ZTE Zinger aka Whirl 2, aka Prelude 2, aka Salem Z667, Z667G, Z667T ($10 Android GSM)

Search This thread

grampadeal

Member
Sep 1, 2010
9
0
I don't know where I saw it but there are claims that the app can see other apps being used and they then ban you based on that.

I saw this posted on reddit.com/r/perktv but if you look at the actual app permissions registered in the Google Play store, none of its permissions allow it to do anything of the sort. Unless I'm misinterpreting what they allow for.
 

_ck_

Senior Member
Last edited:

_ck_

Senior Member
This phone is also sold at Radio Shack and other stores for $10 as the "Whirl 2" which is identical to the ZTE Zinger (with different branding).

There are going to be a lot of Z667, Z667G and Z667T owners after the holidays which is promising.

What is interesting is the Whirl 2 has been around long enough to use older Android 4.3 which may mean it can be rooted more easily and then explored. Maybe even use the old 4.3 rom to downgrade the Zinger to root it before upgrade?

This is the Z667G spec:
http://specdevice.com/showspec.php?id=a7b9-7cb0-ec56-3c90041b97dc

This is the Z667T spec:
http://specdevice.com/showspec.php?id=f5cd-014c-686d-945c0033c587

The G looks like it has a 3MP camera instead of the 2MP on the Z667T

But the CPU is also different!
G has Qualcomm MSM 8610 http://pdadb.net/index.php?m=cpu&id=a8610aq&c=qualcomm_snapdragon_200_msm8610
T has Qualcomm MSM 8210 http://pdadb.net/index.php?m=cpu&id=a8210aq&c=qualcomm_snapdragon_200_msm8210

ah okay the difference is the 8610 supports more network types than the 8210, otherwise identical

Now we need someone with a plain AT&T Z667 to run that specdevice.apk
 
Last edited:

_ck_

Senior Member
Someone found a way to get temporary root on the 2013 "cheap deal" phone ZTE model Z660g (aka Whirl 1) by having the battery drained below 25% and pressing the power button three times and then using Framaroot after it starts.

http://androidforums.com/threads/zte-whirl-z660g-only-temp-root-so-far.809294/

It was enough to be able to make images of the recovery/rom so they could be looked at.

Hopefully they have not fixed that trick after a year and newer android
 

kmandel

Senior Member
Aug 13, 2010
372
7
I just noticed Frys selling the Zinger for $20 with a "personal promotion code". That led me to this thread with all the references to $10. Are any of the $10 sources still alive?
 

boonesmi

Senior Member
Jan 9, 2014
114
18
I just noticed Frys selling the Zinger for $20 with a "personal promotion code". That led me to this thread with all the references to $10. Are any of the $10 sources still alive?
they are $14.99 at my frys (i think all frys) not $20

also the frys one is t-mobile branded and the target $10 one is brightspot branded (although some brightspot phones will work out of the box with tmobile sim, and some wont. ie the fierce 2)
 

Top Liked Posts

  • There are no posts matching your filters.
  • 4
    hey all here are some of my findings, I went out and got a ZTE Zinger (Unision Mobile - T-Mobile MOVN) and a ZTE Whirl 2 (NET 10 - T-Mobile MOVN)

    Hardware is pretty much the same, but software is very different

    ZTE Whirl 2
    Android 4.3
    recovery = yes (hold vol up and power)
    FTM Mode = NO
    DFU Mode = NO

    Is vulnerable to ASEC exploit, BUT
    The problem is the aboot, boot, recovery, and system partitions are write protected, I can dump them, but can not write back to them
    This means no root, not custom recovery, no custom kernel, no trying different boot loader (aboot) from similar phone.

    The ZTE Concord 2 had a similar issue, but only the system partition was write protect, while you were booted from the boot partition, I got around this by installing a custom recovery, which I was able to do, because the recovery partition was not write protected.

    I do not know how to get around the write protection on the Whirl 2, maybe some one more advanced than me can do it, but I really do not think the people with theses skills would be interested in a 20 dollar phone.

    OK so on to the ZTE Zinger

    ZTE Zinger
    Android 4.4
    recovery = yes (hold vol up and power)
    FTM Mode = yes (hold vol down and power
    DFU Mode = yes (hold vol up, vol down, and power)

    I could not find any root exploits that would work on this phone, so I was not able to get temp root or anything.
    I was not able to access the NAND threw DFU mode, on some ZTE MSM8960 phones you can access the NAND when phone is in DFU Mode and you have it connected to a Linux computer, it usually shows ups as /dev/sdc. This function seems to be disabled on this phone.

