Question Knox trigger? - Samsung Galaxy S22 Ultra

Hey! So, I wanted to know what exactly trips the knox efuse:
-The unlock of the bootloader,
-The installation of a custom recovery, or
-The rooting
Also, what exactly do I lose if I trip it (aside from warranty)?
Just in case: I have a S908E
Thanks in advance

What is a Knox Warranty Bit and how is it triggered?
Features lost when Rooting?
I asked in one of the root threads and didn't get a reply. From looking through the existing threads I understand that you lose samsung pay and the hidden folder feature. I can live with those but is there any other features lost when unlocking...
forum.xda-developers.com

affigne said:
Hey! So, I wanted to know what exactly trips the knox efuse:
-The unlock of the bootloader,
-The installation of a custom recovery, or
-The rooting
Also, what exactly do I lose if I trip it (aside from warranty)?
Just in case: I have a S908E
Thanks in advance
Click to expand...
Click to collapse
I believe it's the rooting.

In my case the moment, I flashed something that hadn't the official signature (TWRP), it tripped.

blackhawk said:
What is a Knox Warranty Bit and how is it triggered?
Features lost when Rooting?
I asked in one of the root threads and didn't get a reply. From looking through the existing threads I understand that you lose samsung pay and the hidden folder feature. I can live with those but is there any other features lost when unlocking...
forum.xda-developers.com
Click to expand...
Click to collapse
You lose anything that relies on Knox. Samsung Wallet, Samsung Pass, Samsung Health, most banking apps, Secure Folder, and IT management tools like Intune,

So we can agree that unlocking the bootloader doesn't trip knox, right?

Correct.

affigne said:
So we can agree that unlocking the bootloader doesn't trip knox, right?
Click to expand...
Click to collapse
Probably not. It's a Snapdragon right? Notoriously hard to root; what's to be gained by unlocking the bootloader?
I leave the firmware alone and use work arounds. It's to the point where I won't even do any upgrades or updates especially OTA. My devices are fulfilling their mission and as such are too valuable to risk losing. Stock loads once optimized can run well, be very stable and long lived with little maintenance.
This N10+ N975U/Pie current load is over 2 yo, still running like a bat out of hell. There was a time it was a stuttering hot running hog... a real pig. I conservatively disabled about 80 apks, mucked extensively with the settings and used a few third party apps for work arounds, to enhanced operation and security. This is what a stock Samsung is capable of.
My other N975U1 runs on 10, it's setup profile is nearly identical in spite of the many dozens of new small Samsung system apks, I left almost all untouched. If it's not resource hog, or a security risk, or crapware like Device Wellness crowding my settings menu I leave it be. I started with the worst offenders and worked my way down.
Android 11 and especially 12 will offer some new very annoying challenges which is why I bypassed them entirely. I loathe the bootloader rollback protection that locks you into 10 and 11 on my device. Moral of the story, look very carefully before you leap. Lol, let Mikey try it first. Where there's little to gain there's a lot to lose.
I still prefer the simplicity, functionality and usability of 9. However I haven't evaluated camera image quality of the 10 variant; it's more of pain to use though is my first impression. Other than possible that and better dark mode there are few tangible improvements and some annoying downsides that will need workarounds.
Scoped storage, some of the rude surprises.
Android 12, dirty pipe... older kernels not effected.
Android 13, if all goes to plan...

blackhawk said:
Probably not. It's a Snapdragon right? Notoriously hard to root; what's to be gained by unlocking the bootloader?
I leave the firmware alone and use work arounds. It's to the point where I won't even do any upgrades or updates especially OTA. My devices are fulfilling their mission and as such are too valuable to risk losing. Stock loads once optimized can run well, be very stable and long lived with little maintenance.
This N10+ N975U/Pie current load is over 2 yo, still running like a bat out of hell. There was a time it was a stuttering hot running hog... a real pig. I conservatively disabled about 80 apks, mucked extensively with the settings and used a few third party apps for work arounds, to enhanced operation and security. This is what a stock Samsung is capable of.
My other N975U1 runs on 10, it's setup profile is nearly identical in spite of the many dozens of new small Samsung system apks, I left almost all untouched. If it's not resource hog, or a security risk, or crapware like Device Wellness crowding my settings menu I leave it be. I started with the worst offenders and worked my way down.
Android 11 and especially 12 will offer some new very annoying challenges which is why I bypassed them entirely. I loathe the bootloader rollback protection that locks you into 10 and 11 on my device. Moral of the story, look very carefully before you leap. Lol, let Mikey try it first. Where there's little to gain there's a lot to lose.
I still prefer the simplicity, functionality and usability of 9. However I haven't evaluated camera image quality of the 10 variant; it's more of pain to use though is my first impression. Other than possible that and better dark mode there are few tangible improvements and some annoying downsides that will need workarounds.
Scoped storage, some of the rude surprises.
Android 12, dirty pipe... older kernels not effected.
Android 13, if all goes to plan...
Click to expand...
Click to collapse
I get you. Ever since I've got my S7 I haven't rooted any other phone I had (s10+ SD and this S22U SD as well). This is why I am not updated on the knox thing - Last time I rooted a phone was a S5 exynos). But when I searched for rooting my s22u I stumbled across this knox thing. Researched a bit but still couldn't find the answers to my questions, hence this thread.
Now don't get me wrong, I'm currently not too sold in the idea of rooting my s22u due to the benefits still not outweighing the caveats, but I'm not entirely shut down from the idea. Custom recovery, full access to my folders (I hate scoped storage), enhanced android auto experience... these are some of the things I'd like to have, but then tripping the knox means void warranty, knox-relying apps not working, encryption kissed bye-bye, and half-priced trade-in for the next S23U, if any (I'd like to upgrade it just so I can enjoy full SoC power without the known heating issues of this phone, plus more powerful chip). So, kind of in a dilemma right now.

