yashsingh1/xdaforums huggingface dataset:
[Xiaomi Redmi Note 4 Questions & Answers] ghandil:
No my device wasn't second hand, Actually, it was somehow strange because some apps like a mobile bank app were stating that the device is rooted whereas some other apps didn't detect any root sign on the device. There isn't SuperSu or Magisk installed on the phone too.

I just applied for getting unlocking the phone (Although for my HTC phones in the past, just used some tools from here and get the bootloader unlocked. I don't know why it's not the case for the Redmi Note 4 -or Xiaomi phones may be- in general)

I also tried the Method II here (was expressed would work for the phones Without Recovery Installed) but got Permission denied error on adb shell for rm *.key command. (Maybe it's related to the locked bootloader?)

Thanks
[Xiaomi Redmi Note 4 Questions & Answers] MyNameIsRage:
Adb required usb debugging and computer to be authorised, so since your phone is locked you can't allow it. And adb won't be able to perform anything on miui on lockscreen.
[Xiaomi Redmi Note 4 Questions & Answers] ghandil:
Since my phone has the USB debugging enabled already and I've used it with my computer (the computer was authorized). I was able to back up my files on the phones memory via ADB with below command:

adb pull "sdcard/[Folder Name]" "Path/On/My Computer/To/BackUp"

After that, I've wiped out the phone remotely via Mi account. This way I just lost my SMS and call history, since hadn't synced them with Mi cloud account.

Anyway, I'm looking forward to getting my unlock permission from Xiaomi and install a custom recovery for future possible issues.
[General Questions and Answers] broly10000:
HI all,

So far I've been reading the threads here for the Civic and the Pilot for hacking the Honda head unit for installing Waze and Google Play Music, but nothing seems to work with the 2018 Accord, I may be missing something.. I don's seem to need anything else so far. Just getting tired of the slow charges, using my music just from my phone and having to turn on and off "Stay Awake" from the developers menu on my phone for Waze to get GPS signal. So I was thinking of just going back to Bluetooth Calls and using a 256GB drive in the USB with MP3 and FLAC files ad using Waze directly from the head unit. Will also like to install an app that will get rid of the 50hz bass roll-off from the head unit and a better EQ, 3 bands is not enough adjustment or I might just go and buy a DSR1 processor.

This is what I've done so far

1. Enable developers mode on the head unit.

2. Enable ADB

3. Go to the yellow diagnostics menu and check all settings, can't seem to find a wireless ADB setting or how to change from device/Host mode.

4. Extract the app info text from the app I want to install but cant find the White list file to update without going into device mode first to navigate the file structure.

My head unit is running Android 6 and all works fine, is just the small inconveniences. Thanks everyone for your help.
[General Questions and Answers] seandop:
Have you had any luck connecting with ADB over USB? I've got a 2018 EX-L and haven't had any luck with ADB, putting the head into Device mode, or finding a way to enable the web browser. There doesn't seem to be a lot of information out there yet about the 2018 heads. I found a post on Reddit about how one guy was able to gain access to the web browser on a 2018 Pilot with a similar head, but that trick doesn't work on ours.
[General Questions and Answers] broly10000:
Not yet, still trying. Found something about an extra menu once the USB A to A is plugged into the computer but havent been able to try it yet. Once the USB cable is plugged into the computer, you have to hold the menu button to switch it to device mode. Hope that works
[General Questions and Answers] seandop:
Was that on a 2018 model? Any chance you can send me the link to that post?
[General Questions and Answers] broly10000:
That's on the civic and pilot threads.

Civic 2017

https://xdaforums.com/showthread.php?t=3621582

Cant find the pilot thread now
[General Questions and Answers] seandop:
Yeah, only some of that is applicable to us. For 2018, hold Power, Home, and Source to enter the first hidden menu, then hold Home to enter the second hidden menu. Still haven't figured out how to get to the third menu, where you can change the device mode.
[General Questions and Answers] broly10000:
I'll try it again this weekend. With long hours at work and making head unit bypass and mercman mini harnesses for the 9th Gen, it's sometimes hard to get this stuff done. Havent been able to install my new speakers, DSP and amp either.
[General Questions and Answers] seandop:
The hack that was discovered to work on the 2018 Odyssey with a very similar head unit has been fixed on ours. I keep trying to get creative, but it seems like Honda is finally working to lock these down...
[General Questions and Answers] broly10000:
Damn, I was hoping on installing a 256GB HDD, Waze and a Google Play Music. I'll be trying this weekend again for the hack and seeing what I can find. With Android there's always a way. I could try see I I can boot in in download or recovery mode and installing SU. Honda needs a way to service these, all we have to do is find it.
[General Questions and Answers] Stunod7:
Browser

