Related
Hi all, i'd like to buy a chinese android based tablet (price should be around 100€), i'd like to ask you which one do you suggest to buy.
I've seen one from my friend and i liked it, i didn't remember the model but i tought that the android market was not the official one, can it be? If so, there's any way i can install it? Or i can install other apps without the market?
Another question, are these upgradable? I thought that the Android inside the tablet was pretty old (1.6 maybe), this was not a problem in everyday use, but i'm a maniac and i like to have everything up to date, if i can.
Please let me know
Just bought the TechPad Android Tablet
I guess we'll see what can be done with these. I don't need an ereader so I am looking for this to be an extension of my android phone, GPS - browser - etc. I should receive it by the 9-25-10
It has OS 1.6 Android 7 Inch Tablet with a 800MHz processor, 256 MB of RAM, 1Gb ROM, WiFi, and the Google Android Marketplace.
superchaos said:
I guess we'll see what can be done with these. I don't need an ereader so I am looking for this to be an extension of my android phone, GPS - browser - etc. I should receive it by the 9-25-10
It has OS 1.6 Android 7 Inch Tablet with a 800MHz processor, 256 MB of RAM, 1Gb ROM, WiFi, and the Google Android Marketplace.
Click to expand...
Click to collapse
Look at this: http://www.slatedroid.com/
There are many store where you can buy that table you can do your own research on the web so you can select the right store that will meet your budget.
@superchaos
so did you get the 7 inch techpad unit yet? if so how is it?
I did.
It is not replacing my phone, I seem to be able to see a lot of the apps in the market but I am unable to download them. It just gets stuck at the starting download screen. Wifi connects really well and has a great connection.
Some apps just won't install like google earth, Google sky map, Swype doesn't recognize the device, etc.
The touch screen is kind of weak and you really have to press to get it to get the typing to work. The system files are accessible and there is a "su" folder. I am not real good at getting into anything. It looks to me like it is rooted but I have not figured out how to get into a recovery mode.
I have tried to connect it to the SDK from google and it does not recognize the device. If anyone has any ideas, I am open to suggestions.
Market issue is likely just Google servers. Happens all the time.
You need to test root by running an app like titanium backup which needs root, and see if it works.
For recovery, you would only get a stock one, and I doubt you will get a custom one online if the device is not common.
Is USB debugging enabled for adb, and have you looked for it in device manager to see its hardware id and check if the id is listed in the adb driver list?
@superchaos
judging from the price the screen probably is not capacitive type but resistive. how's the battery holding? how long does it last before you have to recharge? does it look like it's upgradable to android 2.2?
thanks.
pulser_g2 said:
Market issue is likely just Google servers. Happens all the time.
You need to test root by running an app like titanium backup which needs root, and see if it works.
For recovery, you would only get a stock one, and I doubt you will get a custom one online if the device is not common.
Is USB debugging enabled for adb, and have you looked for it in device manager to see its hardware id and check if the id is listed in the adb driver list?
Click to expand...
Click to collapse
It doesn't seem to be rooted. To get the adb shell to recognize the device and to get Dalvik Debug Monitor to see the device, I followed the instructions here rbgrn.net/content/399-how-to-get-archos-5-internet-tablet-adb-working-on-x64-windows
I used HiDROID instead of Archos5 and the device id is USB\VID_18D1&PID_0002&MI_01
I run winXP not win7 and this worked. Screen capture works too. The programs I installed that require root just force close.
tlusg said:
judging from the price the screen probably is not capacitive type but resistive. how's the battery holding? how long does it last before you have to recharge? does it look like it's upgradable to android 2.2?
thanks.
Click to expand...
Click to collapse
The screen could be a lot better. It is like there is a film on top of the screen for touch capabilities. The battery holds really well unless you are watching videos. 4-5 hours of constant use. You can leave it plugged in too. I am hoping it is upgradeable. The OS is built for a phone.
How do I get a list of hardware devices in the phone? Not just the specs on the pamphlet but actual hardware names/mfg's?
EDIT: Nevermind, while in the process of editing this post to narrow its scope I found a related post to watch. Thanks to readers. http://forum.xda-developers.com/showthread.php?t=1062348
Anyone here using Oneiric with their sensation have any advice for better compatibility?
I just recently upgraded from a W755 and have been running into a few troubles. A couple things I'm wondering:
USB tethering. I see options for both making the internet available to my phone from my computer and from my phone to my computer... I can't seem to tell if either are working. Anyone able to get these working (in linux/ubuntu w/unity)? (Haven't tried wifi hotspot but am guessing it works fine).
Management programs: Is there anything which allows easy management of phone information from a linux os? I had to work for 5 days to clean up all my contacts between duplicates, missed links and other problems. Would have been much nicer to do with some form of management interface on my laptop.
Other: In general could anyone offer up any advice for either a new smartphone user running linux as their only OS or things to watch out for? I'm already eager to see what cleaning up of the bloatware I can do when the thing gets unlocked (The fact that I can't uninstall a crappy bundled FPS is stupid).
Thanks in advance,
Garrett
Hi everyone, For the last two weeks I have been trying to develop my own custom Gingerbread + custom view sonic kernel.
Today I finally have them packaged into a update.zip file but it wont install due to status 6. Sadly I really have no clue if thats the last part I need to over come before I can install, or perhaps there is more than just that issue since the only tutorial I could find were dated / incorrect / incomplete / or written by someone who ate pain chips as a child.
