yashsingh1/xdaforums huggingface dataset:
[OnePlus 10 Pro] Hindook:
I made an appointment on the 26/08th and they recorded my entire session, I even accidentally clicked on the screen and almost leaked the password. I paid $65 for the service and today I bricked it again and I have no more money.
[OnePlus 10 Pro] evilhawk00:
FYI, the password is useless because these accounts use an SMS OTP code, and you don't actually need these passwords, you can patch the tool to bypass the login. The only thing needed is the signature for your device(Signature for your ChipID) during the session.
[OnePlus 10 Pro] Hindook:
So there are no ways to achieve this? In case I can't solve it? Man I'm so sad and so broke 😣
[OnePlus 10 Pro] evilhawk00:
There're some ppl here who successfully captured the signature for their device. I still don't know if they have tried reflashing but I believe it should work at reflashing with their own device. Anyway, the thing can be sure of is that the signature is device-specific. If you haven't obtained the signature for your chip, nothing can be done. The signature is calculated at the server, no one knows the algorithm to calculate that.
[OnePlus 10 Pro] Hindook:
I read and read, but I have no idea how I can do this, how to capture much less I have a contact that doesn't ask for too much, I already spent $65 once and I don't have any more money
[OnePlus 10 Pro] EtherealRemnant:
I have the 7 Pro and I'm loving it. Core speeds are overrated. The 7 Pro has handled everything I have thrown at it with no issue and unlike my OnePlus 9 that OnePlus throttles the cores out of the box, Google hasn't throttled anything, so I'm getting much better and more consistent performance from my 7 Pro than I ever did from my 9 and added bonus, it's not as warm as my OnePlus 9 was either. Done with OnePlus.
[OnePlus 10 Pro] EtherealRemnant:
I haven't tested AetherSX2 myself yet but it looks like you're good there.

Dude is running OpenGL... If he flips Vulkan, he will get way better performance.

The factory unlocked Pixels can be bootloader unlocked out of the box.

I am loving my Pixel 7 Pro. It's a huge breath of fresh air after all the problems with my OnePlus 9 almost sent me back to Apple...
[OnePlus 10 Pro] dlads:
Oh you got it? Let me know how you're getting on with updates mate...I am liking the look of it.

Hate the 10 pro.
[OnePlus 10 Pro] EtherealRemnant:
I got it day one. Best Buy was offering $790 for my old 12 Pro Max that was just sitting around plus $200 in Best Buy gift cards which basically meant they paid me $84 after taxes to take the phone lol.

So far I'm very pleased. There was a mobile data dropping glitch out of the box but there was an OTA available that fixed that right up and I've had zero issues since. Nice to finally have dual SIM again, really missed that with my OP9.

I haven't had any big annoyances with it other than the direct copy of apps and data from my OnePlus 9 seems to have changed some settings on the AOD and broken it unless I set it to always on but I really don't need the AOD so I just shut it off because I'm just not feeling the need to factory reset since everything else is great otherwise.

The slow charging is my biggest gripe. 30 minutes to 50% isn't bad but another 1h21m to full from 50% is just awful for 2022. That said, I get better SoT than my OnePlus 9 so it hasn't been a big deal.

I will say this - I don't see myself going back to my OnePlus 9. The clean interface, the fact that my apps don't close themselves for no reason in the background, the lack of delayed notifications, the lack of any throttling of the SoC in standard operations, the awful cameras... There's just nothing to really miss.
[OnePlus 10 Pro] kevchan2022:
Thanks, let me try to set it up.

