Related
I haven't posted on XDA for a while, but recently my friend purchased a Verizon Motorola G for himself and couldn't find a way to unlock the bootloader.
Being *that* kind of friend and all, I did a bit of research and discovered this:
http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html
I was curious if this exploit was still viable, so I quickly captured the latest OTA update of the Verizon Moto G firmware and started IDA...
Amazingly, although the exploitation method would have to be a little different due to changes in the TrustZone kernel,
the original arbitrary memory writing vulnerability still existed and could be exploited.
Code:
int __fastcall smc_vector(int code, int arg1, int arg2, int arg3, int alwaysZero)
{
.........
do
{
*(_DWORD *)(_R6 + 4 * v40) = dword_FC492C8[v40];
++v40;
}
while ( v40 < 4 );
.........
}
The only downside is that to perform said exploit, the smc call would have to execute in kernel context (i.e. kernel space).
Has anyone capitalized on said vulnerability yet and built a bootloader unlocker using this method, or do I have to get to work
and release my own ""exploit"" for this bug?
Or is there some other technical problem hindering the feasibility of all of this?
joshumax said:
I haven't posted on XDA for a while, but recently my friend purchased a Verizon Motorola G for himself and couldn't find a way to unlock the bootloader.
Being *that* kind of friend and all, I did a bit of research and discovered this:
http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html
I was curious if this exploit was still viable, so I quickly captured the latest OTA update of the Verizon Moto G firmware and started IDA...
Amazingly, although the exploitation method would have to be a little different due to changes in the TrustZone kernel,
the original arbitrary memory writing vulnerability still existed and could be exploited.
Code:
int __fastcall smc_vector(int code, int arg1, int arg2, int arg3, int alwaysZero)
{
.........
do
{
*(_DWORD *)(_R6 + 4 * v40) = dword_FC492C8[v40];
++v40;
}
while ( v40 < 4 );
.........
}
The only downside is that to perform said exploit, the smc call would have to execute in kernel context (i.e. kernel space).
Has anyone capitalized on said vulnerability yet and built a bootloader unlocker using this method, or do I have to get to work
and release my own ""exploit"" for this bug?
Or is there some other technical problem hindering the feasibility of all of this?
Click to expand...
Click to collapse
SunShine will unlock the XT1028.
http://theroot.ninja
I was under the assumption that old exploits like this won't wouldn't work on the Moto G...you haven't tried this yet, correct?
d4rk3 said:
SunShine will unlock the XT1028.
http://theroot.ninja
Click to expand...
Click to collapse
I don't trust or like SunShine that much; nor does my friend have the money to purchase the app.
d4rk3 said:
I was under the assumption that old exploits like this won't wouldn't work on the Moto G...you haven't tried this yet, correct?
Click to expand...
Click to collapse
Old exploits probably won't work out-of-the-box with the Moto G, things have changed...however the code above was in the latest firmware revision of the Verizon Motorola G,
which to me means that theoretically a few smc calls could unlock the Motorola G for good.
And no, sadly I haven't tried this yet, but it still *should* be possible.
XT1028 not unlockable with Sunshine
Sunshine will only unlock Android 4.4.3 and earlier on the Moto G. Verizon pushed the 4.4.4 update out via OTA long before November when Sunshine released support for the Moto G. You would have had to have bought your Moto G earlier in the year and would have had to continually refuse OTA updates to use it. And I also have read some people saying the OTA update went ahead and automatically installed itself anyway despite the phone's owner saying no.
---------- Post added at 10:26 AM ---------- Previous post was at 10:07 AM ----------
joshumax said:
I don't trust or like SunShine that much; nor does my friend have the money to purchase the app.
Old exploits probably won't work out-of-the-box with the Moto G, things have changed...however the code above was in the latest firmware revision of the Verizon Motorola G,
which to me means that theoretically a few smc calls could unlock the Motorola G for good.
And no, sadly I haven't tried this yet, but it still *should* be possible.
Click to expand...
Click to collapse
I suspect this exploit is what the Sunshine developer used in Weaksauce 2.0. But that temproot program has only been written for the HTC. It does not work on the Moto G.
Statements by jcase several months ago claim there is no known exploit for 4.4.4 on the Moto G and that Sunshine 3.0 when it is released in January will not work for the Moto G.
I cannot believe jcase is unaware of this exploit, however. So this indicates to me that jcase deliberately lied a few months ago. My guess is that he has figured out that Verizon has been watching and reading his public statements on this forum, and he knows that Verizon is extremely slow at releasing updates, and he does not want them to rush out an OTA update before he gets Sunshine 3 shipped.
Hopefully that is the case, and hopefully Verizon does not consider YOU worth following, and does not rush an update for Lollipop out for the Moto G. before Sunshine 3 releases.
Otherwise you may have just scotched it for the rest of us.
joshumax said:
I don't trust or like SunShine that much; nor does my friend have the money to purchase the app.
Old exploits probably won't work out-of-the-box with the Moto G, things have changed...however the code above was in the latest firmware revision of the Verizon Motorola G,
which to me means that theoretically a few smc calls could unlock the Motorola G for good.
And no, sadly I haven't tried this yet, but it still *should* be possible.
Click to expand...
Click to collapse
We don't trust or like you, either. Also, that vuln in your OP is long patched and non-useful.
joshumax said:
I don't trust or like SunShine that much; nor does my friend have the money to purchase the app.
Click to expand...
Click to collapse
Yawn, it is safe, it works, and we are upfront about what we do.
joshumax said:
Old exploits probably won't work out-of-the-box with the Moto G, things have changed...however the code above was in the latest firmware revision of the Verizon Motorola G,
which to me means that theoretically a few smc calls could unlock the Motorola G for good.
And no, sadly I haven't tried this yet, but it still *should* be possible.
Click to expand...
Click to collapse
That vulnerability is confirmed patched in the MotoG, and has no chance of working. The "unlock function" in trustzone is disabled once fully booted.
tmittelstaedt said:
Sunshine will only unlock Android 4.4.3 and earlier on the Moto G. Verizon pushed the 4.4.4 update out via OTA long before November when Sunshine released support for the Moto G. You would have had to have bought your Moto G earlier in the year and would have had to continually refuse OTA updates to use it. And I also have read some people saying the OTA update went ahead and automatically installed itself anyway despite the phone's owner saying no.
Click to expand...
Click to collapse
That is true, and it sucks, but it still works on most out of box.
tmittelstaedt said:
---------- Post added at 10:26 AM ---------- Previous post was at 10:07 AM ----------
Click to expand...
Click to collapse
tmittelstaedt said:
I suspect this exploit is what the Sunshine developer used in Weaksauce 2.0. But that temproot program has only been written for the HTC. It does not work on the Moto G.
Statements by jcase several months ago claim there is no known exploit for 4.4.4 on the Moto G and that Sunshine 3.0 when it is released in January will not work for the Moto G.
I cannot believe jcase is unaware of this exploit, however. So this indicates to me that jcase deliberately lied a few months ago. My guess is that he has figured out that Verizon has been watching and reading his public statements on this forum, and he knows that Verizon is extremely slow at releasing updates, and he does not want them to rush out an OTA update before he gets Sunshine 3 shipped.
Hopefully that is the case, and hopefully Verizon does not consider YOU worth following, and does not rush an update for Lollipop out for the Moto G. before Sunshine 3 releases.
Otherwise you may have just scotched it for the rest of us.
Click to expand...
Click to collapse
Actually no, WeakSauce2 targets dmagent, like WeakSauce1, its almost identical in fact, is very specific to HTC and the vulnerability is original to research done by myself and @beaups.
