http://www.cnet.com/news/researcher-finds-mother-of-all-android-vulnerabilities/
Well its unlikely that an exploit will actually be used, anyone know if Asus has this under control?
cmendonc2 said:
http://www.cnet.com/news/researcher-finds-mother-of-all-android-vulnerabilities/
Well its unlikely that an exploit will actually be used, anyone know if Asus has this under control?
Click to expand...
Click to collapse
If not them, some dev will have it fixed sooner or later...
I think it will be google that has to patch it. They will then release a new version of android like 5.1.2 or 5.1.3 and then asus would have to make a new build with that version of android im sure. Or they could build the patch into whatever patch they are using for that version android.
Snakes200 said:
I think it will be google that has to patch it. They will then release a new version of android like 5.1.2 or 5.1.3 and then asus would have to make a new build with that version of android im sure. Or they could build the patch into whatever patch they are using for that version android.
Click to expand...
Click to collapse
If you read the article it states that the problem in patching lies in the companies not pushing the patch out quickly or at all...
Once google releases a patch you can be assured that the patch will be made available, especially for a big problem, with the devs doing all the work.
You may need to be rooted and have xposed installed but a fix will be made available...
ZF2 uses x86 CPU. So, special exploit has to be made for x86 phones. The majority of Android phones is ARM. So, no one will write exploit just for few phones (unless it's targeted for specific person's phone). And it's unclear if this vulnerability exists in x86 (and can be easily exploited).
HI,
I haven't been on here for years. Anyway, is there a way we can flash our phones to the most recent OS?
I've tried researching on here but didn't find anything. Thanks in advance.
The simple answer is no. Even though Android Oreo (8.0) has been officially released by Google it was only for the Pixel and Nexus Phones. Phone like the Essential made by other OEMs won't get the update until that manufacturer makes a officially ROM for their phone using the Android O code from Google. Hopefully since Essential uses the barbones stock Android ROM it won't take long for them to push out an 8.0 update. Another way to get 8.0 early would be to install a custom ROM built from O open source code from Google. And since we don't don't have kernel /source code from Essential yet and for that matter even TWRP custom recovery, it will be a little bit until we see custom Roms. Hopefully though Essential will either push out an update soon or release source code for the stock rom. Until that happens there will be no Android O. Sounds like we'll all just be patiently waiting to find out what happens in time.
So, from searching this forum it seems like people think the V20 doesn't support Treble. I've seen articles that state with Oreo it will. I am running the unofficial Los 15.1 build and downloaded the app that checks for Treble compatibility and it states my phone is treble ready though I don't have the A/B setup. Now looking at treble project builds there are many that state they are a only as well as a/b.
So, is the rooted v20 treble ready with Oreo firmware?
Also, when I do this cmd in terminal - getprop ro.treble.enabled, it returns true.
Is it possible, yes, will they do it, probably not.
You can set the boot LUN now, without Oreo, and force the phone to boot from the *bak partitions (xblbax, abootbak, lafbak, recoverybak, etc)
Notice there is one important partition missing .. bootbak. We don't have it. That would require the phone to be repartitioned, and I just don't see LG risking that.
It is hard enough to repartition a UFS NAND via a firehose, it would be insane to try it via an OTA update.
-- Brian
Thanks Brian. Guessing these treble check apps should have a big warning plastered on them for the less savvy in the android intricacies such as myself. Glad I posted before going ham on trying to install Treble roms
Actually we have xbl2 and xbl2bak that could be repurposed. They aren't actually used as part of the boot process (they are identical copies of xbl and xblbak).
However, that still leaves system. In order to have a systembak, they would have to shrink userdata which is currently 52.2G, so plenty of room, but that is VERY risky.
Again, though, this is very doable. Heck, even if they don't do it, the AOSP builds for the V20 could support it with the tweaks stated above.
-- Brian
runningnak3d said:
Actually we have xbl2 and xbl2bak that could be repurposed. They aren't actually used as part of the boot process (they are identical copies of xbl and xblbak).
However, that still leaves system. In order to have a systembak, they would have to shrink userdata which is currently 52.2G, so plenty of room, but that is VERY risky.
Again, though, this is very doable. Heck, even if they don't do it, the AOSP builds for the V20 could support it with the tweaks stated above.
-- Brian
Click to expand...
