Database Info

SamsungIME remote code execution vulnerability

I preemptively apologize if someone already posted on this.
This is ludicrously bad. If only Samsung cared so little about the bootloader ...
https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/
The only workaround requires--you guessed it--rooting the phone. We should really write Verizon and Samsung a scathing group appeal. Needless to say, I'm done with Verizon after the contract is up.

blair.sadewitz said:
I preemptively apologize if someone already posted on this.
This is ludicrously bad. If only Samsung cared so little about the bootloader ...
https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/
The only workaround requires--you guessed it--rooting the phone. We should really write Verizon and Samsung a scathing group appeal. Needless to say, I'm done with Verizon after the contract is up.
Click to expand...
Click to collapse
The carriers (Samsung's customer) control the locked bootloader, not Samsung. Samsung would not shoot themselves in the foot and refuse to build the phone to the customers' specifications. And since Verizon and AT&T went for the corporate and military sales, plus the 99.5% who never heard of XDA or could care less about a locked bootloader purchasing what they heard is the most secure phone...our please would make the same wave as dropping a pebble in the ocean. The best that could be done is what you said..choose your next device and carrier based on what you have learned. A lot of us deal with the crappier coverage that Sprint and T-Mobile have to avoid being locked down.

KennyG123 said:
The carriers (Samsung's customer) control the locked bootloader, not Samsung. Samsung would not shoot themselves in the foot and refuse to build the phone to the customers' specifications. And since Verizon and AT&T went for the corporate and military sales, plus the 99.5% who never heard of XDA or could care less about a locked bootloader purchasing what they heard is the most secure phone...our please would make the same wave as dropping a pebble in the ocean. The best that could be done is what you said..choose your next device and carrier based on what you have learned. A lot of us deal with the crappier coverage that Sprint and T-Mobile have to avoid being locked down.
Click to expand...
Click to collapse
Yeah, I suspect you're right. Nevertheless:
http://www.androidcentral.com/it-wi...mericas-top-carriers-heres-what-you-need-know
These guidelines could be [broadly or narrowly] adapted for bootloader unlocking as well. As it stands, I don't even have the option to unlock the bootloader at any time in the future. Do I _never_ own the phone outright, even after I've fulfilled my contractual obligations? This is the frontier beyond which all of the arguments in favor of the practice cannot be sustained.

blair.sadewitz said:
Yeah, I suspect you're right. Nevertheless:
http://www.androidcentral.com/it-wi...mericas-top-carriers-heres-what-you-need-know
These guidelines could be [broadly or narrowly] adapted for bootloader unlocking as well. As it stands, I don't even have the option to unlock the bootloader at any time in the future. Do I _never_ own the phone outright, even after I've fulfilled my contractual obligations? This is the frontier beyond which all of the arguments in favor of the practice cannot be sustained.
Click to expand...
Click to collapse
That article is regarding unlocking a phone to use on another carrier...SIM unlocking basically...not bootloader. The security put on the phone is the business of the carriers requesting from the manufacturer..including Verizon blocking access to HTCDev to unlock HTC devices. Owning a phone outright does not give you rights to having the security software removed. But of course if you figure out how to do it, kudos...no one can stop you. Just because you buy and own a satellite box does not give you rights to have it unlocked to give you free PPV or programming. The fact that you can sell the phone to another person proves you own it. But you have more knowledge now when you choose your next phone and carrier.

KennyG123 said:
That article is regarding unlocking a phone to use on another carrier...SIM unlocking basically...not bootloader. The security put on the phone is the business of the carriers requesting from the manufacturer..including Verizon blocking access to HTCDev to unlock HTC devices. Owning a phone outright does not give you rights to having the security software removed. But of course if you figure out how to do it, kudos...no one can stop you. Just because you buy and own a satellite box does not give you rights to have it unlocked to give you free PPV or programming. The fact that you can sell the phone to another person proves you own it.
Click to expand...
Click to collapse
Oops, I had two different articles open in different tabs and somehow melded them together. That sure isn't helping my buzz.
You do have the right to unlock the cable box or dispose of it in any way you wish. It is a basic property right. You do not have the right to employ it to "steal" service, though. Similarly, they cannot stop you if you figure it out because it is your property, and as such your property rights trump their desires--such is my layman's understanding, anyway, heh.

