Database Develop

Forget activation code use this app, NOT an activator!

Hey guys, I want to pass this app along to everyone here who is having problems activating WP7.
Note: This does NOT activate phone, it allows you to download ANYTHING thats in the Market.
I do NOT believe in warez! I am posting it here because of the people who cant activate WP7.
Also, this is NOT my app so I take no credit for this, just passing it along.
Overview: 3 ("free") WP7 MktPlace enables you to download Apps/Games for
specific regions (i.e. en-US, en-GB, fr-FR, de-DE) or specific devices (i.e. htc, dell, samsung) from the marketplace.
They also get auto-signed, so you can install them on your developer unlocked device.
After it's downloaded use "Tom XAP Installer.exe" to install it.
Make sure you have Zune running in background and usb is connected.
Some apps will give you error because it's for a different phone but I had almost every app install that I tried.
You can either use the search feature or leave the search box empty and click search for more results.
Your phone also has to be unlocked to install apps.
MOD EDIT:: ATTACHMENTS REMOVED - SEE LAST POST BEFORE THREAD WAS CLOSED.

Something that bypasses legitimate activation is definitely NOT allowed here. We are here to make it possible for users to run WP7 on their devices. Whether they get the OS activated or not is their own business. Bypassing legitimate activation is definitely possible but definitely illegal and therefore IS NOT allowed here.
Attachments in OP removed.
Thread closed.

Security Warning For HUAWEI P8 LITE Owners! Build No: ALE-L21C432B574

SECURITY WARNING!
Note: Because the last thread closed by Perseus (thanks to XePeleato who lobbied for it from Madrid and he said that "Please stop trying to write in Spanish, I don't understand a single word.") I am forced to open a new thread and in this time upload a YouTube video to proof that ALL P8 LITE HAVE A POTENTIALLY DANGEROUS SECURITY ISSUE.
NOT POSSIBLE TO ENCRYPT THE PHONE and I requested here: [ROM][OTA Update] ALE-L21 Dual SIM C432B574 to DELETE THE ROM URGENTLY because if more people updating or flashing the ROM more and more people will be affected very seriously.
This issue I find not just on B574 but on B564 as well.
I kindly request everyone that in the future before posting comments make a full backup on the phone and do the same what I am doing on the video below.
Here you go:
PLEASE WAIT UNTIL HUAWEI FIX THIS (or if you already unlocked the bootloader flash the stock ROM!
(Because Perseus closed the previous thread, I again need to contact with HUAWEI and ask the to keep they eyes on this thread. I request all admin and moderator NOT to close this one because it's helping all device owners and Huawei to resolve this serious security issue)
Thank you for your attention,
AndroidSecurity

All these ROMs are stock. As you can see, nobody cares. Think about not spamming here.
Sent from my Huawei ALE-L21 using XDA Labs

No one encrypts their device, not even 1% of all android owners. I dont care NSA or FBI looking at my cat pictures. So please, stop spamming these mindless posts and opening up new threads. Your previous thread already got closed because you were SPAMMING and acting in a disrespectful manner

The company that I work in use gmail for work and it requires us to encrypt our phone any other stuff to sync so I think this is a pretty serious issue.
Just because you don't use it, doesn't mean others don't too.
Hope Huawei fixes this as I don't want to use our company issued iphones.

