yashsingh1/xdaforums huggingface dataset:
[LG V30 Guides, News, & Discussion] Josh McGrath:
This right here is also why I'm not getting the V-series or any LG from the carrier again.

I used to work at TMobile and the unlocking is the stupidest crap even if you buy it outright at day 1, they even still charge you extra on top of the full price and won't unlock it.

Also, the engineers are the laziest people I ever met so it doesn't surprise me that the v20 update is taking so long

---------- Post added at 03:21 AM ---------- Previous post was at 03:06 AM ----------

@chazzmatt

Since you have an unlocked phone on TMobile, what happens if you need a warranty exchange? Or are you forced to go through LG ?
[LG V30 Guides, News, & Discussion] ChazzMatt:
For your question, I assume you mean the new US998 (open market carrier unlocked) V30/V30+ I bought from B&H Photo) which I'm using on AT&T.

Yes, I would go through LG for any warranty coverage. But for one of those B&H Photo US998, I had to waive warranty to get the official LG bootloader unlock code.

One of the US998 that still have warranty got a cracked display due to my wife dropping it in a parking lot with loose gravel, but LG doesn't cover that damage in warranty. So I had to

pay for out-of-warranty display replacement -- which cost $146 + shipping to LG in Texas

. Took about a week to get back.

If something else happened to it, which was covered under warranty, yes I would still go through LG. But if I bootloader unlock that phone (even with WTF exploit), LG will know and will deny warranty coverage. I just hadn't done that one yet, as it was formerly my wife's daily phone and I never had time to take it from her and set everything up again. But I probably will, soon, since it's now a spare.

I also bought t

wo mint LS998 V30+ off eBay

which I quickly converted to US998 V30+. ;) My wife is now using one of those on AT&T. I switched her over to that while her B&H Photo US998 V30 was being repaired. Has more internal storage than her "original" US998. You get get those right now for just over $300. Used phones of course aren't covered under warranty.

I gave my sister the other converted LS998 (now US998 V30+), as a gift. She's on AT&T, also. That one is not covered under warranty, like any used phone is not.

My brother in law just bought a

mint US998 V30+ off eBay from the same seller

for $310 (pretty sure it's a converted LS998). He had to buy a phone quick because his old HTC with cracked display got dunked in water... The AT&T store even helped him set it up! Right now that price is $305. Not sure why those mint US998 are cheaper than the mint LS998...

Most of my phones have never been under warranty or if under warranty I've never used the warranty.

In 2014, I bought two Moto XT1225 (international version of the Droid Turbo, but with all AT&T LTE bands, plus more HSPA bands) from Mexico and Puerto Rico. A few months later, I bought a third to have as backup. Those were my main phones for three years. Even though new in box, no warranty since I bought them through resellers.

I think 2011 was the last time I actually bought a phone from a carrier. The 2013 LG Nexus 5 were under warranty from Google, but it was LG that handled warranty coverage. So, there you would have to go through LG again...
[LG V30 Guides, News, & Discussion] lowkeyst4tus:
It might have been attempted.. You extract the kdz, place root files in appropriate location, add 2 lines to update script which fixes root files permission on install, repackage files as tot, flash via lgup.. In theory the twrp recovery can be injected the same via the Redmi 3 method.. We can mod the boot.img with android kitchen changing 4 things, then replace stock recovery and stock boot.img, repackage the files as tot.. Any thoughts.. To much reading so I just posted my thoughts.. Anyone can confirm if my theory has been attempted?

---------- Post added at 10:48 AM ---------- Previous post was at 10:48 AM ----------

If not.. Let's make it happen..
[LG V30 Guides, News, & Discussion] TheDannemand:
That would be lovely. But I believe the answer to your question is RSA signatures: Start reading from the post by [MENTION=3167089]runningnak3d[/MENTION] linked below:

https://xdaforums.com/lg-v30/how-to...s-achieved-t3690577/post75263845#post75263845
[LG V30 Guides, News, & Discussion] Josh McGrath:
If I'm not mistaken, lgup won't flash tot files anymore but I haven't personally attempted it.
[LG V30 Guides, News, & Discussion] TheDannemand:
But even if it could, wouldn't it still be subject to the same RSA check -- for which we don't have the keys?

Don't get me wrong, I'd love a simple solution like this. But you've been down this path before. It's a while ago now, but I haven't forgotten that you took a bullet for us all. Respect!
[LG V30 Guides, News, & Discussion] Josh McGrath:
[MENTION=3250376]ChazzMatt[/MENTION] you are in this thread so let me know if I'm misunderstanding.

It looks like boot.img is *NOT* checked for RSA match with an unlocked bootloader.

