Database Users

[Q] Nook Touch vs Color: technical hardware driver differences

Just waiting for my Nook Touch to arrive...
is there any internal pictures of the Touch?
I'm interested in the differences between the Nook Color and the touch. I believe they are very similar, but not identical, which is why CyanogenMod runs on the color but not on the touch. What are the differences, what drivers need to be added to have customs ROMs on the Touch?
When my Touch arrives I'll start poking around the filesystem and update this thread. Hopefully the kernel modules are kepts as modules rather than built into the kernel.
Edit :
Touch - http://www.techrepublic.com/blog/it...replaceable-same-processor-as-nook-color/2639
Color - http://www.zdnet.com/photos/nookcolor-teardown/487636
- and chipsets in the Color for kernel module drivers to compare with http://nookdevs.com/What_we_know
So to compare:
(Touch in Italics
Color in Bold)
3.7V 1530mAh, 5.66Wh Li-Ion battery (Model No: MLP305787)
6″ Pearl e-ink screen with Neonode zForce touchscreen
^ well, the Color has a real touch screen whereas the Touch uses a IR grid
800MHz Texas Instruments OMAP3621 applications processor
^ color has Samsung S3C6410 ARM processor (no major change)
Texas Instruments TPS65921B Integrated Power Management IC with USB HS Transceiver
Texas Instruments TPS65181 Power Management IC for E Ink Vizplex Enabled Electronic Paper Display
Texas Instruments MSP430F2272 16-bit Ultra-Low-Power Microcontroller
Texas Instruments CD74HC4067 High Speed CMOS 16-Channel Analog Multiplexer/Demultiplexer
Texas Instruments 2624I
SanDisk SDIN5D2-2G NAND Flash chip
Samsung K4X2G323PC-8G08 512 mobile DDR SDRAM
Lattice Semiconductor ispMACH 4032ZE CPLD
Jorjin Technologies WG7310-2A 802.11b/g/n Wi-Fi SiP module
^ Color has CyberTAN Technology (802.11 b/g) (libertas sdio sd8686), CM7 uses tiwlan_drv.ko More info: http://www.jorjin.com/WG7310-20.html
Now to determine what these parts are using for kernel modules...
Any other links for reference:
A slow mention at Cyanomod7 forums: http://forum.cyanogenmod.com/topic/30624-nook-simple-touch-mod/
Cyanomod7 for Nook Color, to study that image for alteration: http://www.cyanogenmod.com/devices/nook-color
Other notes:
Important - the Nook Color is known as the Encore on the CM7 github dev site:
https://github.com/CyanogenMod/android_device_bn_encore
edit: Definately no bluetooth -
Sorry definitely no Bluetooth. At first we thought it did but we were getting confused with a very similar chip (part number ending 0A rather than 2A). The block diagram for the chip in the Nook clearly has Bluetooth crossed out:
http://www.jorjin.com/WG7310-20.html
What made it confusing was that it still has `BT` in the specs, but this is referring to WiFi BT coexistance mode.
So the only way to add Bluetooth would be to get a 0A chip and replace it with the 2A chip on the board. But this scale of soldering is too fiddly to be worth it and practically impossible at this scale.
Hope this clears things up.
Click to expand...
Click to collapse

good summary. Anyone know the best way to get GPS with nook touch? I can't select 'allow mock locations' in settings to try tethering.
Any progress on cyanogenmod 7 for our device? The CM7 site thread points here and this thread points there.. but nothing else out there re CM7 for NT.

And what about partition table of internal flash? Does it look the same?

