yashsingh1/xdaforums huggingface dataset:
[Fire HD 8 and HD 10 General] THERAJ12:
Obviously Amazon messed up...I did thru stock recovery which leads to adb sideload
[Fire HD 8 and HD 10 General] DB126:
Huh? Are you fussed over the vanity build ID (known issue) or attempting to update or downgrade?
[Fire HD 8 and HD 10 General] THERAJ12:
I dont give a $h1t over the build # just saying I flashed the latest build from Amazon and root stuck
[Fire HD 8 and HD 10 General] DB126:
Very nice; thanks for clarifying. :rolleyes:
[Fire HD 8 and HD 10 General] el7145:
I actually already tried that this morning...i did get root access to flashfire, and loaded the supersu up, and it was uunsuccesful, prolly the reboot, lost the temp root somewhere in the process...this afternoon i was gonna try to install busybox, and see if that would help rectify the perm root issue, but amazon seemed to have patched the exploit in some way with an update
[Fire HD 8 and HD 10 General] @pops:
Thanks So Much

Finally I got root on My Fire HD 8 2017

Thanks soo much to you as well as everyone involved in this project... I am very thankful and send kudos to you all!
[Fire HD 8 and HD 10 General] diplomatic:
Whoa, that was quick! At least if that's what they intended. I can't say for sure yet if this was to block this exploit. There is still hope. There may be some way to get around this step, but it's possible that they blocked some other things for later in the process....

Warning for others:

FOR NOW DO NOT UPGRADE FIRE TV 2 TO 5.2.6.9
[Fire HD 8 and HD 10 General] fire1951:
Here's my latest attempt at rooting my Fire HD 8 2017 7th generation:

Could some knowledgeable person (@diplomatic, maybe) , give me their opinion as to why the batch file ( I've tried entering the commands one-by-one with the same results) seems to come to a halt ( it seems to be waiting for something...but ,as I said it won't allow me to enter anything). I don't have the option right now to try a newer operating system...but the version of adb that I am using has worked for everything else except this. I know there is other devices that people are concerned with (Fire TV2,etc), but if someone could help, I would appreciate it.

After the last line , I get a flashing cursor but cannot enter any additional commands. Does the last line "root@douglas:/#" not indicate some sort of root? On the fire, a both SuperSU and a root checking app both say that I do not have root. I had to use and older version of adb than what was supplied with the batch file....my PC is on Windows XP. This version has worked fine with other adb stuff I have done with various android devices (including this fire). Can anyone figure bout why I get stuck in this one spot every time or suggest a work around or alternatve way to do this? Thanks.

≠==============================================================================

Microsoft Windows XP [Version 5.1.2600]

(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\D>cd c:\

C:\>C:\root-fire.bat

This script will root your fire. ONLY HD 8 2017 OR HD 8 2016

Do you want to continue?y/n:y

-------------------------------------------------------------------------------[*] Pushing files and removing old files...

2260 KB/s (108480 bytes in 0.046s)

667 KB/s (42712 bytes in 0.062s)

2324 KB/s (334744 bytes in 0.140s)

1383 KB/s (22136 bytes in 0.015s)[*] Setting permissions...[*]Executing exploit...

wait until it finishes... When the exploit finishes, DON'T CLOSE THIS WINDOW

AND FOLOW THE INSTRUCTIONS2.txt

Building symbol table

kallsyms_addresses_pa 0x40b07200

kallsyms_num_syms 67967, addr_count 67967

kallsyms_names_pa 0x40b8bf00

Size of kallsyms_names 816989 bytes

kallsyms_markers_pa 0x40c53700

kallsyms_token_table_pa 0x40c54000

kallsyms_token_index_pa 0x40c54400

Patching credentials

init_task va: ffffffc000f16a20

Possible list_head tasks at offset 0x338

0xffffffc0030c8338 0xffffffc001980338 0x000000000000008c

comm offset 0x5a8 comm: swapper/0

Found own task_struct at node 0

real_cred: 0xffffffc023442000, cred: 0xffffffc023442000

New UID/GID: 0/0

Setting selinux permissive

Found adrp at offset 4

ADRP x0, base is 0xffffffc001086000

Found ldr at offset 28

LDR [x0,4092], selinux_enforce VA is 0xffffffc001086ffc

Selinux is already permissive

starting /system/bin/sh

root@douglas:/ #

≠=======================================================================
[Fire HD 8 and HD 10 General] @pops:
A solution to your problem

There is a semi-automated method for this maybe you can try it out.

