yashsingh1/xdaforums huggingface dataset:
[Droid Eris Android Development] binny1007:
same thing here it just sits there....... what are we doing wrong?
[Droid Eris Android Development] binny1007:
i have 1.5.1 and it just hangs there
[Droid Eris Android Development] rigamrts:
if it's sitting there then it waiting for something. so there is something not in you nbh to trigger the install or there is an error in whatever img your using and the bootloader just stall's. those are 2 senerios that can be happening.
[Droid Eris Android Development] binny1007:
i am talking about when i am in fastboot I am not sure that the nbh is working as it should i am working on flashing from the ruu screen that i found.
[Droid Eris Android Development] punk.kaos:
5 minutes or so. When you do this on the G1 or the Hero it begins to start nearly imediately.

I'm gonna try fastboot flashing recovery.....

EDIT:

fastboot flash recovery recovery-RA-heroc-v1.5.2.img

sending 'recovery' (3278 KB)... OKAY

writing 'recovery'... INFOsignature checking...

FAILED (remote: 12 signature verify fail)
[Droid Eris Android Development] rigamrts:
have you tried just building a full install nbh with the recovery being replaced or maybe the system img has su stuffed inside. even if we just get su in there. it doesn't have to be chmoded to 755 it just needs to be in there. then we can try to exploit hack it the rest of the way.
[Droid Eris Android Development] ataranine:
That's probably how long I would have waited.

Damnit, this sucks.
[Droid Eris Android Development] 27s:
I am not really used to working with fastboot, but why not do an adb shell flash_image? Does it fail the sig check too?...Because when you are in fast boot you can adb right? if so, try doing this:

take RA's recovery then make sure to push it to the sd card, then "cd" in to the sd card.

Then, run "adb shell flash_image recovery (file name of recovery.img).

--Matt
[Droid Eris Android Development] rigamrts:
the thing is if we could get su in to the eris with a nbh. then we have a target to attack with an exploit. i know you guys want it now really bad but hey if we can get one step at a time. we'll have a better shot. binny can you see if you can slide stuff into the eris.
[Droid Eris Android Development] binny1007:
what do you mean by slide stuff in? i tried push but that does not work with fastboot do you have a su file that i can slide in when you do "fastboot flash" i think it copies whatever file you are trying to flash to the cache, so maybe i can do that?
[Droid Eris Android Development] rigamrts:
here's a copy of su hope we can get stuffed into the eris. it probably won't have the right permissions but that will come later. here's crossing my fingers.
[Droid Eris Android Development] rigamrts:
if you can get su into the system/bin dir then you can try adb shell su and it should either give you a root prompt or a permissions error either way if it is in the dir then we are one step further than before. then we can find an exploit to force permissions onto it hopfully.

jmanly might be able to chime in better about what we should do from there.
[Droid Eris Android Development] binny1007:
ok so just a update it apperars that you cant even flash a signed rom from the fastboot mode that i found, need to do more research but i am about done for the day so good luck all.
[Droid Eris Android Development] rigamrts:
no prob save your brain no need to get a migraine over this.
[Droid Eris Android Development] binny1007:
yea i am going to try one more thing when i get home and that is the gold card but i dont expect that to work
[Droid Eris Android Development] ataranine:
Why is this damn thing so hard to hack!?! WHY HTC WHY!?

Even the Moto, running a more secure (supposedly) version of android, got rooted.

It's confusing.
[Droid Eris Android Development] rigamrts:
moto got hacked cause of the big hole they left in the kernal that allowed you to shove anything by the sig check. the security was useless no matter how good after that LOL!!. with htc they've been dealing with us since the dream so they've had time to build a defense.

it's not that htc thinks we can't hack this just thier trying to stay 2 steps ahead. but mistakes are made and checkmate will be ours when we find it.

i think htc has fun trying to outsmart us.

right now i'm trying to get the nbh tool te binny posted to work for me so i can play cause the other tools not working for me
[Droid Eris Android Development] ataranine:
Bastards. :(

It's probably also because people care more about that POS than they do the Eris.. so they're putting all their effort into hacking that useless phone. >.>
[Droid Eris Android Development] rigamrts:
1 thing is i've heard no news of them successfully getting sence woring on the droid properly LOL!!!
[Droid Eris Android Development] ataranine:
I hate Sense. That's why I want this Eris rooted so bad so I can flash a different ROM onto it that doesn't have Sense.
[Droid Eris Android Development] rigamrts:
you know you can shut sense off and run plain jane homescreen
[Droid Eris Android Development] ataranine:
Yeah I know but it's just the Home screen. I meant I don't want a single part of Rosie on my phone whatsoever.

