So I've read a lot about the ruu's and ph98img's being signed. I was just wondering if anyone knew how exactly they were signed. Looking in the zip there are a lot of .img files which I assume are disk images and no other files contain anything resembling a signature. Just curious how secure the ph98img's really are(how can we be sure they are from htc)? Figured maybe a dev or someone might understand it better.
I had issues so used the "official" ics ruu file to restore and hoping it doesn't mess up ota's and was in fact the official release.
esheesle said:
So I've read a lot about the ruu's and ph98img's being signed. I was just wondering if anyone knew how exactly they were signed. Looking in the zip there are a lot of .img files which I assume are disk images and no other files contain anything resembling a signature. Just curious how secure the ph98img's really are(how can we be sure they are from htc)? Figured maybe a dev or someone might understand it better.
I had issues so used the "official" ics ruu file to restore and hoping it doesn't mess up ota's and was in fact the official release.
Click to expand...
Click to collapse
technically anybody can use a program like Winrar or 7zip to replace any of the files inside a PH98IMG.zip so you'll just have to trust the source.
Tachi91 said:
technically anybody can use a program like Winrar or 7zip to replace any of the files inside a PH98IMG.zip so you'll just have to trust the source.
Click to expand...
Click to collapse
So the comments about them being signed is false? Thought with locked bootloader some validation was done?
esheesle said:
So the comments about them being signed is false? Thought with locked bootloader some validation was done?
Click to expand...
Click to collapse
I should've been more specific.
With a Locked/S-ON bootloader .img files not signed by HTC will NOT flash and the bootloader will fall back to the options.
With a Unlocked/S-ON bootloader you have rw access with fastboot. But Kernels can only be flashed via fastboot or hboot. Before S-OFF ROMs came with their kernel in a PH98IMG file that would be flashed after recovery rebooted.
With S-OFF all checks are off hence "Security-OFF" and you can now full brick the phone if your not careful.
The actual .zip itself isn't really signed but whats in it is.
esheesle said:
So I've read a lot about the ruu's and ph98img's being signed. I was just wondering if anyone knew how exactly they were signed. Looking in the zip there are a lot of .img files which I assume are disk images and no other files contain anything resembling a signature. Just curious how secure the ph98img's really are(how can we be sure they are from htc)? Figured maybe a dev or someone might understand it better.
I had issues so used the "official" ics ruu file to restore and hoping it doesn't mess up ota's and was in fact the official release.
Click to expand...
Click to collapse
A signature isn't a file you can open and look as its encrypted and somewhere in the system.img or boot.img files. Not really sure. When you use the android kitchen to make a custom ROM it has a way of signing a ROM so that you can flash it, I believe as you are using a custom recovery it doesn't require HTC's signature so the generic android one works. Or something to that effect. You can also modify the framework if you properly decompile and compile the files properly which then don't require a signature as you are just placing them back into in the framework which is already signed.
Related
Someone who has done the whole DI01 update, please dump their system for me, or just the framework folder, apparently the one given to me had the stock android lockscreen patch applied to it lol.
Aside from that, the DI01 deodex works perfect, I opt_png'ed and zip_align'ed all the apk's, as well as the framework-res and twframework-res.
I will also need someone who knows how to sign updater-scripts to open the one attached, and just save it again properly and upload it for me. I am trying to get a flashable CW zip but the darn thing always gives me a status 6 error, which means the CW cannot read the updater script.
Sorry for the n00b question, but what benifit does deodexing provide? Also if there is another software update will I have to readd any .apk's to my /system folder?
Why not just flash your own system back to stock, then run the update, then dump /system? If you'd like an update script that doesn't update modem.bin, I already have one.
Assuming you're updating via CWM, why are you signing the zip? You don't need any signature, just zip the file up.
Is there anything involved in a dump besides just copying the files in /system?
namebrandon said:
Why not just flash your own system back to stock, then run the update, then dump /system? If you'd like an update script that doesn't update modem.bin, I already have one.
Assuming you're updating via CWM, why are you signing the zip? You don't need any signature, just zip the file up.
Click to expand...
Click to collapse
Because I am too lazy to go through all that.
I don't need it signed per say. More like opened, edited, and saved properly. It is said it is best to edit the update script in s Linux based environment which I don't have, but that notepad should suffice, yet when I save it with my notepad, I get the error of cw not being able to read it properly.
I have a fresh phone that just got the D101 update. Just need directions on what if anything is involved beyond just getting the /system directory via adb.
s44 said:
I have a fresh phone that just got the D101 update. Just need directions on what if anything is involved beyond just getting the /system directory via adb.
Click to expand...
Click to collapse
That is all I need. The only things I deodex are the contents of system/app and system/framework.
frostman89 said:
I don't need it signed per say. More like opened, edited, and saved properly. It is said it is best to edit the update script in s Linux based environment which I don't have, but that notepad should suffice, yet when I save it with my notepad, I get the error of cw not being able to read it properly.
Click to expand...
Click to collapse
Try a real editor, like bluefish or something.. Those scripts look like sh#! in notepad.
