yashsingh1/xdaforums huggingface dataset:
[Verizon Galaxy S 5 General] kuronosan:
While you guys discuss how to do what, djrbliss and others are laughing at the misfortunes of all.
[Verizon Galaxy S 5 General] designgears:
So they are laughing at people learning how to do what they once had to learn how to do. Classy.
[Verizon Galaxy S 5 General] eragon5779:
Are they working on it?

Sent from my white SM G900V on XDA Premium 4
[Verizon Galaxy S 5 General] KaM1KaZ3:
I dont think so...
[Verizon Galaxy S 5 General] open1your1eyes0:
Not only are they not working on this device, they openly said they are done with releasing exploits for Samsung devices to the public.
[Verizon Galaxy S 5 General] jcase:
No, that exploit won't work, but no one listens to those with experience.
[Verizon Galaxy S 5 General] KaM1KaZ3:
So im guessing its back to the drawing board again
[Verizon Galaxy S 5 General] djmouse:
For ****s and giggles I tried running the mottochoper threw adb shell,it worked all the way up to when I open supersu to update the binary,says if recently upgraded to 4.3 you have to manually root,so anyway I dled a tmobile rom with I'm guessing the newer super user binaries and extracted them,is there a way to remodify the mottochoper tool with the newer binary from there or use adb she'll to install the new binary?probably stupid question and has already failed?

SENT FROM DJMOUSE'S SM-G900A
[Verizon Galaxy S 5 General] Stryke_the_Orc:
Thread cleaned. Let's try to be more respectful of others, even if they don't hold themselves to that standard. Be classier than that.
[Verizon Galaxy S 5 General] cquick97:
Could "those with experience" maybe toss some ideas around that the community can read more into and try to implement? I mean I'm not asking for a step by step guide, but maybe some possible attack vectors, or things we should be looking into.
[Verizon Galaxy S 5 General] Phonegasm:
Humble Idea

Does the Verizon GS5 Dev Edition contain all the same apps as the locked version?

If so, could the signing key be extracted from a system App that had permission to write /system or a similar control.

Let's assume Verizon has an app or samsung that has such control.

Then could a fake update for such app be constructed to allow writing supersu to /system.

Would an extracted signing key even work? Or are they unique to every apk, or does it have some hash that is verified over the net?

I assume this would be a temporary root as rebooting would cause the system to either revert or not even boot as the bootloader hash would no longer match?

I remember older devices would just remove any foreign apps at boot.

Does this sound like a viable route to pursue?

Or am I just dumb and missing something?
[Verizon Galaxy S 5 General] kuronosan:
From what I understand, Verizon and AT&T basically have said "lock em up and throw away the key".

Exploit is going to be the only way to root, and you'll be godly lucky to crack the bootloader.

Doing that will require Samsung to grow a backbone and leak a tool or for someone with immense skill to want to take the time to do it. That is why they're laughing.

It's funny to them that people are trying to do something they see as pointless folly. To me, it's sad to act like that.

For whoever got anywhere by not trying?
[Verizon Galaxy S 5 General] KaM1KaZ3:
I think alot has to do with the fact at the beginning 5 weeks ago we had flaming on others opinions firing off at experience developers people worrying about custom rom before we even get root I've been on these threads since they started an I know alot of you have been to.. I guess what im trying to say is that theres been alot of demand than listening jcase told us twice that exploit wouldn't work but we keep on trying.. so why should they offer us info? It really would be nice to have it sure we have a bounty going but with all the headache going im sure they dont think its worth it im hoping someone does crack this but for know lets stay on there good side an not acknowledge all the trolling... I hope I didnt offend anyone
[Verizon Galaxy S 5 General] jcase:
Not cool directing people to him for this. Its his job man
[Verizon Galaxy S 5 General] rwilco12:
We know it's hard guys but lets keep on topic. We know you're all anxious to get root but we'll never get there if people whine and complain instead of trying to do something about it.

Thread cleaned.

Thank you,

Rwilco12
[Verizon Galaxy S 5 General] bdorr1105:
What about safestrap for root until the bootloader can be figured out cause at least there are custom ROMs, I know it's not everything but anything is better than stock
[Verizon Galaxy S 5 General] *Hacker*:
Pledge AT&T $3,000 I want root on my AT&T S5 I don't want to buy a t-mobile version lets get root guys.:angel:;)
[Verizon Galaxy S 5 General] jcase:
Safestrap does not provide root, it is a tool that is installed after root is gained
[Verizon Galaxy S 5 General] bdorr1105:
Its a tool for locked bootloaders, you can gain root, I understand that but I didn't clearly explain. Work in ordered at least get started with that. The developer edition is rooted but there is no rom to even flash
[Verizon Galaxy S 5 General] jcase:
No, it can't gain root on its own. I'm well aware of what is is.
[Verizon Galaxy S 5 General] rwilco12:
Thread cleaned

again

...

