Banking app detecting Magisk even when hiding - Samsung Galaxy S7 Questions and Answers

Hi Guys,
I've installed a bunch of apps to check for root including Safetynet and I'm actually in fact unrooted just bootloader unlocked and using latest version of LightROM.
Unfortunately no matter using magisk core or uninstalling everything, hiding from system and hiding the banking app it still detects Root and that's SUPER aggravating.
Is there a way to know exactly what checks is failing when an app is attempting to detect Root as I said I haven't even rooted yet..
The apps are SBM mobile and Juice byMCB.
Thanks for your help!

Airbag888 said:
Hi Guys,
I've installed a bunch of apps to check for root including Safetynet and I'm actually in fact unrooted just bootloader unlocked and using latest version of LightROM.
Unfortunately no matter using magisk core or uninstalling everything, hiding from system and hiding the banking app it still detects Root and that's SUPER aggravating.
Is there a way to know exactly what checks is failing when an app is attempting to detect Root as I said I haven't even rooted yet..
The apps are SBM mobile and Juice byMCB.
Thanks for your help!
Click to expand...
Click to collapse
It says detecting root but it's actually detecting Knox has been tripped via modification.
It's well known that some banking apps and others will never work on a phone that has or had a custom Rom installed at some point.

cooltt said:
It says detecting root but it's actually detecting Knox has been tripped via modification.
It's well known that some banking apps and others will never work on a phone that has or had a custom Rom installed at some point.
Click to expand...
Click to collapse
Thanks for your answer.. So I checked with a knox checker app and it can't tell knox was triggered saying it's 0x0 (I know the efuse was tripped but magisk apparently can hide it at least from non system apps) and all the root checkers and safetynet checkers I ran could not see anything.
I wish I knew what exactly tripped this app, not sure if an app developer can open it up and see the logic in effect at startup?
What are my options now?
Since I tried removing root/magisk - did not help
1. Flash stock? knox would show up as 0x1
2. throw away the phone as it will from now on never run this banking app? that seems super extreme and when I asked before unlocking BL everyone was adamant banking apps were not a problem anymore.. sigh

Airbag888 said:
Thanks for your answer.. So I checked with a knox checker app and it can't tell knox was triggered saying it's 0x0 (I know the efuse was tripped but magisk apparently can hide it at least from non system apps) and all the root checkers and safetynet checkers I ran could not see anything.
I wish I knew what exactly tripped this app, not sure if an app developer can open it up and see the logic in effect at startup?
What are my options now?
Since I tried removing root/magisk - did not help
1. Flash stock? knox would show up as 0x1
2. throw away the phone as it will from now on never run this banking app? that seems super extreme and when I asked before unlocking BL everyone was adamant banking apps were not a problem anymore.. sigh
Click to expand...
Click to collapse
Yeah those Knox checking apps are a load of rubbish to be honest. You can check if Knox has been tripped by booting into recovery and checking the Knox counter ,top left, bottom text.
When a phone is modified in any way which almost always requires root, an entry is made in the EFS partition which cannot be altered or you will lose IMEI and other critical data. As I mentioned some banking apps don't care about mods since when the app is used the connection is encrypted end to end but obviously some banking apps just won't take the risk and don't run full stop. This is why some people are saying what their saying about resetting/hiding Knox. Also as you know Knox is a physical efuse so how can software reset or hide it.
People just getting confused due to some apps working and some not but it's due to what I've just explained.
In future all banking apps are moving to completely non function if a phone has been modified so if this is important to you on a new phone ,don't ever root it.

cooltt said:
Yeah those Knox checking apps are a load of rubbish to be honest. You can check if Knox has been tripped by booting into recovery and checking the Knox counter ,top left, bottom text.
When a phone is modified in any way which almost always requires root, an entry is made in the EFS partition which cannot be altered or you will lose IMEI and other critical data. As I mentioned some banking apps don't care about mods since when the app is used the connection is encrypted end to end but obviously some banking apps just won't take the risk and don't run full stop. This is why some people are saying what their saying about resetting/hiding Knox. Also as you know Knox is a physical efuse so how can software reset or hide it.
People just getting confused due to some apps working and some not but it's due to what I've just explained.
In future all banking apps are moving to completely non function if a phone has been modified so if this is important to you on a new phone ,don't ever root it.
Click to expand...
Click to collapse
If that's really the direction things are going it's pretty sad. Android turning into crapple.
Anyway I was wondering how an app (Bank) could have access to the real knox status while another not (the app I used detected 0x1 without magisk and 0x0 with magisk)
I don't want a world where I can't bootloader unlock my phone.. Already I regretted not bootloader unlocking it because it's 2019 and android can't backup all my app data yet. So if I factory reset, bam all my redownloaded stuff has no saved data (or most of it) and that annoys the hell out of me. There should be a way to basically nandroid a backup to your computer or sd card and restore that whenever you feel.
I was super bummed a month ago, my stock unrooted s7e was extremely slow and unusable, after rooting, and installing LightROM all went back to being fluid. I was about to spend good money for a new phone now I can't use my banking app at all and I'm *****ing cause I use it on a daily basis.

