yashsingh1/xdaforums huggingface dataset:
[Galaxy Note 3 General] BrunoWestone:
Does anyone knows the flash address for the Partition table (Pit) on the S4 ??

Maybe we can Dump a partition from a unknoxed phone into the knoxed and then write the 4.2.2 unknoxed bootloader. The phone will stay pit and boot 4.2.2 unknoxed. As long as we keep the phone turned of without let him do the kernel initialisation, we shouldn't have boot-knox re-activation by kernel.

After that, flash the phone with 4.2.2 unknoxed firmware and turn the phone on. After that flash with 4.3 knoxed firmware.

Theoretically we should have a knoxed but unvoided 4.3 Jelly Bean phone.

Comments on this ?!?
[Galaxy Note 3 General] Killberty:
[MENTION=4484617]bungadudu[/MENTION] and for note 3?

hit 'thanks' if i helped you

SM-N9005 DBT-DMJ7 0x0

XDA Developers 4 premium app
[Galaxy Note 3 General] BrunoWestone:
When we know what to do, we just have to work on a USB solution.

I Believe there is one...
[Galaxy Note 3 General] eybee1970:
hm...I'd love to believe you..there is just somone gonna make it happen :angel:
[Galaxy Note 3 General] BrunoWestone:
I already found the pit address…not working:crying:

the pit from a unknoxed s4 is the same for a knoxed…

It doesn't make any sense since the knoxed firmware need to create containers to sandbox the knox. The pit should be different…

This is where i need your help guys. I'm not much of good knower of the android architectures.

Can someone help me figure this out ?
[Galaxy Note 3 General] gazeddy:
Surely the knox container itself would just be an encrypted loopback partition mounted from inside a normal partition. The problem is note3 never had a knoxless bootloader

Think like mounting an iso image to a virtual cd drive
[Galaxy Note 3 General] BrunoWestone:
Ok, assuming that one thing: Can we read the active and inactive partitions via adb ?

i believe there is a command for it.
[Galaxy Note 3 General] gazeddy:
We may need adb insecure but i dont know
[Galaxy Note 3 General] BrunoWestone:
i wounded what [MENTION=631273]Chainfire[/MENTION] have to say about this conclusions…
[Galaxy Note 3 General] thehacker911:
[MENTION=5584002]BrunoWestone[/MENTION]

You have a pm. :) Please read this.

Gesendet von meinem GT-I9505 mit Tapatalk
[Galaxy Note 3 General] :
A few days ago i wrote -how i already sayed- a PN and he answerded, that in this thread are nothing news.

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] Armazia:
Pretty much interested in this Knox security(as I bought myself a 0x1 Note 3 without knowing it was already corrupted). Amazing how the XDA Community(devs) are doing their best to kick Samsung's ass :). Thanks to all who are helping people who already are 0x1.
[Galaxy Note 3 General] amosolidu:
knox must be a software thing because s3,note 2 and s4 has this thing(knox) implemented after 4.3 android update !!! sorry for my english !!!
[Galaxy Note 3 General] Tanis64:
Sorry to say, but the KNOX Stuff could also be only activated / checked out with the 4.3 Bootloaders.

Still think it is in the Replay Protected Memory Block, the dumps of the Bootloaders show the parts where the Bootloader reads out / checked the Flag in the rpmb.

To manipulate something in the rpmb you need the Authentication Key which was written to the rpmb (part of the eMMC) at manufacturing time of the device!

Send from the outback with my GT-I9505
[Galaxy Note 3 General] tongueman87:
This may be a off topic but someone has created a tool to flash with out tripping knox, I know that doesn't help the ones with it tripped I was just curious as to how this doesn't trigger knox and if this may help in any way

http://xdaforums.com/showthread.php?t=2550120
[Galaxy Note 3 General] Nyuno:
It also doesn't help the ones that are on MJ7 BL without root... but it's great for the rest I guess.
[Galaxy Note 3 General] Ather:
this might not be anything, but when i dumped mmcblk0p1 partitoin, and went through it in notepad++, i see a line saying:

In another Line:
[Galaxy Note 3 General] mos388:
Its s great notice.
[Galaxy Note 3 General] dukhan:
So what's next?

