BOUNTY THREAD: Snapdragon USA Variants of S8 and S8+ (G950U/G955U) - Samsung Galaxy S8+ Guides, News, & Discussion

Hello all!
This is my first bounty thread created so if by any means I am missing anything, in the wrong forum, or this is not allowed (MODS) please PM me before infracting!
As we all know, the international variant (of course) has already been unlocked with custom recovery (TWRP).
This thread is a bounty thread for the USA Snapdragon variants of the S8 and S8+.
This includes but not limited to said devices on TMO, ATT, SPR and VZW.
As we all know all the US variants have the SAME model numbers.
There is a USERDATA partition that appears to be carrier specific but outside of this the stock TAR is the same and flashable to any US variant within the US.
There is also (so far) a factory binary firmware for each variant (S8/S8+)
So far we have achieved PERMISSIVE selinux on stock firmware. This factory binary can also help in repairing IMEI, DRK, FRP bypass etc. IF you know what you are doing.
Requirements to obtain bounty:
S8/S8+:
1. Full Root that sticks after a reboot
2. Files/Instructions for the end user to achieve said root.
3. At least 5 users/testers OTHER THAN those involved in the original process have used said method and verify successfuly rooting their device.
4. Work is original and collaborated and not taken from another user without their consent.
5. Root is maintaned even after a full reboot (i.e.perm root, temp root is not sufficient.)
6. Method (once achieved) is shared free of charge on XDA.
7. Proper credits are given to those involved in the process.
8. Similar files/process are also applicable for BOTH VARIANTS ( S8 & S8+.) With both devices being very similar, if an ENG or DEBUG firm etc. is leaked we would receive a version for each device.
9. *** FOR BL BOUNTIES, ABOVE REQUIREMENTS WITH FULLY WORKING TWRP RECOVERY
EDIT* There will be 4 separate bounties within this thread. All will have above requirements (BL Unlock and fully working TWRP Recovery is ONLY required for TWRP bounties). 2 will be for the S8 (G950U) and the other 2 for S8+ (G955U).
If you find a method for perm root on both devices at once, you will get BOTH BOUNTIES.
ANY USER WHO SPENDS MONEY TO PURCHASE LEAKED FIRMWARE SUCH AS ENG OR DEBUG THAT DIRECTLY LINKS TO PERMANENTLY ROOTING EITHER OR BOTH DEVICES WILL GET THE FIRST PAYMENTS TO REIMBURSE MONEY SPENT TO PURCHASE SAID FIRMWARE.
The rest will be divied up between those responsible for the perm root.
In order for devs attempting root and to achieve bounty you must join Hangouts group by pming me for an invite. This way we know FOR CERTAIN who is responsible for purchasing firmwares and/or putting in the work to get us perm root so we can know who the bounties go to.
If any mods would like to be in the HO to moderate and/or monitor legitimacy are welcome to join.
DONATIONS ARE NOT REQUIRED. THIS IS A BOUNTY THREAD. YOU PROMISE A CONTRIBUTION, WE HOPE YOU KEEP YOUR WORD AND PAY OUT IF ABOVE CONDITIONS ARE MET. THIS BOUNTY IS FOR PERM ROOT, UNLOCKED BL IS NOT AN EXPECTATION BUT WOULD BE MORE THAN WELCOME IF IT OCCURS.
If the bounty is satisfied, we will determine at that point in time where to donate the funds via paypal. Funds will most likely be sent to a mod or myself and then divided/provided to those who earned it.
THE PURPOSE OF THE HANGOUTS IS NOT ONLY TO ENSURE LEGITIMACY AND KNOWING WHO IS DOING WHAT FOR BOUNTY PURPOSES, IT IS ALSO TO GET US WORKING TOGETHER AND HAVE A MORE 'REAL TIME' MEANS OF COMMUNICATING AND TO HOPEFULLY SPEED UP THE PROCESS.
ROOT FOR THE S8 AND S8+ HAS BEEN ACHIEVED! CHECK OUT THE DEVELOPMENT SECTION FOR EACH DEVICE FOR THE ROOT THREADS! FOR THOSE OF YOU WHO MADE PLEDGES OR DIDN'T MAKE PLEDGES FOR ROOT AND ARE SATISFIED WITH THE ROOT, YOU CAN DONATE TO MY PAYPAL ACCOUNT AND THE BOUNTY WILL BE DISPERSED BETWEEN THE 4 CONTRIBUTORS! MY PAYPAL LINK IS IN MY PROFILE/SIG OR MY PAYPAL EMAIL IS [email protected]

Disclaimer:
Keep in mind that the reasoning behind a bounty thread is not to get paid. It is to encourage devs who might be interested in getting paid for their hard work and/or using the money to donate to a good cause. Most devs I have had the luck to work with are not in it for the money. It is either a hobby of theirs or they simply want to use their device as they wish that unfortunately is limited by Samsung and Carriers by locking down the devices more and more as smartphones evolve.
Hopefully for any reasons this bounty will encourage capable devs to work with and together to achieve what (at this moment in time) seems impossible and provide the small community (us rooters are a small <1% of cell phone users) the ability to use root to fulfill our imaginations from custom ROMS to audio mods to even the simple things like remapping the Bixby button after Samsung comes up with a clever patch to block it.
We are a community, we need to work together to keep this community alive when OEMS and carriers try to shut us down! We are OPEN SOURCE, we OWN our devices and WE ARE XDA!

THANKS TO @benmeroff FOR UPDATING THE BOUNTY AMOUNTS!
S8 Root Only TOTAL: $360
$50 - asfau
$50 - benmeroff
$40 - drew272011
$40 - Dsm2173
$40 - Andrewbud
$35 - XBlackChaosX
$20 - TMadd
$20 - whitedragon33
$20 - SD_N
$15 - bradk_1749
$10 - Silenus21
$10 - Nurmi_CEO
$10 - anewday
S8 Root + BL Unlock TOTAL: $480
$200 - benmeroff
$100 - asfau
$100 - SD_N
$50 - jimbob_sf
$20 - ILikeJuice
$10 - Nurmi_CEO
S8+ Root Only TOTAL: $1,545
$125 - swick1981
$100 - greatnesstx
$60 - harry44
$50 - briancotton84
$50 - epicroot
$50 - wutangkillabee
$50 - Aegis1973
$50 - Robbie Doo
$50 - Robbdreality
$50 - LinS123
$50 - josue85
$50 - indrajeetkhater
$50 - rhewins2268
$50 - Root-Maniac
$50 - Sxmsung
$40 - johnsgone
$40 - pjgraber03
$25 - happy2472
$25 - muppetmaster916
$25 - ait1071
$25 - datoad
$25 - JesseTron
$25 - Branski81
$20 - dogredwing1
$20 - symphony0flife
$20 - alexdr1
$20 - oskr7
$20 - TechBSwift
$20 - thebigeasy88
$20 - juicepants
$20 - jesseone
$20 - bladerunner
$20 - voxluna
$20 - droidx2.3.3
$20 - swarwick784
$20 - smithfolk4
$20 - hazmad
$20 - klm2349
$20 - airplane_guy
$20 - josenoel
$20 - rtm2017
$20 - kcb2627
$20 - defnub
$20 - prostreetcamaro
$10 - hinds90
S8+ Root + BL Unlock TOTAL: $2,835
$350 - swick1981
$100 - epicroot
$100 - daddymatt
$100 - indrajeetkhater
$100 - symphony0flife
$100 - TechBSwift
$100 - harry44
$100 - undertaker21
$100 - foeshigity
$100 - hindutool
$80 - smithfolk4
$60 - johnsgone
$50 - Salval
$50 - vektorious
$50 - Root-Maniac
$50 - hazmad
$50 - bryancotton84
$50 - jawonder
$50 - lilrich17892
$50 - rhewins2268
$50 - polaric
$50 - synn420
$50 - wutangkillabee
$40 - thebigeasy88
$40 - juicepants
$40 - jabbadajake
$40 - bladerunner
$40 - jpl2589
$40 - synn420
$40 - the_ozone
$40 - pjgraber03
$25 - datoad
$25 - dbizzy
$25 - happy2472
$25 - powerstroke
$25 - muckrak3r
$20 - Cozzeck
$20 - live2playloud
$20 - olvap377
$20 - teammike
$20 - jedimyndtrix
$20 - leifyguy
$20 - Wiseor
$20 - MicroMod777
$20 - klm2349
$20 - force70
$20 - dwertz
$20 - simplynando
$20 - seguil2010
$20 - buttsak
$20 - coldconfession13
$20 - unitz0mbie
$20 - ArcticGaming
$20 - order_66
$20 - voxluna
$20 - swarwick784
$20 - jsanta11
$20 - rtm2017
$20 - ronj1986
10$ - sad alien
*update starting page 48