So I’m not certain how or if it helps, but I have been able to get access to the web browser on my 18 Accord.
[General Questions and Answers] broly10000:
I got access to it too. What we need is a working ADB session yoneither oush SU, or reboot in download or recovery mode. And that will be our next roadblock, finding out if we can push files in recovery.
[General Questions and Answers] seandop:
How, pray tell?

---------- Post added at 02:54 AM ---------- Previous post was at 02:51 AM ----------

And have you figured out how to get into Recovery mode yet?
[General Questions and Answers] broly10000:
Nope, still trying with limited time.
[General Questions and Answers] seandop:
Ok. How did you get into the web browser?
[General Questions and Answers] Stunod7:
I'll be honest, I don't know how repeatable this is, but here is how I went about it.

I did a factory reset on the stereo to troubleshoot something else. Imgur album below that kind of follows along. After I did a reset I noticed a new icon on the top bar in the spot just to the left of the clock. It resembled a cellular/wifi strength indicator with a question mark. When tapping it I would go to the system status screen where a new line appeared that reads "Sign in to network" with the options of "Open" or "Dismiss". When I click "Open" it would bring me to a bit of a controlled browser titled "Sign in to network" that has a hyperlink that lists there is a security issue with the website it's trying to direct me to. On that page it gives me the option to "Continue anyway via browser". When I click that, it launches a full browser and I can get to anywhere, as long as I'm on wifi.

If I screw up at any point, or close down the browser, or go home, I have to shut my car off for a few minutes, turn it back on and the question mark returns.

imgur.com/gallery/MTLzN
[General Questions and Answers] scoop_dtx:
Do you think Panasonic service manuals or Honda manuals are needed?

Step 1 has to be able to tell the headunit to receive.

Would a Honda tech need this?

Sounds more like for programmers at Panasonic.

I will search and see who else uses Panasonic maybe mind a clue.
[General Questions and Answers] broly10000:
Thank you for helping with the search. Yes, we use panasonic for the Basic trim and 1.5t Sport. Not sure for the 2.0T.
[General Questions and Answers] seandop:
I did some quick searching last week and came up mostly empty. Presumably there's a manual somewhere that details how to put the unit into Device mode and/or enter recovery mode.
[General Questions and Answers] broly10000:
Check out this manual. I couldnt find anything for device mode. See if you can find anything.

https://1drv.ms/b/s!ArDVDBmfsf5b4lzpNJ26YDcMYaao
[General Questions and Answers] seandop:
Thanks for the share. Unfortunately, or didn't teach me anything new. :/ I also spent the $20 for access to Honda's tech info site with their thousands of service manuals, bulletins, and updates. Nothing useful there, either. I think we need a Panasonic Automotive manual.
[General Questions and Answers] cam1pbell:
This is the only thing that I came across in a while. https://m.youtube.com/watch?v=R8UgZjolisY&feature=youtu.be
[General Questions and Answers] thekyle2000:
"export user settings" creates an encrypted system_settings.ab on the USB drive. It looks like a standard adb backup format. If we find the password, we can change settings, re-enceypt, and "import user settings", possibly turning off USB apk validation or make the browser available. Can someone try export settings from one unit and import on a different unit to see if the password is the same on all units or if it is randomly generated on each unit
[General Questions and Answers] thekyle2000:
The Accord 2018 Sport head unit 39540-TVA-A11 (A11, A12, A13) says "Set No. AH1801". The fcc has a lot of info about AH1801 at fccid.io slash ACJAH1801
[General Questions and Answers] Nikola2105:
language

hi, i am from Ukraine, can you somehow install (flash) the russian language on accord 2018? thanks
[General Questions and Answers] ComputerGuy19:
How did u do it

How did you do it?
[General Questions and Answers] Lgarzon90:
Hi there, could you please share how is it exactly that you got the browser to work? I have the 2019 Accord Touring model
[General Questions and Answers] xsq881117:
Can we hack the head unit by TTL?
[General Questions and Answers] alielya20:
one year and their is nothing:(
[General Questions and Answers] xsq881117:
On a chinese forum, I saw someone installed the APPs, but I don’t know how he did it.