I made a full video on the precess here: http://bit.ly/root_fireHD

All the links are included. Let me know if you have other issues.

---------- Post added at 10:02 AM ---------- Previous post was at 10:00 AM ----------

There is a semi-automated method for this maybe you can try it out.

I made a full video on the precess here: http://bit.ly/root_fireHD

All the links are included. Let me know if you have other issues.
[Fire HD 8 and HD 10 General] Drunkpilot:
This is incredibly great! I'm going to give it a whirl. Has anyone tried rooting with magisk?
[Fire HD 8 and HD 10 General] NFSP G35:
Very awesome. Thanks [MENTION=8132642]diplomatic[/MENTION] and [MENTION=4584276]dutchthomas[/MENTION]!

I had already rooted my HD8 using the recent hardware root method, but I just used the method from this thread to root my wife's 7th gen HD8.

The temp root worked flawlessly first try, but I failed to perm-root using the script from supersu.zip mentioned in the OP.

So I tried the method from post #10 , it was easy to follow and worked perfectly.
[Fire HD 8 and HD 10 General] diplomatic:
You said you tried entering the commands one-by-one with the same result. At which command did it freeze? I would imagine with a batch file there could be some glitch where the input would get blocked. But if you type them in manually, I can't see why there would be a problem....

EDIT: You said you need to use an older version of adb. It's very possible that that has something to do with it. Can you try a newer version that's still compatible with WinXP? If not, you can try a virtual machine with Linux. That doesn't cost anything.
[Fire HD 8 and HD 10 General] Zantillian:
I'm getting a Permission denied error when I try to mount /system and copy over su files. Anyone know what's up?
[Fire HD 8 and HD 10 General] teamfresno:
Exit and try again. After you run ./mtk-su -v, try the ls command. If it says permission denied, exit and rerun it. If it gives you the list, the mount command should work afterwards.
[Fire HD 8 and HD 10 General] @pops:
This is normal you have to keep trying. Try rebooting the device and try again as well.

Or even turn on airplane mode although i doubt it will help.
[Fire HD 8 and HD 10 General] LostKnowmad:
Sorry, I'm new to all of this. What is the benefit of making Nova launcher a system app? Will there still be a little delay when pressing the home button when Nova is set as the primary launcher? and, Will everything still run correctly if i delete the fire launcher instead of disabling it? If you get round to replying to my questions i would appreciate it greatly. Thankyou
[Fire HD 8 and HD 10 General] Zantillian:
Took a few tries but it finally worked. Thanks.
[Fire HD 8 and HD 10 General] diplomatic:
Release 4 posted

OK, guys, a new version has been posted. It adds support for the new update of Fire TV 2 and should be more compatible with phones. Let me know if there's anything wrong with it. I removed R3 because there was a bug due to an amateur coding mistake. It might have been bad for some non-Amazon devices.
[Fire HD 8 and HD 10 General] teamfresno:
Thank you, [MENTION=8132642]diplomatic[/MENTION]!

[MENTION=4556232]el7145[/MENTION] back to business? Hahaa
[Fire HD 8 and HD 10 General] diplomatic:
LOL... I think so, [MENTION=6592781]teamfresno[/MENTION]. Not sure about future FW updates, tho.
[Fire HD 8 and HD 10 General] James Bottomtooth III:
Looks like I'm answering my own question! :D

https://xdaforums.com/fire-tv/development/unlock-fire-tv-stick-2nd-gen-tank-t3907002

You guys are fantastic.
[Fire HD 8 and HD 10 General] cybersaga:
I know it's not a priority for you, but I've been trying every new version on my Acer tablet too. I see the param's now, which I don't think I did before. Not sure if that's helpful.