UPDATES:
- We have managed to flash the Factory Binary Firmware (for S8 and S8+) using Prince Comsey latest ODIN.
- This firmware does in fact bypass frp/Google lock for me anyways. I have also researched similar firmware for s6/s6e ands7 devices and they state you should be able to repair imei, fix DRK, FRP bypass etc. utilizing this firmware.
- We found a way to change debug level on factory firmware.
- We managed to flash permissive kernel from factory binary firmware onto stock AP/Stock firmware so we can now boot stock with permissive.
- We found an interesting mode called Samsung Upload mode which we are doing more research on.
- So far we have not got anywhere outside of whats listed.
- XDA users appear to be searching for ENG firmware and/or actual DEBUG firmware.
- So far the OEM UNLOCK on binary firm does not actually unlock the BL.
- On stock as well as on factory binary firmware the BL/Download mode remaims in "Secure Download" and"Secure Boot" enabled and since BL remains locked, we cannot flash unsigned tars/partitions so TWRP is a no go so far
THERE IS ONLY 2 SAMSUNG OWNERS (ONE S8 AND ONE S8+ USER) IN THE HANGOUTS THREAD. WE ALSO HAVE 2 FELLOW XDA MEMBERS THAT WERE AFFILIATED AND/OR DIRECTLY CREATED DIRTY SANTA ON THE V20 DEVICES FOR IDEAS.
WE NEED MORE DEVS TO JOIN IN! IF YOU HAVE KNOWLEDGE ABOUT SAMSUNG, ANDROID, SELINUX ETC. AND OWN A S8/S8+ OR SIMPLY WANT TO HELP PLEASE SEND ME A PM TO GET AN INVITE TO HANGOUTS!

Pledge 20 $ tmobile s8

drew272011 said:
Pledge 20 $ tmobile s8
Click to expand...
Click to collapse
it is not carrier specific since model numbers are the same for dvery variant but I will put you down for S8,
thanks for getting this started! hopefully we can explode and get root sooner than later!

I'd throw in $20 for the S8.

Again as I said on the S7e forums this should be a bounty to unlock the bootloader not just get root. Otherwise you are just going to get engineering kernel root (which blows) and is basically not usable. Also no custom ROMs without the bootloader unlocked.
Please change the OP to Root+Bootloader unlock so this phone can get properly hacked.

TMadd said:
I'd throw in $20 for the S8.
Click to expand...
Click to collapse
you the man! I cant help but imagine how amazing this phome would be rooted...

elliwigy said:
you the man! I cant help but imagine how amazing this phome would be rooted...
Click to expand...
Click to collapse
Honestly I just want to be able to skip media tracks with a long-press of the volume buttons while the screen is off. I'd pay $20 just for that lol. From what I've found, there is no perfect, non-root solution. It's a cakewalk with root though. But, I have to imagine development for this device is going to explode before long.

ShrekOpher said:
Again as I said on the S7e forums this should be a bounty to unlock the bootloader not just get root. Otherwise you are just going to get engineering kernel root (which blows) and is basically not usable. Also no custom ROMs without the bootloader unlocked.
Please change the OP to Root+Bootloader unlock so this phone can get properly hacked.
Click to expand...
Click to collapse
I definitely understand where you are coming from.. an unlocked BL is definitely the ultimate goal but unfortunately its a lot more difficult to achieve than root.. ultimately I would hope the root bounty is achieved by unlocking the BL but that is a long shot unless we somehow come across full debug firmware that is unlocked by default and signed by Samsung (similar to the V20).
We can do a lot with simply full root such as custom stock roms likeHyperdrive, xtrestolite, Clean rom or even my own roms Extreme Syndicate..
We can have mods similar to alliance framework and 3minit, v4a and true debloating etc. by simply having root..
I also feel root is the first step in working towards the ultimate goal in unlocking the BL but we should take one step at a time and potentially get lucky in the process..
I also fear ifI include an unlocked BL as a requirement and someone manages FULL ROOT then ppl will not pay upsince the unlockedbl requirement would not be met.. hopefully you understandandagain, you are not required to make a pledge, i see where youre coming from as i am coming from a vs995 with unlockedBL, twrp and a fully awesome device in its own right and would of course LOVE that on my s8+.. i just want bpunty to be reasonable andfair and achievable

TMadd said:
Honestly I just want to be able to skip media tracks with a long-press of the volume buttons while the screen is off. I'd pay $20 just for that lol. From what I've found, there is no perfect, non-root solution. It's a cakewalk with root though. But, I have to imagine development for this device is going to explode before long.
Click to expand...
Click to collapse
right.. theres so much you can do simply having root.. as i stated previously an unlocked BL would be GREAT! I just feel full root is more achievable at the moment than unlocking the BL thanks to Sammy..
I know if I make an Unlocked BL a requirement it might discourage devs since its a lot more difficult to achieve than root..

I pledge $20 for the S8.

elliwigy said:
I also feel root is the first step in working towards the ultimate goal in unlocking the BL but we should take one step at a time and potentially get lucky in the process..
I also fear ifI include an unlocked BL as a requirement and someone manages FULL ROOT
Click to expand...
Click to collapse
Maybe just specify engineering kernel root does not count. Because otherwise you are going to get worthless root and some who will collect the bounty and kill development.
It is what happened on the S7e they had the engineering kernel all along waited till the bounty go high then released it to gain root and collect the bounty.
"REAL" stable foot was never achieved but it checked all the requirements on your list. It was just a LAGGY MESS that destroyed performance so much almost no one used it.
Trust me you want to make sure that style of root is not acceptable.

