yashsingh1/xdaforums huggingface dataset:
[Fire HD 8 and HD 10 General] Supersonic27543:
They don't even need to do this if they have the signed DA, as I can confirm that the bootloader fully supports SPFT, I just disassembled it with IDA and wheezed through it. Got all the features but all of them requires the signed DA.

---------- Post added at 06:05 PM ---------- Previous post was at 06:03 PM ----------

This article explains about them quite nicely.

www.lieberbiber.de/2015/07/04/mediatek-details-partitions-and-preloader/
[Fire HD 8 and HD 10 General] diplomatic:
Right, but I'm guessing not everyone who works on restoring them has access to that signed DA so as to prevent leaks.

The bootloader verification is always some form of an RSA signature of a SHA-1 or a SHA-256 hash. Every component of the BL as well the boot image is cryptographically signed. Each stage in the boot chain verifies the next stage according to an embedded public key up until the main OS. There is a nutshell explanation of signing here: http://www.paradigm.ac.uk/workbook/metadata/authenticity-signatures.html
[Fire HD 8 and HD 10 General] DragonFire1024:
For the APKs I have been modding, after recompiling with apktool I have to move res, resources and classes.dex to the new APK. I do this by opening each APK as an archive with 7zip. I then drag and drop the files from the new APK to the old. The signatures hold. For systemUI, it's a similar move. Open new apk in archive and move manifest and meta to the dist folder of newly edited and recompiled systemUI. Open new apk in that folder in an archive and drag resources to dist folder. Then drag and drop one by one, manifest, Meta and resources to the new APK (still in archive window). Install app with adb. I'm only saying this because the signatures hold and the APK considered an update. I'll post a screen shot of the APK info. My point is, if I can do this extensive amount if editing and moving of the signature files without breaking them, I would imagine the same can be said of the update.bin. would the same private key be used in APKs as the update.bin/boot.img?
[Fire HD 8 and HD 10 General] Supersonic27543:
You mean the APK was accepted by ADB package manager? And, yes, update.bin uses the same signing technique as APKs.
[Fire HD 8 and HD 10 General] DragonFire1024:
Yes. Every time. It's how I've been able to reactivate all these blocked features. Do a switch of the files/certs and adb push.
[Fire HD 8 and HD 10 General] Supersonic27543:
So we'd be able to do it on unrooted devices? I mean, did you use adb push or adb shell pm install?
[Fire HD 8 and HD 10 General] DragonFire1024:
I have not yet had any luck. Probably because i have one each of a Fire 7, HD 8, Kindle 8.9 and HD 10. The 7 on 5.3.1 and 8 on 5.4.0.0 and all different builds and what not. The pm commands work but they don't on 5.4.0.1+ and you can't use the pm commands for the modding I do. The theory I have is Amazon patched the system app disabling, but not the reactivating of them without a reset. I'm hoping my mods will install on non root, by changing the APK name by one letter to something similar. That reactivates disabled APKs and my hope the same can be done to upgrade to a modded apk using adb push
[Fire HD 8 and HD 10 General] Supersonic27543:
Can you please PM me some directions and steps? I mean, what did you do exactly after modding?
[Fire HD 8 and HD 10 General] DragonFire1024:
Absolutely. I will later this afternoon when I'm at my PC.
[Fire HD 8 and HD 10 General] diplomatic:
If you're simply doing adb push, that is not a proper install. The signatures are not verified. That's how you're able to get away from signature enforcement. What I gather is that you already have to have root and writable system to do these mods.
[Fire HD 8 and HD 10 General] Supersonic27543:
Yes, he does the mods on rootable HD 10.
[Fire HD 8 and HD 10 General] DragonFire1024:
So far yes. However on 5.4.0.0, you could downgrade some system apps by doing

