Usually depends on brands:
1. IF POPULAR BRAND: WE GET SUPPLIED WITH PASSWORDS OR PAY NICE INSIDERS TO GET ALL WE NEED FOR RESEARCH.
2. IF **** BRAND, TOO NEW FLASH AND NOT RELEASED, OR SUPPORTER IS POOR OR WITHOUT FRIENDS NEAR THEN FLASH READING IS DONE EITHER BY USING SPECIAL PHONE PROTOCOLS EITHER BY READING PHISICALLY THE FLASH CHIP (WHEN POSSIBLE)
Hope i was clear...
Br