yashsingh1/xdaforums huggingface dataset:
[AT&T Samsung Galaxy Note 4] gatesjunior:
You cannot just regenerate the md5 checksum. The original checksum is also in relationship to the signed apk file. Yes, even the apk files that are on the device and from the playstore are signed with a key from the developer / manufacturer / carrier. If you try and modify the file in any way, it will fail validation.

Note: Technically you can resign an apk after you modify it with your own key, but the system knows what the original signature values were for the original packages and when it sees the difference, it will fail validation.
[AT&T Samsung Galaxy Note 4] allenjthomsen:
Does anyone have NK3 tar thats not sammobile or samsung-updates
[AT&T Samsung Galaxy Note 4] norcal61:
Please forgive my ignorance, but would an NK3 tar for the Note 3 work? I found a thread here on xda which contains a download for what i believe to be a non sammobile NK3 zip for the note 3. I have a feeling that this wont apply to the Note 4, but im not positive, so i just wanted to put it out there. Thank you so much for working on this!

http://xdaforums.com/showthread.php?t=2765014
[AT&T Samsung Galaxy Note 4] Venom0642:
Won't work for Note 4 , that link is only for Note 3 different Software.

Sent from my SAMSUNG-SM-N910A
[AT&T Samsung Galaxy Note 4] FiniteTime:
I looked a little bit earlier and I looked a lot right now but I haven't been able to find a tar for NK3. :(

If anyone else wants to look and post if they find something, search keywords can be found in this image (not mine, found it while looking): https://i.imgur.com/WO5ro6c.jpg

Info from it:

Baseband version

N910AUCU1BNK3

Kernel version

3.10.0-3164227

dpi@SWDD5809 #1

Wed Nov 12 11:15:56 KST 2014

Build number

KTU84P.N910AUCU1BNK3

I'm looking into how to make one without root atm. dd through adb may be one way.
[AT&T Samsung Galaxy Note 4] Martinjv71:
It is amazing that the little tough guys don't know the first thing about rooting and expect everything to be handed to them....must have their mommies still wiping them too.
[AT&T Samsung Galaxy Note 4] hiperglyde:
Can we keep it on topic since that was over..?
[AT&T Samsung Galaxy Note 4] Martinjv71:
My apologies.
[AT&T Samsung Galaxy Note 4] insang-droid:
i have zero programming experience so all i have to say is. KEEP UP THE GREAT WORK! And no matter what THANKS FOR ALL YOUR HARD EFFORTS! the community really appreciates it and you deserve thanks from all of us.
[AT&T Samsung Galaxy Note 4] mlin:
Hey, there was a script released in the Droid Turbo forum which uses adb to block any system app, including KNOX and OTA updates without root. It was adapted to ther Verizon Note 4 and would work just as well for the AT&T variant. The VZW N4 thread can be found here. http://xdaforums.com/note-4-verizon/general/disable-knox-ota-root-t2972263
[AT&T Samsung Galaxy Note 4] FiniteTime:
So I found this thread that says how to make a tar.md5: http://xdaforums.com/showthread.php?t=2665283

But only after one has the files. I wanted to see if what files are the same between the NIE tar.md5 and my phone so I did "md5 /dev/block/mmcblk0p*" and got denied messages for all of them. There is some 'octupus jtag' tool I saw while googling that may be a way to get a dump.

I'm hoping that the people that got the NIE tar.md5 could get the NK3 tar.md5 though, so I asked in the other thread where that was posted (not totally sure it's the first place but I'm not aware of anywhere it was posted before. Happy to be corrected): http://xdaforums.com/note-4-att/gen...-flashable-tested-t2915915/page3#post57523285
[AT&T Samsung Galaxy Note 4] MattMJB0188:
Boy do I miss the days us AT&T folks had root and custom recovery the day after AT&T launched the device. I remember it was the S2, S3, Note, and Note 2. I would really like to know why they changed their minds on the bootloader thing. Was it because of security? Samsung? Or too many people bricking their phones? hmmmmm