I wonder what happens if we just try loading CM7 onto the Touch that was designed for the Color.
Probably the screen input will fail. I've noticed that there's no /dev/input/mice
maybe there's something custom in /dev/socket
Code:
E:\ProgramFiles\androidSDK\platform-tools>adb shell ls -R /dev
/dev:
bc_example
pvrsrvkm
rm_server_in
pm_server_out
pm_server_in
timer
controlC0
pcmC0D0p
pcmC0D0c
DspBridge
vcsa
vcs
ptmx
tty63
tty62
tty61
tty60
tty59
tty58
tty57
tty56
tty55
tty54
tty53
tty52
tty51
tty50
tty49
tty48
tty47
tty46
tty45
tty44
tty43
tty42
tty41
tty40
tty39
tty38
tty37
tty36
tty35
tty34
tty33
tty32
tty31
tty30
tty29
tty28
tty27
tty26
tty25
tty24
tty23
tty22
tty21
tty20
tty19
tty18
tty17
tty16
tty15
tty14
tty13
tty12
tty11
tty10
tty9
tty8
tty7
tty6
tty5
tty4
tty3
tty2
tty1
tty0
console
tty
network_throughput
network_latency
cpu_dma_latency
log
binder
alarm
android_adb
android_adb_enable
twl4030-madc
ashmem
kmsg
urandom
random
full
zero
null
kmem
mem
snd
graphics
watchdog
ttyS1
ttyS0
usbdev1.1_ep00
usbdev1.1_ep81
usb1
block
i2c-2
i2c-1
rtc0
input
socket
pts
/dev/log:
radio
events
main
/dev/snd:
timer
controlC0
pcmC0D0c
pcmC0D0p
/dev/graphics:
fb0
/dev/block:
vold
loop7
loop6
loop5
loop4
loop3
loop2
loop1
loop0
ram15
ram14
ram13
ram12
ram11
ram10
ram9
ram8
ram7
ram6
ram5
ram4
ram3
ram2
ram1
ram0
mmcblk0p8
mmcblk0p7
mmcblk0p6
mmcblk0p5
mmcblk0p4
mmcblk0p3
mmcblk0p2
mmcblk0p1
mmcblk0
/dev/block/vold:
179:8
179:7
179:6
179:5
179:4
179:3
179:2
179:1
179:0
/dev/input:
event2
event1
event0
/dev/socket:
wpa_tiwlan0
keystore
installd
dbus
zygote
vold
property_service
/dev/pts:
2
9
8
7
6
5
4
3
1
0
I'd love to have a go at CM7... but it's dicey. What would help a lot is being able to run live straight off the SD card so that any testing is done there without changing the nook itself.
re: partition table: I'll have to have a look. I'll see if I can push something like fdisk to it. See this thread: http://forum.xda-developers.com/showthread.php?t=1241728
re: Mock locations. I don't have that option either. I'm only on version 1.0.0. Perhaps we need to upgrade?

Hi all
I suppose many of us are dreaming of having CM (I hope . So as Nook Color and Nook Touch are almost the same from technical point of view I tried to install CM on my Nook Touch. I was sure that at least touch screen wouldn't work so it was just an experiment.
1. Installed Rommanager - success
2. Flashed CWM (4 Nook Color) - success
3. Reboot into recovery - failed (hang)
Any ideas?
P.S. Moderators, I suggest to move this topic to android development, not general.

Which hardware specs is right?
jago25_98 said:
Just waiting for my Nook Touch to arrive...
Touch - www.techrepublic.com/blog/itdojo/no...replaceable-same-processor-as-nook-color/2639
800MHz Texas Instruments OMAP3621 applications processor
Samsung K4X2G323PC-8G08 512 mobile DDR SDRAM
Click to expand...
Click to collapse
I'd like to buy an ereader, like Nook Simple Touch, Kindle Touch, or Sony PRS-T1. And I want to know the hardware before I buy it.
However, I am very confused about Nook Touch specs.
It says 800 MHz CPU + 512 MB memory here.
From B&N website, it is 600 MHz + 256 MB memory link www.barnesandnoble.com/u/Compare-NOOKs/379003181
Another post (mikecanex.wordpress.com/2011/06/13/nook-touch-rooting-june-13th-news) says it has a TI OMAP3621 CPU but the clock is 600 MHz (BTW: does BogoMIPS : 597.64 in the post mean 600 MHz?) and 228 MB usable memory.
According to wiki (en.wikipedia.org/wiki/Texas_Instruments_OMAP#OMAP_3) OMPA3611 clocked at 800 MHz is used in Nook Simple Touch.
Which one is accurate? If it is 512 MB, I will go for Nook Touch as it will be much better to load Android apps.
PS: Microcenter says Sony PRS-T1 has 256 MB memory. (www.microcenter.com/single_product_results.phtml?product_id=0375288)

