Bounty for unlocking bootloader for vs990 (progress has been made) - LG V10 General

Good afternoon people of XDA,
Today is the dawn of a new day. A day where we begin the road to unlocking the bootloader to something that many believe is unlockable. Me and a few other users are starting a bounty to bring the incentive to life for all active developers. You can find my previous thread here. Now, when I say progress has been made, I mean that we have gotten into fastboot, we have donation incentives and we already have root so our tools are there we just have to find the exploit. Every day people are finding new exploits furthering our cause into reaching our goal. Now to the developers who want to pursue this, I've very much so tried to get active commands in fastboot but basically its just a dead fastboot for right now. The board on this phone and technologies behind it are so similar to its predecessors that somethings got to give. If you are interested in this cause, i.e. donating or deving on it, please contact me here, or email me at [email protected]
This is in our grasps friends. Spread the word, grab your fellow developers and lets get this thing to be a free wad of cash for whoever can bust it. Lets do this.
Attached is the spreadsheet for the current donations.

this kind of things never work...i mean, you make a donation and the people or the persons behind the scenes when getting high values like 400-500$ then buy a new phone and move on letting the desired phone to get development in the trash!!
Noooo, people should see, if a year old phone never came to life in development in the first 6-8 months then the development for it is dead and if you like to custumize the phone and flash things you need to move to a more flashable-friend device!

I have to agree with this. The Tmobile version has unlocked bootloader yet barely no development. What would make me that unlocking VS990 bootloader would all of a sudden spur development.

beavis5706 said:
I have to agree with this. The Tmobile version has unlocked bootloader yet barely no development. What would make me that unlocking VS990 bootloader would all of a sudden spur development.
Click to expand...
Click to collapse
I personally (and I think many other users) don't really need cooked roms. With gravity box, xposed and some other apps, I can "cook" my own rom (and believe me, it won't be that hard). All we need is a method for rooting. Using an android without rooting is even worse than an iphone without jailbreaking since iphones are undoubtedly smoother

presariohg said:
I personally (and I think many other users) don't really need cooked roms. With gravity box, xposed and some other apps, I can "cook" my own rom (and believe me, it won't be that hard). All we need is a method for rooting. Using an android without rooting is even worse than an iphone without jailbreaking since iphones are undoubtedly smoother
Click to expand...
Click to collapse
Indeed, a rooting method for version above MM is the most importing thing for us rather than flashing custom rom. However, system-less root is need to root MM or above and this is required modifying boot.img, therefore, bootloader unlocking is need. Unless, we have found a way to sign the modified boot.img to deceive the offical bootloader.

ivangundampc said:
Indeed, a rooting method for version above MM is the most importing thing for us rather than flashing custom rom. However, system-less root is need to root MM or above and this is required modifying boot.img, therefore, bootloader unlocking is need. Unless, we have found a way to sign the modified boot.img to deceive the offical bootloader.
Click to expand...
Click to collapse
What did you mean by "unless"? Have you found an evidence that MM bootloader is unlockable or not?..

presariohg said:
What did you mean by "unless"? Have you found an evidence that MM bootloader is unlockable or not?..
Click to expand...
Click to collapse
I mean even if the bootloader is not unlockable, somethings can be done to let us perform the same things just like bootloader is unlocked.
For example, some dev in G2 and G3 have released a tool called "Bump!" before that can sign any third party image and let it able to be run on offical locked LG bootloader.
source: http://forum.xda-developers.com/lg-g3/orig-development/bump-sign-unlock-boot-images-lg-phones-t2935275
But of course, since LG have fixed the bug, we can no longer do the same tricks now.

In China, there is name ???he has lg tool, this tool can unpack repack kdz tot, add root in tot.
This is weibo id http://m.weibo.cn/u/1684239753

Need help
andy_zhang said:
In China, there is name ???he has lg tool, this tool can unpack repack kdz tot, add root in tot.
This is weibo id
Click to expand...
Click to collapse
Hey, So I've been working to be able to get root, so far I have added root to the system.img and that's all done, I need this tool to be able to repack. Can anyone, or you, contact him and get this tool? This would be so helpful for me to get root and release it!!!!

abine45 said:
Hey, So I've been working to be able to get root, so far I have added root to the system.img and that's all done, I need this tool to be able to repack. Can anyone, or you, contact him and get this tool? This would be so helpful for me to get root and release it!!!!
Click to expand...
Click to collapse
What version of Android you are going to add root? I wonder that you cannot simply add root in /system after Android 6.0.

ivangundampc said:
What version of Android you are going to add root? I wonder that you cannot simply add root in /system after Android 6.0.
Click to expand...
Click to collapse
I'm trying different things but still i need to figure out how to repack a tot to find out what's going to work!! Does anybody know how to get that application?

abine45 said:
I'm trying different things but still i need to figure out how to repack a tot to find out what's going to work!! Does anybody know how to get that application?
Click to expand...
Click to collapse
For MM, unless you've found a way to get the SELinux context needed, repacking the system image will not work.

anyone having any luck with rooting MM?

