yashsingh1/xdaforums huggingface dataset:
[Verizon Galaxy S 5 General] Didact74:
Is it safe to say that the exhaustion attack will not work due to the increased number of allowed processes to run?

Or is it because there is a setuid failure check now?

EDIT******

Nevermind...answered my own question. There is a setuid failure check in place now.
[Verizon Galaxy S 5 General] weathertom:
$200 (ATT)
[Verizon Galaxy S 5 General] jcase:
Cleaned again

Next "mass" clean up I do, and the thread gets closed
[Verizon Galaxy S 5 General] jcase:
Congrats for the off topic posts in reply to my warning, thread closed until further notice
[Verizon Galaxy S 5 General] jcase:
Thread reopened.

Please do not post in this thread if your post does not meet these guide lines

"Thank you" "^this" "close the thread" should not be the types of posts we see here

Do not reply to mod warnings posts.
[Verizon Galaxy S 5 General] swayze91:
15$ for att root. I really wanna see this thing rooted!
[Verizon Galaxy S 5 General] miked63017:
Has anybody tried flashing just /system in odin? Could somebody test this one https://drive.google.com/file/d/0Bxs6BsnizttkUXVzM3lXVnJ4MTg/edit?usp=sharing

Odin will hang for a minute or 2 while verifying md5 hash of system, give it time.

Please provide a screenshot of any odin output, also wait 2 minutes after boot and grab the contents of /mnt/sdcard/partial_root.log (it will take a minute or 2 to populate).

Want to make sure I mention this is for vzw, I know there are att lurkers around. If it works for vzw I will make one for att too
[Verizon Galaxy S 5 General] lbrito:
$50 - Verizon

Put me down for $50 for Verizon
[Verizon Galaxy S 5 General] Sneakytiki:
I know I'm new with a limited post history but I did want to add to my bounty. I still want to keep my $100 root bounty. I just love this phone. I saw the rumors of bootloader unlock but whatever with those. I will up root bounty to $125 for now, ill try to increase $25 per month. I will also pay $50 for a safe strap once achieved. I will also pay $100 additional for a full bootloader unlock if that's even possible, maybe more depending on what I can install.

For those that judge and say just pay out the contract and termination fees to switch. I can't do that. I'm a medic in the national guard and verizon has always had the best service, especially during power outages during storms.

Currently I'm trying to warranty my phone due to issues with it constantly trying to switch to global service instead of LTE/CDMA so let me know if any files from this first generation S5 can be of help.

If the prime comes out, I'm trying to weasel my way into that instead of this phone with Verizon. But the battery life on ultra power saving has gotten me through heavy use with land navigation in a rural area when comms are important. Battery drain of 2-4 percent an hour with still talking, text messaging and having Internet is great. Using 2-5 percent overnight on sleep cycles of about 7 hours. So this phone is the first that lets me get through a full MUTA 6 which is a full training weekend. My old RAZR Maxx got me 48 hours max and that's with a kexec kernel. The only thing my old phone was better with was a 1% usage overnight for 8 hours but I need root for that.

Thank you everybody for everything you have put into this and I know some thing will be found eventually.
[Verizon Galaxy S 5 General] miked63017:
Anybody have any luck with this? Please provide logs so we can take it to the next level.
[Verizon Galaxy S 5 General] robstunner:
I'd have done it a few hours ago if it were att version :(
[Verizon Galaxy S 5 General] Dennisg34:
PM Sent
[Verizon Galaxy S 5 General] Dennisg34:
Since I'm tired and can't figure out how to send pictures VIA PM, here's what I am seeing..you can PM me for further steps or just here

