Related
Hi Developers,
I have asked this question couple of times in the forum, however no one is interested in responding, therefore thought of starting the new thread.... Please merge if one already exists.
I have been using the CM7 Nand build and everything works fine except for the Wifi Hotspot & USB Tethering on the CM7 Nand build. I use a 3G connection and it works absolutely fine on the phone, however when I use the Hotspot or USB tethering feature my laptop does not connect to the internet, I have tested this on multiple systems and its always the same. Also tried to re-flashing, however did not work. Reinstalled wm6.5 and everything worked fine. The CM7 SD card version and the R175 & R169 from code.google work absolutely fine and my laptop is able to connect to the internet via my phone. Also if i connect the phone to a wi-fi router it works absolutely fine. Therefore I feel that this is something related to the CM7 NAnd build and not specific to the laptop
Not sure if I am the only 1 facing this problem. If anyone has found a fix for this please upload the steps.
About Phone:
Android VErsion: 2.3.7
Base Band Version: 32.2803.05.06U_0.63.05.36
Kernel VErsion: [email protected] #45
Mod Version: cyanogenMod-7.2.0-RC0-photonic-KANG
Build: GWK74
Laptop Information:
HP Probook 6460b
OS: Windows 7 x64
Also tried on Windows 7 x32, Windows Vista (x64), Windows XP x32
Thanks
Maq
I think problem with mac
Sent from my Photon using XDA
Thanks Derefas.... can you guide me to any thread where i can find a fix.
I tried searching for over a month, but could not find any fix/thread for this problem.
Yes, same problem here unfortunately. 3G works fine on Mini, router is available and connection to it goes fine, but then router is not routing at all, internet connection doesn't go through. Win7 shows a yellow "!" mark on the wifi icon and that's it. Sounds weird that SD version has working tethering though. Any hint or test we can make?
Yes, i think problem is mac 11:22:33:44:55:66 but why devs can not not add old wifi driver with static harcoded nvs? I using it with fixed mac addr and boot.img is easy to hex edit becouse is not compressed, for example users will be able to hex edit their boot.img with his real mac addr:
photon boot.img with static nvs:
Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00493DC0 73 69 73 61 76 32 67 3D 30 78 33 0A 62 78 61 32 sisav2g=0x3.bxa2
00493DD0 67 3D 30 0A 63 63 6F 64 65 3D 41 4C 4C 0A 63 63 g=0.ccode=ALL.cc
00493DE0 74 6C 3D 30 78 30 0A 63 63 6B 64 69 67 66 69 6C tl=0x0.cckdigfil
00493DF0 74 74 79 70 65 3D 30 0A 6F 66 64 6D 64 69 67 66 ttype=0.ofdmdigf
00493E00 69 6C 74 74 79 70 65 3D 31 0A 72 78 70 6F 32 67 ilttype=1.rxpo2g
00493E10 3D 32 0A 62 6F 61 72 64 6E 75 6D 3D 31 0A 6D 61 =2.boardnum=1.ma
00493E20 63 61 64 64 72 3D 30 30 3A 35 33 3A 32 32 3A 34 caddr=[color=red]00:53:22:4[/color]
00493E30 38 3A 34 31 3A 35 30 0A 6E 6F 63 72 63 3D 31 0A [color=red]8:41:50[/color].nocrc=1.
00493E40 6F 74 70 69 6D 61 67 65 73 69 7A 65 3D 31 38 32 otpimagesize=182
00493E50 0A 68 77 68 64 72 3D 30 78 30 35 66 66 66 66 30 .hwhdr=0x05ffff0
00493E60 33 31 30 33 30 30 33 31 30 30 33 31 30 30 30 30 3103003100310000
00493E70 30 0A 73 64 5F 67 70 6F 75 74 3D 30 0A 73 64 5F 0.sd_gpout=0.sd_
00493E80 67 70 76 61 6C 3D 31 0A 73 64 5F 67 70 64 63 3D gpval=1.sd_gpdc=
00493E90 30 0A 73 64 5F 6F 6F 62 6F 6E 6C 79 3D 31 0A 52 0.sd_oobonly=1.R
00493EA0 41 57 31 3D 38 30 20 33 32 20 66 65 20 32 31 20 AW1=80 32 fe 21
00493EB0 30 32 20 30 63 20 30 30 20 32 32 20 32 61 20 30 02 0c 00 22 2a 0
00493EC0 31 20 30 31 20 30 30 20 30 30 20 63 35 20 30 20 1 01 00 00 c5 0
00493ED0 65 36 20 30 30 20 30 30 20 30 30 20 30 30 20 30 e6 00 00 00 00 0
00493EE0 30 20 34 30 20 30 30 20 30 30 20 66 66 20 66 66 0 40 00 00 ff ff
Thanks,
Can you point to a guide/link or provide the steps which will help fix this.