Himalayas said:
Which one is accurate? If it is 512 MB, I will go for Nook Touch as it will be much better to load Android apps.
Click to expand...
Click to collapse
The NST has 2GB of flash memory used for internal storage + 512MB of DDR SDRAM
Edit: Just looked inside mine, it has a Hynix 256MB chip, so the 512MB claim over at techrepublic doesn't hold water.
---------- Post added at 11:53 AM ---------- Previous post was at 11:50 AM ----------
Did a check on my NST just to see how much of that chip is usable:
Code:
<6>[ 0.000000] Memory: 256MB = 256MB total
<5>[ 0.000000] Memory: 232448KB available (3328K code, 798K data, 144K init)
That might not be what you wanted to hear

Himalayas said:
Another post (mikecanex.wordpress.com/2011/06/13/nook-touch-rooting-june-13th-news) says it has a TI OMAP3621 CPU but the clock is 600 MHz (BTW: does BogoMIPS : 597.64 in the post mean 600 MHz?) and 228 MB usable memory.
Click to expand...
Click to collapse
It's clocked at 800mhz even if cpuinfo reports diferently

ros87 said:
Just looked inside mine, it has a Hynix 256MB chip
Did a check on my NST just to see how much of that chip is usable:
Code:
<6>[ 0.000000] Memory: 256MB = 256MB total
<5>[ 0.000000] Memory: 232448KB available (3328K code, 798K data, 144K init)
That might not be what you wanted to hear
Click to expand...
Click to collapse
eded333 said:
It's clocked at 800mhz even if cpuinfo reports diferently
Click to expand...
Click to collapse
Then the official B&N website give us correct memory (256 MB) but incorrect CPU frequency ( 600 MHz instead of real 800 MHz).
It is not as sweet as I thought. But at that price, we can't expect more, right? I may start looking at Sony PSR-T1, then.

An I9000 that really needs to be rescued from a brick

I don't normally used the word brick to describe this guy's situation, but it won't boot, it won't turn on, at least visually to my knowledge. He tried making a USB Jig and it still won't go into download mode for an odin flash.
I'm not sure if he built it right, I suggested to him buying a pre-made one to make sure.
Here is his story:
TITLE: Will an USB-JIG save my bricked SGS?
I have an SGS I9000 (international) which I have flashed at least a dozen times without any issues. Today I tried out the CM9 nightly and got stuck in a boot loop.
I tried flashing a new kernel with Odin. Everything seemed fine with Odin, the download completed without issues and the phone rebooted so I unplugged it and pulled the battery to start in in recovery.
Now it won't turn on at all, no Samsung Logo and no battery on the display when plugging it into the charger. Windows is playing sounds when I plug it into my computer though, sometimes it plays the connect/disconnect sounds almost at the same time and sometimes a few seconds apart.
Can I save my phone by building an USB JIG or do I have to send it to Samsung to get it fixed?
Edit: Built a JIG, didn't work =(
From A Thread in /r/Android on Reddit
_____________________________________________
My response
Yes, it should, the SGS is extremely hard to "actually" brick.
http://www.amazon.com/Aftermarket-D...CT0Y/ref=sr_1_2?ie=UTF8&qid=1334438748&sr=8-2
Invest in one of these. Make one yourself or get one fast and easy for $5 on Amazon.
Pull the battery. Pop back in. With out turning it on, place the USB Jig into it and it should load into Download mode.
It takes 2 seconds for it to load into it. You may see the Download mode, you may see this as the screen , you may see NOTHING. It could still be in download mode even if it shows nothing.
Now take out the jig and plug the phone into the computer with the stock Odin flasher already open (started as an Admin (Run as Administrator))
Flash it, should work fine.
_____________________________________________
His Response
Sadly, it didn't work. Nothing happens and odin doesn't find anything if I plug it into the computer after plugging in the JIG.
I'm not getting any notification sounds in Windows when I plug it in anymore either, so it looks like it's really dead now =(
[Comments]
_____________________________________________
I really don't want to give up on his Galaxy S I9000. Could anyone offer any advice from a similar situation? Link to XDA threads, web articles, I'm having a hard time finding information.

