Wifi cracking for the HTC? - Mogul, XV6800 ROM Development

I jsut want to know if there is anything that can sniff/crack wifi's for the HTC.?

hmmm, not to do the work but this can scan networks and capture packets for another machine to analyse:
http://commview-for-wifi-ppc.download-528-16895.datapicks.com/
Work on it was discontinued a hiwle ago and I'm not sure how it'll run on WM6 and a Titan.

Keystone said:
hmmm, not to do the work but this can scan networks and capture packets for another machine to analyse:
http://commview-for-wifi-ppc.download-528-16895.datapicks.com/
Click to expand...
Click to collapse
I don't want to do anything too wrong like snoop on people etc, I just want something I can use whilst at a bustop and log onto the local 7-11/esso/macks/subways etc wireless network and use internet.

That sounds like some fun stuff to kill time while waiting for transit...I just can't seem to find the CommView for WiFi PPC anywhere for download....Any luck anywhere else?

wififofum is a great wardriving software and it will tell you all the networks around and give you their signal strength and encryption type (if any). You might be able to at least find open networks this way....

WiFiFoFum is definitely the best out there right now for what you want.
Enjoy.
View attachment WiFiFoFum.CAB

Our phones dont support promiscuous mode which is that it wont alow us to capture random flying data. and all WiFiFoFum does is tell where a wifi hotspot is thats all. Best thing to do saddly is get a laptop with a wificard that can support promiscuous mode put on BackTrack Linux and then crack the password that way my friend and I wrote a program last year that cracks passwords but all it does it sends random passwords to the router which drains the battery to fast to even use the phone once cracked. I'll look for the program and post the CAB for it if i can find it.

He asked for a program for our phones that can sniff Wifi. That is exactly what WiFiFoFum does. Yes, it does not "crack" wifi, but it doesn't take a rocket scientist to figure out which ones are open and which use security. Good luck trying to find a program for the Titan that can "crack" wifi passwords.

or one can just get a data package LOL

Tregrad said:
or one can just get a data package LOL
Click to expand...
Click to collapse
No comparison between the fun of cracking a wep and having to pay the man for a slower connx where my provider can tell what I am doing, give me the link for that cab dc13!!
Gcincotta you are probably right that no prog will crack those connections on its own, although wififofum radar is great for wardriving on all networks. I will continue to use backtrack when I am about and need to connect to whatever is closest.
http://www.i-hacked.com/content/view/231/42/
THX

Screw backtrack...
I'll stick with my laptop running Gentoo with Kismet. Orinoco WLAN card with external antenna connected to my parabolic dish mounted on the roof of the car. And festival installed with sound from my laptop routed through my car speakers to tell me everything I need to know without looking down at my laptop.

gcincotta said:
Screw backtrack...
I'll stick with my laptop running Gentoo with Kismet. Orinoco WLAN card with external antenna connected to my parabolic dish mounted on the roof of the car. And festival installed with sound from my laptop routed through my car speakers to tell me everything I need to know without looking down at my laptop.
Click to expand...
Click to collapse
Sweet. That sounds friggin beautiful.
How big is your parabolic dish? Is this you??? J/K
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

There is also AirScanner. :http://www.airscanner.com/downloads/sniffer/sniffer.html
I

[email protected]$ said:
There is also AirScanner. :http://www.airscanner.com/downloads/sniffer/sniffer.html
I
Click to expand...
Click to collapse
I read about this before but couldn't remember the name when this thread came up. Anyone used it?

serfboreds said:
I read about this before but couldn't remember the name when this thread came up. Anyone used it?
Click to expand...
Click to collapse
I used it on a hermes ( monitoring the WiFi connection at work ) but I haven't tested it on my X6800.

[email protected]$ said:
I used it on a hermes ( monitoring the WiFi connection at work ) but I haven't tested it on my X6800.
Click to expand...
Click to collapse
I just got this and am using it, but I got an error that the titan's wifi doesn't support promiscuous mode.
Gcincotta or Carlos, is this true? FYI - I chose "IEEE 802.11b/g Compatible Wi-Fi Adapter" for the adaptor to monitor.
Looked promising until I saw this message. Could this work as an "external" wifi card (if promiscuous mode is an option)?
http://www.elite-electronix.com/product_info.php?products_id=827&language=en&cPath=193
PM me if you need it.

serfboreds said:
I just got this and am using it, but I got an error that the titan's wifi doesn't support promiscuous mode.
Gcincotta or Carlos, is this true? FYI - I chose "IEEE 802.11b/g Compatible Wi-Fi Adapter" for the adaptor to monitor.
Looked promising until I saw this message. Could this work as an "external" wifi card (if promiscuous mode is an option)?
http://www.elite-electronix.com/product_info.php?products_id=827&language=en&cPath=193
PM me if you need it.
Click to expand...
Click to collapse
I just revised the manual and this is what I found
" 2.1.2 Drivers
Once you have the appropriate hardware, you still need to ensure that your OS has
the right drivers to use that hardware. This can be a tricky part of getting a sniffer to work
properly, and it is why many sniffers either run on Unix based OSs, or require a special
driver to be installed before it will work in Windows.
In the case of the mobile Windows environment, most general-purpose local sniffers
will work with any WNIC without the need for a special driver or patch. Assuming your
WNIC is working before a sniffer is installed and the sniffer program is compatible with
your card, you will need no extra drivers. This said, if you want to perform wireless
sniffing, your sniffing will be limited. Currently there are no publicly available drivers
that make true promiscuous sniffing a reality for the Pocket PC. Instead, you will only
have access to networks with which your WNIC can associate, and then with only one at
a time. There are ways around this, but it would require you to purchase specialized
hardware and software costing several thousand dollars"
I personally haven't tested this on my XV6800 YET! But I am hoping to get it to work.