affigne said:
I get you. Ever since I've got my S7 I haven't rooted any other phone I had (s10+ SD and this S22U SD as well). This is why I am not updated on the knox thing - Last time I rooted a phone was a S5 exynos). But when I searched for rooting my s22u I stumbled across this knox thing. Researched a bit but still couldn't find the answers to my questions, hence this thread.
Now don't get me wrong, I'm currently not too sold in the idea of rooting my s22u due to the benefits still not outweighing the caveats, but I'm not entirely shut down from the idea. Custom recovery, full access to my folders (I hate scoped storage), enhanced android auto experience... these are some of the things I'd like to have, but then tripping the knox means void warranty, knox-relying apps not working, encryption kissed bye-bye, and half-priced trade-in for the next S23U, if any (I'd like to upgrade it just so I can enjoy full SoC power without the known heating issues of this phone, plus more powerful chip). So, kind of in a dilemma right now.
Click to expand...
Click to collapse
I hear you. Not even sure you can root it. For my N10+'s because they are Snapdragon's the only way to root them is giving a 3rd party vendors complete access to the device to unlock the bootloader, I believe. If that service is even available for the S22U yet. Do know 100% as this is a passing curiosity for me so I haven't looked that hard. I doubt Samsung have made it any easier in the last 3 years especially for the Snap variants.
You can use adb edits to tone it down a bit. Not sure my favorite package disabler works on 12, someone told me it didn't. Again that's a passing curiosity because I have no plans to upgrade these older phones unless they would run better, which I highly doubt.

Related

To Root, or not to Root?