So Really all I want is Gingerbread with com.android.future.usb.Accessory / Manager
AND (this is important also)
I also need the Viewsonic kernel to support the Prolific driver 2303 (this is in the menuconfig so it should be easy to add).
In addition, if anyone could please point me to resources when I can accurately learn how to build the OS / Kernel / update.zip file that would be wonderful. My head hurts so badly from reading all these broken english posts where the scrip examples are riddled with typos.
Oh also two weeks ago was the first time I ever saw Ubuntu (thats what im currently working on as well).
Thank you and sorry for the aggravated post but I seriously need help, my job is in the balance. Thanks Again
Anyone know of a rom that has these features already in them? Or perhaps a good couple of tutorials that will allow me to create my own? I dont want anything fancy just plain vanilla.
DKS1282 said:
Hi everyone, For the last two weeks I have been trying to develop my own custom Gingerbread + custom view sonic kernel.
Today I finally have them packaged into a update.zip file but it wont install due to status 6. Sadly I really have no clue if thats the last part I need to over come before I can install, or perhaps there is more than just that issue since the only tutorial I could find were dated / incorrect / incomplete / or written by someone who ate pain chips as a child.
So Really all I want is Gingerbread with com.android.future.usb.Accessory / Manager
AND (this is important also)
I also need the Viewsonic kernel to support the Prolific driver 2303 (this is in the menuconfig so it should be easy to add).
In addition, if anyone could please point me to resources when I can accurately learn how to build the OS / Kernel / update.zip file that would be wonderful. My head hurts so badly from reading all these broken english posts where the scrip examples are riddled with typos.
Oh also two weeks ago was the first time I ever saw Ubuntu (thats what im currently working on as well).
Thank you and sorry for the aggravated post but I seriously need help, my job is in the balance. Thanks Again
Click to expand...
Click to collapse
this is the thread i used to get me started compiling a module for pershoots kernel
http://forum.xda-developers.com/showthread.php?t=916198
obviously run your own menuconfig somewhere in there (i think its in one of the steps) and turn on whatever you want. Also save the modules that you create as the default pershoot ones wont insert into your custom module at that point
[edit] there is a thread in the gtablet devel section for pershoots latest (i think 2.6.32.42) that may have this already: http://forum.xda-developers.com/showthread.php?t=903505 [/edit]
Thanks for the links. I was able to pull the config file from Ginger 2.3.4 and it seems to have the required driver for the prolific usb to serial converter, although when I write a usb detection program and attempt to load it onto the tablet, well I get a missing shared library com.android.future.usb.
So now thats kind of odd because its 2.3.4 and Google specifically says it supports the library I need. So I guess what Im asking is there any Ginger or even honeycomb OS for the Gtablet that supports this?
Once again Thanks for a point in the correct direction.
Is there anyone I can communicate with directly in creating this? Ill be more than willing to donate my work so that it could be built upon. I just can not believe that this has not been added in yet.
Ive pushed android.hardware.usb.accessory.xml to /etc/permissions
and ive pushed the com.android.future.usb.accessory.jar to /system.framework
This seems to do absolutely nothing. Does anyone have a version with the USB accessory working for the G tablet? Or could anyone Communicate with me directly perhaps by IM? Thank you very much again.
So after some tweeking I can now get my program that requires com.android.future.usb.accessory although thats all it does. It wont detect the USB or use any USB features. Im sure im programing it wrong, although It detects USB drives and keyboards and such it will not detect my USB to serial Prolific cable.
Im trying to compile the kernel and install it but really, nothing works... Im typing commands I dont know what they mean, and i get responses like "Permission denied" so I use sudo on the command and get "not a valid command". So I didnt have permission at first, then once I did it wasnt a valid command? No wonder why ****ty old windows stomped ubuntu into the ground... I feel windows phone will destroy google if its this hard to develop a single app that I have on the IPHONE / WINDOWS PHONE / WINDOWS 7 but cant get it on android... WTF
Im just wondering how you successfully compile Gingerbread 2.3.4 and Leave out part of the MAJOR update. Why not just use 2.3.3?
Anyway Ive personally fixed that, although when i pull the kernel it shows the prolific driver is installed but there is no detection when I plug the cable in.. Nothing nadda. just like the replies to this post. Im guessing people dont have any problems at all with all the really bad tutorials out there and the lack of support even on this, a developer site, I cant even ask questions to the developers because I dont even have 10 posts yet. Also it just seems like the only thing people on this site is Over Clocking. It done matter if its a peice of ****, as long as its over clocked, Or some of the roms I installed and they are SO bad, but man they are over clocked... Or the roms that say they are 2.3.4 and happen to be 2.3.3. Or the ones that just wont install. How has android made it this far, its actually pretty bad, but then again im sure Im the only human with these problems, because I really cant find anything on the Internet after a good long while. I tough myself enough law to win a law suit against a company with high priced lawyers in less time than this is taking... And im no good at law at all.
EDIT 12/13/2011:
Instructions to Root the le pan tab tc970 from whatid (THANK YOU!!)
"Here are the steps (to root) for newbies.
