yashsingh1/xdaforums huggingface dataset:
[LG V20 Questions & Answers] bountyman334:
I know that flashfire could help but that was on the g flex 2. i know theres a work around just not what we use to.. I think dirty cow may still work...somewhat
[LG V20 Questions & Answers] dudeawsome:
I feel like your right
[LG V20 Questions & Answers] bountyman334:
Am looking into now, I just got my v20 from lg from hard bricking due to 10k flashing on 10p update...but i never flashed the kdz but everything else...(bootloader,modem,boot)

but am looking ..any suggestion or feedback would help
[LG V20 Questions & Answers] dudeawsome:
ahh I see well i was looking into it too and Magisk 14 allows you to install without twrp now you if you take a stock boot.img and magisk will patch it and I have done that and it was successful but after that I could not find a way to flash is as I tried the patched lg uptool and adb and neither worked lg uptool would crash and adb just failed
[LG V20 Questions & Answers] bountyman334:
sounds intereresting do you have the link or is it in magisk forum?
[LG V20 Questions & Answers] zeruth:
Most of dirtycow still works. Just the run-as part doesnt.

All dirtycow did was make the system permissive to give dd access to partitions.

The boot image patch would achieve either permissive system or root, making dirtycow useless here.

What we NEED is to figure out what is going wrong with our unmodified flashes.

kdz flashes fine while manual flashes don't.
[LG V20 Questions & Answers] dudeawsome:
It is in the magisk forum and if you got back a page or two you could see someone has uploaded the patched boot already
[LG V20 Questions & Answers] bigshotrob22:
https://www.xda-developers.com/magisk-v14-receives-update-install/
[LG V20 Questions & Answers] bountyman334:
looking now? has anyone from v20 tried this?
[LG V20 Questions & Answers] zeruth:
yes, we can't flash at all.

flashing a stock unmodified 10p boot.img results in fastboot-loop
[LG V20 Questions & Answers] bountyman334:
the one from google drive?thank god i didnt flash it...

Also how did they flash the modified boot? Thur adb fastboot
[LG V20 Questions & Answers] zeruth:
Yes. The boot.img isnt the problem. Somehow the LG V20 can tell the difference between kdz flash and manual flash. It throws fastboot when trying to access the flashed partition. Even if it wasnt modified.

I used the patched LGUP with the LGUPc.dll from the 10p kdz.
[LG V20 Questions & Answers] bountyman334:
I used the patched LGUP with the LGUPc.dll from the 10p kdz.[/QUOTE]

Right..So LG created some new security feature that kicks out initial boot..Almost like knox..

I noticed on 10p...That knock code can now..Be used at boot to stop anyone who doesn't knock the code to be locked out..when your phone is first cut on...
[LG V20 Questions & Answers] mingkee:
The situation is much like G6 if you got 10p out of the box.

For those with rooted previous version, 10p has flashable zip in development section.
[LG V20 Questions & Answers] joesee:
Someone asked me earlier how I managed root on 10p and the one guy was right.. I just flashed the 10p modem and boot images via twrp and then flashed the stock 10p rom zip for twrp. I only did it because it was available, but I don't see any real reason to do it if you're on anything less than 10p. Keep your working rooted rom for the v20! My qualms with everything have to do with limitations of systemless root over your standard supersu breaking safetynet. I want directv now, netflix, android pay, v4a, and adblock. Can't remember the last time on Android you could have your cake and eat it too. The entire Android ecosystem is starting to become like Apple's. Only the few and brave do it.. all the others lose out.

I'm just trying to figure out how to edit my mixer_paths.xml file in the /system folder without breaking safety net. THAT will be the icing on my cake.
[LG V20 Questions & Answers] runningnak3d:
Keeping root and going to 10p is easy. We are trying to figure out how to root the H918 if it is already on 10p, and never had root.

-- Brian
[LG V20 Questions & Answers] popwar:
I see us getting Oreo before 10p gets rooted
[LG V20 Questions & Answers] zeruth:
You are probably right. God's honest you probably won't get root until a massive android wide exploit gets found, or for the Snapdragon 820.
[LG V20 Questions & Answers] runningnak3d:
After much research, I think I have found a way. I can't test it tonight because my H918 is my daily driver -- gotta get everything moved over to my H910.

The 10j aboot is signed with the same RSA cert that 10p XBL uses. I am going to flash 10p onto my phone, and then flash 10j aboot, boot, and system and see what happens. If my research is wrong, I get to send another phone off to LG, but I get to learn something. If I am right, then we will have root on 10p. My big concern is that in addition to using the RSA cert, the XBL also checks each module (aboot in this case) against the ARB qfuse (I know it doesn't check them against the key qfuse from my dealings with H910 v10m). If it does, then I will have a brick.