Come on guys! Lets grow up, keep it on topic, quit the bickering and focus on the real goal here!

If you can't follow the rules of the thread or XDA we may have to shut this thread down.

Thank you,

Rwilco12
[Verizon Galaxy S 5 General] rwilco12:
And thread cleaned yet again!

I'm sorry guys but we're going to have to put the thread in timeout for a little bit.

There is a lot of name calling, language, bickering, fighting, whining, complaining and not a lick of it has anything to do with the stated purpose of this thread. 99.9% of it is not in compliance with the XDA Forum Rules.

I'll be closing the thread for a few hours here. When you guys have had enough time to think about it and are ready to play nice I will reopen it.

I would suggest that while the thread is locked you put the time to something constructive like figuring out how to collect the bounty. ;)

Thank you,

Rwilco12
[Verizon Galaxy S 5 General] rwilco12:
Ok everyone,

Here's the deal. I've reopened the thread but we are not against closing the thread permanently if people don't follow the rules.

Please remember, XDA barely tolerates these bounty threads and we only do it in the cases where it helps in development. We understand everyone's frustration that they don't have root access yet but despite what you may think I can assure you it is being worked on.

On another note, please also remember that this is still XDA. The XDA forum rules do apply here and will be enforced. Please pay particular attention to this rule:

Disrespect is an infractionable offense and many of you have violated this rule here in this thread. We don't want to hand out infractions but we will if we have to.

Thank you all for your cooperation and for keeping this thread on topic from here on out.

Thank you,

Rwilco12
[Verizon Galaxy S 5 General] dave1977nj:
Can you update my bounty from $25.00 to $50.00 (AT&T) thanks
[Verizon Galaxy S 5 General] open1your1eyes0:
With 4.4.3 around the corner it's looking like root is going to only get tougher and tougher to get on more devices soon:

https://plus.google.com/+Chainfire/posts/ZtXAhw164QD
[Verizon Galaxy S 5 General] ks3rv3rg:
[MENTION=4513677]rwilco12[/MENTION] Thanks for giving us a bit of reassurance that an exploit is in fact being worked on. It's nice to hear that kind of news, whether good or bad, from the mouth of someone that's "in the know" so to speak. With all the frustration abound it feels good to know that some of the talent around here does in fact care about the Verizon s5 and it's community. Also thanks to those devs that are indeed working behind the scenes. The bad may always outweigh the good but just remember that for every ungrateful user there are many more that are indeed thankful that you all are willing to contribute your knowledge to this think-tank.
[Verizon Galaxy S 5 General] cquick97:
Where are the devs actually talking? I've tried #sgs5 and nothing is actually being discussed. I'm really interested in learning how to do this so I could really be a contributor in the future but I don't know where to start and I'd really like to get a mentality of the ideas the devs have thought of trying... Any advice?
[Verizon Galaxy S 5 General] Crooke356:
I'm gonna assume they're doing it privately. If they did it in a public forum, there would be lots of.. Interference.
[Verizon Galaxy S 5 General] designgears:
I have gone silent due to mocking over in IRC.

Any news from here on out after this post will be posting root, that is all.
[Verizon Galaxy S 5 General] spinwizard:
Lots of ignorant people, out there. Selfish... me, now. Sad. :(
[Verizon Galaxy S 5 General] howellcp:
I'm bump mine up to 100. Thank you to the developers for working on this.
[Verizon Galaxy S 5 General] djmouse:
I'll bump my 75 up another 25 for a total of 100 for ATT root.

SENT FROM DJMOUSE'S SM-G900A
[Verizon Galaxy S 5 General] clickclack333:
I'll bump to 50. Would be more If I wernt 17 making min wage lol. Keep it up devs we do appreciate your hard work.
[Verizon Galaxy S 5 General] miked63017:
Is there somewhere I can get a copy of the locked bootloader from(aboot, sbl, pbl)? I would like to take a look at something but not sure where I can grab them from, do you guys have a stock odin file for the locked non-dev version?
[Verizon Galaxy S 5 General] howellcp:
Bump me up to 75 please.
[Verizon Galaxy S 5 General] :
Here is a stock retail VZW .tar file for Odin if it helps you any.
[Verizon Galaxy S 5 General] Demiurge7:
Consensus seems that most likely an exploit should apply to both. In the event that it does not, I can go ahead an itemize carriers separately.

