yashsingh1/xdaforums huggingface dataset:
[Google Pixel 3 XL Guides, News, & Discussion] rootuser11:
You obviously have not own or tried samsung phones lately. You can disable most of Samsung apps even from the stock launcher and you can uninstall many of them too including Samsung+ you accuse of spying on customers. LOL. Using adhell, you can disable more stuff but again you dont even need to go that far to disable apps. So much BS or speaking out of your arse things here....

Also I hated black crush on pixel 2/3 AND S9. The overall color calibration is one thing but the black crush is something that is hard to ignore when you watch dark scenes in bed or on an airplane. It is just awful. S10 def. has better screen in terms of that - setting aside the fact that its calibration is overall better and I absolutely love auto temp adjustments.

---------- Post added at 06:17 PM ---------- Previous post was at 06:15 PM ----------

He is talking more in terms of black crush and I tend to agree with him. Pixel has serious black smearing and crushing that custom kernels couldnt fully resolve.
[Google Pixel 3 XL Guides, News, & Discussion] 21cdb:
I bought an S10+ and I don't like it much. It's very frustrating in daily use coming from a 3XL, and I just don't like the way it feels or how things look. The 3XL is so much more satisfying to use it's not even funny.

Also, speaking of the screen I actually prefer the calibration of the 3XL to the S10+. I wasn't as blown away by the S10+ screen as I had expected to. I prefer the hole punch to the bathtub notch of the 3XL, but other than that I think the 3XL looks better. (With both in the most vivid mode.)
[Google Pixel 3 XL Guides, News, & Discussion] Reuben_skelz92:
I found the pixel had a nice white point. Samsung phones always have too much pink. The S10 was no different
[Google Pixel 3 XL Guides, News, & Discussion] TheIgster:
My wife just went from a S7 Edge to a S10+. It's OK I guess. I don't see how the cutout on the right hand side is much better than the notch on my 3XL. It's different, but really still intrusive. At least the notch is in the middle which helps with my OCD and need for symmetry. She likes the S10+ so I guess that's all that matters, but I wouldn't trade my 3XL for it. I much prefer the stock Android experience. Google off to the left side, no stupid Bixby, etc.
[Google Pixel 3 XL Guides, News, & Discussion] fredgar75:
The s10+ is a crap phone. I've had it for 3 weeks and I really don't like it. Right now it has a software issue that makes it drop data constantly. I had to disable band 41 and 25 as a bandaid fix. Not very happy with that since this is a $1000 phone.

Just bought a pixel 3XL earlier in the week and heading home now to pick it up. I'm hoping to have a much better experience.
[Google Pixel 3 XL Guides, News, & Discussion] HACK3DANDR0ID:
I purchssed a S10+ on Sunday and Returning it Monday. Awaiting my Pixel 3 XL for tomorrow :)
[Google Pixel 3 XL Guides, News, & Discussion] fredgar75:
You will be much happier with the 3xl. There are a few gimmicks I liked about the s10+, but the pixel 3xl just seems smoother. And the camera quality is just as good if not better with less cameras.

Some people complain about the big notch but it doesn't bother me at all.
[Google Pixel 3 XL Guides, News, & Discussion] malek777:
If samsung updated their phones much quicker, I would never consider a pixel lol Lets be honest here, the pixel 3 was an overpriced lazy attempt in many aspects with 4gb of ram.
[Google Pixel 3 XL Guides, News, & Discussion] Eudeferrer:
In my case it would just make it harder to choose, but I would still choose Pixel. I really like having good old root and an unlocked bootloader, something practically impossible in today's Samsung phones. I also like the Pixel's camera better for now. It just seems to give more realistic colors IMO.

Sent from my Pixel 3 XL
[Google Pixel 3 XL Guides, News, & Discussion] Zurko:
Just coming back from S10+.

