Related
Currently I am on stock OOS with a locked bootloader and I heard that when you unlock the bootloader the DRM gets downgraded to L3.
Is this correct and does it go back to L1 if you relock the bootloader?
Also, is there a hack of some sort that allows the device to continue using L1 DRM with an unlocked bootloader?
L1 not working
I unlocked bootloader and then relocked it again but it is still showing L3 what should i do
Hey check this -> https://forums.oneplus.com/threads/closed-widevine-drm-on-op6.815683/page-2#post-18476836
You can try to flash magisk to pass the saftynet and hide netflix/amazon prime video to try HD content
edit:
My OnePlus 6 with unlocked bootloader and I have DRM lvl 3
Pundy said:
Hey check this -> https://forums.oneplus.com/threads/closed-widevine-drm-on-op6.815683/page-2#post-18476836
You can try to flash magisk to pass the saftynet and hide netflix/amazon prime video to try HD content
edit:
My OnePlus 6 with unlocked bootloader and I have DRM lvl 3
Click to expand...
Click to collapse
Ok so it is reversible
But there is no way to get L1 with an unlocked bootloader?
ThePiGuy said:
Ok so it is reversible
But there is no way to get L1 with an unlocked bootloader?
Click to expand...
Click to collapse
What I've seen by now, no it's not possible.
Pundy said:
What I've seen by now, no it's not possible.
Click to expand...
Click to collapse
Ah ok that's unfortunate
I'll probably stay with official OOS for the moment anyway, but thanks for the info
So, has anyone tried OOS 5.1.6 and the fastboot locked bootloader bug to backup and restore the DRM keys while locked or to use Magisk root while on 5.1.6 locked bootloader and see if L1 keys are retained?
driverdis said:
So, has anyone tried OOS 5.1.6 and the fastboot locked bootloader bug to backup and restore the DRM keys while locked or to use Magisk root while on 5.1.6 locked bootloader and see if L1 keys are retained?
Click to expand...
Click to collapse
There's another thread in this forum that poses that exact question. No one to date has succeeded and I'm not sure it's even possible using the 5.6 boot exploit because Widevine calls home every time it proxies protected content.
I suggested chipping in on a bounty that would go to whomever can find a way to get L1 on a OP6 with its' bootloader unlocked using a method that would be successful with ROMs based on OOS, LOS and AOSP. I figured a little financial incentive could provide some motivation, but nobody else seemed willing to contribute. ?
TuxRuffian said:
There's another thread in this forum that poses that exact question. No one to date has succeeded and I'm not sure it's even possible using the 5.6 boot exploit because Widevine calls home every time it proxies protected content.
I suggested chipping in on a bounty that would go to whomever can find a way to get L1 on a OP6 with its' bootloader unlocked using a method that would be successful with ROMs based on OOS, LOS and AOSP. I figured a little financial incentive could provide some motivation, but nobody else seemed willing to contribute.
Click to expand...
Click to collapse
Since I need L1 on an unlocked bootloader, I ended up getting a Moto Z3 Play despite it being slower since Widevine L1 stays regardless of bootloader state or Magisk being installed.
Today I did a stupid thing, I unlocked the bootloader, and only then found out that because of this I can not watch Netflix in HD, so I blocked the bootloader again, but Widevine still indicates L3, am I doing something wrong?
Is the device rooted?
CurlyApple said:
Is the device rooted?
Click to expand...
Click to collapse
No, now it's full stock with locked bootloader.
Edit #1
I just tried flashing the system via Msm Tool, it didn't change anything, it's still Widevine L3
Sounds strange. I've unlocked and relocked the bootloader a couple of times and it always restored DRM L1 ?
Is it possible that I can't go back to L1 because of flashed persist.img in fastboot?
yeah, just reflash the original one or use mdm download tool
matze19999 said:
yeah, just reflash the original one or use mdm download tool
Click to expand...
Click to collapse
That's the problem, I don't have the original persist.img from my phone.
