Related
I have searched, and have not found any information that can help me.
I have a touch that the Service Centre want £90 to repair - new motherboard. Is this fixable with a jtag - If so, does the Holly Gates Schematics for a Jtag Dongle work here?
Has anyone successfully JTAG'd an ELF? If so, was it due to a similar circumstance as myself?
Anything I have come across goes to Russian sites - I'm not russian, nor can I read it.
I have seen posts for other devices, but these seem to all be based on a Samsung Chipset, apposed to our OMAP devices?
Any help would be great, even if it is just to go read a post that I have missed when searching.
Stu
Hey, not sure if anyone would care all to much.
I have found a jtag setup I am curently preparing to use, I am going to hopefully be trying to do this tomorrow. I am working on a guide as I do it - as I haven't been able to find one. If this would be useful to anyone let me know, and I will upload it as soon as I have tested it on my broken elfin to make sure it works!
Hey mate, we care and keep us posted with any results.
Good luck!
hey just come into a bit of a stuck point. I have no images to support this.
I am trying to fix the cables to the main board on the jtag points. Aout 5mm wide. I dont really want to solder them on. Does anyone have any suggestions on how best to affix them? I'll try and get some pictures up tomorrow when i can.
Stu
Unable to do pictures today, I will do them tomorrow hopefully on my lunch break, so people can make suggestions.
I am a little scpetical about if this will work. I do not know the history of the device I am tinkering with, but I hope this will fix it.
If anyone has a broken elf they would like to part with for me to test, that would be great (I would pay ofc)
Pic
Hey,
Please see attached image.
This points out the JTAG test points, labelled to what they do (in theory) and what pin they connect to the JTAG device from the LPT cable.
I think these are very small to be able to tape them on, I also do not think that they would give a good enough connection. I am going to try to solder the cables on tonight - but in the mean time, if anyone has any suggestions, please feel free to let me know. Any ideas are good!
Stu
Hi captainstu72,
I have a completely dead HTC Touch P3450. Really dead. Even when I plug the charger to the device, the orange light (as a sign that the phone is charging now) can not light on.
A service man asked me to replace the machine for USD 80, as he said we can not do j-tag to HTC ELF
Your thread is very exciting. Please keep posting, I'll follow this thread.
Thanks
bombom81 said:
Hi captainstu72,
I have a completely dead HTC Touch P3450. Really dead. Even when I plug the charger to the device, the orange light (as a sign that the phone is charging now) can not light on.
A service man asked me to replace the machine for USD 80, as he said we can not do j-tag to HTC ELF
Your thread is very exciting. Please keep posting, I'll follow this thread.
Thanks
Click to expand...
Click to collapse
Hey bombom81,
I'm glad this can be useful for others. I just want to make sure that people don't get their hopes up too soon, thats the thing, I don't know if it is definately able to work, but I know it has been done on other phones with a very similar chipset to ours.
If I have any major break through tonight, I will definately be doing a write up on it tomorrow in my lunch, and If you'd like I can PM you when done so you can give it ago.
Your ELF sounds as though it is in a similar state to mine, so hopefully, if I get this fixed, it may well work on yours!
Stu
captainstu72 said:
Hey bombom81,
I'm glad this can be useful for others. I just want to make sure that people don't get their hopes up too soon, thats the thing, I don't know if it is definately able to work, but I know it has been done on other phones with a very similar chipset to ours.
If I have any major break through tonight, I will definately be doing a write up on it tomorrow in my lunch, and If you'd like I can PM you when done so you can give it ago.
Your ELF sounds as though it is in a similar state to mine, so hopefully, if I get this fixed, it may well work on yours!
Stu
Click to expand...
Click to collapse
Yes..I had this problem months ago and I've made a thread for it :
http://forum.xda-developers.com/showthread.php?t=582913
Unfortunately, every suggestions I got from people here didn't work in my device. And I could not even claim a warranty for it as the seller said that the product warranty is already expired too long ago (in the end I knew that the product was his present from his office, and when he said it is new, means that, It is new because He never used it...LOL, not "new" from the factory). So I just keep it in my cupboard.