blair.sadewitz said:
Oops, I had two different articles open in different tabs and somehow melded them together. That sure isn't helping my buzz.
You do have the right to unlock the cable box or dispose of it in any way you wish. It is a basic property right. You do not have the right to employ it to "steal" service, though. Similarly, they cannot stop you if you figure it out because it is your property, and as such your property rights trump their desires--such is my layman's understanding, anyway, heh.
Click to expand...
Click to collapse
Yup...just as you are free to figure out how to unlock the bootloader on your phone...and collect that bounty!!!! $$$$$

Root ***Warning***

For those adventurous ones... might want to read this first before attempting any kind of root. Such a shame... T-Mobile here I come.
“In most of the U.S. devices, if you root the device the device won’t even boot up; if it’s AT&T or Verizon,”
Samsung Galaxy Note 5, Galaxy S6 Edge+ Specs And Features: AT&T And Verizon Models Won’t Boot Up After Rooting

WTF, that's unacceptable

If it's unacceptable, better not buy the phone! Because it certainly isn't illegal, so I don't think anyone can force them to change it if they don't want to.
Of course, that is assuming that this is even true. Hasn't been confirmed by anyone yet...

JasonJoel said:
If it's unacceptable, better not buy the phone! Because it certainly isn't illegal, so I don't think anyone can force them to change it if they don't want to.
Of course, that is assuming that this is even true. Hasn't been confirmed by anyone yet...
Click to expand...
Click to collapse
I already did lol ordered the white 32gb today
Pretty sure the jailbreak legal case would count for this tho, therefore we are allowed to root with a device that we paid (full price)
I've never actually rooted a Samsung device before, but we kinda need it now because Samsung isn't going to fix the ram issue

Good luck. Not sure what you will do if rooting it actually bricks it... even if you are legally right, that might not help make your bricked phone work any faster. Lol
Maybe a smart developer will find a way around it anyway.

Maybe this http://youtu.be/qCh0QuEwAgY

Here's to hoping for a Developer Edition

Someone will bypass this nonsense. Where there's a will there's a way

Samsung pay for Verizon is disable already ...why would it be a problem when rooting and booting

GreeleyXda said:
I already did lol ordered the white 32gb today
Pretty sure the jailbreak legal case would count for this tho, therefore we are allowed to root with a device that we paid (full price)
I've never actually rooted a Samsung device before, but we kinda need it now because Samsung isn't going to fix the ram issue
Click to expand...
Click to collapse
Ummm...being "allowed" to root and being "able" to root are 2 different things. If you figure a method around their security then you can root...nothing in that Jailbreak lawsuit says they have to make it easy.

KennyG123 said:
Ummm...being "allowed" to root and being "able" to root are 2 different things. If you figure a method around their security then you can root...nothing in that Jailbreak lawsuit says they have to make it easy.
Click to expand...
Click to collapse
Yes, verizon is bricking phones.
Locked bootloader would the equivalent to able
while bricking would be the equiv to allowed
I dont understand the need to brick a phone, instead of idk deny service. Since service is what verizon owns, while you own the hardware

GreeleyXda said:
Yes, verizon is bricking phones.
Locked bootloader would the equivalent to able
while bricking would be the equiv to allowed
I dont understand the need to brick a phone, instead of idk deny service. Since service is what verizon owns, while you own the hardware
Click to expand...
Click to collapse
Just because you own a device (governed by FCC regulations as a communications device) does not mean you are to be provided with methods to modify it any way you want. The one thing is there is no law preventing you from rooting...nothing says the carrier (the customer) can't ask the manufacturer to make it as close to impossible as possible. If I own a satellite box, it does not give me the right to a method to get all the Pay channels.
You have to remember what drives Verizon and AT&T...$$$$$$$$ and making the phone so secure and locked down will gain them millions more in military, government and corporate accounts...this is not an attack on the amateur modder...we are just collateral damage.

KennyG123 said:
Just because you own a device (governed by FCC regulations as a communications device) does not mean you are to be provided with methods to modify it any way you want. The one thing is there is no law preventing you from rooting...nothing says the carrier (the customer) can't ask the manufacturer to make it as close to impossible as possible. If I own a satellite box, it does not give me the right to a method to get all the Pay channels.
You have to remember what drives Verizon and AT&T...$$$$$$$$ and making the phone so secure and locked down will gain them millions more in military, government and corporate accounts...this is not an attack on the amateur modder...we are just collateral damage.
Click to expand...
Click to collapse
I understand what youre saying im just lost on the part that theyre allowed to brick the phone. It just makes more sense to me for them to deny you sevice on a modified phone rather than bricking it. Wonder what this means for future nexus phones at verizon
Id be kind of tempted to test it, but im assuming there would be 0 chance of being able to get my money back on the phone.