1. Download the packages from OP (Post #1). Assume you are using windows, you don't need LinuxDriver.7z.
2. Use http://www.7-zip.org/ to unpack onto your computer.
3. On your TC970, hit home->Menu
4. Applications -> Development
5. Check "USB debugging", optionally some suggest checking "Stay awake"
6. Connect your TC970 to your PC, when prompted new hardware detected. Select the Windows Drivers directory you unpacked in.
7. Once driver is installed, run "SuperOneClick.exe"
8. Just click "Root" under the "Universal" tab and wait.
** It will prompt you to install BusyBox during the first time, just install it **
9. When it is done, it will prompt you.
From dbaybay's experience (thank you for your continual help in leading the le pan community through the growing pains!!!):
If you ever have to root your tab again (say after upgrading the firmware), when you root it the first time, open up SuperUser before rebooting and Menu > Options/Prefs and choose "update binaries". Then reboot and your root will stick the first time around.
If everything seems ok, turn off your TC970 by holding on the power button. Power up again, and see if root stay (use Root Checker Basic).
If not, repeat step 6 (no need to install driver again) until you have root after reboot."
Also a big thanks to nehinbin for giving the community insider info with regard to the tablet and firmware v2 which you can find here:
http://lepan.supportsync.com/articles/view/Latest_Firmware_for_LePan_TC_970_Tablet_Computer_11
For the brave or fool hardy, here is a link which will direct you to directions on how to port CWM to a new, as of yet unsupported device (like the 970):
http://www.koushikdutta.com/2010/10/porting-clockwork-recovery-to-new.html
AND HOT OFF THE PRESS FROM cas_xp:
"I am still waiting mine to be shipped. (should be today or tomorrow) Can not wait!
But if anyone is interested, I attached a tool to extract Le Pan update package as
Kernel
ramdisk
recovery
system
...
For somehow, the system is compressed and not yaffs2 or other format. I am trying to figure it out."
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I have achieved root using a modified superoneclick 2.2 on my Le Pan TC 970!!!!!
Credit to all devs who produced superoneclick and associated root methods!!!!
I wish I could take some sort of techie credit for this, but I did it by swapping the adb file and associated .dlls in superoneclick with some that I procured from *somewhere*.
The root is not permanent, but for someone with far more experience in android than i, i am sure it could be used to develop a permanent root.
If there are people out there who would like to take this to the next level, send me a pm and ill see about getting you the files to repeat what i have done.
-DerKoch
NOTE:
After reboot when trying to gain elevated privileges on the device i get the error:
link_image[1995]: failed to link su
CANNOT LINK EXECUTABLE
Could be a useful starting place.
-DK
EDIT:
Nuts to it. The Superoneclick i modified to gain root is now attached. It is only modified for and works in windows as i didnt feel like farting around with the linux version.
Good luck with the permanent root.
-DK
ANOTHER EDIT:
I have updated the post and am including the missing files.
Dont ask where i got them and, as usual, if you screw up your new toy with anything you find here, i am not in any way responsible. Rooting or altering your tablet beyond what is allowed by the eula of your device will almost certainly void your warranty and piss off the people to whom you are trying to return the device once broken beyond your ability to repair.
YOU ARE WARNED
ALSO, It looks like the tablet hardware was designed by innocomm. you can find this if you download the 4431 update from le pan http://www.sendspace.com/file/sunmks . For some reason the firmware update is not openly available...... Well now it is. Just click on the above link and download at your leisure.
the 970 uses the 3e recovery and what looks like a modified 3e or 2e (i cant remember which at the moment) for the firmware update supplied by le pan.
This firmware package contains a MLO file (35.1kB) which i assume is a shell script (although the text encoding eludes me *encrypted maby*), iboot.ism (131.1 kB) which i think it the, you guessed it, bootloader the tablet uses during the flash process, and griffin.ifw (99.1 MB) which is the firmware. There are a whole bunch of apks included as well so non-market apps are enabled by default and you are told to install them after you upgrade the tablet.
all of the documentation for the 970 is written in mandarin, so for all non speakers, good luck with that
I cant seem to decompile griffin.ifw into anything useful, but then again, i am no firmware expert. I am sure some of you would be able to poke around and get it to open-sesamie.
If you are successful, please post how ya done it here so we, myself included, can learn a thing or two.
Best,
DK
Thank you!!
I just wanted to thank you for figuring out as much as you did. I wish I was even on your level but hopefully I will be one day soon. Anyway, you're awesome!
Edit: I was also able to root my le pan tc970 and it is permanent. It got stuck in a rebooting loop but i just hit the reset button on the back and it turned on just fine. I did have to reinstall all my apps as well but everything is fine now so thanks to you and the developers.
Damn. 147 views and no feedback. Kinda quiet in here .....
Sent from my SAMSUNG-SGH-I897 using XDA App
DerKoch, how exactly did you get this to run and root?
When I run the SuperOneClick you posted, it stops responding when it tries to restart the adb server and it just hangs...any thoughts?
Yeah. I forgot to post the other needed files (One might even be able to call them a hardware - software interface if you get my drift. These aren't supposed to be available to the public. ) Im away from my computer, but ill put them up when I get home.
Sent from my SAMSUNG-SGH-I897 using XDA App
hey dadog,
just search the forums for your phone. the answer is out there
PS
be careful about asking questions in the wrong threads (such as this one). people will rip you a new one and you run the risk of having bad things happen.