We are still going in cycle.

Hopefully someone will dig in it more and more.

The Bounty is now 2352$

http://xdaforums.com/showthread.php?t=2486346
[Galaxy Note 3 General] BrunoWestone:
WTF !!!!!????? Can you send me that Dump please ?

Thanks in advance.
[Galaxy Note 3 General] Ather:
Just run this:

dd if=/dev/block/mmcblk0p1 of=/sdcard/modem.bin
[Galaxy Note 3 General] eybee1970:
as far as I understood, this does not differ in any case regardless if tripped KNOX or not....I am on MJ7 with KNOX tripped and I guess my dump is just the same....line by line....so how could this help? :confused:
[Galaxy Note 3 General] Ather:
Bruno asked for the dump, i just found thr lines stating knox and fuse bit

Here are some more links confirming the fuse bit:

https://www.samsungknox.com/en/blog/about-cf-auto-root

https://www.samsungknox.com/en/blog...ox-enabled-devices-and-knox-warranty-void-bit

https://www.samsungknox.com/en/blog/about-root-de-la-vega
[Galaxy Note 3 General] bungadudu:
Hehe

Samsung openly talking about root de la vega, about cf-root, even giving links to cf-root..

So this knox bit is just to confirm that you can't use knox containers bc you altereted the original system..

But what if a bad person roots my phone full of important documents and unsaved work?

There must be a way to reset knox.

And what about hardware warranty?

Waiting on your future posts, Peng Ning!
[Galaxy Note 3 General] gazeddy:
TS from the way i read it
[Galaxy Note 3 General] BrunoWestone:
It could help since the S4 i'm working with don't have that instruction.
[Galaxy Note 3 General] eybee1970:
hm..ok
[Galaxy Note 3 General] gazeddy:
But does that just mean it aint looking at the blown fuse
[Galaxy Note 3 General] dukhan:
You will get you important documents by replacing the MB. :)
[Galaxy Note 3 General] gazeddy:
Not likely due to the docs being on emmc and emmc being on mainboard
[Galaxy Note 3 General] tongueman87:
Anyone ever used avast on pc? Know how you can do a pre boot scan which checks everything before it boots or has a chance to run? Well I went ahead a said eat my a** Samsung and tripped it cause I didn't care anymore. But when I was rooted it wasn't tripped but when I flashed a recovery and a rom it displays a message at the top left unfortunately I can't screen shot that due to the phone isn't finished booting but says kernel checker voided or something of the sort. Either way I believe there is a integrated checker that makes the Knox trip. Similar to avast, and that's the reason I think is causing the constant reset of Knox counter being someone already stated they got it to zero but when rebooted it re trips. Don't know if that helps any but if we/someone can figure out what scans the recovery or os/kernel before it can boot stop it then maybe just maybe we could get the 0x0 to stay
[Galaxy Note 3 General] nabeelrazanaqvi:
KNOX Reset with android 4.4???

i wanted to ask that is it possible that KNOX can be reset when devices like SGS4, Note 3 etc gets Android 4.4 (kitkat) update??
[Galaxy Note 3 General] Nyuno:
Brave qauestion to ask concidering it is not possible yet to do so with 4.3
[Galaxy Note 3 General] nitrate:
LOL, I don't think so. That would sound similar to the mistake Sony made in 2010 to the PS3 console when they removed the OtherOS feature which was promised from the beginning of the console's lifetime. The final result was the console getting hacked afterwards which showed OtherOS running anyway while Sony stated it wouldn't be possible with the release of the PS3 slim.