I am guessing, because this is the only bounty thread, and because an exploit for one most likely will mean an exploit for all. Were in this one together.:good:

In the event this is not the case, I will sum the carriers separately. I did not want to turn down any potential pledges, based on the fact this will likely apply to both. I think it is advantageous for all of us to stay together on this one, though. Spread the word...
[Verizon Galaxy S 5 General] kprice8:
Makes sense. Didn't consider that fully. I do hope this happens soon. $100 donation for root.
[Verizon Galaxy S 5 General] alexstoriu:
I'll gladly throw in $25 for me when this is done
[Verizon Galaxy S 5 General] mkitchin:
$20 - Verizon. Thanks all.
[Verizon Galaxy S 5 General] enigma99a:
This is getting tempting. Keep pledges coming :)
[Verizon Galaxy S 5 General] blue79:
Put me down for $100 for verizon
[Verizon Galaxy S 5 General] fifthelement:
Very good idea guys. I am sure your bounty will eventually work and someone will find a way to do it. Good luck.
[Verizon Galaxy S 5 General] Franzie3:
Demiurge7 - maybe just put a date/time stamp next to the bounty total in the OP each time you tally it up just so its made known. Not that you have to...just a auggestion
[Verizon Galaxy S 5 General] Demiurge7:
Sure, I can do that - although, there is a "last edited" timestamp at the top of the OP by default. At this point, that edit stamp should coincide with adding a pledge (since I am done editing the post). Does that not suffice?
[Verizon Galaxy S 5 General] KarlStyles:
If you're using a web browser, the date/time the post was last edited appears in the message header. I suppose this isn't much help if you exclusively use Tapatalk though.
[Verizon Galaxy S 5 General] Demiurge7:
Good point - only been editing from the comp. Ill add the timestamp for those on mobile.

Thanks for pointing that out
[Verizon Galaxy S 5 General] Franzie3:
Yea must only be Tapatalk then. No biggie
[Verizon Galaxy S 5 General] theneedhamwrath:
I'll pledge $50 towards successful root
[Verizon Galaxy S 5 General] kenkamm:
I will pledge $50 for root.
[Verizon Galaxy S 5 General] n2ishun:
Yea, I'll go fitty bones for Verizon too. (uhh, that's $50 for you foureeenerz).

I'll take a look see and give 'er a go on my own. You never know and it can't hurt a bit to try.
[Verizon Galaxy S 5 General] namroc1:
I am in for $35!
[Verizon Galaxy S 5 General] taspankya:
Lol.. as soon as you step out of that campus there will be three all black Hyundai Equus to abduct you
[Verizon Galaxy S 5 General] sd_N:
I'm in for $50.
[Verizon Galaxy S 5 General] Jihoonie:
$25 here
[Verizon Galaxy S 5 General] shojus:
Maybe just dump this crap phone and join us in the M8 forums? :D Lmao I'm sorry I just had to! I will donate $20 for a root method just to support the cause though...
[Verizon Galaxy S 5 General] graydiggy:
Even though I have no intent on ever getting the S5. (Note 3 user and will get the Note 4) I am pledging 100 for root for both AT&T and VZW

I am the OP of the bounty thread in the AT&T Note 3 section.
[Verizon Galaxy S 5 General] LiLPurP:
A question if i may, if carriers dont want phones rooted, then why is the app store flooding with root only apps? Btw i pledge 20 if fully unlocked

Stupidity + Curruption = Locked Bootloaders, Thanks AT&T :D feel free to eat a big d**k lol pardon my language XDA Community :P
[Verizon Galaxy S 5 General] cquick97:
So I read a post a while back that I liked the idea of but no one seemed to respond. Obviously Verizon and AT&T have some way to push updates to everyone's phones. Would it be possible for someone to develop a fake update that would have root, and push it in some sort of manual way? If we could push root, we could easily push a boot loader unlock too! Would this even be remotely possible? And what would it take to do?
[Verizon Galaxy S 5 General] BigBot96:
All updates pushed by carriers are signed zips placed on their own partition, then the OTA software issues a reboot and install command for recovery. These zips are verified before flashed in stock android recovery. Example: if you put a update.zip with the su binary on your SD Card and from stock android recovery (which you can do with stock recovery) tried to flash it, it'd have a verification failure. They wouldn't make it that easy :good:
[Verizon Galaxy S 5 General] djmouse:
Well I had the s4 when it first came out,and I thought the bootloader was unlocked,but someone said in this thread said it wasn't and it was loki, that was bypassing the bootloader and we first got root,then recovery,then custom roms,and kernels,as long as the developer lokied the kernel or boot.img(I think) or you flashed loki doki before boot you were good to go,so its not 100 percent necessary to have a unlocked bootloader to get custom recoveries I don't think as long as there's an exploit,hopefully that's what will happen with the s5,and for the people that got the original released phone with that bootloader that they were able to use loki with,if we would have taken the OTA where they patched the loki exploit in the mf3 firmware we would have been screwed lost root and had to have used safestrap.I really don't wanna argue about it,I was just trying to help the guy who originally asked the question,seemed he didn't really understand the process,but who knows this may be a whole new experience for all of us we will have to wait and see what happens.

