Wifi reset UART root method fails on Z10 Pro (p2028)

dgiese / dustcloud

Xiaomi Smart Home Device Reverse Engineering and Hacking

GNU General Public License v3.0

2.22k stars 255 forks source link

Wifi reset UART root method fails on Z10 Pro (p2028) #316

Open brianclemens opened 2 years ago

brianclemens commented 2 years ago

After resetting and rebooting a Dreame Z10 Pro on the latest firmware (ver 1099), pressing the reset button only results in the message cat: can't open '/etc/os_release': No such file or directory rather than a login prompt.

Console log: screenlog.txt

pokemane commented 2 years ago

Same actually. I don't know if I'm missing something in the docs or if the firmware just says 1099 but is different somehow.

dgiese commented 2 years ago

Dreame fixed the U-Boot and Reset-rooting method for the Z10 Pro in version 1099. If you have a new robot, do not update via the official app. There are methods to still root, but they depend on specific situations. For that, I have the "Vacuum-robot Adverse Event Reporting System (VAERS)" at https://vaers.dontvacuum.me As mentioned in my DEFCON talk, there are still the Livesuit images, however, for now we disabled them in the dustbuilder as they can potentially brick your robot if you are not careful.

hujiko commented 1 year ago

Hey @dgiese ,

I am currently considering buying a Z10 Pro and stumbled upon this issue. You are linking to an OTRS-Instance in case the robot gets delivered with a "modern" firmware.

Do I understand it correctly, that in case my firmware will be "too new", I would just create a Ticket there to get a "personal root howto", but would in general still be able to root the device (eg. to install Valetudo)?