yashsingh1/xdaforums huggingface dataset:
[Samsung Gear S3] adfree:
sdb install com.samsung.mixradio_FakePlatform_v4.tpk
pulled com.samsung.mixradio_FakePlatform_v4.tpk 100% 11MB
1 file(s) pulled. 0 file(s) skipped.
com.samsung.mixradio_FakePlatform_v4.tpk 405 KB/s (12310754 bytes in 29.640s)
path is /opt/usr/apps/tmp/com.samsung.mixradio_FakePlatform_v4.tpk
__return_cb req_id[240080002] pkg_type[rpm] pkgid[com.samsung.mixradio] key[start] val[install]
__return_cb req_id[240080002] pkg_type[rpm] pkgid[com.samsung.mixradio] key[install_percent] val[30]
__return_cb req_id[240080002] pkg_type[rpm] pkgid[com.samsung.mixradio] key[install_percent] val[60]
__return_cb req_id[240080002] pkg_type[rpm] pkgid[com.samsung.mixradio] key[install_percent] val[100]
__return_cb req_id[240080002] pkg_type[rpm] pkgid[com.samsung.mixradio] key[end] val[ok]
spend time for pkgcmd is [72951]ms

100 years later... :D :o

I have many things deleted in Manifest... because few things are really different between Mobiles and Wearables...

Its only to bypass Installation Selfcheck...

App after Installation not start... incompatible...

To sign could be very easy... maybe also on Gear S3 and maybe no ROOT require...

Need to be checked.

Step 1.

/opt/usr/media/test

Create this folder:

test

So it is only Copy and Paste Action... :D

Step 2.

Unpack TPK or WGT...

It is only ZIP archive...

Copy all files and folders into folder:

test

Step 3.

Choose between 3 Commands...

hash-signer.sh -a -d /opt/usr/media/test

public level

hash-signer.sh -p partner -a -d /opt/usr/media/test

partner level

hash-signer.sh -p platform -a -d /opt/usr/media/test

platform level

If working... then result looks like this:

Sign as platform level
Generate Author Signature
Key type rsa
Package is a directory
Signed author-signature.xml
Signed //opt/usr/media/test
Generate Distributor Signature
Key type rsa
Package is a directory
Signed signature1.xml
Signed //opt/usr/media/test

And you have 2 new files:

author-signature.xml
signature1.xml

:angel:

Last step is to copy all files back to PC-----> create ZIP... rename into TPK... install

Best Regards

P.S.:

On my SM-R732 not work... in not rooted and rooted Firmware...

Something is missing...

No idea if Gear have all files proper inside...

In theory no problem... for rooted device to install all nessecary files or install RPM...
[Samsung Gear S3] adfree:
Gear Manager related...

Please, maybe somebody can help me to create valid APK.

https://xdaforums.com/showpost.php?p=72208056&postcount=135

I am at the moment toooo stupid...

No idea what I made wrong. :o

Thanx in advance.

[MENTION=8252662]tNeEzR[/MENTION]

RDX before nice worked... but few "limitations"...

If I was able to dump memory... NAND dump stuff... it was not exact same like JTAG dump or other methods... some additional data...

And for Mobiles USB cable is enough.

https://xdaforums.com/showthread.php?t=1176189

I did also few experiments with sending Commands instead using Tool... :D :o Long time ago...

But now for me is unknown... How to use this feature with WiFi ? Instead USB...

:confused:

The biggest RDX collection I saw here... included RDX_5.8_SLP:

http://mobilefileserver.com/download.aspx?get=259276

If you search for RDX you find many files...

But no idea if this Server is still alive... as it seems no newer updates...

Best Regards
[Samsung Gear S3] adfree:
For study... few shell scripts *.sh

Here from SM-R732:

https://xdaforums.com/showpost.php?p=72219493&postcount=136

I am interested to find WiFi Direct stuff.. I saw 2 *.sh...

Also FOTA update is "described" little bit... Fakeroot stuff etc...

Best Regards
[Samsung Gear S3] adfree:
https://xdaforums.com/showpost.php?p=72247252&postcount=139

:D

Seems I have to bypass Reactivation Lock in Gear Manager (Android Version)...

Old Beta Gear Manager from Tizen not check this... but have not all features like Apps download, Firmware update...