I think at this point what we really need is a small set of testers who have a good insurance policy on their phones and are willing to risk bricking their phones. We've got the outline of a method which looks viable, but the details haven't been worked out and is hence likely to produce a few bricks before we get it working.

Sorry for dropping of the face of the planet for the past two months. In testing with my device it ended up being FUBAR after wiping my aboot completely and with that the phone would not boot to anything but a black screen. I sent it into LG and after some time they finally just replaced my motherboard. But the absolute sad part is that they have me upgraded to 6.0 which absolutely is crushing my world. SO until further notice I will not be testing the unlocking of the bootloader anymore but I will make efforts here in a few weeks to start work on rooting the device. @alvislee[email protected]

Related

Possible Bl Unlock?

So my memory may be fuzzy here, but this just occurred to me this morning. I remember back when the device came out, I saw some apk for some Asian variant of the phone , and the APK would unlock the bootloader, and people had a few different copies of it. The only issue was it needed root for some library it depended on to be installed. Since we have root, does anyone have the apk/remember the post about it? I'd gladly try it.
polaric said:
So my memory may be fuzzy here, but this just occurred to me this morning. I remember back when the device came out, I saw some apk for some Asian variant of the phone , and the APK would unlock the bootloader, and people had a few different copies of it. The only issue was it needed root for some library it depended on to be installed. Since we have root, does anyone have the apk/remember the post about it? I'd gladly try it.
Click to expand...
Click to collapse
I doubt it would work for Verizon because it probably was made for devices to unlock bootloaders that are not signed with a key.
musicfreak190 said:
I doubt it would work for Verizon because it probably was made for devices to unlock bootloaders that are not signed with a key.
Click to expand...
Click to collapse
Again if my memory is serving me, it appeared to work for a T-MO (Yes I'm aware their BL is already unlocked) user who had root via CF-AutoRoot before we did. Whether or not it would work for verizon is unknown, but its worth a try if someone can dig out the thread. I've been searching for about 30 mins now and cant find it, it was on XDA.
I just actually found it, here was the thread. http://forum.xda-developers.com/and...sung-factory-bootloader-unlocker-apk-t3086609
**EDIT
It looks like when xposed works for us, we might actually be able to use the apk. It seems as of now, the CID is blocking it from working. But xprivacy as the ability to temporarily mask the CID, without requiring bootloader modification, which might allow the apk to work.
Good detective work! That would be really game changing.

Root method yet for VS987?