Airbag888 said:
If that's really the direction things are going it's pretty sad. Android turning into crapple.
Anyway I was wondering how an app (Bank) could have access to the real knox status while another not (the app I used detected 0x1 without magisk and 0x0 with magisk)
I don't want a world where I can't bootloader unlock my phone.. Already I regretted not bootloader unlocking it because it's 2019 and android can't backup all my app data yet. So if I factory reset, bam all my redownloaded stuff has no saved data (or most of it) and that annoys the hell out of me. There should be a way to basically nandroid a backup to your computer or sd card and restore that whenever you feel.
I was super bummed a month ago, my stock unrooted s7e was extremely slow and unusable, after rooting, and installing LightROM all went back to being fluid. I was about to spend good money for a new phone now I can't use my banking app at all and I'm *****ing cause I use it on a daily basis.
Click to expand...
Click to collapse
How can some apps see knox and not others? Read only access to the EFS partition.
Samsung (along with all phone Manufactures) develop their firmware together with all the big app developers who intend to use the platform. The banking sector has been hit hard with all kinds of IT related fraud especially with mobile banking. Banks simply cannot rely on customers to secure mobile devices so the choice is, block their app from functioning on a device that has been compromised in any way shape or form whatsoever or carry on taking the hit for banking fraud. If i was a bank i know which option i would choose, especially as governments are ensuring banks refund customers for their own stupidity.
With regards to open source and Android community mods, while it's been great there is a serious downside to it. More and more companies & developers are protecting their work and intellectual property. Mods will become harder and harder as much tougher security is built into apps and firmware. It's enervatible. Nobody makes money from phones which don't track your usage habits or can't show ads etc. We are all the product!
Lets not even talk about built in obsolescence.

cooltt said:
Yeah those Knox checking apps are a load of rubbish to be honest. You can check if Knox has been tripped by booting into recovery and checking the Knox counter ,top left, bottom text.
When a phone is modified in any way which almost always requires root, an entry is made in the EFS partition which cannot be altered or you will lose IMEI and other critical data. As I mentioned some banking apps don't care about mods since when the app is used the connection is encrypted end to end but obviously some banking apps just won't take the risk and don't run full stop. This is why some people are saying what their saying about resetting/hiding Knox. Also as you know Knox is a physical efuse so how can software reset or hide it.
People just getting confused due to some apps working and some not but it's due to what I've just explained.
In future all banking apps are moving to completely non function if a phone has been modified so if this is important to you on a new phone ,don't ever root it.
Click to expand...
Click to collapse
I must admit I find it sad that no one found a workaround It used to be that the community could outsmart the manufacturers now it seems maybe they all got employed instead
I guess we had a good run

Related

Any developer working on root and knox , samsung pay work as well?

