yashsingh1/xdaforums huggingface dataset:
[Galaxy Note 3 General] Damir78:
KNOX is shameful Samsung's attempt to get out of the repairing devices. I personally put my S4 back to 4.2 and then (after bootloop) went to 4.3, without CF rooting - all via Odin. And now I have Knox 0x1, although I worked with their OFFICIAL ROM.

It's like you have your pc and manufacturer tell you that you have to upgrade to Win 8.1 and that you are NOT allowed to roll back to usual Win 8 or even Win 7!??? C'mon, WTF!!??

So, Samsung is in Apple's footsteps, but that of a few years ago, it is now even Apple more user friendly than Samsung.

Samsung, blame on you, hope you will lose your customers.

If this gonna work I will donate some money.

PS All customer laws in EU are on our side - if there is hardware failure during warranty, then they have to prove that it's your fault. And they know it now - they are already repairing devices with knox 01 if you didn't rooted or have custom ROM on it. My friends from Greece, Italy and Portugal confirmed it. But still there are some services that will try to make a fool of you.

---------- Post added at 10:41 PM ---------- Previous post was at 10:29 PM ----------

It is good news, I have heard the same from multiple sources and from Samsung's technicians. probably, there isn't hard eFuse.

Also, S3 get knox now - and there certanally isnt anything like eFuse.

We just have to be patient till some of our legends come out with a solution. Where is he* now?

* guy who jailbreaked Iphone? :confused:

DON'T GIVE UP!!!!! KEEP UP FIGHTING!
[Galaxy Note 3 General] OmanGhost:
Just wait 4me. I am work on it. Soon knox 0x0
[Galaxy Note 3 General] ktetreault14:
^^love shall be given

sent from my Note 3 or Galaxy Gear:D
[Galaxy Note 3 General] darkremi:
I hope that will be any solution for rester knox.

Good luck for developpers
[Galaxy Note 3 General] eybee1970:
if you really do it I will send 100 € directly to you...can give more infos the way you try to go for it or how far you are?

Otherwise people might think you are just kidding... ;)
[Galaxy Note 3 General] _alex74_:
Good point [MENTION=2306721]eybee1970[/MENTION]!!!

so [MENTION=4553722]OmanGhost[/MENTION] give us more details on it..... of course this "let's call procedure" is maybe decrypted with some Samsung key...

you've found exactly where is this "bootloader checking and flagging"?
[Galaxy Note 3 General] neoKushan:
It wasn't a magic battery but the story is interesting. Every PSP battery had a serial number and in the early days of hacking the device, they found a routine in the firmware to change that serial number. They didn't think much of it, after all who cares what the serial number is but as part of testing the serial number changing function, they tried random numbers - 123456, 111111, etc. and, of course, all 0's.

As it turns out, as serial number of all 0's boots the PSP into factory service mode. It was a fluke, a lucky find and you could use a hacked PSP to change the serial number of any PSP battery to make a "pandora" battery.
[Galaxy Note 3 General] roger321974:
i think this is the last joke for 2013
[Galaxy Note 3 General] newxdabie:
Today i contacted samsung in live assistance, i told to online assistant that i bricked knox counter and he asked if i rooted, then i lied, i told him that i updates from kies and in the half of update and kied crashed so i had to do emergency restore after that i realized the knox counter was bricked. he said it may be a bug with kies and i need to take my phone to samsung assistence center and talk to them, i asked if it may coid my garanties and he said need to analyzing...

im come from portugal...

now my binary counter is 3 and knox warrenty void is 1

i use e-team dn3.1.1 with bootload 4.3(maybe)

can i flash with stock rom 4.3 n7100 in sammoblie with odin after using triangule away to reset binary counter back 0? will they find some system log that comprove i rooted and using non stock rom? i also updated modem when i flashed dn3 rom( option in this rom), will they find it was bad using of phone?

thanks
[Galaxy Note 3 General] bungadudu:
You can use triangle away and flash the stock rom to get all counters to reseted except the knox counter. Factory reset and you're good to go.
[Galaxy Note 3 General] soloilmeglio:
fake 100% he is a noob... just see his posts/thread going in his profile page

Inviato dal mio SM-N9005 utilizzando Tapatalk
[Galaxy Note 3 General] Damir78:
Confirmed:

SERVICE REPAIR SHOPS CAN RESET KNOX BACK TO 0!!!!!