For me:

- vibration is much! better on Pixel 3xl

- picture quality on Pixel 3xl is state of the art

- S10+ was somehow uncomfortable to hold in the hand

- TouchWiz has improved but still I love stock android

- Displays are both great

- I personally prefer fingerprint reader on the back

Only thing on S10+ better was hardware specs. But in the end Software Experience on Pixel is still better for me.

So after 1 week with S10+ and another one with iPhone XS I bought a new Pixel 3xl and will keep it until Pixel 4xl will be launched.

LOVE IT!
[Connected Car] crazychimp80:
hello,

anyone can help me to find a way to unlock/hack the infotainment system on the new peugeot 3008/5008 ecc.

i've tried to hold note button for engineering mode but only for spy menu.

anyone have more differently code for unlock android setting? for example how the kia/hyundai cars?

please sorry for my english....
[Connected Car] frawer:
I found the code 1122 to access the radio monitor...
[Connected Car] umbeluxa:
hi guys, I'm also looking for a way to get into the hidden menu of the NAC (3d Connect Nav) Peugeot. My car is a 2008, with CarPlay, Mirrorlink and Android Auto. Now compared to what I saw for the KIA, I would try to figure out if there is a chance to enter the system that is declared Linux, and find a gateway like an android virtual emulator, on which even turns android auto, to install other applications directly on the multimedia of the car. The only 2 codes we know are: 1111 1122, the first for spylogs, the second one gives us a series of info on the system, but apparently they are only legible and there is no way to get inside. In practice using the code 1122 the first time also gave me only info on the radio, but then typing in increasing order the following codes and typing 1122 again, for several times I have drawn many other info. I took pictures that I would like to share with you to find out if there is a chance to find a way.
[Connected Car] umbeluxa:
First of all, does anyone know that LINUX can run Android within? Would it be possible to enter the NAC system to install Android apps?
[Connected Car] Crunchy_Nuts:
Any progress here?

I'm also try to hack in the nac.

I scanned for open ports in Bluetooth and Wifi but all ports are closed.

Does anyone has another idea how i can get access to the system files?
[Connected Car] josz:
The source code is published here.

https://www.groupe-psa.com/en/oss/
[Connected Car] Crunchy_Nuts:
It's from the RCC, not the NAC.

RCC is from Bosch and the NAC from Continental.

And it's useless unless you have the login data or the schematics from the board because all ports are closed. :eek:

Maybe a secret code open the ports.

But so far only 1111 and 1122 are known.
[Connected Car] josz:
According to information published on https://fccid.io/ZFW-NACEUR2. This should be the source of the NAC WAVE 2 and 3.

Excludes are sources of proprietary software.

It seems that the software developed for the RCC unit, is (partly?) used for the NAC.

:confused::confused::confused::confused::confused:

The base of the OS is GENIVI. A linux based OS developed for in car systems.

https://events.static.linuxfound.or...tware updates for Linux-based IVI systems.pdf.

It is designed to prevent the hacking of the system in any way.
[Connected Car] BobM2019:
For those of you who want to analyze their spy logs after using code 1111, you need to install Qt (qt.io/download) and download the DLT Viewer project (github.com/GENIVI/dlt-viewer). You also need a tool to extract lz4 compressed files (e.g. github.com/lz4/lz4/releases). Once you configure everything you need to extract the .lz4 file (e.g. "1_startup_20190924_181656.dlt.lz4") which results in a .dlt file (e.g. "1_startup_20190924_181656.dlt"). You can then open this in DLT Viewer.

I assume that the Navi 5.0 is using a logger similar to the one described here: github.com/GENIVI/dlt-daemon] . Also based on the information in some of the crash reports, the Navi 5.0 seems to be using Qt apps/objects.
[Connected Car] MitchtheMitch:
Unfornately I do not really know how to install all these programs.

I could install qt and visual.

But all other failed.

Can you maybe do a tutorial for that?

