Database Users

[Q] Gonna be getting this when my plan is up, few questions.

I'm gonna be getting one as soon as my plan is up. I have a few questions though.
1. (Disregard this one. Didn't realize this was a Verizon exclusive.)
2. When I first get it should I OTA it, so it doesn't disable the possibility of unlocking it?
3. Is this phone supported by many developers?
If I think of any more, I'll post them. Thanks guys!

DubleJayJ said:
I'm gonna be getting one as soon as my plan is up. I have a few questions though.
1. (Disregard this one. Didn't realize this was a Verizon exclusive.)
2. When I first get it should I OTA it, so it doesn't disable the possibility of unlocking it?
3. Is this phone supported by many developers?
If I think of any more, I'll post them. Thanks guys!
Click to expand...
Click to collapse
I think SOL. Used? I do not think you can get the non 98.18.78 anymore.

aviwdoowks said:
I think SOL. Used? I do not think you can get the non 98.18.78 anymore.
Click to expand...
Click to collapse
So when I get it I won't be able to unlock it. Verizon..WHY DO YOU DO THIS...
What version did they patch the BL Unlock method? Cause when I get it I won't be OTA'ing. I will unlock this phone.

DubleJayJ said:
So when I get it I won't be able to unlock it. Verizon..WHY DO YOU DO THIS...
What version did they patch the BL Unlock method? Cause when I get it I won't be OTA'ing. I will unlock this phone.
Click to expand...
Click to collapse
You will most certainly be able to unlock the phone with the latest update using either cellzealots method or mine, but the bootloader will remain locked disabling the ability to use custom roms. If you get one on the 98.17.66 (?) Software your good to use Matt's Droid RAZR M Utility to unlock the bootloader yet so dont take the update, unlock the bl and do what youd like

DubleJayJ said:
I'm gonna be getting one as soon as my plan is up. I have a few questions though.
1. (Disregard this one. Didn't realize this was a Verizon exclusive.)
2. When I first get it should I OTA it, so it doesn't disable the possibility of unlocking it?
3. Is this phone supported by many developers?
If I think of any more, I'll post them. Thanks guys!
Click to expand...
Click to collapse
stock, this phone is great (not sure about the latest release - although, I think it was just to enable a security patch to prevent folks from unlocking the device). so, essentially, if your version is prior to May 2013, then you'll be able to unlock with current methods - otherwise, you'll have to HOPE for someone to create a new method for unlocking or for the devs to make their ROMs flashable via safestrap.
I'm pretty sure you can still root though.
developer support is great (both kernels and ROMs).

jco23 said:
stock, this phone is great (not sure about the latest release - although, I think it was just to enable a security patch to prevent folks from unlocking the device). so, essentially, if your version is prior to May 2013, then you'll be able to unlock with current methods - otherwise, you'll have to HOPE for someone to create a new method for unlocking or for the devs to make their ROMs flashable via safestrap.
I'm pretty sure you can still root though.
developer support is great (both kernels and ROMs).
Click to expand...
Click to collapse
Root works fine still using the RAZR M Utility

jco23 said:
stock, this phone is great (not sure about the latest release - although, I think it was just to enable a security patch to prevent folks from unlocking the device). so, essentially, if your version is prior to May 2013, then you'll be able to unlock with current methods - otherwise, you'll have to HOPE for someone to create a new method for unlocking or for the devs to make their ROMs flashable via safestrap.
I'm pretty sure you can still root though.
developer support is great (both kernels and ROMs).
Click to expand...
Click to collapse
So if I do get this don't OTA it when it first arrives? I'm down to this phone or the HD

DubleJayJ said:
So if I do get this don't OTA it when it first arrives? I'm down to this phone or the HD
Click to expand...
Click to collapse
right - do not accept the OTA if your baseband is prior to May 2013. if it reads May 2013, then you've already got the latest, and you're locked until someone really smart decides to crack it.
if you wanted to, go into the store, have them break out the device, and check the baseband.

jco23 said:
right - do not accept the OTA if your baseband is prior to May 2013. if it reads May 2013, then you've already got the latest, and you're locked until someone really smart decides to crack it.
if you wanted to, go into the store, have them break out the device, and check the baseband.
Click to expand...
Click to collapse
Closest one to me I think is down in Pittsburgh. Only a 30 minute drive, not too bad. I guess I could do that, if I decide to go with this. I'm either going with this, or the Razr HD.

