Develop Bugs

grack warns Google and Sprint about EVO security hole

Grack is reporting that holes in Sense have made it ridiculously easy for any app to escalate itself to root. He notes in the post that "both Google and Sprint have been very proactive in plugging this hole." He also notes that, while he will be releasing his rooter tomorrow, he won't be explaining it for a week. This makes me wonder if there's an OTA in the works that will close at least his vulnerability in the meantime.

theillustratedlife said:
Grack is reporting that holes in Sense have made it ridiculously easy for any app to escalate itself to root. He notes in the post that "both Google and Sprint have been very proactive in plugging this hole." He also notes that, while he will be releasing his rooter tomorrow, he won't be explaining it for a week. This makes me wonder if there's an OTA in the works that will close at least his vulnerability in the meantime.
Click to expand...
Click to collapse
wow, this sounds like a serious security flaw. i'd prefer not to see a worm or malicious 3rd party app gaining root access through poorly coded HTC sense apps.
dont think it will remove NAND protection of /system in normal android mode.
it will provide an alternate way to achieving root access in normal android mode besides loading Flipz ROM.
wonder if removing all sense related software will remove this exploit?
guess we'll be able to start testing tomorrow...

joeykrim said:
wow, this sounds serious.
wonder if removing all sense related software will remove this exploit?
guess we'll be able to start testing tomorrow...
Click to expand...
Click to collapse
That's a good point, I guess AOSP 2.1 doesn't have this problem since he says its due to Sprint's additions.

Has HTC / Sprint ever been fast at rolling out an update?
I wouldn't worry, maybe an OTA months down the road, but I wouldn't count on anything within weeks...

The last Sprint phone I had was a RAZR, so I'm a bad source as to their history of timeliness; however, I wouldn't be surprised if they had a different strategy for pushing out a critical security patch than they would for a new system build.
They don't have to rewrite thousands of files against a new trunk build, bounce it between vendors, run extensive Android compatibility suites, etc. It's quite possible they have a few relatively simple changes to make to close grack's hole.

i bet they will patch it when they patch the tethering so that you have to pay for it. some time in july

there will be an update tomorrow. dont know the change log.......

so is it better to root or not to?

lawl
10 char

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Wow, you had to dig up this thread over a year old just to post "lawl". I'm proud

Usually I hate resurrected threads, but this one deserves a second look.
At this point should we continue to wait for 2.3 root, or build a time machine to prevent the update from being rolled out?

Actually, yeah, this is definitely something worth looking at.
If the exploit still exists, it might be able to get root for people on the OG Evo 2.3.
Anyone look (like teamwin) look into this yet?

github said:
Wow, you had to dig up this thread over a year old just to post "lawl". I'm proud
Click to expand...
Click to collapse
Lmao I just hit the last page button
Sent from my PC36100 using XDA Premium App

Nick N said:
Usually I hate resurrected threads, but this one deserves a second look.
At this point should we continue to wait for 2.3 root, or build a time machine to prevent the update from being rolled out?
Click to expand...
Click to collapse
MultiDev said:
Actually, yeah, this is definitely something worth looking at.
If the exploit still exists, it might be able to get root for people on the OG Evo 2.3.
Anyone look (like teamwin) look into this yet?
Click to expand...
Click to collapse
Nope, sorry, this was right after the phone was released and long been fixed. All those with the original stock 2.3 are still SOL for now.

[Question] DHD 4.2 official release ?

Sory guys, I know but do you think it possible?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

estremodesign said:
Sory guys, I know but do you think it possible?
Click to expand...
Click to collapse
Yes, here on XDA everything is possible. Wait for Q2 and our devs will release jb 4.2 for sure with sense 5.
Sent from my HTC Desire HD

I very highly doubt that (the official 4.2 release, not the port w/ sense 5)
Where did you get the picture from?

GuyInTheCorner said:
I very highly doubt that (the official 4.2 release, not the port w/ sense 5)
Where did you get the picture from?
Click to expand...
Click to collapse
just one forum

Ha we wouldn't even get ICS because "DHD can't run ICS" or "sense 3.0 is the best setup for DHD"

http://technosamigos.com/htc-android-4-2-jelly-bean-update-device-list-schedule/ maybe

Let's not start this again guys, let it be.
Sent from a dream.