Why... That video is so misleading... Why do you talk like if you knew exactly what's going on? This community would be really nice if people said "Help, I can't get it to work " instead of "It doesn't work", or "it's broken" ... I really have a lot of stuff to do, I am just answering to the people who actually believe that their 'naughty secrets' have been compromised.
First of all I am going to explain how does it work, and then, I'll tell you how to check if it's encrypted or not.
Android, as you may know, has some partitions, of course, it doesn't encrypt them all, just the data partition, where your apps data and internal storage live. And I can make such statement because I can actually prove it scientifically, not recording a video, here you have the original emui FsTab, Do you know what it is? Sure you do! You have been programming for 15 years, but I'll explain it for everyone else, FsTab is a file where the Filesystems are defined so android can mount them correctly: https://gyazo.com/ca9072281128b56416bb1fff9163f0c0 At line 9, the data partition is defined, and it ends with 'encryptable=footer' that means that encryption is supported.
Then, you say that it takes very little amount of time to restart, that's because the encryption takes place after that restart, at the Huawei logo, and of course, I'll prove it with a logcat, that, if you don't believe, you can check your own, as well as the Fstab file. https://gyazo.com/1b75c6835be7025169071a7ecc88df16
Cryptfs takes care of encrypting the data partition, as you can see, and then it obviously, as you proved with your video, asks you for the code. But then you say that it stops asking for the code when you change it! Yeah, it does, but it remains encrypted, because the key, or the pattern, is not the real encryption key, it's the key, that unlocks the real key, that's stored inside a cryptographically secure area of the CPU, what you do when you remove the code, is remove a layer of protection, but that doesn't stop the device from being encrypted, because, Can you encrypt it again? The answer is no. What you can do, is change the key by invoking cryptfs from the command line. Should Huawei let you change the passcode via a graphical interface? It would be nice, but the device remains encrypted, until you boot it up.
However, keep this in mind, if you change the code and it no longer asks you for it at the system start, it asks you for it at the home screen, and if you don't have the code, you can't access any file, and if you leave it without a passcode, then you shouldn't be thinking about encryption at all
Now, how can you check at home that it works? Easy, install TWRP or another recovery and try to read/write to your data partition, you'll see you can't. Another thing you can do, is run this command through adb shell 'getprop ro.crypto.state' it will say 'encrypted' of course, if you want to mess with cryptfs just run this command 'vnd cryptfs' and then whatever parameter, by the way, you can check cryptfs code here: https://android.googlesource.com/platform/system/vold/+/master/cryptfs.c to figure out the parameters or just google them.
Now be more careful when you see something and believe it without thinking about it.
P.S: Your thread is closed because you were unrespectful, I have nothing against you or against security, I hope you don't treat this as a personal attack, because it is not.

Encryption works on my device. Your is the only that's broken. I would suggest you go and replace it.
It's very clear that your only mission is to make everyone panic. That's why you keep resubmitting this over and over and try to stop EVERYONE from upgrading to newest version even though almost NO ONE would be affected if this issue was real.
Sent from my ALE-L21 using XDA-Developers mobile app

SHOW ME A VIDEO! I REFUSING TO ACCEPT ANY KIND OF PERSONAL ATTACK IN THIS FORUM. NO ONE OF YOU PROVIDING EVIDENCE THAT I AM WRONG. ALL OF YOU COME HERE AND POSTING BECAUSE SOMEBODY CALLED YOU TO DO IT. I REQUESTING ALL MODERATOR AND ADMIN TO COME HERE.
I POSTING HELPFUL EVIDENCES THAT THE PHONE AND THE ROM IS DANGEROUS. ALL OF YOU CAN GO TO HELL IF YOU ARE NOT ABLE TO RESET THE PHONE AND DO WHAT I DO IN THE VIDEO.
I GARANTEE THAT NO ONE OF HUWEI P8 LITE DEVICE CAN BE ENCRYPTED!!!!
By the way Android 6.0 according to Google requires to enable full disc encryption.
I showed on the video my build number and everything which can be used to verify my statements. I am on stock ROM unlocked bootloader etc. YOU and ONLY you who comes here are discrediting me. But helpful comments you cant provide as I did.
I STRONGLY RECOMMEND DO THE SAME WHAT I DO IN THE VIDEO AND RECORD IT AND POST IT HERE. DO IT!! NOT ATTACK ME WHO HELPING EVERYBODY.
POST HERE VIDEO WHERE YOU SHOWING YOUR BUILD NUMBER AND DOING EXACTLY THE SAME AS I DID. NO CUT ON VIDEO!!!
THANK YOU

I am sorry, but moderators please could you ban this jerk. Everybody knows that using CAP is yelling and he continues to be disrespectful to everybody that disagrees with him, so he should sit in his room with his phone switched off and that is that. Please !
---------- Post added at 07:58 PM ---------- Previous post was at 07:56 PM ----------
He should also learn better spelling. I hope his programming (15 years) is better.

