yashsingh1/xdaforums huggingface dataset:
[Droid Eris Android Development] bftb0:
Just wanted to point out that what HTC released was the kernel code ... and nothing else!

In particular, they didn't release the source code for their bootloader, and it is possible they have no legal obligation to do so. (They also didn't release code for any of the runtime libraries or any of the native executables on the phone either... which they might be legally obliged to do, but that doesn't have much bearing on the bootloader.)

That's gonna make zifnab06's job about 100x harder. Not impossible, but still hard enough, as it would mean reverse engineering the binary code to the bootloader, finding the location that does the signature checksums, and fixing it (jumps & patches) so that it always returns a "yeah, everything is OK" result.

If zifnab06 is really up for that, then he doesn't need to wait for root to get started. I guess he needs to figure out what the format of the hboot*.nb0 file is. (It gets unpacked out of the "rom.zip" file in the RUU). Looks like there is an immediate (ARM) branch in the first word of that file, and what appears to be valid ARM code at the jump location (offset 0x50). That's a start - but it's as far as I am willing to go :(

bftb0
[Droid Eris Android Development] HT123:
suid binary

will the OTA update overwrite what is there. For instance, if we get root on 1.5 and then copy sh to data/local and chown and suid it then i think we stand a better chance. We then hope that the OTA update does not mess with that directory.
[Droid Eris Android Development] DarthMowzy:
Sweet! Cant wait
[Droid Eris Android Development] redman213:
Well HTC reads these forums so I hope they magically get nice and don't "read" your post...On the other hand, how much would it cost to get an HTC employee to do the dirty work for us??? Say $660?:rolleyes:
[Droid Eris Android Development] nindoja:
Congrats on root guys, can't wait to get a tutorial from you all.

As a software security engineer, if you guys need any help doing testing of the exploit just let me know.

and now to spam refresh the page till there is a tutorial out.
[Droid Eris Android Development] redman213:
Ahhh too late I just DarthMowzy's post (Haven't checked the update yet) and I think I just had a HEARTORGASMSPAZTEARSOFJOYHORNYJUMPINGUPINTHEAIR....attack:D:D:D:D:D:D:D:D:D:D:D:D:D:D:D:D

I LOVE YOU GUYS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!:D:D:D:D:D:D:D:D:D:D:D:D:D:D:D:D:D:D
[Droid Eris Android Development] Framework43:
-FAIL- =[

Disappointment.
[Droid Eris Android Development] JrzDroid:
thank you so much Dev team!!!!
[Droid Eris Android Development] tortuous801:
Thanks to the DEVS!!!!!
[Droid Eris Android Development] JTF2007:
This is awesome! Thank you to EVERYONE who provided their time and efforts to see this task through. Where do we send our contributions :D?
[Droid Eris Android Development] gener1c:
Well done. well done. I know this will make many people happy. I give you guys lots of credit with all the drama that happened during the rooting process. keep up the excellent work.
[Droid Eris Android Development] chizzy58:
luckily im on ubuntu as we speak but...is this not possible on windows 7?
[Droid Eris Android Development] DarthMowzy:
Good question. Put me in for $20.
[Droid Eris Android Development] thefuzz4:
That is awesome news great work to all can't wait to try this out. Oh and I am an avid Ubuntu user :) Got it on everything except the wife's netbook. She won't let the penguin within 100yds of that thing.
[Droid Eris Android Development] zifnab06:
I hate to burst everyone's bubbles.

The code worked for the Tatoo. Didn't for the Eris.

Quote @ http://xdaforums.com/showpost.php?p=5673553&postcount=113
[Droid Eris Android Development] hallstevenson:
Why, is Linux needed to get access ? Not a problem for me if so but will be for a LOT of people.
[Droid Eris Android Development] redman213:
Damn...Ubuntu? man I'm too excited to wait to install ubuntu...but yeah no windows 7?
[Droid Eris Android Development] zifnab06:
read post 2 back. this exploit WILL NOT WORK IN ITS CURRENT STAGES on the eris
[Droid Eris Android Development] FireSokar:
hah, wonder how many people crapped themselves then later sobbed like a little girl.
[Droid Eris Android Development] redman213:
LOL I did ><
[Droid Eris Android Development] Framework43:
Aww :(

*cries*
[Droid Eris Android Development] zifnab06:
zanfur and i were just talking. there is a bug that we can exploit. if you know anything about fasync (i tried before, said it failed, didn't realize our kernel doesn't use at_random), help :D
[Droid Eris Android Development] Framework43:
I guessing that means we have to wait a while until root comes, correct?

