yashsingh1/xdaforums huggingface dataset:
[LG G5 Questions & Answers] tracid1987:
Thank you. I have contacted them too. I have LG G6.

It would be good if it were a global LG subforum here so we could write a thread and ask other people who want their bootloaders to unlock to flood LG with mails. :)
[LG G5 Questions & Answers] tracid1987:
By the way seems like the brute force generator project is dead :( The dev is not responding, i hope he is fine and doing well :)
[LG G5 Questions & Answers] God-Future:
No response so far. I guess LG has shutdown their operation completly. Did someone get a response lately? If yes, on which email?
[LG G5 Questions & Answers] tracid1987:
i have sent a few mails and these two replied with negative answer (they can not provide the file for me anymore- i think rather it would be too much for them to deal with something and dig out of the database which is out of business)​

serviceindia@lge.com​

developer@lge.com
[LG G5 Questions & Answers] God-Future:
Such a sh**. I bought this phone recently :( This confirms a bit what I have expected. Maybe we could gather as many users as possible and write a common request to support our interest. How could we do something like this? Any ideas?

And should we ask for the keys, because anyway they do not sell these phones anymore.
[LG G5 Questions & Answers] ebod:
Hi, I have had an LG G5 H-850 since new and its literally been left in a cupboard as a spare. Since my Huawei P30 pro is due to become another spare I wanted to set this G5 up as a zero value in car HU for my old 2008 Volvo which is just CD/FM radio. I have not messed about rooting android devices for may years, but I wanted to make this phone capable to switch on/off with the car ignition ( stepped from 12v to 5v ).

My investigations are so far concluding I should have done this by the end of 2021 as there is no longer the means to root the unit due to LG pulling out of the mobile phone market.

.....or is there an alternative, even if it means a complete custom rom ??
[LG G5 Questions & Answers] BOXOFAWEEEEESOME:
Serious Inquiry: Would you like to help my team reverse-engineer the LG bootloader locking algorithm? We plan to step though the process of failed and successful attempts while analyzing the state of components at each step. As many know, LG has recently terminated their unlocking service as they are no longer going to be manufacturing mobile phones. Devs everywhere are seeking a way to continue to unlock LG devices. I believe that we could make that possible, either for profit, or for the joy of successfully reverse-engineering a cryptographic algorithm, matched with a resounding cheer from superusers everywhere. Feel free to leave me a message @ mdweis25@gmail.com
[LG G5 Questions & Answers] obs3rv:
I haven't had an LG phone for nearly three years now, so no impetus to try to reverse engineer the algorithm. And as I mentioned earlier, if they've done this properly, there's an asymmetric crypto scheme involving a private key that only LG hold, that is used to generate the unlock codes. So I'm skeptical that this is something that can be done short of a leak from LG.
[LG G5 Questions & Answers] ebod:
My old G5 just sits as stock UK unrooted. My only plan for it was to act as a throw away in-car unit that I could hook up via bluetooth to my old 2008 Volvo. The key thing I was trying to achieve was to auto switch on/of via the cars 12v interior system. I'm happy to have a custom rom..but figured without rooting I'm stuck at the first hurdle..
[LG G5 Questions & Answers] BOXOFAWEEEEESOME:
We believe we should be able to identify the padding through our method. From there it's still improbable to brute force a private key and we have yet to show Proof of Concept for being able to derive the private key via hardware monitoring. Though we have not lost hope for one day finding the private key, we are currently working on a Quick Crack program in order to derive ones specific unlock.bin file. An emulation program that takes your device-id, IMEI, device model, and stock firmware as input, then emulates the unlock attempt over and over while monitoring the simulated hardware as if a safecracker listening to the tells of the safe. It looks as if we may just have a solution that could bring any particular user just hours from their unlock.bin.
[LG G5 Questions & Answers] BOXOFAWEEEEESOME:
If anyone has a rooted LG G5 or LM-Q710TS and would like to assist in the creation of an unlocker please email me mdweis25@gmail.com
[LG G5 Questions & Answers] el-sahef:
I flashed the misc-partition (contains MAC addresses and other device specific stuff) from a G5 H850 with unlocked bootloader to a G5 H850 with locked bootloader (using this with firmware v30f on the phone) but it did not change the oem-id of the device with the locked bootloader. My hope was that the oem-id is based on the stuff in the misc partition but this does not seem to be the case.

If we find out where the information is stored from which the oem-id is derived maybe we can use a working set of oem-id generation data and unlock.bin to unlock any current bootloader locked G5 H850 by writing the oem-id generation data from the unlocked to the locked phone with the root shell exploit, therefore changing the oem-id to the correct string for the unlock.bin file.