I also tried to unlock the bootloader and use the MsmDownload Tool, but it did nothing, I made a mistake after unlocking the bootloader, I did not know how to go back to stock and how to use msm download tool, so I used the fastboot package in which it was persist.img, I don't know what to do, I have blocked bootloader and Widevine L3
Rayekk said:
That's the problem, I don't have the original persist.img from my phone.
I also tried to unlock the bootloader and use the MsmDownload Tool, but it did nothing, I made a mistake after unlocking the bootloader, I did not know how to go back to stock and how to use msm download tool, so I used the fastboot package in which it was persist.img, I don't know what to do, I have blocked bootloader and Widevine L3
Click to expand...
Click to collapse
I Also Unlocked & Relocked BL of my 7 Pro many times (used MSM Tool for reverting), It simply reverts back to L1, without any issues
aaryan45 said:
I Also Unlocked & Relocked BL of my 7 Pro many times (used MSM Tool for reverting), It simply reverts back to L1, without any issues
Click to expand...
Click to collapse
Maybe, but in my case it doesn't work that way, I don't know why, maybe it's because I flashed persist.img that doesn't come from my phone
I wrote to support about my problem, they told me to send the phone back to the repair service, so I did, the phone came back to me after a week with a flashing system again, but Widevine still indicates L3, what should I do now? please help
I have the same problem as well
Kshysiek said:
I have the same problem as well
Click to expand...
Click to collapse
Reflashed phone several times after rooting with msm and it predictably restored l1 everytime
misterSTV said:
Reflashed phone several times after rooting with msm and it predictably restored l1 everytime
Click to expand...
Click to collapse
My current OnePlus works exactly like that, but the previous model I wrote about in this thread had an incorrect persist partition, for my fault of course, I unnecessarily flashed it through fastboot, I didn't know about MSM at the time. I learned that the persist partition is responsible for DRM keys, when it is changed or damaged the phone irretrievably loses widevine L1.
Rayekk said:
My current OnePlus works exactly like that, but the previous model I wrote about in this thread had an incorrect persist partition, for my fault of course, I unnecessarily flashed it through fastboot, I didn't know about MSM at the time. I learned that the persist partition is responsible for DRM keys, when it is changed or damaged the phone irretrievably loses widevine L1.
Click to expand...
Click to collapse
I have same issue help plzzz
Rayekk said:
Today I did a stupid thing, I unlocked the bootloader, and only then found out that because of this I can not watch Netflix in HD, so I blocked the bootloader again, but Widevine still indicates L3, am I doing something wrong?
Click to expand...
Click to collapse
Hi bro, have you fixed it ? I have the same problem with my 8T
Is it possible to root the USA unlocked oneplus 8 and also keep widevine L1 for HD Netflix?
Zwillmaster1 said:
Is it possible to root the USA unlocked oneplus 8 and also keep widevine L1 for HD Netflix?
Click to expand...
Click to collapse
All not just us phones lose L1 status when you unlock the bootloader
No fix?
10.5.10 adds L1 back on BL unlock/root.
TheKnux said:
10.5.10 adds L1 back on BL unlock/root.
Click to expand...
Click to collapse
Can anyone confirm? I am on 10.5.10 and have l3 widevine with root. Any special steps taken to get it working?
Widevine L1 , OnePlus 8 with version 10.5.8.IN21BA
Edit: Sorry, I hadn't read about unlock / root
Enviado desde mi IN2010 mediante Tapatalk
i have 10.5.10/in21aa
with root and it does work in Widevine L1 full hd + hdr
To add to this I had to reinstall Netflix after the system update for Widevine to change to L1.
mrkoa said:
i have 10.5.10/in21aa
with root and it does work in Widevine L1 full hd + hdr
Click to expand...
Click to collapse
How you've done this?
yot2703 said:
How you've done this?
Click to expand...
Click to collapse
i have done nothing it was not working on first day after i patched img for root it wouldn't allow me to update netflix from google then all of sudden it started to update and worked
I know this is a bit OT, but does anyone have a stock boot.img of 10.5.10 for IN21AA preferably for the IN2017?
mrkoa said:
i have 10.5.10/in21aa
with root and it does work in Widevine L1 full hd + hdr
Click to expand...