Regards,
Maq
Same problem here. How can we change Mac adr?
I've got an HTC Aria but I'm on the same boat here. What I've did is to install an app called OpenGarden and since then Wifi Tethering works perfect. USB tethering still not working.
I'm trying on Windows 7 x64
Found a work around.... installed barncel wi-fi tether... configured Adhoc Network....works like charm.... enjoy.....
Nice, working on Photon with CM7 (boot sd card)
ps : it's "Barnacle wifi tether"
this is only for WIFI what about USB?
Yes only for wifi, i don't use usb to share (it' for my ipad wifi...)
trying to figure out something for that too.... will keep you updated if i get something
USB Tethering Fix
Hi All,
The latest posts were about usb tethering , I'm using pdanet 3.50 for this purpose and it's working properly follow this link:
https://play.google.com/store/apps/...ult#?t=W251bGwsMSwxLDEsImNvbS5wbi5oZWxwZXIiXQ
Thanks to xda member esn_bmd ( Profile Link: http://forum.xda-developers.com/member.php?u=4516525) who helped figure this out.
Please thank him not me...
Regards,
Maq
Fix for this **** - fix proc/calibration, use bcm4329_204 and softap
Proof
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Plugging my Nexus Player in through my HDMI receiver outputs the res as 576p. Whereas when I plug it directly into the TV it does full 1080p.
I know it's not an issue with the soundbar because the Chromecast that is plugged into the same receiver runs in 1080p just fine.
Anyone else experiencing this?
Any chance you could post your receiver's EDID, or if you don't know what that is, could you post a dmesg from the Nexus Player after unplugging and replugging the HDMI cable?
I'd. Like to know as well
Sent from my SAMSUNG-SM-N900A using XDA Free mobile app
xBIGREDDx said:
Any chance you could post your receiver's EDID, or if you don't know what that is, could you post a dmesg from the Nexus Player after unplugging and replugging the HDMI cable?
Click to expand...
Click to collapse
Not sure about the EDID but the model is a Sony HT CT660.
I'll see about getting logs but I'm not sure if I can use the adb shell without root.
rog1121 said:
Not sure about the EDID but the model is a Sony HT CT660.
I'll see about getting logs but I'm not sure if I can use the adb shell without root.
Click to expand...
Click to collapse
On mine I'm able to run 'adb shell dmesg > dmesg.log' and it gives me the log. No root.
I've got an Acer projector that apparently can't handle RGB Limited when it's in 720p mode, so while I was trying to figure that out I found that the dmesg will dump the EDID (the display's capabilities info block) right after you connect the HDMI cable.
Man I am having the same exact issue. It automatically chooses 480p when connected to my receiver. Has anyone figured out how to fix this?
Its apparently a hdmi edid/hdcp handshake issue. I've been trying to figure this out for 2 days straight now. Doesnt seem like there is anything we can do. Either there is a firmware update to the nexus player that extends the time it tries to do the handshake or possibly we can use an HDMI splitter that strips the HDCP from the signal.
xBIGREDDx said:
On mine I'm able to run 'adb shell dmesg > dmesg.log' and it gives me the log. No root.
I've got an Acer projector that apparently can't handle RGB Limited when it's in 720p mode, so while I was trying to figure that out I found that the dmesg will dump the EDID (the display's capabilities info block) right after you connect the HDMI cable.
Click to expand...
Click to collapse
Here it is.