I haven't lied about jack, and dont appreciate eluding that i was, even "to hide" from Verizon.
Common sense says this vulnerability is patched, as it is fairly old. Actual effort to look at the trustone proves this.
jcase said:
I haven't lied about jack, and dont appreciate eluding that i was, even "to hide" from Verizon.
Common sense says this vulnerability is patched, as it is fairly old. Actual effort to look at the trustone proves this.
Click to expand...
Click to collapse
No offense intended jcase but I have worked for software companies since 1990 (not as a developer - in accounting and later IT) and I have to believe that you don't quite really understand what you did with Sunshine.
As long as breaking root on phones was a hackers contest, and the exploit scripts were free, the phone companies and software companies didn't really give a damn about you or what you did or anything else that the security people came up with. They were fat, dumb, and happy and lazy and were contented to let Google and the manufacturer deal with security with minimal effort on their part.
The minute you started charging money, you became public enemy #1 to Verizon and any other carrier who wants to control their users. Because they know this - as long as the cracks are free the developers aren't going to have any incentive to wrap them in a slick wrapper that Ma and Pa Kettle can download, stick in a credit card number and click.
Once you start charging - why then you know (or will discover if you don't know already) that the revenue you get is directly proportional to how easy you make the package to run for Ma and Pa Kettle. And it really doesn't take a lot of extra work. For every 10% easier you make Sunshine to use, your going to see 1000% increase in revenue. Verizon knows this. Google knows this. Motorola knows this. And that is what scares them. Their goal right now is to shut you down. And they are gonna do it by doing whatever they can to break your stuff as quickly as possible.
Do you know how hard it is to find a cheap used Verizon Moto G nowadays off Ebay or someplace with 4.4.3 or earlier on it? Ever since November when you released support, Ebay has had a run on those phones. And Ebay is flooded now with Verizon Moto G's that have 4.4.4 on them and a bunch of panicked sellers who are doing whatever possible to make it hard for the buyers to determine what the Android version is.
A couple days after you released weaksauce2 the m8 sold out in every Verizon store in my city. Sold out - or recalled - or withheld, I don't know what.
Verizon and friends don't care about people like me who spend the hours of time on these forums to research to figure out what's what. They care about Pa Kettle who gets on Play Store, downloads an app and runs it and the app pops up a screen saying "you must root your phone to run this app" complete with an auto-installer that downloads and installs Sunshine and executes it for them. Pa Kettle is just going to fork over the $25 and think nothing of it and ca-ching there slips another phone out of the carriers control - a phone that can get ad-blocker loaded on it, a phone that can get that idiotic NFL garbage unloaded from it - a phone the carrier figures they have lost.
From their point of view you are stealing their customers. They don't care as much about the revenue from the wireless plan as they care about their ability to track their customers intimate buying habits and sell them to the highest bidder. They paid damn good money for the cost of the phone hardware so they could snare another mark to sell advertising to and you came along and flushed that money down the crapper with your software.
I guarantee to you there's been much discussion about Sunshine in the Verizon boardrooms. If your not lying now on these forums or at least being very evasive about what your working on, you should be. Their gunning for you.
That's a neat theory, but I can assure you the mfr's patch tactics have been no different with sunshine than they have been with our other (free) releases. Further, based on our sales #'s, I can assure you that sunshine has not caused any phones to sell out...its not like we have 1000's upon 1000's of sunshine sales. Lastly, your theory that "they don't care as much about the wireless plan revenue" is pure tin foil hat stuff.
I dont think you understand what I do, I work with carriers, OEMs and the like. I've trained some them, I go out to dinner with them, I've invited them to my home, I exchange christmas gifts with them, I have met their families. Their cell phone numbers are in my contacts list. I'm drinking my coffee from a cup one of them gave me, right now. When I am stuck, I've gone to them for help more than I can count. This is my industry, and these people are my friends. These people are not fat dumb or lazy. They care deeply about security, and work their butts off with the limited resources they have. The good ones engage the "hackers", and actually enjoy it. Many of them are on a skill level above and beyond myself.
I'm actually a firm believer they would rather see something packaged and sold, than out in the open, as it results in many times less people using it, as well as the time packaging it will stop or greatly slow down anyone trying to use the material for bad purposes (malware etc). Honestly, they probably don't care how something is distributed at all.
Verizon MotoG with 4.4.2 is is $65 at bestbuy and something like $75 at walmart, how do I know this, we bought many.
I've not lied nor been evasive, I've actually been more open on what I am doing with my time. We are working on 3.0 to add more support to HTC. These people know me enough to know they can ask what I am working on, and I give them a straight answer. More often than not, I will email the company who is responsible for what I find, and let them know before, or at release time when I release something. Often I will give them details and source code not public.
tmittelstaedt said:
No offense intended jcase but I have worked for software companies since 1990 (not as a developer - in accounting and later IT) and I have to believe that you don't quite really understand what you did with Sunshine.
As long as breaking root on phones was a hackers contest, and the exploit scripts were free, the phone companies and software companies didn't really give a damn about you or what you did or anything else that the security people came up with. They were fat, dumb, and happy and lazy and were contented to let Google and the manufacturer deal with security with minimal effort on their part.
The minute you started charging money, you became public enemy #1 to Verizon and any other carrier who wants to control their users. Because they know this - as long as the cracks are free the developers aren't going to have any incentive to wrap them in a slick wrapper that Ma and Pa Kettle can download, stick in a credit card number and click.
Once you start charging - why then you know (or will discover if you don't know already) that the revenue you get is directly proportional to how easy you make the package to run for Ma and Pa Kettle. And it really doesn't take a lot of extra work. For every 10% easier you make Sunshine to use, your going to see 1000% increase in revenue. Verizon knows this. Google knows this. Motorola knows this. And that is what scares them. Their goal right now is to shut you down. And they are gonna do it by doing whatever they can to break your stuff as quickly as possible.
Do you know how hard it is to find a cheap used Verizon Moto G nowadays off Ebay or someplace with 4.4.3 or earlier on it? Ever since November when you released support, Ebay has had a run on those phones. And Ebay is flooded now with Verizon Moto G's that have 4.4.4 on them and a bunch of panicked sellers who are doing whatever possible to make it hard for the buyers to determine what the Android version is.
A couple days after you released weaksauce2 the m8 sold out in every Verizon store in my city. Sold out - or recalled - or withheld, I don't know what.
Verizon and friends don't care about people like me who spend the hours of time on these forums to research to figure out what's what. They care about Pa Kettle who gets on Play Store, downloads an app and runs it and the app pops up a screen saying "you must root your phone to run this app" complete with an auto-installer that downloads and installs Sunshine and executes it for them. Pa Kettle is just going to fork over the $25 and think nothing of it and ca-ching there slips another phone out of the carriers control - a phone that can get ad-blocker loaded on it, a phone that can get that idiotic NFL garbage unloaded from it - a phone the carrier figures they have lost.
From their point of view you are stealing their customers. They don't care as much about the revenue from the wireless plan as they care about their ability to track their customers intimate buying habits and sell them to the highest bidder. They paid damn good money for the cost of the phone hardware so they could snare another mark to sell advertising to and you came along and flushed that money down the crapper with your software.
I guarantee to you there's been much discussion about Sunshine in the Verizon boardrooms. If your not lying now on these forums or at least being very evasive about what your working on, you should be. Their gunning for you.
Click to expand...
