Search results

  1. (dylanger)

    Thread [QUESTION] Has anyone managed to compile a user target GSI?

    Hey Guys, Has anyone managed to build a user target GSI? Meaning not a userdebug system build?
  2. (dylanger)

    Thread Does the Mi Mix 2S Support "Yellow" Verified Boot Mode?

    Hello. Is it possible to "re-lock" the bootloader with a different boot image loaded? Typically this results in "YELLOW" mode where the bootloader _is_ locked, and will display a fingerprint of the boot.img I'm terrified re-locking will result in having to unlock again, we all know unlocking...
  3. (dylanger)

    Thread Xiaomi MI Box 3 MDZ-16-AB Boot Log and UART Location

    Hey Guys, I've been tinkering with my MI Box as I've been having packet loss issues with it, long story short its bricked, here is the bootlog + UART Pins if anyone is interested: Boot Log: TE: 98645 BL2 Built : 18:13:36, Jun 17 2016. gxl g176ecdb - [email protected] rn5t567_power_init...
  4. (dylanger)

    Thread [NETWORK UNLOCK] Huawei Ascend Y5 (Codename Y560-L01)

    Hey Guys, I recently discovered how to network unlock this device by editing files in /persist Check it out here: https://blog.onedefence.com/unlock-telstras-huawei-y5-y560#pk_campaign=xda Cheers!
  5. (dylanger)

    Thread [DISCUSSION] ABOOT Unlocking / Bootloader Unlocking

    Hey Guys, Suspected ROM is here: http://devicedownload.zte.com.cn/support/product/201606031040/sd/20160715164404575.zip I'm not 100% sure of that actually is the ROM, I've herd of OTA updates going out, if someone could intercept them and post them that would be great (I don't physically have...
  6. (dylanger)

    Thread [DISCUSSION] Mifare Desfire EV1 - Logic Analyzer on the chip itself

    Hey Guys, I've been researching MiFare Desfire EV1 (AES Crypto) and was wondering if anyone has successfully filed a card down, exposed the interconnects (Links between CPU and RAM/EEPROM) and used a Logic Analyzer to sniff the master key being copied/compared in RAM? Here's an image from the...
  7. (dylanger)

    Thread Android Mifare Desfire EV1 Key Extraction / Lower Layers

    Hey Guys, I have an app that can read information from a Mifare Desfire EV1 card (That I don't have the key for). Now I believe that the master key is loaded into memory at some point in order to decrypt the information on the card. Could someone point me in the right direction? I can attach...
  8. (dylanger)

    Thread [DISCUSSION] [MODEM/RADIO] NON-HLOS Reverse Engineering

    Hey Guys, I've been doing some research and I've found quite a few interesting things with the modem for the OnePlus One, firstly I've found that the NON-HLOS.bin is actually a FAT file system that can be mounted, inside I've found the following files. ==========================================...
  9. (dylanger)

    Thread [Q] Disabling "Secure Boot" not to be confused with "Unlocking Bootloader"

    [Q] Disabling "Secure Boot" not to be confused with "Unlocking Bootloader" Hey Guys, Has anyone successfully disabled "Secure Boot" on a Nexus 5 hammerhead? Here is a picture of what I am trying to achieve: I need to change a few things in ABOOT (Android BootLoader)/LittleKernel Cheers guys :)
  10. (dylanger)

    Thread [DISCUSSION] Qualcomm RIL Interface / Modem Driver - QMI or AT?

    Hey Guys, Continued discussion from: http://forum.xda-developers.com/showpost.php?p=64650661&postcount=19 I've been researching RIL (Radio Interface Layer) on my OnePlus One and it looks like it may use a diffrent protocol to the plain old "AT" commands to communicate with the baseband/modem...
  11. (dylanger)

    Thread [Q] Phones that have no 'Secure Boot' NOT Locked Bootloader

    Hey Guys, I've been using the OnePlus One (Bacon) for the past year and I'd like to switch however the OnePlus One has no 'Secure Boot' not to be confused with 'Locked Bootloader' I can modify partitions like the SBL (Secondary Bootloader), ABOOT (Android Bootloader) and the Modem without the...
  12. (dylanger)

    Thread Why do vendors lock bootloaders?

    How is the below statement at all true? "Great! You're purchased our device. But you can't install anything other than what we define. Oh and you also don't have owner privileges. Kthxbye" Why do vendors lock bootloaders?
  13. (dylanger)

    Thread OnePlus One LK (Little Kernel) Bootloader Debugging with IDA

    Hey Guys, I'm trying to change the way the Android Bootloader functions on my OnePlus One, I've managed to dd my ABOOT partition from my phone and load it into IDA and I get the following result (0F900000 being ImgBase): ROM:0F900000 B loc_F900020 ROM:0F900004 B loc_F91B9C4 ROM:0F900008 B...