BTW, i bought my phone with color os version and intend flashing to oxygen os. The phone can be directly flashed with oxygen firmware during the remote session, instead of me going through the changes from color to oxygen, right?
[OnePlus 10 Pro] kevchan2022:
I wish pixel 7 pro has 2 physical sim slots, but it turns out 1+1esim which makes me stuck with oplus...
[OnePlus 10 Pro] EtherealRemnant:
1+1 is what I prefer. Gives me enough flexibility to have a physical SIM for my main and whatever eSIM for my secondary if I so choose (but realistically one is enough for me).
[OnePlus 10 Pro] kevchan2022:
I mean under a bricked phone status and provided that the staff did not recognize I used a oxygen ROM haha
[OnePlus 10 Pro] Appreciative:
Do you know who may have an example to go with? How long is the signature? There must be some form of checking within the msm tool to verify the signature is valid. Is it key based or algorithm based? If it's algorithm based, maybe we can use the validation function in the msm tool to figure out how it is checking and create valid signatures. Setting up a server locally to trick the device into thinking it's contacting OnePlus would be the easy part.

Has anyone found examples of these logged signatures or know more about their calculation? HW serial based, HW ID based, device MAC based, IMEI based (unlikely)?

Knowing what is sent to the server and what is received could also help. Does anyone have a full exchange of the https logs somewhere to go over?
[OnePlus 10 Pro] dlads:
I had no idea about the dual SIM on the pixel @kevchan2022 sorry for advising incorrectly, I thought it was single.

Good news about the battery and yea I think I'd miss the 80W charging, it's ridiculous how fast it is.

How are thermals so far?

The clean OS I agree with, it's so slick..

Did you claim your free pixel watch?
[OnePlus 10 Pro] dlads:
Is there a way to alter the ID on the device? Even if it's temporary?
[OnePlus 10 Pro] OppoTech123:
It anyone has One Plus 10 /Pro, and desperately needs it repaired and isn't in a serviceable region, message me. I'll be sure to help you as long as you can access EDL mode on the device. I'll be offline for 9-10 hours, but will be sure to reply to all when back.
[OnePlus 10 Pro] dlads:
For free? If so then you could be a major assist in development of custom ROMs / kernels.

Bare in mind that if custom ROMs dry up for this phone then all subsequent phones from OnePlus and oppo will almost certainly suffer as end users will completely avoid the company and jump ship to a competing, more accommodating company.

You've an opportunity to do something positive for this company and it's (at the moment) loyal fanbase.

In the same situation I would do all I could.
[OnePlus 10 Pro] dlads:
Please keep the conversation in this thread, I don't wish to have a private chat with you buddy..

And unless you're hiding something neither should you.
[OnePlus 10 Pro] dlads:
Let me help you out with that.

"Hello mate.

If I could offer for free I would, unfortunately I'm simply an employee and have access to the Oppo msm flash program, and this program costs us the technicians to buy "credits" to flash the phones with after market tool. What I'm offering is to flash peoples devices remotely without taking a profit from the credit fee. Unfortunately that's all I can offer.".
[OnePlus 10 Pro] dlads:
And my response to you.

"So oppo forces us employees to pay for credits?

I'm sorry but I highly doubt that is the case, I work in the tech sector for a large firm and I've worked with several OEM's, in no way would i have been expected to pay anything to do "my job"

Also this conversation should be in the thread"

could someone advise if oppo forces their employees to 'pay' for credits to do their jobs??

i find this extremely hard to believe.

Ps: forgive the typo of US. I do not work for oppo, nor would i
[OnePlus 10 Pro] dlads:
OppoTech123

Yea, it's crazy but it is true, I don't directly work for oppo but for a authorized reseller and repair. We are charged for credits for each repair

OppoTech123

You can simply say, let's continue this in thread rather than copy pasting my reply. Anyway, appreciate your input ha.
[OnePlus 10 Pro] OppoTech123:
Your litteraly spreading missinformation, I don't directly work for Oppo as I mentioned, I work for an authorized retailer, thanks for that!
[OnePlus 10 Pro] dlads:
Why would anyone pay for something that should be free?

Profiting from this should be illegal.. You're part of a much wider problem, if you don't understand that then I can't help you.
[OnePlus 10 Pro] dlads:
I'm done with this convo..such a joke of a company, sooner I can get rid of this phone the better
[OnePlus 10 Pro] Canuck Knarf:
Yeah it sucks ass...but i found a guy that dose it for 15.00 us...which is cheap
[OnePlus 10 Pro] dlads:
Should be free, period..

Sick of these plums making money from it. Should be banned from XDA..