If the oem-id is based on unique hardware identifiers like SoC chip serial number then this approach will not work.
[LG G5 Questions & Answers] Cryomichel:
Great to hear you guys are still working on it !

I haven't done the official unlock and now I'm stuck :(

I contacted severa LG support which all says it's not possible to unlock anymore....

I'll keep watching if you find something ! Could be perfect for the community
[LG G5 Questions & Answers] olliwolli:
I just wrote the also mail to developer@lge.com

I understand that they don't wnat to spent effort with this unlock. but why they don't provide the algorithm to the cummunity.

THis is super unfair. I bet they use open suorce sofware everywere in their products!
[LG G5 Questions & Answers] Cryomichel:
What were you able to do by flashing this ? Did ir granted you root rights ? Did you managed to flash something on the phone ?
[LG G5 Questions & Answers] mikelikesroot:
how are you guys getting on with the project, would be a great thing if you can do it, myself have just sourced a g5 for £20 because it would not turn on, i was made up...and then i discovered the news about lg :(

if bruteforcing to try and crack the encryption doesnt work, does anyone think there is a possibility of doing something via the qualcomm edl function
[LG G5 Questions & Answers] Soupape50:
Hi guys, I'm also desperate to unlock the bootloader of my G5, so if anyone finds an option, let us know :) Thanks a lot
[LG G5 Questions & Answers] benryanau:
No news on this I'm aware of, perhaps more noise via their email contact points would help
[LG G5 Questions & Answers] mikelikesroot:
I contacted them a few weeks back, and got a reply which was clearly a copy and paste from their original notification of the developer site shutting down, i said i know but surely the software for creating the .bin files still exists, is it not possible to provide individual .bin files or the software?

...i have had no reply

Hopefully someone will find a way to unlock it, i dont know if its possible to use the eda mode of the qualcomm chip?
[LG G5 Questions & Answers] ROMSG:
edl mode isn't possible, there is no firehose for the g5
[LG G5 Questions & Answers] mikelikesroot:
Bummer
[LG G5 Questions & Answers] God-Future:
Do we know some of the former LG developers? I mean, have they been active in some forum outside LG company? Maybe they can help us?!
[LG G5 Questions & Answers] Cryomichel:
I hope they could help us.

But, all thier work must be hosted on LG sevres and they must have some non disclosure agreement about encryption.
[LG G5 Questions & Answers] The Dumb Dino:
Is there a way to unlock a LG G5 2022, i wan't to unlock my freinds phone and install a version of linage for him.

Greetings from Germany.
[LG G5 Questions & Answers] David Piedra:
I´m also interested in any solution for the bootloader unlock. I have 2 LG phones and didn´t know until last week that since December 31 the unlock cannot be done.
[LG G5 Questions & Answers] DisD:
They should have provided a way to get admin rights even after developer center has shut down for phones!
[LG G5 Questions & Answers] SandburgN:
Hi guys,

Is it too late to ask one of you to generate an unlock.bin file for a h850 ?

Who should I send a priv message with the info?

Side question, why don't you just share the algorithm?
[LG G5 Questions & Answers] ROMSG:
The algorithm isnt available
[LG G5 Questions & Answers] 柠檬Lyme:
they just didn't reply after the site shut down.....f#ck
[LG G5 Questions & Answers] johndaog:
Is there any hope for this project?

I wait hopefully but once i finish studying i will tackle this problem.

I think the H850 has a lot of potential and is easy to replace the battery.

Would give so much life to the device if we could unlock bootloader on all G5 variants
[LG G5 Questions & Answers] gh0stza:
Hi,

I am also trying to reverse the unlock.bin file. I have three G6 unlock.bin files and one G5 .bin file provided by XDA users ( from HERE ).

I have already established that the first 13 bytes are identical in all 4 examples as well as the final 512bytes ( of the 1024 total bytes ).

The G5 unlock.bin file format is ( offset ):

0-13 possible padding (identical)

14-113 encryption

114-11F zeros (identical)

120-3FF zeros (identical)

G6 unlock.bin ( offset ):

0-13 identical

14-113 encryption - length 253

114-11F zeros (identical)

120-21F encryption - length 256

220-3FF zeros

Based on this it's clear that the G5 has less checks on the unlock process then later models like the G6.

It might not even be from a private key from LG, it might simply be a very basic mathematical algorithm.

Can anyone with working unlock.bin files please upload them to this post along with the corresponding IMEI and Device-ID's please. I think it might be worth one last shot to break LG's bootloader unlock if it can be done.