Sweet. That sounds friggin beautiful.
How big is your parabolic dish? Is this you??? J/K
Click to expand...
Click to collapse
That actually looks identical to mine yes. Don't get the wrong idea, it's not like I drive around with it mounted at all times like some goof...I only mount it when I go wardriving lol.
I just got this and am using it, but I got an error that the titan's wifi doesn't support promiscuous mode.
Gcincotta or Carlos, is this true? FYI - I chose "IEEE 802.11b/g Compatible Wi-Fi Adapter" for the adaptor to monitor.
Looked promising until I saw this message. Could this work as an "external" wifi card (if promiscuous mode is an option)?
http://www.elite-electronix.com/prod...e=en&cPath=193
PM me if you need it.
Click to expand...
Click to collapse
Here's the deal with the Titan. Even though Airscanner has promiscuous (monitor) mode, the Titan Wifi hardware does not support it. It only supports active mode. Injection also will not work, so even if the Titan's Wifi COULD be used in promiscuous mode, I hope the OP plans to sit in the same place for hours and hours while trying to crack the network.

gcincotta said:
That actually looks identical to mine yes. Don't get the wrong idea, it's not like I drive around with it mounted at all times like some goof...I only mount it when I go wardriving lol.
Here's the deal with the Titan. Even though Airscanner has promiscuous (monitor) mode, the Titan Wifi hardware does not support it. It only supports active mode. Injection also will not work, so even if the Titan's Wifi COULD be used in promiscuous mode, I hope the OP plans to sit in the same place for hours and hours while trying to crack the network.
Click to expand...
Click to collapse
I think someone would notice if you were sitting in front of their house pointing that at their window. LOL
Bummer about the titan, could you give me the link to those progs you mentioned earlier. I want to make sure I have the most recent versions and you sound like you keep them current. Any links or tutorials on methodology, I know backtrack so it should be similar but I would need to get up to speed.

I only go wardriving at night for that reason lol.
Gentoo Linux - http://www.gentoo.org/
Kismet - http://www.kismetwireless.net/
Festival - http://www.cstr.ed.ac.uk/projects/festival/

Related

how do i let others use my ICS?

so i love internet connection sharing, but i was wondering if theres a way for me to share my connection with other computers.
basically, i have my phone sharing internet via bluetooth to my laptop, and want to share the internet, preferably over wifi to someone else with a laptop.
how would i do this?
thanks
lol wmwifirouter...
gc14 said:
lol wmwifirouter...
Click to expand...
Click to collapse
Any way to encrypt signal (even really simply)?
I know when I go to this convention next week all the bored people are going to steal my bandwidth (VZW dialup is not fast enough for anyone but me).
I am pretty sure there was a way to configure WEP, tho I have only gotten WMWifiRouter to work one time. And it was because there were no other AP's in the area. For some reason if I am in an area where there is an AP but it's secured, my phone keeps prompting me to connect to it, and if I dismiss the message, it never properly initializes where any other device can connect to it.
No errors show up on the screen, it just doesn't show up as an available wireless AdHoc network. I've tried running the latest trial version, and the version that is in DCD's kitchen, same problem on both.
Maybe I'm just not smart enough to figure it out, or maybe my brother's PDA and my Ipod just aren't compatible with it. I got it to work 1 time, and it was with my laptop.
BTC
serfboreds said:
Any way to encrypt signal (even really simply)?
I know when I go to this convention next week all the bored people are going to steal my bandwidth (VZW dialup is not fast enough for anyone but me).
Click to expand...
Click to collapse
gc14 said:
lol wmwifirouter...
Click to expand...
Click to collapse
i thought of that too, but will it let me connect more than one computer to it at a time?
plus ive heard issues about overheating when used for a while.
thoughts?
thanks