DubleJayJ said:
Closest one to me I think is down in Pittsburgh. Only a 30 minute drive, not too bad. I guess I could do that, if I decide to go with this. I'm either going with this, or the Razr HD.
Click to expand...
Click to collapse
Too bad you aren't closer to Reading, I could really use the business at my shop lol
---------- Post added at 03:45 PM ---------- Previous post was at 03:42 PM ----------
DubleJayJ said:
Closest one to me I think is down in Pittsburgh. Only a 30 minute drive, not too bad. I guess I could do that, if I decide to go with this. I'm either going with this, or the Razr HD.
Click to expand...
Click to collapse
I have both to play with and I have to say I like the feel and size of the RAZR M moreso over the bulk of the HD. won over my Galaxy Nexus which hates me now lol

jco23 said:
stock, this phone is great (not sure about the latest release - although, I think it was just to enable a security patch to prevent folks from unlocking the device). so, essentially, if your version is prior to May 2013, then you'll be able to unlock with current methods - otherwise, you'll have to HOPE for someone to create a new method for unlocking or for the devs to make their ROMs flashable via safestrap.
I'm pretty sure you can still root though.
developer support is great (both kernels and ROMs).
Click to expand...
Click to collapse
Ok, as long as I can root. I think I can live without the custom ROMs... maybe. I plan to get one used, hopefully no OTA but whatever.

braveally said:
Ok, as long as I can root. I think I can live without the custom ROMs... maybe. I plan to get one used, hopefully no OTA but whatever.
Click to expand...
Click to collapse
Its a great little thing, I have people playing with them in my office all the time even my boss and hes an iFart lover

ota update rooted oc4

I have received a notice of an OTA update for my SM-G900V. I am rooted Via towel root. android version 5.0 oc4 kernel 3.4.0 I did try to accept the update and it failed.
I since have tuned off update notices in T.B. Is this update something I need or even want? Or should I just keep the update
notification turned off? I don't want to lose root. Thanks in advance to all of the members and posters and XDA in general.

I have the same phone configuration as you, android version 5.0 oc4, kernel 3.4.0, but when I attempt to run Towelroot it tells me " This phone is not currently supported". Can you help me figure out how to root mine? Or point me to a step by step instructions for dummies(me)? Thank you.

LDBAKE said:
I have the same phone configuration as you, android version 5.0 oc4, kernel 3.4.0, but when I attempt to run Towelroot it tells me " This phone is not currently supported". Can you help me figure out how to root mine? Or point me to a step by step instructions for dummies(me)? Thank you.
Click to expand...
Click to collapse
You're not trying to use towelroot on lollipop, are you?

If 5.0 is lollipop, and it is, then yes. I seem to have the same config as the OP and he indicated that he was rooted using towell root, so I was asking how he did it. Can you suggest a way to root 5.0? Thanks.

LDBAKE said:
If 5.0 is lollipop, and it is, then yes. I seem to have the same config as the OP and he indicated that he was rooted using towell root, so I was asking how he did it. Can you suggest a way to root 5.0? Thanks.
Click to expand...
Click to collapse
1. You can't
2. Search first on how to downgrade
3. See #2

ldeveraux said:
1. You can't
2. Search first on how to downgrade
3. See #2
Click to expand...
Click to collapse
Thanks. I've only had this phone for a few weeks, and I immediately started looking for a root process to get rid of bloatware. Very confusing situation. Lots of posts about One Click Root, Towelroot, etc....all very misleading, for a noob to Samsung. I had already seen the post you suggested, but (at this point) am not terribly interested in the downgrading route. Maybe later. Keep hopeing one of the brilliant devs here will figure out a way to root without downgrading first.

LDBAKE said:
Thanks. I've only had this phone for a few weeks, and I immediately started looking for a root process to get rid of bloatware. Very confusing situation. Lots of posts about One Click Root, Towelroot, etc....all very misleading, for a noob to Samsung. I had already seen the post you suggested, but (at this point) am not terribly interested in the downgrading route. Maybe later. Keep hopeing one of the brilliant devs here will figure out a way to root without downgrading first.
Click to expand...
Click to collapse
This is what people don't understand: No one is working to root this phone on lollipop. There are assuredly folks working to crack the OS in general, but frankly no one cares about a legacy phone now that the S6 is out. So until L is exploited, there won't be any news for this phone.
So if your phone came with an OS lower than OE1, your only choice right now is to backup, downgrade, TR, profit. There is no one-click-root for the 900V. Honestly, just take half a day and do it. You'll be glad you did for just AdAway!

Read, reread the read again. then set aside a few hours. Good luck
http://forum.xda-developers.com/ver...-to-downgrade-lollipop-5-0-to-kitkat-t3088571

I don't wanna...
ldeveraux said:
This is what people don't understand: No one is working to root this phone on lollipop. There are assuredly folks working to crack the OS in general, but frankly no one cares about a legacy phone now that the S6 is out. So until L is exploited, there won't be any news for this phone.
So if your phone came with an OS lower than OE1, your only choice right now is to backup, downgrade, TR, profit. There is no one-click-root for the 900V. Honestly, just take half a day and do it. You'll be glad you did for just AdAway!
Click to expand...
Click to collapse
...I don't wanna hack it. I am a professional developer that wants to legitimately register with Google as a trusted developer and get granted legal root access. Anywhow if I were to take half a day to do it, the next day Google updated the phone to Marshmallow 6.0 and I have to start all over again...like the proverbial sysyphus....

John Bonifas said:
...I don't wanna hack it. I am a professional developer that wants to legitimately register with Google as a trusted developer and get granted legal root access. Anywhow if I were to take half a day to do it, the next day Google updated the phone to Marshmallow 6.0 and I have to start all over again...like the proverbial sysyphus....
Click to expand...
Click to collapse
If you were a professional, then you could probably figure out how to do it yourself?