adb shell pm install -r -d com.package.name

With Fire launcher being an example. I've never tried to edit a APK from a non rooted device to be honest. I know of one file that's likely exploitable in the FireTabletSettings APK. The assests file. In there is code to block certain functions. I've removed nearly all the code and have had zero issues recompiling. All I'm saying it's possible given we didn't know changing a letter in an apk name would work to reenable an app. If that isn't patched, and we can find some way to use the assets file as an exploit, a we need is to get it past the system. I'll also post a screen cap later when I get home of the info pertaining to the apks as being 'updates' of the original.
[Fire HD 8 and HD 10 General] DragonFire1024:
Also, I reflashed last night. here is a screen shot of the 'Amazon Device Settings' database. This confirms Devo mode is active. What does it mean though?
[Fire HD 8 and HD 10 General] diplomatic:
So when you use the adb install command to downgrade, can you 'downgrade' to modded apks, even on root?
[Fire HD 8 and HD 10 General] DragonFire1024:
Good question. I haven't tried. But I also don't have any one Kindle/fire on the same fireos versions. At least in terms of the framework and systemUI, I know won't work based in the small differences in some of the code. If I flash framework mods from my HD 10 to my Fire 7, bootloop. I have to make the edits to an APK that is Already in the system, from the same class of devices. I've been so busy rewriting FireTabletSettings, I've never tried with that APK.
[Fire HD 8 and HD 10 General] freaky2xd:
I prefer AOSP (I'd love to get rid of all the Amazon preinstalled crap), but how exactly can you flash a custom ROM since the bootloader can't be unlocked?
[Fire HD 8 and HD 10 General] DragonFire1024:
Flash fire. And FireOS is mostly based in AOSP minus the horrible customizations
[Fire HD 8 and HD 10 General] TheRealIntence:
Wait... I thought this won't work :confused:
[Fire HD 8 and HD 10 General] DragonFire1024:
It can't. We can flash the system, just not the kernel. Hence why we have restrictions on moving forward. BTW the fire Nexus ROM for the Fire 7 is AOSP based
[Fire HD 8 and HD 10 General] Franzferdinan51:
I'd love to see this happen but wouldn't that only be possible if it was like Android 6.0? Or maybe it's 5.1 I can't remember
[Fire HD 8 and HD 10 General] DragonFire1024:
5.1.1 only. The HD 10 stock amazon ROM is actually a rip off of the AOSP LVY48F stock ROM of the Nexus 6 (5.1.1). In theory, we should be able to modify the amazon stock zip (system image only) to port over the necessary elements from the LVY48F zip and flash a ROM in flash fire, without building from scratch. That being said, I haven't tried to flash my test build yet, but I have been able to get many elements of the LVY ROM to work on the device by disabling signature verification. So I flashing a ROM should if done properly.
[Fire HD 8 and HD 10 General] Franzferdinan51:
That's great news at the very least I'm still happy to have any rom be it thru flashfire or not I don't have alot of resources but if u need help let me know I fully intend on trying to port a ROM it'll be my first time but I have 2 tablets shield K1 and this (being shipped) and I wanted to try do you have any device recommendation to pull from? I was thinking Nexus 7 or fire 7 2015
[Fire HD 8 and HD 10 General] DragonFire1024:
For the amazon tablets, they are built off AOSP ROMs, all from Nexus devices of 5.1.1. Using an app like droid info hardware, you can see which version and look it up on the google website that hosts the open source ROMs/factory images. I've never built or ported a ROM either. I've also never imagined in the last almost two years, I'd be able to do any of the things I've accomplished so far.
[Fire HD 8 and HD 10 General] Franzferdinan51:
Wow see now I don't feel alone this will be a fun journey I'm excited to try and Do this! And I hope you accomplish your goal! And I agree I've been working with Android since the Moto droid 1 I believe 2.3? Gingerbread? I think
[Fire HD 8 and HD 10 General] TheRealIntence:
Just to be clarified... Are we actually able to get android lollipop working on this tablet?
[Fire HD 8 and HD 10 General] DragonFire1024:
The amazon tablets are all lollipop 5.1.1 based. Each one appears to be of a different AOSP factory image like LVY48F. In theory it should be possible to flash a rom even one ported from the factory image(s). I can get some system apps like the settings APK to work nearly perfectly by disabling signature verification and pushing the APK like I do the rest of my hacks. So I'm almost 90% sure a rom can be built for this tablet. I see no reason why one can't.
[Fire HD 8 and HD 10 General] TheRealIntence:
There seems to be no one who is actually able to do this otherwise there would be a thread or release :/
[Fire HD 8 and HD 10 General] Nabamit!:
Help for Fire HD 8(2017) edition

