Originally Posted by Grunschlik
So my question is: what _exactly_ (in technical terms) did you do so that the original spl accepts the firmware you can download in the first post to flash back to a root bug enabled .29 version?
Some checksum that has to be right for the original spl/whatever?
Maybe if someone can explain the exact details how this was done i can redo it for the EU version.
Thanks in advance!
In technical terms... somebody apparently "found" (as in, it dropped from the sky
) an official image file, like the one they flash the G1 with in the final stages of fabrication. This is the file we all came to know and love as DREAIMG.nbh
. It is a stock RC29 and signed with release-keys, so the standard bootloader accepts it without any problems, and it still has the telnetd - bug. That's the exploit that JK, Koush and the Gang used to bring us these awesome HowTos on flashing HardSPL and consequently custom image files (signed with test-keys so that T-Mobile can't OTA your root away from you).
Well, someone might someday "lose", or "mail to a wrong recipient" the DREAIMG.nbh for the German hardware. I guess, sadly, since Google isn't going to stand up for your right as a customer, this will be your best bet of getting root.
However, I suggest pestering Google about getting root. It might help for said file "suddenly appear" on the Internetz. (Note, I said "pester Google", not the nice folks at Google forums.)