Click to collapse
jcase said:
I dont think you understand what I do, I work with carriers, OEMs and the like. I've trained some them, I go out to dinner with them, I've invited them to my home, I exchange christmas gifts with them, I have met their families. Their cell phone numbers are in my contacts list. I'm drinking my coffee from a cup one of them gave me, right now. When I am stuck, I've gone to them for help more than I can count. This is my industry, and these people are my friends. These people are not fat dumb or lazy. They care deeply about security, and work their butts off with the limited resources they have. The good ones engage the "hackers", and actually enjoy it. Many of them are on a skill level above and beyond myself.
I'm actually a firm believer they would rather see something packaged and sold, than out in the open, as it results in many times less people using it, as well as the time packaging it will stop or greatly slow down anyone trying to use the material for bad purposes (malware etc). Honestly, they probably don't care how something is distributed at all.
Verizon MotoG with 4.4.2 is is $65 at bestbuy and something like $75 at walmart, how do I know this, we bought many.
I've not lied nor been evasive, I've actually been more open on what I am doing with my time. We are working on 3.0 to add more support to HTC. These people know me enough to know they can ask what I am working on, and I give them a straight answer. More often than not, I will email the company who is responsible for what I find, and let them know before, or at release time when I release something. Often I will give them details and source code not public.
Click to expand...
Click to collapse
Is 5.0 or 5.0.2 going to get Pie or cfroot on xt1028 Verizon when it comes out?
cell2011 said:
Is 5.0 or 5.0.2 going to get Pie or cfroot on xt1028 Verizon when it comes out?
Click to expand...
Click to collapse
Neither
Won't it be rootable or boot loader unlocked ever? If not I'll sell it and get 1031 boost. Do you this 1031 will ever get lollipop?
jcase said:
I dont think you understand what I do, I work with carriers, OEMs and the like. I've trained some them, I go out to dinner with them, I've invited them to my home, I exchange christmas gifts with them, I have met their families. Their cell phone numbers are in my contacts list. I'm drinking my coffee from a cup one of them gave me, right now. When I am stuck, I've gone to them for help more than I can count. This is my industry, and these people are my friends. These people are not fat dumb or lazy. They care deeply about security, and work their butts off with the limited resources they have. The good ones engage the "hackers", and actually enjoy it. Many of them are on a skill level above and beyond myself.
I'm actually a firm believer they would rather see something packaged and sold, than out in the open, as it results in many times less people using it, as well as the time packaging it will stop or greatly slow down anyone trying to use the material for bad purposes (malware etc). Honestly, they probably don't care how something is distributed at all.
Click to expand...
Click to collapse
Your not working with the upper level execs. Your working with the lower level people who have no control over what their company does. Their upper execs tell them "make the phone so that we own it completely even if the customer forks over their money or your fired" and they work their butts off to do that. I'm not talking about the lower level people and I think you know that.
The upper level execs set the company culture. And the company culture at Verizon is the customer is nothing more than fodder. If Verizon's company culture gave a damn about the customer they would have both bootloader locked and bootloader unlocked phones for sale in the retail outlets. If bootloader locking is such a security advantage the customers would buy them over bootloader unlocked phones. But no, instead, the bootloader locking is hidden away and the only way to buy one that can be unlocked is to pay ten times more for one. Your friends may be friends with you but they are supporting their families off of that company. They cannot go against that culture even though they probably would agree with me that Verizon should give customers a choice about buying a locked or unlocked phone.
Verizon does not need to force Motorola to refuse to hand out bootloader unlock codes for the Moto G. Nor do they need to make it insanely difficult to do a network unlock. Verizon posts a statement on their website saying that after you have owned your carrier-subsidized phone for a year you can network-unlock it. But they say NOTHING about bootloader-unlocking it. And if you try calling Verizon's support and asking for a network unlock code you will waste hours of time. I finally got a support tech in Verizon who was willing to look at their own website - after they told me Verizon didn't unlock phones - and do what she needed to do to answer my question - which is, when I am ready to network-unlock my phone, I have to call in and get the request escalated to 3rd tier before I'll be talking to a tech that even knows what network unlocking _is_. And the FCC - who forced them to allow for network unlocking - didn't force them to bootloader unlock. And of course they won't do it.
Verizon could go to Motorola and say "every phone that is 2 years old or older you are free to hand out bootloader unlocks on" But they won't.
No, you are very naive if you think that your friends who work at the carriers represent the carrier's approach and view of it's customers. They don't. I have no doubt that they are nice people. But the organization they work for is rotten to the core. I judge carriers by how they treat their customers. I judge them about how they treat me. And when I bought my phone and called into Verizon asking about what date I would get my phone network unlocked - just as a test to see if Verizon is really upholding the terms of it's agreement with the FCC where the FCC required them to network unlock phones - I was repeatedly lied to by their support people. So I am not basing my statements about that carrier on reading some crank who is spewing on the Internet against the carrier because he doesn't want to pay his phone bill. I'm basing them on how I've been treated. Where I live Verizon is a requirement due to coverage issues. But I have no qualms about what kind of a company I'm dealing with. I'm dealing with a company that buys phones by the hundreds of thousands from Motorola at $50 per device, marks them up 100%, and has a contract with Motorola that says Motorola must advertise a MSRP of $200, so that the sheeple who walk into the Verizon store think they are "gettin a deal" I don't trust them any further than I could spit a rat.
The PC community - Dell, HP, and all the rest of them - worked with Microsoft to develop a standard for encrypted bootloaders too. But ya know what? Microsoft put into the standard for encrypted bootloaders a requirement that the customer and go into BIOS and turn them off. PC makers that don't adhere to this aren't allowed to advertise compliance with the security standard. Verizon has that behavior as a model. But instead of requiring Motorola to make turning off encryption an option for the customer, they did exactly the opposite.
You can go and buy a brand new low-end PC today in the $250 range. That's a cheap PC equivalent to a cheap phone. But it's bootloader encryption is customer-selectable. The same should be the case for cell phones. When you released Sunshine you firmly put yourself behind that ideal. But don't for a second believe that your friends are working for a carrier that has any other position that your software is completely opposite what they believe.
jcase said:
I dont think you understand what I do, I work with carriers, OEMs and the like. I've trained some them, I go out to dinner with them, I've invited them to my home, I exchange christmas gifts with them, I have met their families. Their cell phone numbers are in my contacts list. I'm drinking my coffee from a cup one of them gave me, right now. When I am stuck, I've gone to them for help more than I can count. This is my industry, and these people are my friends. These people are not fat dumb or lazy. They care deeply about security, and work their butts off with the limited resources they have. The good ones engage the "hackers", and actually enjoy it. Many of them are on a skill level above and beyond myself.
I'm actually a firm believer they would rather see something packaged and sold, than out in the open, as it results in many times less people using it, as well as the time packaging it will stop or greatly slow down anyone trying to use the material for bad purposes (malware etc). Honestly, they probably don't care how something is distributed at all.
Verizon MotoG with 4.4.2 is is $65 at bestbuy and something like $75 at walmart, how do I know this, we bought many.
I've not lied nor been evasive, I've actually been more open on what I am doing with my time. We are working on 3.0 to add more support to HTC. These people know me enough to know they can ask what I am working on, and I give them a straight answer. More often than not, I will email the company who is responsible for what I find, and let them know before, or at release time when I release something. Often I will give them details and source code not public.
Click to expand...