Click to collapse
Can you tell your steps? I had unlocked and it showed L3 on drm info app. Can you check on that app too?
Did you do any flashing using msm tool etc?
vmurali69 said:
Can you tell your steps? I had unlocked and it showed L3 on drm info app. Can you check on that app too?
Did you do any flashing using msm tool etc?
Click to expand...
Click to collapse
I was in the same boat as you. Once I unlocked it showed Widevine L3 (I didn't check if it was L1 before though).
But strangely after I rooted it with Magisk, installed the "MagiskHide Props Config" module to pass ctsProfile, it now shows Widevine L1.
I don't know if it was the root or the module that made it turn back to L1. Or maybe it just needed a restart in order to fix itself ?
Maybe try to restart your phone or to do the same steps I did (rooting + install MagiskHide Props Config module) and see if it works.
Chrisgia said:
Maybe try to restart your phone or to do the same steps I did (rooting + install MagiskHide Props Config module) and see if it works.
Click to expand...
Click to collapse
Can tell the prop used? I mean which device in the config.
vmurali69 said:
Can tell the prop used? I mean which device in the config.
Click to expand...
Click to collapse
I didn't even touch the config. Only installed the module
Chrisgia said:
I didn't even touch the config. Only installed the module
Click to expand...
Click to collapse
Thanks a lot. That worked!
vmurali69 said:
Thanks a lot. That worked!
Click to expand...
Click to collapse
Glad it worked ! Still strange that this fixes the problem lol
Not related to root, but thanks to this thread I've just noticed I have widevine L1, despite having an unlocked bootloader. TMO device converted to international, DP3 not rooted
Yep, L1 here with unlocked BL...
NikoZBK said:
Not related to root, but thanks to this thread I've just noticed I have widevine L1, despite having an unlocked bootloader. TMO device converted to international, DP3 not rooted
Click to expand...
Click to collapse
Can you tell me how you converted the phone to international? Just by flashing the EU rom? Or something else?
There is some sort of weird magic where unlocking the bootloader instantly breaks Widevine but locking it again fixes it.
How does that even work? How is it possible that NOBODY has figured out how to fix Widevine with an unlocked bootloader? You can emulate anything in software, right? Surely the information must be retained on the device somewhere if relocking the bootloader brings it back?
Is there still no solution to this? (please provide a more detailed answer than "it's not possible")
There is no way to hide a unlocked bootloader and because of that, it's not possible to have widevine l1 with an unlocked bootloader.
matze19999 said:
There is no way to hide a unlocked bootloader and because of that, it's not possible to have widevine l1 with an unlocked bootloader.
Click to expand...
Click to collapse
What do you mean there's no way to hide it? I don't think OnePlus uses like hardware secure environment stuff, especially because the 7 Pro doesn't have hardware backed SafetyNet...
@LoganDark Only OnePlus can fix it, at first 8 series didn't had Widevine L1 while having unlocked bootloader, OnePlus patched it in 10.5.11 (8) & 10.5.13 (8Pro) specifically, so ya the answer is Only OnePlus fix/patch it & they should do it for 7 Series as well IMO!
aaryan45 said:
@LoganDark Only OnePlus can fix it, at first 8 series didn't had Widevine L1 while having unlocked bootloader, OnePlus patched it in 10.5.11 (8) & 10.5.13 (8Pro) specifically, so ya the answer is Only OnePlus fix/patch it & they should do it for 7 Series as well IMO!
Click to expand...
Click to collapse
I mean, OnePlus can do it but that doesn't necessarily mean that nobody else can, right? I'm curious to know where these claims came from, that it's completely impossible to fake a locked bootloader...
My best guess is that the unlocked state of the bootloader prevents it from sharing the widevine keys with Android (something like that), but it should be possible to extract those keys if they are stored in such a way that relocking the bootloader restores L1 functionality. That is, of course, only possible if they aren't locked away with TrustZone or similar.