AndroidSecurity said:
SHOW ME A VIDEO! I REFUSING TO ACCEPT ANY KIND OF PERSONAL ATTACK IN THIS FORUM. NO ONE OF YOU PROVIDING EVIDENCE THAT I AM WRONG. ALL OF YOU COME HERE AND POSTING BECAUSE SOMEBODY CALLED YOU TO DO IT. I REQUESTING ALL MODERATOR AND ADMIN TO COME HERE.
I POSTING HELPFUL EVIDENCES THAT THE PHONE AND THE ROM IS DANGEROUS. ALL OF YOU CAN GO TO HELL IF YOU ARE NOT ABLE TO RESET THE PHONE AND DO WHAT I DO IN THE VIDEO.
I GARANTEE THAT NO ONE OF HUWEI P8 LITE DEVICE CAN BE ENCRYPTED!!!!
By the way Android 6.0 according to Google requires to enable full disc encryption.
I showed on the video my build number and everything which can be used to verify my statements. I am on stock ROM unlocked bootloader etc. YOU and ONLY you who comes here are discrediting me. But helpful comments you cant provide as I did.
I STRONGLY RECOMMEND DO THE SAME WHAT I DO IN THE VIDEO AND RECORD IT AND POST IT HERE. DO IT!! NOT ATTACK ME WHO HELPING EVERYBODY.
POST HERE VIDEO WHERE YOU SHOWING YOUR BUILD NUMBER AND DOING EXACTLY THE SAME AS I DID. NO CUT ON VIDEO!!!
THANK YOU
Click to expand...
Click to collapse
Taken from: https://source.android.com/security/encryption/index.html
Full disk encryption is the process of encoding all user data on an Android device using an encrypted key. Once a device is encrypted, all user-created data is automatically encrypted before committing it to disk and all reads automatically decrypt data before returning it to the calling process.
Click to expand...
Click to collapse
You obviously don't have a clue about what Full disk encryption means.
It has been proven that this claims are all false, so I'd just stop answering him and let the thread get buried, like all the other troll threads.

AndroidSecurity said:
SHOW ME A VIDEO! I REFUSING TO ACCEPT ANY KIND OF PERSONAL ATTACK IN THIS FORUM. NO ONE OF YOU PROVIDING EVIDENCE THAT I AM WRONG. ALL OF YOU COME HERE AND POSTING BECAUSE SOMEBODY CALLED YOU TO DO IT. I REQUESTING ALL MODERATOR AND ADMIN TO COME HERE.
I POSTING HELPFUL EVIDENCES THAT THE PHONE AND THE ROM IS DANGEROUS. ALL OF YOU CAN GO TO HELL IF YOU ARE NOT ABLE TO RESET THE PHONE AND DO WHAT I DO IN THE VIDEO.
I GARANTEE THAT NO ONE OF HUWEI P8 LITE DEVICE CAN BE ENCRYPTED!!!!
By the way Android 6.0 according to Google requires to enable full disc encryption.
I showed on the video my build number and everything which can be used to verify my statements. I am on stock ROM unlocked bootloader etc. YOU and ONLY you who comes here are discrediting me. But helpful comments you cant provide as I did.
I STRONGLY RECOMMEND DO THE SAME WHAT I DO IN THE VIDEO AND RECORD IT AND POST IT HERE. DO IT!! NOT ATTACK ME WHO HELPING EVERYBODY.
POST HERE VIDEO WHERE YOU SHOWING YOUR BUILD NUMBER AND DOING EXACTLY THE SAME AS I DID. NO CUT ON VIDEO!!!
THANK YOU
Click to expand...
Click to collapse
Being ingnorant and disrespectful will not fix any problem you think is going on in your video. Simply calm down and accept that some poeple don't have that problem and the majority don't use this function. If you wanted to warn others simply warn them and that will be that. Also android 6.0 comes with full disk encryption but one thing forgotten here is that we aren't running vanilla android MM. Also Huawei didn't force anyone into updating their firmware. We could complain if it were a major flaw but this bug does not make the device unusable. Also your ignorance reached that of global ingorance. You said and I quote "ALL OF YOU CAN GO TO HELL IF YOU ARE NOT ABLE TO RESET THE PHONE AND DO WHAT I DO IN THE VIDEO. " Religious ignorance, and just general ignorance. As of now I call for a moderator to resolve this issue since I don't have such permissions. You first try to help us and when we try to reason everything and calming people down you attack - also ignorance. Just stupidity in my mind.
Edit: And as it would seem there isn't any problem concerning our encryption.
"Doesn't matter how good of an Idea a person has, if he cannot express it and ignores help to do so, he is as stupid as the rest of us." - me.

