yashsingh1/xdaforums huggingface dataset:
[Fire TV Original Android Development] brick00444:
Rortiz2 , k4y0z I would like to donate one of my "Sloane" boxes to either of you. I really appreciate what you guys do for everyone. The box goes through the unbrick fine and install roms fine but I can't get it to boot. It gets through the twrp screen and then the fire tv splash screen then goes black screen. I will pay shipping and you can have it. Thanks again for all you do. Pm me if you want it.
[Fire TV Original Android Development] Rortiz2:
Thanks dude, I appreciate it a lot.

Anyway, if [MENTION=7104332]k4y0z[/MENTION] wants it will be better, I'm almost sure that he can unlock the bootloader of sloane. Obviously if he wants and has time.:)

I will wait for his response.

Cheers.
[Fire TV Original Android Development] abc360:
I have the same problem. How to fix?
[Fire TV Original Android Development] brick00444:
I didn't get it fixed. Maybe a bootloader problem?
[Fire TV Original Android Development] Rortiz2:
Did you by casuality ran the gpt fix?

Regards.
[Fire TV Original Android Development] brick00444:
I just tried it. Got the same results (no boot) black screen.
[Fire TV Original Android Development] Rortiz2:
About RPMB

Hi,

I've been doing some tests with RPMB. Before nothing, I need to thanks [MENTION=5213625]Sus_i[/MENTION] and [MENTION=2769839]DanielF50[/MENTION] for testing a few stuff and for the UART log (Sus_i).

So yeah, you where right [MENTION=7104332]k4y0z[/MENTION], the RPMB key-derivation is obviously pretty different in sloane, it's "made-by-amazon" so all the rpmb write procedure is different on this device. As my friend t0x1cSH suggested:), I looked at this "magic" (which seems RPMB magic value from what I saw while reversing engineering the preloader):

https://github.com/R0rt1z2/amonet/blob/mt8173-sloane/brom-payload/drivers/mmc.c#L804

Well, I opened up suez's preloader as an example and looked at where are those values to get a reference. I easily found them but, trying to find them in sloane was a no-go:(

To mess up more the things, looks like the addresses that sej_* functions are using are not in sloane's preloader aswell. (sej_init, sej_run, etc).

I guess amazon done this different here, and would require more research... I know your time is limited (i'm sorry to constantly ask help) and maybe you can't help here in anything but just in case if you read this and you have any clue of what's going on.

I need to say one thing, we flashed 5.0.5 bootloader (lk) in a 5.6.2.8 device (ran amonet before which flashed 5.6.2.8 images) and for our surprise it didn't bricked:confused: I tought it would be booting from the bootloader backup partition (lk2) but I cannot find anything about it in the partition table neither in the gpt parsed dump of amonet. So if this means we can boot old bootloaders which may be the ones vulnerables, we shouldn't care about downgrading RPMB, right?

I know the original use of downgrade RPMB (by xyz`) was to use a vulnerable bootloader and + bonus use mixed preloader/tz/lk images (which helped a lot in ford), but if we only need vulnerable lk here, is really worth to get RPMB working?

Sorry for the big text and thanks for your time. If you would be interested in brick's sloane it would be really nice, I prefer that you get that sloane more than me:)

EDIT: In case if helps, here's the UART log (courtesy of Sus_i :)) of a "failed" downgrade of RPMB. Actually main.py was modified only to read RPMB and print it, then downgrade it and print the "downgraded" rpmb:

https://mega.nz/#!YkgGXI6b!DAHP4vitW2omdKHTLRVzU2mJ43tr-mNndu0Lvj859Ac

Best Regards.

R0rt1z2
[Fire TV Original Android Development] k4y0z:
I don't really have the time currently to look into it.

Even if I got a sloane I probably won't be able to spend time on it for a while.

If you were able to load an old LK, is it possible, downgrade-protection isn't even implemented on sloane?
[Fire TV Original Android Development] Rortiz2:
Hi,

Thanks for your response, very appreciated as always [emoji4]

I see, no worries haha, I will talk with brick then.

About RPMB, yeah it's a bit crazy lol. I can confirm you flashing 5.0.5 tz and preloader kills the device in a "b'RADYREADYREADY" aka "MT65xx Preloader" loop. But if you only flash lk it doesn't bricks.

Will do more testing with 5.0.5 bootloader.

Best Regards.

R0rt1z2.

Enviado desde mi Aquaris M8 mediante Tapatalk
[Fire TV Original Android Development] DanielF50:
Just curious - can you boot twrp manually (selecting with keyboard), or get a network connection via twrp (with ethernet)?