In just few minutes...
[Galaxy Note 3 General] DrawnToLife:
How did they do it? What conditions did you present that led them to reset it?
[Galaxy Note 3 General] kevinrocksman:
just to let you guys know a "noob" came out of left field and figured out where the hex was for making the camera have "technically" unlimited recording when no one else could figure it out so you never know
[Galaxy Note 3 General] Damir78:
Nothing special. My friend had some problems with S4 - during updating via Kies (bootloop) and we told them that. And in download mode it shows knox 0x1. But after 15 minutes, they returned it to us. Everything was ok, newest 4.3 and knox back to ZERO.
[Galaxy Note 3 General] soloilmeglio:
we will see ... I read his posts ... just do it to have an idea

Inviato dal mio SM-N9005 utilizzando Tapatalk
[Galaxy Note 3 General] chrisrotolo:
Maybe they can swap out boards like Ninjas? , but seriously I hope there is a way we can do it without replacing any hardware.
[Galaxy Note 3 General] Damir78:
LOL

No, no hardware changes... And they told me it can be done always if you didn't rooted your device. So I think knox using soft fuse, not hard. Something in bootloader I guess...
[Galaxy Note 3 General] bungadudu:
Please share the name and address of that service centre so other people will try it and hopefully gather more info :beer:
[Galaxy Note 3 General] Damir78:
I'm from Croatia, we did it in official Samsung shop.
[Galaxy Note 3 General] _alex74_:
Ok i live near Slovenian Border... he he... and here in Italy is confirmed that paying 15 euro's they will remove root and reflash Rom as new...

What i'm saying that Sammy service Center may have a additional file(bootloader, kernel or what else) that added to Odin(pit, bootloader or UMS) with latest Rom that will do the Job reflashing Rom and resetting Knox.

The time for flashing usually is less... ok.... but maybe they do checks before and after flashing...so it could be...

Maybe in Note3 we are talking to efuse.... but other devices is software... in fact some guys obtained differnt value (0x0fffff or smthg like that) as far as remember flashing a different aboot.mbm.....

The question is when and if this will be l****d.... to complicated to be discovered from zero.... no way even Chainfire gives up...
[Galaxy Note 3 General] bungadudu:
If it's confirmed that Samsung can reset the KNOX counter (without changing the mb) then we need a Samsung tech or his friend to share the method.

That shouldn't be too hard.

But for now there's no absolute confirmation.

Now we have someone saying that Sammy resets knox in Croatia and Italy.

OK.

We need 5 Croatians and 5 Italians with knox tripped to check this.

If all confirm than the solution will probably get loose in the world in the near future.

:happy.new.year:
[Galaxy Note 3 General] zocster:
Yes, we need to reset this. Damn, even BlackBerry phones allow you to install what OS you want, sideload any Android apps you want without tripping some counter. Samsung, this will be the last phone I buy from you if this is not fixed!
[Galaxy Note 3 General] darkremi:
You will found the solution, i hope so.

I gonna root my note mj7 , i count on you :p

Just kidding ;)

Sorry for the english
[Galaxy Note 3 General] rgshah3:
The king of Blackberry is here ✌
[Galaxy Note 3 General] Alahdal:
I will make US$ 11 :) ... The US$ 1 just to round the number :)
[Galaxy Note 3 General] phil10:
the knox warranty is Inside the file here : aboot.mbn

If a dev looking for to change the satut.

yes, the statut knox warranty is : 0x%x and 'll change to 0x0x and maybe the warranty knox stays always 0x0.

sorry, i'm not a dev.

here a little trace of the file : "enter ramdump mode vibrator started vibrator stopped (CSB A) (CSB B) (CSB C) (CSB) KNOX KERNEL LOCK: 0x%x KNOX WARRANTY VOID:

0x%x "

to change this to

0x0x

it's maybe the soluce.
[Galaxy Note 3 General] jamesst20:
That would actually be forcing displaying 0x0 but not change the knox warranty to 0x0. That could tricks people if they only go check if the knox warranty is void in Download mode but if it is by using an application, it is still going to display 0x1. Also, reflashing boot loader wouldn't be a good idea I think.
[Galaxy Note 3 General] djnoicatse:
Happy new year everyone!!!

