yashsingh1/xdaforums huggingface dataset:
[Galaxy Note 3 General] yashade2001:
As I said, the only way first way is possible.

---------- Post added at 05:47 PM ---------- Previous post was at 05:43 PM ----------

Umm. Guys, don't do this. There is a hardware protection, this is true but this is not means we can't do anything. Hardware protection is defined in the kernel, that means we can do something with software. HW protection provided by software. Maybe we're not able to delete HW protection, but we can edit software.

---------- Post added at 05:49 PM ---------- Previous post was at 05:47 PM ----------

+1. You're the most sensible man in this thread.
[Galaxy Note 3 General] sharchanas:
Currently i have bellow status and on my GT-N7100 and i am on leaked N7100XXUEMK4. Is there any way to reset custom binary download without tripping Knox?

Custom binary download: Yes (6 counts)

Current binary: Samsung Official

System status: Official

Knox warranty void: 0
[Galaxy Note 3 General] androidlover287:
Wrong section, you want the original galaxy note not the Note 3
[Galaxy Note 3 General] timberwolf60:
Try answer from hear. http://xdaforums.com/showthread.php?t=2500823

Send from my I9505 using Tapatalk Pro

ROM: I9505XXUEMK9_Knox 0x1

CSC: I9505OLBEMK3_STH

Modem: I9505XXUEMK9

Stock Kernel/Recovery
[Galaxy Note 3 General] numerouknow:
posting about note2 (n7100) in note3 thread wont help you much.

edit:

nvm...timberwolf has already posted the n7100 thread link for you.
[Galaxy Note 3 General] :
Could someone, who has root and 0x0 and someone, who has root and 0x1 dump mmcblk0boot0 and share it please?

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] Bessagabriel:
How can I extract this? Here I have root and 0x0

Enviado de meu GT-I9505 usando Tapatalk
[Galaxy Note 3 General] gazeddy:
id say something along the lines of

sudo dd if=/dev/block/mmcblk0boot0 of=/blk0.img

which will put a file named blk0.img on the root of the device that is mmcblk0boot0

You need a terminal program on the device to run this command you run it from the command line
[Galaxy Note 3 General] khaytsus:
Lowercase dd... It matters, also probably better to give specific info not general dd info.
[Galaxy Note 3 General] gazeddy:
edited thanks. ill be honest its the only way i know of to dump a partition
[Galaxy Note 3 General] Ather:
this is what i get
[Galaxy Note 3 General] gazeddy:
All that means is mmcblk0boot0 isnt mounted there. I cant help any more as i dont have root yet. Although i have been tempted to just root it and forget about knox
[Galaxy Note 3 General] Ather:
Im on SM-N9005 aswell, rooted and knox is still 0x0 but as i posted earlier, the partition is not mounted ;/ maybe try in Download mode?
[Galaxy Note 3 General] gazeddy:
Might help but i dont think it will be mounted in download or recovery.
[Galaxy Note 3 General] Ather:
What if we manually mount it? And then dump it?
[Galaxy Note 3 General] gazeddy:
That will work

But i dont know that bit
[Galaxy Note 3 General] gazeddy:
The command "df" shows all mount points and the command "mount" should list all known partitions for you i cant see mmcblk0boot0 but that may be related to me not having root
[Galaxy Note 3 General] :
A guy, who helped me, tried to dump mmcblk0boot0 with dd. He tried every things, that you could try (in Recovery, Download Mode, with Stock, with AOSP and many other things) and he couldn't find mmcblk0boot0. How could that be? The only thing is, that he didn't mount anything.

Could someone please post the complete command for mounting mmcblk0boot0?

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] Ather:
This is what mount and df Gives:
[Galaxy Note 3 General] gazeddy:
Thats virtually identical to what mine read from them 2 commands. We need to find a way of mounting mmcblk0boot0

EDIT:

http://xdaforums.com/showthread.php?t=2496840

It seems its possible without root

EDIT2 : HOTFILE is down
[Galaxy Note 3 General] :
This is only for the SM-N900. We need something for the I9505.

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] gazeddy:
If you read it it will also work for sm-9005 which this thread relates to

But its useless until the files are hosted somewhere
[Galaxy Note 3 General] nitrate:
...and it will never ever come back.

Gesendet von meinem SM-N9005 mit Tapatalk 2
[Galaxy Note 3 General] :
[MENTION=5584002]BrunoWestone[/MENTION]

Could you please try to dump with your JTAG the mmcblk0boot0 partition?

