[S905x] Help with Mi Box (Android TV MDZ-16-AB) Bootloader Unlock And Root

Search This thread

The_Wolf91

Senior Member
Feb 15, 2012
466
700
Hi, I'm getting bootloop (endless bootanimation) and I can't get to recovery holding "BACK" + "OK". This is how I do it:
1) Unplug AC connector
2) Hold "back" + "OK" buttons
3) Plug AC connector
4) Wait holding the two buttons

Is this method right? Because I always get that damn bootanimation... I've also try replacing remote's batteries with no success..

EDIT

Solved using a male/male usb cable and Google USB Drivers.
 
Last edited:
  • Like
Reactions: copymach

ssy080

Senior Member
Apr 29, 2011
55
4
Seems like no one is complaining of any errors.

Am I the only one that has a constant crash of leanback laucher and google partner setup after the supposed rooting methods?

I tried several times even with wiping cache. It did install superuser but couldn't even get root access via es explorer... Is this root unstable for anyone else???

My main purpose is really to block youtube ads. that's all I want... DNS doesn't seem to completely block them.

Help!
 

joeyakaspce1130

Senior Member
Aug 1, 2013
73
14
Allentown
So I've read this entire thread and with all the off topic posts about the AA model and what not, I am COMPLETELY confused on whether or not root has been achieved successfully and/or whether you have to run an adb script on every boot.

Can someone possibly let me know where we are at?
I have the MDZ-16-AB from Wal-Mart. I've already splices 2 USB wires and made a male to male cable and connected it to my laptop successfully. I just want to get a clear answer (if possible) before flashing. Thanks
 

bigtalker

Senior Member
May 20, 2007
295
63
Samsung Galaxy Z Fold2
So I've read this entire thread and with all the off topic posts about the AA model and what not, I am COMPLETELY confused on whether or not root has been achieved successfully and/or whether you have to run an adb script on every boot.

Can someone possibly let me know where we are at?
I have the MDZ-16-AB from Wal-Mart. I've already splices 2 USB wires and made a male to male cable and connected it to my laptop successfully. I just want to get a clear answer (if possible) before flashing. Thanks

I would encourage you to go for it. Worst case you can always flash update.zip from recovery to avoid any chances at bricking the box.
Seems like full system access can be attained by 454 userdebug build, adb root, adb disable-verity (Only works with userdebug builds) and adb remount. Complexities intrude when trying to make root permanent by installing superuser.
BTW, depending on the status of your usb debug settings, adb by wifi works

Keep us informed as to your progress
 

daicaxomlieu

Member
Jun 30, 2016
14
3
So I've read this entire thread and with all the off topic posts about the AA model and what not, I am COMPLETELY confused on whether or not root has been achieved successfully and/or whether you have to run an adb script on every boot.

Can someone possibly let me know where we are at?
I have the MDZ-16-AB from Wal-Mart. I've already splices 2 USB wires and made a male to male cable and connected it to my laptop successfully. I just want to get a clear answer (if possible) before flashing. Thanks

can u make a video when u do this pls. I want to root my box too but kinda noob about this :D
 

bigtalker

Senior Member
May 20, 2007
295
63
Samsung Galaxy Z Fold2
can u make a video when u do this pls. I want to root my box too but kinda noob about this :D

Not a chance of my doing a video as I know the ending will be a catastrophe. Steps are clearly outlined in pertinent posts how to gain TEMPORARY administrative rights. It all blows up when trying to install supersu daemon.

A quick summary, as best as I remember without reading thread
.......install userdebug build 454
You must then change settings/disable (or maybe enable) USB debugging
connect PC to mibox with male-male USB cable (should result in a tone from your PC) you may need to install USB drivers for your version of windows
invoke adb root
issue command adb disable-verity (forces reboot)
issue command adb remount

You now have unlimited file system access via ADB commands, but any app requiring root will fail to get root access
 

Dude360

Senior Member
Nov 22, 2006
1,173
903
You now have unlimited file system access via ADB commands, but any app requiring root will fail to get root access

To add, its not just the SUDaemon or apps gaining root, its any changes to /system whatsoever.

I did a few tests and even creating a empty file on /system was enough to cause it to bootloop for me :(

Definitely something else at play here.
 

reeshmd23

Senior Member
Nov 30, 2010
175
2
Quick question i just picked one up from walmart and man this blows firestick away, i see root is not able yet, anyone able to get mouse toggle app to work? Says it's compatible but trying to figure out how that's possible without root.
 

N0t_Just1n

Member
Mar 13, 2016
8
1
Quick question i just picked one up from walmart and man this blows firestick away, i see root is not able yet, anyone able to get mouse toggle app to work? Says it's compatible but trying to figure out how that's possible without root.

Root IS available but there are quite a few steps to it and they are all spread through this thread. Luckily a Reddit user has complied the directions here
Code:
 https://www.reddit.com/r/AndroidTV/comments/5fd0ry/rooting_the_mi_box_mdz16ab/
Currently, root is tethered which means you have to enter a few commands everytime it restarts, but most people I assume just keep it on all the time and use standby mode. Here are the commands after restart:

"adb devices" re-enter command until you see the device appear
"adb root"
"adb setenforce 0"
 
  • Like
Reactions: auldthief

eried1

Senior Member
May 27, 2016
638
124
Stockholm
Currently, root is tethered which means you have to enter a few commands everytime it restarts, but most people I assume just keep it on all the time and use standby mode. Here are the commands after restart:

"adb devices" re-enter command until you see the device appear
"adb root"
"adb setenforce 0"
Is there really no way of automizing this process? So cumbersome having to use a laptop every time I turn off the switch which the Mi Box is connected to.

