Related
Okay, so i hear that pretty much beta-g1's are given to call centers and support points etcetera. What keeps the romdumps?
It's time to port this little bastard!
FYI: Sorry for the dissapointment from the topic title
awh man! you got me all excited. whatever its not like my little wing would handle android anyway.
im pretty sure nobody wants to speak up because of what happen to black93300zx. he got a pre-release att fuze and everyone was going crazy.
kidnamedAlbert said:
awh man! you got me all excited. whatever its not like my little wing would handle android anyway.
im pretty sure nobody wants to speak up because of what happen to black93300zx. he got a pre-release att fuze and everyone was going crazy.
Click to expand...
Click to collapse
well, i would suggest, make a new username, just dump the rom. and then don't log in to that account anymore.
kidnamedAlbert said:
awh man! you got me all excited. whatever its not like my little wing would handle android anyway.
im pretty sure nobody wants to speak up because of what happen to black93300zx. he got a pre-release att fuze and everyone was going crazy.
Click to expand...
Click to collapse
Heh, I think the only pre-release phone I'll buy from now on is something for AT&T with Android. Despite the last reaction, you can bet if I get my hands on something I'll leak info. Maybe THIS TIME someone will believe me. ;-)
Very good , Dump dump dump it
I'm also interested in seeing a rom dump!.... and also buying a device if someone is selling it yet
what are the chances of putting the android rom on my tilt?
thodge21 said:
what are the chances of putting the android rom on my tilt?
Click to expand...
Click to collapse
Android has already been run on a Tilt, it's far from stable but they're working on it.
http://www.youtube.com/watch?v=Q2rByiug8LU
G1 for Sale
pof said:
I'm also interested in seeing a rom dump!.... and also buying a device if someone is selling it yet
Click to expand...
Click to collapse
I actually ordered the G1 and am going to sell it. It is currently on ebay or you can contact me with a pm for the price.
Black93300ZX said:
Android has already been run on a Tilt, it's far from stable but they're working on it.
http://www.youtube.com/watch?v=Q2rByiug8LU
Click to expand...
Click to collapse
so is the sdk package released with a non-beta version or is it just an sdk-package?
http://code.google.com/android/download.html
thodge21 said:
so is the sdk package released with a non-beta version or is it just an sdk-package?
http://code.google.com/android/download.html
Click to expand...
Click to collapse
Hell if I know, I just knew it was on the Tilt and nothing more than that.
lol. okay. i'll download and see if i can figure it out. let you know what i find.
looks like the programing language is java...which i haven't learned yet... but it does have an android emulator aswell as the android structure, but no straight forward rom. someone could probably pull out the platform and cook a rom with the proper know how though.
I'll give it a try when I get mine Oct. 22. Although, I'm sure someone will have dumped it and uploaded it here by then. It might be tricky to copy from the device itself. This will be a totally different experience than WM. I am not too good with Linux...especially the mobile version, lol! I'll definitely give it a try. Does anyone know how to get the OS from the device itself?
sino8r said:
Does anyone know how to get the OS from the device itself?
Click to expand...
Click to collapse
IMHO the contents of /lib/modules/* will be the most interesting
thing to look at.
bumping
This deserves a bump.. camera+power gets me to the rom on the G1, but I'm not seeing anything in HTCFlasher, as usbserial isn't detecting my g1. pof, you around?
galtoid said:
I'm not seeing anything in HTCFlasher, as usbserial isn't detecting my g1. pof, you around?
Click to expand...
Click to collapse
Can you post the 'lsusb' and 'lsusb -vvv' output ?
cr2 said:
Can you post the 'lsusb' and 'lsusb -vvv' output ?
Click to expand...
Click to collapse
I can adb to it fine, here's a lsusb -vvv diff:
Code:
--- lsusb-unplugged 2008-10-25 18:06:42.000000000 -0700
+++ lsusb-plugged 2008-10-25 18:26:02.000000000 -0700
@@ -1,4 +1,93 @@
+Bus 004 Device 004: ID 0bb4:0c02 High Tech Computer Corp.
