| 00:19.59 | *** join/#openezx gmzhuo (n=gmzhuo@222.210.147.23) |
| 00:28.13 | CIA-16 | OpenEZX: 03wyrm * r2374 10/trunk/src/blob/gen-blob/src/blob/stack.S: increase stack size |
| 00:30.00 | CIA-16 | OpenEZX: 03wyrm * r2375 10/trunk/src/blob/gen-blob/ (5 files in 2 dirs): implement an usb command for dumping ram/flash |
| 00:33.13 | CIA-16 | OpenEZX: 03wyrm * r2376 10/trunk/src/host/boot_usb/boot_usb.c: support for gen-blob RBIN command |
| 01:31.32 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * rb4ec203b76 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this |
| 01:31.34 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * r6464be7492 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. My signed-off |
| 01:31.35 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * rda8fbfce0f 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this |
| 01:31.36 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * r75302a5efe 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this |
| 01:31.37 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * rf027ee5c41 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. |
| 01:31.40 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * rfcb64b2f23 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. |
| 01:31.43 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * r32dcb53d52 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. |
| 01:31.46 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * r91cc853764 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. Update description |
| 01:31.49 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * r6ec31cc09e 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. |
| 01:31.56 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * r2474165018 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. |
| 01:31.59 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * r7b4ac801e8 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. |
| 01:32.02 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * r3921fc7894 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. Correct description |
| 01:32.05 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * rfe69636628 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. Correct description |
| 01:32.08 | CIA-16 | OpenEZX: 03gmzhuo <gmzhuo@localhost.localdomain> 07ezx/current * rcdae8461aa 10openezx/ (4 files in 3 dirs): add isp1583 chip support. |
| 01:32.11 | CIA-16 | OpenEZX: 03Stefan Schmidt <stefan@datenfreihafen.org> 07ezx/current * r14a0f9c832 10openezx/.topmsg: Remove [PATCH] prefix. Quilt will handle this. |
| 01:32.20 | CIA-16 | OpenEZX: 03gmzhuo <gmzhuo@localhost.localdomain> 07ezx/current * r9212bf38e2 10openezx/.topmsg: add top msg |
| 01:32.23 | CIA-16 | OpenEZX: 03gmzhuo <gmzhuo@localhost.localdomain> 07ezx/current * r4c6e5ea3a3 10openezx/ (6 files in 2 dirs): add isp1583 driver |
| 01:38.17 | gmzhuo | Hi,how to make topgit-layout.png ? |
| 01:38.58 | *** join/#openezx mark_ZN5 (n=markstos@101-089.wireless.parallax.ws) |
| 01:39.08 | WyrM | tg summary --graphviz | dot -Tpng -o topgit-layout.png |
| 01:39.45 | gmzhuo | WyrM,thanks |
| 01:41.33 | gmzhuo | Oh,I need dot |
| 01:42.59 | gmzhuo | How can I get dot? |
| 01:43.04 | gmzhuo | or where |
| 07:31.47 | *** join/#openezx darion76 (n=darion76@91.145.234.60) |
| 09:35.30 | *** join/#openezx zhuo (n=gmzhuo@221.237.73.155) |
| 09:40.02 | *** join/#openezx l403 (n=l@85.132.159.239) |
| 11:07.55 | *** join/#openezx darion76 (n=darion76@91.145.254.181) |
| 11:08.51 | *** join/#openezx pleemans (n=toi@d54C2AAB7.access.telenet.be) |
| 12:10.51 | *** join/#openezx l403 (n=l@85.132.159.239) |
| 12:43.09 | Hopscotch | mahlzeit |
| 12:55.51 | *** join/#openezx pleemans (n=toi@d54C2AAB7.access.telenet.be) |
| 13:19.20 | *** join/#openezx bartv (n=magick@demands.xs4all.nl) |
| 13:31.00 | *** join/#openezx darion76 (n=darion76@212.58.189.195) |
| 13:45.44 | *** join/#openezx mark_ZN5 (n=markstos@101-089.wireless.parallax.ws) |