You tested one phone and you can't say that EVERY is affected.
Also, who would call people to disagree with you as you stated that we were called to argue here? Huawei? The other guy creates ROMS - something that Huawei doesn't want to and would never work with him, especially on this little issue with YOUR phone. No one called me.
Sent from my ALE-L21 using XDA-Developers mobile app

This thread is a mess and nothing more than speculation really.
You are more than welcome to open another thread, when you have substantial proof of what you are claiming. From what I can tell from this though it is just you, with 1 device claiming this.
Until then, thread closed!
Forum moderator,
Matt

Working on a brute force unlock - need unlock codes

So the bootloader allows 5 tries before forcing a reboot. I'm working on a brute force method to send unlock codes until one is successful. Basically send 4 codes, do a fastboot reboot bootloader, send 4 more - until a valid code is found. It takes 6 seconds on my system for the fastboot command to function again after issuing a reboot. At this rate I can only do 12,342 codes per day (give or take a few hundred). Total possible combinations is 7,958,661,109,946,400,884,391,936. This is based on 16 character alpha numeric (36^16). Of course, if there was a pattern like (111AA1111A1AA111), it would greatly reduce this. I'm within my 30 day window, so I'm likely just to send it back and put my $800 in a company that supports the community, but if I find enough of a pattern to consider brute forcing, I might consider keeping it around. I love the hardware, hating the UI and my inability to install my favorite apps from F-Droid that require root...

I think you would also need the IMEIs and Serial Numbers as the unlock code most probably gets generated with them.

P-Chan80 said:
So the bootloader allows 5 tries before forcing a reboot. I'm working on a brute force method to send unlock codes until one is successful. Basically send 4 codes, do a fastboot reboot bootloader, send 4 more - until a valid code is found. It takes 6 seconds on my system for the fastboot command to function again after issuing a reboot. At this rate I can only do 12,342 codes per day (give or take a few hundred). Total possible combinations is 7,958,661,109,946,400,884,391,936. This is based on 16 character alpha numeric (36^16). Of course, if there was a pattern like (111AA1111A1AA111), it would greatly reduce this. I'm within my 30 day window, so I'm likely just to send it back and put my $800 in a company that supports the community, but if I find enough of a pattern to consider brute forcing, I might consider keeping it around. I love the hardware, hating the UI and my inability to install my favorite apps from F-Droid that require root...
Click to expand...
Click to collapse
Hello P-Chan80,
Did you success ?
I'm also thinking in brute forcing the unlocking oem code on my Honor 6c Pro.
In my case I can try as many code as I want without rebooting but I have to confirm the fastboot unlocking command by pressing Volume UP and Power on the phone. Do you have this procedure on your Huawei ? I was thinking if it is possible to automate it by opening the phone and sending electrical impulses where the buttons are (with an arduino or a raspberry pi for instance).

Hey. It's a very interesting idea - try to brute the code. BUT I think that it is irrational - as the wear of the phone buttons will cost more than the cost of paid methods of obtaining the code. The question is-how do these services get the codes? I can only assume two options: they take the codes from huawei's database or they know the code generation algorithm(If Huawei use one), because they only need the imei or serial numbe to get unlock code. Do you think it is possible to to find this algorithm too?(Having a data: Imei – unlock code)?
May be it's sounds silly, but what do you think about it?