As someone who has used many TMobile variants, I can say that's not always the best route. Those using the TMobile S5/Note 4 on AT&T will miss out on HD Voice and Carrier Aggregation, which is becoming more mainstream now.
[AT&T Samsung Galaxy Note 4] thanitos:
One reason is samsung wanting to compete with apple in the business market, most business only allow a select few phones such as apple and blackberry for highly sensitive emails and such, that's why samsung pushed Knox so hard, businesses needed a way to verify a phone is safe to forward to from an internal server. My company phone runs windows and I can't have onedrive and a bunch of other cloud services installed if I want my email on it.
[AT&T Samsung Galaxy Note 4] insang-droid:
This deserves it's own thread..
[AT&T Samsung Galaxy Note 4] IcOpRo:
You weren't kidding this looks good, should have its own thread.
[AT&T Samsung Galaxy Note 4] abthegreat:
Honest question, all my previous phones were bought overseas so never had any carrier bloat. My One M7 was bought from AT&T full price but it always ran with an international CID and a clean ROM. I love the Note4 but it still feels held back, i have been playing with an international S5 and the UI responsiveness is insanely fast versus the AT&T note4? Is this how its supposed to be from samsung or just the preloaded horse manure ruining the phone ?

If its the bloatware slowing it down how is it reasonable for carriers to ruin user experience ? My phones bought full price so any subsidy argument is not valid.
[AT&T Samsung Galaxy Note 4] httuner:
My AT&T Galaxy S5 G900A, rooted, safestrap boot with flashed G900F rom works great and is super fast compare to my Note 4, the UI is much smoother too. I love my Galaxy S5 much more than my Note as of now because my Note just feels slow and sluggish at times, but I bet once root is out, I will definitely love my Note more lol
[AT&T Samsung Galaxy Note 4] insang-droid:
I tried this. I get positive ADB responses but the apps don't seem like their getting disabled. I could be wrong.
[AT&T Samsung Galaxy Note 4] royal1262:
Yes I agree too, I'm sick of At&t but I'm grandfathered in to the unlimited plan and its hard for me to give that up. Tmobile & Sprint service just don't cut the mustard for me. If they gain better coverage in the future than ill definitely consider switching.
[AT&T Samsung Galaxy Note 4] IcOpRo:
I'm on the same boat (minus the granfathered part) I left sprint because they are horrible around here, Verizon and ATT are the best service in this area, I would love to switch to TMO but their service is pretty bad still around here, its gotten better but still there are too many dropped calls. Just got a friend that switched to TMO from VZ and now hes switching next year to ATT he said to me the savings are not worth the service.

Maybe I'll just sell my note to get a TMO note 4. My wife uses my TMO S5 that I bought to use with ATT.
[AT&T Samsung Galaxy Note 4] DJsCrIBbLe:
Honestly anyone sticking with unlimited should just forget the hope of no throttling. I finally took advantage of the double data promo in Oct. And we have 30gb for 3 lines that cost us less than the 10gb plan with our discount..
[AT&T Samsung Galaxy Note 4] spexwood:
I don't know about apk files, but I DID "regenerate" the md5 for the CWM backups (which aren't apks obviously).

These are the exact instructions I used to use to "regenerate" the CWM md5s. I'm calling it "regenerate" because that's what the article calls it. (see the part under the commands).

http://www.ikevinshah.com/fix-how-to-recover-from-md5-mismatch-cwm-backup-nandroid-backup.html

EDIT: I'm not saying that just because I did it with CWM that it can also be done to an update file. I'm just saying that I did do something with my CWM backups which did regenerate an md5 file and it worked.

Now, if the checksum COULD be adjusted to make the update file work, then that'd be great. Otherwise, oh well.

Here's another thought:

What about doing what I initially mentioned, but instead of trying to make the modified update file work with Kies, someone hacks Kies itself so that it doesn't check for the checksum and will just flash the update file to the system.

Unless the check occurs on the phone and not Kies.
[AT&T Samsung Galaxy Note 4] gatesjunior:
It happens on the device.
[AT&T Samsung Galaxy Note 4] spexwood:
Darn. OK, nevermind then. :eek:
[AT&T Samsung Galaxy Note 4] elliwigy:
it happens in kies and on device.. it checks at least two times locally and remotely from kies.. and for thought, a flashable zip is not the same as a stock image. lots can be done and replicated but without a custom recovery (which requires device to be rooted) that method does not apply. If an odin image/kies update that is modified and attempted flash to phone, it will fail in stock recovery/download mode.