DK
Help the community
Hey all,
it comes to my attention that i forgot to post all of the files i have from *somewhere* to make this work. i have what one might call a bleeding heart for people who put themselves at risk to help others and the person who helped me was exceptionally kind in this regard.
please do me a personal favor and call le pan customer support and hound them regarding making the files-who-will-not-be-named publicly available. the phone number is: 1-855-537-2672 (1-855-LePanPC). tell them you are developing software, and have to be able to access the tablet through adb, not just mass storage which regularly fails and screen locks the device. also tell them how disappointed you are with the total inability to use it while it is connected to your computer in mass storage mode, because it constantly chokes on itself and requires a hard reset to get it back up and running. if you are lucky, they might help you out.
if there is enough pressure, i hope these required files will become publicly available and my conscience with releasing these files will become clear.
if you need the other files to get this to work because you are a dev working to open the 970 to comply with the gnu/gpl license they have flaunted by taking the froyo os and NOT RELEASING ANY SOURCE CODE *OR DRIVERS* (GRRRRRRR!!!!), please send me a pm and ill get them to you.
Best
DerKoch
Permanent Root - Le Pan TC 970
Thanks again for the drivers. Now that they are public we can post in this thread instead of PM.
In response to your first post, my device seems to be permanently rooted. I have restarted it several times after the initial root and still retain full access to the superuser bin.
Off topic: The USB wall charger just burned out in mine and I've only had it for a day. I'm going to see if Le Pan would just send me a replacement charger instead of having to exchange the whole product with Amazon. I wold like to get some more hands-on time with it.
Other than that charger issue I find it to be a superb tab.
I have no idea why launchers in the market place are blocked on this device but you can get around this by downloading the apk's and manually installing directly on device.
raden2967 said:
Thanks again for the drivers. Now that they are public we can post in this thread instead of PM.
In response to your first post, my device seems to be permanently rooted. I have restarted it several times after the initial root and still retain full access to the superuser bin.
Off topic: The USB wall charger just burned out in mine and I've only had it for a day. I'm going to see if Le Pan would just send me a replacement charger instead of having to exchange the whole product with Amazon. I wold like to get some more hands-on time with it.
Other than that charger issue I find it to be a superb tab.
I have no idea why launchers in the market place are blocked on this device but you can get around this by downloading the apk's and manually installing directly on device.
Click to expand...
Click to collapse
How exactly did you get a permanent root? Or more appropriately, what was your process for doing it in the first place?
I cannot seem to get mine to root at all
Succesfully Applied Root to my TC970
Makes tablet that much more awesome. It's one of the few Android tablets with a 9.7" 4:3 ratio screen. But, the stock resolution on this thing is wayyy to big. I set it down to 180 with LCDDensity, and it looks great. Thanks for the awesome help folks.
nevermind, I got it working. Now all I need to get working is LCDDensity without locking the tablet up on reboot and I'm golden! Thanks a lot guys!
I was having the same problem as you. Actually, when I first rooted, all my apps broke. So, i wiped to factory(on the latest firmware, re-rooted, ran LCDDensity, and was good to go. Then all my apps ran fine, and it didn't lock up on reboot.
Brief Rooting Guide - Le Pan TC970 (Windows)
MK2MR2 said:
How exactly did you get a permanent root? Or more appropriately, what was your process for doing it in the first place?
I cannot seem to get mine to root at all
Click to expand...
Click to collapse
Step 1: Enable USB debugging on device (Settings>Applications>Development>USB debugging)
Step 2: Download windows ADB drivers and modified Super One Click 2.2 from the first post in the thread.
Step 3: Plug in device and install drivers through device manager / new hardware detection wizard.
Step 4: Open modified Super One Click 2.2 (with admin privileges depending on your OS version).
Step 5: Click the "Root" button.
That's it.
raden2967 said:
That's it.
Click to expand...
Click to collapse
... and that's for permanent root? I just bought one of these from Amazon for $170... so I'm hoping I can root it in the hopes of some ICS magic in the weeks/months to come!
I wouldnt hold my breath for a full ics experience. ics is very graphics intensive in comparison to 2.2 and without any hardware acceleration it would be a very slow, somewhat irritating experience.
I believe it would be better to develop an upgraded/modified 2.2 or 2.3 build for the 970 as neither are that demanding in the graphics realm.
Best,
DK
No Official Android OS updates planned for Le Pan TC970
gfinockio said:
... and that's for permanent root? I just bought one of these from Amazon for $170... so I'm hoping I can root it in the hopes of some ICS magic in the weeks/months to come!
Click to expand...
Click to collapse
I have confirmed with Le Pan tech support that this tab wouldn't be getting any more official OS updates but they may publish bug fixes in future firmware updates.
In their words:
"The TC970 runs 2.2 which is a completely different platform than 3.0+.
Google rushed its release to compete against Apple so it's lacking a lot of support. This OS is not upgradable to anything beyond 2.2.
Le Pan plans to release a new tablet with a new OS that will come out early next year.
Sorry for the inconveniences, we really wish 2.2 would be upgradable to 4.0 or even 2.3 but it just isn't possible. "
...
"The current model TC970 will not be getting any OS updates but will receive firmware updates when needed."
We are on our own to port 2.3.x on this tab.
So, I ran the root exploit and then tried to run LCDDensity and my tablet crapped out.