acer_asgard:/data/local/tmp $ ./mtk-su -v
./mtk-su -v
param1: 0x3000, param2: 0x10000
Building symbol table
Error in find_kallsyms_addresses()
Unable to get kernel symbol table
starting /system/bin/sh
acer_asgard:/data/local/tmp $
[Fire HD 8 and HD 10 General] el7145:
yep, got my temp root back, for some reason im still having alot of trouble getting perm root, newer versions of superuser install fine but wont open, and i found an old version that will open but fails to update the su binary...busybox did install correctly...and i made sure to disable amazon update

hopefully more users with a fire tv 2 can chime in if they got perm root to work on tv fire 2

[MENTION=8132642]diplomatic[/MENTION]

it wouldnt be a bad idea to open up a new thread in the fire tv section, other fire tv 2 users might not even know this exploit exists
[Fire HD 8 and HD 10 General] NFSP G35:
Setting Nova as the system app and primary launcher fixed the delay for me.

I would just disable the fire launcher for now. Delete only if you have a good method for getting it back just in case you run into issues.
[Fire HD 8 and HD 10 General] teamfresno:
This is what I get when I'm trying to install it from the zip.

ui_print
ui_print
ui_print *****************
ui_print
ui_print SuperSU installer
ui_print
ui_print *****************
ui_print
ui_print - Mounting /system, /data and rootfs
ui_print
Usage: mount [-r] [-w] [-o options] [-t type] device directory
cat: /etc/fstab: No such file or directory
cat: /etc/recovery.fstab: No such file or directory
ui_print - BAD RECOVERY DETECTED, NO UNZIP, ABORTING
[Fire HD 8 and HD 10 General] D97:
I'm not sure if I'm posting this in the correct spot - it doesn't seem worthy of it's own thread but it is only peripherally connected to the software root (fantastic work, by the way - I pulled my HD8 6th gen out of storage and it's great to have root).

Moving on to my question - has anybody experienced "stealth" amazon app updates? I have disabled pretty much everything amazon on the tablet (including the two OTA apps and I've changed the build.prop) but twice now, Amazon has snuck back on to my tablet. One time it unrooted my tablet (which I fixed by running the exploit again) and last night it deactivated nova launcher and reactivated firelauncher. (Root did not disappear this time though).

I'm not being scientific about this but it seems to have happened around 9:00pm EST both days. Is there an app that I should disable that controls actual updates to the amazon apps? (Although, I think I've disabled / froze everything that could be responsible).

D.
[Fire HD 8 and HD 10 General] Datastream33:
I think if I remember right there is an SDK backup or recovery app that I believe restores system apps. But I'm not sure. I'm not with my tablet at the moment so I can't provide the package name. But I think it's something to look into. Again, i could be wrong :p
[Fire HD 8 and HD 10 General] D97:
Hey - thanks for the advice. I've gone back and frozen / disabled a few more things. We will see if it happens again tonight.

D.
[Fire HD 8 and HD 10 General] diplomatic:
Oh, sorry, I meant to update you on that. I do remember about your tablet and I'm working on it. There are pretty significant changes that need to be made. The problem comes down to virtual addresses in your kernel that look like this: 0xffffff8008082000. While almost all other platforms look like this: 0xffffffc000081000. Not sure if it's the kernel config or the hardware. So I need to detect what kind of addressing mode it's running on and adapt the behavior dynamically. There are a few more pressing issues I need to take care of first then I'll finish this...