I would be verry thankful :D

Regards
[Connected Car] NooBtheNoob:
i do not understand too how to install these programms , can you eplain , please?

step by step would be the best.

thanks
[Connected Car] BobM2019:
I'll try to detail the steps for Windows as soon as I get a chance.

I installed Qt 5.12.5 + Microsoft Visual Studio 2015. When configuring the Qt Kit, I selected no C compiler and "Microsoft Visual C++ Compiler 14.0 (x86_amd64)" as the C++ compiler. After that I was able to build and run the DLT Viewer project.

The lz4 command-line utility is pretty straight-forward. Simply run "lz4.exe <file name>.dlt.lz4" to extract the files.
[Connected Car] MitchtheMitch:
That's a problem fo me, I could install qt and visual but that's all.

I do not have exe files for iz4 and for dlt I do not have too. :(

So if you could do a tutorial with links step by step it would be verry cool :D

Thanks
[Connected Car] MitchtheMitch:
No answer :(
[Connected Car] BobM2019:
DLT Viewer - Step by Step for Windows

I have been busy, so it took me some time :) The output of DLT Viewer will probably make no sense to many people, but you can draw your own conclusion at the end. I uninstalled and re-installed everything from scratch to note down each step. This assumes that you have exported the spy logs using code 1111 and that you have placed them on your PC.

Download a tool to extract the lz4 compressed spy logs.

None of the 7-zip tools/plugins worked for me.

From the command-line you can use one of the binaries here: github.com/lz4/lz4/releases . Simply run "lz4.exe <file name>.dlt.lz4" from the command-line to extract the files.

For a GUI interface, see reboot.pro/topic/22062-lz4-compressor . Within the tool, in the VHD file field you need to select your lz4 file (e.g. "1_startup_20190924_181656.dlt.lz4"). Select the output folder in the Lz4 Folder field. Leave the LZ4 field empty. Click on the COMPRESS button to extract the file (I know, the name of the button doesn't make sense).

You should end up with a .dlt file.

Download and install Visual Studio Community Edition 2015: stackoverflow.com/questions/44290672/how-to-download-visual-studio-community-edition-2015-not-2017

During installation select Custom install and Programming Languages -> Visual C++

Download and unzip DLT Viewer: github.com/GENIVI/dlt-viewer/archive/master.zip

Download and install Qt 5.12.6: download.qt.io/official_releases/qt/5.12/5.12.6/qt-opensource-windows-x86-5.12.6.exe

During installation select the following component: Qt -> Qt 5.12.6 -> MSVC 2015 64-bit

Configure the compiler in Qt

Go to the Tools menu -> Options

Select Kits in the left pane -> Kits tab

Click on "Dekstop Qt 5.12.6 ..." under "Auto-detected"

Select for Compiler C: <No compiler>

Select for Compiler C++: Microsoft Visual C++ Compiler 14.0 (amd64)

Compile and run the DLT Viewer project

Within Qt click on Open Project and open the BuildDltViewer.pro project in the unzipped folder of DLT Viewer.

Qt will switch to the Projects page (otherwise click on Projects on the left)

For the Active Project, BuildDltViewer should be selected

Click on Configure Project on the right

Go to the Build menu -> Build Project ...

When the build is finished, go the Build menu -> Run

Go to File -> Open and open one of the .dlt files.

The DLT Viewer manual can be found here: at.projects.genivi.org/wiki/display/PROJ/DLT+Viewer+Manual

I haven't spent much time looking at the DLT Viewer output, so I cannot help anyone to decipher that. Obviously feel free to share any of your findings.
[Connected Car] ricardoestefano:
New Codes Found

Nice work, Bob.

I live in Brazil and my Citroen C4 Cactus seems to use this same unit.

I reached the "Expert Mode" pressing MENU for 10 seconds and the tried the 1111 and 1122 codes.

Here 1111 brings me up the "spy" files, that I extracted using a pendrive, lz4.exe and read with a simple text editor, that does not show the file in a structure but give a good idea that what is inside it.