I'm the one with the bricked I9000 and here's the latest updates.
I've measured the resistors I used to create the JIG (3x100K + 1K) and they add upp to 300.1K - it seems the resistors I bought aren't of the best quality. From all the info I've gotten on building your own JIG this should be fine, which leaves the pins I've connected it to.
The USB micro B plug I've used is taken from a cable, I can reach pin 5 and 1 in the male plug so I've verified that it's connected to pin 5, I canẗ reach pin 2, 3 and 4 with my multimeter though. If viewed from above, the plug looks like this:
Code:
5 ? 1
---------
? ?
which makes me quite certain the pins are configured like this:
Code:
5 3 1
---------
4 2

If u get on eBay and search i-9000 jig I brought 4 USB jigs for $5. Once they come pull out ur battery put it back in an insert jig wich will put u in download mode. Once bricked u need to go back and install a 3file stock rom then install a cf+root. Once done u should be all good to go back and flash your cm9 thru recovery
Sent from my GT-I9000 using xda premium

I've ordered a JIG from amazon since I can't verify that it's my JIG and not my phone. It'll be here in a week or so (I'm in Sweden) so I guess I'll have to live without my phone until then.
If the JIG doesn't work, it's completely bricked, right?

I've tested some again and I do get notification sounds in windows when plugging the phone in now, so I really hope the JIG from Amazon does the trick!

All the galaxy s series are the hardest phones to completely "brick" it is virtually impossible. Iv recovered my phone from being bricked about 5 times now. The part that is a pain is finding the 3file rom. I wish I had a link for you but I have the files saved on my computer. It doesn't matter if its not an English stock rom you use as long as u get your phone started and install cf+root, then you can get back where u started and install cm9. If u get stuck in boot loop again use 3button combo up+power+home and reboot again this has happened and worked for me on several occasions. I hope this helps
Sent from my GT-I9000 using xda premium

as far as i think this is a problem with ur computer drivers ,had this problem before and resolved it by reinstalling kies ,try it and then connect ur fone in download mode ,should do the trick.i had the problem once also if possible try another computer ,i think if ur phone enters download mode ,ur phone is not dead...the jig should work did a little research earlier for my own phone ,had soft bricked it earlier ,plug in the jig ,enter the download mode flash a stock firmware .the list of stock firmwares is here ,http://forum.xda-developers.com/showthread.php?t=1011901&highlight=stock+rom,just search your region and best of luck

I recieved the JIG from Amazon today and I just tried it without luck =(
Nothing happens when I insert the JIG and Odin doesn't see the phone if I plug it in after trying the JIG.
It seems it is bricked for real, how much do you think it'll cost to have Samsung fix it?
---------- Post added at 05:24 PM ---------- Previous post was at 05:07 PM ----------
I've switched to Linux for some better USB info.
If I insert the battery into the phone and then plug it into my computer I get a message about a new USB device, after about 5 seconds it disconnects again. This only happens on my USB 2.0 ports, not on the USB 3.0 ports.
Code:
Apr 20 17:12:08 galvatron kernel: usb 2-1.8: new high-speed USB device number 7 using ehci_hcd
Apr 20 17:12:13 galvatron kernel: usb 2-1.8: USB disconnect, device number 7
Apr 20 17:12:26 galvatron kernel: usb 2-1.8: new high-speed USB device number 8 using ehci_hcd
Apr 20 17:12:32 galvatron kernel: usb 2-1.8: USB disconnect, device number 8
Apr 20 17:13:27 galvatron kernel: usb 2-1.8: new high-speed USB device number 9 using ehci_hcd
Apr 20 17:13:32 galvatron kernel: usb 2-1.8: USB disconnect, device number 9
I removed and inserted the cord between the connections here, if I leave it in nothing happens after it has disconnected.
If I plug in the JIG before plugging it into the computer however, nothing shows up in my message log.
If I run lsusb -v while it's connected I get this:
Code:
Bus 002 Device 011: ID 04e8:1234 Samsung Electronics Co., Ltd
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 255 Vendor Specific Class
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x04e8 Samsung Electronics Co., Ltd
idProduct 0x1234
bcdDevice 1.00
iManufacturer 1 System MCU
iProduct 2 SEC S5PC110 Test B/D
iSerial 0
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 32
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 0
bmAttributes 0xc0
Self Powered
MaxPower 50mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 255 Vendor Specific Class
bInterfaceSubClass 0
bInterfaceProtocol 0
iInterface 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x02 EP 2 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Device Qualifier (for other device speed):
bLength 10
bDescriptorType 6
bcdUSB 2.00
bDeviceClass 255 Vendor Specific Class
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
bNumConfigurations 1
Device Status: 0x0001
Self Powered
Since it actually connects and can communicate with my computer over USB it seems there is some life left in it, but since it completely refuses to communicate when inserting the JIG I guess I won't get it into download mode and will have to send it to Samsung to be fixed.
Edit: If I start it with the JIG, plug it into the USB, unplug it and then plug it in again I get the 5s connect/disconnect.