Not for fanboys: Prime in the car GPS test after Jan 19th US update

If you're tired of threads like these, about GPS and the Prime, please leave. Nobody is forcing you to click and read. Stop. Go try to troll somewhere else.
For those who care, please keep going.
EDIT: I did more testing on page 9, adding a Samsung Galaxy Tab 10.1 wifi only to the mix: link.
I'm pretty happy with most aspects of my prime, and can't wait to get the keyboard. Without the keyboard, IMHO, the Prime is definetely not worth having. GPS sucks and wi-fi is weak, the iPad 2 is better for games, so don't try. Android for me is like a swiss knive, it should work anywhere, everywhere for a variety of purposes. Not for entertainment, but for traffic, cop warning, and navigation too, Google maps/navigator with google earth like satellite maps look incredible in the car, and the voice control is just the icying in the cake (as you can see, I have GPS in my Toyota too, but it's not even close).
But now I'm going to talk about GPS. I just did the latest update, and I took it for a ride. Bottom line is, it is improved, a bit, but it is still weak. Weak as in weaker than any other GPS I have, tablet or phone (including the Blackberry Torch, for instance, how old is that?).
In the above I have some pictures comparing it to another very good tablet, the Samsung 8.9 LTE.
For what follow, I have both devices connected via wi-fi to my Samsung Skyrocket to download maps. Both were used where I've never been before with neither tablet, so no cache or saved sats, as far as I can tell.
One tablet, the Galaxy tab 8.9 LTE was placed where it always is, in a Proclip USA cradle. The Asus Prime was laying screen side up on top of the center console, and the sunroof inner cover was open. Overcast/raining day.
Here's some pictures: Both connected to my wi-fi hotspot, "Wissenschaft der Logik".
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Right after going 40mph after getting a fix (and stopping for pics):
But the Samsung is still going strong, no issues:
And as soon as the cars stops, the Asus reaquires satellites:
But it's very weak, no fix, and even when it gets a fix, the S/N ratio (and the precision) never is even close to the Samsung.
I had asked ProClip USA to produce a tablet holder for my car(s), but perhaps I should write back telling them it's not going to work for such purpose (or tourism, or train ride, or whatever else you'd like to use google maps for).
It's no scientific proof of anything, it's just a pictorial history of my findings. It's unfortunate that a high-end tablet lacks that feature.
To make matters worse, even when the GPS Test app reports a lock, it's frequently not enough for Google Earth to find the particular street I'm in. Just the general area is highlighted. Pretty poor, really. End of story.
If you have a different experience in the car, please post.
Thanks for the testing.
OT: What do you use to mount your Samsung tablet?
bscotth said:
Thanks for the testing.
OT: What do you use to mount your Samsung tablet?
Click to expand...
Click to collapse
Sure.
Here is the link: ProclipUSA.com Galaxy Tab 8.9 mount.
you do know why the GPS is weak in Primes right?
in case not it's the aluminum condom they put on it to protect it from GPS signals....
Nice test, and it proves what we already knew: The Prime's GPS is weak.
So if you going to use it GPS/Navigation: return it, and buy another tablet. For everything else, it's the best android tablet by far.
YoMarK said:
Nice test, and it proves what we already knew: The Prime's GPS is weak.
So if you going to use it GPS/Navigation: return it, and buy another tablet. For everything else, it's the best android tablet by far.
Click to expand...
Click to collapse
Well judging by his post he doesnt seem to be too fond of it.
Why don't you use your car's own navigation system?
I can understand the complaints against GPS, but if it was me, and i was reliant on the GPS for work etc, i would simply just buy a GPS bluetooth reciever to use with it. Way i see it is the prime is worth the money without GPS chip. I'd prefer it working 100% but its not device critical especially when bluetooth GPS devices are cheap enough.
Think of it like the usual crappy headphones they package with things .. everyone always buys better quality ones to replace them ?
There are always those saying, why don't you just use the car's GPS, or who would use it for navigation anyway? Apparently some people don't get out much. There are other forms of transportation and other outdoor uses which make GPS very desirable for some of us.
Using your rationalization, one could say why do you need a tablet? Why not just use a loptop? It's faster and does things that your tablet can't do.
The prime is a nice device, but it does have it's flaws whether you admit to yourselves or not. When and if Asus get's it completed, I may buy another.
Ehh
I get the same numbers that you were for accuracy, as in it floats between 100 and 60 feet but then I used it for navigation and it worked fine. So Im not sure if its just a reporting error.
I tested it with Run Keeper the other day and besides one small drop in the beginning It was spot on. I'll Try and upload pics to this post later Im at work now.
Mined you this was all before the update. So I'll give it a retest on the way home today and see if it improved. I will admit I did have it sitting on top of the dash so the antenna was facing directly skyward unlike your facing the driver setup.
thomslik said:
There are always those saying, why don't you just use the car's GPS, or who would use it for navigation anyway? Apparently some people don't get out much. There are other forms of transportation and other outdoor uses which make GPS very desirable for some of us.
Using your rationalization, one could say why do you need a tablet? Why not just use a loptop? It's faster and does things that your tablet can't do.
The prime is a nice device, but it does have it's flaws whether you admit to yourselves or not. When and if Asus get's it completed, I may buy another.
Click to expand...
Click to collapse
non-sense, it doesn't make any sense to try to use a tablet over a device that's designed specifically for the purpose that you're trying to accomplish. Now I can understand those who don't have GPS navigation in their cars being disappointed but it makes no sense to me of what I see the OP doing. Just my two cents.
the_game_master said:
non-sense, it doesn't make any sense to try to use a tablet over a device that's designed specifically for the purpose that you're trying to accomplish. Now I can understand those who don't have GPS navigation in their cars being disappointed but it makes no sense to me of what I see the OP doing. Just my two cents.
Click to expand...
Click to collapse
Agreed. And how many people own a tablet but not a smart phone?