I figured it out...
ldeveraux said:
If you were a professional, then you could probably figure out how to do it yourself?
Click to expand...
Click to collapse
nah, nah, I was full of it. Apologies. See - what the carriers don't want you to know is that there are actually TWO versions of a device - the consumer version, which is completely locked down (as it should be), and the developer version of the device. OK, yeah the developer version of a device usually costs twice as much as the consumer version - but the bootloader is unlocked, it's easy to flash away the stock, non-root consumer ROM without fear of bricking, and its APIs probably have many more functions that help with debugging and performance tuning. So as a professional developer what I need to do is trade in my Galaxy S5 consumer edition for the developer edition, and I'll be able to install MultiROM, CyanogenMod, SuperSU, and all the other developer candy.
:good:

John Bonifas said:
nah, nah, I was full of it. Apologies. See - what the carriers don't want you to know is that there are actually TWO versions of a device - the consumer version, which is completely locked down (as it should be), and the developer version of the device. OK, yeah the developer version of a device usually costs twice as much as the consumer version - but the bootloader is unlocked, it's easy to flash away the stock, non-root consumer ROM without fear of bricking, and its APIs probably have many more functions that help with debugging and performance tuning. So as a professional developer what I need to do is trade in my Galaxy S5 consumer edition for the developer edition, and I'll be able to install MultiROM, CyanogenMod, SuperSU, and all the other developer candy.
:good:
Click to expand...
Click to collapse
What you NEED to do is stop drinking before you post. Every user here knows of the dev edition, you're adding nothing new.

ldeveraux said:
This is what people don't understand: No one is working to root this phone on lollipop. There are assuredly folks working to crack the OS in general, but frankly no one cares about a legacy phone now that the S6 is out. So until L is exploited, there won't be any news for this phone.
So if your phone came with an OS lower than OE1, your only choice right now is to backup, downgrade, TR, profit. There is no one-click-root for the 900V. Honestly, just take half a day and do it. You'll be glad you did for just AdAway!
Click to expand...
Click to collapse
...Except if you have a *Verizon* consumer edition phone. Then your out of luck, right? not even downgrading to 4.4 first will work, right? because of the signed bootloader image?

John Bonifas said:
...Except if you have a *Verizon* consumer edition phone. Then your out of luck, right? not even downgrading to 4.4 first will work, right? because of the signed bootloader image?
Click to expand...
Click to collapse
You have to read what he wrote. If your Verizon consumer edition phone has the OE1 or OG5 build you have the locked down signed bootloader. If your Verizon consumer edition has a build prior to OE1, you can still downgrade to KitKat, root, and run a few ROMs through Safestrap or Flashfire.

landshark68 said:
You have to read what he wrote. If your Verizon consumer edition phone has the OE1 or OG5 build you have the locked down signed bootloader. If your Verizon consumer edition has a build prior to OE1, you can still downgrade to KitKat, root, and run a few ROMs through Safestrap or Flashfire.
Click to expand...
Click to collapse
here is my build number: LRX21T.G900VVRU2BOG5
...am I out of luck?
thank you again for your continuing help landshark68, I'm an old PC developer but a complete noob at mobile dev, deciding whether to develop for Android, IOS, or Windows.

John Bonifas said:
here is my build number: LRX21T.G900VVRU2BOG5
...am I out of luck?
thank you again for your continuing help landshark68, I'm an old PC developer but a complete noob at mobile dev, deciding whether to develop for Android, IOS, or Windows.
Click to expand...
Click to collapse
BOG5, you are out of luck. Sorry.

mercermtn said:
I have received a notice of an OTA update for my SM-G900V. I am rooted Via towel root. android version 5.0 oc4 kernel 3.4.0 I did try to accept the update and it failed.
I since have tuned off update notices in T.B. Is this update something I need or even want? Or should I just keep the update
notification turned off? I don't want to lose root. Thanks in advance to all of the members and posters and XDA in general.
Click to expand...
Click to collapse
How do you turn off the OTA notification? I'm not gonna bother with the update but the notification is irritating.

B. J. said:
How do you turn off the OTA notification? I'm not gonna bother with the update but the notification is irritating.
Click to expand...
Click to collapse
You disable it in tb

ldeveraux said:
You disable it in tb
Click to expand...
Click to collapse
Yes. Thank you but my question is how do you disable it in Titanium backup. I'm not sure what it's called or what exactly to disable. Also when I find it do I disable it by freezing? I've tried what I thought was disabling it but I still get them. So I think I must be doing something wrong

B. J. said:
Yes. Thank you but my question is how do you disable it in Titanium backup. I'm not sure what it's called or what exactly to disable. Also when I find it do I disable it by freezing? I've tried what I thought was disabling it but I still get them. So I think I must be doing something wrong
Click to expand...
Click to collapse
Freeze all packages in tb with the words SDM and SPD. Our you could delete them, but I wouldn't...

