Related
I have discovered a way to disable and replace Alexa with the Google Assistant through what you could call a 'privilege escalation.' I don't know anything about the Fire Phone so I don't know if you can hook it up to a PC and run ADB commands to it. Can you even download Google apps (sorry if this sounds stupid)?
Anyways, I need some testers to see how widespread this is. In android there is a permission set called WRITE_SECURE_SETTINGS. Basically you can create an app with that said permission in it's manifest. Doing so allows the app to be escalated to a 'root user' in order to edit, remove and or manipulate a set of settings Android called Settings.Secure. In this set of settings are three tiers: System, Secure and Global. The app, or anyone with access to ADB, can run a command to add, remove or change the values of some of these settings.
An app currently exists and is available on the Play Store, that edits these settings; Settings Database Editor. I need you to do the following steps for me please and thank you:
1. Download, install the app, but don't edit anything yet.
2. Hook the device up to your PC and open an ADB window.
3. Type and hit enter when done:
Code:
adb shell pm grant by4a.setedit22 android.permission.WRITE_SECURE_SETTINGS
4. Go back to the Settings Database Editor app and tap on the Secure tab.
4. Locate the following three lines, if they exist:
Code:
"alexa_enabled"
"assistant"
"voice_interaction_service"
"voice_recognition_service"
5. Go back to the ADB window. Type each of the commands below, hitting enter after each one. You won't see any reply or messages if the commands are successful:
Code:
adb shell settings put secure assistant com.google.android.googlequicksearchbox/com.google.android.voiceinteraction.GsaVoiceInteractionService
adb shell settings put secure voice_interaction_service com.google.android.googlequicksearchbox/com.google.android.voiceinteraction.GsaVoiceInteractionService
adb shell settings put secure voice_recognition_service com.google.android.googlequicksearchbox/com.google.android.voicesearch.serviceapi.GoogleRecognitionService
adb shell settings put secure alexa_enabled 0
If the last command doesn't work, go to the Settings Database Editor app and tap on secure tab. Locate the alexa_enabled setting and tap it. change the 1 to a 0 and save the setting.
6. Open the Google App and go to settings > voice > Configure 'Ok Google" or your Assistant.
The more who confirm this, the better
How can I disable double tap of home button who activates the "voice input", who is no longer avaible as Amazon decided... THANKS THEM
DragonFire1024 said:
I have discovered a way to disable and replace Alexa with the Google Assistant through what you could call a 'privilege escalation.' I don't know anything about the Fire Phone so I don't know if you can hook it up to a PC and run ADB commands to it. Can you even download Google apps (sorry if this sounds stupid)?
The more who confirm this, the better
Click to expand...
Click to collapse
Hi DragonFire1024,
Thanks for this very interesting post I was just wondering by to see if anyone had unlocked the bootloader :laugh:
Problem with the fire phone is probably 98% of users here use one of @ggow custom ROM's LineageOS 11 or the AOSP based SlimKat and Nexus Rom. Those running the Stock ROM are likely not interested in development hence why no reply's.
To be honest I never even gave the Fire OS a chance before rooting and switching to the Nexus ROM. I am not sure our fire OS has Alexa :silly: or at least as we know it today yes you heard correct a Premium Amazon Device and they see fit not push it out to Amazon device owners. In fact they just went one better and removed the voice service altogether. https://forum.xda-developers.com/fire-phone/general/amazon-voice-services-fire-phone-t3681235 Pretty amazoning :laugh
I was kinda hoping it was to make way for Alexa and a Massive OS Update but I guess thats just wishful thinking. :laugh:
i bought that phone on ebay is there any way to remove that lock?
XDA cannot help you bypass anything like that, return the phone / open a dispute on ebay
*Detection* said:
XDA cannot help you bypass anything like that, return the phone / open a dispute on ebay
Click to expand...
Click to collapse
he can also try contacting the seller and see if they can remove the mdm lock.. if not then yea, sucks..
typically with mdm the device is registered to the mdm/server and only their admins can remove it as its typically tied to the IMEI/SN
You only need ADB, the USB Settings code (*#0808#) and some time & patience:
Once you can enable the ADB Mode via USB Settings, search for the Knox App and disable it:
" pm disable-user --user 0 com.sec.knox.kccagent"
It works for me, but i need to disable other apps:
"pm disable-user --user 0 com.planetcellinc.ressvc"
"pm disable-user --user 0 com.absolute.android.agent"
This is different for every MDM.