That would be quite interesting if it would be true. But keeping in mind what happened before it's totally not worth looking forward to this. Neither the source is confirmed/reliable...

Very, very unlikely since we were skipped by the ICS update, and other manufacturers are dropping their dual core phones...
This was most probably a typo.
And since most of us on XDA are already rooted, I would definitely go with a mooded JB anyway

would be a dream we hope. :good:

Muikkuman said:
Ha we wouldn't even get ICS because "DHD can't run ICS" or "sense 3.0 is the best setup for DHD"
Click to expand...
Click to collapse
They didnt say it cant run ics, they recognised it could but it woukd mean a full wipe because if partitioning size. And keeping the customers data integrity intact comes before everything else. The desire x - not sure - then the hd is a type or the whole things fabricated. Somebodys having a laugh. Still hoping for the ics update on htcdev, if that does come it really will be the last.

True I believe it when I see it, and with HTC we will never see it.

think so im running a 4.2.2 atm its not great but its a custom rom it doesnt lag that much but it doesnt have google services which is a downside to this one...

Muikkuman said:
True I believe it when I see it, and with HTC we will never see it.
Click to expand...
Click to collapse
Yes my friend

Count on yourself instead of counting on others.
I already upgrade lot of times on my DesireHD no matter ics, jelly bean etc.

every person have a dream

i know this sound kinda lame but will DHD be able to handle keyLimePie (Android 5.0) when it comes ??

Feroxy said:
i know this sound kinda lame but will DHD be able to handle keyLimePie (Android 5.0) when it comes ??
Click to expand...
Click to collapse
We don't know yet, since it's not out yet, so we don't know what it entails.

First time I've read it I thought about a pure android 4.2 versión without sense ...

I think that 5.0 will be not much more heavier than 4.2

4g test device ????

Hello all. I been on the forums a long time but never needed to post until now.
I just bought a HTC One from Gazelle and when I was on the phone with Verizon activating it, the rep asked me to verify that I had the right imei numbers. He stated to me (and it shows on my Verizon page) that it is a "4G TEST DEVICE " Sure enough when I went to the apps page I see apps for:
Dev Tools
Google Settings
HTC SSD Test Tool
Power Usage Reporter
PVS Info
RxD Test QMI
User Trial Feedback
Before buying this I knew I wanted to flash to the HTC One developer Edition. But at this point I am not sure if I should take any special things into mind as this is a Verizon test/development phone. I am content to use it as it is except it won't let me update to the latest builds for the phone. It is running software 1.09.90605.6 which if I understand correctly is a old version. Does anyone have advice? Do you think and of the rom cooks would like a dump from this rare find?
Thanks all
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Can you check your model number, and post a pic or report what the HBOOT screen says.
Sent from my HTC6500LVW using Tapatalk

bschram said:
Can you check your model number, and post a pic or report what the HBOOT screen says.
Sent from my HTC6500LVW using Tapatalk
Click to expand...
Click to collapse
Sure here is a pic form the boot loader.
Model number on back on bottom is HTC6500L SKU is HTC6500LVW

Here is another pic of what came stock on this phone that is different from stock apps on the retail htc one.

damn came S-offed thats pretty sweet.
Sent from my HTC6500LVW using Tapatalk

lancasterv3 said:
damn came S-offed thats pretty sweet.
Sent from my HTC6500LVW using Tapatalk
Click to expand...
Click to collapse
Well I want to flash this to the developer version, but before I do it I wanted to see if any of the rom devs wanted to capture the current image from the system before I do as I don't know how valuable this phone stuff is in its current state. (remembers back when the first android equip dev hp touchpad landed in the hands of the public on accident)

Definitely. There's a bunch of debug tools and hidden APKs cut out from the final release builds that can give us more insight into the radio hardware, for example.

