yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] kryz:
Exploit process

For the developers that are testing this exploit or want to know how it works deeply:

First we dirtycow some privileged process, for example run-as has suid 0 given by selinux capabilities not by the bit setuid.

When we have overwritten run-as, this binary can read /init path, so we copy to other place with our run-as "trojan".

In our run-as we need to put some code to read files, my run-as-dirtycow does:

run-as /init

Will print this file to the stdout(console), if we redirect this output to a file:

run-as /init > /data/local/tmp/init.dmp

We copy /init file through our dirtycowed run-as that has root privileges, and is permitted by Selinux.

We patch init.dmp to create our init.patch with a shellcode to load new policy.

We will use run-as to dirtycow again our init.dmp but patched with a shellcode.

So our run-as trojan also will have the dirtycow exploit and when we exec this binary with the right arguments also will dirtycow any file with read permissions to root.

run-as /init /data/local/tmp/init.patch

Once finish and when the new policy is loaded exec run-as trojan wiht the special parameter -s1 or -s2 give to you a shell root or install su in the device TEMPORAL, no modifies any partition but mount a ext4 partition in /system/xbin with the su binary.

Well this is the process to do it in adb shell, in the apk i am using fsck_msdos to do all this chain of steps.

I like to get some different init from lollipop 32 bits and Marshmallow 32bits to adjust the patcher to Marshmallow.
[Android Software/Hacking General [Developers Only]] kryz:
Is very simple just have the dirtycow exploit original and some code to copy files read and puts.

Anyways soon ill post here, has no many secrets lol, just copy file or execute sh, the main problem now is the patcher, to make it working in Marshamallow and 64bits, i don't have any device with 64bits, yes one xperiaZ that i can install a custom rom with Marshmallow.

But i think the first is to check if the patcher is working in lollipop32 bits well, even ive tested 2 devices and reversed some other inits is not enough to be completely sure that all is ok.
[Android Software/Hacking General [Developers Only]] jucaroba:
Thanks for your answer.

I'm trying to use your exploit to be able to read my /data/misc/vold/expand_*.key file. My wife has a Moto G 2014 mobile with official (non rooted) Android 6 Marshmallow. The bootloader is locked. She has deleted accidentally all the pictures in her SD card, that is configured as adopted card (not portable). I have made a cloned copy of the SD in my linux laptop with dd command, but I can not mount the partitions in the SD because I have to know the encryption key.

I can not unlock the bootloader, because the phone will be reseted to factory and the encryption key will be deleted. And I can not read the key file without being root, because of the permissions of the file. I have tried your run-as-dirtycow trojan in the phone, and I can read files I have no permissions for, such as /init.rc. The only missing piece now is that I don't know the exact name of the key file. I only know that it is of the form "expand_*.key". Can your trojan run-as-dirtycow be modified to be able to read the files with this pattern name in a given directory?

Thanks in advance.
[Android Software/Hacking General [Developers Only]] tnomtlaw:
I'm trying to root my boost max+ running 5.1.I tried the check perm option but couldn't remount sdcard,it just froze.Upon reboot it hang at starting apps.Had to remove sdcard to get phone to boot properly.
[Android Software/Hacking General [Developers Only]] kryz:
When you mount the sdcard is normal that doesn't mount again, the process hijack fsck_msdos, you have to come back to the application, wait and watch the window log.

It depends on mount will get 1-5 seconds to see the information.

If you see that init is OK, you can proceed with the get root.

[IMG="Perm logs"]https://s29.postimg.org/u7gz61n6v/permissions.png[/IMG]
[Android Software/Hacking General [Developers Only]] kryz:
The run-as context can't see /data or even /data/misc folders, anyways i will implement the list of directories in the next update.
[Android Software/Hacking General [Developers Only]] jucaroba:
Yes, I know it can see those folders, I only need to know the name of the file I am interested in.

