<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: HACK The Android RC30 t-mobile G1, get root access, and unlock!</title>
	<atom:link href="http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/feed/" rel="self" type="application/rss+xml" />
	<link>http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/</link>
	<description>the illest, the cool</description>
	<lastBuildDate>Tue, 31 Aug 2010 21:09:47 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: danny</title>
		<link>http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/comment-page-1/#comment-3560</link>
		<dc:creator>danny</dc:creator>
		<pubDate>Tue, 15 Dec 2009 03:50:38 +0000</pubDate>
		<guid isPermaLink="false">http://ronaldarichardson.com/?p=768#comment-3560</guid>
		<description>how come anytime I open terminal,til the point type in telnetd i got message in my phone said permission fail,can u help me with that</description>
		<content:encoded><![CDATA[<p>how come anytime I open terminal,til the point type in telnetd i got message in my phone said permission fail,can u help me with that</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mike foster</title>
		<link>http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/comment-page-1/#comment-3552</link>
		<dc:creator>mike foster</dc:creator>
		<pubDate>Mon, 10 Aug 2009 00:24:57 +0000</pubDate>
		<guid isPermaLink="false">http://ronaldarichardson.com/?p=768#comment-3552</guid>
		<description>I have done this as soon as the hacker posted the files. I highly recommend you do this. I have 1 question. How can I get the myfaves back without restoring the g1?</description>
		<content:encoded><![CDATA[<p>I have done this as soon as the hacker posted the files. I highly recommend you do this. I have 1 question. How can I get the myfaves back without restoring the g1?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: anu</title>
		<link>http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/comment-page-1/#comment-3519</link>
		<dc:creator>anu</dc:creator>
		<pubDate>Tue, 12 May 2009 07:42:42 +0000</pubDate>
		<guid isPermaLink="false">http://ronaldarichardson.com/?p=768#comment-3519</guid>
		<description>Hi :)

I want the unlock code via software iam using blackberry 6220 &amp; i got the &lt;a href=&quot;http://www.mobile-unlocker.com/&quot; rel=&quot;nofollow&quot;&gt;mobile-unlocker&lt;/a&gt; can anybody help me</description>
		<content:encoded><![CDATA[<p>Hi <img src='http://ronaldarichardson.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>I want the unlock code via software iam using blackberry 6220 &amp; i got the <a href="http://www.mobile-unlocker.com/" rel="nofollow">mobile-unlocker</a> can anybody help me</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ronald</title>
		<link>http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/comment-page-1/#comment-3516</link>
		<dc:creator>Ronald</dc:creator>
		<pubDate>Sat, 11 Apr 2009 22:09:09 +0000</pubDate>
		<guid isPermaLink="false">http://ronaldarichardson.com/?p=768#comment-3516</guid>
		<description>I would but my brother long sold his g1. He didn&#039;t like it in the end, it&#039;s not the software Android. He just didn&#039;t like the hardware.</description>
		<content:encoded><![CDATA[<p>I would but my brother long sold his g1. He didn&#8217;t like it in the end, it&#8217;s not the software Android. He just didn&#8217;t like the hardware.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: wil b</title>
		<link>http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/comment-page-1/#comment-3515</link>
		<dc:creator>wil b</dc:creator>
		<pubDate>Fri, 10 Apr 2009 16:34:53 +0000</pubDate>
		<guid isPermaLink="false">http://ronaldarichardson.com/?p=768#comment-3515</guid>
		<description>can you make a video showing all this; it would be a hell of a lot easier :o)</description>
		<content:encoded><![CDATA[<p>can you make a video showing all this; it would be a hell of a lot easier <img src='http://ronaldarichardson.com/wp-includes/images/smilies/icon_surprised.gif' alt=':o' class='wp-smiley' /> )</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ronald</title>
		<link>http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/comment-page-1/#comment-3378</link>
		<dc:creator>Ronald</dc:creator>
		<pubDate>Sun, 18 Jan 2009 20:32:20 +0000</pubDate>
		<guid isPermaLink="false">http://ronaldarichardson.com/?p=768#comment-3378</guid>
		<description>@Khaled --&gt;
quote#jesusfreke:

Here is a zip file containing a modified recovery and boot image, as well as a few other things:
http://rapidshare.com/files/166164961/AndroidMod.zip
http://jf.nyquil.org/AndroidMod.zip
http://android-dls.com/forum/index.p…rb_v=viewtopic (see post for actual link to file)

The recovery image (recovery_testkeys.img) uses the test keys that are distributed with the android platform source. This means that an OTA update or an update.zip update must be signed with the test key in order for it to install. In other words, it will no longer install OTA updates from t-mobile. You don’t want them stealing back root access from you now do you? .

I’ve also included the test keys and the SignApk.jar tool, so you can sign your own update scripts (for use only with the modified recovery image). You can resign any image, even if it has been signed before. So for example, if you needed to install an “official” t-mobile update, you must re-sign it with the test keys first.

Another bonus in this recovery image is that ADB is enabled while in recovery mode. You can’t adb into a shell (no sh binary), but you can at least use it to push and pull files from the device. For example, you could push an update.zip file to the sdcard.

