HACK The Android RC30 t-mobile G1, get root access, and unlock!

Ronald — Mon, 22 Dec 2008 16:19:25 +0000

So my brother bought a gPhone along with many other things with the money he made from selling some of his shoes. A PS3, a few games, 2 very nice cameras, and other things. I guess he wasn’t thinking when he bought the gPhone, he could probably only think about, “I NEED THIS!” Like me, my little brother has obsession with technology, and electronics. We are both crazy about electronics, we have to mess around, hack them, mod them, but first of all HAVE them. So anyways, he doesn’t have any phone service, and the phone is locked. So I set forth a bit of time to research and figure out how to hack the gPhone, and I figured it out. So here’s a tutorial on doing so. Later I will put together a graphic or video tutorial on “file” when I have some time. Until then, enjoy this hacking tutorial. The tutorial includes timeliness of facts as well.

First we have to force the Android into root access…
–Recently since the release, hackers around the world have been doing their duty to unlock and modify Android as they like. Although it’s open source Google has tricks up it sleeves, well for the T-Mobile phones.

This is starting to turn into a cat-and-mouse game akin to the the back-and-forths we’ve seen between Apple and the iPhone jailbreak underground community. This war has the underground scene always looking for new security exploits that will allow them to gain root access to their handset’s file-system. On the other side, the powers that be are always working to seal whatever security holes were used by the “jailbreak” community.

Google’s most recent move to thwart a nascent Android OS jailbreak uprising by rolling out a new Android OS update (RC30) that aimed to patch the security hole exploited by Android developers. The automatic, over-the-air (OTA) update was expected to essentially kill the Android OS jailbreak movement throughout the T-Mobile G1 fleet.

Today we’re seeing the jailbreak community’s counter-punch to Google’s left-hook. The ever driven developers over at XDA Developers have devised a method that allows G1 users to update their T-Mobile G1 to the latest Android OS RC30 build while still retaining access to the file-system root.

jailbreak the android

The updated Android jailbreak method mirrors the jailbreak solution currently available for the iPhone OS. By modifying the security checks that the handset performs during a firmware restore, jailbreak developers are able to load modified firmware update files. These modified update files udpate the handset’s firmware to the latest version while retaining particular desired functionality.

In this case, the Android development community has come up with a method that allows them to modify the Android OS’s recovery.img file, which in turn allows them to flash a modified version of Android OS build RC30 to a T-Mobile G1. The modified Android RC30 firmware brings with it all the benefits of the new firmware version while still allowing users to gain root access to the file-system.

If you haven’t yet updated your T-Mobile G1 to the new RC30 update, and you want to preserve root access, you’ll want to follow this G1 jailbreak tutorial.

After the break, that is…

This guide has been made to reflect the latest modified RC30 file – RC30 v1.2.

Please note that this forced update method is to be used only by those that want to preserve the root access exploit. Applying the modified Android OS update file takes time and familiarity with command line. Once applied, you will have to manually update to any future Android OS updates – because of this, it’s not recommended that casual users with no need for root access jailbreak their G1’s.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

* First off, you’ll need to download two files to your desktop:
o Modified recovery image (which will become your recovery.img file)
http://fscked.net/%7Ejesusfreke/AndroidMod.zip
o Modified Android OS RC30 update file with root access preserved
http://rapidshare.com/files/165227766/update_TC4-RC30_full_xda-dev_v1.2.zip
* Download and install the Android Telnet Client from the Android Market
* Download and install the Terminal Emulator app from the Android Market
* Turn on WiFi and connect to your WiFi network
* Now, go back to your downloaded files on your desktop
o Decompress the AndroidMod.zip file
o Extract “recovery_testkeys.img” to your desktop
o Rename “recovery_testkeys.img” to “recovery.img”
o Rename the modified Android OS RC30 update file from “update-RC30-fullupdate-modified-testkeys-v1.1.zip” to “update.zip”
* Transfer the newly named “recovery.img” file and the newly named “update.zip” to your microSD card (you can use the microSD card that came with your G1)
o Put microSD card in your G1 (if it’s not already in there)
* Fire up “Terminal Emulator”
o Type “cd system” and hit Enter
o Type “cd bin” and hit Enter
o Type “telnetd” and hit Enter
o Type “netstat” and hit Enter
o The IP address you want is listed on the same line as the word “Established”
o Write down this IP address
o Close Terminal Emulator (hit the “Home” button)
* Fire up “Telnet”
* In the IP address field (it should show “localhost”) enter the IP address you wrote down
o Hit “Connect”
* Now that you have root access, you’ll want to type in the following (hitting “Enter” at the end of each line):
o mount -o rw,remount -t yaffs2 /dev/block/mtdblock2 /system
o cat /sdcard/recovery.img > /data/local/recovery.img
o cd /system
o cat /sdcard/recovery.img > recovery.img
o flash_image recovery recovery.img
* Now turn off your phone
* Restart the handset by holding down the “Power” and “Home” buttons simultaneously
* When you see the triangle logo (you’ll know it when you see it), hold press “Alt” and “L” simultaneously
* Ensure that you see “using test keys” along the top
* Press “Alt” and “S” simultaneously
* Follow the on-screen instructions
* Press “Home” and “Back” buttons simultaneously when you’re done and ready to reboot
* The G1 will reboot as it does its thing - let it do so.
* You have now fully updated your T-Mobile G1 to Android OS RC30 with the root access exploit preserved - get at the root with the Terminal app.

