yashsingh1/xdaforums huggingface dataset:
[Verizon Galaxy Note 3 General] christianpeso:
Doesn't look like it.

This just came thru my twitter feed about a universal root using exploit CVE-2015-3636

Its just a white paper with the description of the Universal root, but maybe a more talented dev can use and create a tool.

https://www.blackhat.com/docs/us-15/materials/us-15-Xu-Ah-Universal-Android-Rooting-Is-Back-wp.pdf
[Verizon Galaxy Note 3 General] CuteP0ison:
If root after 4.4.2 is not possible then how is this ROM 5.0 and rooted?

http://xdaforums.com/showthread.php?t=2760380
[Verizon Galaxy Note 3 General] darksidesh007:
You can go back to 4.4.4: http://xdaforums.com/verizon-galaxy-note-3/general/to-4-4-4-lollipop-t3090936

As such, I was asking if someone who is on 4.4.4 can try and see what happens.
[Verizon Galaxy Note 3 General] donc113:
Did you even read what I wrote?

NOTHING WILL ROOT 4.4.4 OR 5.0

NOTHING
[Verizon Galaxy Note 3 General] christianpeso:
That ROM is pre-rooted. Meaning once you follow all the necessary steps to get the ROM installed, which requires root access before even starting, the ROM comes already rooted. But if you were to mess something up or boot loop, you would NOT be able to re-install that ROM as Safestrap(the recovery we use on this device) would not be there anymore. Most people are referring to having 5.0 or 4.4.4 already on their device and then trying to root it. That cant be done.

It sounds like he was referring to not being able to go back to anything earlier than 4.4.4, which would be 4.4.2 and that is rootable. And no, nothing is able to root 4.4.4 or 5.0 at the moment. All known methods that have posted have been tried by someone here on both versions with no success.
[Verizon Galaxy Note 3 General] mmalluck:
So what are the chances this snapdragon 800 Trustzone exploit can be used to gain root? From the write-up it should be possible to use this to unlock the bootloader using this method!!!

I'd post a link to the writeup but my newb status won't let me. Just search "trustzone MSM8974".

The exploit writer did say the note 3 was exploitable.
[Verizon Galaxy Note 3 General] xenophse:
Using the exploit *should* be possible, but that requires someone with the expertise to have motivation to pursue it, or for one of the rest of us to develop the skills to do so. I really should get off my arse one day and learn how to code. :|
[Verizon Galaxy Note 3 General] thunderblaster88:
So does this mean we might see unlocked bootloader and root soon!!!!!!!
[Verizon Galaxy Note 3 General] sandvich123127:
https://github.com/laginimaineb/MSM8974_exploit

This repository is actually useful (I think ) :good:

Edit:But it talks of fingerprint scanners and of codename hammerhead (nexus 5) :what:

I could just be wrong.

Edit 2: http://bits-please.blogspot.com/2015/08/full-trustzone-exploit-for-msm8974.html?m=1

More info relating
[Verizon Galaxy Note 3 General] HueyT:
Rooting Note 3 Verizon bounty is up to $13K so that alone should be incentive for somebody to root this sucker. Not mentioning how it'll improve many lives :D
[Verizon Galaxy Note 3 General] whatsinaname:
Unfortunately I worry that a lot of the people that pledged have moved on to other devices, not sure how much of the bounty would be recovered.

Still clinging on to a sliver of hope. I love my note 3 and still have not seen a new phone that makes me want to buy one.
[Verizon Galaxy Note 3 General] thunderblaster88:
In what post is this bounty?
[Verizon Galaxy Note 3 General] sandvich123127:
Recently another exploit was found after stagefright... it's codenamed "certifi-gate." It affects our device (screenshot below.) What it does is that there is a program on your device and is used for remotely viewing this device, such uses for TeamViewer... It gives root privellage I think and allows the remote user to do anything (not 100% sure about that statement.) Search on google certifigate exploit, or something similar to that
[Verizon Galaxy Note 3 General] thunderblaster88:
Well then we need someone get the root going for this already...I'm getting sick of no root
[Verizon Galaxy Note 3 General] fire3element:
When I checked the vulnerability of StageFright on my already rooted Note 3 on Jasmine 5.0.2, it shows it is vulnerable to 2 of the 5 listed CVEs.

There is already proof that the exploit can lead to root. Why are we not focused on that? Unless I missed the memo (that it will not work on our phone)

I am facing a steep hill here. Have an extreme situation with my current Note 3, and had to have a replacement sent to me. Of course the new phone is on OB6.

So now I am faced with the decision of holding onto my old one, or hope that we will see ROOT on LP for our Note 3s again. Praying that everyone has not moved on and left this great device behind.