When I click start, nothing happens, only what you see to the left
[Verizon Galaxy S 5 General] miked63017:
It looks like your phone is not connected, or not in download mode while connected. disconnect it, power it off, then hold volume down + home + power, when prompted press volume up to continue, then connect the phone and press start.
[Verizon Galaxy S 5 General] Dennisg34:
I noticed it didn't look connected VIA Odin, but It is in download mode..i'll try again
[Verizon Galaxy S 5 General] miked63017:
Maybe you need a driver update
[Verizon Galaxy S 5 General] kprice8:
Or perhaps [MENTION=5097452]Dennisg34[/MENTION] needs a new version of Odin installer?
[Verizon Galaxy S 5 General] Dennisg34:
Worked fine on my S4 haha but yes, trying with newer version now
[Verizon Galaxy S 5 General] miked63017:
I was using the one that comes with chainfires root package.
[Verizon Galaxy S 5 General] Dennisg34:
Failed..
[Verizon Galaxy S 5 General] miked63017:
Failure is still a good possibility, but aren't you supposed to use AP in that version of odin?
[Verizon Galaxy S 5 General] Dennisg34:
Just did AP too, failed, and running as Admin for Odin as well
[Verizon Galaxy S 5 General] miked63017:
Same message under AP I assume? Thanks for testing anyway, sorry if I got anybody's hopes up :( . It might still make a good root for unlocked models that won't trip KNOX
[Verizon Galaxy S 5 General] Dennisg34:
Yeah same thing, no worries, about desperate at this point for root willing to sacrifice my phone. I have insurance (yes, I understand bricking is not covered, i've sent one to Verizon before, I just fry everything)
[Verizon Galaxy S 5 General] miked63017:
I could give something a lot more dangerous if you want :)

I found a doc that is supposedly leaked from samsung. It states the location of the signature on mbn files. I was actually wondering if we used the signature from the VZW mbn files, by grabbing it with dd, and wrote it over the signature on the sprint mbn files. Would basically be bootloaders from the sprint gs5 with VZW signatures. You seem to not really care too much, but it is an extremely high possibility of a brick. You want me to make the files up for you [MENTION=5097452]Dennisg34[/MENTION] ?
[Verizon Galaxy S 5 General] Dennisg34:
Yeah I don't think that'll work, Verizon wouldn't let something that simple be overlooked. Make em and in a week if no progress I'll bite the bullet.
[Verizon Galaxy S 5 General] ryclegman:
What are the honest chances of a brick? i mean this does sound plausible and I might be up for something risky.:highfive:
[Verizon Galaxy S 5 General] miked63017:
Chances of a brick are VERY high, I will try to make up a package today and if anybody wants to try feel free but I cannot advise after the flash what to do if it bricks. I can try, but most likely it will be uncarted territory with this phone post flash.

---------- Post added at 05:52 PM ---------- Previous post was at 05:51 PM ----------
[Verizon Galaxy S 5 General] jcase:
Chances of brick are 0%, as it won't flash in the first place.
[Verizon Galaxy S 5 General] miked63017:
Have you tried swapping signatures already? I want to help but don't own a vzw s5 so sorry if you feel I'm wasting your time, but I have to ask. There are many examples of someone saying something doesn't work, or is broken, here on xda and in actuality they were missing something, so please don't take offense.
[Verizon Galaxy S 5 General] jcase:
I dont feel time is wasted, just trying to save you time.

Flaws in this attack are:

A) Download mode requires properly signed binaries to flash

B) Bootloaders have to be properly signed to boot

C) Copying and pasting signatures would result in invalid signatures on whatever binary you altered.
[Verizon Galaxy S 5 General] miked63017:
Are the signatures on the bootloader files similar to those that would be on the bootimg, in other words tied to a signing key and the shasum of the binary blob?
[Verizon Galaxy S 5 General] jcase:
Yes, and the whole boot chain is signed
[Verizon Galaxy S 5 General] corona63976:
Why don't you try then jcase?

---------- Post added at 03:54 PM ---------- Previous post was at 03:38 PM ----------

Isn't there a VM you can create on your pic put the files codes ect. And run them inside the VM so you don't brick the device?
[Verizon Galaxy S 5 General] jcase:
Try what? flashing malsigned images? I don't need to try, it wont work.
[Verizon Galaxy S 5 General] cquick97:
Just because something isn't SUPPOSED to work, doesn't mean it wont. That is the whole process of finding and exploiting vulnerabilities. A programmer makes something they think is secure and someone tries something that they over looked, and boom root. You can't know that it won't work until it is tried. I'm not saying you need to do it specifically, but you can't just blow it off. I'm sure there are a lot of things that have been overlooked when people have the mentality of that.