If I could put twrp and load AOSP on my s8+ I'll put $20.

coldconfession13 said:
If I could put twrp and load AOSP on my s8+ I'll put $20.
Click to expand...
Click to collapse
Well the bounty is for full permanent root at the moment.. youre the second person to pay bounty for twrp so i think ill make some revisions

ShrekOpher said:
Maybe just specify engineering kernel foot does not count. Because otherwise you are going to get worthless root and some who will collect the bounty and kill development.
It is what happened on the S7e they had the engineering kernel all along waited till the bounty go high then released it to gain root and collect the bounty.
"REAL" stable foot was never achieved but it checked all the requirements on your list. It was just a LAGGY MESS that destroyed performance so much almost no one used it.
Trust me you want to make sure that style of root is not acceptable.
Click to expand...
Click to collapse
ok.. so I will add a bounty option for BL unlock with TWRP so you can pledge for that specifically and not pledge for plain root.. will that satisfy you? and what would be your pledge for that

ill pay 20 for twrp and root lol. anyday, even more if i had to

elliwigy said:
ok.. so I will add a bounty option for BL unlock with TWRP so you can pledge for that specifically and not pledge for plain root.. will that satisfy you? and what would be your pledge for that
Click to expand...
Click to collapse
I'm not trying to be a pain just trying to save you the trouble when someone who is a certified Samsung repair shop tries to claim the bounty by using an engineering kernel to gain root and everyone is pissed because it's broken root. I witnessed it happen on the S7e forums go take a look.
I understand if you just want this to be a root only bounty, but you should specify root achieved by using the engineering kernel does not count. If you don't understand what I am talking about just go look at the S7e threads for Tmobile look for ENGBOOT.
Basically all certified Samsung repair shops are given an engineering kernel, or ENGBOOT, they can flash to a phone using Odin that gives them higher privileges so they can fix corrupted devices or devices that got viruses etc. It's a short jump from that to root, but it is designed to hamper the devices performance to try to prevent people from using it go gain root on a daily driver.
It basically makes the phone SUPER laggy, almost to the point of it being unusable. This is the root you are going to get unless you call out it is not eligible for the bounty. Someone who has the kernel already will just hold it hostage untill enough money is out here then provide proof they can use it to gain root (unusable root do to performance degradation but it passes all of your requirements) and demand payment.

ShrekOpher said:
I'm not trying to be a pain just trying to save you the trouble when someone who is a certified Samsung repair shop tries to claim the bounty by using an engineering kernel to gain root and everyone is pissed because it's broken root. I witnessed it happen on the S7e forums go take a look.
I understand if you just want this to be a root only bounty, but you should specify root achieved by using the engineering kernel does not count. If you don't understand what I am talking about just go look at the S7e threads for Tmobile look for ENGBOOT.
Basically all certified Samsung repair shops are given an engineering kernel, or ENGBOOT, they can flash to a phone using Odin that gives them higher privileges so they can fix corrupted devices or devices that got viruses etc. It's a short jump from that to root, but it is designed to hamper the devices performance to try to prevent people from using it go gain root on a daily driver.
It basically makes the phone SUPER laggy, almost to the point of it being unusable. This is the root you are going to get unless you call out it is not eligible for the bounty. Someone who has the kernel already will just hold it hostage untill enough money is out here then provide proof they can use it to gain root (unusable root do to performance degradation but it passes all of your requirements) and demand payment.
Click to expand...
Click to collapse
i am tring to edit it in but my phone is giving me issues so there will be 4 options.. full root only on s8 or s8+ or fully working twrp/unlocked BL for s8 or s8+..
but to add to your post, Ive had at least 5 S7 devices that were rooted so I know what you mean.. however, if we had the engboot thatd get our feet wet with root then we could probably find a way to utilize the factory binary BL which seems to be alot more stable than an ENG would be..
again, i understand.. id rather see a not so stable root on an ENG boot than no root at all lol.. being part of various prior devices and involved in the root processes I have to say that unlocking the BL is NOT going to be an easy task if even possible(I hate to say it.) If we had a full debug firm with an unlocked BL by default that would be our best chance butchances are we get that sort of leak/luck is very slim

Related

[How To Root]AT&T Galaxy S4 Active Root (SGH-i537) and S4 Active (GT-i9295)