But anyway I doubt that Samsung will remove a "feature" off their phones with release of a new firmware. KNOX is an attractive security enhanced feature for the employees of any company.

Gesendet von meinem SM-N9005 mit Tapatalk 2
[Galaxy Note 3 General] Tanis64:
The only thing Samsung has to do is to add a super wipe / factory reset function which set the complete device back (also all Flags and counters), including a forced nuke of all KNOX containers.

So they will not break the security of KNOX.

Send from the outback with my GT-I9505
[Galaxy Note 3 General] gazeddy:
i could live with that but it samsung would have to "leak" it
[Galaxy Note 3 General] gunjka:
My note 3 QUALCOMM SECUREBOOT ENABLE changed to QUALCOMM SECUREBOOT NONE after i flashed stock BTU rom over Unrooted Stock O2U rom

Just wondering what secureboot stands for? maybe it will help anyway to remove KNOX protection?

However knox is still 0x0
[Galaxy Note 3 General] nags92:
i gave in, i tripped 0x1 need to use root badly :P
[Galaxy Note 3 General] RusherDude:
Wow..
[Galaxy Note 3 General] Vigz:
I am very curious to see how this was implemented on eariler devices such as the GS4, Note 2, and GS3. The new 4.3 update adds Knox Counter (also called Warranty Bit) in Download mode. Were eFuses already in the previous devices? I bought a GS4 with 4.2.2 and updated it to 4.3. I tried to use Root de la Vega 0.2 and sadly it tripped the counter. Just for freaking Avast Anti-Theft. Thanks Samsung.
[Galaxy Note 3 General] RusherDude:
I bet that if they got clear which devices would get KNOX (they shown KNOX already by 2011-2012), ALL the devices getting it will have the e-fuse(s) waiting for the action.
[Galaxy Note 3 General] 01010001:
If someone wrote a virus which quickly spread and the sole purpose was to trip everyone's KNOX counter, how would they respond to that? I mean it would essentially make the counter a worthless piece of information. It also wouldn't be the customer's fault.
[Galaxy Note 3 General] RusherDude:
Unless you're rooted, I doubt anything can trigger that.. and I doubt that any virus can "root" you anyway..
[Galaxy Note 3 General] 01010001:
Doesn't seem to me like rooting is the only way to trip the counter, it seems very temperamental. Probing and poking around in the wrong places might even trip it. But I dunno, I'm not an Android coder/developer, it's just a "what if" scenario.
[Galaxy Note 3 General] OMG-FFS:
Sadly this tread isn't going anywhere really, after a month's wait I'm a cnt hair close to rooting with CF-Root (I'm already on MJ7).

On top of it I decided to go ahead and activate the KNOX app just to see what's it about, it installed a bunch of oversized duplicate apps that I can't now remove and can't de-activate the KNOX app - wasted the memory space on my fone...
[Galaxy Note 3 General] OMG-FFS:
Rooted! Couldn't wait any longer. Hope I won't need to fix anything on a warranty, never needed it anyways with any of my previous phones..
[Galaxy Note 3 General] dukhan:
Good idea.

Lets find this SOMEONE.

I am the first who will support spreading such a virus and will download it on my all devices.
[Galaxy Note 3 General] mahmoud007:
knox

very good idea ... but how you planing to do such an idea with martial art expert knox security

it couldn't accept any changes without his existence in that change even from original Rom's and Boot Loaders :confused:

i know magnet field can erase flash memories :D lol

maybe long effect on system memory would've delete the whole Jellybean along with bootloader along with knox and then ... dark tunnel ...

might work might not ... might clear the hardware identification ... but i know magnet clear the whole memory either Rom or Ram or flash Storage

don't try it if you need your phones ... its just true idea can demolish your device ... came up from frustration :(

knox warranty void : 0x1 :rolleyes:
[Galaxy Note 3 General] bungadudu:
So magnets will scramble the emmc? Making it unreadable...?