It'll be the death of OnePlus anyway so I'm happy with that.. woeful tactics..
[OnePlus 10 Pro] Canuck Knarf:
I just bought this to play with XIAOMI 12S PRO
[OnePlus 10 Pro] TheNewHEROBRINE:
I don't think that what @OppoTech123 is saying is bull**** since there is another user in this other thread saying the exact same thing. The question now would be if he charges the exact amount that it costs to him or he tries to profit from this service.

Unfortunately I think that if to use the MSM Tool you need credits, there is no one apart from OnePlus itself that can provide this service for free.
[OnePlus 10 Pro] Mr Hassan:
Can u provide oppo new secrecy tool to enable eng mode *#9434#?

Old mac etc block not work anymore in os12
[OnePlus 10 Pro] dlads:
The point is we all know how the MSM tool works, it's not a finite system it's a goddamn tool that flashes a firmware to a phone..

To pay for it is an abhorrent act that should be shunned..

End of story in my opinion, if people pay for it then it'll continue.

Either way I'm not bothered, to me the companies dead.
[OnePlus 10 Pro] Canuck Knarf:
Here's the worst part...Oppo and OnePlus are the same...or under same company...well at least you can unlock bootloader on OnePlus...load any rom...well I was even more stupid buying a Oppo find x5 pro...stuck with phone that has so much china stuff on it...
[OnePlus 10 Pro] dlads:
Yea that sounds horrific..

They're not doing themselves any favours.
[OnePlus 10 Pro] OppoTech123:
I agree with everything your saying. However it's currently not illegal what Oppo is doing, and all I'm doing is trying to help people in non-servicable regions be able to repair their device. If I could leak a tool that does not require this authentication I would, but that simply is not possible without jeprodising my identity/login, as well as missing funds for credit.
[OnePlus 10 Pro] OppoTech123:
It saves people paying authorized retailers with the tool at the retailers financial discretion. Opposed to simply the credit cost for the retailer
[OnePlus 10 Pro] dlads:
Sorry but I'm not going to see this from your side as I / we all know how this tool works..

It costs nothing to use, at all.... Plus we only have your word to go on, which seems sketchy at best.
[OnePlus 10 Pro] Canuck Knarf:
It not illegal...but once you pay for one of thier phones out right cash up front...you own it...do what you want with it...Like here in Canada...i buy something...i can do what i want to it..Oppo say they only protecting the customer...have to send to a oppo servise place...PAY again...mean while you can pay certian peeps ...can flash it back...they paid for service credits...Fxxk i paid 1000 for the phone oneplus 10 pro...then paid over 1000 for Oppo x5 pro...can't even open boot loader..WTF
[OnePlus 10 Pro] Canuck Knarf:
Sorry just venting...LOL

I try and kill my oneplus phone anytime i can....see what to do and not to do...Learning curve ....if i cant get it back myself...well I guess I have to pay...for now
[OnePlus 10 Pro] Canuck Knarf:
I had my Ne2210 oneplus 10 pro running on Colors OS ...running on Ne2215...running on Ne2213..I really like it running on Ne2213 android 13..Thank god its not my everyday phone...I go with Google Pixle 6 pro...great phone
[OnePlus 10 Pro] dlads:
Very very simple fix..

Never buy any of them again, typical cheap Chinese tactics, it's Huawei all over again.

Cheap corner cutting bloated crap..

Never settle? More like Never again
[OnePlus 10 Pro] Canuck Knarf:
lol your right
[OnePlus 10 Pro] Canuck Knarf:
Here's another way to look at it...Here on XDA ...we go beyond what oppo and oneplus...xiaomi...Huawei...other phone companies expect form " then normal user"..so if unlock your bootloader...load other roms which is not specifically for your model...well pay for it,,,??? your own fault..?... But heres the thing once you buy it you should be able to unlock bootloader...I dont care if you kill it or not...but bootloader should be able to be unlocked..after that you on your own...?
[OnePlus 10 Pro] dlads:
I really wish I wasn't mate.. OnePlus has been a breath of fresh air for so long and it's a painful pill to swallow to be faced with the reality that it's coming to an end.

