Database Info

[Q] JTAG and getting rid of 4.3

Hello I was wondering if I could be pointed in the right direction. I was recently cursed with Samsung's knox crap because I didn't start messing with rooting until after the 4.3 update. Knox clicked and I am forever sick with 4.3. Except, I recently got a hold of a spare jtag connector from a friend. It is not a riff box it is an msp430-jtag connector. Would there be anyway way to hook this to my computer and write over 4.3 with an unlocked 4.3? Would I lose download mode or anything? I found a video of some guy decompiling 4.3 stock from a mini s4 and if you simply delete aboot.img sm1 sm2 and sm3 it fully gets rid of Knox. That is my goal with the jtag. Is there any software I can use that will read the storage? Well a jtag work in the first place or did Samsung find a way to prevent that too. Thanks!!!

bobbyofna said:
Hello I was wondering if I could be pointed in the right direction. I was recently cursed with Samsung's knox crap because I didn't start messing with rooting until after the 4.3 update. Knox clicked and I am forever sick with 4.3. Except, I recently got a hold of a spare jtag connector from a friend. It is not a riff box it is an msp430-jtag connector. Would there be anyway way to hook this to my computer and write over 4.3 with an unlocked 4.3? Would I lose download mode or anything? I found a video of some guy decompiling 4.3 stock from a mini s4 and if you simply delete aboot.img sm1 sm2 and sm3 it fully gets rid of Knox. That is my goal with the jtag. Is there any software I can use that will read the storage? Well a jtag work in the first place or did Samsung find a way to prevent that too. Thanks!!!
Click to expand...
Click to collapse
That could work on anything other than our phone model. Tampering with the bootchain at all will cause an instant hardbrick because of the locked bootloader. We have the only variant with a locked bootloader on 4.3.
We have no such thing as an unlocked 4.3 bootchain, but if you had one your idea would work perfectly. You just overwrite the original chain and it'll boot, but flashing anything currently available with a riff box except the vrucml1 bootchain will hardbrick the device.
Sent from my SCH-I535 using Tapatalk 2

To add it is not Knox that locked the bootloader. It is Qualcom code that burnt the Q-fuse on the processor making it non rewritable through that particular fuse. Only way to unlock from my understanding would be to be able to route through another fuse as there are like 4 of them. This enables Samsung to modify the bootloader a limited amount of times.

I'm still wondering if we could boot with the insecure boot loader if we "bricked" the 4.3 one then boot from sd with the insecure one. Does the debrick image hold all of the boot chain or is it just the part that seems to be easily bricked? Sure if that could work we would be dependent on the sd card but that wouldn't matter for a lot of people. I have another related question that someone might be able to answer. Is it possible to use the debrick image on a thumb drive connected with a otg cable?

ThePagel said:
I'm still wondering if we could boot with the insecure boot loader if we "bricked" the 4.3 one then boot from sd with the insecure one. Does the debrick image hold all of the boot chain or is it just the part that seems to be easily bricked? Sure if that could work we would be dependent on the sd card but that wouldn't matter for a lot of people. I have another related question that someone might be able to answer. Is it possible to use the debrick image on a thumb drive connected with a otg cable?
Click to expand...
Click to collapse
The debrick image doesn't have a bootchain. It's just a stock system image that the bootchain verifies and force boots into.
The bootchain is still present through the regular mechanism through the system checks (ie: fuses, chips) and knows it's booting a correct system image, you can't force a bootchain through an external SD card.
Sent from my SCH-I535 using Tapatalk 2

Taking it to verizon?
BadUsername said:
That could work on anything other than our phone model. Tampering with the bootchain at all will cause an instant hardbrick because of the locked bootloader. We have the only variant with a locked bootloader on 4.3.
We have no such thing as an unlocked 4.3 bootchain, but if you had one your idea would work perfectly. You just overwrite the original chain and it'll boot, but flashing anything currently available with a riff box except the vrucml1 bootchain will hardbrick the device.
Sent from my SCH-I535 using Tapatalk 2
Click to expand...
Click to collapse
youtube.com/watch?v=75DKAGNstbM
I did not mean using a bootchain I know it'll brick it I have made that mistake before and it is possible to come back from it by the way. If you watch this video he takes the current 4.3 rom and removes knox and the bootloader and reflashes it. Of course he was able to do this because he didn't trip knox in the first place which I have. But my goal with the JTAG would be to write over the memory bypassing the processor and flash a deknoxed 4.3 from there. Also I just found out that apparently some law went through which requires your carrier to unlock the bootloader for you if you take it to them and ask. Does anybody know of this? It would make sense that it says please take your phone to an authorized verizon dealer when the bootloader stops you. If that is true and I take my phone to them, would there be a way to record everything they are flashing onto my phone without hiding a usb sniffer so that we can figure out how to unlock this crap? Thanks.

