yashsingh1/xdaforums huggingface dataset:
[Verizon Galaxy S 5 General] waleed300:
Root Bounty

A bounty has been placed! Please check it out here http://xdaforums.com/showthread.php?t=2728051.

We are very serious about this, We have already reached $1300 in the first few hours. This will show developers that there hard work won't go unpaid or unnoticed. Together we can make a difference and achieve root while giving the one finger victory salute to the evil big red
[Verizon Galaxy S 5 General] rushless:
Agreed on your points. There should be two versions, or a waiver sign to allow the device to be unlocked. The catch being you lose all warranty support. This would cover both the support cost concerns for people messing their device up and the enterprise sales concerns as well. No legit excuse then NOT to offer to customers that want it. You would have to buy it though, rather than discounted.

Verizon and Samsung reps are touting the security of the S5 and trying to lure enterprises away from iPhone (good luck with that) and failed to convince the global company I work for. The real reason though is IT does not want to invest the time to secure and set up VPN and other corporate apps for something not called Apple iOS. Costs too much money and too much risk in IT minds.

The result is consumers that want to modify THEIR device are stuck with Samsung's odd sense of what consumers want and carriers trying to help push the device to business on their behalf. :silly:
[Verizon Galaxy S 5 General] eragon5779:
I'll try

I am willing to take a stab at it. I will download the ANCG source and try to find something to exploit. I've done similar stuff on a RockChip tablet to find a kernel. If someone could just point me in the direction of software for Windows or Linux that I could use? I really want root back. Coming from the Droid 4 and its predecessors, I already miss root after 5 days.
[Verizon Galaxy S 5 General] sureshot007:
We don't want to do it for iOS either. 9 times out of 10, the only reason that people want their device on the network is so that they can steal bandwidth and not have to use any data on their mobile plan.
[Verizon Galaxy S 5 General] mkitchin:
The bounty is only a root that would allow a rom with Safestrap, not an AOSP ROM, correct?
[Verizon Galaxy S 5 General] eragon5779:
I believe so. Even if not, I'm still.going to try it.

Sent from my white SM G900V on XDA Premium 4
[Verizon Galaxy S 5 General] mkitchin:
I read on here earlier that root plus safestrap would not allow an AOSP ROM to be used. I now see other posts that show examples of using Safestrap and CM: http://wiki.cyanogenmod.org/w/Install_CM_for_spyder

If rooting + safestrap gives the ability to run an ASOP ROM, I'm all in.
[Verizon Galaxy S 5 General] Syn Ack:
Updating OP with the bounty. Let's keep this thread for discussion and that thread for purely bounty. We wouldn't want to clutter that thread with some of the nonsense that goes on in here lol.

Root/Bootloader bounty

http://xdaforums.com/showthread.php?t=2728051
[Verizon Galaxy S 5 General] ravenofdoom:
As I've never used safestrap but only full unlocked phones, i had a few questions:

- are the kernel and radios stuck on whatever you have as a latest official build?

- does the official OS remain in place and the safestrap ROM is booted atop/alongside it

- what elements of the stock build must remain in place?

- can services be disabled or must certain ones continue to run?

- when an upgrade comes out for official ota, to take advantages of the improvements to the kernel/system applications/etc., must you upgrade the actual stock OS/kernel, or can you gain these benefits staying on a safestrap only flashing pathway

- are there performance disadvantages (e.g. inability to stop/remove background bloat) on a safestrap that would make running an aosp ROM worse in performance than an unlocked phone with the same aosp ROM?
[Verizon Galaxy S 5 General] slimc84:
-When the phone first boots up you will be given the option to boot into Safestrap or continue.

-With Safestrap you cannot flash radios or kernels.

-Services can still be disabled and you can still debloat

-In order to update to the newest firmware, you will have to unroot and do that through ODIN

- You will NOT be able to run AOSP, AOKP, etc with Safestrap. It will be strickly stock bases.