Please do it for Kindle Fire HD 8 2017 edition.
[Fire HD 8 and HD 10 General] Supersonic27543:
We can't. :crying: We don't have root.
[Fire HD 8 and HD 10 General] DragonFire1024:
Can't happen overnight.
[Fire HD 8 and HD 10 General] Legitsu:
this rom patching on kernel swap non-sense almost never works its been tried on several devices in the past yes you can sorta get some custom rom action but its never great

the bottom line is no bootloader unlock no custom roms

focus up on getting the bootloader unlocked that should be priority 1

I really don't get why nobody has copy-pasted a unlock yet its mediatek there is very little in the way other then needing a properly magic'd da and scatter file
[Fire HD 8 and HD 10 General] TheRealIntence:
Feel free to do it. There is a reason behind it why nobody did it so far otherwise we would have something to work with :)
[Fire HD 8 and HD 10 General] diplomatic:
Ha! I wish that were the case. People have been trying this for years. As it turns out, Amazon has completely replaced Mediatek's default security system with their own. (If they didn't, my Zenpad unlock tool would probably succeed in unlocking it.) They have invested heavily in protecting Fire OS products, because they can stand to lose literally millions of dollars if these devices get hacked.

The lock state of the bootloader revolves around cryptography. You need Amazon's secret private RSA key to generate an encrypted unlock file, which would then be decrypted by the BL to determine its lock state. The SP Flash Tool method has long been patched out. You need Amazon's privately signed DA to get into download mode. Same type of RSA security wall as everything else in Android.

And even if Amazon didn't implement its own security system, Mediatek devices are not inherently insecure. It's just that most OEMs don't care enough about security to lock them down properly. And as a result, they don't bother changing MTK default keys used for secure boot verification and SPFT access, or even enabling secure boot in general. That's why you get the impression that MTK-based devices are easily hacked.
[Fire HD 8 and HD 10 General] Legitsu:
I stand corrected

I was under the impression the the fire devices had no PBL signing checks because nobody that uses MTK bothers with it

that being said its not like dealing with qualcomm

I need to poke the pbl with a stick and see if I can find a hole given amazons track record they probably missed something

I reported my mysterious wifi issue to the amazon t2 techs they where supposed to send me some engineering firmware to test

maby ill get lucky
[Fire HD 8 and HD 10 General] TheRealIntence:
Thanks for the clarification! It's still hard to believe that no one is able to exploit Amazon security system for the public. I don't know much about the whole protection behind it but as I've heard the BL gets verified by the PL and this gets verified by a SoC. But this shouldn't be unusual right? On the other hand it would be absolutely awesome to get a custom rom working because Amazon tablets are very cheap for the hardware which are implemented in the tablets. The probably most important thing why people don't buy Amazon tablets is annoying FireOS. I really hope that we will get rid of this in future...
[Fire HD 8 and HD 10 General] DragonFire1024:
The fire 7 has a custom ROM. It is built from the same factory AOSP image Amazon butchers and calls FireOS. Amazon did nothing different on the HD 10. They used the LVY48F factory image and butchered it. If disabling signature verification enables the installation of some system apps, which it does, a custom ROM can be flashed in flashfire. From what I understand we just can't decompile the boot image and or touch the kernel. Aside from different architecture, there's nothing different about the mount paths when compared to the fire 7. I haven't tried flashing the one I've already ported because I'm experimenting with other things as I go along. It's much more fun hacking 'FireOS' than it is a custom ROM.
[Fire HD 8 and HD 10 General] diplomatic:
I don't have much experience with Qcom... by PBL, you mean the code embedded in the SoC, equivalent to Mediatek boot ROM? How do you read that off? And how do you find holes in it?