bobbyofna said:
youtube.com/watch?v=75DKAGNstbM
I did not mean using a bootchain I know it'll brick it I have made that mistake before and it is possible to come back from it by the way. If you watch this video he takes the current 4.3 rom and removes knox and the bootloader and reflashes it. Of course he was able to do this because he didn't trip knox in the first place which I have. But my goal with the JTAG would be to write over the memory bypassing the processor and flash a deknoxed 4.3 from there. Also I just found out that apparently some law went through which requires your carrier to unlock the bootloader for you if you take it to them and ask. Does anybody know of this? It would make sense that it says please take your phone to an authorized verizon dealer when the bootloader stops you. If that is true and I take my phone to them, would there be a way to record everything they are flashing onto my phone without hiding a usb sniffer so that we can figure out how to unlock this crap? Thanks.
Click to expand...
Click to collapse
That law is for the sim unlock and 99% of Verizon store employees and customer service reps will have no idea how to help you with any problem.

ThePagel said:
That law is for the sim unlock and 99% of Verizon store employees and customer service reps will have no idea how to help you with any problem.
Click to expand...
Click to collapse
Are sure? because I found someone on the forums last night who said he went to verizon and they unlocked his bootloader. let me dig for it. I am definitely going to verizon tomorrow and trying for myself.

ThePagel said:
That law is for the sim unlock and 99% of Verizon store employees and customer service reps will have no idea how to help you with any problem.
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=2683469
Here the guy talks about asking verizon about the bootloader.

bobbyofna said:
http://forum.xda-developers.com/showthread.php?t=2683469
Here the guy talks about asking verizon about the bootloader.
Click to expand...
Click to collapse
He asked over a phone call, he was never given an unlocked bootloader. And his information isn't correct.
They will have no idea what you're talking about in a store, but if you can get a hold of a unlocked bootloader, you should ask for an S4 one also then head over to their forum to collect the $5000 bounty.
Cut me a small chunk for pointing you in the right direction though. I'd be happy with $200 or so.
Trust me, they aren't required to give you anything to unlock your bootloader. They are only required to unlock the phone for global use following termination of a plan, and the phone is already unlocked to do that.
Sent from my SCH-I535 using Tapatalk 2

fuse
Prdog1 I also have knox how can I go about modifying the fuse?

DJBurner said:
Prdog1 I also have knox how can I go about modifying the fuse?
Click to expand...
Click to collapse
You won't be able to do this without hardware knowledge and complex programming understanding.
Highly experienced developers are working on this (maybe) , there's no documented method on hardware modification for that process.
Sent from my SCH-I535 using Tapatalk 2

Thanks
Thank you very much
BadUsername said:
You won't be able to do this without hardware knowledge and complex programming understanding.
Highly experienced developers are working on this (maybe) , there's no documented method on hardware modification for that process.
Sent from my SCH-I535 using Tapatalk 2
Click to expand...
Click to collapse

Lock an unlocked Infinity

Has anyone figured out how to lock an unlocked infinity? Im getting frustrated with some of the lag with the stock ROM and want to try a custom ROM which I usually do with all my devices but i don't want to void my warranty because I've started experiencing some issues with my light sensor and may have to get it repaired or exchanged in the future. I'm used to being able to recover my devices to complete stock but everywhere is saying it can't be locked again.
TIA

sovereignty said:
Has anyone figured out how to lock an unlocked infinity? Im getting frustrated with some of the lag with the stock ROM and want to try a custom ROM which I usually do with all my devices but i don't want to void my warranty because I've started experiencing some issues with my light sensor and may have to get it repaired or exchanged in the future. I'm used to being able to recover my devices to complete stock but everywhere is saying it can't be locked again.
TIA
Click to expand...
Click to collapse
That is correct info you have there...
Once unlocked its unlocked for ever, as the way its done is that the unlock tool, sends a request to asus for the
unlock key. Once that is done you are unlocked, forever....
Thx Josh

lj50036 said:
That is correct info you have there...
Once unlocked its unlocked for ever, as the way its done is that the unlock tool, sends a request to asus for the
unlock key. Once that is done you are unlocked, forever....
Thx Josh
Click to expand...
Click to collapse
I guess I should be asking... has there been any work on unlocking without ASUS intervention?

