yashsingh1/xdaforums huggingface dataset:
[Galaxy S3 Neo General] Manok98:
[IMG="TeamWin's TWRP Touch Recovery for S3neo (s3ve3g)"]https://img.xda-cdn.com/z3dP6JInRV3sfcsZquZa2ZitMSo=/http%3A%2F%2Fi.imgur.com%2FIgPXojC.png%3F1[/IMG]

TWRP is an open source, community project. TWRP development is done by roughly 4 people at this point. We also have a large support community with many people who are willing to answer questions and help people with their devices either through our IRC channel or on forums like xda-developers.

Team Win was originally formed to work on porting WiMAX to CM7 for the HTC EVO 4G. After our work on the EVO 4G we wanted to work on a project that would work on more devices than just the EVO 4G and we settled on working on a recovery. Today TWRP is the leading custom recovery for Android phones.

A custom recovery is used for installing custom software on your device. This custom software can include smaller modifications like rooting your device or even replacing the firmware of the device with a completely custom “ROM” like CyanogenMod

Screenshots at this links:

1, 2, 3, 4, 5, 6.
​

Download link:

-Gdrive->>>>REMOVED

-Check the download section of the thread

Developer & Maintainer: MoonPWR

Note:

-I've not developed this recovery, I've converted it to a .zip file

-I've tested it on cwm, but i think that it should works also in the others recoveries. Anyway if you have some problems writo in the thread

IF THIS .zip WAS USEFUL FOR YOU HIT THANKS BUTTON, SO WILL BUILD IT ALSO FOR OTHERS DEVICES!

XDA:DevDB Information

[TWRP_3.0.2-0]Flashable Twrp for I9301I, Tool/Utility for the Samsung Galaxy S3 Neo

Contributors

Manok98, MoonPWR

Version Information

Status: Stable

Created 2017-01-05

Last Updated 2017-08-03
[Galaxy S3 Neo General] LOHA12:
Hey Manok98,

Thank you, finally a flashable zip of this recovery, I was searching it from some weeks:)
[Galaxy S3 Neo General] davidawson10:
install with twrp 2.8.4.0

can i install this twrp on twrp 2.8.4.0?
[Galaxy S3 Neo General] Manok98:
Sure!
[Galaxy S3 Neo General] JPT223:
Do you know where i find the source?

Http://github.com/teamwin/ told me the i9301 code wasn't contained in their repo?!
[Windows Mobile Development and Hacking General] frankie_t:
My frist skin(wait2) of MWC 1.0: Transparent WaitCursor (Marshall WaitCursor). with source wait2.png

Thanks Marshall

MWC 1.0

http://xdaforums.com/showthread.php?t=353019
[Windows Mobile Development and Hacking General] Kuon:
thanks for your release but how can i install it?

i read the readme it says

but when i go to this directory i've got only 3 file called "Instl", "InstallDir" and "InstlDir"

so it's impossible to change it

help me please
[Windows Mobile Development and Hacking General] ga!nusha:
I have took the liberty to create a Cab file with these 2 great themes and the theme selector.

If i did wrong please let me know...

download link: http://www.4shared.com/file/32862299/2a6afc7a/MWC_Custom_Wait_Cursors.html
[Android Q&A, Help & Troubleshooting] myabc:
Hello. Please can anyone provide or tell me if is possible to send in status bar a icon notification of badge for facebook (likes, comments) that are in home page of android phone? so if arrives a notification i have a icon on status bar.

my utility is that in LG G5 phone i have in always on display the notification of facebook.

i hope a answer

thanks
[Android Q&A, Help & Troubleshooting] myabc:
i hoped an answer
[Android Q&A, Help & Troubleshooting] myabc:
Not possibile yet??
[OnePlus 3T Questions & Answers] Zegnalabel:
Given the situation that I needed to unlock bootloader and install TWRP inorder to be able to do full image backup (i.e. Nandroid), I have been wondering what are the underlying security issues to be faced after unlocking and installing TWRP (without moving onto root) in a specific situation where the device is lost or stolen?

Lets say if I am on stock OOS with

encryption enabled

+ Fingerprint and password/pin set on lock screen + USB debugging

disabled

+ locked bootloader + stock recovery, in the unfortunate event where my device were to get lost or stolen, I can expect my personal data to be safe from prying eyes since the person who has gotten a hold of my phone will have to do a factory reset to get into the phone or unlock bootloader which all meant my personal data will be wipe. So that's a good outcome in an unfortunate one.

