Reply
Thread Tools
Posts: 6 | Thanked: 0 times | Joined on Dec 2008
#1
I forgot my lockcode to my n800 and i need it in order to turn on the thing. UGH >.<, is there any way to bypass it? ive already tried taking the battery out.
 
Rassilon7's Avatar
Posts: 220 | Thanked: 41 times | Joined on Oct 2008
#2
Think it's time to contact Nokia with some proof of purchase
 
Posts: 1,213 | Thanked: 356 times | Joined on Jan 2008 @ California and Virginia
#3
Yes, there is...

qwerty12 knows for sure, and so do some other people. The thing is, with only 5 posts, people "might" not trust you, mostly with the "I lost my N800" threads flying about.

But I trust you enough to say yes you can unlock it without going to Nokia, but I do not know how.
__________________
----------------------------------------------------

www.ezschool.com - The best online educational experience.
 
Posts: 106 | Thanked: 26 times | Joined on Aug 2008
#4
theres a post somewhere whre qwerty12 does it....but thesandlord makes a good point =P athugh he's been a member since nov heh
 
Posts: 1 | Thanked: 1 time | Joined on Jan 2009
#5
 

The Following User Says Thank You to Zyxmon For This Useful Post:
Posts: 89 | Thanked: 6 times | Joined on Jan 2008
#6
But the thing is, he needs it to turn on... so he won't be able to access xterm? Will he?
 
Benson's Avatar
Posts: 4,930 | Thanked: 2,272 times | Joined on Oct 2007
#7
Originally Posted by tehforum View Post
But the thing is, he needs it to turn on... so he won't be able to access xterm? Will he?
Never having found myself in that fix (or deliberately simulated it), I'm not sure what your options are. But one of the most general attacks that comes to mind is to reflash it (initfs only!) with a carefully constructed initfs giving you usb-serial console access, or better still, directly reading out or setting the lock-code on startup.

How to do that? Well, if you know how, it's fairly obvious, and if you don't, this won't help, but basically:
  1. Rip an initfs from one of Nokia's FIASCO images, preferably the same version you're running on the tablet, but the latest should work if you don't know.
  2. Mount the initfs image RW on your desktop.
  3. Add any necessary files: kernel modules, executable binaries, third-party scripts...
  4. Edit some key shell script that you know will be executed; linuxrc is the obvious choice.
  5. Add "appropriate" lines. Specifically, you need to somehow get the data out of the config partition, and display it onscreen somewhere with text2screen, or try for really advanced and set it to a known value.
  6. umount the image.
  7. Flash it to your tablet, like flasher-3.0 -f -n initfs.haxx0red.jffs2.
  8. Boot it and watch the screen for your message with the lock code.
  9. Go back to the desktop to find what you did to put it in a reboot-loop, repeating from 2.
All of these steps should yield answers from brief searching (well, except 9.), but AFAIK nobody's put them all together for this purpose.
 

The Following User Says Thank You to Benson For This Useful Post:
qwerty12's Avatar
Posts: 4,274 | Thanked: 5,358 times | Joined on Sep 2007 @ Looking at y'all and sighing
#8
Originally Posted by Benson View Post
Never having found myself in that fix (or deliberately simulated it), I'm not sure what your options are. But one of the most general attacks that comes to mind is to reflash it (initfs only!) with a carefully constructed initfs giving you usb-serial console access, or better still, directly reading out or setting the lock-code on startup.

How to do that? Well, if you know how, it's fairly obvious, and if you don't, this won't help, but basically:
  1. Rip an initfs from one of Nokia's FIASCO images, preferably the same version you're running on the tablet, but the latest should work if you don't know.
  2. Mount the initfs image RW on your desktop.
  3. Add any necessary files: kernel modules, executable binaries, third-party scripts...
  4. Edit some key shell script that you know will be executed; linuxrc is the obvious choice.
  5. Add "appropriate" lines. Specifically, you need to somehow get the data out of the config partition, and display it onscreen somewhere with text2screen, or try for really advanced and set it to a known value.
  6. umount the image.
  7. Flash it to your tablet, like flasher-3.0 -f -n initfs.haxx0red.jffs2.
  8. Boot it and watch the screen for your message with the lock code.
  9. Go back to the desktop to find what you did to put it in a reboot-loop, repeating from 2.
All of these steps should yield answers from brief searching (well, except 9.), but AFAIK nobody's put them all together for this purpose.
I've made an image for this purpose before but have deleted it since.

Some hints, you don't want to mount the image rw. Do it ro and tar it up and use mkfs.jffs2 to make the new image. As to mounting it, mtdram method works best.

Here's the line I came up with & used in my initfs image:
text2screen -t `strings /dev/mtd1ro | grep [0-9] | grep -v [a-zA-Z@] | tail -n 1` -s 5

--Faheem
Your friendly neighborhood Nokia hacker.
 

The Following 2 Users Say Thank You to qwerty12 For This Useful Post:
Reply


 
Forum Jump


All times are GMT. The time now is 21:57.