I hope the 7 series continues to receive updates and attention because it's the only good phone on the market right now with no notch or screen cutout. Nothing else compares... But since OnePlus is already starting to leave it out of OxygenOS beta tests, I feel EOL is not too far away. :/
I doubt they will add any new features or fix any functionality like Widevine support... They will just backport code they write for newer devices, until the update window is over.
LoganDark said:
I mean, OnePlus can do it but that doesn't necessarily mean that nobody else can, right? I'm curious to know where these claims came from, that it's completely impossible to fake a locked bootloader...
My best guess is that the unlocked state of the bootloader prevents it from sharing the widevine keys with Android (something like that), but it should be possible to extract those keys if they are stored in such a way that relocking the bootloader restores L1 functionality. That is, of course, only possible if they aren't locked away with TrustZone or similar.
I hope the 7 series continues to receive updates and attention because it's the only good phone on the market right now with no notch or screen cutout. Nothing else compares... But since OnePlus is already starting to leave it out of OxygenOS beta tests, I feel EOL is not too far away. :/
I doubt they will add any new features or fix any functionality like Widevine support... They will just backport code they write for newer devices, until the update window is over.
Click to expand...
Click to collapse
I did some research on widevine L1 on unlocked bootloader and if I'm not wrong,
liboemcrypto.so is the file which needs to be patched!
aaryan45 said:
I did some research on widevine L1 on unlocked bootloader and if I'm not wrong,
liboemcrypto.so is the file which needs to be patched!
Click to expand...
Click to collapse
Yeah, that might be the case, but the hard part is figuring out what patch to apply.
Possible sure, but this isn't really something you can just spoof or emulate through software.
This is very complicated things, both of a software and hardware level. Really the only people who discovers exploits of this are responsible security researchers who disclose this to Qualcomm and Google. Which I don't blame them for, they get a pretty juicy bounty.
I guess you can hope OnePlus messes up like they did for OP8/Pro and accidentally(?) enable L1 for unlocked bootloaders, but I am pretty sure they just implemented TEE differently to actually do that.
If you're curious, here;
https://googleprojectzero.blogspot.com/2017/07/trust-issues-exploiting-trustzone-tees.html?m=1
https://research.checkpoint.com/2019/the-road-to-qualcomm-trustzone-apps-fuzzing/
Lossyx said:
Possible sure, but this isn't really something you can just spoof or emulate through software.
This is very complicated things, both of a software and hardware level. Really the only people who discovers exploits of this are responsible security researchers who disclose this to Qualcomm and Google. Which I don't blame them for, they get a pretty juicy bounty.
I guess you can hope OnePlus messes up like they did for OP8/Pro and accidentally(?) enable L1 for unlocked bootloaders, but I am pretty sure they just implemented TEE differently to actually do that.
If you're curious, here;
https://googleprojectzero.blogspot.com/2017/07/trust-issues-exploiting-trustzone-tees.html?m=1
https://research.checkpoint.com/2019/the-road-to-qualcomm-trustzone-apps-fuzzing/
Click to expand...
Click to collapse
So it is implemented with complicated hardware stuff?
Okay, well, the only way to get L1 back is to lock the bootloader again. I know that now. All L1 stuff is handled in hardware. I'm working on a solution for custom ROMs and rooted OOS though, stay tuned
LoganDark said:
Okay, well, the only way to get L1 back is to lock the bootloader again. I know that now. All L1 stuff is handled in hardware. I'm working on a solution for custom ROMs and rooted OOS though, stay tuned
Click to expand...
Click to collapse
That sounds interesting. Can I help you with that?
sToRm1nG said:
That sounds interesting. Any way I could help you with that?
Click to expand...
Click to collapse
Yes, you can definitely help - the main blocker for me is that this is my daily driver so I haven't done anything in months, but if you're willing to be my "guinea pig" for a while, that would be a huge help.
LoganDark said:
Yes, you can definitely help - the main blocker for me is that this is my daily driver so I haven't done anything in months, but if you're willing to be my "guinea pig" for a while, that would be a huge help.
Click to expand...
Click to collapse
I'll be switching from my OP7Pro to my new OP8Pro shortly. So I'll be able to test what ever you need.