If you implement the "list of directories" functionality it will be fantastic. Thanks for it.

I will also be very grateful to see the full source code of the trojan.

Waiting eagerly for both things.

Thanks in advance.
[Android Software/Hacking General [Developers Only]] kryz:
Sorry wrong type i wanted to say that run-as context can not see those folders.

I mean ive implemented all ready that function "-d" and run-as can not list those folders:

run-as -d /system/etc

Attached run-as-dirtycow.c
[Android Software/Hacking General [Developers Only]] jucaroba:
Mmmm, so the only way to be able to read a file in /data/misc/vold/ is to be root?

If that is the case, then I suppose I have to wait til your exploit can be used to root a Marshmallow phone.

Am I correct?

Thanks.
[Android Software/Hacking General [Developers Only]] kryz:
I think so, i don't have that folder in my devices, but i was trying to read on /data folder and no success in one of its sub folders.

Btw what cpu is your device 32 o 64 bits?

Can you post your init file?
[Android Software/Hacking General [Developers Only]] jucaroba:
My CPU is 32 bits. It is a Moto G 2014.

I suppose you don't have the /data/misc/vold folder because you are not looking at a Marshmallow system.

What file are you interested in? The /init.rc file?
[Android Software/Hacking General [Developers Only]] kryz:
I'm interested in /init file and 32 bits is great ;)
[Android Software/Hacking General [Developers Only]] jucaroba:
No /init file in Marshmallow. At least not in that path.

---------- Post added at 02:19 AM ---------- Previous post was at 01:48 AM ----------

Sorry, the file exist, but I can not read it. I can not copy it with your trojan run-as (run-as-dirtycow) either.
[Android Software/Hacking General [Developers Only]] norberto_:
Hi kryz,

Please find the /init from 32bit 6.0.1

It is from Xperia Z2 with custom rooted rom (Mx ROM v8.6.0)

How can i copy /init from my boot locked, unrooted, stock 6.0.1 64bit X Performance?
[General Questions and Answers] Shreyash Sukhadeve:
YU yunique yu4711 stucked at bootloop (Normal bootloop not TWRP ) unfortunately my motherboard is crashed so connector doesnt work properly therefore i am unable to use any PC and LAPTOP method so i requested to you give me an update.zip file to apply updates from SD cards and guide me to do the same.

Please help me to get rid out of this.
[OnePlus 3T Questions & Answers] uttam.ace:
Friend's Here is the way to set 2nd SIM on 2G only.(As on 2G I feel voice network is much better and battery consumption is pretty low)

1) Deactivate 1st SIM completely.( which I believe generally we use for data)

2)Activate SIM 2 .

3) SELECT Network mode 2G only(instead of. 2G/3G/4G)

4) Now Activate SIM 1, and activate data.

(Network mode now automatic changed to 2G/3G/4G)
[Xiaomi Redmi Note 4 Questions & Answers] moralshixch:
Hi,

I'm using MIUI 8.0.5.0.0 and this is the version i got with the phone.

If I try to hit the "check updates", I get: "cannot connect to network".

Another problem is that my phone is always with the roaming logo (the sign R in the top bar).
[Xiaomi Redmi Note 4 Questions & Answers] gsmyth:
More than likely a vendor/reseller installed ROM, I would recommend flashing a global ROM and start afresh. Check this forum for guides and links to the correct tools.

I had a similar version of rom installed on mine when I got it, which was made to look like a global stable ROM, but it was just a modified Chinese rom with potential malware preinstalled.
[Xiaomi Redmi Note 4 Questions & Answers] JohnTheFarm3r:
Mine always shows the R for roaming. I doesn't bother me much though. Works just fine. :)
[Xiaomi Redmi Note 4 Questions & Answers] moralshixch:
installing the Full ROM pack from here:

http://en.miui.com/download-309.html

And flashing us using this guide:

http://en.miui.com/a-232.html

Is the recommended method?
[OnePlus X Q&A, Help & Troubleshooting] Talnoy:
Hi there!