I have a sloane that I think is "superfcuked" (for the lack of a better word) - HDMI output works in twrp, so does USB, but networking doesn't & after flashing a pre-rooted rom and pushing adb keys, it'll boot but with no video output (and when connected to via vysor, won't connect to wifi/bluetooth/ethernet). Honestly, I think it's unrepairable.
[Fire TV Original Android Development] brick00444:
Yes I can access twrp and flash roms no problem. I played a little with it today and had some weird results. If I flash one of the latest roms it bootstwrp them the black screen with fire tv then the tv says "no signal". Today I tried the oldest one of rbox's roms that still had a working link (I think it was 5.24.2) and then when I rebooted it went to twrp then black screen with fire tv on it, then dark screen but it didn't show the "no signal" it just stays dark. I wish the real old links worked I'd try those too.

I should have said that I can see it is backlit with the older rom
[Fire TV Original Android Development] happyghoul:
It worked! I'm so happy!

don't run the script yet

power up the firetv

run the script

short until script says to stop shorting

the error message i got was "protocol mismatch"

did that many times with no change in results

don't power up the firetv yet

run the script

power up the firetv

never even got to the short part before i got the "protocol mismatch" error

don't power up the firetv yet

run the script

short the dat0 pin to ground

power up the firetv

now this got me somewhere; it finally told me stop shorting the pins!

but it ended with "readiness to read but returned no data" error

did that many times as well with no change in results

so i changed up the order of things yet again on the last attempt and it finally went through!

don't run the script yet

don't power up the firetv yet

short the dat0 pin to ground and keep it shorted until script tells you to stop shorting the pins

power up the firetv

wait a few seconds

then run the script

i was just about to throw in the towel tbh

i don't want to brick my device to test the steps again for fear i might not be able to reproduce the results

but to those who are still having trouble, try the steps in a different order

i screwed it up when i wiped my system with the intent of reflashing the prerooted rom but then google opinion rewards distracted me and.. i forgot to flash it before rebooting

thank you, all that were involved, in making this unbrick possible
[Fire TV Original Android Development] errut:
[MENTION=10545031]happyghoul[/MENTION]

i`m in the same situation: "i screwed it up when i wiped my system with the intent of reflashing the prerooted rom but then google opinion rewards distracted me and.. i forgot to flash it before rebooting"

I`m now looking for a practical way to short the very tiny dat0.
[Fire TV Original Android Development] happyghoul:
You know those bread tie wires you get when you buy electronics that include wires? Those are perfect.

Strip the wires and thread one end through the grounding hole several times to make a coil and tighten the coil then use the other end to contact the dat0 pin.
[Fire TV Original Android Development] errut:
Perfect idea, but i need also a bigger magnifying glas.
[Fire TV Original Android Development] errut:
Following Problem:"sudo apt install python3 python3-serial adb fastboot " is not found in the update Package.

error:

"desinfect@desinfect:~/Desktop/amonet-mt8173-sloane$ sudo ./bootrom-step.sh

Traceback (most recent call last):

File "main.py", line 6, in <module>

from common import Device

File "/home/desinfect/Desktop/amonet-mt8173-sloane/modules/common.py", line 6, in <module>

import serial

ModuleNotFoundError: No module named 'serial'

I figure that the AFTV must be powered?
[Fire TV Original Android Development] Sus_i:
You may grab the latest ubuntu live package and burn it to an usbstick with rufus...
[Fire TV Original Android Development] errut:
i have ubuntu 18.04 live
[Fire TV Original Android Development] genica:
Peppermint live cd works well
[Fire TV Original Android Development] daffung:
so i found my aftv 2nd Sloane lying around thought id give it a shot...

ran the script, no errors until the scripts says force reboot to twrp... but problem is it doesn't boot to twrp.. i keep getting amazon white logo, then the flashing "orange" light then reboots. then its loop from there... just white amazon logo... ran the script almost 2-3 times

i ran both

sudo ./bootrom-step.sh

sudo ./gpt-fix.sh

it completes the script but ends up on white amazon logo.. does not boot to twrp...

i also tried rbox de brick but stuck at reading partition 0%

any ideas?

how i short it, i use a pen with spring i found then expanded it then i hook it through one of the holes on the board then straighten the point.. usually it takes a me a minute to get sucesss or remove short..
[Fire TV Original Android Development] errut:
ok, Pepermint worked :[2020-02-20 10:01:19.839246] Waiting for bootrom, i should short DAT0

now my results.
[Fire TV Original Android Development] genica:
Yes, it works best to short straight across from ground to DAT0 and not up and down. May take a few tries

---------- Post added at 10:01 AM ---------- Previous post was at 09:05 AM ----------

"now my results"

Like I said, it will probably take a few tries
[Fire TV Original Android Development] Rortiz2:
Hi,

Check lsusb and see if it's in

MediaTek Inc. MT6227 phone

Regards.
[Fire TV Original Android Development] errut:
Yes it is there.
[Fire TV Original Android Development] Rortiz2:
Weird...