I want to have root but knox and samsung pay making me stay away from root...... please work on this ?
There's a reason Knox exists and why security is tight.
As much as it would be cool to have root and use Samsung Pay, it should not happen because then you won't have Samsung Pay. No banks will ever participate in a service which isn't secure.
Knox and Samsung Pay are easily the most secure of any mobile payment platform so it will never happen.
Interceptor777 said:
There's a reason Knox exists and why security is tight.
As much as it would be cool to have root and use Samsung Pay, it should not happen because then you won't have Samsung Pay. No banks will ever participate in a service which isn't secure.
Knox and Samsung Pay are easily the most secure of any mobile payment platform so it will never happen.
Click to expand...
Click to collapse
So I should say bye bye to XDA 99.99% development is going on Root ..... No Root No Development!
ran816 said:
So I should say bye bye to XDA 99.99% development is going on Root ..... No Root No Development!
Click to expand...
Click to collapse
That's not a very fair attitude to have, is it? Lots of people have spent countless hours of their own spare time, money and effort to get root working on both the Exynos and Snapdragon variants of the S8 and S8+ devices. They don't get paid for doing this either.
But because Samsung have a very tight secure system, that is unable to be bypassed, you're going to leave XDA because you can't get something you really want?
Samsung Pay will never work on a rooted device. It cannot be bypassed. It's very secure. Samsung Knox is DEFENCE GRADE security.
Luckily though, Samsung Pay is the ONLY thing that won't work on a rooted S8. Everything else works.
ran816 said:
I want to have root but knox and samsung pay making me stay away from root...... please work on this
Click to expand...
Click to collapse
Maybe you could work on this, since you think it should be done.
I am working on it. But as other posters have said, it is a very secure system and I have limited time and money to make it happen. I fully expect that we will be able to bypass at least some of the Knox security, but these things take time.
why you need root?
I am rooted my device for seen what is the difference in rooted and non rooted device.
But know Samsung secure folder Samsung pay and Samsung pass not working in Samsung phones. Any developer have any method for this to fix only Samsung pass.
I don't want Samsung pay or secure folder. I fix Samsung health but Knox not working for secure folder.
Please fix this
Root Any Samsung Mobile
Need A Pc
Your Working Samsung Phone/tablet
Samsung Usb driver in Pc
Usb debugging enable in developers Mode
Oem unlock enable in Developers Mode
to enable developers Mode
press 7 times or tap 7-10 times on build number in your phone/ tablet software info
then go back and found developers mode in settings
Enable,usb debugging and oem unlock in Developers Mode
Next attach your phone to pc/laptop,take your data cabke and connect to mobile with laptop
IN laptop You need Samsung firmware flashing tool ODIN any version Accord to your phone android version,minimum on marshmallow is 3.0.9
Open odin now goto Mobile and Press volume down key and power key at same time for 10 seconds with oressing home key volume down and power key you goes in download mode then press volume up key and see downloading start its a window dont panic
see your Pc/laptop ,Open Odin and Check first or any Coloums you seen in blue colour where is showing the device is connected, if device is connected then press On Ap coloum and select Root file or select TWRP IMAGE FILE ,Now Check other coloums uncheck auto reboot and factory reset, adter all set press start to flash root or twrp in Any Samsung Phones, After you need reboot device manually after successful root or install twrp,
WAIT if you root direct your device show you one eye android logo and reboot many times,it takes 5-30 minutes first time root,if install Twrp then you need to visit TWRP RECIVERY by press power key volume up key qnd home key,if you have not home key then dont worry volume up/down buttons do this all work automatically with power key
GOTO RECOVERY MODE....POWER KEY+ VOLUME UP+( HOME KEY not on all devices)
GOTO DOWNLOAD FASTBOOT MODE....POWER KEY + VOLUME DOWN KEY FROM ANY WINDOW ANY MOBILE ANY TIME
NEED EXIT FROM DOWNLOAD MODE
PRESS POWER AND VOLUME DOWN KEY FROM.ANY SCREEN ON ANY MOBILE TO REBOOT FOR ANY EMERGENCY,
FIRST TIME ROOTED SAMSUNG PHONES NEED A FACTORY RESET so do a factory reset,
.....follow this after root from software bricking devices.....
After your Root NEVER TURN OFF OEM UNLOCK FROM DEVELOPERS MODE BECAUSE IT WILL SOFT BRICK ON NEXT REBOOT
ANY HELP IF YOU WANT THEN CONTACT HERE OR YOUTUBE/TINDER TECHNICAL
when You first time root then it REBOOT randomly many time 20-30 times as i see in my experience, dont panic.
if any thing goes wrong you can install firmware again with odin.
want to know more about root and watch video how to root
then come to tinder technical youtube channel.
you can download root file from Xda or Cfautoroot chainfire website
Download twrp from official Twrp or from Xda
download official firmware from samaungfirmware.com
download Samsung usb driver from website or xda
now you can enjoy phone .
after first time root or twrp perform a full backup of your firmware with twrpbackup,make full select all coloums and take this data to safe palace any emergency or lost build number baseband version imei or any other problem it will help you,
because there is 70% i have seen after root many users lost their baseband and imei number after root and installation of custom rom mostely, so take a rom backup first with twrp
by...tinderpal (tinder technical youtube)
Fix health
anmoltinder said:
I am rooted my device for seen what is the difference in rooted and non rooted device.
But know Samsung secure folder Samsung pay and Samsung pass not working in Samsung phones. Any developer have any method for this to fix only Samsung pass.
I don't want Samsung pay or secure folder. I fix Samsung health but Knox not working for secure folder.
Please fix this
Click to expand...
Click to collapse