Damn this buggy xda app. It won't let me tag Brian but it's a post by him in the link [MENTION=3167089]runningnak3d[/MENTION]

https://xdaforums.com/showpost.php?p=76319892&postcount=34

But this still doesn't help us since we have no fastboot commands to flash. And from what I remember is that LGUP looks like it flashes a tot file, but doesn't really do any writing at all

You will have to cut/paste cause the xda app doesn't want to work right now.

[MENTION=832590]TheDannemand[/MENTION] I appreciate it man. I ended up killing 4 v30s so far lol but I really don't feel bad about it cause they should release the QC files we need with QFIL to fix it ourselves but they'd rather make people buy new main boards so screw them
[LG V30 Guides, News, & Discussion] kevin71246:
Stupid question, but I gotta ask so I understand - If people like us that want unlocked bootloader's are a minority, and all models except the H932 are unlockable, then why don't H932 owners that want an unlocked bootloader just sell theirs on eBay and then rebuy an unlockable model on eBay? Or is it just to spite TMobile & LG? Thx for clarifying as I'm assuming I'm missing something.

I really want a v30 for TMobile, w/band 71 working (which hasn't been confirmed to work yet on any model except H932), AND bootloader unlocked - I'm currently understanding that request to NOT be possible ATM - please correct if I'm wrong.). Thanks All!
[LG V30 Guides, News, & Discussion] ChazzMatt:
There are people who have done just as you have suggested or they never had an H932 and outright bought other v30 phones like LS998 and converted them to use on T-Mobile.

However some people bought on contract and are " underwater" with their phones. Maybe they still owe more than the phone is now worth.

Carrier unlocked USS998 V30+ "mint" condition (which works fine on T-Mobile) is now going for $305 on eBay. So selling a "mint" T-Mobile variant is not going fetch much more than that on eBay or Swappa. If they owe more than, say, $305 on the H932 -- or whatever they get for their H932 -- they will have to pay extra to T-Mobile to pay it off. Plus eBay's seller fee. Then buy the US998...

Those people would rather have band 71 and just keep paying on their phone than have a rooted phone. Or they've always bought a phone at a carrier store on contract and don't know any other way to get a phone?

I always buy carrier unlocked phones and I always pay for my phones in full, like with Nexus. But I'm trying to explain the answer to your question. (I'm on AT&T since 2012 and have never bought an AT&T branded phone, for me or my wife.)

Sent via open market LG US998 V30/V30+
[LG V30 Guides, News, & Discussion] lowkeyst4tus:
Tot bypasses signature check.. Kids checks for signature..

---------- Post added at 08:28 PM ---------- Previous post was at 08:26 PM ----------

No.. Not with tot

---------- Post added at 08:34 PM ---------- Previous post was at 08:28 PM ----------

Is the tot flashing issue with lgup due to firmware? Does the patched version have same issue? In previous LG phones, I think most recently the g5/6 used tot mod method via lgup.. What about miflash, flash all option used in Redmi 3 bootloader bypass for twrp? Can we fastboot flash gsi firmware since we have unlocked bootloader?
[LG V30 Guides, News, & Discussion] Josh McGrath:
I was around with the g5 tot flash thanks to tongue kick was used. She injected twrp into the tot. After that, I believe LG started requiring kdz which have sig checks for that reason.

I'm not really sure on the lgup with tot question. A well known user tried the tot file and I want to say the phone didn't write anything but it could be lgup not telling it to write, I don't know tbh. I would try to test this myself because as long as you don't restart download mode or boot up, you have access, but if it does write *anything*, it definitely won't boot and be a 9008 brick once you boot up to check.

I'll look at the miflash flash-all, LG left this but what commands do they use? We can't figure out why. We do not have fastboot commands, or at least any useful ones. I don't know about the redmi, but the Moto z I'm using also.uses flash-all and it is just a set of commands in one file that we don't have like "boot" or "flash"
[LG V30 Guides, News, & Discussion] TheDannemand:
(I agree, annoying that XDA app won't let us copy links to posts/threads. I use "Load in Browser" then copy the URL from there.)

Yeah, boot, system, laf and recovery are the ones that aren't RSA checked on boot -- assuming BL is unlocked, of course. Everything else (or if BL is locked) means brick or semi-brick on boot. Again, according to Brian.

[MENTION=2573198]lowkeyst4tus[/MENTION]: RSA key isn't just checked at time of upload/writing (even if TOT still works) but also at boot, with the public key stored in the CPU. That one you cannot bypass, with the LG sanctioned exceptions noted above.

