yashsingh1/xdaforums huggingface dataset:
[Moto G6 Plus Questions & Answers] luigi 1979:
I think You have to pay if You send your phone in assistance cause your warranty Is void if You unlock bootloader.if You don't want You can update mannually by fastboot.if You download Lenovo smart assistant You can update manually your phone with official firmware fastboot without problems.
[Moto G6 Plus Questions & Answers] MrMatnenko:
hope, it will be possible to turn the phone back in 'locked state' at authorised servise. i'm desperately ready to pay for this option..
[Moto G6 Plus Questions & Answers] WoKoschekk:
Had same problem with system integrity after pie update. Fixed it by flashing Magisk. Now I'm able to receive updates and use Google Pay.
[LG V20 Questions & Answers] DelphinusMinor:
In anyone else obsessed with checking the dish to see if it is empty? I find myself waking up in the middle of the night to check and add more treats to it. I don't even know what it is I am feeding but man, it eats constantly.

I am also looking into options to make sure the dish is full on a regular basis by seeking help from family members who can come into my room to check the dish and refill it when need be.

I have no idea what is even being fed, or what it's disposition may be, so I don't want it to be sour at me when it goes hungry.

It's stressful. Why did they even add that?
[LG V20 Questions & Answers] pistacios:
The treats are for catching cats. Add the quick settings tile and you'll catch one periodically.

https://android.gadgethacks.com/how...idden-android-nougats-quick-settings-0173347/
[LG V20 Questions & Answers] DelphinusMinor:
Interesting. When I tap the ten time plus the 11th long press all I get is a squilb. No cat.

Attaching the pic.
[LG V20 Questions & Answers] DelphinusMinor:
I'm also on Oreo. The other instructions are for Nougat. I am always filling the dish, but have yet to see a cat.
[LG V20 Questions & Answers] Ak7J4:
The Cat thing was only for nougat. That was its Easter egg. Oreo's is the squid. The dish probably won't work unless you downgrade to nougat. I think you can download a app from the store tho which has all versions of Andriod Easter eggs.
[LG V20 Questions & Answers] DelphinusMinor:
Yea, the dish remains but there is only a squilb now instead of a cat.
[LG V20 Questions & Answers] pistacios:
Marshmallow land is still hidden in Oreo, I found the shortcut using an activity launcher. Maybe the cat game is in there somewhere?
[Fire TV General] bibikalka:
Update - October 5th, 2019.

Update : The unlock is now available. Thanks to all who donated! And thanks to [MENTION=9667509]xyz`[/MENTION] and [MENTION=7104332]k4y0z[/MENTION] for all the hard work to make it happen!

https://xdaforums.com/fire-tv/orig-development/unlock-fire-tv-stick-4k-mantis-t3978459

The original post

[DONATE to k4y0z] - BL UNLOCK / TWRP for Fire TV Stick 4k :

On the heels of a very successful HD10 2017 funding (link) & bootloader unlocking (link) campaign :D, let's start the same for Fire TV Stick 4k!

Please donate to [MENTION=7104332]k4y0z[/MENTION] if you want to see Fire TV Stick 4K fully unlocked! [MENTION=7104332]k4y0z[/MENTION] will use the funds to purchase 4k sticks, and more than 1 may be required depending on the required level of hardware tinkering & the number of bricks created in the process ;)

And no, I do not get ANY commissions for this (other than the fun of using fully unlocked Amazon devices). :D
[Fire TV General] Bahia155:
tomorrow donate:cyclops:

thanks
[Fire TV General] mircam:
10euro sent from me to PayPal adress, good luck!
[Fire TV General] Michajin:
Donation sent.

Thanks [MENTION=7104332]k4y0z[/MENTION] for all your work, awesome to see new development in rooting and unlocking. We get to own our devices again! Great job!
[Fire TV General] Bahia155:
Donation sent.

