yashsingh1/xdaforums huggingface dataset:
[Security Discussion] Deleted member 11753593:
Is there a way to encrypt the SD card on Android 11/LOS 18.1 without using adoptable storage? My phone's lineage version doesnt support adoptable storage and I can't find any luks/veracrypt that works the way I want it.
[Security Discussion] tcecyk:
which way do you want it?

you can create file containers on the sdcard and mount them with cryptsetup.. EDS lite has an UI for this. Other approaches need root and cryptsetup compiled for the device. This is more involved, but can give you automount with init scripts.
[Samsung Galaxy Note 10 Questions & Answers] emmanuelfss:
Olá! meu tablet samsung galaxy note 10.1 estava pessimo de usar por causa do android antigo. Instalei uma custom room Lineage OS do nougat que um gringo fez pra ele. E vinha funcionando bem(exceto por algumas reinicializações que as vzs ele fazia) no entanto passei uns dias sem usalo, e agora ao ligar me deparo com o Envryption unsuccessful. apertando o botao de reset tablet nada acontece, absolutamente nada. já tentei entrar pelo root ligando ele apertando o botao power + volume - e nada acontece, power + volume + tbm nao da em nada. Preciso de ajuda para saber oq posso fazer pra resgatar meu tablet! kkkkk obrigado!!

Translated by GT: Hi! my samsung galaxy note 10.1 tablet was terrible to use because of the old android. I installed a nougat Lineage OS custom room that a gringo made for him. And it had been working fine (except for some reboots that he used to do) however I spent a few days without using it, and now when connecting I find Envryption unsuccessful. pressing the reset tablet button nothing happens, absolutely nothing. I've tried to log in through root by turning it on by pressing the power + volume button - and nothing happens, power + volume + tbm doesn't work. I need help figuring out what I can do to rescue my tablet! hahaha thank you!!

@emmanuelfss Please be respectful and observant of XDA Rule #4 for posting in English. Regards, and welcome to XDA.

-Badger50 XDA Mod Staff.
[Samsung Galaxy Note 10 Questions & Answers] dedq:
Wipe Data in ext4. That's how I have fixed the same problem you have now.
[Samsung Galaxy Note 10 Questions & Answers] emmanuelfss:
mas como faço isso? não conssigo acessar usando os botoes de power + volume -. tem algum programa de computador que faça isso?

Translated by GT: but how do i do it? I can't access using the power + volume buttons -. is there any computer program that does this?
[Samsung Galaxy Note 10 Questions & Answers] dedq:
You would have to get into recovery to do that. Are you sure you cannot get it? Try again.
[Samsung Galaxy Note 10 Questions & Answers] emmanuelfss:
não conssigo, já tentei de todas as formas. power mais volume +, power mais volume - e nada acontece

Translated by GT: I can't, I've tried it in every way. power more volume +, power more volume - and nothing happens
[Samsung Galaxy Note 10 Questions & Answers] Badger50:
Please check your PM inbox. Thank you.

-Badger50
[Samsung Galaxy Note 10 Questions & Answers] emmanuelfss:
ok
[Samsung Galaxy Note 10 Questions & Answers] cmadelino:
Olá, você conseguiu resolver seu problema, estou com um celular na mesma situação.

Obrigad.
[Google Pixel 2 XL Questions & Answers] Schroeder09:
I'm going to be replacing my Pixel 2 XL rear camera because it has the infamous failure. Where can I get an OEM battery to replace it while I am at the camera repair? I don't want to get one of the junk Chinese batteries off eBay. I remember doing that and the old Samsung Galaxy S4 days. The eBay Chinese ones never lasted very long at all. OEM was noticeably better. Where is the reliable source for the OEM LG BL-T35?
[Google Pixel 2 XL Questions & Answers] Schroeder09:
Has anyone ever replaced their battery with an actual OEM LG battery and not just some knock off found on ebay?
[Security Discussion] Mike4:
Hello,

I am not sure if this is the right subforum to post in but I figured that since my question is related to the Android boot process and signatures, it kind of touches security and this seemed as the best-fitting subforum (my apologies if it is not). Just to begin with, I am no computer noob. I write C code for a living and I know how cryptographic signatures work. However, I am completely unfamiliar with the Android ecosystem, so I may have some noob questions there...

Basically, I would like to know why it is not possible to take a bit-by-bit backup of an official signed ROM from the eMMC of an Android 9+ MediaTek-based device and then restore it later. Could someone please explain or point me to documentation about the technical mechanism that prevents this?