Click to collapse
They all come with 4.4.4 out of the box. Sucks that people charge for this even worse people actually spent money... Left this phone cuz of its horrible Dev capabilities. Got an lg g3 now. Would have loved to had a non Verizon moto g
Sent from my XT1028 using XDA Free mobile app
tmittelstaedt said:
Your not working with the upper level execs. Your working with the lower level people who have no control over what their company does. Their upper execs tell them "make the phone so that we own it completely even if the customer forks over their money or your fired" and they work their butts off to do that. I'm not talking about the lower level people and I think you know that.
The upper level execs set the company culture. And the company culture at Verizon is the customer is nothing more than fodder. If Verizon's company culture gave a damn about the customer they would have both bootloader locked and bootloader unlocked phones for sale in the retail outlets. If bootloader locking is such a security advantage the customers would buy them over bootloader unlocked phones. But no, instead, the bootloader locking is hidden away and the only way to buy one that can be unlocked is to pay ten times more for one. Your friends may be friends with you but they are supporting their families off of that company. They cannot go against that culture even though they probably would agree with me that Verizon should give customers a choice about buying a locked or unlocked phone.
Verizon does not need to force Motorola to refuse to hand out bootloader unlock codes for the Moto G. Nor do they need to make it insanely difficult to do a network unlock. Verizon posts a statement on their website saying that after you have owned your carrier-subsidized phone for a year you can network-unlock it. But they say NOTHING about bootloader-unlocking it. And if you try calling Verizon's support and asking for a network unlock code you will waste hours of time. I finally got a support tech in Verizon who was willing to look at their own website - after they told me Verizon didn't unlock phones - and do what she needed to do to answer my question - which is, when I am ready to network-unlock my phone, I have to call in and get the request escalated to 3rd tier before I'll be talking to a tech that even knows what network unlocking _is_. And the FCC - who forced them to allow for network unlocking - didn't force them to bootloader unlock. And of course they won't do it.
Verizon could go to Motorola and say "every phone that is 2 years old or older you are free to hand out bootloader unlocks on" But they won't.
No, you are very naive if you think that your friends who work at the carriers represent the carrier's approach and view of it's customers. They don't. I have no doubt that they are nice people. But the organization they work for is rotten to the core. I judge carriers by how they treat their customers. I judge them about how they treat me. And when I bought my phone and called into Verizon asking about what date I would get my phone network unlocked - just as a test to see if Verizon is really upholding the terms of it's agreement with the FCC where the FCC required them to network unlock phones - I was repeatedly lied to by their support people. So I am not basing my statements about that carrier on reading some crank who is spewing on the Internet against the carrier because he doesn't want to pay his phone bill. I'm basing them on how I've been treated. Where I live Verizon is a requirement due to coverage issues. But I have no qualms about what kind of a company I'm dealing with. I'm dealing with a company that buys phones by the hundreds of thousands from Motorola at $50 per device, marks them up 100%, and has a contract with Motorola that says Motorola must advertise a MSRP of $200, so that the sheeple who walk into the Verizon store think they are "gettin a deal" I don't trust them any further than I could spit a rat.
The PC community - Dell, HP, and all the rest of them - worked with Microsoft to develop a standard for encrypted bootloaders too. But ya know what? Microsoft put into the standard for encrypted bootloaders a requirement that the customer and go into BIOS and turn them off. PC makers that don't adhere to this aren't allowed to advertise compliance with the security standard. Verizon has that behavior as a model. But instead of requiring Motorola to make turning off encryption an option for the customer, they did exactly the opposite.
You can go and buy a brand new low-end PC today in the $250 range. That's a cheap PC equivalent to a cheap phone. But it's bootloader encryption is customer-selectable. The same should be the case for cell phones. When you released Sunshine you firmly put yourself behind that ideal. But don't for a second believe that your friends are working for a carrier that has any other position that your software is completely opposite what they believe.
Click to expand...
Click to collapse
Tldr, you have no idea what your are talking about or who you are even talking to. If you think a single "high level exec" cares or even knows what an unlocked bootloader is, you are sadly mistaken.
Spend another 20 years in corporate america, like I have, and then maybe you'll have some wisdom to share in your lectures.
Hallaleuja brotha
Sent from my XT1028 using XDA Free mobile app
tmittelstaedt said:
Your not working with the upper level execs. Your working with the lower level people who have no control over what their company does. Their upper execs tell them "make the phone so that we own it completely even if the customer forks over their money or your fired" and they work their butts off to do that. I'm not talking about the lower level people and I think you know that.
Click to expand...
Click to collapse
I have, and I do.
tmittelstaedt said:
The upper level execs set the company culture. And the company culture at Verizon is the customer is nothing more than fodder. If Verizon's company culture gave a damn about the customer they would have both bootloader locked and bootloader unlocked phones for sale in the retail outlets. If bootloader locking is such a security advantage the customers would buy them over bootloader unlocked phones. But no, instead, the bootloader locking is hidden away and the only way to buy one that can be unlocked is to pay ten times more for one. Your friends may be friends with you but they are supporting their families off of that company. They cannot go against that culture even though they probably would agree with me that Verizon should give customers a choice about buying a locked or unlocked phone.
Click to expand...
Click to collapse
I'm not going to go over the reasons why bootloaders are locked again. Feel free to search for one of the dozen times I've replied, I think I did it recently on google plus. You don't have an understanding why these bootloaders are locked.
I do not agree that the average user should have a device with an unlocked bootloader, the shear number of people emailing me daily on this that have absolutely nothing to do with me is enough to prove that point.
tmittelstaedt said:
Verizon does not need to force Motorola to refuse to hand out bootloader unlock codes for the Moto G. Nor do they need to make it insanely difficult to do a network unlock. Verizon posts a statement on their website saying that after you have owned your carrier-subsidized phone for a year you can network-unlock it. But they say NOTHING about bootloader-unlocking it. And if you try calling Verizon's support and asking for a network unlock code you will waste hours of time. I finally got a support tech in Verizon who was willing to look at their own website - after they told me Verizon didn't unlock phones - and do what she needed to do to answer my question - which is, when I am ready to network-unlock my phone, I have to call in and get the request escalated to 3rd tier before I'll be talking to a tech that even knows what network unlocking _is_. And the FCC - who forced them to allow for network unlocking - didn't force them to bootloader unlock. And of course they won't do it.
Click to expand...
Click to collapse
CMDA is a whitelist technology, it is not "unlocked" like GSM. Their devices are not "LOCKED" to their network, they network itself does the rejection. Their few devices that do support GSM, tend not to be network locked (some were locked against certain carriers).
CDMA != GSM
tmittelstaedt said:
Verizon could go to Motorola and say "every phone that is 2 years old or older you are free to hand out bootloader unlocks on" But they won't.
No, you are very naive if you think that your friends who work at the carriers represent the carrier's approach and view of it's customers. They don't. I have no doubt that they are nice people. But the organization they work for is rotten to the core. I judge carriers by how they treat their customers. I judge them about how they treat me. And when I bought my phone and called into Verizon asking about what date I would get my phone network unlocked - just as a test to see if Verizon is really upholding the terms of it's agreement with the FCC where the FCC required them to network unlock phones - I was repeatedly lied to by their support people. So I am not basing my statements about that carrier on reading some crank who is spewing on the Internet against the carrier because he doesn't want to pay his phone bill. I'm basing them on how I've been treated. Where I live Verizon is a requirement due to coverage issues. But I have no qualms about what kind of a company I'm dealing with. I'm dealing with a company that buys phones by the hundreds of thousands from Motorola at $50 per device, marks them up 100%, and has a contract with Motorola that says Motorola must advertise a MSRP of $200, so that the sheeple who walk into the Verizon store think they are "gettin a deal" I don't trust them any further than I could spit a rat.