| 14:53.45 | *** join/#openezx darion76 (n=darion76@91.145.201.168) |
| 15:13.34 | *** join/#openezx BadCluster (n=badclust@190.50.178.53) |
| 15:40.55 | tmzt | WyrM: are you there? I am having problems with git, now trying to repull and can't remember the steps for tg |
| 15:56.36 | *** join/#openezx mikro (n=mikro@host16-172-dynamic.14-87-r.retail.telecomitalia.it) |
| 16:59.39 | *** join/#openezx l403 (n=l@85.132.159.239) |
| 17:05.49 | *** join/#openezx uwe_ (n=uwe_@dslb-084-056-015-196.pools.arcor-ip.net) |
| 17:29.35 | *** join/#openezx mikrox (n=mikro@host16-172-dynamic.14-87-r.retail.telecomitalia.it) |
| 17:34.16 | *** join/#openezx file (n=file@asterisk/developer-and-muffin-lover/file) |
| 17:38.31 | *** join/#openezx ao2 (n=u@2001:1418:117:0:0:0:0:1) |
| 18:48.38 | *** join/#openezx mark_ZN5 (n=markstos@101-089.wireless.parallax.ws) |
| 19:13.03 | *** join/#openezx ao2 (n=u@2001:1418:117:0:0:0:0:1) |
| 19:34.11 | *** join/#openezx uwe_ (n=uwe_@dslb-084-056-015-196.pools.arcor-ip.net) |
| 19:49.51 | WyrM | hi |
| 19:52.23 | mark_ZN5 | hi |
| 20:02.04 | WyrM | hi mark_ZN5 |
| 20:02.17 | WyrM | does the zn5 uses a pxa processor too? |
| 20:04.10 | mark_ZN5 | The ZN5 runs on the Freescale SCM-A11 processor, the same as the RAZR2 V8. |
| 20:05.44 | ghane | MotoMAGX |
| 20:06.14 | mark_ZN5 | Right. |
| 20:06.31 | ghane | but still untested with the kernel-mod-reboot-exploit? |
| 20:07.08 | ghane | think the original exploit on Z6 was fixed on some later phone |
| 20:07.38 | mark_ZN5 | I haven't tested that. |
| 20:08.00 | ghane | me niether, but tha plan is to test it now during the hollidays |
| 20:08.15 | mark_ZN5 | ghane: You have a ZN5, too? |
| 20:08.24 | ghane | mark_ZN5: no, but I have the Z6 and E8 |
| 20:08.36 | mark_ZN5 | I see. |
| 20:08.40 | ghane | mark_ZN5: I believe the E8 is very close to the ZN5 |
| 20:08.48 | WyrM | hum. |
| 20:09.00 | ghane | well they are all pretty similair but Z6 and V8 are the same phones |
| 20:09.35 | ghane | and E8 and ZN5 are probably the same as well |
| 20:09.35 | ghane | "same" almost identical software and hardware that is |
| 20:09.37 | ghane | E8 and ZN5 runs newer motomagx than v8 and z6 |
| 20:11.31 | mark_ZN5 | I have been having trouble finding much out about the SCM-A11 processor, but I just came across this. It appears to be a link to a Linux distribution that runs on the processor: |
| 20:11.32 | mark_ZN5 | http://www.freescale.com/webapp/search/Serp.jsp?QueryText=SCM-A11 |
| 20:11.45 | ghane | I just need to figure out how to cross-compile a kernel, have never done that before and don't really have time to do it right now, but when that is done i'll try dmitrys 2ndboot stuff |
| 20:11.56 | WyrM | mark_ZN5: isn't scma11 an i.mx core? |
| 20:11.59 | ghane | mark_ZN5: there are virtually no info about the SCMA11 |
| 20:12.20 | ghane | but it is an Freescale ARM11 at 530mhz |
| 20:12.36 | mark_ZN5 | WyrM: I don't know. |
| 20:12.38 | ghane | got a spearate DSP for radio |
| 20:12.48 | ghane | GSM-stack etc |
| 20:13.00 | ghane | otherwise single arm-core design iirc |
| 20:13.37 | ghane | mark_ZN5: oh, I was unable to find anything last time I searched |
| 20:14.20 | WyrM | iirc I read somewhere that scm-a11 is an i.mx core + starcore dsp. |
| 20:14.28 | ghane | starcore ya |
| 20:14.37 | tmzt | how much information is in the opensource.moto source (hardhat)? |
| 20:14.52 | ghane | there are kernels that boots on it |
| 20:14.58 | ghane | not much info about the dsp |
| 20:14.59 | WyrM | boots? |
| 20:15.03 | ghane | well |
| 20:15.14 | ghane | dmitry's 2ndboot |
| 20:15.28 | WyrM | heh. |
| 20:15.52 | ghane | WyrM: inpossible to "boot" it since the signature checking in otp-rom |
| 20:16.14 | ghane | internal boot-rom in the chip does signature checking on the bootloader |
| 20:16.28 | ghane | then the bootloader does signature checking on filesystems and kernel |