Hey guys, I just received a complimentary LG G5 (VS987) last week from Verizon as a means of making up for the Marshmallow update continually destroying my LG G3 and its replacements Anyway, it's a great phone, but I've been disappointed so far to find that there's no root method at the moment. At least not one I can find easily. Do you guys know if there's a method hidden away out there or if a particular developer is working on it right now?
I really hope one comes out soon and this doesn't become another crap phone but so far no. I just upgraded to this phone assuming a root would come soon but marshmallow phones on Verizon are death! Can't wait for CyanogenModbut right now you'll have to wait.
I just got the LG G5 Verizon variant as well on Friday. Was a little reluctant because of possibly not being able to root and unlock boot loader. Subscribing to this thread because I hope there will be support for this soon. Kinda hoping there would be a solution like Safestrap was for the galaxy s5, and then installing an LG version of the Samsung_bootloader_unlocker.
Abramelin said:
I just got the LG G5 Verizon variant as well on Friday. Was a little reluctant because of possibly not being able to root and unlock boot loader. Subscribing to this thread because I hope there will be support for this soon. Kinda hoping there would be a solution like Safestrap was for the galaxy s5, and then installing an LG version of the Samsung_bootloader_unlocker.
Click to expand...
Click to collapse
There is hope! With the quadrooter exploits being discovered we may have root soon :3
Nathamio said:
There is hope! With the quadrooter exploits being discovered we may have root soon :3
Click to expand...
Click to collapse
I don't see that at all, since the issue of a locked bootloader remains an obstacle on the G5.
Temp rooting is the solution for that, once we can get temp rooted we can find workarounds to enable unlocking.
Temp rooting has been possible for a many a moon on the G5, but that hasn't enabled anyone to unlock the bootloader
Maybe not yet. But it is plausible that a temp root would grant access to boot loader. If the G5 becomes popular enough LG might do it for us. I heard they've done it for Europe variants but said they don't plan for any other. It might be 3-5 years from now but who knows really. I'm sure someone clever enough will figure out a work around eventually. I work with Arch Linux so I'm not used to being controlled like this. If it weren't for me getting this phone for free, I would definitely have gotten one I *could* root and all.
jpradley said:
Temp rooting has been possible for a many a moon on the G5, but that hasn't enabled anyone to unlock the bootloader
Click to expand...
Click to collapse
Can you post that link?
What about this option?
I'm a new user, so I can't post the link, but did a Google search for VS987 custom rom and came up with this: search4roots.com/how-to-easily-root-lg-g5-vs987-marshmallow-6-0-1/
Barook said:
I'm a new user, so I can't post the link, but did a Google search for VS987 custom rom and came up with this: search4roots.com/how-to-easily-root-lg-g5-vs987-marshmallow-6-0-1/
Click to expand...
Click to collapse
Spam site
andyroidking said:
Spam site
Click to expand...
Click to collapse
This is how you get the viruses.
Hi. My Nexus dumped, I got a G5. Where's the temp root? I will see what I can do for your boot loader. Few questions about the G series I need answered:
Flashing tools used on other variants
Leaked signing tools?
LG G series boot loader format
Encryption on this boot loader
Get me temp root and answer these questions and ill push the locked image here to work on.
LupineDream said:
Hi. My Nexus dumped, I got a G5. Where's the temp root? I will see what I can do for your boot loader. Few questions about the G series I need answered:
Flashing tools used on other variants
Leaked signing tools?
LG G series boot loader format
Encryption on this boot loader
Get me temp root and answer these questions and ill push the locked image here to work on.
Click to expand...
Click to collapse
You ever get the info you needed? I've heard of people gaining temp root with the 987 but I've never seen the published method or any real evidence of it.
So I'm assuming this is not legit?
http://www.androidinfotech.com/2016/06/root-lg-g5-verizon-vs987-601-marshmallow.html?m=1
LupineDream said:
Hi. My Nexus dumped, I got a G5. Where's the temp root? I will see what I can do for your boot loader. Few questions about the G series I need answered:
Flashing tools used on other variants
Leaked signing tools?
LG G series boot loader format
Encryption on this boot loader
Get me temp root and answer these questions and ill push the locked image here to work on.
Click to expand...
Click to collapse
Artimis said:
So I'm assuming this is not legit?
http://www.androidinfotech.com/2016/06/root-lg-g5-verizon-vs987-601-marshmallow.html?m=1
Click to expand...
Click to collapse
Have you tried it? I assume if there is root, it'd be placed on XDA dev for sure.
donjo19 said:
Have you tried it? I assume if there is root, it'd be placed on XDA dev for sure.
Click to expand...
Click to collapse
No, I don't have a G5 yet. I plan on ordering one in 8 days when my contract is eligible for renewal but I've never owned a phone I couldn't root and don't know how I feel about it. Unfortunately, that seems to be the case with pretty much all VZW phones now.
The ones that can be rooted, I'll need to make other sacrifices on like non-removable storage, non-replaceable battery, no IR blaster, etc. Makes me really appreciate my G3
Artimis said:
No, I don't have a G5 yet. I plan on ordering one in 8 days when my contract is eligible for renewal but I've never owned a phone I couldn't root and don't know how I feel about it. Unfortunately, that seems to be the case with pretty much all VZW phones now.
The ones that can be rooted, I'll need to make other sacrifices on like non-removable storage, non-replaceable battery, no IR blaster, etc. Makes me really appreciate my G3
Click to expand...
Click to collapse
The G3 is still by far my favorite Android phone. If I could go back to it, I would in a heartbeat. I eventually had mine brick. But this phone has been nothing but a disappointment...mainly for lack of root.
None of the files from that site seem to be infested with a virus, however their instructions are not very clear on how to use it all. Unless I am just not reading it correctly.
Wow, this is sad news indeed. I too have loved my G3, but this is due in large part to me having root. I was considering upgrading to the G5 simply because I expect to see deep discounts on Black Friday, but no root means no thank you. I will have to find another "root" to the future.