Like the Notification bar stays black instead of goes to while, since disabling Sense doesn't change that. It sucks.
[Droid Eris Android Development] rigamrts:
other than the widgets thats all they did was replace the home screen as default. when we get root we'll be able to remove those but by shuting it off you are just getting plain android. rosie wouldn't be running at that point. it was a sugestion till we get root that's all.

the black bar is just a skin replacing the original graphic it's not rosie at all. so even if you removed all of rosies parts the bar will still be there.
[Droid Eris Android Development] ataranine:
Nah I'm pretty sure it's part of Rosie, or another Modification HTC did. I want the white bar because I like it better and the notifications look cooler on it.

And I can't STAND that crappy Lock Screen the Eris comes with.
[Droid Eris Android Development] rigamrts:
no it's not part of rosie. that's why it's ported on half the dream stock roms. i have a dream and have loaded rosie even removed all her parts and that bar is still there. it's just a skin replacing the original one.
[Droid Eris Android Development] ataranine:
Well there's got to be a way to remove it.. with or without root?
[Droid Eris Android Development] rigamrts:
once rooted there will be all types of skins you can throw on it just make sure it's compatible with the rom you loaded and you check the screenies to make sure it does not have the bar. problem would be finding someone to port a template over to a non rosie homescreen.
[Droid Eris Android Development] ataranine:
I just think that Sense and Rosie and all that crap make my phone look like a toy.

It's a badass phone and it deserves a badass UI. HTC should have left it the hell alone. We should at least be able to customize it the way they advertise we can...
[Droid Eris Android Development] binny1007:
I just found this site there is some helpful tools on here for unpacking signed zip files but most of them are nix tools anybody want to give thease a try
[Droid Eris Android Development] chuckz07:
Yes, where they be at?
[Droid Eris Android Development] binny1007:
Whoops

http://aluigi.altervista.org/mytoolz.htm
[Droid Eris Android Development] chuckz07:
Thank you!
[Droid Eris Android Development] zifnab06:
Does anyone know if its possible to modify the nvram or the ram thats currently being used on the eris? I just had an idea, but it might take a little more work than we are worth working on.

And I'd need someone with a Hero.
[Droid Eris Android Development] punk.kaos:
QPST has a tool that can do it. I have both an Eris AND a CDMA Hero if it helps any....
[Droid Eris Android Development] zifnab06:
What I want to try:

Would it be possible to take the section of RAM that the CDMA Hero is using to run something as root that is easily exploitable, and then take that section of RAM, and write it onto the Eris/HTC Desire? Get the process to run, (such as sshd or telnetd), exploit it, and get a temp root to root the phone with?
[Droid Eris Android Development] punk.kaos:
Hmm, I think that would only work if they were running exactly the same software and hardware, which we know they're slightly different.

If you can figure out how to isolate that part of the memory I'm willing to try it though.
[Droid Eris Android Development] rigamrts:
they ripped out telnetd in 1.5 to try to prevent us from rooting the dream but didn't stop us. they kept in out in all other releases they should just throw it back in it's not stopping us from hacking phones.
[Droid Eris Android Development] binny1007:
Ok guys I think I fried my brain today but maybe made some progress has anyone else played with the fastboot screen that I found I think if we find the right command we can flash from there
[Droid Eris Android Development] zifnab06:
Wait...fastboot screen? Sorry, I've been AFK since Thursday mostly besides internet on my Eris. I'll look into it and see what I can do :D
[Droid Eris Android Development] zifnab06:
input

adb shell reboot oem-78
fastboot boot "recovery.img"

output

downloading 'boot.img' . . . OKAY
booting . . .

It stalls. But it will load anything I throw at it up until it stalls. Good or bad? Probably good. I'll keep playing with it.

Edit -

Good news - We have a COMPLETLY unlocked fastboot!!!!!

Bad news - I have no idea how to get it to work sadly. I'll keep playing with it.

PS - Thanks for whoever found the oem-78 method.

PPS - I'm uploading everything we find at http://blog.zifnet.us. All used files will be at http://download.zifnet.us/eris.