| 20:17.03 | mark_ZN5 | Last night I posted on the Motorola Opensource site and asked them for more documentation.... can't hurt to ask. :) |
| 20:17.03 | mark_ZN5 | https://opensource.motorola.com/sf/discussion/do/listTopics/projects.motozinezn5/discussion.general_comments |
| 20:17.14 | ghane | but you can compile the moto-source kernel, use the 2ndboot kernel-module-bootloader to boot it and get up to the point where you can run a full copy of the original filesytem |
| 20:17.14 | WyrM | mark_ZN5: good luck. |
| 20:17.35 | WyrM | I've been asking for documentation for years, nothing so far. |
| 20:17.47 | mark_ZN5 | Oh. :) |
| 20:18.24 | ghane | From what I've heard you can actually make calls as well, but that depends on using the full moto filesytem with their propertary interfaces |
| 20:18.50 | ghane | the modem appearantly uses some binary mumbo-jumbo interface and not plain AT-commands |
| 20:20.10 | ghane | mark_ZN5: you dont have telnet on yours yet? |
| 20:21.08 | mark_ZN5 | ghane: No, not yet. RAZR2 V8 instructions seemed promising, but didn't work in the end. |
| 20:21.20 | tmzt | rilm? what is that |
| 20:22.27 | ghane | mark_ZN5: you can reflash it, but there is a file you can create on the device (i believe the problem is to actually create the file) |
| 20:22.45 | ghane | mark_ZN5: a normal text file which is executed at boot-time |
| 20:23.03 | ghane | in user-writeable filesystem |
| 20:23.21 | mark_ZN5 | ghane: Interesting. |
| 20:23.44 | ghane | mark_ZN5: think that was introduced on U9 or E8, don't remember what the file was :( |
| 20:23.58 | mark_ZN5 | Other people have already gotten telnet on the phone using this "backup.rar" solution, but I don't trust putting those binaries on my phone |
| 20:24.00 | mark_ZN5 | http://www.mmus.us/forum/showthread.php?t=5633 |
| 20:24.54 | ghane | mark_ZN5: I used jonwil's solution for my Z6... first read the CG's, modify the ones without signature and then reflash it |
| 20:25.26 | ghane | think it is similair to the backup.rar except that you create the filesystem yourself |
| 20:27.22 | ghane | mark_ZN5: interesting, dont think you need to add any binaries for telnet, telnetd is already on the phone, it is just a matter of starting it |
| 20:27.47 | mark_ZN5 | ghane: That's what I thought, based on the OpenEZX wiki. |
| 20:28.47 | ghane | mark_ZN5: so that backup.rar solution might do it as well, you just hack the CardRegistry to trick the phone to execute a shellscript that starts telnetd, on my Z6 i had to change permissions for Opera to allow it to execute shellscripts as root ;-) |
| 20:31.32 | mark_ZN5 | I would like to get this style method to work, if I can: |
| 20:31.33 | mark_ZN5 | echo "AT+mode=13" > /dev/ttyACM0 |
| 20:31.54 | ghane | mark_ZN5: ya, but the telnetd is not started by default on the consumer devices |
| 20:32.28 | ghane | MotoMAGX devices will only start telnet if engineering mode is enabled and it is a "developer" device |
| 20:32.30 | mark_ZN5 | Oh. Then I have more work to do. |
| 20:32.48 | ghane | AT+mode=13 only turns the device into network mode |
| 20:32.53 | WyrM | ghane: probably the same with my ezx devices. |
| 20:32.56 | ghane | so that needs to be done as well |
| 20:33.04 | mark_ZN5 | And I don't suppose I can enable engineering mode myself? |
| 20:33.14 | WyrM | the +mode stuff never worked for me, I tried on a780, and a1200. |
| 20:33.16 | ghane | WyrM: ya, I have yet to enable telnet on my E6 |
| 20:33.41 | ghane | mark_ZN5: you can enable engineeringmode but the device ID will still be consumer so no, wont start |
| 20:33.54 | mark_ZN5 | I see. |
| 20:34.10 | ghane | My Z6 is in engineering mode, I have the special GSM engineering tools in the main menu, but still no telnet at startup |
| 20:34.55 | mark_ZN5 | I suspect the backup.rar solution would work, I just don't like the idea of putting those binaries on the phone, when the source isn't available... I can't verify exactly what's been modified in the system folder. |