Yeah, you're right. There are actually many threads I need to make. I just want to get it up and running on the Fire tablets first. It's funny that not many know this exists yet. I just cracked open most current Mediatek devices out there, and no one has written an article about this yet or linked to it in another forum. Maybe it's better to stay under the radar for now...
[Fire HD 8 and HD 10 General] teamfresno:
I have no delay at all once I made Nova the system app. Smooth as butter!
[Fire HD 8 and HD 10 General] cybersaga:
I figured as much :) no worries. I'm glad to know it's somewhere on the radar though!
[Fire HD 8 and HD 10 General] LostKnowmad:
Since I rooted my Fire HD 8 7th Generation I have been getting pop up ads on the screen. The only apps I have installed are Google apps, titanium and SuperSU. I have sideloaded the official firmware via ADB 3 times in the hopes of it disappearing. It stops appearing for a day ors so and then they pop up and get more frequent. Has anyone had any problems like this? I installed the Google apps via the Amazon tool available on this forum.
[Fire HD 8 and HD 10 General] teamfresno:
No issues here. I've never had that problem before or after rooting.
[Fire HD 8 and HD 10 General] LostKnowmad:
I've tried everything and can't get rid of it. The only apps it could be is Titanium and SuperSU but no one seems to have the same problem and I can't find any solutions online.
[Fire HD 8 and HD 10 General] teamfresno:
That's interesting. As far as I'm aware, there are no ads that come with Titanium or SuperSU. Have you tried running a scan on your tablet to see if there are any malware or anything?
[Fire HD 8 and HD 10 General] diplomatic:
Hold that thought. Someone just wrote an article mentioning [MENTION=6680544]bibikalka[/MENTION] and me.

New Fire HD 8 bootloader unlock method doesn’t require opening the case
[Fire HD 8 and HD 10 General] diplomatic:
Hey, I took a look at the prerooted image posted on the FireTV forum. What it is is basically the stock firmware with supersu bundled separately. It turns out that the included SuperSU apk is version 2.46. Have you tried that one? I also checked the zip installation script. Here is what it says with respect to installing SuperSU on top of the stock image:

ui_print("Installing SuperSU...");
package_extract_file("su/su", "/system/xbin/su");
set_metadata("/system/xbin/su", "uid", 0, "gid", 0, "mode", 0755, "capabilities", 0x0);
symlink("su", "/system/xbin/daemonsu");
package_extract_file("su/supolicy", "/system/xbin/supolicy");
set_metadata("/system/xbin/supolicy", "uid", 0, "gid", 0, "mode", 0755, "capabilities", 0x0);
package_extract_file("su/libsupol.so", "/system/lib64/libsupol.so");
set_metadata("/system/lib64/libsupol.so", "uid", 0, "gid", 0, "mode", 0644, "capabilities", 0x0);
package_extract_dir("su/SuperSU", "/system/app");
set_metadata("/system/app/SuperSU.apk", "uid", 0, "gid", 0, "mode", 0755, "capabilities", 0x0);

So nothing all that special. Mostly the same as what you were doing, except that the apk is installed as a system app. Maybe that makes a difference. But I think version 2.46 is the key here...
[Fire HD 8 and HD 10 General] teamfresno:
I just tried it. SuperSU won't even open up. The only version we could get to open up so far is 1.97. I tried it with 1.97 right now and it's still failing to install the binary. Hopefully [MENTION=4556232]el7145[/MENTION] gets a better result than me later.
[Fire HD 8 and HD 10 General] el7145:
Just a heads up to any fire TV 2 owners in here...I was finally able to get perm root (although the latest su still wont open)

The key was to flash a custom recovery using this temp root exploit. [MENTION=3991724]rbox[/MENTION] was kind enough to create a flashable working custom recovery for use with this exploit...I flashed it using a su shell and now I have custom twrp, I then flashed the latest supersu zip

Supersu still not opening (even as a system app) doesn't matter due to the fact that now we have custom recovery we should be able to flash one of rbox pre rooted stock images. Although [MENTION=8132642]diplomatic[/MENTION] ur prolly right, su version 2.46 is key I'm thinking too

Pick up v7 of rbox custom recovery and flash (post #45) instructions to flash in post #44

https://xdaforums.com/fire-tv/help/potential-fire-stick-2-root-t3901433/page5

Again this is for fire TV 2
[Fire HD 8 and HD 10 General] r42001:
badly need a step by step full tutorial or a video tutorial or easier tool/way for HD 8 (2018) for self like noob :(

please help...