Yeah, I was only describing the way Amazon's security is supposed to work. Vulnerabilities could potentially exist anywhere. But in general, my impression is that Amazon is dead serious in securing & locking down these tablets.

Engineering firmware... that sounds like it might be more lenient....

The fact that they are locked down IS the reason they're cheap. Amazon is not out to make much if any profit on the HW. It is making a bet that your tablet will be a gateway drug to their products and services and that's why it's basically giving them away. I mean, the HD10 is a $250 tablet sold for $120 on sale....
[Fire HD 8 and HD 10 General] Legitsu:
would likely require some soldering to get a useful dump

but the basic init procedure is explained here

http://www.lieberbiber.de/2015/07/04/mediatek-details-partitions-and-preloader/

and here also has some useful reverse info coursy the coreboot folk (which btw coreboot does have a functional port sorta?)

https://ecc2017.coreboot.org/upload...3-pcm-firmwares-isa-fully-free-boot-chain.pdf

and I would't consider the fire hd10 to be a 250 dollar tablet its nowhere even close to that kind of tablet

you can buy much bigger and more powerful tablets for 250 usd (galaxy tab A, huawei mediapad m3 , nvidia shield k1 (my personal pick for performance bang per buck)

mediatek has a history of just generally being terrible them missing something glaring or leaving a back door open is not unheard of
[Fire HD 8 and HD 10 General] diplomatic:
Legitsu,

I think I misunderstood what you were trying to say about poking holes. I'm more or less familiar with MTK's design. I thought you were talking about finding holes in Qualcomm PBL. Mediatek doesn't call it PBL. That's what I was curious about...

Now the tablets you mentioned are mostly 8", smaller than the HD10. It's hard to find a comparable tablet, but consider the Asus Zenpad Z301MF. It's got the same screen and resolution, RAM, but a lesser CPU (mt8163) and 16GB flash. And it goes for $200. The HD10 is a better device, so it must cost at least $220. In any case, it is not a $120 or $150 tablet. That is the subsidized price.
[Fire HD 8 and HD 10 General] Supersonic27543:
So, with these protections around, is it even possible to exploit the BL, because a failure will lead to a hard brick in most of the cases? :(

I mean, the BL unlock will almost definitely involve editing the evil partitions, and that will brick the tablet because of the verifications.
[Fire HD 8 and HD 10 General] TheRealIntence:
You have a second chance after bricking your device because you can call Amazon support and they will send you a new one. But you're right. Any failure in exploiting BL will propaply result in a brick
[Fire HD 8 and HD 10 General] FireSlayer_SD10:
[MENTION=8714462]LoneFlux[/MENTION] If you are still willing to take up this incredibly large project, we now have root and bootloader unlock on the fire HD 10! I’d prefer you do LineageOS 16 if possible! Not android 8.1 since that’s old at this point.

Device tree/source mt8173/mt8176

https://github.com/Goayandi/mediatek_mt8176_development

Kernel source

https://xdaforums.com/hd8-hd10/development/amazon-fire-hd-102017-kernel-source-t3904021

Fire hd 10 root guide

https://xdaforums.com/hd8-hd10/orig-development/unlock-fire-hd-10-2017-suez-t3913639
[Fire HD 8 and HD 10 General] Rortiz2:
The last time that Loneflux connected to XDA was in: 14th April 2018 05:15 PM