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] danieljamie:
Well, this doesn't exist.

If you do

ls /dev/block

Then you can see what is there.

If you run

dd if=/dev/block/mmcblk0rpmb of=/sdcard/blk0.img

Then it works (I don't know what rpmb is)
[Galaxy Note 3 General] Tuldi:
Okay. . Farting on the phone, dosen't reset anything. . Just makes it smell nasty :(

T{-_-}ldi was here.
[Galaxy Note 3 General] Ather:
Here is the generated file:

https://www.dropbox.com/s/xz61pvhszu9a6pc/blk0.img
[Galaxy Note 3 General] :
Thank you. How can we look, if it is the right partition? :D

From which devicde is it and what's your KNOX flag?

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] Ather:
This is from the sm-n9005 lte version, my knox is 0x0 and im rooted, running version Mj7, i guess other will have to dump their's aswell so we csn compare?
[Galaxy Note 3 General] danieljamie:
https://www.dropbox.com/s/94dhv01maeuoev7/blk0.img

This is from sm-n9005, knox 0x1, mj7 djembey
[Galaxy Note 3 General] :
Both files are empty. I think, this are the wrong files/partitions.

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] :
I wrote a PN to Chainfire and he said, that he already compared everything.

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] JCM800:
Sigh - if chainfire has given up, oh dear.

I'm looking forward to the next Sammy devices, but sadly my Note 3 will be my last I think.

I rooted it and flash roms and live in daily fear of a hardware fault.

Shouldn't be this way. Damn you Samsung, becoming too much like Apple.
[Galaxy Note 3 General] drew071:
Sounds like Sammy may become a victim of their own success. The appeal of Samsung to me was the ease of which you could flash. Looks like we will have to find a new manufacturer.

Drew
[Galaxy Note 3 General] JCM800:
Yep, but we're just a drop in the ocean to them.

It's a shame as they're the best of a bad bunch right now.

Can't see them ever retracting Knox now.
[Galaxy Note 3 General] :
Let's sell the S4 and N3 and buy a N5. :thumbup:

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] gazeddy:
I dont want knox retracting i just want a method of killing it off in OUR phones
[Galaxy Note 3 General] JCM800:
Looks like there won't be that option.
[Galaxy Note 3 General] gazeddy:
Might just have to trip it then
[Galaxy Note 3 General] JCM800:
I already have tripped mine. A few weeks ago after I spent £620 on the device.

It's a liberating, but very scarey feeling knowing my phone will be useless if things go wrong.
[Galaxy Note 3 General] drew071:
Agreed but isn't it this community that helped Samsung gain the reputation for there newer devices since the s1 days. I personally think the pre s1 devices were shoddy quality that could barely make a Call. Then i got the s1 and started flashing and actually grew to like Samsung and the fact they didn't lock bootloaders etc.

If samsung mainstream Knox across all devices then the drop in the ocean suddenly gets a lot bigger. If you add all Sammy devices dev communities together i think it would be a hell of a lot of people lol.

Drew
[Galaxy Note 3 General] gazeddy:
Put it this way im on the bleeding edge compared to my friends but they are on s2 and s3 all of them rooted and running custom roms. I think a lot of tweakers are less vocal than us
[Galaxy Note 3 General] jasonkhoo87:
Agree with all... This might be my last Samsung device... I honor Samsung because of root and flash without worry..

I'm thinking of Acer product next time.
[Galaxy Note 3 General] frostmore:
I would very much prefer to have knox removed from my phone instead of trying to reset it.

personally,i think its a lot easier to uninstall/remove than crack a software samsung spent millions researching on.

that being said,samsung's appeal to me is also waning.the fact they got nice hardware,crappy software but easily rectified by flashing a bloatware free rom or CM is one of the main reason why i bought their phones.

with the roll out of knox and samsung's behaviour becoming like crapple(locked bootloaders,refusal to support independent developvers so that they can ensure users can have the "samsung experience"),i might as well go back to htc or better yet stick to my note 2 till it dies.

knox,an enterprise solution,is being forced down consumers who have no need for it.samsung must have broken some laws somewhere and i hope a class action suit will follow to bend them over.