sovereignty said:
I guess I should be asking... has there been any work on unlocking without ASUS intervention?
Click to expand...
Click to collapse
Not that I am aware of...Sorry

lj50036 said:
Not that I am aware of...Sorry
Click to expand...
Click to collapse
I wonder if anyone has any interest to look into this...
Thanks!

lj50036 said:
Not that I am aware of...Sorry
Click to expand...
Click to collapse
I wonder if anyone has any interest to look into this that's already out of warranty...
Thanks!

sovereignty said:
I wonder if anyone has any interest to look into this that's already out of warranty...
Thanks!
Click to expand...
Click to collapse
You'd have to get the NSA involved. They may have the means to crack that encryption key
Sent from my K00C using Tapatalk

It is possible to relock the device, but you won't get back your warranty as lj explained, so it's pointless.
The bootloader is encrypted with a device-specific secure boot key. If you want to unlock without help from Asus, you have the following theoretical possibilities:
* crack the 128-bit AES "secure boot key".
* "obtain" the Asus private key for signing your CPU serial number to create the unlock token.
* find a weakness in the Tegra's SBK implementation.
Good luck with any of these.
And I think you can forget the light sensor - mine never worked good enough to be useful.

Root without tripping Knox?

I've searched high and low and I'm not able to find a non-tripping version of root. I don't want any fancy roms just rooted stock. Help.<br/>

Nope no way to keep Knox as of now.
But the root method that's out there. Will just flash a recovery and root. It's shouldn't f change the system image. (I could be wrong but last I check.)
I like to keep Knox just in case I need to exchange the phone for any reason

Whats the best method if you have a USA AT&T note edge?

Looking for a way to root without tripping Knox as well...
Someone should start a pledge thread for it, that should get the devs interested...

Beach_Head said:
Looking for a way to root without tripping Knox as well...
Someone should start a pledge thread for it, that should get the devs interested...
Click to expand...
Click to collapse
Probably won't come for a while since not alot of devs have the phone yet.

NitroSS said:
Whats the best method if you have a USA AT&T note edge?
Click to expand...
Click to collapse
There is no current way to root the N915A. AT&T has it locked and so far no one has bothered to try to get it unlocked to achieve root.
Sent from my Samsung Note Edge using Tapatalk

In the same boat witha 915FY , willing to chip in if needed.

I'm sure I read it somewhere, just can't remember ATM....but there is a way to reactive Knox After rooting correct? I have the tmobile n915t.

strboy said:
I'm sure I read it somewhere, just can't remember ATM....but there is a way to reactive Knox After rooting correct? I have the tmobile n915t.
Click to expand...
Click to collapse
Dont think so mate... else what would be the point ? or even the hold up here ? just root and reset ?
If it were possible it woulda been announced by now i guess...

strboy said:
I'm sure I read it somewhere, just can't remember ATM....but there is a way to reactive Knox After rooting correct? I have the tmobile n915t.
Click to expand...
Click to collapse
As I understand it, KNOX flag is basically written as a "fuse". Once it's triggered, there's no going back.
And everyone, for the love of all things good and pure, AT&T and Verizon have locked bootloaders and there are NO root methods currently available. KNOX is irrelevant.
Finally, for anyone wondering about a non-KNOX-tripping method for actually ROOTABLE devices, nope. Not yet as far as I know. But why? Carriers still service phones that have the flag tripped.

jooniloh said:
As I understand it, KNOX flag is basically written as a "fuse". Once it's triggered, there's no going back.
And everyone, for the love of all things good and pure, AT&T and Verizon have locked bootloaders and there are NO root methods currently available. KNOX is irrelevant.
Finally, for anyone wondering about a non-KNOX-tripping method for actually ROOTABLE devices, nope. Not yet as far as I know. But why? Carriers still service phones that have the flag tripped.
Click to expand...
Click to collapse
In theory yes , you still get serviced but that mostly depends on the IQ of the person on the other end.
Im currently in Portugal. I took my note 3 to service and the knox was tripped . Battery Issue. They refused . I called customer service. They refused.
"If you tampered with the device, its your own fault"
I explained in other countries its still serviced , in France for example.
"this is not other countries , this is not France."
I have a 915FY now and , if possible , I would like to avoid this situation.