I think It will be more valuable for others if we discuss here, on your thread, than PM, as I think there are many people are having the same problem like us (as many as I can find after I google "Repair Totally Dead ELF" )
Please, kindly also check this thread : http://forum.xda-developers.com/showthread.php?t=602233
This guy also found a similar thing like yours. I actually don't know a thing about JTAG. In the future, please forgive me if I might ask you some questions about it and I hope you don't mind about my questions.
Thanks for your kind to share your experience with us, I'll keep watching this thread and hopefully you'll be success with your experiment so it can bring the joy for all of us.
Best Regards,
Bom81
bombom81 said:
Yes..I had this problem months ago and I've made a thread for it :
http://forum.xda-developers.com/showthread.php?t=582913
Unfortunately, every suggestions I got from people here didn't work in my device. And I could not even claim a warranty for it as the seller said that the product warranty is already expired too long ago (in the end I knew that the product was his present from his office, and when he said it is new, means that, It is new because He never used it...LOL, not "new" from the factory). So I just keep it in my cupboard.
I think It will be more valuable for others if we discuss here, on your thread, than PM, as I think there are many people are having the same problem like us (as many as I can find after I google "Repair Totally Dead ELF" )
Please, kindly also check this thread : http://forum.xda-developers.com/showthread.php?t=602233
This guy also found a similar thing like yours. I actually don't know a thing about JTAG. In the future, please forgive me if I might ask you some questions about it and I hope you don't mind about my questions.
Thanks for your kind to share your experience with us, I'll keep watching this thread and hopefully you'll be success with your experiment so it can bring the joy for all of us.
Best Regards,
Bom81
Click to expand...
Click to collapse
Hey,
Likewise, every suggestion I could find had no luck, which I why I decided to dig deeper.
I did come across GallegoT's thread, however, I sent him a PM to see if he had got anything sorted, but I have never heard back - So I created a new one.
I was going to keep this thread posted, don't worry, I was only going to PM you when it was finished - to save you keep checking it
Had a few issues with it last night, tried soldering to the board, but my soldering iron doesn't get hot enough, hasn't got a thin enough tip, and my hands weren't steady enough - Also the wires I was using were fairly wide, I have swapped these for a thinner Kynar wire, and will more then likely be remaking the whole of my setup to make it easier.
Just so you have an idea - I currently have an LPT (male to male) cable which I have taken the end off, and soldered wires to 2 3 4 6 11 and 18-25. 18-25 link then into one wire, as this is to ground the device. 2 3 4 6 and 11 are connected to 100Ω resistors each. These are then connected to wires, which are ready to be connected to the device.
Thats the basics of the device - I do not have an image of what I have planned out avaliable, but you can get the idea of it from what is in this post, and using my image posted earlier.
Maybe you guys have better tools - soldering equipment etc then I do.
When this is done you need to run a program called HJtag, and NoIce. I have an idea on what to do for these, however, I have not tested it yet to want to post it on here.
Like I have said though, I will be making a guide that is as full as I can.
I will try some more tonight, to get the cables connected, and hopefully then will be able to give the whole process a go.
Thanks for your interest in this thread, even if I only manage to help one person, at least then I feel as though I will be giving something back to the community on this site.
(I'll point out now - I did not have a clue about Jtag before now - but I also have some links I will post which make some interesting reading!)
Stu
Hey to anyone who is still watching this.
I have just got my elfin all wired up, ready to go, circuit is fully continuous and there are no bridges (I haven't soldered for more then 8 years!)
However, I have been a bit stupid, my pc doesn't have a parallel port. I'm going to buy one tomorrow and get going - very annoyed about this set back, i'm such an idiot for not checking!
I'll try it tomorrow night hopefully, worst case would be friday/saturday - A long time since starting this projct, but my hopes are high and I really hope I can help some of you guys out there!
Just thought I should update you all, I don't want this thread to become dead... like our elfs
Stu
LOL..no need to worry that your thread is dead.
I'll visit this thread everyday to see how it's going
BTW...do we really need the LPT Socket to do the JTAG? if so, then I will have to ask my IT man in my company to find me a "no-used" LPT socket, lucky I have an old Pentium 3 PC that I might be able to use it for this JTAG matter.
Please update the step-by-step tutorial here with photos so I can follow you easily. FYI, I am blind in this JTAG matter, so please do not mind to answer my next "silly questions".