SENT FROM DJMOUSE'S SM-G900A
[Verizon Galaxy S 5 General] phobia09:
This was actually explored somewhat in the Galaxy S4 bootloader thread. A user had a femtocell and played around with the idea of using it to push an OTA to the device. The idea was tricking the device into thinking the OTA was official and allowing it, thus letting people go back to a loki-capable bootloader. Sad part is that this didn't play out as hoped.
[Verizon Galaxy S 5 General] graydiggy:
Exploits like loki have been patched. So we need unlocked bootloaders as of that patch.
[Verizon Galaxy S 5 General] cquick97:
How does Verizon send the phones the verification keys? They have to get sent somehow, we could fake that too.
[Verizon Galaxy S 5 General] hEaTLoE:
Newb question, but what allows the phone to identify the OTA as official? Is that something which can be duplicated on a non-official OTA?
[Verizon Galaxy S 5 General] clickclack333:
To those thinking we can fake an update: you would have to decrypt the key, which is super encrypted. I believe it also checks the update file itself. Bassicly impossible. Our best bet is an exploit.
[Verizon Galaxy S 5 General] barondebxl:
Are you saying that the only way we gonna get root for the Verizon and AT&T models is by unlocking the bootloader?
[Verizon Galaxy S 5 General] graydiggy:
No. I'm saying we need it for custom recoveries as mentioned above.
[Verizon Galaxy S 5 General] barondebxl:
I see. So if the devs find an exploit to root, safestrap is gonna be the way to go for Roms and all right?
[Verizon Galaxy S 5 General] graydiggy:
If it isn't patched, yes. Until the bootloaders are unlocked or if it happens. It may never happen.
[Verizon Galaxy S 5 General] LiLPurP:
More than likely, unless the exploit can work around the bootloader as well, root will allow us to use safestrap, after Hashcode updates it to support 4.4, unless the bootloader us unlocked, safestrap is all we can use but it works great :) im running Hyperdrive on my mk2 4.3 att gs4 and i love it
[Verizon Galaxy S 5 General] barondebxl:
I see. Thanks for the info. Root is really what most ppl want because it opens so many doors. Roms are definitely cool and all but root is a fantastic start.
[Verizon Galaxy S 5 General] BigBot96:
The update.zip is signed by Verizon before being deployed. The stock recovery then verifies it's signed by Verizon's keys (much the same way the bootloader verifies firmware before flashing). There is no way to fake the signature unless we first know what it is. But since everything is encrypted, it's not possible.
[Verizon Galaxy S 5 General] barondebxl:
Nice! I dont mind safestrap at all personally.

Im rooting for the devs to find a root solution ;)
[Verizon Galaxy S 5 General] Sephiroth3005:
Just tossing out an idea has anyone tried looking at a store demo model? They are running on a custom rom.
[Verizon Galaxy S 5 General] kprice8:
That 'Custom Rom' is likely just ARM instead of Dalvik.. I believe over top of the normal phone functions is a program that is constant front except when phone is being tried.
[Verizon Galaxy S 5 General] jeboo:
Let me clear up a few things so there's less "noise" in this thread :p

1. These bootloaders cannot be unlocked. There's no native feature/option to unlock them. All we can hope for is another exploit (similar to loki). The dev edition of the phone doesn't help in any way.

2. The encryption itself cannot be attacked (within a reasonable number of years). Only samsung has the signing keys, and considering the Knox security layer is probably worth tens of millions of dollars, a leak is unlikely.

If you're interested in more discussion regarding these topics, check out the VZW S4 bootloader thread. It's a good read!
[Verizon Galaxy S 5 General] Sephiroth3005:
You are probably right I am inexperienced in the matter I just noticed it when I was setting up a phone for display in a store didn't
[Verizon Galaxy S 5 General] Walter.White:
Along this line I'm gonna narrow down our options so people stop posting same things over and over again.

1. BL exploit (Kinda of like loki) :- Need to find a way to compromise the chain of trust.

2. Converting retail units to dev units. (Possible since unlike Motorola, Samsung uses software differences to convert retail units into developer unit) That is the reason why dev phones don't get any OTAs and are turned into retail unit if they flash retail BL.