1 idea is to kill this complete... but dangerous...

IMHO located in boot0 partition with sboot.bin together in encrypted data...

Second idea...

To find or to hack Gear Manager APK not to check Reactivation Lock...

:rolleyes:

Puhhh. Really sorry.

I thought this is all easier. :D

Best Regards
[Samsung Gear S3] tids2k:
Vulnerabilities found in Samsung Kernel prior to January. These should still be present in A** firmware.

https://googleprojectzero.blogspot.com.au/2017/02/lifting-hyper-visor-bypassing-samsungs.html?m=0

---------- Post added at 10:28 AM ---------- Previous post was at 10:27 AM ----------

Maybe use Ollydebug and create a breakpoint before it checks for RL also install Shortcut Master from playstore. It is another way to check all the codes from the app. open and select samsung gear plugin.. go through the codes you will find something useful '-)
[Samsung Gear S3] tids2k:
look at tge pictures below. if any way its possible to iniate the update feature on the gear app, we can change the fota update server where it checks for new software. this can be a milestone if we can change the server address to our own pc ip i.e 127.0.0.1 or watch wifi address 192.168.x.x . and then run an update which will let us install a custom rootfs. I am not sure how good this technique would be. [MENTION=1030585]adfree[/MENTION] what do u think ?
[Samsung Gear S3] adfree:
About FOTA... you should know about Delta... :D :D

Example from SM-R732...

https://xdaforums.com/showpost.php?p=63299323&postcount=1

For study...

BOOTLOADER	[B]sboot.bin	FULL[/B]_IMG	0	0
ROOTFS	delta.rootfs	DELTA_FS	0	0
CSC	delta.csc	DELTA_FS	0	0
BOOT	delta.boot	DELTA_IMG	0	0
MODULE	delta.module	DELTA_IMG	0	0
RAMDISK2	delta.ramdisk2	EXTRA	0	0
RECOVERY	delta.recovery	EXTRA	0	0

I don't know if I have seen something like this for Gear S3... :eek:

Hmmm...

Anyway...

You can use this FOTA update files local... via Code...

BUT... I have ever used unmodified FOTA Binaries...

Few Delta files inside...

Bootloader is FULL Image... not incremental ...

On SM-Z130H I can with this downgrade Bootloader...

No idea how it looks like on Gear Watches...

And I have no R732XXU2AOIL... I am allready on AOJ3...

And I am not able to catch more FOTA Binaries... as I can not use Gear Manager... because I have Reactivation Lock... :rolleyes: :rolleyes:

:crying:

Btw. Reactivation Lock... Look here.

Maybe you can dump boot0 or you allready did...

https://xdaforums.com/showpost.php?p=72251231&postcount=140

Best Regards
[Samsung Gear S3] adfree:
7zip latest Version could be usefull for extract files from Firmware *.img

For instance:

rootfs.img or csc.img and the other *.img...

Not tested if all files are valid... but it is easier to use for short investigation...

Best Regards
[Samsung Gear S3] adfree:
As info...

https://xdaforums.com/showpost.php?p=72282561&postcount=149

I am now on rooted EPK5 Firmware. :cool:

But only with soldered wires again... :rolleyes:

For me it looks like... the "normal" wifi Odin mechanism differ from USB cable Odin...

Because I am failed to do this with WiFi... :o

So it is not so easy as I thought... :D :o

My Bootloader is still the oldest from Combination AOJ2 Firmware package... because I never update sboot.bin again...

Only as info.

Best Regards
[Samsung Gear S3] adfree:
Somebody tried to compile Kernel from Open Source center?

http://opensource.samsung.com/reception/receptionSub.do?method=sub&sub=F&searchValue=SM-R760

:confused:

NOT flash to Gear S3

I need only info if all necessary files are inside and valid Kernel is result.

For instance Sources of Mobile SM-Z130H not complete... files are missing to create full Kernel...

I have at the moment not much time... and these action is harder for my little brain... :D

If somebody confirm... yes result is:

dzImage

And not something else... because "compress" is not performed...

Example what I mean:

https://xdaforums.com/samsung-tizen/general/samsung-z1-rooted-t3171417

here... mkdzimage related...

https://xdaforums.com/showpost.php?p=62198005&postcount=10

Thanx in advance.