GreeleyXda said:
I understand what youre saying im just lost on the part that theyre allowed to brick the phone. It just makes more sense to me for them to deny you sevice on a modified phone rather than bricking it. Wonder what this means for future nexus phones at verizon
Id be kind of tempted to test it, but im assuming there would be 0 chance of being able to get my money back on the phone.
Click to expand...
Click to collapse
Yeah, I have to agree with you there...perhaps they are counting on publicity and the fear factor of a few sacrifices to discourage any attempts at finding a solution. I miss the days of the S3 where you can flash just about anything and still recover if you screwed up. This is what keeps me stuck on Sprint. Can't go to T-Mobile because there is basically only LTE literally on the highways here.

KennyG123 said:
Just because you own a device (governed by FCC regulations as a communications device) does not mean you are to be provided with methods to modify it any way you want. The one thing is there is no law preventing you from rooting...nothing says the carrier (the customer) can't ask the manufacturer to make it as close to impossible as possible. If I own a satellite box, it does not give me the right to a method to get all the Pay channels.
You have to remember what drives Verizon and AT&T...$$$$$$$$ and making the phone so secure and locked down will gain them millions more in military, government and corporate accounts...this is not an attack on the amateur modder...we are just collateral damage.
Click to expand...
Click to collapse
I agree that it still has to be FCC compliant and should not give everything for free like your other tv example. But here is my issue. I can buy a computer from bestbuy and put linux on it or modify whatever i want. Secondly I understand it is using verizon bands etc but why is this just verizon & AT&T??? Seems a little bit odd that it is just them. Why do they care unlike tmo and sprint that probably have unlockable bootloaders. I get the military/corporate discounts but at least offer a developer edition. But is there really not a law that says the carrier can shut your phone down? Doesn't there always have to be an emergency call option? I need to do some legal digging and see I find it odd that a carrier can disable a phone for any reason!

oneandroidnut said:
I agree that it still has to be FCC compliant and should not give everything for free like your other tv example. But here is my issue. I can buy a computer from bestbuy and put linux on it or modify whatever i want. Secondly I understand it is using verizon bands etc but why is this just verizon & AT&T??? Seems a little bit odd that it is just them. Why do they care unlike tmo and sprint that probably have unlockable bootloaders. I get the military/corporate discounts but at least offer a developer edition. But is there really not a law that says the carrier can shut your phone down? Doesn't there always have to be an emergency call option? I need to do some legal digging and see I find it odd that a carrier can disable a phone for any reason!
Click to expand...
Click to collapse
I am with you..just trying to explain Big Red's and AT&T's logic....they got the power by having the best coverage in the US..they are #1 and #2 there...I am sure they have worked with the military, government, corporate and all Exchange users to ask what they would need to sign big contracts with them...of course the answer is always that these mini-computers be as secure as possible.....then these carriers worked with Samsung to provide these solutions. I am not sure why T-Mobile and Sprint have not followed suit...we would need to see more of the deal between Sammy and Verizon to know how much engineering costs and exclusivity is in there...perhaps it is out of the lower two's budget.
Now as far as legality..you are attempting to modify the phone against the carrier's instructions which results in a brick...legalwise is that much different than expecting it to be able to dial 911 if you throw it against the wall? Both things are not supported by the carrier or manufacturer. The carrier is not disabling the phone...you are by attempting an unauthorized procedure. (Just devil's advocate here)
With so many hackers out there trying desperately to get at your identity and banking information (all done with cell phones now), and vulnerabilities being discovered daily, expect security to only get tighter and tighter going forward. The point of vulnerabilities may become moot if the phone is so locked down against any root functions and unauthorized use.
You do have options though...a Nexus.