+Device Descriptor:
+ bLength 18
+ bDescriptorType 1
+ bcdUSB 1.02
+ bDeviceClass 0 (Defined at Interface level)
+ bDeviceSubClass 0
+ bDeviceProtocol 0
+ bMaxPacketSize0 64
+ idVendor 0x0bb4 High Tech Computer Corp.
+ idProduct 0x0c02
+ bcdDevice 1.00
+ iManufacturer 3 HTC
+ iProduct 2 Android Phone
+ iSerial 1 HT839GZ00000
+ bNumConfigurations 1
+ Configuration Descriptor:
+ bLength 9
+ bDescriptorType 2
+ wTotalLength 55
+ bNumInterfaces 2
+ bConfigurationValue 1
+ iConfiguration 0
+ bmAttributes 0x80
+ (Bus Powered)
+ MaxPower 256mA
+ Interface Descriptor:
+ bLength 9
+ bDescriptorType 4
+ bInterfaceNumber 0
+ bAlternateSetting 0
+ bNumEndpoints 2
+ bInterfaceClass 8 Mass Storage
+ bInterfaceSubClass 6 SCSI
+ bInterfaceProtocol 80 Bulk (Zip)
+ iInterface 0
+ Endpoint Descriptor:
+ bLength 7
+ bDescriptorType 5
+ bEndpointAddress 0x01 EP 1 OUT
+ bmAttributes 2
+ Transfer Type Bulk
+ Synch Type None
+ Usage Type Data
+ wMaxPacketSize 0x0200 1x 512 bytes
+ bInterval 0
+ Endpoint Descriptor:
+ bLength 7
+ bDescriptorType 5
+ bEndpointAddress 0x81 EP 1 IN
+ bmAttributes 2
+ Transfer Type Bulk
+ Synch Type None
+ Usage Type Data
+ wMaxPacketSize 0x0200 1x 512 bytes
+ bInterval 0
+ Interface Descriptor:
+ bLength 9
+ bDescriptorType 4
+ bInterfaceNumber 1
+ bAlternateSetting 0
+ bNumEndpoints 2
+ bInterfaceClass 255 Vendor Specific Class
+ bInterfaceSubClass 66
+ bInterfaceProtocol 1
+ iInterface 0
+ Endpoint Descriptor:
+ bLength 7
+ bDescriptorType 5
+ bEndpointAddress 0x02 EP 2 OUT
+ bmAttributes 2
+ Transfer Type Bulk
+ Synch Type None
+ Usage Type Data
+ wMaxPacketSize 0x0200 1x 512 bytes
+ bInterval 0
+ Endpoint Descriptor:
+ bLength 7
+ bDescriptorType 5
+ bEndpointAddress 0x82 EP 2 IN
+ bmAttributes 2
+ Transfer Type Bulk
+ Synch Type None
+ Usage Type Data
+ wMaxPacketSize 0x0200 1x 512 bytes
+ bInterval 0
+Device Status: 0x0000
+ (Bus Powered)
+
Bus 004 Device 001: ID 0000:0000
Device Descriptor:
bLength 18
@@ -62,7 +151,7 @@
Port 1: 0000.0100 power
Port 2: 0000.0100 power
Port 3: 0000.0000
- Port 4: 0000.0100 power
+ Port 4: 0000.0503 highspeed power enable connect
Port 5: 0000.0000
Port 6: 0000.0100 power
Device Status: 0x0003
Second interface ("Vendor Specific Class") should be something usefull.
Hi Developers,
I have asked this question couple of times in the forum, however no one is interested in responding, therefore thought of starting the new thread.... Please merge if one already exists.
I have been using the CM7 Nand build and everything works fine except for the Wifi Hotspot & USB Tethering on the CM7 Nand build. I use a 3G connection and it works absolutely fine on the phone, however when I use the Hotspot or USB tethering feature my laptop does not connect to the internet, I have tested this on multiple systems and its always the same. Also tried to re-flashing, however did not work. Reinstalled wm6.5 and everything worked fine. The CM7 SD card version and the R175 & R169 from code.google work absolutely fine and my laptop is able to connect to the internet via my phone. Also if i connect the phone to a wi-fi router it works absolutely fine. Therefore I feel that this is something related to the CM7 NAnd build and not specific to the laptop
Not sure if I am the only 1 facing this problem. If anyone has found a fix for this please upload the steps.