When i try to factory reset this phone, the first thing who ask is for wifi and then let install the MDM apps install/download but then i shut down the wifi. If you do correctly, you can open the dialer app and input the code for ADB and do the commands i listed before.
DO NOT FACTORY RESET AGAIN, because you need to repeat the operation.
The apps are disabled and the FRP Mode is enabled and you cant access to the Developer mode. The phone is suitable for everyday use without Any Problem.
The Best way to disable the MDM Lock is talking with the person who sell you the phone. This is a temporary solution only.
M4xh3dr00m said:
You only need ADB, the USB Settings code (*#0808#) and some time & patience:
Once you can enable the ADB Mode via USB Settings, search for the Knox App and disable it:
" pm disable-user --user 0 com.sec.knox.kccagent"
It works for me, but i need to disable other apps:
"pm disable-user --user 0 com.planetcellinc.ressvc"
"pm disable-user --user 0 com.absolute.android.agent"
This is different for every MDM.
When i try to factory reset this phone, the first thing who ask is for wifi and then let install the MDM apps install/download but then i shut down the wifi. If you do correctly, you can open the dialer app and input the code for ADB and do the commands i listed before.
DO NOT FACTORY RESET AGAIN, because you need to repeat the operation.
The apps are disabled and the FRP Mode is enabled and you cant access to the Developer mode. The phone is suitable for everyday use without Any Problem.
The Best way to disable the MDM Lock is talking with the person who sell you the phone. This is a temporary solution only.
Click to expand...
Click to collapse
Not working for me, but I found a way to make this work:
Open Samsung Calculator and type in (+30012012732+ this will pop up drp mode, then type in the *#0808# and select DM+Modem+ADB and hit reboot. You should now have ADB! (you have to do this same method after every reboot) Also, you have to add "adb shell" before all of those commands to make them work. There is another importnant command that needs to be run: "adb shell pm disable-user --user 0 com.sec.enterprise.knox.cloudmdm.smdms", this disables the configuration.
Now I just need to figure out a way to show the developer options. It is enabled but will not show.
kekistaneerefugee said:
The USB settings menu doesn't actually allow ADB for me, is there a trick to this at all?
EDIT: NVM, I found a way to make this work:
Open Samsung Calculator and type in (+30012012732+ this will pop up drp mode, then type in the *#0808# and select DM+Modem+ADB and hit reboot. You should now have ADB! (you have to do this same method after every reboot) Also, you have to add "adb shell" before all of those commands to make them work. There is another importnant command that needs to be run: "adb shell pm disable-user --user 0 com.sec.enterprise.knox.cloudmdm.smdms", this disables the configuration.
Now I just need to figure out a way to show the developer options. It is enabled but will not show.
Click to expand...
Click to collapse
Maybe the FRP Mode doesnt allow the Developer Options.
Maybe with another MDM can disable the other MDM, maybe uninstall it... i try this with a guy in the office but doesnt work
Im going to use that command too, still my phone is working without problems. I need to know a way to do a "Soft Reset" without enable the disabled apps.
M4xh3dr00m said:
Maybe the FRP Mode doesnt allow the Developer Options.
Maybe with another MDM can disable the other MDM, maybe uninstall it... i try this with a guy in the office but doesnt work
Im going to use that command too, still my phone is working without problems. I need to know a way to do a "Soft Reset" without enable the disabled apps.
Click to expand...
Click to collapse
Idk, my phone isn't frp locked or anything, I am just simply experimenting on how to remove the mdm knox crap put on it by rent-a-center/PayJoy.
M4xh3dr00m said:
Maybe the FRP Mode doesnt allow the Developer Options.
Maybe with another MDM can disable the other MDM, maybe uninstall it... i try this with a guy in the office but doesnt work
Im going to use that command too, still my phone is working without problems. I need to know a way to do a "Soft Reset" without enable the disabled apps.
Click to expand...
