yashsingh1/xdaforums huggingface dataset:
[General Questions and Answers] seandop:
Good luck! Eager to hear any progress you're able to make.
[General Questions and Answers] broly10000:
I am so freaking mad. Installed the USB cable with 2 USB from the EX-L and the USB port seems to be disabled on hardware. Everything motherboard related is traced and pinned, but the port isnt working. I have only 2 options now, somebody figures out how to root this thing to install waze and a media app to play music over USB and phonecalls over bluetooth, or I'm going with the chinese head unit or Alpine ILX-f309. Honda always screwing with the custoners.
[General Questions and Answers] iost:
Tried that... Got update on May, 1st: downloaded 2 files - json with descriptors and signatures of my HU, and a .zip with actual update.

Inside of zip there are 2 files: another json with HU info and update details. Second file is a 35MB .dp file - and looks like it is encrypted. Content starts with word "RedBendEFDPackage" which google doesn't know much about :(
[General Questions and Answers] slam123slam:
Hopefully we get a solution to this soon...just bought the '18 EX-L.

Question...is updating the system via the head unit (using my phone's tethered connection) the same as downloading the update from the Honda site and using a USB drive?
[General Questions and Answers] LeoVincicar:
have you tried change the .db to .zip or .tar, check if can extract it

---------- Post added at 09:51 AM ---------- Previous post was at 09:46 AM ----------

Spirior 2017、Accord 9.5 can reboot to bootloader in this way:

developer settings -> boot mode select (a menu in developer setting) -> reboot to bootloader

the Accord 2018 called Accord 10 in china
[General Questions and Answers] broly10000:
Http://hondaopensource2.com/ADA01
[General Questions and Answers] iost:
Tried that. Not an archive.
[General Questions and Answers] Lo215:
how do I get the navigation app on my 2018 sport?
[General Questions and Answers] seandop:
Use Android Auto.
[General Questions and Answers] Lo215:
Thanks man just installed it
[General Questions and Answers] s5s9accord:
Hi guys,

I wonder if you have enabled the option "unknownsource" in system/security before run adb
[General Questions and Answers] cordi_b:
Just wondering if anyone has tried to access the actual audio control unit yet. It's what the display, usb ports, and all the antennas connect to, and I'm guessing it's buried in the dash somewhere. Looking through the FCC website docs on the unit it looks like there's additional USB ports, one looks like it's for the NFC on the dash, but possibly the other one labelled "TCU" is for factory service?

unfortunately I can't post links so you'll just have to picture in your mind what this useful information would have looked like.
[General Questions and Answers] kingsleyb:
Has anybody perhaps seen this youtube video and tried this? (go to youtube and search for "Honda Connect System Apps Installation") i know this is not for a 2018 Accord but just wondering what everyones thoughts are on this....
[General Questions and Answers] unknownbeing:
I may try this, I played around with the app installer but each time I selected the APK the install button was grayed out, maybe it is looking for a specific APK name.

Edit: I don't think we have the "configure" screen that's shown in the video.
[General Questions and Answers] broly10000:
It's looking for the app signature in a whitelist file in the head unit. Unless we are able to root, access the file and add the app signature, the installer will remain grayed out.
[General Questions and Answers] n00ax:
I don't think there is a whitelist file, containing fixed cryptographic APK hashes (although Apple does that with certain MachO executables, but Apple has different requirements, since they distribute applications as native apps thanks to their monolithic ecosystem), I would assume instead the app installer just verifies the signature of the APK against some Honda CA certificate. The enforcement is probably just done at the installer app, and does not occur within core Android userland at execution time, although I may be wrong. So if we could get ADB access side-loading should be possible,.
[General Questions and Answers] n00ax:
Also after looking at the RedbendEFDPackage for an older vehicle (my 2018 accord doesn't have any updates and I don't know what the versioning scheme is in the JSON file), it is definitely some proprietary archive (and after searching Google, it looks like it's now Samsung's contractor for remote device management services, since I'm guessing very little of this stuff was developed in house). The archive as mentioned earlier is most likely encrypted with AES-CBC, owing to the lack of any repeating patterns, and the padding seems to be some bitfield header with various PEM certificates near the end before the payload. The package might be personalized to the device with some secret device key, or it is encrypted with a master update key. I'm going to continue screwing around with the archive, if anyone has a valid update JSON file for the 2018 accord, that would be greatly appreciated.
[General Questions and Answers] broly10000:
Thanks for looking into this. I gave up after not getting the adb authorization screen. There is a process called whitelist, and that's why I think Honda is still using a whitelist file to authorize install packages like in Android 4 Honda head units.