If you are worried about posting it publicly then PM it to me. However I really doubt anyone will use your IMEI for anything nefarious. I would prefer a upload to the post as anyone that wants to take a crack at it can join in. The more people try the better the odds of cracking this mofo.
[LG G5 Questions & Answers] johndaog:
Wow @gh0stza I am with you

I am also for unlocking the g5.

It should not have been locked down
[LG G5 Questions & Answers] gh0stza:
The way I see it we have three possible ways to attack this bootloader protection.

Spoiler content hidden.

Spoiler content hidden.

Spoiler content hidden.

PenTestPartners

So long story short....

I think our best option to crack this code is to get as many possible unlock.bin files and hope the devs at LG didn't use AES with a private key

I welcome anyone who would like to take a crack at it and help with cracking this mofo

Attachments:

A leaked G7 debug firehose file that partially worked on my G6 H870.

PS: My test phone is a LG G6 thin Q H870 with latest stock firmware V30 1212
[LG G5 Questions & Answers] Philosoquai:
I am with you. This device has so much potential but this bootloader is the pain in the ass.
[LG G5 Questions & Answers] gh0stza:
@aac_j​

Can you please share with us the unlock.bin files you received so far so we can help you with trying to crack it pls?
[LG G5 Questions & Answers] gh0stza:
@johndaog

If you have a G5 maybe you can use the dirtysanta exploit to root your device.

Check out this thread: XDA post

My G6's USB is faulty and I can't get a connection with ADB so till I repair that port any ADB root solution is out for me.

Revert to earliest firmware you can find and check out if you can use either dirtysanta or dirtycow exploit.

DirtyCow was patched Nov 2016 so just flash and check the Security Patch version in "About Software" section in Settings.

Then just search for both dirtycow and dirtysanta github on google and try the exploit. Another option is to flash earliest firmware and then just try KingORoot.

Would love to know if this worked. My G6s' earliest firmware is 2017-04-22, so I have high hopes I can use dirtycow for root after I fix my USB port.
[LG G5 Questions & Answers] johndaog:
@gh0stza I dont really want to root my g5. I want to flash lineage OS or build for the device.

I dont know much about rooting. Anyhow my fast charge doesnt work. I dont know why. I only get fast charging with my cam plus module. Anyhow I'll look into dirty Santa.
[LG G5 Questions & Answers] gh0stza:
If you have a G5 you will prob be able to use dirtycow as the security patch version for the earliest fw for your phone is most likely gonna be just before Nov 2016.

I just rolled back my G6 to earliest firmware possible and it has March 2017 😢

😭😭😭😭😭

Just 5 months too late...damn you LG!!!!! Cudos on creating the ONLY phone ever I haven't been able to root.

Besides cracking the bootloader, I only have ONE more idea to get root on this phone.

If anyone would like to help me design an exploit for this ( Checkpoint Research ) vulnerability. I'm 99% sure this firmware is vulnerable to this exploit.

Also I need to repair the USB port at some point. When I do I'm gonna try testpoint EDL and see if I can unlock the BL that way.
[LG G5 Questions & Answers] gh0stza:
See this thread: https://xdaforums.com/t/unlock-technical-steps-to-make-an-unlocked-bootloader.3165391

Congratulation LG on creating the most uncrackable phone I've ever worked on.

Unlocking the bootloader is basically impossible - so forget about custom ROMS

Best we can ever hope for is an exploit for root

Only exploit I've found that might work is this: https://research.checkpoint.com/2018/lg-keyboard-vulnerabilities/

( Or if an LG employee ever leaks those private keys )

If anyone stumbles on this thread, forget about unlocking bootloader and/or rooting your phone - Sell it and buy something else

See also: lm80-p0436-1_little_kernel_boot_loader_overview.pdf 2.3 Kernel authentication

Mod please close this thread, it's not going anywhere...
[LG G5 Questions & Answers] Philosoquai:
OMG. This is a bad news. I just thank you for all your all effort. I really hope my device is unlocked in future.
[LG G5 Questions & Answers] Shadowind30:
Luckily there are some variants like the H830 (T-Mobile) that doesn't require bin files to unlock, So there's some hope for the One who want to give this phone a try.
[LG G5 Questions & Answers] MikeChannon:
As LG servers are now shut down, the OP has asked for this thread to be closed.
[Verizon Samsung Galaxy S8+ Questions & Answers] dilgit:
Has anyone here tried the new root file for Verizon S8+