3. Leak of unlocked BL (Kinda like what happened with S3 and African-Canadian Sock Monkey.): Possible but unlikely.

4. Leak of a signing key: (So that we can use any BL we want without worrying about hash checking fail) Highly unlikely since only select few have access to it. And no you can't bruteforce it even if you had power of 100000 gpus. It will take years.

Once root is found (relatively easy compare to finding BL exploit) you guys can have a recovery called Safestrap (as long as the boot.img is vulnerable) which will allow you to flash

1. Mods

2. TW based ROMs.

3. Modems.

And no

1. ASOP based ROMS (depends if S5 boot.img allows modules and we can get kexec working)

2. Kernels.

3. No Aroma (depends on S5's boot.img).
[Verizon Galaxy S 5 General] *Hacker*:
Raised from 3000 to

$4,000

AT&T
[Verizon Galaxy S 5 General] jcase:
Cleaned, yet again.

Further off topic or non compliant posts will get an infraction, and the thread risks getting closed.
[Verizon Galaxy S 5 General] jake5253:
Is there someplace to get a copy of the dev version bootloader? I fully understand they are device-specific, I'm just interested in taking a look anyways. Although I get the impression that Odin won't allow flashing a modified bootloader onto the Verizon retail, is this correct?
[Verizon Galaxy S 5 General] barondebxl:
Add me $20 for AT&T.
[Verizon Galaxy S 5 General] kuronosan:
A developer would have to back it up.
[Verizon Galaxy S 5 General] PensFan66:
Not much but Ill add $25 (Hoping for AT&T) .. I may up in a few weeks...
[Verizon Galaxy S 5 General] wataytay69:
$25 for VZW
[Verizon Galaxy S 5 General] jake5253:
I guess I meant to ask, is there a dev-owner willing to share a bootloader backup with the community? Please and thank you.
[Verizon Galaxy S 5 General] cquick97:
25$ for verizon root. May increase by next week or so.
[Verizon Galaxy S 5 General] dan0326:
Does this article help. It opened the developer option for me when I followed the steps.

Since I haven't posted anything else I don't think I can post links. Add the http : // to follow the link

androidfact.com/how-to-turn-any-regular-galaxy-s5-into-a-galaxy-s5-developer-edition/
[Verizon Galaxy S 5 General] cquick97:
I'm sure everyone already has that...
[Verizon Galaxy S 5 General] weasel87:
Sorry if this has already been mentioned, haven't had a chance to read thru the whole thread yet. What about using an apk extractor to pull out one of the system apps like settings, that would have root access. Couldn't you unpack the apk and craft something to load SU then repack the apk? Or maybe I'm totally off-base and a method such as this is impossible?
[Verizon Galaxy S 5 General] tpike:
You could obtain the file from the stock tar conceivably but you can't put it back into the correct directory without root access.
[Verizon Galaxy S 5 General] dan0326:
I know this may sound ignorant but after following the steps on that link I dl'd SU followed by a root browser and was able to get to and open the build.prop. does this mean that I have root? How else can I verify if this actually did anything?
[Verizon Galaxy S 5 General] tpike:
Screen shot?
[Verizon Galaxy S 5 General] open1your1eyes0:
You can access your build.prop without root access.
[Verizon Galaxy S 5 General] Hashbang173:
There is a root checker app. I'm pretty sure you can view /system without root with a root browser app.
[Verizon Galaxy S 5 General] dan0326:
My bad. I thought build prop required root. Does having developer options in the setting menu do anything or am I chasing a dream like everyone else.
[Verizon Galaxy S 5 General] tpike:
See here: http://xdaforums.com/showthread.php?p=52206932

It allows you to do some interesting things. Overall it's not really useful.
[Verizon Galaxy S 5 General] jakeprogrammer:
Being able to open build.prop is different from being able to modify it. You are able to open it without root, but you can't modify it without root.
[Verizon Galaxy S 5 General] jcase:
Thread opened, please stay on topic, seriously.
[Verizon Galaxy S 5 General] ErikVeal:
Im completely clueless in this field, but am fascinated (and eagerly hoping for the success of someone in here!) by this thread and wanted to ask a question. Is there and information that could be used from a rooted Sprint or T Mobile s5 to help root our devices?
[Verizon Galaxy S 5 General] seemles:
Nope :(

Sent from Galaxy S5 in bootloader Prison
[Verizon Galaxy S 5 General] ravennyc:
adding another $50 for the ATT variant UCU2AND3.. which was just updated OTA. So new pledge is for $100. Fingers crossed. Thank you.