EDIT: Glad I wasn't ready to try this tonight. I just realized I can test whether the XBL checks each module for ARB by flashing something besides aboot so that I don't lose download mode. If I flash something like rpm, the worst that is going to happen is that I have to flash a KDZ to get my phone back. But If I flash rpm and the phone still boots, then it is a good sign that ARB isn't checked per module.

-- Brian
[LG V20 Questions & Answers] electroblood:
Looking forward to results!

Let us know how this goes. I'm stuck on 10p as well and I would love to 'fix' LGs stupidity.
[LG V20 Questions & Answers] runningnak3d:
I need a dump of a phone that came with 10p. Run the patched LG UP, and choose DUMP, and select all partitions except modemst1 and 2, misc, and userdata. Zip it up, and upload it someplace.

I am not willing to flash the 10p KDZ yet, but I flashed every partition from the 10p KDZ (minus recovery -- obviously). So except for recovery, my phone IS (was) unrooted 10p -- theoretically. I then loaded up the 10j KDZ in the patched LG UP, and chose partition dl. After verifying that my bootloader was unlocked, I only selected boot (the kernel). It flashed, and I was able to run dirtycow.

So, since you guys with phones that came with 10p aren't able to do that, SOMETHING has to be different about the firmware that ISN'T part of the KDZ -- OR flashing the KDZ makes some modification that extracting it doesn't do. I need to look at that, but since I don't have a phone that came with 10p, I can't.

EDIT: Are you sure that your bootloader is unlocked? The reason that I ask is that after it is unlocked, it no longer does any kind of verification check on boot. If it did, then no one would have root. So for the life of me, I can't figure out why what I just did, doesn't work for you guys. Sending a modified boot with LG UP is unproven. We don't know if sending individual partitions works outside of using a signed KDZ. Has anyone tried what I just did? Flashing an UNMODIFIED older kernel that is still exploitable? Looking through the thread, I can't find any posts indicating that someone tried.

If you want to give it a try, the worst that is going to happen is you have to flash the 10p KDZ to recover your phone. boot is NOT checked for ARB (at least flashing 10p the way I did). If it is for some reason, the worst that is going to happen is that you have to flash the KDZ to get your phone back -- you will NOT lose download mode.

-- Brian
[LG V20 Questions & Answers] whojabacod6:
If someone can post the kernel I'll give it a shot
[LG V20 Questions & Answers] runningnak3d:
Post the kernel? I am not thinking you understand.

Download the 10j KDZ. Flash with patched LG UP using partition download mode. ONLY select the boot partition. When your phone reboots, you should be able to use dirtycow to root.

-- Brian
[LG V20 Questions & Answers] dudeawsome:
you sure it won't brick your device, have you tested?
[LG V20 Questions & Answers] runningnak3d:
[MENTION=5580523]dudeawsome[/MENTION] Please re-read post #81.

-- Brian
[LG V20 Questions & Answers] bigshotrob22:
Ill give this a try a little later.
[LG V20 Questions & Answers] whojabacod6:
I'm thinking I just need the boot.img and not dl a whole kdz file bruh
[LG V20 Questions & Answers] popwar:
any luck
[LG V20 Questions & Answers] dudeawsome:
ok I saw but do you think this method would actually work because if we get the 10j boot then I think we could use dirty santa becuase I am willing to test but don't want to brick my device
[LG V20 Questions & Answers] runningnak3d:
[MENTION=5580523]dudeawsome[/MENTION] I am not going to flash the 10p KDZ onto my phone. As I explained in that post, I flashed EVERYTHING from the KDZ except for recovery. I wanted (and still want) to not lose root if there is something that the KDZ does that I am not aware of.

As I stated, with my phone running all of the 10p firmware (minus recovery) I was able to flash the 10j boot, and then root my phone again using dirtycow.

If there is something that the KDZ does when flashing (like update some part of the QFPROM) that I am not aware of, then I would be stuck with a phone that can't be rooted, and I am not willing to risk that.

There is ZERO risk of you bricking your phone by flashing the 10j boot. The worst that is going to happen is that the 10p updates some part of the QFPROM, so that you can't boot your phone, but it will NOT destroy download mode -- so you will be able to recover no matter what.

Bottom line is, I have root on 10p. I am trying to help you guys out that are stuck, but you have to take some risks. All I can do is alleviate your fear that you are going to end up with a bricked phone that YOU can't fix. Messing with boot is not going to do that.