Click to collapse
So, does the V30 have all these partitions set up? It's my understanding that the V30 is definitely going to be treble supported so I'm curious if it already has these partitions in place or needs modifying (in which case I imagine some crafty bastard will be able to replicate the process).
Or along those lines, several of the supported current phones I don't believe shipped with Oreo so they had to undergo the reformatting process, I wonder if there's anything to glean from them. I'll have to see if I can wrap my head around this whole deal.
Also, is this what we are lacking? https://forum.xda-developers.com/pr.../tool-capire-le-treble-terble-vendor-t3774629
Wow, I should really drink at least 3 cups of coffee before posting.
What I was referring to was A/B system updates which I swore had a code name, but damn if I can find it now.
Anyway, yes, even Project Treble will still require repartitioning since we don't have a vendor partition (vendor is on system). Much easier to implement than A/B system updates, but I still don't think LG will do it.
We will just have to wait and see...
EDIT: good read on A/B system updates: https://source.android.com/devices/tech/ota/ab/ab_implement
-- Brian
LG may not add /vendor partition, but if you put the pieces together from some of the posts around the dev section theres work being done to add one in Lineage, though it hasnt been done yet.
runningnak3d said:
Anyway, yes, even Project Treble will still require repartitioning since we don't have a vendor partition (vendor is on system).
Click to expand...
Click to collapse
Just FWIW, Treble doesn't necessarily require repartitioning.
PhantomGamers said:
Just FWIW, Treble doesn't necessarily require repartitioning.
Click to expand...
Click to collapse
i've been following project treble for sometimes and there are lot of misunderstanding
1. having custom oreo roms doesnt mean you had treble support. it is true most treble phone coming with oreo by default
2. even if your phone has official oreo rom doesnt mean it support treble project ( like samsung S8 or note 8)
3. there are some devices with unnoficial treble support like oneplus devices but it still in development and as brian said we need repartition and needs lot of work. and your link above still on experiment.
i didnt say its impossible, but its far away for our devices not to mention we still need to dealing with ARB and lafs. just hope more devs joining on LG development and not rush them ( i saw lot of people doing that on brian's thread) . remember they did it for free while risking their devices on the process.
Loopback mounting is by far the safest method. You mess that up, and you phone just doesn't load the OS. You try and shrink a partition, and you mess up, and you could be toast. It isn't just shrinking, you also have to add a new entry to the GPT .. that is dangerous.
Also, if you do succeed, you will never be able to flash a stock ROM unless you put things back. For one thing stock system would no longer fit
-- Brian
What about this
www.getdroidtips.com/lg-v20-android-9-0-pie/
walidham said:
What about this
www.getdroidtips.com/lg-v20-android-9-0-pie/
Click to expand...
Click to collapse
Has someone tried this? Sorta feels like he just took that article and just keeps adding phone models to it without trying it.
walidham said:
What about this
www.getdroidtips.com/lg-v20-android-9-0-pie/
Click to expand...
Click to collapse
I saw that article -- and had also come across phhusson treble_experimentations on github -- and am also wondering if anyone has tried it for the LG V20, in particular the H918. LG V20 is not listed in the vendor-HAL directory of the github repo. I'd love to hear from anyone who has tried this with the H918.
stcr1 said:
I saw that article -- and had also come across phhusson treble_experimentations on github -- and am also wondering if anyone has tried it for the LG V20, in particular the H918. LG V20 is not listed in the vendor-HAL directory of the github repo. I'd love to hear from anyone who has tried this with the H918.
Click to expand...
Click to collapse
you can't just grab random drivers (that's what these HALs are) and hope they fit your device. x86cpu got close to a working treble implementation, but LG's camera drivers wern't compatible and has since put off that project and is working more on lineage 16 (pie). IF LG ever does release a stock version of pie, perhaps a newer version of the camera driver might be compatible, but perhaps not.
Phoenix591 said:
you can't just grab random drivers (that's what these HALs are) and hope they fit your device. x86cpu got close to a working treble implementation, but LG's camera drivers wern't compatible and has since put off that project and is working more on lineage 16 (pie). IF LG ever does release a stock version of pie, perhaps a newer version of the camera driver might be compatible, but perhaps not.
Click to expand...