Code:
<6>[ 2683.579311] *********** Print EDID block 0 start **********
<6>[ 2683.579324] 00 ff ff ff ff ff ff 00 4d d9 03 28 01 01 01 01
<6>[ 2683.579329] 09 17 01 03 81 6e 3e 78 8a a5 8e a6 54 4a 9c 26
<6>[ 2683.579333] 12 45 46 20 00 00 01 01 01 01 01 01 01 01 01 01
<6>[ 2683.579337] 01 01 01 01 01 01 8c 0a d0 90 20 40 31 20 0c 40
<6>[ 2683.579342] 55 00 b9 88 21 00 00 18 01 1d 80 18 71 1c 16 20
<6>[ 2683.579346] 58 2c 25 00 b9 88 21 00 00 9e 00 00 00 fc 00 53
<6>[ 2683.579350] 45 35 30 55 59 30 34 0a 20 20 20 20 00 00 00 fd
<6>[ 2683.579354] 00 32 4b 18 3c 0b 00 0a 20 20 20 20 20 20 01 3b
<6>[ 2683.579358] *********** Print EDID block 0 end ************
<6>[ 2683.596053] *********** Print EDID block 1 start **********
<6>[ 2683.596059] 02 03 35 74 4b 02 03 11 12 13 04 14 05 1f 90 20
<6>[ 2683.596064] 32 0f 7f 07 15 07 55 3d 1f c0 57 07 00 67 54 00
<6>[ 2683.596068] 5f 7e 01 83 5f 00 00 6d 03 0c 00 21 00 88 3c 20
<6>[ 2683.596072] 00 60 01 02 03 01 1d 80 d0 72 1c 16 20 10 2c 25
<6>[ 2683.596076] 80 b9 88 21 00 00 9e 01 1d 00 bc 52 d0 1e 20 b8
<6>[ 2683.596080] 28 55 40 b9 88 21 00 00 1e 00 00 00 00 00 00 00
<6>[ 2683.596084] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
<6>[ 2683.596088] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8a
<6>[ 2683.596092] *********** Print EDID block 1 end ************
rog1121 said:
Here it is.
Click to expand...
Click to collapse
Thanks. I put that into edidreader.com and it shows that in the first block, there are 2 timing descriptors. The first one lists 720x576p, and the second one lists 1920x540i (which is 1920x1080 but interlaced). So it looks like the Nexus Player reads the first timing descriptor and goes with that.
It also shows that in the extension block, it lists VIC 16 (1080p) as native (full list of VIC codes on Wikipedia, if you're interested), so I'm not sure why it wouldn't use the native format over the Block 0 descriptor. Maybe they'll have an update for that soon.
(The website also shows that the checksums are valid, so your EDID's not corrupt or anything. It's just the Nexus Player acting weird.)
xBIGREDDx said:
Thanks. I put that into edidreader.com and it shows that in the first block, there are 2 timing descriptors. The first one lists 720x576p, and the second one lists 1920x540i (which is 1920x1080 but interlaced). So it looks like the Nexus Player reads the first timing descriptor and goes with that.
It also shows that in the extension block, it lists VIC 16 (1080p) as native (full list of VIC codes on Wikipedia, if you're interested), so I'm not sure why it wouldn't use the native format over the Block 0 descriptor. Maybe they'll have an update for that soon.
(The website also shows that the checksums are valid, so your EDID's not corrupt or anything. It's just the Nexus Player acting weird.)
Click to expand...
Click to collapse
Well I hope they roll out an update for this soon, or an unsecure boot img so I can root this thing and force 1080p
felizf said:
Man I am having the same exact issue. It automatically chooses 480p when connected to my receiver. Has anyone figured out how to fix this?
Click to expand...
Click to collapse
I'm seeing the same thing. Pushing it through a Yamaha receiver and it picks something really wonky for a resolution.
Jim
there seem to be a lot of HDCP issues with this device that aren't present in other machine.. hopefully, Google will push some fixes here soon..
Updating the Yamaha RX-v3900 firmware fixed me...
I updated my amp firmware and it cleared my resolution issues. I know get full 1080p through the amp.
Did the same
jbresee said:
I updated my amp firmware and it cleared my resolution issues. I know get full 1080p through the amp.
Click to expand...
Click to collapse
Did this too. I can force 1080p on my reciever, but no picture from drm movies. Video quality is wonky. Works fine when connected directly to tv. Hope Google fixes this ASAP. My Fire tv works fine though.
Mine is connected to my Yamaha V673 @ 1080p no probs.
On usb tether to my linux notebook, I get about 1Mbps down and 14Mbps up. Using the speedtest on the phone, I get 16Mbps down and 6MBPS up. Yes I know these results are not repeatable, but I consistently can't break 1Mbps download on tether. Further down I will show this is related to packet framing errors.
But first, device data. The OnePlus5 is running Android 7.1.1 Oxygen 4.5.10 Oneplus A5000. This is the 128G flash/ 8G ram version.
Notebook data:
Code:
Linux linux-0u81 4.4.79-19-default #1 SMP Thu Aug 10 20:28:47 UTC 2017 (2dd03e8) x86_64 x86_64 x86_64 GNU/Linux
Output of lsusb for the phone follows, but note this message:
iInterface 5 RNDIS Communications Control
** UNRECOGNIZED: 05 24 00 10 01
** UNRECOGNIZED: 05 24 01 00 01
** UNRECOGNIZED: 04 24 02 00
** UNRECOGNIZED: 05 24 06 00 01
Click to expand...
