<whitequark>
Entropy512: we'll see... if so, I'll have to disasseble the IBL and verify that it doesn't do anything nasty
<Parth>
I thought he did
<whitequark>
I'm worried by presence of efuse codepaths everything
<whitequark>
there can't be anything good related to efuses.
<whitequark>
there is a thread on xdadevs with an incomplete discussion of xOM pins, and I think that's all for now
<whitequark>
how do you know that IBL is signature checked? I have yet to see any working signature checks in sgs2
<whitequark>
ie BP does not check any of signatures for any of the bootloaders/firmware
<whitequark>
which is well unusual
<Entropy512>
whitequark: because rebellos and adamoutler have tried to get unsigned IBLs to boot
<Entropy512>
but it won't boot them
<Entropy512>
IBL won't check PBL or SBL
<Entropy512>
but it's hardcoded to boot from emmc
<Entropy512>
so no USB booting
<Entropy512>
:(
<whitequark>
oh, very interesting
<whitequark>
which of the bootloaders handles JIG and download mode?
<Entropy512>
SBL
<whitequark>
yeah, expected
<whitequark>
so in worst case I'd need jtag...
<Entropy512>
yeah
<Entropy512>
the only way to hose a device beyond jtag is with secure erase
<Entropy512>
which will hose the emmc
<whitequark>
*shrug* laf0rge has already found relevant pins, and coresight tracer is somewhat affordable
<Entropy512>
afk grocery run
<Entropy512>
yeah adam/rebellos found the right resistors on i777
<Entropy512>
but wasn't much that could be done with them. :(
<whitequark>
there is always a way :)
<whitequark>
(resistors) I meant jtag, fwiw
kozy has quit [Ping timeout: 248 seconds]
<Unhelpful>
Entropy512: it's sad that emmc secure erase will fuck it like that :/
<Unhelpful>
but, have we actually seen a successful recovery from, say, fucked bootloader via jtag? it might not be trivial to actually write new data correctly :/
<whitequark>
Unhelpful: you can launch a kernel via jtag pretty trivially
<whitequark>
and when you're in kernel you can just dd.
<Unhelpful>
i've recovered a router via jtag, but there was a convenient utility that knew its layout and could just flash images for me
<whitequark>
oh, these are different jtags.
<whitequark>
in your case you used jtag to drive pins of your router's SPI flash via bitbanging
<whitequark>
I guess it took quite a long time
<whitequark>
and here, we don't have BSDL files which are required to drive pins, nor we actually need them
<whitequark>
we can just load data in RAM and execute it
<whitequark>
just use a kernel with busybox in initramfs and bind console to UART, for example
<whitequark>
or simply embed the bootloader inside
<whitequark>
why the fuck cm's busybox does not contain `chat'?..
Cadair has quit [Ping timeout: 252 seconds]
<whitequark>
how I'm expected to do dialup without it?!
Cadair has joined #teamhacksung
<whitequark>
btw, am I expected to send patches against ics, ics-release or jellybean now?
<Entropy512>
Unhelpful: jtag recovery is pretty common
<Entropy512>
I think gerrit defaults to ics or jb depending on whether you have CM9 or CM10 synced
<Rebellos>
My name did alert me here. Whitequark - IBL doesn't do anything nasty, and if you're not some mighty NSA or Russian crackzor, or you havent got any insiders in Samsung, you won't replace IBL.
<whitequark>
well, technically I am russian
<Rebellos>
xDD
<Rebellos>
Are you mighty aswell? :D
<whitequark>
dunno, but I definitely have a friend who was able to hack motorola's boot
<whitequark>
you know, those Qt phones
<whitequark>
so...
<Rebellos>
;P
<whitequark>
well, actually if IBL doesn't do that I'm fine with it
<whitequark>
there's no point in replacing it then
<Rebellos>
Well, if you do bypass it - let me know. We'll be able to develop some unbrickable mod with any way to bypass IBL or force it to download mode.
<whitequark>
yup, I'll try
<Rebellos>
But I guess you'll be just fine if you replace SBL with uboot, I'd go with flashing modified SBL way with linked uboot to it, to prevent bricking phone. Unless u got JTAG there, then nvm.
