Mi Box 1 Root achieved - Two methods


MarkHUK

Founder of Xiaomi.eu
Staff member
Nov 6, 2010
4,642
2,551
1,000,000
#1
Hi everyone,

Glad to say after a LOT of hours of work with 3 people, we have managed to ROOT the Mi Box successfully using two methods.

Code:
shell@android:/sdcard # whoami
root
shell@android:/system/app # ls -al
-rw-r--r-- root    root        6128 2013-05-01 04:46 ApplicationsProvider.apk
-rw-r--r-- root    root        24208 2013-05-01 04:46 ApplicationsProvider.odex
-rw-r--r-- root    root        3822 2013-05-01 04:46 DefaultContainerService.apk
-rw-r--r-- root    root        14512 2013-05-01 04:46 DefaultContainerService.odex
-rw-r--r-- root    root        13326 2013-05-01 04:46 DownloadProvider.apk
-rw-r--r-- root    root      175872 2013-05-01 04:46 DownloadProvider.odex
-rw-r--r-- root    root        7841 2013-05-01 04:46 KeyChain.apk
-rw-r--r-- root    root        27824 2013-05-01 04:46 KeyChain.odex
-rw-r--r-- root    root        24797 2013-05-01 04:46 PackageInstaller.apk
-rw-r--r-- root    root        30744 2013-05-01 04:46 PackageInstaller.odex
-rw-r--r-- root    root        2710 2013-05-01 04:46 Provision.apk
-rw-r--r-- root    root        1936 2013-05-01 04:46 Provision.odex
-rw-r--r-- root    root        12493 2013-05-01 04:46 SettingsProvider.apk
-rw-r--r-- root    root        60552 2013-05-01 04:46 SettingsProvider.odex
-rw-r--r-- root    root      574184 2008-08-01 20:00 Superuser.apk
-rw-r--r-- root    root        3498 2013-05-01 04:46 UserDictionaryProvider.apk
-rw-r--r-- root    root        14912 2013-05-01 04:46 UserDictionaryProvider.odex
shell@android:/system/app #
 
shell@android:/sdcard # cat /proc/cpuinfo
Processor: ARMv7 Processor rev 4 (v7l)
BogoMIPS: 1594.70
Features: swp half thumb fastmult vfp edsp neon vfpv3
CPU implementer: 0x41
CPU architecture: 7
CPU variant: 0x2
CPU part: 0xc09
CPU revision: 4
 
Hardware: AUGUSTRUSH
Revision: 0001
Serial: 000000000000000c
Method 1 (Hardware) UART Serial hack (root in adb from console)

DOWNLOAD HARDWARE ROOT GUIDE HERE (DO THIS AT YOUR OWN RISK! Miuiandroid.com IS NOT RESPONSIBLE FOR DAMAGES!!)

Method 2 (May only work if you still have 1.1.x / unsure of 1.2 success but root holds in 1.2!)

DOWNLOAD > > > Root pack by MarkHUK, m1cha and IanK

Download this zip and extract the contents to your PC / Mac, make sure your USB stick is clean, when clean copy all the files over to the / (root) or the USB stick.

Step 1. Reboot to recovery (Switch off Mi Box, press both buttons below the power button and keep them pressed. Whilst keeping these buttons pressed re power the Mi Box up until you see the screen with the Mitu Rabbit recovery logo and Android Recovery version (3e) or similar.

Step 2. Try to flash blackrice_update_otg.zip, if this fails try blackrice_update_otg-signed.zip

(if blackrice_update_otg-signed.zip comes up with an assert failed error proceed to flash crystalroot.zip)

If method 2 does not work you will need to look to a hardware expert to root your Mi Box. More on Method 1 soon.

Thanks from,

MarkHUK, m1cha and IanK
 

MarkHUK

Founder of Xiaomi.eu
Staff member
Nov 6, 2010
4,642
2,551
1,000,000
#2
PS. We cannot accept any liability for loss, damage or other issues as a result of these methods. All work is provided as is and we are not 100% sure of method 2 so please do not complain too much if it does not work. There is a hardware method and we've only just this evening done the none-hardware root and still think my old 1.1.11 system had a part to play.

E.g. Xiaomi and Duokan updated 1.2 to release-keys from 1.x test-keys. If this is the case we are stuck for the moment with a hardware hack. If you have 1.1.11 or 1.1.x you are probably in luck!

English UI will be done soon too! :)
 
Jun 16, 2011
31
1
18
#3
good news mark :)
ill try Method 2 in an hour and tell if its work... hope to not get brick XD

Edit: got aborted for all the three but when going to system 1 (1.1.8) i have the option between the lux luncher and the miuitv (now white triangle).

so its look like it work, not even after the aborted msg, not?
 

IanK

Members
Jan 26, 2013
6
3
13
#5
good news mark :)
ill try Method 2 in an hour and tell if its work... hope to not get brick XD

Edit: got aborted for all the three but when going to system 1 (1.1.8) i have the option between the lux luncher and the miuitv (now white triangle).

so its look like it work, not even after the aborted msg, not?
Good news indeed. To absolutely be 100% sure, your rooted, if you have adb installed on your PC, then run up adb into the MiBox. And see if you can change your user from shell to root. The following digest shows anything after the $ as the command you type and the MiBox return value afterwards.

shell@android:/ $ whoami
shell
shell@android:/ $ su
shell@android:/ # whoami
root
 
Likes: MarkHUK

MarkHUK

Founder of Xiaomi.eu
Staff member
Nov 6, 2010
4,642
2,551
1,000,000
#6
has anyone managed to root with the above? let us know please.
 