Thanks [MENTION=7104332]k4y0z[/MENTION] for all your work
[Fire TV General] bibikalka:
Thanks to everybody who contributed so far! But let's get this over the finish line! Don't be shy, step forward ;)
[Fire TV General] Michajin:
Donating more tomorrow. No one seems to care or waiting to get it for free. It's Amazons best current device.
[Fire TV General] Michajin:
Another donation sent. I should just give him one... Lol
[Fire TV General] xionbunny:
looking forward to the outcome of this.
[Fire TV General] Michajin:
No love for the 4k?
[Fire TV General] bibikalka:
Thank you guys for donations! [MENTION=7104332]k4y0z[/MENTION] is committed to getting this done. He communicated that the slight delay is due to trying to catch 4k being on Fire sale in Europe.

It's just HD10 unlock happened so quickly that everybody's expectations got raised quite a bit. ;)
[Fire TV General] bibikalka:
4k sticks are on sale now for 35 euros, so good things will soon come to those who patiently waited :D

[MENTION=7104332]k4y0z[/MENTION] - please do your magic :D
[Fire TV General] b1u3m3th:
Any updates on this? I'm planning on donating when I get paid next week. I'm benefiting greatly from your HD10 2017 hacking!
[Fire TV General] iLLNiSS:
Read the topic....
[Fire TV General] Michajin:
Yes, it was a post to keep the thread higher in the general post for advertising. I have donated. It was directed at those who want root and unlock, but do not contribute in any form.
[Fire TV General] Michajin:
Any updates? no rush, just curious....
[Fire TV General] Michajin:
If this helps, i shorted one of the pins and ran the script from the HD10 exploit.

[2019-04-27 13:06:52.953983] Waiting for bootrom

[2019-04-27 13:12:07.589945] Found port = /dev/ttyACM0

[2019-04-27 13:12:07.600827] Handshake

Traceback (most recent call last):

File "/usr/lib/python3/dist-packages/serial/serialposix.py", line 501, in read

'device reports readiness to read but returned no data '

serial.serialutil.SerialException: device reports readiness to read but returned no data (device disconnected or multiple access on port?)

During handling of the above exception, another exception occurred:
[Fire TV General] bibikalka:
This seems interesting! Why don't you post a nice high res picture of what you shorted?

[MENTION=7104332]k4y0z[/MENTION]
[Fire TV General] n0ryn:
Maybe just lsusb command
[Fire TV General] Michajin:
it showed mediatek inc. MT65xx preloader. but i have seen phone showing up to looking through my log
[Fire TV General] Michajin:
This is what i shorted to get into preloader. Seems like i have gotten phone too. I know it was stuck in preloader after this and i had to short it a few more times to finally get it to boot again....
[Fire TV General] Sus_i:
I thought you confirmed an other clk point in an older post? :confused:

Edit, link to the post with picture...

https://xdaforums.com/showpost.php?p=78988789&postcount=32
[Fire TV General] Michajin:
You're right, its been 2 months and i forgot that worked also and it was a lot easier. I will get try both again this weekend and verify what lsusb shows under both to make it clear.
[Fire TV General] Michajin:
i did some checking, the script initiates by shorting both ways. I could not however see if i had anything but the preloader. It didnt seem to stop the 4kstick loading. Trying to lsusb all i could see was the preloader for a second. I am not that great with ubuntu though....
[Fire TV General] Sus_i:
Thank you for testing. :good:

Shorting the clock line should stop the cpu and prevent fireOS loading.

I don´t know much about circuit layout at all, but if I look at the picture from the board, I would assume that the clk line resistor must be near or right by the MT 8695 SoC. So the marked pins at the picture from [MENTION=4381075]hwmod[/MENTION] are presumably wrong, because the SoC is on the other side of the board!? The other MT 7668 chip on the second picture is for wifi/bluetooth connectivity, probably not useful for us.

