yashsingh1/xdaforums huggingface dataset:
[General Questions and Answers] DSNEAR:
You can try a few more times, because I also reloaded several times before I successfully entered. FASTBOOT sometimes fails to flash into the system normally, and "finsh" is required for each flash to be considered successful.

I tried twrp, but it couldn't read the system storage space, so I couldn't back up and restore it.
[General Questions and Answers] FarlandsRedstone:
Thank you very much！I found that fastboot cannot flash system into the camera,so I flashed system.img into data partition,then manually copy the file into system folder using twrp.After that,the camera can boot normally.
[General Questions and Answers] DSNEAR:
Congratulations

This brand new method can save the bricked state.
[General Questions and Answers] wuwukaka:
TechBeat

TechBeat是荟聚全球华人AI精英的成长社区，每周上新来自顶尖大厂、明星创业公司、国际顶级高校相关专业在读博士的最新研究工作。我们希望为AI人才打造更专业的服务和体验，加速并陪伴其成长。

www.techbeat.net

I found something interesting.But it's a Chinese website and I'm not sure if it will help.
[General Questions and Answers] wuwukaka:
This is the email address of the company where the person used to work. Might it help?
[General Questions and Answers] wuwukaka:
https://fccid.io/OV5

Wish this help
[General Questions and Answers] win32forth:
From your post I was able to locate the link to his presentation, and I would certainly love to read it, but I'm not going to log into the site to do that. If anyone is interested, here is the link to the page that contains the slide presentation about the L16.

TechBeat

TechBeat是荟聚全球华人AI精英的成长社区，每周上新来自顶尖大厂、明星创业公司、国际顶级高校相关专业在读博士的最新研究工作。我们希望为AI人才打造更专业的服务和体验，加速并陪伴其成长。

www.techbeat.net

Thank you wuwukaka!
[General Questions and Answers] win32forth:
Thank you for the link. It does have contact information for John Deere corp.

FRN	0020598256
Registration Date:	02/11/2011 06:41:00 PM
Last Updated:	03/04/2015 05:43:04 PM
Business Name:	Deere & Company
Business Type:	Private Sector , Corporation
Contact Organization:	Deere & Company
Contact Position:	Aircraft Maintenance Technician
Contact Name:	Mr Timothy Newman
Contact Address:	One John Deere PlaceMoline, IL 61265United States
Contact Email:	behnchris@johndeere.com
ContactPhone:	(309) 765-7921
ContactFax:	(309) 748-3490
[General Questions and Answers] miguelfs:
I have macOS Ventura on a MacBook Pro 2017 (Intel chip) and Lumen isn’t working at all. Although it doesn't display any error, it just stays in the dock and the window is called "App not responding". Hope it helps!
[General Questions and Answers] qinzouzou:
Can you tell me how to use twrp copy the file ?I system.img into "userdata" partition (there 's error when i tried to flash "data" partition) ,but twrp can't read the system storage and data
[General Questions and Answers] BrailleCortex:
Mine still works with Lumen. The most important features released later are the ability to record video (1080p30fps) and install sideloaded apps. The patch notes page is still up here:

Light support - L16 Software Release Notes - Camera and Lumen | Light

Always improving Every week, we make the Light L16 a little better. That's the beauty of a camera built on software: the experience never stops improving.

support.light.co
[General Questions and Answers] bperryvolatile:
Is the inability to side-load apps because you don't have root? I understand the firmware update may have added the ability to do so without needing root, but would root effectively let you side-load?

Has anyone tried finding a root exploit in the stock firmware?
[General Questions and Answers] w2hef:
If anyone can get the latest firmware that would be awesome.. My light is coming got a smoking deal, but another boat anchor I don't need. We will see what firmware is on it when it arrives.
[General Questions and Answers] bperryvolatile:
It's possible the features already exist on the phone and that root access can simply enable them, although they may not be as well-tested as the released version.
[General Questions and Answers] w2hef:
Thanks. I hope so. We will see. It's just shipping. I have 2 of the LYTRO ILLUM and i love them.
[General Questions and Answers] bperryvolatile:
Some things:

Swipe down from the main screen three times to bring down the system menu. You can click the settings gear in the top right to get to the device settings. You can enable Developer Mode from here the normal way.

