yashsingh1/xdaforums huggingface dataset:
[Xiaomi Black Shark 3 Guides, News, & Discussion] slashyuz6:
There is a much easy way to get the link, work for root and non-rooted devices.

1. start downloading the package (you can pause after that), then it will create a folder called ota_package in the internal storage

2. go to that ota_package folder and copy "update_package_list" file to your computer then open the file with notepad or any text editor app

3. after you opened the file copy the file name starting with the number of the date (202119....... .zip)

4. then paste it to the link server:

https://ota-oversea-1256119282.file.myqcloud.com/KLE-H0/ (paste zip file name here) this link is for global package

http://cdn-ota.blackshark.com/KLE-A0/ (paste zip file name here) this is for CN package

after that you can follow the 1027 update procedure.

you have to have the stock recovery installed and match with the version of your system, otherwise it will give error 20 message.
[Xiaomi Black Shark 3 Guides, News, & Discussion] Jbazt_katuforzs:
Post the global MR0 OTA LINK. THANKS
[Xiaomi Black Shark 3 Guides, News, & Discussion] Jbazt_katuforzs:
CN MR2 80mb

https://cdn-test-ota.blackshark.com/KLE-A0/20210909150047-klein-deltaota_2021-09-01_2021-08-08_6039c5a212.zip

View attachment 5409279
[Xiaomi Black Shark 3 Guides, News, & Discussion] mce.nivek:
Can i flash this through twrp? Cause i've already at MR1 and rooted[/url]
[Xiaomi Black Shark 3 Guides, News, & Discussion] kevin mitnick:
no..you cant do it by twrp
[Xiaomi Black Shark 3 Guides, News, & Discussion] mce.nivek:
Only 1027 ??
[Xiaomi Black Shark 3 Guides, News, & Discussion] Londred:
can anyone share link for stock recovery image? may need to flash recovery for ota
[Xiaomi Black Shark 3 Guides, News, & Discussion] afero1711:
I need MR2 stock img....can anyone share it?
[Xiaomi Black Shark 3 Guides, News, & Discussion] kevin mitnick:
MR2 is minor update..stock image is not complete.

you should revert back to MR0, update to MR2 then make a backup what you need..
[Xiaomi Black Shark 3 Guides, News, & Discussion] deathcode0:
Black Shark 3 global MR0 OTA

Build name : (( KLEN2108271OS00MR0 ))

Size : 1.87 GB

Download link :

https://ota-oversea-1256119282.file.myqcloud.com/KLE-H0/20210904132110-klein-deltaota_MK-R-H0_2021-02-02_c0b9b6c8fc.zip
[Xiaomi Black Shark 3 Guides, News, & Discussion] MuffinBelly.HR:
Anyone has a link to the Black Shark 3 Global MR1 and MR2 OTA? Perhaps you could share it?

I am asking this because for some unknown reason, my phone is not getting OTA update but can be updated using OTA and 1027 method.
[Xiaomi Black Shark 3 Guides, News, & Discussion] shahpaz86:
Guys please tell me there is a firmware for QFIL?I want to restore my Black Shark 3 12/256!
[Xiaomi Poco F1 Questions & Answers] Avnesh007:
After Flashing Rom, On first boot There was no option shown for Copy Data.. There was only an option related to crDroid cloud. After Rom boot there was also no option device set-up just like miui rom or aosp rom. Now everything working perfect and smooth in this ROM. But Now I need to my all messages which I had taken backup on my google drive.

Please help if any working method is exist to resolve my problem.
[Xiaomi Poco F1 Questions & Answers] lucamacc:
I think you installed the basic version of nikGapps. Try with a larger one, like the omni, in order to have Google/Pixel Setup Wizard.

This way the setup should ask you to restore a google backup.
[Xiaomi Poco F1 Questions & Answers] StephenVannevel:
Still did not work for me
[Xiaomi Poco F1 Questions & Answers] anyhow2004bc:
I faced the same problems when flashing NikGapps myself. Although there is a download page listing all that goes into a package, there is hardly enough description. I'm sharing the solution I found here.

I tried installing the omni and the full version of NikGapps. Both packages included the 'Google setup wizard' but the wizard only gets triggered into action when it either recognizes a new account being added or at first boot after a factory reset. I didn't take any chances and factory reset the phone since it had nothing on it yet.