As requested here is a separate thread for the S4 Active bounty
AT&T S4 Active SGH-i537 root method:
-------------------------
This guide is to help people root their Galaxy S4 Active devices. Model SGH-i537 on AT&T.
Credit goes to geohot for the release of activeroot apk!
-------------------------
Video guide here
1. First go to Settings and click the "More" tab. Then go into security and check "Unknown Sources."
2. Visit http://geohot.com/activeroot from your device and click the lampda picture to download the apk file.
3. Run the apk. It should give you a message telling you that you have root. Worked almost instantly for me.
4. Visit the Play Store and download SuperSU. (NOTE: You MUST download and use SuperSU to manage superuser permissions, nothing else. Only SuperSU currently can circumvent Samsung's "root blocker" in the kernel.)
5. Open the Super SU app and update binaries.
6. Optional. Donate. I contributed $10 to the original bounty, but really... this is a quick and simple method. Toss him $5 bucks if this root helps you out!
********** ***************************************** **********
Kill AT&T's OTA updater before it kills you!
Use a root enabled file explorer (Like Root Explorer) and navigate to: /system/app/
Rename or delete wssyncmldm.apk
If you want to get rid of AT&T's nannying nagging message about root access delete or rename KNOXAgent.apk
Install App Quarantine, go into settings and uncheck Hide system apps and disable AT&T Updater
********** ***************************************** **********
[[[[[[[[[[[[[[[[[[[[[[[[[ ===== ]]]]]]]]]]]]]]]]]]]]]]]]
UNROOT and RETURN TO STOCK:
File Name: Oneclick_I537UCUAMF1.7z
MD5: 5860A429420FF9029C8CF687F43E3D83
Password: rootzwiki
DOWNLOAD: Here
Credit: RootzWiki
*Note* A factory reset wont return you to stock because the binaries will remain. You can try doing a "full unroot" from super su app or flash the above in ODIN
[[[[[[[[[[[[[[[[[[[[[[[[[ ===== ]]]]]]]]]]]]]]]]]]]]]]]]
======================================
F.A.Q.
======================================
Q: What does activeroot do for my phone?
A: It gives you root access to the phone's file system. Even the Android system files.
Q: What can I do with root?
A: You can run applications that require root access to function. Apps like Titanium Backup, can back up all of your apps and settings and save it in your phone's storage/SD card. You can also freeze (disable) or delete pre-installed apps that came with the phone (AT&T/Samsung bloatware).
Q. Is root dangerous?
A. Well, it does give you access to files you were not supposed to be allowed to manipulate. If you accidentally delete files that are important, you could cause the phone to crash and prevent booting.
Q. Can I install a custom ROM?
A. As of 7/8/13, the answer is no. Not yet. To be able to install a custom ROM, you need to be able to install a custom recovery. As of now, the bootloader of the original Galaxy S4 and the Galaxy S4 Active are still locked. The original GS4 currently has an venerability in it's bootloader that allows for an exploit (called Loki exploit) to be used that enables installation of custom recoveries and ROMS. This vulnerability has been patched since the release of the GS4 Active, and our phones cannot take advantage of the Loki exploit.
Q. Will the GS4A's bootloader EVER be unlocked?
A. No one knows for sure. The Galaxy S4 Active is a niche product available exclusively on AT&T in the USA. It will never reach the sales numbers that the original Galaxy S4 will achieve because of this. Since the original GS4 will be the phone in more users' hands... the same can be said for the hands of developers. A developer who bought the original GS4, is not likely to also buy a GS4A. That being said, the original GS4 is a very popular device and people are working hard on it's bootloader. The GS4 and the GS4A are similar enough that if the GS4 gets unlocked, luck may shine on us and the method may unlock our phones as well. But, as the old saying goes, "I wouldn't hold your breath."
International S4 Active GT-i9295 root method:
This a good note to anyone who is looking for a root method for the i9295 with an unlocked bootloader. To gain root do the following steps:
So just flash http://download.chainfire.eu/316/CF-...xx-gti9505.zip with included Odin and thats it. Below is how to flash:
- Download and unzip the CF-Auto-Root-....zip file (see posts below this one)
- (USB) Disconnect your phone from your computer
- Start Odin3-vX.X.exe
- Click the PDA button, and select CF-Auto-Root-....tar.md5
- Put your phone in download mode (turn off phone, then hold VolDown+Home+Power to boot - if it asks you to press a button to continue, press the listed button, or run adb reboot download command)
- (USB) Connect the phone to your computer
- Make sure Repartition is NOT checked
- Click the Start button
- Wait for Android to boot
- Done (if it took you more than 30 seconds, you need practice!)
If you see this post a user confirmed this to gain root access
Do either of these root methods at your own risk. I take NO responsibility for you bricking your device.
Root Bounty (obviously already achieved)
Root must be repeatable by the average user it also must be stable:
Pledges:
joshuadjohnson22 $10 8M127451EM528464N
Marvelicious75 $15 90D961051P289421J
thatbigmoose $10 07X32126MM98984XX
stephensonbrady $10 8CC62383EC2722109
bdgarel $15
daugh016 $10 4JV00716K7186494W
_MetalHead_ $50 xxxxxxxxxx872881H
gurnec $30 4U73259930163730V
zhchaoxing $20 34779178V4223182W
Javascriptvoid $15 2MW27489NA337573L
Informpage $10 6SL14089NP013225R
Bubba9004 $10 1U508646WW0646002
Solange82200 $10 78L51773DM109584M
TenEightyPee $10 6BB23055YJ674324X
Naeib2000 $10
Twillso $20 xxxxxxxxxx6631148
Davidusr $20 52U63980M5747400X
Yankeesfan714 $50 #xxxxxxxxxxx-83407
DJ_smooth $25
SirBash $10 7CM588676N745162J
ForkySpoony $25 65935426WY543180U
mnasledov $40 57V383820G529761V
Total as of 10:15 PM EST 7/23/2013: $425
(if you made a pledge but changed your mind or if I missed your pledge please PM me)
I was asked what the process would be once a exploit is found. Once it is found we will wait for the dev to specify how he wants the money sent. Usually it is just a donation to their paypal account. On rare occasions the dev will just say they want money donated to charity but that is rare and the dev should get paid for their hard work. I will follow up to make sure everyone pays.
I'll add $10 to the cause.
Add me 10 bucks please
Sent from my SAMSUNG-SGH-I537 using xda app-developers app
$10 here.
$10 from me as well.
Sent from my SAMSUNG-SGH-I537 using xda premium
$10 from me aswell . love the phone hate the bloat. came from the i9500 and this one is 100% better!
I'll pledge $20.00 towards root access. Just ordered and would love to have tethering.
Sent from my SGH-I747 using Tapatalk 2
I'm down for $20.
Sent from my SAMSUNG-SGH-I537 using Tapatalk 2
joshuadjohnson22 said:
As requested here is a separate thread for the S4 Active bounty
Root must be repeatable by the average user it also must be stable:
Pledges:
joshuadjohnson22 $10
Marvelicious75 $15
hatbigmoose $10
mattpayne92 $30
stephensonbrady $10
dgarel $15
daugh016 $10
_MetalHead_ $50
los4825 $20
gurnec $30
zhchaoxing $20
Javascriptvoid $15
Informpage $10
Bubba9004 $10
Solange82200 $10
TenEightyPee $10
Supertrekie $10
Twillso $20
Davidusr $20
Total as of 4:49 PM EST 6/29/2013: $325
(if you made a pledge but changed your mind or if I missed your pledge please PM me)
Sent from my SAMSUNG-SGH-I537
Put me down for $50
Sent from my SAMSUNG-SGH-I537
Click to expand...
Click to collapse
yankeesfan714 said:
Put me down for $50
Sent from my SAMSUNG-SGH-I537
Click to expand...
Click to collapse
Updated thanks!
Sent from my SAMSUNG-SGH-I537 using Tapatalk 4 Beta
joshuadjohnson22 said:
As requested here is a separate thread for the S4 Active bounty
Root must be repeatable by the average user it also must be stable:
Pledges:
joshuadjohnson22 $10
Marvelicious75 $15
hatbigmoose $10
mattpayne92 $30
stephensonbrady $10
dgarel $15
daugh016 $10
_MetalHead_ $50
los4825 $20
gurnec $30
zhchaoxing $20
Javascriptvoid $15
Informpage $10
Bubba9004 $10
Solange82200 $10
TenEightyPee $10
Supertrekie $10
Twillso $20
Davidusr $20
Yankeesfan714 $50
Total as of 12:28 AM EST 6/30/2013: $375
(if you made a pledge but changed your mind or if I missed your pledge please PM me)
Sent from my SAMSUNG-SGH-I537 using Tapatalk 4 Beta
Click to expand...
Click to collapse
I'm in for $25 but I don't have time to watch the forums closely. If I need to pay up, somebody PM me.
DJ_smooth said:
I'm in for $25 but I don't have time to watch the forums closely. If I need to pay up, somebody PM me.
Click to expand...
Click to collapse
Ditto what this guy said. 10$
Id be willing to kick in for a good 1st rom too.
I'm in for $25.
DJ_smooth said:
I'm in for $25 but I don't have time to watch the forums closely. If I need to pay up, somebody PM me.
Click to expand...
Click to collapse
Yeah, me too...
No interest yet? Is it cause the phone just came out, or should we be worried?
Sent from my SAMSUNG-SGH-I537 using xda app-developers app
Solange82200 said:
No interest yet? Is it cause the phone just came out, or should we be worried?
Sent from my SAMSUNG-SGH-I537 using xda app-developers app
Click to expand...
Click to collapse
I would not worry. If I was a Dev I would not post that I am working on an exploit. If you do everyone will hit you up for updates, etas and so on. Also if you can't find a way in it is embarrassing.. . One day someone will find a way in, weather it is a hack from another galaxy device running similar firmware or a specific hack for ours. We just need to wait
$10
You know, I was really excited about this phone. I thought it would the same os as the regular s4, but it seems they're like 2 different computers, like a freaking mac and a windows. It really sucks big time. Most big developers are developing already for the S4, the att model is same as the canadian model, and there is a lot of good canadian development also. I think we are really lucky enough that somebody was able to unkock the bootloader on the regular S4 since freaking att decided now to play the apple jailbreak game. Therefore, development for the Active would be very little specially if you want play with custom roms. Sorry to spoile the party, but I was pissed about it too.
If I was you, I would think twice and exchange the damn phone for the regular S4 before att throws a newer update to fix the exploit that allows to root the phone again.
I bet they are waiting for somebody to find the exploit in the active so they can release a newer updated version to kill root on the S4 for good.
Sent from my SAMSUNG-SGH-I337 using Tapatalk 2
$500 has to be appealing to someone.
Sent from my SAMSUNG-SGH-I537
---------- Post added at 02:38 PM ---------- Previous post was at 01:47 PM ----------
This phone is almost cool enough to not need root. But I still prefer CM. Plus the cool factor of being water resistant kind of appeals to a different crowd.
Sent from my SAMSUNG-SGH-I537