Once enabled, you can log into the camera using 'adb shell' but you aren't root yet. This is such an old kernel, I'm sure there will be a kernel exploit that could give us root. Otherwise, they may have left an insecure script or another way to escalate your privs to root. I'm not a pro Android hacker.
[General Questions and Answers] bperryvolatile:
Perhaps https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 would get root.

the IMAGE_CAPTURE intent works over adb but not the VIDEO_CAPTURE. That doesn't mean anything particularly bad though.
[General Questions and Answers] bperryvolatile:
I was able to sideload the Google Play Services APK for Nougat last night without root. So with devmode enabled, you can perform some sideloading as long as the app doesn't require kernel permissions or access, or other elevated access such as high ports.

If you brick it, power it off. Hold the shutter button and then hold the power button until the Light logo appears. You can use the shutter button to navigate the boot menu and factory reset the camera. Press the power button to select the menu item.
[General Questions and Answers] bperryvolatile:
Just FYI.

Linux localhost 3.18.20-perf-g6ec34d3 #1 SMP PREEMPT Fri Nov 24 11:49:25 PST 2017 aarch64

You may be able to sideload another camera app and have video recording at 1080p Just Work(tm). I'm not sure.

It should be possible to extract the file system and firmware with root. Then a package could be made containing the drivers and Camera app Light uses which captures and writes in the .lri format that the Lumen app uses.

Once the "special sauce" is separated from the basic OS, I would imagine (but perhaps not bet) that you could install whatever android you want on here, then load the drivers and Camera app from the OG firmware. Then you'd have a modern device with the same image capability, but with the extensibility of a DIY device.
[General Questions and Answers] bperryvolatile:
I was also able to sideload without root the latest version of SimpleSSHD which allows remote access to the same shell that adb shell gives, but over the configured wifi interface.
[General Questions and Answers] bperryvolatile:
I compiled and installed qu1ckr00t which implements the exploit I linked above to get root but unsurprisingly it didn't immediately work.

GitHub - grant-h/qu1ckr00t: A PoC application demonstrating the power of an Android kernel arbitrary R/W.

A PoC application demonstrating the power of an Android kernel arbitrary R/W. - grant-h/qu1ckr00t

github.com
[General Questions and Answers] bperryvolatile:
This isn't 100% true. For instance, running the image capture intent over SSh does not work immediately, but does work over adb shell. I expect this is because sshd has not been granted access to the camera, though.
[General Questions and Answers] bperryvolatile:
There is an issue installing Termux.

You need an older version of Termux, 0.73 is what I'm testing as it targets Android 6.0.1. Any Termux version after 73 will target android 7.0 and fail to install.

The older Termux installers bootstrap from the internet, and the termux app gets installed on the camera to a location Termux doesn't have write-access to. This causes bootstrapping to fail and termux to fail to start. Later Termux installers are offline.

"termux was unable to install the bootstrap packages" when I open Termux · Issue #1761 · termux/termux-packages

It happens all time when i try to open Termux highscreen pure android 5.0.2 with kernel 3.10.54

github.com

Building a new version of SimpleSSHD with a manifest that asks for CAMERA permission is also not being straightforward.

Root would be nice.
[General Questions and Answers] bperryvolatile:
I'm close to having a root exploit. There's possibly an easier way through a kernel exploit so any thoughts are appreciated. I don't want to mess with kernel pointers unless I have to.

In /system/bin/fw_update.sh, there are some possible race conditions that can be performed to achieve root code execution. I expect it will require proxying the camera and returning a specific response to the firmware updates check.
[General Questions and Answers] bperryvolatile:
Specifically:

cp /system/etc/prog_app_p2 $camera_directory/prog_app_p2
chmod 777 $camera_directory/prog_app_p2
cp /system/etc/lcc $camera_directory/lcc
chmod 777 $camera_directory/lcc
cp /system/etc/prog_app.config $camera_directory/prog_app.config
chmod 777 $camera_directory/prog_app.config

If we can initiate fw_upgrade.sh, then we can overwrite one of the bin files (prog_app_p2 looks like best) and have it run as root.

It's difficult because there is SSL verification. Proxying the update check request fails without having a root cert installed.
[General Questions and Answers] bperryvolatile:
If you run the following, you can begin proxying the firmware update requests.

am broadcast -a 'com.fihtdc.OTAUpdate.SET_SERVER_URL' -n 'com.fihtdc.OTAUpdate/.OTAReceiver' --es URL http://www.c2dms.com
[General Questions and Answers] bperryvolatile:
There are two options so far in this route.

