yashsingh1/xdaforums huggingface dataset:
[LG G6 Questions and Answers] Tinyshy:
I couldn't agree more. I'm hoping for lineage on my canadian h873 to be honest.. but even just having twrp would be a nice first step. I made the mistake of getting this phone on a 2 year contract thinking it was rootable. not that I mind too much. the g6 is a wonderful device I'm just missing having root. before this I had a k4 no root there either but going back to when I had my galaxy s4? that was amazing, my setup was just perfect for my needs ^^ anyways, cheers. <3 can't wait
[LG G6 Questions and Answers] nchc:
In hindsight, I wish I had requested USD. I couldn't be bothered to covert all the various currencies and dont know how you had the will to either. Thank you so much, i cannot vouch for the accuracy, but its beyond what i thought.
[LG G6 Questions and Answers] lalapa:
Is he unlocked LG G6 dual sim? (h870ds)
[LG G6 Questions and Answers] Tinyshy:
well, I used my friend google to grab all the conversion rates and then I took your entire list into a spreadsheet and worked from there.. I have no way to pitch money in at the time so, if I can at least help the thread its nice. ~<3 bye for now ^^
[LG G6 Questions and Answers] Neil salman:
What you mean is that I can root my h870ds but cannot put custom ROMs?

---------- Post added at 10:58 PM ---------- Previous post was at 10:47 PM ----------

15$ h870ds
[LG G6 Questions and Answers] bgumble:
I don't pay the promised bounty because I ordered a oneplus 5t today, sorry
[LG G6 Questions and Answers] Dacalala:
Please do remove my pledge. I unfortunately won't have the phone for much longer (going with the Xperia Xz1 compact soon), sorry about it.
[LG G6 Questions and Answers] christopherrrg:
Me as well, while I apologize for pulling out but the H873 has served me well and it shall serve my girlfriend even better because she's happy without root. I've been using the G6 since June and honestly can no longer deal with not having my custom ROMs. Love you all and I hope you guys get some kind of solution in the future. The G6 is probably the best phone I've ever owned. Take care and thanks for the ride. :)
[LG G6 Questions and Answers] jeffyzefrench:
Received my H870DS yesterday so happy to give $20 AUD for root
[LG G6 Questions and Answers] Tinyshy:
sorry to see you go... best of luck with whatever device comes next.
[LG G6 Questions and Answers] fanzizou33:
I will donate 10€.

I don't have mine yet. It is the 128Go version, H870DSU.

I suppose it will have the same issue than the 64Go H870DS version.
[LG G6 Questions and Answers] –NigthFury–:
I will try to unlock the device.IF I have it in my hands.Fingers crossed promise.
[LG G6 Questions and Answers] matin0611:
hi

i buy phone right now

happy to give 20 dollar
[LG G6 Questions and Answers] Rogue8o8:
Do you have any past experience with rooting...Any accomplishments? Hope your not trying to scam people?
[LG G6 Questions and Answers] –NigthFury–:
Sorry.I can't promise.I am still a learner.If I fail then that would be stupid.I know how to create a root for a device but no knowledge on how to hack the bootloader to unlock.Will have to learn it.Rooting is not hard BTW its simple and easy you just need to have the right tools but the problem is about unlocking you need to deeply understand the android internals and linux kernel.
[LG G6 Questions and Answers] yilun:
I'll happily pay 15€ I have South American (Colombia) H870.
[LG G6 Questions and Answers] Tinyshy:
Do you have anything you can use to gain root access without unlocking the bootloader? Having root at all is a step 8n the right direction...
[LG G6 Questions and Answers] Azeemkamal:
I want to ask : If LG official bootloader unlock not available at all, is it possible some other person can do workaround for it?

Before I had hauwei honor 3, bootloader locked, there was method, first flashed it with Chinese firmware whose bootloader was unlocked, but it lead to loss of IMEI and signals, then flash customised and rooted rom again and apply IMEI restore fix by flashing zip file.

