7d3 ( hardware config )

once it damaged, s1boot will halt.
[Sony Cross-Device General] p0kemon:
Hi, what about unit 1046b? Which I know unit 8b2 is proccessed by RCK_H hash from unit 7da, but how unit 1046b is proccessed?
[Sony Cross-Device General] xrenoix:
hello [MENTION=7891388]p0kemon[/MENTION] it's possible test on locked bootloader (bootloader unlock allowed no) ? i have an xperia sp with motheroard with no backlight but working !!! i want test for you !!! thank's
[Sony Cross-Device General] Sonic Dash:
Got a question for you [MENTION=7891388]p0kemon[/MENTION] by any chance is the TA related to that annoying message at the start of boot on an unlocked device (Your device has been unlocked and can't be trusted...) with what your working on would you be able to disable that in anyway and still have the device unlocked?
[Sony Cross-Device General] :
device certificates ( marlin,wedevine,fido ) are encrypted with this unit.
[Sony Cross-Device General] p0kemon:
For example simulation for rck_h=sha256(hextobin(unit 8b2)), but can we simulate 1046b somehow?
[Sony Cross-Device General] :
to simulate certificate encryption, need to research all the chain from secd ( or suntory ) till trustzone applet, i'm never even started this.

however, much easier will be to start such research with smartphone without trustzone, like msm7227,msm8255-based

algorithm will be same, but it is much easier for research.
[Sony Cross-Device General] p0kemon:
Is exist xperia phones without trust zone but with trim area drm?
[Sony Cross-Device General] p0kemon:
Static part of the unit 7da contains config ALLOW_UNLOCKING config, when value is 1 unlocking is possible, when value is 0 unlocking is not possible. That static part is signed and we can't change value :(
[Sony Cross-Device General] p0kemon:
No. Only which I can do, in case you have drm key, to convert your trim area dump to locked. Without valid drm key I can't!
[Sony Cross-Device General] xrenoix:
Ok thank you so much for the explanation !!! Unit 7da lock by encryption sony keys lock forever no chance for unlock bootloader no :( and just change this by Network Operator I had this chance once for my xperia z bouygues telecom fr have change my original TA !!!
[Sony Cross-Device General] p0kemon:
To all Z1 and Z1 compact users with lost drm keys, contact me by pm and give me your trim area, I can try to give you trim area with your lost drm key! Pm me if you are interested!
[Sony Cross-Device General] istux:
That stupid message usually disappears if you flash an entire FTF through Flashtool ;)
[Sony Cross-Device General] munjeni:
Ok, but where is a hash of it?
[Sony Cross-Device General] :
unit 66666 is a key, why need any hash of it ?
[Sony Cross-Device General] munjeni:
Is not you said that device certificates ( marlin,wedevine,fido ) are encrypted with unit 1046b? I don't understand what you mean. I just trying to find a way for simulate that unit 1046b, have no idea by now what is usage of it.
[Sony Cross-Device General] :
it is part of encryption key for device certificates
[Sony Cross-Device General] munjeni:
I have analysed unit 07e6 (unit which contain certificates), found a lot interesting things! Will try to make an tool for extracting things from that unit for later analyse (e.g. to simulate usage of the unit 1046b). Unit 07e6 contains a lot of structures! An part:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00063480 05 02 [COLOR="Red"]00 06[/COLOR] 4D 41 52 4C 49 4E [COLOR="Red"]00 04[/COLOR] 6D 74 6D 6F ....MARLIN..mtmo
00063490 [COLOR="Red"]16 7D[/COLOR] [COLOR="SeaGreen"]00[/COLOR] [COLOR="RoyalBlue"]01 20[/COLOR] CF 4C 78 44 4E 87 FB 7B 06 90 05 .}.. ÏLxDN‡û{...
000634A0 92 F8 97 59 4F 2F 14 C6 B4 79 FA 52 70 B8 23 22 ’ø—YO/.Æ´yúRp¸#"
000634B0 CF BD 1C 85 37 42 AC B3 47 18 34 D4 1D 8A B3 E9 Ï½.…7B¬³G.4Ô.Š³é
000634C0 D9 16 0F 4C FA C3 62 44 F6 9B 00 C0 3F 45 EB 6B Ù..LúÃbDö›.À?Eëk
000634D0 7D 05 C4 41 82 E5 FD 10 DE C5 A6 5D 23 2C 17 DF }.ÄA‚åý.ÞÅ¦]#,.ß
000634E0 01 44 07 7B 7F 82 2F FE EA 57 B0 2A DD 37 D4 11 .D.{.‚/þêW°*Ý7Ô.
000634F0 43 B0 13 51 7B 4E D6 CF AD FE 17 C8 CB 9E 68 74 C°.Q{NÖÏ.þ.ÈËžht
00063500 5B 72 [r