The PC community - Dell, HP, and all the rest of them - worked with Microsoft to develop a standard for encrypted bootloaders too. But ya know what? Microsoft put into the standard for encrypted bootloaders a requirement that the customer and go into BIOS and turn them off. PC makers that don't adhere to this aren't allowed to advertise compliance with the security standard. Verizon has that behavior as a model. But instead of requiring Motorola to make turning off encryption an option for the customer, they did exactly the opposite.
You can go and buy a brand new low-end PC today in the $250 range. That's a cheap PC equivalent to a cheap phone. But it's bootloader encryption is customer-selectable. The same should be the case for cell phones. When you released Sunshine you firmly put yourself behind that ideal. But don't for a second believe that your friends are working for a carrier that has any other position that your software is completely opposite what they believe.
Click to expand...
Click to collapse
Bootloaders are not encrypted.
I'm not insulting you here but I'm being to the point. You lack a fundamental understanding of each aspect of this conversation, which makes much of it not even worth replying to.
You don't have an understanding of the industry, of me, or how the devices work themselves.
Gsm rules
Sent from my XT1028 using XDA Free mobile app
Cdma will be extinct soon anyways soon
beaups said:
We don't trust or like you, either. Also, that vuln in your OP is long patched and non-useful.
Click to expand...
Click to collapse
I'm going to ignore any insults directed directly to me, because I understand people forget there's an actual person behind the text.
It seemed too good to be true, I just wanted some confirmation on whether the vuln was truly patched or not.
Have fun insulting others in teh interwebs
On the verge of getting a new phone. I can deal with 2GB of ram if the cost of a phone is 180, and maybe even 240 for the 4gb version. Once I get up to spending 230 for 2gb and 300 for 4gb, I think there are better phones that arent too far away in terms of cost.
Does this phone look like its getting the bootloader of the prime version unlocked? Im on the fence on which one to order, or if I should just spend more and get either the OP5 for $480 or the S8 for 525 with a trade in. Ive heard rumors, but not too sure if they were true.
It's all personal choice. It may be unlocked tomorrow, it may never be unlocked....
lourivellini said:
On the verge of getting a new phone. I can deal with 2GB of ram if the cost of a phone is 180, and maybe even 240 for the 4gb version. Once I get up to spending 230 for 2gb and 300 for 4gb, I think there are better phones that arent too far away in terms of cost.
Does this phone look like its getting the bootloader of the prime version unlocked? Im on the fence on which one to order, or if I should just spend more and get either the OP5 for $480 or the S8 for 525 with a trade in. Ive heard rumors, but not too sure if they were true.
Click to expand...
Click to collapse
If you are in the US you could try what someone else did in another thread and go to your local Best Buy and try to do a price match. I'm kicking myself for not thinking of it myself. Otherwise I'd stick to non-Amazon. The price difference is not worth the hassle.
I've not seen a 'hack' here that unlocks the normal bootloader; afaik everyone has to get the code from Motorola. So it's very unlikely you'll see a hack that unlocks the Amazon phones. Just my amateur opinion though.
So the Amazon version bootloaders can be unlocked with Motorola codes? -- I read "no" elsewhere. Of no, Amazon is as bad as Verizon.
I want a $200-300 good phone I can root and play with custom Roms that everything works on Verizon and it seems the G family phones do this best from what I can tell. I have no issues voiding a warranty on $200-300 which is less than half the cost of a flagship device which cost so much for features and technology I neither use nor can notice. I'm pretty much done with overpriced flagships. any opinions on best non-flagship Verizon phone with unlockable bootloader? (nexus 6p is a bit too old of a device for me).
kb1afu said:
So the Amazon version bootloaders can be unlocked with Motorola codes? -- I read "no" elsewhere. Of no, Amazon is as bad as Verizon.
I want a $200-300 good phone I can root and play with custom Roms that everything works on Verizon and it seems the G family phones do this best from what I can tell. I have no issues voiding a warranty on $200-300 which is less than half the cost of a flagship device which cost so much for features and technology I neither use nor can notice. I'm pretty much done with overpriced flagships. any opinions on best non-flagship Verizon phone with unlockable bootloader? (nexus 6p is a bit too old of a device for me).
Click to expand...
Click to collapse
So technically both the Amazon and non-Amazon version come locked. The difference is that with the non-Amazon version, you can get the unlock code directly from Motorola's site. The Amazon ones could technically be unlocked if Motorola provided the unlock code, but as per their agreement with Amazon, they will not.
It is possible that this will change in the future (likely not until the next version comes out), but I wouldn't really bet on it. What is still unclear is whether getting the Amazon version and then paying to have the ads removed will ever allow you to unlock the bootloader. Currently I don't believe it will, but in reality all Amazon would have to do is provide the IDs to Motorola of which phones had paid for this service. I don't see Amazon in a rush to do this though.
willclein said:
So technically both the Amazon and non-Amazon version come locked. The difference is that with the non-Amazon version, you can get the unlock code directly from Motorola's site. The Amazon ones could technically be unlocked if Motorola provided the unlock code, but as per their agreement with Amazon, they will not.
It is possible that this will change in the future (likely not until the next version comes out), but I wouldn't really bet on it. What is still unclear is whether getting the Amazon version and then paying to have the ads removed will ever allow you to unlock the bootloader. Currently I don't believe it will, but in reality all Amazon would have to do is provide the IDs to Motorola of which phones had paid for this service. I don't see Amazon in a rush to do this though.
Click to expand...
Click to collapse
OK thanks for the info...I figured as much. I will just avoid the Amazon versions.
kb1afu said:
So the Amazon version bootloaders can be unlocked with Motorola codes? -- I read "no" elsewhere. Of no, Amazon is as bad as Verizon.
I want a $200-300 good phone I can root and play with custom Roms that everything works on Verizon and it seems the G family phones do this best from what I can tell. I have no issues voiding a warranty on $200-300 which is less than half the cost of a flagship device which cost so much for features and technology I neither use nor can notice. I'm pretty much done with overpriced flagships. any opinions on best non-flagship Verizon phone with unlockable bootloader? (nexus 6p is a bit too old of a device for me).
Click to expand...
Click to collapse
I don't understand why everyone thinks unlocking bootloader automatically voids the warranty...
Motorola will honor any hardware defect, despite an unlocked bootloader. Anything software related it's not covered after an unlock.
1. This is a law
2. Motorola has stated this.
3. Google search shows previous devices were still fixed or replaced, due to 1. and 2.
JoRocker said:
I don't understand why everyone thinks unlocking bootloader automatically voids the warranty...
.
Click to expand...
Click to collapse
Probably because it is all over the interwebz that rooting and unlocking BL triggers tamper flags and voids the warranty with most manufacturers, or perhaps maybe people are concerned about the software somehow affecting the warranty if they send it back to Moto as bricked or with some half-baked ROM on it. Because you know, many folks go and root but don't know how to unroot or reset tamper flags, so they become confused or worried about warranty status on their $700 - $1000 device. LOL, I don't know what the big deal is either..... but anyway, on a sub-$300 mid-range phone I'm not buying it for the warranty.
For anyone landing here with the Amazon Ads inquiry... there exists a thread on how to remove amazon ads with varying results and conditions - knock yourself out.
For Black Friday 2017 - the Moto website had 64/4 version for $225 and then Moto direct and Target had the 32/2 version at $169 which was cheaper than amazon version. I jumped on the 64/4 direct from Moto $225.
