yashsingh1/xdaforums huggingface dataset:
[Atrix 4G Android Development] blinker_fluid:
Fyi...if you guys get your Atrix from best buy you can get their protection plan that let's you swap the phone for pretty much any reason...you'll have a replacement in like 3 days..with no deductible. $10/mo but something you devs may want to consider over $500 each time ones bricked...
[Atrix 4G Android Development] strauss0829:
I got mine from BBY and am goin to get the Black Tie today
[Atrix 4G Android Development] t0dbld:
Very true.... but this does prove that the encryption process is Mixing Symetrical and Asymmetrical

Mixing Symetrical and Asymmetrical Methods in Practice

In practical public-key cryptography, as for example in PGP, symmetrical and asymmetrical methods are used in combination in order to use the advantages of each method, namely, the faster encryption/decryption times of symmetrical methods and the capability of signing and ease of key exchange of the asymmetric methods. Both methods are combined like this:

Alice wants to send a secure email to Bob. Alice chooses a symmetrical encryption method, e.g, AES with a key length of 128 bits.

Alice's Computer has a random number generator that generates the AES key of 128 bits.

Alice encrypts her email using the AES encryption algorithm with the key generated by her computer. She uses this key only this one time.

Alice encrypts the AES key (and the information that she used AES) with Bob's asymmetrical public key (e.g., with an RSA key with a length of 1024 bits).

Alice puts the AES-encrypted original email and the asymmetrically encrypted AES key in a data packet, the encrypted email, and sends it to Bob.

Bob uses his asymmetrical secret key to get the 128-bit AES key that Alice had used for her original email.

Bob uses the 128-bit AES key to decrypt Alice's original email.
[Atrix 4G Android Development] t0dbld:
side note* i have found out that my key is a test key, it is a key that exists even on the NviDA boot.bin for android

MAN if we just had a SBF for this retail version i have so many things i would like to try that might work but with out a way to recover ...
[Atrix 4G Android Development] Fixter:
Trust me bro... I feel you. :mad:
[Atrix 4G Android Development] t0dbld:
ok i think one method that im going to try that i could use a little research and recog is the NVFLASH MODE, ours is disabled by default... but i have to think that its jsut a setting otherwise why would it be in the boot menu at all, Xoom has this enabled although i see them refer to it as APX mode, we need to find out where that is both on the XOOM and the Atrix, i am currently backing up the entire file system and am going to pull for easier finding, i think that if i can get the device recognized by usb in that mode i might be able to reporgram the fuse
[Atrix 4G Android Development] t0dbld:
found this in /proc/crytpo

name : cbc(twofish)
driver : cbc(twofish-generic)
module : kernel
priority : 100
refcnt : 2
selftest : passed
type : givcipher
async : no
blocksize : 16
min keysize : 16
max keysize : 32
ivsize : 16
geniv : eseqiv

name : cbc(twofish)
driver : cbc(twofish-generic)
module : kernel
priority : 100
refcnt : 2
selftest : passed
type : blkcipher
blocksize : 16
min keysize : 16
max keysize : 32
ivsize : 16
geniv : <default>

name : ecb(arc4)
driver : ecb(arc4-generic)
module : kernel
priority : 0
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 1
min keysize : 1
max keysize : 256
ivsize : 0
geniv : <default>

name : stdrng
driver : krng
module : kernel
priority : 200
refcnt : 2
selftest : passed
type : rng
seedsize : 0

name : arc4
driver : arc4-generic
module : kernel
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 1
min keysize : 1
max keysize : 256

name : twofish
driver : twofish-generic
module : kernel
priority : 100
refcnt : 2
selftest : passed
type : cipher
blocksize : 16
min keysize : 16
max keysize : 32

name : sha1
driver : sha1-generic
module : kernel
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 64
digestsize : 20
[Atrix 4G Android Development] shadowscreation:
well guys i thought it would be a good idea to get a dev chat going on irc so we all could brainstorm its on irc freenode its #atrixdev
[Atrix 4G Android Development] zambezy:
Is there anyone else that wants to work on this.... come on people.
[Atrix 4G Android Development] t0dbld:
**** i havent stopped
[Atrix 4G Android Development] zambezy:
I know that but we need more man power and more brains to get this figured out...

