yashsingh1/xdaforums huggingface dataset:
[Sony Xperia XZ Premium Guides, News, & Discussion] Macs1209:
I'm waiting :)

Also tried the "Read-partition:TA" command, also need authentication. So it can read the whole TA partition image, once authenticated (which is impossible now)
[Sony Xperia XZ Premium Guides, News, & Discussion] munjeni:
I didn't mean about your tool to wait :) How can we pass sake authentification, did you found anything in lilo? At least how can we say hello to sake?
[Sony Xperia XZ Premium Guides, News, & Discussion] Macs1209:
Not yet, but won't give it up :)
[Sony Xperia XZ Premium Guides, News, & Discussion] munjeni:
Just suggestion... your tool write binary output which is useless, maybe you can corect it to write .ta file instead?

E.g.

// partition
01

00008B2 0010 XX XX XX XX XX XX XX XX XX...
001046B 0010 XX XX XX XX XX XX XX XX XX XX XX....

And in same time auto create .ta file based on the partition num, e.g. 01.ta, 02.ta .I'm rewrote newflasher v4 right now and made the same :)

Edit:

Error -22 seems gaved in booth cases - unit not existant and or need authentification error.
[Sony Xperia XZ Premium Guides, News, & Discussion] pbarrette:
Looking at the lilo binary, there's apparently a "Read-all-TA:" command, but it probably requires authentication as well.
[Sony Xperia XZ Premium Guides, News, & Discussion] Inerent:
If I can help with an locked device, please let me know ?

I'm pretty sure Sony has made this difficult because of what we can do with unlocked camera (bitrate, 2k 60fps, 4k 48fps capture, 1080p 960 fps, 240fps slo mo, etc) ???

Can t wait for camera mod???
[Sony Xperia XZ Premium Guides, News, & Discussion] Macs1209:
This tool get the binary from the read-all-ta:, but the drm critical items are missing :(

Working on some deep look into these files, i hope I'll see something useful.

[MENTION=4120742]munjeni[/MENTION]: could you tell me which mobiles use this new firmware methods? (and which is the cheaper one, I need to buy one more, but don't want another G8142 :D)
[Sony Xperia XZ Premium Guides, News, & Discussion] munjeni:
After xzp all devices will use new flashing protocol, p[robably! There is xz1 and xz1 compact as a new models

Things which I have found in lilo boot image: selinux is in permissive mode! Adb connection is available trought uart! I'm believing root can be achieved trought uart in s1 mode
[Sony Xperia XZ Premium Guides, News, & Discussion] Macs1209:
Wow. Assembling some uart tool now. If you have any documents/description related to this topic, please send me in PM. Thanks.
[Sony Xperia XZ Premium Guides, News, & Discussion] Inerent:
Hey guys, please give us details how to check for 6667 and 0x82 on locked devices
[Sony Xperia XZ Premium Guides, News, & Discussion] Macs1209:
No busybox in the fs at that moment :(
[Sony Xperia XZ Premium Guides, News, & Discussion] munjeni:
Oh man you're right, busybox is missing :( Seems all options is disabled because of the ro.loader.production=true

---------- Post added at 01:41 PM ---------- Previous post was at 01:25 PM ----------

S1 mode commands:

char *off_139008[43] =
{
"getvar:",
"download:",
"flash:",
"Format-TA",
"Read-TA:",
"Read-all-TA:",
"Write-TA:",
"powerdown",
"reboot",
"continue",
"reboot-bootloader",
"erase:",
"Secure-erase:",
"Erase-sector:",
"Secure-erase-sector:",
"Read-partition:",
"Read-sector:",
"Get-partition-list",
"Repartition",
"Getlog",
"Digest:",
"signature:",
"Set-security",
"Get-security",
"Get-gpt-info",
"Get-ufs-info",
"SAKE-Authenticate:",
"Get-root-key-hash",
"Charge:",
"oem unlock",
"Sync",
"partitionimage",
"Read-partition:appslog",
&off_139110,
&off_139110,
&off_139120,
&off_139120,
&off_139130,
&off_139130,
&off_139140,
&off_139140,
"INTEGER",
"INTEGER"
}; // weak