Root bounty for H918 10p/q

How about starting a bounty for root on H918 10p/q? Maybe if we can draw enough interest in this more developers would be willing to contribute to finding a root method? Thoughts?
that would be great if someone had the talent, T-mobile has it pretty locked down from what I read.
would love that as well.. I got excited when I saw the H910 was rooted up to 10q..
What is the current bounty at ?
If you are going to start a bounty thread, it will need to be about a grand. I figure it will take about 3 bricks to get it right.
I can now open and write to a protected block device (sde) using the LAF protocol. The problem is that you have to send the WHOLE block device, and it is excruciatingly slow. If it fails, you have a 9008 brick:
Code:
aboot -> /dev/block/sde6
boot -> /dev/block/sde1
recovery -> /dev/block/sde2
So, you image /dev/block/sde of a rooted device, and then write it back to the device you want to root. sde isn't very big, so that helps, but even so, it is SLOW I am talking days to READ, and writing is about 4 times slower. If it fails, and your phone loses power (it doesn't charge in download mode), you have a brick that only LG can fix because you have lost aboot. To get into download mode, you need 3 things: xbl, aboot, and laf. xbl and laf are on other block devices, but that doesn't matter if you lose aboot.
Because it is so slow, I don't even know if it works. I aborted and luckily my phone was still recognized by LG UP, so I flashed before my phone lost power.
Bottom line, I don't take money for my TIME on a hobby, but I am not about to brick my phones -- and like I said, I *KNOW* several bricks would happen in order to get it right.
-- Brian
a bit sketchy to try to root h918 10p and q because of anti rollback, i'm still on 10k and i could root back on 10j but i perfer not to, because custom rom's disable the second screen plus i heard it's a bit buggy, stock firmware isn't all that bad but if you truly are looking to get root on it you will need about a grand yeah cuz you will need to brick around 3-2-4 phones.
i know for me, i just prefer root so I can use XPOSED and also some root style apps that allow me to delete or disable stock apps that i do not use..
Does being on 10q block only root? Is it still possible to flash TWRP and Lineage just with no root? Could you manually set something like V4A from TWRP with adb root shell so it doesn't need su in the user space?
retro486 said:
Does being on 10q block only root? Is it still possible to flash TWRP and Lineage just with no root? Could you manually set something like V4A from TWRP with adb root shell so it doesn't need su in the user space?
Click to expand...
Click to collapse
The dirty cow exploit no longer works after 10j firmware and since you can't roll back from 10q, no TWRP.
Huh, I wasn't aware TWRP required exploits... I thought it was just the recovery partition flash...
retro486 said:
Huh, I wasn't aware TWRP required exploits... I thought it was just the recovery partition flash...
Click to expand...
Click to collapse
The whole point of dirty cow was to get TWRP on the phone. After that it could be rooted. It took an exploit to get TWRP on the phone.
Sorry for the bad news, but that's how it worked.
retro486 said:
Huh, I wasn't aware TWRP required exploits... I thought it was just the recovery partition flash...
Click to expand...
Click to collapse
The fastboot commands are missing. That's why you can't just send TWRP. If the fastboot commands was there, then you can send TWRP and root later.
Sent from my LG V20 using XDA Labs
The fact they went out of their way to remove fastboot commands blows my mind.
Wait till they figure out that an end user doesn't need download mode for anything. All carriers doing encrypted OTA updates like AT&T does. Then remove adb access, and viola.....
The V20 will be my last LG phone.
Yeah I think I'm going to get a dedicated hifi player, I'm tired of all these steep compromises to try and get an all-in-one device. The older Note 4's were great, just a bit slow and I hate the rear-firing speaker but honestly I might just go back to that or bite the bullet and go OnePlus. Oh well!
bigcletus said:
How about starting a bounty for root on H918 10p/q? Maybe if we can draw enough interest in this more developers would be willing to contribute to finding a root method? Thoughts?
Click to expand...
Click to collapse
I'm thinking about selling the T-mobile H918 (at a loss) to buy the ATT H910 or H996 (I forget which) so I can unlock both the sim card and the bootloader and attain root on the T-mobile LG V20. That would add up to a significant "bounty" if an exploit is actually possible. Somebody smarter than me would have to tell us if that can be done?
I would DEFINITELY pay someone to root my H918 that's already on "q." The LG v20 is much better than the Nexus devices I'm used too. Removable battery already lasts 3 times as long as a normal battery even without buying oversize batteries!
@bjveee If you are going to get another V20, get the unlocked US996. The bootloader can officially be unlocked, and you have full fastboot.
Right now, (now being the key word), the H910 can be rooted, but only because AT&T hasn't incremented the ARB version *yet*. Since they just released v10r and ARB still wasn't incremented, I am guessing they won't bother until Oreo (if we even get it) is released. In order to increment ARB, they have to compile ALL of the firmware with the new ARB version, and then send that OTA. Since the only way to get their updates is to have someone factory reset their phone, and then dump the latest update, I think AT&T is under the delusion that their phone is more secure than they think.....
-- Brian
I don't know if this is any easier, and it doesn't solve the problem for people who already are on p/q, but for us folks on the older firmware, it would be great if there was a way to upgrade the bootloader and radio without triggering the increment. That way we could always roll back to the older official firmware.
The bootloader IS what increments ARB, and if you have even ONE piece of firmware get loaded with a greater ARB, then it gets incremented. So, you can run the H918 10q modem with 10j bootloader. And if you try, you will then be stuck running the entire 10q bootstack.
There is no way around ARB. I am not one that will usually say something is impossible, but this is impossible.
-- Brian
retro486 said:
Yeah I think I'm going to get a dedicated hifi player, I'm tired of all these steep compromises to try and get an all-in-one device. The older Note 4's were great, just a bit slow and I hate the rear-firing speaker but honestly I might just go back to that or bite the bullet and go OnePlus. Oh well!
Click to expand...
Click to collapse
The new Razar phone is pretty sick.
Sent from my LG V20 using XDA Labs
runningnak3d said:
The bootloader IS what increments ARB, and if you have even ONE piece of firmware get loaded with a greater ARB, then it gets incremented. So, you can run the H918 10q modem with 10j bootloader. And if you try, you will then be stuck running the entire 10q bootstack.
There is no way around ARB. I am not one that will usually say something is impossible, but this is impossible.
-- Brian
Click to expand...
Click to collapse
So you are telling me with every confidence there will not be any future exploit to get around ARB. The only reasonable course of action is to buy the US version of the unlocked H966 and do it quickly!
~Bruce
---------- Post added at 06:53 PM ---------- Previous post was at 06:51 PM ----------
bjveee said:
So you are telling me with every confidence there will not be any future exploit to get around ARB. The only reasonable course of action is to buy the US version of the unlocked H966 and do it quickly!
~Bruce
Click to expand...
Click to collapse
US996....