you guys are fantastic! thanks in advance....
[Fire HD 8 and HD 10 General] bibikalka:
Yep, this makes us practically celebrities !!! :D

I just wish that any of the satisfied users chimed in that things actually worked for them ...
[Fire HD 8 and HD 10 General] el7145:
I think the steps are pretty clear...get ur temp root by following the first post...after that gain perm root by doing the step by step instructions from post 10, give it a shot, and if it doesn't work post back, you do have to make an attempt to try, it's how we learn

I do think someone made a video...check post #136
[Fire HD 8 and HD 10 General] r42001:
1st things 1st, thanks for quick response! here is my output, got no id :( don't know, was I right.

C:\Windows\system32>adb push C:\Users\rksar\Desktop\arm\mtk-su /data/local/tmp/
C:\Users\rksar\Desktop\arm\mtk-su: 1 file pushed. 1.9 MB/s (17696 bytes in 0.009s)

C:\Windows\system32>adb shell
karnak:/ $ cd /data/local/tmp
karnak:/data/local/tmp $ chmod 755 mtk-su
karnak:/data/local/tmp $ ./mtk-su -v
param1: 0x3000, param2: 0x18020
Building symbol table
kallsyms_addresses pa 0x40baf400
kallsyms_num_syms 69054, addr_count 69054
kallsyms_names pa 0x40c36300, size 830042
kallsyms_markers pa 0x40d00e00
kallsyms_token_table pa 0x40d01700
kallsyms_token_index pa 0x40d01b00
Patching credentials
init_task va: 0xffffffc000fcea20
Possible list_head tasks at offset 0x338
0xffffffc0030c8338 0xffffffc04e56b138 0x000000000000008c
comm offset 0x5a8 comm: swapper/0
Found own task_struct at node 0
real_cred: 0xffffffc04ff08500, cred: 0xffffffc04ff08500
New UID/GID: 0/0
Parsing sel_read_enforce()
Found adrp instr at offset 4
ADRP x0, base is 0xffffffc00112e000
Found ldr instr at offset 28
LDR [x0,444], selinux_enforce VA is 0xffffffc00112e1bc
Setting selinux_enforce
Selinux is already permissive
starting /system/bin/sh
karnak:/data/local/tmp #

what is next? :confused:

And post #136, saw the VDO, probably it was a 7th gen HD8 with running Fire OS 5.xx. Mine is 8th gen with OS 6.3.0.1 :(
[Fire HD 8 and HD 10 General] el7145:
[MENTION=7918855]r42001[/MENTION]

Good, it looks like u have tmp root, now move onto perm root, follow the step by step instructions from post #10
[Fire HD 8 and HD 10 General] r42001:
[MENTION=4556232]el7145[/MENTION]

again thanks for quick response :) I just tried and before, but no luck :( here is my output

C:\Windows\system32>adb push C:\Users\rksar\Desktop\UPDATE-SuperSU-v2.79-20161211114519\arm64\su /data/local/tmp
C:\Users\rksar\Desktop\UPDATE-SuperSU-v2.79-20161211114519\arm64\su: 1 file pushed. 6.6 MB/s (108480 bytes in 0.016s)

C:\Windows\system32>adb push C:\Users\rksar\Desktop\UPDATE-SuperSU-v2.79-20161211114519\arm64\supolicy /data/local/tmp
C:\Users\rksar\Desktop\UPDATE-SuperSU-v2.79-20161211114519\arm64\supolicy: 1 file pushed.

C:\Windows\system32>adb push C:\Users\rksar\Desktop\UPDATE-SuperSU-v2.79-20161211114519\arm64\libsupol.so /data/local/tmp
C:\Users\rksar\Desktop\UPDATE-SuperSU-v2.79-20161211114519...upol.so: 1 file pushed. 19.8 MB/s (334744 bytes in 0.016s)

C:\Windows\system32>adb shell
karnak:/ $ mount -o remount -rw /system
mount: '/dev/block/dm-0' not user mountable in fstab
1|karnak:/ $ exit

C:\Windows\system32>adb shell
karnak:/ $ mount -o remount -rw /system
mount: '/dev/block/dm-0' not user mountable in fstab
1|karnak:/ $ exit

C:\Windows\system32>adb shell
karnak:/ $ mount -o remount -rw /system
mount: '/dev/block/dm-0' not user mountable in fstab
1|karnak:/ $ exit

C:\Windows\system32>mount -o remount -rw /system
'mount' is not recognized as an internal or external command,
operable program or batch file.