Right, I'm getting sick of waiting for the official JellyBean update for my S2, will it be worth it for me to root the fone myself? If so, how do I go about doing it?
Sent from my GT-I9100 using xda app-developers app
Yes it is worth it. Check the international s2 forums and search it up.
Sent from my SGH-T999 using xda app-developers app
Yes it's definately worth it to root. A little risky at first but if you get rooted, your home free and will be loading custom roms almost daily. Many apps will only run on rooted phone. Go for it!
mr
yes it`s worth it.so you can install custom roms.good luck.
It's only "worth it" if you have a reason to.
It's like... "is it worth buying a 30 gallon aquarium for $10" ? Sure, if you actually want a 30 gallon aquarium, it would be - but if you don't, it's just going to sit there unused and taking up space (and in the case of root access, opening up potential vulnerability).
Some people are flash-happy, but I only update mine maybe every few weeks because it's kind of a pain. And I only rooted and flashed a custom ROM on my tablet because it's no longer supported by the manufacturer - meaning a custom ROM was the ONLY way to get updates. I rooted my phone because I wanted to install Google Wallet and that required some work-arounds since my carrier is blocking it.
If you get into unofficial ROMs of updated Android versions, unless it's a leak, there are often problems - various things won't work, bugs, et cetera. It can still be fun, but don't expect it to be perfect.
Find something that you want to do with your device that requires root access and then worry about it.
Banksy1892 said:
Right, I'm getting sick of waiting for the official JellyBean update for my S2, will it be worth it for me to root the fone myself? If so, how do I go about doing it?
Sent from my GT-I9100 using xda app-developers app
Click to expand...
Click to collapse
If you own an Android device, chances are you’ve probably heard of the term “rooting” or “rooted.” If you have and are wondering if it’s for you, this post is perfect, as we break down the major pros and cons of rooting your Android smartphone.
Before we go any further though, what exactly is “rooting”? Rooting refers to gaining access to the "root" user or command prompt of your Android phone. Root access gives users full access to the device and allows for other low-level tasks to be run. Rooting an Android phone is similar to "jail breaking" an iPhone or the "unlocking" of a Windows Phone.
When you root your Android device, you gain access to the entire file system, with full admin rights. You can customize your own boot image, create a full backup of your phone, or install a full-blown Linux distro. Basically, you can do whatever you want.
So, should you root your phone? For me, the answer to that question is a resounding yes, but before you decide, read on to see our list of the major pros and cons of rooting.
Pros of Rooting
Some of the best reasons to root your Android phone include:
1. "Tethering" your 4G/3G internet connection to a laptop computer or tablet via USB cable, Hotspot or Bluetooth. While I don’t recommend this, you will essentially be able to tether for free without paying your carrier a fee.
2. Installing custom themes, mods, and ROMS. This is probably the reason most people root their phone. The ability to deeply customize your own device and upgrade software is very appealing to a lot of rooters.
3. Backing up all the data and apps on the device.
4. The ability to install any application or game, including those "blocked" or Tegra-only games.
5. The ability to underclock the processor to conserve power. This is huge for a lot of people as Android devices are real battery hogs. I have been able to squeeze out days of battery life on a medium-sized battery by underclocking, which is pretty significant.
6. The ability to remove bloatware from your carrier-branded Android device. We all know that carriers love putting quite a bit of crap on their phones and rooting is one way to get rid of it.
Cons of Rooting
Some of the major reasons not to root your Android device include:
1. If the rooting process fails you may permanently "brick" your phone, rendering it unusable for anything other than, well, a brick. Basically, your phone will be useless.
2. Rooting your phone typically voids any manufacturer and carrier warranties. This is pretty crappy, honestly, but some OEMs won't cover certain things. It is really up to the manufacturer. You could lose out big, though, if something major breaks and you have to pay the full repair price.
3. Other drawbacks are more specific to what is done after the device is rooted, such as burning out your smartphone CPU due to overclocking, wearing out the SD card prematurely and burning out pixels in the screen. Additionally, the potential monetary costs that your carrier might apply if they see you've downloaded several gigs of data to your laptop could be big.
4. Rooting usually causes general instability of your Android smartphone. This is a given, as you are basically beta testing modifications and ROMS before they become daily drivers. Expect great performance, but a lot of bugs.
So, is Rooting really for You?
If you're a hacker or tinkerer and don’t mind bugs, I’d say yes. If you’re not, I’d say hold off and make sure it’s really what you want. You must remember that with most phones, once you root, you can’t go back. It is very difficult, in most cases, to completely reset your device to factory conditions, which is definitely something to consider before you decide.
However, if you’re like me--happy with your device as is, but just love pushing the envelope--I'd say wait until your warranty expires. After your warranty runs up, which is usually a year after purchase, there is really nothing to lose.
If you have any additional pros or cons to rooting, leave them in the comment below.
If your warranty is over, definitely root.
Galaxy s2 is a pretty safe and easy device to flash. No need to mess with bootloaders and all. There are many guides in the forum, check them out. If something does go wrong, you will most probably find the solution in this forum itself.
You might might end up waiting indefinitely for the official update for your country from samsung. Flashing it yourself will keep you up to date.
But its time consuming if you are new to all this. There is a LOT to read. I know because I was there. It was after a lot of reading that I felt confident enough to root my phone. But now I flash a little bit to often!
Try a custom ROM based on the latest official samsung. I use NeatROM Lite 4.3, based on LSD. Stable, fast and bloatware free. There are a lot of them, pick the one that suits your need. Or if you're feeling adventurous, try most of them like I did!
Help With Rooting My Verizon Galaxy S3
I Am New To Rooting And I Would Like To Know If It's At All Possible To Install Android 4.2 On My Verizon Galaxy S3, I Feel My Phone Is Very Sluggish And I Would Like To Uninstall All The Bloatware On The Phone. Any Positive Help Would Be Greatly Appreciated Thanks In Advance!
Root
I was feeling the same way on my Atrix HD. Now i am glad i did it, its worth doing, you have greater access to apps, programs, and other things. IT was also simple to me.
#newbie
Harley Malvado said:
I Am New To Rooting And I Would Like To Know If It's At All Possible To Install Android 4.2 On My Verizon Galaxy S3, I Feel My Phone Is Very Sluggish And I Would Like To Uninstall All The Bloatware On The Phone. Any Positive Help Would Be Greatly Appreciated Thanks In Advance!
Click to expand...
Click to collapse
Google is your friend, try using it.
Root!!!! I rooted my s2 the first day of having it. Best thing ever. I only update every 2 months or so, make sure bugs are out. I am on ga10 right now which 4.1.2. Even did it to the wife's phone. Original software is not good and slow updates. I am planning on rooting whatever new I get.
definetely root, because with root you can use many hidden capabilities like reverse tethering, free wifi tethering and so on

[Q] Knox, root and "permanent"

