yashsingh1/xdaforums huggingface dataset:
[Galaxy S 4 General] h8Aramex:
Same thing happens if you try to update the S4 Mini.

Knox tripped.

Thanks Samsung. :^) (Buying Samsung products is one of the biggest mistakes one can make. Learned this the hard way. )
[Galaxy S 4 General] P3lUZa:
Heimdall flashing doesn't increase knox

Well, I had Stock 4.3 with Knox 0x0 on my n7100 , I discovered that flashing modem via heimdall (heimdall flash --RADIO modem.bin) DIDN'T increase knox, so knox stays 0x0. It would be interesting if someone could try to flash system only (heimdall flash --SYSTEM system.img) and check whether that increases knox (Flash it without flashing the other partitions, specially without recovery)

Unfortunately, I can't test it anymore since i flashed recovery and now I have Knox 0x1
[Galaxy S 4 General] fabioloco:
...

---------- Post added at 03:15 PM ---------- Previous post was at 02:35 PM ----------

Yes
[Galaxy S 4 General] gorandroid:
Woah... don't judge now just because of that knox... Samsung is still the best imo, I would prefer it always over iPhone.
[Galaxy S 4 General] h8Aramex:
Well Knox itself is a great _security_ solution.

But Samsung intentionally using it as a warranty-remover is a real jerk move.

It could just provide a single switch in recovery or whatsoever, so you can disable it before flashing custom roms.

I don't even know why this would hurt. I used overclocking kernels on my older Samsung devices and none of them had problems.
[Galaxy S 4 General] Joker87:
I find it right actually

Want customs? No warranty
[Galaxy S 4 General] h8Aramex:
Meanwhile on HTC, LG, Sony, etc: You want to do whatever with the device you paid for? Hell, YES.

But please, lets stop this topic, we are just derailing.

Topic could be closed btw.
[Galaxy S 4 General] Junpei_Shibayama:
Why closing the topic? It's still interesting. Don't close or Open a KNOX 2.0 research Thread.
[Galaxy S 4 General] viktorak:
Hi guys,

It is possible that Samsung has changed its policy Knox bootloader.

Here in the forum GT-I 9505, we have found that official stock firmware downgrade is possible .Downgrade oficial stock 5.0.1 to 4.4.2 is allowed and Knox status not

changed.Once downgrade to 4.4.2 we get root without worrying about Knox.

This means that: or Samsung has been neglected / unlikely /, or is there any change in bootloader.
[Galaxy S 4 General] nikosdd:
Can we flash a knox free bootloader via jtag, and then update it via the normal process to the default knox bootloader? I think that with this way, if it is not an efuse, then the phone will reinstall the hidden bootloader or whatever knox uses to identify if it is tripped. Can someone with tools test this?
[Galaxy S 4 General] O-T:
Doesn't have to change policy. When both bootloaders have Knox feature you are not switching to a Knox-free bootloader.
[Galaxy S 4 General] viktorak:
This is correct, but I think that wasn`t possible before in 4.4.2 downgrade to 4.3./Boot firmwares Knox enabled/The bootloader does not allowed,that was impossible.

But now we can do this downgrade.
[Galaxy S 4 General] tetakpatak:
Well, if you have a JTAG and can use it, why not?

tetakpatalked from 1+One
[Galaxy S 4 General] Rakeesh_j:
So I just had Samsung call me to tell me that they aren't going to repair the charging port on my Galaxy Note 4 because I rooted the phone. That's insane. I asked him what a software root has to do with the charging port, and he made up some dumb excuse about how if he had his technicians make hardware corrections, then it could ruin the software.

I'm guessing this is the standard experience for everybody? I've got a workaround for the problem, but I'm never buying another Samsung device again.
[Galaxy S 4 General] wasiq224:
Screen Repair

I had my device rooted with the knox voided 0x1, and i broke my glass and digitizer so now the screen wont turn on. I am planning on paying the $200 fee to get the screen replaced.

I managed to reflash the stock firmware via odin, so root should be gone right?

I also used Android device manager to erase the device to remove any root apps.

Will Samsung repair my device if I PAY for the repair, even though knox is voided 1x0?
[Galaxy S 4 General] siddiec2013:
do you know how to clear knox count and void data to look it like factory new in download mode ?
[Galaxy S 4 General] nikosdd:
Yes they will repair it normally. And it wasn't necessary to remove the root :) if you pay for the service you want then you can send the device in any condition you want :)
[Galaxy S 4 General] tetakpatak:
When I've sent a device for paid service of screen replacement, a custom ROM was installed.