Click to collapse
OK. Got it. So it seems that LG is going to give the V20 a Pie update. There are announcements to that affect. Assuming LG follows through, the Pie update may or may not be Treble compatible. With Oreo, device OEMs were required (??) to be Treble compatible on new Oreo devices, but could provide non-Treble Oreo updates to existing devices. That's what I gathered. So with Pie, what you are saying is that it will be the same: OEMs are not necessarily going to package Treble support in Pie updates to existing devices. But if LG does provide a Pie update, AND if the update is Treble compatible, then things will be easy-peasy for ROM developers to port their wares to it because drivers -- like the troublesome camera driver -- will be abstracted and basically have the same abstraction across all Android devices. Is that right?
stcr1 said:
OK. Got it. So it seems that LG is going to give the V20 a Pie update. There are announcements to that affect. Assuming LG follows through, the Pie update may or may not be Treble compatible. With Oreo, device OEMs were required (??) to be Treble compatible on new Oreo devices, but could provide non-Treble Oreo updates to existing devices. That's what I gathered. So with Pie, what you are saying is that it will be the same: OEMs are not necessarily going to package Treble support in Pie updates to existing devices. But if LG does provide a Pie update, AND if the update is Treble compatible, then things will be easy-peasy for ROM developers to port their wares to it because drivers -- like the troublesome camera driver -- will be abstracted and basically have the same abstraction across all Android devices. Is that right?
Click to expand...
Click to collapse
LG released oreo without treble support, LG releasing a pie update for the V20 is doubtful at best and if they do it more than likely it won't have treble support either
Sent from my LG-H910 using XDA Labs
walidham said:
What about this
www.getdroidtips.com/lg-v20-android-9-0-pie/
Click to expand...
Click to collapse
warwagon19792 said:
Has someone tried this? Sorta feels like he just took that article and just keeps adding phone models to it without trying it.
Click to expand...
Click to collapse
stcr1 said:
I saw that article -- and had also come across phhusson treble_experimentations on github -- and am also wondering if anyone has tried it for the LG V20, in particular the H918. LG V20 is not listed in the vendor-HAL directory of the github repo. I'd love to hear from anyone who has tried this with the H918.
Click to expand...
Click to collapse
I did know of someone who tried this. And it seemed to work but it never passed from the booting animation screen. He tried to go back and the phone was rendered useless. (and he was a developer). SOOOOO no.... I don't recommend attempting this.
Sony released remote play for all Android phones this week with compatibility from Android 5.0 onward but it's recommend to have Android 10 to use a DS4 due to better compatibility drivers. Is there any chance you could rip the drivers from the OnePlus 7 or 7 pro on OOS 10 put them in a zip and flash them through TWRP or magisk?
I think you just need to wait since the official update is coming this month of October.
Graffiti Exploit said:
I think you just need to wait since the official update is coming this month of October.
Click to expand...
Click to collapse
Not to argue specifics but the beta comes out this month and the full release is next month. But I understand your point. I still want to know if it's possible to do it though.
Drivers are in the kernel in Linux based systems. You can't just 'rip' the drivers. You have to find a kernel Dev willing to work this with a soon deprecated Android version... with yet unpublished oos kernel sources, only AOSP ones. Not easy
That's why it will be more easy to wait beta / official OOS. Or perhaps be ready to try one of the Android 10 ROMs floating around there
Striatum_bdr said:
Drivers are in the kernel in Linux based systems. You can't just 'rip' the drivers. You have to find a kernel Dev willing to work this with a soon deprecated Android version... with yet unpublished oos kernel sources, only AOSP ones. Not easy
That's why it will be more easy to wait beta / official OOS. Or perhaps be ready to try one of the Android 10 ROMs floating around there
Click to expand...
Click to collapse
Understandable thanks for the answer, I thought it was more like the adreno drivers that you could update through TWRP or magisk I forget which one I just remember doing it on my V20.
I spent a good few years rooting my Android phones, installing ROMs, etc. Quite a while ago I stopped, due to being pretty happy with the performance of this phone, and lack of time/interest in doing it any more. Consquently my phone is running 7.1.1 and ony has a security patch date of September 2017
I realise this is not a good state of affairs. I'm not a coder or anything like that, and I've forgotten most of what I learned about the specifics of this phone a long time ago. If I want to install a new ROM, it's going to mean a lot of reading to bring myself back up to date.