The boot image (boot_nosecure.img) has been modified so that adb has root access by default. So when you do an adb shell, you automatically get a root shell. You can remount the system image using adb, and then push files directly to the system partition.

Finally, the “update - Restore Original RC29 Boot Image.zip” file is an update.zip file signed with the test keys, which will restore your boot partition back to the stock RC29 image. Useful if you accidentally hose your boot partition..

To install the recovery image onto your phone:

=========================================================
D:\Android\AndroidMod&gt;adb push recovery_testkeys.img /data/local/recovery.img
912 KB/s (0 bytes in 1767424.001s)

D:\Android\AndroidMod&gt;adb shell
$ su
su
# mount -o rw,remount -t yaffs2 /dev/block/mtdblock3 /system
mount -o rw,remount -t yaffs2 /dev/block/mtdblock3 /system
# cd /system
cd /system
# cat /data/local/recovery.img &gt; recovery.img
cat /data/local/recovery.img &gt; recovery.img
# flash_image recovery recovery.img
flash_image recovery recovery.img
#
=========================================================

Note: You must place the recovery image at /system/recovery.img. the init.rc boot script automatically flashes the recovery partition with that file every time you boot up the phone.

At this point, it’s probably a good idea to reboot the phone into recovery mode, and make sure it loads OK. If the recovery image is corrupt somehow, it will throw you back into SPL mode (the multi-color bootloader screen). If that happens, just boot the phone normally, and reflash recovery image.

Once it boots into recovery mode, press alt+L, and the next to top line of text should say something like “using test keys.”. If it doesn’t, then you’re still using the original recovery image.

Note: If you are planning on installing the modified RC30 update, you can ignore the following - there is no need to install the boot image. The update already has a newer, modified boot image.

Now that you know you have the modified recovery image loaded, you can install the boot image:

=========================================================
D:\Android\AndroidMod&gt;adb push boot_nosecure.img /data/local/boot.img
939 KB/s (0 bytes in 1533952.001s)

D:\Android\AndroidMod&gt;adb shell
$ su
su
# flash_image boot /data/local/boot.img
flash_image boot /data/local/boot.img
# rm /data/local/boot.img
rm /data/local/boot.img
#
=========================================================

Now reboot the phone and let it boot normally. If the boot image was corrupted, it will boot into recovery mode instead. You can use the included update zip file to reload the original RC29 boot image.

Otherwise, if it boots up normally, open a command prompt however you like (telnet, adb, terminal emulator app, etc.) and type “getprop ro.secure”. If it says 0, then you’re running the modified boot image. Otherwise, if it says 1, you’re still running the original boot image.