1122 brings only radio information.

Some news, discovered in this interaction:

1144 disabled the system beep.

1155 enabled the system beep.

I´m just downloading the source code to have an idea on how it works.

I found some schematics at web a few months ago. I will try to recover it and post here.

It will be wondering if we can get Android Auto Wireless working with these units.

Regards,

Estefano
[Connected Car] pedrera:
NAC Wave 2 codes (from German PSA forum)

1111 Spy log generation

1122 Master mask

1130 Information about amplifier, battery etc

1133 Information about radio / received / freq

1134 Information on satellites and services

1135 TomTom version

1136 Information about WiFi devices

1137 current user status, temp.

1138 Linux, USB, processor utilization

1139 GPU memory load

1140 connection status WiFi, tethering, Bluetooth, rndis, ipadreesen and macadressen and much more.

1141 Connected USB devices

1142 ATB connection

1143 no information without serial connection

1144 tone becomes quieter

1145 Provider status, SMS status

1146 Download status

Hope this would help:cool:
[Connected Car] MitchtheMitch:
Pretty Good work BobM2019!!!

Thank you, I will try it.

For the Swiss man:

What source is the German side for the codes?

When did they wrote these info?
[Connected Car] BobM2019:
https://www.google.com/search?q=peugeot+nac+"1144"+"1155"
[Connected Car] MitchtheMitch:
Peugeot Naceur wave 2Continental Serial Connection

With TX and Rx it is possible to get in the serial console of the head unit.

But it asks for a login and password.

Imx6x-std login:

Password:

Tried a lot of things, like root and pass.

Left pass empty but nothing works.

Anybody a clue?
[Connected Car] ianna:
HI guys, I've a new 3008 Allure version and i want to enable the iCockpit color personalization how to GT Line model. Is it possible? I think and hope yes
[Connected Car] horuscurcino:
EDITED
[Connected Car] MitchtheMitch:
Pin location

The pins at on the middle connector.

It should be the yellow part wich is in the middle of the connector.

Pin 23 and 24

And

Pin 29 and 30

Regards
[Connected Car] horuscurcino:
By the verbose and the outputs, all i have found until now is the username is not "root".
[Connected Car] horuscurcino:
Thank you. They are the same on the BOSCH RCC unit but they dont give a proper output. Perhaps it is a fault of my TTL device. I was testing in the continental NAC unit and found two interesting things:

first, the boot text shows the path of the development folders

sh[3691]: OIPBI: Used SDK (Toolchain): /PROJ/oip/SDK/MG_20170106_M11_7.0.165p/MV_Tools
sh[3691]: OIPBI: Used Mirror: /PROJ/oip/PDK/20170613_PDK_11.00.120.03/Mirror/solutions/com.continental/MV_PINT

And also says:

sh[3691]: OIPBI: Machine: Linux radfmxyu 3.13.0-106-generic #153~precise1-Ubuntu SMP Tue Dec 6 16:12:15 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
sh[3691]: OIPBI:
sh[3691]: OIPBI: Build Info
sh[3691]: OIPBI:
sh[3691]: OIPBI: Builder: uidg6656
sh[3691]: OIPBI: Built: jeudi 15 juin 2017, 12:28:06 (UTC+0200)
sh[3691]: OIPBI:
sh[3691]: OIPBI: Build BL #Version: NAC_SOC_SYS_65.05.24.32_RCC #1

I think the username we need to explore is "uidg6656" and the path to find the password (or a hint of it) can be found on the firmware files. Linux usually stores passwords onto a file called "passwd" in "/etc" folder. However it needs to be decrypted.

For your information, these are the fundamentals of the software we are trying to access: http://events17.linuxfoundation.org/sites/events/files/slides/PSA_GENIVI_aboard_-_ALS.pdf

And the opensource software codes used on those units:

https://www.groupe-psa.com/en/oss/
[Connected Car] apol:
can you point the rs in rcc connector

interesting here about RCC unit is possible to connect via sub2lan https://fccid.io/YBN-PSARCCA100/Use...hnical-Passport-3119654/ViewExhibitReport.cfm
[Connected Car] MitchtheMitch:
Pretty good work!