Please can you tell me how you fix Samsung Heath
Dasaalv said:
Please can you tell me how you fix Samsung Heath
Click to expand...
Click to collapse
Assuming you want to know how to use Samsung Health on a rooted device?
-Open the file build.prop (from /system) in a text editor
-In build.prop file look for ro.config.tima=1
-Change this to ro.config.tima=0,
-Reboot phone
Root with magisk, and or install kingrom v8. Update all,magisk stuff n you'll be fine. Sammy pay works and all other bs ppl use that most rooted ppl don't care to use. Honest reply to your OP sir/ma'am hope this helped.
To be fair, if a person is too lazy to pull out their wallet and pay with cash or card than why own a phone with a feature that further makes the presumably lazy, more lazy? To add a bit more, personally, I don't use 90% of the apps on my phone. Don't even use the finger scanner or eye scanner since they aren't covered by the constitution. Physical passwords I.e. pins, codez and a mix there of are covered but not Biometrics. Sure its cool and secure but I value my true privacy but that's a thread for another time.
this.guy.lol said:
Root with magisk, and or install kingrom v8. Update all,magisk stuff n you'll be fine. Sammy pay works and all other bs ppl use that most rooted ppl don't care to use. Honest reply to your OP sir/ma'am hope this helped.
Click to expand...
Click to collapse
Samsung Pay doesn't work on any rooted device.
the_scotsman said:
Samsung Pay doesn't work on any rooted device.
Click to expand...
Click to collapse
works on mine. Before it would not open but since I use magisk it works. Had to spoof to UK since I'm in America but it works. Got pass and all. Plus Knox security. Idk what others are doing wrong but my setup is good to go
this.guy.lol said:
works on mine. Before it would not open but since I use magisk it works. Had to spoof to UK since I'm in America but it works. Got pass and all. Plus Knox security. Idk what others are doing wrong but my setup is good to go
Click to expand...
Click to collapse
Heres a screenshot
Mis-spoke. Knox works and secure folder however Sammy pay no longer works. Not sure why exactly. However android pay still works and that makes me baffled since I'm rooted. Sorry about that.
Never let the lack of 1 or 3 apps keep you from rooting. Best advice I can give anyone.
Yea, Android Pay works, but Samsung Pay doesn't. Never has on rooted device, regardless of Knox spoofed status.
this.guy.lol said:
Root with magisk, and or install kingrom v8. Update all,magisk stuff n you'll be fine. Sammy pay works and all other bs ppl use that most rooted ppl don't care to use. Honest reply to your OP sir/ma'am hope this helped.
To be fair, if a person is too lazy to pull out their wallet and pay with cash or card than why own a phone with a feature that further makes the presumably lazy, more lazy? To add a bit more, personally, I don't use 90% of the apps on my phone. Don't even use the finger scanner or eye scanner since they aren't covered by the constitution. Physical passwords I.e. pins, codez and a mix there of are covered but not Biometrics. Sure its cool and secure but I value my true privacy but that's a thread for another time.
Click to expand...
Click to collapse
Don't think it's about being lazy. It takes the same effort to pull out my phone as it does my wallet. If you think pulling a card out of a wallet takes effort, then maybe you need to hit the gym. LOL.
For me, I like bells and whistles and technology, so I think it's cool. It's also come in handy the rare times I ledt the house without my wallet, and needed to stop and buy something. It is more convenient, since I can carry my ID and my phone and skip the wallet.
I get rewards points for using it, which I've already cashed in and got free stuff. It tracks my purchases.
I am not lazy, yet use SPay everyday. It would not be worth losing just for root, so I can disable an app or an ad.
Mr. Orange 645 said:
Don't think it's about being lazy. It takes the same effort to pull out my phone as it does my wallet. If you think pulling a card out of a wallet takes effort, then maybe you need to hit the gym. LOL.
For me, I like bells and whistles and technology, so I think it's cool. It's also come in handy the rare times I ledt the house without my wallet, and needed to stop and buy something. It is more convenient, since I can carry my ID and my phone and skip the wallet.
I get rewards points for using it, which I've already cashed in and got free stuff. It tracks my purchases.
I am not lazy, yet use SPay everyday. It would not be worth losing just for root, so I can disable an app or an ad.
Click to expand...
Click to collapse
Well said! I don't bank online but for me, root is far more than just turning off ads lol...if someone is rooting for just that purpose than they are missing the entire point of it entirly. As for the wallet aspect, that's a gray area. Most ppl I see have their phone out vs the wallet. Even some I see with the phone out do the wallet. I have a friend who's very wealthy and he's always,doing cash or card and never his phone. Even tho the option is there for him to. Convianiant uee, ethical, maybe but not so much. I'd rather have a device that's modded and backed knowing I'm covered vs a,phone that anyone with a brain could hack the POS front of nfc which is pretty easy to do in its own reserve with Skimmers and so on. But this is from a security POV.
the_scotsman said:
Yea, Android Pay works, but Samsung Pay doesn't. Never has on rooted device, regardless of Knox spoofed status.
Click to expand...
Click to collapse
Android pay is useless for me , it only works with NFC
I do use always samsung pay on local stores. It's so convenient and does work almost everywhere.
anmoltinder said:
I am rooted my device for seen what is the difference in rooted and non rooted device.
But know Samsung secure folder Samsung pay and Samsung pass not working in Samsung phones. Any developer have any method for this to fix only Samsung pass.
I don't want Samsung pay or secure folder. I fix Samsung health but Knox not working for secure folder.
Please fix this
Click to expand...
Click to collapse
Think that method doesnt work

