Philips Android TV

Search This thread

andy_89

New member
Jul 26, 2022
1
0
Hello.
I have found the solution!

I own 706 oled, bought another philips remote control that looks similar but has full functionality (YKF474-B001). The trick is to spawn accessory pairing interface that has been stripped from settings in this tv model.

I was able to use tvQuickActions to program whatever button you choose to spawn that pairing screen. As an action use APP -> Settings (hold ok for couple of seconds to choose activity) -> AddAccessoryActivity (com.android.tv.settings.accessories.AddAccessoryActivity).

After finishing the pairing process everything started to work (voice search, google assistant, etc.).

One thing though, while pairing process, after it will initially pair, i had to 'connect' one more time to PHRCL using other remote.

Enjoy!
Hi there thebartez,

Wondering if you could help, I got the remote and followed your instructions and it works a charm. However it drops the bluetooth connection after a while. Have you found a way around this ?

Cheers

Andy
 

kontroversus

Senior Member
Sep 13, 2009
165
10
London
Hi all, my 1st post in about 8-10 years! (I mean, just look at the device I had registered on y signature! ah ah)

Just wanted to share my experience.

I've got a OLED806 and I installed Aptoid and everything else without the need to root. The tv remote won't allow you to select the option to allow app installation from unknow sources but all you need to do is to connect a BT keyb or mouse... and everything is good.

I rooted and customized lots of phones back in the day and I honestly don't see the need to do it nowadays, specially to a TV.

I also have installed MAME4Droid and connected the ps4 remote via BT... Cadillacs and Dinosaurs on a 65"... :)
 
Last edited:

Ace55555

New member
Dec 9, 2014
3
0
Hello.
I have found the solution!

I own 706 oled, bought another philips remote control that looks similar but has full functionality (YKF474-B001). The trick is to spawn accessory pairing interface that has been stripped from settings in this tv model.

I was able to use tvQuickActions to program whatever button you choose to spawn that pairing screen. As an action use APP -> Settings (hold ok for couple of seconds to choose activity) -> AddAccessoryActivity (com.android.tv.settings.accessories.AddAccessoryActivity).

After finishing the pairing process everything started to work (voice search, google assistant, etc.).

One thing though, while pairing process, after it will initially pair, i had to 'connect' one more time to PHRCL using other remote.

Enjoy!
Hi have u got a step by step tutorial thanks
 

Midorina

New member
Jul 21, 2018
1
0
Hello,

The resolution on Philips TVs is hard coded to 1080p. You can't change it even with
Code:
adb shell wm size
. Does anyone know how to change it?
 

makkievld

New member
Jul 31, 2005
3
0
I have a Philips 65pus7601 tv with android tv. The latest android tv version is Oreo. Is their a way to upgrade the version to the latest android tv?
 

Gery Salazar

New member
Aug 9, 2022
1
0
Hello everybody this is my first post on this forum. I hope someone can help me. I have a Philips 65PFL5504/F7 model TV. The problem is I was updating the firmware and the power went out at my house and now the only screen I see when I power on my TV is the one in the attached file. Can my TV be fixed by uploading the firmware file again? Any help would be greatly appreciated!
hola atravieso el mismo problema, lograste solucionar el tuyo,
Podrías ayudarme por favor?

Mod translation:
Hello, I'm going through the same problem, did you manage to solve yours?
Could you help me please?
 
Last edited by a moderator:

gigel20007

Member
Apr 15, 2014
16
4
50PUS8804/12 with all sw versions (up to date TPM191E_R.101.002.178.000) chokes on ~50MB/s bitrate video (mediainfo says MPEG-H HEVC Video / 44995 kbps / 2160p / 23.976 fps / 16:9 / Main 10 @ Level 5.1 @ High / 4:2:0 / 10 bits / HDR10 / BT.2020) when connected over ethernet and wifi because of not enough bandwidth (I presume)
Plays fine over local USB stick NTFS formatted (file is too large for FAT32)

Does anyone know either:

A) how fast can it's wifi go? (I connected it to 5GHz AP and peaks at about 200Mbps, a bit more than half of needed)
or B) does the TV ethernet interface support gigabit? (it links at 100Mbit always, tried different cables, cables link at gigabit when used with laptop. cannot find a working binary of ethtool for armv8l)
or C) what usb OTG + usb ethernet adapter combo works with it to deliver 1Gbit ethernet link?
 