I have warned Samsung service of not even accidentaly becomming an idea of installing me crappy TW on my device.

Of course they will repair. Root is by no mean illegal, it is your right as an owner to decide.

tetakpatalked from 1+One
[Galaxy S 4 General] Wizzkid42:
Knox warranty void

Have just done this to my Galaxy S4 after using Odin and downgrading from Andriod 5.01 lollipop to 4.4.2 kitkat.

Ok so my warranty is void , but have I also damaged my S4 because of this Knox thing?

I mean it's working fine because after rooting it, I then installed the official 4.4.2 off sammobile site. But I did also install a custom rom before that after rooting it.

Any ideas, is my phone damaged in any other way, or just a voided warranty? Any ideas would be appreciated:good::good:
[Galaxy S 4 General] nikosdd:
No my friend. You just voided warranty and you cant use KNOX Application. :) Everything else should work as before.
[Galaxy S 4 General] Wizzkid42:
That's a relief ? many thanks for your reply,really appreciated. Also hi to you and all on the XDA as I just joined yesterday:good:
[Galaxy S 4 General] S_7:
My S4-9500 has been rooted and played with some customs rom so that It knox has counted to 1 that means there is no way back to 0 again, I'm so regret for my S4 ... ?
[Galaxy S 4 General] timberwolf60:
One year plus ago I sold away my Samsung S4, S4 plus and bought a Sony Z1, now I also owned an xiaomi hongmi note lte. My z1 was on lollipop 5.02 rooted with xposed installer, greenify etc. My hongmi note LTE even rooted still have warranty by xiaomi Singapore. No more Samsung phone in future.
[Galaxy S 4 General] skezza:
Pardon my ignorance, what the **** is KNOX even for ? I've had a number of Android devices, I've bought two S4's recently. One rooted (so KNOX void), one unrooted, so KNOX works. Exactly what is the point of KNOX? Will I miss it at all or is it just another pathetic way for Samsung to screw their customers?

Either way, both my S4's are second hand so no warranty at all.
[Galaxy S 4 General] FlanjeUK:
Knox
[Galaxy S 4 General] skezza:
So completely ****ing useless unless you're using the phone for work. Oki doki then.
[Galaxy S 4 General] Nico8583:
Hi,

I know there is no solution to reset 0x1 Knox Warranty Void but do you think it will be possible to reset it in the future ? Do you have more informations about flag type (eFuse or simple flag) ?

Thank you !
[Galaxy S 4 General] idoit:
No, it's eFuse. so once burnt, meaning once 0x0 becomes 0x1, there is no reversion. As easy as that. :)
[Galaxy S 4 General] Nico8583:
Thank you :)

So it's not the same than Galaxy Note 3 ? Because it seems to be reset on GN3 so perhaps it's possible on GS4 ;)

And if I send my S4 to Samsung Service Center to be repaired, even if I pay, does the counter will be reset to 0x0 ?
[Galaxy S 4 General] shayind4:
Is your phone faulty? Do you need the Knox software for work?

There have been reports of Samsung phones/tabs being sent for repair and the centres repaired the fault and reset Knox to 0x0. Good luck.
[Galaxy S 4 General] Nico8583:
No my phone seems to work well and I don't need the Knox software, it's only in the case of...
[Galaxy S 4 General] lastredwitch:
Samsung's thoughts on the matter.....

Once the Warranty Bit has been tripped, you will not be able to install KNOX or access an existing KNOX container. There is no way to reverse the Warranty Bit without replacing the Printed Board Assembly (PBA), a hardware component, on the device. To replace the PBA, contact your local Samsung Service Center.

... goto .samsungknox dot com search :why-do-i-see-your-device-not-authorized-enter-knox-mode-when-i-try-unlock-my-container
[Galaxy S 4 General] :
There is a signed bootloader that reverts the flag as well.

The question is though. Will it be letting you re access the knox files . I'm not sure
[Galaxy S 4 General] Indha Lezzio:
For 9505? Where is this signed bootloader that reverts the flag?

TIA
[Galaxy S 4 General] lastredwitch:
Samsungknox.com

Go to Samsungknox dot com- answers are there (see my post! )

What bootloader can reset a tripped HARDWARE efuse? Its likely just spoofing the output.
[Galaxy S 4 General] :
Who said it is a efuse? you haven't read about the bootloader that reverts the flag?