Are the other devs working on something else, or are all of you working on the same thing?
[Droid Eris Android Development] acidbath5546:
Sorry guys :( I thought we had it...

Sorry guys...I thought we had it :(

I still think we will get it, but for now we still have lots to do.

So I apologize again guys...really thought it all came together :(
[Droid Eris Android Development] Framework43:
Hey, at least it helps the Tattoo members! :)

Something got accomplished.
[Droid Eris Android Development] CPCookieMan:
Use the Windows installer. It installs dual boot for you. Look into it. I now have a Windows, Mac, and Ubuntu box.
[Droid Eris Android Development] Framework43:
The Ubuntu CD comes with Wubi. An easy installer for Dual-Booting =] If thats what you mean lol

Ahh, I see you also follow osx86 :)

Anyways, Devs, good luck to you, and I hope you get a way working soon. Your time is deeply appreciated by all of us :D
[Droid Eris Android Development] redman213:
Don't worry about it bro but yeah at least the Tattoo users got one hell of surprise:D lol.
[Droid Eris Android Development] Framework43:
Hehehe.

HTC, give yourselves a pat on the back. You guys did an awesome job on security. But you can't stop the power of hax0rz :)
[Droid Eris Android Development] CPCookieMan:
Oops well kinda... I messed the grub installation, now it's just a Windows and a Mac box. Ubuntu doesn't boot anymore. :( If anyone knows how to fix such a thing feel free to speak up. I will be googling now. When I choose Ubuntu from the Windows menu, it goes to a grub command line. The boot command results in "error: no loaded kernel"
[Droid Eris Android Development] notAmarine:
WTF!!!

This is a joke right!?!?! Am I going to be on Candid Webcams or something?
[Droid Eris Android Development] Framework43:
No its not.

Calm your genitalia , It was a mistake.

We'll have root soon. If you want it to come faster, try to contribute :)
[Droid Eris Android Development] bftb0:
[size=+2]Hold on there folks![/size] There is no need for Linux to run exploits - unless you are planning on compiling them from the sources. If you are planning on downloading someone else's exploit, and running it on the phone, you don't need Linux!

Android/Google provides an executable - "adb" (Android Device Bridge) which allows you to "log in" to the phone (and move files back and forth, but you could also do that with the USB/sdcard/File Manager or Internet+file manager). It is part of the Android "SDK" - which is available for both Linux and Windows.

For that matter, if you use a terminal emulator on the phone, you could even dispense with the SDK, too. (Although typing on the phone is horrible compared to using a real keyboard, and the free Terminal Emulators seem to suck on Cupcake).

Don't jump through hoops you don't have to. The windows SDK is at

developer.android.com/sdk/index.html

bftb0
[Droid Eris Android Development] CPCookieMan:
I wish... My old Windows/Ubuntu box doesn't support osx86. :( I own a two year old MacBook and a custom P4 2.75GHz Overclocked PC. Not for gaming, I just like my good ol' power.

P.S. That was my first Ubuntu install, turns out 9.10 has problems with Wubi. I'm downloading the Live DVD right now. I've "created" a linux distro which I have installed on my box before. It's not really created by me as I just build it with SuseStudio. It works pretty good.
[Droid Eris Android Development] Framework43:
Thanks for explaining that, fortunately I have it already :]
[Droid Eris Android Development] CPCookieMan:
Correction: Available for Mac OSX also. I know because it's on my MacBook.

I knew Ubuntu helps with Android development. This just pushed me to install it which I have been meaning to do for a while.
[Droid Eris Android Development] hoban_eris:
So, since it turns out that we don't actually have root because it works for the tattoo and not the eris, does that mean that we're even further back than we though? I mean, do we have to find a new exploit and everything or will the one we already found be able to be used, just in a different way from the tattoo?
[Droid Eris Android Development] hoban_eris:
"I'm thrilled my shellcode got us into the Tattoo, but darnit, I'm back to square one on the Eris.We thought we had root"

oh, nevermind, I read this the wrong way. :(

That's a bummer that we're back to square one. Good luck devs!
[Droid Eris Android Development] anom69:
I have to admit, I am sort of upset with with the devs.. but on the other hand.. at least it worked for SOMETHING.. haha
[Droid Eris Android Development] jballz0682:
Oh well. Keep working at it devs. It only takes time. Btw Acid you forgot to put up my pledge of 20 bucks. Just a reminder.
[Droid Eris Android Development] hoban_eris:
meh. no reason to be upset with the devs. mistakes happen to everyone, they've been bugged to death by all of us for status updates and I guess acid let an update through prematurely... Oh well, we'll get it!
[Droid Eris Android Development] notAmarine:
Sorry Framework, my apologies. This has absolutely nothing to do with my genitalia.