P-Chan80 said:
So the bootloader allows 5 tries before forcing a reboot. I'm working on a brute force method to send unlock codes until one is successful. Basically send 4 codes, do a fastboot reboot bootloader, send 4 more - until a valid code is found. It takes 6 seconds on my system for the fastboot command to function again after issuing a reboot. At this rate I can only do 12,342 codes per day (give or take a few hundred). Total possible combinations is 7,958,661,109,946,400,884,391,936. This is based on 16 character alpha numeric (36^16). Of course, if there was a pattern like (111AA1111A1AA111), it would greatly reduce this. I'm within my 30 day window, so I'm likely just to send it back and put my $800 in a company that supports the community, but if I find enough of a pattern to consider brute forcing, I might consider keeping it around. I love the hardware, hating the UI and my inability to install my favorite apps from F-Droid that require root...
Click to expand...
Click to collapse
Did eventually worked?

Equivalent is winning the lottery. Considering the number of possible combinations it would take years to complete the whole sequence. Not practical at all.
It would help a lot if you get some sort of pattern but that would be hard to get unless all people with the unlock phones provide their IMEI and unlock codes.
If you get enough matching pairs you might be able to figure out the logic. Then should not be too hard to create a generator by putting together a small script (python/perl/php/bash/whatever). The hard bit is to get the pairs and then the script should not be too hard to create. I could try.

I ask this not knowing anything about the Android bootloader process. Is it possible to dump the bootloader of a locked or unlocked phone and analyse the code to identify where and how it identifies a valid unlock code? And then work backwards from there? Or are codes signed by Huawei using a private key and such an analysis would prove unfeasible?
If the unlock codes are signed, but dumping the bootloader is possible, could an analysis of the bootloader code from a dump allow for an exploit to be developed similar to the Amonet exploit used on the 5th, 7th and 9th gen Fire 7 tablets?

It seems someone is trying this method: https://github.com/SkyEmie/huawei-honor-unlock-bootloader
However no-one has confirmed if it actually works, but some users said it doesn't.
EDIT: Started the process 5 hours ago and it did like 1%. The Huawei M3 Lite I'm testing this on doesn't reboot ever. Not sure I'll keep it running for 20 days.

would it be possible to pause it and resume other time?
that would be great.

hfmls said:
would it be possible to pause it and resume other time?
that would be great.
Click to expand...
Click to collapse
Considering it's a command window, you can make a selection with the mouse and it will "block" / pause until you unselect. That should help run the whole thing to the end.

Are you sure the unlock codes are alphanumeric?
Can someone who have unlocked bootloader send me the code and IMEI in PM ? - I know that is private info, but Unlock code should be related to the IMEI
I do a little research today using this bootloader dump: https://forum.xda-developers.com/hu...rch-requesting-bootloader-dump-t3897062/page2
There are two interesting functions that are taking a param - I think it should be a unlock code, and then one of them is passing the code to other function:
void FUN_000be4e6(void)
{
undefined *puVar1;
undefined *puVar2;
undefined *in_pc;
longlong lVar3;
undefined4 in_cr5;
undefined auStack140 [140];
coprocessor_storelong(0xe,in_cr5,auStack140);
puVar1 = (undefined *)0x3e8;
puVar2 = (undefined *)0x3f0;
lVar3 = 8;
while( true ) {
*in_pc = *puVar1;
in_pc[1] = *puVar2;
in_pc = in_pc + 2;
lVar3 = lVar3 + -1;
if (lVar3 == 0) break;
puVar1 = puVar1 + 1;
puVar2 = puVar2 + 1;
}
/* WARNING: Bad instruction - Truncating control flow here */
halt_baddata();
}
Click to expand...
Click to collapse
I think it should be related because it is getting two elements at a time and the loop iterates 8 times - 8*2=16 - the length of the unlock code

Pretty sure that Huawei only asked for my serial, can't remember them asking for my IMEI, but then it has been a couple of years nearly.
Also seem to remember the code being numbers only, but again it's been a while.