https://download.chainfire.eu/1080/...to-Root-dream2qltesq-dream2qltesq-smg955u.zip
[Verizon Samsung Galaxy S8+ Questions & Answers] nrage23:
It will only work with an unlocked bootloader. Since all US Snapdragon based S8's have a locked bootloader it useless.
[Verizon Samsung Galaxy S8+ Questions & Answers] photolarry:
So why has Chainfire made this at all if it does not work or will brick your phone? I should ask him but not sure he will answer.
[Verizon Samsung Galaxy S8+ Questions & Answers] VoxBox101:
[emoji19] smh
[Verizon Samsung Galaxy S8+ Questions & Answers] nrage23:
He clearly states that it only works with an unlocked bootloader. If the snapdragon versions of the S8/S8+ had an unlocked bootloader it would work. Not sure why you could have an issue with him.
[Verizon Samsung Galaxy S8+ Questions & Answers] photolarry:
The U version isn't ever unlocked. Not with him. I'm just confused why it seems this would work on that model but it doesn't
[Verizon Samsung Galaxy S8+ Questions & Answers] VoxBox101:
If the bootloader ever gets unlocked by any means, it will work.
[Verizon Samsung Galaxy S8+ Questions & Answers] photolarry:
You missed my point and question to him. Which is "U" model is LOCKED because it is all phones inside the USA that are distributed by all 4 major carriers. So there is no such thing as SM-G955U which is unlocked. Does not exist. Thus I wanna know why there is even a zip file which chainfire created since it cannot be used on any of these phones. And why would it "get unlocked"....it is done at the factory. Only way to "unlock" it is to use a root method like was done on S7, where it basically involves flashing an engineering boot image/kernel that has root. At some point, this probably will be made and then using same modified ODIN (PrinceComsy) would potentially be the solution.
[Verizon Samsung Galaxy S8+ Questions & Answers] nrage23:
I will try and clear up some confusion. All US snapdragon versions of the S8+ have the same model number SM-G955U. There is an "unlocked" SM-G955U version of the S8+ in the US. It is carrier unlocked not bootloader unlocked. Apparently the CSC file carries the carrier information in the firmware. Also the S7 was rooted but never bootloader unlocked. So you could use most root apps but you could not modify any system files. The root was achieved with an engineering kernel and was not very useful.(ie bad battery life, phone getting hot and unstable). You could however flash any US S7 to any carrier or even the Unlocked firmware.
[Verizon Samsung Galaxy S8+ Questions & Answers] photolarry:
But if you cannot flash even the csc, how do you gain root access when Odin basically does nothing. That's my question and point. Seems that if I stick with Galaxy phones that I'm never going to attain root again. Probably because they don't want risks of pay apps being misused. I have one app that refuses to even run if I have usb debugging on. Vendors are getting smarter about locking things down.
[Verizon Samsung Galaxy S8+ Questions & Answers] kbatrph:
It's not Samsung's fault...it is Verizon, AT&T, Sprint and T-Mobile. I can't even take my Verizon phone and change it to T-Mobile. That's ridiculous!
[Verizon Samsung Galaxy S8+ Questions & Answers] BigM69:
If LG lets it's consumers unlock there bootloader then why don't samsung? I'm selling my ccarrier unlocked s8+ and buying a unlocked g6. Screw this crap. I hope samsung goes bankrupt! SAMSUNG ALLOW US TO UNLOCK OUR BOOTLOADERS.

I wish my S8+ was rooted?
[Verizon Samsung Galaxy S8+ Questions & Answers] mybabyloves:
The reason you can't do this is the bands are different (I believe). Or, at least Verizon is CDMA while T-Mobile is GSM. I don't know much about the differences between CDMA & GSM, but I know that CDMA phones won't work on GSM networks & vice versa. That's why Verizon phones won't work on T-Mobile. Hopefully that (kinda) cleared it up for you.
[Verizon Samsung Galaxy S8+ Questions & Answers] blackra1n:
My goodness you could not be any more wrong..... That is no longer the case anymore. Verizon phones work on T-Mobile and all GSM carriers. I should know since I was with Verizon and I switched a while back but am now back on Verizon. Some phones from T-mobile won't work with Verizon but some do. It just depends on the phone and what bands it has. Like the S8 from T-Mobile will work on Verizon but an iPhone 7 from T-Mobile won't because it doesn't have CDMA bands. It's simple research
[Verizon Samsung Galaxy S8+ Questions & Answers] mybabyloves:
Really?? Man, I feel so stupid about that, sorry =/ I've been researching it, but all of what I've read pointed to what I said... thank you very much for correcting me ? it'll def help me in my journey to become a phone repair specialist! ? sorry people I might've confused.... I'm just an idiot - don't listen to me
[Verizon Samsung Galaxy S8+ Questions & Answers] neozen21:
CDMA is only for 3G. With 4G, Verizon is using LTE GSM (same with AT&T, T-Mobile).