cwm backups are really about the update binary/script in the meta folder.
[AT&T Samsung Galaxy Note 4] cstayton:
Custom recovery requires unlocked boot loader having root will not allow you to flash a recovery, the only option is a psuedo recovery like safestrap or freefire
[AT&T Samsung Galaxy Note 4] elliwigy:
That is why I said custom recovery.. a custom recovery consists of safestrap, cwm, twrp etc. SS is a custom recovery option (as i used many times on my vzw s5 over the last year as well as the att s5) that is based off twrp.. A true custom recovery requires an unlocked BL which if we had we could easily root the device whereas SS (or multirom if it works when released and if we obtain root) we need root first..
[AT&T Samsung Galaxy Note 4] gatesjunior:
Are you sure that the device itself is not sending the response back to Kies ? Because last I knew, that was the way things work.. Kies itself does not do any signature verification, only MD5. The device itself will return back to Kies a response.
[AT&T Samsung Galaxy Note 4] cstayton:
[MENTION=3178012]gatesjunior[/MENTION] you are correct that is exactly how keis works the only thing keis verifies is the md5 the response on whether or not the signature is valid is returned by the device that is attached.
[AT&T Samsung Galaxy Note 4] cstayton:
Technically SS is not a custom recovery, SafeStrap is more closely related to unix/linux "Grub". SS has code that bypasses the normal boot process associated with recovery and then loads its own internal recovery system that is based off of TWRP. a true custom recovery such as TWRP, CWM, 4ext etc. etc are "Flashed" directly to the recovery partition on the device. I used the term Pseudo recovery specifically for this reason.
[AT&T Samsung Galaxy Note 4] elliwigy:
i stand corrected on terminology lol. i will still think of ss as an alternate form of recovery for those who do not have a unlocked BL to flash a "custom" recovery..

i will stop posting in here since i clearly am not contributing to any root progress.. sorry mods!
[AT&T Samsung Galaxy Note 4] vdub12:
I have been researching adb and it seems adb backup can write to system. why can't we just create a custom adb backup zip and use adb restore to push the su binary?
[AT&T Samsung Galaxy Note 4] spexwood:
I'm sure there's still the signature verification problem
[AT&T Samsung Galaxy Note 4] vdub12:
I honestly really don't think there is. this is actually how I transferred data from my old phone to this one without root for titanium. I backed up the applications in adb and restore them on this phone with no problem at all. if we could make a backup of the system with adb we could simply unpack the .ab file, insert the SU binary, then repack the .ab file and restore. of course this would have to be done manually on every single system but if it works it should be able to be scripted.
[AT&T Samsung Galaxy Note 4] drivel2787:
You should totally try it and see if it works
[AT&T Samsung Galaxy Note 4] vdub12:
you know, I just got another thought. if we can't push the SU binary itself into the system partition then why can't we install a system app that can exploit the kernel vulnerability in kitkat. we can simply use adb restore to install a system app there can exploit the vulnerability. last I heard that's what they're stuck on. we don't necessarily need root as much as we need access to system permissions. at that point there's already a vulnerability that hasn't been patched in the kit kat kernel that can give us root.
[AT&T Samsung Galaxy Note 4] spexwood:
Apps that you get from the Play Store are installed in /data/apps which doesn't require root access. So restoring them won't require root.

The SU binary is stored in /system/apps which does require root
[AT&T Samsung Galaxy Note 4] vdub12:
Actually the SU binary is installed in /system/bin. However, I'm pretty sure adb backup can restore apps to /system. Why would adb backup system apps if it can't restore them?
[AT&T Samsung Galaxy Note 4] jinx10000:
Someone earlier in one of these threads pointed out they used to do that. The thread he linked to started in 2012 if I remember right. My guess is that since it was exploited they probably found a way to patch this adb backup vulnerability.
[AT&T Samsung Galaxy Note 4] scoder:
ADB doesn't know if you are/aren't rooted, the phone determines that. Accessing /system/ requires root, it's that simple. Each of your posts describes a method in plain sight, as if manufacturers aren't spending millions in R&D on encryption and locking bootloaders. To write to /system/, you need su permissions, it's as simple as that. If you've ever used linux, you'll know that this is part of its infrastructure, and carries over to Android as well.
[AT&T Samsung Galaxy Note 4] Surge1223:
So here's another thought how about we just look at the source instead of spending 4 pages speculating?

https://android.googlesource.com/platform/system/core.git/+/android-5.1.0_r5/adb/

in adb.c look at the "auth" code.
[AT&T Samsung Galaxy Note 4] cstayton:
Not sure if anyone has noticed this or not (I don't profess to know how to crack root) but since my device was bricked by AT&T and they are sending me a replacement I figured I'd dig around a little here is what I happened to notice.

when in stock recovery and you choose the option to reboot (either to download mode or reboot system) if you watch real close at the bottom left of the screen you can see recovery issue an "su" command and then imediately after that it will issue the reboot command.

