yashsingh1/xdaforums huggingface dataset:
[Galaxy S 4 General] Zibri:
Just for your information, today I made a simple test: I modified a few bytes of system.img.ext4, then made a tar md5 out of it and flashed it using odin.

KNOX Warranty was tripped and now it's 0x1.

My Note3 was on MK2 MJ7 MK2 and it still is.

A few notes:

1) something yellow briefly appeared as the last line on top left corner of display. I only read warranty, it was too fast.

2) I didn't even boot the system, I just went immediately to download mode again, but knox was alread 0x1.

3) reflashed original image and restored original EFS (I backed it up using an external program. I am not talking about the root filesystem efs)

Still 0x1.

I really don't care about my flag, but I do care about finding a way to reset it, because I KNOW it's possible.

P.S.

Since the OS never booted, this means that ANY modification to a stock image (even a partition) will result in a knox trigger.

Now I wonder: WHERE is thebinary with such code? is it sbl? Or which one? I will gladly styart reversing it if someone can give me a heads up on current status.
[Galaxy S 4 General] :
Not to be rude but obviously you'd missed some parts. Even if you use odin to flash a custom kernel and don't boot it will be 0x1.

It's in a bootloader that's written. Once it's written you can't go back. Since it refuses to go back.

It's good that you want to try. But you should have read before.

It says kernel isn't se Linux enforcing or recovery bla bla

Set warranty bit 1. This message is easily disabled by installing stock kernel/recovery but who wants enforcing seLinux?

We need to be able to decompile the bootloader. And return signature as always true or disable the function. The problem is. We can't really decompile it as we want.

nop
[Galaxy S 4 General] slickric21:
Guys/Gals just a pretty basic question here.

Ive been confused a little by some info a page or so back.

Will flashing an official samsung rom 4.4.2 with odin trip the know flag?

Currently on 4.3.

Cheers for help
[Galaxy S 4 General] GalaxyS49505:
No will not tripped you Knox.If Root your device or install custom recovery them you Knox will be 0x1.
[Galaxy S 4 General] Zibri:
I didn't miss anything. And I didn't modify the kernel anyhow nor any important file. I just change a single byte inside a text file and reflashed ONLY system.img.ext4.. just to know what was tested and when.

Why do you say that the bootloader can't be disassembled?
[Galaxy S 4 General] otnateos:
hmn,

I just got myself an S4 and find out about the KNOX thing. Can't read all the 200+ pages on this thread. Is there someone can give me simple answer what effect if I trip KNOX (e.g. rooting the device). Would it be simply something like I can't use KNOX anymore and the flag always says 0x01 ?

cheers,
[Galaxy S 4 General] FlanjeUK:
You answered your own question :P

If you're still running 4.2.2 you may be lucky enough to still be on the old knox free bootloader. If it's been updated you will trip it by rooting, flashing custom recovery, a custom ROM and/or kernel and it won't effect much apart from, as you guessed knox won't work any more...

Sent from my 9505GTi
[Galaxy S 4 General] otnateos:
I guess root and changing to custom will be my last resort now if I really hate touchwiz or want to remove the bloatware come with the phone.

So I believe it is like the old S II triangle but will not go away (haven't been figured out) right?
[Galaxy S 4 General] Zibri:
It will. It's just a matter of time.
[Galaxy S 4 General] samt3:
I rooted my s4 which was on 4.3 with safe root and it didn't trip Knox upgraded to 4.4 with mobile odin still didn't trip Knox it just said custom. Un rooted phone and it went back to official. Did all that and still no knox flag. So you can root it just can't us any thing that changes the recovery even for a second.
[Galaxy S 4 General] FlanjeUK:
Did you keep root when upgrading from 4.3 to 4.4?