Other apps that I wish I had installed before were Android Auto, Google assistant and their dependencies. You can't flash them later (they give an error) and they don't work properly if they're installed from the play store.
[General Topics] number1stunner1979:
i have an at&t tilt and i was wondering was there a way to send someone a file through at&t's data service, because when i try to email it to them it never works
[Galaxy S3 Neo Q&A, Help & Troubleshooting] Anasgoast9:
Ineed help camera and flash not working in lineage 17.1 any help?
[Galaxy S3 Neo Q&A, Help & Troubleshooting] mariocaraf:
there are 2 different models of s3neo, one has sony camera sensors, one samsung, please install correct rom for your model.

s3ve3gxx/ = sony sensors,

s3ve3gjv/ = samsung sensors

s3ve3gds/ = dual sim
[Samsung Galaxy S21+] webmanoffesto:
I upgraded to an Android 11 phone. I've been using Pimlical Calendar for years and I depend on the alarms to remind me about appointments. I do this in Calendar by setting alarms for the new appointment. I like that in the past I couldn't ignore these notifications. They remind me "you have a meeting in 1 hour", you have a meeting in 30 minutes, etc. This works because I have the reminders vibrate and I wear my phone in a belt holster. So they really interrupt what I'm doing and I have to look at what it's reminding me of. I seem to remember that maybe this won't work in Android 11. And now I see that those reminders trigger an innocuous Notification which I can see on Swipe-Down. Those unobtrusive Notifications will not be good enough. I've already had a couple of alarms only set off a notification, and I missed them. Is there a workaround, I need very annoying vibrating appointment reminders.
[General Questions and Answers] UntrustedInstaller:
So, My Nord N100 just got OOS 11 and because Android 12 is right around the corner and the majority of the mobile enthusiasts hate my phone model, will there ever be ROMs for it?

It feels like it won't
[General Questions and Answers] thomaskmaagaard:
I'm also thinking no. But we got 11 and we got magisk so other than TWRP there's not too much to complain about.
[Realme X Questions & Answers] Đăng Quang:
help me. I can't enable "OEM unlock"

Translation:
[Realme X Questions & Answers] jerryhou85:
Hello,

Please take note that XDA uses English as main language for communication. You can post comment in your own language, but it must come with a translation in English. You can use any translator website to do the job, for example, Google Translate.

Thanks.
[Tilt, TyTN II, MDA Vario III Themes and Apps] cbass:
Anybody use their Tilt/Kaiser for obd2 crap? I'm thinking about picking up a bluetooth obd dongle to replace my cable, if there is away to do what I want on my tilt.
[Tilt, TyTN II, MDA Vario III Themes and Apps] TweakMyDevice:
I'm interested in this too for use in my wife's G35x. I was playing with her iPhone the other day and noticed "Rev" in the apps store. With the correct cable, which you order from the company, this allows you to check/clear engine codes, view readouts of certain engine vitals, and other features. They might make an app for Windows as well, wouldn't hurt to contact em.

http://devtoaster.com/products/rev/index.html
[Tilt, TyTN II, MDA Vario III Themes and Apps] mikehoot2020:
This company do a bluetooth version and comes with pc and windows mobile software.

http://www.obdkey.com/index.asp
[Tilt, TyTN II, MDA Vario III Themes and Apps] illusion:
That is sweeeeet! and a great price too. I usually have my laptop in the passenger's seat so I can do logging and the cable always hangs between my legs, it really pisses me off.

I just ordered one. The only downside is I'll still have to use the laptop when I want to do wideband logging, but other than that it should be good to go. Now if I could just find a way to get openECU to work on WM6 :)
[Tilt, TyTN II, MDA Vario III Themes and Apps] hachiroku:
http://www.qcontinuum.org/obdgauge/

i downloaded this software. tried using it with a bluetooth obd2 adapter, but they could not connect to each other. i believe it is because the software was developed over 3 years ago.

if anybody is willing to continue the work, the source codes are available on that website.
[Tilt, TyTN II, MDA Vario III Themes and Apps] jeutaw:
I use the OBD Gauge 1.3 from this site on my HTC Imagio (WM6.5) and a BT OBD II (Car-Pal) and it works great... Config BT OBD in BT Settings to use Com Port 2 (or any available Com Port), then tell OBD Gauge to use that Com Port from with in the program. A BT device selection screen will pop up to connect/reconnet to BT device when OBD Gauge tries to connect to it.
[Tilt, TyTN II, MDA Vario III Themes and Apps] orthello:
I'm using my phone for OBD1 stuff.

Inside the ECU (Honda EDM P28 with eCtune software) is a connector that has GND, +5V, TX and RX (TTL levels)

I mounted a BlueTooth module (Parallax Easy BT) to have it connected to my Kaiser at COM8.

The software uses this COM port to communicate with the ECU.