&off_xxxx is related to the fastboot protocol, hm did anybody tried list all fastboot commands? fastboot getvar all, or fastboot list ... probably we can pass some fastboot commands trought s1 protocol e.g. fastboot boot customboot.img! I don't own device to try!
[Sony Xperia XZ Premium Guides, News, & Discussion] Macs1209:
Read-partition: is working with not only appslog,

commands endings with : means need some parameter (mosly unknown in the moment... )

getvar parameters are a bit later in the firmware (i collected them, but looks like deleted the file :D )

commands mostly work, like partition list, partition read (except TA.....), and others will work once find out how to authorize us.
[Sony Xperia XZ Premium Guides, News, & Discussion] munjeni:
Interesting is that &off_xxxx variables , some reverse enginering is need, I don't have 64bit tool for that purpose
[Sony Xperia XZ Premium Guides, News, & Discussion] RJASSI21:
Not sure if this will be much help but you can always try the method on older firmwares. Maybe they might work since older firmwares may have older security patches. There might be just a firmware that has something enabled or unlocked to allow you to run commands you cant on newer firmwares due to administration. Just a suggestion, maybe you might already be using old firmwares, then this is pointless but if not its still a thing to try. The XZ1 is on Oreo and the XZP is on nougat so its interesting things arent working on both yet nougat is older.
[Sony Xperia XZ Premium Guides, News, & Discussion] munjeni:
Get-partition-list ? And after that Read-partition:TA , tried?
[Sony Xperia XZ Premium Guides, News, & Discussion] Macs1209:
Yes, I wrote some comments before. Command not authorized error.

32b disassembler wrong for you, no hidden commands after appslog text.
[Sony Xperia XZ Premium Guides, News, & Discussion] :
- only protected keys can't be read

- you will not see 0x8b2 unit in trim area - it is parsed and deleted on startup
[Sony Xperia XZ Premium Guides, News, & Discussion] ponytojas:
fastboot getvar all give this, maybe I didn't understand you correctly and you don't want it but whatever

(bootloader) version:0.4-SONY-0.1
(bootloader) max-download-size:104857600
(bootloader) Version-sony:0.1
(bootloader) Loader-version:XFL-MSM8998-N-36
(bootloader) serialno:Whatever
(bootloader) version-bootloader:1306-5035_X_Boot_MSM8998_LA1.1_N_59-G
(bootloader) version-baseband:1306-8499_45.0.A.7.137
(bootloader) product:G8141
(bootloader) Phone-id:0000:3Whatever
(bootloader) Rooting-status:ROOTABLE
(bootloader) Device-id:47569CE8
(bootloader) Platform-id:2005E0E1
(bootloader) Frp-partition:frp
(bootloader) secure:yes
(bootloader) Sector-size:4096
(bootloader) Ufs-info:SAMSUNG,KLUCG4J1ED-B0C1,0200
(bootloader) Emmc-info:<empty>
(bootloader) Keystore-counter:1
(bootloader) Sake-root:D159
(bootloader) Default-security:eek:N
(bootloader) S1-root:S1_Root_e69c
(bootloader) Security-state:BA1894F07A55612C78DAADBA68D953CB4B3D2133
(bootloader) USB-version:0x0210
all:

tried a few commands, "oem writecid" and "oem writeimei" arent allowed.

fastboot boot dind't work too
[Sony Xperia XZ Premium Guides, News, & Discussion] chefboyct:
Hi all clever and genius people!

I have been watching and following looking for DRM fix solutions as I unlock the bootloader (not root due to possible security issue and I have read quite a bit into it throughout the years). my model is G8141 Sony XZP. I have been reading above and not sure if there is a fix for it yet? My reason to unlock was simple because my operator doesnt have the latest security and WIFI update but Vodacom has it. Now I have a broken camera like everyone else and not really too fond of using snapcamera seeing I can't access my SD card no matter what. So if anyone has some viable solution (I am a newbie... really... ) and please do direct me to the right place! Thank you all amazing people!