Sent from my 9505GTi
[Galaxy S 4 General] pRo_lama:
Can you please write in detail every step that you did? Thanks.
[Galaxy S 4 General] RuggedHunter:
I think it's fairly common knowledge over on the ATT and Verizon S4 forums. Look up SafeRoot.

i337 MDL > MF3 > MK2 > SafeRoot > SafeStrap 3.71 > HyperDrive 12
[Galaxy S 4 General] samt3:
Yea I used the ever root option in mobile odin when I upgraded.

It is its nothing top secret. I keep seeing posting about rooting tripping knox. But to my knowledge it's only recoveries and kernels that trip it. That's why cf autoroot trips it.
[Galaxy S 4 General] :
did you sign the system.img.ext4 ?

also it can be dissambled that's not really what i ment sorry for the confusion
[Galaxy S 4 General] Zibri:
Nope. I didn't sign it. It was just a test. However KNOX can be reset. What samsung calls eFuse is just a TIMA protected storage. Something that can indeed be reset. And since they need to refurbish or repair phones I bet it is a simple procedure involving sdcard, a bootloader and JIG.
[Galaxy S 4 General] Zibri:
Does anyone have access to GSPN site. There's a lot of stuff there!

https://www.youtube.com/watch?v=eUGv5jXjHCE
[Galaxy S 4 General] testadeferro:
So I give you some law background:

My S4 Had for the second time a broken screen membrane and has to go for the second time to repair.

I got a new one out of the box. My old one was knox tripped, rooted, and with 8x flash counter. I didn´t even bored about set the piece to official before claiming warranty.

For the test, I´ve told the guys that I use a custom rom, had all discribed above. They check the screen and prompted gave me a new S4 with 2 years warranty.

So dear friend don´t talk about things that you don´t know. If you want I can give you half an hour from my time digitizing the documents and send it to you with great pleasure.

Cheers.
[Galaxy S 4 General] bungadudu:
I also said that I've got my phone repaired even if I had a custom recovery and custom ROM on it! Not just knox 0x1..

There are a lot of people reporting that they've got their's phones repaired even if they had knox 0x1.

But I also know and there are also tons of reports here on xda, on the Internet in which the warranty was voided at the slightest sign of "unauthorized software intervention". And it's their right to do so.

Point is, that flag indicates a custom kernel etc (unauthorized software intervention).

In such case every major OEM - Sony, HTC, etc can void your warranty.

This doesn't mean they will (I also know cases from HTC and Sony in which they would've normally voided the warranty but didn't).

But if they will, you can't do ****.

I just can't stress this enough:

Why do you think triangle away was born?

Why do you think in every op of major custom mods there's a line saying "your warranty is now voided!" ?

Everybody knows this, there are just a few who whine and talk about things they don't understand..
[Galaxy S 4 General] testadeferro:
Thats because in some countrys like mine where the directive was implemented in the law they cant void it just from that. Furthermore the juridic department from vodafone Portugal laugh over they claims with knox kernels moddings and bla bla bla.

Enviado do meu GT-I9505 através de Tapatalk
[Galaxy S 4 General] AusX10:
Anyone with access to GSPN would lose their job and probably be prosecuted for sharing any of its content with you.
[Galaxy S 4 General] Zibri:
What a useful post!
[Galaxy S 4 General] My1xT:
What is gspn anyway

