yashsingh1/xdaforums huggingface dataset:
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
Yes and no...

I think that there is some sort of method or madness to this. So far two people that we know of (enthusiast on XDA Developers) have received unlock-able devices. Who knows who else can unlock?

There was a mass issue with the little Pixel 2 that allowed all devices to be unlocked. That was patched later as we know...

So with that said; sure, him having that phone has no direct impact on us. We can both agree on that.

However I think that there is more to this than just two random dudes on XDA getting unlocked Verizon phones. There has to be something else we are over-looking, etc. I just cant accept that they got this and it was just a one off glitch... Because now its a two-off glitch.

There has to be some commonality and once we figure that out it may assist in rooting our locked devices. I wish I could get one of those devices in hand. I want to see what is different about them.

EDIT: Ok, Ok, I re-read this post... I sound like a conspiracy theorist.
[Google Pixel 2 XL Guides, News, & Discussion] PILLMUZIK3600:
I know what u mean bro. Makes a lot of sense. I just get irritated with all the beatings of dead horses going on in this thread
[Google Pixel 2 XL Guides, News, & Discussion] runningnak3d:
[MENTION=426561]Scott[/MENTION]

You are correct when you said that the anomalous unlocked Verizon XL 2s could help. Are you in contact with anyone that has one, and would they be willing to dump some partitions?

I am in the process of booting your lafd on my phone. However, as I learned yesterday, lafd reads security fuses from QFPROM, so running your lafd on a V20 won't be a 1:1 test, but got to start somewhere :)

I am putting the LS997 and H932 on the back burner for now due to them having lafd locked down in QFPROM -- I need something else to tackle for a bit.

-- Brian
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
[MENTION=3167089]runningnak3d[/MENTION], Brian, I don't have one in hand but I am more than sure that the guys that do have them would be more than willing to help.

I will send out PM's and hash tags to get there attention...

[MENTION=2955144]bryantjopplin[/MENTION]
[MENTION=629115]d33dvb[/MENTION]

Can you guys assist. You may have the key to the unlocking all of our devices!
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
I have PM'ed [MENTION=2955144]bryantjopplin[/MENTION] and [MENTION=629115]d33dvb[/MENTION] and asked them to post in this thread if they are willing to assist.
[Google Pixel 2 XL Guides, News, & Discussion] bryantjopplin:
@elwigy or whatever it is lol has a vzw fru unlocked as well. So it's more than two. I am betting there's more than what xda knows about. What do you guys need? I actually haven't updated my wife's since the first update before the unlock.
[Google Pixel 2 XL Guides, News, & Discussion] jimlightner:
I believe he needs a system dump of your VZW phone that was unlockable.it may have the answer where all looking for..
[Google Pixel 2 XL Guides, News, & Discussion] d33dvb:
I am definitely willing to assist, just let me know how to dump the partitions you need.
[Google Pixel 2 XL Guides, News, & Discussion] jimlightner:
https://xdaforums.com/showthread.php?t=2450045

This will explain how to dump your partitions
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
Thanks Bryan! I will reach out to him too.

Yes, that's a good way to do it however we have another method using the LAF Sploit / LLG LAF Tools. So I don't really know if the other Brian wants them in that format or pulled from the LAF Tool. However it doesn't hurt to get a jump start by dumping the parts that way though for sure!
[Google Pixel 2 XL Guides, News, & Discussion] bryantjopplin:
I might wait haha. My wife doesn't like giving her phone up
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
Its all good. When the time does come you wont need the phone for more than 15 minutes at the most.

I dumped all the parts on my locked phone in less time than that.

Now, did [MENTION=3812611]elliwigy[/MENTION] have a VZW Unlock or a Google Unlock? Either way I sent him a PM to see if he can help out...
[Google Pixel 2 XL Guides, News, & Discussion] d33dvb:
I'm on it, I'll have a system dump by the end of the night, do I need to factory reset first so as not to dump data? Or is there no personal information in /system?

Have a link on the LG tool I'll do both
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
Just don't dump the data partition. We wont need that, at least as far as I would understand the processes. If you dump it just don't send it.

If Brian needs it he will ask for it in a PM as to not expose any details but its highly unlikely that the data partition would be used.

