yashsingh1/xdaforums huggingface dataset:
[LG V30 Guides, News, & Discussion] lightninbug:
People have tired messaging their PR Dept, Facebook, Twitter, etc.... It WON'T WORK, THEY DON'T CARE. WE ARE A TINY MINORITY, THEY CARE ABOUT SECURITY FOR THE MASSES. End of story. Again, like I said pages back, our ONLY hope is a experienced hacker/modder.
[LG V30 Guides, News, & Discussion] R800x_user:
Not like this will be of use but a decent read. Check this out. This mentions a rsa key gen. .

https://www.google.com/amp/s/www.en...ncryption-companies-rely-on-has-serious-flaw/
[LG V30 Guides, News, & Discussion] Xblackberryuser:
They need to get on the security patches then.
[LG V30 Guides, News, & Discussion] brossovitch:
Who's giving up?

I just don't think there's anything we can do, yet..

There was eventually a way to root the s7. That's why I haven't updated my better V30 yet.

It sucks we can't find an exploit in the T-Mobile app or the tmo adapt pr app that i usually remove or disable, you know the one that immediately asks for root when you flash SuperSU or something..

Also, wish there was a way to enable something through ADB to gain root. I mean, there's apps, like Package Disabler that can disable apps that you normally cannot by simply allowing administration access.

Apps like System UI tuner you have to allow access through ADB and it works.

There's gotta be a way with this device, ya know? Something. Every day I hope someone discovers or develops something. Patience... We could get something.

Heck, the US998 isn't even on the official bootloader unlock list yet..

I hope LG doesn't make me turn my back on them like Samsuck did after the S5 came. Because I really like LG a lot. I enjoy their skin too, much better than Sammy's. I just want root for adblocking, kernel control, deeper customizations, etc. I think we all do.

They should let us do whatever we want. Maybe make it more difficult to keep newbs away? LOL Not really. But I mean c'mon LG!

I know I'm ranting. Meanwhile, enjoying root on my G4..

Also, this warranty void bull**** is stupid! You don't void your warranty unlocking a OnePlus or Google Bootloader. Such crap man!
[LG V30 Guides, News, & Discussion] Josh McGrath:
I used to work for TMobile and that pr.adapt bs was just to let TMobile know you're device was rooted. If you came in with a rooted phone issue, without even looking at the device , tmobiles store software tells you it's been rooted. Depends on the rep if they are a tight ass and don't want to warranty the thing though. I never cared. TMobile started that when they cracked down on the people abusing the tethering bypass.

There has to be a known exploit. It's out there, I know it. I want to find it.

Brings up a question. If the kernel is rooted, does it light up the kernel panic ? Hmm
[LG V30 Guides, News, & Discussion] Jubeldum:
Since nobody posted in a while, I figured nobody wanted this post number for some reason.
[LG V30 Guides, News, & Discussion] Josh McGrath:
I have a request. Can someone make an ota script with twrp or a modified system in it?
[LG V30 Guides, News, & Discussion] ChazzMatt:
No, I said LG.

Even the LG Developer department says they don't make the company policy, they just implement it. I need LG email or Twitter addresses to annoy LG people in charge -- who do make the policy. They're cancelling the G7 due to losing money, but there's a whole bunch of people waiting to buy the V30 if they would ever unleash full developer mode.
[LG V30 Guides, News, & Discussion] padmanek:
You can safely flash older Nougat firmware with LGUP. I've been dancing between 11m 10v and 10f without any problems. No need to hesitate to update. Worst can happen u're gonna have to factory reset.

It might be not possible if you upgrade to Oreo tho ;]
[LG V30 Guides, News, & Discussion] brossovitch:
So far there's only been one update from 10b to 10c. Not a huge jump.
[LG V30 Guides, News, & Discussion] Jubeldum:
My H932U V30+ shipped with 10c. If you look at the box your phone came in, it will say what version firmware is on it.
[LG V30 Guides, News, & Discussion] lightninbug:
...They don't care... We are a TINY MINORITY. You think they care about selling an extra hundred or so phones when they're selling them by the thousands? Don't waste your time with them. You will get nowhere. I'm not saying that being a ****, just don't want you wasting your time like other have in the past, including myself.
[LG V30 Guides, News, & Discussion] jcsww:
A hundred isn't a whole bunch, at least not in my opinion. :P

It kind of sucks that it would seem that LG has basically abandoned everything currently available and coming to start fresh. The V30/V30+ models should have all had Oreo by now but I will be surprised if we even see that at this rate.
[LG V30 Guides, News, & Discussion] ChazzMatt:
Oreo is coming.