I followed this guide to the letter: https://forums.oneplus.net/threads/...om-recovery-root-take-efs-backup-more.401713/

When I try to reboot from flashing the recovery I get this:

fastboot flash recovery recovery.img

target reported max download size of 536870912 bytes

sending 'recovery' (11248 KB)...

OKAY [ 0.354s]

writing 'recovery'...

OKAY [ 0.212s]

finished. total time: 0.568s

fastboot boot recovery.img

downloading 'boot.img'...

OKAY [ 0.354s]

booting...

FAILED (remote: dtb not found)

finished. total time: 0.388s

I've searched around the forums (official and here) and there are some random threads with links that are either out of date or broken and don't work. I've tried like 10 different recoveries and every single one gives me this error.

Halp?

I've come from a fully updated 6.0.1 OPX

Bolded text seems to be the root cause and I can't find ANYTHING to solve it.
[Samsung Gear S3] memo951:
The Auto HR (Heart Rate) of the Gear S3 isn't satisfying, it only takes (measures) 1 time every hour, the Gear S2 did that every 10 minutes! What a huge step back from Samsung, I just hate it! Will send back this item to Amazon, what a shame :rolleyes: :mad:
[Samsung Gear S3] Lakota:
Bit of an extreme reason to send it back. Check your settings etc... anyway

Mine records a measurement every ten minutes and stores it in SHealth.
[Samsung Gear S3] memo951:
We don't have the possibility to change how often we want to measure! We only have the option Auto HR on or off, this is ridiculous! Mine only measures every hour :/
[Samsung Gear S3] Nexuskell:
Mine measures every 10 mins pretty reliably. I know I've seen the setting for this somewhere but I honestly can't find it now, I'm sure someone else can tell you where it is.
[Samsung Gear S3] arl16:
Mine does every 10 minutes too. But it's not a heart monitoring watch. It's an added feature on a watch with a million other features. "Ridiculous" that it does not have specific adjustment details that a relatively small fraction of the customer base probably needs? I agree that's probably a bit harsh!

If THAT is the one feature that is a deal breaker for you, yeah, you chose the wrong watch. The accuracy on any watch HR monitor is questionable anyway. And you can do it manually whenever you want. How much data do you need?

Return your gear and get a fitness-specific device! Start here... http://www.wareable.com/fitness-trackers/best-heart-rate-monitor-and-watches

Sounds like you need a chest strap.
[Samsung Gear S3] DaSchnee:
Has anyone found where I can change the intervall to 10mins? Generally once every hour is fine IMO, but there are certain scenarios where I'd like to monitor my heart rate more closely.
[Samsung Gear S3] ardsar:
It's 10 mins by default. The problem is you are moving when it try's to take a measurement and fails. To demonstrate this try and take 2 manual readings - one perfectly still and the second time keep moving your fingers.
[Samsung Gear S3] SirBindy:
K bye. Don't let the door hit you in the ass on the way out.
[Samsung Gear S3] supernet2Google:
I know exactly how you feel. That's why when I work out I switch out my gear s3 with my gear fit2 or fitbit2 blaze. The blaze can accurately measure while in motion, the Gear fit2 lacks accurately getting a bpm while in motion.

The blaze fitbit also severely lacks instant notifications. Pretty ineffective if that's what you want it for. Stick with the fit2 or gear s3 as their on target when it comes to notifications being accurately relayed to the wearable
[Samsung Gear S3] fred2546:
It seems pretty accurate when I'm at rest but I'm not sure about its readings while I'm walking or hiking. Maybe I should tighten up the band when my arms are swinging.
[Samsung Gear S3] MichaelGG:
The latest S3 and Samsung Health updates has fixed the accuracy.