Donations Updated
[Galaxy Note 3 General] bonustokin:
What is the location of the 'aboot.mbn' file? I cant seem to find it.
[Galaxy Note 3 General] nfribeiro:
It is one of the files inside "firmware".tar.md5
[Galaxy Note 3 General] Lowl1fe:
Link to thread for CF's root without tripping KNOX?
[Galaxy Note 3 General] DrawnToLife:
Probably would do you some good to read the post date of the OP. In any case, he's referencing the third sentence of this post

.
[Galaxy Note 3 General] Lowl1fe:
Dont really know what you mean with the post date, its 2 months from now. So?
[Galaxy Note 3 General] DrawnToLife:
The whole era of rooting without tripping Knox ended after the original post was made :P
[Galaxy Note 3 General] linedot:
skimmed a bit through the aboot.mbn file in a hex editor. Found a string "SMC call to set the warranty violation fuse failed"

SMC call is probably a Secure Monitor Call. I found some info here and here

Maybe it'd be possible to take a look at local arm disassembly in the aboot.mbn, find where the smc call is made, look at what gets called, what parameters exist, change them.

I have no clear Idea how to do this, just a thought.
[Galaxy Note 3 General] Lowl1fe:
Oh okay. I'm pretty green here and thought it could still be done since my I9506 is running 4.2.2
[Galaxy Note 3 General] bonustokin:
You may still be able to root with Universal Root de la Vega without tripping knox.

If you are running MJ4, MJ7, MK1, MK2 or higher you can still root, but you will trip KNOX!

Thread here http://xdaforums.com/showthread.php?t=2498850
[Galaxy Note 3 General] cezaralboiu:
sorry for asking but do you know any method of rooting galaxy s4 i9505 4.3 ML1 without knox going 0x1? is root de la vega working? thanks in advance
[Galaxy Note 3 General] picrthis:
for the S4 just kingoapp and you'll be all good.
[Galaxy Note 3 General] cezaralboiu:
and this will trip knox?
[Galaxy Note 3 General] picrthis:
No, sorry it won't trip Knox.
[Galaxy Note 3 General] cezaralboiu:
thank you man:D
[Galaxy Note 3 General] newxdabie:
an idea, if we do root las vagas wiche does not trick knox worranty in phone with knox counter 0x0, then back up with some kind of full back up, like titanium(maybe can do) or new fullback program(back up all data, bootloador,etc) then trip intencional knox counter, after that we force restore all data, should it make knox counter back to 0x0? if there do not involve an efuse, it should be work...what do you think?
[Galaxy Note 3 General] DrawnToLife:
I don't think it works like that. Knox status is (don't quote me on this) independent of traditional user data.
[Galaxy Note 3 General] newxdabie:
i know, where i said data, not only user data, it will be all phone data, since like boootloader information, kernel,rom information, base band efs, all things...
[Galaxy Note 3 General] tugas2khas:
knox flag is burned into the chip... you cannot reset it by merely restoring the phone to the early state.

all that we can do is avoid to trip that flag in the first place and root de la vega seems cannot work in new bootloader...

as for now, i just need root to use apps like greenify and TiBu...still can stand not to flash custom recovery and rom...
[Galaxy Note 3 General] st3chn0:
Anyone tried jtag to see if there's anyway of resetting the counter that way?
[Galaxy Note 3 General] gazeddy:
It has been tried and failed
[Galaxy Note 3 General] ghibli3:
But has anyone tried to downgrade the bootloader via adb using the command dd =?

I mean the only file aboot.mbn or even with files rpm.mbn and tz.mbn

I would try but I still have the bootloader unlocked MJ1 and I'm sorry to put locked bootloader just to try ..;)
[Galaxy Note 3 General] tidy:
Who has tried this and did they use riff box because im waiting for the .DLL for this phone to try there has to be away with jtag
[Galaxy Note 3 General] bungadudu:
Please see this post http://xdaforums.com/showthread.php?p=49083807 and move any discussion about how to reset knox on that thread.

This thread should be kept just for the pledges.
[Galaxy Note 3 General] tidy:
Probably some test sim or gold memory card like the old days lol
[Galaxy Note 3 General] mahmoud007:
knox

i know this sounds crazy .. but there is a way to flash eMMC using BlackBerry wiping software BBSAK and JL_cmder

i never tried it but ... i know BB depend on eMMC and i had one always Brick and unBrick it till battery finally Blows

maybe it'll work with s4 or we add new identifications for S4 it might work .. specially JL_cmder i think it might work
[Galaxy Note 3 General] OmarManLover:
No Way !!!!

after a lot of searches

I got just one truth , it's : Samsung official is beating any other developer or fan

so we must apologize to Samsung and sway for it

because their is no way to reset the knox (the God Security Feature) for Note 3 or even Galaxy S4

we must know our size and abilities

whatever the Bounty became $999999 , we will never Reset it

Thank you
[Galaxy Note 3 General] zocster:
Damn, you has my hopes up there a bit, Omar
[Galaxy Note 3 General] gazeddy:
Any system devised by man can be broken by man
[Galaxy Note 3 General] mahmoud007:
Knox

Who said that I want to reset my Knox ... I don't care about ... actually I don't want it ... All I want is to remove the security that comes with Knox witch limits your root access to almost normal access ... all I want is when I write in terminal emulator su / whoami .. I want the answer to be "root" ... not "unknown uid 0" -_-

I want that security gone !!!