And "developer support" sells more phones than just to us. We recommend to family and friends.

Sent from my official carrier unlocked LG V30+ US998
[LG V30 Guides, News, & Discussion] crazyut:
ChazzMatt is right; I used to be all about Samsung but the way the handled the Note 7 debacle even though I didn't own one, I left them because I felt they would not make good if I had a problem. Because I left Samsung, 9 people around me also left (2 went to Apple and 5 to LG (like me), 1 to Blackberry (LOL), and 1 to OnePlus).

Of those 9 people, 4 like me have 3 or more devices active.

Word of mouth can severely cut into sales.
[LG V30 Guides, News, & Discussion] ChazzMatt:
There's actually a marketing classification for this: INFLUENCER.

"An influencer is an individual who has above-average impact on a specific niche process. Influencers are normal people, who are often connected to key roles of media outlets, consumer groups, industry associations or community tribes. ... Such individuals are not simply marketing tools, but social relationship assets."

Sent from my official carrier unlocked LG V30+ US998
[LG V30 Guides, News, & Discussion] jcsww:
With 11 straight years of losses in their mobile department. Clearly it isn't helping enough.
[LG V30 Guides, News, & Discussion] crazyut:
For sure, and the money they spend on the over marketing of LG products is definitely not helping either. Combine that with their overzealous customer service as well as their hyper-competitive pricing scheme and they've got real problems, it's no wonder so many quarters of losses.
[LG V30 Guides, News, & Discussion] EMSpilot:
LG Open Source

Ran across this for the H932. Will this help you guys at all?

http://opensource.lge.com/osSch/list?types=ALL&search=H932

Cheers
[LG V30 Guides, News, & Discussion] runningnak3d:
[MENTION=4668174]EMSpilot[/MENTION] Directly -- no. However, that gave me a great idea. Check to see if they used any GPL code in lafd -- they did.

selinuxfs

They have also used various LGPL code, but since lafd is statically linked, then they are in violation of those licenses as well.

Now I don't have the money to sue LG, but I will be writing the FSF, and I suggest that all of you do as well. I will keep digging in the hopes that I can find GPL3 code. GPL2 they don't have to supply the keys needed to install the binary, but with the GPL3 they fixed that (Tivo was the main reason. Releasing firmware that couldn't be flashed because of this very reason -- security keys). However, just having the source code will make it SO much easier to find any security holes.

-- Brian

---------- Post added at 05:43 PM ---------- Previous post was at 05:35 PM ----------

And for good measure, this is what I just fired off to LG:

EDIT: That was the first step. They have to refuse to release the source, and then we follow this: https://www.gnu.org/licenses/gpl-violation.en.html
[LG V30 Guides, News, & Discussion] car2carl:
@ runningnak3d, Pardon me , with my limited knowledge I found this article :

https://alephsecurity.com/2018/01/22/qualcomm-edl-1/

it might have benefit for you and for us eventually.

Thank you for all the trial have been done.

I have H93B2K + EDL cable and if you need it, I am ready to try it per your instruction
[LG V30 Guides, News, & Discussion] crazyut:
Would this linux tool be helpful for either H932 or US998?

Is this linux tool a tool that could show us fastboot commands that maybe are there but are hidden from the default help menu to get the list of fastboot commands? I tried fastboot oem ? to get a list (came back with error despite the fastboot oem command needed to get the device-id according to LG's developer site to unlock bootloader).

https://github.com/alephsecurity/abootool
[LG V30 Guides, News, & Discussion] Josh McGrath:
I would like to try that, but python doesnt like my machine at all for some reason. Hopefully someone else can?
[LG V30 Guides, News, & Discussion] jameslapc2:
Not having any form of root on this device drove me to the Note 8. Loved every other V series that I messed with. The Note 8 being one of the few devices on T-Mobile that can even be rooted is if you ask me is sad. Granted it's not the kind of root I used to love but it has to make due till something new comes out that peaks my interest on my carrier.
[LG V30 Guides, News, & Discussion] lightninbug:
Can custom roms be flashed on the tmobile note 8?
[LG V30 Guides, News, & Discussion] Josh McGrath:
The bootloader is locked but there is an engineer boot to use and a kernel exploit out that allows root. So no twrp, no kernel. I had the s8 for a month before I got the v30, I hated that damn phone
[LG V30 Guides, News, & Discussion] Josh McGrath:
I tried the EDL reboot commands in fastboot, no such commands even with OEM in the bootloader and download mode. Adb reboot edl (or was it adb edl) i dont remember, just restarts the phone.