did you ever have it fixed ? I have asimilar problem tried everything I can find from xda , still cant get Odin to detect the phone...

You seem knowledgeable, but I noticed you didn't mention Heimdall after you ran Linux, only that you'd tried odin. Try it if you haven't.
Edit: didn't notice the post times.
Using GT-I9000 my sent Tapatalk 2 from.

I sent it in for service and got an answer after 3 weeks that it was fubar and that I got store credit towards a new phone - ended paying €130 for a Galaxy Nexus instead.
adytum said:
You seem knowledgeable, but I noticed you didn't mention Heimdall after you ran Linux, only that you'd tried odin. Try it if you haven't.
Edit: didn't notice the post times.
Click to expand...
Click to collapse
I never considered trying heimdall since the phone disconnected from the computer after 5s, in retrospect I should perhaps have given it a shot, but I'm quite happy with how everything turned out =)

same problem
HI
I have the same problem and i try the same, but my phone still dead.
My dog disconnect USB cable then i flashing pda, csc and phone files on my phone after this i have same problem..
If somebody now how to fix this, please help me.
Sorry for my english

Nekronomika said:
HI
I have the same problem and i try the same, but my phone still dead.
My dog disconnect USB cable then i flashing pda, csc and phone files on my phone after this i have same problem..
If somebody now how to fix this, please help me.
Sorry for my english
Click to expand...
Click to collapse
Hi new here, but been looking around for awhile.
I have just unbricked my phone that died after I flashed a different phones pit file, totally dead.
Got it back in working condition using Unbrickable Mod by AdamOutler in the Developers forum, have a look at that