If no one has done it by tonight, just grab me on IRC and I'll do it under Linux for you.
Make sure you've got the file/directory structure right too.. You can't just throw a script in a zip file, but I'm sure you knew that. Myself and and a few others had the wrong directory structure at first, don't remember what error number that gave us though.. I think it just froze.
OK, how can I get it to you? I can't post links or (I think) files yet.
s44 said:
OK, how can I get it to you? I can't post links or (I think) files yet.
Click to expand...
Click to collapse
You can just zip it up and upload it to mediafire.com
Just splice up the link like WWW. Website. Com and I will just delete the spaces.
Mediafire upload just not working for some reason. Hm.
s44 said:
Mediafire upload just not working for some reason. Hm.
Click to expand...
Click to collapse
http://multiupload.com/
J1HDKEGYAR at multiupload
Does anyone know any way of opening the dell provided .pkg files , not ways how to install them on mobile , but to open them and extract the files included in it , in Windows , Linux or MacOSX?
tnx
I think TheManii knows the exact way but it involves flashing the pkg to your streak and pulling the battery out at the proper time. The extracted files will be in your LOST.DIR directory on your sim card. A pkg is encrypted and it takes flashing the file to decrypt it.
At least it goes something like that anyway.
lordmorphous said:
I think TheManii knows the exact way but it involves flashing the pkg to your streak and pulling the battery out at the proper time. The extracted files will be in your LOST.DIR directory on your sim card. A pkg is encrypted and it takes flashing the file to decrypt it.
At least it goes something like that anyway.
Click to expand...
Click to collapse
Thank you, interesting indeed this encryption , do you have more info about this process ?
http://mirror2.streakdroid.com/manii/<rom version>/update.zip are the decrypted pkgs
The pkgs can only be decrypted by the stock recoveries, noone's bothered reversing them to find the encryption algo.
TheManii said:
http://mirror2.streakdroid.com/manii/<rom version>/update.zip are the decrypted pkgs
The pkgs can only be decrypted by the stock recoveries, noone's bothered reversing them to find the encryption algo.
Click to expand...
Click to collapse
Thank you, are those ALL the files included in the corresponding .pkg?
Which is the right procedure to extract them, during installation or post ?
Any info about the process is very much appreciated as i am willing to try to decipher and recreate a working .pkg
tnx
The update.zips are completely unmodified, only thing that's been done is run though the stock rec to decrypt.
The safe way to decrypt them on your own is to load the wrong stock rec so it will fail at the first step in the update script. (It checks to see that your rec is the right region so it doesnt install a different region rom)
Afterwards a file will be dumped into <sdcard>\lost.dir, it's the decrypted pkg + garbage from the end of the last memory block. The zips themselves are the same size as the pkg.
There's no real point to making your own pkgs as the only thing it'd do is allow you to install it on a stock rec, but knowing how the encryption works is still useful.
This is even more true on the s10 as it uses pkgs, but they're encrypted differently and these steps dont work on it. I've yet to get a dump from those. All I can do is make nvflash dumps immediately after installing.
Does anyone have the orginal like files for the evo 3d, i tried installing the new cyanogemod and it messed it up, so i was seeing if anyone had to orginal ruu files
Newby_Leader said:
Does anyone have the orginal like files for the evo 3d, i tried installing the new cyanogemod and it messed it up, so i was seeing if anyone had to orginal ruu files
Click to expand...
Click to collapse
Generally, the user named Football posts RUU files in the development threads. Sometimes they are made sticky. I would suggest searching for the RUU thread by Football for the specific software version you're wanting the stock recovery image from.
An alternate mirror source is http://goo-inside.me . As they mirror many RUU files which contain the stock recovery image.
For the CDMA version, http://goo-inside.me/shooter/ruu
For the GSM version: http://goo-inside.me/shooteru/ruu
Goo-inside.me usually posts the rom.zip file located inside the RUU.exe which saves the end user a few steps of extracting the rom.zip themselves from the RUU.exe.
If the process seems convoluted, you can thank HTC!
Hope those steps help make sense of the issue!
Don't rename it afterwards?
This is most likely a really newbie question..
But does anyone know how I can extract the .zip ROM file from an Android phone. The best I could find were people that were doing a backup of there phone (I don't know if they are .zip or not). But I want to somehow extract the .zip from the phone and be able to flash like a custom ROM.
Thanks in advance!
Sparrow40k said:
This is most likely a really newbie question..
But does anyone know how I can extract the .zip ROM file from an Android phone. The best I could find were people that were doing a backup of there phone (I don't know if they are .zip or not). But I want to somehow extract the .zip from the phone and be able to flash like a custom ROM.
Thanks in advance!
Click to expand...
Click to collapse
I understand what you are looking for, but there is not a way to do that. The backup and restore method would be as close as you could get, but the method to backup leaves the various partitions in .img file formats which the custom recovery (has to be a custom recovery like ClockWorkMod, TWRP, etc) would be able to read, copy, and restore. Does the same thing that you are looking for, just in a different way.
es0tericcha0s said:
I understand what you are looking for, but there is not a way to do that. The backup and restore method would be as close as you could get, but the method to backup leaves the various partitions in .img file formats which the custom recovery (has to be a custom recovery like ClockWorkMod, TWRP, etc) would be able to read, copy, and restore. Does the same thing that you are looking for, just in a different way.