Interesting... :devil:

Too bad we've come to this... viruses, magnets... :sly: :lol:

I remember someone talking about resetting knox with jtag and a password. Samsung must have a solution for the refurbished units...

Nothing new on this front?
[Galaxy Note 3 General] 01010001:
I'd just like to clarify -- I'm not an Android coder/developer or anything like that, I was just trying to start a "what if" discussion on what Samsung would do in such a scenario.
[Galaxy Note 3 General] yashade2001:
Nothing is unreadable, efuse makes that unchangable with a hw protection.
[Galaxy Note 3 General] Vigz:
https://www.samsungknox.com/en/knox-supported-devices

If the old devices like the S3 and Note 2 do not have efuses, then Samsung is lying and that this could all be a software trigger.
[Galaxy Note 3 General] Armazia:
Having knox doesn't mean your phone has an efuse, Samsung never said that, I believe. And if they would, I wouldn't believe that the Note 2 has one, cause they could have implented it quite easy with a new bootloader. The fact is that there isn't a knox warrenty on the note 2 at the moment.
[Galaxy Note 3 General] Omar04:
1. You can remove it. (while in Knox environment tap Menu>Knox Settings>About Knox>Uninstall)

2. Waste of space? It's only 400-500MB on a 32GB device don't think it's a big deal.

3. All duplicate are Knox versión with a bit more of security.

4. Looking to a bright side to this stupid Knox fiasco... I use it as a pron storage and all that kinky stuff lol.

ELITE TESTER

Team SXTP
[Galaxy Note 3 General] Armazia:
Lol! Atleast someone that sees the bright side of knox. Samsung would have tagged this with #SMARTMOVE
[Galaxy Note 3 General] RusherDude:
They did:

Check their post talking about CF-root (and pointing to XDA lol):

https://www.samsungknox.com/en/blog/about-cf-auto-root

They clearly state that they use e-fuses to protect Knox.

However, due to the use of a customized recovery image, CF-Auto-Root will trigger the security protection embedded in the trusted boot process, and an e-fuse will be burned to indicate that a non-KNOX kernel image has been loaded to the device. For example, some KNOX security mechanisms, such as SE for Android, will trigger an e-fuse if the system is booted with an arbitrary kernel, kernel initialization script or data, and therefore be disabled and no longer function correctly.

Here they explain it better:

https://www.samsungknox.com/en/blog...ox-enabled-devices-and-knox-warranty-void-bit

To further illustrate how this works, the “KNOX Warranty Void” bit (or simply KNOX bit) is used to detect if a non-KNOX kernel has been loaded on the device. It is a one-time programmable bit in e-fuse, which can only be turned from “0” to “1” (i.e. burned). If a non-KNOX boot loader or kernel has been put on the device, KNOX can no longer guarantee the security of the KNOX Container. As a result, this KNOX bit will be burned to “1”, indicating that this device can no longer use the KNOX Container service. There are two possible scenarios: first, a new KNOX Container can no longer be created on such a device; and second, the data encrypted and stored in an existing KNOX Container can no longer be retrieved. Everything else should work just as before.
[Galaxy Note 3 General] chkenwing:
Unfortunately, this is a big deal for us Hong Kong users. Samsung being the mega lying dicks they are released a 16GB only version in Hong Kong. No plans for a 32GB version either.

Makes no sense at all considering HK is one of the largest markets for mobile phones.
[Galaxy Note 3 General] OMG-FFS:
Well, I couldn't find an option to remove it before rooting, and then it wouldn't let me in once I was rooted.

But I found a way!

If you fail to enter the correct password for 20 times, it removes itself! with all the crap it installed! LOL

Since I rooted my N3, I've also removed any traces of the Knox crap out of my fone, together with some bloat. Nice!

Regarding #3, it is a big deal I think, anything that wastes your phone space and resources is a big deal and especially if it's 1/2 a gig on like 20 Gb. The phone is 32 Gb but a big chunk of the storage is occupied, out of the box.