Link (picture from both sides) at aftvnews:

http://www.aftvnews.com/new-mediatek-rooting-method-for-fire-hd-8-tablet-may-lead-to-rooting-the-fire-tv-stick-4k-fire-tv-stick-2-and-fire-tv-2/amazon-fire-tv-stick-4k-2018-circuit-board/
[Fire TV General] Michajin:
i will do more testing because i know i locked it up on boot a few times shorting things and i think it was the the same as the hd10 on boot (not preloader, but phone) and i had to short it a few times to get it to boot again, i had a bad USB cord that affected the results. I will expedite my testing if needed, i don't care if i brick one. I am just trying to help...
[Fire TV General] Sus_i:
Thank you. Take a wire resistor for shorting, just in case you short a power line ;)

Maybe [MENTION=4381075]hwmod[/MENTION] takes a look on the board pictures again. Think the 4k stick is difficult, compared to the second gen stick, because of the two MT chips and a different layout.

On the old first gen fire tv, the resistor in the clk line was about 0 ohms, simply bridging fixed a broken resistor. Maybe it´s easier to find the resistor with a digital clamp meter, if the resistor on the stick is about 0 ohms too. Don´t know, just a idea.

EDIT, for the EMMC datasheet (pinout etc), g00gle this, first hit:

KLMxGxxETx-B041(eMMC5.1 e·MMC)1.21
[Fire TV General] iLLNiSS:
Looking at the pdf for the eMMC, i would lean towards one of these pins being CLK.
[Fire TV General] Sus_i:
:D

Looks good :good:
[Fire TV General] Michajin:
ok, did some more testing.... ran tank script from rasberry pi3, shorting [MENTION=4381075]hwmod[/MENTION] suggestion.

pi@raspberrypi:~/Desktop/tank2/amonet $ sudo ./bootrom-step.sh

[2019-05-05 21:53:42.061068] Waiting for bootrom

[2019-05-05 21:54:49.318745] Found port = /dev/ttyACM0

[2019-05-05 21:54:49.321234] Handshake

[2019-05-05 21:54:49.326930] Disable watchdog

* * * Remove the short and press Enter * * *

lsusb during this....

pi@raspberrypi:~ $ lsusb

Bus 001 Device 005: ID 04f2:1060 Chicony Electronics Co., Ltd

Bus 001 Device 025: ID 0e8d:0003 MediaTek Inc. MT6227 phone

Bus 001 Device 004: ID 413c:3012 Dell Computer Corp. Optical Wheel Mouse

Bus 001 Device 003: ID 0424:ec00 Standard Microsystems Corp. SMSC9512/9514 Fast Ethernet Adapter

Bus 001 Device 002: ID 0424:9514 Standard Microsystems Corp. SMC9514 Hub

Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

Shorting the other suggestions gave me pre-loader almost everytime...

It is currently staying on with the "MediaTek Inc. MT6227 phone" connected. Anything i should read?

Any interest?
[MENTION=7104332]k4y0z[/MENTION] [MENTION=6680544]bibikalka[/MENTION]
[Fire TV General] k4y0z:
Awesome! :) :good:

I haven't had much time to work on the 4K stick, but when I played with it I wasn't able to get into bootrom/phone mode.

So this is very good news, will try if I can reproduce this and get a bootrom-dump.
[Fire TV General] Sus_i:
Thank you. Phone is the right message, isn´t it? :o

You said it didnot seem to stop the 4kstick from loading, but if it stops all should be fine :good:
[Fire TV General] Michajin:
i have had better luck with my pi3 running his scripts. i believe "phone" is the bootrom. This is what i have seen with the fire7, fire8, and stick(tank) during the unlocking process.
[Fire TV General] Sus_i:
Awesome :D Thank you! :good:
[Fire TV General] Michajin:
Great, thanks! i can't really see the exact pin i am shorting, it is slightly under the shield. I am leaving it in bootrom/phone mode. If there something i can do to read the boot-dump, let me know, i am stuck in it now. lol
[Fire TV General] k4y0z:
What do you mean you are stuck now?

It should boot up normally if you unplug it and then plug it back in.
[Fire TV General] Michajin:
i'm not stuck, i was just letting it stay there... I have been here before, but that was months ago and no one was looking into unlocking it at that time.
[Fire TV General] k4y0z:
Ah got it.