Do you think this research will also be applicable to the OP8Pro?
sToRm1nG said:
I'll be switching from my OP7Pro to my new OP8Pro shortly. So I'll be able to test what ever you need.
Click to expand...
Click to collapse
Niiiice~ Contact me on Discord: LoganDark#4357
sToRm1nG said:
Do you think this research will also be applicable to the OP8Pro?
Click to expand...
Click to collapse
Honestly I'm not sure. I haven't even confirmed if L1 will come back on the OP7Pro. It's just a rumor, after all, and I think OnePlus spent literally all of their benevolence on the 7.
Edit: It looks like OP might have made it so that the OP8 still has L1 even with an unlocked bootloader. Major oof
LoganDark said:
Niiiice~ Contact me on Discord: LoganDark#4357
Honestly I'm not sure. I haven't even confirmed if L1 will come back on the OP7Pro. It's just a rumor, after all, and I think OnePlus spent literally all of their benevolence on the 7.
Edit: It looks like OP might have made it so that the OP8 still has L1 even with an unlocked bootloader. Major oof
Click to expand...
Click to collapse
Yeah there is still a chance to get L1 with an unlocked bootloader on the OP8Pro though I'm not part of the lucky ones.
I'll contact you ASAP.
This is big for me, I was just watching Prime and saw 1080p HD on the overlay.
I checked DRM info to find I am on L1.
I am rooted obviously with an unlocked bootloader.
7T 256gB
OP7T_O2_BETA_3.
Amazing.
Tagtag123 said:
This is big for me, I was just watching Prime and saw 1080p HD on the overlay.
I checked DRM info to find I am on L1.
I am rooted obviously with an unlocked bootloader.
7T 256gB
OP7T_O2_BETA_3.
Amazing.
Click to expand...
Click to collapse
Did you unlock boot loader freshly after you updated to beta 3 or u were unlocked before that?
antonyben006 said:
Did you unlock boot loader freshly after you updated to beta 3 or u were unlocked before that?
Click to expand...
Click to collapse
Was unlocked from day 1 of using the device. Installed OB3 and noticed prime play 1080p. Checked DRM Info to see I have got L1, checked Netflix(it still showed L3, so I cleared cache and then it showed L1).
I've seen people managed to have l1 certification with unlocked bootloader with the oos 11 ob 3 or newer than that even with custom rom. It seemed so simple that I've tried it myself
but then when I was in oos 11 with bootloader unlocked, the widevine was still l3.
I even went as far as installing fresh oos 10 with msm tool, unlock the bootloader and then immediately install twrp, flash oos 11 ob4/stable 11.0.0.0/stable 11.0.0.2 + dfe + magisk, turned on magisk hide but unfortunately it was still in l3, and whenever I locked the bootloader it always successfully went back to l1..
Can someone please tell me the step by step instruction to gain l1 on unlocked bootloader ?
I got the oneplus 7 pro 1910 chinese version 128/6
Griffiths_Anna said:
I've seen people managed to have l1 certification with unlocked bootloader with the oos 11 ob 3 or newer than that even with custom rom. It seemed so simple that I've tried it myself
but then when I was in oos 11 with bootloader unlocked, the widevine was still l3.
I even went as far as installing fresh oos 10 with msm tool, unlock the bootloader and then immediately install twrp, flash oos 11 ob4/stable 11.0.0.0/stable 11.0.0.2 + dfe + magisk, turned on magisk hide but unfortunately it was still in l3, and whenever I locked the bootloader it always successfully went back to l1..
Can someone please tell me the step by step instruction to gain l1 on unlocked bootloader ?
I got the oneplus 7 pro 1910 chinese version 128/6
Click to expand...
Click to collapse
Got L1 on OOS 11 rooted
I've successfully reverted back to stock rom using the rescue software but couldn't figure out how to relock the bootloader. Could anyone post a tutorial on it?
raiprasant62 said:
I've successfully reverted back to stock rom using the rescue software but couldn't figure out how to relock the bootloader. Could anyone post a tutorial on it?
Click to expand...