<whitequark>
well, I'm going to scrutinize ibl and pbl with ida at first
<whitequark>
then probably port uboot to be flashed in place of sbl
<whitequark>
working with sbl seems somewhat safe in the regard that you can switch to sbl#2 with a jig, right?
<whitequark>
yeah
<whitequark>
but I have different goals
<Rebellos>
Uhm, can I? Tbh I got no clue how to load SBL#2, never been analysing it.
<whitequark>
oh, there was an xda thread
<Rebellos>
But yeah, if the FSA driver part reading JIG is in PBL and it does actually switch to SBL#2 (AFAIK Samsung, they could put switching code into SBL and be happy all the way cuz of another successfull anti-brick measurement)
<whitequark>
well, someone said that it did not precisely switch to SBL#2 but just searches an SBL with a valid signature
<whitequark>
"INFO" or something
<whitequark>
that doens't make much sense for unbricking
<whitequark>
whatever. in a week I'm going to find some cheap motherboards at local flea market. I don't care if I brick half of them
<Rebellos>
Might be, so if you go with overriding SBL you will probably prepare valid signature, if you do messup something with code itself - you're bricked because PBL will detect it as "valid"
<whitequark>
now only to find how is it invoked...
ldiamond has quit [Ping timeout: 248 seconds]
sixstringsg|afk is now known as sixstringsg
<whitequark>
anyone has manual for anything from s5p series which is more complete than 4120 public manual?
ohanar is now known as ohanar|away
jt1134 has joined #teamhacksung
<whitequark>
aha, found the part which should decrypt the EBL.
<whitequark>
interesting, it seems that something is actually flashed to SECKEY zone
<whitequark>
... repeating d7 ef d5 1a ?
<whitequark>
anyone with sgs2 here?
jt1134 has quit [Read error: Connection reset by peer]
<whitequark>
lol.
<whitequark>
there's one place where it xors something with "S5PC210 HEADER "
<whitequark>
just what the fuck is EXYNOS5_IROM_DATA_REG0?
<whitequark>
looks like a simple scratchpad register, but you might never know...
<whitequark>
the iROMbl does some black magic with that dword all the time
<whitequark>
ok, I'm going the fuck to sleep
<whitequark>
but I'm almost sure that I'd be able to boot it through UART JIG.
<whitequark>
everything seems to come along nicely
<whitequark>
i.e. yes, unbricking is possible.
toastcfh_ has quit [Ping timeout: 244 seconds]
kalgecin has quit [Ping timeout: 276 seconds]
<whitequark>
fuck
<whitequark>
well, I don't even have to reverse this
<whitequark>
some clever googling was enough.
<whitequark>
*shrug* this was OBVIOUS.
<whitequark>
I'm off to get some resistors for a JIG.
gnarlycs has quit [Ping timeout: 248 seconds]
gehx has joined #teamhacksung
nathan433 has joined #teamhacksung
KhasMek has quit [Ping timeout: 248 seconds]
KhasMek has joined #teamhacksung
sixstringsg is now known as sixstringsg|afk
martinjlowm has quit [Read error: Connection reset by peer]
WhiteWidow has quit [Ping timeout: 245 seconds]
cdesai has joined #teamhacksung
t-y-l-e-r|away has quit [Read error: Connection reset by peer]
ohanar|away is now known as ohanar
t-y-l-e-r|away has joined #teamhacksung
xEnt has joined #teamhacksung
fragge has joined #teamhacksung
<ohanar>
codeworkx: when you setup the hardware/samsung tree, do you happen to recall if you got libsensors from linaro or insignal? I can't seem to find any trace of it on either of their git portals
<Espenfjo>
I think it is based on this; http://git.insignal.co.kr/?p=insignal-android/hardware/sec/exynos4/hal.git;a=tree;h=refs/heads/gingerbread;hb=gingerbread but refactored into our own folder structure
<ohanar>