So it will not continue :/
[Fire HD 8 and HD 10 General] DragonFire1024:
We need a new kernel or hope the module restrictions, if any, are minimal in Amazon's in order to move on. We can't go past lollipop without a new one or modified one. The good news is, Amazon's kernel is the only one I've been able to successfully build. So im hoping it's just as easy to modify it. So I'm going to start easy and see if I can't patch a kernel update to it.
[Windows Mobile Development and Hacking General] tft:
im trying to modify weatherpanel a little.

how can i change the update time interval from 30mins to 15?

also, my "Ok/exit" button on weatherpanel is under my taskmanager menu button. anyone experiencing the same on wm6 ?

can anyone help?
[Windows Mobile Development and Hacking General] tft:
can anyone help?
[Windows Mobile Development and Hacking General] badwolf:
to go to 15 min.

go to settings

edit city

hit advanced options

change the update multiplier from 1x to 2x
[Windows Mobile Development and Hacking General] tft:
tried that earlier, no luck.. still updates at 30mins even after a softrest.

does anyone update multiplier work on WP?
[Moto G4 Plus Questions & Answers] CMKdaGreatest:
So here's what happened.

I was on rooted stock, rooted with super su. Stock ROM version was Feb 2018 security patch. Because of excessive screen burn issue and because kernel adiutor stopped working, I decided to shift to RR Nougat. I flashed RR with gapps and set it up. Then I had to root it, so I switched off the phone to boot it into recovery. Then, bam. Phone isn't getting turned on.

Any fixes?
[Moto G4 Plus Questions & Answers] Love Dhir:
Boot to recovery ten go to wipe option wipe system ,data,cache and then reflash the rr nougat and gapps .The Rr nougat isrooted there is no need of root you have magisk manager installed.
[Moto G4 Plus Questions & Answers] smog2699:
Delete
[Moto G4 Plus Questions & Answers] Love Dhir:
In that case He should flash the blankflash and then he should be booted to bootloader and then he should install the stock rom and [MENTION=7761332]smog2699[/MENTION] that was just an understanding problem so don't reply ****
[Moto G4 Plus Questions & Answers] smog2699:
Did you say anything about using blank flash? Seems like you just wanna spam every post
[Moto G4 Plus Questions & Answers] Love Dhir:
Yes any problem u idiot it will work don't try to be a genius
[Moto G4 Plus Questions & Answers] smog2699:
I can read English and it's clearly written "boot into recovery and flash nougat"

Where is the blankflash step? Can you show me?
[Moto G4 Plus Questions & Answers] Love Dhir:
Previous was an understanding problem u fool i told that earliee
[Huawei MediaPad M5  Questions & Answers] mazzod:
Hello guys,

I want to post this video to understand if the problem that I found on my m5 10.8 is only on my device or not. You can find the video at this Dropbox link:

https://www.dropbox.com/s/o6hvyc1kli6d78o/VID_20180413_192810.mp4.7z?dl=0

I already send it to the support to analyze.

Cheers
[Huawei MediaPad M5  Questions & Answers] kev1807:
seems like this problem:

https://xdaforums.com/mediapad-m5/help/multi-touch-issues-t3761496
[Huawei MediaPad M5  Questions & Answers] mazzod:
Deleted
[Huawei MediaPad M5  Questions & Answers] mazzod:
Thanks man, it's the same problem!
[Huawei MediaPad M5  Questions & Answers] lolmensch:
Did you get an answer from the support yet, [MENTION=5937174]mazzod[/MENTION]?
[Huawei MediaPad M5  Questions & Answers] mazzod:
[MENTION=1895945]lolmensch[/MENTION] unfortunately no, I have send another mail to request an update about the issue. It's really frustrating have one new good device that I can't use because of that problem. I hope is only a software problem and not hardware, in the last case I will request a change of the device if possible.

I'll keep you posted.

Cheers
[Xiaomi Mi A1 Guides, News, & Discussion] albsat:
Well, I didn't buy this phone for the camera or the video recording.

But recorded a video using the Gcam app but was totally disappointed by the quality of the sound especially.