  • Like
Reactions: JawadMarruecos

MoKi_1982

New member
Aug 20, 2022
3
1
Hi,

1) Disconnected the TV from power
2) Press the local joystick downwards (keep it pressed) and connect the TV to power
3) Keep the joystick still pressed for about 5 seconds before you release
4) TV start up with the recovery screen

Install the old version via "apply update via SD" - when everything worked, make a factory reset!

[email protected]
I have a 2019 PUS8804/12 TV (FW TPM191E _ 101.002.178.000) that keeps crashing. soft boot looping, the app I'm using crashes, the dashboard loads caches and repeat until i pull the plug, then its working for a day or two and I'm back at this.

Reset and reinstall from the TV menu only helps for a week or so instead of the days

I have been following the steps above trying to get the the recovery menu to clear the cache partition.
When following the steps i get the erasing screen with the ring.

I set up the TV again and once I'm back at the dashboard i can see cashed stuff from apps no longer available.
Making me think the TV is trolling me by erasing everything but the thing i actually want to clear out.

Am i missing some important step? are my unit broken in the back end?
 
  • Like
Reactions: JawadMarruecos

MoKi_1982

New member
Aug 20, 2022
3
1
50PUS8804/12 with all sw versions (up to date TPM191E_R.101.002.178.000) chokes on ~50MB/s bitrate video (mediainfo says MPEG-H HEVC Video / 44995 kbps / 2160p / 23.976 fps / 16:9 / Main 10 @ Level 5.1 @ High / 4:2:0 / 10 bits / HDR10 / BT.2020) when connected over ethernet and wifi because of not enough bandwidth (I presume)
Plays fine over local USB stick NTFS formatted (file is too large for FAT32)

Does anyone know either:

A) how fast can it's wifi go? (I connected it to 5GHz AP and peaks at about 200Mbps, a bit more than half of needed)
or B) does the TV ethernet interface support gigabit? (it links at 100Mbit always, tried different cables, cables link at gigabit when used with laptop. cannot find a working binary of ethtool for armv8l)
or C) what usb OTG + usb ethernet adapter combo works with it to deliver 1Gbit ethernet link?
I'm getting ~150Mbps over my unifi 5Ghz (about 400Mbps on my phone).
But as you can see above my unit is a bit unhealthy.

I do how ever have noticed frame drops and stutters (mostly using prime video) with higher bitrate content.
I do wonder if its the cpu that might not be able to handle networking and video at the same time.
A USB3 to 1GBE ethernet adapter might help in your case. No need for the OTG cable, just use the blue USB on the side (not the black one at the back).
 

gigel20007

Member
Apr 15, 2014
16
4
A USB3 to 1GBE ethernet adapter might help in your case. No need for the OTG cable, just use the blue USB on the side (not the black one at the back).

is that adapter tested on philips pus tv's? the video is about LG and SONY

I've already tried a gembird, a tplink and edimax - all they get powered on, ethernet link is up, but interface does not appear in `adb shell ip link`, so I think there is no ethernet driver being loaded for it.

Is there for sure a driver being loaded for that Cable Matters adapter on philips pus tvs with android 9?

the internets suggests Cable Matters is a realteak 8153 which is the same as the gembird i tried and failed (verified with logcat that usb device id is 0bda:8153 (realtek)
 
Last edited:

osvo

New member
Jan 23, 2019
2
0
I think an external LAN adapter will not help. If I start a stream using Chromecast there is almost no stutter, even with 4k using the 100 MBit/s LAN port.
I own a PUS7304/TPM191E and this issue makes me crazy. It’s only certain apps. Worst for me is ESPN.
If anyone has an idea what app or process might be responsible - please let me know. Maybe there is a way to patch this.
 

MoKi_1982

New member
Aug 20, 2022
3
1
is that adapter tested on philips pus tv's? the video is about LG and SONY

I've already tried a gembird, a tplink and edimax - all they get powered on, ethernet link is up, but interface does not appear in `adb shell ip link`, so I think there is no ethernet driver being loaded for it.