And no a simple spoof isn't going to fix it.
[Galaxy S 4 General] ryanbg:
The Qualcomm variants use QFPROM (eFUSE) and it is permanent. The Exynos devices used the RPMB partition on the eMMC (Special hardware partition with security on it.) I know this as a fact. That's why the Exynos device could be reset.
[Galaxy S 4 General] nikosdd:
From personal experience in making pcb and programming mainboards, NOTHING is permanent! All security systems (eFUSE, secure containers etc) have a lot of vulnerabilities that will do anything we want. Of course we need someone with a lot of experience and time to do this. And yes personally I believe it is not an eFUSE. A friend of mine had i9506, Qualcomm 800, and had tripped knox warranty. But during flashing, bootloader failed to upgrade and phone became useless. I marked the main board with a pen, and you want the truth? He got his phone fully working and with knox 0x0 without changing the mb. You still believe it uses eFUSE?
[Galaxy S 4 General] jago25_98:
Did Samsung intend a direct attack on modding and true security? Whatever. Did phone makers feel this is a great opportunity to put more ewaste into landfill to boost profits? Whatever.

You can still mod quite a bit and keep Knox at 0x0. But what we can't do is replace the kernel or bootloader. So what you can do is run a rom such as NeatROM with root that allows you to keep the old kernel. This needs a different procedure than normal.

Of course the problem is with using a kernel and bootloader that you don't have control of is that you don't have control of your phone. This is in addition to the modem backdoor. Or does the source for Samdung kernels compile to binary just the same if we can do it ourselves?

I assume hardware repair shops have been unable to replace the efuse or a select component rather than the whole mainboard?

i wonder what the difference in resale value is between 0x0 and 0x1.

I will definitely go with a mod friendly phone next time such as Oppo. But we need more options here - my used s5 was €170 used whereas the Oppo is ~€500.

The Knox does have some kind of utility if you believe the snakeoil security as governments do - you can put things in the container separately. But unfortunately it's such a high price to pay... only a few people can see the flaw in it. The UK released a security advisory on Knox, worth a read: https://www.gov.uk/government/publi...s-security-guidance-samsung-devices-with-knox

It's amusing because it disallows everything outside the container too! Why not have a separate phone if you're going to do that!

We also find that permissions control outside the container has been removed in lollipop. So basically security for every day use is getting reduced. Basically it's part of a creep that hands over complete power to gov, corporations etc. It doesn't give ANYTHING to the consumer, when it could it chooses not to.

They could have designed the container to wipe on fuse trip... but it could have been designed to be able to reset at cost of losing data. Instead they've chosen a one way street for landfill and ewaste, of course.

Finally of course the whole thing is ridiculous. How much did that UK gov review cost? How easy is it to bypass everything? Make a bootloader that looks identical to the Samsung bootloader and the Knox application. What a joke.

And all of this is complicated to understand. I just want to take photos of my ****.

edit:

Something to bear in mind. If a phone is easy to mod and no Knox stuff, then the resale price should be higher in theory. This is getting interesting because here we start to see what users are actually willing to pay to be in control of their phones. So while the initial cost may be higher, so is the resale.
[Galaxy S 4 General] lastredwitch:
Samsung says its an efuse. Goto Samsungknox.com
[Galaxy S 4 General] anoniemouse:
I got my S4 on contract but had the HTC one M7 brought for me second hand to use on pay as you go.

The M7 is rooted & S-Off with custom rom & is now used on the contract sim, S4 been relegated to PAYG.

In the second hand shop second hand S4 goes for £140 the M7 is £180.

same with the S5 & M8, S5 is £240 M7 £280 what a difference being able to easy mod makes to a resale price.

Pity a crack for knox flag cant be found
[Galaxy S 4 General] flyoffacliff:
I have a few questions. When I got my Tab S 10.5, it was 0 (not void), but now, the whole line indicating the warenty status is gone. Was this removed in lolipop.

Is the encryption option in Android settings the same as Knox?

If the flag trips, can I still get my tablet repaired?

The Verizon rep. told me rooting would void the protection plan.
[Galaxy S 4 General] sytechcomputers:
knox flag update

Hi everyone ,

I recently posted what i experienced regarding my s4 i9500 changing from custom back to official. I have NO exposed frameworks or modules or anything along those lines as stated in a previous post. By chance i was bored playing around and checked my device status...... it had changed back to custom. I ran the same technique as discussed in my previous post...... I GOT IT TO CHANGE BACK TO OFFICIAL. I have something here thats able to change the knox flag without faking the status. I dont understand much of what i am doing or why its working. You guys are the experts.......MAKE SENSE OF IT. Also the crap about efuses is total rubbish.