About Phone:
Android VErsion: 2.3.7
Base Band Version: 32.2803.05.06U_0.63.05.36
Kernel VErsion: [email protected] #45
Mod Version: cyanogenMod-7.2.0-RC0-photonic-KANG
Build: GWK74
Laptop Information:
HP Probook 6460b
OS: Windows 7 x64
Also tried on Windows 7 x32, Windows Vista (x64), Windows XP x32
Thanks
Maq
I think problem with mac
Sent from my Photon using XDA
Thanks Derefas.... can you guide me to any thread where i can find a fix.
I tried searching for over a month, but could not find any fix/thread for this problem.
Yes, same problem here unfortunately. 3G works fine on Mini, router is available and connection to it goes fine, but then router is not routing at all, internet connection doesn't go through. Win7 shows a yellow "!" mark on the wifi icon and that's it. Sounds weird that SD version has working tethering though. Any hint or test we can make?
Yes, i think problem is mac 11:22:33:44:55:66 but why devs can not not add old wifi driver with static harcoded nvs? I using it with fixed mac addr and boot.img is easy to hex edit becouse is not compressed, for example users will be able to hex edit their boot.img with his real mac addr:
photon boot.img with static nvs:
Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00493DC0 73 69 73 61 76 32 67 3D 30 78 33 0A 62 78 61 32 sisav2g=0x3.bxa2
00493DD0 67 3D 30 0A 63 63 6F 64 65 3D 41 4C 4C 0A 63 63 g=0.ccode=ALL.cc
00493DE0 74 6C 3D 30 78 30 0A 63 63 6B 64 69 67 66 69 6C tl=0x0.cckdigfil
00493DF0 74 74 79 70 65 3D 30 0A 6F 66 64 6D 64 69 67 66 ttype=0.ofdmdigf
00493E00 69 6C 74 74 79 70 65 3D 31 0A 72 78 70 6F 32 67 ilttype=1.rxpo2g
00493E10 3D 32 0A 62 6F 61 72 64 6E 75 6D 3D 31 0A 6D 61 =2.boardnum=1.ma
00493E20 63 61 64 64 72 3D 30 30 3A 35 33 3A 32 32 3A 34 caddr=[color=red]00:53:22:4[/color]
00493E30 38 3A 34 31 3A 35 30 0A 6E 6F 63 72 63 3D 31 0A [color=red]8:41:50[/color].nocrc=1.
00493E40 6F 74 70 69 6D 61 67 65 73 69 7A 65 3D 31 38 32 otpimagesize=182
00493E50 0A 68 77 68 64 72 3D 30 78 30 35 66 66 66 66 30 .hwhdr=0x05ffff0
00493E60 33 31 30 33 30 30 33 31 30 30 33 31 30 30 30 30 3103003100310000
00493E70 30 0A 73 64 5F 67 70 6F 75 74 3D 30 0A 73 64 5F 0.sd_gpout=0.sd_
00493E80 67 70 76 61 6C 3D 31 0A 73 64 5F 67 70 64 63 3D gpval=1.sd_gpdc=
00493E90 30 0A 73 64 5F 6F 6F 62 6F 6E 6C 79 3D 31 0A 52 0.sd_oobonly=1.R
00493EA0 41 57 31 3D 38 30 20 33 32 20 66 65 20 32 31 20 AW1=80 32 fe 21
00493EB0 30 32 20 30 63 20 30 30 20 32 32 20 32 61 20 30 02 0c 00 22 2a 0
00493EC0 31 20 30 31 20 30 30 20 30 30 20 63 35 20 30 20 1 01 00 00 c5 0
00493ED0 65 36 20 30 30 20 30 30 20 30 30 20 30 30 20 30 e6 00 00 00 00 0
00493EE0 30 20 34 30 20 30 30 20 30 30 20 66 66 20 66 66 0 40 00 00 ff ff
Thanks,
Can you point to a guide/link or provide the steps which will help fix this.
Regards,
Maq
Same problem here. How can we change Mac adr?