Gesendet von meinem SM-N9005 mit Tapatalk
[Galaxy S 4 General] Zibri:
just ckick on the video url I have posted.
[Galaxy S 4 General] chrisrotolo:
did anyone else see him open notepad with all of his login credentials, etc. oooops
[Galaxy S 4 General] oracle01642:
Have you or anyone else successfully used triangle away? I don't have a triangle when I boot into recovery or download mode, but I have flashed 3 or 4 custom ROM'S, and I know there is probably a counter somewhere showing that. My knox counter is 0x1, but I would still like to wipe the flash counter, so if my phone ever breaks, I can take it into the shop with everything looking official and untouched apart from the knox counter, which I will say I know nothing about, and when they explain what it is, suggest it could've been triggered by kies. I will argue my case, and hope they will fix it under warranty.
[Galaxy S 4 General] Irfy84:
I have just tried TriangleAway 3.26 from the official xda thread and it didn't work. Both knox warranty void flag and the custom binary counters were unchanged. Current binary remained custom but System status changed to official -- this is the only thing that TriangleAway managed.
[Galaxy S 4 General] brando56894:
I used it last night on my S4 M919 and handed it in to T-Mobile this morning :D There is no actual triangle that you see, it's just a name. My S4 didn't have the Knox 0x0 or 0x1 counter though (was it supposed to??) just current binary and system status listed in the bootloader.
[Galaxy S 4 General] Irfy84:
Without knox, I also managed to reset all flags and counters to official/zero. With knox, after the phone was returned from service, I could no longer repeat that success because of knox.
[Galaxy S 4 General] Irfy84:
By the way, in the official Samsung repair shop in Vienna, Austria (Europe), I was told that tripping Knox will result in a void warranty. Beware.

---------- Post added at 11:18 AM ---------- Previous post was at 11:02 AM ----------

Has anybody with an untripped knox-phone tried installing a custom recovery and roms without ever using download mode? I rooted my phone with FramaRoot and used RecoveryTools to flash cwm from within android. Then I used cwm to flash CyanogenMod. My custom binary downloads was already at 1 before this, and did not change after this. Since my Knox was tripped before this, I wonder if Knox would be tripped when doing this. Has anybody tried it?
[Galaxy S 4 General] FlanjeUK:
AFAIK - doesn't matter HOW you change it, recovery/kernel will be checked at boot and trip the flag?

Sent from my 9505GTi
[Galaxy S 4 General] emilcioran99:
http://xdaforums.com/showpost.php?p=50864298&postcount=2024

And also tried in last days Triangle away on: I9505XXUFNB9 NEE and on I9505ZHUFNB3 TGY, both stock and rooted with CF Autoroot and works great everytime.

Reset counter to 0 (zero) and stock official Samsung. :)
[Galaxy S 4 General] ph.miki:
And I am also tried in last days Triangle away on: I9505XXUFNB9 MSR, with CF Autoroot. Reset counter to 0 (zero), but I was need to do factory reset. I have steal root folder in system. How to delete them?

I am FUL STOCK
[Galaxy S 4 General] emilcioran99:
With Root explorer? :)
[Galaxy S 4 General] chudy_85:
hi all i find somthing interesting

if any one have root explorer go to data/misc/keychain and here we have two file

pubkey_blacklist.txt

serial_blacklist.txt

in pubkey_blacklist.txt i have 2 keys

do you have that same??? check

i thing this two key it's blocked when we i root my s4 and send to samsung serwer to block on samsung serwer and send this two file back to my fone as data file

when we clane all stuf from fone we dont have this two file and we conect using wifi/3g its sending back to us

sorry for my english

Cherse
[Galaxy S 4 General] sjadhav252:
I found dis 2 files in i9500 wat to do with dis two files
[Galaxy S 4 General] ph.miki:
Of course I tried, but nothing!!!
[Galaxy S 4 General] blackhonk:
Hey, I just want to understand the result at your device. Have you reseted die KNOX Warranty Void with Triangle Away to 0X0? Sorry for the missunderstanding.

THX
[Galaxy S 4 General] FlanjeUK:
Nobody apart from Samsung have managed to successfully reset their knox flag to 0x0... and certainly not with Triangle Away...

Sent from my 9505GTi
[Galaxy S 4 General] resudo:
You have to be on stock ROM+stock recovery for triangleaway to work. Next time read the thread better.
[Galaxy S 4 General] Irfy84:
I was. I fixed my phone's counters with TriangleAway before taking it to service, but after they updated it and I got knox, TriangleAway no longer worked, except resetting System status to official. If you have knox, having stock rom and recovery doesn't help, at least for now. Anyone on this thread claiming to have fixed everything with TriangleAway was not on knox.