Root method for xt1528 once we can recover from QDL mode

Hi,
If people would like to figure out how to get the xt1528 out from QDL mode then I will provide a method for PERM root and xposed as we did for the moto x here.
This is an article that talks about working with the new sahara protocol the Moto E uses. The qdloader used for the moto x is an older protocol.
Good luck!

jahrule said:
Hi,
If people would like to figure out how to get the xt1528 out from QDL mode then I will provide a method for PERM root and xposed as we did for the moto x here.
This is an article that talks about working with the new sahara protocol the Moto E uses. The qdloader used for the moto x is an older protocol.
Good luck!
Click to expand...
Click to collapse
This will be awesome.
Sent from my XT1528 using XDA Free mobile app

jahrule said:
Hi,
If people would like to figure out how to get the xt1528 out from QDL mode then I will provide a method for PERM root and xposed as we did for the moto x
Click to expand...
Click to collapse
How did you get it into the QDL mode?

fire3element said:
How did you get it into the QDL mode?
Click to expand...
Click to collapse
You get into it by soft bricking your phone. But you can't get out until someone can do the procedure above. I am sure it is trivial using qfil but I run Linux solely and am not in a rush just giving a helping hand to someone here if they want to put a little effort in.

jahrule said:
You get into it by soft bricking your phone. But you can't get out until someone can do the procedure above. I am sure it is trivial using qfil but I run Linux solely and am not in a rush just giving a helping hand to someone here if they want to put a little effort in.
Click to expand...
Click to collapse
I am ready to get the ball rolling on this. This phone needs root at the least, since the bootloader is locked (thanks to Verisucks). I will PM you.

fire3element said:
I am ready to get the ball rolling on this. This phone needs root at the least, since the bootloader is locked (thanks to Verisucks). I will PM you.
Click to expand...
Click to collapse
Pm responded

How's it going?

I can help with this as well. I have my XT1528 on standby. Don't have much dev experience with Android, but I can sure try.

Unless you are willing to stare endearingly at a shiny paperweight that once was your phone, I don't think anyone can do much to help.
To sum this up for new eyes wondering where this might be headed:
Motorola (along with many of the other major phone manufacturers) have removed the ability to load QDownload mode manually. Apparently, the XT1528 along with many newer devices, is now running a new protocol for the diagnostic port. (and there is more than one way the port can be present/active, to further complicate things)
Please do not ask me to explain. I am just barely beginning to understand this stuff myself.
As of right now, the only known method to get our Verizon 2nd gen Moto E into QDL is to actually BRICK the device. At which point the phone will resort to the next level down, since it can not boot properly.
So unless you are willing to intentionally brick your phone to advance this cause... I am afraid that you can not do much.
There is also the looming risk that the device can not be recovered if the new protocols are not figured out. I am treading in uncharted waters here.
Means you or I lost a phone and the $$$ spent on it. By another one and try again.
If you are adamant about wanting to help, click on the 2 links in the OP. @jahrule has posted information that tells us with direction to go.
And if you do not understand what is going on in either article........................................ maybe it is best left alone.
Not being harsh, just safer that way. I am having to figure this stuff out as I go too.
As for progress..? None. I am not intentionally bricking my phone until I gather enough info that will lead me to the conclusion that I can recover the device.
So goes without saying. BE NICE____DO NOT PESTER

@fire3element
I got mine brand new off of Amazon for $48.00, if someone wants to sacrifice the 48 bucks? My note 4 just came in, so I might be willing to brick mine for the cause. I will do some reading where you posted earlier and see what I can do
---------- Post added at 08:20 PM ---------- Previous post was at 08:15 PM ----------
neo4uo said:
@fire3element
I got mine brand new off of Amazon for $48.00, if someone wants to sacrifice the 48 bucks? My note 4 just came in, so I might be willing to brick mine for the cause. I will do some reading where you posted earlier and see what I can do
Click to expand...
Click to collapse
@jahrule
Are you proposing that we brick the phone and use an international boot loader with the Verizon modem to flash, since the boot loader would be corrupt it wouldn't be locked anymore?

jahrule said:
Are you proposing that we brick the phone and use an international boot loader with the Verizon modem to flash, since the boot loader would be corrupt it wouldn't be locked anymore?
Click to expand...
Click to collapse
No, we are not trying to mess with the bootloader. I do not think we even could. The ideal way to go about that would be to use the XT1526 Boost Mobile bootloader and modify it to fit the XT1528. Those 2 models are about the closest in hardware of all the variants. (and I have already tried working on this in the last few months with no progress)
I do not think that would work anyways.
What we are attempting to do here is inject root into the system partition after the kernel startup. After the OS is booted, and root is in place, it should become permanent from then on. At least until you delete, install over, or wipe the device.
The issue here is, there is no way to manually put the phone into QDL mode. (as I mentioned in my post above).
Once we are in QDL, there is no known way to get it out. If the flasher tool does not see/read the phone, there will be no way to recover since we can not flash files to fix what we had to break to get there in the first place.
See the paradox now? LoL
Personally, I can not afford to throw this phone to the gutter. Simply do not have that kind of money laying around. If you can stand to throw $50 into the wind, more power to you Bro
Give it a go, but don't be careless just for the sake of wanting to try something. (speaking from experience here)
UPDATE: I think I am going to hold off on this for now. Looks like the Stagefright vulnerability is going to lead to a new ROOT exploit.
This is bad news for android, but great news for those of us that have locked down devices. Please download the Zimperium StageFright Detector app from the play store to see if you device is vulnerable.
If it is, DO NOT TAKE ANY UPDATES till we get confirmation that a new exploit will benefit us or not.