I've got an HTC Aria but I'm on the same boat here. What I've did is to install an app called OpenGarden and since then Wifi Tethering works perfect. USB tethering still not working.
I'm trying on Windows 7 x64
Found a work around.... installed barncel wi-fi tether... configured Adhoc Network....works like charm.... enjoy.....
Nice, working on Photon with CM7 (boot sd card)
ps : it's "Barnacle wifi tether"
this is only for WIFI what about USB?
Yes only for wifi, i don't use usb to share (it' for my ipad wifi...)
trying to figure out something for that too.... will keep you updated if i get something
USB Tethering Fix
Hi All,
The latest posts were about usb tethering , I'm using pdanet 3.50 for this purpose and it's working properly follow this link:
https://play.google.com/store/apps/...ult#?t=W251bGwsMSwxLDEsImNvbS5wbi5oZWxwZXIiXQ
Thanks to xda member esn_bmd ( Profile Link: http://forum.xda-developers.com/member.php?u=4516525) who helped figure this out.
Please thank him not me...
Regards,
Maq
Fix for this **** - fix proc/calibration, use bcm4329_204 and softap
Proof
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Hey folks,
Recently picked up a Nexus Player and having an unusual problem when switching the TV off and on. If I turn the TV on, and then turn the Nexus Player on, the output looks normal. But if I switch the TV off and on while leaving the Nexus Player on, the output of the Nexus Player becomes blurry. Not horribly so, everything is still legible, but it's still noticeable. It's comparable to showing 720p output on a 1080p screen, however, the Nexus Player is still outputting in 1080p according to 'dmesg' and 'dumpsys display'.
I have a Sony KDL-46Z5500. Here's the EDID dump from dmesg:
Code:
*********** Print EDID block 0 start **********
00 ff ff ff ff ff ff 00 4d d9 01 ba 01 01 01 01
01 13 01 03 80 a0 5a 78 0a 0d c9 a0 57 47 98 27
12 48 4c 21 08 00 81 80 01 01 01 01 01 01 01 01
01 01 01 01 01 01 02 3a 80 18 71 38 2d 40 58 2c
45 00 40 84 63 00 00 1e 01 1d 00 72 51 d0 1e 20
6e 28 55 00 40 84 63 00 00 1e 00 00 00 fc 00 53
4f 4e 59 20 54 56 20 58 56 0a 20 20 00 00 00 fd
00 30 3e 0e 46 0f 00 0a 20 20 20 20 20 20 01 85
*********** Print EDID block 0 end ************
*********** Print EDID block 1 start **********
02 03 30 f0 50 1f 10 14 05 13 04 12 11 16 15 03
02 07 06 01 20 26 09 07 07 15 07 50 83 01 00 00
68 03 0c 00 30 00 b8 2d 0f e3 05 03 01 e2 00 7b
02 3a 80 d0 72 38 2d 40 10 2c 45 80 40 84 63 00
00 1e 01 1d 00 bc 52 d0 1e 20 b8 28 55 40 40 84
63 00 00 1e 01 1d 80 18 71 1c 16 20 58 2c 25 00
40 84 63 00 00 9e 01 1d 80 d0 72 1c 16 20 10 2c
25 80 40 84 63 00 00 9e 00 00 00 00 00 00 00 fe
*********** Print EDID block 1 end ************
I've compared dumpsys display outputs with a diff tool from when the screen is sharp and when it's blurry and there are no meaningful differences (just PIDs and what looks like a hash on android.os.BinderProxy). Here's the dmesg output from when I turn the TV back on (excluding the EDID which I've already shown above):
Code:
<6>[ 602.079619] [otm_hdmi]: __hdmi_irq_handler_bottomhalf: hdmi state switched to 0
EDID SHOWN HERE
EDID SHOWN HERE AGAIN
<6>[ 603.043781] [drm] setting fifo size, arb2:0xc0300, arb: 0x20080100
<6>[ 603.043800] [drm] dsp stride=7680 bpp=32
<6>[ 603.046468] request_suspend_state: wakeup (3->0) at 602839491618 (2015-05-27 13:05:29.417151656 UTC)
<6>[ 603.067435] it8566_hdmi_cec 1-0068: cec tx bus err
<6>[ 603.097477] it8566_hdmi_cec 1-0068: cec tx bus err
<6>[ 603.138095] it8566_hdmi_cec 1-0068: cec tx bus err
<6>[ 603.144209] [otm_hdmi]: android_hdmi_encoder_dpms: hdmi state switched to 1
<6>[ 603.167878] it8566_hdmi_cec 1-0068: cec tx bus err