Someone who wants to try, should still at least try.

Sorry, I am not at all trying to be offensive, or to belittle your experience, but I do feel as though every possibility should be extensively examined if we want a chance at root, whether we think it will work or not...

More on topic: I would like to bump up to $35 for Verizon root.
[Verizon Galaxy S 5 General] jcase:
I'm pretty well familiar with the process of finding vulnerabilities and writing exploits, I have more than a few under my belt. You absolutely can know it won't work when, like me, you have taken the time to look.
[Verizon Galaxy S 5 General] miked63017:
[MENTION=2376614]jcase[/MENTION] you seem pretty knowledgable so I am wondering if this has already been investigated, anyone else please feel free to chime in if you know as well. A few days ago was the first time I have ever installed kies, and I pulled the odin file from the tenp dir during the upgrade process. So...my question:

It seems like while upgrading via kies, after the update is downloaded and extracted, the phone is put into D/L mode. There is an extremely long pause before flashing begins. Process exploration shows several odin threads running in the background and the pause is way longer than any md5 verification I have ever seen.

What is going on during this pause?

Has there been any exploit investigation on kies?

Does kies do anything different than the odin packages we use?

Basically I'm wondering if kies might have the ability to sign something, among the other questions.
[Verizon Galaxy S 5 General] jcase:
What is going on during this pause?

Validation of the image

Has there been any exploit investigation on kies?

yes

Does kies do anything different than the odin packages we use?

no

Basically I'm wondering if kies might have the ability to sign something, among the other questions.

no

Kies is just behaving like odin, or heimdall, nothing special
[Verizon Galaxy S 5 General] phlewyd:
$50.00 pledge for aforementioned Root Method Exploit on Verizon Samsung Galaxy S5.
[Verizon Galaxy S 5 General] phrozenwire:
How this is achieved ?

This has been posted in the Android Development Forums.

http://xdaforums.com/showthread.php?p=52991057

How can this be done if we dont have root access and we cant modify system files.
[Verizon Galaxy S 5 General] inline6power:
Dev phone
[Verizon Galaxy S 5 General] Demiurge7:
Getting off track here, so want to throw in some perspectives...

I just want it to be known that I do not want to discriminate when adding pledges, based on whatever judgement I may have on a particular profile. I know I was a long-time lurker before I decided to post, while maintaining a regular flashaholic lifestyle throughout (and donating often) - just because I had little interaction, did not mean I would not keep my word. Therefore, I wanted to put all pledges out there, trusting that the developer will be able to differentiate real pledges from potential "padding" on their own. This, along with using previous bounties as a standard for what percentage may be paid out overall. Potentially at least. I have even made a side-spreadsheet to assist, that calculates these factors - as well as categorizing likelihood of fulfilling their pledge based on many factors (profile age, thanks-vs-posts, pledge amount, amount of posts, etc...consequently, a very conservative calculation is still leagues higher than any previous bounty I know of). I think we should also remember that these devs know whats going on here just as well as us. If the projected total is not sufficient for time invested, then so be it - that is understandable, and we will hopefully continue to build... but I do not see how having this guaranteed would change the outcome of success so dramatically. This would result in the same gross total; those who were serious will be seriously obligated, those who were padding would not even participate.

This seems to me like the lack of open progress, along with restlessness, is causing us to look and speculate on visible problems... when the problem is largely still the difficulty of finding an exploit itself. In any event; I believed gaining the exposure and bringing attention to this was one of the paramount points of this thread. It also seemed logical that (given the difficulty of root on this device) the exalted, catapulted status given to someone who was able to crack this hardest-popular-variant-in-history, would also play a larger factor than the bounty itself. Naive, perhaps - but with good intention, and with hopes that the bounty total (no matter how accurate the conclusion is) was a direct reflection of how badly the users wanted this to happen. I know that times have changed in terms of time invested, but this seems to be the best bet given the selective exposure granted by XDA, while still within the user-protective rules of XDA. If anyone has a better, risk-free way of creating a guaranteed bounty elsewhere - then I am sure it will develop out of necessity eventually (and am open to do whatever I can to facilitate any improvements here). For now, I hope we can quell the restlessness and speculation, stay honest, patient, and keep the thread relevant.