Is this solution possible for LG 870DS as I think LG would never make bootloader unlock as they did not unlocked for G5.

If we somehow flash H870DSU firmware, then again put custom rom of H870DS with IMEI recovery fix?
[LG G6 Questions and Answers] MrDeacon:
Sorry, buddy. That's not even remotely possible. There are no simple solutions, and no salvation in sight, as long as LG themselves won't allow bootloader unlocking for the DS.
[LG G6 Questions and Answers] Tinyshy:
technically if we could find a way into edl......
[LG G6 Questions and Answers] –NigthFury–:
I know some methods but don't know if it will work as I don't have the device
[LG G6 Questions and Answers] MrDeacon:
Techically, or rather theoretically, yes. But by now, the bounty should've attracted all the technical competence we'd need, was there a way to crack the bootloader.
[LG G6 Questions and Answers] Tinyshy:
ive had an idea for achieving root, can we extrack a kdz and repack it with root in place? its been done on another lg device (https://xdaforums.com/showthread.php?t=2215929). my knowledge of this is rather limited so Im hoping one of you following this thread may know how?
[LG G6 Questions and Answers] BARANDREA97:
Is a bad idea try to flash H870 firmware on H870DS?
[LG G6 Questions and Answers] Tinyshy:
I don't think you can cross flash, unless I'm missing something? I've been trying to flash the h870 software to my h873 for awhile now with no success
[LG G6 Questions and Answers] jufofu:
I wonder if the new Dirty COW vulnerability variant may help.

http://www.openwall.com/lists/oss-security/2017/11/30/1
[LG G6 Questions and Answers] Tinyshy:
didn't work on mine.. i think our chipset isn't vulnerable

---------- Post added at 08:41 AM ---------- Previous post was at 08:39 AM ----------

hmm actually.. reading that.... with more information that seems possible
[LG G6 Questions and Answers] BARANDREA97:
Is there a way to change the phone model without unlocking the bootloader and thus without having root permissions? If there is, is there a possibility of bricking the phone?

Sorry for my English
[LG G6 Questions and Answers] Mr.Indigo:
I'd like to understand how the Developer system actually generates the unlock.bin file. Unless I'm clearly wrong, unlock.bin files are meant to be flashed only on the device that it has been based from. Flashing this unlock.bin file in other phones might mess hard with the bootloader (I never tried - and probably will never try) . The point is "how bad" it messes up and what will eventually change on the flash. Maybe the system starts a verification during the flash process, maybe looking for a specific bit (or a specific set) that says something like "hey, I'm your unlock.bin file and I'm only yours, let me in".

Unless these files are generated during manufacturing and manually uploaded to LG's server, this might be a good shot for bootloader unlocking. Looking for flaws like the resurrection of DirtyCow (aka CVE-2017-1000405) will take more time. And we all do know that this exploit will be corrected sooner or later.
[LG G6 Questions and Answers] Tinyshy:
This is a good question.. if I could have my PC detect my phone as an h870 I could attempt an unlock? Lgs site probably knows better but it feels worth a shot. Anyone think they can point me in the right direction here?
[LG G6 Questions and Answers] tech_head:
No because it needs to be signed.

Once you change the contents you cannot sign it, therefore it won't work.

Once the bootloader is unlocked you don't need signed firmware. In that thread the bootloader is unlocked.

The bin file is specific to the phone.

You need to generate a signature from your phone.

That is given to the developer system and a hash is used to generate the unlock.bin.

The code sent to LG and the unlock.bin must match or the hash on the phone will fail.

There are no pre-generated file. The hash algorithm is know and to date nobody has broken the hash.