Click to collapse
Code:
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.10
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf00e
bcdDevice 4.04
iManufacturer 1 OnePlus
iProduct 2 OnePlus
iSerial 3 (censored)
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 75
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4 rndis
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Association:
bLength 8
bDescriptorType 11
bFirstInterface 0
bInterfaceCount 2
bFunctionClass 224 Wireless
bFunctionSubClass 1 Radio Frequency
bFunctionProtocol 3 RNDIS
iFunction 7 RNDIS
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 1
bInterfaceClass 224 Wireless
bInterfaceSubClass 1 Radio Frequency
bInterfaceProtocol 3 RNDIS
iInterface 5 RNDIS Communications Control
** UNRECOGNIZED: 05 24 00 10 01
** UNRECOGNIZED: 05 24 01 00 01
** UNRECOGNIZED: 04 24 02 00
** UNRECOGNIZED: 05 24 06 00 01
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x0008 1x 8 bytes
bInterval 9
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 10 CDC Data
bInterfaceSubClass 0 Unused
bInterfaceProtocol 0
iInterface 6 RNDIS Ethernet Data
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x8e EP 14 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x0f EP 15 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Binary Object Store Descriptor:
bLength 5
bDescriptorType 15
wTotalLength 12
bNumDeviceCaps 1
USB 2.0 Extension Device Capability:
bLength 7
bDescriptorType 16
bDevCapabilityType 2
bmAttributes 0x00000006
Link Power Management (LPM) Supported
Device Status: 0x0000
(Bus Powered)
Test Data (for nitpickers):
(removed due to forum rules but available on request.)
Note only the RX path has frame errors:
Code:
usb0 Link encap:Ethernet HWaddr (censored)
inet addr:192.168.42.215 Bcast:192.168.42.255 Mask:255.255.255.0
inet6 addr: 2607:fb90:8635:67b8:78a2:7bff:febe:7afb/128 Scope:Global
inet6 addr: fe80::78a2:7bff:febe:7afb/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:12497 errors:1062 dropped:0 overruns:0 frame:1058
TX packets:22595 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4121815 (3.9 Mb) TX bytes:27795493 (26.5 Mb)
I have run this on Opensuse, Fedora, Mint, and Ubuntu with similar results.
It would be useful if someone could duplicate this. I don't think the flavor of linux matters. I don't have a problem on windows.
Using the google on the interwebs, there is some chatter about RNDIS being dropped on "later" versions of Android. Reality? Perhaps OnePlus has attempted to add it back and didn't do it correctly.
I should also point out I'm using Tmobile, which is a IPV6 system. I'm using the Linux "network manager", but using "wicked" produced the same error.
I'm encountering the same issue.
Any hint on how to resolve it?
Sorry about the late reply. I'm not a regular here.
If you are on a OnePlus, please complain to them. I still have no solution.
This appears to be fixed on Oxygen OS rev 4.5.14
usb0 Link encap:Ethernet
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:13690 errors:0 dropped:0 overruns:0 frame:0
TX packets:11644 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:15616702 (14.8 Mb) TX bytes:8406490 (8.0 Mb)
yes 4.5.14 worked for me another thread here
https://forum.xda-developers.com/oneplus-5/help/slow-tether-usb-t3649501
I updated a OnePlus 5 from Android 8.0 to Android 8.1 and lost the ability to USB tether. Hotspot works fine. I've verified that some other users have this problem on the OnePlus subreddit. I'm on Opensuse 42.3.
Linux 4.4.126-48-default #1 SMP Sat Apr 7 05:22:50 UTC 2018 (f24992c) x86_64 x86_64 x86_64 GNU/Linux
This link indicates a "fix" similar to one on a Lineage forum. It doesn't solve the problem, but figured I would put it here to prevent similar posts from showing up in this thread.
https://forums.oneplus.com/threads/hotspot-not-working.769592/
At least this fix didn't break anything.
There are suggestions regarding changing the APN, but I no joy.
Using lsusb, it is clear that the phone is seen by the PC. However the phone doesn't show up when I run ifconfig.
This is the lsusb verbose output when usb tether is selected.