usb tether packet frame errors under linux

On usb tether to my linux notebook, I get about 1Mbps down and 14Mbps up. Using the speedtest on the phone, I get 16Mbps down and 6MBPS up. Yes I know these results are not repeatable, but I consistently can't break 1Mbps download on tether. Further down I will show this is related to packet framing errors.
But first, device data. The OnePlus5 is running Android 7.1.1 Oxygen 4.5.10 Oneplus A5000. This is the 128G flash/ 8G ram version.
Notebook data:
Code:
Linux linux-0u81 4.4.79-19-default #1 SMP Thu Aug 10 20:28:47 UTC 2017 (2dd03e8) x86_64 x86_64 x86_64 GNU/Linux
Output of lsusb for the phone follows, but note this message:
iInterface 5 RNDIS Communications Control
** UNRECOGNIZED: 05 24 00 10 01
** UNRECOGNIZED: 05 24 01 00 01
** UNRECOGNIZED: 04 24 02 00
** UNRECOGNIZED: 05 24 06 00 01
Click to expand...
Click to collapse
Code:
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.10
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf00e
bcdDevice 4.04
iManufacturer 1 OnePlus
iProduct 2 OnePlus
iSerial 3 (censored)
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 75
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4 rndis
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Association:
bLength 8
bDescriptorType 11
bFirstInterface 0
bInterfaceCount 2
bFunctionClass 224 Wireless
bFunctionSubClass 1 Radio Frequency
bFunctionProtocol 3 RNDIS
iFunction 7 RNDIS
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 1
bInterfaceClass 224 Wireless
bInterfaceSubClass 1 Radio Frequency
bInterfaceProtocol 3 RNDIS
iInterface 5 RNDIS Communications Control
** UNRECOGNIZED: 05 24 00 10 01
** UNRECOGNIZED: 05 24 01 00 01
** UNRECOGNIZED: 04 24 02 00
** UNRECOGNIZED: 05 24 06 00 01
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x0008 1x 8 bytes
bInterval 9
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 10 CDC Data
bInterfaceSubClass 0 Unused
bInterfaceProtocol 0
iInterface 6 RNDIS Ethernet Data
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x8e EP 14 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x0f EP 15 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Binary Object Store Descriptor:
bLength 5
bDescriptorType 15
wTotalLength 12
bNumDeviceCaps 1
USB 2.0 Extension Device Capability:
bLength 7
bDescriptorType 16
bDevCapabilityType 2
bmAttributes 0x00000006
Link Power Management (LPM) Supported
Device Status: 0x0000
(Bus Powered)
Test Data (for nitpickers):
(removed due to forum rules but available on request.)
Note only the RX path has frame errors:
Code:
usb0 Link encap:Ethernet HWaddr (censored)
inet addr:192.168.42.215 Bcast:192.168.42.255 Mask:255.255.255.0
inet6 addr: 2607:fb90:8635:67b8:78a2:7bff:febe:7afb/128 Scope:Global
inet6 addr: fe80::78a2:7bff:febe:7afb/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:12497 errors:1062 dropped:0 overruns:0 frame:1058
TX packets:22595 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4121815 (3.9 Mb) TX bytes:27795493 (26.5 Mb)
I have run this on Opensuse, Fedora, Mint, and Ubuntu with similar results.
It would be useful if someone could duplicate this. I don't think the flavor of linux matters. I don't have a problem on windows.
Using the google on the interwebs, there is some chatter about RNDIS being dropped on "later" versions of Android. Reality? Perhaps OnePlus has attempted to add it back and didn't do it correctly.
I should also point out I'm using Tmobile, which is a IPV6 system. I'm using the Linux "network manager", but using "wicked" produced the same error.

I'm encountering the same issue.
Any hint on how to resolve it?

Sorry about the late reply. I'm not a regular here.
If you are on a OnePlus, please complain to them. I still have no solution.

This appears to be fixed on Oxygen OS rev 4.5.14
usb0 Link encap:Ethernet
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:13690 errors:0 dropped:0 overruns:0 frame:0
TX packets:11644 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:15616702 (14.8 Mb) TX bytes:8406490 (8.0 Mb)

yes 4.5.14 worked for me another thread here
https://forum.xda-developers.com/oneplus-5/help/slow-tether-usb-t3649501

usb tether using Linux PC fails after Android 8.1 update on OnePlus 5

I updated a OnePlus 5 from Android 8.0 to Android 8.1 and lost the ability to USB tether. Hotspot works fine. I've verified that some other users have this problem on the OnePlus subreddit. I'm on Opensuse 42.3.
Linux 4.4.126-48-default #1 SMP Sat Apr 7 05:22:50 UTC 2018 (f24992c) x86_64 x86_64 x86_64 GNU/Linux
This link indicates a "fix" similar to one on a Lineage forum. It doesn't solve the problem, but figured I would put it here to prevent similar posts from showing up in this thread.
https://forums.oneplus.com/threads/hotspot-not-working.769592/
At least this fix didn't break anything.
There are suggestions regarding changing the APN, but I no joy.
Using lsusb, it is clear that the phone is seen by the PC. However the phone doesn't show up when I run ifconfig.
This is the lsusb verbose output when usb tether is selected.
Code:
lsusb -s8:10 -v
Bus 008 Device 010: ID 2a70:f00e
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf00e
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 75
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Association:
bLength 8
bDescriptorType 11
bFirstInterface 0
bInterfaceCount 2
bFunctionClass 239 Miscellaneous Device
bFunctionSubClass 4
bFunctionProtocol 1
iFunction 7
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 1
bInterfaceClass 239 Miscellaneous Device
bInterfaceSubClass 4
bInterfaceProtocol 1
iInterface 5
** UNRECOGNIZED: 05 24 00 10 01
** UNRECOGNIZED: 05 24 01 00 01
** UNRECOGNIZED: 04 24 02 00
** UNRECOGNIZED: 05 24 06 00 01
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x0008 1x 8 bytes
bInterval 9
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 10 CDC Data
bInterfaceSubClass 0 Unused
bInterfaceProtocol 0
iInterface 6
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x8e EP 14 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x0f EP 15 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
For completelness, this is the lsusb verbose output when tether is NOT selected.
Code:
lsusb -s8:13 -v
Bus 008 Device 013: ID 2a70:f003
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf003
bcdDevice 4.04
iManufacturer 1 OnePlus
iProduct 2 OnePlus
iSerial 3 (redacted)
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 62
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4 mtp
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 3
bInterfaceClass 255 Vendor Specific Class
bInterfaceSubClass 255 Vendor Specific Subclass
bInterfaceProtocol 0
iInterface 5 MTP
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x82 EP 2 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x001c 1x 28 bytes
bInterval 6
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 6 Mass Storage
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x83 EP 3 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x02 EP 2 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
Device Qualifier (for other device speed):
bLength 10
bDescriptorType 6
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
bNumConfigurations 1
Device Status: 0x0000
(Bus Powered)