People need to get over this gps thing.
Sent from my ADR6400L using XDA App
the_game_master said:
non-sense, it doesn't make any sense to try to use a tablet over a device that's designed specifically for the purpose that you're trying to accomplish. Now I can understand those who don't have GPS navigation in their cars being disappointed but it makes no sense to me of what I see the OP doing. Just my two cents.
Click to expand...
Click to collapse
I could also say non-sense, it doesn't make any sense to build a feature in a device and decide it is OK for it not to perform as it should, and does in other tablets, just because you can use another device for that purpose. Any way you sugar coat it, and try to make it OK, it is a defect. Your attempts to justify this are just rationalization.
It is apparent we have different concepts of what is acceptable. Rather than continue this argument of opinions, we must just agree to disagree.
Good luck.
Problem solved:
http://www.ebay.com/itm/TomTom-Blue...ccessories&hash=item1e6895e1dc#ht_8325wt_1396
This whole thing is pretty funny. You've got an LTE tablet and a WIFI tablet. The WIFI tablet is admittedly pulling data from a second device (a phone) and you are trying to use GPS out of the device with lesser connectivity.
The point is when you are out and about, the Prime cannot be used as a standalone device, it has to tether through something. I could see more of an argument if the Sammy's GPS was crap, I mean by giving it LTE it should work anywhere it can get a data signal. The Prime can't, you've got to use another device, which will have it's own GPS to even get the thing going in the first place.
Azeolus said:
The point is when you are out and about, the Prime cannot be used as a standalone device, it has to tether through something. I could see more of an argument if the Sammy's GPS was crap, I mean by giving it LTE it should work anywhere it can get a data signal. The Prime can't, you've got to use another device, which will have it's own GPS to even get the thing going in the first place.
Click to expand...
Click to collapse
You seem to be confused about what AGPS does. The wifi is only used to help the GPS get the initial fix faster, after that it should run as a standalone GPS just fine without WIFI. (if it worked correctly)
With that said I think we all already know that the GPS is mostly rubbish on this device. No amount of firmware updates or software tweaks can overcome a bad hardware design, that even ASUS has admitted already. This is basic physics and nobody can write software that fixes this issue. I personally don't believe we need anymore posts on the topic regardless of how well intentioned they might be.
There are three things that are used by GPS:
GPS itself, it detects satellites and calculates its location based on those satellites. It finds satellites and gets location data from those satellites which it then uses to figure out its own location (GPS device is not told by GPS satellites where it is, GPS satellites simply tell where they are). Differently from typical networks that calculate position by triangulation with three cell towers, GPS requires locks on four satellites. This is because GPS also takes altitude into consideration.
AGPS is used to update the database (sort of cache) of GPS satellites. The more up to date this data is, the quicker it can find locks. When GPS signals are weak then this 'assisted' data can be used to figure out incorrect data from correct one. AGPS does not require 3G, it just requires internet. It can improve the amount of time it takes to lock onto GPS satellites signal. It is also possible that AGPS calculates its position from cell towers based on signal strength (this is not called actually AGPS, but is often labeled as one, it is actually Cell-Site Triangulation), this causes possibly inaccurate position (the wide wide circle you see on Google Maps for your position sometimes)
WiFi is used to a) update the AGPS database and b) get information from Google about the approximate location of the device (this is called Wi-Fi Positioning System). Google knows locations of certain WiFi networks, so when you are connected to specific WiFi device, it can lock your position down much quicker since it looks up the location of the WiFi device.
So it is a three-layered process. If your WiFi network is known by Google then you will get WiFi lock much quicker. The widest circle is usually AGPS with just cell-tower information, smaller circle is usually achieved by just WiFi positioning and smallest circle when you actually have a GPS lock.
Azeolus said:
This whole thing is pretty funny. You've got an LTE tablet and a WIFI tablet. The WIFI tablet is admittedly pulling data from a second device (a phone) and you are trying to use GPS out of the device with lesser connectivity.
The point is when you are out and about, the Prime cannot be used as a standalone device, it has to tether through something. I could see more of an argument if the Sammy's GPS was crap, I mean by giving it LTE it should work anywhere it can get a data signal. The Prime can't, you've got to use another device, which will have it's own GPS to even get the thing going in the first place.
Click to expand...
Click to collapse
GPS = global positining system. Works anywhere on the globe (that's planet earth, if you don't know).
No GPS requires internet, internet connection helps you acquire faster. You do realize there are offline maps which can be used without internet connection right?
The point is...it doesn't matter how people use their tablet. It has a gps, I should be able to use it anyway I want to use it.
People who have no need for GPS good for you, but how the hell are you going to tell other people that they don't need it. You don't know that.
ROFL
good question....
nice comparison though
nxp3 said:
GPS = global positining system. Works anywhere on the globe (that's planet earth, if you don't know).
No GPS requires internet, internet connection helps you acquire faster. You do realize there are offline maps which can be used without internet connection right?
The point is...it doesn't matter how people use their tablet. It has a gps, I should be able to use it anyway I want to use it.
People who have no need for GPS good for you, but how the hell are you going to tell other people that they don't need it. You don't know that.
Click to expand...
Click to collapse
I really don't get the attitude of some of these sheeple. They can't envision someone using something in a manner they themselves do not. I went through this same idiocy with the Vibrant launch and its GPS issues. Morons would say "Well it works as a phone, you bought a phone, right?" Yeah, for $500 (before subsidy).
WTH is the matter with these people? Do they like big business ****ting all over them?

