- NAVIGON 8310 NAVIGON 8110 NAVIGON 7310 NAVIGON 7210 NAVIGON 72 Premium NAVIGON 72 Plus Live NAVIGON 72 Plus NAVIGON 72 Easy Europe 23 NAVIGON 6310 6350 Live NAVIGON 4310 max 4350 max NAVIGON 4300 max NAVIGON 42 Premium NAVIGON 42 Plus NAVIGON 42 Essential NAVIGON 42 Easy Europe 23 NAVIGON 3310 max Europe 22 NAVIGON 3310 max NAVIGON 3300 max.
- NAVIGON NVG7100 Device Software and Car kit!!!(PLEASE READ) $17.00. $11.29 shipping. NAVIGON MODEL 2100 GPS WITH ACCESSORIES. VERY GOOD WORKING CONDITION. Navigon 2100 USA GPS System 4.3 Screen. Navigon 2100 GPS.
Navigon 7100 Firmware. 4 Sun Sep 15, 2019 3:53 am. 0 Thu Jul 11, 2019 6:57 pm. I accidentally formatted my Navigon 4310 MAX, can't restore.
While considered dead by some people Nokia recently started releasing remakes of successful phones from the 90s based on modern hardware that have battery lifetimes that seem insane at a time, where smartphones need to be charged once a day. The latest device is the Nokia 8110 4G.
A lot of people around me started buying the phone, as it supports 4G, can be used as a wifi hotspot and as it has such a great battery performance. Most of them are hoping that it will be possible to modify the firmware as well. The device has been built as a feature-phone but it is actually run on KaiOS which is based on linux, so it is theoretically possible to extend the phone by own functionality.
So I basically decided to buy my own device to get my hands on it and try to find a way to get own software onto it. It turned out to be amazingly easy as firmware images are just signed with the AOSP default keys which can be obtained by cloning the AOSP repositories.
AOSP - Android Open Source Project
Wait? AOSP? I thought the device is run by an OS called KaiOS. If you take a look at the Gonk layer of the KaiOS Architecture, you will recognize that there is indeed a lot of Android build into it. This is actually no surprize as the SoCs manufacturer qualcomm basically provides Android systems for their devices via Codeaurora.
Using some of the Android functionalities saves a lot of money, as KaiOS can just reuse existing hardware bindings and just wrap those.
I do not know, how exactly KaiOS is compiled but I would also guess that it is build from a AOSP alike sourcetree, as Google basically provides a somewhat messy but quite funciton build environment that does a lot of things like packing and signing images on its own and I would say that it does it quite well, if you know what you are doing and are reading the documentation.
Boot Modes
Most android devices can be booted into different modes. I have been able to boot the device into QDL and recovery mode. This are the keystrokes you need to press and hold when powering up to boot the device to both modes:
- QDL: press and hold all direction buttons (just press the frame at two points) and power the device on.
- recovery: press and hold _up_and_hangup_ and then power the device on.
QDL mode
If you enter this mode, the display just flashes with the KaiOS logo and then turns black. If you use lsusb, you will see a line like this
Bus 001 Device 002: ID 05c6:9008 Qualcomm, Inc. Gobi Wireless Modem (QDL mode)
The device will now respond to the Sahara protocol. This mode for example allows dumping device fuses. This includes the SHA256 hash of the root key used for signing the qualcomm binaries, which happens to be
1357fdaeabb7becbe49095f000d9d3dadf198885106d98598cac6d1b9b2edb3a
in reverted byteorder.
This mode normally also allows to load the eMMC emergency downloader (firehose) to the device. I have been able to send a firehose downloader for some msm8909 based device to the phone and it at least acceppted the elf-header but the execution of the loader finally failed. I have not checked at which phase it fails, but as the root-key will not match the one fused into the device, I doubt that it will be possible to run some downloader if there is no leak of a properly signed binary.
Recovery mode
The device just uses the AOSP recovery. The source for that can be found in the AOSP recovery repository. It is likely that the running variant has been modified in some ways, but the original recovery is always a good reference, if you are messing with it.
Whatever you do: Do not write to the recovery partition. If you destroy this, you would brick your device. As all bootable images, the recovery image is signed. I have not yet looked at the signatures, but it is likely that you are not able to sign your own and thus you will break your device as soon as you modify it.
The recovery mode basically allows loading a signed update.zip from sdcard or via adb sideload. It also provides access to bootlogs that reveal interesting information.
The KaiOS used seems to have been built based on Android 6.0.1 and is running on a Kernel version 3.10 (which I would guess is the version provided by Codeaurora for the SoC).
The recovery always accepts update files that are properly signed with normally the releasekey of the device. Files are signed using signapk, so the same mechanism that Android packages are signed with.
When the signature of an update can be properly verified, the updater unpacks an application located at META-INF/com/google/android/update-binary from the update package and executes it. This application can than modify the image.
Android Boot
On Qualcomm devices, there are a lot of things happing during the boot process. I simplify this a lot. Most of the stuff happening can be obtained by Qualcomm under an NDA or you just search the web for the leaked documentation.