Brad
[Sony Xperia XZ Premium Guides, News, & Discussion] mracer164:
There was no need to unlock bootloader for you to flash fw with other customisation as those are still stock firmwares.

There is no solution to the drm keys being lost and the keys itself are unfortunately impossible to recover.
[Sony Xperia XZ Premium Guides, News, & Discussion] chefboyct:
[MENTION=4969614]mracer164[/MENTION]

I read through the tutorial and I had to unlock my bootloader (maybe I was lied to) but I could only use Newflash tool to do it. sony's tool said I need to have bootloader unlocked before it can be flashed... So ... oh well... I feel cheated as I bought the phone for the camera (not the best I must say but the video camera as well) and now the phone is half functional as I cannot get snapcamera to store pictures on my SD card and even contacted the developer but I dont think he cares as his solutions don't really make sense to me. If his application and all other apps can create and write folders.. why can't his app saves the pictures and use the directory it created? :(
[Sony Xperia XZ Premium Guides, News, & Discussion] mracer164:
There is a guide on the forum regarding flashing our devices:

https://xdaforums.com/xz-premium/help/flashing-generic-fw-simple-guide-t3652103

Sony's tool only allows flashing fw with customisation already present on the devise as it prevents unlocking features that are region-locked (e.g. Fingerprint scanner on US customisation).

Newflasher can be used to flash other stock firmware without unlocking bootloader.
[Sony Xperia XZ Premium Guides, News, & Discussion] sToRm//:
Have a look at your mailbox... Merry christmas bro! :cowboy:
[Sony Xperia XZ Premium Guides, News, & Discussion] chefboyct:
[MENTION=4969614]mracer164[/MENTION]

I guess it is too late? If I do a factory reset, I dont think it is going to make any difference seeing the bootloader is unlocked? If there any other way to fix it ? (the answer is probably NO) and what if I take the device to Sony repairs and see if they can restore it?
[Sony Xperia XZ Premium Guides, News, & Discussion] mracer164:
Unfortunately your warranty is gone permanently as well as the keys so factory reset won't do anything for you. I don't know about Sony repairs Centre but I'm assume they won't do anything sine the keys are Device specific (you cannot flash backupped keys from another xz premium) so unless the keys are also stored in some another location the they can't do anything either :( You would have to wait for DRM fix as it is your only hope. There is already too late for you for TA backup to help with anything.
[Sony Xperia XZ Premium Guides, News, & Discussion] chefboyct:
Thanks mate, appreciate your feedback. It has been years since I fiddled around with rooting and unlocking (Samsung S3 days). So this unlock bootloader is all new to me. I should have investigate further before unlocking it and flash the Stock Rom. Very frustrating indeed, Again thank you for your help!
[Sony Xperia XZ Premium Guides, News, & Discussion] niil:
Some questions

Hello. I have some questions about drm keys and root. Can I edit build.prop without root? Maybe ADB? I read that I can unlock bootloader, flash twrp recovery, mount system as r\w storage and edit system files on PC. If I only unlock bootloader - its delete my drm keys or only flashing custom recovery do it? Can I flash custom firmware without losing keys? Or I can flash only official firmware? Tool for backup TA is working? is it backup drm keys? How can I restore ta partition after root?
[Sony Xperia XZ Premium Guides, News, & Discussion] munjeni:
[MENTION=1695379]Macs1209[/MENTION] can it be SAKE-Authenticate:XXXXXXXXXXXXXX where XXXXXXXXX is device unlock key?? it would be realy easy and stupid in case true, but who knows, maybe we are lucky!
[Sony Xperia XZ Premium Guides, News, & Discussion] :
SAKE auth as follows :

device generate random key and keep it in RAM

device send to host random key + device id

host signs received data with SAKE private key

host send signed data to device

device check signature and compare random key and device id

if compare okay - protected functions available
[Sony Xperia XZ Premium Guides, News, & Discussion] non.verbal:
any news ? despite drm fix available I still would like to have an option to backup my drm keys. hope you didn't give up yet.
[Sony Xperia XZ Premium Guides, News, & Discussion] Macs1209:
Still no steps forward, but research didn't stopped.
[Sony Xperia XZ Premium Guides, News, & Discussion] niil:
Any news?