Verizon LTE covers over 98% of their network, but there are still some remote places where there is only CDMA coverage.

Verizon is moving away from CDMA and it will be retired by 2018.

So as long as you don't mind not having CDMA in a few places, any LTE GSM phone with Band 13 would work with Verizon.

Look at HTC U11, it doesn't have CDMA, but it's still advertised as "Verizon certified".

Sadly, the Internationals versions of S8/S8+ don't have band 13. But fortunately, all US versions have both bands 13 and CDMA support. That's why you can switch to any carrier as long as it's a US version.
[Verizon Samsung Galaxy S8+ Questions & Answers] blackra1n:
No worries mate. Just wanted to put that out there in case anyone become confused. I meant no disrespect :)

---------- Post added at 06:28 PM ---------- Previous post was at 06:25 PM ----------

My point exactly about the S8's. US variants are all the same no matter what carrier. All Google phones after the Nexus 6 are the same way. The Nexus 6 worked on all US carriers no matter where you got it from and it's like that all the way to the new Pixel phones. Where as iPhone's, just as an example, have different bands when it comes to different carriers. Unlocked, Verizon, and Sprint iPhone's have all bands both CDMA and GSM where as the GSM ones like those bought straight from T-Mobile or AT&T only have the GSM bands.
[Verizon Samsung Galaxy S8+ Questions & Answers] kbatrph:
You're NOT stupid! I had no idea either. I know that I tried to switch my Verizon S8+ to T-Mobile but it wouldn't recognize my IMEI so I just figured the two networks were different
[Verizon Samsung Galaxy S8+ Questions & Answers] gambit1:
I have a unlocked verizon(xfinity mobile) s8plus on tmobile right now.. The phone had no issues on setup to go on the tmobile network..
[Verizon Samsung Galaxy S8+ Questions & Answers] thechaoz:
https://xdaforums.com/galaxy-s8+/development/root-g955u-g955u1-snapdragon-sampwnd-t3658911

So this has changed?
[OnePlus 3T Questions & Answers] ProudRed:
APP OPS Xposed doesnt work on OOS 3.5.4. Looking for some alternative. Googled, couldnt find enough.
[Samsung Galaxy S8+ Questions & Answers] dilgit:
Anyone tried to flash this root file from chainfire for the SM-G955F S8+

https://download.chainfire.eu/1038/...F-Auto-Root-dream2lte-dream2ltexx-smg955f.zip
[Samsung Galaxy S8+ Questions & Answers] zello1985:
Is your brain functioning as it should I have my doubts :silly:
[Huawei Mate 9 Porsche Design Questions & Answers] ap10046:
Is there anyway to separate the media volume from notification volume?

For example, in the car, whilst listening to Bluetooth audio from the phone, I need to have my media volume up, but this makes incoming notifications simply frightening and brutally loud through the audio system.

Also, why does my media volume control notification volume?
[Huawei Mate 9 Porsche Design Questions & Answers] vangoogle:
Separate Volume control Media and notification

This is on the Mate 9 as well, drives me mental, and judging by no response to your question we are screwed. This is the first android device I have used that doesnt have separate volume settings for this??

I have been tempted to flash a vanilla firmware instead of huawie to see if it has the settings but it appears all the bootloader pages are down at huawie and I cant unlock it :(

Love the phone apart from this??

Anyone please????
[Off-topic] mlalahoi:
Soo, I just tapped the x button to take a lookat what I had open that was slowing me down, and thought I might ask what all you ladies and gents have open and running on your phone right now?

Pocket CM

Notes

Calendar

Deepfish (cool, and useful for some sites but not all sites)

FlashLite (for Slither Cube UNO)

Voice Command Config

What are you running?
[Off-topic] py2o|\|oI|):
Not anything open but running on my device is a little stream of H2O coming from the tree that I’m sitting under…. how long do you think my device will go before getting slower? :(

...whats usually running is:

HTC Audio Manager

Opera Mini

MXit (IM app)

PocketCM

Resco Explorer

and maybe my GPS app

btw dude, I just want to know as to why you are using my great grand parents as an avatar?:confused:
[Off-topic] cuboosh:
activesync for push

outlook for push

palm threaded sms

ptravelalarm

spb gprs monitor

mobitv (discovery channel)
[Off-topic] TheAlmightySam:
ActiveSync (sadly)

Google Maps

Internet Exploder

and Mortplayer.

Really nothing too exciting.
[Off-topic] mariner_heart:
Activesync

Windows Media Player

TCPMP