I would ask around, maybe sonic would know.

off topic, im Curious how was the condition of the phone? I almost bought a phone from them but was a little leary
Sent from my One using Tapatalk

Being that no one showed much interest and was running a pre release version and couldn't update to the Verizon kitkat rom, I have to wipe the whole phone clean. To the point that I bricked the phone and I had to use fastboot command in recovery to flash the stock Verizon rom before I could update. Needless to say I was up in the wee hours of the morning doing this.
The phone had nicks, on the aluminum casing and there was a small deep scratch in the middle but considering this phone was probably used a lot in a test lab its in pretty good shape.

thebaka18 said:
Hello all. I been on the forums a long time but never needed to post until now.
I just bought a HTC One from Gazelle and when I was on the phone with Verizon activating it, the rep asked me to verify that I had the right imei numbers. He stated to me (and it shows on my Verizon page) that it is a "4G TEST DEVICE " Sure enough when I went to the apps page I see apps for:
Dev Tools
Google Settings
HTC SSD Test Tool
Power Usage Reporter
PVS Info
RxD Test QMI
User Trial Feedback
Before buying this I knew I wanted to flash to the HTC One developer Edition. But at this point I am not sure if I should take any special things into mind as this is a Verizon test/development phone. I am content to use it as it is except it won't let me update to the latest builds for the phone. It is running software 1.09.90605.6 which if I understand correctly is a old version. Does anyone have advice? Do you think and of the rom cooks would like a dump from this rare find?
Thanks all
Click to expand...
Click to collapse
I purchased a Galaxy S3 from a local rep that shows to verizon as a 4g test device also. It has been this way since i got it approximately 2 years ago. It also has a similar stamp on the front face as yours showing which test device number it was.

Marshmallow update

Really dont understand why it takes so long for the update for a "flagship device"? Focusing on pushing more hardware without taking care of your existing customer's is bad PR IMO. I just want to try something new

ssmr2t said:
Really dont understand why it takes so long for the update for a "flagship device"? Focusing on pushing more hardware without taking care of your existing customer's is bad PR IMO. I just want to try something new
Click to expand...
Click to collapse
I understand where you are coming from. I am looking forward to the update also but I would rather have an update that is finished then get an update that kills my battery life or has more bigs than a cheap whore.
Sent from my SM-G928T using XDA Premium HD app

Samsung probably already gave the rom to T-Mobile. T-Mobile then adds their stuff like wifi calling, VoLTE, advanced messaging, etc, then once they're done testing it for stability they push it out. So really it's not just samsung were waiting on.

Nexus comes stock with it. Google gave T-Mobile the firmware long ago.

We probably won't get an update until the s7 comes out, or worse case scenario when the new note and edge plus come out....sad but true

chronos7 said:
We probably won't get an update until the s7 comes out, or worse case scenario when the new note and edge plus come out....sad but true
Click to expand...
Click to collapse
That's what I figured too...they want to push people to buy new products, probably won't come out till two months the after release of the S7 I'm guessing.

Djspinister said:
Nexus comes stock with it. Google gave T-Mobile the firmware long ago.
Click to expand...
Click to collapse
Yes they may have the Firmware from Google for the nexus but that doesn't mean it works with Samsung's phone. They will still have to test the modem and make sure it works well on their network. Still need to test stability with the firmware from Samsung.

When i get update to 6.0 for SM-G928T?
Thanks for help!

tomitsa18 said:
When i get update to 6.0 for SM-G928T?
Thanks for help!
Click to expand...
Click to collapse
Probably toward the end of this year

michintom said:
Probably toward the end of this year
Click to expand...
Click to collapse
Sprint getting their update next month

It's kinda sad a phone that's 2 years old vzw lgg3 getting M before a flag ship that's only few months old
Sent from my SM-G928T using Tapatalk

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Srikar_NBK said:
Click to expand...
Click to collapse
That is for the unlocked model. Also, T-Mobile needs to add bloatware and test, which would take a few months probably.

I can never understand why people care about these mediocre updates sometimes, that even breaks the phone at times. When it comes it comes as long as it comes within a 6- 8 months of google releasing it im fine. The software on this phone is excellent now.

Because a lot of these people live t update things. Just keep wanting to update and not satisfied with current things. Sad really.