size of the marlin string, size of the another string, size of the part0, green=type, blue=sizeof(public rsa key), public rsa key, another one, ... and a lot of other things, certificate size,..etc ..etc, soon I will give more details. Unit 07e6 is in conjuction somehow with unit 1046b? I going to figure out simulation for unit 1046b, have no idea what is 1046b, is it sha1, is it hmac, what is that, key or hash or whatever
[Sony Cross-Device General] :
unit 66666 it is PART of key, which is used to crypt device-specific PRIVATE keys in all this semc/marlin/viaccess/cmla/wedevine/etc certificates
[Sony Cross-Device General] munjeni:
You mean 66667 (hex 1046b). To crypt? Maybe its private unique key (hmac?) for decrypt? Whole things is confused :( Have found 15 public (keys?) with size 0x120, 0x60, 0x40, 0x30, 0x20 andast one with size 0x1010, and found 15 certificated, 15=15 , seems every each (key?) is for every each cert. There is also two xml files, and at the end hash with size 0x16, thats by now
[Sony Cross-Device General] :
sorry, my error - of course, device key is unit 66667

it is part part of key, which is used to decrypt so-called certificates blob, composed of units 7e6-7f2

other part of key is hardware unique key, they both form a HMAC, which is used to decrypt private keys from blobs.
[Sony Cross-Device General] munjeni:
That have sense now! I still don't figured out how can simulate things using all that on openssl, do you have idea?
[Sony Cross-Device General] :
as i'm wrote in this thread earlier - for this we need to reverse all things from android libraries till trustzone applets ( probably trustzone applets used just to get Hardware Unique Key ) and i never did it fully.
[Sony Cross-Device General] munjeni:
Here is some ways which probably can help http://bits-please.blogspot.rs/2016/06/extracting-qualcomms-keymaster-keys.html
[Sony Cross-Device General] munjeni:
Viac ces s? Is possible that security mechanism used here is an variant of the conditional access system like this https://en.wikipedia.org/wiki/Viaccess ? Than probably drm key can be used as a key for simulation http://www.satforum.cz/ird-bet-cr-pt-via-s-c-n-x/478-how-decode-encrypted-viaccess-word.html . I forgot previous things I found on this thread and to be honest have no more free time playing with things from our thread. Hope somebody get a look on this and find something new and interesting.
[XDA Assist] damalisani:
Hi guys...

The phone is an BGH Joy Smart A6D (really is a ZTE P172F10 board with MT6572)

I can't enable USB Debugging because when I try it... ¿virus? restarts android

I thought... "I make an hard reset and ready...." but not

The phone ignore "absolutely" the hard reset (with 3 buttons), I can follow the procedure but the phone never erase the data

ok... then... heavy gun

Flash Tool... I replace firmware... dowload ok, etc but... the phone always has the exactly same data

How I can't enable usb debugging (I think) I neither can enter in "fastmode" only sideload

when I try upload throught sideload...

when it uploaded near 85%... it shows error "protocol fault (no status)"

Really I don't know what I must to do.

Can you help me?
[XDA Assist] sawdoctor:
Greetings and welcome to assist. I can not find any information at all on your device unfortunately, maybe if you ask in general q&a some one with your device maybe able to help

http://xdaforums.com/android/help

Good Luck

Sawdoctor
[Moto Z Play Questions & Answers] mijing:
Any Gameloft game are installed fail error code 505

Indian Moto Z Play .