And there is still no ROOT for the Note 4 to this day. We are now at 1yr from when the 4 hit the shelves, and it has not been cracked.

I MUST HAVE ROOT on my Note. It is my only source of internet connection where I live.

I do not know what to do :(
[Verizon Galaxy Note 3 General] thunderblaster88:
There temp root for the note 4
[Verizon Galaxy Note 3 General] fire3element:
I am well aware of KingRoot and what it does. Temp root does not give you full root control, which is why the Note 4 has not been perm rooted.

The temp root that King provides will only allow you to touch some of the system files. And it also will not last though a reboot which is required for a lot of mods that require root.

AND LET THIS BE A WARNING:

Do not keep fooling around with these PC rooting tools. Many of them are spy/malware.

They can also trip your Knox or QE warranty flag. Speaking from experience on this. Does not seem to be a problem for the Note 4, but may not work the same on the Note 3.

Just a friendly heads up.
[Verizon Galaxy Note 3 General] mmalluck:
The discoverer of the stagefright exploit hasn't made any code available for the exploit public that I'm aware of, where as the author of the trustzone exploit has published a github repository of a working demo. It's written for the nexus 5, which would need to be converted over to the note 3, but it's a much smaller hurtle to cross than reverse engineering stagefright.

The trustzone exploit also will allow you to unlock the bootloader, which opens the door for any kind of mods you could wish for.

I think it would be fairly easy to find someone to help convert the exploit over to the note 3 given the large number of devices the author notes are susceptible:

-Samsung Galaxy S5

-Samsung Galaxy S5

-Samsung Galaxy Note III

-Samsung Galaxy S4

-Samsung Galaxy Tab Pro 10.1

-Samsung Galaxy Note Pro 12.2

-HTC One

-LG G3

-LG G2

-LG G Flex

-Sony Xperia Z3 Compact

-Sony Xperia Z2

-Sony Xperia Z Ultra

-Samsung Galaxy S5 Active

-Samsung Galaxy S5 TD-LTE

-Samsung Galaxy S5 Sport

-HTC One (E8)

-Oneplus One

-Acer Liquid S2

-Asus PadFone Infinity

-Gionee ELIFE E7

-Sony Xperia Z1 Compact

-Sony Xperia Z1s

-ZTE Nubia Z5s

-Sharp Aquos Xx 302SH

-Sharp Aquos Xx mini 303SH

-LG G Pro 2

-Samsung Galaxy J

-Samsung Galaxy Note 10.1 2014 Edition (LTE variant)

-Samsung Galaxy Note 3 (LTE variant)

-Nokia Lumia 1520

-Nokia Lumia Icon

-Pantech Vega Secret UP

-Pantech Vega Secret Note

-Pantech Vega LTE-A

-LG Optimus Vu 3

-Lenovo Vibe Z LTE

-Samsung Galaxy Tab Pro 8.4

-Samsung Galaxy Round

-ZTE Grand S II LTE

-Samsung Galaxy Tab S 8.4 LTE

-Samsung Galaxy Tab S 10.5 LTE

-Samsung Galaxy Tab Pro 10.1 LTE

-Oppo Find 7 Qing Zhuang Ban

-Vivo Xshoot Elite

-IUNI U3

-Hisense X1

-Hisense X9T Pantech Vega Iron 2 (A910)

-Vivo Xplay 3S

-ZTE Nubia Z5S LTE

-Sony Xperia Z2 Tablet (LTE variant)

-Oppo Find 7a International Edition

-Sharp Aquos Xx304SH

-Sony Xperia ZL2 SOL25

-Sony Xperia Z2a

-Coolpad 8971

-Sharp Aquos Zeta SH-04F

-Asus PadFone S

-Lenovo K920 TD-LTE (China Mobile version)

-Gionee ELIFE E7L

-Oppo Find 7

-ZTE Nubia X6 TD-LTE 128 GB

-Vivo Xshot Ultimate

-LG Isai FL

-ZTE Nubia Z7

-ZTE Nubia Z7 Max

-Xiaomi Mi 4

-InFocus M810

We just have to get the exploit out there before ol' Verizon pushes out their patch.
[Verizon Galaxy Note 3 General] fire3element:
Well that is just the thing. I am pretty sure that firmware OB6 is patched already. There is a slim possibility that NK1 is not, which we can still roll back to at this time.