This is all based upon my experience with Safestrap on the Note 3 with Verizon.
[Verizon Galaxy S 5 General] waleed300:
To add to slimc84s reply, you can update to the newest version of the frimware/baseband/radio once it has been updated by the carrier, most custom rom developers will update their roms to include those changes and you can download and flash it. I used safestrap on my Galaxy Note 3, I actually liked it, as you can set up several different roms. When you boot up your phone, it automatically boots into SafeStrap, and from there you have I believe 5 slots that you can save roms onto, I had Hyperdrive Rom on one slot, Beans rom on another slot, and of course you can always run your stock touchwiz rom. So you can go from using one to the other in a matter of minutes!
[Verizon Galaxy S 5 General] ravenofdoom:
I take it the official OTA Samsung OS still remains (takes up storage space) and that you're essentially 'dual booting' into the other Roms? Performances wise, how are things?
[Verizon Galaxy S 5 General] waleed300:
Yes, the official OS remains, unless if you flash the custom rom over the stock touchwiz rom. In that case, it would free up some space if you don't plan on running the stock TW rom. Performance wise it depends on which rom you use, there were certain roms that did some thing better compared to others, I really love Hyperdrive's roms, he has the fastest updates, most features, and is very active and responsive. My Note 3 with Hyperdrive TW rom is way faster than my stock Galaxy S5, that's why I pledged $100 in the Root bounty thread to get this thing going too and so I can once again use Hyperdrives roms on my S5 hopefully :fingers-crossed:
[Verizon Galaxy S 5 General] x3em:
awesome guys, many thanks for organizing this. I pledged $250 in there. I've been lurking in this thread since the release date but this pushed me to register so I could pledge/post :)

I am in the same situation as many others here. just came off a rooted HTC thunderbolt and payed full price for 2x S5s to keep our unlimited data plans. I am hopeful, I do think this will happen sooner or later. I am glad there is a bounty now so we can compensate whoever achieves this.
[Verizon Galaxy S 5 General] eragon5779:
On my Droid 4, I am running PacRom in Safestrap. So maybe we could have that for our devices, as well as CM.

Sent from my white SM G900V on XDA Premium 4
[Verizon Galaxy S 5 General] npos:
A comment & a question

Regarding the effectiveness of a bounty given that Samsung/Verizon are probably wiling to pay more than we can raise... I'd assume that they're only willing to pay whoever's first, so they can send out an update to patch whatever security hole is uncovered. I seriously doubt they'll be handing out money to each successive person who discovers the same method though, and the bounty goes to the first to post an exploit. So even if the 1st person to figure this out goes to the companies, the next person would likely come to us.

So my question... It seems like those of us who are waiting should refuse any Verizon updates (security policy update, software update, etc.), since those updates might make the phone unrootable when someone claims the bounty. Is that the smart thing to do?
[Verizon Galaxy S 5 General] ravenofdoom:
Yes - if you want to be assured that your device can make use of a root exploit if/when one is released, you should refuse any OTA update for the time being.
[Verizon Galaxy S 5 General] lilsalmon:
Glad we got some play in the blogs and get the exposure. This will help the cause.

http://www.droid-life.com/2014/04/23/verizon-galaxy-s5-bounty-for-root-tops-3000-in-one-night/
[Verizon Galaxy S 5 General] ravenofdoom:
So... Let's say Android 5.0 comes out, and the GS5 is still officially on 4.4.2. The Kernel/underlying processes are still running 4.4.2 TW. If a safestrap ROM came out, would it still be limited to the services/kernel/functionality/limitations of 4.4.2?

How exactly does development on the Safestrap ROMs coincide between current android and latest release of TW... do Rom creators just take the TW ROM as its base and add/remove components/features?

If so, is there a clean ROM variant that allows you to stay on the stock TW path but to upgrade along the safestrap path to retain root - are you presumably tied to an old kernel in doing so (so as to not remove the exploit)?
[Verizon Galaxy S 5 General] eragon5779:
That's actually a really good question. You might be stuck on the old kernel.

Sent from my white SM G900V on XDA Premium 4
[Verizon Galaxy S 5 General] Franzie3:
This is correct. Unless someone makes a compatible rom based on the 4.4.2 kernel then you would be limited to whatever is available until that next exploit/root happens or if bootloader is unlocked. Sometimes you may be able to have root survive updates in which case it would be easier to maintain. This is why you dont take OTA's right away if your rooted etc
[Verizon Galaxy S 5 General] jonno95:
unless we're lucky. The verizon note 3 (they use safestrap) just got a leak this week that had a few things left open. The leaked Kitkat build allows for *ANY* compatible kernel module to be used, SElinux permissive, and allows you to odin back to previous releases. Here is more info.