Someone will root the device. To date there has never been an unrootable device

bash_array said:
Someone will root the device. To date there has never been an unrootable device
Click to expand...
Click to collapse
Verizon note 4
---------- Post added at 08:25 PM ---------- Previous post was at 08:23 PM ----------
KennyG123 said:
I am with you..just trying to explain Big Red's and AT&T's logic....they got the power by having the best coverage in the US..they are #1 and #2 there...I am sure they have worked with the military, government, corporate and all Exchange users to ask what they would need to sign big contracts with them...of course the answer is always that these mini-computers be as secure as possible.....then these carriers worked with Samsung to provide these solutions. I am not sure why T-Mobile and Sprint have not followed suit...we would need to see more of the deal between Sammy and Verizon to know how much engineering costs and exclusivity is in there...perhaps it is out of the lower two's budget.
Now as far as legality..you are attempting to modify the phone against the carrier's instructions which results in a brick...legalwise is that much different than expecting it to be able to dial 911 if you throw it against the wall? Both things are not supported by the carrier or manufacturer. The carrier is not disabling the phone...you are by attempting an unauthorized procedure. (Just devil's advocate here)
With so many hackers out there trying desperately to get at your identity and banking information (all done with cell phones now), and vulnerabilities being discovered daily, expect security to only get tighter and tighter going forward. The point of vulnerabilities may become moot if the phone is so locked down against any root functions and unauthorized use.
You do have options though...a Nexus.
Click to expand...
Click to collapse
I know you are and as far as an unauthorized procedure does Verizon list in their statement about rooting phones??

oneandroidnut said:
Verizon note 4
Click to expand...
Click to collapse
Originally it was rootable. Updates have made it locked

bash_array said:
Originally it was rootable. Updates have made it locked
Click to expand...
Click to collapse
Still counts though lol it's current state it isn't

how to unlock bootloader on snapdragon g970u

I'm looking to root my s10e snapdragon, I've been browsing the net since last night and I can't find a way to unlock my bootloader or a guide to rooting this thing. everywhere I've read is saying root is not possible, nor is unlocking the bootloader. is this true?
running android version 9

True...
Sent from my SM-N975U using Tapatalk

burrzoo said:
True...
Sent from my SM-N975U using Tapatalk
Click to expand...
Click to collapse
What a trash phone.. I'm kind of pissed I even picked this up when it came out now.

Pretty much *all* Samsung Snapdragon phones have been bootloader locked/unrootable since, what? Galaxy S6?

Times they are a'changing:
[SM_G970U/U1/W_Snapdragon]-[Upgrade Easily Android 11 To 12 Using Odin]-[Automatically Root Remove Forceencrypt Patch Bluetooth And Fix Safetynet]
Must Have An Unlocked Bootloader To Do This! This An odin tar file I have created to flash along with stock odin firmware to automatically install TWRP recovery along with Disable VBMETA image. The tar file will also automatically install magisk...
forum.xda-developers.com
Costs money, but seems like people are happy with those. The second link charges $65 a pop.

The only way to get BL unlocked is to class action sue scumsung. I want full control of my phone. When scumsung pays for my phones, scumsung can have control and collect my data through knox. Until that happens i want to have my BL unlocked, phone rooted, and custom fw installed for the lifetime of the phone, not when scumsung wants me to upgrade to a new phone every 6-12 months. This corporation makes me mad. At least i have a rootable moto.

guest_2011 said:
The only way to get BL unlocked is to class action sue scumsung. I want full control of my phone. When scumsung pays for my phones, scumsung can have control and collect my data through knox. Until that happens i want to have my BL unlocked, phone rooted, and custom fw installed for the lifetime of the phone, not when scumsung wants me to upgrade to a new phone every 6-12 phones. This corporation makes me mad. At least i have a rootable moto.
Click to expand...
Click to collapse
Well, how do we start a class action? Why don't we?

guest_2011 said:
The only way to get BL unlocked is to class action sue scumsung. I want full control of my phone. When scumsung pays for my phones, scumsung can have control and collect my data through knox. Until that happens i want to have my BL unlocked, phone rooted, and custom fw installed for the lifetime of the phone, not when scumsung wants me to upgrade to a new phone every 6-12 phones. This corporation makes me mad. At least i have a rootable moto.
Click to expand...
Click to collapse
Your anger is directed at Samsung when it is the carriers in the US that lock the Bootloader that is why the international versions of Samsung's phones are easy to unlock root etc as the carriers in other countries do not mess with the firmware like the US carriers.