I then booted into recovery and just did a complete reset, when I came back to the tablet interface I found that Superuser was still installed, and it was rooted permanently. Weird, but i'll take it! I've since have tested it out and restarted the tablet to confirm that it is indeed permanent.
It is. DerKoch, I cannot thank you enough for the help here, amazing!
Thank you, but remember to also thank the development people over at superoneclick. I just modifyed their application. A lot of hard work went into their program. All I did was have the right tools at hand to make their stuff work with the 970 and know where the current failings were with accessing the 970.
Please don't think I'm being ungrateful, but the Android development community is really a lot of different people standing on the shoulders of giants taking their work just a little bit further.
Best
-DerKoch
Sent from my SAMSUNG-SGH-I897 using XDA App
raden2967 said:
Le Pan plans to release a new tablet with a new OS that will come out early next year.
Click to expand...
Click to collapse
I just ordered one of these from amazon.ca too - $170 shipped is an amazing deal! I love how it came on super sale the day after someone managed to root it. That was the first thing I went to check when I saw the new price!
BTW it looks like the "Le Pan II" that support was talking about is about to hit the shelves:
http://www.amazon.ca/gp/product/B00...d_t=101&pf_rd_p=1293009622&pf_rd_i=2690953011
1.2GHz dual core running Honeycomb... very interesting.
Does anyone have any plans to try Honeycomb on the TC970? (CyanogenMod7?)
Sandmonkee said:
Does anyone have any plans to try Honeycomb on the TC970? (CyanogenMod7?)
Click to expand...
Click to collapse
I don't think that this tablet can run Honeycomb. It's only single core and 512 megs of ram. Gingerbread is more possible, but i don't think that this tablet could run it.
Update (5/18/2019)
Since the first tool was released, HappyZ has improved many features so I think I can just refer to
* HappyZ's rooting guide: https://github.com/HappyZ/dpt-tools/wiki/The-Ultimate-Rooting-Guide
- The only thing I want to add as Windows user is (because the guide is for Mac/Linux users) it gets much easier if you use Linux terminal like cygwin, and the port name should be something like COM# where # can be found in Device Manager by comparing before/after you attach the device.
* HappyZ's upgrade guide: https://github.com/HappyZ/dpt-tools/wiki/The-Upgrade-Guide (Recommend to read this before/after you update the new firmware.)
You may donate a cup of coffee to him there Thanks to all others who contributed a lot.
--
Update (12/02/2018) -- These are outdated.
Finally we manage to root the device! Many thanks to all of your efforts.
Just refer to HappyZ's well written guide: https://github.com/HappyZ/dpt-tools
For whom have never used python like me (and probably using Windows):
(1) Install Python 3 and add it to PATH.
(2) Install MINGW64 and run scripts here instead of Powershell due to xxd issue if you are on Windows.
(2) pip httpsig pyserial on bash.
(3) Download HappyZ's dpt-tools and unzip.
(4* this issue is fixed by HappZ)
(5) Follow HappyZ's guide. You should execute dpt-tools.py in the folder you unzipped to use get-su-bin because of how the script is written.
Some suggestions after rooting (let me know if you have better ideas):
Here is my setup: install "E-ink Launcher" and "Multi action home button" using adb install.
Use adb shell am start -a android.intent.action.MAIN to change the main launcher to your launcher.
Then change the setting of Multi Action Home button (say, the height should be large to be visible in the bottom) and assign its function to be Home for click and Back for double-click.
Whenever you want to use Sony's apps (these are good for pdf markup), just push the home button to open the pop-up menu.
Otherwise, touch the Multi Action Home Button to access to other Android apps. So far I've never experience any crash.
Yet more tips:
Some complain fonts are too small after installing generic apps.
adb shell wm density 320 changes your DPI by 2 times (160 is a default value.) EDIT: I found 200 is quite enough that does not distort Sony apps too much.
My application is using "Tasker" to execute the above code when specific apps are open and execute wm density reset when the apps are closed.
The reason why we cannot change the global DPI is sadly because it makes the default apps by Sony so awkward.
Alternatively, I could successfully install Xposed to try App Settings but this app crashed.
You can also install Gboard (but it has no hide button, so prepare with virtual back button) if you need another keyboard.
Enjoy your DPT devices
--
Sony recently released a new digital paper device DPT-RP1, apparently using their own linux firmware but underlying on Android 5.1.1. Few weeks ago, some Chinese successfully hacked it to jailbreak for third-party apps (without changing the original firmware), but they don't share any information to sell those hacked devices. I'm willing to pay for it, but it is too risky to send my device to China so I'm trying to root it by myself.
I don't know much about this world, but I found some information that might be helpful. It uses Marvell A140 IoT Processor a.k.a. PXA1908. There are two Android smartphones (as the same version 5.1.1) with this chip - Samsung Xcover 3 and Samsung Galaxy Grand Prime. Fortunately, they have been both rooted in the past here.
Is this information really helpful to root my device? If so, is there any way to apply the previous methods to easily jailbreak DPT-RP1? I think the problem here is that it does not look like Android at all, so has no setting menu or developer tools. And not sure how to enter to the recovery mode since it only has two buttons - power/menu.
I'd appreciate any help or advice. Thanks!
