New FireTV Sticks (2020 edition)

Search This thread

Sus_i

Senior Member
Apr 9, 2013
1,027
387

Thanks.
Layout looks like the 4k one, nearly the same chip connections.
Serial console is also there.

Have you tried to short the lite stick, just to see if you can reach phone mode?

Maybe you or someone else can test the kamakiri handshake, but don't press enter if the stick gets found.
Best is if you make sure, that all lines in the 'main.py' file, just after the #1.1 gpt check are deleted/disabled.
 

0815hoffi

Senior Member
Dec 22, 2019
386
117
Munich
github.com
Amazon Fire TV
Thanks.
Layout looks like the 4k one, nearly the same chip connections.
Serial console is also there.

Have you tried to short the lite stick, just to see if you can reach phone mode?

Maybe you or someone else can test the kamakiri handshake, but don't press enter if the stick gets found.
Best is if you make sure, that all lines in the 'main.py' file, just after the #1.1 gpt check are deleted/disabled.

Test with short FireTVLite

[[email protected] /run/media/root/Daten/kamakiri]# sudo ./bootrom-step.sh
[2020-10-21 15:29:08.256998] Waiting for bootrom
[2020-10-21 15:29:22.105619] Found port = /dev/ttyACM0
[2020-10-21 15:29:22.145314] Handshake
[2020-10-21 15:29:22.166308] Disable watchdog
Traceback (most recent call last):
File "main.py", line 49, in <module>
main(dev)
File "main.py", line 24, in main
load_payload(dev)
File "/run/media/root/Daten/kamakiri/modules/load_payload.py", line 47, in load_payload
dev.write32(0x10007000, 0x22000000)
File "/run/media/root/Daten/kamakiri/modules/common.py", line 147, in write32
self.check(self.dev.read(2), b'\x00\x01') # arg check
File "/run/media/root/Daten/kamakiri/modules/common.py", line 84, in check
raise RuntimeError("ERROR: Serial protocol mismatch, expected {} got {}".format(gold.hex(), test.hex()))
RuntimeError: ERROR: Serial protocol mismatch, expected 0001 got 0000
[[email protected] /run/media/root/Daten/kamakiri]# lsusb
Bus 004 Device 002: ID 8087:8000 Intel Corp.
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 002: ID 8087:8008 Intel Corp.
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 002: ID 090c:1000 Silicon Motion, Inc. - Taiwan (formerly Feiya Technology Corp.) Flash Drive
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 006: ID 1a81:201a Holtek Semiconductor, Inc. USB KeyBoard
Bus 001 Device 005: ID 0bda:0129 Realtek Semiconductor Corp. RTS5129 Card Reader Controller
Bus 001 Device 004: ID 093a:2510 Pixart Imaging, Inc. Optical Mouse
Bus 001 Device 003: ID 05e3:0610 Genesys Logic, Inc. 4-port hub
Bus 001 Device 008: ID 0e8d:2000 MediaTek Inc. MT65xx Preloader
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
[[email protected] /run/media/root/Daten/kamakiri]#
 
Last edited:

Sus_i

Senior Member
Apr 9, 2013
1,027
387
This is a log from a patched tank:
Code:
Disable watchdog
b''
b'\x00\x01'
Traceback (most recent call last):
  File "main.py", line 131, in <module>
    main()
  File "main.py", line 63, in main
    handshake(dev)
  File "/root/Desktop/amonet 1.1/modules/handshake.py", line 11, in handshake
    dev.write32(0x10007000, 0x22000000)
  File "/root/Desktop/amonet 1.1/modules/common.py", line 152, in write32
    self.check(self.dev.read(2), b'\x00\x01') # arg check
  File "/root/Desktop/amonet 1.1/modules/common.py", line 89, in check
    raise RuntimeError("ERROR: Serial protocol mismatch")
RuntimeError: ERROR: Serial protocol mismatch[

Patched tanks doesn't show up in lsusb while shorted, phone mode appears only during normal boot, for a second.