EDIT:

My thought was this if it truly is issuing an su command would there be time between that and the reboot command to insert su binary into the system/bin folder?
[AT&T Samsung Galaxy Note 4] pattonsj:
Is there a way to "hijack" the response back to KIES to make it think the md5 is still authentic?
[AT&T Samsung Galaxy Note 4] cstayton:
its not just the md5, its the signature what it amounts to is without the keys that samsung uses to sign the package there is nothing that can be done to "Trick" it.
[AT&T Samsung Galaxy Note 4] drivel2787:
A lot of bs talk going on in this thread when people should be doing what this guy (surge) says if they really want to help
[AT&T Samsung Galaxy Note 4] spexwood:
We're just brainstorming, not talking bs. In brainstorming, there is no wrong suggestion. A lot of people and businesses use brainstorming to solve major problem. Even Microsoft and Google do it.

Brainstorming is a good thing, even if it doesn't give a solution. Sometimes non-solutions inspire solutions by suggesting something that doesn't work, but can be tweaked to fix a problem.
[AT&T Samsung Galaxy Note 4] Surge1223:
I agree to an extent, it's one thing to brainstorm with well presented ideas with sufficient support to back up the claim. It's another thing to just blurt out random ideas, unsure if they make sense just for the sake of posting. At a minimum it should be a requirement that people site their sources or at least point to the relevant parts in

code

. I know that I would pay a lot more attention to what someone said if they showed me why I should I look into it.

I'm sure Microsoft doesn't ask their employees how to solve problems in their OS only to get answers like "let's just add this to that and pray it works" I think they get answers more like "let's remove lines 55-57 in encoder.c replace it with 'return void' so that the function returns regardless of user input, that way we could validate the function after by adding lines 55-57 after the 'return void' etc etc.
[AT&T Samsung Galaxy Note 4] howellcp:
You solved root! Oh wait. That's just an encoder.c replacement. Dang it.
[AT&T Samsung Galaxy Note 4] TechBSwift:
I look at it like this, you both are correct. Surge is correct because it's important to read code to gain a better understanding of the process in question. Brainstorming also extremely because a lot of times successful ideas come from brainstorming...

Also keep in mind this thread had little to no activity until these guys started brainstorming together. Either you can have a dead thread, or you can have people coming up with potential ideas which may help someone with more experience achieve root.

With that said does anyone know the best tool to use to extract a tar file and to put it back into tar format? I have an idea that I would like to try... No I'm not going to try and flash a modified image in odin

Sent from my SM-N915V
[AT&T Samsung Galaxy Note 4] spexwood:
Try away my friend. Maybe it'll lead to something useful. ?
[AT&T Samsung Galaxy Note 4] TechBSwift:
I know it's a long shot but I want to modify a tar image and push root to the system/bin. Put it back into tar format and have kies restore the file. I successfully extracted the firmware during a kies restore. I modified the tar file name, re-downloaded the file again via kies which had a different tar file name. As soon as kies decrypted the file and restarted my phone in download mode I moved the file I just downloaded and swapped the tar file I renamed earlier and kies still flashed the firmware. Yes understand the md5 were probably the same, but I would like to modify/root a tar file and see if I can get kies to push the firmware.

Sent from my SM-N915V
[AT&T Samsung Galaxy Note 4] elliwigy:
odin tars can be tricky on windows.. do you have a linux system?
[AT&T Samsung Galaxy Note 4] vdub12:
Sorry if I caused a problem. Since this isn't the development thread I assumed it was OK to throw around ideas. It seems development is dead so I figured maybe some suggestions would give someone smarter then me an idea they could run with. It gets discouraging checking these 3 threads 3 or 4 times a day just to see no one has posted.

All I have is Linux admin experience so I can contribute what I can contribute. I apologize if my ideas are dumb. I just figured dumb ideas are better then no ideas.
[AT&T Samsung Galaxy Note 4] TechBSwift:
I do have Linux

Sent from my SM-N915V
[AT&T Samsung Galaxy Note 4] duytrong173:
i like
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
Odin will flash anything. Whether the phone will accept it is the road block. I like the idea, but it's a long shot.

I was wondering if we could flash the GTP through fastboot and rebuild the bootloader with an unlocked one from a similar device?
[AT&T Samsung Galaxy Note 4] drivel2787:
Ideas are great. How about trying these ideas instead of posting them. Just saying. Anyone can post ideas all day long but that's not going to get us root.
[AT&T Samsung Galaxy Note 4] gatesjunior:
ADB Backup and Restore

Like I have been saying for over a month, ADB backup and restore seem like a good avenue to go, due to the ability to write to system.

http://seclists.org/fulldisclosure/2015/Apr/51

http://seclists.org/fulldisclosure/2015/Apr/52

Even though this is not a full fledged vulnerability because of not being able to overwrite files owned by root or system, it is an example of a start in that direction.
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
Something strange happens on my device and I'm curious to see if it's all devices.