BOUNTY: unlock bootloader for CDMA Moto G at [$250]

Requirements to Receive Bounty
To earn the bounty, you simply have to find the exploit which will allow the following. You do not have to develop a recovery, or a kernel or a ROM, but you must provide with a working proof of concept, i.e. with a way which allows us to verify that the bootloader has been completely unlocked and that other developers can use this method to install recovery, kernel and ROMs.​
Other owners of the MOTO G XT1028 will then test your method, that when we give the bounty to who earns after we successfully test.
WE HAVE $250 for and unlocked bootloader and $60 for ROOT​
The following people have pledged the following amounts for an unlocked bootloader unless stated otherwise.
------------------------------------------------------------------------------------------------------------------------------------------------------------​
Triumph750 -- $20
DragonRyderX -- $20 to 30
tstivers1990 -- $20
NWKENT -- $75 for Unlocked, $30 for Root exploit
luna_joao -- $20
d4rk3 -- $20 to $50
pfroo40 -- $20 For Root
motrinHD -- $20
mvnsnd -- $20
shorenster -- $20
hexed6 -- $25
JooseyJay -- $10 for Unlock, $10 For Root
SO FAR WE HAVE $250 for and unlocked bootloader and $60 for ROOT.​
Honestly, I'm just interested in root without unlocking the bootloader. And we need to leave something open for the possibility of a work around, such as the bootstrap methods used on other phones.
lightningdude said:
Honestly, I'm just interested in root without unlocking the bootloader. And we need to leave something open for the possibility of a work around, such as the bootstrap methods used on other phones.
Click to expand...
Click to collapse
I almost want to say it's not worth it because you can buy the unlocked version for $100 more...
Then again I'd rather my money go to the devs, and it's pretty silly to have to pay to be able to free your phone from the grips of a greedy corporation.
lightningdude said:
Honestly, I'm just interested in root without unlocking the bootloader. And we need to leave something open for the possibility of a work around, such as the bootstrap methods used on other phones.
Click to expand...
Click to collapse
you know, I kinda agree. but unlocked but loader would open so many doors. this is good, we need to discuss our goal. if more people agree with you I would change bounty.
redking117 said:
I almost want to say it's not worth it because you can buy the unlocked version for $100 more...
Then again I'd rather my money go to the devs, and it's pretty silly to have to pay to be able to free your phone from the grips of a greedy corporation.
Click to expand...
Click to collapse
I agree with you in the sense of giving money to devs,but I say it is worth it because the gsm version can unlocked. sure they pay a little more, but they can also switch carriers
Sent from my SCH-I535 using Tapatalk 2
redking117 said:
I almost want to say it's not worth it because you can buy the unlocked version for $100 more...
Then again I'd rather my money go to the devs, and it's pretty silly to have to pay to be able to free your phone from the grips of a greedy corporation.
Click to expand...
Click to collapse
Except for the fact that the only truly reliable network in my area is Verizon. Frankly, I'm tired of getting screwed with this stuff just because I'm rural.
Sent from my XT1028 using Tapatalk
i am also always stuck with locked bootloadrs, thats why i wanted to start this.
so are the CDMA community simply not seeing this thread, or do you not care? please post.
Are we strictly talking the Verizon CDMA version?
I know that Boost and US Cell are both selling the Moto G. I would be interested in having detailed instructions for rooting and unlocking the bootloader for a Boost version
ADonovan said:
Are we strictly talking the Verizon CDMA version?
I know that Boost and US Cell are both selling the Moto G. I would be interested in having detailed instructions for rooting and unlocking the bootloader for a Boost version
Click to expand...
Click to collapse
Yes, this is just the Verizon version. I believe I've seen posts from people on boost that unlocked the same way as gsm.
Sent from my XT1028 using Tapatalk
I'd be in on this the ability to flash Roms would be awesome. Unlocked boot loader would be really nice but root would be a good start to
Sent from my XT1028 using Tapatalk
Yes!!!!!!!!
Sent from my XT1028 using xda app-developers app
so you guys think that root would be a more attainable goal?
Also, about boost Mobile Version. I didn't mention because i was reading through a thread and it sounded like many users were able to unlock their bootloader.
motrinHD said:
so you guys think that root would be a more attainable goal?
Also, about boost Mobile Version. I didn't mention because i was reading through a thread and it sounded like many users were able to unlock their bootloader.
Click to expand...
Click to collapse
The Boost mobile version version of the Moto G XT1031 has an unlockable bootloader but its not listed as supported on Motorola's website.
Sent from my Moto G using XDA Premium 4 mobile app
Unlocked Bootloader for Verizon much needed
I would definitely make a donation of 20$ to get my bootloader unlocked. If I had known at the time of purchase I NEVER would have bought this phone!! I NEED Root. never had this problem with any other phone or carrier
motrinHD said:
so you guys think that root would be a more attainable goal?
Also, about boost Mobile Version. I didn't mention because i was reading through a thread and it sounded like many users were able to unlock their bootloader.
Click to expand...
Click to collapse
Root would definitely be easier to achieve, perhaps edit the title to something like:
"BOUNTY: Unlock Bootloader and/or Root for XT1028"
I'm on too!
$100 the GSM version? Where? Only with 2yr contract right?
nice to see more people are on board!
d4rk3 said:
Root would definitely be easier to achieve, perhaps edit the title to something like:
"BOUNTY: Unlock Bootloader and/or Root for XT1028"
Click to expand...
Click to collapse
I think the bounty should be clear. we should ask for root or bootloader, not both. MORE MEMBERS chime in on this please.
also when you post, let's also discuss the method we are going to raise money. In the OP I mentioned three.
Sent from my SCH-I535 using Tapatalk 2
Personally, I'd rather pledge, then pay the person who does it. I know not everyone will go through with it, but I will.
Sent from my XT1028 using Tapatalk
I am on board!
I would be down for donating 20 to 30 bucks for some ROM flashing abilities. Allow the XT1028 to have a recovery and I will show my gratitude monetarily. Bonus if someone could mimic the DROID3's safestrap "ROM slots" ability. Swap roms almost instantly is awesome. Where is HASHCODE when we need him!?
Sorry, probably a dumb question but would this allow the Boost version of the Moto G to be unlocked as a GSM phone as well or just CDMA?
Thanks