My source is [MENTION=3167089]runningnak3d[/MENTION] who spent vast amounts of time disassembling and experimenting with recent LG V and G phones. Again, I highly recommend reading his post which I previously linked (and subsequent ones). And the one linked by Josh. It won't take you long.

I don't want to sound like I'm discouraging you: If you can make it work, you'll be a hero for sure. Otherwise we're all just waiting for runningnak3d to release his root, which he has confirmed for both V20 (H918) and V30 (H932) but won't reveal until LG has released Oreo for V20 (so they can't patch it right away).
[LG V30 Guides, News, & Discussion] lowkeyst4tus:
Thanks.. That was very informative.. I'm going to do some more digging.. Is there any treble support with latest update? I've been dodging it.. Also, is it still 8.0 or 8.1?

---------- Post added at 12:07 AM ---------- Previous post was at 12:06 AM ----------

Can we Frankenstein it to a different varient with unlocked bootloader?
[LG V30 Guides, News, & Discussion] Josh McGrath:
Nope on treble and nope on Frankenstein method because Tmo decided to place their own RSA keys different from all the other variants. Lucky us.
[LG V30 Guides, News, & Discussion] TheDannemand:
The one thing the T-Mo model has going for it, is that its bootloader can be easily unlocked in Dev Options & fastboot, which is why we all thought it was going to be the first to get root. The problem (as I'm sure you figured by now) is that all fastboot commands that can write are stripped by LG. The only model that has full fastboot commands is the open market US998, but as Josh pointed out, the H932 cannot be Frankenphoned since it uses different RSA keys from that of all the other models.
[LG V30 Guides, News, & Discussion] ChazzMatt:
Right. And LG stripped the fastboot flash commands of the North American variants also.

But between

the wonderful LG Oreo bootloader unlock exploit -- where you can unlock the bootloader with basically any text file called unlock.bin -- and

the fact that all the other North American variants (AT&T H931, Canadian H933, Verizon VS996, Sprint LS998, even the regional carriers AS998) all share the same RSA encryption...

then with "Frankenstein" (which had been used mostly to carrier unlock Sprint LS998 by converting to another carrier unlocked variant) and this new [MENTION=6158380]TxanMoe[/MENTION] WTF bootloader unlock, that opened the floodgates.

But even with the Oreo bootloader unlock exploit, it wouldn't have done any good IF all the North American variants had different RSA encryption like T-mobile H932. :rolleyes: There would be no Frankenstein for any V30 variants whatsoever, and with WTF exploit all you would have been able to do is basically bootloader unlock U.S. Cellular variants of US998 -- which are not eligible for the official LG "open market" bootloader unlock code. Keeping RSA encryption the same was key, besides the early Oreo bootloader unlock exploit...

WTF bootloader unlock exploit also helped the European H930, H930G, and mid-East/Asian H930DS -- but those all still have fastboot flash commands. Korean variants don't, but they are able to Frankenstein to H930 to get fastboot flash commands.

I know this doesn't help the T-mobile H932, but it's just strange it's on this island by itself. I can't imagine LG made that decision by themselves. It had to be T-mobile urging them so the T-mobile modem with Band 71 couldn't be flashed to OTHER V30 variants. T-mobile wanted Band 71 to be exclusive to H932...
[LG V30 Guides, News, & Discussion] ChazzMatt:
Besides all of the above, new OnePlus 6T won't have headset jack.

https://www.theverge.com/circuitbreaker/2018/9/13/17854826/oneplus-6t-battery-android-headphone-jack

And despite what the CEO claims, do NOT believe their lies is to put a bigger battery in. My Moto XT1225 had a 3900 mAh battery. Many Motorola phones have 4000 and 5000 mAh batteries. And ALL those have headset jacks.

OEMs can put whatever size battery they want in. Has NOTHING to do with removing headset jack but has everything to do with wanting to sell their wireless earbuds.
[LG V30 Guides, News, & Discussion] Josh McGrath:
2018 and One plus 6t has a 1080p display. Wow. I don't really care about that myself, but I see where they cut their corner to save costs.

I haven't used a wired headset since 2010 or longer so that is a non issue for me
[LG V30 Guides, News, & Discussion] kevin71246:
Once/if ALL varients get an unlocked bootloader, couldn't it theoretically be possible to put a tmobile radio FW on another varient to get band71 functionality? (Ie, doesn't an unlocked bootloader negate any rsa encryption & protection?) Or if not, could a custom hybrid/modified us998 radio, for example, with band 71 functionality added, be put back on said us998?
[LG V30 Guides, News, & Discussion] runningnak3d:
This post superseded by: https://xdaforums.com/lg-v30/how-to/root-h932-lafploit-1-5-to-v20a-t3842550
[LG V30 Guides, News, & Discussion] Josh McGrath:
Bro, you may not remember, but you warned everyone a while back that they shouldn't upgrade to Oreo if they wanted root cause you didn't know on Oreo if it would work, so that doesn't fall on you. Nobody will flame you.