RPM, VSS, IAT, ECT, IGN, etc. etc. etc.
[Tilt, TyTN II, MDA Vario III Themes and Apps] zet-jaro:
hi guys,

i'm driving '91. VW Corrado G60 and I think I have OBD1 so I was thinking if orthello could give me some more infos on how is he doing that diagnostics? could you add me on MSN jazzbolan (at) yahoo.com or gtalk tstampar(at)gmail.com?

I would apriciate your help

TNX!
[Tilt, TyTN II, MDA Vario III Themes and Apps] daveb673:
I am now using OBDGauge on my AT&T Tilt, with a bluetooth OBD interface. I got the OBD device here: http://www.rklenka.com/index.php?id=store/news

I did discover the "New Outgoing Port" setting inside the Settings/Bluetooth folder. Click on COM ports. Select the device you wish to add (mine is called CBT). Hit next and select a COM port (I am using 5). I tested it in my truck, which is OBD2 and has a CAN bus. Eureka! It works! Make sure the com port you select in OBDGauge preferences is the same you assigned to the BT ELM interface, and it should connect and start scanning.

You do need to have something available to keep the display from shutting off. My plan is a cigarette lighter USB power adapter with my sync cable. I also need to find a mounting bracket...

True, it does not show mpg, but ODBMobile does. I am about to get a copy and stick it on my Tilt.
[Android Head-Units] tamerh:
I want stock or costume rom
[OnePlus 6T  Questions & Answers] Lirkaren:
Hi,

I have not flashed a rom or anything since I replaced my Nexus 6P with my OnePlus 6T about three years ago so this A/B slot thing is all new to me.

I have tried installing two different ROMs, the first one is LineageOS but when I flash it it seems like slot B gets encrypted sence the folders have wierd names and don't contain anything when I rebooting to recovery to flash on slot A.

If I copy slot A to slot B everything looks like normal again. I have followd the guide as I understand it but it wont work so I moved on to try DotOS which have a much more simple guide.

"CLEAN FLASH :

Download the latest build, TWRP, Magisk 21.4 and NikGApps

Reboot to TWRP

Flash OOS, TWRP & Reboot to TWRP This step was fine.

Flash OOS, TWRP & Reboot to TWRP Slot B seems to have become encrypted again.

Flash build, TWRP & Reboot to TWRP

Flash NikGApps (Optional), Magisk (Optional)

Reboot to system"

If OOS stands for OxygenOS, I don't understand what I'm doing wrong. I also tried to remove pin from lockscreen and factory reset after every flash, that didn't wort either.

Thanks in advance!

Sorry if my english is bad, it seems to go downhill at a rapid pace after you graduate... :)
[OnePlus 6T  Questions & Answers] s.seila:
If you are already on OOS and just unlocked bootloader and boot to TWRP you can just skip the flash oos and start from flashing ROM/build

( I'm not responsible for any problems but it's work fine for me)

Or

Flash OOS

Flash ROM/build

Flash Finalize.zip ( use this so you don't have to flash oos multiple times )

Flash twrp.

Flash Gapp (optional )

Format data and reboot to system.
[OnePlus 6T  Questions & Answers] Lirkaren:
Missed to press format data. This was a day well spent! :'D
[Android Q&A, Help & Troubleshooting] toprunner2786:
i had my phone (Tmobile iphone 12 pro) set up to forward missed calls to google voice VM. I decided to go back to the regular VM, so I removed the device from my google voice account and attempted to use the ##004# shortcode to re-set my VM settings and nothing is working. It still occasionally forwards missed calls to google voice, and then other times it just disconnects with no VM.

I have also done the standard iphone reset network settings as well as a hard reset of the phone and it still is connected to google voice.

Does anyone have a trick to remove all forwarding options? Thanks!
[Google TV General] elliwigy:
sweet! I know what im doing tonight lol.. of course I need to check mine once I get home to see if it can be unlocked but pretty sure it can.
[Google TV General] Logix:
wow im glad i left mine unplugged
[Google TV General] elliwigy:
unfortunately mines not able to be unlocked :-(.. its got feb security update.. exploit says its password protected
[Google TV General] Stricted:
rip, there is no way around it unfortunately (for now atleast)
[Google TV General] elliwigy:
Yea, figured as much. I was looking for a way to unlock the bootloader but didnt spend much time on it as i use my nstv pro 2019 model mainly for all my streaming needs lol.

i just left best buy by my house and all the cc they had were mfg 5/2021 lol.. i mustve looked all over.. looked behind stuff tried to find a dusty one but nope lol

probably got a better chance at an old one from walmart :)

im curious what causes it to not boot with patched boot.img.. on the nstv it was odd for a while since patching boot.img would cause bootloop.. had noticed in the logs it was failing to boot because the verifiedbootstate was orange so made a script for magisk to resetprop ro.boot.verifiedbootstate green and it would boot right up 😅 wonder if its something similar.. either way, can only toss up ideas until i get my hands on a unlockable model lol
[Google TV General] npjohnson:
Nah, it isn't.