new open-source motorola bootloader unlock via trustzone exploit

This can probably be ported to the Turbo since it works on a 2014 X
http://bits-please.blogspot.com/2016/02/unlocking-motorola-bootloader.html
https://github.com/laginimaineb/Alohamora
Beaups exploit could be redone as well. He released how. It's mostly no one is doing it.
_ck_ said:
This can probably be ported to the Turbo since it works on a 2014 X
http://bits-please.blogspot.com/2016/02/unlocking-motorola-bootloader.html
https://github.com/laginimaineb/Alohamora
Click to expand...
Click to collapse
The vulnerability he is using is old (he first disclosed it ~6 months ago) and does not apply to the turbo.
Sent from my XT1254 using Tapatalk
mrkhigh said:
Beaups exploit could be redone as well. He released how. It's mostly no one is doing it.
Click to expand...
Click to collapse
Right. Droid Turbo owners don't need a "new" exploit. The one being used still works!
If someone doesn't like paying for the packaged solution (Sunshine) that contains that exploit, then repackage it. It's been publicly released.
Oh, but re-coding would require work!
However, the payment in this case is fair to reward the time and money the devs invested. Without them, there would be no solution.
ChazzMatt said:
Right. Droid Turbo owners don't need a "new" exploit. The one being used still works!
If someone doesn't like paying for the packaged solution (Sunshine) that contains that exploit, then repackage it. It's been publicly released.
Oh, but re-coding would require work!
However, the payment in this case is fair to reward the time and money the devs invested. Without them, there would be no solution.
Click to expand...
Click to collapse
Amen
Sent from my XT1254 using Tapatalk
I don't really understand the complaints coming from people about the charge for sunshine unlock. I was happy to find out that I could unlock/root with a few clicks and not worry about doing all the leg work, especially considering I don't have the skill set required to be confident of not brick in my device with a more extensive unlock/root process.
Time is money and some individual(s) put time into developing something that some people are happy to have access to and pay for. Simple fact is, if you have an issue with paying for such a thing, then don't... But don't hate on the guys that are profiting from a skill set that not everyone is capable of, especially if said hater isn't capable or willing to provide an equally usable product.
Sent from my DROID Turbo using Tapatalk
rg449 said:
I don't really understand the complaints coming from people about the charge for sunshine unlock. I was happy to find out that I could unlock/root with a few clicks and not worry about doing all the leg work, especially considering I don't have the skill set required to be confident of not brick in my device with a more extensive unlock/root process.
Time is money and some individual(s) put time into developing something that some people are happy to have access to and pay for. Simple fact is, if you have an issue with paying for such a thing, then don't... But don't hate on the guys that are profiting from a skill set that not everyone is capable of, especially if said hater isn't capable or willing to provide an equally usable product.
Sent from my DROID Turbo using Tapatalk
Click to expand...
Click to collapse
The problem people have had with Sunshine is that root/bootloader unlock methods have traditionally been given for free—because they've been easier to crack.
Recently hacking has become more and more difficult—which makes developers have to spend more, and want more to make up for their losses on modding.
tecsironman said:
Amen
Sent from my XT1254 using Tapatalk
Click to expand...
Click to collapse
rg449 said:
I don't really understand the complaints coming from people about the charge for sunshine unlock. I was happy to find out that I could unlock/root with a few clicks and not worry about doing all the leg work, especially considering I don't have the skill set required to be confident of not brick in my device with a more extensive unlock/root process.
Time is money and some individual(s) put time into developing something that some people are happy to have access to and pay for. Simple fact is, if you have an issue with paying for such a thing, then don't... But don't hate on the guys that are profiting from a skill set that not everyone is capable of, especially if said hater isn't capable or willing to provide an equally usable product.
Sent from my DROID Turbo using Tapatalk
Click to expand...
Click to collapse
Agreed!
Latiken said:
The problem people have had with Sunshine is that root/bootloader unlock methods have traditionally been given for free—because they've been easier to crack.
Recently hacking has become more and more difficult—which makes developers have to spend more, and want more to make up for their losses on modding.
Click to expand...
Click to collapse
See Above! You get way more value for $20 then was ever given for free... and just because something used to be given away does not imply that it will continue to be in the future. Smart phones are still a relatively new product in the market and with Dev's who have now been through years of the exploiting, modifying, retiring cycle, there has to be incentive for them to stay engaged.
Additionally, I'll remind you that it hasn't been long since bounties were the norm. Everybody would post their promise to pay before and during development, then an exploit would be found and the bounty threads would clear out. Can't blame them for getting wise about collecting.
mng777777 said:
Agreed!
See Above! You get way more value for $20 then was ever given for free... and just because something used to be given away does not imply that it will continue to be in the future. Smart phones are still a relatively new product in the market and with Dev's who have now been through years of the exploiting, modifying, retiring cycle, there has to be incentive for them to stay engaged.
Additionally, I'll remind you that it hasn't been long since bounties were the norm. Everybody would post their promise to pay before and during development, then an exploit would be found and the bounty threads would clear out. Can't blame them for getting wise about collecting.
Click to expand...
Click to collapse
Actually, no you don't get more for paid methods. It's a one time unlock, and is device specific.
Let me reiterate that I am in no way complaining about Sunshine. I love the devs' work on our devices.
What I'm saying is that people's disappointment is understandable.
However, the devs already published the exploits and documents; all that's left is for someone to use them.
People have nothing to complain about now.
I get your point and I am in agreement with you. I didn't mean to imply that I'm not.
I'd like to clarify though, what I meant when I said you get more is that downloading an apk, pressing a few buttons, and spending all of 3 minutes to be unlocked is far simpler than it ever was in the past. I'm just pointing out that they went the extra mile to build an apk that's simple and elegant and does the heavy lifting for you whereas in the past we had to boot to recovery, flash, boot to boot loader, run adb, etc. The threads were full of people stuck and confused. Sunshine adds great value to the less savvy user and at least simplicity for the more savvy users.
Sent from my XT1254 using Tapatalk
mng777777 said:
I get your point and I am in agreement with you. I didn't mean to imply that I'm not.
I'd like to clarify though, what I meant when I said you get more is that downloading an apk, pressing a few buttons, and spending all of 3 minutes to be unlocked is far simpler than it ever was in the past. I'm just pointing out that they went the extra mile to build an apk that's simple and elegant and does the heavy lifting for you whereas in the past we had to boot to recovery, flash, boot to boot loader, run adb, etc. The threads were full of people stuck and confused. Sunshine adds great value to the less savvy user and at least simplicity for the more savvy users.
Sent from my XT1254 using Tapatalk
Click to expand...
Click to collapse
That is great to see as well; however, that makes development that much harder, and o know for a fact the people that whine about Sunshine's cost would deal with the difficulty of using fastboot and adb in order to save $25.
It is great, however, for less experienced people, and it's overall function. $25 is a steal for a fully moddifable device that was locked down so well.
Latiken said:
That is great to see as well; however, that makes development that much harder, and o know for a fact the people that whine about Sunshine's cost would deal with the difficulty of using fastboot and adb in order to save $25.
It is great, however, for less experienced people, and it's overall function. $25 is a steal for a fully modifiable device that was locked down so well.
Click to expand...
Click to collapse
This response below is not necessarily directed towards you, but really for the entire discussion in this thread. I'm just quoting your post as it's a good point to continue the discussion.
1) I can't believe people who are buying $600 phones are complaining about $25 bootloader unlock. And I don't care if you got the phone for $200 on contract or even as a "free upgrade". You are STILL paying $600 for the phone over the course of the contract.
2) No one is forcing anyone to pay for bootloader unlock. Your phone will still work like when you bought it, and you bought locked down.
If you bought this phone, you knew it was locked down and bought it anyway (or should have known). Everyone knows Verizon locks down their phones. Don't buy a Verizon phone if you don't like Verizon's policies. (The XT1250 has free bootloader unlock and is the Droid Turbo under another name, same bands, etc and runs on Verizon. So, I don't want to hear that you NEED Verizon. You may need Verizon but you don't need Verizon phones. Look at the non-Verizon Nexus 6 as another example.) This phone went for an entire YEAR locked down, and people are complaining when there's finally a solution?
3) Someone mentioned the bounty threads.
Droid Turbo Bootloader unlock bounty reached over $5,000 before the op stopped counting.
Running Total: $5,140 for bootloader unlock / $3,370 for root access
http://forum.xda-developers.com/droid-turbo/general/bounty-unlock-bootloader-root-turbo-t2927958
It was actually MORE, but the op gave up counting. Go look at the first post and read some of the amounts... user names are listed.
I want to know if everyone who who pledged $25, $50, $100, even $200 actually bought Sunshine? If they didn't, then they had no intention of ever paying anyway. Sunshine is a way to put your money where your mouth is.
and last...
4) I think people should rant more towards Verizon than devs who overcome Verizon's shortsightedness.
There's no valid reason to lock down the bootloader. None of the other Motorola Quarks have that condition -- same hardware, in at least one case the EXACT SAME FCC ID. Ever since the FCC made Verizon open up their LTE network to other phones not certified by Verizon (the XT1250 U.S. Moto Maxx -- the XT1254 Droid Turbo clone -- runs just fine on Verizon with a Verizon sim card, as does a non-Verizon Moto Nexus 6) and made Verizon also open up their phones to work on OTHER LTE networks (many people are running the XT1254 Droid Turbo on AT&T and T-mobile), what are Verizon's justifications?
Unlocking the bootloader through Motorola -- as I have done with two of my three Quarks -- acknowledges you are voiding any warranty claims. So, that's actually LESS liability and cost for Verizon in support if they allowed users to unlock bootloader. It's a nonsensical leftover from a bygone era when Verizon tried to lock their devices to only their network.
Until Verizon realizes they need change their intransigence, we need devs to help. And for devs to invest tremendous time and money, they need to be reimbursed for bricked phones and time invested they could be doing other things.
ChazzMatt said:
This response below is not necessarily directed towards you, but really for the entire discussion in this thread. I'm just quoting your post as it's a good point to continue the discussion.
1) I can't believe people who are buying $600 phones are complaining about $25. And I don't care if you got it for $200 on contract or even as a "free upgrade". You are STILL paying $600 for the phone over the course of the contract.
2) No one is forcing them to pay it. Everyone knows Verizon locks down their phones. Don't buy a Verizon phone if you don't like Verizon's policies. (The XT1250 has free bootloader unlock and is the Droid Turbo under another name, same bands, etc and runs on Verizon. So, I don't want to hear that you NEED Verizon. You may need Verizon but you don't need Verizon phones. Look at the non-Verizon Nexus 6 as another example.) This phone went for an entire YEAR locked down, and people are complaining when there's finally a solution?
3) Someone mentioned the bounty threads.
Droid Turbo Bootloader unlock bounty reached over $5,000 before the op stopped counting.
Running Total: $5,140 for bootloader unlock / $3,370 for root access
http://forum.xda-developers.com/droid-turbo/general/bounty-unlock-bootloader-root-turbo-t2927958
It was actually MORE, but the op gave up counting. Go look at the first post and read some of the amounts... user names are listed.
I want to know if everyone who who pledged $25, $50, $100, even $200 actually bought Sunshine? If they didn't, then they had no intention of ever paying anyway. Sunshine is a way to put your money where your mouth is.
and last...
4) I think people should rant more towards Verizon than devs who overcome Verizon's shortsightedness.
There's no valid reason to lock down the bootloader. None of the other Motorola Quarks have that condition -- same hardware, in at least one case the EXACT SAME FCC ID. Ever since the FCC made Verizon open up their LTE network to other phones not certified by Verizon (the XT1250 U.S. Moto Maxx -- the XT1254 Droid Turbo clone -- runs just fine on Verizon with a Verizon sim card, as does a non-Verizon Moto Nexus 6) and made Verizon also open up their phones to work on OTHER LTE networks (many people are running the XT1254 Droid Turbo on AT&T and T-mobile), what are Verizon's justifications?
Unlocking the bootloader through Motorola -- as I have done with two of my three Quarks -- acknowledges you are voiding any warranty claims. So, that's actually LESS liability and cost for Verizon in support. It's a nonsensical leftover from a bygone era when Verizon tried to lock their devices to only their network.
Until Verizon realizes they need change their intransigence, we need devs to help. And for devs to invest tremendous time and money, they need to be reimbursed for bricked phones and time invested they could be doing other things.
Click to expand...
Click to collapse
One reason I love Motorola is because of their near-stock Android with actually useful enhancements, and the fact that you can unlock their devices straight from them.
Had I researched and known that the Verizon XT1254 was locked down before purchasing it, I might've gone for another one.
But hey, I got a wicked deal on a $270 blue Turbo, AND we got Sunshine like a month after. I got some serious luck.
ChazzMatt said:
Droid Turbo Bootloader unlock bounty reached over $5,000 before the op stopped counting.
Running Total: $5,140 for bootloader unlock / $3,370 for root access
http://forum.xda-developers.com/droid-turbo/general/bounty-unlock-bootloader-root-turbo-t2927958
It was actually MORE, but the op gave up counting. Go look at the first post and read some of the amounts... user names are listed.
Click to expand...
Click to collapse
For the most part bounties don't pay, more often than not it costs me more to buy the phones than I got from the bounties. Exception being the first motorola bounty I collected
jcase said:
For the most part bounties don't pay, more often than not it costs me more to buy the phones than I got from the bounties. Exception being the first motorola bounty I collected
Click to expand...
Click to collapse
Out of curiosity. Did sunshine's $25 a pop pay off well? Mind you I'm not asking for dollars and cents. Merely is it a hobby that funds itself. Or a hobby that doesn't? Or is it actually a source of income?
I'm often curious the stats of bootloader unlocks/roots performed but in this instance that would be an invasion of privacy...
mrkhigh said:
Out of curiosity. Did sunshine's $25 a pop pay off well? Mind you I'm not asking for dollars and cents. Merely is it a hobby that funds itself. Or a hobby that doesn't? Or is it actually a source of income?
I'm often curious the stats of bootloader unlocks/roots performed but in this instance that would be an invasion of privacy...
Click to expand...
Click to collapse
SunShine funds further research, its not my job, much of the research goes no where, much of it results in dead phones, sometimes it works out. Would be right for me to discuss numbers, I'm not the only one involved.