So, aside from my dire security situation, is there actually anything that is going to make my life better by installing an Android 9 or 10 ROM, over and above 7.1.1? Or is it just window-dressing? I'm looking to keep this phone for a while longer yet, and have just ordered a new battery for it, so I thought a software refresh might also be nice. I just wondered whether anyone wanted to offer an opinion on whether it's worthwhile, given it will involve a lot of work for me since I'm so rusty!
Why not just upgrade to stock pie and wait for the Android 10 update coming next year. You don't need to root to get more up to date software.
I've decided it's not worth rooting anymore because I want working Google pay, no bugs, etc. There isn't really anything I need root for and the stock oxygen os is perfect in my opinion.
350Rocket said:
Why not just upgrade to stock pie and wait for the Android 10 update coming next year. You don't need to root to get more up to date software.
I've decided it's not worth rooting anymore because I want working Google pay, no bugs, etc. There isn't really anything I need root for and the stock oxygen os is perfect in my opinion.
Click to expand...
Click to collapse
Just re-read my initial post and I wasn't clear. My phone is rooted/ROMd already. This is why I'm so far behind with software updates, because I got sick of flashing updates all the time. I have a couple of apps that require root, such as an ad-free Youtube with background play (which I'd really like to keep), and Titanium Backup. Aside from those, my phone doesn't really need to be rooted I guess.
I pay a monthly fee to have those features on YouTube. I couldn't go without background play anymore. I would almost root just for that.
As far as if it's worth it, security updates are probably a good idea. I don't recall any major things that Android 9 has that 7.1.1 didn't when I first got the phone a couple of years ago.
I have my banking info to worry about though so I stay stock and keep updated (over the air updates the easy way).
setspeed, I don't know what ROM you are rocking there but for me, on official, pure Oxygen OS I don't find it at all hard to update:
- I download the ROM, Magisk uninstaller, latest Magisk, latest TWRP (I noticed that some blu spark version works best with decryption).
- boot into TWRP
- flash ROM, magisk uninstaller, Makist, TWRP
- boot into sys and re-download whatever Magisk modules I had installed
OxygenOS is only updated every month or so, this procedure takes 10 - 20 minutes at most, so this is not really too much for me to do.
I cannot pin point you the exact big improvements being introduced since 7.1.1, but you can trace the important ones on Wikipedia.
On another note, not having security updates since September 2017 is like walking in front of the shooting range and expecting not to get shot.
setspeed said:
I spent a good few years rooting my Android phones, installing ROMs, etc. Quite a while ago I stopped, due to being pretty happy with the performance of this phone, and lack of time/interest in doing it any more. Consquently my phone is running 7.1.1 and ony has a security patch date of September 2017
I realise this is not a good state of affairs. I'm not a coder or anything like that, and I've forgotten most of what I learned about the specifics of this phone a long time ago. If I want to install a new ROM, it's going to mean a lot of reading to bring myself back up to date.
So, aside from my dire security situation, is there actually anything that is going to make my life better by installing an Android 9 or 10 ROM, over and above 7.1.1? Or is it just window-dressing? I'm looking to keep this phone for a while longer yet, and have just ordered a new battery for it, so I thought a software refresh might also be nice. I just wondered whether anyone wanted to offer an opinion on whether it's worthwhile, given it will involve a lot of work for me since I'm so rusty!
Click to expand...
Click to collapse
Man, i'm basically in the same situation and i make a post just today for the same reason. I want to update and unroot. What can i do? i'm at oreo 8.1.0 and os 5.1.1. Maybe is better first lock the bootloader and then make the OTA? but even if all go smooth which i doubt, how can i restore my backup without titanium without the root? is a f...ing mess
Just dirty flash the latest Oxygen OS (full zip). Then wipe the cache and you should be good to go. That's basically what I've been doing for quite some time with every update (plus Magisk).
daniel_loft said:
Just dirty flash the latest Oxygen OS (full zip). Then wipe the cache and you should be good to go. That's basically what I've been doing for quite some time with every update (plus Magisk).
Click to expand...
Click to collapse
that's probably the worst suggestion i've ever heard. You suggest to dirty flash from nougat/oreo to pie and do it straigh away...maybe even with a twrp 2 years old. Sounds good man..then i good to go..to a store and buy a new phone