Sweet! Lets brick this thing!
[Droid Eris Android Development] binny1007:
Do " adb shell reboot oem-78 " from there use fast boot commands goodluck
[Droid Eris Android Development] 87jason:
Why does this phone have to be difficult, I have got no me my friends that Is really familiar with Linux taking a look at it and he hasn't found anything yet. This phone is the spawn of satin, I really just wanna kick a puppy right now lol.
[Droid Eris Android Development] binny1007:
Here is a trick. I learned, when it says booting... start the ruu and it will unfreaze your command. Don't acually run the whole ruu just let it go through the steps until the end than cancle it.
[Droid Eris Android Development] binny1007:
Also after that you can do flastbook flash recovery custom_recovery.img I have been trying the recovery made for the Sprint rom but it just hangs on sending
[Droid Eris Android Development] zifnab06:
Only problem is, recovery.img out of the default rom.zip doesn't load whatsoever. I'm stuck at an "HTC" screen. Weird.

Just a note - does anyone here have google wave? it might be faster to root it if we can colaborate instantly :D
[Droid Eris Android Development] binny1007:
Nope and I'm off to bed but I was wondering if you guys wanted to start a pool to get more devs intrested like a reward for the first person to root the eris I would be willing to throw 25-50 bucks on it. Just a thought.
[Droid Eris Android Development] markachee:
scratch this, i had a bad download of the recovery image
[Droid Eris Android Development] punk.kaos:
Its not COMPLETELY unlocked. Its just accepting commands now, it still fails sig checks....

And you're welcome for the OEM-78 trick ;) It just is doing the same thing the RUU is without having to start the RUU.
[Droid Eris Android Development] chuckz07:
Would someone mind, please, uploading the rom.zip file? I switched over to the linux side of my computer and I thought (my fault) I could get them from the .exe but it will not open. Thanks!
[Droid Eris Android Development] markachee:
Gotcha... the RUU steps:

http://www.suphammer.net/Hero/RUU

Is it safe to say this is a fastboot mode that will only accept .zip files (which of course have to be signed) and not .img files?
[Droid Eris Android Development] chuckz07:
OOOHHH...that gives me another idea! Thanks!
[Droid Eris Android Development] markachee:
I should also mention that after doing it this way, the phone stops responding to the fastboot command (devices still shows it) and if I pull the USB cable it's at the skateboarding androids screen and says:

CID incorrect
Update failed

and I have to pull the battery
[Droid Eris Android Development] 27s:
Does doing a flash_image recovery recovery.img not work in adb in fastboot?
[Droid Eris Android Development] rigamrts:
that's sounds good. it sounds like it's looking in the header file for something and if it's not there it fails it's better than a sig failure
[Droid Eris Android Development] punk.kaos:
ADB doesn't work in fastboot... Only when the system is booted.
[Droid Eris Android Development] rigamrts:
nope that's shell command under adb or linux console
[Droid Eris Android Development] chuckz07:
I used this command and I have something going on...

fastboot -c 0755 flash zip rom.zip

Among other lines, one of them said something about searching for signatures then it said somehting about INFOadopt signatures in this package. I'll report more in a few. Phone is still updating
[Droid Eris Android Development] ataranine:
I hope you're onto something here...

I swear I wish I knew more about Linux.
[Droid Eris Android Development] binny1007:
You and me both.....
[Droid Eris Android Development] ataranine:
The hell is this guy talkin bout...useful info? :confused:
[Droid Eris Android Development] chuckz07:
Ok, looks like I DON'T have root but...I'm not done yet. First, I need to relocate computer I don't keep wifey awake all night again.

For those that don't know, the -c is a command to bypass a kernal partition. Somewhere I read that 0755 was the partition possibly with the sig check.