G4H Kids smartwatch ?

hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077

ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Hi, can you pull the system os using adb?
That can help you to get the drivers, if you want to port another watch os.

hi
I cannot get ADB to work yet
G

Hello, Have you connected with adb? I opened the system engineer mode with dial *#*#83781#*#* But under Debug&Log tab, there is no enable debug mode. I think, If I can open debug mode, I can connect with adb.

Thanks you all for those useful info. I have a watch like this. One of the things I am interested is to turn the watch's LTE to a wifi hotspot for other devices, and I found a way to do so, though not very convenience. I am posting the instruction here. Hopefully it is useful to others, and maybe there is a better way to do so:
From Phone, dial *#*#83781#*#* to enter Engineer Mode
Under Connectivity tab, “Start Services”, the go to “Sfatap Wifi Channel”, toggle Auto (off->on->off), then “OK” when seeing “Auto Close Warning”. Optionally choose a 2.4GHz Wifi Channel
Back to the top/root screen, slide from the screen top, and choose the little blue icon at the upper-left most corner to setup Wifi hotspot’s name, security mode (open, WPA PSK, WPA2 PSK) and password.
Note that enabling hotspot will disable the watch's wifi to internet. Any change such as, reboot, turning off hotspot in 3), or enabling wifi will shutdown the hotspot. To enable again, repeat step 1-2 (settings in 3 is saved)

I have same watch. After changing one parameter in Engineer mode, shartwatch doesn't recognize the SIM card and restarts automatically 1 min after boot.
Can you please support how to fix this issue? is there any possibility to do a factory reset using the button on Watch?
Or restore Engineer Mode to default?
THX a lot in advance

ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Have you tried to send a text message to turn on debug mode? try this (no space): pw,123456,DEVELOP,1#

ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Try this tutorial to enable adb/root: https://github.com/eisaev/SuperSUInstaller

Hi! I got a G4H(KGG KG70) watch as well for my kid, problem is that touch does work, every second time I turn on/off the screen. It worked perfectly before, but now it only works every second time I turn on/off the screen. I think that might be a software issue.
I've just started to research so haven't got far, any things I might could try?
The watch works perfectly other then that, but sometimes have trouble get the location.

Hello there. I bought this watch for my child, but when I want to use another tracking program other than the se tracker program, I cannot change the ip number. Can you help me with this?

aşağıdaki kod çalışmıyor.
Find my kids application server: pw,123456,ip,tcp.findmykids.org,8001#

afyden2018 said:
when I want to use another tracking program other than the se tracker program, I cannot change the ip number.
Click to expand...
Click to collapse
Protocols for "SeTracker" and "Где мои дети" are different. It is not the matter of changing IP, findmykids.org won't understand data sent by SeTracker service from watch.
Also "Где мои дети" is compiled only for Android 5.0+ while this watch runs Android 4.4. So event with watch rooted (described in this thread) you cannot install proper service on watch that will report location to findmykids.org. Maybe they had some Android 4.4 compatible version in the past, but it is highly unlikely this will still work today.