Maybe you can crack the rooting enigma. Specially is you can understand the source code.
[General Questions and Answers] ChrisFDZ:
imgur.com/GGVS9im

imgur.com/MsbMeop

imgur.com/P29rKgy

Found these things by clicking the Volume/Power, Brightness, Phone buttons all at the same time for at least 5-10 seconds. Just trying to help as I really really want this!
[General Questions and Answers] seandop:
Yep, we've already gotten this far. Looking for the next step!
[General Questions and Answers] unknownbeing:
I've never seen these screens before. Does switching to ADB mode allow the confirmation pop-up to stick around? Possibly while staying on that "hidden" menu?
[General Questions and Answers] seandop:
No, it doesn't. That's exactly where we get stuck. We can change it to ADB mode, hookup a laptop, even see some of the HU's filesystem, but the confirmation prompt never appears and an ADB she'll still shows Unauthorized. The HU won't even show up in ADB without accessing these screens.
[General Questions and Answers] ChrisFDZ:
I recently went into the dealer and it appears that they hooked up a laptop into the HU to do an update by force. I saw them push this button combination but I did not get to see what else they used/did in order to push the update. I am assuming that anything they are doing to access the system is possibly all program/laptop side.

I also feel that maybe we are missing something as far as the connection goes. Maybe it requires 2 USB connections to the laptop instead of one. Also has anyone tried putting USB Mode_2 into "Peripheral" mode and accessing it that way. We have more than 1 port in the car so I feel as though that may be the missing key. I tried earlier today putting Port 1 to peripheral mode and it did it for a quick second and then would not allow me to switch out of "Host". However Port 2 allows me to freely switch between "Host/Peripheral" freely. Maybe a combination like... USB Mode = ADB Mode + USB Mode_2 = Peripheral + Test output = Success?
[General Questions and Answers] switchy85:
In the developer settings menu can you adjust animation speed like regular Android devices? Maybe this would give enough time to press the button to authorize ADB when it pops up. On some of my phones you could set it to 10x scale and window animations got slowed way down.
[General Questions and Answers] seandop:
Interesting idea. The animation speeds can be adjusted. I usually change them to 0.5, but hadn't thought to try this.
[General Questions and Answers] smash_the_stack:
io suggestion

Has anyone tried reading the data from the second USB?

import serial
import time

z1baudrate = 115200
z1port = '/dev/ttyUSB0' # set the correct port before run it

z1serial = serial.Serial(port=z1port, baudrate=z1baudrate)
z1serial.timeout = 2 # set read timeout
# print z1serial # debug serial.
print z1serial.is_open # True for opened
if z1serial.is_open:
while True:
size = z1serial.inWaiting()
if size:
data = z1serial.read(size)
print data
else:
print 'no data'
time.sleep(1)
else:
print 'z1serial not open'

Something like that should help show what the HU is sending out on the other cable. This should give an idea as to what it is trying to do, if anything at all.

As far as the ADB notification, there are settings in dev options to force notifications to the top for each com package. I would enable all of them for simplicity.

Another idea that I had, that I haven't gotten around to testing is to overwrite a known APK. I was thinking of writing a simple APK and naming all the properties to match the Calendar APK that is already on the HU, but I want the Calendar App. I would maybe sacrifice the Sirius APK since I won't be using it after the trial runs out. This could at least allow us to get an FTP client or server installed onto the HU. Then we can pull in other APKs as desired.
[General Questions and Answers] seandop:
Where is the setting to force notifications to the top? I haven't found that one.
[General Questions and Answers] smash_the_stack:
They are individual com settings. I can check after work if you haven't found them.