The t-mobile visual voice-mail update to support android 6.0 is a good sign.
Sent from my SM-G928T using XDA Premium HD app

Even Samsung just updated apps M support. We'll just have to wait and see
Sent from my SM-G928T using Tapatalk

cpugeeker said:
I can never understand why people care about these mediocre updates sometimes, that even breaks the phone at times. When it comes it comes as long as it comes within a 6- 8 months of google releasing it im fine. The software on this phone is excellent now.
Click to expand...
Click to collapse
Are you daft? The jump from L to M had a plethora of awesome features. And no, when all these other phones have M already it seems kind of ****ty that samsung, the biggest android phome manufacturer, is dragging behind like this.
---------- Post added at 02:48 AM ---------- Previous post was at 02:46 AM ----------
Maknora said:
Because a lot of these people live t update things. Just keep wanting to update and not satisfied with current things. Sad really.
Click to expand...
Click to collapse
Lol i dont know how people like you even end up at xda. Its all about doing what you want with your phone, which is getting harder and harder these days.

The new edge features in marshmallow looks sick, finally a really use for it imo. Hurry the eff up Samsung

otariq said:
The new edge features in marshmallow looks sick, finally a really use for it imo. Hurry the eff up Samsung
Click to expand...
Click to collapse
At this rate I expect to have swapped to an S7 Edge before the S6 Edge+ gets Marshmallow. Thank god for Jump! On Demand

General Paranoid Android might be coming to the P6 / Pro

https://twitter.com/i/web/status/1453843673901379586
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

That would be awesome...the kitchen is starting to heat up!

galaxys said:
That would be awesome...the kitchen is starting to hear up!
Click to expand...
Click to collapse
Damn that would almost tempt me to root again. But not for Pay and banking. We need a phone that is shipped with the bootloader unlocked and rooted. Then if you try to lock it or unroot you get a warning that your apps won't work now. Then you wake up.

bobby janow said:
Damn that would almost tempt me to root again. But not for Pay and banking. We need a phone that is shipped with the bootloader unlocked and rooted. Then if you try to lock it or unroot you get a warning that your apps won't work now. Then you wake up.
Click to expand...
Click to collapse
We're all in the Matrix and in real life our phones are all rooted - that's how we got put in the Matrix to begin with.

Oh paranoid android will come to our device alright! It just won't be supported for more than like an update like always. Everytime I switch to PA they abandon it. Funniest part is they usually JUST released it to. Extremely hard pass from me, but don't let ME stop you. Just don't tell me I didn't warn you when they cease development very quickly.

Gytole said:
Everytime I switch to PA they abandon it. Funniest part is they usually JUST released it to. Extremely hard pass from me, but don't let ME stop you. Just don't tell me I didn't warn you when they cease development very quickly.
Click to expand...
Click to collapse
Are you paranoid... android?
Sorry, couldn't resist, just a joke.

Gytole said:
Oh paranoid android will come to our device alright! It just won't be supported for more than like an update like always. Everytime I switch to PA they abandon it. Funniest part is they usually JUST released it to. Extremely hard pass from me, but don't let ME stop you. Just don't tell me I didn't warn you when they cease development very quickly.
Click to expand...
Click to collapse
Lmao you're right though I'm not falling for the hype anymore. It seems they just do it for likes , shares and donations cuz for the like the last few years they'll announced a new version when the next Android os drops then after a build or 2 they go missing again for a whole year or 2 and leave us in the dust I'm good!

yeah i stayed away as its not guaranteed to be updated all the time
my go to custom ROMs are AOSIP or Havoc but neither are developing for P6 I think. But Proton does look like it could be good also.

Agree with the commenters here; Paranoid Android is no longer reputable (and hasn't been in many years). ProtonAOSP, Lineage, AOSIP, and a bunch of other mainstream ROMs will officially support the P6 so it is absolutely not worth messing with PA.

I'd like to add "but" the more developers working on the P6P the better for everyone, even if one group's stuff isn't up to snuff. At least, as long as they share information when appropriate, which the best developers do, in my opinion.

roirraW edor ehT said:
I'd like to add "but" the more developers working on the P6P the better for everyone, even if one group's stuff isn't up to snuff. At least, as long as they share information when appropriate, which the best developers do, in my opinion.
Click to expand...
Click to collapse
Yeah, development on the P5 was severely lacking but on the P6 and the P6P many more people have it in their hands. Unfortunately, I don't root any longer but I like to see the tweaks and new stuff the devs come up with. (I actually rooted my P5 and loaded a rom before rolling it back before I sent it in for trade-in) Specifically kernel tweaks which are usually drastically needed. Nonetheless, it's a good start as you say.