My GoPhone moto e says it is vulnerable running 5.1 stock firmware
Sent from my MotoE2(4G-LTE) using XDA Free mobile app

fire3element said:
No, we are not trying to mess with the bootloader. I do not think we even could. The ideal way to go about that would be to use the XT1526 Boost Mobile bootloader and modify it to fit the XT1528. Those 2 models are about the closest in hardware of all the variants. (and I have already tried working on this in the last few months with no progress)
I do not think that would work anyways.
Click to expand...
Click to collapse
The bootloader is the same. This will help nothing.
fire3element said:
What we are attempting to do here is inject root into the system partition after the kernel startup. After the OS is booted, and root is in place, it should become permanent from then on. At least until you delete, install over, or wipe the device.
Click to expand...
Click to collapse
What we are trying to do is use qfil or blanflash qflash to recover from QDL mode and be able to write partitions from there.
fire3element said:
The issue here is, there is no way to manually put the phone into QDL mode. (as I mentioned in my post above).
Once we are in QDL, there is no known way to get it out. If the flasher tool does not see/read the phone, there will be no way to recover since we can not flash files to fix what we had to break to get there in the first place.
Click to expand...
Click to collapse
Issue is only recovering from QDL mode which is the goal see above. Getting the phone into QDL mode is very easy.
fire3element said:
See the paradox now? LoL
Personally, I can not afford to throw this phone to the gutter. Simply do not have that kind of money laying around. If you can stand to throw $50 into the wind, more power to you Bro
Give it a go, but don't be careless just for the sake of wanting to try something. (speaking from experience here)
UPDATE: I think I am going to hold off on this for now. Looks like the Stagefright vulnerability is going to lead to a new ROOT exploit.
This is bad news for android, but great news for those of us that have locked down devices. Please download the Zimperium StageFright Detector app from the play store to see if you device is vulnerable.
If it is, DO NOT TAKE ANY UPDATES till we get confirmation that a new exploit will benefit us or not.
Click to expand...
Click to collapse
Stagefright will get one system permissions not root permissions.

neo4uo said:
@fire3element
I got mine brand new off of Amazon for $48.00, if someone wants to sacrifice the 48 bucks? My note 4 just came in, so I might be willing to brick mine for the cause. I will do some reading where you posted earlier and see what I can do
---------- Post added at 08:20 PM ---------- Previous post was at 08:15 PM ----------
@jahrule
Are you proposing that we brick the phone and use an international boot loader with the Verizon modem to flash, since the boot loader would be corrupt it wouldn't be locked anymore?
Click to expand...
Click to collapse
I am proposing that you read the way CrashXXL achieved root on the moto x and we do the same

jahrule said:
Stagefright will get one system permissions not root permissions.
Click to expand...
Click to collapse
Surely I am not misinterpreting what I am seeing here.
https://www.youtube.com/watch?v=PxQc5gOHnKs
Looked for a video of Josh's DefCon presentation, but could not find one. So either he has not presented yet, or no one had uploaded the vid at this time.
Here is an excerpt from the Zimperium blog:
" 2. Zimperium Research Labs (zLABS) will release a video later this week with a Stagefright RCE demonstration. Several large carriers requested that we delay the release of our working exploit. We agreed, given the gravity of the situation. Unfortunately, because the patches are open-source [1, 2], many researchers are already working on creating an exploit. We are planning to release our exploit on August 24th, 2015. However, if an exploit is publicly released or attacks are detected in the wild before that date, we will release ours for testing purposes at that time. "
and
" 6. Josh will present the full details of his research at Black Hat on August 5th or DEFCON on August 7th. We invite you to join us! "
Hopefully this is the new exploit we have all been waiting for. I know that I need to move away from my current device because of hardware issues, however I can not do that until I root this device. More info is sure to come in the next few weeks
jahrule said:
The bootloader is the same. This will help nothing..
Click to expand...
Click to collapse
I should have clarified myself. My attempt was to replace the Verizon "locked" bootloader withe the Boost "un-locked" bootloader.
Again, I do not think it will work. However, if the flasher tool will actually work with this phone, then I suppose it would not hurt to try it. If it does not work, simply flash your backup of the original BL.

Is it possible to flash 5.0.1 back after you update? or remove any update..? Hahaha I updated mine for stagefright without thinking. Diddnt know untill i checked it & found it wasnt vunarable. I know it was before.. Ugh. Carelessness on me behalf.

Hey guys, I have this phone as well as the htc desire 526 pp and they are both just laying in a drawer. I bought them when I couldn't afford a real replacement for my broken nexus 6 and now that I don't need either I would be more then willing to sacrifice mine for the sake of helping out. Plus if it works then the phone is rooted, negative if I can't use it I can free up some drawer space. Not a big loss either way as the screen is too small for my liking. Very nice phone otherwise just not enough space or screen.