Didn't think of #4, LOL, I'd think there are other ways to hide your kinky stuff away. :laugh:
[Galaxy Note 3 General] Omar04:
Oh! didn't knew about Note 3 16GB variant for Hong Kong. But why the f*** they took away half? Not fair.

Elite Tester
[Galaxy Note 3 General] My1xT:
but Samsung contradicts its own sayings...

Keyword being as long as, they should make a way to restore the warranty bit when everything is stock again...
[Galaxy Note 3 General] bungadudu:
This!

I rooted -> warranty bit -> no knox etc.

Unrooted -> Samsung: "you've been a bad boy, you can't have knox anymore" (although technically you paid for it)..
[Galaxy Note 3 General] Spere:
Or it just could mean that: When rooting attemp is detected, enterprise data will not be protected anymore..

So that's it about "Secure" part of KNOX?

Lol
[Galaxy Note 3 General] My1xT:
I usually would read the as long as part as, when Root attempts are detected, knox is killed, but as soon as it's lifted knox comes back. that is what as long as means (synonym to while) and being a programmer and Playing Yugioh I pretty much have to know what words mean...
[Galaxy Note 3 General] avatar_ro:
I sent yesterday an e-mail to Sammy concerning this knox issue, i attached the PDF but it's in French so i will make a resume :)

The exact words:

"if you use your phone how we allow you to use it, you will not lose the warranty" knox 0x1 and root voids the warranty.

Is sammy allowing us to use their phone...?

This was the last phone from SAMMY! - F******k you.
[Galaxy Note 3 General] frostmore:
Let get one thing straight:

samdung has the right to PHYSICALLY alter a device which DOES NOT belong to them through the use of a software?

and even if we refuse to use knowx,samdung say we HAVE NO RIGHTS WHATSOEVER to REMOVE it.

did i get that right?

that is to say,someone has the right to do something to my property if i do not adhere to their rules and regulation?

some laws must have been broken here.
[Galaxy Note 3 General] harold5249:
I can see Samsung is following Apple path, other brand will replace Samsung. =.=
[Galaxy Note 3 General] bungadudu:
All brands do the same (HTC, moto, LG,..)

Samsung also had his own (easy to reset) method for years (that's why we used triangle away).
[Galaxy Note 3 General] Skander1998:
Samsung is one of the only manufacturers that allowed flashing and the continuation of warranty without fixing stuff allowing Triangle Away etc.

Now they have Knox and they really have to close anything that doesn't trip the counter.

I mean you can still use all of the device - don't expect warranty and knox isn't safe anymore so it gets disabled.

It's an easy thing - want your warranty and knox don't compromise the security of your device.

Want to root don't expect security and warranty.
[Galaxy Note 3 General] Maroc_Specops:
whe need Israeli scientists :) for this. these are koreans with very skillfull implementation of security.
[Galaxy Note 3 General] testadeferro:
When you buy a computer you install Linux and your warranty gets void?
[Galaxy Note 3 General] Killberty:
Was like this many years ago, the mobile sector will develop to freedom, too, but we will have to wait

hit 'thanks' if i helped you

SM-N9005 DBT-DMJ7 0x0

XDA Developers 4 premium app
[Galaxy Note 3 General] chkenwing:
Yeah absolute ball buster it was. So many people were pissed off by it that I think a lot of the loyal customers migrated to LG/Sony.

If their next iteration is still 16GB, Samsung can go E.A.D because the fact they specifically, and let me emphasize that, SPECIFICALLY, said at their announcement that they're dropping the 16GB, they're clearly lying.

I wonder if there's a basis for a law suit here, because if you think about it, it is technically false advertisement.

