[Galaxy S 4 General] Absolon:
What does Knox give that is so "nice"? I'm curious.

And that all pushed updates now contain Knox. I think that is quite enforcing. Just as enforcing as the rules they "push".

BUT. Since this is (currently) a "research thread" is about Knox and it's technical concepts and implications and no useless and irrelevant to have

esoterical discussions about being a technical hermit, general Internet privacy, Google and the enforcing EU like the "storage directive" etc.

I have my views on those matters and I do try to protect me the way I can, with VPN, cryptography. It's a whole different matter and is off topic.

This is about Knox and it's implications. Possible, used or not.

If you don't understand basics concepts of SELinux please ask, and will try to explain up to the level that I understand myself since I'm not an expert on just

SELinux but know it's concept and have worked to "harden" Linux systems ([Zapoznaj się z tematem, bo bez wiedzy, to tylko puste GaduGadu z Twojej strony).

But to please you.

I use PGP for parts of my activities outside XDA. I crypt my disks. I prevent my systems to make calls to unknown addressees.

Take a look at pfSense. It's a nice interface to the best firewall in the world, the BSD pf.

If you dig deep enough in many commercial devices/solutions you often find pf in the bottom of it all.

Did you do the GeoIP thing? Was it close or totally off? Install "Collusion" and browse for a while and see how many trackers there are and how they

register. Pretty informative.

The reality is that in this moment you read this you have no idea what your phone does.

No idea at all, if you don't happen to have a pre-Knox bootloader. I don't. When I got my replacement phone it was an I9506.

There are no "pre-knox" bootloaders and I'm pretty sure that I would faster get my Note 3 loader to boot then a I9505 since the specs have changed so much.

I have not looked if there is a "pre-Knox" loader for Note 3. Again, lacking time and I can't do everything myself here.

But in all this, this is a thread about Knox. And maybe I need to repost it in a more suitable thread because there is way more concerns then just

warranty issues.

But since this post have a big audience, I post here and hope that someone agrees with me, and that someone acts. Please feel free to send me a

Private message if you want to help out.

Mods! :)

I would like to propose a fork of the separate subjects we have right now because they they are very ]different issues that clutter each other and

makes it hard to follow them both. The title also misleads a bit since Knox is not only bootloaders and how to circumvent it for warranty issues but as we know

so much more.

One is the technical investigation of the Knox platform itself and the other one is about circumvention and not tripping the flag. Right now we have a mix

between those and it makes it hard to follow (at least for me).

It's "SELinux uses a cert on a PROM and have an unique X.509 for each phone" vs "Damn, I tripped my Knox" or "Found out that loader xxx" works.

Wouldn't it benefit all if we could keep them apart? The info we find sifts down to both of the threads, Q&A and this about loaders. A "tech-thread" is

needed (IMHO) so we can deep dive into the gory details of the whole thing. We gain clarity in both of the subjects here.

What do you think?

All the best,

Abs

---------- Post added at 04:50 PM ---------- Previous post was at 04:48 PM ----------

I have no idea how to contact them... Or if they are interested in the first place.