I used Polar M400 with chest sensor before S3 and when I started with S3 it seemed to be underrating, for the same 45 minutes cross trainer session, Polar counted about 400 calories and S3/Health - about 300. S3 also shown about 5 bpm less constantly.

With the latest update things seem to be fixed, S3 indications are quite close to Polar.

I'm doing the same session 2-3 times per week, so I can compare the data.
[Samsung Gear S3] viking2.0:
I had a garmin vivoactive hr before and the HR seems to be the same while running but the calorie count is really low on s3. 1000 vs 300
[Samsung Gear S3] psufan5:
Those of you having issues with movement - slide the watch further up your wrist. Every HR monitor ive tried has the same issue. If it is too close to your hand, it will give crap readings. Apple Watch 2 has the same issue and I have to run with it about an inch higher than where I normally wear it.
[Samsung Gear S3] alexobrien90:
I had the Gear S3 about a month after it came out and the heart rate accuracy was pathetic. I was coming from Fitbit Charge HR and that one had problems and still was better than the Gear. For example on a treadmill I was running and my Gear could not get above 80 bpm when I know from manually taking my bpm it was around 160 at least. I think it's from the sensor being on a completely flat surface so it's hard to stay accurate during movement.

I now have the Garmin Vivoactive HR and it is worlds better. Stays within 2-3 bpm of what a chest strap would read.
[Samsung Gear S3] thunderwagn:
I think just about any wearable has accuracy issues here and there, but in general you can and do get a fairly good representation over time. If you're looking for dead nuts accuracy, no wearable is going to deliver. I've worn my chest monitor with my Fitbit Charge2 and Gear s3, and overall through the course of a workout, my readings are close enough to produce physical results.

I wear my Charge2 on one arm and gear on the other. The Charge is touted as a fitness tracker and my gear s3 SMARTWATCH produces results that are pretty dang close. Close enough anyway.

I find I get better hr readings lower on my wrist. YMMV.
[Samsung Gear S3] willstay:
If no one has found out yet. Maybe different in S3, but in my S2, it is located in SHealth app of gear (not phone). The far right card is settings and inside there is a menu called "Auto HR" which is selectable between Frequent, Moderate or Off.
[One (M9) Q&A, Help & Troubleshooting] warren.walker:
So I have installed nougat on my M9.

Now what can I do with it in order to modify it. Being "stock" is cool but I'm sure the novelty will wear off.

I have quite a bit of time off for the Christmas break so I am pretty open to suggestions.
[One (M9) Q&A, Help & Troubleshooting] rjcreations:
I am not a expert but I would like if you do a AOSP ROM or in the other hand if you can modify adding CPU tweaks or UI mods like changing the status bar color
[One (M9) Q&A, Help & Troubleshooting] NDR_man:
[something dumb and wrong I said]
[Android Q&A, Help & Troubleshooting] utadahikky:
Samsung A9 Pro 2016 MT6580

MT6580__alps__best6580_weg_l__best6580_weg_l__5.1_ _ALPS.L1.MP6.V2.19_BEST6580.WEG.L

Device Brand : alps

Device Model : best6580_weg_l

Device CPU : MT6580

Device IntName : full_best6580_weg_l

Device Version : 5.1

Device Compile : 6/3/2016 4:19:39 AM

Device Project : ALPS.L1.MP6.V2.19_BEST6580.WEG.L

Device ExtInfo : best6580_weg_l

this phone is virus sexy auto load any app

I root it to go to del virus but phone still boot in recovery mode now

please send me full rom

thankyou very much
[Moto Z Questions & Answers] zholbrook526:
Screen, Nougat, processor, Daydream, etc? I currently have the Z but keep seeing how people are loving the Z play even more.
[Moto Z Questions & Answers] enetec:
Battery. I'm unable to even discharge my Moto Z in a full day of use, how could I discharge the Play? :p

Seriously... speed and height. ;)
[Moto Z Questions & Answers] darkapocalypse4:
Daydream VR
[Moto Z Questions & Answers] rczrider:
The VZW Z was $120 with no contract and no trade-in. Got four of them to replacing the aging phones of family members.