Betadex said:
Well, how do we start a class action? Why don't we?
Click to expand...
Click to collapse
I'm so overwhelmed now with my other cases and problems i can't start it now. I'm a one man army. No help at all.

vickersg said:
Your anger is directed at Samsung when it is the carriers in the US that lock the Bootloader that is why the international versions of Samsung's phones are easy to unlock root etc as the carriers in other countries do not mess with the firmware like the US carriers.
Click to expand...
Click to collapse
My phones are factory unlocked, not carrier subsidized. hello?

guest_2011 said:
My phones are factory unlocked, not carrier subsidized. hello?
Click to expand...
Click to collapse
Mine is also factory unlocked, bought directly from Samsung, so explain why I can unlock my bootloader but you can not? What has that fact got to do with Samsung. hello?

vickersg said:
Mine is also factory unlocked, bought directly from Samsung, so explain why I can unlock my bootloader but you can not? What has that fact got to do with Samsung. hello?
Click to expand...
Click to collapse
Mine is north american/usa snapdragon. I don't know why scumsung allows other region variants to be unlocked but not north american SD. That could be a good court argument. From what i read knox (security?) collects user data. In rooted phones it's disabled or eliminated. I'm not sure exactly. That would be another argument. I don't want my data collected. Scumsung has no right.

guest_2011 said:
Mine is north american/usa snapdragon. I don't know why scumsung allows other region variants to be unlocked but not north american SD. That could be a good court argument. From what i read knox (security?) collects user data. In rooted phones it's disabled or eliminated. I'm not sure exactly. That would be another argument. I don't want my data collected. Scumsung has no right.
Click to expand...
Click to collapse
I read that your carriers will not sell Samsung phones unless Samsung does this to all Samsung phones sold in the US. An unlocked bootloader has nothing to do with data collecting and it is Google who does the data collecting on all the phones with Google services and phones with Google search such as iPhones. Where I am there are consumer laws you can not even SIM lock a phone to a carrier here.

vickersg said:
I read that your carriers will not sell Samsung phones unless Samsung does this to all Samsung phones sold in the US. An unlocked bootloader has nothing to do with data collecting and it is Google who does the data collecting on all the phones with Google services and phones with Google search such as iPhones. Where I am there are consumer laws you can not even SIM lock a phone to a carrier here.
Click to expand...
Click to collapse
What i know is Knox is separate from google and it collects user info. It was a web page specifically about slimy samsung and what it does to customers. Google also collects data because it can. Who knows maybe we'll see the day in north america when they'll have same law for SIM unlocking. Maybe everything will be e-sim locked permanently.

Maybe late but its been a thing since 2020
[Android][UNSAMLOCK] Bootloader Unlock for Samsung US/Canada Devices
This thread is @svetius approved Important notice: Do not update to April 2023 security update (XXXXXXXXXXWCX) or later. Examples: G998USQS6EWCA, N986USQU4HWD1. Samsung has patched the bootloader unlock again on those updates. NOTE: The OneUI...
forum.xda-developers.com

Has this changed? Is it possible to root now?

It is possible, or appears to be.. See: https://forum.xda-developers.com/t/...d-12-one-ui-4-1-stock-firmware.4394629/page-2

madhits45 said:
It is possible, or appears to be.. See: https://forum.xda-developers.com/t/...d-12-one-ui-4-1-stock-firmware.4394629/page-2
Click to expand...
Click to collapse
He said tested on G970F!

afaneh92 said:
He said tested on G970F!
Click to expand...
Click to collapse
It says its for G970XX, but I believe you need OEM unlock option in dev options. I am still trying to get some more info.

madhits45 said:
It says its for G970XX, but I believe you need OEM unlock option in dev options. I am still trying to get some more info.
Click to expand...
Click to collapse
You cant get oem unlock toggle on G970U even if you get unlocked via paid service.
He is just wondering why oneui 4.1 can rooted via boot.img as it was before rooted via recovery.img

PSA: Using a remote unlocking service for your Moto One 5G Ace may cause the bootloader to be permanently locked.