Code:
lsusb -s8:10 -v
Bus 008 Device 010: ID 2a70:f00e
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf00e
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 75
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Association:
bLength 8
bDescriptorType 11
bFirstInterface 0
bInterfaceCount 2
bFunctionClass 239 Miscellaneous Device
bFunctionSubClass 4
bFunctionProtocol 1
iFunction 7
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 1
bInterfaceClass 239 Miscellaneous Device
bInterfaceSubClass 4
bInterfaceProtocol 1
iInterface 5
** UNRECOGNIZED: 05 24 00 10 01
** UNRECOGNIZED: 05 24 01 00 01
** UNRECOGNIZED: 04 24 02 00
** UNRECOGNIZED: 05 24 06 00 01
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x0008 1x 8 bytes
bInterval 9
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 10 CDC Data
bInterfaceSubClass 0 Unused
bInterfaceProtocol 0
iInterface 6
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x8e EP 14 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x0f EP 15 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
For completelness, this is the lsusb verbose output when tether is NOT selected.
Code:
lsusb -s8:13 -v
Bus 008 Device 013: ID 2a70:f003
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf003
bcdDevice 4.04
iManufacturer 1 OnePlus
iProduct 2 OnePlus
iSerial 3 (redacted)
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 62
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4 mtp
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 3
bInterfaceClass 255 Vendor Specific Class
bInterfaceSubClass 255 Vendor Specific Subclass
bInterfaceProtocol 0
iInterface 5 MTP
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x82 EP 2 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x001c 1x 28 bytes
bInterval 6
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 6 Mass Storage
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x83 EP 3 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x02 EP 2 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
Device Qualifier (for other device speed):
bLength 10
bDescriptorType 6
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
bNumConfigurations 1
Device Status: 0x0000
(Bus Powered)
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Hi, can you pull the system os using adb?
That can help you to get the drivers, if you want to port another watch os.
hi
I cannot get ADB to work yet
G
Hello, Have you connected with adb? I opened the system engineer mode with dial *#*#83781#*#* But under Debug&Log tab, there is no enable debug mode. I think, If I can open debug mode, I can connect with adb.
Thanks you all for those useful info. I have a watch like this. One of the things I am interested is to turn the watch's LTE to a wifi hotspot for other devices, and I found a way to do so, though not very convenience. I am posting the instruction here. Hopefully it is useful to others, and maybe there is a better way to do so:
From Phone, dial *#*#83781#*#* to enter Engineer Mode
Under Connectivity tab, “Start Services”, the go to “Sfatap Wifi Channel”, toggle Auto (off->on->off), then “OK” when seeing “Auto Close Warning”. Optionally choose a 2.4GHz Wifi Channel
Back to the top/root screen, slide from the screen top, and choose the little blue icon at the upper-left most corner to setup Wifi hotspot’s name, security mode (open, WPA PSK, WPA2 PSK) and password.
Note that enabling hotspot will disable the watch's wifi to internet. Any change such as, reboot, turning off hotspot in 3), or enabling wifi will shutdown the hotspot. To enable again, repeat step 1-2 (settings in 3 is saved)
I have same watch. After changing one parameter in Engineer mode, shartwatch doesn't recognize the SIM card and restarts automatically 1 min after boot.
Can you please support how to fix this issue? is there any possibility to do a factory reset using the button on Watch?
Or restore Engineer Mode to default?
THX a lot in advance
ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Have you tried to send a text message to turn on debug mode? try this (no space): pw,123456,DEVELOP,1#
ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Try this tutorial to enable adb/root: https://github.com/eisaev/SuperSUInstaller
Hi! I got a G4H(KGG KG70) watch as well for my kid, problem is that touch does work, every second time I turn on/off the screen. It worked perfectly before, but now it only works every second time I turn on/off the screen. I think that might be a software issue.
I've just started to research so haven't got far, any things I might could try?
The watch works perfectly other then that, but sometimes have trouble get the location.
Hello there. I bought this watch for my child, but when I want to use another tracking program other than the se tracker program, I cannot change the ip number. Can you help me with this?
aşağıdaki kod çalışmıyor.
Find my kids application server: pw,123456,ip,tcp.findmykids.org,8001#
afyden2018 said:
when I want to use another tracking program other than the se tracker program, I cannot change the ip number.
Click to expand...
Click to collapse
Protocols for "SeTracker" and "Где мои дети" are different. It is not the matter of changing IP, findmykids.org won't understand data sent by SeTracker service from watch.
