I was successfully able to obtain a root prompt on a v5 i-opener!!
It was a little tricky, though. I am using the i-opener stock right now.
I set up a Geocities page that had a link to /etc/shadow (you put a link to file:/etc/shadow).
The page flashed a line of text and then showed the i-opener's default 404 page.
I kept hitting BACK on my keyboard as I started to write down the line of text the file gave me. That line was "root:nbhWeCT1}Q60t:940962255:0:0".
I downloaded QNX Decrypt from an i-opener-linux.net mirror and ran it with my hash. It gave me the password of MaC6Wbr6.
With my AnyISP i-opener, I went to the preferences system. I edited my phone number to read "|/app/stop-apps" and clicked "Connect".
The machine flashed several screens and dropped me to a white screen. I pressed ENTER to get the login prompt. I entered root and my password. Lo and behold, it dropped me to something I wanted to see:
703502881#:
To recover, I unplug/replug in the i-opener. When the dial-up light begins to flash, I press the power button off and back on. After a few tries, it brings me to the main menu. Then I quickly went to my dialup number and changed it to a random number and pressed the Enter button.
I got root. I am happy. Now what?
"703502881#"
My v5 showing a root prompt