Is there for sure a driver being loaded for that Cable Matters adapter on philips pus tvs with android 9?

the internets suggests Cable Matters is a realteak 8153 which is the same as the gembird i tried and failed (verified with logcat that usb device id is 0bda:8153 (realtek)
I have to admit that that post was made on the assumption that the driver for the external NIC was baked in the android kernel. And there for would work on newer Philips- because it works on newer Sony- TVs.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 13
    Guys! To disable Philips Collections bar or also known as Philips Apps Tray at top of Android TV leanback launcher. All you have to do is find leanbackcustomizer in System Apps or Running Apps and turn off its notifications which can be turned off at button of the menu when you click on the service.

    I couldn't find a single source which mentioned these steps to take to disable Philips bloatware. I figured these out on own. I am not aware of any other methods that has the same results.

    Enjoy your less of a pain Android TV by Philips

    Hope this helps.

    ---------- Post added at 02:03 AM ---------- Previous post was at 01:56 AM ----------

    To disable recommendations, disable org.droidtv.nett_launcherapp in system apps or running apps. Hope this also helps debloat your Philips Android TV to a manageable level. However, this doesn't get rid of the recommendations field only apps that shows up.
    11
    Steps for install any APK in 2014 Philips Android TV AND1E

    Hello,

    For install any application in 2014 Philips Android TV AND1E :

    1º You must download "Developer Settings" from "Google Play" and enable "Usb Debugging" in "Developer options".
    2º Connect ADB via WIFI -> adb start-server" , adb connect IP:5555
    3º Install APK -> adb install "app.apk" (download apk from google play with evozzi apk downloader in web or in chrome extension)

    I've tried it in 55PUS8909 and it works!.

    I've tried for root framaroot, towelroot and vroot and exploits not run.
    I've tried all for "Unknown Sources" and nothing.

    sorry for my english....thanks, regards!
    11
    firmware decryption + rooting attempts

    #################################
    WARNING: don't look at the following information nor try to use any of it if you have no clue about linux or android as it is most likely that you are going to break your expensive gadget. For every one else: don't blame philips if you brick your device -> think before actually trying. If you post about vulnerabilities and stuff better cover your ass - who knows what the legal department of philips thinks about your cool stuff.
    #################################

    So as you decided to ignore my warning, here we go:

    I already spent plenty of time researching the internals of the device in order to get root privileges. Unluckily without the final breakthrough - but at least I found out some very interesting details.

    You might ask what those extended privileges should be good for? Well in my eyes android - a project available as open source with uncountable possibilities for developers and users - should not be closed down by profit oriented manufacturers. As those are often forcing the users into their own "crappy" software without given them any chance to escape. I like to develop at system base, use the underlying linux tools and most important check what the manufacturer does (behind my back) in my own living room. Hell I bought this expensive device and have no idea and can't nearly control what is sent to Philips nor Google.

    1. I wrote a tool to decrypt the official firmware. It was created via reverse-engineering the "upgrade.bin" arm-file (thanks for the trace, snoerenberg).

    Some interesting details about the used cryptography:
    - openssl library functions
    - used algorithm: aes-256 in CBC mode
    - the encryption key is generated via "EVP_BytesToKey" using only the first 127 byte of the keyfile + an eight byte salt found near the beginning of every input file

    Source-Code: attachment or pastebin_com / z3nA2r3J
    maybe mirroring this paste and the source would be a good idea (Google for the HASH if link is down)

    The decrypted firmware archive contains the following files:

    boot.img.zip: kernel + initrd + ramdisk (unknown file format)
    bootloader.zip: bootloader (unknown file format)
    tzk_normal.img.zip: ? maybe recovery (unknown file format)

    user_setting.zip: content of /user_setting
    system.img.zip: content of /system (ext4-img)
    firmware.img.zip: content of /firmware (ext4-img)

    BackEndBin.zip, EdidBin.zip, fpgaUhdBin.zip, RougeBin.zip: different binary files - supposedly firmware for these components

    As you see I was not able to extract the most interesting part (kernel + ramdisk) - Hopefully some android experts could help!