I'm regretting I didn't pick up another Nexus Player.
 

stanleyopar2000

Senior Member
Mar 29, 2011
1,019
215
So... We have root but root apps fail? How do I get this unlocked from xiaomi? I want ad blocking and my Droid remote that I paid for. I have a fire TV that is rooted and xposed. I'm thinking about getting one from walmart but only if I can root it... What's wrong with the non Android TV $80 boxes? I Don't want a pacified official Android TV device.
 
Last edited:

eried1

Senior Member
May 27, 2016
638
124
Stockholm
So since root is only possibly through adb, what can you really do to make permament changes in the system? Any suggestions?
 

N0t_Just1n

Member
Mar 13, 2016
8
1
Is there really no way of automizing this process? So cumbersome having to use a laptop every time I turn off the switch which the Mi Box is connected to.

I'm regretting I didn't pick up another Nexus Player.

Nope, without the bootloader unlocked, you can't change setenforce or the boot check will notice and not complete. Which is why you have to do it mid-boot. It's really not that big of a pain anyway, by default the MiBox goes into a suspendedemode when you hit the power button. So you only have to hook it up to your computer when you unplug it.
 

bigtalker

Senior Member
May 20, 2007
295
63
Samsung Galaxy Z Fold2
Yes it's a 460MB zip full of viruses signed by xiaomi and flashes to mi box perfectly...
Sorry but you must have the worst virus scan in the world.

No, but I do have the official Xiaomi Nougat upgrade from Xiaomi and your dreck bears little resemblance to the file I received as a Xiaomi beta tester.

If anyone should want the real article, feel free to PM me.
 
Last edited:
  • Like
Reactions: owson

rhinotank

Member
Apr 14, 2017
5
22
  • Like
Reactions: hockeytown

Top Liked Posts

  • There are no posts matching your filters.
  • 12
    Found the link for google's servers: android.googleapis.com/packages/ota/xiaomi_once_once/87cf61497f0f6c6ed49ff22bc9b8bd3d3167b9e5.zip
    and latest Android 6.0 r750 in case you want to revert: android.googleapis.com/packages/ota/xiaomi_once_once/4798e23749378f1bc5a7a072b2d9351a980abbfb.zip
    Happy Easter everyone!
    10
    I was able to get this rooted, but haven't been able to unlock the bootloader.
    1. Download MiBOX3S_USA_once_r454.zip from 4PDA.ru unrar it and put it on a USB stick.
    2. Turn on adb from the developer options, connect, and "adb reboot recovery"
    3. Unplug the USB cable and plug in the USB stick. Choose "Install from EXT">"From UDISK", and flash the update.
    4. Reboot it and plug the USB cable back in. Re-enable usb debugging (if your settings were cleared) then disable dm-verity by typing "adb root" then "adb disable-verity" and then "adb reboot"
    5. Once it reboots, you are now free to modify the system partition as you see fit by typing "adb root" then "adb remount". you are effectively 'rooted' at this point.

    I went further and manually installed SuperSU to enjoy some rooted app goodness, but to be honest, it was a pain.

    One thing I noticed is that the most recent OTA wipes your changes, so you may want to disable updates until I can come up with a more elegant solution:

    Code:
    adb root
    adb shell pm disable com.google.android.gms/.update.SystemUpdateService
    adb shell pm disable com.google.android.gms/.update.SystemUpdateService$ActiveReceiver
    adb shell pm disable com.google.android.gms/.update.SystemUpdateService$Receiver
    adb shell pm disable com.google.android.gms/.update.SystemUpdateService$SecretCodeReceiver
    adb shell pm disable com.google.android.gsf/.update.SystemUpdateActivity
    adb shell pm disable com.google.android.gsf/.update.SystemUpdatePanoActivity
    adb shell pm disable com.google.android.gsf/.update.SystemUpdateService
    adb shell pm disable com.google.android.gsf/.update.SystemUpdateService$Receiver
    adb shell pm disable com.google.android.gsf/.update.SystemUpdateService$SecretCodeReceiver

    ** edit **
    I have a bootloader unlock authorization for this device from xiaomi, but I can't seem to get it into either bootloader mode or EDL mode. Any help on this front would be appreciated.
    10
    supersu script

    The attached script will install supersu after following my previous guide.

    12/19/2016 -- updated script --

    The script represents the steps I manually took to install supersu, and should work, but is itself untested. You can open up the .bat file with notepad to see what's going on.

    Unzip the attached file on your desktop or somewhere, then double click InstallScript.bat

    IMPORTANT (As I've stated previously): Due to an issue with SElinux, make sure USB Debugging is ALWAYS ON prior to rebooting the box, otherwise you'll need to reinstall the firmware.

    If you hang after a reboot, do this:
    1. in your connected computer, in a shell, type "adb root"
    2. type "adb shell setenforce 0"
    This can only be done if usb debugging is set to ON prior to the reboot, otherwise you'll need to reinstall the firmware.
    8
    USA MDZ-16-AB updated supersu script

    I believe I've corrected to bootloop issue and submit an updated script.
    8
    this isn't related to root but here's the beta nougat update for those interested
    mega nz/#!xaZgBCrY!l65tcGGt9izhZ2k1HCtka6w3H5-3qXSmq_sBcZn6uy8