:good:
[Verizon Galaxy S 5 General] dikidera:
So, is there some ROM one can work on without having hands on the device, or is it simply not possible without the device?
[Verizon Galaxy S 5 General] az-dave:
links to The stock ROM's for ATT & VZN have been posted way way back in this thread, and are downloadable. I obviously downloaded the ATT ROM. They extract to .md5 files

You can slice and dice and mess with the md5 and tar files without the device using your choice of Linux, but to find an exploit you prob need the device in hand in order to issue the commands unless your looking into the binaries themselves. And thats not easy since they are compiled and you dont have the source code and you cant reverse-compile unless your the NSA.

Ive attempted a few tricks that have worked for other types of devices using Ubuntu Linux from a remote USB...didnt end well...this device is locked down darn tight, even attempting to look at /system via a linux terminal was prohibited.

I have the Use_Low_Ship ROM for the G900A, its too big to email, but the link still works...for now.
[Verizon Galaxy S 5 General] dirf:
Pledging $20 towards an AT&T root.
[Verizon Galaxy S 5 General] Demiurge7:
Ok, though this isn't the place for it - everyone got their opinions on this subject out. Whatever the case may be, this discussion should stop now - to prevent another shutdown and cleaning (likely permanent).

Thanks
[Verizon Galaxy S 5 General] Dennisg34:
Those people who have pledged in the thousands are people who have pledged big money and paid out before. Post count doesn't mean squat diddly. Reasons why people don't want Dev editions is because you lose root once you update OS as well as other features. Carriers come out with these just to make you buy them out of contract automatically, and make more money that way rather than you buying a regular one to hack it. The high contributions of money will help these devs for their time spent and hardware used. Lastly, I will not be replying back to anything being said back to further not risk this thread being spammed with crap and being closed down yet again.
[Verizon Galaxy S 5 General] SirWise23:
SirWise23: $30

I don't get the whole not thinking pledges from people that have a low post count as not being legit. I don't post much because with all the talent that's out here on the topics I just don't have much useful information to add. Even with Rooting, I mostly just stick to one ROM and use Titanium Backup. I use my phone for work and I can't be wasting time flashing something new once a week. Doesn't mean I don't appreciate the work that goes into what people do here.
[Verizon Galaxy S 5 General] truenorth12lds:
Pledge

$25
[Verizon Galaxy S 5 General] az-dave:
The "Patent" is from July 1971. Its of no use...it would be like trying to connect a dial-up modem to the phone and thinking there is any possible way to communicate. I have a tad bit of experience with T1-OC3/VPN/FRAME data transfer and TCP/IP.

Not only that, but the phone has to be powered on, and as such the root system directories are read only to any data-feed without the certs and signatures...it wouldnt even allow the data to be written. Try it with bluetooth and bypass the sat.

Im still convinced there is a hardware way to access the /system, but it doesnt meet the rules of the bounty. I copied all the files from the root system to my SDcard and to then my computer using terminal emulator...if a few people want to be able to mess with the actual files that are in /system & /system/app then do the following:

mkdir /sdcard/download/system

mkdir /sdcard/download/system/app

cp /system/*.* /sdcard/download/system

cp /system/app/*.* /sdcard/download/system/app

You can then access (and copy to a PC or LINUX) those copied files by USB on any computer and start looking for something that might be useful.