siriom said:
In theory yes , you still get serviced but that mostly depends on the IQ of the person on the other end.
Im currently in Portugal. I took my note 3 to service and the knox was tripped . Battery Issue. They refused . I called customer service. They refused.
"If you tampered with the device, its your own fault"
I explained in other countries its still serviced , in France for example.
"this is not other countries , this is not France."
I have a 915FY now and , if possible , I would like to avoid this situation.
Click to expand...
Click to collapse
Hmm I see. I wasn't aware of that issue. The service centers here have seen that the KNOX flag is tripped on my devices and still serviced them. All I can say is, pretty much everything that works for the note 4 (except roms) has been compatible with the edge (including root tools, TWRP, recovery-flashable mods, system file tweaks, etc.), so if any progress is made on finding a non-KNOX-tripping method, you're gonna see it on the Note 4 forums first. I'd keep an eye on that for any updates concerning your model.

I was hoping Geohots work on TowelRoot might be adapted somehow for 4.4.4 and eventually used for Note4/edge.(it stopped working for anything over 4.4.2 i was told)
I heard hes working for google now so he cant help anymore...

siriom said:
I was hoping Geohots work on TowelRoot might be adapted somehow for 4.4.4 and eventually used for Note4/edge.(it stopped working for anything over 4.4.2 i was told)
I heard hes working for google now so he cant help anymore...
Click to expand...
Click to collapse
Towelroot was only ever supposed to work on the S5. That it worked on anything else at all was chance. Anyways, it hasn't been updated in ages so don't hold your breath. If you really need root, I'd just go with one of the available methods. If you need it serviced, flash a stock ROM, go to a service center for your carrier, and act stupid. Don't start talking about root and all that. That has worked 100% of the time for me. When you took it in for service in the past (when they didn't service it) was your phone still rooted or have a custom recovery installed?

S10e knox

Hi
I bought a second hand s10e. The phone works normally and not locked to any network. The main issue is that the phone used to be a company phone and is knox locked and enrolled. I called then many times but they didn't help. The problem is that the software and security updates are disabled, oem unlock disabled and can't boot into download mode. I want to ask if there is any other way to install a fresh firmware without all this knox lock and be able to update to the latest Android available which I believe is 11. I asked some phone repair shops and they said something about MDM but it's costing too much.

Returning the phone for a full refund is the best solution...

blackhawk said:
Returning the phone for a full refund is the best solution...
Click to expand...
Click to collapse
I'm looking for a solution. That's not a solution as this website has a lot of experts. Or maybe I'm wrong !!!!

Fadihyts said:
I'm looking for a solution. That's not a solution as this website has a lot of experts. Or maybe I'm wrong !!!!
Click to expand...
Click to collapse
Lol, some of the experts here work for Samsung no doubt
Unless you have the knox account security info or can some how reflash it...
Solution #2 - replace mobo

Question Is Pixel 6a SIM unlockable on A13?

New to all of this. I used to jailbreak, unlock iPhones but am unfamiliar with this side of things. I was able to remove the passcode and Google account off the Pixel 6a which was on A13 and updated to the most recent patch (Let me know if you need instructions as that was not easy for me to find). But now I found that it is locked to AT&T which I do not have. Is it possible?

You may have bought a locked model by accident

txcoffeeguy said:
I was able to remove the passcode and Google account off the Pixel 6a which was on A13 and updated to the most recent patch (Let me know if you need instructions as that was not easy for me to find).
Click to expand...
Click to collapse
I'd be interested to learn how you did this. I'm assuming a factory reset via recovery isn't enough?

If you have bought a carrier locked device, you may need to contact them to see if it can be unlocked

Lada333 said:
I'd be interested to learn how you did this. I'm assuming a factory reset via recovery isn't enough?
Click to expand...
Click to collapse
Not sure what's allowed on the forum so dm me and I'll send you the link I used. Factory reset is not enough.

MrUrgit said:
If you have bought a carrier locked device, you may need to contact them to see if it can be unlocked
Click to expand...
Click to collapse
I bought it from a private party who will not help me.

txcoffeeguy said:
I bought it from a private party who will not help me.
Click to expand...
Click to collapse
Zounds very fishy in that case. Buying new is always safer. I got mine from bestbuy

I bought it for 4 days. And is not installed.

txcoffeeguy said:
I bought it from a private party who will not help me.
Click to expand...
Click to collapse
You could try method #2 from here:
How to Unlock a Carrier-Locked Phone: Your Guide to Mobile Freedom
If you're phone is carrier-locked, you'll need this guide to unlock it.
www.makeuseof.com
I have never had to unlock a device before, so not 100% sure it will work.