Let the counter says 0x10 as long that security does not work ill be thrilled .

So if we can defeat the counter we can remove that security .

Tomorrow ill sneak a peak to what program they'll use to reset my Knox and ill be happy if they told me how to remove it

That Of course in case they actually can reset it.

Ill find out tomorrow .
[Galaxy Note 3 General] rgshah3:
Good luck finding it out buddy! You might get the bounty :P
[Galaxy Note 3 General] andyfactor:
Is this thread also investigating the removal of Knox from the bootloader as well? Quite a few people I know want the ability to flash custom firmwares again, if at all possible in the future. Or maybe a motherboard replacement will be the only way to go? I just really want anything related to Knox off my device so I can use it as I please. But for now, keep up the good work.	:svetius:
[Galaxy Note 3 General] gazeddy:
Custom firmwares can be flashed.
[Galaxy Note 3 General] andyfactor:
If custom firmwares can be flashed, than why can the stock 4.1.2 firmware be flashed back onto the device without bricking it? This makes no sense. Or is that just any firmware that is below 4.3 (without knox), that will now brick the device? Please correct me if I'm wrong.
[Galaxy Note 3 General] gazeddy:
I dont think you can go back unless the 4.1.2 rom will run on 4.3 bl
[Galaxy Note 3 General] ysr84:
I have tried downgrading on various devices.... i747m, t889v, i317m, t999, t999v and i337m

Please do not try it as it will cause wifi issues, bricking or software corruption....

As far as I believe for now, 4.3 cannot be downgraded.. it can be rooted, removal of knox on various devices but counter fix is not available...
[Galaxy Note 3 General] p4j1:
So I went to the Samsung store today as my phone was heating up too much, they were quick to point out I voided my warranty but the guy was very helpful and said he'd help me out this once. He connected the phone to his system and within 5 minutes my phone was reset and so was knox. I asked him a bit more about it, he wasn't able to go into too much detail but he gave me enough information as to what was being done. I've tried his method on a few of my friends devices and it has worked in resetting knox. It's a simple script updater but I'm not sure if I'll get in trouble releasing this information publicly?
[Galaxy Note 3 General] gazeddy:
So why say anything
[Galaxy Note 3 General] p4j1:
To let people know it can be reset by software obviously, but going by your attitude clearly not providing insight to others is not a good thing to do. Lol, ungrateful people these days...
[Galaxy Note 3 General] Kontal:
Mate, You want to say that You are on the edge of getting $2870 ? :D
[Galaxy Note 3 General] knightnz:
If you haven't signed an NDA and aren't reverse-engineering existing software, then you can do whatever you like.
[Galaxy Note 3 General] gazeddy:
All i was getting at was we are aware it can be done
[Galaxy Note 3 General] Ratata82:
Well you will have to provide some proof. And why would you get in trouble for doing this? Chainfire didn't get in trouble for releasing triangle away, region lock away etc.

Best regards
[Galaxy Note 3 General] DrawnToLife:
The amount of hope this thread has been given me over the past few days..
[Galaxy Note 3 General] chrisrotolo:
Doooooooooooo iiiittttttttttttttttt

F---in' updater script, are you kidding me?

Please let us know. It is the essence of XDA.

I hope were note being trolled.
[Galaxy Note 3 General] jetbruceli:
I am quite sure it's a troll. If someone who works at a store can do it that quickly then he or she would have let out the procedure by now.

This is pointless anymore.

I tripped mine awhile ago and have not looked back since.

The truth is you will know your phone is bad during the first month of using it.
[Galaxy Note 3 General] dawgboy1783:
Just let the cat out of the bag brother, I would :D
[Galaxy Note 3 General] dawgboy1783:
Does anyone know what this is? I haven't heard any mention of it unless I missed it.
[Galaxy Note 3 General] chrisrotolo:
I believe that is device location, through cellular gps, wifi, etc..
[Galaxy Note 3 General] dawgboy1783:
Ok was just a little curious, thanks.
[Galaxy Note 3 General] newxdabie:
you will be an Hero of xda, if you release the methodo, and you will receive a bounty, dont it sound good? why will you be in trouble? who has no reason to do what is doing is SAMSUNG!
[Galaxy Note 3 General] Riskytwin:
I trust you cause I still believe in magic!