well this might take a bit more work than I was hoping for
<Espenfjo>
Sensors arent fun
<cdesai>
^
<ohanar>
a few of our sensors are exactly the ones that are on the origen board
samosa has quit [Read error: Connection reset by peer]
samosa has joined #teamhacksung
samosa has quit [Ping timeout: 260 seconds]
ohanar is now known as ohanar|away
Turtuga__ has quit [Ping timeout: 244 seconds]
Turtuga has joined #teamhacksung
wingston has joined #teamhacksung
luminoso has joined #teamhacksung
<wingston>
i'm on aorth's cm9 build for the gt-p6200 and i just noticed a wifi issue, wifi doesnt come ON automatically after waking up from deep sleep/
<wingston>
wifi settings are set to "never"
Turtuga has quit [Ping timeout: 245 seconds]
Turtuga has joined #teamhacksung
freedomrun has joined #teamhacksung
kalgecin has quit [Ping timeout: 244 seconds]
Turtuga has quit [Ping timeout: 260 seconds]
DemonWav has quit [Quit: Leaving]
Turtuga has joined #teamhacksung
rembo has joined #teamhacksung
rembo has quit [Quit: leaving]
wingston has quit [Read error: Connection reset by peer]
nathan433 has joined #teamhacksung
Turtuga has quit [Ping timeout: 245 seconds]
Turtuga has joined #teamhacksung
clandmet1r is now known as clandmeter
<whitequark>
disregard what I said, I should have got some sleep first.
<whitequark>
this doesn't work.
<fragge>
Does anyone have Google Now running on cm10?
nubbeldupp has joined #teamhacksung
pier|afk is now known as pier
paulk-desktop has joined #teamhacksung
squadzone has joined #teamhacksung
dartrex has joined #teamhacksung
kozy has joined #teamhacksung
kozy has quit [Read error: Connection reset by peer]
kalgecin has joined #teamhacksung
dartrex has quit [Quit: Page closed]
Turtuga has quit [Quit: Leaving]
Turtuga has joined #teamhacksung
<squadzone>
KalimAz, im using gnex now and use cm10, and i want to ask about, its not support for torch? Or not implement yet?
<squadzone>
Atinm|retired, retired??
cantIntoCode has quit [Remote host closed the connection]
repnzscasb has joined #teamhacksung
repnzscasb has joined #teamhacksung
repnzscasb has quit [Changing host]
repnzscasb has quit [Ping timeout: 244 seconds]
repnzscasb has joined #teamhacksung
repnzscasb has joined #teamhacksung
repnzscasb has quit [Changing host]
kalgecin has quit [Ping timeout: 276 seconds]
squadzone has quit [Quit: pergi dulu om.. (wuuuuzzzzzz)]
rtfpessoa has joined #teamhacksung
angelsl has joined #teamhacksung
Turtuga has quit [Ping timeout: 240 seconds]
Turtuga has joined #teamhacksung
samosa has joined #teamhacksung
t-y-l-e-r|away is now known as t-y-l-e-r|work
<nubbeldupp>
Is there anyone, who knows a good tutorial for android (rom) development?
<nubbeldupp>
All the tutorials i've seen so far just scratch the surface. (Is this proper english? xD)
<nubbeldupp>
I dont want to use a external Programm to add/delete Apps oder change the background.
Yoshimo has joined #teamhacksung
<nubbeldupp>
oder = or (mixed up german and english) xD
ricotz has joined #teamhacksung
ricotz has joined #teamhacksung
ricotz has quit [Changing host]
Faryaab has quit [Quit: Leaving]
Turtuga_ has joined #teamhacksung
Turtuga has quit [Read error: Connection reset by peer]
UnknownzD has joined #teamhacksung
funky81 has joined #teamhacksung
rembo has joined #teamhacksung
Turtuga_ is now known as Turtuga
cdesai has quit [Ping timeout: 245 seconds]
cdesai has joined #teamhacksung
frostgram has joined #teamhacksung
sbrissen_gone is now known as sbrissen
Yoshimo has quit [Ping timeout: 276 seconds]
frostgram has quit [Quit: frostgram]
Yoshimo has joined #teamhacksung
Turtuga has quit [Ping timeout: 240 seconds]
lidroid has quit [Quit: Leaving.]
