Original firmware is full of security issues. Things like effectively running `system("something %s", some string input from AT command)` under root, etc. Orig

Original firmware is full of security issues. Things like effectively running `system("something %s", some string input from AT command)` under root, etc. Originally I wanted to get access to the FW via one of these issues, but then I found the adb unlock, and it's way easier. All it took me to crack their ADB protection was to extract and disassemble their atfwd_daemon from firmware update package, and look for interestingly named commands and reverse their algorithm for generating the unlock key. You can see for yourself how "complicated" it is: https://xnux.eu/devices/feature/qadbkey-unlock.c https://xnux.eu/devices/feature/qadbkey-unlock.c And that was it. They also allow to run code under root downloaded from the net via special push SMS, etc. Thankfully not enabled by default. But bleh.