Highly Polished Turd

For the record, I was really trying not to rant about my Prime...
C1OKAS s/n. GPS in-op. Bt/Wifi - good. Connected my Jawbone Icon and then started watching Archer on Netflix (A2DP to Icon), never experienced wifi degradation. So that seemed good. Wifi reception was as good as my OG Evo 4g and Asus 1018P netbook.
Updated to ICS out of the box. Rooted after it became apparent that I needed to.
So to begin the rant: This tablet is useless out of the box. I stream my movies from my desktop (.wmv b/c that's what my samsung tv accepts) from my computer - the prime can't. Downloaded dice player free - super choppy, will work it out later. Started dl'ing apps n actually paying for them since I now have an interface that is more user-friendly (in size). Couldn't wait to go to work and use it through out my day--------SCREECHING HALT!!! NO AD HOC WIFI SUPPORT IN ICS!!! Which means no tethering to our phones. At this point I was letting some things go, i.e. the excessive light bleed all across bottom and right side, the in-op GPS, the inabilty to stream movies on my existing network, and the buggy interface that kept making apps appear and disappear on my home screens. So now I am in the worst situation of all, I have to RMA it to Asus b/c I made 2 noob mistakes while fixing my ad hoc issue. I rooted so I could use certain apps, then realized I can fix ad hoc support. So I started working on that and accidentally changed my '/system/bin' folder to '/system/bin - Copy'. This was a slip of my finger and that was that. Couldn't change it back for whatever reason. Then I made the grave mistake of rebooting. Haven't gotten passed the Eee Pad screen since. Tried many many things to no avail. So at this point, I made a big mistake and I am Boned b/c Asus thought it wise to lock the bootloader. Otherwise, I could've rooted and loaded a custom recovery yada yada, backed up, restored.....
I will end this saying that I have a $750+ paper weight b/c of my own actions, but this never would have happened if I had an unlocked bootloader, ad hoc support, and more basic functionality that modern electronics are expected to come equipped with. Asus, you have made one damn fine looking device, but where the hell is the functionality that we have come to expect from you? My Asus 1018P netbook has bluetooth 3.0 and usb 3.0 and I bought it 2 years ago! Why doesn't this tablet have much more functionality out of the box? It definitely has a steep learning curve and this is exactly why Android is always going to be in second place! Make a damn finished & functioning product before releasing it for Christ sakes!
Yeah yeah I know......Cool Story Bro. Don't flame me for being right. I was hoping/expecting to get a good one, but apparently the flaws are more widespread than I imagined.
AFAIK, there has been no AD-HOC support in ANY Android tablets I have tried out of the box. This held true for the Xoom (had to root and custom rom before it worked) and the Toshiba Thrive. I did not expect AD-HOC to work out of the box at all honestly.
That said, Sprint Hotspot works perfectly.
Honestly, I do not think it fair that you would be pissed at the device because you caused the damage trying to make it do something that it natively did not have support for. I am all for tinkering, rooting, etc....but I am aware that there may be unforeseeable consequences that go along with it.
I wifi tether to my phone with my prime all the time. Unless I'm missing something and you're using a method other than portable hotspot?
Sent from my Transformer Prime TF201 using Tapatalk
m3t4lw01f said:
I wifi tether to my phone with my prime all the time. Unless I'm missing something and you're using a method other than portable hotspot?
Sent from my Transformer Prime TF201 using Tapatalk
Click to expand...
Click to collapse
Sounds like you've got infrastructure capes on your phone. Not all of them do and require an ad hoc connection. ICS doesn't suppor the later.
We already have ad hoc network tethering working on ICS. Check out QnA section on how to enable it again. Very simple, requires root though. Its the thread created by lock n load.
A bit off topic but I'm curious why are you guys tethering from the tablet to your phone? If you're worried about data usage because of data plan caps why don't you make the phone connect to the same wifi source the prime is connecting to? Idknwhat ad-hoc is so maybe someone can fill me in why u would connect to wifi just to make it go from the prime to your phone.
yoursexyhero said:
A bit off topic but I'm curious why are you guys tethering from the tablet to your phone?
Click to expand...
Click to collapse
Erhhh, to get data on their tablet when they are not in range of a WiFi AP?
Regards,
Dave
Sent from my GT-N7000 using Tapatalk
yoursexyhero said:
A bit off topic but I'm curious why are you guys tethering from the tablet to your phone? If you're worried about data usage because of data plan caps why don't you make the phone connect to the same wifi source the prime is connecting to? Idknwhat ad-hoc is so maybe someone can fill me in why u would connect to wifi just to make it go from the prime to your phone.
Click to expand...
Click to collapse
I think they mean tethering from phone to the prime. Or if you have a laptop with wireless card, you could tether that connection to the prime.
foxmeister said:
Erhhh, to get data on their tablet when they are not in range of a WiFi AP?
Regards,
Dave
Sent from my GT-N7000 using Tapatalk
Click to expand...
Click to collapse
Confused.......so ur not tethering FROM the phone to the tablet?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I believe you can download the original rom image from asus's website, put the rom on a micro sd card and flash it thru the stock recovery.
search the forum, i think someone have brick the prime and fixed it that way...
good luck.
Movies seems to work fine for me using Splashtop or one of the VLC apps.
What about MKV files??
VLC Pro works awesome.
So you have a few problems:
1) You want to stream video with the most crappy, worst supported and most hated codec ever: WMV(Windows Media Video) ? The fact that that's the only format your Samsung TV supports, does only say something about your Samsung TV. The Prime plays almost every format I trow at it just fine, even High profile 1080p h264 MKV files. Most other "Premium" tablets can't do this. My advice is: use a normal video codec, and the file will play just fine.
2) You rooted your tablet, and renamed the entire /system/bin/ folder, thus bricking you device. I feel sorry for you, but you sound like the Prime is to blame.
3) Then the rant about a locked bootloader. You're right...this is something ASUS should never have done, but you know you can probably flash every original firmware(they are signed so they do work with the current bootloader) back right. I've seen this mentioned elsewhere.
4) Ad Hoc WiFI: My Prime connects without problem to my phone(Nexus One with ICS 4.03). Maybe it has something to do with encryption, because with WPA2-PSK with password set Wifi hotspot works fine. Even without rooting.
I am so thankful you seem to be the only one who has figured out that we should have a post about complaints on this tablet.
WAIT..... I am sorry - I am mistaken. There are 15,000 threads about this stuff already. You must have thought your thread would be more special. My apologies.