EDIT: I guess this just can't be said enough. When you unlock your boot loader using fastboot oem unlock (or any other method), aboot is what gets "unlocked". It no longer verifies the integrity of: boot, laf, or recovery.

So, as I asked in post #81 -- are you SURE your boot loader is unlocked? Again, if for some reason it isn't. The worst that happens is that you have to flash the 10p KDZ and you are back to square one.

If you really want to be sure, send me a dump like I requested, and I can check and see without having to flash the KDZ onto my own phone.

-- Brian
[LG V20 Questions & Answers] dudeawsome:
alright I'll try to look into it as i do have the 10j kdz and patched lgup

---------- Post added at 03:49 PM ---------- Previous post was at 03:44 PM ----------

Have you already tested and please update us on you progress
[LG V20 Questions & Answers] popwar:
Are you using TWRP with your rooted 10p? I have an unlocked bootloader and will follow your instruction , but if theres no way to use twrp yet on 10p , then i dont know if I want to do it yet. My phone came with 10j i think, bought used . I updated it stupidly to 10p before reading the forums .
[LG V20 Questions & Answers] runningnak3d:
[MENTION=5150087]popwar[/MENTION] Yes, you can use TWRP on 10p. As I have stated several times. When your boot loader is unlocked (aboot), boot, recovery and laf are not checked for integrity. You can flash whatever you want and your phone will TRY to boot it. If it is a valid boot image, it will boot. Phones with locked boot loaders check the integrity of each of those parts of the firmware, and will boot loop, OR dump you into fastboot mode. That is why you NEVER want to mess with your laf partition -- that is DOWNLOAD MODE. You lose that, and you lose any hope of fixing your phone if you don't have recovery.

Messing with boot (as long as you have a KDZ) is zero risk.

-- Brian
[LG V20 Questions & Answers] bigshotrob22:
I just tried but got an instant error. Ill attach it.
[LG V20 Questions & Answers] dudeawsome:
same I get the same error
[LG V20 Questions & Answers] bigshotrob22:
I knew it wouldn't be that easy. Sucks!!!!
[LG V20 Questions & Answers] runningnak3d:
Yea. I just double checked and sure enough, I get an ARB error now. So, what was different for me? I went straight from flashing the 10p firmware in recovery to download mode to flash the 10j boot from KDZ. My phone never rebooted, and that is when ARB is updated in the CPU.

I just checked, and sure enough, I get an ARB error if I try to flash boot from 10j now that my phone has rebooted.

So, what we need is an LG UP that is patched to ignore ARB, because ARB is being checked by LG UP to prevent you from flashing boot. It would NOT be checked by aboot when your phone is booting since aboot is unlocked.

-- Brian
[LG V20 Questions & Answers] bigshotrob22:
Is this even possible?
[LG V20 Questions & Answers] runningnak3d:
Yep. Just like it was patched to give the lab functionality, it can be patched to ignore ARB. That will be a very dangerous LG UP to have though, since there are only a few partitions that you can flash and not brick your phone.

I will see if the guy that did the original reverse engineering is willing to take a look at patching it. If not, I will have to dig out IDA myself.

-- Brian
[LG V20 Questions & Answers] runningnak3d:
So I tested my theory with my H910 since it is still at ARB 0. I flashed boot and system from an older KDZ, and proceeded to root it.

The only thing standing in our way for 10p is the ARB check.
[LG V20 Questions & Answers] dudeawsome:
so this method is very possible but we need to get abr fix but if you went from abr 0 to a abr 0 kdz then how you sure abr 1 to 0 wont brick
[LG V20 Questions & Answers] runningnak3d:
Because ARB isn't checked on boot when you have an unlocked boot loader.
[LG V20 Questions & Answers] dudeawsome:
okay cool i see you have any idea of a way where you could flash without abr check
[LG V20 Questions & Answers] popwar:
He said earlier need a patched LG UP to get rid of ARB check
[LG V20 Questions & Answers] dudeawsome:
Yes i know that but i'm saying does he have a method to achieving the patch or what changes are needed to bypass the abr checking
[LG V20 Questions & Answers] zeruth:
As it would so happen to be, I have 2 V20s right now. one ARB 0 the other ARB 1, I have to send the ARB 1 in as it was replaced. let me try to bypass ARB in lgup and see how it goes, if it bricks, it is no skin off my back.
[LG V20 Questions & Answers] dudeawsome:
Please let us know the progress
[LG V20 Questions & Answers] Dylanballardlgv20:
Where can i get the 10p dll file
[LG V20 Questions & Answers] zeruth:
from the 10p kdz, its in there, just get an extractor
[LG V20 Questions & Answers] Dibsbighead:
Hello,

I've been wanting to relock my bootloader, I have updated to the 10p and I can't figure out for the life of me how to relock the bootloader, could someone point me in the right direction please?