---------- Post added at 08:32 PM ---------- Previous post was at 07:44 PM ----------

Hi everyone ,

I recently posted what i experienced regarding my s4 i9500 changing from custom back to official. I have NO exposed frameworks or modules or anything along those lines as stated in a previous post. By chance i was bored playing around and checked my device status...... it had changed back to custom. I ran the same technique as discussed in my previous post...... I GOT IT TO CHANGE BACK TO OFFICIAL. I have something here thats able to change the knox flag without faking the status. I dont understand much of what i am doing or why its working. You guys are the experts.......MAKE SENSE OF IT. Also the crap about efuses is total rubbish.
[Galaxy S 4 General] nikosdd:
I9500 is on Exynos that does not have eFuse. Other models like i9505 and i9506 have snapdragon qualcomm that has eFuses on its hardware.
[Galaxy S 4 General] ryanbg:
This is correct. The Exynos devices use the RPMB (A special eMMC hardware partition that has secured transactions via HMAC/KDF.) It IS possible to wipe/re-format this partition, but only using special JTAG-like hardware at the moment.
[Galaxy S 4 General] N77NS:
;(

whether there is a solution to return to the initial state knox 0x0
[Galaxy S 4 General] nikosdd:
Until now I don't think there is a solution to return to 0x0 :(
[Galaxy S 4 General] JeffreyTheHuman228:
Even though the KNOX Workstation is System Only, I figure it might also have some effect to programs like Package Disabler that if you Disable KNOX for an extended part including KLMS and ELM Agents, it might also cause the same Void Warranty and Prevent your phone from booting because it violated Government Orders such as the NSA and Samsung via violation of EULA and Terms of Service(usually leading to a fine later on).

And why Package Disabler had to Restore unblocked KNOX Apps, because they would get in trouble with the government for it.
[Galaxy S 4 General] nikosdd:
Nothing to do with it. Package disabler is something different. It does only disable apps and not interfere with the system partition. It does not need rood and does not work with gaining access to system partition. I know personally that when you enable the program you get a notification about agreement of Knox, but just accepted it and nothing happened. Knox worked after this agreement like before. When I disabled klmagent and all Knox related stuff, and reverted via factory reset(cause I had another problem) it worked again with knox app. I tested it then because I was curious. So disabling the app is not breaking the "safety container" that Samsung wants to protect. When you root your device then you can violate this container, not If you disable the app. I suppose I explained in with an easy way :D
[Galaxy S 4 General] fotan:
Rooted Samsung Galaxy S6, private mode files all gone?

So I recently rooted my SG S6 and private mode is not working. Are there any way to acces those files, or are the files even there anymore?
[Galaxy S 4 General] nikosdd:
My friend this topic is for s4 but after rooting your device, you need custom kernel for s6 to work private mode (not tested by me, just read it somewhere). Google it
[Galaxy S 4 General] borisyim:
Stock ROM and Knox

Help, everyone: If only the system.img.ext4 inside an official stock ROM of SM-G900F is flashed by Odin to SM-G9008W, will that trip Knox?

Both are S5 with the same Android version but probably different subversion (OJ6 to OI2). I also wonder if Kingo Root works without affecting Knox for S5.
[Galaxy S 4 General] nar001:
So, I haven't checked for a while, but since it's been two years, did anybody find how to downgrade the Knox enabled bootloader, or are we still stuck with it? Thanks !
[Galaxy S 4 General] WurstCase:
Way to prevent boot loader from tripping Knox flag

Hi,

after some reading up about Knox I'm asking myself if anyone has deep enough knowledge about the workings of it to know how and when exactly the boot loader is activating the mechanism to "blow" the eFuse (if those are really used for this). And while such a hardware component understandably cannot be reset, its destruction is still triggered by a software. So that leads me to assume that there has to be some way to modify that software so that it won't activate the eFuse mechanism in the first place.

I'v not been able to find in-depth information about this so far. Maybe somebody can also say if and why my assumptions are wrong.

Greetings,

WurstCase
[Galaxy S 4 General] tetakpatak:
Many of the devs with extrordinary skill either ignore Knox trip, or have moved to other, knox-free manufacturers. The interest is small, as the time effort of working on Knox void simply isn't worth the lost time.