major annoyance: can't connect to my milestone 2

I bought my tf201 mostly for work. now that I found out that ICS has abandoned ums, I have a problem. There is no way for me to easily transfer documents to my office computer as I am not allowed to install drivers.
simplest solution: use my ms2 as mass storage over usb. i was always able to connect my ms2 to my office computer with ease.
however it does not work with the transformer. it sees flashdrives and external disks no problem, the ms2 it fails to connect to. wtf?
I have usb debugging turned off btw.
any ideas?
Can you install a service like Dropbox?
If not, can you access the Dropbox website from your work computer?
I find Dropbox to be the easiest way to send files back and forth from my PC to my phone and tablet, especially since I don't necessarily have to have my phone or tablet with me in order to make sure I can get the files on there.
Alternatively, if your work PC has a SD Card slot you can pop the MicroSD out of the Transformer and put it into an adapter in the side of the computer. Not the most convenient work flow, but not a whole lot worse than physically plugging a device into a USB slow in order to use it as mass storage either.
no dropbox allowed on my work computer and also not on the transformer prime as there is no wifi at work.
also it does not have an sd card reader. wouldn't be a problem since I can bring my own but that is not really a solution to my problem at all.
see, i did buy a flash drive to get around popping out the micro sd from the transformer etc. biggest problem is exchanging files between my phone and the tf201 as I do not want to open my battery compartment and rip everything out of my phone all the time to get a freaking word doc onto my transformer.
If you have WiFi, you can try with Sama File Shering.
iR0NY said:
If you have WiFi, you can try with Sama File Shering.
Click to expand...
Click to collapse
Did you read my post? no wifi!
please guys, i appreciate people trying to help, but noone seems to have anything to contribute towards a solution to my actual problem...
I will restate my question: usb sticks, external hdds etc work with my prime.
why the hell doesn't my milestone 2 work then? it's the same protocol to my understanding: ums.
i know that the prime can't be connected over ums since the bump to ics, but it should still work the other way round with my milestone 2.
xnopasaranx said:
no dropbox allowed on my work computer and also not on the transformer prime as there is no wifi at work.
also it does not have an sd card reader. wouldn't be a problem since I can bring my own but that is not really a solution to my problem at all.
see, i did buy a flash drive to get around popping out the micro sd from the transformer etc. biggest problem is exchanging files between my phone and the tf201 as I do not want to open my battery compartment and rip everything out of my phone all the time to get a freaking word doc onto my transformer.
Click to expand...
Click to collapse
If yoru computer has USB - could you use a USB/SD Card adapter and put the microSD in a SD Adapter? it would only run a few bucks
blue tooth transfer....
now that is a great idea. i don't know why i didn't think of that, i never used blue tooth a lot before. thanks, i'll check it out.
thinking about the earlier post aswell. maybe it is possible to connect the transformer over wifi adhoc by making the ms2 an access point. i got cm7 running on it. so samba sharing might be possible after all and i just didn't get the hint.
I just got around to connecting my ICS Transformer Prime to my Windows PC via the USB cable.. and it worked perfectly well as a USB Mass Storage device.
I was able to access practically any file on the Internal storage as well as the MicroSD card. I can copy files to and from my Windows PC with no problems whatsoever.
When I plugged the USB cable from the Prime into my PC, the Prime connected as a "Portable Media Player" and in the USB setting on the Prime, under Storage the connection type is specificed as "Media Device (MTP)."
ICS never abandoned UMS, it just doesn't work on the Galaxy Nexus (the premier ICS device) because the Galaxy Nexus lacks a microSD slot and has an unpartitioned internal storage space. The Transformer Prime has both an microSD slot and a partitioned internal drive so UMS works perfectly well.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
yes, thank you for that little picture you drew up there. here is the thing. my office computer is an old windows xp computer which does not support mtp. my linux system at home does not support mtp out of the box which is annoying but not a problem.
now once again, i am looking for an uncomplicated way to get my files off my tablet and onto my phone/work computer without having to install drivers, software etc. i have a very demanding job where i need to stay mobile and if i need to print something somewhere on the go i can go into peoples offices and tell them to install that ****ty mtp protocol first or some asus driver before i can print.
i am not an idiot. so please do not treat me like one for asking a relevant question. ums has been abandoned in ics, it is not the same thing as mtp. maybe you should read up on it before you make an effort to post ridiculous tutorial pictures.
anyway, i have given up on this piece of **** hardware. Going to buy a decent laptop instead of this, if i wanted a portable toy with great battery life, i would bought a nintendo DS...

Polycom Trio 8800 Conference Phone - how can I edit the boot image?