Keep trying until the script runs correctly...

Regards.
[Fire TV Original Android Development] errut:
I´ve done it. Thanks to the board. i`m now on sloane 5.2.7.2

Now i`m looking for Prerooted Sloane LineageOS, i couldn`t find it yet, and the to get it installed. Last time i goofed it up.
[Fire TV Original Android Development] Rortiz2:
Glad that you got it working :)

LineageOS thread is here:

https://xdaforums.com/fire-tv/general/rom-lineage-12-1-t4016981

It's kind of stable but keep in mind that OMX doesn't supports hw acceleration actually...

Regards.
[Fire TV Original Android Development] LazorBlind:
Thankful to find this. I honestly never thought I would get this thing rooted!

Since I had a hell of a time doing the short with my shaky hands, and will probably need to unbrick my Sloane again at some point (I like to mess with things I barely understand, and bricked it almost immediately after I got root by trying to install Magisk) I decided to install a button and mount it into the side of the case to I don't have to fiddle around with the short next time.

My soldering and DIY skills are pretty "meh" right now, so the wire on DAT0 is just BARELY soldered on and encased in super glue to keep it from popping off, and the mount job for the button (which I pulled from a broken mouse) isn't super clean. I even used glue and stacked up a bunch of tiny pieces of paper to fill in the gap from going too deep. Not to mention I didn't realize untill AFTER I cut the hole that it was positioned where one of the clips on the bottom piece was, so I had to cut off most of that clip to be able to put everything back together.

It works like a charm though! :D

I took some pictures but I cannot for the life of me figure out how to attach them (using Puffin on the Fire TV)

Assuming I am not allowed to attach things since this is a new account.
[Fire TV Original Android Development] ForForkSake:
Why are you soldering? That isn't required? You short it for a short period.

Please ignore the above, I read your post again

I have found desolder wire works the best for me.. Its like string so can place it straight to the metal on the case itself.

I used it on my fire TV stick 4K.. Which is actually faster than sloane. Although sloane is alot older... Sloane can go in my daughters room... Patched til her heart is content for free in app purchases lol.
[Fire TV Original Android Development] Sus_i:
Really? Did you 'feel' that the stick is faster?

I've seen some benchmarks and the sloane box was always way faster than the 4k stick :p

Sloane is the best fireTV as of today ;)

[MENTION=8978978]Rortiz2[/MENTION] Did you receive my PM?
[Fire TV Original Android Development] ForForkSake:
Ignore... Sloane much better... And 64bit

And has usb an External sd.

After your post I realised the issue.... I've pretty much moved most apps to external sd

But I used a ****ty old 32gb one.

Ordered a new fqster one from amazon.. Plus I don't Need everything on SD anyway ?
[Fire TV Original Android Development] Rortiz2:
Yes

Enviado desde mi WAS-LX1A mediante Tapatalk
[Fire TV Original Android Development] navin23:
Will this script work on a working box running the latest software that hasn't been rooted before? Thanks
[Fire TV Original Android Development] Rortiz2:
Yes,

Regards!
[Fire TV Original Android Development] laidbackcloud:
I think i have a bricked device. Someone gave it to me. It doesnt boot up past amazon logo. Will this work?
[Fire TV Original Android Development] Rortiz2:
Yes.

Enviado desde mi WAS-LX1A mediante Tapatalk
[Fire TV Original Android Development] No3ight:
Bootloop after succesful unbrick

Hello,

first off all I would like to say thanks for your great work. I already rescued a ftv2 with your method. Was pretty easy. So now I got another ftv from someone who told me that he interrupted an update. So that device stuck at bootloop. So I tried your solution. It booted up into recovery, than I flashed a prerooted Rom. It boots up to aftv colored logo. Than it seems to freeze. The white LED is blinking and blinking.

What did I wrong? Maybe there is someone out there who can help me.

Thanks in advance.