Hi All,
I'm reading that root can trip knox, having never owned a Galaxy since the S2 I'm not overly familiar with knox but I've read about what it does.
What is bothering me here is that there seems to be a suggestion that once knox is tripped, that's it. There's no way to untrip it even when flashing a stock factory image again via odin?
Firstly, is this correct?
I'm worried about resale value to the point that I might not care about mobile payments etc, but others might, so a tripped knox could affect value.
If the above is correct I might cancel my pre order, I need root but I don't want a phone that's got limited resale either.
TheBlueRaja said:
What is bothering me here is that there seems to be a suggestion that once knox is tripped, that's it. There's no way to untrip it even when flashing a stock factory image again via odin?
Click to expand...
Click to collapse
Yes that is correct. Once the Knox flag is tripped you can not reverse it.
I don't think it has been confirmed yet that Knox flag breaks Samsung Pay. From what I have read it breaks software dependant on Knox security, ie the BYOD type apps. They use it as an indicator your device is insecure, so It seems reasonable to assume Pay would break too.
Damn it, What a stupid thing to do.
I can understand it being tripped if you are rooted, but to make it permanent if the situation is reverted is ridiculous.
Thanks for the info, I'll hold out a few more days to see what develops just in case, but I think I'm going to cancel my preorder as I need root but I also have to consider selling it on eventually.
Stupid, stupid decision. :crying:
TheBlueRaja said:
Thanks for the info, I'll hold out a few more days to see what develops just in case, but I think I'm going to cancel my preorder as I need root but I also have to consider selling it on eventually.
Click to expand...
Click to collapse
hey, why do you need rooting your phone?
I thought the same way but now I'm going to use adaway with setting up proxy settings in my wifi and mobile apn connections.
The only thing I should need root for is Titanium Backup, but I think with Helium (by ClockworkMod) backups should be performed easily
eSportler said:
hey, why do you need rooting your phone?
I thought the same way but now I'm going to use adaway with setting up proxy settings in my wifi and mobile apn connections.
The only thing I should need root for is Titanium Backup, but I think with Helium (by ClockworkMod) backups should be performed easily
Click to expand...
Click to collapse
Its more than Adaway / Titanium backup, its removing Facebook, Instagram and Skype, which i don't use and or want, being able to run Xposed and root explorer so that i can use MY phone the way I want it without permanently affecting the resale value even if its returned to stock.
Look at it this way, I have a lovely PC for you - top of the line, fast as hell, lots of memory, premium price, but im going to install Windows 8 on there and a bunch of FREE apps , only im going prevent you from removing them, make sure you cant put Linux or Windows 7 or Windows 10 on there until i say so, prevent you from making any change to the Windows directory otherwise we'll stop you from buying things PERMANENTLY and void your warranty on the hardware so that you'll not be able to sell it on. EVEN IF you factory reset it with my software....
Its a shame as i REALLY wanted this phone, but it looks like it may not be for me unless something crops up with regard to KNOX and root.
TheBlueRaja said:
Its more than Adaway / Titanium backup, its removing Facebook, Instagram and Skype, which i don't use and or want, being able to run Xposed and root explorer so that i can use MY phone the way I want it without permanently affecting the resale value even if its returned to stock.
Click to expand...
Click to collapse
I'm absolutly with you.
For me it's not a problem because I'm using Facebook, Instagram and Skype. Didn't recognized that they're preinstalled... sry^^
Of course I prefer using the phone the way I want, but it's not as important to me as loosing the warranty. Sure this is quite stupid that Samsung wants to tell us how to use their phone.
If mobile payment will still works with triggered Knox, I'll definetivly root my S6 Edge and maybe try to slim down the stock Rom like I did with my Eragon Rom for the HTC One M7
eSportler said:
I'm absolutly with you.
For me it's not a problem because I'm using Facebook, Instagram and Skype. Didn't recognized that they're preinstalled... sry^^
Of course I prefer using the phone the way I want, but it's not as important to me as loosing the warranty. Sure this is quite stupid that Samsung wants to tell us how to use their phone.
If mobile payment will still works with triggered Knox, I'll definetivly root my S6 Edge and maybe try to slim down the stock Rom like I did with my Eragon Rom for the HTC One M7
Click to expand...
Click to collapse
Yeah - its a shame - hopefully you can still use it, time will tell.
If root comes out without KNOX trigger i'll be all over this - might be too late for day 1 though - i suppose i'll just have to be patient and keep an eye on it.
In the mean time, i'll keep my preorder until the 5th or so then cancel unless something comes up - damn shame though - still i've got my HTC One m8 keeping me happy for now.
There hasn't been solution for KNOX for so long, that it's very hard to imagine that there will ever be one.
I hate KNOX so much, I don't think I will ever purchase another Samsung phone. This is not an absolute statement of course, however it is rather so.
JuniorGG said:
There hasn't been solution for KNOX for so long, that it's very hard to imagine that there will ever be one.
I hate KNOX so much, I don't think I will ever purchase another Samsung phone. This is not an absolute statement of course, however it is rather so.
Click to expand...
Click to collapse
If you have root couldn't xposed just hook that call and return KNOX=True whenever queried? I've seen something similar in the past to make Google wallet work with root and without the secure element it required.
Chad
JuniorGG said:
There hasn't been solution for KNOX for so long, that it's very hard to imagine that there will ever be one.
I hate KNOX so much, I don't think I will ever purchase another Samsung phone. This is not an absolute statement of course, however it is rather so.
Click to expand...
Click to collapse
The thing is, Knox isn't just going to be a Samsung thing, after all its a Samsung and Google collaboration and i believe and it will end up spreading. To be honest, i've no objection and it think its a good idea - HOWEVER
I do think the real problem here is that IF the phone is returned to stock it should reset the KNOX flag back to being unset. Simple, everyone is happy.
If i choose to root then fair enough, trip knox as the phone isn't as secure as it should be - i don't expect to have root access or Admin privileges on my work PC normally and if i try to work round it there are logs to indicate that.
However, i DO expect to have it on my OWN computer and without the threat of the hardware being handicapped should i wish to sell it on, that's just wrong.
TheBlueRaja said:
The thing is, Knox isn't just going to be a Samsung thing, after all its a Samsung and Google collaboration and i believe and it will end up spreading. To be honest, i've no objection and it think its a good idea - HOWEVER
I do think the real problem here is that IF the phone is returned to stock it should reset the KNOX flag back to being unset. Simple, everyone is happy.
If i choose to root then fair enough, trip knox as the phone isn't as secure as it should be - i don't expect to have root access or Admin privileges on my work PC normally and if i try to work round it there are logs to indicate that.
However, i DO expect to have it on my OWN computer and without the threat of the hardware being handicapped should i wish to sell it on, that's just wrong.
Click to expand...
Click to collapse
The problem, from a security perspective, is that there is currently no way to ensure that a phone returned to stock is secure.
Samsung decided from that point to just say once the phone is compromised... that's it. Certain features of Knox disable and, if it's your carrier's policy, the warranty may be void.
But let's be honest from that point as well. Rooting, in most contracts and terms of use, voids the warranty anyhow.
I think many have taken that for granted and don't realize that it can't be in a secure environment.
garwynn said:
The problem, from a security perspective, is that there is currently no way to ensure that a phone returned to stock is secure.
Click to expand...
Click to collapse
Why? I don't see how a phone flashed with Odin using a ROM with a verified cryptographic signature cant be deemed secure? Check this - unset KNOX...
This is like saying that once i've installed Ubuntu on a "Windows" laptop it can no longer be deemed secure and while we are at it, lets fry a hardware fuse?
We are SOFTWARE rooting the phone here, not hardware hacking.
I'm actually curious as to the legality of it as well as they are disabling a part of your phone permanently and on purpose because i choose to run a different OS than the one supplied, but i'm no lawyer and there's probably a loophole or a law allowing it somewhere.
TheBlueRaja said:
Why? I don't see how a phone flashed with Odin using a ROM with a verified cryptographic signature cant be deemed secure? Check this - unset KNOX...
This is like saying that once i've installed Ubuntu on a "Windows" laptop it can no longer be deemed secure and while we are at it, lets fry a hardware fuse?
We are SOFTWARE rooting the phone here, not hardware hacking.
I'm actually curious as to the legality of it as well as they are disabling a part of your phone permanently and on purpose because i choose to run a different OS than the one supplied, but i'm no lawyer and there's probably a loophole or a law allowing it somewhere.
