Archive of files and guides for the Nokia 6300 4G (2020).
bmd d4f7a1f6f0 Minor changes | 3 veckor sedan | |
---|---|---|
.github | 5 månader sedan | |
_data | 7 månader sedan | |
_includes | 3 veckor sedan | |
_layouts | 3 månader sedan | |
_posts | 3 veckor sedan | |
_sass | 3 veckor sedan | |
assets | 3 veckor sedan | |
.gitignore | 5 månader sedan | |
Gemfile | 3 månader sedan | |
LICENSE | 2 månader sedan | |
README.md | 1 månad sedan | |
_config.yml | 3 veckor sedan | |
favicon.ico | 3 veckor sedan | |
no-style-please.gemspec | 5 månader sedan | |
root.md | 1 månad sedan | |
w2d.md | 1 månad sedan |
View device specification table
<table style="font-size:small">
<thead><tr><td></td><th>Nokia 6300 4G (nokia-leo)</th><th>Nokia 8000 4G (nokia-sparkler)</th></tr></thead>
<tbody><tr><td>Released</td><td colspan="2">13 November 2020</td></tr>
<tr><td>Model</td><td>TA-1286, TA-1287, TA-1291, TA-1294, TA-1307, TA-1324</td><td>TA-1300, TA-1303, TA-1305, TA-1311</td></tr>
<tr><td>Colors</td><td>Light Charcoal, White, Cyan Green</td><td>Onyx/Black, Opal/White, Topaz/Blue, Cintrine/Gold</td></tr>
<tr><td>MSRP</td><td>€49/£59.99/$69.99/1,290,000₫</td><td>€79/£79.99/1,790,000₫</td></tr>
<tr><td colspan="3" align="center"><strong>Specifications</strong></td></tr>
<tr><td>SoC</td><td colspan="2">Qualcomm MSM8909 Snapdragon 210 (4 × 1.1GHz Cortex-A7)</td></tr>
<tr><td>RAM</td><td colspan="2">512MB LPDDR2/3</td></tr>
<tr><td>GPU</td><td colspan="2">Adreno 304</td></tr>
<tr><td>Storage</td><td colspan="2">4GB eMMC 4.5 (+ up to 32GB microSDHC card)</td></tr>
<tr><td>Network</td><td>2G GSM, 3G UMTS, 4G LTE Cat4 150/50Mbps<br><em>
+ EU (except East Ukraine, Azerbaijan, Georgia), APAC: band 1, 3, 5, 7, 8, 20<br>
+ MENA, CN, Nigeria, Tanzania: band 1, 3, 5, 7, 8, 20, 28, 38, 39, 40, 41<br>
+ US: band 2, 4, 5, 12, 17, 66, 71<br>
+ LATAM: band 2, 3, 4, 5, 7, 28<br>
+ ROW: band 1, 3, 5, 7, 8, 20, 38, 40</em><br>
VoLTE & VoWiFi support<br>Single or Dual SIM (Nano-SIM, dual-standby)</td>
<td>2G GSM, 3G UMTS, 4G LTE Cat4 150/50Mbps<br><em>
+ EU (except East Ukraine, Azerbaijan, Georgia), APAC: band 1, 3, 5, 7, 8, 20<br>
+ HK, Macau, MENA, CN, Nigeria, Tanzania: band 1, 3, 5, 7, 8, 20, 28, 38, 39, 40, 41<br>
+ ROW: band 1, 3, 5, 7, 8, 20, 28, 38, 40</em><br>
VoLTE & VoWiFi support<br>Single or Dual SIM (Nano-SIM, dual-standby)</td></tr>
<tr><td>Screen</td><td>320 × 240 @ 167 PPI<br>2.4 inches QVGA TFT LCD, 16M colors (24-bit)</td>
<td>320 × 240 @ 143 PPI<br>2.8 inches QVGA TFT LCD, 16M colors (24-bit)</td></tr>
<tr><td>Bluetooth</td><td colspan="2">4.0, A2DP, LE</td></tr>
<tr><td>Wi-Fi</td><td colspan="2">802.11b/g/n, 2.4GHz, Hotspot (up to 8 devices)</td></tr>
<tr><td>Peripherals</td><td colspan="2">GPS & GLONASS</td></tr>
<tr><td>Cameras</td><td>Rear: VGA with fixed focus, LED flash</td><td>Rear: 2MP with fixed focus, LED flash</td></tr>
<tr><td>Dimensions<br>(HWD)</td><td>131.4 × 53 × 13.7 (mm)<br>5.17 × 2.09 × 0.54 (in)</td>
<td>132.2 × 56.5 × 12.3 (mm)<br>5.20 × 2.22 × 0.48 (in)</td></tr>
<tr><td>Weight</td><td>With battery: 104.1g (3.67oz)</td><td>With battery: 107.9g (3.81oz)</td></tr>
<tr><td>Ports</td><td colspan="2">- microUSB 2.0 charging & data transferring port<br>- 3.5mm headphone jack</td></tr>
<tr><td>Battery</td><td colspan="2">Removable Li-Ion 1500mAh (BL-4XL), 5W wired charging (up to 25 days of 4G standby advertised)</td></tr>
<tr><td colspan="3" align="center"><strong>KaiOS info</strong></td></tr>
<tr><td>Version</td><td colspan="2">KaiOS 2.5.4 (CN: KaiOS 2.5.4.1)</td></tr>
<tr><td>WA VoIP</td><td colspan="2">Supported (12.00.17.01 onwards)</td></tr>
<tr><td>Build no.</td><td colspan="2">10.00.17.01, 12.00.17.01, 13.01.17.05 (CN), 20.00.17.01, 30.00.17.01</td></tr>
</tbody>
</table>
Source code for B2G, Linux 4.9 kernel and certain LGPL-2.1 licensed libraries used by HMD on the 6300 4G can be found in the leo-v20
branch of this repository. Do note that it does NOT contain proprietary code from some vendors and thus cannot be used to compile a functional KaiOS build.
Table of Contents