So just a quick little update on this.
I purposely bricked another Moto E and was able to get it to show up in the Device Manager as QCOM_BULK (not the exact wording, I forgot) . This required me to flash a bad Bootloader to get the device to fail to turn on, thus kicking it into the fall back mode. I tried flashing all other partitions to make the phone go into the BULK mode. None worked except for the bootloader.
Could not get anywhere with it. We need some specific files to flash in order to get the device rooted or bootloader unlocked. Its not just a few files either, and they have some weird extensions.
I ended up taking the device back and getting something else. Just don't have time to keep playing with it. Someone smarter than me could probably get it done with not a whole lot of effort.
Sorry guys. I tried with my limited knowledge and skills.

Since you have abandoned this project, do you think you could PM me any/all info you have? I would like to take a stab at this.

Steve_xposed said:
Since you have abandoned this project, do you think you could PM me any/all info you have? I would like to take a stab at this.
Click to expand...
Click to collapse
I too would like to see the process, in order to enter QDL mode, I LITERALLY have no use for this phone as it is damaged but still boots and can use screen

Possible root without ENGBOOT?

DroidModderX has just uploaded a video of a 1-click program called Dr.Fone that supposedly can root a bunch of devices. He shows it working on a Verizon HTC 10. The T-Mobile S7 Edge is on the list of supported devices on the Dr.Fone website. The program is $29.95. Has anybody tried the program on our phones or can a dev chime in and either confirm or deny it's "legit-ness"?
I know the fact that it costs money may sound like a scam, but that's what I thought of Sunshine on my HTC M9 at first. Even with the U firmware and root, these devices are still way slower and have crappy battery life. I won't be happy until a good root method is released.

Just updated the TEK thread... I just got it... Pictures are proof, as is the weeks of sleep I am missing..... I have been working on a full Developer Takeover.. Changed the build type, user, thumbprint, keys, props, no TIMA or KNOX, Permissive, Cut the stock rom down to 700 mb and the system apps are GONE... not disabled... And so much more....
Let me explain the pic of a windows screen. That is Mr.MobileHelper... A very honest 3rd party chinese app... On the main page you get stats on your device. As you can see, there is a spot for root.. Before with straight leaked kernel, it would show up as NO for ROOT... No exploits were done with that kernel. It was factory... This has exploits... I, however am going with about 5 hours of sleep in two weeks, and ****ing don't recall the exact steps... I have a potential gold-mine here, and forgot where I put my mine'n pan! FML!
And I have no clue what a Dr. Phone is... where is this link? ****EDIT Found
and it may be nothing... but doesn't look or feel like nothing.. .This rom is smooter than the U is stock... It is the U... But MY U

Exciting news!

anonymoustl said:
And I have no clue what a Dr. Phone is... where is this link? ****EDIT Found
and it may be nothing... but doesn't look or feel like nothing.. .This rom is smooter than the U is stock... It is the U... But MY U
Click to expand...
Click to collapse
Your second pic shows ENG BUILD, the same that comes up with the ENG kernel. I'm suspect that the program you used only rooted with the ENG kernel, and it leads me to believe, OP, that the Dr.Fone program likely must do the same :crying:
Edit: looks like you can download a free version of the program to root with, without having to pay the 30$ I would gladly guinea pig this, but I need my phone for work tomorrow. If none brave enough by weekend, I'll give it a shot.

CaptainMorgan said:
Your second pic shows ENG BUILD, the same that comes up with the ENG kernel. I'm suspect that the program you used only rooted with the ENG kernel, and it leads me to believe, OP, that the Dr.Fone program likely must do the same :crying:
Edit: looks like you can download a free version of the program to root with, without having to pay the 30$ I would gladly guinea pig this, but I need my phone for work tomorrow. If none brave enough by weekend, I'll give it a shot.
Click to expand...
Click to collapse
ill downgrade from nougat to mm and try it
---------- Post added at 01:28 AM ---------- Previous post was at 12:46 AM ----------
blane3298 said:
ill downgrade from nougat to mm and try it
Click to expand...
Click to collapse
didnt work

blane3298 said:
ill downgrade from nougat to mm and try it
---------- Post added at 01:28 AM ---------- Previous post was at 12:46 AM ----------
didnt work
Click to expand...
Click to collapse
Did you try the paid version or the free one? The free version says it can only detect but not root.

anonymoustl said:
Just updated the TEK thread... I just got it... Pictures are proof, as is the weeks of sleep I am missing..... I have been working on a full Developer Takeover.. Changed the build type, user, thumbprint, keys, props, no TIMA or KNOX, Permissive, Cut the stock rom down to 700 mb and the system apps are GONE... not disabled... And so much more....
Let me explain the pic of a windows screen. That is Mr.MobileHelper... A very honest 3rd party chinese app... On the main page you get stats on your device. As you can see, there is a spot for root.. Before with straight leaked kernel, it would show up as NO for ROOT... No exploits were done with that kernel. It was factory... This has exploits... I, however am going with about 5 hours of sleep in two weeks, and ****ing don't recall the exact steps... I have a potential gold-mine here, and forgot where I put my mine'n pan! FML!
And I have no clue what a Dr. Phone is... where is this link? ****EDIT Found
and it may be nothing... but doesn't look or feel like nothing.. .This rom is smooter than the U is stock... It is the U... But MY U
Click to expand...
Click to collapse
I'm guessing Dr.Fone is similar to Mr.MobileHelper. But it looks like your program is using the ENGBOOT to gain root. If this is the case then these programs aren't any better than the manual root method. But try to get some sleep and get that ROM built and look into these programs some more!