Keep going! Thanks
Parallel is the only interface I have found to do it on - I would have much prefered usb or something more up to date, but we can't always have what we want.
Below are a few links that I read through before doing anything, just so I could get a vague understanding. I'm workign on the guide today on my lunch - the last part will have to be in theory.
Jtag Introduction
Someone Jtag'd an Ipaq (not the same but the concept)
Has some links to JTAG
Program we will be using for the jtag
NoIceDebugger - A program I will be using
What I think our Processor is
OMAP 850
Again, I will be making a an actual guide, this is just some reading before hand that i did that may be useful!
Stu
hey, well, i have a parallel port and have attempted the jtag.
It didn't work.
My guess is i was using too long cables, or something has come loose. My continuity tester has now died so i will be testing again on the weekend.
I'm going to post the guide i am working and what i did tomorrow. Maybe someone (bom81) would be able to give it a go and do well as i'm sure he will.
Sorry for the failure, but i am really optimistic that it will work, and that it didn't only because of something i may have wired wrong that someone else does right. I'm going to try and get a thirc elf to break and fix as well as it may just be the one i am doing is beyond repair.
Bom81, if you give this a go, good luck. I'm sure you'll have some luck!
If anyone else tries when i have the guide up, please please let this thread know, even if it doesn't work.
Stu
Hi Stu..
Can you give me the russian forum that explain about this jtag on HTC Touch.
I'm going to learn it there.
BTW, how long have you made the cable? have you cut it shorter and try again the connection?
Try to read this thread : http://forum.gsmhosting.com/vbb/f98/htc-elf-dead-after-wrting-elfin-rom-650359/
This guy has the same problem with us but finally (or luckily?), the device could come to Bootloader mode. I'm going to try to PM him, so he can explain how did he get the device work.
Thanks for your try.
Regards,
Bom81
This is for the wizard - same omap 850 http://pda2u.ru/forum/index.php?showtopic=348
I can't find my link for the touch, it may be on my home pc, but it was on the same website iirc.
Cable was about 50cm's - Too long, so I am remaking it to around 15cms tonight, but will be fun as I do not have my continuity tester to make sure that the circuit has the right resistance etc. before I think I was going over by too much due to cable length.
I have started the guide, I just need a few files off my home PC, so I will do this tonight again.
It really annoys me when other threads/sites do not put everything down they have tried, the internet is for information, not for saying, "ha, i've done it!"
I'll try again tonight and tomorrow, I think I have my LPT PCB sockets waiting to be collected, all the way from China, so this will be easier for me to do ultimately.
I haven't yet given up hope, and I'm sure that if I get my document made, someone will be able to tweak it and further help us.
I just don't know how many people are using the Elf's anymore, its fine there being a thread saying we have 900's htc touch's, but how many still use them and are active on this community.... but I digress.
I am really sorry that I am not good in Electronic thing, nor that I know how the electronic equipment works.
But I will try to learn from the website url you provided. Afterall, my HTC is already dead, it will not be a big problem if I make some experiments on it. If I'm lucky enough, I might wake a Frankenstein from his dead. LOL !!
Thanks,
Bom81
JTAG HTC device
Thanks first of all for your effort captainstu72 and bombom81, very interesting thread.
I am also in the same situation - having a bricked device (flashed wrong ROM and/or wrong carrier) and thus also interested in getting a serial cable hooked up to it no bootloader - no reset. The device is therefore software-wise dead.
I would therefore also love to try your procedure to getting a JTAG connection to the device. I have not been dealing with soldering on electronic devices since I did this on commodore 64... quite a few years ago as you imagine but therefore even more exciting.
I will check this thread and get a serial cable. Oh does the H-JTAG Software also run from linux since I only work on linux on this machine?
Thanks in advance and let me know if I can be of any help in this.
Oliver
Hi Stu and ITCons (welcome to the thread)
I've read the Russian website and have made a translation of the thread from Russian to English using Google Traslate.
Unfortunately, as I said before, I have no competency in electronic, but I'll try to learn.
All credits for the compiled document will go to user id : MEDUSH and ARCC in the Russian Forum (PDA2U.Ru), as they mentioned this document might be reprinted by their copyright.
Please have a read to the document I attached...I'll come back if I'm finding out something (as this week I'll face my busiest week of the month, there are some reports in my daily jobs that I need to prepare to my Boss...LOL).