Perhaps you should read my posts better.
[Galaxy S 4 General] resudo:
If you have root, why don't you deknox your ROM and then use triangle away? ;)

EDIT: I did reset my phone using triangle away but I had knoxed bootloader with deknoxed ROM.
[Galaxy S 4 General] emilcioran99:
I used Triangle away to reset the state of the phone from "custom" to "Samsung official", and the counter of flashed non official recoveries from X to 0. That's all. As somebody says previously the Triangle away didn't reset the Knox counter.

And my Knox counter is still x1 since I was flashed the 4.3 official Samsung firmware but

I don't use at all the Knox apk and I don't care about the Knox counter

.

Since my Knox counter became x1 I flashed at least 40 firmwares/roms/recoveries/etc and nothing bad was happened.

IF you're careful and you know what are you doing there is a very very very little chance to brick your phone.

For me, the triangle away works ok on every firmware I was (4.3, 4.4.2)!

:)
[Galaxy S 4 General] ph.miki:
Please, can you give us the steps on how to used Triangle away to reset the state of the phone from "custom" to "Samsung official" for 4.2.2?
[Galaxy S 4 General] theq86:
Ok, just stop a second ...

samsung admitted, that an efuse is involved by setting/checking knox.

So how exactly can any service center reset the knox bit by software means?

If I correctly understood how an efuse works, there should be no way to reset that bit.

not by software only means.

or am I wrong?
[Galaxy S 4 General] emilcioran99:
4.2.2???

You mean 4.4.2, right? :)

1. Flashed with Odin 3.09 - I9505XXUFNB9 NEE - official firmware;

2. Flashed with Odin 3.09 - CF-Auto-Root-jflte-jfltexx-gti9505.tar.md5 - Chainfire's root;

3. Flashed with Odin 3.09 - philz_touch_6.22.1-jflte.tar.md5 - custom touch recovery;

4. Install from here - TriangleAway-v3.26.apk;

5 Launch the apk > Reset flash counter > read and follow on screen instructions > and... that's it. :)
[Galaxy S 4 General] ph.miki:
yes 4.4.2.

ok, I understad that, but u are steal rooted?
[Galaxy S 4 General] bungadudu:
There isn't any proof that Samsung can reset KNOX. Just people talking...

One of the rumored possibilities is that they can reprogram things so that a different set of efuses are checked..

But.. there isn't any proof...
[Galaxy S 4 General] fstorm:
It's most probably not an efuse, but just a bit in the RPMB.

Envoyé de mon GT-I9505 en utilisant Tapatalk
[Galaxy S 4 General] emilcioran99:
Don't understand what do you mean with "steal rooted"? :D
[Galaxy S 4 General] odicamillo:
Can anybody tell me whether you can downgrade freely the firmware (assuming that that will definitely trigger the Knox counter)?

I mean, once your Knox is 0x1, can you go from 4.3 to 4.4.2 and then back to 4.3 for example using the stock firmware?

I ask this because I am on 4.3 stock and I am suggested to update via OTA but it is clearly said that for security reasons you will not be able to downgrade.

Whereas from the post of emilcioran99 it seems you can do whatever you like (when you don't care about the Knox flag).

Thank you.
[Galaxy S 4 General] bungadudu:
You can't downgrade.

I personally know a case in which somebody went with a minor problem to service and also got he's phone updated to 4.4 although he specifically said he didn't want the update.

The only solution to get back to 4.3? - they changed the motherboard :))
[Galaxy S 4 General] odicamillo:
So what does it mean "Since my Knox counter became x1 I flashed at least 40 firmwares/roms/recoveries/etc and nothing bad was happened." (emilcioran99)? Which kind of firmwares, roms, recoveries can you flash if you can go only forward (upgrade) and never backward (downgrade)?
[Galaxy S 4 General] ph.miki:
I mean that u not FUL STOCK, u have steal rooted rom.
[Galaxy S 4 General] theq86:
Samsung officially states that the knox bit uses an eFuse:

(https://www.samsungknox.com/en/blog...ox-enabled-devices-and-knox-warranty-void-bit)

Why should Samsung lie about it? That would be security through obscurity and thus very quickly hacked.