Hi everyone!
It's been a while since I last fiddled with Android, more than a decade!
But I think I found a nice little project that I'll try to document here.
So far bricked it, tore it apart, found UART and managed to unbrick it.
I could really need some help to try and edit the boot image!
So I recently got my hands on a Polycom Conference phone...
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
It's a nice handsfree device that I now use as a USB speakerphone and SIP client on my desk at home.
And it's running Android, so it cannot be left untouched!!!
My goal is to root it, maybe be able to install some additional apps on it and ideally retain these things with a current software update - more on that later.
My starting point:
The device has its own launcher and is unfortunately completely locked down.
No ADB, no custom apps, no browser, no nothing.
All I can do is start an internal recovery on boot that will look for a firmware on a USB drive.
It works for one SIP account and can be used as a USB speakerphone.
Pretty boring for what it is, I think.
Some details:
Android 4.4.2, Kernel version 3.0.31
Hardware: bcm911130_pl_rocky_proto2, PolyDSP Merlyn ARMA9, BootBlock 3.0.5.0006 (65290-001), BCM28155 A3 VideoCore
CPU: armeabi-v7a, capri_pl_rocky_proto2
Getting root:
There is a known vulnerability for the device in an older firmware version:
It's described here unkl4b.github.io/Authenticated-RCE-in-Polycom-Trio-8800-pt-1/
While it's not exactly easy to downgrade to this version and should not even be possible according to support documents,
it is in fact possible by starting from the latest 5.9.6.3432 version Polycom still offers and then downgrading via USB in two increments via
5.8.0 AA (downloads.polycom.com/voice/rp_trio/Polycom_UC_Software_5_8_0_15024_AA_Trio8800_release.zip) to the vulnerable version
5.7.1.4145 (downloads.polycom.com/voice/rp_trio/Polycom_UC_Software_5_7_1_4145_AC_Trio8800_release.zip)
Now I can enable Telnet on the device by uploading the following configuration file:
Code:
<telnet diags.telnetd.enabled="1"></telnet>
And then start the process as described, by logging in on port 1023 with Polycom / 456 (or the current Admin password) and starting adbd:
Code:
ping 8.8.8.8 ; setprop service.adb.tcp.port 5555
ping 8.8.8.8 ; stop adbd
ping 8.8.8.8 ; start adbd
After that, I can connect via adb over TCP and open a shell as root. Yay!
Where that leaves me:
I can enable the Android Launcher and use it until the Poly Launcher pops up again every 30 seconds or so via pm enable com.android.launcher
Enabling USB debugging does not work. It disables the TCP connection but no USB connection is possible.
I tried to install APKs over the shell but the Polycom Settings app has a watchdog that deletes everything again immediately.
The setting userAllowed seems to be defined in /data/data/com.polycom.polysettings/shared_prefs/com.polycom.polysettings.PreferencesFile.xml but any changes to this file are just overwritten immediately.
I removed that settings app by remounting /system with mount -o rw,remount /system and renaming /system/app/PolySettings.apk and /system/app/PolySettings.odex.
After killing the process, that unfortunately leads to a popup every second, telling me that the settings app could not be opened.
With a lot of fast tapping it would be possible to start a 3rd party app on the device. Kingoroot did not work, though.
So the remote shell is all I have for now.
I managed to dd everything under /dev/block/ as well as /system, /user and /cache as an image.
Here's where I would really appreciate some help!
Do I even have a chance to make some persistent changes to this phone without tearing it apart?
Any development tools I saw are for much newer Android versions, so if I even have a chance at changing anything, someone pointing me in the right direction (kitchens, tutorials) would be great.
My main machine is a Mac but I have a Windows machine at my disposal.
What should my next steps be?
How can I have a look into what's on the device from the images I pulled?
How would I best approach all the device restrictions?
How can I then make permanent changes, if at all?
Would I have a chance to (partially) upgrade to a newer firmware while keeping it rooted and modded?
I'll keep poking it, the process has been fun so far.
Maybe this will lead to something in the end, maybe not.
Any help is highly appreciated!
s#
shadow# said:
Here's where I would really appreciate some help!
Do I even have a chance to make some persistent changes to this phone without tearing it apart?
Any development tools I saw are for much newer Android versions, so if I even have a chance at changing anything, someone pointing me in the right direction (kitchens, tutorials) would be great.
My main machine is a Mac but I have a Windows machine at my disposal.
What should my next steps be?
How can I have a look into what's on the device from the images I pulled?
How would I best approach all the device restrictions?
How can I then make permanent changes, if at all?
Would I have a chance to (partially) upgrade to a newer firmware while keeping it rooted and modded?
I'll keep poking it, the process has been fun so far.
Maybe this will lead to something in the end, maybe not.
Any help is highly appreciated!
Click to expand...
Click to collapse
Hello and good morning, @shadow#
Prior to your next posting please read the guidances that are stuck on top of every forum like
[ATTN] : Read before posting - Any questions posted here will be MOVED or CLOSED
Please read the below before posting. Any questions not development related will be moved or closed. Forum Searching | Posting | The Basics: (Make sure you've read them before starting a new thread) Forum Rules Forum Search Google Forum...
forum.xda-developers.com
and the others. I've moved the thread to Android Q&A.
Thanks for your cooperation!
Regards
Oswald Boelcke
Senior Moderator
I've got about as far as you.....although have managed to prove the telnet can be accessed on the 7.2.3.0852 version also.
If you dowwnload the full .ld software, there is a folder in there called Config, with a file called Global.cfg.
Have a look at that file....there are a lot of flags that can be set/unset. Might be a good place to work from.
Note, i'm on 7.2.3.0852, so I have ssh access but not the ability to execute additional code via ";"
My sim is simply to hsve Spotify on the unit!
Well, this was fast I seem to have bricked the device already.
I tried to unpack the boot.img I got from the device, make a very small change with CarlivImageKitchen (starting adbd) and then write the packed image back to the device.
On reboot I now get the first Polycom screen and that's it.
The 4 finger revovery does no longer work, it's just stuck and does not continue.
Lacking any kind of connection to the device I guess it's time to bin it and move on.
That is, unless anyone has any more ideas on what I could try.
Maybe there's UART lines available?
shadow# said:
Well, this was fast I seem to have bricked the device already.
I tried to unpack the boot.img I got from the device, make a very small change with CarlivImageKitchen (starting adbd) and then write the packed image back to the device.
On reboot I now get the first Polycom screen and that's it.
The 4 finger revovery does no longer work, it's just stuck and does not continue.
Lacking any kind of connection to the device I guess it's time to bin it and move on.
That is, unless anyone has any more ideas on what I could try.
Click to expand...
Click to collapse