KalimAz is now known as KalimAz|Away
ldiamond has joined #teamhacksung
funky has joined #teamhacksung
cdesai has quit [Remote host closed the connection]
funky81 has quit [Ping timeout: 244 seconds]
ricotz has quit [Quit: Ex-Chat]
funky has left #teamhacksung [#teamhacksung]
funky81 has joined #teamhacksung
rembo has quit [Ping timeout: 240 seconds]
rembo has joined #teamhacksung
thens has joined #teamhacksung
ohanar|away has quit [Quit: leaving...]
Yoshimo has quit [Ping timeout: 276 seconds]
xEnt has quit [Ping timeout: 245 seconds]
repnzscasb has quit [Quit: Bye!]
nathan433 has quit [Read error: Connection reset by peer]
ohanar|away has joined #teamhacksung
Rebellos has joined #teamhacksung
<codeworkx>
ohanar|away: libsensors is from nowhere
<funky81>
how to rebuilt it?
wergeld has joined #teamhacksung
wergeld has left #teamhacksung [#teamhacksung]
<codeworkx>
funky81: like any other package
cdesai has joined #teamhacksung
<funky81>
use mmm ?
<nubbeldupp>
codeworkx: Mal ne Frage... ich stehe am Anfang von Android Dev und wollte mal wissen, was du als Grundvorraussetzung dafür sehen würdest... Ich habe Programmiererfahrung (Berufsschule) in C# und C++, privat habe ich mich etwas mit Java beschäftigt (und bin gewillt diese weiter auszubauen :) ). Aber ab welchem "Skilllevel" würdest du sagen, dass man damit in Android rumfrikeln kann?
<codeworkx>
nubbeldupp: learning by doing, try & error
<nubbeldupp>
Ich habe halt schiss, dass (von meinem Azubigehalt mühsam zusammengesparte) neue Handy zu zerschießen xD
nubbeldupp is now known as nudelsupp
nubbeldupp has joined #teamhacksung
nudelsupp has quit [Quit: Page closed]
ldiamond has quit [Changing host]
ldiamond has joined #teamhacksung
<codeworkx>
nubbeldupp: da muss man sich schon doof anstellen ;-)
<Zhenech>
oder blöde sammy kernel nutzen :)
<codeworkx>
oder so ;-)
<codeworkx>
die wollen neue geräte verkaufen um noch reicher zu werden. was erwartet ihr?
cr1st0 has joined #teamhacksung
<Zhenech>
dass die blaze q mit tastatur auch in deutschland verkaufen? wenn du so fragst :)
<nubbeldupp>
Dann weiß ich ja, womit ich mich heute weiter beschäftigen kann... Erstmal wieder Ubuntu installieren
Turtuga has joined #teamhacksung
Turtuga has quit [Client Quit]
sixstringsg|afk is now known as sixstringsg
Turtuga has joined #teamhacksung
ricotz has joined #teamhacksung
ricotz has quit [Changing host]
ricotz has joined #teamhacksung
CyberKnet has joined #teamhacksung
Yoshimo has joined #teamhacksung
Yoshimo has quit [Read error: Connection reset by peer]
<nubbeldupp>
Gibts hier evtl jemand der schon Erfahrung mit dem Galaxy Y gemacht hat? Ich bin mit meinem SGS2 erstmal versorgt... Würde ich erstmal fürs Y interessieren.
<nubbeldupp>
Das meine Mutter zum Geburtstag bekommen hat...außerdem ist es billiger, falls es kaputt geht
<nubbeldupp>
;-)
CyberKnet has left #teamhacksung [#teamhacksung]
<Espenfjo>
wth
<Espenfjo>
Så nå kan jeg starte å snakke norsk her også liksom?