A) Basically create a new service that repros the firmware update responses until it wants to download a firmware that we control and have rooted somehow. Need a copy of a firmware to do this but it would be easier for others going forward I expect.

B) Go the route I was intending and try to initiate a firmware upgrade and exploit a race condition in fw_upgrade.sh to execute arbitrary code as root. There could be an intent I'm missing that would kick off the shell script without the HTTP nonsense. I'm also seeing if the script is kicked off with any regularity automatically.

B) may be required in order for A) to be possible.
[General Questions and Answers] bperryvolatile:
This is a much easier method for root. I can confirm it works.

uid=0(root) gid=0(root) groups=0(root) context=u:r:qti_init_shell:s0

GitHub - hyln9/VIKIROOT: CVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow

CVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow - hyln9/VIKIROOT

github.com
[General Questions and Answers] helloavo:
This is very exciting! I will have to have a closer look through your posts when I find time. Thanks for your hard work and taking the time to post them.

I think many of us here were looking for the latest firmware in order to get the latest 'camera' app to unlock all of the photography features rather then your goal of a smart time lapse camera (I have only seen your YouTube video for now), while the root exploit would open up the device for users, without the Light Camera APK I am not sure anyone here would get anything out of root access.
[General Questions and Answers] bperryvolatile:
It's true, but you won't know until you do it. I'm also not sure you could load the next firmware without root if you had a copy of it. So root should be a goal for everyone.

I believe the software is on the phone to enable the features, we just need to enable the correct properties. Willing to eat my words though.
[General Questions and Answers] helloavo:
Hello,

I created a GitHub Archieve that contains the the offline Lumen installer.

GitHub - helloavo/Light-L16-Archive: Repository for archiving everything Light L16 related before it is all lost form the internet.

Repository for archiving everything Light L16 related before it is all lost form the internet. - helloavo/Light-L16-Archive

github.com

Edit* I suspect you have already commented on my Reddit thread where I have already responded with this link, but also posting here for posterity.
[General Questions and Answers] :
Thanks! I was able to obtain both the Mac and Win installers on helloavo's GitHub page
[General Questions and Answers] joshlewison:
Hi all, I'm glad I found this thread. I've just got an L16, which tells me that the LightOS version is 1.3.2.5-098. Does anyone know what the most recent version is?

I'm also happy to have a go at dumping the contents of the camera, if it's not going to brick it.
[General Questions and Answers] mws2019:
Can anyone do a dump of their later OS version l16 for the community and post it?
[General Questions and Answers] ZealousOne:
So from my understanding, someone with a fully updated version of the firmware already has the ability to sideload apk files. This should make cloning the software relatively easy.

A stable route access for earlier firmware however is needed so the current software can be sideloaded.

There was also mention that these devices were updated incrementally, as in they needed the previous update to allow the newest update. If we can get stable root access, with everyones help, we should be able to compile a folder with all firmware versions. (Idk if incremental updates were needed or just how they coded things for redundancy).

I'm not very good when it comes to android, however I'm willing to invest and help find an Android Developer that could possibly streamline and make the process easier if its something we think will help.
[General Questions and Answers] ZealousOne:
I will also mention I have a few of these devices on the way that claim to have the latest firmware. If they do, I'll happily work on cloning them and post it.
[General Questions and Answers] mws2019:
I am willing to find and purchase units with upgraded firmware's also and help dump the content
[General Questions and Answers] ZealousOne:
The problem is knowing which ones have them. I've found a few sellers that claim it, but only because of the "there's no updates available" message when booting it up. I don't believe many are actually checking in the system menu.

If we can gain root access, and clone devices, I also wouldn't mind creating a standalone updater for download. Something that can streamline the process for everyone.

I honestly can't believe the Light Devs didn't do that to begin with.
[General Questions and Answers] mws2019:
Surprises me as well.
[General Questions and Answers] ahcm:
Hello all - I just purchased one, albeit with 1.3.0.3-57. Having fun with it though! I wonder if it were possible to find the old firmware files from the ota.c2dms site, post them somewhere, and then have our L16s look there via a custom DNS server/redirect?
[General Questions and Answers] mws2019:
Good question, has anyone located the files yet?
[General Questions and Answers] ZealousOne:
Not a bad idea to start looking there. Server redirect for update would probably not be too hard with root access. I’m unaware if anyone has been able to obtain root access on these devices, but I’ll reach out to an android dev and see if I can get something working.