Will it respond to a ping? May just be the gui/application stack that's crashed.
If so, you may be able to get it to boot from a provisioning server.
tjump7 said:
Maybe there's UART lines available?
Click to expand...
Click to collapse
I'd have to figure out how to take it apart for this first and then start from scratch with no knowledge, probably including getting all the tools.
Tempting but not sure it's worth it
silo24 said:
Will it respond to a ping? May just be the gui/application stack that's crashed.
If so, you may be able to get it to boot from a provisioning server.
Click to expand...
Click to collapse
It does not even react to the 4 finger recovery method any more.
Pretty sure that's way before there is any network. No link.
shadow# said:
I'd have to figure out how to take it apart for this first and then start from scratch with no knowledge, probably including getting all the tools.
Tempting but not sure it's worth it
It does not even react to the 4 finger recovery method any more.
Pretty sure that's way before there is any network. No link.
Click to expand...
Click to collapse
Just a Pi Pico I believe is needed for the hardware aspect, as for the tools, i don't know what you currently have. I'm just trying to come up with ideas for you
Quick edit, here's a link if you're curious at all: https://github.com/Noltari/pico-uart-bridge
shadow# said:
I'd have to figure out how to take it apart for this first and then start from scratch with no knowledge, probably including getting all the tools.
Tempting but not sure it's worth it
It does not even react to the 4 finger recovery method any more.
Pretty sure that's way before there is any network. No link.
Click to expand...
Click to collapse
Try a usb stick. Try with a full zip file first, then try with the 0000000p.cfg and the xxxxx.sip.ld file only.
silo24 said:
Try a usb stick. Try with a full zip file first, then try with the 0000000p.cfg and the xxxxx.sip.ld file only.
Click to expand...
Click to collapse
It no longer reacts to a USB stick and I cannot trigger the recovery as that is not a real recovery but instead part of the boot image. Which I unfortunately messed up.
The bootloader is u-boot but I cannot access it. Config is:
Code:
baudrate=115200bootcmd=if key VOL_UP; then android recovery; else android; fi;bootdelay=1brcm_dt_enable=yesbrcm_dt_size=0x10preboot=vc runwatchdog=off
The volume keys are soft keys, so no luck there either.
Have you tried the micro-usb port to a PC? If it's that screwed it may be in a recovery mode of some sort. Like Qualcomm QFIL for example.
Any ideas what chipset these things run on? They are going so cheap on eBay now that I've just bought another!
silo24 said:
Have you tried the micro-usb port to a PC? If it's that screwed it may be in a recovery mode of some sort. Like Qualcomm QFIL for example.
Click to expand...
Click to collapse
I tried but nothing was detected.
I got stuck half way through my teardown attempt after taking out all visible screws.
I fear the display is glued on with more screws underneath, I have no clue how to remove it.
Any ideas?
There's FCC pictures available of the insides of the 8500 <- that's actually an 8800!
8500 VOIP Conference phone with Bluetooth functionality Teardown Internal Photos report131453884415308571 Polycom .
VOIP Conference phone with Bluetooth functionality Internal photo details for FCC ID M72-8500 made by Polycom Inc.. Document Includes Internal Photos report131453884415308571
fccid.io
I see quite a few unpopulated headers on that board!
If only I could get to them
Alright!
That was some nasty glue, but I finally managed to get it open.
The display is glued on, mostly on the sides. The NFC antenna on the left as well as the soft buttons on the right are glued back and front and need to stay on the display - so currently no idea if they are still ok.
The display connector comes from the back at the top of the display and connects in the lower part. Display needs to be flipped upwards to get to the last screws. As long as any wedging is limited to the left and right sides it is possible to get if off without damaging the display.
I still get the Polycom logo.
Here is some pictures of the bottom of the PCBs.
The last one has the Wifi Board and a curious little connector that is unused.
Could this be a service port?
Now what should I try next?
So I found an old FTDI232 that should work on my Macbook and started checking all of the 4 pin headers for potential UART.
I set the terminal to 115200 8-N-1 with no flow control and connected GND and RX.
I tried for a few seconds each after powering the device.
Unfortunately, I got absolutely nothing apart from some noise on some on them as soon as power was provided.
That port in the image above I have no connector for, it's probably something else anyway.
What else could I try?
shadow# said:
Alright!
That was some nasty glue, but I finally managed to get it open.
The display is glued on, mostly on the sides. The NFC antenna on the left as well as the soft buttons on the right are glued back and front and need to stay on the display - so currently no idea if they are still ok.
The display connector comes from the back at the top of the display and connects in the lower part. Display needs to be flipped upwards to get to the last screws. As long as any wedging is limited to the left and right sides it is possible to get if off without damaging the display.
I still get the Polycom logo.
Here is some pictures of the bottom of the PCBs.
View attachment 5837545View attachment 5837547View attachment 5837549
The last one has the Wifi Board and a curious little connector that is unused.
Could this be a service port?
View attachment 5837551
Now what should I try next?
Click to expand...
Click to collapse
J1 indicator....could be for JTAG potentially?
EDIT: After looking again I can see I'm probably wrong, but that may still be your UART interface?
tjump7 said:
J1 indicator....could be for JTAG potentially?
EDIT: After looking again I can see I'm probably wrong, but that may still be your UART interface?
Click to expand...
Click to collapse
Could actually be JTAG as it seems to be double sided, 4 more pins at the top.
Three of them measure 1.8V when powered, the rest seems to be at 0V.
But I have no way of properly connecting to it.
shadow# said:
Could actually be JTAG as it seems to be double sided, 4 more pins at the top.
Three of them measure 1.8V when powered, the rest seems to be at 0V.
But I have no way of properly connecting to it.
Click to expand...
Click to collapse
Do you by chance have a logic level converter? Would make talking to 1.8v much easier
tjump7 said:
Do you by chance have a logic level converter? Would make talking to 1.8v much easier
Click to expand...
Click to collapse
Unfortunately not, not even anything JTAG related.
shadow# said:
Unfortunately not, not even anything JTAG related.
Click to expand...
Click to collapse
How important is this project to you? The logic level is cheap (and that may be I2c as well, no real clue)
4-channel I2C-safe Bi-directional Logic Level Converter
Because the Arduino (and Basic Stamp) are 5V devices, and most modern sensors, displays, flashcards, and modes are 3.3V-only, many makers find that they need to perform level ...
www.adafruit.com
Any chance of identifying the underlying SoC? Obviously it's reporting itself as bcm911130, but I suspect that's a Polycom specific part number....i.e. a Standard cellular Android SoC with elements that aren't utilised blocked out.
Might give more of an idea as to the Bootloader structure.

Categories

Resources