Here's the funny thing: it's easier to get a genuine version of the original Nokia 6300 than its rebranded version. On eBay, Shopee and other online shopping sites across North America, Europe and Southeast Asia, you may see hundreds of listings of used 6300 4G in various conditions. While the listings seem to look identical, many of those are NOT genuine but are knock-offs with terrible build quality and user experience. Do note that:
*#0000#
in the operating system!Photos provided by thurmendes on r/KaiOS Discord server in June 2023 and various Reddit posts (second, third, fourth).
Kosher is a category of devices whose software (sometimes hardware) is heavily modified to limit access, or even get rid of content and features deemed distracting or against religious values, while keeping other features and user interface almost identical to the original. Companies specializing in customizing Kosher phones exist, and you can easily come across Kosher phone listings on eBay advertising as productivity and focus improvement tools.
As the build and UI remain identical, it's difficult to tell Kosher phones and genuine ones apart. As of now, my key takeaways to differentiate them are:
*#*#debug#*#*
triggers nothing; cannot boot into Recovery mode; getting access to EDL mode variesKosher is indeed a great way to make your phone truly basic, but HMD already offers more basic phones with 4G in their feature phone lineup, so the choice is yours. Double-check the description and pictures of the listings before you buy.
Photo provided by nuxx on r/KaiOS Discord server in October 2021.
North America (US, TA-1324) and Mainland China (CN, TA-1287) versions are customised differently from other 6300 4Gs to comply with local regulations.
TA-1324, approved by the three major US carriers, Verizon, AT&T and T-Mobile, only works on LTE bands 2, 4, 5, 12, 17, 66 and 71. Its modem doesn’t cover global LTE bands (e.g. band 1, 3 and 7), so you may have trouble making or receiving calls and texts overseas. Even then, it lacks band 13, which Verizon primarily uses for VoLTE and coverage in rural area. Other models are also barely compatible with US networks, with only band 5 shared across all; except TA-1307 which also shares LTE band 2 and 4.
On the TA-1324, you can only select English (US), español (US), Français (CA) and Português (BR) as display languages. On the TA-1287, you cannot set Google as a search engine (Baidu is set as default). WhatsApp, Facebook, YouTube, Google Maps and Google are not pre-installed, though you can get the former two from KaiStore.
While you can still install third-party apps on TA-1324 as with the other versions, rooting is currently not possible as it is signed with a different PK_HASH signature for handshake in EDL mode. This requires a separate programmer which we don't have in archive. Without root access, you can still use AppBuster to hide unwanted apps from the app list instead.
ssp.kaiads.com
in your Wi-Fi routers' blacklist or the system's hosts
file. Note that this might prevent you from installing certain apps from KaiStore like WhatsApp.accessibility.screenreader
Device Settings boolean flag. This feature might not work well with some third-party apps which have unlabelled buttons.keyboard.gaiamobile.org
being too short. BananaHackers' guide on fixing the keypad speed may helpkeypad.js
in keyboard.gaiamobile.org
, set this.isT9Enabled=true
and priotise T9 in the typing mode list (kudos to mrkisl in r/KaiOS Discord server)adb logcat
and read through the system logs!sms.gaiamobile.org
and clock.gaiamobile.org
from /system/b2g/webapps
, extract, edit the audio files and repackage the apps, then push them back under /data/local/webapps
and edit the basePath
in /data/local/webapps/webapps.json
to reflect the change (see BananaHackers' guide for instructions)launcher.gaiamobile.org
.Tip: You can save these codes as contacts to dial later or as Speed Dial entries. When the phone suggests a saved code, you can press Call to activate the code's function.