from: http://forum.xda-developers.com/showthread.php?t=443041</description>
		<content:encoded><![CDATA[<p>@Khaled &#8211;&gt;<br />
quote#jesusfreke:</p>
<p>Here is a zip file containing a modified recovery and boot image, as well as a few other things:<br />
<a href="http://rapidshare.com/files/166164961/AndroidMod.zip" rel="nofollow">http://rapidshare.com/files/166164961/AndroidMod.zip</a><br />
<a href="http://jf.nyquil.org/AndroidMod.zip" rel="nofollow">http://jf.nyquil.org/AndroidMod.zip</a><br />
<a href="http://android-dls.com/forum/index.p…rb_v=viewtopic" rel="nofollow">http://android-dls.com/forum/index.p…rb_v=viewtopic</a> (see post for actual link to file)</p>
<p>The recovery image (recovery_testkeys.img) uses the test keys that are distributed with the android platform source. This means that an OTA update or an update.zip update must be signed with the test key in order for it to install. In other words, it will no longer install OTA updates from t-mobile. You don’t want them stealing back root access from you now do you? .</p>
<p>I’ve also included the test keys and the SignApk.jar tool, so you can sign your own update scripts (for use only with the modified recovery image). You can resign any image, even if it has been signed before. So for example, if you needed to install an “official” t-mobile update, you must re-sign it with the test keys first.</p>
<p>Another bonus in this recovery image is that ADB is enabled while in recovery mode. You can’t adb into a shell (no sh binary), but you can at least use it to push and pull files from the device. For example, you could push an update.zip file to the sdcard.</p>
<p>The boot image (boot_nosecure.img) has been modified so that adb has root access by default. So when you do an adb shell, you automatically get a root shell. You can remount the system image using adb, and then push files directly to the system partition.</p>
<p>Finally, the “update &#8211; Restore Original RC29 Boot Image.zip” file is an update.zip file signed with the test keys, which will restore your boot partition back to the stock RC29 image. Useful if you accidentally hose your boot partition..</p>
<p>To install the recovery image onto your phone:</p>
<p>=========================================================<br />
D:\Android\AndroidMod&gt;adb push recovery_testkeys.img /data/local/recovery.img<br />
912 KB/s (0 bytes in 1767424.001s)</p>
<p>D:\Android\AndroidMod&gt;adb shell<br />
$ su<br />
su<br />
# mount -o rw,remount -t yaffs2 /dev/block/mtdblock3 /system<br />
mount -o rw,remount -t yaffs2 /dev/block/mtdblock3 /system<br />
# cd /system<br />
cd /system<br />
# cat /data/local/recovery.img &gt; recovery.img<br />
cat /data/local/recovery.img &gt; recovery.img<br />
# flash_image recovery recovery.img<br />
flash_image recovery recovery.img<br />
#<br />
=========================================================</p>
<p>Note: You must place the recovery image at /system/recovery.img. the init.rc boot script automatically flashes the recovery partition with that file every time you boot up the phone.</p>
<p>At this point, it’s probably a good idea to reboot the phone into recovery mode, and make sure it loads OK. If the recovery image is corrupt somehow, it will throw you back into SPL mode (the multi-color bootloader screen). If that happens, just boot the phone normally, and reflash recovery image.</p>
<p>Once it boots into recovery mode, press alt+L, and the next to top line of text should say something like “using test keys.”. If it doesn’t, then you’re still using the original recovery image.</p>
<p>Note: If you are planning on installing the modified RC30 update, you can ignore the following &#8211; there is no need to install the boot image. The update already has a newer, modified boot image.</p>
<p>Now that you know you have the modified recovery image loaded, you can install the boot image:</p>
<p>=========================================================<br />
D:\Android\AndroidMod&gt;adb push boot_nosecure.img /data/local/boot.img<br />
939 KB/s (0 bytes in 1533952.001s)</p>
<p>D:\Android\AndroidMod&gt;adb shell<br />
$ su<br />
su<br />
# flash_image boot /data/local/boot.img<br />
flash_image boot /data/local/boot.img<br />
# rm /data/local/boot.img<br />
rm /data/local/boot.img<br />
#<br />
=========================================================</p>
<p>Now reboot the phone and let it boot normally. If the boot image was corrupted, it will boot into recovery mode instead. You can use the included update zip file to reload the original RC29 boot image.</p>
<p>Otherwise, if it boots up normally, open a command prompt however you like (telnet, adb, terminal emulator app, etc.) and type “getprop ro.secure”. If it says 0, then you’re running the modified boot image. Otherwise, if it says 1, you’re still running the original boot image.</p>
<p>from: <a href="http://forum.xda-developers.com/showthread.php?t=443041" rel="nofollow">http://forum.xda-developers.com/showthread.php?t=443041</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Khaled</title>
		<link>http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/comment-page-1/#comment-3376</link>
		<dc:creator>Khaled</dc:creator>
		<pubDate>Sun, 18 Jan 2009 19:39:05 +0000</pubDate>
		<guid isPermaLink="false">http://ronaldarichardson.com/?p=768#comment-3376</guid>
		<description>Hi All,

What I know is that  you can&#039;t run processes that listen to ports below 1024 with an unprivileged user.

The case.

After firing the terminal emulator application I discovered that the working user is &quot;app_57&quot;

and by navigating to /system/bin  then type telnetd

it returned no errors but the return code is 255

like so:
$ cd system
$ cd bin
$ telnetd
$echo $?
255

I can&#039;t start the telnet daemon like that.

Please advice.</description>
		<content:encoded><![CDATA[<p>Hi All,</p>
<p>What I know is that  you can&#8217;t run processes that listen to ports below 1024 with an unprivileged user.</p>
<p>The case.</p>
<p>After firing the terminal emulator application I discovered that the working user is &#8220;app_57&#8243;</p>
<p>and by navigating to /system/bin  then type telnetd</p>
<p>it returned no errors but the return code is 255</p>
<p>like so:<br />
$ cd system<br />
$ cd bin<br />
$ telnetd<br />
$echo $?<br />
255</p>
<p>I can&#8217;t start the telnet daemon like that.</p>
<p>Please advice.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ronald</title>
		<link>http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/comment-page-1/#comment-3357</link>
		<dc:creator>Ronald</dc:creator>
		<pubDate>Tue, 30 Dec 2008 06:12:55 +0000</pubDate>
		<guid isPermaLink="false">http://ronaldarichardson.com/?p=768#comment-3357</guid>
		<description>Yeah you can jailbreak it following this tutorial, if I ever have the time, I&#039;ll try to put soemthing easier together...</description>
		<content:encoded><![CDATA[<p>Yeah you can jailbreak it following this tutorial, if I ever have the time, I&#8217;ll try to put soemthing easier together&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: markus</title>
		<link>http://ronaldarichardson.com/2008/12/22/hack-the-android-rc30-t-mobile-g1-get-root-access-and-unlock/comment-page-1/#comment-3356</link>
		<dc:creator>markus</dc:creator>
		<pubDate>Tue, 30 Dec 2008 05:59:45 +0000</pubDate>
		<guid isPermaLink="false">http://ronaldarichardson.com/?p=768#comment-3356</guid>
		<description>Can I jailbreak my rc 30 updated g1</description>
		<content:encoded><![CDATA[<p>Can I jailbreak my rc 30 updated g1</p>
]]></content:encoded>
	</item>
</channel>
</rss>