TL;DR: Don’t use a remote unlock service if you want to still be able to unlock your bootloader.
DISCLAIMER: I don’t recommend or endorse any of the vendors or tools mentioned in this post. I’m simply mentioning them in the interest of full transparency.
I recently bought a refurbished T-Mobile-locked Motorola Moto One 5G Ace (model XT2113-2). When I first received the device, I successfully unlocked the bootloader by following the instructions on Motorola’s website.
I was mistakenly under the impression that since the phone was paid off I could get it unlocked by T-Mobile directly. However, using the built-in tool to request a “Permanent Unlock” repeatedly failed with error code 255.
I spoke with one chat agent, two phone agents, and one T-Force agent (@TMobileHelp on Twitter) but couldn’t get anywhere with any of them. The T-Force agent ended up telling me that the original owner of the phone would have to request the unlock. Since I purchased it from a reseller on eBay, I have no idea who the original owner is. The eBay seller was likewise unable to help.
I decided to do some research and came to the conclusion that the only working way to unlock an XT2113-2 besides directly through the carrier is to use a remote unlocking service. Further research indicated that eBay is the best and safest place to purchase these types of unlocking services. Finally, I landed on only two vendors on eBay that advertise a remote unlocking service for this model: “quick_unlock89” and “thejmf2011”.
In the process, I also came across a single vendor on eBay (“gfix99”) advertising a T-Mobile unlock eligibility checker service that supposedly queries T-Mobile’s database directly. I have no idea if this service is legitimate or not or what less-than-legal means they have of accessing T-Mobile’s database. However, it was cheap at only $1.65, so I figured I’d order it to see what it said. Sure enough, it showed my device as being locked to T-Mobile.
From what I could tell, there was no appreciable difference between the two unlock vendors, so I went for the cheaper of the two (“quick_unlock89”). For the uninitiated, the way these remote unlocking services work is by connecting to your computer via TeamViewer or some other remote access software. Then, they copy over and run a software called USB Redirector (you can find it by Googling that plus “Incentives Pro”). This redirects your phone’s USB connection to your computer over the internet to the person on the other end. After that, they ask you to boot the phone into the bootloader by holding volume-down and power at the same time. Once you plug in the phone, they take it from there.
I created a Windows VM and used a VPN to have this procedure done on my phone, and I screen recorded the whole session. There’s not much to see, sadly. However, after the process was done, the phone indeed showed that it was unlocked in the Settings app. Also, I paid for a second report from “gfix99”, and the phone is now showing as unlocked in T-Mobile’s database as well, assuming the report is accurate.
However, as soon as they were done with the unlock, I noticed that my bootloader had re-locked. When I tried to unlock it again, I was unable to. Using the fastboot oem get_unlock_data command fails with this error: “Failed to get unlock data.” Attempting to run the fastboot oem unlock command with the unlock code I received from Motorola when I first bought the phone gives this error: “Code validation failure”.
My next step was to try Motorola’s Rescue and Smart Assistant (LMSA) tool, but even after repairing the phone with it, the bootloader unlock still failed with the same errors. Notably, the phone did still show as network unlocked after repairing it with Motorola’s tool.
I did some more digging and was finally able to find some Spanish-language forum posts talking about a program called Moto-Key Tool that is used for remote unlocking the XT2113-2 along with several other models. From what I can tell, this seems to be the tool that these two eBay vendors are using to do these remote unlocks. You can find it with a Google search if you’re so inclined (basically just add “.com” after “moto-key”). It requires the purchase of credits that seem to roughly equate to $1 USD per credit, with the entire unlock procedure requiring 25 credits.
The basic sequence of events that this software uses seems to be as follows:
From the bootloader, it enables “Factory Mode” on the phone and then boots it up into that mode.
Once in Factory Mode, it wipes the IMEI from the phone, runs some other command, and then re-writes the original IMEI back to the phone.
It reboots the phone back to the bootloader and does a factory reset.
It boots the phone back up into the normal Android OS at which point the process is finished.
I attempted to decompile some of the DLLs included with the software to see if I could figure out exactly what it’s doing, but I’m no developer, and I certainly can’t read assembly language. I have some theories as to how it’s accomplishing the unlock, but at the end of the day, it doesn’t really matter for the sake of this post.
It’s important to note that neither of the eBay vendors offering this service say anything in their listings about this being a possible outcome. Personally, I never would have purchased the service had I known that. I use a T-Mobile MVNO, so the network unlock was really a “nice-to-have” for me in case I ever get to travel abroad again. The bootloader unlock is far more important to me.
I reached out to the eBay seller to express my dissatisfaction and request a refund. I’ve copied and pasted the conversation below for transparency. If the mods need me to provide proof I’m happy to do so. I just want any potential customers such as myself to be aware of the type of individuals they’ll be dealing with when they purchase these unlock services.
OP: “Hello, I had unlocked my bootloader before having you do the network unlock. Right after you finished I noticed my bootloader was relocked. I've been trying over and over to unlock it again, but I can't even get fastboot to pull the oem unlock data anymore. It just gives an error message stating "Failed to get unlock data". From what I can find online, it sounds like either the unlock data block has gone missing or is corrupt. Do you have a fix for this?”
Click to expand...
Click to collapse
quick_unlock89: “Sorry we don't support bootloader unlocking. May be factory unlock have brought your phone to initial state.”
Click to expand...
Click to collapse
OP: “I need my bootloader unlocked, and since this network unlock has now rendered me unable to re-unlock the bootloader I'll have to sell this phone and buy another one. Your ad doesn't say anything about this. I never would have purchased the network unlock from you if I would have known this would happen. That's unacceptable to me. Respectfully, I request a refund.”
Click to expand...
Click to collapse
quick_unlock89: “Sorry we don't refund for any software modifications. Can refund if you have any problem in Unlock service. It's factory unlock service so as mentioned in item description. Bootloader unlocking any how voids warranty. If I will force server for refund due to this reason so it will any how blacklist IMEI World wide after refund so I think it's not worth it.”
Click to expand...
Click to collapse
OP: “So let me make sure I'm understanding you. You're threatening that if I request a refund you will blacklist my IMEI in retaliation. Is that correct?”
Click to expand...
Click to collapse
quick_unlock89: “Not me friend. Server will do so if I will ask refund for such an issue which is not related to unlock service because we never faced this kind of issue ever. I can provide you a discount on your next purchase just as a good gesture. I think it will be a win win situation for both of us.”
