Search results

I was wondering if its someone is willing to write an xposed module that replaces android screensaver with a lunch action on an app. That way e.g. kodi could be launched which handles in my setup the sleeping of the firetv. It would also be use full to run e.g. the flickr app or any other non...

let us know it worked without gnd, that would mean the CPU is not running. Maybe because of a to low voltage on vcc. Be aware that operating on a stick with a running CPU can destroy the content of the flash which at least is no fun to recover ;)

0,25mm wire about 10cm long.

As i wrote my board is similar to the first version of the exploiters board (which was never for sell afaik) and has a voltage regulator which can provide 1.8v /2.5v. As fahr as i can see from https://www.exploitee.rs/index.php/Exploitee.rs_Low_Voltage_e-MMC_Adapter your adapter should be able...

Yes you can. In this post http://forum.xda-developers.com/showpost.php?p=60133932&postcount=32 you can find the voltages. VCC is probably also good with 5V. tormatensu seems to have done it with the exploiters adapter maybe he can give you more details. I'm thinking of making some professional...

Until somebody finds that file, have you tried towelroot? i don't have an ideos x3 anymore but the kernel should be vunerabel to this exploid.

ok sorry than i cant help any further as i don't know what voltages you have in VCC and VCCQ with that board. Did you try powering the firetv by its own usb port?

I bought the parts listed on the exploiters wiki for there beta version of the board, and made a PCB with a PCB mill, so you can just buy the parts but need to make a PCB. But your adapter should work the same as it uses the same chip. The main difference is AFAIK that die sold version of the...

I don't have a exploiters adaptert therefore i don't know how it blinks. Maybe there is just not enough power for the emmc? In case of the firetv power came trough the power supply here the deice is powerd by the SD card adapter. You could try to also power the firetv stick by its USB port.

Looks good. By HDMI shield i mean the shielding of the HDMI cable / connector. Each highspeed connection like USB / HDMI ... has a shielding today which is in most cases pulled to ground on the connector side. Therefore are these connectors often a easy way to get a good ground as the have...

I just copied the files on a linux PC. Depending on what way filesystem you use make sure to keep permissions correct. If you only want a disaster recovery backup you can also copy the whole SSD with an imaging tool. On linux i would recommend using DD but there are imageing tools for every OS...

If you want to be 100% sure just make a backup of the ssd. I did the same with an USB drive and hat no problems. You can also use Titanium backup to have backups from the mounted filesystem.

The bootmenu and mounted a drive to /data are completely independent so you should be fine to install the bootmenu. As your external data partition will not be mounted during the update process and therefore also not be wiped you should be able to just remount it after the upgrade. To be sure...

Every ground is the best ;) thats the idea of the ground pin they should all be on the same ground layer of the PCB. For easy access you can just use i.e. the HDMI shield.

Oh that’s sad but as far i followed your work i understand what you are doing. As for me the firetv is just a media renderer and the linux server is runnig besides it so the limitiation of the fireOS eco system are not a problem and i like the games and primeVideo. I 'm not into maintaining...

without an error message its hard to guess what went wrong. try the second way and if that also don't works for you i could try to build a zip for you. But maybe jmandawg find the time to update the original zip.

mm does it say something about signing error? You can also flash the original zip, log in with adb (don't reboot it works in CMW) and put the altered file to /system/etc/ . You may need to mount the system partition writable before by executing mount -o remount,rw /system

ok got root, xposed installed, bluetooth mice running and kodi as launcher. this makes a nice travel firetv :)

Yes. You just need to alter the init.bueller.sh script inside the zip to write its log to an at boot time writable partition. I altered mine to: /system/etc/mountUSB.sh > /cache/mountUSB.log 2>&1 If you don't plan on reading that log you could also use /dev/null as the target. If /data is...

Ok i solved my problem ... i had activated USB debugging which turns the USB port into a USB client port. UPDATE: it seems the problem with this zip is that the altered bueller.init trys to write a log to /storage/usb which is not available in the new firmware. I altered the path to /cache/...

Thanks but thats not the point. In fact both use a linux kernel (android runs on linux). The different is that the new firmware allows the user to mount a FAT / NTFS formated stick. But this has nothing to do with process of the linux kernel to create device nodes in the dev filesystem. My...

does somebody already tried this on 51.1.5.0_515030720 ? It seems the kernel is not creating the /dev/block/sda1 anymore.

Can somebody tell me the voltages for VCC and VCCQ. I assume VCCQ is 1,8V like on the firetv but is VCC the same? I don't have the exploiters adapter and in the old version where the circuit is opensource the naming is different. Does somebody know why they dont power the firetv stick by usb as...

This is a very disturbing problem http://googleprojectzero.blogspot.de/2015/03/exploiting-dram-rowhammer-bug-to-gain.html even if the cache flush opertion will not work on arm threr should be instructions that work ... Lets see when somebody posts a poc for arm cpus. If firetv is attackable this...

THX i was busy the last weeks and will update the blog as soon a have time to also do the full unlock my self.

We don't have a download mode. The script included in the 7zip requires root premissions. So no luck for firetv.