<3>[ 603.188058] had: had is not in suspended state
<4>[ 603.188098] dhd_set_suspend: Remove extra suspend setting
EDID SHOWN HERE
<6>[ 603.208366] it8566_hdmi_cec 1-0068: cec tx bus err
<6>[ 603.238509] it8566_hdmi_cec 1-0068: cec tx bus err
<6>[ 603.278478] it8566_hdmi_cec 1-0068: cec tx bus err
<6>[ 603.307996] it8566_hdmi_cec 1-0068: cec tx bus err
<6>[ 603.347109] it8566_hdmi_cec 1-0068: cec tx bus err
<6>[ 603.376730] it8566_hdmi_cec 1-0068: cec tx bus err
<6>[ 603.438371] it8566_hdmi_cec 1-0068: cec tx direct nack / bcst reject
<6>[ 603.489896] it8566_hdmi_cec 1-0068: cec tx direct nack / bcst reject
<6>[ 603.676647] it8566_hdmi_cec 1-0068: cec tx bus err
<6>[ 603.706179] it8566_hdmi_cec 1-0068: cec tx bus err
At this point I'm stumped about how to resolve this - I just restart the NP every time I turn the TV on. Has anyone had any experience with this issue and know of any fixes I can try?
Thanks for the help!
I am seeing the same exact issue with my Nexus Player after I power cycle my Panasonic VT60 TV or receiver. I assumed the picture was 720p being upscaled internally by the NP at first as well, since the TV indicated a 1080p/60Hz signal.
The slight blurriness that causes me to be unable to distinguish individual pixels looks almost identical to upscaled 720p input on this and other TVs.
As in your case, power cycling the player gets the correct, non-blurry output back, and it appears the NP still believes it is rendering a 1080p picture in either case.
So it's not just me then!
For what it's worth, I upgraded to Android M but the problem remained. I've now switched to a Nvidia Shield which works perfectly, suggesting that the issue is specific to the NP and not Android TV.
Hope you find a fix.
I updated a OnePlus 5 from Android 8.0 to Android 8.1 and lost the ability to USB tether. Hotspot works fine. I've verified that some other users have this problem on the OnePlus subreddit. I'm on Opensuse 42.3.
Linux 4.4.126-48-default #1 SMP Sat Apr 7 05:22:50 UTC 2018 (f24992c) x86_64 x86_64 x86_64 GNU/Linux
This link indicates a "fix" similar to one on a Lineage forum. It doesn't solve the problem, but figured I would put it here to prevent similar posts from showing up in this thread.
https://forums.oneplus.com/threads/hotspot-not-working.769592/
At least this fix didn't break anything.
There are suggestions regarding changing the APN, but I no joy.
Using lsusb, it is clear that the phone is seen by the PC. However the phone doesn't show up when I run ifconfig.
This is the lsusb verbose output when usb tether is selected.
Code:
lsusb -s8:10 -v
Bus 008 Device 010: ID 2a70:f00e
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf00e
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 75
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Association:
bLength 8
bDescriptorType 11
bFirstInterface 0
bInterfaceCount 2
bFunctionClass 239 Miscellaneous Device
bFunctionSubClass 4
bFunctionProtocol 1
iFunction 7
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 1
bInterfaceClass 239 Miscellaneous Device
bInterfaceSubClass 4
bInterfaceProtocol 1
iInterface 5
** UNRECOGNIZED: 05 24 00 10 01
** UNRECOGNIZED: 05 24 01 00 01
** UNRECOGNIZED: 04 24 02 00
** UNRECOGNIZED: 05 24 06 00 01
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x0008 1x 8 bytes
bInterval 9
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 10 CDC Data
bInterfaceSubClass 0 Unused
bInterfaceProtocol 0
iInterface 6
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x8e EP 14 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x0f EP 15 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
For completelness, this is the lsusb verbose output when tether is NOT selected.