Hello. Sorry for my english. Do this tool really copy TA partition? There are DRM keys in it? I want root and know about drm kernel fix in Oreo, but before I like copy drm keys or whole TA partition.
[Sony Xperia XZ Premium Guides, News, & Discussion] pbarrette:
This tool does not get the DRM keys or other "protected" TA areas.

Currently, it can only get the unprotected areas on the TA partition.

I've been looking at the possibility of hijacking the built-in backup / restore functionality, but can't figure out how to decrypt the backups. It looks like they are using the device ID in the form of a binary blob as either a password or encryption key.

I think it may be possible to get root by decrypting a Sony backup, injecting it with a malicious payload, then re-encrypting it and restoring it.

The weakest link is probably a Sony in-house app with elevated privileges rather than an Android process.
[Sony Xperia XZ Premium Guides, News, & Discussion] Inerent:
https://m.gsmarena.com/its_possible...eplus_phones_without_unlocking-news-28232.php

Hello guys ?

Doesn't xz premium have a test like this?
[Sony Xperia XZ Premium Guides, News, & Discussion] 4rz0:
Very interesting, could anyone take a look at this?

While I don't have the EngineerMode apk installed, the Qualcomm interface might be present.
[Sony Xperia XZ Premium Guides, News, & Discussion] sToRm//:
Bro, that's a good idea. Maybe we can hook and sniff the backup process on a rooted device and get more informations about the encryption and used key. Maybe an app like the Sony updater for system apps could be relevant if it's in the backup, too (haven't used that backup functionality so far).
[Sony Xperia XZ Premium Guides, News, & Discussion] gengi:
Here on XDA:

https://www.xda-developers.com/oneplus-root-access-backdoor/

Maybe it's better then on GSM arena.
[Sony Xperia XZ Premium Guides, News, & Discussion] 4rz0:
Would non-secure adb help with reading out the missing partitions?
[Sony Xperia XZ Premium Guides, News, & Discussion] pbarrette:
If you're talking about the "com.sonymobile.coresettings" activity, then no, probably not.

That just turns off security for ADB.

Normally, on newer devices, if you want to use ADB, you'll get a message on your phone asking "Allow USB Debugging?" with a fingerprint of the computer's identity and a checkbox asking if you want to always allow from this computer.

If you check the box and say yes, then the computer's fingerprint gets stored in the "/data/misc/adb/adb_keys" file, so whenever you connect to that same computer, ADB will be usable.

That's great for you, but what about someone who steals your phone while ADB is enabled?

This is what the "ro.adb.secure" flag is usually used for. It is usually set to "1" which means that if someone stole your phone, they can't just plug it into a computer and immediately get ADB access. Instead, they would have to log into your phone and accept the notification.

Oddly, the CoreSettings APK seems to read MiscTA unit 2486 (0x9B6), then decrypt it to determine if Non-secure ADB is enabled.

To turn on non-secure ADB, the app defines a byte array:

NONSECURE_USB_DEBUG_ENABLE_HASH = { 43, 127, 35, -85, -100, 125, -78, 19, -69, 105, 85, -82, 83, 5, 91, -81, 49, -92, -52, -19, 3, 76, -39, 119, 75, -121, -42, 41, 6, -106, -27, -9 };

Then it encrypts it:

CoreSettingsJNI().protectData(bytearray)

Then it writes the bytes to MiscTA unit 2486.

So that's kind of odd behavior for a program that should just be flipping "ro.adb.secure"
[Sony Xperia XZ Premium Guides, News, & Discussion] 4rz0:
Ah, so that's what this is for.