I only found this picture as far as i can tell from this picture it has only one transistor on it. As we need to level shift 4 signals this will probably not work. I'm not in the 360 scene so i can only gues what it does. Can you provide some more details on this device?

Use a solder iron with a normal tip (not to small), hold it to the long side of the resistor, add solder until the resistor is covert. The resistor will stick to the solder iron and you get a nice blob that you can toss into the cleaning sponge. ---------- Post added at 11:05 PM ----------...

I would recomment to NOT TRY IT with some ext driver on osx. You have already a flaky connection to the storage, you need all partition intact after you place the binary. Any incompatibility in the driver on OSX or even Windows or other thinks these strange OSses do to to your storage like...

Do you mind sharing some details? As the bug is seems to be fixed there should be no reason to hide it anymore. I was looking for the aboot source but amazon seems not to provide it (which they don't need to as its not GPL). The best source i found is...

Are you talking about CVE-2014-0973 ? So we are not talking about a unlock in the normal meaning of the word? EDIT: i gues its basicly this? http://blog.azimuthsecurity.com/2013/05/exploiting-samsung-galaxy-s4-secure-boot.html

I'm note aware of any online available dump but as soon as you are root you see all parititions and the device itself which seems to be identical to what you get by connecting right to the emmc. This is the parition table recovery filesystem table ========================= 0 /tmp ramdisk...

EU versions are shipped (at least some) with a firmware that is downgradable. Change the bootloader only helps if the efuse is not blown yet. Check your firmware version (but block updates before you power connect the device to the network)

thanks i will add the comment regarding the update.zip. Fun fact in the "--" is korrekt in the backend of wordpress and seems to get lost by rendering the page. I have not jet a clue whats causes that.

Thanks for the comments. The feedback is highly appreciated. My intention was to keep the howto as short as possible because i usually get inattentive when a tutorial lists every tiny step that should be known by a user who thinks that he should to such tasks himself ;) But of course it should...

I added installing of the Superuser.apk to the blog post. Sorry that i missed that. You can just instal it with "adb install Superuser.apk" you find the apk in the SuperSu zip in the common folder.

Which of the pads? If its the one an which you connect the wire to the emmc you probably can get the clock from somewhere on the board i.e. right from the oszilator. If its the other pad you will need to scratch ....

My first try was a hot air solder station but some of the pins where not connecte so i fixt it with a solder iron. ---------- Post added at 01:58 PM ---------- Previous post was at 01:55 PM ---------- Could be an issue with the SDcard reader. maybe the whiteprotect dedection does not work...

Most USB3 stick have faster controller and faster memory then the old USB2.0 versions. It is hard to find a fast USB2.0 Stick so you may be better of buying a USB3 stick and use it on the USB2.0 port of the aftv. (Which not mean that there are no slow USB3.0 sticks) I can also recomment the...

I use a 32GB USB3 Stick which (on USB3) write about 60mb/s and reads about 80mb/s. I never testet it on USB2. In direct comparation of two firetvs running asphalt8 one from emmc one from USB the USB firetv is about a second later in the game which is IMHO totaly fine.

Not sure if i got you right, you accedently removed the pad from the PCB?. In that case it is a very importent question which one. As long as you the the firetv booting there is still a clock and and you probably just need to remove the wires you connected as they work as antennas and will...

I wrote a blog post about the emmc root and the steps for EU firetv owner to root/unlock/mod . Maybe it will help some people as finding all information to start was (at least back in 2014) not easy. Some information on the unlock are still missing. I hope this will help some people. I will...

I'm not able to play prime videos anymore on both firetvs. Does anyboady else have this problem after rooting? Two error messages are popping up "Unkown_error" and "License_Error". Fixt it. First i tried to unroot the aftv but that didn't solved to problem. A simple factory reset did the trick.

There is no fast boot jet but you should be able to write everthing in the emmc with the emmc adapter. Have a look at the emmc root threat or at the gtvhacker wiki.

Do got details on how boot-rom knows what an old bootloader is? Normaly the bootloader should look after the efuse and the soc needs to make sure that only signied bootloaders a started. But i cant find details how this works on the firetv. EDIT: here are some details...

The old bootloader will not boot with a blown efuse. But i'm wondering (under assumption that the boodloader is on the emmc) if we could just replace the bootloader or is the qualcom soc verifing the bootloader?

Yes thats clear, my firetvs are now rootet and unlocked. I was talking about a possible solution for people on 51.1.4.1 and newer. EDIT: I think i got my mistake. You unlock the old bootloader which we can't run on device with a blown fuse right? We can't unlock the new one even with emmc...

I can confirm now that both of my EU firetvs where 4.0 when i did the downgrade. So i was lucky to avoid the updates. rbox can you tell us what "features" of the old bootloader we need? If we are already connected to the emmc we can write the recovery partition so a firmware downgrade should...

I'm not 100% sure 4.0 or 4.1 . You should also be able to 51.1.4.2 at least if the temporary recovery downgrade still works. If not this should also be possible by just dd'ing the old stock recovery to the emmc parition while its connected to the emmc adapter. I'm still not sure why this temp...

Soooo its done, german firetv rootet via emmc, bootloader unlocked, newest CWM, newest firmware, 32GB USB storage to mounted to data. thx to rbox and maximus !!