Successful downgrade from 1260.2 to 1169.2 (T-JZMDEUC) using browser exploit
I just downgraded from version 1260.2 using the browser exploit. Confirming it works. Here are the steps I followed and an important trick:
SamyGO widget preparation:
I installed the SamyGO widget (ROOTK.wgt) before the downgrade, while still on version 1260. This is necessary because the widget installation requires accepting Samsung's terms, which
need internet access and access to the Tizen VM in developer mode. After the downgrade, the widget remained installed. I placed it as the first app in the menu so it runs on TV boot.
The key trick (update menu timing):
1. Open the TV browser and load the exploit page (kroot.samygo.tv or local server).
2. The first exploit message will appear (something like "Browser exploit worked..."). At this point the exploit is working but the TV is not yet ready for downgrade.
3. Without waiting for the "TV ready for downgrade" message, go to: Menu > Support > Software Update > Update Now.
4. The TV will ask if you want to search the USB. Don't press anything yet. Stay waiting on that dialog.
5. Wait until the "TV ready for downgrade

" notification appears at the top of the screen.
6. Now confirm the USB search. The TV will find firmware 1169.2 and install it.
Why this order? If you wait for the "ready for downgrade" message and then try to enter the software update menu, it throws an error and won't let you in. You need to already be inside
the menu waiting.
After the downgrade:
- Firmware is correctly at 1169.2.
- The SamyGO widget installed on 1260 survived the downgrade.
- On TV boot, since the widget is set as the first app in the menu, it runs automatically and the "Root started!" message appears.