Unlock bootloader and flash twrp with Spflashtool

Hi guys i want to share with you this methode to unlock bootloader on Oreo for Nokia 3 go to this thread and requests the files from @bigrammy
This is the thread link : https://forum.xda-developers.com/no...-t3708129/post76293046?nocache=1#post76293046
Don't forget to hit thank's to him and me 12 thanks is not enough ??
This methode work with So Flashtool ?
I'm going to make SPflashTool working. I have some issue
Riadh300 said:
Hi guys i want to share with you this methode to unlock bootloader on Oreo for Nokia 3 go to this thread and requests the files from @bigrammy
This is the thread link : https://forum.xda-developers.com/no...-t3708129/post76293046?nocache=1#post76293046
Don't forget to hit thank's to him and me 12 thanks is not enough ?
Click to expand...
Click to collapse
Thanks for your enthusiasm but my method does not Unlock the bootloader so you should change your thread title.
As I told you I will open a thread when the method is fully tested by a few advanced user's who are testing it now and you will be given full credit for all your help.
I do not want to risk anyone bricking their phones due to rushing. Many none advanced users bricked their sony c4 phones by Not following my instructions so I need this to be 100% clear and fully tested I hope you understand.
I understand you @bigrammy by flashing twrp bootloader will automatically unlocked !
Riadh300 said:
I understand you @bigrammy by flashing twrp bootloader will automatically unlocked !
Click to expand...
Click to collapse
If the bootloader was unlocked fully you would be able to use fastboot to flash the device but we cannot so the bootloader is still locked to all intense purposes.
The secure boot chain does appear to be broken so we can use SPFlashTool to flash and boot our TWRP recovery but the secure boot chain may still be working if you have never unlocked the bootloader before like on Android 7.x. This means TWRP may Not boot up for everyone. Like I said it needs to be fully tested.
bigrammy said:
If the bootloader was unlocked fully you would be able to use fastboot to flash the device but we cannot so the bootloader is still locked to all intense purposes.
The secure boot chain does appear to be broken so we can use SPFlashTool to flash and boot our TWRP recovery but the secure boot chain may still be working if you have never unlocked the bootloader before like on Android 7.x. This means TWRP may Not boot up for everyone. Like I said it needs to be fully tested.
Click to expand...
Click to collapse
Thanks for this informations ! ?
Riadh300 said:
I understand you @bigrammy by flashing twrp bootloader will automatically unlocked !
Click to expand...
Click to collapse
Actually, spflashtool bypasses the bootloader in this instance, so the bootloader is untouched and you still flash twrp
---------- Post added at 08:35 AM ---------- Previous post was at 08:02 AM ----------
bigrammy said:
I do not want to risk anyone bricking their phones due to rushing. Many none advanced users bricked their sony c4 phones by Not following my instructions so I need this to be 100% clear and fully tested I hope you understand.
Click to expand...
Click to collapse
Not to be pessimistic, but you do realise that even with all your precautions,people will still not read properly and will still brick their phones, no matter how many precautions you take. Even if you had an app that requires you to click one button to do everything,there are still people who will do it wrong. That said I think I know of one or 2 people in this Nokia 3 forum who were able to recover their phones using spflashtool AFTER the phone couldn't even be detected by their pc, even OST flashing was not possible .
Another thing is, all the Nokia 3 is last year's phone, I wonder how many experienced users will be buying the phone now, and experienced people are probably not the best way to get something 100% tested, because they know the right steps to take.
I think you should make your method public after you hear from SkaboXD
redweaver said:
Another thing is, all the Nokia 3 is last year's phone, I wonder how many experienced users will be buying the phone now, and experienced people are probably not the best way to get something 100% tested, because they know the right steps to take.
I think you should make your method public after you hear from SkaboXD
Click to expand...
Click to collapse
Sorry I replied to your PM before seeing this.