Code:
lsusb -s8:13 -v
Bus 008 Device 013: ID 2a70:f003
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf003
bcdDevice 4.04
iManufacturer 1 OnePlus
iProduct 2 OnePlus
iSerial 3 (redacted)
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 62
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4 mtp
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 3
bInterfaceClass 255 Vendor Specific Class
bInterfaceSubClass 255 Vendor Specific Subclass
bInterfaceProtocol 0
iInterface 5 MTP
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x82 EP 2 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x001c 1x 28 bytes
bInterval 6
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 6 Mass Storage
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x83 EP 3 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x02 EP 2 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
Device Qualifier (for other device speed):
bLength 10
bDescriptorType 6
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
bNumConfigurations 1
Device Status: 0x0000
(Bus Powered)
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Hi, can you pull the system os using adb?
That can help you to get the drivers, if you want to port another watch os.
hi
I cannot get ADB to work yet
G
Hello, Have you connected with adb? I opened the system engineer mode with dial *#*#83781#*#* But under Debug&Log tab, there is no enable debug mode. I think, If I can open debug mode, I can connect with adb.
Thanks you all for those useful info. I have a watch like this. One of the things I am interested is to turn the watch's LTE to a wifi hotspot for other devices, and I found a way to do so, though not very convenience. I am posting the instruction here. Hopefully it is useful to others, and maybe there is a better way to do so:
From Phone, dial *#*#83781#*#* to enter Engineer Mode
Under Connectivity tab, “Start Services”, the go to “Sfatap Wifi Channel”, toggle Auto (off->on->off), then “OK” when seeing “Auto Close Warning”. Optionally choose a 2.4GHz Wifi Channel
Back to the top/root screen, slide from the screen top, and choose the little blue icon at the upper-left most corner to setup Wifi hotspot’s name, security mode (open, WPA PSK, WPA2 PSK) and password.
Note that enabling hotspot will disable the watch's wifi to internet. Any change such as, reboot, turning off hotspot in 3), or enabling wifi will shutdown the hotspot. To enable again, repeat step 1-2 (settings in 3 is saved)
I have same watch. After changing one parameter in Engineer mode, shartwatch doesn't recognize the SIM card and restarts automatically 1 min after boot.
Can you please support how to fix this issue? is there any possibility to do a factory reset using the button on Watch?
Or restore Engineer Mode to default?
THX a lot in advance
ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Have you tried to send a text message to turn on debug mode? try this (no space): pw,123456,DEVELOP,1#
ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Try this tutorial to enable adb/root: https://github.com/eisaev/SuperSUInstaller
Hi! I got a G4H(KGG KG70) watch as well for my kid, problem is that touch does work, every second time I turn on/off the screen. It worked perfectly before, but now it only works every second time I turn on/off the screen. I think that might be a software issue.
I've just started to research so haven't got far, any things I might could try?
The watch works perfectly other then that, but sometimes have trouble get the location.
Hello there. I bought this watch for my child, but when I want to use another tracking program other than the se tracker program, I cannot change the ip number. Can you help me with this?
aşağıdaki kod çalışmıyor.
Find my kids application server: pw,123456,ip,tcp.findmykids.org,8001#
afyden2018 said:
when I want to use another tracking program other than the se tracker program, I cannot change the ip number.
Click to expand...
Click to collapse
Protocols for "SeTracker" and "Где мои дети" are different. It is not the matter of changing IP, findmykids.org won't understand data sent by SeTracker service from watch.
Also "Где мои дети" is compiled only for Android 5.0+ while this watch runs Android 4.4. So event with watch rooted (described in this thread) you cannot install proper service on watch that will report location to findmykids.org. Maybe they had some Android 4.4 compatible version in the past, but it is highly unlikely this will still work today.
bbkr said:
Protocols for "SeTracker" and "Где мои дети" are different. It is not the matter of changing IP, findmykids.org won't understand data sent by SeTracker service from watch.