Maybe someone will stumble upon something.
[Verizon Galaxy S 5 General] natalic:
On PC via adb:

adb pull /system

Pulling /system also pulls /system/app
[Verizon Galaxy S 5 General] az-dave:
Just so people can get an idea of the Hash for a cert, here is mine from the / directory of my phone in the file publiccert.pem

-----BEGIN CERTIFICATE-----

MIIELTCCAxWgAwIBAgIJANEwmqM2Fs8EMA0GCSqGSIb3DQEBBQUAMGwxCzAJBgNV

BAYTAktSMRQwEgYDVQQIEwtTb3V0aCBLb3JlYTEOMAwGA1UEBxMFU3V3b24xJjAk

BgNVBAoTHVNhbXN1bmcgRWxlY3Ryb25pY3MgQ28uLCBMdGQuMQ8wDQYDVQQLEwZN

b2JpbGUwHhcNMTMxMjE2MDg1MDI4WhcNMjMxMjE0MDg1MDI4WjBsMQswCQYDVQQG

EwJLUjEUMBIGA1UECBMLU291dGggS29yZWExDjAMBgNVBAcTBVN1d29uMSYwJAYD

VQQKEx1TYW1zdW5nIEVsZWN0cm9uaWNzIENvLiwgTHRkLjEPMA0GA1UECxMGTW9i

aWxlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjoOavjEbusT83Dv

LvsSVrq4y9HhUmZYnVX5VaOgsp7qUM5ntD9zSxR5JQ9QWCbCKh5RDy+ewnXmFcAV

L2MW5zxn6eI58e5e1Uonx9SnaID5JQHOhKImzH5/1qqVjs467nTTVpkXZOzrzLhs

EOau34Q/AlZ5QO0gh0TDr7YYHbry7Ie+gYePA/9gcB5UzbLQPz2oNGQPlB9e4KSw

4XNXu8BfguRltQbkJkm8/BD93vKN7MIbsxIYCzIIBjv/J79ho4NQqzpky9PFzCt/

KL1Ts7DsoQ6r3GeDgebc1ques18UXUZ1wenHy5k4ruCl6ZJ7QaxzHyEta/RT+VOC

j3IuwwIDAQABo4HRMIHOMB0GA1UdDgQWBBQp+BW4OYblL74MNaxtLPuKS1Ky4DCB

ngYDVR0jBIGWMIGTgBQp+BW4OYblL74MNaxtLPuKS1Ky4KFwpG4wbDELMAkGA1UE

BhMCS1IxFDASBgNVBAgTC1NvdXRoIEtvcmVhMQ4wDAYDVQQHEwVTdXdvbjEmMCQG

A1UEChMdU2Ftc3VuZyBFbGVjdHJvbmljcyBDby4sIEx0ZC4xDzANBgNVBAsTBk1v

YmlsZYIJANEwmqM2Fs8EMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEB

AEKg+91c2q1OKoP89QAQCKlLXKQNaaGQisMLISeBAkfF8npSPmftDSu9IPMTR9ZG

2AwCgH1SoI4cBqKJviU1M41IHTC3qJXRAv52Mjfv47AbkVyzLvE5YL/9R9zY+ER/

4KFvye4EvsybB9l0B8eoF/Pk4olX2KrhqkP8EtcDr47VI+FloeHGFef9DSvUz3Np

MQMp4jdNBUZ57mXwKRl1pMgz3f+Cgwi9zWmK9/lf+w0OXKBXxB+vhGMpg/7Y/Ohj

B4OHj7fOFedOEZlSmois41gknKgxyzvd1Xig7QcpIYUgH9FMPZxzhgMElY6zOroC

SYgfWsLmjJM+Q9nMhCMaJf0=

-----END CERTIFICATE-----

The fact that out phone has the power the decrypt certs of this length kinda tells us how powerful this little beast really is...or I should say "could be"

Aint gunna crack the cert...maybe we need to find an app that is "legal" that the S5 already allows to write to root, and exploit that to write files to /system/app in a round-about way...maybe rooting needs to be "re-thinked". Do we need full "root" or do we simply want/need the ability to remove bloatware apk's and odex, and/or replace built-in apps with others...can this be accomplished using the root access granted to trusted apps in a non-direct fashion?