Click to expand...
Click to collapse
OP: “I'm not asking you to request a refund on your end and reverse the network unlock. I'm asking you directly as the service provider for a refund. It sounds like in this case that means you'll need to write the cost off on your end in order to refund my money and not get my IMEI blacklisted.”
Click to expand...
Click to collapse
quick_unlock89: “Sorry I will have to request refund from server on my end too because I have complete paid for the service too and we don't take any responsibility of software modifications like bootloader unlocking and rooting of devices as these process are already prohibited by companies and void warranties, Owners always do these things on there own risk. If you think it's worth the risk of IMEI blacklisting than I will take my refund and issue you refund too. Thanks”
Click to expand...
Click to collapse
OP: “I guess you must not understand the basics of running a business. If a customer is dissatisfied with your service and requests a refund, you as the business owner are responsible for refunding your customer's money. Then you write it off and take the loss. That's just part of running a business. It sucks, but it is what it is. Again, your listing makes absolutely no mention of not supporting unlocked bootloaders. It makes no mention that if you use your network unlocking service your bootloader will be irreversibly locked forever. It is completely unprofessional and unacceptable as a business owner to tell your customer "too bad" and then threaten to blacklist their IMEI when it is your fault for not disclosing this issue ahead of time in your listing. Obviously you know this is a problem. Also, for your information, bootloader unlocking is not prohibited by Motorola. They themselves provide an official support page that walks you through the process.”
Click to expand...
Click to collapse
quick_unlock89: “Ok, provide me a day time. Let me check if I can do something for you. We are not even sure that is issue is related to Unlock service as we never have any complain regarding this issue ever with any of our client till now. I will offer you a partial refund of 50% payment. Please don't put all the loss on me when there is nothing wrong with the service and your phone is factory unlock now. You have a issue which is very unusual one. If there was any issue related to service than we have 100% refund warranty. Are you okay with it ? I will offer you 50% refund and provide you relock warranty for you IMEI. Done ?”
Click to expand...
Click to collapse
OP: “No, I won't accept that. I feel you've been purposely misleading to me throughout our interaction. First, you don't warn your potential customers in your listing that if they have unlocked bootloaders the network unlock service you provide will cause their bootloaders to be irreversibly re-locked. Second, you told me that unlocking the bootloader is prohibited by Motorola when that is not true at all. Third, you first told me no refunds would be given before then telling me that you would give me a refund but that my IMEI would be blacklisted. And now you're telling me that you'll give me a 50% refund with a "relock warranty" for my IMEI, whatever that means. This is not good business. I shouldn't have to argue with you to get you to offer even a 50% refund, and frankly, I don't put any trust in whatever "warranty" you might offer me. At this point, this device is rendered useless to me. I need it to be both bootloader unlocked and network unlocked, not just one or the other. Now I have to purchase another phone to replace it. Again, I respectfully request a 100% refund from you directly without doing anything that will get the IMEI blacklisted.”
Click to expand...
Click to collapse
quick_unlock89: “It's already a risky process. Source Motorola official site. If Motorola offers bootloader unlocking than get it unlock with them. Contact them if it's not unlocking. You could cause permanent/physical damage to your device. Unlocking your bootloader will not change your device subsidy lock status It's all mentioned on Motorola official site. We don't know it happened because you modified your device. Sorry I can not refund for this kind of fishy issue. Only can refund 50% as a good gesture if you want. If you Opened Fake claims, Bad Feed backs etc. When your device is 100% factory unlock than IMEI will be black listed world wide. You have only yourself to blame. Unless you have a Developer Edition device, once you get the unlock code, your device is no longer covered by the Motorola warranty; in other words, please don't blame us if things go wrong, even if they appear unrelated to unlocking the bootloader. I am not misleading. Every thing is mentioned on Motorola official site.”
Click to expand...
Click to collapse
OP: “So again, just to be 100% clear as to what you're saying. You're threatening me that if I try to get my money back you will purposely blacklist my IMEI worldwide. Is that correct?”
Click to expand...
Click to collapse
quick_unlock89: “We are not responsible for any 3rd party issue on phone specially when you have done a very risky process on phone. If you have any issue regarding Network unlock I am here to answer you. Also if you say Motorola offers bootloader unlock than contact them regarding it. Yes your phone is 100% factory unlock now if you will make fake claims we will blacklist IMEI world wide and it's not a threat it's as per rule already mentioned in our item description regarding fake claims.”
Click to expand...
Click to collapse
OP: “Respectfully, it's not a fake claim to say that you irreversibly damaged my phone during your service and that I'm not satisfied with the results and want my money back. I shouldn't be held hostage by your unprofessional and probably illegal threat to purposely blacklist my IMEI if I complain to eBay. Whatever exploit your "Moto-Key Tool" used to network unlock my phone corrupted the unlock data block, and now the bootloader can't be unlocked again because the OEM unlock data is literally missing from the phone. Motorola openly publishes on their support website how to unlock the bootloader for this device, but now I literally cannot do it because of your tool corrupting that portion of the phone's EEPROM. This is 100% your fault and not mine. I wouldn't even be mad about it if you were up front about this in your listing, but you don't say one word about it. As I mentioned before, I never would have purchased this from you if you had been honest in your listing and stated that this was a risk. Therefore, I feel that I am entitled to a 100% refund from you, and I don't feel that you should be threatening to blacklist my IMEI for requesting it. Yet again, I respectfully request that you refund me 100% of what I paid without doing anything to blacklist the IMEI of this phone.”
Click to expand...
Click to collapse
quick_unlock89: “Ok bro I will any how refund you. We never wish to spoil our relationship with clients but I will hope you reconsider and pay us 50% back because your phone is factory unlock now. And it is not a justified decision to put all claim and blame on us when you yourself know that bootloader unlocking is a risky procedure itself which does void warranty too.”
Click to expand...
Click to collapse
To their credit, they did issue a full refund. I don’t have much faith that they won’t go ahead and purposely blacklist the IMEI anyway. At the very least, I want this information out there for anyone else considering this type of service so it’s not a total loss and the community can benefit.
If you’ve read this far, congratulations! Long story short, if you want an unlocked phone, just buy it unlocked direct from the manufacturer. Dealing with the carriers or these gray-market unlock services isn’t worth the headache.