True there is no accounting for people but I don't want to get bogged down by noob's. If you and maybe SkaboXD would like to open a thread and manage it using the method then that would be fine by me as long as credit is give to Riadh300 the original tester and who informed me SPFlashTool still worked and myself of course.
Please read my PM about the bootloader condition as I recommend only previously unlocked devices try this for now until tested by Advanced user able to recover the device should anything go wrong (EFuse Blown).
bigrammy said:
Sorry I replied to your PM before seeing this.
True there is no accounting for people but I don't want to get bogged down by noob's. If you and maybe SkaboXD would like to open a thread and manage it using the method then that would be fine by me as long as credit is give to Riadh300 the original tester and who informed me SPFlashTool still worked and myself of course.
Please read my PM about the bootloader condition as I recommend only previously unlocked devices try this for now until tested by Advanced user able to recover the device should anything go wrong (EFuse Blown).
Click to expand...
Click to collapse
Alright I understand your point now. One thing I wonder though is: would someone on nougat who has never unlocked bootloader be able to flash ost?
Just checked my phone, oem unlocking was set to off so you're right, your method doesn't actually affect the bootloader.
I actually don't mind posting your method and giving you guys the credit, I just thought that you would want to be the one to do so.
Anyway I'll wait to hear @SkaboXD thoughts before I decide on whether to put up the post
redweaver said:
Alright I understand your point now. One thing I wonder though is: would someone on nougat who has never unlocked bootloader be able to flash ost?
Just checked my phone, oem unlocking was set to off so you're right, your method doesn't actually affect the bootloader.
I actually don't mind posting your method and giving you guys the credit, I just thought that you would want to be the one to do so.
Anyway I'll wait to hear @SkaboXD thoughts before I decide on whether to put up the post
Click to expand...
Click to collapse
Before on 7.0 I flashed a TWRP I was working on via SPFlashTool bootloader locked and ended up in a never ending recovery bootloop which none advanced users may find difficult to get out of now this may of been because I screwed up the TWRP or more likely because the bootloader was Locked.
I did not try any other TWRP's until I was bootloader Unlocked and I have not had the recovery bootloop since.
Not sure about OST as SPFlashTool is by far the best tool for MediaTek devices and recovery of said devices remember the SoC manufacturer knows best and I only ever see problems when the OEM's try to move away from it like Sony did.
Happy for you to take the lead I am too busy in other threads to worry about it
bigrammy said:
Before on 7.0 I flashed a TWRP I was working on via SPFlashTool bootloader locked and ended up in a never ending recovery bootloop which none advanced users may find difficult to get out of now this may of been because I screwed up the TWRP or more likely because the bootloader was Locked.
I did not try any other TWRP's until I was bootloader Unlocked and I have not had the recovery bootloop since.
Not sure about OST as SPFlashTool is by far the best tool for MediaTek devices and recovery of said devices remember the SoC manufacturer knows best and I only ever see problems when the OEM's try to move away from it like Sony did.
Happy for you to take the lead I am too busy in other threads to worry about it
Click to expand...
Click to collapse
So how did you get your phone back anyway?
redweaver said:
Alright I understand your point now. One thing I wonder though is: would someone on nougat who has never unlocked bootloader be able to flash ost?
Just checked my phone, oem unlocking was set to off so you're right, your method doesn't actually affect the bootloader.
I actually don't mind posting your method and giving you guys the credit, I just thought that you would want to be the one to do so.
Anyway I'll wait to hear @SkaboXD thoughts before I decide on whether to put up the post
Click to expand...
Click to collapse
I will lock bootloader and try this method of rooting. I think that is this the best method because it doesn't affect bootloader so you can have OTA updates. Just what is the root manager, SuperSU or Magisk?