Nov 30, 2012
50
9
28
#11
Actually, I'm not sure if I'm even rooted.. I have version 1.1.8.. I've tried flashing the 3 zips, first 2 failed.. but CrystalRoot worked.. I repeated the process to the other system partition.. But when I rebooted back to system 1.. I wasn't given the option to choose a different launcher..
 

MarkHUK

Founder of Xiaomi.eu
Staff member
Nov 6, 2010
4,642
2,551
1,000,000
#12
if cystalroot zip worked adb shell to your mibox and type: su

if you get # you are rooted.
 
Nov 30, 2012
50
9
28
#13
Actually.. I don't even know how to adb shell into the box lol.. I've used SnapPea to install some apps and I can see Super SU is already installed, and I'm able to grant root access to SnapPea.. that aside, I've tried installing Google Play Store but it doesn't work. Anyone has the latest apk for Netflix 2.2.0? I'm trying to install it as well..
 
Nov 13, 2012
386
87
52
#14
Hi MarkHUK

it as Very good news for the Xiaomi Box
so i can order mine finally ,

i would like to enter in this game also
i know this is the beginning but we can get the interface in english and rooted that's what we want

Very good job !!
 

MarkHUK

Founder of Xiaomi.eu
Staff member
Nov 6, 2010
4,642
2,551
1,000,000
#15
Hi MarkHUK

it as Very good news for the Xiaomi Box
so i can order mine finally ,

i would like to enter in this game also
i know this is the beginning but we can get the interface in english and rooted that's what we want

Very good job !!
if you get one - there's not a 100% guarantee for sware root. It works for me and some others, its a hit and miss process it seems. UART hardware method is guaranteed but you need electronics experience.
 
Nov 13, 2012
386
87
52
#16
if you get one - there's not a 100% guarantee for sware root. It works for me and some others, its a hit and miss process it seems. UART hardware method is guaranteed but you need electronics experience.
i am fine to do some electronic operations
i am an IT engineer and have some Electronic Engineer friends too in case
but we need a tuttorial from which step we need to start
 
Jul 24, 2011
465
234
65
#18
so if i purchase a mibox today what are the chances of it coming with 1.1.x probably unknown...i no nothing of electrical work/soldering so option 2 is my only option if i'm going to root...not that it's that much money but i would hate to have something i cannot use since i don't speak or read chinese.
 
Apr 22, 2013
70
1
18
#20
sorry for delay, was playing around with my freshly acquired mi2s, needless to say i was completely blown out of the water :eek:

anyway my Box have Version 1.1.8
i tried installation methods



blackrice_update_otg.zip => failed to verify whole-file signature
signature verification failed
Installation aborted



blackrice_update.otg-signed.zip => assert failed: set_perm(0, 0, 6755, "/system/bin/su")
Error in /tmp/sideload/package.zip
(Status 7)
Installation aborted.


crystalroot.zip =>
Installaing Crystal root by Soulflier
Finished, reboot now.
Install complete.

mi_root_signed.zip =>
[+] Running FS Hole Exploit for AML Processor
[+] Linking RootShell to black rice exploit..
[+] Running black Ro0t script to replace broken services...
[+] Install High Permissio APKs...
Welcome to tuzi.tv

[!!!] Black Ro0t v0.2. MiBox Ro0ted. Enjoy.
Install complete. :) :cool:

So it seems mi_root_signed.zip worked.
Check here for instruction video.
http://v.youku.com/v_show/id_XNTM4MjQ4MzEy.html


best regards
 

MarkHUK

Founder of Xiaomi.eu
Staff member
Nov 6, 2010
4,642
2,551
1,000,000
#21
@Gamergod,

Crystalroot is all you needed :) Welcome to the root world! :)

Anyone else success?
 
Apr 22, 2013
70
1
18
#23
I was playing around with the box and few minutes ago covers wouldn't load, so i checked system settings and there was a message "system is being upgraded", in panick mode I pulled the power, is there any way to prevent the box from updating?
 

IanK

Members
Jan 26, 2013
6
3
13
#24
I was playing around with the box and few minutes ago covers wouldn't load, so i checked system settings and there was a message "system is being upgraded", in panick mode I pulled the power, is there any way to prevent the box from updating?
Depends on what you want to do here. My understanding of the system (thus far) is that the OTA Packages are mostly patches. So, the updater script (written in Edify) checks some elements are what they expect. If the edify script detects something wrong, then the update program will abort.

An example is shown below. Note the file being checked is /system/build.prop

assert(getprop("ro.product.device") == "augustrush" || getprop("ro.build.product") == "augustrush");

The code will assert if the check is false.

You can use this to your advantage if you want to stop OTA by changing the /system/build.prop file values - such as ro.product.device.

The advantage also is that you can undo this so you can start OTA again.

This will only work if you have root and can modify the file.

Hope this helps
 
Likes: MarkHUK
Aug 6, 2012
163
12
28
#25
Hi, my box arrived today from *******. It came with version 1.1.8 so hopefully I'll be able to root it. I will try in the evening. Ah, now I've realized I cannot do it without OTG cable... Shittt...