Best Regards
[Samsung Gear S3] adfree:
Downgrade Bootloader

WARNING!

Only as info.

Maybe it work similar also after 4 years on Gear Sx series...

https://xdaforums.com/galaxy-s3/orig-development/util-sboot-checker-simple-downgrade-t2081748

Caution!

Untested...

Dangerous, you can fail... then also no Odin + USB work...

Own risk.

Best Regards
[Samsung Gear S3] adfree:
Few testmode examples with SM-R732 BOKK Firmware...

https://xdaforums.com/showpost.php?p=72316231&postcount=158

I have no idea why I have lost my Original Sales Code... :D

SER is not really correct...

Anyway... seems I could change it to DBT...

In theory could work in Combination Firmware.. as rooted...

No idea if I will soon make stupid tests with downgrade Bootloader... :o

At the moment I have fixed nearly all little problems I had... :angel:

Accept the lost WiFi range through my Solder accident... :o

But now between my Router and my Gear are only 2 meter... :D :cyclops:

This is enough for tests...

I still miss someone who tried the Kernel compile tests...

If 1 click or we have to find first all files...

Best Regards
[Samsung Gear S3] adfree:
We could create and collect infos about Firmware... and if available or not as Odin package...

btw... wow...

I can only find 3 Firmware packs VALID for FOTA... Only DBT checked... no idea if other countries have few "emergency" update received...

Official Firmware (FOTA)	available for netOdin /inofficial
R760XXU1APJF/R760OXA1APJF	[B]YES[/B]
R760XXU1APK6/R760OXA1APK6	? not free available yet
R760XXU2BQC5/R760OXA2BQC5	[B]YES[/B]

Official Firmware (FOTA)	available for netOdin /inofficial
R770XXU1APJF/R770OXA1APJF	[B]YES[/B]
R770XXU1APK6/R770OXA1APK6	? not free available yet
R770XXU2BQC5/R770OXA2BQC5	? not free available yet

Please correct me if I am wrong...

Best Regards
[Samsung Gear S3] tids2k:
[MENTION=1030585]adfree[/MENTION] im currently running vanilla tizen 3.0 from here https://download.tizen.org/releases...target-circle/wearable-wayland-armv7l-circle/ it seems to boot no apps available though .. couldnt find any tizen 4.0 image :-p

Also check : Tizen App Share on Playstore
[Samsung Gear S3] adfree:
:cool:

Thanx, this is exactly what I thought...

So it seems really sboot is supporting be default uboot Bootloader...

So in chain 1 more Bootloader...

In theory the Tizen 4 files in prerelease folder:

https://download.tizen.org/prerelease/tizen/unified/

be carefully...

Thanx for info...

Since few days I am trying to run this App...

I have only outdated Android devices...

With GT-I9300 no luck...

It crashes...

Seems minimum this app require Android 6...

Best Regards

Edit 1.

tizen-3.0-wearable_20170518.1_wearable-wayland-armv7l-circle.tar.gz

Contains no Bootloader (UBoot)...

So sboot accept custom Kernel? In this case Tizen 3 Kernel?

zImage

:confused:

Edit 2.

About no apps on it... this is similar to Combination Firmware... they doing some Development... so they need some clean "Base Firmware" without tooo many useless crap installed...

Few Apps are in repo folder... as RPM...

https://download.tizen.org/releases...e/latest/repos/target-circle/packages/armv7l/
[Samsung Gear S3] martineztherock:
Correct Pinout if you messed up, like me, and need to re-flash using ODIN...

[IMG="PINOUT FOR GEAR S3 FRONTIER"]http://echomikeindustries.com/images/GEAR_S3_USB_PINOUT.png[/IMG]

NOTE: If you get an error when you connect the usb cable to your computer, try switching the DATA+ and DATA- cables... I created the image above to show what worked for me. The color of the font is the color of the USB cable that goes in that pin.

Link to address where I got the odin from: http://odindownload.com/download/Odin3_v3.12.3.zip

I used an old regular micro usb cable I had around, cut it, and just revealed the tip of the cables, then applied some liquid flux and placed a little solder on the tip of each cable. With the iron at 300, I gathered a little bit more of the solder and simply placed the tip of each cable in their correct location and touched it with the iron tip for like 2-3 seconds. then I removed the iron and waited so that the cable would stay connected. It is very simple to do! I managed to restore my bricked Gear S3 with one of the stock images in this website.