I think that we could make a thread when this mehod is tested on both Nougat and Oreo with locked bootloader. As far as i read, Oreo is tested so only Nougat remains to test.
redweaver said:
So how did you get your phone back anyway?
Click to expand...
Click to collapse
:laugh: Sorry mate this is what I mean. I simply don't have the time to sit answering every single question as there is no short answers
I hope you understand.
SkaboXD said:
I will lock bootloader and try this method of rooting. I think that is this the best method because it doesn't affect bootloader so you can have OTA updates. Just what is the root manager, SuperSU or Magisk?
I think that we could make a thread when this mehod is tested on both Nougat and Oreo with locked bootloader. As far as i read, Oreo is tested so only Nougat remains to test.
Click to expand...
Click to collapse
OK, one thing though, before flashing the recovery you might want to do a backup of the stock recovery if you don't already have one. That's what I did, so after I got root, flashed back my stock recovery. Magisk is the root manager ,
---------- Post added at 12:17 PM ---------- Previous post was at 12:12 PM ----------
bigrammy said:
:laugh: Sorry mate this is what I mean. I simply don't have the time to sit answering every single question as there is no short answers
I hope you understand.
Click to expand...
Click to collapse
oh you mean you went through hoops to get your phone back? I thought you would say you got a stock recovery somewhere and flashed using spflashtool or used the ost method. I didn't actually expect you to outline the steps you used. BTW, first time I flashed twrp AFTER unlocking bootloader, I got stuck in a recovery bootloop too. I had to flash my phone with OST then retry the process again.
One other thing, I think OST is actually a propriety software that is supposed to work for lots of phones, at least I know that users of other non mediatek Nokia phones also use it to recover their phones (with the corresponding stock images of course)
SkaboXD said:
I will lock bootloader and try this method of rooting. I think that is this the best method because it doesn't affect bootloader so you can have OTA updates. Just what is the root manager, SuperSU or Magisk?
I think that we could make a thread when this mehod is tested on both Nougat and Oreo with locked bootloader. As far as i read, Oreo is tested so only Nougat remains to test.
Click to expand...
Click to collapse
Magisk hide allows you get OTA's see the Magisk thread and yes it will work on any android version.
@redweaver
I am glad you got out of the loop but your clearly a more advanced user hence why I ask you to test. :good:
The OST is very convoluted for use on MediaTek devices and is very unnecessary it also requires unnecessary FIH software to be installed on the phone to work properly.
They likely choose this method to work across different SoC's but it's not what MediaTek use SPFlashTool is MediaTeks own software.
EDIT: Sorry lost internet for a while then.
I continue: Good news is I do not think they will be able to remove SPFlashTool use as it's binary on device which lives on a none volatile area ram chip or radio chip and is loaded at the factory so I doubt it can be updated via a OTA. :fingers-crossed:
Sony actually replaced this and this is the only device I have been unable to recover and even Sony were replacing the boards of bricked devices but if they had left the Mediatek binary in there it would not of been a issue as SPFlashTool would of been able to recover them. :good:
guys, old thread, i know, different device, i know, but ive been in the dark and this is what most resembles my issue.
any hints would be appreciated, read all 2 pages, can you believe it? im a very average xda enthusiast.
worries out of the way, my sincere thanks beforehand follow.
issue
carrier doesnt get in the way
oem doesnt get in the way
oem unlock toggle, check, adb debugging, you and i know the drill, no driver/cable issues
cannot for the life of me unlock bootloader, this one would take the newer command, however i tried them all ive come accross to no avail
output encourages me to unlock first, howwever not a clue is given as to how to accomplish it. this isnt the flash a file type of unlocking, either, at least not oem provided. going nuts.
go ahead and feel free to issue "advanced" directions (meaning, like your voicemail, instead of "for voicemail configurations press 8" and just "configurations 8"
spreatrum, not mtk
x120c
came with oreo go, treble enabled per getprop
i dont know what else, please