If I reboot into recovery with adb, I always get the 'Installing update' screen but it times out waiting for a command...trying to pull the recovery logs. Does anyone know how to do this?

While in bootloader I cannot connect to my device via adb...
[AT&T Samsung Galaxy Note 4] drivel2787:
Mine does this as well.
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
Ok just a WARNING. If you choose 'apply update from ADB' option in recovery and you let the device timeout by not installing an update,

it WILL format your device including data WITHOUT warning!

The fun I'm having these days... first I format my Nexus 6 and accidentally lock the bootloader with no OS on it, now my primary phone is back at square 1. Well I guess I've got nothing to lose now :)
[AT&T Samsung Galaxy Note 4] jinx10000:
Does the fact that the second link (CVE-2014-7953) executes the code as debug prevent using the system privileges to exploit CVE-2014-4322?

Sounds pretty close but I'm not quite sure what it's saying. Sounds like in one sentence it didn't allow code execution and then in the next it did as debug?
[AT&T Samsung Galaxy Note 4] lamarwallace:
Could someone check this Web site out it say it will unlock note edge bootloader.

MOD EDIT LINK REMOVED
[AT&T Samsung Galaxy Note 4] evilsock:
Sad face next to winky face.

This is really upsetting. This is the first phone I've had I can't root. So all my apps I've been carrying around are kinda useless. The main one I'd like is clean master app. It needs root to make the list of apps I want to stop restarting on their own, and a proper cache cleaning. I hope it will happen soonish.
[AT&T Samsung Galaxy Note 4] elliwigy:
that is just a link to download a file called fota.zip that is over 600mb in size?
[AT&T Samsung Galaxy Note 4] lamarwallace:
I meant this.

MOD EDIT LINK REMOVED
[AT&T Samsung Galaxy Note 4] vdub12:
Only applies to unencrypted locked bootloaders.
[AT&T Samsung Galaxy Note 4] wolfy287:
Will this work?
[AT&T Samsung Galaxy Note 4] Kyuta Syuko:
Click Bait. Requires you to complete an offer in order to "download" the file.
[AT&T Samsung Galaxy Note 4] Ragnar:
Links to any site which require you to join, accept or pay for anything are not permitted on XDA. Links have been removed.

Edfunkycold

Have a great day!
[AT&T Samsung Galaxy Note 4] elliwigy:
Hey, over on the thread for g9250 they have a few saying CROM service worked to unlock their BL and it is a Samsung application they downloaded from the Samsung app store..

the apk fcs so far on other devices but maybe it can be tweaked? I believe the g9250 is the chinese variant of the s6 edge.. but being a samsung app might provide some insight?
[AT&T Samsung Galaxy Note 4] windstrings:
Even a passerby can stir the soup and help keep it from burning on the bottom if the cooks are distracted!

I'm enjoying the dialog!
[AT&T Samsung Galaxy Note 4] DeathLord..:
What troubles me is all of the Great Minds in America no one has been able to confirm root.

I understand if this sounds dumb or impossible. But was thinking maybe the SU binery could be installed thru a apk to give Root?
[AT&T Samsung Galaxy Note 4] elliwigy:
i believe an apk would need to be installed as a priv app in order to have escalated priviliges to push the binary.. for this we need root..

i could be wrong lol
[AT&T Samsung Galaxy Note 4] DeathLord..:
Figured I would throw that out there and see if it seemed possible. Thanks the input
[AT&T Samsung Galaxy Note 4] Puppy69us:
Newbie hoping to add ideas

If the devs helping to root the GN4 had the proper signatures for the bootloader, could it be rooted easily at that point? Is this something the community could help with? Getting unlock codes and such? I have zero clue if it works that way. Would like to help though. Thank you.
[AT&T Samsung Galaxy Note 4] warriorpluto:
I remember a couple of people last year had their Samsung services overseas at a center and the techs have a program to unlock the bootloader with a simple click. They must really have that software under wraps.
[AT&T Samsung Galaxy Note 4] jolly_roger_hook:
It would be impossible to get these code unless you were in a high up. Dev position at Samsung and then for releasing them you would be fined more money then you can imagine

Sent From The EDGE
[AT&T Samsung Galaxy Note 4] Puppy69us:
Thank you for the answer. Trying to add ideas.
[AT&T Samsung Galaxy Note 4] JOSHSKORN:
It can't be brute forced, can it?