Thanks for your kind attention.
Regards,
Bom81
Thank you very much Bom81
I have found another thread on this forum as well in the gene section, which shows how they did it on the gene too (omap 850 processor as well) I have posted on there to ask if anyone can relink to the revised download, but so far, there has been no update.
I'm going to go through what you have posted tonight bom, it matches most of what I was going which is always good (from my point of view, as it means i wasn't chasing a lost cause)
Sorry for not posting the guide yet, i'm slacking! But now, obviously, it does not matter so much as bom has posted an excellent guide in his post.
ITcons - I have had a (very) quick look, I don't think HJTAG runs on linux, although I would be interested to see how it would work in cedega/wine (this is not something I can test personally), I hope it would be able to use the LPT ports etc correctly - but again, nothing I really have a whole lot of experience about.
I'll see how it goes tonight, hopefully I should have remade my circuit again, and will be ready to test once more! - This time I am using an LPT PCB Socket - hopefully easier to do as there will be less in the way of resistance from excess cables.
Stu
For now, until I can post links here, to donate, visit the link below to get to the donation link.
Please help us get root, whether you own a Backflip or are a Dev/Hacker, or both. There are quite a few people out there that are trying to obtain Root for the Backflip and we appreciate everything you are doing, we're just looking for more help in achieving this. We all want Root for this device.
I have this posted up on several sites, so I've created one web page to keep everything update in one place for all the sites. If you are interested, feel free to contact me if you have any questions. Any and all help is appreciated. You can find the current status, total, and my contact information here: scorchgaming.com/bfrootdonate.htm (Can't post links yet.).
(I know I'm a new user, I just registered, but have been viewing the site for a while now. I have plenty of other online forum experience a long with tons of online business. For any one looking for vouches, I can provide them.)
Bump. Totals for today have been posted on the Bounty Page.
Please support this device!
link http://www.scorchgaming.com/bfrootdonate.htm
There's gotta be some backflip lovers around these seas Lets see what happens with tihs
I don't see too many people sending you money without the root being done first... wouldn't be too smart. I do not believe you are trying to take peoples money and I appreciate what your doing to try and get the backflip rooted as I am waiting for it also, but sending someone money online in HOPES that someone will do something? No thanks. Maybe pledge the money and send it after it has been completed.
Maybe, but while I haven't gotten much interest over here, I have gotten over $200 in pledges from other sites. If you don't feel confortable, that's fine, make a pledge, if you do, great.
This has been done before though for the SE X10 specifically. With pretty good support for it. One thread says $890, the other says $1650.
forum.xda-developers.com/showthread.php?t=700447
forum.xda-developers.com/showthread.php?t=651336
I've gotten over $200 in pledges in a little over a week, so if the pace keeps up, which hopefully it will, we'll have a decent amount to draw interest to the phone.
Update: I have received almost $500 in donations and pledges in two weeks.
I'm sure there's plenty of others out there that haven't heard about this yet. Please help spread the word. I hope some developers are seeing this also. Without you guys, this doesn't get us any where.
Wow. Looks like the total is up to almost $550. Hopefully we'll get some dev attention for this.
Bump for some more interest!
Trying to help spread the word about the bounty. Started tweeting it out, but only have 1 follower, so... we need more people to get involved in letting devs know about this.
I've been using #backflipbounty in my tweets along with http://bit.ly/c06W3c
ie.
Help get the Motorola Backflip rooted, spread the word about the #backflipbounty. http://bit.ly/c06W3c Please retweet!
PS. I'm @Dbagjones on Twitter
Need a tester willing to put in a some time.
I can get root on the backflip, I'll need someone with a backflip who is willing to teamviewer me into a console so I can verify my method will work.
Contact me and we can set up a time later today if that works for you.
I'm going to take a few hours and familiarize myself with moto's goofy rom packaging scheme and the like before I dive into a phone. I'll pm you sometime this week.
I'd also be willing to help out (have Backflip, ADB, etc. but no clue hacking Android). PM me here, tweet me @Dbagjones or SMS 772.226.0185 <-- Google Voice is the bomb!
bump for greatness
Help get the Motorola Backflip rooted, spread the word about the #backflipbounty. http://bit.ly/c06W3c Please retweet!