So unless you have their signing keys or their hash algorithm, give it up.
[LG G6 Questions and Answers] gamblodar:
New Vunerability

Google "janus vulnerability android"

Would it be possible to upgrade a system app and use this vulnerability to sneak in SuperSU?
[LG G6 Questions and Answers] Polycarbonate:
First article after a bit of reading states only apks signed with scheme v1 are vulnerable, which are ran on 6.0 and under, 7.0 are not vulnerable, which is what were running. :(

We'd have to check if one of our apps are signed with v1 APK signature scheme.
[LG G6 Questions and Answers] Tinyshy:
just because our version of android support the scheme doesnt mean its employed, I'd suspect carrier provided apps of being the most likely targets

as I doubt they've updated the signing on apps they need to flash to dozens of different devices on different versions of android if someone knows how to leverage this vulnerability its worth a shot

---------- Post added at 07:09 AM ---------- Previous post was at 06:49 AM ----------

gaining root with a dex would be interesting... just use it to modify system with su and you're in...
[LG G6 Questions and Answers] Tinyshy:
anyone?
[LG G6 Questions and Answers] TheArc:
Will be receiving this device in mail in the next few days, will try & see what I can do to help workaround this whole thing. Have hope guys, we can still do this.
[LG G6 Questions and Answers] kedster:
If it happens before Christmas I'll double my contribution, from 20CAD to 40CAD possibly even more of I can scrounge it up.
[LG G6 Questions and Answers] ojas_2609:
Do I need to pay to get unlocking and rooting my phone or you people are still not able to find root for this model and still gathering bounty. R u people are holding back for sake of money??
[LG G6 Questions and Answers] electrical potato:
these people are not holding anything back. this is a bounty thread. the bounty is a reward given to those who will find a way to get root in the LG-HD870DS.
[LG G6 Questions and Answers] ojas_2609:
ok sorry for misunderstanding !!!:(
[LG G6 Questions and Answers] BARANDREA97:
To get the bootloader unlocker from LG, I need an IMEI for the H870?
[LG G6 Questions and Answers] Tinyshy:
Incorrect, even if you had an h870 Imei it'd only generate an unlock bin valid for whatever phone holds that id. unless your device is an h870 in which case go ahead (with your own imei only)
[LG G6 Questions and Answers] zefie:
Developing for the unlocked models, I noticed in the November 2017 update they patched Broadcom Wifi CVE-2017-0705 and CVE-2017-0706 vulnerabilities. For those running a kernel/rom before the latest update, perhaps that could be an entry point?
[LG G6 Questions and Answers] Tinyshy:
all we need is someone working on something of any substance at all, this thread seems to have died down a bit.. I really do wonder if we've anything going at the moment or just a bunch of people pitching ideas with no one to catch them :P
[LG G6 Questions and Answers] zefie:
I don't have one or I'd try. I fought with the LG-M153 (cheap cricket phone), and can tell you that if LG doesn't want you in, they go hardcore. I'm hoping yours isn't as bad since it isn't a budget prepaid, but with the M153, the bootloader didn't even have a real fastboot to unlock. They yanked the actual flash functions right out of the bootloader. LAF was the only chance, but it too was locked down (tho I found you can wipe a partition that it doesn't let you write, interesting...).

LAF may be your way in as well. I don't know if I have any of my leftover scripts and tests from the M153. I was trying to beat the heck out of LAF and find a way in. Maybe your model isn't as locked down and my LAF tricks could work.

I can't really develop anything for it without one though, so, best I can do is try to help guide anyone who does have one and some dev skill and wants to try it.

Check this post for what I noted about my attempts with the LG-M153 and see if maybe something I tried would work on the H870DS.