htc learnt that alienating independent developers led to the decrease in sales of their phones,samsung i suppose,will also need to learn the hard way.when they see decrease sales of their ob-knox-ious phones,maybe they will start to realise millions of cm users re the reason why their phones had so much sales.
[Galaxy Note 3 General] raychak:
Agree, Note3 should be the last Sammy phone if no solution to Knox...
[Galaxy Note 3 General] gazeddy:
Will be my last although im tied to it for 2 yrs in reality
[Galaxy Note 3 General] Ogy77:
Can you explain what you think under hardware fault,I want root but I scare:(
[Galaxy Note 3 General] JCM800:
I mean. .if my home button quits, or a volume rocker needs replacing. Samsung will refuse to repair it under warranty now, simply because I've flashed a Rom or two.
[Galaxy Note 3 General] gazeddy:
In europe they cant.
[Galaxy Note 3 General] JCM800:
Really? Hope I never have to find out.
[Galaxy Note 3 General] gazeddy:
Well they have to prove by rooting/flashing it caused your issue. I cant personally see anyway a flash can make the hardware fail
[Galaxy Note 3 General] frostmore:
and what is CF's view on this?

since resetting it is a no go,how about removing it??

or we still need access to sammy's bootloader to reverse engineer this out?
[Galaxy Note 3 General] JCM800:
A flash wouldn't cause a hardware issue. I'm just thinking if I had to send it to a Samsung service centre knox flag is now the first thing they check Regardless of the issue? But I'm speculating, it's all clear as mud. Samsung should have the decency to elaborate on this clause.
[Galaxy Note 3 General] GhiGo65:
Edited.....
[Galaxy Note 3 General] panosfast:
Hi guys I have a thought and i wan to share it with you maybe is a stupid one

The knox after all is a system app with specific job to do now if we make a backup from the original app before show 0x1 and after restored this app in device with stock firmware and root access with 0x1 counter wat gonna happen?
[Galaxy Note 3 General] zabumba:
I think this knox thing is in the bootloader. Maybe someone could manage to edit that specific part.
[Galaxy Note 3 General] xuggs:
[MENTION=225651]op[/MENTION] Maybe you can go back to the same guy and ask him nicely what he did to reset it. If he was nice enough to reset it for free then he probably will be nice enough to let you know and oh in case it's a windows tool, take a flash drive with you just in case he is extremely friendly.
[Galaxy Note 3 General] RobHands:
That would make him the nicest person on earth :laugh:
[Galaxy Note 3 General] mouse100:
I agree :D

We could also make some donations to OP after we check that the software works.

Galaxy Note 3 | SM-9005 | Tapatalk
[Galaxy Note 3 General] My1xT:
I dont have paypal so count me out for the donations, but I will be very happy...
[Galaxy Note 3 General] :
i can actually go to a service center tomorrow (or at least) a retailer that might not have a clue at all, but again i wouldn't doubt that it's reversible since yeah if they're failing on Kies and you need to reflash the rom again you'll get Knox 0x1 and this isn't okay so i wouldn't be surprised if theres a tool to revert back to 0x0

samsung uses tools for everything :silly:
[Galaxy Note 3 General] Mr.Mefisto:
I think in the near future we will have a some-kind of tool for this Knox impediment!
[Galaxy Note 3 General] kakyyabata:
Samsung KNOX uses systematic security checks to ensure that only valid kernels are used. First, in the hardware, the Primary Boot Loader verifies the integrity of the Secondary Boot Loader 1, by authenticating its signature using a PKI certificate. Similarly, the Secondary Boot Loader 1 verifies the integrity of the Secondary Boot Loader 2, and the Secondary Boot Loader 2 verifies the integrity of the Android Boot Loader. The Android Boot Loader loads only a Samsung-authorized kernel, which has a Samsung certificate as its Root-of-Trust

https://www.samsungknox.com/overview/technical-details

is that mean Konx in the boot loader
[Galaxy Note 3 General] My1xT:
I dont know but i don't think that knix is in the loader, coz if you flash a new one the knox flag would be replaced with a new value, but it isn't...

Gesendet von meinem GT-P3110 mit Tapatalk 4 Beta
[Galaxy Note 3 General] overkillZ:
dont thinik so.. its not sure all the bootloaders change when you flash a new firmware, and you cant flash witch bootloader you want, cuz there are 2 others that autorize the bl to see if its "okay" to flash. in somone of the hard-protected bl´s the are a sneaky knox thingy....
[Galaxy Note 3 General] kakyyabata:
i think we have two boot loader in our devices the first boot loader can replace when we flash with the new rom and the other one still in device to check the stock kernel and the other stock stuff and this cannot be change its need to remove or replace so when we flash any rom or SCS or anything not stock the second boot loader make knox 0x1

edit

the second boot loader i think its working all the time and it take full boot with device to check everything - Firmware,kernel,modem and first boot loader
[Galaxy Note 3 General] Ather:
We could check the first update of S4 that brought knox with it and study it maybe?
[Galaxy Note 3 General] zroice:
good news!

