Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
I tried to find a changelog, but I couldn't find any. There should be one explaining what the update changes, like any software.
The update is likely a blob, and the updater expects your /system to look a certain way to apply said blob. A binary diff basically. You will not find a changelog in the update, frankly I don't even know why you'd bother looking beyond a cursory glance. Also I seem to recall something about the blob being encrypted with Kyocera's keys or something, it'd be earlier in this thread.
The only way to see what gets changed will be to have an image of an unmodified Rise and an image of an updated Rise, and compare the contents of the two images.
But is this low-end phone really worth that effort? Well, maybe, the hardware isn't that bad but it's still pretty low-end.
first things first we need to get the files and see how they are being flashed onto these phones.
Isn't there a law on this or something? Customers has the right to know the details.
And how are we supposed to do that? The only way to even access the file is through the kyocera updater
Here's a question: Would we be able to use the solution in this link to disable the security check?
Azimuth Security: Exploiting Samsung Galaxy S4 Secure Boot
I might pick up some reverse engineering skills if I have to to find the memory addresses, if need be.
Here's a question: Would we be able to use the solution in this link to disable the security check?
Azimuth Security: Exploiting Samsung Galaxy S4 Secure Boot
I might pick up some reverse engineering skills if I have to to find the memory addresses, if need be.
I have looked into that. Its essentially "How Loki exploit works". I have searched the bootloader for the check_sigs() function. Its not there. If you need a second opinion, I have it already. djrbliss (creator of loki) has looked into this also. Basically loki wont work for us. I am trying to come up with a separate exploit and work off of that.
If you look at the post, it says "posted by Dan Rosenberg @ 5/23/2013 10:36:00 AM "
Dan Rosenberg is djrbliss's real name. I contacted him thru irc. I dont have the logs but when I say some REALLY good devs were helping with the hydro/rise in the background, they have. Its just nothing has come to light yet.
I have been an uduor and not properly look for the check sigs function, apparently there's this app that will help me find it. I was lookimg by using a hex editor. That was wrong. I havrnt foumd any other possible exploit yet and as for removung it completely that is impossible at the moment as it would require a bootloader rewrite.
To whom it may concern:
I would like to make it known that there is a large community who uses the Rise and its sister phones, the Event and the Hydro. Many of the users of these phones wish to be able to have the ability to have a recovery that is able to make backups of the phone's data in case something happens to it.
As it stands right now, that is impossible. All three models have a locked bootloader which makes it impossible to install a custom recovery to make crucial backups of the phone. Most other device manufacturers offer the ability to unlock the device bootloader so that their users are able to install the custom recovery. For example: HTC. Some manufacturers do not even lock their bootloaders. For example: ZTE.
Without being able to install the custom recovery, the users of these phones are getting irritated and upset. As a result, they are switching their phones and leaving Kyocera behind. Kyocera makes great devices, and it is a waste to leave them because the bootloaders are locked down, but it remains the only choice.
Another option would be to remove just the security check that is in the bootloader that prevents the custom recovery from properly installing. The bootloader could stay locked down, while still enabling users to install a custom recovery and make crucial backups of their phone. This will protect both the manufacturer and the carrier, as it prevents the device from being able to change carriers.
We in the Kyocera community need the ability to install custom recovery, and it is only possible from Kyocera. The bootloader does not have to be in an unlocked state, the security check is all that needs to be removed to install the recovery. This prevents devices from changing carriers, as that requires an unlocked bootloader. Since the bootloader would still be locked, it is not an issue.
Thanks for your time,
Zacharry
Well, I made one last effort to contact Kyocera and Virgin Mobile. Here is the message I sent them. I will let you guys know what they respond with.
Has anyone looked into bootstrapping the recovery? Like the Moto DX of old and the Thor/Loki recoveries on current Samsung devices?