So to actually answer your question, no you don't need to worry about factory reset. If you would like to do it to be "safe" then by all means go ahead but its not required at this time that I am aware of.
[Google Pixel 2 XL Guides, News, & Discussion] Skorpyun812:
Sounds like corporate blame shifting to conceal the truth.
[Google Pixel 2 XL Guides, News, & Discussion] GokuSSJgod:
Yup I'm back Scott just to chime in on this. It's probably pointless but listen to this. Both of those guys had Verizon variants and went thru Verizon for their replacements. It's been known in the past that when you do it that that they usually send you a Google variant. I have had an RMA but thru Google and they give you the same you had. If I had Verizon I could have done what the others did. I don't know where I'm going with this but the way they're able to unlock there's is going thru Verizon and not Google.

---------- Post added at 01:05 AM ---------- Previous post was at 01:01 AM ----------

Quick question. If someone ****ed Google over and got a free phone by fraudulent schemes would other than having your account banned, has anyone heard of Google blacklisting devices? I know someone who is up to something bad like this. He says he does it all the time and just makes new accounts. Please tell me there's justice and they are blacklisting them!
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
The two people noted above have confirmed Verizon unlockable versions of the phone. They did not get Google OPEN they got VZW FRU like we have (me anyways). Even if its not just an err and there is the possibility that they are Google Phones instead of Verizon (and that website is not correct) there is still the possibility of using the unlocked device to mirror over to the locked device.

Anything is possible. The tools are being produced and updated by the LG LAF Dev. He knows LG well and he will be able to determine if this is a waste of time or a usable lead.

I think its a usable lead.

Yep, Google will black list devices all the time. Especially if reported stole to Google. That device may be able to boot but they wont have any Google Services. Policy may have changed but I believe that is current.

EDIT: I stand corrected, I cannot verify if that is Google process. I was thinking of the Project Fi issues a few months back.
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
Here is some possible usefull info that we already ascertained from the device and the tool. This partition table should make it quicker for you to pull using the LAF tool...

And of course the link to the tool is here: https://gist.github.com/zacharee/6aa5fcb56d0a42937869494b12d77da2

IM basically posting this for reference for me too.
[Google Pixel 2 XL Guides, News, & Discussion] GokuSSJgod:
I was saying that they went thru Verizon for the replacements and got the Verizon refurbished ones that could be unlocked. I have a Verizon one but I don't have Verizon service so for warranty policy I can't deal with Verizon I have to go thru Google. They give me a Verizon variant again of course. But never mind this is to hard to explain

Wait you have the fru one too? And if you do. Did Verizon or Google handle it for you? Because Google can handle it for Verizon phones too. That's how I've done mine. Verizon won't do it for me because mine was gifted and paid in full at Best buy
[Google Pixel 2 XL Guides, News, & Discussion] GokuSSJgod:
I know what I was saying was out of line with what your trying. My apologies.
[Google Pixel 2 XL Guides, News, & Discussion] MColbath:
I'm kind of taking a break from working on this but, let me know if you need anything I have a lot of stuff regarding the LAF still.
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
Awesome, I was about to PM you today and let you know where we were with LAF. We got some interest going on.

I am waiting to hear back from [MENTION=629115]d33dvb[/MENTION]. He was going to try to pull and upload his device.
[Google Pixel 2 XL Guides, News, & Discussion] MColbath:
Yeah, I see that the person who made the tweaked version of the LGLAF script is here now, not sure what happened to the email I sent him but, it's nice that we can finally make some progress, hopefully. That being said which partition is needed? I have a lot of dumped images from various sources.
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
I'm not sure what all he will need. I am thinking a full dump minus /data
[Google Pixel 2 XL Guides, News, & Discussion] MColbath:
We can get most of that from dumping on LAF tbh
[Google Pixel 2 XL Guides, News, & Discussion] elliwigy:
yea, mine was from 6+ months ago too lol i replaced last year around nov. less than a week after i bought a new one from vzw lol
[Google Pixel 2 XL Guides, News, & Discussion] elliwigy:
i doubt they could do jack when devices r purchased and replaced through Verizon..
[Google Pixel 2 XL Guides, News, & Discussion] elliwigy:
just saw ur pm lol. let me kno if help is still needed.. i prefer tgram over xda for stuff like that as its easier to communicate n real time and send files back and forth etc..

of course some ppl on here will probably complain its not on xda but oh well lol
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
Do you have any of the partitions from an unlocked Verizon device?
[Google Pixel 2 XL Guides, News, & Discussion] runningnak3d:
I finally got the Verizon Pixel XL 2 lafd to boot on my phone, and I don't have good news. It is a build specifically for your phone.