My theory:

Odin works in conjunction with knox - have you noticed the messages about bootloader check or smth in odin or on the device (dont remember where ive seen it) after flashing with odin?

It might me that odin actually sets the bit and with older or special odin version this is not executed and thus not setting the bit inside the bootloader? idk just an idea..

Has anyone ever tried flashing with older odin versions?
[Galaxy Note 3 General] ultramag69:
Yes, get rid of warranty void didn't work...
[Galaxy Note 3 General] sangalaviral:
My friend works with Samsung India and i just made a call to him to inquiry about the 'Alleged" tool to reset knox. He told me that knox was specifically made for US and is being developed in india. So i have asked him to look up for the tool to reset the knox if there is any.

Dont get excited yet!!! Lets wait till he replies back
[Galaxy Note 3 General] My1xT:
when it's made for the US then why do the intl phones have this crap...
[Galaxy Note 3 General] sangalaviral:
If he does finds that tool and shares with me, then i will make sure it reaches XDA somehow.
[Galaxy Note 3 General] My1xT:
that's pretty nice...
[Galaxy Note 3 General] bungadudu:
See this thread - http://xdaforums.com/showthread.php?t=2517816

The majority says the knox counter does not automatically void the warranty.
[Galaxy Note 3 General] :
I don't know. He said, that he compared the full dumps and found nothing.

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] bungadudu:
We need a Samsung tech to spill the beans!
[Galaxy Note 3 General] :
We must go to Samsung and throw them our phones on their stupid head. :cool::thumbup::D

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] donalgodon:
In the S4 thread, when Knox first rolled out, there were users who were running unrooted, stock ROMs and recoveries who had Knox flag tripped. If that's the case, and I have no reason to assume that these users were lying, it would be tough to prove that the user modified the system in all cases, as as such, would provide arguable grounds for appeal in warranty cases.

If I ever needed it, I'd certainly consider such an approach. From my perspective, the end-user should have an option to use Knox or not. Instead, in true Samdung fashion it was rammed down our throats. It's not as much a safety feature as it is a trojan horse warranty escape clause.
[Galaxy Note 3 General] bungadudu:
The main discussion is not about if the knox suite is useful or not for the regular user (after all the knox app must be downloaded, installed, configured and used solely by the user), but about the knox counter which can be used by Samsung as an indicator of modding the original software and so would void the warranty.

All of the other OEM 's have their own method of knowing when you've modified the system so to void your warranty, Samsung used a simple flag before and now (maybe) uses the knox counter.

Nothing new under the sun.

Let's put the demagogy aside and accept that it's their right to protect the integrity of the original software as to ensure it's stability and also limit the bogus warranty claims.

But beside this, what must be stated, shouted loud and clear is that we should have the benefit of hardware warranty until proven user fault (like someone said they can't refuse to replace a broken button, a swollen battery because you've rooted the phone, that's just moronic).
[Galaxy Note 3 General] Keithgordon:
I just got off the phone with Samsung, because I flashed my phone with Kies 3.0 and it tripped my warranty flag to 0x1, they are fully aware of the fact that kies trips the warranty flag, and carriers don't usually care, I have sprint and they never do.
[Galaxy Note 3 General] tongueman87:
So what your saying is that you could claim it was due to kies? I have a question as well. Is there a way to build a rom per say jedi by ptmr3 and make so that you can flash via Odin or something of the sort almost like we gained root without custom recovery or tripping knox, or the way we restore to oem settings with a tar would that work or be some sort of work around?
[Galaxy Note 3 General] Tanis64:
After reading the pdf about eMMC I think the KNOX Warranty Void Flag lays in the 'Replay Protected Memory Block' RPMB

I don't think you can read out that with plain Linux commands, you need the Authentication Key from Samsung, the Data Structure that is used in that RPMB Area and the knowledge to code a tool that uses that transaction messages in the right way to read out that block correctly.

Send from the outback with my GT-I9505
[Galaxy Note 3 General] yashade2001:
Can anyone give me the stock and non stock dump?