dladz said:
Pretty sure that Huawei only asked for my serial, can't remember them asking for my IMEI, but then it has been a couple of years nearly.
Also seem to remember the code being numbers only, but again it's been a while.
Click to expand...
Click to collapse
What device are you referring to?
Certainly that's not how it worked o.n the latest devices.
They asked for imei number only and on the devices with multiple imeis I think only 1st one was needed. The code that they provide also is alphanumeric : FNHHZ85YQ3WP2T0X
If I find my old imei I'll share it as well, I hope I have a backup somewhere ( I actually found old transcripts from Huawei support including my 1st imei, I'll look for the 2nd one in the following days )
Imei #1 - 866219037075115

borovaka said:
Are you sure the unlock codes are alphanumeric?
Can someone who have unlocked bootloader send me the code and IMEI in PM ? - I know that is private info, but Unlock code should be related to the IMEI
I do a little research today using this bootloader dump: https://forum.xda-developers.com/hu...rch-requesting-bootloader-dump-t3897062/page2
There are two interesting functions that are taking a param - I think it should be a unlock code, and then one of them is passing the code to other function:
I think it should be related because it is getting two elements at a time and the loop iterates 8 times - 8*2=16 - the length of the unlock code
Click to expand...
Click to collapse
I was the one who started that thread. I couldn't narrow down on any functions related to unlock code verification though in any of those dumps. Can you share some more light on how you identified that particular function? I'd be interested in taking this up again in my spare time too.

The reasons why I didn't purse it further at that time (as far as I remember) were:
1. There's no partition titled "boot" or "aboot" on atleast EMUI 9. I remember doing some more research on this but seemed to hit a dead-end.
2. Fastboot dump seems to be encrypted. This would make sense since the device has roots-of-trust implemented. Not sure if they only check & verify signatures or also if important sections are encrypted at rest. Didn't pursue this further due to lack of time.

Aodrulez said:
I was the one who started that thread. I couldn't narrow down on any functions related to unlock code verification though in any of those dumps. Can you share some more light on how you identified that particular function? I'd be interested in taking this up again in my spare time too.
Click to expand...
Click to collapse
I used ghidra with the image from the other post. With ARM CORTEX little endian profile

Rstment ^m^ said:
What device are you referring to?
Certainly that's not how it worked o.n the latest devices.
They asked for imei number only and on the devices with multiple imeis I think only 1st one was needed. The code that they provide also is alphanumeric : FNHHZ85YQ3WP2T0X
If I find my old imei I'll share it as well, I hope I have a backup somewhere ( I actually found old transcripts from Huawei support including my 1st imei, I'll look for the 2nd one in the following days )
Imei #1 - 866219037075115
Click to expand...
Click to collapse
It was two years ago, can't remember giving my IMEI out, 100% my serial via the official Huawei bootloader unlock method, cannot remember if it was alpha it not.
Either way. Best of luck with this, would love to see someone crack this, could make a tonne of money if you did.
Or even better free

Did some more research on this & it turns out, on recent Huawei devices, the bootloader is named "xloader". The fastboot dump from my rooted phone is encrypted & so won't yield anything useful. It's also very rare to find references to detailed information on this "xloader" image/partition on the internet. Will dig some more when I get time.

Rstment ^m^ said:
What device are you referring to?
Certainly that's not how it worked o.n the latest devices.
They asked for imei number only and on the devices with multiple imeis I think only 1st one was needed. The code that they provide also is alphanumeric : FNHHZ85YQ3WP2T0X
If I find my old imei I'll share it as well, I hope I have a backup somewhere ( I actually found old transcripts from Huawei support including my 1st imei, I'll look for the 2nd one in the following days )
Imei #1 - 866219037075115
Click to expand...
Click to collapse
P20 Pro, Huawei method..
Like I said it's been 2 years so may be remembering it wrong..

dladz said:
P20 Pro, Huawei method..
Like I said it's been 2 years so may be remembering it wrong..
Click to expand...
Click to collapse
I got myne from support so who knows, I didn't get a chance to use website