C:\Windows\system32>adb shell
karnak:/ $ mount -o remount -rw /system
mount: '/dev/block/dm-0' not user mountable in fstab
1|karnak:/ $ cp /data/local/tmp/su /system/xbin/su
cp: /system/xbin/su: Read-only file system
1|karnak:/ $

what was wrong? :confused:
[Fire HD 8 and HD 10 General] teamfresno:
Nice! I'll give this a try once I get home. Thanks for reaching out to [MENTION=3991724]rbox[/MENTION] to get this done.
[Fire HD 8 and HD 10 General] el7145:
your welcome...i dont know if ur on 5.2.6.8, i was on 5.2.6.9 and i successfully flashed rbox 5.2.6.8 pre rooted image and it worked fine, funny thing, i still cant open superuser! im gona be curious if you will be able to or not after flashed the pre rooted image

Edit: as per rbox "The superuser app has never worked. Root still functions and you get the popups and such, you just can't enter into the app"
[Fire HD 8 and HD 10 General] teamfresno:
I was on 5.2.6.8. I just flashed the pre rooted image. Works great. Yep, as your edit says...... Superuser won't open. Lol Did you flash the latest version of Superuser after you flashed the pre rooted image? The notification is telling me to update the binary. It works fine the way it is though with 2.46.
[Fire HD 8 and HD 10 General] el7145:
Nope, I have a feeling it still prolly wouldn't open...no biggie, it functions as it should, u just cant get into the app. Yep, I have that same notification to update the binary
[Fire HD 8 and HD 10 General] diplomatic:
LOL.. I wish. Here's another one, not about the HD8, but on Fire TV 2: Amazon Fire TV 2 box running latest software version has been Rooted

Wow, that is some bad advice right there... especially in light of this:

This is what happens when people don't read. The SuperSU directions don't apply to Fire OS 6. You are very lucky, [MENTION=7918855]r42001[/MENTION], that it threw permission denied errors instead of obeying your command when you tried to remount the system partition as read/write. You could have had a bad day as mentioned. If you want to unlock your HD8-2018, see the above link.
[Fire HD 8 and HD 10 General] diplomatic:
Oh, I didn't realize there was a custom recovery. I didn't even check because the bootloader is locked. How does it even work with a locked BL? I looked at it briefly and it seems like the recovery executable is installed to /system and the boot image is left alone. So yeah, I guess that changes things.
[Fire HD 8 and HD 10 General] urbanman2004:
Lucky day for Amazon Fire TV 2 owners. I will be posting a full and comprehensive guide within the next hour regarding "How to root the Amazon Fire TV 2 box running latest software version".

---------- Post added at 08:11 AM ---------- Previous post was at 08:06 AM ----------

Your exploit started a wildfire. I was just able to root my AFT2 device. Just because a device doesn't have a unlocked bootloader doesn't mean it can't get rooted. Hell, I used to own a Samsung Galaxy S7 that could be rooted [although the aftermath cause the phone to be unstable], but the bootloader could not be unlocked due to Samsung's "closed walled garden" shenanigans.
[Xiaomi Mi 8 Lite Questions & Answers] soulburnerms:
guys

this is what happened

inserted a second sim card

but the phone didn't detected it

done a hard reset

after restarted, locked on miui screen

but, i haven't made a miui account, so, no way to recover nothing.... any ideas? using the latest Miui 10
[Honor View 20 Questions & Answers] xRobert1016x:
Hey everyone, can someone that has a View20 send me the serial number and imei of the phone? Thanks.
[Honor View 20 Questions & Answers] md07:
after used to getting gift Fornite, ok?