I haven’t had an android device besides this since like 2011 so I’m personally out of the loop with root access/ custom roms.
[General Questions and Answers] ZealousOne:
I’ve had no luck. Out of the 3 cameras I purchased I pulled 1.3.0.4 and 1.3.0.3. I may purchase a few more and try my luck if it means we can all enjoy these cameras to the fullest. I love the concept of this camera and have been using it heavily the past few days.
[General Questions and Answers] ZealousOne:
Didn’t see this until now, can you post the OS version and firmware?
[General Questions and Answers] gimliwasokay:
I have a damaged production unit with 1.3.0.3-57 ( i see now that

V1.3.4.1 (1341) - May 2019 - is last release in the light website release notes )

at point where I have vikiroot on it.

have older unit with old firmware... is defaulted to root on debug shell.

so i guess the plan is try to sideload a rom app and pull a backup rom of the older firmware then update the older unit. anyone been down this route yet? pitfalls / successes to share?

older firmware on 'good' unit is 1.2.2_1

newer firmware on damaged unit is 1.3.0.3-57

EDIT:

Into recovery mode on both units. No fastboot =/

God I really dislike how android OS builders always go out of their way to screw over their customers.

EDIT 2:

Initial plan is to side load busybox as static compiled target to 1.3.0.3-57 unit. execute VIKIROOT exploit to escalate to root. And do a netcat dump of the OS disk block to another node. IF that works I'll do the same for the older node. At least have a full image dump of both devices.

I am tempted to attempt to do an overwrite of the disk block on the older device with the newer firmware exported image. But that's chancey. If it goes wrong the device will brick. =/
[General Questions and Answers] mws2019:
Any progress in getting a root or dump of a camera yet?
[General Questions and Answers] gimliwasokay:
here's console logs of me rooting 1.3.0.3-57 with the VIKIROOT exploit linked to previously in thread. you can grab a binary off their releases page and it will 'just work'.

I haven't pulled images yet... but the device block netcat busybox approach SHOULD give me a full dump of the device block. What I've been reading up on is how useful that is. without fastboot i am kinda hemmed in on options. So I may be able to 'restore' a system with that image if it's the same image... but i am not sure i can PORT that to the older firmware device without bricking it.
[General Questions and Answers] ArthurColle:
Hi, I got one of these on Amazon as well. I am a software engineer so I am OK with computer stuff allegedly ;)

I am in the process of getting root on the device. It really sucks these come with 1.3.0.3-57

anyone have a copy of the updates? They must be somewhere. Do you guys know the trick where you can lookup downloaded files if they are hosted on clearnet via Web Archive? Has anyone tried that? I just tried to install F Droid but the stock "LightOS" does not allow sideloading apps.

EDIT: I was able to install the app, but then since it wants to install updates, it doesn't allow this. I am here if anyone wants to try things. @gimliwasokay definitely try to get a copy of your latest firmware, need that to sideload apps without root. Please 🙏 🙏

Anyone have a GitHub repo with all the stuff we've collected so far? The Lumen links are useful but we should really need to urgently try to get the core firmware updates.

Also, in developer settings, I see "Camera encryption" or something - is this a separate mechanism to not be able to interact with the cameras individually?
[General Questions and Answers] ArthurColle:
Here is a repo with the system-boot stuff if its useful for anyone.

GitHub - arthurcolle/L16-system-boot: Light camera abandoned their 16-lens eldritch monster camera, here is a repo with the system boot crap if its useful for anyone

Light camera abandoned their 16-lens eldritch monster camera, here is a repo with the system boot crap if its useful for anyone - arthurcolle/L16-system-boot

github.com

All the .dat "fix up" files are funny, I wonder what those are for. I haven't really done Android dev other than flashing binaries and using them. I am about to try the vikiroot exploit since I've been able to get into an ADB session from my computer. I also installed a terminal since the Developer options "built-in terminal" does not work - it crashed when you try to use it.

@gimliwasokay what are you trying to do with fastboot?
[General Questions and Answers] ArthurColle:
I was able to get root using the exploit binary that gimli suggested previously. However, after trying to do it a second time, it no longer works.

@gimliwasokay Can you try to re-execute the exploit when you get a chance?