If you dump your "laf" partition to an image, I might be able give more insight. You should be able to read it but maybe not.

dd if=/dev/block/bootdevice/by-name/laf of=/sdcard/laf.img bs=1M

If not you'll have to have a tot or kdz that might have it so I could pull it apart.
[LG G6 Questions and Answers] Tinyshy:
Great, well, we don't have fastboot either ((edit: I misunderstood I have no idea about after unlocking. I assume it's there)) other than the ability to flash an unlock.bin (which doesn't exist for our phones, mines an h873 but it's in the same boat) I've attempted figuring out LAF but all im greeted with is the whole hello my name Is LAF thing. I got one command to work which was to list partitions but it was through some weird direct command workaround. If you could guide me through dumping my LAF partition I'll gladly do so for you ^^
[LG G6 Questions and Answers] zefie:
Not sure if I have my scripts still or not, I ended up talking raw protocol with LAF. If you have an unlock partition then you probably at least have a functional fastboot.

Using raw protocol with LAF I was able to get LAF to send me the entire contents of the onboard flash, including the bootloader, fastboot, and LAF itself. The problem I had was the inability to write anything back.

Edit: scripts I used to "talk raw" with LAF were not originally mine, but I modified them as I was going. Here are the originals (without my modifications): https://github.com/gmt/lglaf

If someone can dump "unlock" "laf" and "aboot" with this, maybe we can proceed.

Edit 2: Can you guys access fastboot and get the code that the LG official page tells you to get? If I'm understanding correctly, you get the code but LG refuses to give unlock.bin because they don't support the model. If this is true, we just have to figure out how they are generating unlock.bin and what the bootloader is expecting to find in the unlock partition. This may or may not be possible to crack/keygen depending on how they are doing it. I only have my key and unlock to go by, maybe with a collection of unlock code & unlock.bin pairs we could figure out what LG does to create an unlock.bin and do it ourselves, if its not signed by some key, which it probably is. Just rambling ideas.
[LG G6 Questions and Answers] Tinyshy:
I recall other threads (lg g5 maybe??) trying to reverse engineer the whole unlock.bin thing. think the end result was that its generated by a private hash inside lgs own servers. like a second half of the code kind of deal. maybe we can break the code that actually verifies the .bin itself so that itll accept anything to unlock it? id assume there was a dev mode at some point right?? as for getting you those partitions you need, Ive a hacked lgup i can use to dump them?

Edit: No idea how to open these (if possible) but they're uploaded to google drive https://drive.google.com/open?id=1J7c8erdnLZ9yIp5xpzF5TQmDXjhYSXhp if these don't work I'll try to get lglaf working. its been quite the hassle so far. there was no partition called unlock. also im an h873 not h870ds sooo dont be bothered if you come across data mentioning that in those files.
[LG G6 Questions and Answers] zefie:
From scanning aboot.img from my device, I see references to RSA regarding the unlock portion. I'm no expert in assembly I am just looking at a string dump.

A lot of LG's security is through proprietary USB cables that we have no idea about.

You can see a lot of references to a "633A" cable that seems to allow override access to much of the locked features.

But what is a "633A" cable? How is it different from a standard USB? How can we create one? They have done a good job at keeping this much secret, and outside of a source with access to an LG service center we may never know.

There is also apparently a "130K" and "910K" cable as well.

Check this section of the strings dump:

detected the 910K USB cable.
130K
910K
633A

When searching string dumps, common things grouped together as usually related. I know of 633A from the cricket phone, and this one admits the 910K is a usb cable, so we can assume 130K is also a USB cable.

As for dumping, if your hacked LGUp can dump and save partitions to your computer, then sure it can work.
[LG G6 Questions and Answers] Tinyshy:
cables with ic's most likely running some other also lg secret hash generated files

edit: I'm absolutely wrong it seems... dunno about 633A but 910k is a cable with a pullup resistor or something? https://xdaforums.com/showthread.php?t=2069564