Home>settings>system>detail information>app manager

Pick the apk > notifications > enable treat as priority, allow peaking and disable hide sensitive content. Some apps have a block all, disable that.

This should cause any notifications to show up.

I haven't tried setting up a laptop with adb to do this on my car, just looki g at what you guys have done and what I've found while digging through menus.
[General Questions and Answers] unknownbeing:
Does any USB A to A cable work? I have a couple at my job I can use.
[General Questions and Answers] nvouscustoms:
I work for Honda and there is a update for the accords that are being installed via usb not laptop/rewrite software. If someone wants to walk me through it I can try and see how they have the package on the usb and tell you all how we update the headunit
[General Questions and Answers] eplutons:
2018 Honda Accord Update USB

Any chance you can use ImageUSB to create an image and share a dropbox link?
[General Questions and Answers] smash_the_stack:
We would need a copy of the usb with something like imgburn so we could analyze the packages.
[General Questions and Answers] nvouscustoms:
Ok so I copied the files from the thumb drive, now how to get it to you all. And it’s a pretty large file, 14.6 GB
[General Questions and Answers] smash_the_stack:
I sent you my email. I'll have some follow up questions once I create the thumb drive.
[General Questions and Answers] cordi_b:
SoC and SoC VP bring up UEFI bootloader insctructions for Intel Stratix 10 SoC. Possibly this is a UEFI update and not an OS update/patch?
[General Questions and Answers] smash_the_stack:
It's possible. It's data from a USB image that Honda is using to update cars currently. To my knowledge, the only update for the 2018 accord is the backup camera update they have been pushing out. I was just hoping that I could get something that would at least let me talk to the head unit. I also tried taking updated versions of preinstalled APKs and using the APP loader, no dice.
[General Questions and Answers] Joe92T:
It's definitely an SW update. In the about section the Android kernal version as well as the build number all changed after the ota
[General Questions and Answers] didibaba:
Any progress made so far?
[General Questions and Answers] unknownbeing:
None. Not sure if anyone is working on this.

If only I had the knowledge for something like this....
[General Questions and Answers] ComputerGuy19:
2018 Honda Accord Touring T2.0, Apps Wont Install!!

So I'm really disappointed and I love my car BUT I'm having trouble installing apps, I already enabled developer mode and allowed unknown sources in the car settings. When I plug in my flash drive that has the APK format app on it the computer detects it when I go into app installer BUT when I hit the app to install the app it doesn't install, I keep clicking on it and hear beep beep beep as I keep hitting the screen and eventually the app installer says not responding and without a play store I can't install apps, anyone have any ideas, it won't let me hit install in the app installer that came with the car? here's the site I got the APKs from https://www.apkmirror.com/

Could use some help:confused::crying:????
[General Questions and Answers] Wheels900:
Ive been watching this thread for many months now, log in every few days to see if anybody has found anything. unfortunately it feels like everyone has given up. this is my only gripe with this car, I wish i knew that before I actually spent 35k on it. Apparently, honda has locked us out of the "install" button. I have sent them a support ticket. no response yet. my hope is that everyone who wants to be ably to take advantage of the head unit, also puts in a support ticket. make honda think about their decision. hopefully unlock it in an update. wishful thinking, i know. but whats the point of the wireless charging pocket, when you have to plug in your phone to use android auto.

also, whats the point of paying for internet for a car that cant even utilize it? sorry about the mini rant, just trying to keep this thread alive
[General Questions and Answers] Casper5580:
Did u guys know that u can watch video in the head unit now?
[General Questions and Answers] smash_the_stack:
We've tried all of that and more. I've gone as far as writing custom APKs with a forged com signature matching ones that are already installed in the car. The unit should have seen the APK as a valid update and accepted it, but it won't. I still poke around the head unit from time to time when I come up with new ideas. I just haven't made any notable progress so I haven't posted anything. I couldn't decrypt the software update that I was given by another user.