Think it's just Amlogic boot image format not linking the repack method.

I'll look into it at some point.
[Google TV General] Verhuel15:
Could this method work on mi box 3?Just asking !!!!
[Google TV General] npjohnson:
You'd need u-boot source from your OEM - start by requesting that, then you can progress further if they give it to you (they legally have to, but a lot of them don't) :)
[Google TV General] 96carboard:
Tell me more about this "usb password mitigation", since it appears that this exploit is not going to be all that useful until this issue is addressed.
[Google TV General] npjohnson:
It's not an "issue" we can overcome.

The BootROM mode we interact with the send the data for this exploit had a password slapped in the interface (to even be able to interact with it). It's a complex password based on a hash of something and a salt.

It's not something we could feasibly brute force, it's not something we can undo, it's not something we can work around.

The exploit was effectively patched in models manufactured after December 2020, and older units updated to February 2021.
[Google TV General] bydo:
If the February 2021 update added the password, wouldn't it be theoretically possible to reverse engineer that update to determine how the password is generated? Or do they encrypt these updates in a way that makes them impossible to disassemble or step through during execution before it burns the eFuses?
[Google TV General] npjohnson:
We can totally (and have) dumped newer updates. You can look at the bootloader.img all you want, but it's AES encrypted, and the only way to get it decrypted is to dump the AES key from memory using the exploit those updates mitigate, so, no, not easy to analyze them.

But lets say we could, there's no way to extract the password that's even semi-feasible.

Brute force is more feasible, and that would take years.
[Google TV General] elliwigy:
I assume similar to Samsung bootloader revs Google has some form of rollback prevention so not possible to downgrade to an older firmware? do you know if theres anywhere that the ota.zip can be downloaded?
[Google TV General] 96carboard:
Is there anything else we know about this password? Is it the same password for all units (i.e. pre-generated) or is it unique (in which case it would have to be generated on-device)?
[Google TV General] npjohnson:
Yeah, dumped on dumps.tadiphone.dev. Rollback is enabled. There's no going back. U-boot enforces it on OS, and BL2 enforces it on BL33 (u-boot).

It is (as far as we currently understand) a global password.
[Google TV General] elliwigy:
Is that site a private gitlab? i went there but my normal gitlab acct didnt work so i regustered with same email and it said it registered but my acct is blocked waiting for admin approval?
[Google TV General] elliwigy:
pretty sure its not generated on the device.. its likely a key that was already there just wasnt being used until recent update or it was implenented in the update.. this is of course assuming its a global key i.e. same password for all the devices.. sort of similar to how samsung does their firmware maybe, key burned into the device at the factory well hidden behind layers of security to never be seen again even when its used to verify stuff lol
[Google TV General] npjohnson:
dumps.tadiphone.dev/dumps

It is burned into the device, yeah, no disabling it or intercepting it.
[Google TV General] elliwigy:
right after i posted i went to explore and saw the dumps. i noticed there was some userdebug builds early on.. pretty cool.. are these all official firmwares?

and yes makes sense.. its easier to fibd a zero day exploit these days then to waste time trying to get the hardware infused private keys :-/
[Google TV General] p0werpl:
The script inside the zip (flash-all.sh) looks for dtb.img instead of dt.img, not the unlock and repair scripts.
[Google TV General] npjohnson:
ah, fixed.
[Google TV General] npjohnson:
fixed thx
[Google TV General] p0werpl:
I have been able to rw the dynamic partitions, edit them, and repack, but I haven't been able to merge an incremental ota into a full image. Can you share this python script if you don't mind? Thank you.
[Google TV General] npjohnson:
GitHub - erfanoabdi/imgpatchtools: Patch img files with system.patch.dat, like OTA zip on PC

Patch img files with system.patch.dat, like OTA zip on PC - erfanoabdi/imgpatchtools

github.com
[Google TV General] dante_ov:
Is there anyone from Europe here who is interested in buying exploitable CCwGTV?
[Google TV General] espchl:
After "bricking" mine, I'd be interested. Any more info? thanks
[Google TV General] retyre:
A new update for sabrina (QTS1.220504.008) showed up a few days ago. If you're dying to update safely (i.e., without losing the unlock), PM me and I will send you the update to test-flash.
[Google TV General] npjohnson:
Don't use that update zip.