Click to expand...
Click to collapse
What you may be doing is granting software access to root and you may only use root to modify things at a software level.
But you have to keep in mind that's not the only thing root access can do.
It's perfectly legal and I'll even wager they're part of the DoD specification that both they and Apple want to sell to the government.
You have to consider it from a worst case scenario. If a device has been modified in any way, how can they assure it's been reset 100% completely back to stock... both at a hardware, firmware and software level?
Without physically inspecting the phone, they can't - which is why I think this is the way it is.
The Knox team put out a blog entry a while ago about this topic, noting it's a good balance between ensuring security and allowing non-business users to root the device if they want to.
One other note: I don't know enough about the Exynos devices past N2 to say if they've fixed it... but the Note 2's Knox flag was not an e-fuse and could be reset.
garwynn said:
What you may be doing is granting software access to root and you may only use root to modify things at a software level.
But you have to keep in mind that's not the only thing root access can do.
It's perfectly legal and I'll even wager they're part of the DoD specification that both they and Apple want to sell to the government.
You have to consider it from a worst case scenario. If a device has been modified in any way, how can they assure it's been reset 100% completely back to stock... both at a hardware, firmware and software level?
Without physically inspecting the phone, they can't - which is why I think this is the way it is.
The Knox team put out a blog entry a while ago about this topic, noting it's a good balance between ensuring security and allowing non-business users to root the device if they want to.
One other note: I don't know enough about the Exynos devices past N2 to say if they've fixed it... but the Note 2's Knox flag was not an e-fuse and could be reset.
Click to expand...
Click to collapse
Hmm..
Keep in mind here i'm not suggesting apps requiring KNOX are made available whilst rooted like Samsung pay etc, only that the KNOX bit is reset if the phone is flashed back to factory defaults using Samsungs own Odin program and a cryptographically signed firmware. If at that point the phone is rooted again, it would expect it to re-trip KNOX just like it did the first time.
But, lets play a game, lets say i gain root, KNOX bit set and i cant use KNOX apps. I then use that root to make modifications to firmware on the device somehow, which is what i think your insinuating above, not necessarily the Android System partition, maybe the modem firmware (even though its closed source) or something else, for whatever purpose.
IF you have that level of knowledge of the phones hardware then i don't think it would be too much of a stretch to suggest masking the KNOX bit as set would be too hard either, maybe by intercepting the system call to check its status etc but even then when you say:-
"If a device has been modified in any way, how can they assure it's been reset 100% completely back to stock, both at a hardware, firmware and software level"
The firmware and software is taken care of by Odin, that does both, say we did modify the modem firmware above, Odin would write right over it with a VERIFIED image wouldn't it?
Whether you have root or not, you cant do anything about somebody hardware hacking, that's a whole different ball game, if you hacked the hardware you could just change to always respond as the KNOX bit not being set but that would be low level stuff way beyond what pretty much anyone here could do.
Would be interested in that blog post if you have a link - I just don't see this as anything more than a way to discourage more people from rooting.
TheBlueRaja said:
Hmm..
Keep in mind here i'm not suggesting apps requiring KNOX are made available whilst rooted like Samsung pay etc, only that the KNOX bit is reset if the phone is flashed back to factory defaults using Samsungs own Odin program and a cryptographically signed firmware. If at that point the phone is rooted again, it would expect it to re-trip KNOX just like it did the first time.
But, lets play a game, lets say i gain root, KNOX bit set and i cant use KNOX apps. I then use that root to make modifications to firmware on the device somehow, which is what i think your insinuating above, not necessarily the Android System partition, maybe the modem firmware (even though its closed source) or something else, for whatever purpose.
IF you have that level of knowledge of the phones hardware then i don't think it would be too much of a stretch to suggest masking the KNOX bit as set would be too hard either, maybe by intercepting the system call to check its status etc but even then when you say:-
"If a device has been modified in any way, how can they assure it's been reset 100% completely back to stock, both at a hardware, firmware and software level"
The firmware and software is taken care of by Odin, that does both, say we did modify the modem firmware above, Odin would write right over it with a VERIFIED image wouldn't it?
Whether you have root or not, you cant do anything about somebody hardware hacking, that's a whole different ball game, if you hacked the hardware you could just change to always respond as the KNOX bit not being set but that would be low level stuff way beyond what pretty much anyone here could do.
Would be interested in that blog post if you have a link - I just don't see this as anything more than a way to discourage more people from rooting.
Click to expand...
Click to collapse
Blog entries:
https://www.samsungknox.com/en/blog/about-cf-auto-root
https://www.samsungknox.com/en/blog/samsung’s-official-response-“towelroot”
https://www.samsungknox.com/en/blog...ox-enabled-devices-and-knox-warranty-void-bit
There are many, many more on the site, just use the search keyword root.
But that's the gist of it - they understand that some may want root for simpler reasons.
Others may want it for more nefarious ways, like trying to access the keys within the TPM.
The end result sucks for consumers; but as a IT admin I can tell you I wouldn't trust a device with sensitive corporate data if it has been rooted... ever.
Thanks very much, I'll take a look when I get a chance later.
Anyone have an idea which carriers enforce the Knox tripping for repair?
Although this looks like a great device, if the Knox trip invalidates warranty, you may be very angry if lets say the usb port or power button malfunctions and repair is not covered.
Might as well buy a Note 4 exynos since apparently warranty is not valid in usa.
bjrmd said:
Anyone have an idea which carriers enforce the Knox tripping for repair?
Although this looks like a great device, if the Knox trip invalidates warranty, you may be very angry if lets say the usb port or power button malfunctions and repair is not covered.
Might as well buy a Note 4 exynos since apparently warranty is not valid in usa.
Click to expand...
Click to collapse
Technically the US has a law, the Magnuson-Moss Warranty Act, which should limit manufacturers voiding of warranties to that damage which can reasonably be blamed on the consumer. (for example, rooting your device shouldn't void the warranty for a defective power button) However, manufacturers usually claim the opposite here and I'm not aware of successful legal challenges.
Looks like sprint at least is ok with it
http://forum.xda-developers.com/showthread.php?t=2674884
TheBlueRaja said:
Its more than Adaway / Titanium backup, its removing Facebook, Instagram and Skype, which i don't use and or want, being able to run Xposed and root explorer so that i can use MY phone the way I want it without permanently affecting the resale value even if its returned to stock.
Look at it this way, I have a lovely PC for you - top of the line, fast as hell, lots of memory, premium price, but im going to install Windows 8 on there and a bunch of FREE apps , only im going prevent you from removing them, make sure you cant put Linux or Windows 7 or Windows 10 on there until i say so, prevent you from making any change to the Windows directory otherwise we'll stop you from buying things PERMANENTLY and void your warranty on the hardware so that you'll not be able to sell it on. EVEN IF you factory reset it with my software....
Its a shame as i REALLY wanted this phone, but it looks like it may not be for me unless something crops up with regard to KNOX and root.
Click to expand...
Click to collapse
I agree. My last Samsung was a note 2 which knox wasn't a factor and not a big push then. I didn't got to any Samsung's after that due to knox.
I just want root for the reason's you do and edit the phone's density.
Its a shame that we cannot just flash back to stock and "close things up" per say if we want to sell it or have a non root related warranty issue.
Knox is mainly geared toward the business side , so why not make Knox activated by a Admin when the phone is to be used for business where the security is needed. And leave it un-activated for the rest of us.
And i would think the ratio of people rooting vs people not rooting (nor even knowing what it is) is so slim that allowing it wouldn't cause a pandemic in warranty claims.
I know before i root anything i make sure all my points are covered and there are processes in place to un-brick a device. Which i haven't had to unbrick a device since my Moto X or OG Droid.
---------- Post added at 11:13 AM ---------- Previous post was at 10:28 AM ----------
bjrmd said:
if the Knox trip invalidates warranty, you may be very angry if lets say the usb port or power button malfunctions and repair is not covered.
Click to expand...
Click to collapse
I agree +1

