140 replies to this topic

[tucstwo]

Oh great, another one of these. :-/

If you just bought the phone or received a replacement and it came with 4.1.2 out of the box, that's one thing, but at this point, the number of people who repeatedly upgrade their phones without protecting their root access amazes me. Stop expecting magical hackers in the sky to produce new root exploits for every single build of every single Motorola device. These exploits are in limited supply, so this is not a sustainable battle.

That being said, I have a few quick questions:

1. Which models are we talking about here? XT925 and XT926? What happens if one is rootable but the other isn't?

2. Is there a bootloader unlock available for any of the models in question?

3. Is it possible to downgrade any of the models in question to an official ICS build?

This is in reference to the XT926. The CDMA VZW variant. The XT925 has an unlockable bootloader. The Verizon one does not. Verizon explicitly does not want to allow Motorola to allow unlockable bootloaders. The XT926 WAS downgradable to 4.0.4 when the device was still on Android 4.1.1. Regardless of people who messed up their root backups while updating, devices are now being shipped with 4.1.2 which can not be downgraded.

I don't own any of these devices. My phone is unlocked. But in defense for these people. They offer the money as an enticement and reward to those who may have the skills necessary to root the phone. I'm sure everyone here would be happy to have it done for nothing. But how fair is that for the person doing the legwork?

I don't know. I personally don't want a device that doesn't have an unlockable bootloader. But I wish I could have a Motorola phone.

[djrbliss]

I don't own any of these devices. My phone is unlocked. But in defense for these people. They offer the money as an enticement and reward to those who may have the skills necessary to root the phone. I'm sure everyone here would be happy to have it done for nothing. But how fair is that for the person doing the legwork?

I understand, and it's certainly better than expecting this sort of thing for free. The problem is that this affects more people than those contributing to the bounty and publishing the root exploit. If I publish an exploit for this build, then Motorola will fix the underlying flaw, and the users of upcoming Motorola devices and builds may not have a root exploit at all. The frequency with which these exploits are being requested is quickly exhausting the pool of available bugs to be used in the future.

[tucstwo]

I understand, and it's certainly better than expecting this sort of thing for free. The problem is that this affects more people than those contributing to the bounty and publishing the root exploit. If I publish an exploit for this build, then Motorola will fix the underlying flaw, and the users of upcoming Motorola devices and builds may not have a root exploit at all. The frequency with which these exploits are being requested is quickly exhausting the pool of available bugs to be used in the future.

You know what they say, if you don't use it...you lose it

All kidding aside, I understand. Every time it's exploited, they patch it, and it becomes more and more difficult to find the next vulnerability. But I have a question since this seems to be your main concern. What does it matter? If eventually Motorola finally finds a way to out-fox even the best exploiters, then that's it. The jig is up. There's nothing we can do to stop that. And whether you find a vulnerability today and release a root tool or you don't, what's to say Motorola doesn't find the vulnerability themselves and just patch it without us ever using it? I'm sure the day of true lockdown is coming, whether we utilize the bugs we have now or not, true? I may be off base completely. But I'm just bouncing ideas.

[djrbliss]

You know what they say, if you don't use it...you lose it

All kidding aside, I understand. Every time it's exploited, they patch it, and it becomes more and more difficult to find the next vulnerability. But I have a question since this seems to be your main concern. What does it matter? If eventually Motorola finally finds a way to out-fox even the best exploiters, then that's it. The jig is up. There's nothing we can do to stop that. And whether you find a vulnerability today and release a root tool or you don't, what's to say Motorola doesn't find the vulnerability themselves and just patch it without us ever using it? I'm sure the day of true lockdown is coming, whether we utilize the bugs we have now or not, true? I may be off base completely. But I'm just bouncing ideas.

Now that you mention it, you're right, it really doesn't matter very much at all. Certainly not to me, since I don't use a Motorola phone and always encourage people to buy phones with options to unlock the bootloader if they're interested in rooting. You're probably right, at some point I'll stop playing this game with Motorola, and that will likely be the end of it.

But if given a choice to use an exploit to give root to 15-20 people, most of whom are stuck without root because they did it to themselves, or to use the same exploit to give root to several hundred (or thousand?) people with a new, previously unrooted phone, which would you choose?

[satman80]

I apologize, it was discussed if we should have a bounty, so figured start it and see where it went, if now is not a good time for this I can pull this topic and save it for another day. I didn't know that the exploits were reaching the end mark, and I don't think anyone else did either.. Please let me know if this Bounty needs to be pulled and I will do so.. It's intent was to only help others. Sorry..

[djrbliss]

I apologize, it was discussed if we should have a bounty, so figured start it and see where it went, if now is not a good time for this I can pull this topic and save it for another day. I didn't know that the exploits were reaching the end mark, and I don't think anyone else did either.. Please let me know if this Bounty needs to be pulled and I will do so.. It's intent was to only help others. Sorry..

Don't sweat it, I appreciate the sentiment behind wanting to compensate people for their time. There's no reason to pull the bounty, I just wanted to explain my thought process and encourage others who may have the ability to publish root exploits for Android devices to think strategically about their releases.

[tucstwo]

Now that you mention it, you're right, it really doesn't matter very much at all. Certainly not to me, since I don't use a Motorola phone and always encourage people to buy phones with options to unlock the bootloader if they're interested in rooting. You're probably right, at some point I'll stop playing this game with Motorola, and that will likely be the end of it.

But if given a choice to use an exploit to give root to 15-20 people, most of whom are stuck without root because they did it to themselves, or to use the same exploit to give root to several hundred (or thousand?) people with a new, previously unrooted phone, which would you choose?