Thank **** Canada mandates that all devices have to be sold unlocked since like 2017. And they provide free unlock codes for older phones so you're covered for sure.
I bought a moto g 5g on Amazon, because it was cheaper than the one 5g ace. It's unlocked and it's gonna stay unlocked lmao.

Question How to get att's unlocking block removed

Sm-s908u I need to carrier unlock this device and remove the hardware that att has installed on device that will make my phone "factory unlocked" without paying. Please is there any options for wiping the device completely and installing everything for the specs and such

If the phone is eligible you can request it right on Att's Website. https://www.att.com/deviceunlock/
I'm having an issue getting mine unlocked via the carrier(boost) as well although I have met all the eligibility requirements and they keep telling me it is unlocked. It is not every sim/esim i tried confirms its carrier locked. Ill be following in case anyone knows of a way to get around this.

I can't get att to officially unlock hence why I'm trying to find a way around there locking software/ programming bs. I've hered the issue your up against is common within there consumers.

1loves22ultra said:
I can't get att to officially unlock hence why I'm trying to find a way around there locking software/ programming bs. I've hered the issue your up against is common within there consumers.
Click to expand...
Click to collapse
Why not pay the device off, and get it unlocked honestly.
ATT will unlock it, if it is paid off and all clear. I've had ATT unlock many of devices, once I've paid them off.

Device needs to be paid off as C Kent stated. There are no free services for that. And if you do decide to do a paid service you might get an imei of an international device which will make the device unusable on At&t network. This happened to me on one of my devices I use to tinker with. Once they unlocked device the assigned a random imei that came back to a J7. Some my At&t Note 8 was registering with At&t as an International device...so yeah pay it off. Submit request to At&t and within minutes you get an unlock code