Background:

I bought a Gigaset GS290 smartphone with the intention of installing the /e/ operating system on it. However, since it is currently in mint condition, I was thinking it might be a good idea to first make a backup of the original factory firmware, in case I ever need to go back, especially since there is no official signed ROM available for this device.

I read that since this device has a MediaTek chipset, I can use the SPFlash tool to read/write arbitrary memory off/onto it. Therefore, I would think that I should be able to take a bit-by-bit image of the eMMC in its original factory state and then later take that image and write it back in order to restore the original software, including verified boot. However, according to [1], it is not possible since Android 9. My question is why. How does the operating system come into play?

Also, [2] mentions that the SPFlash tool is only able to create a backup that contains an unsigned image. How is that even possible if whatever is in the eMMC is signed?

I realize that there is a chain of trust originating probably in some TPM on the chipset that verifies the bootloader and the bootloader then verifies the system. I understand that by flashing an unlocked bootloader and modified system I break that chain of trust, BUT by restoring the original contents of the eMMC, I should be able to fully restore that chain, right? I mean the phone is a deterministic device that has a state (== the contents of its memories). Which part of the device's state will I not be able to restore using the aforementioned method? The only mechanism that I can think of is that the TPM would have to erase its keys when it is unable to verify a bootloader, which does not seem probable to me. Could someone please refute or confirm this?

Best Regards

Mike

[1] https://android.stackexchange.com/questions/220584/smart-phone-flash-tool-readback-emmc-user-backup

[2] https://forum.hovatek.com/thread-26015-post-155676.html#pid155676
[Hardware Hacking General] Renate:
I run my hot spots 24/7 and they overcharge the batteries and puff up.

Verizon already did one recall on the Franklin "Ellipse".

I do a direct USB powering since many devices won't run without a battery.

The photo show the one for the MiFi 8800L with a diode, a 51k ID resistor and a 100k thermistor resistor.

It works fine, but I still wasn't happy with how warm the device got even without a battery.

So I threw away the back plate, broke the glass/touch panel off the bezel and removed the OLED display.

Now the tin covers on the processor get direct access to air and it runs a lot cooler.

It seems to work fine.

Still, I wanted to be able to run "top" and make sure that it's not thrashing too badly without the OLED and the I²C touch panel.

I plugged the MiFi into Windows 10 and identified a single HID interface with a 4 byte input record and a 4 byte output record.

I tried to read the input record, nothing was coming out.

So I wrote my 4 bytes of zeroes (in Windows that makes it 5 bytes since you have to add an unused record ID).

memset(report, 0, 5);
WriteFile(hid, report, 5, &n, NULL);

And lo and behold, the MiFi reset and came back with 7 interfaces, including the original HID.

One of the interfaces was a CDC serial that came up as a virtual com port (VCP).

mifi login: admin
Password:
Login incorrect

Any idea what the password could be?
[Hardware Hacking General] Renate:
I wrote a password spammer but after 30-40 login attempts it stops listening. :(
[Hardware Hacking General] Renate:
I added a 40mm square heatsink. Now it runs even cooler. I cut away some of the top cover so that you can still plug in the LCD if you need to.

If you're thinking this is all pointless: In marginal areas a hot unit decreases the S/NR. I've often stuck my old Jet Pack in the freezer when nothing else would get me a connection.
[Hardware Hacking General] pcoplen:
So I believe the password is listed in the device settings. On mine its under advanced settings on the screen.

I want to get more outta mine and am trying to put custom firmware on it.
[Hardware Hacking General] Renate:
I'm not sure if you mean the regular WiFi or administration logon password. I've tried those. I don't know what the login itself is either. I've tried root and admin. Can you give me a screenshot of that password using the regular web interface? (Ok, with the password blacked out.)

In other news, I discovered that the network manual selection allows me to select AT&T or Telekom (since I paid full price for the unit). It may not have all the right bands, but I think that I'll try test drive one of them since the Verizon tower here is horribly overloaded. That's 8 kb/sec download during prime time.
[Hardware Hacking General] pcoplen:
I got mine second hand and dont have a data plan currently but its the verizon one.
[Hardware Hacking General] Renate:
No, that's the regular Administrator password. It doesn't work here:

mifi login: Admin
Password:
Login incorrect
mifi login: admin
Password:
Login incorrect
mifi login: root
Password:
Login incorrect
mifi login: user
Password:
Login incorrect
mifi login:

This is on the virtual com port coming over the USB cable, not the front screen or the web access.
[Hardware Hacking General] pcoplen:
how are you accessing this com port when i boot and enable usb connection it doesnt appear in windows
[Hardware Hacking General] Renate:
That's the whole point of that memset/WriteFile stuff at the top. I've never had to resend that so I don't know if that's a permanent enable. It did disconnect and reconnect when I did it, so I think that it's real. If you're not showing the same as I see now, that confirms it.