I doubt Samsung will seed wrong information or risk an embarracement when the so called "eFuse" is none.
[Galaxy S 4 General] Byteater:
They want us to believe that their system is secure and unhackable.. That's why..

Inviato dal mio GT-I9300 utilizzando Tapatalk
[Galaxy S 4 General] Obagleyfreer:
Not being funny but an XDA thread with hundreds of pages and countless devs trying to hack it and still no result. That's pretty secure to me!!
[Galaxy S 4 General] timberwolf60:
Need NSA or Snowden to hack it.

Send from my C6903 using TapatalkPro

my Sg device: Z1 rooted136 ROM by NUT with 2.7.97 xzdualrecovery, mod by GavityBox 3.0.0. Samsung S2 standby for Z1 when Z1 no power.
[Galaxy S 4 General] emilcioran99:
Yes, as I wrote before, now I'm on official I9505XXUFNB9 NEE with root from Chainfire and a custom recovery from Philz. :)

LE:

Think that you want to write "still rooted" not "steal rooted", isn't it? :)
[Galaxy S 4 General] foxman01:
The thing about Knox is encryption. I was in contact with a local service center that are approved by Samsung. I had Knox triggered on my gt-i9505. The solution was for the service center to contact Samsung and get the key to unlock Knox. This is not speculation from my side. It happened with me. My local service told me that Samsung may deny to send the key for unlock. It took about a day for Samsung to approve. So, it's true that only Samsung can unlock the Knox. They are the only one that have access to the key.

Skickat från min GT-I9505 via Tapatalk
[Galaxy S 4 General] timberwolf60:
Hope yours knox problem solved. Good luck. I already bye bye to Samsung and enjoying Z1. No future Samsung phone to me. I will void the warranty if knox been tripped in Singapore so quit Samsung is the only choice.

Send from my C6903 using TapatalkPro

my Sg device: Z1 rooted136 ROM by NUT with 2.7.94 xzdualrecovery, mod by GavityBox 3.0.0. Samsung S2 standby for Z1 when Z1 no power.
[Galaxy S 4 General] emilcioran99:
Is not necessarily needs to downgrade to flash firmwares/roms/themes/etc.

Have you ever seen this areas?

Galaxy S 4 i9505 Android Development

Galaxy S 4 i9505 Original Android Development

Galaxy S 4 Themes and Apps

There are many roms/kernels/recoveries/patches/themes/etc that don't need to downgrade and all of them are different.

Try each of them and you'll understand what it is about. :)
[Galaxy S 4 General] wendiko:
Just updated my i9500 to 4.4.2 now THE download mode is THE same as i9505 showing Knox counter x1.

Pretty bad

Enviado de meu GT-P3110 usando Tapatalk
[Galaxy S 4 General] okie03:
Knox - who needs it

Not sure why Samsung tied Knox to the boot-loader. Android is an open source, if i buy the phone, i can do whatever i want with it. My guess is that, Knox on these new phones are like experiments, Samsung may be releasing an enterprise phone (like blackberry) soon.

But anyways, I am hoping someone will find a way around this KNOX problem before Samsung makes KNOX it official phone security, meaning no rooting or such.
[Galaxy S 4 General] timb3rwolff73:
experiments with business-class phones and their customers:(
[Galaxy S 4 General] bungadudu:
1) That is not what open source means! Open source means you can freely take the source code from Google and do what you want with it.

For the phones that runs android there are other warranties in place.

2) Every major oem does this to protect it's devices from idiots, enforce a higher grade of security, and lower it's post-sale costs. Honoring the warranties ain't cheap.

3) Samsung phones with Knox are already the phones which offers the best security for your data. They are already better than bb and can be used in enterprise without any problem. In fact Knox is marketed as the best solution for data protection on enterprise level.