I must have missed [MENTION=4381075]hwmod[/MENTION]s post, and that you were already successful in getting into bootrom.

No need to keep it there, you will have to redo the handshake anyway once I got something viable.

It would be more beneficial If you could try to reproduce getting it into bootrom and point to what exactly you shorted.
[Fire TV General] Michajin:
Sorry about the crap picture, but this is the one i short i always get the "remove short to continue" on the tank script.... its a little scratched up now... lol

just something odd though, it factory reset during my tests and took the update...

Hoping the 2nd picture adds some clarity.... too much beer, and yes it is all scratched to heck... lol
[Fire TV General] n0ryn:
Where to donate?
[Fire TV General] Sus_i:
Wow, ouch. ;) Is you stick ok? Boots up with the scratches?

I have just disassembled my 4kstick, I feel the fu**ing resistors are much much smaller and tinier as on the 2gen stick :eek:

Should buy a microscope now. Shocking. Now I understand why you take too much beer :D lol

Measured the resistor you shorted, my meter says about 1 ohms. In case of a damage, "maybe" the old method from the first gen fire tv (low voltage emmc rooting thread) comes handy, possible solution was (if I remember correct) resolder the old resistor in or bridging the pads with a little solder... but solder such a small tiny thing is definitely not easy.

Edit, I measured the three resistors above the bigger resistor too, was about 7,5k ohms. Probably to much for a clk line.
[Fire TV General] Michajin:
Yes, it boots just fine, works like normal. Most of the scratching was done with a small screwdriver that was pretty effective shorting to the cover. It was scratched really bad when i got frustrated that i could not duplicate my previous results only to find i had a bad usb cable. I was able to boot into bootloader 4/5 attempts using the pin idetifies by hwmod suggested from this picture (the clk to ground on the shield). The safety pin scratched it a lot too during my frustrations... No way would i try soldering on this.
[Fire TV General] iLLNiSS:
That's likely due to the pad you're shorting very likely being one of the DATA lines. Up in that area of the chip is mostly the DAT pins for the BGA. You likely corrupted the flash.

EDIT: I was messing around with the pad you were using, it was unsuccessful in my case and it did corrupt some of the flash. Some of my installed apps stopped working and had to be reinstalled.
[Fire TV General] Sus_i:
I just tried it and can confirm, you're right, the marked one from your picture is the CLK. It is the third one of the row, the one next to the shield (Not the one under shield). At the picture from [MENTION=4381075]hwmod[/MENTION] (picture from post 42 in this thread) it's the one marked as cmd, just to be clear.

I shorted the resistor and the bootrom-step script tells remove the short, lsusb shows mediatek phone. Did it five times with 100% success rate. :D

[MENTION=7643555]iLLNiSS[/MENTION]

My stick boots just fine, no factory reset or update at all, maybe you touched the one under the shield?
[Fire TV General] Michajin:
Thanks, with all the scratches on mine it was hard figure out what one to be sure.
[Fire TV General] Bahia155:
so?

doing short is already reset and I can remove bootloop?

Thank you
[Fire TV General] Michajin:
no idea, shorting either the data or one of the other pins near there corrupted something. Mine did a factory reset while [MENTION=7643555]iLLNiSS[/MENTION] it corrupted some apps. I would hold steady until a unlocking/root solution is complete. This is a risk you can take, but you could brick it or fry it. I think i was pretty lucky.
[Fire TV General] Bahia155:
Ok could you tell me the exact steps to short circuit, I can contribute with my experience,

I have two fire stick 4k in bootloop.

Sorry for my english, I`m speak spanish. :\ thks
[Fire TV General] Michajin:
take it apart, and remove the top shields. Post 39 shows where i was able to get into the bootloader, i believe i was shorting the pin to the right of this picture,. I was running the script for unlocking firestick2 (tank). I was in this area when it factory reset. i was touching the pin and the remaining shield (where i bent it up). I was shorting most of the pins in this location during testing, but from what i can gather it was to the right. This could permanently damage your firestick4k. I shorted most of the pins there and mine still works. But, do this at your own risk...
[Fire TV General] Bahia155:
Guys,

I could reset it!