| 20:35.40 | ghane | mark_ZN5: but do you really need to put binaries there? |
| 20:36.19 | ghane | mark_ZN5: there are another solution if I just could remember that filename |
| 20:36.47 | ghane | but that involves reflashing, unless you can access internal filesystems some other way |
| 20:36.49 | mark_ZN5 | ghane: I can read the backup.rar docs more closely. |
| 20:37.05 | ghane | mark_ZN5: i will read them as well, havent downloaded yet |
| 20:37.22 | ghane | mark_ZN5: but I want to get into my E8 as well |
| 20:37.39 | ghane | mark_ZN5: do you run linux or windows? |
| 20:37.45 | ghane | that is another tricky think |
| 20:37.47 | ghane | think |
| 20:37.48 | ghane | thing |
| 20:37.51 | ghane | i cant spell today |
| 20:38.54 | mark_ZN5 | ghane: Only Linux in my house. |
| 20:39.00 | ghane | mark_ZN5: ok good :-) |
| 20:39.26 | mark_ZN5 | I just re-read the backup.rar solutions, it looks like only a few essential files from backup.rar are used. Maybe I'll try it. |
| 20:39.58 | ghane | mark_ZN5: anyway you need to send some special stuff to the device anyway after setting it to usb-networking mode |
| 20:40.06 | ghane | otherwise it will not get an IP-address |
| 20:40.25 | ghane | unless you run ifconfig on the device |
| 20:40.52 | ghane | jonwil posted the source for a modified backup tool for MotoMAGX on the mailinglist this summer |
| 20:41.26 | ghane | you can use that one for switching to USBnet-mode and setting an ip-address on the device (192.168.1.2 iirc) |
| 20:42.15 | ghane | no |
| 20:42.18 | mark_ZN5 | I'm having trouble finding that jonwil post now. I'm going to take a few minutes now and try the backup.rar telnet solution now. |
| 20:42.19 | ghane | 192.168.16.2 perhaps |
| 20:42.33 | mark_ZN5 | That sounds right. Someone confirmed that recently. |
| 20:42.36 | ghane | all other ip-ranges are blocked |
| 20:42.59 | ghane | mark_ZN5: I think this was starting june, last posts might be august |
| 20:43.37 | mark_ZN5 | This guy got it to work: http://amimu.blogspot.com/2008/12/motorola-zn5.html |
| 20:43.39 | ghane | otherwise I have the stuff lying on my other computer, can send it if you need |
| 20:43.55 | mark_ZN5 | Or link it from the wiki? |
| 20:44.09 | ghane | mark_ZN5: he's tools can be used to make full backups from the flash |
| 20:44.30 | ghane | mark_ZN5: ya perhaps we should do that, I just downloaded everything when I saw it on the mailing list |
| 20:44.31 | tmzt | ZN5 source defaults to ARCH_MXC91321 |
| 20:44.48 | ghane | there are a lot of information that we do not yet have available for all |
| 20:45.04 | mark_ZN5 | tmzt: What's that mean? |
| 20:45.43 | tmzt | in the hardhat kernel source the ljap_defconfig does not have CONFIG_MACH_ anything, I was trying to figure out why |
| 20:46.02 | tmzt | it appears the Kconfig in plat-mxc defaults to that but it's still not a MACH |
| 20:46.16 | tmzt | then, obj-$(CONFIG_ARCH_MXC91321) += gpio.o cpu_common.o |
| 20:47.17 | ghane | by the way |
| 20:47.18 | ghane | http://paste.lisp.org/display/71977 |
| 20:47.31 | ghane | very important stuff for MotoMAGX devices ;-) |
| 20:48.54 | tmzt | modem_services and db_daemon? |
| 20:49.36 | ghane | magic stuff |
| 20:50.08 | ghane | I believe there is an API to the modem_services and then that one communicates with the DSP with some binary API |
| 20:50.30 | ghane | havent tried myself yet |
| 20:50.32 | tmzt | there is no other arm core in dsp? |
| 20:50.39 | ghane | no dont think so |
| 20:53.07 | tmzt | Deep Blue? |
| 20:53.22 | ghane | Deep Blue? |
| 20:53.24 | tmzt | oh, too old, sorry |
| 20:53.35 | tmzt | copyright line in a source file |
| 20:53.40 | ghane | ah |
| 20:53.57 | ghane | there were some comments about the DSP in the bootloader source |
| 20:53.58 | ghane | mbm |
| 20:54.01 | ghane | no |
| 20:54.16 | ghane | the other one what was it called |
| 20:54.18 | ghane | lbl? |
| 20:55.42 | ghane | ya lbl, there were some comments about dsp code in that one |