Thank you.
[LG V20 Questions & Answers] wAFFLES017:
so being a newb and hate to ask, but how would one get a v20, im assuming 10p? with ARB 0, vs ARB 1 ? Im not asking expecting to get mine to arb 0 with out the lgup crack, just curious.

Also, i am willing to test and chance a brick.. Being one that never seems to be pleased very long, i wouldnt mind a reason to move onto another phone. Yes i am a newb, but i know the basics. I am a h91810p if im not mistaking i was rooted on K previously, Current state Stock 10p with unlocked bootloader. No Custom Recovery atm. didnt want to try and end up messing something up worse than i was. have not looked into yet, if it is possible i will install twrp obviously for flashing attempts, You tell me A , B C , i do A B C , not attempt A ( ask a million questions ) only to figure out how to turn the phone on. LOL those people crack me up ( If that even makes sense, sounded good in my head. ) I am currenly phoneless trying to figure out this ****ing tmobile device unlock app BS , was just hitting the Temp unlock every 30 days, but since root, it wont let me Unlock either Perm or Temp. Not trying to spend $160 to unlock a $200 phone. any how ill stop rambling.. just bored.
[LG V20 Questions & Answers] popwar:
Go into fastboot mode
[LG V20 Questions & Answers] Dibsbighead:
I'm in fastboot mode and it says

"welcome to fastboot mode:

How to EXIT Fastboot Mode

Use "fastboot reboot" command if the fastboot is available

I'm not sure where to go from here
[LG V20 Questions & Answers] popwar:
Should be able to use command fastboot oem lock . or if you have a kdz of your current rom select it in LGUP and select Upgrade
[LG V20 Questions & Answers] Dibsbighead:
it seems that my computer doesn't recognize the phone when the phone is in fastboot so i won't be able to manipulate it with the command line. Also I've tried the LGUP method and it gives me an error about downgrading.

Here's my specs

baseband version : mpss.TH.2.0.1c3++00045+m8996faaaanazm-1

Kernal Version : 3.18.31

Buildnumber: NRD90M

Software Vertion : H91810p

I'm at a complete lost.

I don't know where to find the KDZ file for the 10p
[LG V20 Questions & Answers] popwar:
Its in this thread i think or the patched LG up thread. What happens when you type fastboot devices
[LG V20 Questions & Answers] dudeawsome:
if you have windows put the device into bootloader and then go to windows device manager and youll probably see the device update the devices or go to the lg site and install the usb drivers the fastboot oem lock
[LG V20 Questions & Answers] dudeawsome:
so has anyone figured anything out or new information that would lead to root method
[LG V20 Questions & Answers] BROKEN1981:
I doubt 10P will ever get root
[LG V20 Questions & Answers] BROKEN1981:
What if you can get root with KingRoot? Then use the TWRP app to flash TWRP?

I'm thinking that would work.
[LG V20 Questions & Answers] bigshotrob22:
Failed. Doesn't work
[LG V20 Questions & Answers] BROKEN1981:
Yeah, I tried as well. Just going to have to wait for a new exploit.
[LG V20 Questions & Answers] runningnak3d:
10p doesn't need a new exploit -- it just needs some work. Speaking of work, you guys could help with this, since it is real simple, just time consuming: https://xdaforums.com/v20/how-to/cracking-unlocked-boot-loader-t3679106

Trust me, you want to help with that because eventually T-Mobile is going to pull all fastboot commands as well....

-- Brian
[LG V20 Questions & Answers] BROKEN1981:
Sorry, I would love to help, but my computer is currently down. I sent the processor back to AMD and got ok'ed for an RMA. Who knows when I'll get it back.

When I do though, I'll gladly help in any way I can. Would love to have root again.
[LG V20 Questions & Answers] kc7gr:
I am officially TO'd at LG and T-Mobile (more at LG!)

My nicely-rooted original V20, unfortunately, took physical damage to the point where I had to make an insurance claim. It's bad enough the bloody deductible was $150, but worse yet -- The label on the replacement phone I got said it was at version 10j. 'Great,' I thought. 'I'll have no trouble getting root back.'

Turns out the label was wrong. The thing had 10p on it when I powered up (first thing I did was check the version).

Arrrgh!!!

I don't have the time or skill set to fight this at this time. Thankfully, most of what I have to do can be done without root. Still, the principle of the thing has me mad enough to want to throttle LG!