Not only that but where to go from here?

Hopefully there's some light at the end of the tunnel, but I'm extremely hesitant to follow another Chinese start up or young and ambitious company into the future when I've seen two of my previous phones (Huawei and OnePlus/oppo) drop us all like new born giraffes.
[OnePlus 10 Pro] dlads:
I totally agree,, open source should mean just that.
[OnePlus 10 Pro] Canuck Knarf:
Oh thats good... I never seen that one
[OnePlus 10 Pro] dlads:
I get the same.

Any use for it?

I've managed to get into the

*#*#4636#*#* mode for tests but it no longer works for me with any dialer
[OnePlus 10 Pro] Canuck Knarf:
No clue...but playing with it.
[OnePlus 10 Pro] Mr Hassan:
Its eng mode for op and your device is in os11 that why u enable it
[OnePlus 10 Pro] OppoTech123:
More then happy to assist with this in regards on allowing packet capture.
[OnePlus 10 Pro] ues_t:
As far as I know, the SMT function of oppoflashtool is not available. Once you use it, you will be stuck in re-dividing ufs. If you re-write normally later, you will lose baseband information.
[OnePlus 10 Pro] ues_t:
Therefore, I saw that the OPPO staff still has the iconic msmtool tool
[OnePlus 10 Pro] ues_t:
If you need help from Chinese customer service, I am very happy, provided you trust the remote tools provided by OPPO
[OnePlus 10 Pro] Mr Hassan:
Are u in customer service center?
[OnePlus 10 Pro] ues_t:
I have a mobile phone number of +86 and can communicate with OnePlus customer service. I am not in the customer service center
[OnePlus 10 Pro] Mr Hassan:
Bro i think you can only get remote flash from them

But if you can still try for oppo realme os12 diag enable tool

Maybe they'll provide you new tool or mac address

You need to tell you want to access *#9434#
[OnePlus 10 Pro] ues_t:
It's a pity that they provide tools and accounts, but they paste passwords remotely and they don't need me to provide a mac
[OnePlus 10 Pro] Mr Hassan:
Ok if i manage device then you can provide remote support?
[OnePlus 10 Pro] ues_t:
Are you willing to assist with the web scraping flashing process?
[OnePlus 10 Pro] ues_t:
If you want, I will always be there for you
[OnePlus 10 Pro] Ph0nysk1nk:
can you get your phone into 9008 mode? Or are you having some problems?
[OnePlus 10 Pro] Mr Hassan:
If vol up down will bring it to 9008 mode I'm ok with that

But incase i stuck on 9008 mode 😅 then people's around here chrage 90$ to flasg device
[OnePlus 10 Pro] metrixx02:
Waiting good news.in extra pls who have bricked phone pls contact me .i think we could use new edl methot to rise up phone...

Loaders/oneplus at main · bkerler/Loaders

EDL Loaders. Contribute to bkerler/Loaders development by creating an account on GitHub.

github.com
[OnePlus 10 Pro] Mr Hassan:
this method not gonna work for op10

its not about loaders its about patched loader coz its need authr
[OnePlus 10 Pro] EtherealRemnant:
Oplus flash tool zip is corrupted.
[OnePlus 10 Pro] OppoTech123:
Try the first version i attached
[OnePlus 10 Pro] EtherealRemnant:
Yeah I did that after I submitted the post. You should fix or remove the broken zip though so others don't have the same problem.
[OnePlus 10 Pro] OppoTech123:
Yes didnt realise the archive was corrupt until you posted.
[OnePlus 10 Pro] DenisPDA:
Hello, I'm not sure if this works.