| 20:58.51 | ghane | main cpu is an arm1136j iirc |
| 21:17.34 | mark_ZN5 | That backup.rar solution for telnet/ftp access includes a curious "autorun.sh" file. It runs just one command: |
| 21:17.35 | mark_ZN5 | mount -o bind /ezxlocal/medl/ui_camera_shutter_2.wav /usr/data_resource/sound/ui_sounds/ui_camera_shutter_2.wav |
| 21:17.54 | ghane | lol? |
| 21:18.15 | ghane | are you allowed to do mount bind on those? |
| 21:18.39 | mark_ZN5 | I don't know. I'm giong to skip the step when I try. (in a few minutes). |
| 21:18.49 | ghane | you have to exploit the security kernel module before you can do any mounting |
| 21:19.04 | ghane | you can do mount -o remount with the same fstypes, but nothing more |
| 21:19.25 | mark_ZN5 | After a carefully reviewing the backup.rar solution, it appears that the telnet part should be safe, and only the ftp part depends on a foreign executable. I am going to skip copying the providing bftpd binary to the phone. |
| 21:19.32 | ghane | strange if there are "worse" security on the zn5 than on z6 |
| 21:19.50 | ghane | mark_ZN5: ya, the ftp is not on the phone |
| 21:20.24 | ghane | mark_ZN5: but you can easily compile yourself for them (I am using a binary distribution of the moto released gcc) |
| 21:20.29 | tmzt | I don't think you can bind mount files, only directories |
| 21:20.45 | ghane | I don't think you can bind mount on the MotoMAGX at all ;-) |
| 21:20.53 | mark_ZN5 | I would much rather compile a ftpd that I trust, then get one off a modding forum... |
| 21:21.16 | mark_ZN5 | I should have a result from my telnet test fairly soon. |
| 21:21.24 | ghane | you can do mount -o remount on for example the /mmc/mmca1 to remove noexec |
| 21:21.36 | ghane | mark_ZN5: you need to set the ip-address as well |
| 21:21.56 | ghane | I wonder if I should stop watching TV and go and attack my E8 as well |
| 21:44.21 | CIA-16 | OpenEZX: 03wyrm * r2377 10/trunk/src/host/boot_usb/boot_usb.c: implement "off" and "jump" commands. Initial implementation of "flash" command |
| 21:47.06 | CIA-16 | OpenEZX: 03wyrm * r2378 10/trunk/src/blob/gen-blob/ (4 files in 2 dirs): "flash" command stub, use AP_WDI line to PCAP on POWER_DOWN command |
| 21:47.10 | ao2 | ezx_blob_cmd_flash(0x12345, 0xbeef, 31337); |
| 21:47.11 | ao2 | :) |
| 21:47.31 | WyrM | yeah, its not done yet ;) |
| 21:47.54 | WyrM | only raw usb command and validation of arguments are implemented on gen-blob. |
| 21:48.04 | WyrM | no actual flashing yet. |
| 21:48.51 | WyrM | but reading from memory is working now. |
| 21:49.10 | WyrM | we can use gen-blob to backup things. |
| 21:49.18 | ao2 | WyrM, with your work we can even get rid of motorola ramdownloader, right? |
| 21:49.26 | WyrM | yes |
| 21:49.42 | ghane | woho |
| 21:49.53 | ghane | but that will never happen on magx :( |
| 21:50.47 | mark_ZN5 | My attempt to enable telnet on the ZN5 didn't quite work. After clicking the "Telnet" menu option, the phone disconnects and reconnects as I expect, but the usbnet is not brought up. I get just this in /var/log/messages: "new full speed USB device using uhci_hcd and address 6" ..and the phone stays in a "charging" mode. |
| 21:51.32 | ghane | mark_ZN5: so you don't get the usb networking? |
| 21:51.43 | ghane | mark_ZN5: modprobe zaurus and usbnet stuff |
| 21:51.50 | WyrM | mark_ZN5: maybe you are just missing cdc_ethernet or zaurus module on your host. |
| 21:52.20 | mark_ZN5 | Could be. I just modprobe'd usbnet and cdc-acm |
| 21:52.43 | mark_ZN5 | I'll modprobe those as well. |
| 21:53.24 | mark_ZN5 | hmm, those aren't found. I'll poke around the wiki. |
| 21:53.56 | ghane | mark_ZN5: what dist are you running? |
| 21:54.04 | mark_ZN5 | ubuntu hardy |
| 21:54.14 | ghane | I had problems with getting it to run on my ubuntu 7.10 |
| 21:54.37 | mark_ZN5 | This guy reported some better results with Fedora: http://linuxslate.com/Review-Motorola_ZN5.html |
| 21:54.39 | ghane | havent tried since i upgraded to 8.04 and 8.10 |