But let's say if now I were to (i) unlock my bootloader and (ii) install TWRP (but retaining it as read only without system modification), (iii) restore all app, data and settings, and go on to (iv) perform a nandroid backup. And after that, proceed to (v) disable USB debugging and (vi) re-enable encryption and (vii) set fingerprint and password on lock screen. And I shall stopped there

without

rooting or flashing dm verity. Can I still expect my personal data to be safe from prying eyes in the event of lost or stolen? Meaning that whoever gets a hold of my device will likewise need to wipe it clean before he/she is able to use it? Is this the case or can the person access my data using some hacks now that the device runs custom recovery?

An interesting guide I had came across contained various means of accessing personal data (read - https://xdaforums.com/showthread.php?t=2620456) by bypassing android password, patterns, etc set on the locked screen, and some methods required USB debugging to be enabled while some required custom recovery installed.

To be sure if I am still able to protect my personal data when device is stolen/lost with an unlocked/TWRP installed device, my curiosity took me on an investigative path using an old Samsung Note 3 to unlock bootloader and install TWRP, then proceed to enable encryption and disable USB debugging and set lockscreen password. And now for the next couple of days where I can find free time, I will try out all 7 methods to see if an unlocked Note3 with TWRP is susceptible to these security compromise. I will come back to this thread later to update my findings.

I really welcome any information or inputs too!
[OnePlus 3T Questions & Answers] Zegnalabel:
To summarize, the state of my old Note 3 used in this investigation is as follows:

1) Bootloader unlocked

2) TWRP (3.0.2) installed as "read only" without system modification

3) ROM (CM13) encryption enabled

4) Locked screen password set

5) Device not rooted

6) USB debugging disabled

When I boot into TWRP, I realized that even if I set it to read only, any person who has gotten hold of my device can set it to system modification since TWRP is not password or pin protected. Therefore setting to "read only" is sort of irrelevant in this investigation to find out how vulnerable the device is right now.

The second thing I realized, is TWRP will ask me for android password to mount my internal sdcard since my ROM is encryption enabled. This is a good thing, since in this case TWRP internal file manager will not be able to access my device internal sdcard containing some of my personal data.
[OnePlus 3T Questions & Answers] Zegnalabel:
The 1st method I tried is:

METHOD I

Solution For Everyone With Recovery (Cwm, Twrp, Xrec,Etc...) Installed:

INSTRUCTIONS:

1. Download this zip Pattern Password Disable (Download from attachments) on to your sdcard (using your PC, as you cant get into your phone, right )

2. Insert the sdcard into your phone

3. Reboot into recovery mode

4. Flash the zip

5. Reboot

6. Done!

Note : If You See The Gesture Pattern Grid Or Password After Restarting, Don't Worry. Just Try Any Random Pattern Or Password And it Should Unlock.

The steps I took:

A) Set TWRP to system modification

B) When TWRP asked me for password to mount partition, I choose "cancel" since I am trying to imitate the person who has gotten hold of my device won't be able to guess my password

C) Flashed the pattern password disable zip file

And voila!... my password on locked screen is still intact. Meaning that entering any random password does not gain access into android. Only the original password can.

Good news certainly. Don't know why this hack doesn't work, probably it is outdated or probably due to my system is still encrypted when I flashed the hack zip file.
[OnePlus 3T Questions & Answers] Zegnalabel:
As to the 2nd method, I didn't try out as I don't know how to use Cygwin... :eek:

METHOD 2

Solution For Everyone Without Recovery Installed - ADB :

What You Need:

=>A computer running a Linux distro or Windows+Cygwin

=>USB cable to connect your phone to the PC

=>Adb installed

How to install adb:

1. Open Terminal

2. Type:

Code:

sudo apt-get install android-tools-adb

Hit [Enter]

3. Follow the instructions until everything is installed.

INSTRUCTIONS:

1. Connect you (turned on) Phone to the Computer via USB.

2. Open a terminal window.

3. Type:

Code:

adb devices

adb shell

cd data/system

su

rm *.key

4. Done...Now You Just Have To Reboot.

Note : If You See The Gesture Pattern Grid Or Password After Restarting, Don't Worry. Just Try Any Random Pattern Or Password And it Should Unlock.
[OnePlus 3T Questions & Answers] Zegnalabel:
Method 3 is irrelevant to this investigation therefore it has been omitted.

METHOD 3

Solution For Everyone Before Lock Accident :

SMS Bypass - Download Link - Install It On Your Device (Download from attachments)

This App Allows You To Remotely Bypass Your Phone's Screen Lock By Sending A SMS.

It Removes Your Gesture Pattern Or Password After Receiving A Preset Keyword Along With A Secret Code Via SMS.

SMS Bypass App Requires Root.

INSTRUCTIONS:

1.First, make sure you give permanent root access to the app.