Help me..
[Moto Z Play Questions & Answers] FreedFromDeath:
Contact Gameloft support.
[P3300, MDA Compact III General] Beefheart:
I have an XDA Orbit with TomTom 6.030 installed and 'UK And IE Plus Major Roads Of WE' V675.1409. With this map I also have all the safety camera locations as of June 2007. I notice these cameras show up on the map when you pass them and indicate the speed applicable on the screen. However, there seems to be no audible warning of this, either by a bleep or voice and I can't find any way of turning such a thing on in the menu. Can this be done? I would like a warning of an upcoming speed camera a mile in advance for example.

Thanks in advance.
[P3300, MDA Compact III General] mugglesquop:
you can change this in the Preferences, i think its under POI.
[P3300, MDA Compact III General] Beefheart:
Already looked there mate. You can turn the various POIs on or off in general but there seems to be nothing relating to sound or audible warnings.
[P3300, MDA Compact III General] alanwesty:
It's under the Manage POI's menu not the enable/disable PIO's
[P3300, MDA Compact III General] mugglesquop:
i was close lol :p i remember it took me ages to find :D
[P3300, MDA Compact III General] Beefheart:
Cheers mate. Bit of a pain every single speed camera type has to activated individually though.
[P3300, MDA Compact III General] mikealder:
Are you using the Speed Camera database from TomTom or PocketGPSWorld.com ? as this will have a significant bearing on how and what you can do in way of warnings - Mike
[P3300, MDA Compact III General] Beefheart:
The TomTom one.
[Sony Xperia C5 Ultra] k.podotas:
I own a Sony Xperia C5 Ultra dual recently updated to Marsmallow 6.0. As for the time being there is no "one click root" tool for 6.0 firmware, can I -with assist of the proper tools (flashtool 0.9.19.2 and E5533_29.1.B.0.101_RU.ftf rom)- safely downgrade or roll back to firmware 5.1, where my C5 operates better and there is support of kingroot. Thanks in advance
[Galaxy S 4 Q&A, Help & Troubleshooting] Jackie78:
Hi,

I downloaded the latest Stock ROM for my i9515, because I am not satisfied with CM13.0 and 12.1, so I bootet to Odin mode, and try to flash the Tar.md5 file, but Odin keeps getting me this error, why? How can I sucessfully flash stock?

<ID:0/008> Added!!

<OSM> Enter CS for MD5..

<OSM> Check MD5.. Do not unplug the cable..

<OSM> Please wait..

<OSM> Checking MD5 finished Sucessfully..

<OSM> Leave CS..

<ID:0/008> Odin engine v(ID:3.1101)..

<ID:0/008> File analysis..

<ID:0/008> SetupConnection..

<ID:0/008> Initialzation..

<ID:0/008> Get PIT for mapping..

<ID:0/008> There is no PIT partition.

<OSM> All threads completed. (succeed 0 / failed 1)

<ID:0/008> Removed!!

<ID:0/008> Added!!

<ID:0/008> Odin engine v(ID:3.1101)..

<ID:0/008> File analysis..

<ID:0/008> SetupConnection..

<ID:0/008> Initialzation..

<ID:0/008> Get PIT for mapping..

<ID:0/008> There is no PIT partition.

<OSM> All threads completed. (succeed 0 / failed 1)

<ID:0/008> Removed!!

<ID:0/008> Added!!
[Galaxy S 4 Q&A, Help & Troubleshooting] Rhoban:
You should try another USB cable and USB port.
[Galaxy S 4 Q&A, Help & Troubleshooting] audit13:
I always recommend using the original Samsung USB cable, Win7, and Odin 3.10 to flash a stock ROM if possible.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] secXces_debaki:
Good to see a legend over here. I am ready to flash it, let's begin the new era of this amazing phone!
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] eng.stk:
blu_spark r8

All right crew!

New build is up. Wicked!

I decided to bring this kernel form the OnePlus 3 to the 3T :victory:

From those of you that already know me from Nexus, Motorola and other Oneplus devices you know what to expect: stability, useful addins, original work and features, no cruft, lean optimizations, security updates, better battery / (real life) performance, better overall UX.

Enjoy!

Keep in mind: I will give no active support for custom ROMs or OB. Meaning, if using anything besides stable OOS don't bother posting about it.