Do you have UsbView.exe? It's here: https://www.ftdichip.com/Support/Utilities.htm#MicrosoftUSBView

This is the what I have (trimmed down to the essentials). Is your "Total Length 0x136" the same as me? Do you see 7 interfaces?

Device Descriptor:
idVendor: 0x1410
idProduct: 0xB023
bcdDevice: 0x0318

Configuration Descriptor:
wTotalLength: 0x0136
bNumInterfaces: 0x07

Interface Descriptor:
bInterfaceNumber: 0x00
0x0409: "RNDIS Communications Control"

Interface Descriptor:
bInterfaceNumber: 0x01
0x0409: "RNDIS Ethernet Data"

Interface Descriptor:
bInterfaceNumber: 0x02
(Something custom)

Interface Descriptor:
bInterfaceNumber: 0x03
(Something custom)

Interface Descriptor:
bInterfaceNumber: 0x0C
0x0409: "CDC Abstract Control Model (ACM)"

Interface Descriptor:
bInterfaceNumber: 0x0D
0x0409: "CDC ACM Data"

Interface Descriptor:
bInterfaceNumber: 0x0E
0x0409: "HID Interface"

(You get extra credit for noticing that the interface numbers are not contiguous! (0, 1), 2, 3, (12, 13), 14. That breaks some Linux libs.)

Edit: Oh! My 8800 was originally 1410/b010, then when I did the HID thing it turned into 1410/b023. I just looked at my code.

So this is a Qualcomm processor, so apparently this is a Qualcomm DIAG port. I still can't find a password, but I strongly suspect that "root" is the (only useful) user.
[Hardware Hacking General] Renate:
Ok, so I managed to reset it back to "Normal", a/k/a 1410/b010

I see that in this mode there is only one interface, that HID.

So I wrote a little utility:

C:\>mifilink /?
MiFi Configuration Utility
mifilink <cmd>
cmd = normal, diag

C:\>mifilink
Found MiFi 8000/8800 (normal mode)

C:\>mifilink diag
Found MiFi 8000/8800 (normal mode)
Sending Diag (0) ok

C:\>mifilink
Could not find any MiFi devices

C:\>mifilink
Found MiFi 8000/8800 (DIAG mode)

When it couldn't find anything that was because it was rebooting. I put that in there to demonstrate that the utility knows that. Without a command it just shows what it sees.

Edit: The current version can now be found in my sig.
[Hardware Hacking General] Renate:
I had a question on how I was powering this. Just to clarify:

I'm using a USB cable that I cut up. Normally the color code is to be trusted, but check with a voltmeter if you have it.

Black is ground, green is D+ (unused), white is D- (unused), red is Vbus i.e. +5V.

The photo in the OP shows it all.

From the bottom is the ground connection to black.

Then the 100k resistor for the thermistor to ground (to make the device think that the temperature is reasonable).

Then the 51k resistor to ground to fake the device out to thinking that a battery is connected.

Then the 1 Amp diode (like a 1N4001 to 1N4007) to drop the voltage down a bit to make life easier for the device.

The banded end (i.e. the cathode) goes to the contact, the plain end (i.e. the anode goes to the red wire.

If you don't like murdering your device you could take a block of something (wood, plastic) and put four contacts on it.

Then you could leave your device unmodified. I've made some blocks for cell phones that I have for testing.

Here's a Moto E6 that I was trying to get into EDL mode. The plug has one resistor in it for thermistor.
[Hardware Hacking General] pcoplen:
So I would recommend something slightly different, use a tp4056 to charger the battery, they don’t get very hot and it bypasses the internal charger and usb c port. So you could use that for data still.
[Hardware Hacking General] maddmenz:
Thanks for this. it worked like a charm. This was the best solution for me even after trying two of Netgear's LTE Modems and Modem/Router. Those devices frequently lost connection to Verizon. Neither Verizon nor Netgear could help me.
[Hardware Hacking General] Renate:
There was a question on firmware updatting the 8000/8800

I tried a bit to find EDL test points on my 8800. Since this is my main connection that was in use I didn't try too hard at the time.

I had an Orbic Speed that I got under warranty and don't use so I could attack it at my leisure.