Elude US ban by faking device info | unlock codes

Hej,
I'm wondering... with root access to a lets say P30 Pro or other Huawei device. Shouldn't it be possible to fake the device information e.g. to a Samsung S10+ or whatever, such that the play store or other crucial Apps thinks they're running on a Samsung device and elude the current / upcoming restrictions? So for example installing software / automated updates via play store should be possible?
It seems at the moment rooting is difficult, mainly because Huawei stopped giving out bootloader unlock keys (https://www.xda-developers.com/xda-huawei-decision-stop-bootloader-unlocking/). Wouldn't it be wise for Huawei to start giving out unlock codes again in this whole US ban story with the described idea above? It might address just a fraction of users, but still... this method could become more public (if working).
And did they stop giving out codes? Why are people in the Huawei forum asking for codes (a lot of requests still this month)? Do they perhaps still get codes via support? (see https://forum.huawei.com/enterprise/en/General-Community/forum/100289)
I'm thinking about still buying a P30 Pro but just with having the above mentioned "Device Fake" in mind and that it seems that I need an unlock code to perform this fake.
Would like to hear your thoughts on this
thanks

If you root you can fake the device.
My GPD XD + has been faked in the custom Rom to make it appear as a Galaxy so it can download more apps.
Huawei P30 Pro (VOG-L29) using Tapatalk

Possible way of bypassing MSM tool verification?

Hello everyone!
So today something that could potentially let users flash/unbrick their phones using the current MSM Download tool came to my mind.
I'm also very sorry if this is the wrong place for this, i'm new to xda.
So as you might know for Realme phones there are people who have authorized account out there and once you pay them they will connect to yoprur computer and then start flashing ocess, online with no verification. I even tried getting my phone flashed but due to them not flashing twice if one package doesn't work my device was bricked (I have A.xx variant and i tried getting B.xx flashed) and i had to send to service center to wait for unbricking process which took over a month, yes you heard it right! They couldn't even repair it with software flashing so they had to replace the whole motherboard.... At least i'm grateful i didn't have to pay for motherboard replacement and it was considered in-warranty.
So yes, again let's go back to our topic and my idea.
What came to my mind is, what happens if i create a virtual machine using VMWare, get an authorized account to login to the application then cut connection of that TeamViewer connection and immediately "Save current state of VM" after someone logs in. Would that account be still logged in? This VM can also be shared with it's own folder as far as I know too! Is there a verification after you login to the app? As far as i know there's only a verification while you login to the app and there isn't anything afterwards which i think is also illogical to do so.
I know and i'm aware Realme can patch this possible "vulnerability" overnight because on the server side, literally everything depends on them (I really hope they don't) but thanks to their habit of not caring about development, releasing broken kernel sources and not even providing official bootloader unlock (even after nearly a year in my case) has come to a point where it's irresistably annoying for me so i decided to think of possible ways to maybe bypass the verification part of the application so that they can flash a firmware as their liking.
It's Android! It had to be free! It had to be allowed to do these type of stuffs to your Android phone! Why? Why? Why Realme?!

Edit: This is the exact same post of my post on Android General. After posting i saw there were nearly no replies and activity so i decided to post the same text as well.

daeMysterious said:
Edit: This is the exact same post of my post on Android General. After posting i saw there were nearly no replies and activity so i decided to post the same text as well.
Click to expand...
Click to collapse
THREAD CLOSED as duplicate of https://forum.xda-developers.com/t/...-of-msm-download-tool-of-realme-oppo.4209135/
XDA Forum Rules (excerpt):
...
5. Create a thread topic or post a message only once, this includes external links & streaming media.
As a large forum, we don't need unnecessary clutter. You're free to edit your message as you like, so if you do not receive an answer, revisit your message and see if you can describe your problem better. Not everyone is online at the same time so it might take a while before you receive an answer.
You can bump your unanswered question once every 24 hours
Duplicate threads and posts will be removed
Always post in an existing thread if a topic already exists, before creating a new thread.
Use our search function to find the best forum for your device.
Links to an external source are only allowed if relevant to the topic in hand. A description must be included, no copy & pasting from the original source.
Self-promotion is forbidden, this includes blogs, social media and video channels etc. Random links will be removed.
...
Click to expand...
Click to collapse