So the basic process is something like this
- Some boot-ROM is loaded and executed. If there is no need to jump to Sahara, the device will continue loading a lot of firmware images like the SBL1, NON-HLOS, TZ and the aboot. All those images are signed with keys that lead back to the root signing key. If any of the signature does not match, the boot process will be stopped and the device will not boot.
- At some point, the aboot is executed. This loads the boot or recovery kernel and checks it signature against a key compiled into it. As aboot is signed, it cannot be modified, so it is not possible to change the kernel keys.
- The boot or recovery kernel will then start loading the device and boot Android or in the case of the Nokia 8110 4G it just boots KaiOS.
Navigon 7100 Update Download
The Android kernel contains a initial ramdisk containing the bootscripts. If this will mount the /system partition which contains most of the applications and services. This partition can be signed using Verity to have a completely signed bootchain. If this is the case, any modification on the /system partition will stop the device from accessing the modified blocks (and probably boot). Luckily the Nokia 8110 4G does not use Verity.
Update Navigon 2100 Gps
Access Vectors
If the signing environment has been set up properly, it is quite hard to get into the device and modify software or firmware. The problem is that breaking signatures means that the device will not boot anymore.
Updating the Kernel
I have not yet checked the signatures of the boot and recovery partition. If there are no design flaws and the signatures are checked (there are some build modes, where aboot does not check signatures), it might be impossible to modify the kernel without the signing keys. This is worth being checked.
Recovery Keys
After playing with QDL a while, I started poking the recovery. It turned out that they just reused the test signing keys available form the AOSP tree. This is basically a common mistake and I have seen that several times. The problem is that the AOSP tree just builds fine and does not warn you about that at all. It turned out that someone seems to have already found this issue some days before I started looking at the device and used it enabling adb. Before you just jump and do the same thing he did, please not that you might lose update capabilities for your device when applying this change.
The normal process would be building the system with the test-keys and then you use sign_target_files_apks to resign the system with your own releasekeys. Anyway: let's assume that the manufacturer has done this intentionally to allow us, to modify the phone.
This actually means that we can create our own updates and modify everything on the /system partition. This actually causes one problem: We do not know, what type of update process Nokia is using. If this is block based OTA, any change on the /system partition will break OTA in the future. So it is always a good idea to create a backup before changing anything.
Dumping the Firmware
I have made a simple application to dump the firmware of my Nokia 8110 4G. It is written in poor C and has some flaws and maybe should not be used if you fear to lose your device, but it worked at least on my device. You can find it on github, if you like to use or modify it.
I compile it from within an Android 6.0.1 tree (as I happen to have one on my harddisk anyways), but it should be possible to build it using ndk-build as well. The commands I used to pack and build the update.zip are:
If you do not have a AOSP build laying around, you might want to obtain a version of signapk that works on your system. Maybe I might also upload the required tools at some point if I find the time to do this.
There is also a prebuilt update.zip in the github repository. The update basically executes the included application which then iterates over all partitions on the flash and writes their content to an sdcard inserted to the phone. To execute it, you can sideload it via adb sideload or just copy it to a vfat formated sdcard.
The most interesting files are the boot.bin, recovery.bin and system.bin, as they contain the actual system and would allow us to modify the system. The system.bin can be mounted as ext4 filesystem.
Conclusion
Having a way to modify the firmware shifts this device from nice to awesome. It might be worth digging into the system and try to find new ways to make it even better. I hope that Nokia does not decide to close this by updating the certificates the device as this actually makes the device worth the money.
So if you guys at Nokia might read this, it would be great if you either leave this open or provide a way for OEM unlocking as other manufacturers do. It makes it worth to totally get your hands on this device, as it makes it possible to hack the device matching your own needs.