And here you can find source codes.
oss.sony.net/Products/Linux/dp/DPT-RP1.html
sartrism said:
Sony recently released a new digital paper device DPT-RP1, apparently using their own linux firmware but underlying on Android 5.1.1. Few weeks ago, some Chinese successfully hacked it to jailbreak for third-party apps (without changing the original firmware), but they don't share any information to sell those hacked devices. I'm willing to pay for it, but it is too risky to send my device to China so I'm trying to root it by myself.
I don't know much about this world, but I found some information that might be helpful. It uses Marvell A140 IoT Processor a.k.a. PXA1908. There are two Android smartphones (as the same version 5.1.1) with this chip - Samsung Xcover 3 and Samsung Galaxy Grand Prime. Fortunately, they have been both rooted in the past here.
Is this information really helpful to root my device? If so, is there any way to apply the previous methods to easily jailbreak DPT-RP1? I think the problem here is that it does not look like Android at all, so has no setting menu or developer tools. And not sure how to enter to the recovery mode since it only has two buttons - power/menu.
I'd appreciate any help or advice. Thanks!
Click to expand...
Click to collapse
You must be an iPhone user that isn't familiar with android. Jailbreak in is an Apple thing, not an android thing.
In android it's called "rooting" and it isn't quite the same thing as jailbreaking an Apple device.
This device does not at all seem to be worth the price, especially considering the limitations it has. What a waste of hardware.
I would assume that you could port something from one of those other devices to work on yours but it really depends on how your hardware is designed compared to those devices.
Does your device have a typical bootloader like other android devices?
Is the bootloader unlocked?
If it is locked, can it be unlocked?
Does the device use fastboot or does it have a flash mode that is used with a specific PC flashtool?
If it is unlocked or if you can unlock it and it has a flash mode that can actually be used, you might be able to port a custom recovery from one of the devices you named then use that recovery to somehow root the device. If the device can't install android apps then it would probably involve using adb to root the device.
I DO NOT PROVIDE HELP IN PM, KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE
Droidriven said:
You must be an iPhone user that isn't familiar with android. Jailbreak in is an Apple thing, not an android thing.
In android it's called "rooting" and it isn't quite the same thing as jailbreaking an Apple device.
This device does not at all seem to be worth the price, especially considering the limitations it has. What a waste of hardware.
I would assume that you could port something from one of those other devices to work on yours but it really depends on how your hardware is designed compared to those devices.
Does your device have a typical bootloader like other android devices?
Is the bootloader unlocked?
If it is locked, can it be unlocked?
Does the device use fastboot or does it have a flash mode that is used with a specific PC flashtool?
If it is unlocked or if you can unlock it and it has a flash mode that can actually be used, you might be able to port a custom recovery from one of the devices you named then use that recovery to somehow root the device. If the device can't install android apps then it would probably involve using adb to root the device.
Click to expand...
Click to collapse
Thanks for suggesting a general principle! I just use the word jailbreaking not because I'm an iPhone user. What I actually want to do as the first step is not rooting an android system, but revealing it from the current customized linux system. Rooting is the next step if necessary. If the word choice is still not accurate and bothers you, I apologize.
It has apparently no typical bootloader, and neither PC nor adb recognize it as an android device. In fact, direct USB file transfer is blocked so I need to use Sony's designated software. But an android system surely coexists according to the hacker who already rooted it.
sartrism said:
Thanks for suggesting a general principle! I just use the word jailbreaking not because I'm an iPhone user. What I actually want to do as the first step is not rooting an android system, but revealing it from the current customized linux system. Rooting is the next step if necessary. If the word choice is still not accurate and bothers you, I apologize.
It has apparently no typical bootloader, and neither PC nor adb recognize it as an android device. In fact, direct USB file transfer is blocked so I need to use Sony's designated software. But an android system surely coexists according to the hacker who already rooted it.
Click to expand...
Click to collapse
Without some kind of way to flash or interface with the device there isn't much you can do.
I have a kindle fire HD that didn't come with a typical android system but does have a typical bootloader. The Amazon OS was removed and now it's full blown android but it required a "second" bootloader. You don't have a bootloader so I'm not sure what your options are with that device.
I DO NOT PROVIDE HELP IN PM, KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE
Droidriven said:
You must be an iPhone user that isn't familiar with android. Jailbreak in is an Apple thing, not an android thing.
In android it's called "rooting" and it isn't quite the same thing as jailbreaking an Apple device.
This device does not at all seem to be worth the price, especially considering the limitations it has. What a waste of hardware.
I would assume that you could port something from one of those other devices to work on yours but it really depends on how your hardware is designed compared to those devices.
Does your device have a typical bootloader like other android devices?
Is the bootloader unlocked?
If it is locked, can it be unlocked?
Does the device use fastboot or does it have a flash mode that is used with a specific PC flashtool?
If it is unlocked or if you can unlock it and it has a flash mode that can actually be used, you might be able to port a custom recovery from one of the devices you named then use that recovery to somehow root the device. If the device can't install android apps then it would probably involve using adb to root the device.
I DO NOT PROVIDE HELP IN PM, KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE
Click to expand...
Click to collapse
Jailbreaking is the process of modifying any electronic device in order to remove restrictions imposed by a manufacturer (Apple) or operator (to allow the installation of unauthorized software).
Rooting is the act of gaining access to the root account of a device (such as a smartphone or computer).