Also "Где мои дети" is compiled only for Android 5.0+ while this watch runs Android 4.4. So event with watch rooted (described in this thread) you cannot install proper service on watch that will report location to findmykids.org. Maybe they had some Android 4.4 compatible version in the past, but it is highly unlikely this will still work today.
Click to expand...
Click to collapse
Since I couldn't find any more resources about g4h, I asked for help under this topic. The link to the watch I actually bought is below. If I can change the server of the watch with the sms sent to the watch, maybe I can switch to an application other than tracker. Engineering mode opens but I don't know how to do it.
https://tr.aliexpress.com/item/1005002878573395.html?spm=a2g0s.9042311.0.0.1cc04c4dVwpHt3
I hope someone here can help me out. I recently purchased this watch for my daughter and have purchased a Lucky Mobile SIM card to use with it. I’ve not been able to get the watch to connect to the mobile network. The person that is trying to help me from their end has been less than helpful lol. He’s now insisting that I’m putting the SIM card in wrong and I have had to send a video to prove to him that isn’t the case.
I went into the network portions and noticed they had only set up an APN for Bell, so now I have set up the APN for lucky mobile. Yet still no luck (groan)
Can anyone give me some suggestions on how to get this thing to work. Or tell me what provider you went with (in Canada) to get this thing to work?
I really appreciate any help I can get at this point.
I sent pw,123456,DEVELOP,1# to my device and I can connect to it via adb. Once 'adb -d shell', I am in the system but don't know what to do. On the watch's system, process 'adbd' runs under user 'shell'.
A bit more info of the watch (I am not an Android expert)
# ./adb -d shell
[email protected]:/ $ cat /proc/version
Linux version 4.4.83+ ([email protected]) (gcc version 4.8 (GCC) ) #1 SMP PREEMPT Thu Aug 22 16:00:23 CST 2019
[email protected]:/ $ cat /proc/cpuinfo
processor : 0
model name : ARMv8 Processor
BogoMIPS : 30.72
Features : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae aes pmull sha1 sha2 crc32
CPU implementer : 0x41
CPU architecture: 8
CPU variant : 0x0
CPU part : 0xd03
CPU revision : 4
processor : 1
model name : ARMv8 Processor
BogoMIPS : 30.72
Features : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae aes pmull sha1 sha2 crc32
CPU implementer : 0x41
CPU architecture: 8
CPU variant : 0x0
CPU part : 0xd03
CPU revision : 4
Hardware : Spreadtrum SC9820e
Revision : 0000
Serial : 0000000000000000
[email protected]:/ $ cat /proc/meminfo
MemTotal: 438400 kB
MemFree: 102396 kB
MemAvailable: 257892 kB
Buffers: 5124 kB
Cached: 130896 kB
SwapCached: 4052 kB
...
[email protected]:/ $ df
Filesystem Size Used Avail Free Blksize
/dev 214.1M 128.0K 213.9M 213.9M 4096
/sys/fs/cgroup 214.1M 12.0K 214.1M 214.1M 4096
/mnt/asec 214.1M 0.0K 214.1M 214.1M 4096
/mnt/obb 214.1M 0.0K 214.1M 214.1M 4096
/system 484.3M 294.0M 180.3M 190.3M 4096
/data 2.7G 9.6M 2.7G 2.7G 4096
/cache 143.6M 168.0K 140.5M 143.5M 4096
/productinfo 928.0K 96.0K 732.0K 832.0K 4096
/mnt/shell/emulated 2.7G 9.6M 2.7G 2.7G 4096
Also, I found some useful tools like "am" and "pm"
Found a useful thread: https://forum.xda-developers.com/t/...-and-rebrands-kinyo-garett-lemfo-etc.4332727/
Hi
ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
You can putting that device to recovery mode or fastboot mode like this with a application name power toggles *required root
i have the samw watches, i have installed shotcut creator, but when i'm starting "settings" app it launching an ROM settings and i could not enable ADB to root and then flash my watches, i have tried to use engineer mode but it isn't doing anything really useful
wait, i know a way, i think i can enable ADB via "Hidden MIUI settings" and it's not for MIUI only, i tesetd it works on custom roms