2.Change the secret code to your preferred choice. The default password is : 1234

3.To reset your screen lock, send the following message from another phone:

Code:

secret_code reset

Example:

Code:

1234 reset

Note 1 : There is a space between your secret code and reset. Also the secret code is case sensitive.

Note 2 : There is an option available to change the preset keyword. Default is : reset - Your phone will restart and your lock screen will be reset.

Note 3 : If You See The Gesture Pattern Grid Or Password After Restarting, Don't Worry. Just Try Any Random Pattern Or Password And it Should Unlock.
[OnePlus 3T Questions & Answers] Zegnalabel:
Given that method 5 is in fact similar to method 2 therefore it has been omitted as well.

METHOD 5

Solution For Everyone Via Adb - File Removal :

INSTRUCTIONS:

=>Type This Command In Your Terminal (CMD Prompt) :

Code:

adb shell rm /data/system/gesture.key

Note : If You See The Gesture Pattern Grid Or Password After Restarting, Don't Worry. Just Try Any Random Pattern Or Password And it Should Unlock.
[OnePlus 3T Questions & Answers] Zegnalabel:
Method 6 will not work since that hack required USB debugging to be enabled.

METHOD 6

Solution For Everyone With USB Debugging Enabled :

INSTRUCTIONS:

Primary Step for all method:

Download & Extract to anywhere - Bypass Security Hack (Download from attachments)

Open SQLite Database Browser 2.0.exe in SQLite Database Browser.

Run pull settings.db.cmd inside By-pass security Hacks folder to pull out the setting file out of your phone.

Drag settings.db and drop to SQLite Database Browser 2.0.exe program.

Navigate to Browse data tab, At table there, click to list down the selection & selete secure

Instruction To Remove Pattern Lock:

Now, find lock_pattern_autolock, Delete Record

Close & save database

Run push settings.db.cmd and reboot your phone

Instruction To Remove PIN Lock:

Now, Find Or Create lockscreen.password_type, double-click & change it's value to 65536, Apply changes!

Now, find lock_pattern_autolock, Delete Record, If doesn't exist, Ignore

Close & save database

Run push settings.db.cmd and reboot your phone

Instruction To Remove Password Lock:

Now, find lockscreen.password_salt, Delete Record

Now, find lockscreen.password_type, Delete Record

Close & save database

Run push settings.db.cmd and reboot your phone

Note : If You See The Gesture Pattern Grid Or Password After Restarting, Don't Worry. Just Try Any Random Pattern Or Password And it Should Unlock.
[OnePlus 3T Questions & Answers] Zegnalabel:
I then tried out method 7 using the Aroma file manager however all these 3 versions (Version 2.00 [BETA1]- KACAPI, aromafm-1.91, and aromafm-1.90) does not open up after flashing the zip with system modification enabled on TWRP. Mostly likely these outdated versions of the Aroma file manager are not supported by the latest version of TWRP (3.0.2) since the developers have ceased all work related to it.

METHOD 7

Solution For Everyone With Recovery Installed :

INSTRUCTIONS:

1.Download and Copy Aroma File manager.zip (Download from attachments or http://xdaforums.com/show....php?t=1646108) to your memory card.

2. Open your recovery (press volume Down + Power button or it can be different according to the phones. Generally the phones who have press able button on the middle they have to press all three buttons. Google for you pattern there are lots)

3. There’ll b an option in recovery called “mount”. Go in that option and then mount all the cache and everything it is there.

4. Then select “update” and select “apply update from SD/external” and select aroma file manger.zip file that you downloaded using above QR code above.

5. After Flashing or updating, the aroma file manger will open. Use volume keys for up/down and power button 2 select like you use to get into recovery.

6. In aroma File manager , Go to menu , which is located in bottom strip and then select Settings.

7. Go to bottom n select “mount all partition in startup ” then exit from aroma file manger.

8. Now after exit , re-update that aroma file again and it will open again.

9. Go to data >> and then System.

Then find ‘gesture.key’ (for pattern lock) and ’password.key’ (for password lock) then long touch on gesture.key or password.key and sum option will be prompted , choose delete and delete that file and restart.

Note : If You See The Gesture Pattern Grid Or Password After Restarting, Don't Worry. Just Try Any Random Pattern Or Password And it Should Unlock.
[OnePlus 3T Questions & Answers] Zegnalabel:
And now onto the last method which is method 4 using SQL command. After starting adb daemon, adb devices are not found and hence the following steps could not be taken. I think this could be due to the device having USB debugging disabled. Hmmm...