| 21:55.07 | ghane | so I do all communication with my Zenwalk installation on my laptop |
| 21:55.27 | mark_ZN5 | I could try a Fedora LiveCD, but having it work with Ubuntu would be ideal. |
| 21:55.33 | ghane | =) |
| 21:57.17 | ghane | mark_ZN5: but you still need the tool to set ipaddress |
| 21:57.32 | ghane | or does the backup.rar do that as well? |
| 21:58.07 | mark_ZN5 | Yes. |
| 21:58.46 | mark_ZN5 | it does |
| 21:58.46 | mark_ZN5 | if ! ifconfig | grep -q 192.168.16.2; then ifconfig usbl0 192.168.16.2 broadcast 192.168.16.7 netmask 255.255.255.248; fi |
| 21:58.57 | ghane | ah |
| 21:58.58 | ghane | :) |
| 21:59.06 | ghane | great |
| 22:00.07 | mark_ZN5 | Looks like we've run into this Ubuntu/usbnet bug: https://bugs.launchpad.net/ubuntu/+source/linux-source-2.6.22/+bug/162003 |
| 22:01.17 | ghane | lol |
| 22:01.20 | ghane | stupid ubuntu :) |
| 22:02.23 | mark_ZN5 | I don't suppose I could telnet to the phone over wifi? :) |
| 22:02.36 | ghane | hmm why not? |
| 22:02.46 | ghane | once it is activated |
| 22:02.50 | ghane | try it :) |
| 22:03.03 | ghane | but then you need to set the ip on the wifi driver instead |
| 22:03.13 | *** join/#openezx mikro (n=mikro@host147-219-dynamic.10-79-r.retail.telecomitalia.it) |
| 22:03.57 | ghane | mark_ZN5: /ezxlocal/medl/medld.conf |
| 22:04.18 | ghane | mark_ZN5: that one is executed at bootup, normal shellscript |
| 22:04.36 | ghane | mark_ZN5: doesnt need to be chmod +x, is executed anyway @ boot |
| 22:04.39 | ghane | if it exists |
| 22:06.31 | mark_ZN5 | Ok. But I need telnet access to get that file, though. |
| 22:07.01 | ghane | ya, but I mean if you just get access once, you can add the ifconfig and telnet startup into that one instead and it will be set at bootup |
| 22:08.48 | mark_ZN5 | ghane: Could you guess the wifi driver name offhand? |
| 22:09.07 | ghane | mark_ZN5: sorry, i don't know that |
| 22:09.20 | ghane | mark_ZN5: check the source code? |
| 22:09.50 | ghane | mark_ZN5: you could put it into flash-mode and rip the firmware, and then unsquash the filesystems and look in /etc? ;-) |
| 22:10.55 | ghane | mark_ZN5: or just put ifconfig -a > /mmc/mmca1/ifconfig.log in the shellscript? |
| 22:11.11 | mark_ZN5 | There you go. I'll experiment. |
| 22:11.45 | ghane | mark_ZN5: I'll attack my E8 when the movie is over |
| 22:11.47 | ghane | :) |
| 22:11.59 | ghane | but that one doesnt have wifi |
| 22:14.57 | mark_ZN5 | OMG, telnet over wifi worked. I'm in. |
| 22:15.03 | ghane | congrats |
| 22:15.16 | mark_ZN5 | Thanks. |
| 22:15.42 | mark_ZN5 | So, the phone displays it's current IP, and I just telnetted to that. No ifconfig. |
| 22:15.55 | ghane | ah |
| 22:15.58 | ghane | great |
| 22:16.11 | ghane | i suppose wifi makes it a bit easier in this case |
| 22:16.47 | mark_ZN5 | I don't know what to explore first. :) |
| 22:17.19 | ghane | mark_ZN5: mesg, cat /proc/cpuinfo, cat /proc/cmdline and provide the info to the wiki |
| 22:18.00 | mark_ZN5 | doing now |
| 22:18.43 | ghane | :) |
| 22:20.29 | mark_ZN5 | For the "Version" report, is there something better to use than "uname -a" |
| 22:20.32 | mark_ZN5 | ? |
| 22:20.53 | ghane | no |
| 22:21.05 | ghane | look at the source code? ;-) |
| 22:21.17 | ghane | 2.6.11_dev ? |
| 22:21.32 | mark_ZN5 | Linux (none) 2.6.10_dev armv6l unknown |
| 22:21.39 | mark_ZN5 | Same as RAZR2 V8 |
| 22:21.42 | ghane | ah 10 |
| 22:22.02 | mark_ZN5 | And the commands for the "modules" and "crypto" reports? |
| 22:24.40 | ghane | lsmod |
| 22:24.40 | ghane | ? |
| 22:24.49 | ghane | crypto i dont know |
| 22:25.02 | mark_ZN5 | Looks like there's /proc/crypto |
| 22:25.28 | ghane | mark_ZN5: run the 2ndboot stuff and remove security stuff so you can acces s/sys fs etc |
| 22:25.50 | ghane | http://paste.lisp.org/display/71977 |
| 22:32.56 | mark_ZN5 | OK, I've added the proc reports: http://wiki.openezx.org/ZN5 |
| 22:33.11 | ghane | :) |
| 22:43.47 | ghane | hmm there wasnt much info about the E8 |