My deepest thanks to all who helped figure out root for the earlier versions. It was nice while it lasted...

UPDATE: And now, a few minutes later, I find it updated itself to version 10q. I wonder if that'll be any easier to root...?
[LG V20 Questions & Answers] dimm0k:
you should be pissed at T-mobile since they're the ones upgrading the phones and implementing ARB
[LG V20 Questions & Answers] Bikey1005:
Unlocking bootloader/rooting LG

You can bet the V30, if it is rootable, won't be for long. For some reason LG hates its users modifying their phones. This has gone on since the G4. Samsung, most HTC and some Sony are easy, and the easiest are the various Google (Nexus ) devices..but LG? Heaven forbid we should ever install a custom ROM on their exalted machines without first standing on our heads trying to figure out how. And I currently have a V20 which is nice, but I'd love to make it not only nicer, but "mine".
[LG V20 Questions & Answers] NJ_RAMS_FAN:
I got lucky i guess. My lg with 10q bricked. Still had one month left on year warranty. And boom. The exchange one has 10k. Im debating whether i want to root again. Should be safe to do right?
[LG V20 Questions & Answers] Bikey1005:
Possible reasons Why

One reason LG (and to some extent carriers) don't want phones to be rootable is it can affect partition structure whereby DRM and some secure pay methods (Android Pay mainly) may no longer work on booloader-unlocked and rooted phones. The carriers and possibly LG in this case may lose money if their phones can no longer access secure pay or if their phones are being used for DRM violations.
[LG V20 Questions & Answers] CodingEthos:
Damn, picked up a V20 for a sweet deal, was hoping it would come without 10p installed, but what do ya know, just my luck. Been about a month since the last post on this thread, don't mean to bump it, but has there been any progress with this? It's cool either way, I was just curious, thanks for the work either way!

Cheers
[LG V20 Questions & Answers] SJMarty:
I purchased two H918 phones that will be arriving Monday. One of them is sealed and one of them is pre-owned. I did some preliminary research on rooting before buying these phones but in the excitement of finding the second one, I forgot to ask the firmware version. I know, I know...

I am VERY interested in rooting and would like to know how I can help.

-Steve
[LG V20 Questions & Answers] Dd311:
Thanks to everyone who worked on this. Although theres no method of bypassing the adb1, at least knowledge was gained in the process right. With that being said i propose we all get together and burn our useless v20s in a ceremonial hate-fire. I mean, the glass on these things is completely worthless anyways right? Burn em.
[LG V20 Questions & Answers] SJMarty:
Sorry if this is a redundant question but does this not work?
[LG V20 Questions & Answers] xdamember143:
So I guess this thread is dead
[LG V20 Questions & Answers] SJMarty:
If it's going to happen, it's going to happen here.
[LG V20 Questions & Answers] BROKEN1981:
Yes this thread is dead. You are in the wrong place.
[LG V20 Questions & Answers] BAFLGV20:
I understand exactly what is trying to be accomplished. Apparently there are some that cannot comprehend. I have the V20 with 10p firmware and are willing to help anyway possible. I'm not a pro coder or have any degrees. But I've been into the rooting and emulation since the HTC HD2 days. THIS THREAD IS NOT DEAD.
[Moto G Themes and Apps] stonny20:
iam using AICP rom in my moto g3 now. can i know which camera is the best to flash with this or any other rom, with all the new features like slow motion ,auto hdr etc. :confused:
[Moto G Themes and Apps] himu_joy:
Firstly, I think its not right place for Moto G3.

secondly, I can suggest you camera from Meizu/flyme os, that I found quicker/fastest camera ever on moto G series phone. find from link below...

https://xdaforums.com/moto-g/themes-apps/camera-app-t3283962

thank u.
[Moto G Themes and Apps] Shubham543:
Bro I have Moto G3 as well can you please tell me how can I root my phone safely?
[Nexus 6P Q&A, Help & Troubleshooting] vyrus027:
Why is it that i cant get any notification from fb messenger when my 6p start to enter doze mode (in nougat and oreo). While My old iPhone 5s is connected to the same wifi with 6p gets all the notifications in messenger. Is it that doze is the culprit why i cant get real time messages and notifications from messenger? Thanks.
[Google Pixel Questions & Answers] WildsideUK:
Stock pixel Oreo rom, no root. I need a couple of GPS apps running in the background and when the screen is off, was fine in nougat, but now as soon at the screen goes off or the app is not in the foreground my phone is shutting off GPS even though the apps have notification icons monitoring GPS activity. I've switched off optimisation, phone is plugged in. Any help better than none.