You're wasting your time. They will never unlock the head unit since it is connected to vital systems in the car. All it would take is for some person to mess up the collision avoidance system and get into a fatal wreck before there would be a major lawsuit. They claim that the unit doesn't interact with the rest of the car. Given how they push updates, and how you can toggle and adjust systems form the unit, that was a lie. So good luck, but I wouldn't hold your breath.

How? I don't update my head unit, was it in a recent update or something?
[General Questions and Answers] Casper5580:
Just plug ur USB Flash drive and choose it from the unit, than you’ll see (Music, Videos) choose Vedios and you’ll find all the vedios in ur flash drive.

I’m not if it was an update or I just didn’t see that option before but it’s there now
[General Questions and Answers] wseverin:
Have had the 2018 Accord Hybrid EX-L about 6 weeks now. Been watching this thread and similar, hoping for some joy. I can get as far as getting the device ID and "unauthorized" from adb, but I'm not getting any authorization pop-up on the head unit, not even for a fleeting fraction of a second. What HU screen are you folks on when you see the fleeting authorization pop-up? Thanks!
[General Questions and Answers] himanshu.1691:
I have been checking the thread every few days hoping someone will finally be able to Crack it.

I don't know much about Android development or cracking these things.

I know the system runs on Android 6.0.1

So my question to experienced users is:

How do I find out bugs that were found after this version or patched after this version.

I know that lot of time security updates are there so the bugs that I find online that work for 6.0.1 might have been fixed through later updated.

For instance the page source.android.com/security/bulletin/2016-09-01 dot html mentions some bugs..(sorry can't post links)

I have no idea though if this will help someone.

If an experienced member can through some light i can at least try to look for possible bugs online
[General Questions and Answers] dirtyhiggins:
Bump.

Anymore progress on this?
[General Questions and Answers] broly10000:
We're all stuck with no ADB authorization Popup. Unless someone finds a vulnerability.
[General Questions and Answers] carsononline:
May be helpful, may be old news...

Got some youtube and other video working..

1. Tether car to your phone.

2. I have a 2019 Touring, and opened the available networks. It takes me to the ATT page to sign up for a plan for my car. Alternately open ATT hotspot page. This opens a browser.

3. Hold down on any word on the page and choose "websearch".

4. Navigate to any web page.

Notes: netflix wont play videos, as well as amazon vod. Youtube seems to be fine. Havent tested to see what happens when driving, but thought I would float this out there in case it helps get access to anything. I was surprised it worked.

ibb.co slash ZNDhGMz
[General Questions and Answers] Machado87:
Can we get a big pot of donations to maybe get some developers attention to try and getting this Hu rooted?? I'll start it off with 20$, this could work if we get a big enough pot for this!!
[General Questions and Answers] Overclockedpc:
Hi everyone,

I’ve been lurking around for a while and tried messing with my 18 EX-L today. Here’s what I found:

1) power/home/source gets you to the diag menu

2) select the second option for “detailed info”

3) hold home from that menu gets you to “developer diagnosis top”

I’m assuming there’s is a “developer diagnosis second” or something along those lines where we would be able to change the usb mode but I haven’t been able to find access to that yet.

There’s also the possibility that the menu I accessed would have an option if the usb is plugged in but plugging in an usb a-a doesn’t get any kind of prompt on my pc so I didn’t try it with it plugged in. Maybe I will in a bit.

From what research I’ve done, Honda seems to use the port 1 under the HU when doing updates or anything like that, so I haven’t been trying port 2 at all.
[General Questions and Answers] Overclockedpc:
Sorry for my previous post, I must have missed a few posts that outline the progress made so far.

So, here’s where I am. After enabling usb debugging, setting the port to adb mode and as peripheral, my windows pc will install a driver for something like “usb mtt hub” but the second device it tries to install, it can’t find a driver for.

I need help with which driver to use and also, at this point, adb devices gives me “and server version (32) doesn’t match this client (40), killing”. What the fix to that? I’d like to spend some time trying to figure out the authorization prompt but I can’t even get connected!
[General Questions and Answers] CoBrA2168:
You could try downgrading your adb setup on your Windows machine. Maybe if those versions matched, you'd make more progress.