Also what's different with the version of LGUP you're going to link to?

Also, does it feel good knowing that LG put a fuse in there soley against you and your work? I would enjoy it
[LG V30 Guides, News, & Discussion] runningnak3d:
They can't "put a fuse in", it was already there, but not implemented :P

However, I DID know about other "laf restriction fuses". The LS997 Sprint V20 has one blown, but I am able to get around that one. This is a different fuse than the one that is blown in the LS997.

There is a LOT of security in all Qualcomm chips, but you can't get the documentation on it unless you are God.

-- Brian
[LG V30 Guides, News, & Discussion] ClockworkImpulse:
Don't worry yourself, you did warn everyone too.

However, this is good news! If we can "un-trip" it then we have a working bootloader unlock. People have done it with Samsungs Knox flag, this is the same thing. I know enough memory manipulation and exploit knowledge that I could be able to possibly find where it is and change the value. It would be some work to find all of it though and finding time with University and all is a bit difficult, but it's possible.
[LG V30 Guides, News, & Discussion] runningnak3d:
When a Qfuse is blown, it is physically damaged. There is no software patch that can get around it. Well, if you find a hole in the TrustZone, but if you can do that, then all this would be moot since we could just flash whatever we wanted.

-- Brian
[LG V30 Guides, News, & Discussion] Josh McGrath:
[MENTION=3167089]runningnak3d[/MENTION] ,. I thought we tried the 930 LAF and it wouldnt boot on chazzmatts or mine?

What's different about the lgup your going to put out there over the ones we usually use?
[LG V30 Guides, News, & Discussion] runningnak3d:
No we tried the H918 laf. I found the same hole in the 930 10f laf. It boots just fine.

I am back on a mission to try and find an exploit in Oreo laf.

-- Brian
[LG V30 Guides, News, & Discussion] Josh McGrath:
I am on 10d Nougat till later but I can help if I can. Just let me know.

Come to think about it, we Nougat guys cant OTA to Oreo until a flashable Oreo comes out...hmmm

---------- Post added at 10:33 PM ---------- Previous post was at 10:25 PM ----------

@runninnak3d

I ran across another thread where you also warned people not to upgrade to oreo because "they could close the hole" from MARCH 2018! So, ya bro. You def can't feel bad. Thats plenty of warning
[LG V30 Guides, News, & Discussion] runningnak3d:
If you are on 10d i will be glad to talk you through it if my hastily typed instructions dont make sense :)

When i realized what they had done i wanted to get this out there as quick as possible.

-- Brian
[LG V30 Guides, News, & Discussion] Josh McGrath:
We all appreciate that. My phone hasnt even been updated since 10d as Ive been using the MotoZ2force but the v30 blows it out of the water so Im glad to be going back now. Except for the speaker music. Damn the v30 sucks ass for music on the speaker compared to Moto

The instructions are pretty clear. Only thing Im confused about is the LG UP version. It seems that any lg version that will work with h932 should work for the basics needed?

I was meaning that Id help you with root on Oreo if needed, before I realized that we cant get OREO yet until its flashable for twrp/ROM.

---------- Post added at 11:28 PM ---------- Previous post was at 10:44 PM ----------
[LG V30 Guides, News, & Discussion] Josh McGrath:
Im still fighting with it to dd twrp. I have it on the sd card named TWRP for ease of use but I couldnt figure out how to format to regular fat so I used FAT16?? Not sure if thats the same thing or not??
[LG V30 Guides, News, & Discussion] runningnak3d:
That is the same thing. What message are you getting?
[LG V30 Guides, News, & Discussion] Josh McGrath:
Im not getting any errors at all. It just goes into stock recovery after reboot, then adb reboot recovery. LGLAF is writing as the bar moves to 100pct and even resets after !CTRL POFF

LGLAF doesnt give any errors even on DD command so it must be correct there. TWRP is named just that, TWRP.img and on the root of the sd card. Im using the TWRP built for the h930.
[LG V30 Guides, News, & Discussion] ChazzMatt:
You're not using the latest TWRP? It's for Oreo and Nougat.

Sent via open market LG US998 V30/V30+
[LG V30 Guides, News, & Discussion] Josh McGrath:
I didnt know there was a latest TWRP for it but there are two different ones, one for h930 and one for 998 model. h930 is what im using and its 3.1.1.-0. I think I might have found out whats going on though. My SD card shows RAW format instead of FAT
[LG V30 Guides, News, & Discussion] ChazzMatt:
Understood, but...