Locked bootloader is a huge negative for sure, but with the exception of AdAway, I find myself less concerned with root and custom ROMs given how close to vanilla the Moto is.

If someone figures out how to unlock it, I'll do it without a second thought, but at $120 the specs make it a no-brainer over the Z Play and well worth the risk of being stuck with a locked bootloader (for me).
[Moto Z Questions & Answers] Out Of Code:
It's thin and light
[Moto Z Questions & Answers] thewerthon:
Hardware, software (nougat), thickness, the dark frame, the aluminium cover.
[Moto Z Questions & Answers] Krisbo:
Hey guys. I've just gone through this so I thought I'd add my $0.02.

I went into a local shop and got some hands on tune with both of these. Honestly, with normal use I was pretty tough to tell the difference. Even the screens were close enough for that to not be an issue.

In the hand, the play felt better to me. The regular Z was almost too thin and the edges felt quite sharp.

Ultimately, I went with the regular Z and here are my reasons in order of importance to me:

1. Camera

Looking at the pictures taken I that shop there was a marked difference between the two. This may have been exacerbated my the play's lower res screen but the photos taken indoors were more passable to me.

2. Specs

Even though the play was just as smooth navigating Android, my assumption is that the SD 820 in the Z will give it more longevity.

3. Thickness

I have the speaker, camera and battery moto mods. The Z feels much better in the hand with mods installed than the play. Those couple of mm do make a difference.

4. Price

Over here in Aus, there's $300 difference between the play and the Z retail. However, I actually bought my Z on Expansys during a sale for $629 with free shipping. The play was $489 and for me the extra $$$ is comfortably justified.

I still dig the play though. I've had back of my GS7 and even though the GS7 camera is KILLER, I'd probably still pick the okay over it.

That is all, hope that helps anyone else tossing up between the two.
[Moto Z Questions & Answers] benjamminh:
Play camera is considered better. Unless you're in love with the form factor of the Z I don't see it.
[Moto Z Questions & Answers] Krisbo:
Considered better by who? I think you'd be pressed to find even one review which would support this claim.

Play has more megapixel, sure. But it also has a narrower aperture lens so it's low light performance is always going to produce shots with now noise and less detai.

There's much more to a camera than a sensor. Case in point: Google pixel and Xiaomi Mi5s. Exact same sensor but have you heard anyone talking about the Xiaomi being the best smartphone camera money can buy? There's a reason for that.

I'm not intending to be rude here but for real... if you're going to tout the Play as having a better camera then you need a pretty solid basis for it considering every single review of the Play I came across described the camera as just passable.
[Moto Z Questions & Answers] benjamminh:
Both Anandtech' and DXO basically say the Z Play has the better camera. The shots I've seen seem to confirm that. Where are the reviews you refer to that compare them DIRECTLY? A whole lot of vitriole in that post.
[Moto Z Questions & Answers] Out Of Code:
Lightweight and thin, I can barely feel it in my pocket. I get 5h+ screentime with the combination of Greenify, Lux AB and another app I forget; that schedules system things around the phones hibernation.
[Moto Z Questions & Answers] BeyondtheTech:
Considering that Nougat recently got pushed for the Z Play, it was noted that Daydream VR is not included in the update because of the Z Play's low resolution and less powerful Snapdragon 635 processor. I guess I'm glad I spent the extra few bucks to get the Z instead.
[Moto Z Questions & Answers] Darth:
I was going to get the Play, but my carrier stopped offering it, so around here it was about $400 to buy one from the classifieds. Mostly just wanted the bigger battery.

So I got the Z for zero down as an upgrade with my carrier instead. And really, the battery has surprised me. I'm getting 5 to 6 hours screen on time, and the phone charges so fast anyway. So I'm glad I got the Z now. The camera has been a nice surprise too, compared to phones I've previously had.