No one will donate any time for someone to have a crack at the backflip I guess it will just have to wait.
Does anyone respond to PM's anymore?
i know every backflip owner wants root
what exactly do u need? i know we all want our phones rooted.
wag3slav3 said:
No one will donate any time for someone to have a crack at the backflip I guess it will just have to wait.
Does anyone respond to PM's anymore?
Click to expand...
Click to collapse
PM me, I will be out for a few hours. Then I will be around. I don't have teamviewer installed but tell me how and I will install it.
PM me anything else I need to have setup and ready for you.
boonemeat said:
what exactly do u need? i know we all want our phones rooted.
Click to expand...
Click to collapse
I need someone who is willing to give me remote adb access to the hardware so I can try out the idea's I have on rooting the backflip. It shouldn't take more than an hour for me to know whether my ideas will work or not.
Tried my ideas, nothing worked. Sorry guys!
Is the only thing that we owners of locked devices is wait for a leaked key, or is there something else i can do to try to support people that could get it working? i love my tf but am sad i cant get root to the point where i almost want to return it ><
I'd go to stores around you, look for a B70KAS15 or below (to be safe...i believe the consensus is that lower B70KAS devices can root), and once you find one, return your old one.
From what i understand, there are a few people working on a way around this (or they have the new SBK--but even with the new one, they've made it harder to use).
All in all,you'll have to decide if you want to risk waiting (there's always small chance something could go awry, right?).
I see nothing wrong with going to look around and find if you can find an older B70, or anything like that.
Unrooting B70/B80 is a work in progress, check androidroot.mobi
But if I were you, I'd look for a TF with B50 or B60, then you can root your tab for sure (I did the same and was able to get a B50. A friend of mine got a B70 which can't be rooted yet).
I bought via amazon, i dont really want to return it to pay more local+tax for a maybe :/
Im new to this group of devs, how reliable is it to expect those guys at androidroot.mobi to come through and not can it haflway through? just to be clear, this question is in no way meant to be deragotive towards those guys, i just know some devs disappear (which is totally cool) and some stick around forever.
darkrangr said:
I bought via amazon, i dont really want to return it to pay more local+tax for a maybe :/
Im new to this group of devs, how reliable is it to expect those guys at androidroot.mobi to come through and not can it haflway through? just to be clear, this question is in no way meant to be deragotive towards those guys, i just know some devs disappear (which is totally cool) and some stick around forever.
Click to expand...
Click to collapse
RaYmAn posted the SBK on twitter the first time.
bumble-bee and RaYmAn were also behind the previous roots, using a temproot and blobs
lilstevie said:
RaYmAn posted the SBK on twitter the first time.
bumble-bee and RaYmAn were also behind the previous roots, using a temproot and blobs
Click to expand...
Click to collapse
+1
Without RaYmAn and Bumble-Bee's efforts none of us would be using blobs and nvflash on our Transformers.
well im glad that us poor souls are in good hands
i agree, this will allow us to have the full potentiol for all transformers
So I just bought a Slide on eBay, but I wanna go ahead and get things started.
I can do most of the work I think right now before the phone (since it's Sense 3), but I'll need a few brave testers with ADB knowledge and who aren't afraid to flash things.
Somebody help this bro out, he does good work.
You should try this forum:
http://support.t-mobile.com/community/phones_data_devices/android/mytouch_4g_slide?view=all
It seems like most of the people on here like our phones and want to root and rom them, while the people on the t-mobile forum want to complain and cry. I'm sure you'd have pretty good luck on there lowballing someone for their phone!
Got one on eBay a couple of minutes ago. See you guys on the other side . Thanks for the replies.
Sweet can't wait to see what you can do with this phone!
If you don't mind me asking, how much was it on eBay?
I currently have a MT3GS I bought from Craigslist awhile back - got a pretty good deal from someone who decided he'd rather have an iphone, it came with the original box and all the stuff.
Been debating on whether it was worth an update to a 4GS.
unclespoon said:
Sweet can't wait to see what you can do with this phone!
Click to expand...
Click to collapse
Check out my Sensation ROM (link is in my sig)
Brew78 said:
If you don't mind me asking, how much was it on eBay?
I currently have a MT3GS I bought from Craigslist awhile back - got a pretty good deal from someone who decided he'd rather have an iphone, it came with the original box and all the stuff.