Thanks for the extensive epxlanation!

You guys certainly did your research to crack this device ;D
[Sony Xperia XZ Premium Guides, News, & Discussion] sam.foro:
Hi, thanks for the effort.

This soft allows to save the DRM keys or not?

If not, you should change the title of the post.

Thanks in advance.

Enviado desde mi G8141 mediante Tapatalk
[Sony Xperia XZ Premium Guides, News, & Discussion] pbarrette:
No. It doesn't save the DRM keys.

No, he shouldn't change the title of the post.

His software DOES back up PARTS of the TA partition. So the title is accurate.
[Sony Xperia XZ Premium Guides, News, & Discussion] sam.foro:
Then it should be called partial ta backup. The title leads to deception.

Anyway, thank you for your work.
[Sony Xperia XZ Premium Guides, News, & Discussion] lebigmac:
Bump. Any news?
[Sony Xperia XZ Premium Guides, News, & Discussion] madshark2009:
Question

If there was a way to downgrade to nougat is it possible then to backup drm?
[Sony Xperia XZ Premium Guides, News, & Discussion] xrenoix:
No just with 6.0 is possible backup but no 6.0 on xz premium !
[Sony Xperia XZ Premium Guides, News, & Discussion] Inerent:
I'm getting 1,57 MB out of those 2MB from my XZP single sim, oreo 145:confused: locked bootloader
[Sony Xperia XZ Premium Guides, News, & Discussion] Inerent:
You can downgrade to Nougat and also downgrade the bootloader ?
[Sony Xperia XZ Premium Guides, News, & Discussion] madshark2009:
Would that make it possible to back up drm?
[Sony Xperia XZ Premium Guides, News, & Discussion] Inerent:
Maybe

---------- Post added at 04:10 PM ---------- Previous post was at 04:07 PM ----------

We must all understand one thing: drm backup May be possible, but warranty no, because our imei is required by Sony to unlock our bootloaders. So they know who has lost warranty.
[Sony Xperia XZ Premium Guides, News, & Discussion] mirhl:
Is there any proof whatsoever of this?

I dunno about people actual experience with repair centers, but to the very least in europe, I'm 200% sure anything you do "not even touching" the phone is no valid excuse to void anything at all.

P.s. as mentioned countless of times in the thread, and somewhere else, there's still no backup of DRM keys, so it's not like you gain really a lot from this tool.

P.p.s and it wouldn't hurt if you avoided disturbing developers wondering, with totally wishful random showerthoughts.
[Sony Xperia XZ Premium Guides, News, & Discussion] Inerent:
1. you are saying that you can unlock the bootloader over sony;s website and imei database and still get warranty in europe?

2. disturbing devs? :laugh::laugh::laugh::laugh: maybe waking up from their deep sleep:good::cool:
[Sony Xperia XZ Premium Guides, News, & Discussion] mirhl:
The imei *first and foremost* is needed because the unlock code/procedure/mechanism depends on it (in fact, I remember some old discussion about bootloader unlock being always possible, provided one was willing to forfeit GSM support)

Then, it's a total never demonstrated legend that Sony also keeps a "list" with all the unlock-requested phones.

What I was now saying is, that even

if

something like this was to exist, I'm completely sure it would mean less than nothing in the EU

(possibly also in the US, considering how for example warranty void stickers have been declared null, but IANAL for whatever specific caveat there might be there)

Moreover, just for the records, I have never heard back of people (with overt hardware defects) saying they had been refused warranty service.

But reports in general are scarce in the first place, so I don't claim any particular certainty on this.
[Android Q&A, Help & Troubleshooting] Asifkerim5555:
Hi All,

I have a phone of Samsung Galaxy A5 with Ultimate GraceUX Rom. I noticed that , the accessibility services (Settings > Accessibility > Services) which control Greenify could not turn on shows message that "Greenify does not support the current system language. The Text-to-speech will be set to null, but this might cause unexpexted behaviour". When I tried to enable the accessibility the message came " unfortunately settings has stopped...