This is my 3rd Moto. I've had the original X and the N6 also. Have loved all my moto phones.

Still getting the battery mod soon though. ;)
[Moto Z Questions & Answers] cucumbers:
Are you with Koodo? I'm with Koodo and they did indeed just stop carrying the Z Play, just when I was thinking of upgrading to it from the X Play :( I was wondering whether the "regular" Z might be my next choice, and it just may be...
[Moto Z Questions & Answers] Darth:
Well, the Z is the better device. No doubt. Minus a headphone jack and the Play has a bigger battery.

The lack of headphone jack is definitely a nuisance. Have to be charged up before watching stuff, or listening to a lot of music. There's Bluetooth headphones out there though too.

The battery life surprised me, not much worse than my oneplus-one, or N6, but not stellar of course. I just got the incipio battery mod, so that solves that. Lol. It's bulkier, but not too crazy.

So it was cash for a play, probably used, or zero for the Z on a two year contract. I'm happy with what I got though.

I'm with bell. Oh, and it's the best camera I've had on a phone so far. I don't expect pics like an actual camera, so this meets my expectations for sure. :good:
[Moto Z Questions & Answers] destes37:
Great specs, but mostly due to how thin and sexy it looks. Battery is no big deal to me these days because quick charge is fabulous...
[Xiaomi Redmi Note 3 Guides, News, & Discussion] Sudeep Duhoon:
I am using Kenzo on RR 23-12-16 Unofficial build with Jio sim and observed signal strength is getting reduced as the roms get new updates. Anyone else observed same? May be because of older firmware.

If you too observing low signal strength please share your setup and observation, let try to find a fix.
[Xiaomi Redmi Note 3 Guides, News, & Discussion] adithyan25:
Yep we all are facing that issue,

Inface i think its a problem with abhisheks firmware.when i tried psy man firmware the strength was awsome.But sadly volte aint gonna work on it(i guess,many failed attempts).I think some one must make new firmware regarding this isuue

the best strenght i was able to find is in Citrus caf lemon(almost full every time):good:
[Xiaomi Redmi Note 3 Guides, News, & Discussion] Nightcrawler5:
I'm on Abhishek's fw and network is quite stable and almost this full.
[Xiaomi Redmi Note 3 Guides, News, & Discussion] adizz4:
Although some fws give better signal strength, it doesn't prevent/reduce the signal fluctuations. Only citruscaf and cosmic have stable and full LTE signals AFAIK.
[Xiaomi Redmi Note 3 Guides, News, & Discussion] Anasmir:
Which ROM are u using?
[Xiaomi Redmi Note 3 Guides, News, & Discussion] Nightcrawler5:
On du but I don't face network issue on any rom
[Xiaomi Redmi Note 3 Guides, News, & Discussion] Sudeep Duhoon:
I used to get 2+ always right now only 1 bar.

Anyone having full signal dial *#*#4636#*#* go to phone information and check actual signal strength.

Also who has du, citrus cosmic and cm14.1(volte) installed, zip and send me this folder /system/etc/firmware.

Also if any other rom then too.

Thank you.
[Xiaomi Redmi Note 3 Guides, News, & Discussion] Sudeep Duhoon:
Mostly this for me.
[Xiaomi Redmi Note 3 Guides, News, & Discussion] Devam03:
Yes

Yes facing the same
[Xiaomi Redmi Note 3 Guides, News, & Discussion] adizz4:
Isn't -100dBm is worse than say -90dBm. Is it possible that the bars scale differently in some ROMs?

EDIT: Seems like there's a huge difference in asu. I've no idea how that works.

Citruscaf

Tesla

https://drive.google.com/file/d/0B8UvqE_wmDq0MHhfM3RJdmVzOVE

Firmware folder from citrus caf.

Citruscaf gives -93dBm while miui gives -103dBm