You should have a look

URL of the post：

https://ngabbs.com/read.php?tid=17718611

[IMG="Memory information"]https://img.nga.178.com/attachments/mon_201906/27/-7da9Q5-nclK1wT3cSm8-ci.jpg[/IMG]

[IMG="A navigation software named GAODE"]https://img.nga.178.com/attachments/mon_201906/27/-7da9Q5-g4p1K1hT3cSm8-ci.jpg[/IMG]

[IMG="A music APP named QQMusic"]https://img.nga.178.com/attachments/mon_201906/27/-7da9Q5-2h06K1cT3cSm8-ci.jpg[/IMG]
[General Questions and Answers] AragornElessar86:
I just got an update on my headunit. Not sure if it was there before, but now there's an "app installer" app in my "all apps" list. What APK would I try to install to see if I can make wireless AA work?
[General Questions and Answers] LayLow86:
There is a guy on YouTube. His name channel name is “Honda Jon”. I think he has a video describing how to do what you guys are trying to do. Hope it helps
[General Questions and Answers] xsq881117:
Thank you.

I've watched his channel and it does have a lot of practical stuff. But there's nothing related to app installation.:crying:
[General Questions and Answers] indam:
htt-ps /-/petapixel.com/2020/06/03/if-you-set-this-photo-as-your-wallpaper-it-can-brick-your-android-phone/

How about this bug, will it break the jail of accord?
[General Questions and Answers] ComputerGuy19:
how did you do it?
[General Questions and Answers] Mohabbadi:
Any update so far? can we use wireless keyboard and open search or settings using shortcuts ?
[General Questions and Answers] Mohabbadi:
imgur.com/a/87CvtgS

is that normal when connecting the laptop (USB-A to USB A) ?

Update:

I’ve found a way to reboot the complete system

1-Activate ADB mode using phone+ brightness +power

2-Activate normal mode using the same method.

3- connect the iphone the usb port no 2(armrest console)

4- open apple carplay the system will automatically reboot.

Whenever you connect your iphone the system will reboot
[General Questions and Answers] sharath91221:
Were you able to break through?
[General Questions and Answers] Spiteful Monkey:
Has the emmc in the unit ever been lifted and dumped?
[General Questions and Answers] Jeffan:
I have the dumpfile,but it's chinese version.

I could edit the Launcher database using backup/restore in factory settings,and I can start some app like Browser or Apkinstaller, but browser did not have storage permissons, and apkinstaller could not install apps successful. HondaLink has a debug mode ,bug it's been disabled in China
[General Questions and Answers] Jeffan:
The android backup password is "8oJ3@Rb0N9TNbrm&", you can use https://github.com/nelenkov/android-backup-extractor to extractor this backup and repack it, HondaLink app (packageName:com.honda.telematics.core) has a debug mode,when preference debug_home_page set to 1, in debug mode,you can startactivity/sendbroadcast through webview

If anyone knows about .so file decompile,pls contact me. I only knows about android app/java decompile
[General Questions and Answers] BarackMitzvah:
This is a huge leap forward. Nice work

To test this on a US accord, I'd just need to run adb backup, correct?
[General Questions and Answers] Jeffan:
adb cannot use in accord，you should run save users memory in factory settings，it will create an android backup in you u disk
[General Questions and Answers] sickpyro:
on android 7 there is an easter egg that allows you to launch a browser that plays the rick astley song... yes its true. in android auto enable the developer tools then change application mode to "developer" in the developer settings. connect your phone to your car and then launch android auto, on your car screen select the app with the android auto icon, scroll down and click UX Prototype... this will open up youtube in a browser and you can change the video and watch any youtube you want..... but, at least for me, the keyboard doesnt show up so i cant type anything.
[General Questions and Answers] thekyle2000:
I can now use the web browser in my Accord sport 2018 thanks to what has been posted here and on the chinese site. In case anyone needs a recap. You can get a rar file from https://ngabbs.com/read.php?tid=17718611 extract the system_setting_value.ab to a thumb drive. In the car hold home, volume, source. Press the second menu option, then Functional Setup, Save User's Memory, Import. It will replace your main menu icons. The honda link icon with chinese on the second page is a web browser
[General Questions and Answers] vikdr:
Hi. cant open your link
[General Questions and Answers] thekyle2000:
Changed to https://ngabbs.com/read.php?tid=17718611
[General Questions and Answers] vikdr:
Thanks
[General Questions and Answers] jermo:
Well this is awesome! Now all I need to figure out is how to get the internet connected lol Figured it would run off my phone being connected via USB but I guess not...
[General Questions and Answers] BarackMitzvah:
Is there any negatives to doing this in your opinion, and can it be reverted?