Is it worth rooting / flashing the Mate 9?

I love this phone and have had it for more than 2 years now, and have no plans of upgrading and will use it until it breaks down. Since I don't expect any updates any more, I was wondering if its worth rooting and flashing an Android 10 ROM (any recommendations?) this phone, especially since I want to use the Google camera that only works with Android 10. But as I read the guides and threads here, it seems rooting is more complicated than other phones.
So, is it worth it?
tukmulin said:
I love this phone and have had it for more than 2 years now, and have no plans of upgrading and will use it until it breaks down. Since I don't expect any updates any more, I was wondering if its worth rooting and flashing an Android 10 ROM (any recommendations?) this phone, especially since I want to use the Google camera that only works with Android 10. But as I read the guides and threads here, it seems rooting is more complicated than other phones.
So, is it worth it?
Click to expand...
Click to collapse
To flash a custom ROM you don't need root but unlocked Bootloader.
If you didn't obtain BL code when it was easy and free or cheap, that is now complicated and expensive (although still possible)- look at some other threads where people asked about flashing and it always comes down to the question about unlocking Bootloader
zgfg said:
To flash a custom ROM you don't need root but unlocked Bootloader.
If you didn't obtain BL code when it was easy and free or cheap, that is now complicated and expensive (although still possible)- look at some other threads where people asked about flashing and it always comes down to the question about unlocking Bootloader
Click to expand...
Click to collapse
I see. Thank you. Looks like I'm stuck with stock then. Thank you! It doesn't make sense to me to root if I can't flash anyway since I won't be able to get Android 10. The phone has excellent battery life and I have no complaints about speed. Unless there are benefits to just rooting that I don't know about?
tukmulin said:
I see. Thank you. Looks like I'm stuck with stock then. Thank you! It doesn't make sense to me to root if I can't flash anyway since I won't be able to get Android 10. The phone has excellent battery life and I have no complaints about speed. Unless there are benefits to just rooting that I don't know about?
Click to expand...
Click to collapse
Did I miss, but you didn't mention the most important fact - what is your EMUI version.
Supposing you are on 9.1 or 9.0 since you are asing about Android Q....
For rooting you must also flash (e.g. Recovery-Ramdisk patched by Magisk to get root, on EMUI 9), so it again comes down to the same problem about obtaining the Bootloader code (locked Bootloader prevents Fastboot from flashing) - to get a picture why is it complicated to obtain the BL code, please read like:
https://forum.xda-developers.com/mate-9/help/mate-9-reached-dead-t3978105/post80497731
https://forum.xda-developers.com/mate-9/help/hi-to-downgrade-firmware-versions-gpu-t3917826
However, you can still do useful modding without TWRP, root, custom ROMs - that is, without the need to unlock Bootloader, see:
https://forum.xda-developers.com/mate-9/help/modding-removing-bloatware-blocking-ads-t3971297
zgfg said:
Did I miss, but you didn't mention the most important fact - what is your EMUI version.
Supposing you are on 9.1 or 9.0 since you are asing about Android Q....
For rooting you must also flash (e.g. Recovery-Ramdisk patched by Magisk to get root, on EMUI 9), so it again comes down to the same problem about obtaining the Bootloader code (locked Bootloader prevents Fastboot from flashing) - to get a picture why is it complicated to obtain the BL code, please read like:
https://forum.xda-developers.com/mate-9/help/mate-9-reached-dead-t3978105/post80497731
https://forum.xda-developers.com/mate-9/help/hi-to-downgrade-firmware-versions-gpu-t3917826
However, you can still do useful modding without TWRP, root, custom ROMs - that is, without the need to unlock Bootloader, see:
https://forum.xda-developers.com/mate-9/help/modding-removing-bloatware-blocking-ads-t3971297
Click to expand...
Click to collapse
Awesome! Will look them up. Thank you so much! These are invaluable resources.

Categories

Resources