Another trick, to remove the cover after you get the 4 screws out, use your finger nails... I removed the band for better access to it...
[Samsung Gear S3] tids2k:
How do i capture the last packet .download and .tmp

It seems like they are blocked and chown and chmod doesnt help even with +x . No way to access the directory and the package files. I will try to decompile the app today and try to chnage the download paths but if the mode of communciation is via gearplugin then I am out of luck.
[Samsung Gear S3] adfree:
I can not try self.. as this Tizen share app crashes...

No idea if maybe folder and file are hidden...

with dot at Beginning

.

:confused:

Btw.

I think it is made for Tizen Mobile... as Gear Apps allready came from Samsung apps/Galaxy Server...

Look into :XML files... in data... files...

Best Regards
[Samsung Gear S3] tids2k:
I have also noticed one thing that when the files get download through the samsung gear app, they get converted to .wgt if a watchface or .tpk if an app. Maybe gear plugin has acl prebuit or some command that converts apk on the fly.

Looked at samsung r760 kernel sources, i will try to make custom kernel and see if that will work. But too less time as end of financial year coming .. very busy at work.

1. Build custom kernel ( do you have any root patches i can use to build a rooted kernel )

2. Build TWRP ( looking at fomey's git for gear s ) link here :
[Samsung Gear S3] adfree:
Maybe more chance if we find safe way for Bootloader Downgrade...

I have short investigate in Kernel... zImage from SM-R732...

https://xdaforums.com/showpost.php?p=72432212&postcount=162

Maybe 1 or 2 commands usefully for users which tried Combination Firmware but WiFi disabled...

Best Regards

Edit 1.

sh-3.2# reboot wdownload
Rebooting with argument 'wdownload'.

Short tested with my SM-R732...

This Command start WiFi Download...
[Samsung Gear S3] -V-O-Y-A-G-E-R-:
Thanks for the image. I did this way and the error I got when attaching the USB cable to the back of my computer is a warning that the USB device is drawing too much power. Will try reverting the + and - wires, as that was also shown in Artem's post at

---------- Post added at 09:31 PM ---------- Previous post was at 09:12 PM ----------

Darn, with + and - reverted, I still got power surge warning.

Strangely enough, I got it even when I disconnected + and -, leaving only VCC and ground soldered onto the pins.

Why would that be any idea? :)
[Samsung Gear S3] adfree:
But you are in Download Mode... before you plug in the cable?

Best Regards
[Samsung Gear S3] -V-O-Y-A-G-E-R-:
I was and I wasn't, tried several combinations. I tried replugging the cable while in the download mode :)
[Samsung Gear S3] tids2k:
You have a dirty solder. Do the soldering again. Make sire no lithium flux. Do not revert + and - Possibility of a hard brick !

---------- Post added at 05:31 AM ---------- Previous post was at 05:29 AM ----------

I will test and let you know.
[Samsung Gear S3] adfree:
I was able to downgrade my Bootloader sboot.bin by nearly same good old trick known from GT-I9300... :angel:

https://xdaforums.com/showpost.php?p=72467226&postcount=164

With my SM-R732...

I have no idea if we can do this also with Gear S3...

1.

Gear S2 have BOTA0 and BOTA1 partition...

sh-3.2# ls -l /dev/disk/by-partlabel
total 0
lrwxrwxrwx 1 root root 15 May 26 03:43 boot -> ../../mmcblk0p6
lrwxrwxrwx 1 root root 15 May 26 03:43 [B][COLOR="Green"]bota0 -> ../../mmcblk0p1[/COLOR][/B]
lrwxrwxrwx 1 root root 15 May 26 03:43 bota1 -> ../../mmcblk0p2
lrwxrwxrwx 1 root root 15 May 26 03:43 csa -> ../../mmcblk0p3
lrwxrwxrwx 1 root root 16 May 26 03:43 csc -> ../../mmcblk0p10
lrwxrwxrwx 1 root root 15 May 26 03:43 module -> ../../mmcblk0p9
lrwxrwxrwx 1 root root 15 May 26 03:43 param -> ../../mmcblk0p5
lrwxrwxrwx 1 root root 15 May 26 03:43 ramdisk1 -> ../../mmcblk0p8
lrwxrwxrwx 1 root root 15 May 26 03:43 ramdisk2 -> ../../mmcblk0p4
lrwxrwxrwx 1 root root 15 May 26 03:43 recovery -> ../../mmcblk0p7
lrwxrwxrwx 1 root root 16 May 26 03:43 rootfs -> ../../mmcblk0p13
lrwxrwxrwx 1 root root 16 May 26 03:43 steady -> ../../mmcblk0p14
lrwxrwxrwx 1 root root 16 May 26 03:43 system-data -> ../../mmcblk0p11
lrwxrwxrwx 1 root root 16 May 26 03:43 user -> ../../mmcblk0p12