Click to collapse
it doesnt work that way lol.. usually if you try to add to an mdm when ur already on an mdm it wont allow it.
the device is tied to the mdm using your device info such as imei and serial no. The only way to stop it is to have them remove it from the mdm server.
i have researched and utilized multiple mdms, in fact, i even purchased a samsung knox manage commercial license just to mess with.
Dev options are not available because the mdm admin set a policy to block it.. they can control many things from settings to camera to ota updates etc.
There are paid removal services on ebay
Look em
Up
elliwigy said:
it doesnt work that way lol.. usually if you try to add to an mdm when ur already on an mdm it wont allow it.
the device is tied to the mdm using your device info such as imei and serial no. The only way to stop it is to have them remove it from the mdm server.
i have researched and utilized multiple mdms, in fact, i even purchased a samsung knox manage commercial license just to mess with.
Dev options are not available because the mdm admin set a policy to block it.. they can control many things from settings to camera to ota updates etc.
Click to expand...
Click to collapse
If the imei is changed, it can be unlocked from the server. To be placed in a device x the same imei I can unlock the MDM of the lock device.
I'm trying to find information about a multimedia system i have installed in my Skoda, the sticker on the device says CNT100, which is manufactured by CarNeTek (device page - https://www.carnetek.com.tw/products_detail/15.htm, not sure if they are the manufactures or just a reseller).
The company which sell and install it locally are not willing to share any information about the device, and of course are not willing to unlock it (to install applications from the play store, tweak configuration, etc.).
On the device there are 6 dip switches (which i couldn't figure out what they control), and no visible button (to get into recovery), i can get to the play store, and install applications - but as soon the installation is completed - they get uninstalled (there is a list of application that are not automatically uninstalled).
The launcher looks like a custom local version, there is no way to get into the settings page and the notification bar cannot be clicked (or dragged down), if i click multiple times on the menu - i get a dialog for some configuration, where i'm prompt for password (the dialog has a random number on it - which i suspect is used to generate correct password).
is anyone familiar with this device? or can suggest a way to unlock it?
(attached images of the device and the boot screen)
Hey mrtowel!
Trying to figure out that as well.
You said "if i click multiple times on the menu"
Where is this menu? possible to send a photo of that?
I'm talking about an Israeli version
Seems to be customized by [email protected]
sorry but i was wrong describing the way to get to the password dialog, on the home screen - there is a weather widget, showing the weather on the left side and the clock on the right side, multiple taps on the weather allows you to reboot the device, while multiple taps on the clock gets you to the password dialog.
I made some progress with the device - still working on getting it unlocked completely, let me know if you want more details.
mrtowel said:
Seems to be customized by [email protected]
sorry but i was wrong describing the way to get to the password dialog, on the home screen - there is a weather widget, showing the weather on the left side and the clock on the right side, multiple taps on the weather allows you to reboot the device, while multiple taps on the clock gets you to the password dialog.
I made some progress with the device - still working on getting it unlocked completely, let me know if you want more details.
Click to expand...
Click to collapse
Hey!
Just found that new to me. Pushed 6 times on the clock of the weather widget and got a prompt for the password. I receive a 9 digit number with that.
Also found that if you do the same on the temperature indication, you'll be prompt for device restart.
So that's a progress.
Anyways, I will be happy to hear from you, what progress you have made on this.
Will send you a PM.
Did someone have any success?
Hello, i have a Toyota corolla 2016 with "android multimedia" that have only 2 apps without google play or any apps, the startup screen is like yours.
i wan to unlock the system, someone know how to do that?
gtrs36 said:
Hello, i have a Toyota corolla 2016 with "android multimedia" that have only 2 apps without google play or any apps, the startup screen is like yours.
i wan to unlock the system, someone know how to do that?
Click to expand...
Click to collapse
try to get to app store (in case it is installed) through one of the installed apps using the 'rate us' option, you can also try and push a play store link through bluetooth, if it works - the android system will launch the play store app, and you'll be able to setup your account.
Once you get to the play store - download and install Googel app (https://play.google.com/store/apps/details?id=com.google.android.googlequicksearchbox&hl=en) this will let you ask google assistant to 'Open Display Settings' (in my case this option let me enable the drag down menu, where i could easily access the settings and other stuff).
hope that helps
?