But yes most likely the rom will need to be on the same release as your build.
[Verizon Galaxy S 5 General] ravenofdoom:
Do Rom developers bake-in important aspects of newer AOSP android onto the existing safestrap, or are you really just limited to what's on your existing safestrap kernel / TW base version?

I'm guessing that since you're using the official kernel/processes/etc, there's likely less bugs/crashes/force-closes on safestrap ROM's than fully recompiled ROMs on let's say a Nexus device - is this a fair assumption from previous safestrap ROM's you've used?

EDIT:

I'm just thinking from a logistical perspective of the merits of just using rooted stock TW versus using a safestrap ROM... it seems like everything running at its base is still TW and the same as stock/OTA/TW... so what improvements/benefits/performance-gains are to be achieved from a development standpoint? I'm thinking a safestrap ROM would only be able to improve upon some aesthetics / remove bloat apps/background services / add a few UI customizations... which I'm thinking you could mostly achieve with a few root add-ons to stock (since again a lot of the TW elements remain in place as opposed to a fully recompiled ROM).
[Verizon Galaxy S 5 General] rushless:
Though Safestrap is better than nothing, it results in about 3gb of storage allocated to the rom image space. Already has small enough storage for apps for my use.
[Verizon Galaxy S 5 General] Franzie3:
To be honest i've never used safestrap, i always had devices that were fully unlocked. But really i guess with the right dev, anything is possible. Really what you are doing is booting off a different rom slot while maintaining the original stock slot which maintains the kernel etc etc. You may get improvements here and there, you may not. Only time will tell.
[Verizon Galaxy S 5 General] eragon5779:
Got Linux

So, after a little effort, I got my old hard drive from a dead laptop to boot. It has Linux, so I can do some serious work without the need of a virtual machine. If anyone wants to point me in the right direction, I am open to suggestions. I was thinking about taking a look at the leaked Verizon Note 3 and Verizon Galaxy S4 KitKat firmware, as it has no security and is completely rootable, and try to find something in that kernel that is vulnerable in our kernal. Would that maybe work?

EDIT:

I am not new to this stuff, but I have been attempting to do this on an ancient machine. I just got my stuff to work on a newer one, so you can tell me to do the advanced stuff, and I will do it.
[Verizon Galaxy S 5 General] smknutson:
That's entirely possible.

~Sent from my SM-G900A using Tapatalk.
[Verizon Galaxy S 5 General] eragon5779:
Also, people used to be able to figure out how to flash stuff in the stock recovery. I looked into the Tab 2, and that was how you were able to get a custom recovery. I understand we have a locked bootloader, but is there no way to replicate the Samsung signatures? If we could do that, there would be no limit to what we could do to the device. How hard would it be to do that, if it is possible?
[Verizon Galaxy S 5 General] mexiken:
Extremely difficult. Don't bother trying to replicate keys. That is why we use exploits.

You trying to to replicate keys is like trying to replicate a real key for a house, with thousands of different lock combinations. In this sense, an exploit is like looking for an open window, or a back door being left open. This is our only real realistic option, unless of course, someone from Samsung sneaks out a bootloader, like they did with the S4....
[Verizon Galaxy S 5 General] Syn Ack:
That would be fantastic.
[Verizon Galaxy S 5 General] RedBullet:
Is one possible option here to instead use the Verizon Edge program to get the developer edition phone (unlocked)?

I assume the way that works is instead of paying $25/month for the subsidized phone forever, you pay cost of unsubsidized phone/24 months?

I presume that unsubsidized the locked and dev editions are about the same price?

Or do I just not understand how Verizon Edge works?
[Verizon Galaxy S 5 General] Syn Ack:
There's a ton of information about Edge on the internet and Verizon's website. We've also already discussed that the Dev edition Galaxy S5 is useless for us trying to get rooted or unlocked bootloaders, etc.
[Verizon Galaxy S 5 General] RedBullet:
Yea, I have been reading all the info. It might not help folks get unlocked bootloaders, but it would help me? Right?

I am guessing that this won't work with the Edge plan, since I *think* you buy the Dev Edition from the manufacturer?

But does it at least let you shave the phone subsidy price off your plan cost?
[Verizon Galaxy S 5 General] kuronosan:
Does anyone on Dalvik have a Knox counter in download mode?