However, I want to be SURE that I have the correct lafd. If someone could use the lglaf tool and: ./partitions.py --dump laf_a.img laf_a

then I could know for certain that I am working with the correct image.

If someone could do this on a locked and unlocked phone, it would help.

-- Brian
[Google Pixel 2 XL Guides, News, & Discussion] slogar25:
Not surprising. It was built by LG but it is a Google phone. However, does it necessarily mean this a potential deal breaker?
[Google Pixel 2 XL Guides, News, & Discussion] elliwigy:
i can get w.e u need but wont post here publicly in case theres info specific to my device.. just message me what u need and i can get er uploaded.. i am vzw and unlocked fyi
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
K, will send PM in a moment.
[Google Pixel 2 XL Guides, News, & Discussion] runningnak3d:
So, I have an idea. It is risky though since I still haven't mastered KDZ flashing without using LG UP.

After looking at your kernel and lafd and the LG V30 kernel and lafd, the H932 laf *should* boot on your phone. If it does, and your phone doesn't have the "secure laf" qfuse blown, then you will have a fully unlocked laf that we can do whatever we want with. Now, I have no way of knowing if your phone does or doesn't by looking at lafd. As I stated in my LAF dev post, all Nougat and later versions of lafd check for that fuse. The LS997 V20, LS777 Stylo 3 (I think all Sprint phones that have Qualcomm processors do), and the H932 V30 are the first LG phones that I have seen that actually have it blown.

The good news is that unlike the V30, if you blow up download mode, you can still flash your phone with fastboot update.

There are a couple of gotchas with this idea:

1 - Since the Pixel XL 2 doesn't use KDZs you will have to use the patched LG UP for the H932 V30 IF that will even work. If not, I will have to double down my efforts to get KDZ writing implemented into the lglaf tool.

2 - If ANY partition besides laf_a or laf_b gets written, you will have no KDZ to flash back while still in download mode. Are you sure you can yank the USB cable that fast?

The risk of a brick is astronomical -- I just want to make that very clear, and without knowing for sure if your CPU has that qfuse blown, it may be for nothing anyway.

I will keep working on getting KDZ flashing fixed in lglaf. Once that is done, there is no risk of bricking your phone.

-- Brian
[Google Pixel 2 XL Guides, News, & Discussion] GalacticWolf:
You guys are awesome. Thanks for the hard work!
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
Interesting...

Let me ask this, when you say blown efuse, do you mean a fuse that is already blown or a efuse that would blow if the QUALCOMM secure boot chain of trust is broken? The latter is my understanding of the e-fuse's in the QUALCOMM chain.

I am not sure that bullet point #2 would be an issue because we could still go back to bootloader assuming it wasn't the mistakenly overwritten partition. Or could I be mis-interperting what you are saying?
[Google Pixel 2 XL Guides, News, & Discussion] runningnak3d:
Only the PBL can blow efuses since the SD820, so there is no risk of blowing one unless you play with a firehose. I am talking about a security efuse that could already be blown that locks down lafd so that execvp can't be bypassed.

As for getting back to the bootloader, it all depends what gets overwritten if you don't pull the USB cable quick enough. To get to fastboot, you only need two partitions .. xbl, and abl. As long as neither one gets overwritten, then you could still flash your stock firmware, or hopefully laf will still boot.

-- Brian
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
Got it. Elliwigy is uploading the pertinent partitions now. Once he links them to me I will link to you in PM. The only thing he did not pull was the /userdata /system /vendor.

The other point I wanted to make was in regards to the refurbs vs new devices and the LG IMEI Checker; At one point in this thread I mistakenly stated that all devices were shipped from Verizon with the model "GOOGLE_VRZ_FRU_" however, I was wrong. Only the refurb units show up as "GOOGLE_VZW_FRU_" New devices show up as "GOOGLE_VZR_"

So obviously something is definitely going on with the refurb process. But we knew that already. I just wanted to clarify my error for anyone who may stumble upon this thread...
[Google Pixel 2 XL Guides, News, & Discussion] Dv2y:
Not sure if relevant, but Verizon has an app (com.verizon.mips.services) installed on it's variants with access granted for changing network state, networks, reading and writing settings and other 81 permissions. lol

Is there anyway to freeze, disable or uninstall this package via ADB before booting the device for the first time after restoring the phone with the factory images from Google?
[Google Pixel 2 XL Guides, News, & Discussion] GokuSSJgod:
If we could flash factory images we wouldn't be here lol. Good point to the rest.
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
No, you need to be in the OS to disable packages. Unless you boot in safe mode. Hmmmm...