[Q] [Nov 2017] Knox - Down sides of tripping it?

I have searched xda and stackexchange to get this answer but have not been able to get a comprehensive list of what all will go if I trip Knox. Some answers were very old so I wanna see what all will I lose now with the latest Knox in my S8+? Some of the things I already know but don't care about losing:
1. Samsung Warranty
2. Secure Folder
3. Samsung Pay
4. Banking Apps
My actual concern is about device security as a whole e.g. if my device gets stolen, then except the data in my Secure Folder being secure, is there any other advantage of Knox too? Like the thief wouldn't be able to boot up or use my phone or anything of the sorts? Or the internal storage would be encrypted and there'll be Secure Boot only with Knox? I plan to flash TWRP too so what all am I going to lose? It would be amazing if we get a complete list of Knox features.
If you disable FRP lock to use root stuff, any thief can simply install a new ROM to your device and get full access as an owner without any protection. If FRP lock is enabled (not rooted), the person who steals your phone has to know your Google account login to use the device, otherwise the phone will be a brick stuck in the setup process. When you get the phone back from the thief, you can login with your Google account and have access to the phone again.
If you want to root, go for it, but I don't really see the point right now. LineageOS is not a daily driver yet (amazing that it exists though!), Note 8 ROMs bring only a few new things like different Infinity wallpapers, and things that required root before (f.e ad blocking) can be now done without root.
My banking app works with root but the finger print option is not available because of root. only thing i do miss is secure folder as that does not work.

Need help configuring Samsung Galaxy S7 SM-G930W8 (Canadian Model)