This is a scenario I personally could not choose the right answer. How could I predict that a new device will be released that just so happens to have the same vulnerability as this 4.1.2 Razr HD? Or that there even IS a new device? I personally assume (am 99% positive) any new device coming out from today forward would be on 4.2.x or even a newer version to be announced. There's certainly a big chance that that device would need yet another loophole. And I'm sure there will be a line of people offering money to the one who finds it.

With that said, I also believe there is more than 15-20 people who have this phone now and or will be buying one in the near future. I don't expect a new Motorola flagship to be even announced until at least June. But that's based on a lot of rumors.

Either way, this bounty is open to anyone who wants to take a crack at it. If you personally think it's a bad idea, I can understand why you don't want to do it. Even if I don't quite understand why it's a bad idea.

[satman80]

Don't sweat it, I appreciate the sentiment behind wanting to compensate people for their time. There's no reason to pull the bounty, I just wanted to explain my thought process and encourage others who may have the ability to publish root exploits for Android devices to think strategically about their releases.

I agree and understand, I was hoping anyone who may have the time or knowledge to be honest.. Even I have been looking at some of the current layouts and current exploits myself, understanding how they work etc.. Nice work btw

[djrbliss]

This is a scenario I personally could not choose the right answer. How could I predict that a new device will be released that just so happens to have the same vulnerability as this 4.1.2 Razr HD? Or that there even IS a new device? I personally assume (am 99% positive) any new device coming out from today forward would be on 4.2.x or even a newer version to be announced. There's certainly a big chance that that device would need yet another loophole. And I'm sure there will be a line of people offering money to the one who finds it.

With that said, I also believe there is more than 15-20 people who have this phone now and or will be buying one in the near future. I don't expect a new Motorola flagship to be even announced until at least June. But that's based on a lot of rumors.

Either way, this bounty is open to anyone who wants to take a crack at it. If you personally think it's a bad idea, I can understand why you don't want to do it. Even if I don't quite understand why it's a bad idea.

Sorry, I didn't mean to come across as hostile, just offering my thoughts. If someone else wants to take a crack at this, by all means, and use your own judgment with regards to releasing it.

[megahertz1970]

Well we all can argue this point till the cows come home! My point is we pay for the phone whether under contract or pay full retail. We should be able to do with it as we please and they shouldn't be locked down and shouldn't have to buy a dev edition unless that's what we want. We should ALL be given the choice to unlock and lose the warranty and I'll gladly give my serial number to get an unlock code to void warranty. That's the way it should really be!

But the main reason is the carriers would lose $$$ because a rooted phone can Wi-Fi tether without them knowing. Then they can't charge us an extra $30/month.

It's all about the DEAD PRESIDENTS! I'm willing to give some away for someone with a lot more knowledge than myself to find a root method. So NO I don't think this thread should be taken down. JUST MY OPINION!!!!

[tucstwo]

Sorry, I didn't mean to come across as hostile, just offering my thoughts. If someone else wants to take a crack at this, by all means, and use your own judgment with regards to releasing it.

Please, no apology necessary. I didn't think you were coming off hostile. And I apologize If I appeared that way. My responses are based on my ignorance more so than my position on the issue. I just want the community to thrive, whatever it takes. Like I said originally. I don't even own this phone. I just feel for these people. I've had this happen to me, had an unlocked device that was locked out with an OTA, had it stolen, got replacement with OTA already installed. Got screwed. I understand the feeling.

[satman80]

Don't sweat it, I appreciate the sentiment behind wanting to compensate people for their time. There's no reason to pull the bounty, I just wanted to explain my thought process and encourage others who may have the ability to publish root exploits for Android devices to think strategically about their releases.

Just a question what happens if they stop making Dev phone's or the carriers wont accept them etc?? I am asking because I really don't know.. Is this possible as well?

[tucstwo]

Just a question what happens if they stop making Dev phone's or the carriers wont accept them etc?? I am asking because I really don't know.. Is this possible as well?

It's an interesting question. Verizon seems pretty hard up on not wanting unlocked phones on their network. If they won't sell them, they certainly can tell us they won't activate one. I don't support dev phones myself. I prefer phones that are either unlockable or have been unlocked by the development community. To me, buying dev phones is playing right into their hands.

[satman80]

Either way Dan has offered us the best and coolest exploits ever, and for that it has unlocked so much opportunity for so many who create cool stuff, I hope this doesn't ever come to an end, because there is so much talent and so many people have learned a lot from it.. With that said I applaud your work and everyone Else's It's all Priceless. At the end of the day I'm here for the fun and enjoyment everyone has brought..

[aktrazer]

Either way Dan has offered us the best and coolest exploits ever, and for that it has unlocked so much opportunity for so many who create cool stuff, I hope this doesn't ever come to an end, because there is so much talent and so many people have learned a lot from it.. With that said I applaud your work and everyone Else's It's all Priceless. At the end of the day I'm here for the fun and enjoyment everyone has brought..

Amen, reverend. I second everything you just said. We have some really incredible people in this community and I hope it doesn't end either. I may be delusional by saying that it may not end, but hey, I can dream

[rokr1292]

I wish I had the know how to even try to work on it. But I'll give 20 plus if someone gets it I would them my og Razr, HD dock, and s305 headphones. Im dying for root back.

[tech_head]

Didn't lose root but willing to toss in at least $10, probably more.

[mwsf3]

I'm in for $10.00 maybe more

"Posted Today, 09:44 PM
Ok, I am up to $20"

Edited by satman80, 29 March 2013 - 05:35 PM.
Wanted a Change from $10 to $20

[trey]

I'm droid HD is root but I would like to donate $15.where do I go to donate 15 dollars at