Then I tried to open Text to speech settings, it is always hanging:(:(

I installed Google text to speech engine and tried again. But the result is settings not detected Google text to speech.

I googled the issue on visit many websites. But did not find a permanent solution...also i understood that many users face the same issue on Marshmellow devices. If there is any xposed apps for resolve this issue please let me know.

Thanks in advance!

Aasif
[LG V30 Questions & Answers] jaydiez10:
Quick question: is anyone having issues with Bluetooth stopping every so often while playing music? It does it on my Klipsch earphones & in my car (my only Bluetooth listening so far). What I've noticed is that it interrupts the music because it thinks it's in a call. If I press the button on my earphones that would end a call (or likewise in my car), the music starts right back up. It seems like an odd bug. Any thoughts?
[LG V30 Questions & Answers] CHH2:
Haven't seen anything wrong. I don't want to jinx myself but so far, it's actually working much better than my V20 was. Every day I'd have to turn my BT off and back on before starting my car or it might not connect the audio properly. Then, about once a week, a complete restart was needed. Haven't had to do either with the V30 yet.
[LG V30 Questions & Answers] estooie:
V30 Bluetooth issues

I've had multiple issues with Bluetooth connectivity for a few of my devices come up recently.

For example, I'm getting delays in receiving notifications for both my smart watches, even though only one of them is active at any given time.

My Snap Spectacles was paid, but suddenly stopped transferring videos to the V30. I paired the glasses to my iPad, and videos transferred seamlessly.

The notification for WiFi Direct keeps popping up abet few minutes. Says something about running Bluetooth, wifi, and wifi direct at the same time can cause issues. Sadly, I couldn't find a toggle to turn wifi direct off. Even when I turn regular wifi off, it turns back on.
[LG V30 Questions & Answers] steve841:
I have no issues with BT ... but, the sound issue is likely notifications.
[LG V30 Questions & Answers] anl2304:
Yup...Bluetooth Issues Here

So I finally have the LG V30. Generally a great phone. But I too have bluetooth issues. I hear static on calls made over bluetooth. Two phones, same issue. My G6 did not have this problem. When I (briefly) had the GS8 and Note8 this was not a problem. The funny thing is, when the phone is in my pocket with the screen off, there is no static. When I remove the phone from my pocket and wake the screen, the static returns. The bluetooth works fine for my podcasts and music. Weird. But reproducible. I use the BT in my car a lot (yes, I actually make phone calls on my phone :) )

So I was wondering if others have had any bluetooth issues.
[LG V30 Questions & Answers] Nay Tyzon:
Weird indeed. No problems here. I'm paired to a 2013 Audi, a 2013 Ford, and a 2017 Chevy, not to mention an older Plantronics earpiece. No problems -- all my calls sound normal, or even crystal clear in Verizon HD.

This is with screen on with Waze, Pandora, even Android Auto running.
[LG V30 Questions & Answers] cazcryy:
No static for me either paired to a 2013 Audi with screen on and Waze running
[LG V30 Questions & Answers] anl2304:
Thanks for the responses. I can find no one else with the problem. Yet I had no issue with any other phone. I'll keep looking for a fix.
[LG V30 Questions & Answers] Hisma:
All of you guys with BT issues, do a factory reset and report back.
[LG V30 Questions & Answers] anl2304:
I did this on my first V30. A factory data reset did not resolve the problem. I am not sure if a reset will help with this one either. But I will give it another try.
[LG V30 Questions & Answers] Steve Rifkin:
I am having similar issues with the Bluetooth on the LG V30. When the phone is too close to the built in navigation screen/Radio in my vehicle, I am getting a lot of static. Only when making/receiving phone calls. When I move the phone 1 foot or more away from the center counsel of the dashboard the static goes away.

Went to the TMobile store where I bought the phone. They produced another LG V30 and connected to my vehicle's bluetooth. Same issue.

No issues when connected to music players.

Quite frustrating as I really like the phone.