I am only interested on debugging stuff in stable OOS (with logs and reproducible steps to replicate the issue).

Don't spam this thread with CM or other ROMs stuff like "this don't work, my app doesn't open, etc" or debugging features.

Also don't go spam and bug reporting on ROM threads if using this.

If you like my work, donations are always welcome (but not mandatory).

Don't forget to hit thanks, it's free ;)
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] liver20:
Wooooo amazing!!!!

You are the Best and you Know

Enviado desde mi ONEPLUS A3003 mediante Tapatalk
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] andre0005:
[MENTION=3873953]eng.stk[/MENTION] Great to see you here! I've been enjoying your op3 kernel very much.

Is this just copy/paste from your op3 thread or do we really need to wipe data to use f2fs? Thought it's the stock filesystem on the op3t.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] HTCore:
Hell yeah...! Thank you.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] pamposmouskos:
Lovely!
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] ForcedZucchini:
Been waiting for this. Thank you!
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] justibasa:
I'm wanting to know the same thing, but looking forward to flashing it later today.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] Schrotty35:
Yessssss..... Good to see you here now.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] Funk Wizard:
Good to see you here buddy, thank you for your continued support :)
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] eng.stk:
Thank my wife, because Oneplus didn't gave me anything despite the huge amount of work I did on the OPX/OP3.

Seems like I don't fit on the "popstar" developer selection, so no device given to me to develop on.

I never monetized my work and I will continue to do so: I prefer to be a rock'n'rolla :)

Yeah it was a typo, no need to format, just flash the zip
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] gemj95:
Really happy to see more developers supporting the 3T :)
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] NielsvdS:
Thank you for creating this wonderfull kernel :D
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] timobayl:
Which Kernel Tool is recommended?
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] andre0005:
Read the OP. - Kernel Adiutor.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] SlyUK:
Remember this kernel from the Nexus 5 days. Long live the memory of Nexus and long live this kernel.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] NielsvdS:
When I have the original kernel do I have to flash also the dirty ROM?
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] hachamacha:
[MENTION=3873953]eng.stk[/MENTION] : Welcome and a quick question (I hope):

I'm guessing that you create custom modules (/system/lib/modules/*.ko) for your kernel. If so, I'm wondering if it's really possible to revert back to stock kernel , the way many people are claiming it is, by just flashing the old 3.5.3 stock boot.img file? I've not yet developed for Marshmallow, only earlier flavors, so I'm still of the ilk where it mattered what modules were in /system/lib/modules, not just what was in the ramdisk in boot.img.

Can you shut me up for good on this topic with a good answer? (I'm about to shut up anyway lol).

Thanks and thanks for the new kernel.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] eng.stk:
No, if you are all stock just flash the the kernel zip (you need to have bootloader unlocked and flashed twrp ofc)

If I understood the question correctly...

Sure that's what systemless is: I don't touch the system partition.

Flashing boot.img from 3.5.3 get's you full stock again.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] alvin182:
Damn 683 mA :eek:
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] immi803:
:eek: yes something's seriously wrong with oos 3.5.4

I'm still in testing, all available battery sucking check apps in my phone, lol

But still can't figure out, looks rom problem, kernel wake locks are reporting absolutely fine, i think I'll go back to oos 3.5.3 oos

What the heck :silly:
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] dreinulldrei:
Any reason for OT? eng.stk requested several times that discussion should focus on development. If you guys need to discuss OP3T power consumption, there are other threads plus you might want to head over to OP forums and let them know.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] Chabola:
Yo... what kinda of magic is this kernel!! [MENTION=3873953]eng.stk[/MENTION] App loading times on the op3 are insane even without performance tweaks, fluid and snappy in other areas as well, doing great dev will run through some battery cycles hoping it does great in the battery department. :svetius: :laugh:
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] liver20:
Any tried Last build with tesla nougat? Could be work?

Enviado desde mi OnePlus3T mediante Tapatalk
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] eng.stk:
Will not work with any N or custom ROMs
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] mahmoudxcom:
Some time i can't wake up my phone from finger print or power button despite of the notification led is blinking but no response
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] eng.stk:
Nope, all good here.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] inst1029:
same thing happen 10mins ago

with latest kernel
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] LMcR92:
Have you deactivated ambient display? I noticed that if it is deactivated you get the "wake-up" issue. No matter if you are full stock or not.