METHOD 4

Solution For Everyone Via Adb - SQL Command :

INSTRUCTIONS:

=>Type This Commands Separated In Your Terminal (CMD Prompt) :

Code:

adb shell

cd /data/data/com.android.providers.settings/databases

sqlite3 settings.db

update system set value=0 where name='lock_pattern_autolock';

update system set value=0 where name='lockscreen.lockedoutpermanently';

.quit

=>Now You Just Have To Reboot.

Note : If You See The Gesture Pattern Grid Or Password After Restarting, Don't Worry. Just Try Any Random Pattern Or Password And it Should Unlock.
[OnePlus 3T Questions & Answers] Zegnalabel:
After going through all these methods, I am inclined to think that personal data is still protected in an unlocked/TWRP installed device as long as USB debugging is DISABLED and ROM is encrypted and fingerprint/password set on lock screen. What do you think?
[OnePlus 3T Questions & Answers] Michalko5896:
As long as your data is encrypted, it is safe and not accessible to any 3rd party.

But with an unlocked bootloader, you are open to a new forms of attacks like:

1. someone could steal your phone, modify your system to leak your data / password and then return it to you. Since dm-verity is OFF, you will not know, that your system is compromised.

2. someone could use a remote exploits (to launch his code and gain root privileges) to modify your system and leak your data / password and since dm-verity is OFF, you will not know, that your system is compromised.

+ with the unlocked bootloader, FRP is not working, so a thief can just reset your phone and sell it.

If your data security is a huge concern to you, DO NOT unlock the bootloader.

If you are a potential target to a hacker attacks, DO NOT use a OnePlus phone. Get a Nexus 6P or a Pixel.

Also make sure, that your apps are not leaking your data. Apps with a storage permission and access to the internet could leak your data.
[OnePlus 3T Questions & Answers] Zegnalabel:
Many thanks for your response! This is very useful information to me. :)

Am I right to assume that even if my device is unlocked but with encryption enabled and no root, the person who has gotten hold of my phone will still be able to flash "dm-verity and forced encryption disabler" zip and supersu zip files to root my device in TWRP even when he fails to enter the password prompted by TWRP?

And this force encryption disabler as the name suggest only disable force encryption and it does not decrypt my already encrypted personal data? Which means he still does not have access to my data and after he had done the system modification and returns the phone back to me, the first thing I should do is to wipe clean every partition and restore back my nandroid which would consist of backups to all partitions. So it seems this is an acceptable risk all for the convenience of performing nandroid backup via the unlock/TWRP route.

Very good point here. May I ask in what ways are Nexus 6P and Pixel more secure than Oneplus? Pixel seemed quite an attractive phone.

I am on OOS 3.5.3, is there anyway to find out what apps have access to internet and restrict that?

The app permission section of settings only allows changing permission to storage (among others) but I couldn't find any internet access permission.
[OnePlus 3T Questions & Answers] bealer:
The main security risk is that it allows anyone to flash something harmful without you knowing on to your system. Your data may be encrypted and protected but they can still flash something onto another partition.

You could be happily using your phone unaware there's a rogue app capturing and sending data to someone.
[OnePlus 3T Questions & Answers] Michalko5896:
Your data is safe, it can't be decrypted, even with an unlocked bootloader And yes, if you wipe every partition, lock the bootloader and got no dm-verity error, after your stolen phone was returned to you, you should be safe.

Both Nexus 6P and Pixel are much safer than OnePlus, because they are getting a complete security patches every month. OnePlus is getting an imcomplete security patches and much later after their release.

You can limit access to internet via app settings. Open "about app", data usage and there you can turn off both access to wifi and mobile data.

Upgrade to OOS 4.0, it cointains important security patches and enhancements.
[OnePlus 3T Questions & Answers] Zegnalabel:
Thank you so much! Found the data usage setting and updated to 4.0. :laugh:
[OnePlus 3T Questions & Answers] xclub_101:
Quick question, does the latest systemless SuperSU still leave dm-verity OFF ? It was my understanding that using it you don't need to flash the dm-verity-OFF script, is that true?
[OnePlus 3T Questions & Answers] Michalko5896:
For root, you need to unlock the bootloader. And with the bootloader unlocked, dm-verity is not working and thus attacker could modify your system.
[OnePlus 3T Questions & Answers] xclub_101:
The bootloader being locked/unlocked should have little to do (directly) with dm-verity, dm-verity is only hash-checking the system partition.