It is indeed where it says in the photo "cmd" where the short one is.

The script did not work for me.

The script did not work for me.

I STAY IN "It should now say Waiting for bootrom." AND HE DID NOTHING

Now..

someone installed the google services and does not bootloop?

If so, could you tell me how they did?

I attached the photo, the capacitor does not exist anymore and is walking in perfect conditions!

Thank you

Picture
[Fire TV General] Michajin:
The script shouldn't work, it for the tank and a different pin. I just mentioned that it what i was doing when it reset, in case it was related.

All efforts to install google services i have seen resulted in a boot loop.

The capacitor is gone?

Well awesome you booted back up again! nice job
[Fire TV General] Bahia155:
so is! the capasitor is not anymore!

and keep walking perfect

Any problem that comes up notice.

Then you can not install google services yet?

Thank you
[Fire TV General] Michajin:
Stay away from Google services until there is a unlock and recovery in place or someone finds a safe way to install. I see more and more people boot-looping from attempts to install. If you are sure you can factory reset every time by shorting that then if you want, try. What are you needing google services for> There are other options...
[Fire TV General] Bahia155:
How do I see YouTube through an app and not through a browser?

without google services
[Fire TV General] Michajin:
I think i have made youtube vanced work with microG. A OTG cable and mouse was required to make it semi-functional though. XDA labs for vanced. A browser based version smart youtube is a very good app.

smart youtube- https://smartyoutubetv.github.io/

xdaLabs - https://www.xda-developers.com/xda-labs/

---------- Post added at 07:13 PM ---------- Previous post was at 07:03 PM ----------

---------- Post added at 07:14 PM ---------- Previous post was at 07:13 PM ----------

Sorry to stray off topic here XDA gods... :)

I need some root... lol
[Fire TV General] mircam:
Hi, I'm stucked. Stick is in fastboot:

https://drive.google.com/open?id=0B0zUZMSVn8ifWDRTb183MmFLWi13RUxIZ0g2cnRyc0xBNGFN

I want to do a factory reset, please help me guys, Thank you!
[Fire TV General] Sus_i:
For the 4kstick the unbrick/root solution isn't ready.

If you have the second gen stick, try this one: https://xdaforums.com/fire-tv/development/unlock-fire-tv-stick-2nd-gen-tank-t3907002

The youtube.com app is back in the (european) amazon app stores, maybe with sideload it works in other countrys too.
[Fire TV General] mircam:
Stick is 4k version. I want to reset to default settings when stick is connected as Phone. Is this possible?
[Fire TV General] Sus_i:
[MENTION=5231992]mircam[/MENTION]

Not jet... it's not ready.

The exploid needs to be ported to this device, as it has a different soc, bootrom etc... a lot of work for k4y0z
[Fire TV General] mircam:
OK, thanks guys and special thanks to k4y0z :good: keep donating...
[Fire TV General] Bahia155:
Hello guys

I returned to do the same procedure with my second fire stick in bootloop ,

and I have not managed to restore it.:eek:

now if I do not have more knowledge to carry out the factory reset

any ideas?:rolleyes:

Thank you:cool:
[Fire TV General] Sus_i:
Be careful, your picture looks like you opened the shield with a big hammer and a chisel :D

Return the stick to the seller or wait for the unbrick/root solution from [MENTION=7104332]k4y0z[/MENTION]
[Fire TV General] Fugms:
Donation sent. Thank You! :good:
[Fire TV General] mircam:
I am frustrated :) ... I have this 4k stick in Phone mode and I cannot format/restore it. No news?

EDIT: thanks to [MENTION=7104332]k4y0z[/MENTION] my stick is alive.
[Fire TV General] vaxoiva:
any news?
[Fire TV General] Bastaerd:
No post means no news ;)
[Fire TV General] Harry44:
I'll happily donate $100 to the cause if/when we get BL Unlock + TWRP.
[Fire TV General] Johnnycool18:
Is this still a work in progress? I would like to donate if there is still work being done. Thanks guys.
[Fire TV General] stegg:
same
[Fire TV General] k4y0z:
Sorry guys on the 4K SOC the bootrom-exploit has been fixed.