CosMiiK said:
Did you try the paid version or the free one? The free version says it can only detect but not root.
Click to expand...
Click to collapse
Free. Not wanting to waste money if it's just the eng kernel

30 dollars for some free eng kernel..yay

blane3298 said:
Free. Not wanting to waste money if it's just the eng kernel
Click to expand...
Click to collapse
I don't want to pay either if it's just engboot. But this is why we need somebody to test it to confirm its just the eng kernel. If their claim of "over 7000 supported devices" is true, they might be using an exploit somebody on their team discovered. Or maybe they use dirtycow. I just can't give up until we have stable root. Stock kernel and root would make this the perfect phone.

CosMiiK said:
I don't want to pay either if it's just engboot. But this is why we need somebody to test it to confirm its just the eng kernel. If their claim of "over 7000 supported devices" is true, they might be using an exploit somebody on their team discovered. Or maybe they use dirtycow. I just can't give up until we have stable root. Stock kernel and root would make this the perfect phone.
Click to expand...
Click to collapse
If they gave a refund sure I'd try it

CosMiiK;69995103b said:
I don't want to pay either if it's just engboot. But this is why we need somebody to test it to confirm its just the eng kernel. If their claim of "over 7000 supported devices" is true, they might be using an exploit somebody on their team discovered. Or maybe they use dirtycow. I just can't give up until we have stable root. Stock kernel and root would make this the perfect phone.
Click to expand...
Click to collapse
I just got nougat redownloaded and set back up. Really don't want to go thru the hassle again -__-

There's no reason to even try to spend the 30$. I was going to act all high and mighty with some comment about "everyone wants root, but noone wants to pay to try" and then pay myself, but just read their FAQ for refunds, it says they will not provide a refund if you don't test the free version....so test the free version and get the answer:
It seems pretty clear cut to me. If you do it on EngBoot, perhaps it'll root it for you so you don't need the manual SuperSU method....but not for 30$.
Ran it on both Stock 935T and also on the stock 935U with the same results.
With products featuring up to a 30-day Money Back Guarantee, Wondershare generally does not refund or exchange products in the following situations:
Non-technical Circumstances
1) Failure to read the product description before purchasing and thus resulting in dissatisfaction with the product's functioned and/or results. It is highly recommended that every customer read the product description and try the free trial version before making their final purchase decision.
Wondershare does not refund software if products fail to meet customer's needs due to a lack of understanding by the customer, of the products functions and capabilities.
Click to expand...
Click to collapse
Seems pretty cut and dry that the 30$ wouldn't be worth it and this topic is now a null issue/question.
With that said, the product itself also has only 4 reviews posted on its website. 3 of them created within a 3minute period by "Jane, Jerry, Alex" who were extremely happy to state how amazing DrFone worked on their Note (3's?).
Can we agree that the OP's question has been answered?

At least for the gs7, it's funny how it lists our gs7 variants in the list of supported devices.

Blade22222 said:
At least for the gs7, it's funny how it lists our gs7 variants in the list of supported devices.
Click to expand...
Click to collapse
Only root going on here is them rooting 30 dollars from our wallet

nitroevo said:
Only root going on here is them rooting 30 dollars from our wallet
Click to expand...
Click to collapse
Agreed.

CosMiiK said:
I'm guessing Dr.Fone is similar to Mr.MobileHelper. But it looks like your program is using the ENGBOOT to gain root. If this is the case then these programs aren't any better than the manual root method. But try to get some sleep and get that ROM built and look into these programs some more!
Click to expand...
Click to collapse
That is where you are wrong, my friend... I forced that.. All part of a takeover.. And remember, the ENG kernel was NOT build on PI3, which this is clearly displaying Least you forget(or maybe you don't know) that there are MANY steps to finding and/or CREATING a vulnerability within a kernel or an OS... ESPECIALLY with the freaking types of encryption algo'z this thing can play with..
This isn't just downloading an app, pressing a button, and calling ones self an ub3r1337h4x0r.... This is reverse engineering... And as many people whom deconstruct/reconstruct better, I fu(*ing HATE documentating a DAMN thing.. So I have that to contend with as well..
See.. Download MrPhone if you want to test yourself... It's all free and blah blah... not gunna f*&k ya over... Now with your eng kernel on your phone, plug into mrPhone(which is only a device admin app.. does NOT root) and look at the kernel and root status... It will show just as I say.
I am uploading a current BOOTING BUILD PROP complete with TEST-KEYS and more.. Also totally broken encryption and verity... Hoping to break this ***** down to an exploitable level... At this point I am too far in.. Now it's 4tLulZ
Full Postulation:
Not going to put it until I get complete because that is like posting a 0-day as you are exploiting it..... EDIT******
Cliff Note Version: Get bootloader unlocked to make rooting a snap...or... wait for it........
A FLASH!!!!!! @Chainfire ?!?!
What would help the MOST from someone, is if they could point in the direction of the homes of the files that deal with the bootloader...
****EDIT 2*****
Rolled back the security patch to August 1, 2016 >