I think cracking the encryption/signatures is pointless... There is no way that would happen. What we need to focus on is circumventing the bootsequence with our own. The fuse may prove to be just signature verification and not a lockout from booting. I dont know enough on how it works to be sure... It is definetly different than the TI version.

Few pages back I posted few links on some code on how the fuse is programed can someone look it over and verify that. It seems to be storing keys and not so much image of the boot. Also it seems like the verification is performed in the file and not on the fuse.

Please someone chime in and see if we can figure this out.
[Atrix 4G Android Development] t0dbld:
have you seen anything , ive been searching all day for where the NVFLASH files are stored , praying it is disabled somewhere other than the kernel , if i can NVFLASH access i think i can disable fuse
[Atrix 4G Android Development] t0dbld:
maybe we can find where APX is on XOOM as i believe it is NVFLASH
[Atrix 4G Android Development] zambezy:
Have you tried this?

http://xdaforums.com/showthread.php?t=961148

It seems like they invoke different fastboot in the atrix vs the xoom...

Here is the call in the Atrix:

hardware/tegra/prebuilt/make/../../core/system/moto/fastboot_command_handler.c

Xoom:

hardware/tegra/core/system/moto/fastboot_sparse.c

I dont know.... Im just tired today... cant even think straight.
[Atrix 4G Android Development] t0dbld:
yes that is exactly what i want... and yes i have known about it, and yes that will work, but here is the big no.... its disabled i have tired it with the tegra dev software on linux and windows the phone is going into the NVFLASH MODE but the usb is disabled so the computer and software cant see the phone
[Atrix 4G Android Development] PixoNova:
Not a dev here, but instead of breaking the encryption would it be possible to find and exploit holes in the various parts of the bootchain ala the iDevices? Or is the hardware much to different to even consider that?

For example, all the various tools for jailbreaking iOS. A few use bootrom exploits, iBoot and userland(kernel). Does that sound too crazy to do on the Atrix? And then the latest one uses a mixture of tethered bootrom, with an untethered userland to make it a complete untether.
[Atrix 4G Android Development] zambezy:
That is what we are trying to do but we need someone that has better understanding of how the device work and where to find those holes...

Finding the signature keys is pointless... I honestly believe that it will not happen.

What we need to know is

1.) how much the Fuse influences unsigned image and would the phone boot if it present...

Developer bootoader weather it be Nvidia or Motorola...

2.) How do we load the image on there...

3.) We might boot with the Nvidia bootloader but we have no radio and it renders the phone as tablet... Or the Motorola Dev bootloader might check the fuse condition and not pass the signature check in the fuse and just lock the phone.

4.) It gets tricky as the Radio is not on the nvidia bootloader and it will either mot load or lock because it wont get pass the fuse verification.

This is how I see it. Its not great but if the bootloader is bypassed its a step in the right direction.
[Atrix 4G Android Development] PixoNova:
Too bad Motorola probably wouldn't pull a Sony.

But from my understanding (read: limited) of the iDevices exploits, the devs find crashes and then somehow turn those crashes into exploits, allowing them to run unsigned code. I've viewed examples, and it seems as if it's just putting in commands to certain parts of, let's say for example, iboot. If you find a crash, then you determine if it's exploitable or not.

Again, limited knowledge here, so wouldn't it be theoretically possible to send some commands to the parts of the bootchain and just see if they crash?

Please forgive me if this completely wrong. Just trying to help you guys brainstorm a bit :)
[Atrix 4G Android Development] zambezy:
You are absolutely right as the phone will enter different modes depending on the failed condition. so we would have to force it in the right condition that would allow us to access the right recovery mode. Its just finding that condition... and without a way to safely recover bricked phone its kind of complicated and you have to shift through lines of code hoping to stumble on something.

I dont have that deep of an understanding on how this bootchain works and what the different commands are... so trial and error is expensive and code cracking is tedious and time consuming. We need more people to share their understanding so we can gather better picture of how this works.
[Atrix 4G Android Development] skoalcan:
This is for todbld, but posting here so others can see.

Power off your device

Enter Fastboot:

Hold Volume down + power until you see Fastboot at the top left

Use volume down to scroll down to "Early USB Enumeration" (only shows one item at a time, if you pass it, keep going down, up selects)

Press Volume up to select

Wait for ADB to enable, run "Shell Root" from SuperOneClick, wait until it says you have root.