Click to expand...
Click to collapse
If I am unable to extract a .zip of the ROM, how do I work on the ROM and do things like port it?
All the websites I look at say to download the .zip, but my phone (JiaYu G4s) doesn't have a ROM available. The closest would be the JiaYu G4; which to my (very small) knowledge is no good to me because the internals are all different.
That's one of the major downsides to having a phone that isn't supported by the manufacturer or the dev community. Technically, the manufacturer is supposed to release the source code per GPL, but most of the ones that use MediaTek chips never do.
http://www.xda-developers.com/android/have-you-paid-your-linux-kernel-source-license-fee/
I'm not sure how devs that work on those devices do it...
Edit: Found it
http://phonegist.blogspot.com/2014/02/how-to-make-stock-rom-of-mediatek.html
es0tericcha0s said:
That's one of the major downsides to having a phone that isn't supported by the manufacturer or the dev community. Technically, the manufacturer is supposed to release the source code per GPL, but most of the ones that use MediaTek chips never do.
http://www.xda-developers.com/android/have-you-paid-your-linux-kernel-source-license-fee/
I'm not sure how devs that work on those devices do it...
Edit: Found it
http://phonegist.blogspot.com/2014/02/how-to-make-stock-rom-of-mediatek.html
Click to expand...
Click to collapse
So, by following the steps on the link provided. I actually am able to create a .zip from the ROM installed on the phone?
That's the idea. I dunno if that one is compatible with your chipset, but you will have to find the version that does and should be able to get started.
I have uploaded the OTApkg from my Verizon 10 downloaded 7/6/17. I have not been able to run it on my 10 because of customization issues.
I have also changed the suffix of the filename to "zip" so it could be uploaded. You may want to rename it before manipulating it. The default name is "OTApkg"
You can download it here and I welcome someone else's better ability to parse the file contents.
MD5 is: e684728237328c1a59c8c53ab2308467
I've now extracted the firmware.zip and created two update.zips, one without boot (but stock recovery) and one without both boot and recovery images. Someone reported to me that flashing the boot.img could be problematic -- I do not know the particulars, just reporting what I heard. I have not flashed these files, so you're on your own. If there are reports of problems, I'll pull the files.
2.41.605.20 firmware update (no boot) md5: 13b3461cbe2e1f9a8098d83115f501c8
2.41 605.20 firmware update (no boot; no recovery) md5: 97c1df3e7cbc9583b9916b4e1768f245
hgoldner said:
I have uploaded the OTApkg from my Verizon 10 downloaded 7/6/17. I have not been able to run it on my 10 because of customization issues.
I have also changed the suffix of the filename to "zip" so it could be uploaded. With past OTA's I've been able to extract the contents, but not so with this one. You may want to rename it before manipulating it. The default name is "OTApkg"
You can download it here and I welcome someone else's better ability to parse the file contents.
(Last OTA I actually ended up flashing with htc_fastboot partition-by-partition in download mode.)
Click to expand...
Click to collapse
I renamed mine also and was able to extract the contents. I have rezipped the files (Files only, not flashable) here is anyone wants them. Strange, 2gb ota but contents are 103mb. I did not install tho, just ran the update to pull the updated system img.
kc6wke said:
I renamed mine also and was able to extract the contents. I have rezipped the files (Files only, not flashable) here is anyone wants them. Strange, 2gb ota but contents are 103mb. I did not install tho, just ran the update to pull the updated system img.
Click to expand...
Click to collapse
NVM. Reread your post. Do you think the firmware would be flashable if renamed 2PS6IMG.zip?
hgoldner said:
NVM. Reread your post. Do you think the firmware would be flashable if renamed 2PS6IMG.zip?
Click to expand...
Click to collapse
I just tried it and it flashed. But remove the boot.img first. The. 20 boot.img won't work on. 18.
kc6wke said:
I just tried it and it flashed. But remove the boot.img first. The. 20 boot.img won't work on. 18.
Click to expand...
Click to collapse
Thanks, , my file may have been corrupted. Going to upload a file I could open on my workstation instead and re-link.
Original upload was corrupted; I've uploaded corrected file and added md5.
Added two firmware only update files, one without boot and one without boot or recovery.
Verizon getting Oreo ota
mattie_49 said:
Verizon getting Oreo ota
Click to expand...
Click to collapse
Yup.
hgoldner said:
Yup.
Click to expand...
Click to collapse
Can I now flash Maximum or Lee-Droid Oreo roms without having to do anything other than installing twrp first? That is correct isn't it?
mattie_49 said:
Can I now flash Maximum or Lee-Droid Oreo roms without having to do anything other than installing twrp first? That is correct isn't it?
Click to expand...
Click to collapse
I would go by the OP's in each of those ROM threads, but presumably you are now on Oreo firmware, so I don't see why not.
Maximus doesn't do vzw..