What's worse is that all this fiasco with the difficulties of root, I figured I would get the 16GB model and then install all my things onto a 64GB card....nope nope nope. I'll just wait a year (when the warranty expires) then root the phone.
[Galaxy Note 3 General] tcntad:
Thanks for the info:)
[Galaxy Note 3 General] sauron82:
I'm thinking that KNOX can't be (or can't only be) an e-fuse. Some S4 and S3 devices are receiving carrier updates, and some include KNOX. So how can it be a physical trigger when KNOX didn't ship on the device?

It's very possible that I have no idea what I'm talking about, or that this has already been mentioned. But it occurred to me, so I thought I'd share it.
[Galaxy Note 3 General] EddieN:
There is a possibility that the s3/s4 has unused e-fuses on the mainboard that they are rerouting to knox. That's what makes it possible for them to include KNOX afterwards on these phones.

Here's still hoping it's actually a software trigger that can be reset :(
[Galaxy Note 3 General] hey_joe:
I read one post on here that says S4's knox trigger can be rolled back to 0x0 by flashing a 4.2.2 rom. And the guy kept on insisting we try it on our N3 but sadly ours came with 4.3 stock so our case is different.
[Galaxy Note 3 General] EddieN:
In that case I'm guessing know really is resettable on the s3/s4 but non-resettable on our N3 as it comes with the supposed e-fuses :(
[Galaxy Note 3 General] yashade2001:
Anyone with PIC programming skills ? We can do it.
[Galaxy Note 3 General] :
How exactly should it work?

We are learning in school, how to program microcontrollers.

Gesendet von meinem GT-I9505 mit Tapatalk 2
[Galaxy Note 3 General] !crazy:
Security and proprietary, don't make me laugh. They was/are sending S Voice data to the NSA servers, and I should trust them with knox? But that really doesn't matter. Why should anyone Trust a black box?
[Galaxy Note 3 General] Skander1998:
There is nothing supporting your NSA claims, and yes most security suites like this are proprietary.

Conspiracy theories will get you nowhere.
[Galaxy Note 3 General] !crazy:
That's just common sense. You knowing nothing about S Voice and NSA only shows that you even don't follow security related news. The 'argument' against is that IP addresses in question were in NSA possession, but there is no prove that's still the case.

You 'argument' that most of such suites are proprietary, is just laughable as everything else you posted. What most of people do, what management decides etc, has nothing to do with anything, but people being stupid, selfish, corrupted and similar. Everyone uses Windows, does that make it the most secure OS?

If you want to trust them just be my guest.
[Galaxy Note 3 General] Skander1998:
I could argue that the XDA database is owned by the NSA and they are tracking you.

Also, I could argue that Tapatalk is related to the NSA and is now exploiting your device and looking at your gallery while spying at you with the front facing camera :)

Chill, your privacy is getting exploited everywhere at any time by everyone, by using the internet you are aware of this no matter what the privacy policy states and no matter how you trust anyone.

Your ISP is tracking you and potentially has access to everything you do on the internet, encrypted or not.

If you like Knox use it, if you don't like it don't use it, it's not preinstalled by default anyways and can be removed. (except for the knox flag and the security policy service) and spare the world the paranoia and conspiracy theories that have no actual proof.
[Galaxy Note 3 General] !crazy:
It is not that I think software like that is completely useless. If you care about random guy stealing your device, than it is probably Ok. But for that you already have a lot of other ways and tools, like encryption, OpenSSH (I will definitely trust this more then Samsung.) etc.

---------- Post added at 04:55 PM ---------- Previous post was at 04:48 PM ----------

What you are tapping here, has nothing to do with what you did in the post I commented.

You claimed that the one who removes knox, or gets the flag, has chosen against security, in a favor of playing with device. Well that's not the case. The one who removes Samsung's software, and replaces it with AOSP, has actually chosen security (better one, not absolute.) . Losing the right for warranty, even in case of physical damage, only shows how ****ed up they are.
[Galaxy Note 3 General] bungadudu:
This thread is about resetting knox.

Yashade might be up to something.

Please don't clutter the thread and try to keep it clean and easy to follow.