| 22:43.54 | ghane | time for me to do some work as well :) |
| 22:44.20 | mark_ZN5 | ghane: Did you just use the backup.rar telnet instructions as well? |
| 22:47.32 | mark_ZN5 | ghane: I'm interested in publishing the file I used to gain telnet access to the wiki. Could you peer-review them quickly before I do? It's just 3 small text files. |
| 22:47.48 | ghane | mark_ZN5: I'm going to now |
| 22:48.51 | ghane | mark_ZN5: if you have something "cleaner" and less "modder-community" style stuff i'm willing to try that instead of backup.rar |
| 22:49.02 | ghane | mark_ZN5: my E8 is still untouched ;-) |
| 22:49.15 | mark_ZN5 | That's exactly what I wanted to prepare. |
| 22:49.20 | ghane | ah |
| 22:49.24 | mark_ZN5 | I'm trying to IRC you a file now. |
| 22:49.38 | ghane | thanks |
| 22:49.50 | ghane | i just need to get my laptop and my E8 now |
| 22:50.08 | mark_ZN5 | My revision removes loading the foreign bftpd binary, which shouldn't be trusted. |
| 22:50.19 | mark_ZN5 | It does the minimum to enable telnet. |
| 22:50.34 | ghane | great |
| 22:50.41 | ghane | I'll test it on all my unmodified phones |
| 22:50.44 | ghane | starting with the E8 |
| 22:50.53 | mark_ZN5 | Which apparently enables it over the wifi connection as well as the usb network, which is another security issue the modding forums failed to note. |
| 22:51.09 | ghane | I actully got almost all of the magx phones |
| 22:51.15 | ghane | but none with wifi :( |
| 22:51.58 | mark_ZN5 | My concern with the tgz I sent you is what I want a peer review that there would be no license issue with publishing it on openezx.org. Because it is just three simple text files, I see no problems. |
| 22:52.36 | mark_ZN5 | Essentially, just copy those files in the tgz to the ".system" folder on the microSD card. |
| 22:52.49 | mark_ZN5 | Then "Telnet" appears under the Games menu. |
| 22:53.05 | ghane | where do I have my Magx stuff? |
| 22:53.08 | mark_ZN5 | It provides no feedback when clicking on it, but enables telnet for root. |
| 22:53.12 | ghane | i've forgot which computer i have it on |
| 22:53.24 | ghane | ok |
| 22:53.25 | ghane | great |
| 22:53.38 | ghane | I've tried to do a script like that on My Z6, but never got it to work |
| 22:54.07 | ghane | mark_ZN5: btw, i found jonwils tool, it is called "magxjb" |
| 22:56.42 | ghane | mark_ZN5: i dont see any problems with releasing those files, iirc there are already descriptions on how to do this hack on the EZX-devices |
| 22:57.38 | mark_ZN5 | Right. It's just a simplication of the backup.rar solution which has been published, but my simplification removes all binaries. I'll go ahead and prepare to publish it. |
| 22:57.52 | ghane | :) |
| 22:57.56 | WyrM | mark_ZN5: you wrote the files? |
| 22:58.17 | ghane | mark_ZN5: otherwise just publish the "additions" needed to do on the CardRegistry |
| 22:58.41 | ghane | http://wiki.openezx.org/Get_a_shell <-- I mean it is already descirbed there |
| 22:58.44 | ghane | more or less |
| 22:59.22 | mark_ZN5 | WyrM: I just you a copy of the files to review as well. They are very simple files... to the point I doubt they could be copyrightable, although no one was claimed copyright to them, that I'm aware of. |
| 22:59.23 | ghane | <PROTECTED> |
| 23:01.26 | WyrM | I don't see any problem with it. |
| 23:01.35 | mark_ZN5 | Thanks. |
| 23:05.11 | ghane | why do moto have to hide the USB connector behind that stupid piece of plastic?! |
| 23:07.01 | ghane | mark_ZN5: could you mount yourmemorycard while in the phone? |
| 23:07.34 | mark_ZN5 | ghane: No. I had to use a card-reader to transfer the files to it. |
| 23:07.42 | mark_ZN5 | Seems to be another Ubuntu-ism. |
| 23:09.20 | ghane | mark_ZN5: no there is a bug in the mass storage driver in the kernel on the devices I think or some hack moto made that prevents usb-mass storage to work with linux |
| 23:09.58 | mark_ZN5 | But search for Fedora on this page: |
| 23:09.59 | mark_ZN5 | http://linuxslate.com/Review-Motorola_ZN5.html |