There is also a VIP
[OnePlus 10 Pro] ues_t:
Could not finish flashing
[OnePlus 10 Pro] Kosta26:
same as with MSM.
[OnePlus 10 Pro] keaheng:
Beauty of xda
[OnePlus 10 Pro] tap77:
It feels like we are so close!
[OnePlus 10 Pro] Canuck Knarf:
I did that ...works but just stuck at 3% and dose not complete the flash but here are the log files
[OnePlus 10 Pro] EtherealRemnant:
Sounds like the VIP signature is still required here. The fact that it was reaching out to an Oppo server made me think for sure this would still be the case.
[OnePlus 10 Pro] :
Ditch this garbage phone asap. Oneplus doesn't deserve rom development
[OnePlus 10 Pro] ues_t:
I got a msm temporary account, we are running out of time
[OnePlus 10 Pro] metrixx02:
Up guys up
[OnePlus 10 Pro] DenisPDA:
Oneplus 10 Pro - unpack requires a buffer of 4 bytes in get_serial_num() · Issue #274 · bkerler/edl

Macbook Pro, Intel, OSX 12.2.1 Python 3.8.9 edl 3.6.0 (git pulled 4/14/2022) Multiple data cables / ports tried Attempted with OnePlus loader from MSM, as well as no loader, same error. Qualcomm Sa...

github.com
[OnePlus 10 Pro] ues_t:
I can provide your account password directly, my computer can't do such complicated work
[OnePlus 10 Pro] Mr Hassan:
U mean all setup to collect logs etc to get some idea how its work?
[OnePlus 10 Pro] ues_t:
What does the tool communicate with the server when grabbing the flash device
[OnePlus 10 Pro] Mr Hassan:
Ok that's not a isse here just one expert can tell me which thing's need to be ready then i prepare setup then you can arrange remote service
[OnePlus 10 Pro] ues_t:
First learn about your device, do you have 2215 on your device?
[OnePlus 10 Pro] ues_t:
I guess oneplus changes the edl of the device, some people's devices cannot enter the edl through volume addition and subtraction,
[OnePlus 10 Pro] ues_t:
You first need to try to enter the edl to see if there is a problem, if you enter the edl mode, the com of the device manager will display 9008, or the unknown device 9008
[OnePlus 10 Pro] ues_t:
And you need to download your corresponding version of ofp, OnePlus has restricted this, you can only flash the corresponding version of ofp
[OnePlus 10 Pro] ues_t:
This is a remote tool for their customer servicehttps://drive.google.com/file/d/1QyGWpSZyzMIdINdCkfODw5KRTwlJNx4k/view?usp=drivesdk
[OnePlus 10 Pro] ues_t:
If you are ready, I will start contacting customer service here.
[OnePlus 10 Pro] Mr Hassan:
Let me manage device
[OnePlus 10 Pro] ues_t:
Have you downloaded the tool and msmtool?
[OnePlus 10 Pro] evilhawk00:
Info for anyone who would like to capture any EXE traffic with fiddler classic, here is the Proxification Rule for proxifier. Just set up the fiddler server at localhost for decrypting HTTPS and use proxifier to force reroute the target exe to the proxy. Remember they need to be in the same order, the higher item in position has higher priority. You should test your setup before proceeding.
[OnePlus 10 Pro] ues_t:
Maybe you can elaborate with him
[OnePlus 10 Pro] evilhawk00:
Just saying, from what I've known, if @Mr Hassan is able to do a capture, the captured signature only works for his device but not for others. (Due to the ChipID issue I mentioned previously.)
[OnePlus 10 Pro] Mr Hassan:
i need for all xda members its useless if work only for me
[OnePlus 10 Pro] dlads:
What chip is it?

It must be able to be spoofed..

For example if It can be set to 000000 then flashed, then if anyone else wants to use the tool they then set theirs to 000000 and revert back after flashing.

That's the only way I can see it happening.

1. Spoof chip ID.

2. Flash.

3. Revert back.

Not sure if the tech would be looking for it, but if it's possible then it'd only have to work once, then we have it
[OnePlus 10 Pro] evilhawk00:
I think it may be some kind of hardware serial.

Spoof? Even if it is IMEI related, I remember QPST can only write IMEI when the OS is running.