I have all the QC files on my laptop, but I dont know to boot to the 9008 edl mode if there is even a way. I also cant find the 9989 file either but havent tried that hard yet

---------- Post added at 08:08 AM ---------- Previous post was at 07:37 AM ----------

I think this is the same as pulling aboot and using a hex editor to see the strings. Ive had enough of python for one night. Maybe someone else can run that
[LG V30 Guides, News, & Discussion] ChazzMatt:
Here's the list of relevant Twitter addresses I found, and I sent several tweets this morning, like this one. (Note, there seems to be two underscore marks with LG Mobile.

@LGUSAMobile, @LGMobileGlobal, @LGUSSupport, @LG_Mobile_

Now, I need some executives' email addresses...
[LG V30 Guides, News, & Discussion] cmrntnnr:
LG --> Will you support unlocking of the bootloader on the open carrier US998?

Many, including me, have been waiting patiently before buying.
[LG V30 Guides, News, & Discussion] crazyut:
I have already sent 3 tweets to most of these include [MENTION=228437]xdadevelopers[/MENTION] and the one for B&H to let them know many people at XDA are waiting for bootloader unlock but will be returning our phones to our vendor if this is not supported. So far, no response (I included an LG Developer one).

Last tweet was as follows:

@LGUSAMobile @LGDeveloper @LGUS @LG Still waiting for bootloader unlock for US open market US998U. I only bought for the unlockable bootloader option. Should I just return your lovely phone to @BHPhotoVideo and switch to @SamsungMobile?

0 replies 0 retweets 0 likes
[LG V30 Guides, News, & Discussion] runningnak3d:
[MENTION=7128137]car2carl[/MENTION] Thanks for the links. In order to attack the PBL via EDL (9008) mode, you have to have a signed firehose (programmer). There hasn't been a leak for an LG phone since the G4.

Also, a lot of what that blog discusses has been addressed. For example, there is now a tamper fuse. If you even look at the CPU the wrong way, the tamper fuse will blow and the only fix for that is to replace the CPU -- trust me, that is not covered by warranty :)

But let's say that we had a firehose. That is only good for unbricking a phone if you don't have an unlocked bootloader. I know that the H932 SAYS that the bootloader is unlocked, but from the posts I have read where people have flashed another models recovery, the phone no longer boots. When you unlock the bootloader, AVB (Android Verified Boot) is supposed to be disabled on both boot and recovery (and as a by-product laf -- but who replaces their download mode besides me). The fact that flashing another models recovery stopped the phone from booting means that AVB was still in place (at least for recovery).

Unless you can get a signed boot image with dm-verity disabled, there is no way to root even if a method to flash WAS found. Be that a hole in lafd, or a kernel exploit: here is a quick summary.

Let's say that dirtycow still worked right now on the V30. It would be useless. Sure, you could use it to flash a modified boot image or TWRP, but the phone wouldn't boot.

I hope I am wrong about the H932, and some mistake was made flashing recovery, or at least AVB is disabled for boot, but LG just seems to be a bunch of a-holes.

-- Brian
[LG V30 Guides, News, & Discussion] Josh McGrath:
Does anyone have any experience with using update.zip? I've packed twrp and a modified system (yes with a script) but it won't see the update.zip.
[LG V30 Guides, News, & Discussion] runningnak3d:
Trying to use fastboot update update.zip ?

If so, you need to have boot.img, system.img and recovery.img. You then need boot.sig, system.sig and recovery.sig. Lastly you need to have the OTA certs. If you have an official OTA zip, you can just replace the images in it, and update the sig files.

I have been down this path, and it don't work -- but I encourage people to try for themselves as long as it won't brick your phone, and this won't :)

-- Brian
[LG V30 Guides, News, & Discussion] Josh McGrath:
Ah, you tried it already? What error did you give?

---------- Post added at 12:08 AM ---------- Previous post was at 12:07 AM ----------

Btw, you got further than I did with laf. I couldn't even get any response except unauthorized or something like that
[LG V30 Guides, News, & Discussion] runningnak3d:
I got the usual unknown command. fastboot does all the verification on the zip file, but when it goes to flash it uses the normal flash command. So while it LOOKS like update and flashall are there, they both rely on flash.

-- Brian
[LG V30 Guides, News, & Discussion] Josh McGrath:
That's what I was thinking would happen. Hmm

Have you played around with the flashall command?