| 23:10.09 | mark_ZN5 | For him USb mass storage works in Fedora, but not Ubuntu. |
| 23:10.24 | mark_ZN5 | Maybe Fedora hacked around the Motorola hacks? |
| 23:10.30 | ghane | perhaps |
| 23:10.34 | ghane | there is a known patch |
| 23:10.38 | ghane | or something |
| 23:10.53 | ghane | i saw one description how to hack your kernel on the computer to workaround the bug on the phone-side:) |
| 23:11.02 | ghane | lol I cant find my SD-card adapter |
| 23:11.07 | tmzt | could there be a hal configuration problem? |
| 23:11.08 | WyrM | there is a patch on opensource.motorola. |
| 23:11.18 | ghane | ah ok |
| 23:11.28 | WyrM | but its not ok. the flaw is really on the phone side. |
| 23:11.37 | mark_ZN5 | WyrM: To patch it on the phone side or the desktop side? |
| 23:11.41 | mark_ZN5 | I see. |
| 23:11.50 | WyrM | to patch the host kernel. |
| 23:11.57 | ghane | but hopefully we can use fixed kernels on the phone later :) |
| 23:12.06 | ghane | I know dmitry is working on that |
| 23:12.09 | mark_ZN5 | It seems like the phone is trying to be clever about switching between mass-storage and charging modes. |
| 23:12.17 | mark_ZN5 | :) |
| 23:12.26 | ghane | hehe |
| 23:16.29 | ghane | mark_ZN5: where to add the files? .system/java? |
| 23:16.52 | ghane | I forgot I used my microSD for booting a Linux installation last week so it is not formatted for the E8 |
| 23:16.56 | mark_ZN5 | script.sh goes in .system |
| 23:17.04 | mark_ZN5 | the files in java/ go in .system/java/ |
| 23:17.07 | WyrM | moto aura is also linux based. |
| 23:17.14 | WyrM | http://developer.motorola.com/products/handsets/aura/ |
| 23:17.25 | ghane | ya |
| 23:17.33 | mark_ZN5 | I noticed this morning the ZN5 has a built in option to format microSD cards for its use. |
| 23:17.36 | ghane | same motomagx |
| 23:17.52 | ghane | I've played with that one |
| 23:19.05 | ghane | pretty funny screen on the aura |
| 23:19.34 | ghane | R=480 |
| 23:19.38 | ghane | eh |
| 23:19.40 | ghane | R=240 |
| 23:19.44 | ghane | circular screen |
| 23:19.46 | ghane | pretty strange |
| 23:20.00 | ghane | increadibly tiny pixels |
| 23:21.12 | WyrM | http://www.youtube.com/watch?v=_6b8p1AzG84 |
| 23:21.31 | WyrM | lol, he is trying to scratch aura's screen. |
| 23:21.37 | ghane | haha |
| 23:22.04 | tmzt | if it's anything like the q, not likely to scratch |
| 23:22.06 | ghane | theaura is made from stainless steel |
| 23:22.17 | tmzt | oh right |
| 23:22.23 | ghane | pretty heavy |
| 23:22.26 | WyrM | the UI is pretty. |
| 23:22.28 | tmzt | and crystal? |
| 23:22.30 | ghane | and said to be expensive |
| 23:22.38 | ghane | Â~2000 USD I've heard |
| 23:22.39 | WyrM | but very slow. |
| 23:23.35 | ghane | didnÃ't know thatthe screen was so durable |
| 23:29.24 | mark_ZN5 | When I try to upload to the wiki, I get ".tgz is not a recommended file format. |
| 23:29.42 | ghane | hmm your hack didnt work on my E8 :( |
| 23:29.59 | mark_ZN5 | Did "Telnet" appear in the menu? |
| 23:30.04 | ghane | no |
| 23:40.28 | mark_ZN5 | ghane: You updated the IMEI lines with your own IMEI number, right? |
| 23:41.35 | tmzt | WyrM: what are the commands to pull a new git? |
| 23:43.02 | ghane | mark_ZN5: oh, forgot that |
| 23:43.12 | ghane | mark_ZN5: never needed to do that on my Z6 ;-) |
| 23:50.11 | mark_ZN5 | Ok, I added my instructions here: http://wiki.openezx.org/ZN5 |
| 23:50.23 | *** join/#openezx uwe_ (n=uwe_@dslb-084-056-013-248.pools.arcor-ip.net) |
| 23:50.29 | mark_ZN5 | Feel free to merge parts that apply elsewhere to the "Get a shell" page. |
| 23:50.38 | ghane | I am trying once more on my E8 now |
| 23:50.50 | ghane | Will update the E8 side with a link to ZN5 if it works |
| 23:53.49 | ghane | hopefully this will work on U9 and Z6 as well |
| 23:57.42 | *** join/#openezx Wyr1 (n=wyrm@20158160183.user.veloxzone.com.br) |
| 23:59.47 | ghane | mark_ZN5: no, doesnt work on my E8 ;( |
| 23:59.55 | ghane | no icon appears |