Very similar to PIT from GT-I9300 S3... :D :good: :cool:

But Gear S3 have Tutti or something in this direction... on p1

:confused:

https://xdaforums.com/showpost.php?p=71744629&postcount=7

Sorry, p1 name is TUP

:confused: :confused:

sh-3.2# ls -l /dev/disk/by-partlabel
total 0
lrwxrwxrwx 1 root root 15 Apr 6 09:52 boot -> ../../mmcblk0p8
lrwxrwxrwx 1 root root 15 Apr 6 09:52 cm -> ../../mmcblk0p7
lrwxrwxrwx 1 root root 15 Apr 6 09:52 cpnvcore -> ../../mmcblk0p3
lrwxrwxrwx 1 root root 15 Apr 6 09:52 csa -> ../../mmcblk0p2
lrwxrwxrwx 1 root root 16 Apr 6 09:52 csc -> ../../mmcblk0p11
lrwxrwxrwx 1 root root 16 Apr 6 09:52 module -> ../../mmcblk0p10
lrwxrwxrwx 1 root root 15 Apr 6 09:52 param -> ../../mmcblk0p6
lrwxrwxrwx 1 root root 15 Apr 6 09:52 ramdisk1 -> ../../mmcblk0p5
lrwxrwxrwx 1 root root 15 Apr 6 09:52 ramdisk2 -> ../../mmcblk0p4
lrwxrwxrwx 1 root root 15 Apr 6 09:52 recovery -> ../../mmcblk0p9
lrwxrwxrwx 1 root root 16 Apr 6 09:52 rootfs -> ../../mmcblk0p14
lrwxrwxrwx 1 root root 16 Apr 6 09:52 steady -> ../../mmcblk0p15
lrwxrwxrwx 1 root root 16 Apr 6 09:52 system-data -> ../../mmcblk0p12
lrwxrwxrwx 1 root root 15 Apr 6 09:52 [COLOR="Red"][B]tup -> ../../mmcblk0p1[/B][/COLOR]
lrwxrwxrwx 1 root root 16 Apr 6 09:52 user -> ../../mmcblk0p13

:confused: :confused:

Is somebody able to dump this partition and check if Tuttiputt... ehm TUP partition is empty?

:confused:

I will try to investigate in Gear S3 Firmware...

So maybe we can be more sure if this is same as BOTA0... :o

In theory it would be also helpfull, if somebody can catch FOTA file from Gear Manager...

If this is also only update.zip... then maybe we can check if Security is dramtically increased...

Or maybe this time more luck... :o

Best Regards
[Samsung Gear S3] tids2k:
Hello everyone. I have to sell my watch due to shortage of money. It was great fun understanding the way how everything worked. [MENTION=1030585]adfree[/MENTION] if you want I can send you my jig. But I am not sure how long ot will take to reach you thru australia post. It was great to know and research the unknown territory with you l. I wish you all the best with your furthur research.

If i get the watch back maybe one day i can start looking into porting android again.

---------- Post added at 09:50 AM ---------- Previous post was at 09:49 AM ----------

With the pit look at my thread in the development section. It would list the parritions and there size.
[Samsung Gear S3] tids2k:
Here is the PIT file.
[Samsung Gear S3] adfree:
[MENTION=1722345]tids2k[/MENTION]

Thanx for support and your offer. :good:

Factory Pogo Jig is really nice... thanx :o but I have no near plans to buy Gear S3...

As tooo expensive for tests and Hardware experiments... for me. :o :o

Ehm...