I found the EDL test points. It uses Red Hat Linux. Since I'm more Android and don't need to do anything I dropped the matter there.

This is all related here: https://xdaforums.com/t/resetting-v...-firmware-flash-kajeet.4334899/#post-86616269

(My main device, an Onyx Boox Poke3 ereader is also modified with a reed switch as I do a lot of slinging partitions around.)
[Hardware Hacking General] GuardianZX9:
Can you still power via the USB port and ommit the DC at the battery terminal?

If not, would a capacitor work in the batteries place?
[Hardware Hacking General] Renate:
You need active power coming in on the battery terminal. If you just want to just use the USB port you can jumper from the USB through a diode to the battery in. Of course you still need the two resistors. There is a test point near the USB connector where you can pick off power. I don't have a photo off-hand.
[Hardware Hacking General] mjg59:
There's three test pads on upper right of the 8800 board (the same side as the battery). Shorting the left pad to the middle pad and plugging in a USB cable results in it booting in EDL mode.
[Hardware Hacking General] mjg59:
Unfortunately there doesn't seem to be a publicly available loader that'll work here
[Hardware Hacking General] stealthrt:
Can you power an SSD via the USB-C (for file sharing feature 8800L) still with doing the power where the battery would be going? Or do I need to send 5v down the USB-C wire since the battery input would be ~3.3v?

Would you care to share how the tp4056 would hook up to the charging pin? This sounds like the way I would need to go in order to power an SSD via USB-C port.
[Hardware Hacking General] Renate:
The device has a boost converter to take battery power and boost it to 5V for the Type C when you are using a flash drive.

You don't need to do anything.

If you did route 5V to the Type C yourself it would say, "Oh, I'm connected to a charger, of course there is no flash drive."

I can plug in a flash drive, there is 5V supplied to it, it's takes 70mA or so.

It is enabled on the MiFi Share setting page.

I can't find it on my Windows machine. Maybe because I disabled so much of that net sharing.

If you really wanted to keep the battery, yes, you could throw in a TP4056 charger board and have it charge your battery.

Just connect the two battery pads on the PCB to the + and - of the battery.

I tried the EDL, the test points are as stated, "Left" in the instructions means towards the middle of the device.

HWID: 0007d0e100000000
Hash: 62b4a62f72d6c323

I couldn't find a loader either.

As I've said before I think this device runs hot.

That's why I cannibalized it and added a heatsink.

Maybe this thing was tested at an ambient temperature of 20°C (68°F) but it just runs away at higher temperatures.

At 38°C (100°F) ambient temperature even with a heatsink this thing is a nuclear reactor.

I had a little 12V 40mm fan. I plugged it into 5V and that's enough to keep this thing cool when it gets hot.
[Advantage X7500, MDA Ameo Accessories] beginner:
do you have experience with some remote could work with Athena? I am looking for it...
[Advantage X7500, MDA Ameo Accessories] beginner:
found!!!

I will respond myself because found and tested the Sitecom Cordless Presenter TC-140 and it words like a charm.
[Advantage X7500, MDA Ameo Accessories] WhiteMonkey:
Does that use some sort of proprietary wireless-USB connection?

It looks like it has a dongle that you presumably plug into the Athena using the 4-in-1 cable, right?
[OPPO Find X3 Pro] latino147:
The last few times I was charging with Oppo's charger the device got really hot, this didn't happen before.

Is this something software related maybe? any ideas? Restart didn't help.

I'm still on A19 btw
[Android Apps and Games] neoicon:
Hello everyone, I have developed a puzzle app called Resonance. It is completely free app with 500 puzzles. It has no In app purchases. If you can spare your time and check it out, it would be nice. Here is the playstore link: https://play.google.com/store/apps/details?id=com.myComp.Resonance

Thanks.

View attachment 5392651
[General Questions and Answers] Amro_Meajy:
Hello! So, my android is running 4.4.4 (kitkat). I want to install some apps but they require android 6.0 or higher. Is there anyway i can install and run them? Like rooting it or something? (Its a samsung tab 4 7.0 lte) (sm-t239)
[General Questions and Answers] Deleted member 1890170:
You have to upgrade to Android 6+ so the apps in question are compatible.
[General Questions and Answers] blitzlee06:
look for apk file on google that can do the trick :)

Transfer WhatsApp from Android to iPhone
[Touch Diamond, MDA Compact IV ROM Development] Mister B:
Hi, I want to debrand a couple of vodafone touch diamonds.