Enter adb shell from command line, You should have root(#) access:

adb shell

Not only will this get to a shell, but if you back up one, and don't enter the shell, but simply run your nvflash utility from your developing system, whether it's linux or windows. You should now at least be able to see the phone. Correct me if I'm wrong.
[Atrix 4G Android Development] t0dbld:
your wrong
[Atrix 4G Android Development] iservealot:
This just causes "Reading Fuse: 1"

And normal boot process.
[Atrix 4G Android Development] dkirchik:
***If in wrong thread, I apologize***

last night I ran into the trouble of phone losing root and ADB ability. After toying with the phone for several hours, I gave up, called Moto. After 3 hours on the phone with Moto Support, they sent me a update.zip file i had to decompress to factory restore the phone. 204.1MB in size, also contained my blur account and changes to home, etc.. After digging around in the file prior to uploading to my ext-sdcard, in .android/system/PPID in it was a unique Personal Phone Identifiction number and paths and directories leading to boot and root files that copy and placed(?) the ID number. The file was 6mb in size roughly. I'm going to eduguestimate that in order to crack the encrypted boot it would have to be tailored to each independant phone id number.
[Atrix 4G Android Development] t0dbld:
Interesting but I doubt that it would be more than possibly a link to your Phone

If you are reading this signature it means i should be sleeping because im lying in bed typing it on galaxy tab, tell me to go to bed and that xda will be here tomorrow
[Atrix 4G Android Development] dkirchik:
Been trying to upload it to this thread, and post a link. Been running into a 'locked file' issue with uploading failures, compression failures due to it wanting a user name and password to move the file. Motorola has a 'God' complex, shouldn't take me that long to crack it. The moment I do its yours.
[Atrix 4G Android Development] t0dbld:
Hmm they sent to phone and its locked in place? Can you try to copy it rather than move it?

Sent from my GT-P1000
[Atrix 4G Android Development] t0dbld:
Or how bout putting dropbox in your phone and choosing it as a shared file

Sent from my GT-P1000
[Atrix 4G Android Development] t0dbld:
Or chmod 777 filename or chown

Sent from my GT-P1000
[Atrix 4G Android Development] dkirchik:
I wrote similar program files in the Navy for security. The way (we) would write it would be that each computer hard drive has a unique number (serial number with a key logger attached) the program once stored onto the HDD would clone the key logger, in example key logger would have 40,000 rows with 100,000 - 500,000 0's and 1's per row that would check to make sure the cloned HDD serial number matched. The last row would carry the HDD serial number and motherboard checksum allowing the computer to boot from chapter zero on HDD. When a HDD would head crash or fail, an ET would replace the drive, I or someone of my rating would then re-write the last row to match the HDD prior to loading the OS. Those files were gigs in size, I think the file I got from moto is the same just smaller in size.
[Atrix 4G Android Development] t0dbld:
WTF are you serious that is what they sent you to fix your phone? I don't know if this motivates me more to crack this phone or just say fu to Motorola and campaign against them

Sent from my GT-P1000
[Atrix 4G Android Development] dkirchik:
Tried those already. BTW its on my phone through root explorer the file is there in /boot/b/PPID I can't past seeing that, once there i get just the '...parent directory' and it's empty. Any idea on making that hidden file, show, if it's not an empty directory?
[Atrix 4G Android Development] t0dbld:
Ls-a from bash shows list plus hidden, if its in boot folder you have to mount the drive to have privileges did you do that? Mount -o rw /dev/block/mmcblk0p12 /system

Sent from my GT-P1000
[Atrix 4G Android Development] ram130:
u tried plugging your phone into a linux computer yet?
[Atrix 4G Android Development] t0dbld:
Ram go away

Sent from my GT-P1000
[Atrix 4G Android Development] dkirchik:
I'm dead serious. The reason why they sent it to me is because my uncle Maher, who's an inventor, he's the guy that invented the closed but open background server for mobile payment system. The atrix will be the first phone with it due to the fingerprint scanner being able to authorize in store payments. its NFC. Motorola, BB, Apple, HTC, Samsung all bought rights to it from him. He also invented the Prepaid cellular service..
[Atrix 4G Android Development] ram130:
:D:D couldn't sleep lol.. im here SBF - ing
[Atrix 4G Android Development] dkirchik:
Linux.. there's no diff between OS's when accessing file systems from a binary universal device..
[Atrix 4G Android Development] t0dbld:
Haha wow well call em back say it didnt work and you need a sbf to flash with rsd :-p

Sent from my GT-P1000
[Atrix 4G Android Development] ram130:
oh i see now..I have a good feeling that file might be the key to unlocking ..
[Atrix 4G Android Development] dkirchik:
HAHA I've been contemplating that, heavily. Means I'd get some sleep tonight.