edit 2: 130k – LG "service mode"?
[LG G6 Questions and Answers] sanyyos:
lg and samsung have many cables with resistors on difrent pins and diffrent pinouts for unloking, and backups (see the z3x, furios gold and vygis unlocking boxes)... they have diffrent value resistors on diffrent pins on the usb cable... but none of these boxes do the bootloader unlock or root...
[LG G6 Questions and Answers] Ashish Dutt:
My phone automatically updated after a format to november patch. Now what should i do????
[LG G6 Questions and Answers] jose_barradas:
in the future, it will be possible to have root, recovery and custom rom on the h870ds ? or it will be difficult ? to this happen, it will be necessary unlock the bootloader right ? i don't understand too much of this ..
[LG G6 Questions and Answers] Ashley david:
If we were able to unlock the bootloader somehow,then we can do anything custom rom,custom kernal you name it.it all will be possible if we can unlock the bootloader:(
[LG G6 Questions and Answers] HuEx:
[MENTION=4965298]tungkick[/MENTION] You Could Achieve For us Root or Bootloader Unlock or Both ..

wish u Could Help ..
[LG G6 Questions and Answers] jose_barradas:
but someone are working to try unlock the bootloader ? because if it's possible to unlock, i will keep the h870ds, if it is not possible, i will consider to change for another version of g6, because the software of lg it is not so good, i like stock android
[LG G6 Questions and Answers] yilun:
Delit plis
[LG G6 Questions and Answers] sairam108:
Forget about root. There are too many talks on it, but the truth is no one is working on the root.

Just keep using your device and enjoy it.
[LG G6 Questions and Answers] Tinyshy:
Just because constant progress reports aren't being handfed to this thread doesn't mean nothing is in the works. Don't give up.. but don't focus on it day after day either. It'll happen when it does.
[LG G6 Questions and Answers] ivan02891:
How long does it take for lg g5 to be rooted?
[LG G6 Questions and Answers] Tinyshy:
check the g5 threads?
[LG G6 Questions and Answers] ivan02891:
[MENTION=3036125]nchc[/MENTION] create please a telegram group for discussion and updates
[LG G6 Questions and Answers] nchc:
I don't use telegram and have nil development knowledge to contribute.

Happy to be a guinea pig/alpha tester.

I'll add details to the op if you want to create a telegram group.
[LG G6 Questions and Answers] Ashley david:
Hi everyone, a person naming Raghu has given a petition for unlocking the model h870ds and other LG g6 models also.so if we reach the 100 petition mark we can get the bootloader unlocked. So please sign in this petition please.thank you.Can you help me out by signing this petition?

http://chn.ge/2m8AnPy
[LG G6 Questions and Answers] khanem:
Signed
[LG G6 Questions and Answers] fmartins29:
Signed
[LG G6 Questions and Answers] mohammadi1758:
Signed
[LG G6 Questions and Answers] Syfeeq:
Signed! Thank you for sharing the link!
[LG G6 Questions and Answers] Anarchist77:
Where is the guarantee of a Bootloader Unlock?
[LG G6 Questions and Answers] jose_barradas:
Signed!
[LG G6 Questions and Answers] matin0611:
Signed
[LG G6 Questions and Answers] Nextro:
Signed
[LG G6 Questions and Answers] stinka318:
Signed
[LG G6 Questions and Answers] Percy247:
Currently at 120 signatures! Do we really expect LG will take any action? I don’t!
[LG G6 Questions and Answers] zedmarcus:
Why would they take any action? It's 120 signatures out of who knows how many tens / hundreds of thousands of units sold. Ultimately the percentage of people with this phone who wants an unlocked bootloader is probably less than 1%.
[LG G6 Questions and Answers] originaldoc:
Signed
[LG G6 Questions and Answers] tanostoyano:
Why not? It takes little effort. LG needs to know they might be loosing future (repeated) costumers. Let them worry about profit margins. Certainly it won't hurt signing a petition.
[LG G6 Questions and Answers] majinawaz:
done
[LG G6 Questions and Answers] dasloewi:
may the spectre vulnerability be useful for rooting?
[LG G6 Questions and Answers] Ashley david:
No it won't help
[LG G6 Questions and Answers] Ashish Dutt:
I want to through this garbage piece of **** phone with such a force that it breaks into a million pieces. So angry and disappointed in LG. My first and last phone with them. This cannot even be sold secondhand now because of such **** resale value.
[LG G6 Questions and Answers] Tinyshy:
dont think arm64 is vulnerable to it
[LG G6 Questions and Answers] christopherrrg:
At this rate the nintendo switch will be cracked wide open before G6 gets a non unlocked root.
[LG G6 Questions and Answers] Tech33:
I hope someone root LG-H870DS ! I am missing many root features :(
[LG G6 Questions and Answers] karandpr:
Nope.