Yeah, it took me a few months to pull the trigger, but I am glad I was patient. The G5+ IPS is good enough, and I never used NFC anyway, and once I saw 64bit ROMS working on G5+ and then at this price, it was a no-brainer for me.
JoRocker said:
I don't understand why everyone thinks unlocking bootloader automatically voids the warranty...
Motorola will honor any hardware defect, despite an unlocked bootloader. Anything software related it's not covered after an unlock.
1. This is a law
2. Motorola has stated this.
3. Google search shows previous devices were still fixed or replaced, due to 1. and 2.
Click to expand...
Click to collapse
1. This depends where you live... the only place I know of that has this "law" is the EU
2. Only for areas where the law requires it, otherwise look at: Legal Terms for bootloader unlocking on Moto's global support site, it is quite clear and unmistakable that just obtaining a lock code, even if never used, voids the warranty for the entire device, hardware and software.
3. Again, see #1
(EDIT: Sorry, I see someone else dug up this old thread after I posted this... Sorry, wasn't trying to rehash an old subject)
I have H873 and still have some days to exchange the phone, and wondering if there will ever be a root option for this phone. I just like to have the ability to change my emojis to a none android one and some other tweaks. I know the phone came out a couple months ago, but should I just switch to another device that can be rooted or stick around because there will most likely be a root sometime this year?
No, exchange it
What phone? That has similar features?
nenitosoyyo said:
What phone? That has similar features?
Click to expand...
Click to collapse
It just depends.like today or yesterday lg allowed the us997 model to be bootloader unlocked.thats your first step i wouldnt trade it just yet.thats just my opinion
I would love to keep the phone, I like how it feels and looks and the features, just not used to being locked down and not being able to customize. I mean it's sounds like there could be a possibility that it could happen in the future. I might stay with it and suck it up. Other thing is why did they come out with so many versions, wish Canada could have gotten the same as the US, cuz Canada usually gets forgotten when it comes to this stuff XD.
You should have got the LG H870 single SIM which is an international version so that you car root it as well as unlock bootloader! Don't know when will unlock bootloader happen for the H873 as well as dual sim versions! This also might be the reason that the LG H870 might cost a little more than the dual sim LG H870DS.
I bet if a bunch of us tweet them @lgdeveloper then they might push it out
Ali Mirza said:
You should have got the LG H870 single SIM which is an international version so that you car root it as well as unlock bootloader! Don't know when will unlock bootloader happen for the H873 as well as dual sim versions! This also might be the reason that the LG H870 might cost a little more than the dual sim LG H870DS.
Click to expand...
Click to collapse
If I had the money I would have, but had to get phone under contract at $0. Been happy with the phone so far, yes some things I wish I had root, but sucking it up. Hope one day it will be available.
rdjg22 said:
I bet if a bunch of us tweet them lgdeveloper then they might push it out
Click to expand...
Click to collapse
Yeah I have made some commotion, but more people need to do the same.
You want root, pretty much Google phones is where its still easy these days like the Pixel. I just switched from Pixel to G6 and I am pretty happy.
I was rooted for months but the problem is Google is cracking down on it. Apps are being blocked from Playstore now such as Netflix. You can't use Android Pay (now available in Canada). In all honesty even custom roms are no longer rooted, so rooting is going away for the most part as more and more things will block it.
If we go by LG G4 that boot-loader was never unlocked and only rootable on Android 5.x.
V20 was unlocked though so who knows, there could be a possibility but I would not count on it. There is a bounty thread in here so maybe just pledge some for our H873 (I think if they can unlock H870DS they can do ours too).
We had a huge petition maybe 10,000 people to unlock LG G4 bootloader, nothing ever heard from LG. I think the only way is the unofficial methods.
nenitosoyyo said:
If I had the money I would have, but had to get phone under contract at $0. Been happy with the phone so far, yes some things I wish I had root, but sucking it up. Hope one day it will be available.
Yeah I have made some commotion, but more people need to do the same.
Click to expand...
Click to collapse
Bro, the Canadian LG G4 users are still waiting for bootloader unlock. Chances are slim-to-none
I'm sure by now anyone with an Amazon Prime account has seen the advertisements for the $399.99 LG G6 and G6+ which is a great deal, and it's enough of one that I'm getting ready to retire my iPhone SE and make the switch over...especially since I can lengthen the warranty to two years total. What I cannot find out is which version Amazon is selling when it's released November 9th, 2017 and if T-Mobile and/or AT&T users will still have the normal functions like WiFi calling (which I rely upon) and VoLTE on each respective carrier. I'd rather not buy a Prime device only to discover that it doesn't have the same features as a carrier-specific device has and this has me worried. Buying a brand new unlocked G6 would give me the two years of full warranty on the device and hopefully all of the T-Mobile features offered on the carrier-specific model even if the bootloader isn't unlocked. Heck, I'd attempt a FlashFire to get new firmware onto the phone if it were made possible just to regain WiFi Calling/VoLTE but wanted input from others before I decide to go this route. I'm also not opposed to grabbing something like the LG V20 from BHPhotoVideo as well since this is the route I want to go. If you guys have any knowledge that I haven't been able to figure out in the last week of research I'd appreciate it very much. Cheers.
They go in depth with this story,not sure if it helps at all.
That's one of the articles I managed to find, and it did help out in figuring out which phone I wanted to invest in but I didn't get much more info on the device itself. Because it's an Amazon device we already know that it's not going to be able to have an unlocked bootloader which really stinks but that's the cost of buying a subsidized phone through Amazon. I considered just buying the LG V20 through BHPhotoVideo for cheaper so there are no integrated Amazon advertisements and it has a better internal camera (as far as specs go) but having 12MP+12MP vs 16MP is a little too close of a call to make any kind of speculation, although having 64GB of storage with the V20 would be nicer than the included 32GB in the LG G6. At least we have a micro-SD slot to have more storage in both models, which means that if we can get the phone rooted then App2SD won't be a problem.
I just know I'm ready to retire and sell this crappy iPhone SE and move away from the insane Apple prices to get a better device with a less restrictive environment. My only hope is that the LG G6 has the same characteristics as my iPhone SE, such as WiFi calling and VoLTE. I know it has all of the right LTE bands so that won't be an issue, and later on I'll probably just give Amazon more money to ditch the advertisements. I just wish that I could find a $450 LG G6 brand new that I could unlock the bootloader on, and that's my conundrum. It seems that if you want the subsized Prime version it's only $399 but if you want an subside-free G6 you still have to shell out $200 more.
P.S. Thanks for the quick response.
im already planning on getting this but i wont be able till at least black friday at the earliest. it fills all my needs now that the U11+ wont be available in the US. the model number for the 6+ is LGUS997U so im hoping that rooting will be possible along with custom ROMs. l hope someone else takes the plunge first.
droidbot1337 said:
im already planning on getting this but i wont be able till at least black friday at the earliest. it fills all my needs now that the U11+ wont be available in the US. the model number for the 6+ is LGUS997U so im hoping that rooting will be possible along with custom ROMs. l hope someone else takes the plunge first.
Click to expand...
Click to collapse
I'm taking the plunge and it'll be here the day of release. Knowing Amazon's history with locking bootloaders it's already pretty apparent that unlocking it will not be a possibility but will still check irregardless in hopes that I'm wrong. At least I hope it can be rooted some how and figure out how to ditch all of the bogus Amazon advertisements without paying them another $50 to remove them from my device, and will report all of that information that I can find out on my own as well. The LG V20 directly from T-Mobile was my original go-to replacement but for the same amount of money I'd rather have the slightly faster LG G6 even if it is hampered by Amazon's crap. Considering I'm moving up from an iPhone SE this thing is going to be a massive upgrade.