Hello,
I wasn't 100% sure if this was the correct thread or if I should have posted under the ROM section for this phone. We own a start-up company, and have signed some contracts with some larger companies. In one particular contract, we need to take certain security precautions.
My wife has purchased me a Samsung Galaxy S7 SM-G930W8 (the Canadian model). I live in the USA. It's unlocked and multi-csc (whatever that means). The product code is XAC (I believe that means unlocked). We contacted Samsung to verify that a USA sim card would work in the phone, which it does, and that it wouldn't lock the phone to that sim card, which it doesn't. So we're good there.
We explained the issue about the software. The phone comes with some software pre-installed that we cannot have on the phone if we're going to be using it as a company phone, which we would like to do. Samsung said we could disable most of the apps, which we were aware of, however, the contracts specifically states certain types of programs cannot be installed on our company devices.
I asked them if I where to gain root access and remove those programs, would it void the warranty. They said no. The only way we would void the warranty is if we dropped the phone and damaged it, or got it wet.
What would be the best way to go about removing these programs and trying to get a more cleaner version of Android? I understand that a ROM would have to be specific to this phone, because of the various hardware in the phone. But we are not looking for any "extra" programs that tend to come with ROMs to attempt and make them better. I noticed some ROMs for this phone include a custom installer, where we can pick and choose what we wanted installed. But they also come with customized kernels with various security features disabled (such as a fake version of KNOX).
Could someone recommend the best route to go here? Stability is extremely important, however, so is security. We cannot have unapproved third party apps / mods on the phone, but we have some leigh way there. For example, I could probably get around installing a custom recovery partition because the code on that custom recovery partition is not running while we're accessing company resources. If we have to go the route of using a custom ROM, we'd prefer one that supports over the air updates, but does not force them.
Any ideas?
Thank you and sorry for such a novice question. I had done a good bit of research into this and thought I found the perfect one, just to discover that it appears to no longer be supported and the thread on XDA has been deleted.
**EDIT: I should add that my wife upgraded it to Android 7, but I was afraid that would limit our options, so I downloaded the stock XAC ROM for this phone and used Odin to flash it back on, so it's currently running 6.0.1. I'm not sure if that makes a difference or not.
Thanks!
Am I reading correctly that you must completely remove the apps from the phone, not just disable them? The thread below describes how to disable system apps without rooting or otherwise modifying your phone's firmware.
https://forum.xda-developers.com/galaxy-s7/how-to/root-required-oreo-disable-apps-t3814249
Flashing modified firmware will disable Knox, which is something you might not want to do in your case. Also, if you're contractually bound as far as security precautions go, you're probably going to want to update to the latest Oreo firmware and keep it up to date with any security updates as they are issued by Samsung.
Hai Karate said:
Am I reading correctly that you must completely remove the apps from the phone, not just disable them? The thread below describes how to disable system apps without rooting or otherwise modifying your phone's firmware.
Click to expand...
Click to collapse
I apologize in advance if I get your gender incorrect, a quick google search shows your name is unisex. I am going to assume you are a male, until otherwise told so. Yes sir, you are reading correctly that I must completely remove the apps from my company devices, including this phone. I appreciate that my wife bought it for me, but she doesn't fully understand the business like I do and I don't think she really thought it through. I imagine it costed a good bit of money, so I'd hate to have her send it back because I cannot remove the apps.
I appreciate the links to the threads, however, I already know how to disable the apps, but that is not enough. They physically cannot be installed based on what they're capable of doing (ie, a potential for viewing documents / schematics / pcb layouts labeled as confidential or highly confidential, or even worse, being poorly written in such a way where the program is exploitable and someone gains unauthorized access to our network, the certificates we have installed on the phone, etc.)
Hai Karate said:
Flashing modified firmware will disable Knox, which is something you might not want to do in your case. Also, if you're contractually bound as far as security precautions go, you're probably going to want to update to the latest Oreo firmware and keep it up to date with any security updates as they are issued by Samsung.
Click to expand...
Click to collapse
[/QUOTE]
Updating to Oreo is something that we will be wanting to do, but something I have been holding off on, in case I have to flash a modified firmware, or ROM as it's sometimes referred to. As for Knox being disabled, I actually believe that is something we are going to need to happen, have it disabled. We use special software that provides similar functionality that Knox provides, but is a lot more advanced. We actually use a few products for that.
I do have to admit that my knowledge regarding cell phone firmwares is a bit limited, although I do write firmware for other custom created devices. My worries with custom firmware are:
1) Certain security features (excluding Knox) might be disabled or removed (ie, the ability to encrypt the internal flash, encrypt the MicroSD card, having SELinux turned off, having secure boot disabled)
2) The firmware containing programs that most people would find useful but stuff I cannot have. If I have the ability to uninstall it, that's okay, I can do that. But if it's stuck, like it is now, where I can only disable it, that is not okay.
3) Something being installed without my knowledge.
Our security setup checks company phones to see if they're rooted, and if they are, it marks the device as non-compliant. I can have a device as non-compliant for a few hours....but if it's marked as non-compliant for a few days, one of the larger companies we're dealing with call to ask why, and then we have to do a secure session, where they login to one of our devices, but cannot physically click anything, just look, and have us go into various software to see why it's non-compliant, and, well, it's not fun.
We had it happen once because my wife accidentally sent an email from a personal device to a in-house email address, which never got encrypted, and it triggered a security audit, which was not fun at all and I'd rather not go through that again.
Are there no bloat-ware free signed official images or is there no way for a developer to import a signing key into the device to keep secureboot enabled? Also, out of curiosity, why would running a custom firmware disable Knox? In our case, that's something we need, however, I was just curious. And if we go the route of custom firmware, is there a way to show that it's gone, or will all the custom firmware's install a fake version of Knox?
Thank you for taking the time to answer my questions. I really do appreciate it. I know how precious time can be, how busy a person can get, and I realize I have a lot of questions here, but I really need to make sure we're secure.
One of the programs we'll have on there is something called Symantec Endpoint Mobile. I am not sure if you have heard of it or not, but that provides virus protection, etc.
So CSC contains the regulatory information for my country and the providers....my phone is a Canadian phone. I thought Canada did not have Straight talk, yet, my wife's straight talk sim worked. I noticed in the recovery menu, it shows multi-csc. Does that mean my phone has the country specific stuff for more than one country? I'm wondering if I should try changing it to a US phone.
AP contains the kernel, the recovery partition, the system partition, and the bloatware, right?
BL is simply the bootloader.
If I could gain root on this phone without flashing a custom ROM or maybe somehow by just flashing something like TWRP without voiding the warranty, I could just modify the meta-data for the apps that I need to uninstall to allow them to be uninstallable, correct?
Since I went from a partial install of 7 back down to 6.0.1, my camera does not work. I'm wondering if it's because the ROM I used wasn't the correct ROM. It was the G930W8VLU2API1 ROM, minus the CSC, which was G930W8OYA2API1.
I've tried a factory reset, I've reflashed the ROM, using the non-HOME CSC, I've wiped the cache partition....still no camera. It simply says Warning Camera failed. I tried a few of the tricks I've read about on the net to fix it, but so far, no luck. Cleared the data and cache for just about every program, including the camera. I believe the problem might be because I have internet turned off right now, no sim card in, and even though I have automatic updates turned off, the phone still started to download an update.
Did Android 6.0.1 show Secure Boot status in Download mode? My wife, with the same phone, but the American AT&T unlocked carrier version (we paid full price), her's has a Secure Boot: Enabled. She's also running 8.0.0. With my 6.0.1, all there is is a Secure Download, which she also has, but no Secure Boot listed at all.
If secure boot is disabled, I should be able to flash any custom BL without tripping Knox, even if it's not signed.....right? I know with my datacenter, the bootloader changes even a bit, the servers and workstations are not booting, unless I sign the bootloader with my MAK.
**EDIT: Also, what exactly are these z3x things I see on the gsmhosting site? It's hard understanding exactly what they do based off their description because I don't think the developers native language is the same as mine. I go to z3x-team.com, and it almost looks like the device can do almost anything with the Samsung....upgrades, downgrades, unlock codes (wtf?), etc. Is it just a scam or are they worth the investment?
**EDIT2: I made a mistake. I guess there's some special Samsung Knox policy that gets applied to Samsung only devices, that configures it in some sort of way to make it compliant, so Knox has to stay.....