Here's some more explanation on why this might be happening (note, I do not recommend using that software as it looks sketchy and very outdated):

http://visualgdb.com/adbfix/
[General Questions and Answers] Overclockedpc:
So, I got the adb version problem fixed. I tried connecting to the car via both USB ports, port 1 yields unknown device found with no driver and no connected devices and port 2 can’t be changed from host with the usb plugged in.

Also, at one point I was trying to scan for open ports and the head unit went black, car started giving multiple system failures and would only shift between park and neutral. I got out, locked it and returned a few minutes later and everything was fine again. Not sure if that’s normal...

How are you guys getting the driver installed and what command other than “adb devices” are you using for it to show the car on the pc?
[General Questions and Answers] unknownbeing:
Have you tried using the Google USB driver? Past android phones I've had, need this for ADB to work.

https://developer.android.com/studio/run/win-usb
[General Questions and Answers] hondapower:
Head Unit Reset Procedure

Like everyone else here, I've been messing with this off and on for months. It may be of no help at all, but I did find an easy and reliable way to reboot the head unit without pulling battery and without any "quickly shift into reverse at startup" hackery.

Power vehicle to ON, this is one step past Accessory. No brake pedal, hit Start button twice.

Hold HOME/SOURCE/POWER buttons until beep to gain access to diagnostic menu.

Hold HOME button until you gain access to the "Toggle In Line Diag" menu. The current selected setting will be "Completion". Select "Incomplete". This will reboot the head unit and open the Inline Diag Tool view.

Note here: you may feel you are stuck in this screen as the back button will not work and there is no Return button like other Diag menus. At any time in this view, you can hold HOME/SOURCE/POWER and gain access back to the main Diagnosis menu. Holding HOME there will allow you to toggle back to "Completion".

This view does a bunch of automated system tests, there are two that are manual tests. All of the boxes should change to Green color after a few seconds as the automated tests complete. You will notice 2 Gray boxes on the right, though. These are manual tests for the microphone and volume controls on the steering wheel. Hit the Volume Up or Volume Down button once, then hit the Microphone button (looks like a face) once. These boxes should turn Green and allow you to tap the Exit Diag button.

Another note: the factory documentation says you will need to clearly say 'Testing' after hitting the Microphone button on the steering wheel for that test to complete. I found this not to be the case on my 10AT 2.0 Sport. The box turned Green immediately after hitting the button.

If any automated tests fail, you will not be able to get out of the Line Diag Tool screen without doing what I said in note above. Also, if the test fails, it will not trigger the In Line Diag menu to go into Completion, which means the automated testing screen will open every time you turn the car on.

As I said above, holding HOME/SOURCE/POWER and then holding HOME will allow you to toggle the In Line Diag back to Completion which will cancel this screen from opening on every car start.
[General Questions and Answers] himanshu.1691:
I am not sure when and if we will find a solution.

If anyone is interested and knows about Comma-ai and the products that they are making, I was curious if we can use some of those products to enhance certain aspects of the car.

I am not interested in Autopilot but still, want to add features to the car that Honda never gave it despite so many sensors and camera's in the car.

Not really sure how to proceed but if enough people are willing to contribute, maybe we can come up with something good.
[General Questions and Answers] himanshu.1691:
Also wondering if anyone has tried https://xdaforums.com/android-auto/android-auto-general/app-android-auto-3rd-party-app-enabler-t3853009
[General Questions and Answers] LLStarks:
I think you've found a good entry point. I wonder if Honda left in the GPL Legal Info browser access. If you can launch a browser, that basically opens the door to any exploit we can deliver through that. Whether it's a Webkit root escalation, Dirtycow, or something new I don't know.

Very similar to what people did for the 2019 Civic: https://www.youtube.com/watch?v=2g64Ikm9c2w

If there's an equivalent menu on the Accord and it allows text selection, you should be able to do a web search and launch a browser. No ADB needed.
[General Questions and Answers] cam1pbell:
This worked. I watched YouTube videos but you cannot drive with it it turns off then you have to go through the process all over again
[General Questions and Answers] krytikul:
Do you mind describing the steps you took to get the browser? I am unable to open anything through the GPL page. Thanks :)