That makes me think of something....

Believe it or not, I once bypassed "Samsung KNOX" US Government provisioning and the subsequent lockdown to the VA Hospital system by taking the SIM card out, do a factory reset, and then immediate forcing the device to boot in Safe mode during the setup process.

Then when you put the sim back in, would make connection to internet, then KNOX would pick up and start provisioning the tablet.

So the trick was, after set up, don't insert SIM. Normal factory reset while in Safe mode and the device would no longer try to provision again. This would then allow full access to the tablet and KNOW would not longer try to provision.

Just an interesting side not. You never know what can happen until you try.
[Google Pixel 2 XL Guides, News, & Discussion] GokuSSJgod:
Someone try but I'm 90 percent sure you won't be allowed to boot into safe mode at that time.
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
I think you miss the point of some of my post.

I am not saying that a specific type of work around will work on this phone. I am showing very simple proof of concept that things that "should not work" sometimes do work.

So when the other guy brought up the idea of trying to disable the app he was referring to I remembered back one time when I had disabled a system service, technically before boot, and I got the intended system services stopped to achieve my objective.

IM not saying this will work here but its proof of concept. Sadly the OEM lock stuff is hard coded to the OS Framework. Its not just a simple app that can be disabled.
[Google Pixel 2 XL Guides, News, & Discussion] GokuSSJgod:
I think you missed my point.
[Google Pixel 2 XL Guides, News, & Discussion] Pem3108:
Put me down for $50 on this one.
[Google Pixel 2 XL Guides, News, & Discussion] lbcary:
I'm down for $100
[Google Pixel 2 XL Guides, News, & Discussion] KyleK29:
Just to follow up in case other people try this, I so far haven't gotten it to work. I exchanged mine (screen issues) at a Verizon store (within 14day window), removed SIM before powering it on. OEM-unlocking was grayed out (no VZW apps present, so it doesn't appear to have been booted). It does say "connect to the internet or talk to your carrier" under the button. Used my T-Mo SIM and same thing. Did an upgrade to 8.1, same thing. Going to try factory resetting with the T-Mo sim in place. I'll post back if I get it to successfully unlock.

My other VZW version (the one I exchanged) had VZW apps on it and the OEM Unlocking didn't have the message below it.

One thing I haven't tried yet is signing into my Google account to see if it's somehow tied to that (possibly why the OEM message hasn't disappeared).
[Google Pixel 2 XL Guides, News, & Discussion] Bandit Development:
I'll donate $50
[Google Pixel 2 XL Guides, News, & Discussion] tailsthecat3:
https://xdaforums.com/pixel-2/help/maybe-stupid-question-verizon-pixel-2s-t3726294

I've been out of the Android game for years. Used to unlock and root and all that stuff; just got a Pixel 2 on Verizon. So I'm not sure if the info in the linked post an help, or is even valid.
[Google Pixel 2 XL Guides, News, & Discussion] enzyne:
I can confirm that flashing the following command under fastboot will unlock the Verizon pixel 2 on 8.1 fastboot flashing lock_critical must be some kind of bug but my device is unlocked now.
[Google Pixel 2 XL Guides, News, & Discussion] Bandit Development:
I cannot confirm the method does/not work for the Pixel 2 XL Verizon. I attempted it and it failed, but YMMV. Please post here if you try it.
[Google Pixel 2 XL Guides, News, & Discussion] elliwigy:
did you try any of the other unlock/lock commands such as "fastboot flashing lock" ??
[Google Pixel 2 XL Guides, News, & Discussion] Travisdroidx2:
Anyone try this? Working on pixel 2