Magisk Root and Sparkasse PushTAN

I really want that damn Subtratum, but im afraid S-Pushtan (its a banking app) wont work, even though you have the possibility to hide the manager. Anyone have any experience with it and S-Pushtan. I dont want to lose this specific banking app hence im still not rooting.
Ocansially Pokémon go saying doesn't work on this os even though hidden, but Huntington bank app never has problem after hidden once. Even if you don't like it you can wipe your phone back to stock

Samsung S10+ Hacked by soon to be ex-wife

I need help. Phone has been hacked by my ex. All my conversations are being recorded 24hrs a day if in range of my phones microphone. Don't know how to stop it. Tried all avenues of help through work and carrier with no help provided. Appreciate any advice on what to try. Thanks.
sounds like your wife is the one getting scammed by paying someone for free apps
What I have seen though from the free apps is you can turn a mic on, find location, and take pictures. I haven't seen an app that can record everything you say within phone range 24 hrs a day. Plus after all the times I have reset my phone I have never restored it from a backup so I don't know how a free app could be on my phone.
That's way too much drama info that means nothing... I got a headache skim reading it
Change your Google account password on a secure PC.
Have the phone(s) firmware reflashed.
Be careful what you load.
Do whatever is needed to secure your PCs and data. Don't use either until proven clean.
Use only Gmail for email service and download only from trusted sources. If not sure, don't download it!
This isn't rocket science.
Thanks for the reply. Sorry, you are right, I did get carried away with my post. Just extremely frustrated after months of dealing with this issue. The only thing I haven't tried is re-flashing firmware. Thanks for the advice. I will try that.
im no laywer nor am i pretending to be
destory all her eletronics so she cant spy on your ****
so you just do a factory reset ? in stock recovery or in twrp how are you wiping ?? well theres not much you can do if your wife has phsycal access to your phone and this app is probably a system app or something so it doesent go away and if you constantly wipe your phone you cant do much
you can encrypt / passcode it but that can be bypassed with a factory reset
you should flash stock recovery
but devices seince android 5.0 lolipop have a frp lock you can ensure that a frp lock means when you do a factroy reset you have to do a google sign in for the first time only the first time tho
i would just divorce and leave her and XXXXX
Mod Edit: Edited
but this is a tech forum not a relationship advice
also you should not trust your pc either you should reinstall windows and use a ubuntu cd /dvd/usb/whatever storage media like usb hdd/ssd whatever
jesus ****ing christ this is ANDROID FORUMS NOT YAHOO ANSWERS/QUORA
rip yahoo answers ded in 20th apri 2021
blackhawk said:
That's way too much drama info that means nothing... I got a headache skim reading it
Change your Google account password on a secure PC.
Have the phone(s) firmware reflashed.
Be careful what you load.
Do whatever is needed to secure your PCs and data. Don't use either until proven clean.
Use only Gmail for email service and download only from trusted sources. If not sure, don't download it!
This isn't rocket science.
Click to expand...
Click to collapse
Thanks for the feedback. I edited my post to be less drama. I got carried away.
reflash everything even boot.img kernel also if your worried about knox relfashing stock no knox trip but whatever **** shes got on there defenitly tripped knox i would sue her divore her XXXXXX
Mod Edit: Edited
newrandomaccountbruh said:
im no laywer nor am i pretending to be
destory all her eletronics so she cant spy on your ****
so you just do a factory reset ? in stock recovery or in twrp how are you wiping ?? well theres not much you can do if your wife has phsycal access to your phone and this app is probably a system app or something so it doesent go away and if you constantly wipe your phone you cant do much
you can encrypt / passcode it but that can be bypassed with a factory reset
you should flash stock recovery
but devices seince android 5.0 lolipop have a frp lock you can ensure that a frp lock means when you do a factroy reset you have to do a google sign in for the first time only the first time tho
i would just divorce and leave her XXXXXX Mod Edit: Edited
but this is a tech forum not a relationship advice
also you should not trust your pc either you should reinstall windows and use a ubuntu cd /dvd/usb/whatever storage media like usb hdd/ssd whatever
jesus ****ing christ this is ANDROID FORUMS NOT YAHOO ANSWERS/QUORA
rip yahoo answers ded in 20th apri 2021
Click to expand...
Click to collapse
I edited the post. Got carried away. Thanks for the feedback.
newrandomaccountbruh said:
reflash everything even boot.img kernel also if your worried about knox relfashing stock no knox trip but whatever **** shes got on there defenitly tripped knox i would sue her divore her XXXXXX Mod Edit: Edited
Click to expand...
Click to collapse
That is just mean. It is just a phone. I just want it to stop. Violence towards another is never the answer. Thanks for the reply.
also what do you mean "with in mic range"
"i would rather die standing than live kneeling"