I will build a fixed version.
[Google TV General] retyre:
I have already "fixed" it to create a new super.img (and an accompanying boot.img) from the latest update -- with the required changes to vendor.img and without the bootloader image. Boots fine and retains the unlock.
[Google TV General] npjohnson:
Oh, you copied the .TA files over and all?

Was it a full OTA this time?

It was a delta last time which was a pain in the ass lol
[Google TV General] retyre:
Yes to the *.ta files. No, incremental again. You're on the money about the PITA part.
[Google TV General] npjohnson:
Ugh.

Alright.

If you already did it mind sharing it here? I'll test it then link in the thread.
[Google TV General] retyre:
Here. Contains only the updated partitions. If the super.img does not work, let me know and I'll upload the dynamic partitions separately.
[Google TV General] npjohnson:
Thx man. Will let ya know.
[Google TV General] grave35:
When can I expect an update (QTS1.220504.008) from you?
[Google TV General] npjohnson:
When my work life calms down dude lol
[Google TV General] ForbEx:
Today i received my brand new device, Im sure that I cant use this method? Not powered yet..
[Google TV General] npjohnson:
Yeah, you're out of luck
[Google TV General] :
When I installed a uart header in one of my sabrinas last year, I used this image from the unlock writeup as reference for the serial connections:

and installed the uart header thusly:

Today I was booting ubuntu on sabrina and trying to interrupt uboot (fred has bootdelay set at non-zero value). I couldn't interrupt uboot.

It turns out that I had RX connected to the wrong location. It actually is here:

The correct tx/rx locations also correspond to these locations on the edge connector:

Please excuse this post if this info has been mentioned previously.
[Google TV General] npjohnson:
Yeah, that photo I posted is slightly wrong.

Sorry about that! Happy you got it fixed.
[Google TV General] :
The link expired. Would you repost QTS1.220504.008 with the patched .ta files?
[Google TV General] :
Using the alternate uboot that enables burn mode (with uboot loaded) is also a cumbersome way just to edit a single variable.
[Google TV General] retyre:
Link fixed. I don't think anyone figured out how to disable SUW at first boot. If it sees the latest build installed, it lets setup continue without updating. Hence the hoop-jumping to create an updated super.img for every new update.

There might be at least two pre-mitigation bootloaders (2006x and 2009x, June and Sept. 2020, I think).

If you're able to interrupt U-Boot, can you not use setenv to set the env variable?
[Google TV General] :
Got it, thanks. For OTAs that happen beyond the setup, has something been done to stop those? If so, what is it?

Do you mean a uboot that is provided in one of the bl33 replacements that have to be loaded via the usb download mode exploit, like sabrina.bootloader.burnmode.bin? Because I don't think that stock uboot is interruptible. But I will check again.
[Google TV General] retyre:
I just block "android.googleapis.com" at the device level (using AdAway). This blocks the Google Play Store (GPS), so I disable AdAway on-demand if I have to access GPS. That would be a strong reason not to block it at the router level because every Android device in the household will then be locked out of GPS.

Since you posted the correct UART pinout above, I thought you were already using an interruptible U-Boot. You're not?
[Google TV General] :
I can use an interruptible uboot from the various supplied bl33 images used with the exploit, but for an ordinary OS boot I'd use the stock uboot, because I'd be booting with the factory bootloader.

The uboot used with the exploit is considerably different than the factory uboot for this particular device, at least in terms of the console output during the boot sequence.

Edit: Booting sabrina.bootloader.burnmode.bin only shows a 1 byte environment. This could be because the style of boot is usb boot, and maybe the env part could be loaded if mmc was reset or selected. Booting fred's ubuntu bootloader does show a full enviroment, but also one that has been partly altered for booting ubuntu. I was reluctant to try a saveenv command, even if it would have saved to the emmc, which I don't know if it would have.
[Google TV General] volkodav1975:
I succeeded, if I understood correctly what you mean.

When I got my Sabrina, I foolishly plugged it into the TV and accidentally let it update. But when the reboot went on, I was able to get into Recovery by pressing the button and it was clear that the version was still the same, unfortunately I thought for a long time and did not know how to manage it with the button, so I could not reset it. Alas, this is how I lost the opportunity to get an unlock, but I knew for sure then that if I knew about the short and long presses of the button, then I could reset the update. (Forgive me if I wrote something incomprehensibly, I'm through a translator)