Feb 2016 - any likelihood of Android 5.0.2?

I am considering buying a new S6 in the UK. I am interested in root but reluctant to trip KNOX in case I need to return the phone.
So PingPongRoot would be ideal but of course it needs Android < 5.1.1. However as far as I can tell 5.1.1 has been out for 6 months or more.
Is there any likelihood of getting hold of a phone with 5.0.2 at this stage? Mainstream websites selling the S6 don't seem to specify the exact version. Of course there is eBay, but I am reluctant to buy a non-official phone as then I don't have a manufacturer guarantee anyway.
So I guess I am out of luck - root without KNOX is no longer available to new buyers. However if anyone has any good ideas I would certainly appreciate it.
Thanks
You could use the engineering bootloader. That's what I've been doing since release. However I don't know if it works from 5.1.1 to the 5.0.2 engineering bootloader. This is the only one that was leaked for the international version. Ymmv!
Just search engineering bootloader s6*
Edit: You cannot use the fingerprint scanner while on 5.1.1 because it's incompatible with 5.0.2, but other than that it's a fine solution and no Knox tripping ☺
@Derduden good suggestion thanks. It's certainly useful to have the engineering bootloader available as an option.
I not sure if I'll try it as there are, as you say, some restrictions and complications. Maybe I'll just accept the KNOX trip. Or maybe all this hassle with KNOX is enough to make me pick a different phone that is more friendly to rooters
Adam_PS said:
@Derduden good suggestion thanks. It's certainly useful to have the engineering bootloader available as an option.
I not sure if I'll try it as there are, as you say, some restrictions and complications. Maybe I'll just accept the KNOX trip. Or maybe all this hassle with KNOX is enough to make me pick a different phone that is more friendly to rooters
Click to expand...
Click to collapse
Is there a reason why you want to root the device? If you are the type that flashes alot I would not get this phone.
Sent from my SM-G920T using Tapatalk
I brought a phone in to a Samsung service center with Knox Tripped, water damage, and a cracked glass back. They fixed the water damage for me for free, and Knox wasn't a problem.
@WolfsFang My reasons for root are:
Privacy/permission control: Xprivacy/app ops/cyanogen built-in
AdBlock (yes I know there are non-root options, but not as good IMO)
Good backups: Titanium and Nandroid
Firewall to control what apps get WiFi/4G
Maybe other root only tweaks, xposed apps etc
I might flash a ROM once at some stage and leave it forever. Not flashing a lot. A guess the ROM can lose some functions with Samsung closed drivers. I think I saw a thread about it but lost it now. Maybe the high res camera?
I would definitely be interested in suggestions for a similar phone . I have just created myself a post over on the device suggestion thread.