Related searches
- » software navigon fresh
- » software navigon download
- » software navigon fresh android
- » actualizacion software navigon
- » navigon 5100 update navigon fresh
- » navigon fresch navigon
- » download free navigon sync software
- » navigon fresh update software
- » navigon sync software
- » navigon software download
software navigon
at UpdateStar- More
NAVIGON fresh 3.6.0
NAVIGON Fresh is a free program which allows you to update your NAVIGON at your convenience, or buy selected services and functions in the Fresh Shop. more info... - More
Apple Software Update 2.6.3.1
Apple Software Update is a software tool by Apple that installs the latest version of Apple software. It was originally introduced to Mac users in Mac OS 9. A Windows version has been available since the introduction of iTunes 7. more info... - More
UpdateStar Premium Edition 12.0.1923
UpdateStar 10 offers you a time-saving, one-stop information place for your software setup and makes your computer experience more secure and productive. more info... - More
Software Informer 1.5.1344
Software Informer is a utility that has been designed specifically for those users who care to keep their applications functional and ready for any task that might arise. more info... - More
Epson Software Updater 4.6.1
- More
LightScribe System Software 1.18.27.10
The LightScribe System Software (LSS) is required for proper operation of your LightScribe system. Updates are released regularly to support new hardware or recently introduced LightScribe CDs and DVDs, and will ensure optimal and reliable … more info... - More
avast! Free Antivirus 20.9.2437
avast! Free Antivirus is not only the best free antivirus product in the world, it may be the best antivirus product – free or paid. VirusBulletin recently described it as Nothing short of a miracle. more info... - More
Software Updater 4.3.7
Software Updater is a proactive patch management feature of F-Secure Protection Service for Business that handles not only patches, but also version updates.” Keeping all an organization’s software current can be an overwhelming … more info... - More
WIDCOMM Bluetooth Software 12.0.1.940
Instructions1. If your computer has an embedded Bluetooth wireless adapter, verify that Bluetooth is turned on. If you have a plug-in USB Bluetooth wireless adapter, verify that it is plugged into your computer, before you start the … more info... - More
Intel PROSet/Wireless Software 22.0.0.6
Installer package for driver version 11.5 and Intel PROSet/Wireless Tools version 11.5 supporting Intel(R) Wireless WiFi Link 4965AGN Mini Card and Intel(R) PRO/Wireless 3945ABG Network Connection Mini Card on Windows Vista operating … more info...
software navigon
- More
UpdateStar Premium Edition 12.0.1923
UpdateStar 10 offers you a time-saving, one-stop information place for your software setup and makes your computer experience more secure and productive. more info... - More
Apple Software Update 2.6.3.1
Apple Software Update is a software tool by Apple that installs the latest version of Apple software. It was originally introduced to Mac users in Mac OS 9. A Windows version has been available since the introduction of iTunes 7. more info... - More
Realtek Ethernet Controller Driver 10.45.928.2020
This package installs the software (Ethernet Controller driver). more info... - More
Intel(R) Management Engine Components 2033.15.0.1783
Intel Management Engine Components is a bundle of software that enables special features present inside the Management Engine (ME), which is an engine which works integrated with Intel processor and Intel processor chipset. more info... - More
Realtek High Definition Audio Driver 6.0.9030.1
REALTEK Semiconductor Corp. - 168.6MB - Freeware -Audio chipsets from Realtek are used in motherboards from many different manufacturers. If you have such a motherboard, you can use the drivers provided by Realtek. more info... - More
Adobe Reader 11.0.23
Adobe Reader software is the global standard for electronic document sharing. It is the only PDF file viewer that can open and interact with all PDF documents. more info... - More
Realtek Card Reader 10.0.18362.31255
Installing the card reader software gives your system the ability to exchange data with supported memory card. This software provides compatibility with cards such as MMC, SD, SDHC, micro SD, and many others that can be used with … more info... - More
Intel Processor Graphics 27.20.100.7989
Intel X3000 Chipset incorporates key features available in previous Intel Graphics versions like Dynamic Video Memory Technology (DVMT) as well as hardware acceleration for 3D graphics that utilize Microsoft DirectX* 9.0C and OpenGL* 1.5X. more info... - More
Skype 8.67.0.87
Skype is software for calling other people on their computers or phones. Download Skype and start calling for free all over the world. The calls have excellent sound quality and are highly secure with end-to-end encryption. more info... - More
WinRAR 6.00.0
WinRAR is a 32-bit/64-bit Windows version of RAR Archiver, the powerful archiver and archive manager. WinRARs main features are very strong general and multimedia compression, solid compression, archive protection from damage, processing … more info...
- More
Apple Software Update 2.6.3.1
Apple Software Update is a software tool by Apple that installs the latest version of Apple software. It was originally introduced to Mac users in Mac OS 9. A Windows version has been available since the introduction of iTunes 7. more info... - More
Epson Software Updater 4.6.1
- More
Intel PROSet/Wireless Software 22.0.0.6
Installer package for driver version 11.5 and Intel PROSet/Wireless Tools version 11.5 supporting Intel(R) Wireless WiFi Link 4965AGN Mini Card and Intel(R) PRO/Wireless 3945ABG Network Connection Mini Card on Windows Vista operating … more info... - More
Software Informer 1.5.1344
Software Informer is a utility that has been designed specifically for those users who care to keep their applications functional and ready for any task that might arise. more info... - More
AMD Software 20.11.2
Most recent searches
- » synaptics hd clickpad hp download
- » смарт гага
- » tenorshare 4ddig
- » gry na telefon windows dowland
- » k-lite codec pack 15.9.2
- » free mp3 cutter 2.1 polysoft solutions
- » telecharger cryptotabbrowser
- » quickq download phone
- » andre&hisolive 下载
- » abaixar torch ultimo versao
- » moohrhuhn kart apk
- » iptv smarters pour pc
- » firefox 83.0.0.7621
- » bitstream 3x
- » vcds 12.12.1 torrent download
- » google input tool hindi for pc
- » moorhuhn kart xxl free downoad
- » disable face recognition lenovo g30-50
- » counter strike eswc downlod
- » np350e5c-s03tr eternet driver