Click to collapse
Fastboot mode => fastboot flashing lock
Will I get widevine L1 support back if I relock bootloader? And will I be able to unlock it again?
raiprasant62 said:
Will I get widevine L1 support back if I relock bootloader?
Click to expand...
Click to collapse
I don't know
raiprasant62 said:
And will I be able to unlock it again?
Click to expand...
Click to collapse
yes
@raiprasant62 it is VERY CRITICAL that you have the correct stock ROM variant for your model installed before relocking bootloader or it'll lock and give a corrupt device warning and fail to boot!!!!
The ONLY safe way to relock bootloader is to use Motorola Rescue and Smart Assistant tool and then boot into the ROM and then attempt relocking
Has anyone successfully relocked the phone and checked Widevine L1 status after relock?
I read somewhere here that once unlocked.. this phone can never get L1 back and is stuck on L3 forever. But I can't find where. I wonder if it's speculation or has anyone actually tried it?
JonW434 said:
Has anyone successfully relocked the phone and checked Widevine L1 status after relock?
I read somewhere here that once unlocked.. this phone can never get L1 back and is stuck on L3 forever. But I can't find where. I wonder if it's speculation or has anyone actually tried it?
Click to expand...
Click to collapse
is there a fully working TWRP build available for this device which can backup /data? if yes then backup your data -> relock the bootloader -> boot into system and see what will happen.
As far as I know, there's no working TWRP currently, but I will keep looking. I haven't seen anyone talk about using it.
I did find this, from here, but I haven't found anyone talk about the pros and cons or if it worked or not. My phone hasn't been unlocked yet, because I'm unsure if I will get L1 back if I ever relock it. If I unlock it, I'll test a few of the ROMS on here out and see what happens.
JonW434 said:
I did find this, from here, but
Click to expand...
Click to collapse
that's all I could find, too. but it's unclear if it's able to decrypt & backup /data.
I assume it would be possible to bring back L1 since it depends on your verified boot state. it's like the Play Store certification I think.
@JonW434 I have heard users on Telegram saying that yes relocking bootloader that WV L1 does come back on Motorola devices
ThE_MarD said:
@JonW434 I have heard users on Telegram saying that yes relocking bootloader that WV L1 does come back on Motorola devices
Click to expand...
Click to collapse
Yeah it seems so.
Like you said in post #5, it seems the most important thing is to make sure to have correct version of stock rom installed for correct model. Outside of that, it just seems there aren't many people relocking in order to confirm it. But it seems like it should work like with any other phones. I've seen other Motorola users (for other models) that it relocks fine. I'm not sure where it came from that this phone can't do that, maybe it was a misunderstanding.
JonW434 said:
I'm not sure where it came from that this phone can't do that, maybe it was a misunderstanding.
Click to expand...
Click to collapse
some Moto's will never get back the state of "oem_locked" once they were unlocked. maybe that's the reason. but it doesn't effect the verfied boot state.
WoKoschekk said:
some Moto's will never get back the state of "oem_locked" once they were unlocked. maybe that's the reason. but it doesn't effect the verfied boot state.
Click to expand...
Click to collapse
Interesting. I've been outside the world of Android stuff for a few years and have been relearning everything, or some new things that have changed.
Is there a way to check the state of these things via an app or rooted file explorer or are this things inaccessible to us, in terms of modifying or viewing them?
JonW434 said:
Interesting. I've been outside the world of Android stuff for a few years and have been relearning everything, or some new things that have changed.
Is there a way to check the state of these things via an app or rooted file explorer or are this things inaccessible to us, in terms of modifying or viewing them?
Click to expand...
Click to collapse
on your fastboot screen bottom left: oem_locked, flashing_unlocked or flashing_locked
JonW434 said:
Has anyone successfully relocked the phone and checked Widevine L1 status after relock?
I read somewhere here that once unlocked.. this phone can never get L1 back and is stuck on L3 forever. But I can't find where. I wonder if it's speculation or has anyone actually tried it?
Click to expand...
Click to collapse
I don't know how to check that but after relock I was able to use Google wallet without any hacks. Also unlock again was not a problem. Now I am on stock 13 ROM rooted. That works good for me.