Has anyone tried to fake the chinese device and then use it's solutions to gain BL Unlock or root? Just saying... THAT is the same hardware.. I think someone was giving one of these devices away to a tester for testing... I am using my production phone which is causing relationship issues that I could totally do without.. So I mean... Someone else is going to have to grow a pair and start hacking at this thing too... Or I need that test phone.. because I am ready for some major testing, yet sphincter too tight to pull the cord of a full device fake....
---------- Post added at 08:29 AM ---------- Previous post was at 08:27 AM ----------
I also tried the Dr Phone solution.. The program was....donated to me. And after about 30 minutes of it rebooting my phone, it didn't work... So for the normal s7e user you pay a dollar a minute for the hopes of having something happen that was promised, ending up not just like..... trying to find a goddamn curved tempered glass screen cover that isn't udder garbage!
---------- Post added at 09:07 AM ---------- Previous post was at 08:29 AM ----------
Found exploit that should be able to help out. Reaching out to indiv. for possible help/co-creating.....

What I do not get is that this device has the OEM unlock switch in developer mode.. .but it doesn't do what it is supposed to do..

anonymoustl said:
What I do not get is that this device has the OEM unlock switch in developer mode.. .but it doesn't do what it is supposed to do..
Click to expand...
Click to collapse
All these posts make it sound like you're getting somewhere. That OEM Unlock switch threw everybody off the first few days after the phone came out. A lot of us assumed that the T-Mobile version would be unlocked like all their other phones have been and pre-ordered it. And if I remember correctly, not everybody with T-Mobile phones had that switch in dev options. Not that it did anything for the people that did have it

Whats the best root method?

I am curious which one I should do, I really would like to root it. I have the xt1625 without amazon adds

KingoRoot.

Be careful, there's a guide in the proper section (https://forum.xda-developers.com/moto-g4/how-to/how-to-root-g4-fix-bootable-attempted-t3417592) that explain how to do it properly. KingoRoot apparently brick the phone :s

billubakra said:
KingoRoot.
Click to expand...
Click to collapse
Well, it certainly is the quickest and easiest way to brick your phone.

http://forum.xda-developers.com/showthread.php?p=67728246
The steps in this thread work well for unlocking and rooting your non ad version Moto 4g
Sent from my Moto G (4) using Tapatalk

Tel864 said:
Well, it certainly is the quickest and easiest way to brick your phone.
Click to expand...
Click to collapse
Happy New Year.
Please explain what does it have to do with bricking the phone?

If I can tag along with this post... What is the best root method for the Amazon variant XT1625? According to Moto's website, this one (refurbished phone) apparently has an unlockable bootloader. It is running build number MPJ24.139-64.
Thanks,

billubakra said:
Happy New Year.
Please explain what does it have to do with bricking the phone?
Click to expand...
Click to collapse
Anyone that uses King root is an idiot in my opinion, which I'm sure you don't care about.
billubakra said:
Happy New Year.
Please explain what does it have to do with bricking the phone?
Click to expand...
Click to collapse
Anyone that uses King root is an idiot in my opinion, which I'm sure you don't care about that. What I do know early on was that there was some danger of your data going to of all places, China. Plus I don't like some of the exploits it uses to gain root. If you're happy with it though, go for it.

Isn't SuperSU now owned/maintained at least partially by a Chinese company?

Tel864 said:
Anyone that uses King root is an idiot in my opinion, which I'm sure you don't care about.
Anyone that uses King root is an idiot in my opinion, which I'm sure you don't care about that. What I do know early on was that there was some danger of your data going to of all places, China. Plus I don't like some of the exploits it uses to gain root. If you're happy with it though, go for it.
Click to expand...
Click to collapse
Can you please explain the bold part so that "idiots" like me can stop using that method to root.
---------- Post added at 01:29 PM ---------- Previous post was at 01:26 PM ----------
ansong said:
Isn't SuperSU now owned/maintained at least partially by a Chinese company?
Click to expand...
Click to collapse
Yes, It is owned by a Chinese company, I read that too and I don't trust them either but almost every hardware that is in front of me right now is manufactured in China. I avoid Chinese apps and will block/firewall SuperSu/KingoSu if someone can explain to me how to do that.

Once u install a custom recovery all ROMs are prerooted why would anyone stay stock any why would anyone use kingroot

You don't need Kingroot. A you need to do is unlock the bootloader, install twrp and flash super su.
Sent from my Moto G (4) using Tapatalk