Test device lock
 

Hi,
Due I forgot device lock number I figured how you can ask on correct device lock or reset it.

For this purpose is there app /usr/lib/qt5/plugins/devicelock/encpartition

Arguments:
True/False are returned via exit code where 0 - success, 1 - fail
else as standard output.

Configuration is stored at directory /usr/share/lipstick/devicelock/ and encrypted/hash key is stored at /usr/share/lipstick/devicelock/.devicelock.enc, quite interesting are stored texts at binary file encpartition:
41414141, 42424241, 123456789012345 and /dev/block/platform/msm_sdcc.1/by-name/QOTP . More on http://www.onlinedisassembler.com/odaweb/4fDoTf/0

Unfortunately still don't know how reset device lock without sending to repair facility or brute-force.

Test all numbers with length 5 takes less than 3 hours on the phone with utilizing 20% of CPU.

Re: Test device lock
 

Boot while pressing volume down, telnet to the device and one of the options should allow you to wipe it clean/reset to factory settings

Re: Test device lock
 

Thanks for the bugreport. I'll have to implement slowdown between attempts to make brute force slower.

It's recomended to have 8-10 digit lockcode to make developer mode bruteforcing to take months untill fix arrives.

In the future we would appriciate that if you find weakness in system that you would contact security@jolla.com before posting it publically, so we would have time make a fix for it.

Re: Test device lock
 

Thank you, but reset to factory settings request devicelock code.

So even if I have enabled developer mode there isn't way to restore to factory state without devicelock. Latest update only increase number attemps from 3 to 5.

Re: Test device lock
 

--imei hmmm sounds interresting ......

Re: Test device lock
 

Oh wow, that's a surprise. My understanding was that lock code is needed for extra features like unlocking bootloader and in cases of forgotten lock code you could still reset it back to factory state (with loss of data, so data protection is kinda in place). Thanks, good to know

Re: Test device lock
 

Its queried for anti-theft, so if your phone is stolen then they cannot just wipe it clean and start using it. So remembering your lockcode is quite important.

Re: Test device lock
 

Is Jolla going to check every device that is sent to them for reflash in the european IMEI DB of stolen phones? Or users should inform Jolla about the theft? Is Jolla able to recover data, or just reflash?

Re: Test device lock
 

You report theft to your local police, and they will report imei to operators imei db, and they will use blocklist depending what country you are in.

Re: Test device lock
 

Yeah, that's what usually happens and why stolen phones from europe end up in India and Africa (at least that's what I heard), it seems Jollas are going to make an extra step in Helsinki on the way there, are you going to utilise this occasion to return the Jollas to the owner?

edit: however interesting concept and actual anti-theft measure this looks like not really implementable, problems with identifying the real owner will get only bigger once second hand market revves up

Re: Test device lock
 

Could you please explain how I use the posted app (zip file)?

Re: Test device lock
 

The phone would not come back to you anyway, so maybe t makes harder for theft to sell it, but eventually he will, but in cost of making it harder for users, by locking themselves out.

Let's compare it with gmail locking you out forever till you contact them for 5 mistakes. It sounds great, but it's not that practical, so it makes only pain for users.

There are other options that can be used i think.

Re: Test device lock
 

At the risk of digging out an insanely old thread:
Simply removing /usr/share/lipstick/devicelock/.devicelock.enc and then running

will reset the code (or probably just using the settings-app will work too).

You can remove the file using any "As Root" file explorer from openrepos.

Re: Test device lock
 

Thank you so much, I never found this information, which enabled me to "upgrade" my testing phone to a fully capable backup phone, again.
For more than two years I lived with the awkward situation to have full control over the device (as root), but being unable to set the lock-code (fortunately "automatic locking" was unset, so the device became my testing phone).

Cheers!

Re: Test device lock
 

I was once in pretty much the same situation, but didn't dare to do what @jakibaki has done (in the end I remembered that I had indeed changed the code, and I could remember the new one :)

Thanks for confirming that this works :)

Re: Test device lock
 

sigh. there is no hope with jolla.

So i have a jolla1 bricked by last OTA update. The thing had no screen lock. Now recovery asks for devicelock code. What the hell am i supposed to do?

Re: Test device lock
 

Ok i contacted support, this is the answer(s) i got:

"Hi,

Thank you for your message!

After 7 years and 34 OS updates, we have decided to discontinue the support for Jolla Phone (a.k.a. "Jolla 1") in November 2020. OS version 3.4.0.24 remains the last one available for Jolla Phone.

This decision implies that we will also stop providing customer support for this product. We recommend seeking help from our community."

and

"Hi,

Thank you for your message!

Unfortunately we cannot help you with the security code. Our service partner went bankrupt last spring due to Covid and we don't have any other partner to help with this. "

Just for the records and for anybody who will most likely end up in the same boat.
I ask here again (with very little hope): is there anything i can do?
My bootloader is also locked :-/

Re: Test device lock
 

Yo,

You need a windows application called Ultimate Multi Tool - QcFire 1.2 And you need to upload new-old firmware with it.

https://youtu.be/95naQ6tQ9C0 :D

Re: Test device lock
 

Hei mate, thanks for the tip!
I've been searching for this tool in this particular version, no success :(
Would you by any chance know where to find it? :o

Re: Test device lock
 

Can you find it from here? Not sure if some of these is what you are looking for.

https://drive.google.com/drive/mobil...GM?usp=sharing

Re: Test device lock
 

Found the link from this page.
https://forum.gsmhosting.com/vbb/f97...ution-2256599/

Re: Test device lock
 

Thanks mate! i will have a look at those, hope at least one will do :-)

Re: Test device lock
 

Btw the video appears to be private, any chance to unlock it?

Re: Test device lock
 

Simply do what @jakibaki advised me: Remove that file. As you cannot unlock the screen, using a root file browser or the rm command in a terminal is no option for you, hence you will have to boot into the recovery console and then mount the root partition to be able to remove that file.