Also "Где мои дети" is compiled only for Android 5.0+ while this watch runs Android 4.4. So event with watch rooted (described in this thread) you cannot install proper service on watch that will report location to findmykids.org. Maybe they had some Android 4.4 compatible version in the past, but it is highly unlikely this will still work today.
bbkr said:
Protocols for "SeTracker" and "Где мои дети" are different. It is not the matter of changing IP, findmykids.org won't understand data sent by SeTracker service from watch.
Also "Где мои дети" is compiled only for Android 5.0+ while this watch runs Android 4.4. So event with watch rooted (described in this thread) you cannot install proper service on watch that will report location to findmykids.org. Maybe they had some Android 4.4 compatible version in the past, but it is highly unlikely this will still work today.
Click to expand...
Click to collapse
Since I couldn't find any more resources about g4h, I asked for help under this topic. The link to the watch I actually bought is below. If I can change the server of the watch with the sms sent to the watch, maybe I can switch to an application other than tracker. Engineering mode opens but I don't know how to do it.
https://tr.aliexpress.com/item/1005002878573395.html?spm=a2g0s.9042311.0.0.1cc04c4dVwpHt3
I hope someone here can help me out. I recently purchased this watch for my daughter and have purchased a Lucky Mobile SIM card to use with it. I’ve not been able to get the watch to connect to the mobile network. The person that is trying to help me from their end has been less than helpful lol. He’s now insisting that I’m putting the SIM card in wrong and I have had to send a video to prove to him that isn’t the case.
I went into the network portions and noticed they had only set up an APN for Bell, so now I have set up the APN for lucky mobile. Yet still no luck (groan)
Can anyone give me some suggestions on how to get this thing to work. Or tell me what provider you went with (in Canada) to get this thing to work?
I really appreciate any help I can get at this point.
I sent pw,123456,DEVELOP,1# to my device and I can connect to it via adb. Once 'adb -d shell', I am in the system but don't know what to do. On the watch's system, process 'adbd' runs under user 'shell'.
A bit more info of the watch (I am not an Android expert)
# ./adb -d shell
[email protected]:/ $ cat /proc/version
Linux version 4.4.83+ ([email protected]) (gcc version 4.8 (GCC) ) #1 SMP PREEMPT Thu Aug 22 16:00:23 CST 2019
[email protected]:/ $ cat /proc/cpuinfo
processor : 0
model name : ARMv8 Processor
BogoMIPS : 30.72
Features : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae aes pmull sha1 sha2 crc32
CPU implementer : 0x41
CPU architecture: 8
CPU variant : 0x0
CPU part : 0xd03
CPU revision : 4
processor : 1
model name : ARMv8 Processor
BogoMIPS : 30.72
Features : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae aes pmull sha1 sha2 crc32
CPU implementer : 0x41
CPU architecture: 8
CPU variant : 0x0
CPU part : 0xd03
CPU revision : 4
Hardware : Spreadtrum SC9820e
Revision : 0000
Serial : 0000000000000000
[email protected]:/ $ cat /proc/meminfo
MemTotal: 438400 kB
MemFree: 102396 kB
MemAvailable: 257892 kB
Buffers: 5124 kB
Cached: 130896 kB
SwapCached: 4052 kB
...
[email protected]:/ $ df
Filesystem Size Used Avail Free Blksize
/dev 214.1M 128.0K 213.9M 213.9M 4096
/sys/fs/cgroup 214.1M 12.0K 214.1M 214.1M 4096
/mnt/asec 214.1M 0.0K 214.1M 214.1M 4096
/mnt/obb 214.1M 0.0K 214.1M 214.1M 4096
/system 484.3M 294.0M 180.3M 190.3M 4096
/data 2.7G 9.6M 2.7G 2.7G 4096
/cache 143.6M 168.0K 140.5M 143.5M 4096
/productinfo 928.0K 96.0K 732.0K 832.0K 4096
/mnt/shell/emulated 2.7G 9.6M 2.7G 2.7G 4096
Also, I found some useful tools like "am" and "pm"
Found a useful thread: https://forum.xda-developers.com/t/...-and-rebrands-kinyo-garett-lemfo-etc.4332727/
Hi
ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
You can putting that device to recovery mode or fastboot mode like this with a application name power toggles *required root
i have the samw watches, i have installed shotcut creator, but when i'm starting "settings" app it launching an ROM settings and i could not enable ADB to root and then flash my watches, i have tried to use engineer mode but it isn't doing anything really useful
wait, i know a way, i think i can enable ADB via "Hidden MIUI settings" and it's not for MIUI only, i tesetd it works on custom roms