4) You can obtain root and flash whatever you want easier on Samsung phones (international versions at least) than on other phones.

If they truly wanted to stop root, they could have done this long ago.

5) In case of tripped Knox they just won't honor the sw warranties anymore. This is what they did all along but before Knox they let use reset the warranty flags with triangle away.

Now they don't - that is the problem! [emoji57]
[Galaxy S 4 General] fstorm:
There have been reports earlier in this thread stating that swapping the emmc chip resets the knox flag. That's why I'm saying it's most probably in the RPMB.

Envoyé de mon GT-I9505 en utilisant Tapatalk
[Galaxy S 4 General] AA73:
most likely that will not find a solution here for Knox and downgrade
[Galaxy S 4 General] MrFlashfist:
I sent my phone to samsung with Knox 0x1 they didn´t repair it what a surprise.
[Galaxy S 4 General] muamers:
well, my was repaired with 0x1 ... depends what the problem was ... if they think if has something to do with rooting and flashing custom ROM/Kernel, then they wont ...
[Galaxy S 4 General] Namespace73:
I did a lot of trials and experiments

finally changed files in the official update zip archive

I killed the motherboard on my phone

I sent it to warranty service and returned it to me with new motherboard and zero counter
[Galaxy S 4 General] pitastrudl:
how? send me a pm, so we dont spam the thread :)

Sent from my GT-I9505
[Galaxy S 4 General] Namespace73:
Here is not permitted to comment on these things

I'm just saying what happened to me
[Galaxy S 4 General] BrunoWestone:
so… everyone still try to find a way to reset knox…

Its un-resetable as far as i know and let me tell you that I just disassemble a knox 2.0 bootloader (From a new 9505) and it seems impossible to crack.

This Samsung boys are fu@${ with us...
[Galaxy S 4 General] pda4g:
Personally I do not care about these things once I changed my motherboard currently Knox counter on my phone is 0, but a matter of time,any time I to do rom and this undoubtedly leads to activation of the counter - sooner or later something goes wrong and Knox counter "ready"
[Galaxy S 4 General] vmmore:
Alredy knoxed... 0×1 ??

BUT still happy???. .

Guess why.. bcoz cant live with stock sammy firmware...just waiting to get knox rset...bcoz will sell this S4 AND buy other sammy S5. Wish any developer could manage to reset it...will definitely donate him..becoz dev will deserve his work..and I know. .XDA is the only place in universe..where nothing is impossible. .

?? Carry on devs.its a humble request..??
[Galaxy S 4 General] spinky360:
The chances are 50/50.

Im in gsm service domain for few years and I'm telling you that we are searching for a way. From what I know ( heard ) replacing the eMMC will resolve it. That means: there is something in the IC that is cracking or sort of TA partition just like in Sony gsm units
[Galaxy S 4 General] pda4g:
I am sure that before you try downgrade bootloader or firmware here it is important to be wipe (cleared) everything with stock Recovery 4.3 or 4.4.2 if you are with 4.4.2 recovery

only they completely erased
[Galaxy S 4 General] spinky360:
We even did NAND erase all ... Still haven't helped. Not even repartition, not even a full dump from a non Knox to Knox haven't worked. Explain this.

I have an idea for next week when I will have time. To flash like a stupid guy a total dump from a i9505G. Anyhow I have insurance on it :)
[Galaxy S 4 General] a.cid:
Keep it civil and on topic, folks. And for the record, if you're doing it for the money, you're doing it wrong :cowboy:

Thread Cleaned.

A.cid

Forum Moderator
[Galaxy S 4 General] Michal Z.:
Yeah... I have updated my 9505 to official Samsung 4.4.2 KitKat 3weeks ago. And now I have random reboots sometimes.... ****ing awesome. Can't downgrade and do anything because of KNOX and it seems that update is not going to be anytime soon...
[Galaxy S 4 General] pitastrudl:
do a factory reset, if you need any more help, pm me, so we dont spam the thread