So you set following:

Login: x

password: passwd

Is that correct?

Like you, I did try to connect it via USB and serial and telnet but without success.

Regards
[Connected Car] rui.saraiva:
An old NAC Wave 2 firmware version 21.05.65.32 (early 2017), was wrongly released without any encryption. It was pulled some hours later, but it was a bit too late... I've the full update .tar file, but here's some of the interesting files, including the root filesystem, after converting/extracting - https drive (dot) google (dot) com (slash) open?id=1ocCo5WJheeBkChpydxkE1Q28UYh0Xjq9
[Connected Car] horuscurcino:
Thank you, Rui ! It will certainly help on our research.

Muito obrigado!

Early chinese versions have the same security flaw.

www(dot)chengzhidan(dot)com(slash)auto(slash)NAC22-new(dot)rar

yadi(dot)sk(slash)d(slash)2kUiXTSOqoGoUA
[Connected Car] NooBtheNoob:
Thir link does not work.

Thanks to Rui for the other link, maybe it will help more.

horuscurino, could you explain which parameters you set as Login name and password to extract the firmware darta?

i think somebody asked you allready before.

thank you :cool:
[Connected Car] rui.saraiva:
As you can see in the root filesystem, the kernel (3.10.17) does have the usbnet module compiled (lib/modules).

I did try a USB 2 Ethernet device with compatible USB hardware vendor/device ids and the module is loaded. It might be easier than using a jtag or serial console.

I will try to upload the full .tar
[Connected Car] horuscurcino:
Since you have compatible USB ethernet, check those addresses if there are open ports:

# Wired or wireless interfaces

# auto eth0
#iface eth0 inet dhcp
#iface eth1 inet dhcp
auto eth0
iface eth0 inet static
address	192.168.1.112
netmask	255.255.255.0
network	192.168.0.0
broadcast 192.168.0.255
gateway	192.168.0.1

# Ethernet/RNDIS gadget (g_ether)
# ... or on host side, usbnet and random hwaddr
iface usb0 inet static
address 192.168.0.202
netmask 255.255.255.0
network 192.168.0.0
gateway 192.168.0.200

# Zaurus 2.4 Lineo net_fd; obsolete
iface usbd0 inet static
address 192.168.129.201
netmask 255.255.255.0
network 192.168.129.0
gateway 192.168.129.200

# iPAQ 2.4 mach-sa1100/usb-eth
# (192.168.0.202 is the iPAQ's IP, 192.168.0.200 is the host's IP)
iface usbf inet static
address 192.168.0.202
netmask 255.255.255.0
network 192.168.0.0
gateway 192.168.0.200

# Bluetooth networking
iface bnep0 inet dhcp

To extract firmware i used binwalk for linux. No username and password is needed.
[Connected Car] Crunchy_Nuts:
I also tried it with an plug&play ethernet to usb adapter but can't get a connection.

The connection itself is ok, but I don't get an answer from nac.

Tried it with all usb ports including the green one.

That's why I tried uart but as long as you don't know the username and password, you have no chance.

The mime decryption is also really annoying. :rolleyes:

[MENTION=3117564]horuscurcino[/MENTION]

All ports are closed.

Tried it with bluetooth and wifi.
[Connected Car] horuscurcino:
Seems only compatible USB to Ethernet adapters will have the IP configuration assigned.

Found this drivers on the kernel/modules folder:

asix.ko
ax88179_178a.ko
cdc_ether.ko
cdc_ncm.ko
hso.ko
ipheth.ko
net1080.ko
rndis_host.ko
usbnet.ko

We need to check which device uses each of this drivers. For example, ive checked the asix.ko driver refers to "Monoprice USB 2.0 Ultrabook Ethernet Adapter ( Low Power )". A low-cost USB to Ethernet device.