[MENTION=3873953]eng.stk[/MENTION] is the big core set to performance on boot? Sometimes I see they get stuck after a boot and turn off a core probably due to the heat. This is on a non apply on boot as well.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] eng.stk:
I don't use Ambient Display and it's normal.

Nothing is changed from stock behavior.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] xanthrax:
Do you use Xposed ? I bet so because it happened to me too few times

Get a kernel log

Sent from my Darkside of Oneplus 3T
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] eng.stk:
blu_spark r20 unified

All right crew!

New build is up. Wicked!

Some security, performance, standby battery and general upstream fixes.

Latest OOS 3.5.4 changes merged, build with newest blu_naro-6.2 2016.12

Keep in mind: I will give no active support for custom ROMs or OB. Meaning, if using anything besides stable OOS don't bother posting about it.

I am only interested on debugging stuff in stable OOS (with logs and reproducible steps to replicate the issue).

Don't spam this thread with CM or other ROMs stuff like "this don't work, my app doesn't open, etc" or debugging features.

Also don't go spam and bug reporting on ROM threads if using this.

If you like my work, donations are always welcome (but not mandatory).

Don't forget to hit thanks, it's free ;)
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] Phil_AT:
Thank you for your great work! :good::D
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] mahmoudxcom:
No i don't use Xposed
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] Flashlights:
Will you be adding Backlight Dimmer to this kernel? I feel like it's the only thing this kernel needs.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] mysterio619:
My phone is flying :highfive: :good:

Confirmation number: 66038088SY199444Y :)
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] eng.stk:
Nope, I don't need it.

Thanks mate :)
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] PENKO956:
anyone having issues with text messages on t mobile not going through on R20
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] eng.stk:
Nothing to do with kernel.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] JCahill33:
It may have nothing to do with this kernel - but I am as well having issues with t-mobile and SMS with R20. I was able to resolve it by turning of Voice over LTE and WiFi calling....

Not sure if its a kernel issue or a T-Mobile issue, but that was my workaround.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] PENKO956:
the culprit is VoLte. even going back to r12 does the same. anything you change in the modules?

edit: issue with tmobile network
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] djr4x4:
Not the kernel.. having same issues with text messages on tmobile.. went back to stock kernel to rule that out.. still occuring..

---------- Post added at 09:24 AM ---------- Previous post was at 09:23 AM ----------

Think its Tmobile.. I went back to stock.. turn off volte and texting works.. Its not his kernel at all..
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] PENKO956:
sms work good on my other phones on tmobile

edit: only affecting certain phones on tmobile. you are correct is not the kernel.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] djr4x4:
Like I said. I flashed back 100% stock with stock kernel to rule the kernel out and still I have the issue.. Its not his kernel.. Please carry this over to the questions/help forum as this is not his issue...
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] Amd4life:
The VOLTE/and issue is a T-Mobile/OnePlus problem not the kernel. There are two threads about it on the OnePlus forums already.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] mahmoudxcom:
I found some time one off the big CPU core is offline and when i try to make it online with Kernel Adiutor it go offline again instantly i must restart the phone to solve it and make all core online again any help here I'm on R20 kernel ver
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] eng.stk:
Thermal or bcl throttle, there's no hotplug in the kernel.
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] immi803:
R20 smoothy yummy buttery

Blu_spark makes our op3t best phone for 2016:)

:good:
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] immi803:
Op3t oos 7.0 Nougat

http://xdaforums.com/oneplus-3t/how-to/rom-oos4-0-nougat-op3t-leaked-t3523482/page1

[MENTION=3873953]eng.stk[/MENTION] :laugh:

Edit : As confirmed by [MENTION=6143932]Funk Wizard[/MENTION] it's an internal test build, not recommended to flash, warning : you may compromise your privacy as this build track ids, be cautious

Informed by funk
[OnePlus 3T ROMs, Kernels, Recoveries, & Other Deve] card13:
Not sure if it's usable for devs yet since that build is an internal/beta build.