    In FTM mode I was able to read the NV RAM with QPST 2.7 Build 4.11, but was not able to read or write to the NAND
    In FTM mode I was playing with the ZTE Open C Upgrade tool, and I was trying to write to the NAND, it looked like it wanted to work, but failed.

    I do not know for sure, but I am willing to bet money that the NAND is write protected on this phone, the same way the Whirl 2 is
    I am sure that ZTE has some type of back door to acces and write to the NAND, but I would not be able to find it.

    I am sorry to be the bearer of bad news, but my opinion is that you will not get full usable root on either of these phones

    By best suggestion is to boycott ZTE products, but you have to keep in mind that ZTE configures these phones to the specs of the Carrier, so really the fault is with Net 10 and Univision, they tell ZTE to lock down the phone, and ZTE does so. The carrier is ZTE's customer, not you, you are buying the phone from Net 10, etc, etc. You are not buying the phone from ZTE, so ZTE does not really care if you want root or not. If you stop buying ZTE phones from Net 10, Net 10 will stop buying the phones from ZTE, yadda yadda yadda

    Now it is possible that a ZTE Zinger for T-Mobile, or Straight talk is more open, etc, etc, but I doubt it, and I am pretty sure they are not vulnerable to any know root exploits

    Anyway, I will be returning both of these phones.



    .hK
    3
    I just picked up ten Whirl 2s yesterday for Perk, and my timing couldn't be better. I've read through this thread as well as done some outside research and have put together a simple tool that will gain root via the ASEC method and use jcase's backdoor to force ADBD to run as root, which I've attached to this post. This is persistent and will survive a reboot, but will NOT drop a su binary as the partitions are still write protected, so traditional root apps will not be able to gain root access.

    The tool comes pre-configured for and is confirmed to work on product name P821A17 (NET10 Whirl 2). It may work on other models that are vulnerable to the same exploits, but you will need to pull ro.product.name from your device and replace "P821A17" in exploit.sh with your product name in order for the tool to work.

    Proof of root access:
    486ffae702.png


    Enjoy! Please let me know if you have any questions, feedback, or problems to report. :)
    3
    Please root with kingRoot or Kingoroot before attempting!!!!!

    Well guys I made a CWM Recovery link here: https://mega.nz/#!JThCyZ4a

    Flash with Rashr: https://play.google.com/store/apps/details?id=de.mkrtchyan.recoverytools&hl=en

    Download latest SuperSu Flashable zip http://www.supersu.com/download

    So I hope this gets out so we can start developing roms for this little device. I'm learning how to port roms for this device. So far I've been trying to use a Motorola Moto E as a source rom but keep getting boot looped. If any one would like to help out, that would be great. BTW if your planning to build with this recovery, you must set the name as *w3ds* ( Don't type *)

    I'd Recommend Superr Kitchen: https://xdaforums.com/apps/superr-kitchen/windows-linux-superr-s-kitchen-v3-0-0-0-t3601702
    2
    When it was posted I was told it was for the zmax but when I tried to run the app on my zmax it says it is for a different model. But yes it comes from ZTE and when you open it it say "confidential for ZTE" and that redistribution, copying, etc is strictly prohibited. Not sure if it will work at all but since this thread has been so quite for weeks now I figured maybe it would get a few people interested again lol

    Sent from my (ROOTED) Z970 ZTE Zmax
    2
    Ping pong is for 64bit only devices as far as i know, so no you cant use it

    hroark13 just made TWRP work on the zmax

    dang I am jealous

    well all this proves the zinger could do all this since it uses the same partition structure, just lesser hardware

    next years phones are going to be darn near impossible to root given this exposure so we might be stuck with these for awhile

    (we're been waiting since NOVEMBER 2014 for even a hint of root)

    So can we just use pingpongroot instead of kingroot so it is faster on all the retries?

    http://xdaforums.com/galaxy-s6/general/root-pingpongroot-s6-root-tool-t3103016



    They are $10 at FamilyDollar stores all of May which means they can be pricematched anywhere like Walmart too. These phones will probably be accessible as $10 phones for the rest the year at one place or another, so root would be really nice, plus we might be able to get the KitKat 4.4 rom onto the 4.3 Whirl2 fairly easily (might kill camera though).