What is the best/latest HTC generic ROM ?

Is the HK ROM the best option or do we have a better UK/Europe option

I can't download from Club HTC as do not have valid serial # as my devices are operator modified.

Download links would be useful (already have links for HK ROM)

Thanks,
[Touch Diamond, MDA Compact IV ROM Development] liamhere:
just search the forum

there is a new rom other than the hk...but chefs are using it :)

try the one in my sig.....its will shock you how good it really is :)
[Touch Diamond, MDA Compact IV ROM Development] Mister B:
I will try dutty's ROM but I would like to find a link to ROM 1.37.401.3

Have found ROM 1.37.401.2

I would like to try the original ROM's first as the Diamonds are company phones & would prefer them to maintain valid warranty.

Anyone have a link to this 1.37.401.3 ROM, I can't find it !
[General Questions and Answers] tdod:
On my Google Pixel 4a, I'd like to clear the contact suggestions on the Android Share screen. I haven't used this contact for 4 months and they still show up as first suggestion everytime I share something. I think this is a fairly important missing function, we should be able to long press to remove someone.

This attached screen sometimes comes up first (Google Podcasts, Google Files, photos from WhatsApp/Signal), if not when you click 'other' or 'more' (Google Photos, Spotify & Netflix).

I've tried clearing cache for WhatsApp, AndroidSharedLibrary, Google Photos. I've deleted the contact.

Does anyone know how to clear this?
[General Questions and Answers] Mehak Deep Singh:
Can I root govt. Lava z61p phone ?
[Realme 5 Pro Questions & Answers] Imranbinismail:
Hey, im in realmeui 2.0 fo.2 stable!!

I am willing to install custom rom? With full backup of stock rom! Can somebody plz tell me a-z process of installing custom rom on ui2.0?View attachment 5392671
[Samsung Galaxy S7 Questions and Answers] -crazy-horse-:
I bought a galaxy s7 on ebay, it was working fine for a few days now it showing this. did the seller remotely enable a block or something. I tried the reset and it just factory restores the device. I tried the sign in nothing works. now seller ghosted me and I can't get a refund. how do I remove this or am I just screwed.

View attachment 5392665
[Samsung Galaxy Watch] priyesh07:
HI,

My GWA 2 is getting rebooted randomly, I was able to collect dump logs , copied it on computer and can see @@@@@@ characters in kernel log around crash time, no other alarms in logs, After enabling debug mode, On crashing now watch goes into a screen with watchdog logo in background and some watch details on top, but no touch/button works to see rest of the logs. I am able to pass all the test in test mode. I have reset watch multiple times. Can some tizen developer help me in debugging, What other steps I can do to easily diagnose the issue? Can I get the backtrace of the OS crash?
[General Questions and Answers] Xemetot:
Is iPhone data recovery possible without a backup? I have accidentally deleted some photos and text messages from my iPhone and these are files very important for me. Is there have available any possible method to get back lost data?
[General Questions and Answers] nazhai:
Hi, nice to meet you. Usually, if the accidentally deleted some photos and text messages from your iPhone are not overwritten by new data, pro iPhone data recovery tool can help us get them back. But in case of that, you need to take backup of your iPhone. Then you can recover deleted or lost data from backup files easily.
[General Questions and Answers] bobii:
One of the useful options is to have a iPhone data recovery tool. It is one of the convenient methods that solve the problem. Data recovery software can help to extract the deleted data from your phone.
[Introductions] Eddmctet:
eddmctet from ghana.. young enterprenuer and a system admin..certified solution expert in info system.
[Philips, Sony, TCL Android TV] Optick002:
Hello,

I have a tv TCL 55DP660, motherboard is MT58CU (40-mt58cu-mab4hg).

I am stuck at loading screen and nothing works for me, after I entered developer options and turned on Debug mouse setting, my tv restarted and was in forever looping state.

What I tried

1) turning the power off

2) inserting usb stick with file in root (V8-T658T01-LF1R579.pkg) tried with multiple version, all produced same result, as well with .zip extension

3) Holding down power button on tv

4) Plugging into electricity

5) screen shows TCL logo static

6) after 10 seconds, it show "TCL" logo animated

7) and then it showns loading and gets stuck there forever.

Also tried opening my tv, and taking a loot at motherboard, but could find a reset jumper, or reset pin to short circuit.

The only thing I found was MCU_RST name on a back of the board, but it was only a single filled hole and nothing around it. So was wondering to which connection do I short circuit it so it would do a factory reset for me? or is there another way?

Thank you!