bootloader.

Been seeing development arising for the s8 and + Sammy devices and root has been achieved and mods can be applied. The question that keeps rolling through my head is why is the S8 and the SD 835 such a hard one to crack as far as being unlocked for custom recovery, mods, roms, performance tweaking. I'm just curious to why this unlock is unachievable and where and what stops it from happening. To me having TWRP installed is a huge safety net and I'll be honest I miss having it. Maybe someone can enlighten me to why this is such a pain in the arse to achieve.
fastjohnson said:
Been seeing development arising for the s8 and + Sammy devices and root has been achieved and mods can be applied. The question that keeps rolling through my head is why is the S8 and the SD 835 such a hard one to crack as far as being unlocked for custom recovery, mods, roms, performance tweaking. I'm just curious to why this unlock is unachievable and where and what stops it from happening. To me having TWRP installed is a huge safety net and I'll be honest I miss having it. Maybe someone can enlighten me to why this is such a pain in the arse to achieve.
Click to expand...
Click to collapse
I know what you mean man! It used to be the other way around I'm up in Canada and we've never had locked bootloaders until this phone came around. It's crying shame that you can't use any other Rom except for what it comes with.
Right I'm sure eventually it'll get unlocked because you have 4 phones that are identical in hardware and the only difference is what the carrier has put in it. Then you have the international version that can be unlocked and they've got development for that version. I'm sure there's way to many smart cookies on here to not happen. They've achieved root and all the other goodies. It'll happen just takes time.
fastjohnson said:
Right I'm sure eventually it'll get unlocked because you have 4 phones that are identical in hardware and the only difference is what the carrier has put in it. Then you have the international version that can be unlocked and they've got development for that version. I'm sure there's way to many smart cookies on here to not happen. They've achieved root and all the other goodies. It'll happen just takes time.
Click to expand...
Click to collapse
I doubt it ever will be unlocked. The S7 still hasn't been unlocked despite sharing the same hardware across carriers in the US. Damn efuse and secure boot. The other issue is that we wouldn't really have source to do anything and it would be an uphill struggle to get anything substantial.