[email protected] 2021
newrandomaccountbruh said:
also what do you mean "with in mic range"
Click to expand...
Click to collapse
If I have my phone near me. If I leave in another room out of mic (microphone) range conversations are not recorded.
tmjohnson6969 said:
If I have my phone near me. If I leave in another room out of mic (microphone) range conversations are not recorded.
Click to expand...
Click to collapse
can you see an option to disable sensors in developer option if you dont see dev option go about phone software info hit build number 7 times
go to dev option quick setting developer tile click sensors off then when you slide down you will see a option to disable sensors but it also means that things like camera will not work
cameras, microphone, accelerometer, gyroscope, and more will be disabled
do you see a icon in app menu in settings like supersu or magisk or superuser or and suspicious apps
eg an app with no name and no icon try deleteing or disable thoes apps and unroot in magisk or supersu or superuser try installing a root checker as well (the one from joeykrim)
make sure that there no root access go to system status in about phone does it say offical or custom
(custom bad )
boot into download mode (look up how to on your device)
is the flash counter anything but 0
is knox warrenty status 0x0 or 0x1
(0x1 bad)
(flash counter 1 or higher bad)
reflash stock firmware download on your computer boot into download mode use odin and flash
(google for more in depth and links)
have you rooted the device yourself?
infact that mic virus u got wouldent need root perms better safe than sorry
(it might spy on you other ways with root and or presesitance using root perms)
newrandomaccountbruh said:
infact that mic virus u got wouldent need root perms better safe than sorry
(it might spy on you other ways with root and or presesitance using root perms)
Click to expand...
Click to collapse
Yeah if malware is present it could override permissions. You need to start over with a clean load.
Reflashing the firmware guarentees this; no rootkit can survive that.
newrandomaccountbruh said:
can you see an option to disable sensors in developer option if you dont see dev option go about phone software info hit build number 7 times
go to dev option quick setting developer tile click sensors off then when you slide down you will see a option to disable sensors but it also means that things like camera will not work
cameras, microphone, accelerometer, gyroscope, and more will be disabled
do you see a icon in app menu in settings like supersu or magisk or superuser or and suspicious apps
eg an app with no name and no icon try deleteing or disable thoes apps and unroot in magisk or supersu or superuser try installing a root checker as well (the one from joeykrim)
make sure that there no root access go to system status in about phone does it say offical or custom
(custom bad )
boot into download mode (look up how to on your device)
is the flash counter anything but 0
is knox warrenty status 0x0 or 0x1
(0x1 bad)
(flash counter 1 or higher bad)
reflash stock firmware download on your computer boot into download mode use odin and flash
(google for more in depth and links)
have you rooted the device yourself?
Click to expand...
Click to collapse
Phone has not been rooted. Knox status is still zero (just rechecked). I did turn off all sensors for awhile, but that got annoying. I went through all apps and did not see any suspicious apps. Used multiple apps to look for spyware with none found. When all this started my s9 went missing. Is there anyway that the phone can be cloned to another phone? She does have a friend who is a software engineer with background in apple and android os that from hearsay got caught doing the same thing to his exwife. That is why I am more interested in a way in finding how it is being done and catching them since in Texas it is illegal to record conversations as a 3rd party. I don't really care if she listens to me. Mostly it is me in my truck driving singing poorly. It is more of the how it is being done that is frustrating me. She told me once they got me by me clicking a link on facebook that was sent to me and I guess I didn't think twice about clicking it. I am usually really cautious about things like that, but I more conputer literate then phone apps literate I've learned my lesson now I guess. I will try reflashing firmware. Would rooting and flashing a diffrent ROM help do you think? Thanks for the feedback.
Get off FB... it's malware.
Reflash to the stock rom unless you don't like it. Go with the latest Android version for it if you want the most security.
Lol, you should know better by now to trust anything she says... let her eat silence.
Silence is the most sincere form of scorn.
newrandomaccountbruh said:
"i would rather die standing than live kneeling"
[email protected]
Click to expand...
Click to collapse
blackhawk said:
Get off FB... it's malware.
Reflash to the stock rom unless you don't like it. Go with the latest Android version for it if you want the most security.
Lol, you should know better by now to trust anything she says... let her eat silence.
Silence is the most sincere form of scorn.
Click to expand...
Click to collapse
You are correct. I no longer have facebook. I don't use any social media apps. I have learned my lesson the hardway.

Categories

Resources