More to come, with more trial and error of course.
[Droid Eris Android Development] binny1007:
Wow my fingers are crossed and try fastboot -c 0755 recovery recovery.img and use the recovery posted earlier by jman
[Droid Eris Android Development] wasupwithuman:
I was saying that IF the droid was rooted with a kernel exploit, but instead it was rooted with a bootloader exploit which makes it useless for any phone that isn't a motorola.
[Droid Eris Android Development] ataranine:
sonuvabitch!! :(
[Droid Eris Android Development] chuckz07:
If we could find some more kernal command lines and possibly what they are for, I could try some others besides 0755. I will try Google, but if someone happens to already have them or know exactly where to get them, it would be appreciated. Thanks!
[Droid Eris Android Development] binny1007:
Somthing like this

http://android.git.kernel.org/?p=platform/bootloader/legacy.git;a=blob;f=usbloader/usbloader.c
[Droid Eris Android Development] chuckz07:
Yes, but I guess I was hoping for something a little more in depth. Basically what I am looking for would be a list (hopefully including 0755) because I am wondering where the signature checks are taking place. I keep running in to sig errors with other updates and such.
[Droid Eris Android Development] chuckz07:
Now if this could be useful info for someone smarter than me, here is what I am getting...

sending 'zip' (6659 KB)... OKAY

writing 'zip'...INFOsignaturechecking...

FAILED (remote: 12 signature verify fail)
[Droid Eris Android Development] markachee:
where did you see 0755? (looks more like chmod flags)

I think -c is for overriding kernel command line "parameters" like these guys are using it: http://www.gossamer-threads.com/lists/linux/kernel/1151198

but not sure what kernel that refers to (in the image being flashed/booted?)
[Droid Eris Android Development] chuckz07:
You are probably right about the 0755 then. I have been known to be wrong on more than 100 occassions.

But as far as the -c, unless I am misinterpreting that command, I looked at it as I am telling the loader to bypass that line (hence trying to bypass the signature checker). Am I wrong here? Cause if I am I will move on to try something else.
[Droid Eris Android Development] binny1007:
Where do you think the files are bieng sent to on the device? I had a thought that maybe we could use fast boot to upload a file but I can't figure out were it sends it to. Allso did you play with the update command at all?
[Droid Eris Android Development] markachee:
Blind leading the blind here man, ha. I'm not sure either.

So even when you try to fastboot flash one of the images from the Eris RUU, you get the signature failed thing? And if you try to boot, always hangs at "booting..."?

That's what's happening to me with the Hero, but I don't have anything signed for it. I would think at least the images out of your RUU would work for you.
[Droid Eris Android Development] zifnab06:
The -c passes just normal linux kernel boot flags. Such as root=/dev/sda1 (to boot from a different drive) etc. The most I can see us doing with this is trying to install an eris OS onto the sdcard (/dev/mtdblock?) and booting from there. While possible, probably won't help us much (unless we can use this to get root somehow, which I think might be harder than I'm already thinking it is).
[Droid Eris Android Development] chuckz07:
rom.zip file works under fastboot. Haven't tried a single file from it yet, will do that after this post.

Binny, yes, I tried 'FLASH' and 'UPDATE'

EDIT: And yes, freeze on fastboot boot recovery.img
[Droid Eris Android Development] zifnab06:
The update command needs some stuff we don't have (android-info.txt and android-update.txt or somewhat like that) I don't think it will help us, because we are back to the same old we need an update.zip that's signed by HTC.

WTB HTC EMPLOYEE PST!!! WTB ERIS SIGNATURE!!! WE HAZ MONEY!!!

Just to sound like a nub, thats about the only way we might even have a chance of getting the update.zip method to work :D

Edit - Sorry for the stupid note, but does anyone else find the fact that the RUU sits ON TOP OF EVERYTHING WHILE ITS RUNNING annoying at all? Really HTC? Could you have possibly done a WORSE job of creating this program? (that's my ranting for the day)

Edit Edit - I guess one more edit. I get stuck at the HTC screen when I try to push the recovery.img off of the RUU's rom.zip onto the device. So

fastboot boot recovery.img

comes out with a screen that says "HTC". And it just sits there. The RUU is still running right now, it says "Verifying information on your Android phone. Please wait...."

Has anyone else gotten this?
[Droid Eris Android Development] ataranine:
Screw it, at this point I don't even care if it gets rooted any more.. I'm taking it back to the store tomorrow. I'm tired of the countless bugs. Ugh.