Unlock Verizon's Locked Bootloader Bounty

I know @jcase says he will no longer develop a new unlock method for Verizon..but I'm willing​ to pay $300 if someone can figure a new method to unlock the bootloader. I'm known on XDA and I will pay up immediately..if others would like to put money up as well that would be great.
*Note We Need Temp Root 1st B4 We Can Get An Unlock*
https://forum.xda-developers.com/pixel-xl/how-to/temp-root-verizon-bounty-t3602691
mrjaydee82- $300
calripkenturner01- $50
bobby janow- $50
shadolis- $50
Aninja- $50
igloohed73- $50
virusqg- $25
Scott- $10
spleenandcigars- $10
NalNalas- $70
honzel- $100
calripkenturner- $100
calripkenturner- $10
gabo1- $20
zengfu94- $30
dwreck420- $10
Semtronix- $100
mac796- $20
robo_kill- $60
Alg0rhyth3m- $20
mattwheat- $50
Total- $1225
mrjaydee82 said:
I know @jcase says he will no longer develop a new unlock method for Verizon..but I'm willing​ to pay $300 if someone can figure a new method to unlock the bootloader. I'm known on XDA and I will pay up immediately..if others would like to put money up as well that would be great.
mrjaydee82- $300
Click to expand...
Click to collapse
Get someone to give us a new temproot for the pixel, and we will release a new unlock.
mrjaydee82 said:
I know @jcase says he will no longer develop a new unlock method for Verizon..but I'm willing​ to pay $300 if someone can figure a new method to unlock the bootloader. I'm known on XDA and I will pay up immediately..if others would like to put money up as well that would be great.
mrjaydee82- $300
Click to expand...
Click to collapse
I'm in for $50
Sent from my Pixel XL using Tapatalk
calripkenturner01 said:
I'm in for $50
Sent from my Pixel XL using Tapatalk
Click to expand...
Click to collapse
I have no desire to unlock or root. But I'm in for $50 too. What does it mean.. Temp root?
Sent from my Pixel using XDA-Developers Legacy app
Wish I had a Verizon pixel. I upgraded to fi after being on Verizon since 2009. Never going back to those guys.
Count me for $50... Thought I could live without root, but life sucks without it.
There have been a few interesting Linux priv escalation vulnerabilities. I think temp root is definitely within the realm of possibility.
As for what is meant by temp root. I assume one that doesn't need to persist across reboots. As soon as root is achieved theoretically you can change the prop file that contains the ability to unlock the bootloader, flip it, reboot and you're in.
I've been meaning to do a bit of kernel probing, but working at a startup consumes a LOT of my time.
Edit: Not sure if it's too late, but this one in particular looks interesting https://source.android.com/security/bulletin/2017-04-01
gumbi2400 said:
Edit: Not sure if it's too late, but this one in particular looks interesting https://source.android.com/security/bulletin/2017-04-01
Click to expand...
Click to collapse
You linked to the bulletin, not a specific vuln.
But again, I'm not looking to write an root exploit for a vuln, I'm saying if someone provides an exploit we will do the unlock part.
The unlock part is the easy bit . Don't worry though, I wasn't suggesting you or anyone specific to write the exploit. To be honest I don't think anyone has written one for this particular vulnerability, nor do I think there is time to do it as it's already been patched I believe.
My point was it's not as hopeless as it's made out to be, and it definitely can be done. There are exploits that come up all the time, it's a matter of writing up the code for it, and testing it in time. Sadly, my skillset lies much more in the operations side of computing and I suck with code (been a sys admin in some form or another for years now).
I would love to pitch in $50, but I'm struggling a bit financially at the moment so I don't know if I can commit haha. Let me know when it gets done though and I'll see if I can swing it at that time!
I can't stand Verizon having so much control over my phone, and especially now that that law passed, and they're going to be force installing apps to track my every move so they can sell it to advertisers, I need root now more than ever.. Please please someone get this done!
Put me down for $50. I'll keep tabs on this thread.
@mrjaydee82,
Maybe we need a separate bounty for temproot first?
cam30era said:
@mrjaydee82,
Maybe we need a separate bounty for temproot first?
Click to expand...
Click to collapse
If you want to start up a thread for that I'm game I'll donate 50 to that
I'm good for 25 maybe more depending on the time frame
I'm broke but I will throw in $10.00.
Still on my second pixel and its still unlocked but I know there will be a day I break this one too.
I'm broke as possible, but I could do it with 10usd.
Scott said:
I'm broke but I will throw in $10.00.
Still on my second pixel and its still unlocked but I know there will be a day I break this one too.
Click to expand...
Click to collapse
Do you know why some Pixels have the oem switch grayed out and some do not, even though they are on Verizon? I don't even care to unlock the bootloader I'm just curious. The only reason I'd like the switch to be active is to one day, when the phone is a secondary device, be able to do a full factory image flash after which I'd relock the bl in all likelihood. It's been suggested to reverse engineer the OS in order to find out but that is simply beyond my knowledge at this point.
Personally I do not need it as mine is already unlocked from the first exploit. But for those needing it, my question would be if this is done would the exploit be kept alive or would it be turned in to Google for them to just to patch it on the next update ? I know on exploits for the HTC flagships they keep the exploits going for s-off and do not turn them in hopefully any exploit found would be kept open for pixel and XL users the same and not get turned in to be taken away by Google.
+1 for $50 into the bounty
DirtydAmbrose said:
Personally I do not need it as mine is already unlocked from the first exploit. But for those needing it, my question would be if this is done would the exploit be kept alive or would it be turned in to Google for them to just to patch it on the next update ? I know on exploits for the HTC flagships they keep the exploits going for s-off and do not turn them in hopefully any exploit found would be kept open for pixel and XL users the same and not get turned in to be taken away by Google.
Click to expand...
Click to collapse
So far anybody who has unlocked, had been able to keep it. Hopefully Google will be cool about it.
Sent from my Pixel XL using Tapatalk

Bounty Thread: Verizon Pixel 4 and XL carrier unlock method

Hi willing to pay $1000 USD bounty for verizon variant google pixel 4 and XL carrier unlock method. Need to be unlock for att, sprint, t-mobile, and for overseas. Thanks
No offense, but this seems highly suspect. Why not simply buy a unlocked phone for $1000?
Long story short, while there are reports of people being able to unlock new Verizon phones that haven't been connected to the Verizon network yet, it is HIGHLY unlikely anyone will find a way to crack the bootloader of a phone that is registered on the Verizon network. It would require a new exploit or workaround to be found and those are pretty few and far between these days.
sic0048 said:
No offense, but this seems highly suspect. Why not simply buy a unlocked phone for $1000?
Long story short, while there are reports of people being able to unlock new Verizon phones that haven't been connected to the Verizon network yet, it is HIGHLY unlikely anyone will find a way to crack the bootloader of a phone that is registered on the Verizon network. It would require a new exploit or workaround to be found and those are pretty few and far between these days.
Click to expand...
Click to collapse
I never said I need unlock for 1 device. I have access to multiple device that needs unlock if paying someone $1k motivates them why not? Plus you will get the unlock for free without pitching in any money.
salman9430 said:
I never said I need unlock for 1 device. I have access to multiple device that needs unlock if paying someone $1k motivates them why not? Plus you will get the unlock for free without pitching in any money.
Click to expand...
Click to collapse
Add 2 zeros to that offer and you *might* get lucky.
It will cost less to get an unlocked version of the pixel 4/xl. And take less time as those variants are already bootloader unlock capable and rootable. Many phone companies have unbranded unlocked phones.
salman9430 said:
...Plus you will get the unlock for free without pitching in any money.
Click to expand...
Click to collapse
I don't need the unlock. I haven't used Verzion in years based largely on their bootloader policies. I am on a service provider that allows OEMs to unlock their phones without any hassles.
I'm just saying that it is one thing to promise $1000 for a bounty and another to actually shell it out to someone that finds an exploit. The average bounty is probably around $10-50 per person (which can add up to some serious money in the end), so having someone offer such a large amount is unusual. Certainly if I was a developer and saw your bounty, I would assume it was bogus. You know the old saying, "If it sounds too good to be true, it usually is." Perhaps I'm just too much of a skeptic.....

Categories

Resources