Risky's my name
[Galaxy Note 3 General] zocster:
Share away via pm lol I won't tell
[Galaxy Note 3 General] picrthis:
So let's get this straight this guy at the local Samsung repair shop reset your Knox counter and then let you know how to do it, then you reset knox on a couple of your buddies phones, and wasn't "afraid" to do that.

Now though your afraid to get into trouble from Samsung even though you don't work for them or the repair shop nor would they even know who you really are, and you would be eligible for the reward on here for resetting Knox. Why come on here and "out yourself" about resetting knox on your buddies phones? aren't you afraid Samsung will go after you for that? how about the guy in the shop that showed you how to do it? Why even post this on this Forum? you do know what this Forum is all about?? Oh by the way you never did say how they fixed your phone from heating-up again.:confused:

Sorry I'm gonna have to call BS on this one. :rolleyes:
[Galaxy Note 3 General] Omar04:
I call it BS period. Unless he really provide the suppose script. Meanwhile BS BS and BS

BTW I saw this in a blog quoting Chainfire, is he trolling or actually he made it happen and not released yet?
[Galaxy Note 3 General] DrawnToLife:
Source? :P
[Galaxy Note 3 General] Omar04:
Hate when some ask me that like I have the need to lie. Not you BTW but here is your source. http://yashade2001.wordpress.com/category/hacking/

scroll down a little on More About Knox title then at the end of that.
[Galaxy Note 3 General] DrawnToLife:
Oh, I only asked because I don't see why you didn't put the link the first time. I'm just curious to read up on this stuff .

Edit:

See, this is why I asked for the source. The part you posted isn't quoting Chainfire, it's quoting the blog poster.

Edit 2:

Also, this.
[Galaxy Note 3 General] Omar04:
Didn't post it because was in a hurry, anyways. But yeah, by the troll meme he is trolling or something.

I just wish the guy talking about the "script" not to be a troll and actually give some light to this knox fiasco.
[Galaxy Note 3 General] Poisyx:
80€
[Galaxy Note 3 General] danieljamie:
Count me in, £10.

People here speculate it's impossible because it's an efuse, but devs may be able to edit the bootloader or do something. Yes it's probably encrypted and stuff but people hack other devices why not this one.
[Galaxy Note 3 General] hagba:
May be a good starting point would be to find out which is the one core that is efuse free.
[Galaxy Note 3 General] Raphy511:
$5 (still better than nothing!)
[Galaxy Note 3 General] djnoicatse:
I will update 2nd post with donations when I get home from work. Note 3's here in Canada just got an update (security and stabilty). I'm guessing my knox will read 0x2 after I update and root again ?.
[Galaxy Note 3 General] vgergo:
Use bounty to bribe

The only problem with a blown efuse is that Samsung may refuse warranty service.

Here is a creative solution

if enough money gets piled up, we can bribe a Samsung engineer to issue an official update which accidentally blows the efuse in all Note III-s. They could not base their warranty refusal on the state of the knox flag anymore.

we could just make a virus, which would do the same, then it's a vis major case... If most Note 3 knox flags are blown, we could just claim it's not our fault.
[Galaxy Note 3 General] p4j1:
I'm working on a way to do this and I think I've got it figured out. Expect an update this weekend coming up
[Galaxy Note 3 General] Skander1998:
I would like to raise my bounty from 40$ to 120$.

Got extra cash this month and this is the right place to spend it.
[Galaxy Note 3 General] apd:
$20 from me too!
[Galaxy Note 3 General] Jack Barrett:
$10
[Galaxy Note 3 General] djnoicatse:
AMAZING!!! I'll be waiting patiently for the weekend to arrive.?
[Galaxy Note 3 General] Sonorus:
Pretty sure it's an e-Fuse... http://xdaforums.com/showpost.php?p=31622172&postcount=9

Wouldn't it be more practical at this point to make a bootloader that ignores it? Just virtualize the efuse as 0x0 instead of physically trying to reset it. Might be just as simple as shadowing a "reprogrammable" region onto the addresses that usually shadow the "q"fuse block.

Unfortunately, this is probably out of bounds for anyone without jtag.

The idea of KNOX is not that you can't beat it, but that it's impractical to do so. I'd say a bootloader is the most likely way to beat it, only with jtag could you then proove it's "really" been blown.

This would also proove that a "hardware chain of trust" can never be reliable for security. (not that we don't already know that)
[Galaxy Note 3 General] :
If you show me evidences about some positive progress i will raise my bounty value :D

My first thought exactly :)