bbkr said:
Protocols for "SeTracker" and "Где мои дети" are different. It is not the matter of changing IP, findmykids.org won't understand data sent by SeTracker service from watch.
Also "Где мои дети" is compiled only for Android 5.0+ while this watch runs Android 4.4. So event with watch rooted (described in this thread) you cannot install proper service on watch that will report location to findmykids.org. Maybe they had some Android 4.4 compatible version in the past, but it is highly unlikely this will still work today.
Click to expand...
Click to collapse
Since I couldn't find any more resources about g4h, I asked for help under this topic. The link to the watch I actually bought is below. If I can change the server of the watch with the sms sent to the watch, maybe I can switch to an application other than tracker. Engineering mode opens but I don't know how to do it.
https://tr.aliexpress.com/item/1005002878573395.html?spm=a2g0s.9042311.0.0.1cc04c4dVwpHt3

I hope someone here can help me out. I recently purchased this watch for my daughter and have purchased a Lucky Mobile SIM card to use with it. I’ve not been able to get the watch to connect to the mobile network. The person that is trying to help me from their end has been less than helpful lol. He’s now insisting that I’m putting the SIM card in wrong and I have had to send a video to prove to him that isn’t the case.
I went into the network portions and noticed they had only set up an APN for Bell, so now I have set up the APN for lucky mobile. Yet still no luck (groan)
Can anyone give me some suggestions on how to get this thing to work. Or tell me what provider you went with (in Canada) to get this thing to work?
I really appreciate any help I can get at this point.

I sent pw,123456,DEVELOP,1# to my device and I can connect to it via adb. Once 'adb -d shell', I am in the system but don't know what to do. On the watch's system, process 'adbd' runs under user 'shell'.
A bit more info of the watch (I am not an Android expert)
# ./adb -d shell
[email protected]:/ $ cat /proc/version
Linux version 4.4.83+ ([email protected]) (gcc version 4.8 (GCC) ) #1 SMP PREEMPT Thu Aug 22 16:00:23 CST 2019
[email protected]:/ $ cat /proc/cpuinfo
processor : 0
model name : ARMv8 Processor
BogoMIPS : 30.72
Features : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae aes pmull sha1 sha2 crc32
CPU implementer : 0x41
CPU architecture: 8
CPU variant : 0x0
CPU part : 0xd03
CPU revision : 4
processor : 1
model name : ARMv8 Processor
BogoMIPS : 30.72
Features : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae aes pmull sha1 sha2 crc32
CPU implementer : 0x41
CPU architecture: 8
CPU variant : 0x0
CPU part : 0xd03
CPU revision : 4
Hardware : Spreadtrum SC9820e
Revision : 0000
Serial : 0000000000000000
[email protected]:/ $ cat /proc/meminfo
MemTotal: 438400 kB
MemFree: 102396 kB
MemAvailable: 257892 kB
Buffers: 5124 kB
Cached: 130896 kB
SwapCached: 4052 kB
...
[email protected]:/ $ df
Filesystem Size Used Avail Free Blksize
/dev 214.1M 128.0K 213.9M 213.9M 4096
/sys/fs/cgroup 214.1M 12.0K 214.1M 214.1M 4096
/mnt/asec 214.1M 0.0K 214.1M 214.1M 4096
/mnt/obb 214.1M 0.0K 214.1M 214.1M 4096
/system 484.3M 294.0M 180.3M 190.3M 4096
/data 2.7G 9.6M 2.7G 2.7G 4096
/cache 143.6M 168.0K 140.5M 143.5M 4096
/productinfo 928.0K 96.0K 732.0K 832.0K 4096
/mnt/shell/emulated 2.7G 9.6M 2.7G 2.7G 4096
Also, I found some useful tools like "am" and "pm"

Found a useful thread: https://forum.xda-developers.com/t/...-and-rebrands-kinyo-garett-lemfo-etc.4332727/

Hi

ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
You can putting that device to recovery mode or fastboot mode like this with a application name power toggles *required root

i have the samw watches, i have installed shotcut creator, but when i'm starting "settings" app it launching an ROM settings and i could not enable ADB to root and then flash my watches, i have tried to use engineer mode but it isn't doing anything really useful

wait, i know a way, i think i can enable ADB via "Hidden MIUI settings" and it's not for MIUI only, i tesetd it works on custom roms