I'm on ART, and I don't have a Knox counter or Knox warranty listed in the download mode - also during bootup the logcat mentions that the ART runtime mode has been detected and bootchecker is bypassed:

So I don't know if that helps anyone.
[Verizon Galaxy S 5 General] Syn Ack:
I hope this is worth something. Good eye.
[Verizon Galaxy S 5 General] leeharris100:
It's actually even more complicated than that...

It would take 100 computers with quad GPUs YEARS to crack a single good 256bit password.

When it comes to things like bootloaders, the phone hashes the code entirely so that if you change even one character it will completely change the hash and the phone will refuse to boot.
[Verizon Galaxy S 5 General] sureshot007:
I wonder how much it would cost to rent AWS to crack it.
[Verizon Galaxy S 5 General] kuronosan:
Here's what I mean:

Check your phones in Dalvik mode to see if it still does this. I don't know if the Knox counter only appears when you tamper with it or if it's there by default. All I know is it's not there (and apparently it isn't on the phone at all).
[Verizon Galaxy S 5 General] mkitchin:
If you are being serious, this is not doable.

http://www.digicert.com/TimeTravel/math.htm

Think in terms of 6.4 quadrillion years

I would likely be looking at a new handset in 6.4 quadrillion years.
[Verizon Galaxy S 5 General] Franzie3:
I noticed the same thing. I know its been mentioned quite a few times but nothing has come out of it. Might just be a false positive.
[Verizon Galaxy S 5 General] eragon5779:
Not necessarily. A guy cracked a 160 bit sha1 in 59 minutes on a rented consumer computer. Not sure how, but he did it using the GPU. I understand that the sha1 for bootloaders is 2048 bit though.

Sent from my white SM G900V on XDA Premium 4
[Verizon Galaxy S 5 General] tehgyb:
What about something like an ASIC miner that uses literally hundreds of high power multi core processors? These are commonly used in Bit coin mining and are way more powerful than many computers out there...

For instance my computer runs about 24 "kilohashes" per second, whereas some of these things run 200 "gigashashes" or more. Maybe modifying one of those could work ;) haha
[Verizon Galaxy S 5 General] ks3rv3rg:
ASICS are only programed for a specific purpose, mining. BUT, you're on the right track. FPGA miners for example were specifically used to Crack passwords or perform intense mathematical computation but can also be used to mine. So in theory you could use a FPGA to try and Crack the hash.
[Verizon Galaxy S 5 General] Phucko:
Sounds like a boinc project in the making:)
[Verizon Galaxy S 5 General] Lodaserves:
I know The T-Mo version has been rooted with CF-Auto-root by Chainfire. I think as of now that voids the warranty and trips the KNOX security so i do not think paypal fingerprint auth will work.
[Verizon Galaxy S 5 General] mexiken:
[MENTION=635680]t3t5u0[/MENTION]:

Good stuff.

Since you're knowledgable, I have a thought: what if all the people that were willing to pledge money for root, instead lent their computers to band together (a LA [MENTION=313982]home[/MENTION] kinda thing) to brute crack???? Or if we took all without root, and banded together to brute crack each other's devices???? Would that even be feasible, assuming we had someone who could code such an app that we could run???? Would it even come close????
[Verizon Galaxy S 5 General] ballisticevo:
Thank you! I'm so tired of seeing random people that have never developed a thing or starting with "I have no idea what I'm looking at" stating "I'll take a crack at it". I have been creeping around these forums for years choosing to just read discussions vs. post hoping I some how randomly stumble on an exploit. I'm no developer nor will I ever be but I can clearly see that the security of this device easily destroys many if not all previous generations of Android security. I am not very hopeful for root at this point nor terribly upset by that fact as I love the device.
[Verizon Galaxy S 5 General] sureshot007:
Say one thing as a joke and everyone blows it way out of proportion.

That being said, maybe Edward Snowden can give us the encryption keys? I'm sure he's going to need some cash soon.
[Verizon Galaxy S 5 General] eragon5779:
I was asking if it was possible and if it would be a viable option. I'm just putting ideas out there.

Sent from my white SM G900V on XDA Premium 4
[Verizon Galaxy S 5 General] kprice8:
^^^^ :good::laugh::p LOL
[Verizon Galaxy S 5 General] tillithz:
10 pages of almost nonsense, too bad I couldnt find a report entire thread. since its so derailed what the hell.....

my cat walked across the keyboard and typed out what looks like some code, ima see if this code is lucky enough to break the security on the phone and if not see if I can hack into my bank and add some funds.