I tried both Mount -o rw /dev/block/mmcblk0p12 /system and Ls-a. Both no go.

***EDIT***

Also thinking/wondering if the file burns its self after executing/extracting/installing..
[Atrix 4G Android Development] t0dbld:
And to think id be in bed nefore 5:00am tonight lol let me go find a laptop lol was just falling asleep too

Sent from my GT-P1000
[Atrix 4G Android Development] t0dbld:
Yes that is very good possibility :-( i know that when atrix receives a ota it installs from cache and erases its self

Sent from my GT-P1000
[Atrix 4G Android Development] ram130:
its been like that since the g1 actually ...lets take it slow and easy ..we don't want it to nook now.
[Atrix 4G Android Development] t0dbld:
GOD I WISH THERE WAS A BOOT OPTION HERE

anyhow , i would say there is a good chance it is gone, only had we gotten to ya sooner before the flash , even a log cat would have been nice , let me watch the update procedure ... but ya if you mounted the drive and were in the dir and or

ls-a the dir and it still returned empty its gone :-(
[Atrix 4G Android Development] t0dbld:
figures jsut after i got out of bed through in a dip , and grabbed the laptop :O well if they dont want to send a sbf you could always tell em you accidentally hit factory reset instead of install update.zip and maybe the'll send again
[Atrix 4G Android Development] t0dbld:
oh well ... well they want my phone back for further observation , turns out i dont have a favorite inventor uncle... i guess ill try and bribe em again that ill send it back for one with an unlocked bootloader, the lady i talked to last friday just laughed and said she could only promise me a brand new atrix, i than told her it was a kick tot he face that they than unlocked the Xoom's , and she apologized maybe now that i made em wait they will be willing to bargin more :-P , thanks for trying and tell your uncle if he can get us a sbf or some documents on the bootloader i got a case of beer with his name on it (i own a craft beer store so we ant talking bout bud light )
[Atrix 4G Android Development] dkirchik:
That wouldn't work, i had to go to the 'console' in the power + vol - when booting up. The phone took control from that moment on. But I'll call good ol' moto and cry a little tell them I am still having the ADB issue. :D
[Atrix 4G Android Development] dkirchik:
I am going to call him tomorrow concerning it. He probably knows people who can do it, that'll do it. I flashed when I was talking to moto about the xoom vs. atrix, he said it was AT&T's doing not Moto's. I'm seriously considering getting the xoom, but not a big fan of Big Red, so hoping for a wi-fi only version to come out soon.

I should have the file up tomorrow night at the latest.
[Atrix 4G Android Development] t0dbld:
Ya me too i woukd love a Xoom but hate verizon, but i actually love this galaxy tab more i just need honeycomb for it been waiting on that source for ever. Anyhiw thanjs so much for the help and keep me posted

Sent from my GT-P1000
[Atrix 4G Android Development] dkirchik:
I have a tab too, calling people from it is the funniest thing. You guys have helped me a lot a guy coming from iOS to android, I've now stepped out of the tunnel from the amount of help you've unknowingly given me. Now, I have a rare chance to return the favor for all the help and finally do my part for the community.
[Atrix 4G Android Development] AsSiMiLaTeD_77:
People are mucking up this thread pretty good...
[Atrix 4G Android Development] Immix:
Really?? The posts before you are from people who have been trying all night without sleep discussing exactly what this thread is about. Your post and now mine are the most muck I have seen in this thread. Please read back a few pages and you will understand.
[Atrix 4G Android Development] t0dbld:
ok so i found out that executing /system/bin/usbd will enable usb ... anyone have any idea how i cand do this pre-boot or during boot ? yes for everyone about to comment i know all about the early usb enum menu and option, but i need usb enabled before or while entering that menu or when i enter NvFlash Menu
[Atrix 4G Android Development] zambezy:
Can you access any of the boot or recovery partitions when the kernel loads. I wonder since we have root.is it possible to erase or modify.
[Atrix 4G Android Development] t0dbld:
currently i have found a lot of usb files i found in /dev including a completely hidden command