*#*#33284#*#*
(*#*#debug#*#*
): Toggle debugging mode, allowing the phone to be debugged over ADB and DevTools (see Sideloading and debugging third-party applications). A bug icon will appear in the status bar letting you know debugging mode is on. This can also be turned on under Settings, Device, Developer, Debugger, ADB and DevTools.*#06#
: View the 15-digit International Mobile Equipment Identity numbers or IMEI(s) to uniquely identify a specific cell phone on GSM networks. Do not modify, delete or show these numbers to anyone else without taking any precautions: invalid or duplicated IMEI(s) will prevent you from receiving cellular signals or even get you into legal issues.*#0606#
(TA-1324 only): View the 14-digit Mobile Equipment Identifier numbers or MEID(s) to uniquely identify a specific cell phone on CDMA networks. Note that this only applies to US models; on international models the MEIDs would be invalid (all zeroes) and thus this secret code does nothing.*#0000#
: View device information, including firmware version, build date, model number, regional variant and CUID.*#33#
(call): Check the Call barring service status from carrier for blocking or whitelisting calls, whether incoming or outgoing, domestic or international. Requires a 4-digit passcode to use. To toggle, go to Settings, Network & Connectivity, Calling, Call barring.*#43#
(call): Check the Call waiting service status from carrier. To toggle, go to Settings, Network & Connectivity, Calling, Call waiting.*#*#372733#*#*
(*#*#draped#*#*
): Open KaiOS MMI Test, an internal tool to test each hardware component of a KaiOS device. Tests can be done through an automatic routine or by hand, and include LCD backlight, T9 keyboard, camera, LED flash, RTC, speaker, microphone, vibrator, 3.5mm audio jack, SIM trays, Wi-Fi, Bluetooth, NFC, microSD and microUSB slots.
*#07#
: Check the ro.sar.enabled
boolean property, if true check the current SAR level and display SAR-related health and safety information.*#1219#
: Clear all userspace customizations, presumably for store display.*#091#
(on)/*#092#
(off): Toggle auto-answering on incoming call. You can turn this on under Device Settings in WebIDE.*#2886#
(*#auto#
): Should also open KaiOS MMI Test interface.*#8378269#
(*#testbox#
)/*#*#2637643#*#*
(*#*#android#*#*
): Open Testbox engineering menu with predecessor Firefox OS design, previously used by OEMs to test hardware components. This menu can be manually opened using Luxferre's CrossTweak.###2324#
(###adbg#
): Open a menu, allowing to toggle Qualcomm diagnostic mode for fixing null/invalid IMEI or baseband via QPST.*#*#212018#*#*
: Toggle privileged access (including rooted ADB shell) to the phone.*#7223#
(*#race#
): Display internal firmware build and boot image versions.*#*#0574#*#*
(*#*#0lri#*#*
): Open LogManager utility which allows you to fully enable ADB and DevTools on Spreadtrum devices.*#573564#
(*#jrdlog#
): Open T2M Log (jrdlog), a stripped-down LogManager interface.*#1314#
: Switch the auto.send.crash.sms
property, whose purpose is still unknown.With the phone powered off, hold the top Power button and the * key, or type adb reboot recovery
when connected to a computer. Use D-Pad Up and Down to move between options, and press the top Power button (not the center OK key) to select.
Allows you to factory reset by wiping /data and /cache, view boot and kernel logs, install patches from adb sideload
or SD card.
Tip: /recovery
partition has the same 32.0 MB (32,768 KB) size as /boot
, which means that you can replace /recovery
with a copy of /boot
to boot into KaiOS, and reserve /boot
for e.g. installing other operating systems such as postmarketOS.
Only accessible and automatically kick in when both the /boot
and /recovery
partitions are corrupted; to manually activate this mode, use dd
to wipe both partitions with zeroes. Part of the bootloader, this allows you to write system partitions should you wish to fix or modify them.