---------- Post added at 12:58 AM ---------- Previous post was at 12:57 AM ----------

Just the flashall command I mean
[LG V30 Guides, News, & Discussion] R800x_user:
Hey what are these for? ive managed to be able to edit some prop values
[LG V30 Guides, News, & Discussion] R800x_user:
Some sim settings
[LG V30 Guides, News, & Discussion] jameslapc2:
Not till we have an unlocked boot loader and recovery. But at the very least Flashfire works for some instances like flashing Viper. If you want a truly modifiable Note 8 you'll need to get the European model. But if you're like me and just need root for a few apps it should be fine.
[LG V30 Guides, News, & Discussion] Josh McGrath:
Don't forget the battery won't charge past 80pct (at least not on the s8s)
[LG V30 Guides, News, & Discussion] jameslapc2:
You can get around that. Just stay on the screen before download mode. You have to be at 79% though and it teaches about an hour to finish.
[LG V30 Guides, News, & Discussion] runningnak3d:
Does anyone have an OTA zip for the H932? If so: https://xdaforums.com/v20/how-to/recovery-how-root-t3741088

As near as I can tell, the V30 recovery is the same as the V20....

-- Brian
[LG V30 Guides, News, & Discussion] Josh McGrath:
Im super tired and going to be gone all day tomorrow looking at cars. So check this out in ADB and try things and Ill get back onto things on Sunday or so

In adb: adb shell am start -n com.android.engineeringmode/.qualcomm.DiagEnabled --am

Please note I have only briefly looked at it, and only ran with the phone on, not in bootloader or anything on the few commands I tried.

Also, this is on the very last line of the build.prop, I dont know if we will have to mess with this yet or not but even if we do, it should be easy to bypass/change. I dont know if its even being enforced with an unlocked boot

ro.expect.recovery_id=0xbe6cbed79542225479b7c30de92ef8dc296f38bc000000000000000000000000

---------- Post added at 08:36 AM ---------- Previous post was at 08:32 AM ----------

If you can find the stock recovery files, you can compare them in Hex editor. I will look too
[LG V30 Guides, News, & Discussion] R800x_user:
Just tried on device but I got permission denied. Might work better on pc
[LG V30 Guides, News, & Discussion] Josh McGrath:
Are you using terminal emulator or windows?
[LG V30 Guides, News, & Discussion] R800x_user:
The adb shell located in one of the debug tools and terminal emulator.
[LG V30 Guides, News, & Discussion] Josh McGrath:
You probably have to use Windows.
[LG V30 Guides, News, & Discussion] Revolts:
Got this:

"Starting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] pkg=am cmp=com.android.engineeringmode/.qualcomm.DiagEnabled }

Error type 3

Error: Activity class {com.android.engineeringmode/com.android.engineeringmode.qualcomm.DiagEnabled} does not exist."
[LG V30 Guides, News, & Discussion] runningnak3d:
[MENTION=5070414]Josh McGrath[/MENTION] I didn't mean that the recovery was bit for bit identical. From the little bit of decompiling that I have done on the V30 recovery, the fact that it looks for the otacert in the zip is what I mean by "it's the same".

I have no way of getting an OTA for the V30 though, so you guys are going to have to find one / get one / flash back to the original firmware, and then let the OTA come. Before rebooting, use the patched LG UP to dump your system partition so we can get the OTA zip off of it. Once I can see the OTA zip, I can craft one up for you to try, or be able to tell you that it just isn't possible.

I am here helping out in the V30 forums because I WANT an H932 since it has band 71, but I only want it if it can be rooted. Unlike most people, I will help root a phone and THEN buy it, instead of buying one and then hoping it can be rooted :)

-- Brian
[LG V30 Guides, News, & Discussion] Josh McGrath:
I have to do another reset on mine, luckily we are on antirollback 0 still. So I'll check to see if I can find it when I get a chance
[LG V30 Guides, News, & Discussion] ChazzMatt:
I bought the open market LG US998, because it was assured of getting root vs carrier variants. For the last two years, the open market variants are placed on the LG Developer Bootloader Unlock list.

And now LG is leaving me hanging.

Sent from my official carrier unlocked LG V30+ US998
[LG V30 Guides, News, & Discussion] EMSpilot:
US998

LG has 5 days to get the V30 on the Unlock Bootloader list or I send mine back to B&H and stick with my V20.

Cheers
[LG V30 Guides, News, & Discussion] lightninbug:
That'll teach em'...
[LG V30 Guides, News, & Discussion] netgar:
I don't think they will do it. Better return it.
[LG V30 Guides, News, & Discussion] jcsww:
Assured by what? Just because US the non-carrier made the bootloader unlock list in previous years doesn't guarantee this years model will end up on there. It would be nice though if LG would just outright answer the question as to whether or not they plan on putting it on the bootloader unlock list.
[LG V30 Guides, News, & Discussion] ChazzMatt:
Assured by LG's comments when they created the LG Developer Bootloader Unlock list in the first place. And no, I can't find it right now. But they basically promised "open market" variants would be on the list. That's WHY they were releasing open market variants, for the developer community.