That being said after some checking various detailed threads from Chainfire apparently SuperSU is still removing the dm-verity on the system partition since other than rooting in itself most rooted people also tend to touch the system partition with stuff like busybox and so on, so I guess this is it.
[OnePlus 3T Questions & Answers] Michalko5896:
well, google is stating, that unlocking bootloader will turn off the dm-verity.
[OnePlus 3T Questions & Answers] gee one:
This is an interesting discussion- I have a Nexus 5X, but I use a custom configuration:

1) locked bootloader

2) verity turned on for the system partition so that I can check the key fingerprint and verify integrity.

3) customized cm recovery - I installed my adb keys so I can connect to it. I also changed the signing keys, so I have to sign any roms that get flashed.

4) encrypted userdata with pattern protection. I think a password would be stronger, but I'm using a larger, complex pattern. Fingerprint unlock is turned on, which has its own attack surface.

I think the fingerprint sensor is the biggest risk. This is mitigated at reboot since the pattern will be required. If I built the recovery properly, the only way to flash anything would be to have access to my signing keys or adb keys. Of course, this is all still vulnerable to any unpatched exploits.
[OnePlus 3T Themes, Apps, and Mods] ungeeked:
Introduction​

This is a port of my H2O2 mod which I originally made for Oneplus 3. https://xdaforums.com/oneplus-3/themes/mod-h2o2-accent-colors-grammar-fix-t3514804/

Features​

- All mods are optional in AROMA installer

- Pixel blue as default color

- New accent colors in Light Theme: Wine, Navy Blue, Teal

- New accent colors in Dark Theme: White, Red and Lime

- Fixed Grammar in Settings > Battery > High Power Usage apps

- Removed network status indicators - the blinking arrows in status bar from pre-kitkat era

- Status bar doesn't turn orange when Battery saver is enabled

- Center clock (optional) - Please disable default clock from Settings > Status bar otherwise you will have two clocks

- Disable AM/PM in default clock

Installation​

1. Make nandroid before you flash this.

2. Download the zip and flash it.

3. Hit thanks and enjoy

For reporting bugs, please attach screenshots if possible

Compatibility​

v0.5 - For OOS 4.0 and ROMS based on OOS4.0

Issues?​

I didn't have any bootloops without root so it doesn't seem to be necessary. However for some people, rooting fixed the issue. You can unroot later.

Starting with version 3.5, I have made some improvements in installer to avoid. If you still face bootloop, For anyone experiencing bootloops, please provide the following info

1) F2Fs or ext4

2) Encrypted or not

3) Rooted or not

4) Save log in aroma installer and attach

To fix bootloops, dirty flash ROM

Downloads​

H2O2 v1.2 Download - For OOS 4.0.1

H2O2 v0.7_beta Download - For OOS 4.0.1

H2O2 v0.5_beta Download - For OOS 4.0

--------------------------------------

Addons

OP Launcher https://www.androidfilehost.com/?fid=457095661767129322

Credits

[MENTION=5444625]fahadali2315[/MENTION] for Center clock mod and all the help

[MENTION=402300]amarullz[/MENTION] for AROMA installer

[MENTION=4930226]Ayush Singh[/MENTION] for AROMA guide

[MENTION=7851438]Humble Potato II[/MENTION] for AROMA theme

[MENTION=4315551]Ticklefish[/MENTION] for his exceptional guides on xml editing

[MENTION=5753463]innocentwoolf[/MENTION] for testing the 3T port

XDA and Oneplus community

To anyone that I have missed here.

If you liked my work, don't be lazy in giving feedback comments and hitting the thanks button
[OnePlus 3T Themes, Apps, and Mods] ungeeked:
Screenshots
[OnePlus 3T Themes, Apps, and Mods] ungeeked:
Beta 0.5 is the first release for 3T. Please ignore changelog in AROMA installer. I forgot to edit it.

Since I do not have a OP3T myself, there may be some minor bugs in this version. Currently I'm looking for some beta testers for stable releases in future. PM me if interested
[OnePlus 3T Themes, Apps, and Mods] gibby1290:
Breaks UI

Flashed this and the phone boots to a black screen, notifications come in and all that, but you can't see anything. OOS 4.0 Beta Build
[OnePlus 3T Themes, Apps, and Mods] ungeeked:
Currently it is for OOS 4.0 stable only.

I think beta builds are named ob1,2... etc and not OOS 4.
[OnePlus 3T Themes, Apps, and Mods] jemeljsh:
Will try this on stock unrooted OOS4.0 Nougat for OP3T in a minute. Hope it really does work on un-rooted stock OOS 4.0, since then I would be able to use bank apps which do not work on rooted systems unless rom is compatible with xposed or suhide/root switch.
[OnePlus 3T Themes, Apps, and Mods] ungeeked:
In my testing, it worked without root.

Root in any case is only required for installation. You can unroot after installing the mod