Actually, until about 7:30 EST this evening i had no clue what the hell this "root" thing was.

Long Story Short:

*Spent 2 years of my life that I'll never get back using a "smartphone" with windows mobile 6

*Realized it was time to upgrade

*3 weeks ago purchased a Droid Eris

*Best phone ever

*Hours in apps market

*Can't find certain apps

*Find out that my new favorite phone has obsolete firmware (that's why I can't find certain apps).

*Spend hours on web trying to figure out when/IF I will receive new firmware

*7:30 EST 2/19/10 find xda-developers dot com

*find thread: Root Status & Bounty Thread!!

*Read every post of the entire previously mentioned thread

*Get to page 48 of 50 the whole time resisting the urge to jump to the end of the thread to find out the status

*Out of nowhere I see this reply to post:

Originally Posted by acidbath5546

--------------------------------------------------------------------------

February 19th 2010.

We have Root guys!

Credit to our Devs mainfram3 and zanfur!

It is currently being tested out!

We will put out a Tutorial and Get Everyone that wants Root as soon as all tests are done!

Stay Tuned!

*Really excited

*Read the BAD NEWS

*I think I'm being punked

*Realized it was all like a bad dream

I have never been so sucked into a forum thread and I can't imagine how discouraged the developers must feel. You guys (developers) need to keep your heads up, I have great faith in you even though I don't know that much about you. Keep up the good work and stay positive!

~ andy
[Droid Eris Android Development] sickbox:
If you're running Windows and need Linux or Unix just download Sun virtualbox it runs right over Windows if you set it up properly and best of all its free!
[Droid Eris Android Development] crax0r:
Hey

Sorry you guys haven't seen me in a while... Do you think the \crypto\hash.c\ will do anything with the ROM check? I haven't read the posts but I think if we can crack the sig checker, we should get root.
[Droid Eris Android Development] navalynt:
So the exploit they thought would work for root on the Eris doesn't, but instead it works on the Tattoo? I don't suppose it's been tested on the newer CDMA Heros?

Is the process documented anywhere?
[Droid Eris Android Development] DarthMowzy:
Damn no root yet... well Im still in for $20.
[Droid Eris Android Development] acidbath5546:
LMAO!

Its been a tough day, and I feel pretty crappy about getting everyone hopes up prematurely :(

But reading your "Cell phone Adventures" really put a smile on my face.

Our Devs are still working hard and I dont think we are all the way back to square one...he meant to say back to the drawing board!

I am very happy that our ateam was able to help Root the HTC Tattoo though :)

For the sake of such an amazing community, that makes me really happy :)

So in the end, we helped root another phone, gave everyone a manic episode and gained 2 more Devs out of it.....

I will keep positive and I appreciate everyones understanding and support!

We will Root this stubborn Eris!
[Droid Eris Android Development] sickbox:
YEAH!!! I'm pumped now! The Eris Root lives on... for now.
[Droid Eris Android Development] acidbath5546:
No way are we giving up!

We still have some exploits and are gonna keep banging away at it!
[Droid Eris Android Development] Captainkrtek:
Hey Acidbath check your PM's i sent you a message, i need some help
[Droid Eris Android Development] Framework43:
Trust me, we all felt that way :P

I hope root status comes close. We are all patiently waiting.

You don't have to be upset with them at all. They are the ones working hard and giving up their time for the community.
[Droid Eris Android Development] Captainkrtek:
Framework, can you help me with installing the SDK? im having some trouble

Thanks
[Droid Eris Android Development] CPCookieMan:
What are you having trouble with? I could help you.
[Droid Eris Android Development] CPCookieMan:
I got Ubuntu up and running! It looks really cool using desktop effects.
[Droid Eris Android Development] Ffej5647:
Yea Linux is nice for that. I recommend Gentoo though. A whole lot better than Ubuntu!
[Droid Eris Android Development] droideris:
Dont know if you guys have tried this, something i stumbled upon.

ht tp://ww w.ryebrye.c om/blog/2009/08/16/android-rooting-in-1-click-in-progress/

(take out spaces)

just seein if it has been tested, and i don't know if the eris is 32b either.
[Droid Eris Android Development] rvpartsguy:
Well as I am already running Mint it is all good...... hoping this is easy !!!!

keep up the hard work and thanks guys !!! :D

btw: you can put me in for $10.00
[Droid Eris Android Development] crax0r:
(double post)
[Droid Eris Android Development] crax0r:
SDK

BTW, the source code is avaliable at http://developer.htc.com/

And I was wondering. If someone could possibly make a app for Android that would find root access somehow, so it's working on the inside. If this would be possible that would be great! :D
[Droid Eris Android Development] Framework43:
Sort of like the Superuser.apk method for the Nexus One?