Might be vulnerable. Cortex A53 is not vulnerable. Dunno about the QSD 821 which has 2 Kryo cores...
[LG G6 Questions and Answers] hammermc:
LG, if you're reading this, I'd b ok if you sold me a lootbox for a chance to win a bootloader!
[LG G6 Questions and Answers] Syfeeq:
[MENTION=3036125]nchc[/MENTION] Please, pin the link to the petition to the first post. We have 187 votes so far but maybe we will gain some more if the link gets to the first post.
[LG G6 Questions and Answers] sairam108:
Signed.
[LG G6 Questions and Answers] Silver Wx:
Make a post on Reddit would be a great idea !
[LG G6 Questions and Answers] Tech33:
Is any developer working to explore root option ?
[LG G6 Questions and Answers] monose1:
Sign me up to donate at least $20 USD.

I got the dual sim h870S but i think is the same as the h870DS.

Also signed the petition!
[LG G6 Questions and Answers] nchc:
Done
[LG G6 Questions and Answers] FreezingBlade:
H870ds 40€
[LG G6 Questions and Answers] milan187:
I hope you are not trolling us, lol.
[LG G6 Questions and Answers] Edgrr000:
What does this mean? ??
[LG G6 Questions and Answers] Darksession:
Look at me im a attention whore.
[LG G6 Questions and Answers] Arigalsa:
Korean h870ds, $40cad
[LG G6 Questions and Answers] xN3PH1L1Mx:
I don't have the phone, but I plan on buying h870ds version if bootloader is unlocked....

15€
[LG G6 Questions and Answers] busano201:
H870ds willing to donate 40$ US
[LG G6 Questions and Answers] nchc:
Total as at post #27 = $660 of various currencies - well done guys, please keep them coming
[LG G6 Questions and Answers] giladg25:
H870ds, 50$
[LG G6 Questions and Answers] Tobybarr:
H870DS $30
[LG G6 Questions and Answers] kbau5:
Pledge

Just ordered one for the dual-sim functionality, will pledge £25.
[LG G6 Questions and Answers] macros3001:
I'll throw in 25 Euros!!!
[LG G6 Questions and Answers] dalmm:
20 €
[LG G6 Questions and Answers] ferby09:
Lg-h870ds 30€
[LG G6 Questions and Answers] breakkblade:
I throw in 40€
[LG G6 Questions and Answers] DuxteR7:
Gon' donate 25 USD for root
[LG G6 Questions and Answers] singh_21:
The day LG H870DS get unlocked i will buy phone right way. Would love to contribute to this.
[LG G6 Questions and Answers] gl000008:
H870DS 25€

However, if by October root is not available, I will not buy the phone
[LG G6 Questions and Answers] tanostoyano:
I'll contribute 10 USD for root.
[LG G6 Questions and Answers] Silver Wx:
I will give 10€ for unlock 870DS !
[LG G6 Questions and Answers] TheArc:
I haven't been having good luck on this so far. I will keep trying, are there any other developers willing to collaborate with me to crack this down?
[LG G6 Questions and Answers] ivan02891:
Godspeed on your work!
[LG G6 Questions and Answers] Ariel079:
I will pledge 10$ US if the Israeli h870 gets a bootloader unlock , goodluck on your attempts
[LG G6 Questions and Answers] sas06:
Should we upgrade to oreo

As LG plans to push oreo upgrade in February. Should we upgrade or should we wait for the bootloader unlock.