It just locked up on me forcing me to pull the battery. >..> AGAIN

They'll end up giving me another.. and when that one messes up, it's the DROID for me.
[Droid Eris Android Development] chuckz07:
We have the android-info.txt. Other than that, from some reading earlier in different places, we should be able to unzip the .exe (MR1 Update) under linux. I tried but linux and me aren't getting along right now.
[Droid Eris Android Development] zifnab06:
Sorry but I can't upload the rom....i'm stuck on a 256k line until after the 1st. I might try to find an ftp browser and do it through my phone when it turns back on though :( You could try wine (sudo apt-get install wine) and run the .exe on linux, and grab the rom the same way as before though if you wanted to :

Edit: http://download.zifnet.us/eris/rom.zip. It'll be up in about 10. Yay for the market (I assumed there wouldn't be an ftp app for the android market because I'm so used to the appstore on my old iPod :( )

Edit: One more note. So, we are failing at one thing. Fastboot boot boot.img. Don't use recovery or anything else. Just use boot.img. Recovery doesn't actually BOOT anything, the boot.img does. So, let me make a modded version in a few if I can get it to work. Just have to wait for rom.zip to upload :D

One more note: rom.zip failed. Twice. I don't know why. Sad day. Sorry man
[Droid Eris Android Development] zifnab06:
Sorry for the massive edits/multiple posts.

Anyways

http://xdaforums.com/showthread.php?t=544409

This is fastboot hero commands. fastboot oem boot is kinda fun, not sure what it does though. it could come in handy maybe?
[Droid Eris Android Development] jmanley69:
binny, if you're in recovery and there's a menu that you can scroll... that's the custom recovery! go back to this setup!!! Does the menu have options like "Reboot" and "Backup/restore" and such?
[Droid Eris Android Development] jmanley69:
If you can get su into /system/bin, you have root. If you can get a custom recovery or boot image onto the device, that gives you the ability to put su into /system/bin.
[Droid Eris Android Development] jmanley69:
SensUI aka Rosie, is the whole "experience". Yes, with root, you can remove it (very easily and without a custom ROM). When you remove it, you cannot use any of the HTC widgets anymore, and you have only 3 home screens... None of this may be a problem (wasn't for me), but just something to think about.
[Droid Eris Android Development] jmanley69:
Try this...

Take the .zip in this post, unzip it, you get boot.img. try using the fasboot download command to put the boot.img into memory and then try the boot command to boot off of it. If that works, you should be able to adb shell into the device and you have root (while it's in this mode, but that will give you the ability to make REALLY root your phone).
[Droid Eris Android Development] jmanley69:
I want everybody to be clear. The only recovery image you should try to put on your phone is the one I gave you in this thread. any other recovery image from any other thread will not work on your phone. Every phone as its own kernel, and without the one for your phone, it won't boot. It's not enough to have 1.5.1, it's all important to have the 1.5.1 for your phone. The Hero CDMA version won't work on your phone, only the Eris version that I created. Please please please be clear on that. You won't end up bricking your phone by putting the wrong recovery image on it, but you won't have gotten anywhere either. I know you guys are getting frustrated, but if you go through all these steps on something that won't work anyway, it's even more frustrating.
[Droid Eris Android Development] rigamrts:
here's the recovery img jmanley is talking about brought back up from the basement
[Droid Eris Android Development] moggles:
The boot.img just hung for me when I ran fastboot boot boot.img I get

downloading 'boot.img'... OKAY

booting...

and it hangs.

When I try to flash the image of course I get a signature error.
[Droid Eris Android Development] binny1007:
After you do fastboot boot boot.img start the ruu it will unhang your command and than you will get boot.... okay
[Droid Eris Android Development] binny1007:
No backup and restore but like I said I can scroll with the track ball and I did not think I could do that before if you have update ill try to load it.
[Droid Eris Android Development] jmanley69:
What are you scrolling through? Is it a menu? what items are on the menu?
[Droid Eris Android Development] jmanley69:
You shouldn't be able to flash the boot image, but if you can get it to boot it... it may appear hung because it actually booted. Try doing (from another command prompt) adb shell and see what you get.
[Droid Eris Android Development] binny1007:
It's just the normal reboot apply update or factory reset.
[Droid Eris Android Development] jmanley69:
I'm unfamiliar with that menu. Can you take a screenshot?
[Droid Eris Android Development] Videofolife13:
I'm running fastboot boot boot.img (boot.img is in the tools directory of the sdk) and I can't get adb to recognize the device is attached. It's hung on the htc screen and terminal says:

ERROR: could not get pipe properties
downloading 'boot.img'... OKAY
booting...

And I'm stuck there...
[Droid Eris Android Development] jmanley69:
ok. like I said... leave that command prompt window exactly where it is ('hung"). Open a new command prompt and try adb shell from within that new command prompt and see what happens.