No3ight.
[Fire TV Original Android Development] 0815hoffi:
Try clear Cache und dalvik on twrp.
[Fire TV Original Android Development] No3ight:
Also tried it. Didn´t help. Honestly I think there has to be sth wrong. After unbricking I also have problems with wiping data partition. TWRP displays the message that data partition is not mountable.
[Fire TV Original Android Development] Sus_i:
Swap the file system temporary, i.e. format data with ext3, then format it back to ext4. Same for other broken partitions...
[Fire TV Original Android Development] No3ight:
Didnt work for me. One more strange thing. My ftv wont get any ip in twrp. No acess over network. Even adb on linux wont recgnonize my fire tv. Trying to force the partitions ends up in an error; guess it was something like that:

twrp failed to mount system operation not supported on transport endpoint

I now will start from scratch. Any suggestions which rom I should install after booting sucessfully into twrp?

Thanks.
[Fire TV Original Android Development] Michajin:
Did you do this? (from the prerooted thread)

NOTE: If you were at 5.2.6.6 or below, you MUST flash 5.2.6.7 before going to 5.2.6.8 or later.
[Fire TV Original Android Development] No3ight:
Do you have a link from the prerooted thread? The problem is that I dont even know which version was installed before because I got this broken box from someone. Whats up with adb in twrp? Why doesnt it work?
[Fire TV Original Android Development] Michajin:
Here is a link to the pre-rooted thread...

https://xdaforums.com/fire-tv/development/firetv-2-sloane-prerooted-stock-images-t3309783

i dont think i have used adb from TWRP. It is not unlocked so I don't know if there is full access with adb. If has been broken for a while it might very well be an older version.... Just guessing, I am just suspecting it could be related though...
[Fire TV Original Android Development] No3ight:
Well I will give it a try. Are there other possibilities to get back to stock? Completely stock?
[Fire TV Original Android Development] Michajin:
I think so, if it takes the version, you can try letting it take a update from amazon. There is a manage recovery option at the beginning of the pre-root thread. I have never gone back to stock myself so i hold no guarantee.. An update might do it too, but i have no idea...
[Fire TV Original Android Development] No3ight:
Update:

So far so good; made the procedure from scratch. Than in twrp flashed prerooted 5.2.6.3. Finished without errors. Wiped cache, data... now stuck in bootloop. FTV reboots after white amazon logo. Whats up now?
[Fire TV Original Android Development] Michajin:
can you get back into TWRP? you might have downgraded... I would have started with 5.2.6.7 then 5.2.6.8
[Fire TV Original Android Development] No3ight:
Thank you for your fast reply. Yeah I am able to get back into twrp. Will now flash the provided rom. Will let u know....

---------- Post added at 09:55 PM ---------- Previous post was at 09:53 PM ----------

What should I wipe exactly after sucessful flashing? Or wont you do anything before first try?
[Fire TV Original Android Development] Michajin:
i am not sure. If you wipe data and cache, it will require you to do register and might force and update. But if you already did this, then you are ok. You can wipe system, since the preroot has that. I would just try and install it and see the results, only go further. As long as your on the preroot roms it should stop any update (potential brink). I would just flash 5.2.6.7 and see what it does on reboot, then move to more aggresive measures if it does not give you your results... Be aware, i am just telling you what i would do, don't get upset if you brick following my advice... just trying to help as i am bored during the lockdown...
[Fire TV Original Android Development] No3ight:
I guess I know what you meant. Dont worry. If it goes wrong, it goes wrong. If we dont try we wont see.... :)

---------- Post added at 10:21 PM ---------- Previous post was at 10:12 PM ----------

So guys thanks a lot for helping... For now I am frustrated. Installed 5.2.6.7, than 5.2.6.8. Than it stuck on amazon logo. Enough for now. Maybe there something else wrong with the device.

I´ve no more ideas.
[Fire TV Original Android Development] Michajin:
Wipe system data cache, and just install 5.2.6.7. Reboot... let me know if you want my random help...
[Fire TV Original Android Development] No3ight:
Did exactly what you told me. No luck. Waited now for 10 Minutes... seems to freeze.... Thanks a lot. If you have further suggestions for me let me know.
[Fire TV Original Android Development] Rortiz2:
Try to flash LineageOS 12.1: https://xdaforums.com/fire-tv/general/rom-lineage-12-1-t4016981

Regards.
[Fire TV Original Android Development] Sus_i:
Weird fact.. ;) In case of sloane, adb from twrp works fine, but only over network RJ45, IP via DHCP.