There is a huge difference between the two. You can't just say that rooting is Android's version of jailbreaking. Not accurate in the least.
https://www.androidpit.com/jailbreak-android
Sent from my SM-G928T using Tapatalk
MarkBell said:
Jailbreaking is the process of modifying any electronic device in order to remove restrictions imposed by a manufacturer (Apple) or operator (to allow the installation of unauthorized software).
Rooting is the act of gaining access to the root account of a device (such as a smartphone or computer).
There is a huge difference between the two. You can't just say that rooting is Android's version of jailbreaking. Not accurate in the least.
https://www.androidpit.com/jailbreak-android
Sent from my SM-G928T using Tapatalk
Click to expand...
Click to collapse
You're reading too much into what I said.
Basically, what I said was that jailbreaking isn't an android thing, it's an Apple thing(didn't say it was exclusively an Apple thing, just NOT an android thing). It applies to more than just Apple devices but on this website dedicated to mobile platforms, I'm only referring to its application in the mobile device world. For the mobile world it's pretty much only an Apple thing(still not exclusively but mostly so).
Then I said that in the android world it's called rooting(not exclusively an android thing, just NOT an Apple thing). And that jailbreaking and rooting aren't the same thing(this does not say that rooting is android's version of jailbreaking, that would imply that they are the same thing, I'm saying they aren't the same thing)
Basically, explaining what they "aren't", you explained what they "are".
I understand the difference, but thank you.
I DO NOT PROVIDE HELP IN PM, KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE
Droidriven said:
You're reading too much into what I said.
Basically, what I said was that jailbreaking isn't an android thing, it's an Apple thing(didn't say it was exclusively an Apple thing, just NOT an android thing). It applies to more than just Apple devices but on this website dedicated to mobile platforms, I'm only referring to its application in the mobile device world. For the mobile world it's pretty much only an Apple thing(still not exclusively but mostly so).
Then I said that in the android world it's called rooting(not exclusively an android thing, just NOT an Apple thing). And that jailbreaking and rooting aren't the same thing(this does not say that rooting is android's version of jailbreaking, that would imply that they are the same thing, I'm saying they aren't the same thing)
Basically, explaining what they "aren't", you explained what they "are".
I understand the difference, but thank you.
I DO NOT PROVIDE HELP IN PM, KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE
Click to expand...
Click to collapse
I tend to read too deeply into everything. It's the way I am. Lol.
Sent from my SM-G928T using Tapatalk
Could you please post some information about usb device? Just like PID & VID.
Do it like:
Connect DPT-RP1 to Linux, and then type this command 'lsusb'
P.S. Under Windows or MacOS system, you can find the information from system settings...
happy to help with simple things
thisvip said:
Could you please post some information about usb device? Just like PID & VID.
Do it like:
Connect DPT-RP1 to Linux, and then type this command 'lsusb'
P.S. Under Windows or MacOS system, you can find the information from system settings...
Click to expand...
Click to collapse
Bus 001 Device 008: ID 054c:0be5 Sony Corp.
It is good to see some people have been interested in this thread.
So far, I realized that the hacker used a hardware hacking method. I actually obtained the hacked system apps from one of his customer. I guess he did sometihng like directly modifying eMMC to root and put "USBDeviceSwitcher.apk" to allow an usual USB connection. Since I don't want to take such risk, I decided to wait until the first firmware to see if there could be an indirect way to penetrate the system files. But if you want to analyze the hacked system, contact me.
sartrism said:
It is good to see some people have been interested in this thread.
So far, I realized that the hacker used a hardware hacking method. I actually obtained the hacked system apps from one of his customer. I guess he did sometihng like directly modifying eMMC to root and put "USBDeviceSwitcher.apk" to allow an usual USB connection. Since I don't want to take such risk, I decided to wait until the first firmware to see if there could be an indirect way to penetrate the system files. But if you want to analyze the hacked system, contact me.
Click to expand...
Click to collapse
Does it have a web browser? Maybe you can utilize for example the Stagefright Exploit + DirtyC0W to get root.
I have found out some interesting stuff about the device with the help of the Digital Paper App.
The app is built using electron and there is a file: /Applications/Digital\ Paper\ App.app/Contents/Resources/app.asar
This file contains the electron javascript files, which handle all the communication with the device.
It can be extracted with: sudo asar extract app.asar output
(github_com/electron/asar)
This also requires node to be installed: with e.g. brew install node (changelog_com/posts/install-node-js-with-homebrew-on-os-x)
The app communicates with the device via Restlet-Framework/2.3.7 on port 8443 with tcp (no matter if it is the bluetooth, wifi or usb connection).
This is the only port that is open.
In the file: /Applications/Digital\ Paper\ App.app/Contents/Resources/output/node_modules/mw-error/lib/codeparams.js you can find all the relative paths, which are getting called during e.g. file transfer, firmware update and stuff.
Running the app and placing breakpoints reveals that before you can transfer files and stuff:
'/auth'
'/auth/nonce/'
are called in order to authenticate, which looks e.g. like url digitalpaper.local:8443/auth/nonce/1e9ee24d-6613-433a-9770-76b04333ac95
the last part of the call is the "client_id": "1e9ee24d-6613-433a-9770-76b04333ac95", which is retrieved via the url digitalpaper.local:8443/auth call.
digitalpaper.local:8443/auth/
Important:
In /Applications/Digital\ Paper\ App.app/Contents/Resources/output/lib/config.js
change the line
config.DEVBUILD = false;
to
config.DEVBUILD = true;
After you finished your modifications you have pack the output folder again:
sudo asar pack output app.asar
I did not have time to continue, but the following relative urls look promising (especially recovery_mode):
'/testmode/auth/nonce',
'/testmode/auth',
'/testmode/launch',
'/testmode/recovery_mode',
'/testmode/assets/{}',
mcplectrum said:
I have found out some interesting stuff about the device with the help of the Digital Paper App.