This is potentially very exciting, a head unit root would be amazing!

Does this work on the larger head units found in the EX-L/Touring trims

If this is consistently usable, then next move is to contact the HondaHack guys
[General Questions and Answers] thekyle2000:
The Chinese backup only has home menu configuration in it. Half the time the browser icon shows up in Chinese. When you install it, it overwrites your home menu configuration . So you have to spend a few minutes adding and removing icons. Some people might find this difficult. Since it changes so little, not much reason to revert, but factory reset will revert it. I had trouble modifying my own save file, repacking/encrypting it, and importing it. It probably has something to do with my tar program (WinRAR) rearranging files in a different order than the radio wants them in. I want to modify the home menu to make it launch the android music player, the navigation app that seems to be installed, and some other apps that have more filesystem permissions to try to modify APK whitelist etc. I think root is within reach, just need to spend some time working on it.
[General Questions and Answers] BarackMitzvah:
That's awesome, do you think you can personally get it done, or do we need to recruit some help?
[General Questions and Answers] BarackMitzvah:
Could the head unit not just be connected to a home WiFi AP and access the internet that way? There is a built in WiFi radio + networks can be added via the Connections Menu in Settings
[General Questions and Answers] jermo:
Been trying this in my 2018 touring since I posted, so about a month now. It's been awesome! Only little issues I see is it takes a while to automatically connect to my hotspot but it does eventually. It's a bit slow and slow at responding/laggy when interacting with it but just gotta be patient and i'm watching youtube on my way to work via my cell phone hot spot. Sometimes the audio doesn't play when I first start up the car so I've found to go to a new video and then go back to the one I was watching...the sound plays fine after that.

Also I do have some random, unusable icons on the main menu that have chinese writing on them or something which is bizarre...

Played with the headunit a bit and just turned my cell phone hotspot on. Connected to it and we are good!
[General Questions and Answers] BarackMitzvah:
hell yeah. So really the goal should be to use the browser to obtain root, and then after that revert to stock settings, eh?
[General Questions and Answers] jermo:
Not entirely sure how that would go and how complicated it would be. It would def be nice to have the stock stuff back instead of random stuff in chinese...but it's all good, I know exactly what to press to open youtube lol I feel like rooting it and getting crazy with the headunit would just make it slower. It seems like it barely has enough memory to do the basic **** it's set out to do ya know...
[General Questions and Answers] BarackMitzvah:
Sure... But this is XDA 😈

I want to install things like HondaHack + hondata
[General Questions and Answers] BarackMitzvah:
Here's an idea: Is it possible to download an apk via the browser and get it to install?

If this circumvents the standard USB based install method the sky is the limit really - No root needed!
[General Questions and Answers] aziz.121:
I just tried that and it didn't work.

I've seen people talk about this problem happing to some android phones and virtual devises running android. Some suggest clear cache and allow browser storage on setting but I didn't get time to try that.

Also, there is android package installer show up when I did that but when I tried to install app using it it shows parse error
[General Questions and Answers] imcxda:
Thanks for the password! After spending much time I think I figured out how they sideloaded apps.

Under com.panasonic.automotive.home/db/launcher.db/favorites they created a shortcut called "U盘安装" with the following data: file:///storage/0F75-1879/A.apk#Intent;type=application/vnd.android.package-archive;launchFlags=0x10000000;component=com.android.packageinstaller/.PackageInstallerActivity;sourceBounds=382%20360%20640%20600;l.profile=0;end

This makes me think that mounting a flash drive called 0F75-1879 with A.apk in the root would allow you to install any APK. I tested this theory but it did not work because the shortcut does not appear on my head unit. I cannot for the life of me edit the adb backup and make it accept it during a restore. It goes through the normal restore process but nothing changes. Maybe someone else will have some luck: guide-how-to-extract-create-or-edit-android-adb-backups.2011811
[General Questions and Answers] imcxda:
Update: I was able to change the data finally - I modified HDMI to become the A.apk redirector and unfortunately it just says "Parse error - There is a problem parsing the package." I tried YouTube and ES File Explorer - maybe it is locked down with the signatures at the Android level?
[General Questions and Answers] Jeffan:
Haha, I create this backup and shared it in QQ(a Chinese IM), this could not install app, because PackageManagerService will compare apk signature with the whitelist (which extract from /system/app/WhiteList.apk assets/whitelist.zip when system startup and SystemServer.run()), and you will received a package install error.