I would say no offense but everyone complaining about root and how they dont know, will try to reverse a devices security is just plain silly. and do we realy need another post as to why someone needs root just for xxxxx.

what a waste of space for whats really amounting to no good info on rooting. 10 pages....
[Verizon Galaxy S 5 General] Syn Ack:
I stopped trying to manage the thread way back when ~12 people in a row posted why they need root.
[Verizon Galaxy S 5 General] dclay89:
Alright guys- rookie question since I'm coming from a galaxy nexus and have never had to mess with all this safestrap business.

If root is obtained, does that help the probability/likelihood of being able to flash roms via safestrap? Or is safestrap only a bootloader exploit that has nothing to do with root? Or am I completely off base with this...
[Verizon Galaxy S 5 General] :
http://blog.hash-of-codes.com/how-to-safestrap/

*Edit* 1st paragraph.
[Verizon Galaxy S 5 General] dclay89:
So does obtaining root help us get safestrap or does safestrap require it's own exploit?
[Verizon Galaxy S 5 General] :
If we get root then we will be able to use safestrap to flash stock based Roms. CM, AOKP, AOSP, etc will NOT work because the of the kernel. I'm not a dev so my knowledge is limited. However I have used safestrap on a few Motorola devices for other people and they seem to love it.
[Verizon Galaxy S 5 General] Exleh:
People are just stating their opinions. An exploit needs to be found soon because this thread is starting to look like a circus. Smart***'s everywhere, people acting like they know how to crack stuff, people full of false hope... Its just so much. I feel that it will happen, its just a matter of when. But we should really keep opinions to a minimum from here on out so some of us don't have to wade through a sea of bs to find out new info. :p
[Verizon Galaxy S 5 General] kidruk:
For now that would be fine because this touchwiz stock is a ram whoreeeeeeee! And is it too much to ask for a cleaner status bar and just 90 percent less bloatware? Jeez Samsung.... You have so much potential to be the all mighty monster of android!
[Verizon Galaxy S 5 General] Franzie3:
:good::good::good: ^^^ THIS!!

I agree touchwiz never was the best and allllllways bloated but i wouldnt mind a nice toned trimed down stock rom. I would probably go between that and AOSP if we got full unlock. Either way it is what it is.

Just going to sit back and wait for something to happen, just like the rest of us should. Maybe OP should change name of thread to Root Hangout until Root/Custom Recovery/Bootloader are found. That way wer can entertain the root questions and opinions, just without things getting out of line.
[Verizon Galaxy S 5 General] Syn Ack:
Nothing is out of line. Nobody has broken the rules. This thread has just become a Verizon GS5 chatroom until we get an exploit. Once something is found I'm sure all of the craziness will leave and we can talk about development in the other sections.
[Verizon Galaxy S 5 General] turbosrrgood:
Exactly this ^

It's not like there is anything "official" to discuss here right now. I found some of the "can't we just hack it?" posts amusing, but no big deal. Most of the discussion in here has been about root in one form or another. The thread has been a nice time killer as we check back in on the status every so often. I'm pretty sure that when something important happens, it will be very easy to tell.
[Verizon Galaxy S 5 General] kprice8:
I think someone got their High and Mighty pants on for no reason and started a bit of drama.. Really no need. It all seems light-hearted enough to me in that we all share the same desire to get this phone Rooted ASAP...
[Verizon Galaxy S 5 General] loismustdie555:
Don't really know if it would make any difference but I have 2 android coders/modders (Or whatever you want to call people like ChainFire) I'm in contact with that I know personally, I'll be getting a Verizon GS5 on Tuesday. But they need a firmware dump to start anything and seeing as I don't have the phone yet (broke my Galaxy S4 and I'm currently using an iJoke 4S.) I can't do anything and niether can they...

Could anyone link me to one or pm me or something?

Anyone who wants to join in can PM me and tell me what they can do. I sleep a lot but I'll get back to any PM's as soon as I can.
[Verizon Galaxy S 5 General] xgerryx:
I believe what you need is in the only post in the android development section. It's just a .tar of our stock ROM.
[Verizon Galaxy S 5 General] loismustdie555:
Thanks. I just got up and haven't looked there, been groggy and having a few personal issues to deal with to make the morning wonderful. lol