Been debating on whether it was worth an update to a 4GS.
Click to expand...
Click to collapse
It was $340... it said it was refurbished so I jumped on it. That's just around the price range I was looking for, too (extremely hopeful price range).
$400 seems to be the area in which the used ones are selling for...
Romanbb said:
Check out my Sensation ROM (link is in my sig)
Click to expand...
Click to collapse
I did, and I LOVE it! Man if you ported that to our phone I would be eternally grateful, and your phone would have cost you a little less $$$ if you know what I mean
unclespoon said:
I did, and I LOVE it! Man if you ported that to our phone I would be eternally grateful, and your phone would have cost you a little less $$$ if you know what I mean
Click to expand...
Click to collapse
I updated the OP. If anyone is interested please post here.
I'm going to start porting some of the features today and need some testers .
Romanbb said:
I updated the OP. If anyone is interested please post here.
I'm going to start porting some of the features today and need some testers .
Click to expand...
Click to collapse
You know I'm in!
I've been one of the ones to dive in headfirst around here so i'll help as I can.
This week, and next, are gonna be real tight on time for me. I still have a few threads around here I have to update...and just can't get more then a few minutes in front of a terminal at a time.
When I get the chance to update my threads, I can sit here and have the phone installing (or whatever) while I do.
Glad to see another dev jumping into the pool here with the MT4GS - it's a sick piece of hardware.
Your list has made it incredibly easy to list out all the apps (I usually have to go through them one by one and try and figure everything out, usually takes 1-2 hours per phone )
Anyways, I can't test it as I don't have the phone yet but Bloater should be setup for it. At least for the apps and stuff. I'll have to add WiFi calling later.
Test it out and let me know what works and what doesn't. I tried not to include anything I wasn't sure about or anything that could be potentially harmful to remove.
If it doesn't recognize something as installed or uninstalled it just means my MD5s mismatch what it was expecting, easy fix.
Install it as a normal APK
I can new a lab rat if needed as I still haven't committed to this as a dd
Sent from my HTC Doubleshot using xda premium
I'll be willing to test!
Are any of you guys familiar with IRC? This may be easier to do everything there instead of posting back and fourth.
We could try #mt4gs @ freenode
Other than that, I may have my statusbar mods ported today. Just need to fix the resource IDs up I think. I'll need to have someone test.
I'm using Paul's deodex as a base for now since I couldn't find an RUU. So if anyone is running that, you'll just have to flash two files over to test if this works or not .
http://webchat.freenode.net/?channels=mt4gs
Someone join so I can use you as a test dummy!
I'm a noob at programming and I want someone to make an exploit to root SM-G950U on Oreo. I got this phone on ebay and it was on Oreo when I got it and I can't downgrade. Please, I had a rooted SM-J327P and it was cool but this phone has way better specs. I didn't get to do some things on that phone because it got stuck in a boot loop and I couldn't fix it. My software version is G950USQS3CRE2. I know it will be difficult but I was told that it's impossible to stop a hacker by a family member who is good at programming. I can't take people being defeatist saying "It's impossible." If my dad who's good at programming says it's possible, then it's possible.
No one replying
Why has no one replied yet? Is it because people just started working on the exploit when they saw my post so it's not finished yet or are people just ignoring me? I hope it's the first one because I don't like to be ignored. I might be able to give suggestions as to what the exploit could look like. Here's one. We could try to bypass the fuse checks like with hekate on the Nintendo switch.
Respectfully, search the forums. There is as of yet no way to root Oreo but the devs are working on it. And please have a bit more respect for those who spend countless hours working on it who'll make it available to you FOR FREE. Do what I did and make a donation out of your appreciation. Perhaps if they charged for root methods, you would have a bit of a different tone.
Melsbacksfriend said:
Why has no one replied yet? Is it because people just started working on the exploit when they saw my post so it's not finished yet or are people just ignoring me? I hope it's the first one because I don't like to be ignored. I might be able to give suggestions as to what the exploit could look like. Here's one. We could try to bypass the fuse checks like with hekate on the Nintendo switch.
Click to expand...
Click to collapse
The root method was patched there is no root past rev 2 bootloader and more than likely wont be. If you want root get a root friendly device.