To interact with the Fastboot interface, you need to connect your phone with an USB cable and have the fastboot
CLI tool on your computer. On macOS and Linux, fastboot
should be included in the android-tools
package, which you can install from Homebrew or your package manager. On Windows, you can get it from the Android SDK Platform Tools package by following the Sideloading and debugging third-party applications guide; you will also need to install Google's INF driver for your computer to see your phone in Fastboot mode (right-click the android_winusb.inf
file and click Install; requires administrator privileges).
If you have plugged in your phone before setting up the driver: open Device Manager (devmgmt.msc
), look for an "Android" device with an exclamation mark, right click, Install Driver..., Browse my computer for drivers, Let me pick from a list of device drivers on my computer, Have Disk... and select the INF file. Once the driver is installed, you should see your phone in the Driver Manager list as an Android Bootloader Interface.
For a full list of commands you can use in the Fastboot interface, see the Android/Fastboot entry on Gentoo Linux Wiki. Not all commands can be used on the 6300 4G.
With the phone powered off, hold the top Power button and both the * and # keys, or type adb reboot edl
when connected to a computer. Boots into a black screen, allows you to read and write partitions over Qualcomm's proprietary Sahara or Firehose protocol. Remove the battery to exit.
To interact with this mode, you need a digitally-signed MBN/ELF "loader" file specifically made for the device, and a middleman program such as QFIL or edl.py.
You can also force reboot the phone by holding the top Power button and the # key at any time.
An EDL programmer for the non-US variants of 6300 4G (other than TA-1324) can be found on BananaHackers' EDL archive website with hardware ID 0x009600e100420029 (a copy is available in this repository under assets/
). TA-1324 variant has been signed with a different PK_HASH and needs a different firehose loader which we currently don't have in archive.
As discovered by atipls on Discord and @Llixuma, on the mainboard of the 6300 4G, there are 3 UART testing points: TX, RX and GND just above the SIM2 slot. Shorting TX at 1.8V and GND takes you to Fastboot mode and the Linux terminal interface.
By default, KaiOS's Linux kernel disables the UART testpoints; logs from UART testpoints will stop once the kernel kicks in. To read the full output from UART, compile the Linux kernel from HMD's OSS release with LEO_defconfig
flag (not LEO_defconfig-perf
).
Don't want to download apps from KaiStore? Both the 6300 4G and 8000 4G have been classified as debug-enabled by the BananaHackers team. As with other KaiOS 2.5.4 devices, you can install and debug apps from outside sources on these phones, so long as they don't use 'forbidden' permissions, such as engmode-extension
, embed-apps
and embed-widgets
, and you cannot debug pre-installed apps on the phone using WebIDE's Developer Tools (you're free to use adb logcat
to view system logs instead).
Detailed instructions can be found at Sideloading and debugging third-party applications/ADB and WebIDE. Feel free to check out apps made by the community on BananaHackers Store, old B-Hackers Store or my personally curated list of KaiOS apps.
Do note that OmniSD, one of the methods used for on-device sideloading, and many Gerda-related apps requires the navigator.mozApps.mgmt.import
API that has been removed from KaiOS 2.5.2.2, and therefore no longer work on this phone. However, after permanently rooting the phone, the Privileged factory reset feature to gain privileged userspace session that could be used on KaiOS 2.5.2 and older can now be used again (see Next steps).
To remove unwanted apps from the phone, you can use AppBuster which lets you disable any apps you don't need and enable them again if you want.
Looking for the guide to root the 6300 4G? This section has now been moved to ROOT: Patching the boot partition (non-US only).
[^1]: SKU variant is determined by the ro.build.skuid
device flag, whose location is not in /boot
, /devinfo
or /system/build.prop
but unknown. (XDA, via Cyan in #device-dev, r/KaiOS Discord server)
[^2]: A year after release of the 8000 4G and 6300 4G, HMD inherently pushed an OTA update to the 2720 Flip and 800 Tough, numbered build 30.00.17.05, which traded off DevTools access to strengthen SELinux for the ability to make and receive WhatsApp calls.
[^3]: Aleph Security has a deep-dive blog post into exploiting the nature of EDL mode on Qualcomm devices. If you're into the overall boot process, check out the breakdown of Qualcomm's Chain of Trust on LineageOS Engineering Blog.
[^4]: Read more about [SELinux on LineageOS Engineering Blog].
GitHub Pages theme: MIT-licensed riggraz/no-style-please