Spoofing the serial when the phone is bricked? Ummm.....I don't know how.
[OnePlus 10 Pro] dlads:
You wouldn't need to be bricked, if Hassan and ues are going into this with open eyes and a forced crashdump then the spoof could be done before hand, I'd assume that these techs in oppo / OnePlus wouldn't even notice, plus MSM tools wouldn't re-alter numbers like IMEI or otherwise.. I wouldn't have imagined that it is the IMEI, it's more than likely the serial number if anything.

If we're planning to obtain this tool without the convoluted method of everyone doing the same thing or person then I don't see another way.
[OnePlus 10 Pro] evilhawk00:
According to https://github.com/quic/sample-apps...rm/tree/master/HexgonSDK-Image-classification The Qualcomm Unique Soc serial number is 8 digits, the ChipID appears in the download tool log is also 8 digits. That's why I think it may be the serial number of the SOC.
[OnePlus 10 Pro] dlads:
Good shout... If a session were to be recorded (external video) do you think any information would prove useful, or even a log of an MSM flash in action?

Perhaps older MSM tools have always done this but they haven't enforced check in with OnePlus? If we can clarify this then it may just offer us a direction, I honestly haven't a clue how an SOC serial could be spoofed but it looks like the final firewall we're up against.

Is this number the number what's present when checking ADB devices or the number at the connection screen of fastboot enhance?

Does the MSM tool show it when connected via COM?
[OnePlus 10 Pro] ues_t:
I can provide flush log
[OnePlus 10 Pro] dlads:
According to the logs you posted this is where it falls flat.

[COM51] Set Sahara file ok sahara file: prog_firehose_ddr.elf.

[COM51] Attempting to send a Sahara message for communication

[COM51] Downloading Firehose protocol file via Sahara protocol

[COM51] Sahara communication succeeded

[COM51] filename=ChainedTableOfDigests_20846_persist_no_userdata_yes

[COM51] Trying to handshake via Firehose communication

[COM51] Configure the settings of Firehose communication data transmission

[COM51] Get sign data

[COM51] ID:b73e685e, B:enable

[COM51] old_sw_name_sign:261fe06798cff432e5512eaa5339f797f2f213eaa739ddeea7f0985a048fe9e3, new_sw_name_sign:9d975a304cf3d7d1f9f7ed402297996d7c457aea71fd0a5c2dc6278b68cde27c

[COM51] Verify Data

[COM51] FirehoseCheckRSP is ERROR.

So what is this code relating to:

[COM51] ID:b73e685e, B:enable

Furthermore, the "enable" selection, could we disable that check?
[OnePlus 10 Pro] ues_t:
is this
[OnePlus 10 Pro] ues_t:
MsmDownloadToolLog_2022-09-22_19_41_32_0000.txt

drive.google.com
[OnePlus 10 Pro] evilhawk00:
The related code of that B value should exist in "prog_firehose_ddr.elf". I can't tell what it is because I don't understand the ARM assembly codes. Only the one who has experience in ARM reverse engineering can tell. I think it's a dead end here.

That's why I said "the user has to at least pay to flash their device once to capture the signature for their device" previously. At least the ID is always the same on the same device, capturing the signature for a Rom developer may be enough for that developer to build a custom ROM.
[OnePlus 10 Pro] dlads:
I don't think it's a dead end, I think it should at least be explored, plus it's not as simple as paying once..you need to get someone to link you up with them.. here in the UK we don't do remote flashes.
[OnePlus 10 Pro] evilhawk00:
According to the newest log provided by @ues_t, the log generated by OPPO Flash Tool Version V3.0.17.19 indicates that "B:enable" value is "secure boot". Bootloader locked.
[OnePlus 10 Pro] evilhawk00:
I can not guarantee that the ChipID is used to calculate the signature because the calculation process is made on the server side, it can also be used for logging only. But I'm sure the ChipID information is sent to the server during querying the signature, this is what I saw from binary static analysis. And feeding the signature to other devices doesn't work.
[OnePlus 10 Pro] Khawoatmaximus:
เครื่องมือของฉันไม่เห็นโมเดลคุณสามารถสอนวิธีการเข้าถึงในแบบของคุณได้หรือไม่?

Mod translation: My tool doesn't see the model, can you teach me how to access it your way?