EDIT: I've independently confirmed it will indeed have T-Mobile WiFi calling and VoLTE built into the firmware because Amazon did the same thing with the Moto G5s firmware that they molested. They might have injected it with Amazon bloatware but they did also include WiFi calling and VoLTE from each of the providers so there's a very strong chance anyone who uses this device on their home network will still have those features included with the LG line of phones.
bmurphr1 said:
I'm taking the plunge and it'll be here the day of release...........
Click to expand...
Click to collapse
YES!!!! im so envious of you!! i hope that they can be unlocked as the price is just far too tempting. im going to try and contact LG USA and see what i can get from them. good luck and please keep us informed, cheers!!
I'm looking at the LG G6 also. I've been a Nexus user and am still using the N5X. Now that Google has went overboard with their pricing and are no longer making any devices that are good values, I'm looking elsewhere. I've always been an LG fan. I'm looking at the LG G6 as the price on it is excellent. There are a good number of carrier unlocked devices available for just over $400 and I think we will see some good sales between Black Friday and New Year's.
I was also considering the Amazon version but I'm not sure how difficult it will be to get rid of them afterwards.
gorilla p said:
....I was also considering the Amazon version but I'm not sure how difficult it will be to get rid of them afterwards.
Click to expand...
Click to collapse
?? all it has is a few bloat apps but all you would need to do is flash another ROM. thats considering it can be rooted. im still debating on the 6+ or waiting for the HTC U12 which should be better than the U11+ or at least i hope.
Phone has arrived, is model US966, and even though is the international model still has VoLTE and WiFi Calling baked into the ROM. I've verified that it does indeed work as it should for T-Mobile as I have the Hanset + WiFi logo in my top left notification tray. So far it seems Amazon really did make this device into the most universal of all of the LG G6 devices that exist (aside from being unable to unlock the bootloader.
Amazon really put this firmware through the ringer..it does have mountains of bloatware that we can work around, but it works with T-Mobile WiFi Calling, VoLTE, and HD Voice (all confirmed by moving a dead zone in my house where I received full WiFI but could not obtain any indoor signal of any kind. I had several conversations that all sounded like I was standing right next to the person, and I had no cellular service at the time the call was made. Just as I suspected, they molested the G6 just like they did the Moto G5s into forcing it to support T-Mobile's feature sets and most likely the same for the other three providers as well.
bmurphr1 said:
Phone has arrived, is model US966, and even though is the international model still has VoLTE and WiFi Calling baked into the ROM. I've verified that it does indeed work as it should for T-Mobile as I have the Hanset + WiFi logo in my top left notification tray. So far it seems Amazon really did make this device into the most universal of all of the LG G6 devices that exist (aside from being unable to unlock the bootloader.
Amazon really put this firmware through the ringer..it does have mountains of bloatware that we can work around, but it works with T-Mobile WiFi Calling, VoLTE, and HD Voice (all confirmed by moving a dead zone in my house where I received full WiFI but could not obtain any indoor signal of any kind. I had several conversations that all sounded like I was standing right next to the person, and I had no cellular service at the time the call was made. Just as I suspected, they molested the G6 just like they did the Moto G5s into forcing it to support T-Mobile's feature sets and most likely the same for the other three providers as well.
Click to expand...
Click to collapse
Do you know if it's possible to pay to remove the lockscreen ads? Also, are the ads just on the lockscreen or do they show up in other places?
I know you can pay to remove Kindle ads at https://www.amazon.com/mn/dcw/myx.html
Joe USer said:
Do you know if it's possible to pay to remove the lockscreen ads? Also, are the ads just on the lockscreen or do they show up in other places?
I know you can pay to remove Kindle ads at https://www.amazon.com/mn/dcw/myx.html
Click to expand...
Click to collapse
Ads are on lockscreen and on the desktop, but the desktop widget no problem. When you unlock the device using your fingerprint though you never see the advertisements so it's not bothering me that much. I have yet to figure out if we can purchase the removal of advertisements though as I've only had these few short hours with the device, but every T-Mo function that you'd find on a carrier-branded device works on the Amazon Prime variant. If I can pay an extra $50 or so to get rid of the advertisements I probably will do just that.
In the mean time I tried to sign up for the second year of the LG G6 free warranty program, and since the phone is a US996 model device you can't complete the registration page. I e-mailed the help desk to see if we'll be able to register for the free second year of service as an Amazon agent said that there should be no reason that it shouldn't work. I will respond back once I get word from the LG team regarding the additional free year of warranty coverage.
EDIT: You can legitimately remove ads from the phone through Amazon but they want an extra $100 to just remove them. I'll wait on someone else to figure out how to hack the ads away from the firmware. I dig the LG interface though as it's similar to the iPhone layout and makes it easier for me to understand rather than having an app drawer like my Fire tablet does. The phone is definitely worth $399...not $499 though once you buy the removal of advertisements.
congrats @bmurphr1!! im happy it works well since like you i too am a tmo user. also, the model number is listed as 997U but you said its US996, is that right? anyway, i hope the bootloader can soon be unlocked because that would make this phone an amazing device.
droidbot1337 said:
congrats @bmurphr1!! im happy it works well since like you i too am a tmo user. also, the model number is listed as 997U but you said its US996, is that right? anyway, i hope the bootloader can soon be unlocked because that would make this phone an amazing device.
Click to expand...
Click to collapse
I did, but it's actually US997 according to what I'm looking at right now on the Hardware info screen. My initial statement was a typo because I was in a rush to get this phone up and running since I'm moving over from the iOS world. Model number is confirmed US997 and the bootloader from what I've been able to ascertain so far is that LG is not unlocking the bootloader for the phone because they were strong-armed by Amazon to lock it down so that it couldn't be altered in any way - thus making people pay the $100 just to have advertisements removed from the device.
bmurphr1 said:
I did, but it's actually US997 according to what I'm looking at right now on the Hardware info screen. My initial statement was a typo because I was in a rush to get this phone up and running since I'm moving over from the iOS world. Model number is confirmed US997 and the bootloader from what I've been able to ascertain so far is that LG is not unlocking the bootloader for the phone because they were strong-armed by Amazon to lock it down so that it couldn't be altered in any way - thus making people pay the $100 just to have advertisements removed from the device.
Click to expand...
Click to collapse
ugh!!... so its useless for those of us that want custom ROMs then? that sucks! i really hope someone finds a way to unlock it. i might just wait to see what the HTC u12 looks like. thanks for the info.
Just figured out how Amazon neutered this phone from being tampered with by individuals like us...they went and jacked around with the bootloader so that it freezes as soon as you boot into it. I'm very experienced when it comes to using fastboot on Android devices and I can tell you this bootloader has been tampered with. What happens is when you run "adb reboot bootloader" it reboots into the neutered bootloader and just freezes so that no commands can be sent or received from the device. If we could get the device-id then we could put it through the LG database, but Amazon found a way to mess with it just enough so that it crashes every single time you try to boot into it using the Android debugging bridge. That's how they crippled this phone so that no one would be able to flash new firmwares to the device or jack with it and remove their new found glory in LG devices. I'd love to be able to flash a non-Amazon bootloader only over to this phone to see if I could unlock it and catch on to something new but I'm too afraid to jeopardize my only working cell phone at the moment so I'd be worried about doing that. If the bootloader would unfreeze though and give us the code for a full bootloader unlock we could say byebye to the entire firmware OS and switch over to something like Lineage or better...assuming somebody has a kitchen that would work on an Amazon-molested US997 LG G6.
droidbot1337 said:
ugh!!... so its useless for those of us that want custom ROMs then? that sucks! i really hope someone finds a way to unlock it. i might just wait to see what the HTC u12 looks like. thanks for the info.