I am also quit with Samsung for this reason.

tetakpatalked from 1+One
[Galaxy S 4 General] TheOtherTiagoTiago:
Do any civilians got access to either the SIM card or those Stingray-like backdoors thru the baseband modem (which, to my understanding, would involved a heavily modified femto/picocell)? Would those provide low-level enough access to bypass the Knox bootloader protections (without knowing NSA's keys) in order to unlock the bootloader?

edit: Hello: http://redmine.replicant.us/projects/replicant/wiki/SamsungGalaxyBackdoor

edit2: Btw, has anyone tried removing an unKnoxed eMMC, a Knoxed eMMC, and a tripped Knoxed eMMC, and read the contents directly with some other hardware, without having to count with the cooperation of the rest of the phone's hardware, to see if there is anything interesting that becomes accessible that way?
[Galaxy S 4 General] bo_hai:
I'am open the Bootloader in winrar and found this
[Galaxy S 4 General] Jerome-X:
use an other / custom kernel, private mode will still work. Take a look [MENTION=4898097]arter97[/MENTION]. He might have a kernel for your device

http://arter97.com/browse/S6/
[Galaxy S 4 General] gamaTeam:
Did anyone take a look into "DefusingTheDragon". It seems that it is posible to manipulate with "programmable" fuse.

Take a look for complete research on:

https://github.com/monk-dot/DefusingTheDragon
[Galaxy S 4 General] :
This is already known way back but I didn't know winrar could make that info that clear
[Galaxy S 4 General] badmashchamp:
Thanx guys...

Badmashchamp
[Galaxy S 4 General] jimbomodder:
so anyway to reverse this?

Sent from my SM-A500FU
[Galaxy S 4 General] :
Haven't had time to dig into this done other stuff and reverse bootloader and stuff isn't my thing. Rather do with apps
[Galaxy S 4 General] jimbomodder:
OK no worries. would be nice if one day it was just "install this to fix Knox 0x1":D

Sent from my SM-A500FU
[Galaxy S 4 General] :
Might or might not happen. Depends and it doesn't seem to be a too big issue since people know what they're doing

Due to the fact that it's really rare that root / modify the phone software/system causes hardware issues it isn't really big of a big deal. Only known issue I heard of (and experienced myself) was flashing s3 firmware on note 2. It "succeeded" but phone went sluggish and Bluetooth went broken. Reason I don't know. Installing any other system didn't help. So it is in really rare cases flashing different os will cause hardware. This probably happened due to some system changes that caused the issue. Not sure it's a long time ago and phone is dead since ages. But that's the only time I saw a "system" flash caused some issues. Though everything else worked but it could freeze from time to time. If I knew more back then I probably could have fixed it.
[Galaxy S 4 General] bo_hai:
I hope one day in the future that have an app that reset knox to 0x0 like Triangle Away
[Galaxy S 4 General] askerasker:
http://xdaforums.com/showpost.php?p=63953572&postcount=2736

PS: I can't quote the image.

I don't need knox, i use stock rom and i want to cheat warranty service.

What if anyone compile this bootloader to show always 0x0 know status with root support? I'm not developer, it's just a idea.

If it can't, please explain why?
[Galaxy S 4 General] cosmin.ep:
Knox

I just got my S6 4 days ago. I was curious about what it says at knox warranty in odin mode. I was surprised to see that it shows knox warranty void: 1 (0x0301). I don't know why because i didn't do absolutely nothing to the rom. Only thing i did is unlocked via code and wipe data and cache from recovery. Any idea why it show knox warranty void: 1 ?
[Galaxy S 4 General] jimbomodder:
Is it a brand new phone? Odin can sometimes trip even on stock flash's
[Galaxy S 4 General] cosmin.ep:
Yes, its brand new. Not even connected to pc. Weird!
[Galaxy S 4 General] jimbomodder:
I'd take it back, once void you have no 2 year warranty, very strange it's tripped from factory
[Galaxy S 4 General] cosmin.ep:
I found this on line:

"KNOX Counter has the following benefits:

a. Even though your device is lost, the person who stole it cannot use it. Without your account, the device cannot be reset to factory settings and flashed with any ROM.

b. KNOX protects your private data and information with its advanced technology. Here is the official link to White Paper: An Overview of Samsung KNOX"

I think i triggered knox whe i wiped my data from recovery and reactivation lock was on. At start up a message apeared of an abnormal resetting and ask me for my samsung account. So be careful how of wipe data from recovery. That's the only explanation of why knox warranty void is 1.