So another way to get an unlock needs to be found.
[Fire TV General] Rortiz2:
With this you mean that they fixed the microloader stage (Hacked fastboot) only, or all the options with BootROM: read, write, etc.

BTW: If we can still reading & writing there's no much fun since stick 4k uses nougat and we need a patched boot.img for disable DM-Verity.
[Fire TV General] k4y0z:
I mean they fixed the bug in the bootrom that allowed reading/writing EMMC and downgrading RPMB.

I haven't really checked about the LK-exploit, since it won't be usefull if we have no way of writing it.
[Fire TV General] Michajin:
Any idea what version of fOS blocked it? i have a one on 6.2.6.3
[Fire TV General] k4y0z:
It has nothing to do with the FireOS version. The bootrom is read-only and part of the SOC.
[Fire TV General] k4y0z:
We are back in business
[Fire TV General] iLLNiSS:
Excellent! Can’t wait to try it out :)
[Fire TV General] DanielF50:
Just curious, could this be expanded to cover devices such as sloane & tank etc? I assume the way the mediatek chip is locked down is similar between devices?
[Fire TV General] k4y0z:
Tank already has an unlock
[Fire TV General] DanielF50:
Indeed, but as far as I'm aware this unlock method, nor the current sloane root method, work with 5.2.7.0 and above?
[Fire TV General] k4y0z:
I don't know about sloane, but the tank unlock works with any version.
[Fire TV General] DanielF50:
Ah, okay. Thanks! Been looking to remove some bloat from my "tanks" so I'll have to give that a go, thank you :)
[Fire TV General] Sus_i:
I don't own a Sloane box, but afaik it isn't unlocked until today. They patched the mtk-su root method and also the (imho preloader based) unbrick image with 5.2.7.0.

If you would like to look into this, here is the latest OTA package and here is a whole dump of the emmc (don't know what OS, probably 5.2.1.x from about 2018).

Maybe your next big notch in mtk unlocking?!? :p ;)
[Fire TV General] k4y0z:
I don't have that hardware either, but since it uses the same SOC as suez (MT8173) the bootrom-part from amonet-suez should work on the FireTV 2:

https://xdaforums.com/hd8-hd10/orig-development/unlock-fire-hd-10-2017-suez-t3913639

While it's not a full unlock, it can be used to downgrade to a rootable firmware-version.
[Fire TV General] bibikalka:
Are people supposed to open firetv2 to short contacts for downgrading? Otherwise how would they get into bootrom to clear rpmb and have a successful downgrade?

Perhaps a little fastboot bricking exploit could go a long way? ;) This was the early scheme for Douglas - flash hd8 18 bootloaders, use hacked karnak fastboot to flash rooted system, restore bootloaders back to Douglas.

The minimal scope would be to clear RPMB, and replace PRELOADER/LK/TEE to earlier versions which would allow sideloading a rootable FireOS (via mtk-su), then the standard FireTV2 procedure via mtk-su.

Now, naturally this cannot take any time away from the 4k stick unlock !!! :D

[MENTION=3991724]rbox[/MENTION]
[Fire TV General] k4y0z:
Well yes, that is an option, it is also currently done on tank this way.

As said, I don't have that hardware.

This is what I was thinking, although not sure how you would sideload on the FTV2.

It won't ;)
[Fire TV General] k4y0z:
Here we are: https://xdaforums.com/fire-tv/orig-development/unlock-fire-tv-stick-4k-mantis-t3978459
[Fire TV General] Rortiz2:
You literally rock dude;)

Mediatek Amazon and Mediatek are lost :p
[Samsung Galaxy S10+ Questions & Answers] Nmc_alves®:
What do you think about this resolution???

https://photos.app.goo.gl/Li6FGEgzwXU9XtBeA

4096x1940