Hey did you succeed?
please help
Hi
did any one of you had any success with getting into setting menu ?
i can get to google play...but as was posted before, everything i try to install immediately erase itself.....
does any one have the approved app list from ituran ?
i do believe that together we can crack this....
thanks
Thanks for the tips I've made it to download youtube! But how I can bypass the limit to install all apps from play store?
Also how can I cancel the restrictions of using apps during drive?
Thanks
Allon
Hey @mrtowel any change you can share some more details?
I tried connecting to the USB with my laptop to try doing some adb commands but it did not detect anything
I'm also wondering about the dip switch
and how to get the password bypass
Would really like to hear some more details if you can share please?
Just came here to see if can recall my steps from last time i played with the device (i kind of gave up, as it worked well with what there is, but recent update made it work really slow).
turns out there is a post on facebook (https://facebook.com/groups/gilcar/permalink/729881061134680/?comment_id=729883497801103), i'm going to try and build some utility to generate unlock codes (last time, i managed to get to an adb terminal, but i wasn't aware of the `pm hide` option to disable the installation blocker ****).
will post updates here if i get some progress
For anyone interested, attached the list of whitelisted apps. a jar to generate the code to enable tech mode and how i disabled the installation blocker
For the jar - you would need to get your device Wifi MAC address (see old post from 2019 on how to enable the navigation bar), which can be retrieved from the 'אודות' section. (run the jar by running 'java -jar codeGen_jar.jar 00:11:22:33:44:55' - replace the numbers with your device mac address)
Wifi must be enabled - before the next step
To get to the code, hit few clicks on the clock widget in the home screen would prompt you with a password (if the code generator matches your version of connect-it (if it isn't - see bypass admin mode workaround below), the codes would match), enter the unlock code (admin mode result from the codeGen output) and move to the apps section - you would see 'tech mode' application.
Wifi must be connected before the next step
On the tech mode application - you would have another code (tech mode result from the codeGen) enter it - and it would open a page to enable adb remote server (you must be connected to a wifi network to get it to work).
Connect to the adb using a remote shell from another device (or a laptop), to the specified IP on port 1917 (note that most mobile tethering options won't work due to networking limitations). If you don't have an accessible wifi network - see Wifi Workaround below
From adb, run the following:
to disable the application which blocks installations: pm hide com.ituran.installationblocker
Disable updates: pm hide com.ituran.systemupdateservice
Disable blocking applications while driving: pm hide com.ituran.driveusagemonitor
Tips:
While in admin mode, you can see all installed applications, and pin them to the start page of the home screen, recommend to pin Play Store app (as it is usually hidden)
Don't try to enable or enter 'Guest mode' (i tried it, and the device went into boot loop)
The codes generated are date sensitive, so either generate new ones if you won't use them in the same day, or change the device date.
Wifi Workaround : a workaround can be to install modified version of 'Remote ADB Shell' (attached) on the device, save it to your mobile phone, and push it to the device through bluetooth, this version is the same version as 'Remote ADB Shell' from the play store - only names 'Spotify' which will keep it installed on the device, after installation, run it and connect to 127.0.0.1 on port 1917 instead.
Bypass admin mode workaround : while Admin Mode enables you to view the hidden applications, in the above process, it mainly gives you the option to run the tech mode app. if the code for the admin mode isn't working for you, install 'Amaze file explorer' (attached - it was renamed to bypass the installation blocker) by pushing it through bluetooth.
You can find more details on this facebook post (not mine - but i used details from this thread to figure out how to disable the application from ADB)
Enjoy and drive safely.
mrtowel said:
For anyone interested, attached the list of whitelisted apps. a jar to generate the code to enable tech mode and how i disabled the installation blocker
For the jar - you would need to get your device Wifi MAC address (see old post from 2019 on how to enable the navigation bar), which can be retrieved from the 'אודות' section. (run the jar by running 'java -jar codeGen_jar.jar 00:11:22:33:44:55' - replace the numbers with your device mac address)
Wifi must be enabled - before the next step
To get to the code, hit few clicks on the clock widget in the home screen would prompt you with a password (if the code generator matches your version of connect-it (if it isn't - see bypass admin mode workaround below), the codes would match), enter the unlock code (admin mode result from the codeGen output) and move to the apps section - you would see 'tech mode' application.