When I do it a second time I get "Internal error: unknown kernel" even though it worked the first time.
[General Questions and Answers] mws2019:
Thanks for working on this I am hopefull we can get them up to the latest firmware and open to side load.
[General Questions and Answers] ArthurColle:
The VIKIROOT seems to work the first time but not deterministically because this camera is running armv8l in 32-bit mode
[General Questions and Answers] ArthurColle:
Sideloading already works even on the older 1.3.0.3-57 version, you just need an APK and you can run `adb push *.apk`
[General Questions and Answers] ArthurColle:
Sorry I misspoke

to load and install the apks you actually run `adb -s <Device Id from adb devices> install YourApp.apk`
[General Questions and Answers] rvandnbg:
I do not find the offline Lumen Installer there
[General Questions and Answers] mws2019:
It is there
[General Questions and Answers] mws2019:
Light-L16-Archive/LumenInstall-2.3.0.579.exe at main · helloavo/Light-L16-Archive

Repository for archiving everything Light L16 related before it is all lost form the internet. - Light-L16-Archive/LumenInstall-2.3.0.579.exe at main · helloavo/Light-L16-Archive

github.com
[General Questions and Answers] rvandnbg:
Yes it is there- Thank you
[General Questions and Answers] L16geek:
Too bad "Badger50" had my link to a facebook marketplace removed, playing xda police. Someone envious of firmware 1.3.5.1 ?
[General Questions and Answers] Badger50:
Yep, that's exactly what I was doing! ;)

Any questions? ;)
[General Questions and Answers] joshlewison:
Hi all,

Here is an interesting review of the various firmwares:

Light L16 computational camera: trypophilia

Trypophobics need not apply Let’s cut to the chase. There is no better way to spend $250 on ebay on a camera, unless old engravings of Seraphim, pictures of honeycombs, or lotus seed heads fr…

themachineplanet.wordpress.com

The reviewer's conclusion is that although there are stated differences in features, few if any of them make any difference after 1.3.0.6. He also suggests that only the Light app can use the cameras properly, so that there is no point in sideloading any other camera app.
[General Questions and Answers] L16geek:
Pretty much nonsense, imho. Without shutter and iso priority the L16 is seriously hampered. These features were only offered in later firmware versions. Try to shoot moving subjects, e.g. children or pets in auto mode indoors. Not a chance, unless you want a blurry picture. What you need for that is shutter priority which 1.3.0.6 doesn't offer. Sure on can use manual mode, but then one has to permanently adjut ISO for proper exposure.

The flick to prime focal lengths is also inceredibly useful - a feature I would not want to miss.

Also, without the basic on camera editing and after the fact focus selection of later firmwares, and the inability to sideload apps, getting images off the L16 becomes unnecessarily cumbersome. With 1.3.4.1 you can install for example instagram, and post directly from the camera.

And there are many more additional benefits like video mode etc.
[General Questions and Answers] Qiangong2:
Hi all,

I just picked a brand new L16 up and the lightOS version is 1.3.0.4-067. What is the latest version?
[General Questions and Answers] Shadoe_Lance:
If anyone is interested, there is someone in the Light l16 facebook group selling one with firmware 1.3.5.1. I already purchased one from him for 200.00. Admins, delete if not allowed. not sure if this is considered a sale post or not as Im not directly selling one. https://www.facebook.com/groups/lig...=1668171887819024&notif_t=group_comment_reply

The seller is the same person who authored this webpage. https://themachineplanet.wordpress....yC35mLmhUO3H00WhvakfBsl5NL4qYu1MPTpLUsVy6ELkA
[General Questions and Answers] ONiLX:
if someone wants to buy this for me, i'll pay for it and shipping. i just don't have a FB account.
[General Questions and Answers] ONiLX:
there is a seller on ebay with LightOS-1.2.2_1 on 6 L16 cameras. I don't know if that would be helpful for trying to hack one of these.
[General Questions and Answers] esophoric:
I just bought one with a confirmed V1.3.4.1

Is there anything I can do with this to help everyone else? Any way to dump the update so it can be used for other folk's L16?

Let me know!
[General Questions and Answers] ONiLX:
if you can sideload apps, you should be able to back up you ROM and firmware. check this out:

https://www.thecustomdroid.com/backup-android-device-guide/

i hope this works (and i hope i can load your backups onto my L16)