Today I have flashed Tizen 3 to my SM-R732...

It is working... :D

except WiFi is disabled :rolleyes:

Can you remember if your attempt was with more success?

I mean this:

https://xdaforums.com/showpost.php?p=72353197&postcount=197

You were able to use WiFi?

Or you were also forced to use USB for Odin?

Thanx in advance.

Best Regards
[Samsung Gear S3] tids2k:
maybe to get wifi working flash modules.img via odin. I also one interested thing. it seems like we can have u-boot on gear s3, it is mentioned on the tizen wiki. link here : https://wiki.tizen.org/How_to_Build_and_Load_Tizen_on_Odroid_U3#U-Boot_Tizen and looking at this thread : https://xdaforums.com/showthread.php?t=1496729 i think we should be able to make a custom bootloader for the watch.
[Samsung Gear S3] adfree:
[MENTION=1722345]tids2k[/MENTION]

:o

Sorry. I was not sure what you mean...

For downgrade/change Bootloader (sboot.bin) rooted Firmware is required.

1.

I have used Combination Firmware... because fully root access.

2.

Nearly same Commands and steps like with good old Mobile GT-I9300...:D

3.

Same partition worked like known from GT-I9300...

4.

Only tested with my SM-R732... Gear S2

Their are minor tiny little differences in PIT...

https://xdaforums.com/showpost.php?p=72470876&postcount=210

TUP partition is bigger as BOTA0...

So I requested content of this partition...

if TUP is empty... then we could proceed... but if TUP contains any kind of data...

:confused: :confused:

So I need somebody with alive Gear S3 who dd this partition if he/she/it is on Combination Firmware. :D

In theory you are the best Tester for this Task...

But if you want sell your Gear S3 or allready you did...

Thanx again for your hint about Tizen 3 Image. :good:

Now I am playing with Tizen 4...

At this time... I am thinking it would be possible to run custom Kernel.

Custom in my opinion means also Android Kernel or any other OS...

But you need Kernel... if nobody compile any Kernel... we can not test... :D

Best Regards
[Samsung Gear S3] tids2k:
Borrowed the watch for two days, have a look at the tup.img, extracted from Combination BQC2

http://www30.zippyshare.com/v/zYqnYmnb/file.html

---------- Post added at 02:30 AM ---------- Previous post was at 02:29 AM ----------

I have no knowledge on how to compile. If i have time I can learn and make one, but no time at this stage. family and work.

EOFY very busy times. Anyone with good kernel skills, please visit this github

https://github.com/Biktorgj -> GIT for custom kernel for Gear S

https://android.googlesource.com/kernel/exynos/ - > Android Wear kernel port for Exynos devices :D
[Samsung Gear S3] adfree:
Thank you very much.

This is very helpfull. :good:

TUP partition is empty.

This is good to know..

My research about "BOTA0" leads that Gear S3 could use same mechanism...

So in theory this could work to downgrade Bootloader sboot.bin

OWN risk!

Similar way like I did with SM-R732 is the idea:

https://xdaforums.com/showpost.php?p=72467226&postcount=164

Commands can be used 1:1 ... copy and paste...

Only question which Bootloader for first attempt... maybe from Combination Firmware APK3

R760XXE1[B]APJG[/B]

Best Regards
[Samsung Gear S3] tids2k:
i will try and let you know in half an hour.

tried it it does not change the sboot.bin. It seems with S3 we can go back and write the previous sboot

---------- Post added at 10:56 AM ---------- Previous post was at 10:14 AM ----------

no luck. the sboot remains the same..
[Samsung Gear S3] adfree:
:o

Thanx for testing...

:(

Bootloader related I have at the moment only 2 ideas left...

1 idea is dangerous and could be deadly... if fail...

The other idea is still to collect more Infos about FOTA update...

This require FOTA Update package from Android handset... where Gear S3 Firmware is temporary stored before transfered to Gear S3.

Still I "need" something like this:

https://xdaforums.com/showpost.php?p=63299323&postcount=1

Best Regards
[Samsung Gear S3] adfree:
About Tizen 3 and Tizen 4...

Found an way to capture Screenshots with SDB:

https://xdaforums.com/showpost.php?p=72553023&postcount=171

Now I need only to find way... to enable my WiFi.

I have few ideas... :D

Best Regards