---------- Post added at 11:56 AM ---------- Previous post was at 11:54 AM ----------

Nice point.
[Galaxy Note 3 General] :
Why do you need it? Chainfire said, that he had already compared everything. And I think, if Chainfire can't crack it, then nobody can crack it. :(

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] Ather:
How about if we switch the rpmb partions?
[Galaxy Note 3 General] bungadudu:
Because there are quite a few reports that Samsung can reset the counter.

If Cf abandoned this, does not mean all should give up.

I'm sure if enough smart, resourceful people put their minds together a solution would arise (or a friend of a friend of a Samsung technician would just offer it anonymously)
[Galaxy Note 3 General] gazeddy:
I read the dumps already in this thread they are blank we need to get around the protection to dump them.

---------- Post added at 10:05 AM ---------- Previous post was at 10:04 AM ----------

Has Cf abandoned this or is he just not looking at the rpmb partition anymore?
[Galaxy Note 3 General] nitrate:
When is someone willing and trying to contact marcan or sven from the f0f (fail0verflow) team? Possibly they are able to do something about this bootloader / KNOX flag / partition dumping / flag resetting problem. Those guys are hardware / security hackers.

They have lots of console / hardware knowledge and worked on the Wii, PS3 and also the Wii U. Why not ask them if they will have a look into a smartphone / bootloader?

I already tried contacting marcan via twitter. But there was no response (yet).

Someone else should try.

Gesendet von meinem SM-N9005 mit Tapatalk 2
[Galaxy Note 3 General] frostmore:
i suppose at the end of the day,we need to crack open the bootloader to get the info we need.

the rom does not contain any info CF needs,its now in the bootloader....
[Galaxy Note 3 General] tongueman87:
I take it this was a dumb idea
[Galaxy Note 3 General] xclub_101:
I would expect that the Knox flag is something like a match between the status of a number of efuses inside the CPU and a form of "checksum" stored in the emmc (probably in the bootloader, and to be honest if I was Samsung I would have also added the phone SN as a part of the checksum so as to make things as different as possible from one phone to another).

Part of the implementation is that the bootloader code verifies signatures on the boot path (kernel and recovery) and if those do not match it burns the next free efuse - those creating a mismatch. Any such mismatch is then reported as Knox 0x1 (and eventually stored in some other place in the emmc for display). This explains why a full write on jtag TEMPORARILY fixes the Knox status - that only rewrites the display flag, but on next full boot the bootloader checks the match (efuses <-> checksum) again, and since it fails it sets the flag back.

The interesting thing is that in the absence of a way to add-in a CPU-unique or phone-unique value there are not many efuses available - my guess would be only the 5 that we see listed in the form of S1, T1, R1, A1, P1). And those are also used to implement some stuff for the recovery from reactivation lock, there is a Samsung document on that somewhere.
[Galaxy Note 3 General] dukhan:
Direct him to this Bounty.. it is 2282$ and getting increase:

http://xdaforums.com/showthread.php?t=2486346

What is his twitter account ?
[Galaxy Note 3 General] yashade2001:
Don't try to do something, the only way is deleting that damn hw protection and writing the stock dump to place of dump.
[Galaxy Note 3 General] gazeddy:
Not the only way. Another way is to surely write a new knox free bootloader
[Galaxy Note 3 General] yashade2001:
The other problem is stock kernel doesn't have visable mmcblk0boot0 symlink.

---------- Post added at 10:02 PM ---------- Previous post was at 10:00 PM ----------

No. You will just edit ui of bootloader when you do that. Samsung has a tool for checking that.

---------- Post added at 10:04 PM ---------- Previous post was at 10:02 PM ----------

Or we can reprogram efuse.
[Galaxy Note 3 General] :
At first you need to find out, where the flag is stored. CF couldn't find it, so how you want to do this?

I think we should find a way to downgrade the bootloader and not to reset the flag. Because a downgrade is easier. :)

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] donalgodon:
On the S4, the older Knox-Free bootloader did not allow audio to function on 4.3+ ROMs.
[Galaxy Note 3 General] :
Don't use stock and you won't have any problems.

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] yashade2001:
Maybe it's not in a emmc partition.
[Galaxy Note 3 General] bungadudu:
I thought all signs indicated rpmb..
[Galaxy Note 3 General] gazeddy:
So to reset knox we either need the hw key or jtag box?