I wonder what is your approach in this aspect.
[Xiaomi Mi A1 Guides, News, & Discussion] Klasputnikov:
I use cinema fv-5
[Xiaomi Mi A1 Guides, News, & Discussion] antonioli84:
The camera for recording is very bad for me. Even with EIS enabled, using GCam or whatever. It's not on the same level as the pictures.
[Xiaomi Mi A1 Guides, News, & Discussion] StePaDrums:
Our phone is still plagued by the low light bug. If you want to capture a video in something other than perfect lighting conditions, you might want to go with manual exposure.

I use Footej camera (with camera 2 API enabled) with manual exposure.

I never set shutter speed slower than 1/25, to avoid getting 14fps.

Same thing can be done with Open Camera.

As far as sound goes, I'm one of the lucky ones, no bug there.

Cheers
[Samsung Galaxy Note 8 Themes, Apps, and Mods] maxed4901:
So, After trying various apps to get the AR stickers, below is how i got them to work.

1. Download AR core

https://play.google.com/store/apps/details?id=com.google.ar.core&hl=en

If you are unable to find on playstore on issues, then download:

Atom Visualizer for ARCore. This app will automatically install AR Core for you (<10mb>)

https://play.google.com/store/apps/details?id=com.signalgarden.atomvisualizer

2. Download AR Stickers. (APK Mirror)- I am using V 1.0.17

https://www.apkmirror.com/apk/googl...-stickers-1-1-180205033-android-apk-download/

Thanks to [MENTION=1075214]xchatter[/MENTION] try below link for AR stickers

https://drive.google.com/open?id=13_5lu90owx83mbqh94u5t20JEBy711ex

3. Google Pixel Camera- See below page and you can try out which one works best.

https://www.celsoazevedo.com/files/...1.018.177470874.41362666__SG7Exy_V8.3beta.apk

I am using https://www.celsoazevedo.com/files/...1.018.177470874.41362666__SG7Exy_V8.3beta.apk

Enjoy the AR stickers! would appreciate if you could let me know which camera version you are using with the stickers.

Cheers!
[Samsung Galaxy Note 8 Themes, Apps, and Mods] TYTNNEW:
Error packet in apk ar stickers...g pixel camera crash...both... not working
[Samsung Galaxy Note 8 Themes, Apps, and Mods] maxed4901:
I dont know why but i am running oreo and these apps. did you try to install the posted version of stickers?

As for Camera. download this and try https://www.apkmirror.com/apk/google-inc/camera/camera-5-1-018-177470874-release/
[Samsung Galaxy Note 8 Themes, Apps, and Mods] TYTNNEW:
Yes... and the updated one to o... same error packet

Inviato dal mio SM-N950F utilizzando Tapatalk
[Samsung Galaxy Note 8 Themes, Apps, and Mods] xchatter:
Not working for me also. I tried your versions. Google camera works, but the AR stickers can not be installed. Error parsing package.(i tried several versions also)

---------- Post added at 10:27 AM ---------- Previous post was at 10:13 AM ----------

Here is a working AR Stickers app. Link . I found it somewhere across the web, so I take no credit.
[Samsung Galaxy Note 8 Themes, Apps, and Mods] maxed4901:
Thanks for pointing out the AR sticker dilemma. I think that sums all apks to work!
[Samsung Galaxy Note 8 Themes, Apps, and Mods] Motawa88:
eggselent!
[Samsung Galaxy Note 8 Themes, Apps, and Mods] LegendSmoker:
Thanks Its working. I am using the using all linked files and ar stickers from Google drive link.

Is there a way to get more stickers?

Gesendet von meinem SM-N950F mit Tapatalk
[Samsung Galaxy Note 8 Themes, Apps, and Mods] alejandropascual:
Hello!!

I work!

How to get more stickers ????
[Samsung Galaxy Note 8 Themes, Apps, and Mods] tomi613:
Thanks! Very good! Note8 Oreo
[Samsung Galaxy Note 8 Themes, Apps, and Mods] :
Does anyone working in nougat?