I heard of the devs discussing about it, but I dont know if they ever went full way with it to see if it was a workable method.
[Droid Eris Android Development] Captainkrtek:
Thanks cookie, i actually got most of it running so no help needed.

Thanks though :)
[Droid Eris Android Development] Framework43:
any updates?
[Droid Eris Android Development] Captainkrtek:
Not that ive seen, seem like the buzz from the bad updates to phones has died down a little :confused:
[Droid Eris Android Development] Framework43:
Why does the HTC Tattoo have Android 1.6 w/ Sense UI and we are still stuck with a bad market on Android 1.5.

I still want 2.1, but i wonder why we didn't get 1.6 yet.
[Droid Eris Android Development] Captainkrtek:
HTC has forgotten about us, Do you think we will get 2.1 OTA on the 22nd? ive heard that date fly around but ive also heard about other dates that have already past.
[Droid Eris Android Development] droideris:
does anyone care to enlighten me on this?
[Droid Eris Android Development] Captainkrtek:
Its sorta a walk around, wiping the phone then loading a new ROM, im not sure how it bypasses signature checks though :confused:
[Droid Eris Android Development] jcase:
nm got itWhen you guys push a potential exploit to the phone, where are you putting it or how are you changing permissions on it?

PS. Forgive my ignorance, this is my first time playing with the android. Plan on going through older known kernel exploits and testing them all, if I can get around "permission denied" when trying to execute them.When you guys push a potential exploit to the phone, where are you putting it or how are you changing permissions on it?

PS. Forgive my ignorance, this is my first time playing with the android. Plan on going through older known kernel exploits and testing them all, if I can get around "permission denied" when trying to execute them.
[Droid Eris Android Development] droideris:
well its a .APK application that you put on your phone, worth a shot if someone wants to try it, kind of risky but worth a shot i guess
[Droid Eris Android Development] Captainkrtek:
Ill give it a go on my emulator

Probably wont work, its usually not that easy, but ill see what it results to
[Droid Eris Android Development] Ffej5647:
Why does it matter? If you read the past posts that you should not upgrade to the 2.1 until after the root access has been obtained because if you do, that exploit could be patched. I am just going to wait for root before the 2.1 because to me root is more important at the moment that waiting even longer for a new exploit in 2.1. Plus it will probably be OTA after we even find root because we are still on 1.5 and i think that we still will have to get 1.6 before we even get 2.0 or 2.1 plus Verizon takes a while to come out with the updates because they have to review and modify them before they release the updates to the consumer. Verizon is very tight on releasing updates and they only do if they absolutely NEED to! So just hold on to your panties for now until we get root but its all your decision.
[Droid Eris Android Development] thefuzz4:
Where do you get an emulator from? I'd like to try it out as well. Thought about giving it a go on the actual phone but I'm not that brave :)
[Droid Eris Android Development] sickbox:
Has any one tried downgrading to MR1 1.16.605.1 before trying the tattoo exploit or is the kernel the same in MR1?
[Droid Eris Android Development] hallstevenson:
There's no need to have incremental upgrades. We'll go from 1.5 to 2.1.
[Droid Eris Android Development] droiddoess:
how do you get the emulator?
[Droid Eris Android Development] thefuzz4:
Ok so I figured out some of the emulator stuff. I got the android sdk downloaded and the htc eris sdk. I took the eris sdk and stuck it in the platforms dir of the android sdk and then went to the tools dir and ran the ./android list targets but when it runs through the platforms dir it says that it's ignoring eris due to build.prop is missing. Does anyone have this file that they can share or is this a property file that you have to build out by hand? I'm working on getting this going so I can help out and I know I'm close just not quite there yet. Thanks.
[Droid Eris Android Development] redman213:
Is there a IMG or something for the stock 1.5 that the Eris was released with in November?
[Droid Eris Android Development] droideris:
also, you can change the rom
[Droid Eris Android Development] Ffej5647:
Then why have they been doing that? We could have had 2.0 months ago but they seem to be going in order.
[Droid Eris Android Development] hallstevenson:
Have they ? Do explain please. Phone was released with Android 1.5. We have Android 1.5 today.
[Droid Eris Android Development] acidbath5546:
not to sure if we tried that one...did you check first post?
[Droid Eris Android Development] Captainkrtek:
go to the android website and download and install the sdk along with the platforms and then mess around on the emulator, if you need help pm me
[Droid Eris Android Development] binny1007:
I'll give it a try but I don't think its going to work
[Droid Eris Android Development] binny1007:
Not going to happen it won't let me down grade.... not even with a goldcard.
[Droid Eris Android Development] Captainkrtek:
Hey fuzz go check your PM's i sent a message in regard to the build.prop file missing including a copy to my own build.prop and where they are located, let me know if i can help more