As these drivers are whitelisted i think it should allow the SSH or TELNET access.

The wireless folder has only the internal WLAN driver for the NAC which results on closed ports as you said.
[Connected Car] rui.saraiva:
Yes, all tcp/udp ports are closed - I also tried all 3 USB ports and wifi.

The USB 2 Ethernet might be useful after configuring network interface and running telnetd or sshd - I did install that old firmware without errors, so it doesn't need any certificates/encryption. And that might be a way to run any commands on NAC - a special SWL\*\Firmware\FirmwareList.ini file. BTW, that 18-digit number, the MediaVersion or UpdateID, has always a fixed format, it can identify if it's a firmware update, map update (and specific region map), and the last 10-digits are the compilation time in UNIX epoch format (number of seconds since January 1st 1970).

This is for RCC, but also interesting (pages 5-8) - https fccid (dot) io (slash) YBN-PSARCCA100 (slash) User-Manual (slash) Users-Manual-iPerf-and-RTA-tests-3119672.pdf

---------- Post added at 11:15 PM ---------- Previous post was at 11:08 PM ----------

You can use modinfo on those modules and see what USB vendor/device ids it supports. I've a "Ugreen USB 3.0 to 10/100/1000 Ethernet Network Adapter" (USB ID 0B95:1790) with a Asix AX88179 chip.

sshd and telnetd aren't running. It's easy to extract that information from any spylog. It's also easy to grep the .dlt files (Diagnostic Log & Trace) to extract the dmesg info.

---------- Post added at 11:33 PM ---------- Previous post was at 11:15 PM ----------

Finished uploading the firmware. After unzip it, you'll get the original .tar file that was available in 2017: https gofile (dot) io (slash) ?c=2Jaw5E

Never used the gofile service before, don't know how long that file stays there...
[Connected Car] Crunchy_Nuts:
Damn it, mine is also from Ugreen.:crying:

I also tested it with an USB Ethernet adapter from Dlink and it's not working.

Do you think you have more permissions with ssh via ethernet instead of uart?:confused:

Did you tried to get somehow into the recovery mode?

Maybe with an external keyboard.:confused:

My order from aliexpress (Cables and touchscreen) is still not here. :crying:

Thanks for uploading mate. :good:
[Connected Car] rui.saraiva:
No, but I haven't any other system to test, only the one installed in my car. I don't want to mess around with it (disassemble the hardware).

I didn't try any recovery mode (how?, I also didn't extract the boot loader, the 101010{7,8}_EU_BL.FRG files) but now that you wrote about an external keyboard, I'll check if the kernel has SysRq support. I'll also check the /usr/bin/sem_dm_server binary, the one that handles the \id files.

Also if anyone want to extract the dmesg info from the .dlt files of the spylogs:

strings *.dlt | grep "^\[.\{4\}[0-9]\.[0-9]\{6\}\] "
[Connected Car] peugeotmafia:
Hello if you long press voice button , You will hear “voice logging activated “does anyone knows what is this
[Connected Car] rui.saraiva:
It seems there isn't any USB HID support, so no external keyboard...
[Connected Car] MitchtheMitch:
[MENTION=10684413]rui.saraiva[/MENTION] in the dlt.service file it is subscribed that a connection via ethernet could be established.

Therefore you have to use a d link dub e100 with the correct settings.

It is necessary that the ethernet adapter has to be plugged in when the nac is starting.

Did you try that?

[MENTION=3117564]horuscurcino[/MENTION] you wrote you did extract the firmware, did you extract it only with binwal or over uart?

[MENTION=10691889]peugeotmafia[/MENTION] the button is to advise your embedded system to search musik, Radio channel, to call somebody, to navigate, try to press the button short and say navigate to address.

If you press the button longer it will connect this functions to your phone.

Regards