Question Where are all the rom for the s21+

Hello,
Long time i didn t buy a new phone ( i am still on s9+) and there where a lot of rom for the s9+, but doesn t seem to find them for the s21+.
Where are they ?
I believe more people aren't interested to root, unlock bootloader and create custom roms. One of reasons you lost warranty, secondly you lost google pay, samsung pay, secure folder etc. No Updates OTA. And many more. Yes you can fix some of them by custom kernel or Magisk Hide etc. And android in nowadays is enought good. So are you interested in this?
@Itadiki What are you missing from OneUI? What would you want from a custom ROM that you don't have in the official ones?
As @Nettwerk was saying, nowadays OEM Android is good enough even for most of the people that in the past would run a custom ROM. So custom ROMs make little to no sense. Put the disadvantages on top (like loss of warranty or functionalities) and you get the current situation.
@Nettwerk My s9 was rooted and I still had access to google pay. We don t have samsung pay and never used secure folder but I don t see the reason why it would not work
As For @daniel_loft The same reason I wanted my all other devices rooted. Faster speed, no bloatware, optimization in general, and discover a lot of possibilities I didn t think about with all rooted software than can customize everything.
I can root the device myself, Remove the bloatware, install xposed framework and lots of other tools myself. But I am lazy, and not as knowledgable as the excellent people who spend hours and hours on giving us a way better rom than the stock one.
Yes the loss of warranty is a risk I am willing to take.
Secure folder checks knox. If efuse is trigered than it doesn't work. If I'm not wrong.
daniel_loft said:
@Itadiki What are you missing from OneUI? What would you want from a custom ROM that you don't have in the official ones?
As @Nettwerk was saying, nowadays OEM Android is good enough even for most of the people that in the past would run a custom ROM. So custom ROMs make little to no sense. Put the disadvantages on top (like loss of warranty or functionalities) and you get the current situation.
Click to expand...
Click to collapse
Custom roms are always a good option , they lead to many innovations that with time and popular demand are later integrated in official rom , my last two phone i have not rooted them , i have not missed a thing from not doing it either.
If you root you will miss out in Samsung pay or google pay but of course it may not be important to everyone
Itadiki said:
Hello,
Long time i didn t buy a new phone ( i am still on s9+) and there where a lot of rom for the s9+, but doesn t seem to find them for the s21+.
Where are they ?
Click to expand...
Click to collapse
Hi
I found one .
Hi,
there is a very good one for S21 Ultra -> https://drketanrom.com/samsung-s21ultra
TeLMiT92 said:
Hi,
there is a very good one for S21 Ultra -> https://drketanrom.com/samsung-s21ultra
Click to expand...
Click to collapse
yes I saw it ... but not for S21+ unfortunately
daniel_loft said:
@Itadiki What are you missing from OneUI? What would you want from a custom ROM that you don't have in the official ones?
It's not what's missing...it's what I *want* missing....I really want to get rid of the Bloat...nd fix a couple of issues that are plaguing my current s10+ (like the fact that any streaming is interrupted if *any* other resident program is in front of it, and needs an update....my Music cuts out when Waze needs to check in, for example (every 5 minutes).... and T-Mobile swears there is nothing wrong. (...then why did it start doing this *after* a forced Update that they refuse to roll-back?)
Click to expand...
Click to collapse
I could go on...but it's not additional functionality...it's control of my device (If I wanted to be told how to use my phone...I'd get an iPhone *ecccchh*)
Itadiki said:
Hello,
Long time i didn t buy a new phone ( i am still on s9+) and there where a lot of rom for the s9+, but doesn t seem to find them for the s21+.
Where are they ?
Click to expand...
Click to collapse
I know what you mean.
I remember back in the day when I had an HTC One X (still my favourite phone even though I got an s21) then later the M8 and there were tons of roms and mods available from a range of creators. My fav rom was the Viper range which had tons of features like tap to wake and customisable themes which didn't appear on official android for years and had OTA updates which got you on the latest android version before official release.
But I think, as said above, nowadays android has progressed to the point that you don't need to root to get roms with missing features and the likes of Samsung update their phones much faster than they used to. Even I haven't installed a custom rom since the S8 (the S6 & One M9 were the last ones I rooted. And the M9 was only to remove htc bloatware). And though rooting is still useful for removing baked in apps you don't need (Samsung, I'm looking at you!) but in general it's not needed anymore. Especially since manufacturers seem to have got 'inspiration' (interpret that as you will) from some of the fantastic indipendent developers found on sites like XDA.
The other problem is that these days more people use their phones for banking and paying in store and these functions are blocked on rooted phoned.
It is a shame though, the creativity, diversity of mods and general level of knowledge that was once found here back then was amazing.
That's not to say there isn't great talent still here, there is, simply back then there were much more developers creating full roms.
FerretPD said:
I could go on...but it's not additional functionality...it's control of my device (If I wanted to be told how to use my phone...I'd get an iPhone *ecccchh*)
Click to expand...
Click to collapse
Totally agree with you here.
This was once a clear distinction between android and iPhone. These days they are all trying to suck you into their own eco system.
What's funny is that on my Huawei Nova 5t I had much more control of an apps access to my data and no apps were 'baked in' like Samsung pay etc. We should not have to root a phone we own to remove apps we don't want or make changes to the functionality of a phone, especially after we have paid hundreds of £/$ or more for.
i like root for Root level Backup, Host File level adblocking see wakelocks, change CPU/GPU underclock/overclock/undervolt.. And to keep upgrading my phone to new versions long after the manufacturer stops providing updates.
I am looking at a S22.. though if no community support then maybe not..
Sage said:
i like root for Root level Backup, Host File level adblocking see wakelocks, change CPU/GPU underclock/overclock/undervolt.. And to keep upgrading my phone to new versions long after the manufacturer stops providing updates.
I am looking at a S22.. though if no community support then maybe not..
Click to expand...
Click to collapse
unless u buy an exynos s21, u'll be able to root and do whatever... but if u buy a qualcomm one., u wont be able to root, unless u pay... i suggest to stay away from samsung (qualcomm) if u're into the rooting scene
efebe said:
unless u buy an exynos s21, u'll be able to root and do whatever... but if u buy a qualcomm one., u wont be able to root, unless u pay... i suggest to stay away from samsung (qualcomm) if u're into the rooting scene
Click to expand...
Click to collapse
i avoid snapdragon like plague for some years already since the inability to root/titanium backup. as long as the phone can't be rooted, i don't buy it, even exypnos is hotter slower dumber etc but the freedom to block ads and freeze/unfreeze/backup app is totally unmatched. also nowadays there's knoxpatch module so i can pretty much use any samsung secured function (just lack samsung pay/pass)

Categories

Resources