The app is built using electron and there is a file: /Applications/Digital\ Paper\ App.app/Contents/Resources/app.asar
This file contains the electron javascript files, which handle all the communication with the device.
It can be extracted with: sudo asar extract app.asar output
(github_com/electron/asar)
This also requires node to be installed: with e.g. brew install node (changelog_com/posts/install-node-js-with-homebrew-on-os-x)
The app communicates with the device via Restlet-Framework/2.3.7 on port 8443 with tcp (no matter if it is the bluetooth, wifi or usb connection).
This is the only port that is open.
In the file: /Applications/Digital\ Paper\ App.app/Contents/Resources/output/node_modules/mw-error/lib/codeparams.js you can find all the relative paths, which are getting called during e.g. file transfer, firmware update and stuff.
Running the app and placing breakpoints reveals that before you can transfer files and stuff:
'/auth'
'/auth/nonce/'
are called in order to authenticate, which looks e.g. like url digitalpaper.local:8443/auth/nonce/1e9ee24d-6613-433a-9770-76b04333ac95
the last part of the call is the "client_id": "1e9ee24d-6613-433a-9770-76b04333ac95", which is retrieved via the url digitalpaper.local:8443/auth call.
digitalpaper.local:8443/auth/
Important:
In /Applications/Digital\ Paper\ App.app/Contents/Resources/output/lib/config.js
change the line
config.DEVBUILD = false;
to
config.DEVBUILD = true;
After you finished your modifications you have pack the output folder again:
sudo asar pack output app.asar
I did not have time to continue, but the following relative urls look promising (especially recovery_mode):
'/testmode/auth/nonce',
'/testmode/auth',
'/testmode/launch',
'/testmode/recovery_mode',
'/testmode/assets/{}',
Click to expand...
Click to collapse
Hope you get some result from wifi side. I also realized they use the port 8443 but couldn't get further as you.
For whom trying to hack it, here is the link for the already 'hacked' system apps (including the original files) - that of the famous hacked RP1 video. Inside the subfolder S1, there are also the hacked system apps for DPT-S1 just in case.
https://www.dropbox.com/sh/dvtvokdzrgwjc83/AACXOJA-E56nUpUfiWUOzrM3a?dl=0
George Malas said:
Does it have a web browser? Maybe you can utilize for example the Stagefright Exploit + DirtyC0W to get root.
Click to expand...
Click to collapse
The stock device has no web browser, no sd-card, no usb connection, and no typical system. I think SONY was haunted by some security issues maybe because they thought the major users are lawyers or very important people? lol
Any chance to create a buffer overflow PDF to attack RP1's pdf reader?
I am unable to help, but wanted to let you know I am definitely interested in and supportive of this. If this device can be unlocked as suggested in that one youtube video then I would buy it, despite the steep price.
jess91 said:
I am unable to help, but wanted to let you know I am definitely interested in and supportive of this. If this device can be unlocked as suggested in that one youtube video then I would buy it, despite the steep price.
Click to expand...
Click to collapse
If you're interested and supportive of this then go buy one anyway and apply yourself to going forward figuring out how to get it done. Other than that, you're not supportive, you're just hopeful that someone figures it out and then you'll probably go get one.
DO NOT CONTACT ME VIA PM TO RECEIVE HELP, YOU WILL BE IGNORED. KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE
Hey guys,
I also recently got the RP1 and am also looking for ways to mod it. Big kudos and thanks to all of you for posting this! This alread is amazing. @sartrism: can you maybe give me a hint how to load the files on the rp1? Sorry if this might be a stupid question but I'm new to adroid and that stuff.
Paderico said:
Hey guys,
I also recently got the RP1 and am also looking for ways to mod it. Big kudos and thanks to all of you for posting this! This alread is amazing. @sartrism: can you maybe give me a hint how to load the files on the rp1? Sorry if this might be a stupid question but I'm new to adroid and that stuff.
Click to expand...
Click to collapse
Just a little update from my side. I'm currently tryng to recreate the steps @mcplectrum was using. It seems that my RP1 also uses other ports. I tried to wireshark the USB and WiFi connection. By that I saw that often GET /registration/information is called for Host: localhost:58052. Moreover the first call is GET /register/serial_number also on port 5808. This was via USB.
Trying to trigger the /auth/ call via Telnet returns nothing unfortunately. But also the 8080 port is open. Trying to call digitalpaper.local:8443/auth/ returns nothing on firefox.
@mcplectrum: how did you get the client_id and what would one need that for?
I also tried to change the config.DEVBUILD to true but that seemed to change nothing at all.
So to sum up what we know:
The device is using some kind of android structure, the source code seems to use the uboot bootloader, all communication is done by a rest restlet framework. So actually there should be some kind of way to use the restlet framework to PUT or POST the modified files.
The other option would be directly flash the eMMC right? I would take the risk and just load it on my device and see what happens. Any hints on how to do that?