I know nothing is set in stone, but if they changed their minds, they should have announced it publicly.

The of the first time since rooting phones (2010 or so), that I've bought a phone before it could be rooted. I swore I'd never do that. And I did it.

Sent from my official carrier unlocked LG V30+ US998
[LG V30 Guides, News, & Discussion] Jubeldum:
I've got a question and I hope it isn't a stupid one. Since some system apps can be used as an exploit, has anyone looked at the T-MOBILE sim unlock app that comes preinstalled on the H932?

Other brands of phones have been rooted by exploited system apps.
[LG V30 Guides, News, & Discussion] wolfgart:
recently ???? Link ?
[LG V30 Guides, News, & Discussion] Jubeldum:
https://www.xda-developers.com/oneplus-root-access-backdoor/
[LG V30 Guides, News, & Discussion] Josh McGrath:
I believe that's what my adb link was for.
[LG V30 Guides, News, & Discussion] wolfgart:
need some Dev can make research for this
[LG V30 Guides, News, & Discussion] Jubeldum:
I sim unlocked mine and my wife's H932's and after it reboots it deletes the sim unlock app.

Too bad the LG Backup was patched. 5 years ago. You could use a custom restore file to root.
[LG V30 Guides, News, & Discussion] Tinkerer_:
Last time I bought a phone with a key feature promised "very soon" (in next OTA), it was like 9 months before it finally materialized.

Lesson learned: If a feature is important to me, I want to see it in the phone as shipped. Not just promised "soon".

These are two year devices, really, because of Li-ion battery limitations. Several months is a substantial portion of the device life.

Also, bootloader unlock wipes the device, so I want to do it immediately* upon receiving the new device, not several months later when I have loaded and configured a bunch of stuff that would get blown out by it, forcing me to spend several hours doing it again.

(* Right after taping over the security vulnerability known as the "selfie cam".)
[LG V30 Guides, News, & Discussion] brossovitch:
TMO SIM Unlock apk

In case someone wants to extract this and read how it works....
[LG V30 Guides, News, & Discussion] SOCOM-HERO:
I can confidently say that I'm done with LG after this debacle. If they can't even keep promises to the folks who bought the unlocked version that it would get the bootloader unlock, forget 'em. There are more niche phones which are cheaper and might not be perfectly "premuim" but can be made great with the dev's who work hard on their ROMs. More of the same from LG. No thanks. I love my G3, but only because of the dev community that backed it from day 1.
[LG V30 Guides, News, & Discussion] R800x_user:
Something like this.
[LG V30 Guides, News, & Discussion] brossovitch:
Yea, basically just change from apk to zip hen open the xml files...
[LG V30 Guides, News, & Discussion] R800x_user:
Just a thought but couldn't we grant for example superuser with permissions to write secure settings through adb like system ui tuner does?
[LG V30 Guides, News, & Discussion] brossovitch:
That's what I'm saying! If we can use adb for System

UI Tuner, why not something else like magisk? The issue is, SU and Magisk need to patch the kernel.

But if we had root in the system why wouldn't it work? Or even install the app into the system with elevated permissions?

Do you know what the ROOT PA app within the system is?
[LG V30 Guides, News, & Discussion] R800x_user:
Its root provisioning and I decompiled and made some edits but once I install it. I get that the file is corrupt. I saw that there is a developer option in the code and changed some true statements to false. This is the outcome.
[LG V30 Guides, News, & Discussion] brossovitch:
Well the root pa app is always in LG System. Have it on my g4 g6 & v30. Also had it in my l90 system.

So about this adb shell grant supersu secure write permission thing... Think it can be done?

Perhaps we can try it with the Super SU "system mode" app?
[LG V30 Guides, News, & Discussion] R800x_user:
Not sure I'll be digging around some more. In the mean time I managed to find a app the signs zips with SHA and rsa signatures for an update.zip. maybe patch the boot img with magisk and the try to flash the update throught the FOTA option on lg up and see if that even boots up.
[LG V30 Guides, News, & Discussion] brossovitch:
Godspeed sir.

I've a feeling it won't work... Fingers and toes crossed though.
[LG V30 Guides, News, & Discussion] R800x_user:
same here to be honest but ill sacrifice my phone to the brick gods, unless nothing happens.