You can write apk into emmc data partition directly using some hardware, and app can run normally, but after you do factory reset, all data will be wiped, we are still trying to find a more convenient way to install the app.
[General Questions and Answers] Jeffan:
https://drive.google.com/file/d/1F3fczroZzIJ8od5Hu6kOcBnP9gMuBIQO/view?usp=sharing

This is the WhiteList.apk , whitelist will extract to /data/whitelist/whitelist.xml , but when I modify this whitelist, it seems not working :(
[General Questions and Answers] Jeffan:
You can edit the backup file using some Hex edit tool , do not using any zip tools ,it will broke the backup file, or you can install an app that packagename equals to the Honda Launcher into your rooted devices (phone,tablet etc.), and push the edit data into your phone , and backup the data using android backup, then repack it using the Honda password.
[General Questions and Answers] IndulgeInXDA:
so theoretically we could install a package disabler on the os ?
[General Questions and Answers] hondahacker/hacker:
I cant find a way to edit the.ab file.

Also wondering used a .ab file that is from a different android device would i be able to restore to original
[General Questions and Answers] xennex2:
How did you get the password?

For the .so file perhaps https://github.com/KYHSGeekCode/Android-Disassembler otherwise IDA

Additionally, I can connect to the using adb but cannot get the device to be authorized. Not sure what the next step would be.

And to unpack the backup I found that android backup processor worked.

"C:\Program Files (x86)\Java\jre1.8.0_341\bin\java.exe" -jar android-backup-processor\abp.jar -debug unpack system_setting_value.ab out.tar "8oJ3@Rb0N9TNbrm&"

It would not be that hard to take the Chinese backup file and apply the same changed to a US backup file. The main change is in launcher.db (sqlite file) where the favorites table has an entry

oid.intent.action.MAIN;category=android.intent.category.LAUNCHER;launchFlags=0x14200000;component=com.android.browser/.BrowserActivity;sourceBounds=898%20120%201156%20360;l.profile=0;end

I'm not sure if it even needs to be re-encrypted in the backup; the dash should be able to load unencrypted.
[General Questions and Answers] Jeffan:
Password is from SaveUserMemoryDiag.apk, you need to encrypted the backup using same password or SaveuserMemoryDiag would not restore the backup
[General Questions and Answers] xennex2:
Thanks. Now I just need to get the adb link authorized.
[General Questions and Answers] hondahacker/hacker:
I'm new to this forum.Any ideas on using a adb backup with ssh/adb enabled??????
[General Questions and Answers] Jeffan:
You cannot get adb authorized
[General Questions and Answers] funkvps:
I can do the .so decompile using IDA/hex-rays. The problems is whether the currently backup/restore process can import new apps into headunit. (Esspecially the building in app, as hacking the whitelist.app is critical)
[General Questions and Answers] Jeffan:
I know why adb unauthorized !!! because Honda (or panasonic) using a custom adbd , and it only allows special adb_keys to connect , but sadly, it's all in boot.img, if I edit the boot.img, system would not start :(
[General Questions and Answers] BarackMitzvah:
Ahh interesting! I wonder if it's a checksum that needs modifications
[General Questions and Answers] MFKilla:
need to unlock the bootloader to use that method
[General Questions and Answers] MFKilla:
patch boot.img with magisk and try to flash it. Maybe it will work.
[General Questions and Answers] Jeffan:
nope, magisk will broke the boot.img, qualcomm secure boot will check aboot and boot, we modify the aboot and boot in eng machine, it works, but if we put it into user machine, it's not working
[General Questions and Answers] MFKilla:
did you find recovery or fastboot mode?
[General Questions and Answers] Jeffan:
I edit the emmc directly, no need to run recovery or Factbook, but if you want to use recovery, forceloading can run recovery update, or you can put update data into /fotadata but original recovery will check update package signature