    The current and some older firmware files could be downloaded at philips_samipupu_com (thanks for hosting)

    2. General information:
    - Kernel version: Linux version 3.4.70+ ([email protected]) (gcc version 4.6.x-google 20120106 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Nov 14 01:52:21 IST 2014
    - Kernel cmd-line: androidboot.hardware=AND1E quiet lpj=11935744 root=/dev/ram0 androidboot.console=ttyS0 console=ttyS0,115200 init=/init vmalloc=448M quiet macaddr=00:00:00:00:00:00 emmc_ts.dev_id=1 emmc_ts.size=16777216 emmc_ts.erasesize=524288 emmc_ts.writesize=512
    - lsmod:
    usb8797 359014 3 - Live 0x00000000
    usb97mlan 290809 1 usb8797, Live 0x00000000 (P)
    mbtusbchar 52685 0 - Live 0x00000000
    usbfwdnld 8530 0 - Live 0x00000000
    fusion 96777 0 - Live 0x00000000 (O)
    tpvinput 7132 2 - Live 0x00000000 (O)
    trcext 333860 0 - Live 0x00000000 (O)
    gal3d 161434 16 - Live 0x00000000
    amp_core 72528 2 - Live 0x00000000 (O)
    tzlogger 1199 0 - Live 0x00000000 (O)
    tzd 32013 30 amp_core,tzlogger, Live 0x00000000 (O)

    3. The trcext module seems to be very interesting as a short look with a disassembler revealed that it might be able to read and manipulate process memory of any process. Maybe someone good at kernel-drivers could take a look?

    4. There are two world-readable directories containing very interesting information:
    - /data/debugdump: stack-traces, process-lists, short memory excerpts based on crashes of the native binaries (could be very helpful for exploiting)
    - /data/anr: davlik crash-dumps of android applications

    5. There are 3 SGUID and 1 SUID binaries (visible):
    -rwxr-s--- root inet 5500 netcfg
    -rwxr-sr-x root net_raw 26072 ping
    -rwsr-s--- root shell 9464 run-as

    6. The recovery menu which could be used to install a "new" firmware if the device does not boot properly could be reached via the following steps:
    - unplug the power
    - press and hold the joypad on the backside of the TV downwards
    - replug
    - release the joypad after 10 sec

    7. There is a Customer-Service-Menu at “123654” which contains read only information about the current firmware and so one. However there is also the real service menu (062?96i) which could be used for much more things. But you need to be really careful with this, i already managed to break booting without changing something important.

    8. The settings-app calls the "su" command inside of CSMActivity. If this is no obsolete debug code (i was not able to trigger this part yet) than there could be a "su" inside /sbin. The Manifest also shows this strange "org.droidtv.tv.tv_power_system_access" permission. Therefore i tried to write my own app with the same permission and call "su" which did however not work out (even if I use the same namespace org.droidtv.?)

    9. Every time you pop in an usb stick android creates an backup folder on it. The filenames are "hidden" via base64 and there are some junk bytes at the beginning of the files which you need to crop in order to read them. However the content is quite boring mostly some sqlite3 databases with configuration parameters.

    10. By default the usb sticks you plug in is read-only for user apps. However there is in option in the settings to re-format it. This will result in an XFS formatted, read-write mounted stick where you could even outsource your apps.

    11. There is a soap (http) service running on port 1925 which is used by the philips remote app and allows different things for example starting one of the installed apps. More details could be found if you decompile the XTV-App.


    Hope some of you guys could do something fancy with those information.
    @snoerenberg(xda): did you manage to send commands over your cable yet - If you do rooting should be quite easy from this point (maybe /system/bin/run-as).

    Cheers,
    5003b4d49cbf7916123271b7b1918f123cca0c09bf1428f4398257751ac6570c

    ps: some of the information were dumped on an older firmware and some with the current one
    8
    [GUIDE] How to root 2015 Philips Android TV

    [GUIDE] How to root 2015 Philips Android TV moved to separate thread here

    Please vote regardless you were successful with rooting or not...