Again, you run a very real possibility of bricking your T-Mobile G1 by updating it yourself. Making sure your battery is fully charged and that you disconnect the G1 from your computer before updating will help ensure a smooth update. Should things go awry, however, you’re on your own. (T-Mobile will likely help you out, but it’s not going to be a fun or speedy process)

Sourcex: http://forum.xda-developers.com/showthread.php?t=443041

Now to hack and unlock the gPhone…

Just the other day, Google announced that it will be offering its Android developers a special variant of the T-Mobile G1 (the first ever Android-powered smartphone to hit market) – the Android Dev Phone

1. Today, we’ve stumbled across a new hack that allows T-Mobile G1 owners with a bit of gumption and a dash of courage to turn their T-Mobile G1 into an unlocked Android Dev Phone 1.

The Android Dev Phone 1 is intended for Android developers with a need to load up custom firmware builds and test out unsigned software. Moreover, the Android Dev Phone 1 is unlocked to work on any GSM network in the world – a significant difference when compared to the T-Mobile G1, which is locked to T-Mobile’s network.

Fortunately for G1 owners, Google mistakenly shipped an Android Dev Phone 1 as a warranty replacement to an intrepid Android hacker. With a little help from those in the know, dream_kill managed to extract the Android Dev Phone 1’s unlocked bootloader and has posted the file online for all. Now, anyone can unlock their T-Mobile G1 to work just like an Android Dev Phone 1.

The G1-to-DevPhone1 conversion is easier than you think. The conversion requires little more than applying the update.zip file and rebooting the G1. In the end, you’ll have an unlocked G1 capable of running unsigned code. Unfortunately, this hack doesn’t endow your G1 with the Android Dev Phone 1’s cool battery-cover graphics.

More detailed T-Mobile G1 unlock instructions after the jump.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

* You’ll need an Android-powered T-Mobile G1 running RC30 with root access - that means you updated your G1 to RC30 using the above workaround method to preserve root access.
* You must have root access!
* Download the unlocked bootloader here.

1. Rename the unlocked bootloader file to “update.zip”
2. Move the newly renamed “update.zip” file to a microSD card.
3. Insert microSD card into G1.
4. Restart the handset by holding down the “Power” and “Home” buttons simultaneously
5. When you see the triangle logo (you’ll know it when you see it), hold press “Alt” and “L” simultaneously
6. Ensure that you see “using test keys” along the top
7. Press “Alt” and “S” simultaneously
8. Follow the on-screen instructions
9. Press “Home” and “Back” buttons simultaneously when you’re done and ready to reboot
10. The G1 will reboot as it does its thing - let it do so.
11. You have now hacked/unlocked your T-Mobile G1 to work just like an Android Dev Phone 1 - enjoy all those unsigned Android builds and the freedom to use whatever GSM network tickles your fancy!

Sourcex: http://www.modmygphone.com/forums/showthread.php?t=8051

So that’s it, if you have successfully followed all these steps above, your gPhone should be unlocked, hacked, and ready to go!

Ronald A. Richardson
www.ronaldarichardson.com

New SDK Released! 0.9 Beta now available.

Ronald — Thu, 28 Aug 2008 01:20:06 +0000

Google has FINALLY released a new public SDK. Google’s Dan Morrill writes:

I’m pretty happy today, for two reasons. First, I’m happy because I get to let everyone know that we’re releasing a beta SDK. You can read about the new Android 0.9 SDK beta at the Android Developers’ Site, or if you want to get straight to the bits, you can visit the download page. Once you’ve got it, be sure to visit our Developer Forum if you have any questions.

[...]

you’re probably wondering what’s actually new in the SDK. Well, you should read the Release Notes, the Change Overview and the API Delta Report for all the details, but here are a few highlights:

* First and most obviously, the new Home screen is included, along with a ton of UI changes for 1.0.
* Some new applications are included: an Alarm Clock, Calculator, Camera, Music player, Picture viewer, and Messaging (for SMS/MMS conversations.)
* Several new development tools were added, such as a graphical preview for XML layouts for users of Eclipse, and a tool for constructing 9-patch images.
* Since we’ve got a new Home screen application now, we thought the now-obsolete version from the M5 early-look SDK might be helpful to developers, so its source is included as a sample.
* A number of new APIs are fleshed out and improved, and others are now close to their final forms for 1.0.
* Tons of bugs were fixed, of course. (If you had problems with the MediaPlayer, try it now!)

Android developers have been (not so) patiently awaiting for this release! Get porting!

Verdis Mobile?

Ronald — Sun, 22 Jun 2008 02:37:08 +0000

The new Android SDK is amazing, it’s truly unbelievable and it has my heart. I have a business plan to release my own line of android powered touch screen cell phone’s, it’s only a matter of time. Words can not explain. Google is on top of the industry right now, everything about Google is beautiful, organized, and perfect. I aspire to create a network as strong as theres. Well Verdis is coming along as you have seen in the previous screen-shot, so all is going well. I just need help coming up with a network!

Just downloaded Microsoft Robotics Developer Studio 2008

Ronald — Fri, 25 Apr 2008 19:01:28 +0000

Just downloaded it and now I’m installing it. I’m checking out and experimenting with it to see if I can work with it. If not for my android project I will just use Verdis and develop my own system. Otherwise I will be experimenting with Microsoft’s kit to see if it has what it takes.

Microsoft Robotics Developer Studio 2008, which can be downloaded for free on the Microsoft website.

ronald a. richardson » android

HACK The Android RC30 t-mobile G1, get root access, and unlock!

New SDK Released! 0.9 Beta now available.

Verdis Mobile?

Just downloaded Microsoft Robotics Developer Studio 2008