I'm wondering why adb over the usb port is disabled... or maybe not built-into twrp. :confused:

---------- Post added at 10:54 AM ---------- Previous post was at 10:49 AM ----------

Have you tried to wipe/format the internal sdcard, followed by a wipe/format data? If the internal sdcard is corrupt, you may get this freeze ;)
[Fire TV Original Android Development] Rortiz2:
rbox patched twrp sources to enable adb over the network. You can check it here
[Fire TV Original Android Development] bilitte22:
Can someone provide me with fire tv 2 rom with mac address .After unbricking and flashing the prerooted rom the fire tv won't connect to wifi or wired internet.

I have this message

Unable to update your fire tv --Try disconnecting the power cable for a few second and then plug it back in--If that does not work, please try again later or contact us at amazon-com/device support.Can the experts here help me with that.
[Fire TV Original Android Development] Rortiz2:
Did you somehow touched the IDME partition? (mmcblk0boot1)

Regards.
[Fire TV Original Android Development] bilitte22:
The fire tv was bricked.I used amonet sloane 2.0 to unbrick..Then I installed sloane 5.2.6.7 prerooted via twrp and 5.2.6.8 -5.2.7:1 and 5.7.7.2.Everything went well till i had to select wifi.This is where it got complicated.

I didn’t touch the IDME Partition and neither do I know what it is. I also notice that the led changed from white to orange when searching for networks. It will not connect to internet even when connected directly to router.I m looking for a solution.Thanks in advance for your inputs.
[Fire TV Original Android Development] bilitte22:
No I did not touch the IDME partition (mmcblk0boot1).
[Fire TV Original Android Development] No3ight:
Hey,

[MENTION=5213625]Sus_i[/MENTION]

I tried to wipe internal storage, it finished like a lightning in under 1s. So wondering of that I wanted to repair file system manually via twrp. But then I got an error like this:

"invalid partition selected"

Strange. Some solutions?

Thanks in advance.

p.s. be patient about my English, I am from Germany :)

---------- Post added at 08:18 AM ---------- Previous post was at 08:01 AM ----------

Weired..... fixed selinux... right now itś optimizing system storage :) ????
[Fire TV Original Android Development] Sus_i:
Sounds good ;) :good:
[Fire TV Original Android Development] No3ight:
Yes, but whats going on with selinux then?
[Fire TV Original Android Development] Sus_i:
Can you explain that a bit?

Normally, in case you wipe system and install the prerooted rom (with the included supersu systemmode install), there shouldn't be any problems with selinux at all.

---------- Post added at 09:48 AM ---------- Previous post was at 09:44 AM ----------

That is normal...
[Fire TV Original Android Development] Rortiz2:
Ok.

Stop spamming with multiple messages, also don't send me a PM with the same message that you posted here...

Do a full wipe (including system) and try to flash the latest Prerooted ROM.

Maybe there's compatibility problems with TZ from 5.6.2.8?

Regards.
[Fire TV Original Android Development] bilitte22:
Rortiz2 the media fire link for 5.2.6.8 is broken.Any other suggestions .For the fun swipe do I erase internal storage as well

---------- Post added at 10:56 PM ---------- Previous post was at 10:11 PM ----------

I did exactly what you told me by erasing System -data-cache and dalvik--install the latest prerooted rom.Same problem.It will not connect to wifi and wired internet.
[Fire TV Original Android Development] Michajin:
This device, was it working before? I have seen this behavior on a blacklisted firetv. Have you tried the custom rom and seen if you have internet?
[Fire TV Original Android Development] bilitte22:
Of course it was --Looped when I tried to install a prerooted rom. 5.2.6.8.Btw I bought it brand new and was registered with amazon.
[Fire TV Original Android Development] No3ight:
Brick after Magisk install?

Hey guys,

now I got prerooted rom installed on sloane. I tried to flash Magisk via twrp. That seems to brick my aftv. Now it stucks in bootloop and I am not able to get into twrp anymore? Are there further tutos about magisk?

Thanks in advance.
[Fire TV Original Android Development] Michajin:
From the OP...

"Please, your bootloader is still LOCKED. Don't flash unsigned boots (i.e: Magisk Manager, custom kernels, etc). If you do it, the bootloader will refuse to load it and you will be not able to boot in TWRP anymore unless you re-unbrick the device."
[Fire TV Original Android Development] Rortiz2:
Love people that doesn't reads the entire OP.

Nice brick dude, your only solution is unbricking it again.

Regards.
[Fire TV Original Android Development] bilitte22:
Hi I unbricked my Aftv2 successfully .Now it won t connect to the internet either wired or wifi. I also don't have access to it via adb on my laptop .so I'm wondering if the experts can help me with that. Since I can't get to log in to my amazon account (no internet) is there a way to unroot or install stock rom with twrp recovery.