https://xdaforums.com/pixel-2/help/maybe-stupid-question-verizon-pixel-2s-t3726294
[Google Pixel 2 XL Guides, News, & Discussion] CyberpodS2:
They are saying in the thread you referenced that it's not working on the 2XL
[Google Pixel 2 XL Guides, News, & Discussion] Travisdroidx2:
My bad, I was at work and did not get a chance to read the entire thread.
[Google Pixel 2 XL Guides, News, & Discussion] bobby janow:
So is the bounty only for the 2 XL? If he has unlock for the Pixel 2 perhaps half would be in order? I haven't seen a thread for the 2 bounty only since we assumed one exploit would work for both.
[Google Pixel 2 XL Guides, News, & Discussion] lucky_strike33:
I would think this is only fair for this bounty to be for the pixel 2 xl since both phones are from different manufactures.
[Google Pixel 2 XL Guides, News, & Discussion] elliwigy:
yea.. plus the method pix 2 is using isnt necessarily an exploit lol.. glad they found a way but besides someone saying wth let me try this command, theres literally no work put into it haha.. but hey, i got agoogle version pix xl 2, not my bounty thread or mymoney haha,justmy 2cents
[Google Pixel 2 XL Guides, News, & Discussion] bobby janow:
Ok, was just asking since this is an XL thread. I don't know how little or how much work he put into it but if this were an exploit for both I think he would deserve it. Otherwise the whole bounty thing is ludicrous. I mean who's to say how much time was spent looking for the right command and the fact it wasn't a hack negates the end? Oh well, as I said I was just asking. Maybe someone can find a similar command for the 2 XL and then you can decide if it warrants a pay out. And who decides if it's worthy and what constitutes a successful unlock?
[Google Pixel 2 XL Guides, News, & Discussion] elliwigy:
i understand wat u mean lol.. some things tuurn out to be super simple but since you doubt the most obvious things you dont bother to look at it for a while haha

On SamPWND root what ended up gaining rw on system turned out to be a years old exploit in the uevent_helper lol.. took a while to figure that one out and even longer to get a unstable root shell to take advantage of it.. point is, it was all (mostly) pre existing exploits that took months to put it all together with the eng firmware before root was obtained.. then note 8 was rooted within days, allalong all we needed was apre rooted system.img lmao

but yea, if whoever found this put in time and effort by all means but dont think xl bounty is applicable here seeing as how it only works on the regular pixel 2.. now if he just bought the phone and said let me try my first command and fpund it haha, that would be some sheer luck or sheer genius haha
[Google Pixel 2 XL Guides, News, & Discussion] elliwigy:
also, im surprised this bounty thread has lasted lol.. normally ppl are hesitant even allowing them but usually the OP should be very thorough and clear as to what would consist of achieving the bounty such as a release, instructions, testers/confirmation, must fully unlock bootloader for pixel 2 xl device from vzw blah blah lol
[Google Pixel 2 XL Guides, News, & Discussion] elliwigy:
heck reading title and op it almost seems unlocked bl isnt takimg the cake, looks liike bounty is for temp root haha
[Google Pixel 2 XL Guides, News, & Discussion] bobby janow:
Yes, I agree. It looks like the bounty is only for temp root. I think at this point it should be closed and reopened under a different title with clear criteria for the reward. Besides, I'm sure some of the people who signed up either sold their device or got a refurb that was unlockable. I never was one for threads like this, they are too subjective and unenforceable.
[Google Pixel 2 XL Guides, News, & Discussion] danlat1415:
https://www.androidauthority.com/verizon-pixel-2-unlocked-bootloader-826447/
[Google Pixel 2 XL Guides, News, & Discussion] slogar25:
Your point is totally argumentative. And pretty much all of your posts in this thread have been negative. It's not really helping
[Google Pixel 2 XL Guides, News, & Discussion] GokuSSJgod:
They've all been accurate. Maybe my last one wasn't.
[Google Pixel 2 XL Guides, News, & Discussion] joedeuce:
Do we know if the Google variant uses the same RSA sig for the partitions as the Verizon one does?
[Google Pixel 2 XL Guides, News, & Discussion] Scott:
No, I am unaware.
[Google Pixel 2 XL Guides, News, & Discussion] joedeuce:
The build numbers are the same, so I assume they are the exact same images (and sigs). If access to OEM unlock is granted server-side we may be able to do a man-in-the-middle exploit (apologies if this has been recommended before). It may be worth capturing some packets upon phone setup and see what is going on, if encryption doesn't stop us.