<Espenfjo>
:D
<Zhenech>
Espenfjo, no, we do not speak norsk :P
<codeworkx>
nubbeldupp: um solche geräte schert sich keiner. billig dreck. zudem wirst du mit dem y wesentlich mehr spass haben als wir auf zwei geräten zusammen haben
<Espenfjo>
Zhenech: pft
<Espenfjo>
greek is greek
cdesai has quit [Remote host closed the connection]
cr1st0 has quit []
twittergal has quit [*.net *.split]
hillerstorm_phon has quit [*.net *.split]
KillKount has quit [*.net *.split]
kkc1983 has quit [*.net *.split]
noobnl has quit [*.net *.split]
paulk-desktop has quit [Ping timeout: 246 seconds]
paulk-desktop has joined #teamhacksung
KillKount has joined #teamhacksung
kkc1983 has joined #teamhacksung
noobnl has joined #teamhacksung
hillerstorm_phon has joined #teamhacksung
twittergal has joined #teamhacksung
peterperfect has joined #teamhacksung
Rebellos_ has joined #teamhacksung
Rebellos has quit [Ping timeout: 246 seconds]
ldiamond has quit [Quit: Leaving]
KalimAz|Away is now known as KalimAz
nubbeldupp has quit [Ping timeout: 246 seconds]
nubbeldupp has joined #teamhacksung
peterperfect is now known as peterperfect[A]
* peterperfect[A]
is now away - Reason : lunch
Yoshimo has joined #teamhacksung
sixstringsg is now known as sixstringsg|afk
rembo has quit [Ping timeout: 252 seconds]
rembo has joined #teamhacksung
Turtuga has quit [Read error: Connection reset by peer]
fragge has quit [Remote host closed the connection]
rembo has quit [Ping timeout: 245 seconds]
peterperfect[A] has quit [Ping timeout: 276 seconds]
remicks[znc] is now known as remicks
paulk-desktop has quit [Ping timeout: 248 seconds]
cantIntoCode has joined #teamhacksung
peterperfect[A] has joined #teamhacksung
peterperfect[A] is now known as peterperfect
peterperfect has quit [Changing host]
peterperfect has joined #teamhacksung
paulk-desktop has joined #teamhacksung
wingston has joined #teamhacksung
Turtuga has joined #teamhacksung
freedomrun has quit [Remote host closed the connection]
DAGr8 has quit [Ping timeout: 276 seconds]
rtfpessoa has quit [Read error: Connection reset by peer]
DAGr8 has joined #teamhacksung
<wingston>
hi all
angelsl has quit [Remote host closed the connection]
Yoshimo has quit [Read error: Connection reset by peer]
rembo10 has joined #teamhacksung
wingston has quit [Read error: Connection reset by peer]
wingston has joined #teamhacksung
kalgecin has joined #teamhacksung
thens has quit [Ping timeout: 245 seconds]
japc has joined #teamhacksung
peterperfect has quit [Quit: Now if you will excuse me, I have a giant ball of oil to throw out my window]
WhiteWidow has joined #teamhacksung
pier is now known as pier|afk
repnzscasb has joined #teamhacksung
repnzscasb has joined #teamhacksung
repnzscasb has quit [Changing host]
autoprim_ has joined #teamhacksung
autoprim_ has quit [Client Quit]
Barna has quit [Ping timeout: 248 seconds]
bagpuss_thecat has quit [Quit: /quit]
japc has quit [Ping timeout: 245 seconds]
cantIntoCode has quit [Remote host closed the connection]
cantIntoCode has joined #teamhacksung
remicks is now known as afkmicks
pier|afk is now known as pier
KalimAz is now known as KalimAz|Away
martinjlowm has joined #teamhacksung
thens has joined #teamhacksung
thens has quit [Ping timeout: 248 seconds]
wingston has quit [Remote host closed the connection]
rembo10 has quit [Quit: leaving]
Yoshimo has joined #teamhacksung
rembo10 has joined #teamhacksung
martinjlowm has quit [Remote host closed the connection]
rodries has joined #teamhacksung
rembo10 has quit [Quit: leaving]
WhiteWidow has quit [Ping timeout: 252 seconds]
WhiteWidow has joined #teamhacksung
squadzone has joined #teamhacksung
c00kies|repnzsca has joined #teamhacksung
repnzscasb has quit [Read error: Connection reset by peer]
DarkAlchemist has joined #teamhacksung
DarkAlchemist has left #teamhacksung [#teamhacksung]
KalimAz|Away is now known as KalimAz
squadzone has quit [Quit: pergi dulu om... (wuzzzzzzzzzzz)]