I guess the stick lite is patched the same way and no convenient unlock possible (as there isn't an easy way to write to the emmc/downgrade rpmb, without a working bootrom exploit).
 

Bertonumber1

Senior Member
May 17, 2020
701
183
Glasgow UK
I use fire tv cube purchased in US here in India, is there a way to get around the US contents and watch Indian contents and get firware updates like fire tv stick?

Have you tried a vpn?

What do you mean by contents, like movies and TV programmes content, there are apps available all over Web for download, filelinked would be your starting point. Then just Google codes. This should help you apk wise
 
Last edited:

ZeroTheSavior

Senior Member
Dec 26, 2012
81
13
I got a Fire Stick 4K from a friend... Seems like I got the 2020 edition.
I don't have a microscope or camera so you'll have to deal with my phone camera.
The back shield won't come off, I'd probably need to bend it off.
It still says mantis in ADB too.
(removed)
 
Last edited:

0815hoffi

Senior Member
Dec 22, 2019
386
117
Munich
github.com
Amazon Fire TV
This is the normal old 4k Stick.
Chip Date 2009.

04-die-platine-des-fire-tv-stick-4k-laesst-ich-einfach-herausheben.jpg
 

nicefile

Member
Jan 20, 2008
22
1
Does anyone any new owner here can provide me with xcloud and/or playstation remote play tests ? fire tv4k have choppy sound and lag under anything higher than 480p .
 
Last edited:

itechengine

Senior Member
Mar 27, 2013
241
20
Pune
techeggs.com
Have you tried a vpn?

What do you mean by contents, like movies and TV programmes content, there are apps available all over Web for download, filelinked would be your starting point. Then just Google codes. This should help you apk wise
E. G. If i wanted to install Sonyliv app, it is not available yo install like many other apps. Firetv Stick has those apps listed.
 

EdadeyF17

New member
Feb 14, 2021
3
0
Hi, 0815hoffi. It's exciting to know that a developer like yourself is making great progress. Can you help me figure out if a rooting method would work on the two devices, the fire tv stick lite model # S3L46N and the android tv box model # DBH1S?
The need for rooting is for updating the system firmware as it always says unable to update your fire tv stick when launching the new device for the first time. I hope that this description helps you to help me.
My best regards. Thanks
 

Bertonumber1

Senior Member
May 17, 2020
701
183
Glasgow UK
Hi, 0815hoffi. It's exciting to know that a developer like yourself is making great progress. Can you help me figure out if a rooting method would work on the two devices, the fire tv stick lite model # S3L46N and the android tv box model # DBH1S?
The need for rooting is for updating the system firmware as it always says unable to update your fire tv stick when launching the new device for the first time. I hope that this description helps you to help me.
My best regards. Thanks
Currently there is no known software/hardware exploit for the 2020 android 9 lite edition stick.
Amazon have well and truly patched the flaws which we saw rather amusingly in the older sticks and boxes.

The second model DBH1S Is this the cube or pendant? I think there was an exploit for the cube but it has since been patched over depending on what firmware your device has.

Regards
 

EdadeyF17

New member
Feb 14, 2021
3
0
Thanks for the response. Currently, the DBH1S is a Quad-Core by Dangbei from China, and it runs on an Android 10 OS. I appreciate your clarity but is there still a chance on this brand? Thanks again
 

Attachments

  • IMG-20200814-WA0002.jpg
    IMG-20200814-WA0002.jpg
    41.8 KB · Views: 4
  • IMG-20200728-WA0003.jpg
    IMG-20200728-WA0003.jpg
    65.1 KB · Views: 4

Top Liked Posts

Our Apps
Get our official app!
The best way to access XDA on your phone
Nav Gestures
Add swipe gestures to any Android
One Handed Mode
Eases uses one hand with your phone