Wifi must be connected before the next step
On the tech mode application - you would have another code (tech mode result from the codeGen) enter it - and it would open a page to enable adb remote server (you must be connected to a wifi network to get it to work).
Connect to the adb using a remote shell from another device (or a laptop), to the specified IP on port 1917 (note that most mobile tethering options won't work due to networking limitations). If you don't have an accessible wifi network - see Wifi Workaround below
From adb, run the following:
to disable the application which blocks installations: pm hide com.ituran.installationblocker
Disable updates: pm hide com.ituran.systemupdateservice
Disable blocking applications while driving: pm hide com.ituran.driveusagemonitor
Tips:
While in admin mode, you can see all installed applications, and pin them to the start page of the home screen, recommend to pin Play Store app (as it is usually hidden)
Don't try to enable or enter 'Guest mode' (i tried it, and the device went into boot loop)
The codes generated are date sensitive, so either generate new ones if you won't use them in the same day, or change the device date.
Wifi Workaround : a workaround can be to install modified version of 'Remote ADB Shell' (attached) on the device, save it to your mobile phone, and push it to the device through bluetooth, this version is the same version as 'Remote ADB Shell' from the play store - only names 'Spotify' which will keep it installed on the device, after installation, run it and connect to 127.0.0.1 on port 1917 instead.
Bypass admin mode workaround : while Admin Mode enables you to view the hidden applications, in the above process, it mainly gives you the option to run the tech mode app. if the code for the admin mode isn't working for you, install 'Amaze file explorer' (attached - it was renamed to bypass the installation blocker) by pushing it through bluetooth.
You can find more details on this facebook post (not mine - but i used details from this thread to figure out how to disable the application from ADB)
Enjoy and drive safely.
Click to expand...
Click to collapse
Does this method work with Hyundai, Mitsubishi, etc...?
Hi Mr.
mrtoweldo you have any videos explain the steps in post #13 I will be thankful if you provide me with for urgent case.
thank you dear for great job
I really just want disable some of the apps in order to declutter a little bit...
I don't mind unistalling them or just hideing/disabling them.
I have launcherHijack installed, which works well and I'm able to adb into the stick via adblink, however all the usual (disable) commands don't seem to work... (like "pm hide" or "pm uninstall").
I've tried various apps that can disable without root (Ice Box Pro, Brevent), but I can't get the command "dpm set-device-owner " to execute properly - which is a prerequisite to running in non root mode .
I haven't tried de-registering the device and then running the commands yet though (not sure if it'll make a difference).
The only thing that works so far is the disabling of background apps.
https://www.xda-developers.com/freeze-app-background-processes-without-root-android-nougat/
I'm OK with just disabling them in the background and never running them, however I would like to remove the icons from the applaunchers. Is there any way to do that?
Thanks
*EDIT*
I found this info from another thread.
https://forum.xda-developers.com/fire-tv/general/suprise-root-pc-adb-fire-stick-to-t3918668
It mentioned Shizuku Manager, which enables IceBox on an unrooted box.
I can now disable any app I want!
Hi, didn't feel like this is worth making a thread but didn't really find anywhere else to ask for assistance nor any recent help on google.
I'm trying to disable some preinstalled bloatware on my s20 ultra, such as Samsung pay framework though abd but I keep getting this message: adb delete failed owner blocked
I am using the following command: pm uninstall -k --user 0 (package name)
Any insights? thanks.
Did you try the disable method? This one is safer than the uninstall one.
Pm disable 'package name'
You can always re-enable if something goes wrong.
I have same issues mate. Have your found a solution ?
You tried the disable method?
Make your life easier and use ADB AppControl.
ADB AppControl - android applications manager and debloat tool. Official website. Free download.
cucumber42 said:
Make your life easier and use ADB AppControl.
ADB AppControl - android applications manager and debloat tool. Official website. Free download.
Click to expand...
Click to collapse
Privacy Policy
When using this software, the following data may be collected, transmitted to a remote server and processed:
- IP address, information about CPU, RAM, operating system version and installed components from user's PC.
- Android device model and list of applications that have been disabled or removed on this device using this software.
- Activation key and additional identifier for this software.
- Data on user actions within the graphical interface of this software, like buttons clicks.
The user can at any time stop collecting and processing this data by refusing to use this software.