/dev/usb_device_mode even if you look with ls -a it is not there, how ever i can manually enter it with shell root, but it is always busy , even when using adb wireless , i also found that root explorer is missing alot of flies that are hidden that you can find with ls -a in a shell root

anyhow trying to copy these files too look at them off the phone has been a real challenge and i have crashed my phone twice and needed an unplug and battery pull to get it back so maybe im getting close :-) also you can reboot and crash the phone if you execute /init from shell , maybe you always can i dont know but i tried it to see if it would forget to turn off usb ... no go wish you had a phone !!
[Atrix 4G Android Development] t0dbld:
lol found the enable command along with android_adb_enable ... and i have now successfully locked up three shell terminals at the same time trying to copy files lol
[Atrix 4G Android Development] milk242:
Edit init.d and call it from there?
[Atrix 4G Android Development] t0dbld:
hay im up for anything , help me out and try a few things :-) see what you cant figure out my head is starting to hurt as i have done nothing other than this, no eating or sleeping really either
[Atrix 4G Android Development] zambezy:
Work has been kicking my but. I might look into getting a phone over the weekend. If worse comes to worse I will just sell it or return it. But its not fair that no one else wants to work on this. It needs to be a community effort if its going to work.

On a side note I have been trying to make sense of the bootloader code and compare it to the xoom. See what the differences might be. It sucks cause we still don't know if the fuse would let us boot. Were you able to dump those partitions.
[Atrix 4G Android Development] Clienterror:
I think a lot of people would help but this is over most peoples heads..... Including mine.
[Atrix 4G Android Development] protocol113:
hey zambezy

I'm willing to help. I have no dev experience with phones other than using adb to push some stuff and installing pre-made mods.

I'm a network kinda guy...it's all I deal with in computers...

however I'm also an eager learner and have been trying to learn as much as possible about this stuff. :D

so point me in the right direction or straight up teach me. I'll help as much as possible. (I do own an atrix btw.)
[Atrix 4G Android Development] t0dbld:
lol not sure now what i got distracted with but no i didnt, i think im going to get few more sd cards, and than format them and try and DD the blocks to the SD Cards to mimic the drives and try that ... i dont know its hard to copy them because we cant access them till after they are mounted ... honestly freezing the boot with usb access has to be a top priority i think, from that we have alot more options, but right now were just limited because of it , even if we need to try a boot strap first just to enable usb so that we can copy the partitions would be a start, i wish i could find where there enable early usb is ... if i had a clue where that bootstrap was and could find the usb enable i think wed be on the right path
[Atrix 4G Android Development] dickenz:
Sadly you'd need a bit more knowledge than that my friend... I am another like you, a very competent IT guy with a whole load of Android experience but hashes, signatures, keys and bootloaders are over my head at present. It's best if we don't clutter the thread and let the guys who know the red wire from the black wire talk :)

Good luck all. Here is to hoping you I will crack it good and proper. If you do I'm buying one.
[Atrix 4G Android Development] t0dbld:
lol well i guess till we crack it its over all of our heads !!

I guess what he meant is we need more people with programing exp, Kernel Exp, etc etc, when these things get done by teams is because the work load can be split among people all going with there str. hell compared to most the talent XDA has showcased over the years i'd jsut be used as a grunt :p

I guess to me the most unbelievable part is that i didnt know how few people had ATT or such bands here, hell youd think this phone would have been a monster for the normal crew
[Atrix 4G Android Development] tl_bull:
I am amazed by the few amount of guys that have taken the challenge. HECK I figured first dual core phone it was bound to attract the best... and here I am stuck with you guys... (that of course is a joke) If you need someone to figure out how to blow up the phone, give me a call. I can at least get it to go out in a bang.

Until then I will sit in the corner sipping my koolaid waiting for the you guys to make the needed programming stuff work for a layman like I to donate for your efforts.