:)
[Droid Eris Android Development] Captainkrtek:
Also dont forget to change the right settings in the build.prop file corresponding to the eris.

for example here is some of build.prop source

ro.product.model=HTC Hero
ro.product.brand=orange
ro.product.name=htc_hero
ro.product.device=hero
ro.product.board=hero
ro.product.manufacturer=HTC

that would need to be changed

Source:

http://www.google.com/support/forum/p/Android+Market/thread?tid=6c250b3e95ff344a&hl=en
[Droid Eris Android Development] bftb0:
Binny,

I've done it more than once already :) from 1.17.605.1 -> 1.16.605.1

Steps:

[Binny knows this, but if anyone else is reading, it is the same as a factory reset - you will lose all your settings and apps (but not the contents of the SD card)]

1) Unpack the 1.16.605 RUU - by running it as if you were going to actually do the RUU using the USB cable and your host PC, but stop right before you would apply the update to the phone. Pull the "rom.zip" file out of the temporary area that the RUU installer unpacks.

(Poke around under C:\Documents and Settings\<Username>\??? (I can't remember - you'll see folders with names that look like registry entries). You have to do this while the RUU installer is sitting there waiting for you - if you cancel the install, it will nuke everything it unpacked. I just made copies of the entire subtrees.

2) Cancel the RUU install.

3) Move the ROM.ZIP file to the root folder of your SD card, and rename it PB00IMG.ZIP

4) You can cancel the RUU install session on the PC, and unplug the USB cable if you want (so long as you have a well-charged battery!)

3) Power down the phone, and boot it back up holding the Call and End buttons simultaneously

4) Scroll down (or whatever it asks) to go from Fastboot mode to HBOOT mode

5) The phone will automatically discover the PB00IMG.ZIP file, and unpack it and verify it.

6) It will ask you if you want to install; when you (select and) enter Yes, the phone will reboot, and come up again - appearing as if it is repeating the same thing. This time, however, it won't stop and ask you - it will just begin the install.

7) Wait... Wait... Wait... Wait... and then wait some more. If I recall correctly, it seems to hang a little bit at the HTC splash screen after the reboot. That is normal - just WAIT and let the phone do it's thing.

That's it, except for:

8) You probably will want to dial *228 and choose option 1 to complete the programming of your phone - it will reboot after it completes.

9) Be prepared for the phone to nag you incessantly about an OTA update being available - something like every 10 minutes or so that message will pop up.

Now, to answer the original poster's questions: I did this to try very similar exploits on 1.16.605.1. It doesn't seem to behave any differently than the 1.17.605.1 - everything I have tried has failed on both. That is not a proof though that there isn't some other opportunity by doing this.

cheers,

bftb0
[Droid Eris Android Development] Captainkrtek:
Thanks for trying anyways and providing tutorial :)
[Droid Eris Android Development] jamezelle:
what kernel verison is in the 1.16.605.1 build?
[Droid Eris Android Development] Captainkrtek:
I believe its Kernel 2.6.27.95442eff htc-kernel@and18-2 #976
[Droid Eris Android Development] redman213:
If the 1.16.605.1 build kernel is 2.6.27 the Tattoo exploit should work...unless the exploit is only for the 2.6.29 which would be weird.
[Droid Eris Android Development] sickbox:
Same not goldcard nor oem-78 method worked. Keep getting failed "main version check" or lower version than the current type messages.
[Droid Eris Android Development] CPCookieMan:
Well anyone want to try the Tattoo exploit on the downgraded version? How would we go about upgrading after that?
[Droid Eris Android Development] CPCookieMan:
For whoever is building the roms, would you like a custom boot screen image to replace those Androids on skateboards? I just need the pixels and what format and I could try creating one for you guys.