Click to expand...
Click to collapse
I saw this on the latest Amazon Fire tablet and that's why I returned it. Now you see why I was hesitant.
I'm having a hard time deciding now, but I'm going there will be some solid $399 deals between Black Friday and Christmas. Otherwise, I might just get a OnePlus 3T.
gorilla p said:
I saw this on the latest Amazon Fire tablet and that's why I returned it. Now you see why I was hesitant.
I'm having a hard time deciding now, but I'm going there will be some solid $399 deals between Black Friday and Christmas. Otherwise, I might just get a OnePlus 3T.
Click to expand...
Click to collapse
Amazon got smart and neutered all of their Prime-branded devices so that they can't be bootloader unlocked any longer. The only hope we have of actually achieving custom firmware on this device is by using something like FlashFire to perform a hot-flash on the device to move it to a non-Amazon firmware, which is what I did on my Fire 2015 (Ford) tablet that I still use occasionally at the gym to watch Netflix and YouTube when I steal their WiFi. If you wanted to buy the phone just to unlock the bootloader unfortunately you're SOL, but there's still a chance something could be in the works for this device.
Honestly, I'd rather see either a complete removal of the advertisements from the stock US997 Amazon Prime G6 or someone who was able to successfully flash a ZIP file using FlashFire to the G6 without completely killing it along with WiFi Calling/VoLTE/HD Voice. The first one isn't out of the realm of possibility, but the second one is just a pipe dream since I essentially require WiFi calling and VoLTE. We're gonna need to find a way to root this firmware and I haven't found a way to do so as of yet, though it is running Nougat 7.0 with the September security update.
gorilla p said:
I saw this on the latest Amazon Fire tablet and that's why I returned it. Now you see why I was hesitant.
I'm having a hard time deciding now, but I'm going there will be some solid $399 deals between Black Friday and Christmas. Otherwise, I might just get a OnePlus 3T.
Click to expand...
Click to collapse
why the 3T and not the 5T? my brother has the 5 and loves it. i refuse to buy a device without expandable storage so that leaves me with few options....... well, few good options. im just gonna wait till leaks of the HTC U12 start to circulate. if that sucks ill just buy the regular G6.
droidbot1337 said:
why the 3T and not the 5T? my brother has the 5 and loves it. i refuse to buy a device without expandable storage so that leaves me with few options....... well, few good options. im just gonna wait till leaks of the HTC U12 start to circulate. if that sucks ill just buy the regular G6.
Click to expand...
Click to collapse
Just the cost. OnePlus is upping the price with every release and I don't think the OP5 is that much better than the OP3T. Especially since I don't use my phone for anything crazy. My N5X still performs more than good enough for me. I have the GPU underclock and touchboost disabled to improve battery and still no lag at all. I really wish there was another affordable Nexus device. They should've come out with an Android One premium line featuring The 820 or 822 chipset.
I also received my Amazon us997 G6 yesterday. As mentioned earlier, the lock screen ads aren't very intrusive unless there are no other notifications at the time. If there are personal notifications like email, text message, missed phone call, etc. then the Amazon ad takes up about 15% of the lock screen. If no notifications are present, the entire lock screen is an ad. However, also as mentioned before, the double press of the finger print button makes the ads visible for the amount of time it takes to double press.
I run nova launcher and have not been bothered with any ads either.
Coming from big red on their lg g4 and having that special old plan, I did a SIM card chop with some cutlery scissors and made it a nano. Without getting too involved, an app like Foxfi is not needed on this phone. I will be keeping this phone primarily because of this. The price point, limited intrusive ads, 2 year warranty and not needing a special app previously mentioned have made this my newest phone.
Now i just hope lg has rid themselves of the nightmare Bootloop plague that has hit every lg phone that my family has owned.
Good evening. I'm in the process of looking to trade in my Samsung Galaxy S6 - SM-G920V for something that I can put Lineage OS on, but I seem to be striking out. For months I've tried to install it on my S6 but I can never 'root' the phone to start the process. So before spending $$ on a phone I can't put a CFW on, I thought I'd ask the experts here. Any suggestions would be great or success posts on Verizon phones. Also if anyone knows a way to install it on my S6 I will not only give them 1 cookie but 2 !!!! what a deal!!!! .. thanks in advance...
iced00d said:
Good evening. I'm in the process of looking to trade in my Samsung Galaxy S6 - SM-G920V for something that I can put Lineage OS on, but I seem to be striking out. For months I've tried to install it on my S6 but I can never 'root' the phone to start the process. So before spending $$ on a phone I can't put a CFW on, I thought I'd ask the experts here. Any suggestions would be great or success posts on Verizon phones. Also if anyone knows a way to install it on my S6 I will not only give them 1 cookie but 2 !!!! what a deal!!!! .. thanks in advance...
Click to expand...
Click to collapse
I don't have this device but, your best bet is to post this question within the following thread.
https://forum.xda-developers.com/showthread.php?t=3110220
Good Luck!
~~~~~~~~~~~~~~~
I DO NOT PROVIDE SUPPORT VIA PM UNLESS ASKED/REQUESTED BY MYSELF.
PLEASE KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE
I have the same issue and have posted about it before here.
It's very hard to find modern rom'able/root'able Verizon-compatible devices that will run LineageOS. But the way XDA is organized it's nearly impossible to post carrier-specific questions like this because everything is device-based.
I thought I had found a good option in the supported LG V20 (US995 variant), but in doing a bit more reading before buying one I found that the popular "dirty santa" root exploit no longer works on recent OS builds and once those builds are on a device they can't be rolled back.
So I started looking at the HTC 10, but there are apparently challenges with that device on Verizon too, and may not be able to get LOS to work on it either.
I don't look forward to spending several hundred $USD on a device only to find I can't put the ROM I want on it....
Tyvm everyone for the replies. Like most ppl I don't have hundreds of dollars for an unlocked phone so ill probably end up in another contract. Again tks again.
Verizon loves locking every phone bootloader without possibility of unlocking it, get an unlocked device (used or new) and if possible switch from Verizon to another carrier.
AT&T blocks the possibility of unlocking bootloader on their phones, but are GSM and almost every international phone work.
T-Mobile not blocks the possibility on their phones, but some manufacturers like Samsung and LG blocks the possibility of unlocking bootloader on carrier phones, but are GSM and almost every international phone work.
Verizon blocks the possibility of unlocking bootloader on their phones, but are CDMA and only some unlocked phones work on Verizon with unlockable bootloader (little more phones than Sprint but much less phones than AT&T and T-Mobile).
Sprint not blocks the possibility on their phones, but some manufacturers like Samsung and LG blocks the possibility of unlocking bootloader on carrier phones, but are CDMA and only some unlocked phones work on Sprint with unlockable bootloader (little less phones than Verizon and much less phones than AT&T and T-Mobile).
Samsung Galaxy S5
Samsung Galaxy Note 3
These are older, but still very relevant phones that can be unlocked if you get the right version. The eMMC CID has to begin with 15 to be able to completely unlock the phone. With the S5 I've polling the forum, but it looks like there's a date or revision code on the IMEI sticker under the battery. Code 14.08 and lower are CID 15. Anything higher is CID 11. Can't definitively prove it yet, but so far the results coincide.