Ive done a lot of programming and coding, but all on Unix and Linux servers...I have zero experience with apk's and odex, but if the same line of reasoning holds, there should be ways of modifying portions of trusted apk's using HEXDEC editors. The question is will they re-install on the phone.

Im thinking along the lines of how NOVA Launcher operates...then go further...??

---------- Post added at 10:07 AM ---------- Previous post was at 10:05 AM ----------

well...that is easier :) thank you. sometimes i revert back to my old days and forget about the new ways to do same thing.
[Verizon Galaxy S 5 General] spuniun:
afaik all apps that run as system are signed with the same keys as those used to build the firmware. There was a vulnerability in this mechanism found last year (https://bluebox.com/technical/uncovering-android-master-key-that-makes-99-of-devices-vulnerable/) but it's long been fixed. Since there's no way to modify a system app to inject code to make /system r/w you would have to start focusing on finding something exploitable in the system app itself which I expect would be very challenging since that's all closed source code that we can't pick through to find weaknesses.
[Verizon Galaxy S 5 General] KennyG123:
Thread is closed due to the inability of many members to follow the rules and guidelines set forth

XDA does not condone nor endorse ANY bounty thread. Participate at your own risk.

Bounty threads such as this are barely tolerated in the hopes it will succeed and kick start development

The only thing asked is that the forum rules and moderator requests be followed - that did not happen...many times!

I want to thank [MENTION=4343326]Demiurge7[/MENTION] for doing an impossible job maintaining this thread and trying to get people to stick to the guidelines

I also want to thank those that did stick to the rules and cooperated with the moderator staff

It is undecided at the moment if this thread will be reopened before an exploit is found

If you wish to add a pledge you can contact a moderator to do so

Please do not create another thread

Thank you for your cooperation

Friendly Neighborhood Senior Moderator
[Verizon Galaxy S 5 General] geohot:
I have come to claim my prize

Full root on AT&T and Verizon S5

See towelroot.com

And the thread at:

http://xdaforums.com/showthread.php?t=2783157​
[Verizon Galaxy S 5 General] jcase:
Thread was re-opened for geohot to claim.

Put your money where your mouth is.

Thread Closed
[Verizon Galaxy S 5 General] jcagara08:
Thank so much geohot aka george hotz!

Donated to you via PayPal!

Towelroot confirmed working on the international samsung note 3 SM N9005 LTE version!!
[Verizon Galaxy S 5 General] Dennisg34:
Whoa, I thought [MENTION=2376614]jcase[/MENTION] closed this..
[Verizon Galaxy S 5 General] Demiurge7:
It was. I'll start updating op if it is to remain open.
[Verizon Galaxy S 5 General] KennyG123:
Thread reopened for OP to be updated. Please take all root discussions to the rooting guide threads.

Thanks

FNSM
[Verizon Galaxy S 5 General] Protibus:
I didn't have a pledge in here but sent $50 directly to Geohot's Pay Pal the day he released towel root.
[Verizon Galaxy S 5 General] mkitchin:
FYI, record of my payment.

Pledged $20, paid $40.

Amount:	$40.00 USD

Sent on:	June 15, 2014

Message in your payment email:	towelroot. Nice work Pledged $20 on the Bounty thread under name mkitchin. Here is $40.
[Verizon Galaxy S 5 General] :
I'm so glad GeoHot took his time and tested his brain once again with this device. GeoHot Thank you!!!

Lets take a second to say thanks to all the pledgers that made this bounty climb as high as it did.

I pledged the amount of $100 and plan on making my payment to GeoHot between (06/19 - 07/03).
[Verizon Galaxy S 5 General] mtown_cyclone:
Pledged $25, sent $30. Thanks George.
[Verizon Galaxy S 5 General] BigBot96:
I paid up what I pledged. I know it wasn't a lot, but it's all I can spare (and definitely enough for a six pack).
[Verizon Galaxy S 5 General] Syn Ack:
Pledged $50, paid $50. Can provide screenshots if wanted.