ALL V30/V30+ have:

quad DAC,

more internal memory (64GB/128GB),

Qi wireless charging

Puny G6 North America has:

32GB internal memory,

no quad DAC.

North America G6 does have Qi wireless charging, but nothing else.

Plus V30 has 2017 Snapdragon 835 vs the G6 2016 Snapdragon 821 (even though G6 is a 2017 phone). :rolleyes:

Last but not least, V30 cameras are better than G6. The "regular" rear camera is better and the wide angle camera doesn't have the "fish eye" look the G6 camera has.

V30 is what the G6 SHOULD have been, from the start. LG really ruined G6 with stupid "regionalized" specs and previous year's Snapdragon. All they gave North America was Qi wireless, while the various parts of the world got more internal memory and quad DAC. No one region had a "complete" G6 -- and all had 2016 Snapdragon.

Sent via open market LG US998 V30/V30+

---------- Post added at 07:39 PM ---------- Previous post was at 07:39 PM ----------

Use newer one, please. Built for all V30 and works on Oreo as well as Nougat.

V30 (JOAN) TWRP 3.2.1.

https://xdaforums.com/lg-v30/development/unofficial-twrp-3-2-1-t3779171

You want "regular", not "treble".

Sent via open market LG US998 V30/V30+
[LG V30 Guides, News, & Discussion] Josh McGrath:
Ha! I probably would have caught that myself but this time Ive been simply cut/paste from your post. ;)

[MENTION=3250376]ChazzMatt[/MENTION] thanks for that link, that makes it a lot easier. Everything is ready to go now, hopefully.
[LG V30 Guides, News, & Discussion] runningnak3d:
Actually, run !EXEC ls /dev/block/bootdevice/by-name\0

And just to be sure, there are two spaces between EXEC and the command.

-- Brian
[LG V30 Guides, News, & Discussion] Josh McGrath:
Yup, Im TERRIBLE at Python. What exactly am I looking for in Partitions.py to change?

---------- Post added at 02:02 AM ---------- Previous post was at 01:53 AM ----------

It just pops up with a # and I did verify it was two spaces in your LGLAF folder
[LG V30 Guides, News, & Discussion] Addiso:
Same boat as you. Using my spare v30 on 10b to root.
[LG V30 Guides, News, & Discussion] Josh McGrath:
I had to step out or we would have had it together by now. Im back on it.

Is your SD card formatted Fat, regular fat? It was a ***** for me to get that done in Win10
[LG V30 Guides, News, & Discussion] Addiso:
I have Fat32 on a 64gb, are you still stuck in the same position as I am?
[LG V30 Guides, News, & Discussion] Josh McGrath:
Yup, I am. I have tried even to rename twrp to replace recovery at OF by-name/recovery.img to *try* and make it overwrite recovery with my TWRP recovery.img

I feel like the phone is overwriting things after the restart command cause mine freezes for about 15 seconds or so on the "lock your bootloader screen", doesnt normally do that

---------- Post added at 06:22 AM ---------- Previous post was at 06:19 AM ----------

This is completely on me though cause [MENTION=3167089]runningnak3d[/MENTION] and I were working on it when I had to step out so we didnt get to finish
[LG V30 Guides, News, & Discussion] Addiso:
Did you change the OPEN line to sde? Or just run the EXEC! Command he posted above us?
[LG V30 Guides, News, & Discussion] Josh McGrath:
I just did the command posted above. Also, stock recovery is 100 pct functional as I did a hardware button to enter recovery and did a factory reset. It completed the reset instead of booting into twrp.

---------- Post added at 05:51 AM ---------- Previous post was at 05:34 AM ----------

Looking to make the changes in partitions.py is what I'm about to work on. Python makes me go cross-eyed
[LG V30 Guides, News, & Discussion] Gamesoul Master:
Now I know that swiping away the update notification multiple times a day was totally worth it. I remember it being said that updating *should* be safe, but that there were no guarantees, and I wasn't about to take any chances... lol.

Looking at the process and issues thus far, I think I can wait that little bit longer for the instructions to be debugged and links provided, just in case ;D
[LG V30 Guides, News, & Discussion] Josh McGrath:
Its just a simple OF path issue it seems to me, but I don't know where to modify the many Open s in Partitions.py to find the correct output. Im sure running will fix it easily in 5 minutes. And yes, that was a good decision on not updating :)

Again guys, this falls on me tonight, whats one more day without root going to do? ;)