I think you missed something on that link you posted. I will quote the article:

" Timeline

19.09.14 - Vulnerability disclosed

19.09.14 - Initial response from QC

22.09.14 - Issue confirmed by QC

01.10.14 - QC issues notice to customers

16.10.14 - QC issues notice to carriers, request for 14 days of embargo

30.10.14 - Embargo expires

I'd like to also point out that after reporting this issue to Qualcomm, I was informed that it has already been internally identified by them prior to my disclosure. However, these kinds of issues require quite a long period of time in order to push a fix, and therefore at the time of my research, the fix had not yet been deployed (at least, not to the best of my knowledge). "

Look at those dates. Issue was found and reported to QC in September LAST YEAR. We are almost one year past that point. I am pretty sure it has been patched since then.

Unless I am completely missing his explanation.

Also, from what I read in his post, it requires a modified kernel installed to be able to run the exploit. The exploit is supposed to run the un-secure code that is added within the kernel.

For us, that would require that we install a modified kernel, and to do that requires an unlock bootloader. Sounds like a paradox to me.

Maybe I am not comprehending his article right. I hope so. WOULD LOVE TO UNLOCK OUR BOOTLOADERS!!!

So step 1 is we need to get ROOT first if we are going to attempt to do anything with this kernel exploit. And if the hole is closed already, then we at least have ROOT.
[Verizon Galaxy Note 3 General] Borderpatrol1987:
Don't get your hopes up. N3 is an old phone now.
[Verizon Galaxy Note 3 General] sandvich123127:
You never know, it seems like the "new" Galaxy note 5 is more like a downgrade due to Samsung following apple's steps ;). The note 3 can still be achievable if we can't get some 'note'worthy devs if we set up a bounty thread.

If one is set up, we can maybe get this goal to actually happen, root, and an unlocked bootloader! :D

Or you can just switch to another device set that is at least fairly new and maybe achievable for root with more devs, such as the lg g4, or some other device like the Nexus 6 or the next nexus 5 (2015)
[Verizon Galaxy Note 3 General] thunderblaster88:
I'm willing to put money up for root!
[Verizon Galaxy Note 3 General] AlexanderJohn:
Do any devs lurk here anymore? Is there a way we can make a formal request? Or do we just make our sacrifices to the devs and hope for the best?
[Verizon Galaxy Note 3 General] fire3element:
Hey Bro, devs are not magical beings. LoL They are simply individuals that take the time to put forth effort.

As far as I can tell, hsbadr and his Jasmine project are the only recent developments. No one else has anything past 4.4

Once we get root again, that could change.

And there is a slim hope that the TrustZone exploit for the processor in this phone was not patched on NK1. Which could give us an Unlocked Bootloader.

Then we would be open to a whole new world. We could adapt and use Tmo roms and mods.
[Verizon Galaxy Note 3 General] AlexanderJohn:
I know, it was just tongue in cheek ;)
[Verizon Galaxy Note 3 General] fire3element:
Ah, my bad. Guess I missed the satire. DERP
[Verizon Galaxy Note 3 General] asg1290:
This latest exploit might do it.

blog.trendmicro.com/trendlabs-security-intelligence/mediaserver-takes-another-hit-with-latest-android-vulnerability

If someone can productize it like towelroot It should work for all devices up to 5.1
[Verizon Galaxy Note 3 General] aklyatne:
That's very promising asg1290! Thanks for sharing. I'm going to do some research, poke around and see if I can escalate privileges on my device.

I hope someone who already has the know-how takes notice of this, it seems like a pretty straightforward exploit.
[Verizon Galaxy Note 3 General] thunderblaster88:
so I just got this but idk if I wanna take it due the fact it could fix the only possible sorce to get root, so should I or not? I mean if it will fix the crap that's making it all shi**y and never gonna have root then I will, especially since I'm trading my friend his note 3 rooted on 4.2 I did over a year ago
[Verizon Galaxy Note 3 General] thunderblaster88:
Idk why I cant post pics of it on tapatalk
[Verizon Galaxy Note 3 General] aklyatne:
What? Use your words - it's not clear what you're asking about doing.

If you are asking about rooting an updated Note...there is still no root method for 4.4+, as you would have learned if you read any of this thread.

You would have to develop your own root process from this exploit. Good luck!
[Verizon Galaxy Note 3 General] thunderblaster88:
No no, I'm already screwed with 5.0 when I got the phone, had an update lastnight to fix things it said, but I know there has been the known vulnerability and was wondering if it would be patched it i took this new update...does this help explain a little better? Sorry idk why it wouldn't let me upload the pics

No no, I'm already screwed with 5.0 when I got the phone, had an update lastnight to fix things it said, but I know there has been the known vulnerability and was wondering if it would be patched it i took this new update...does this help explain a little better? Sorry idk why it wouldn't let me upload the pics
[Verizon Galaxy Note 3 General] sandvich123127:
Yep, new update. It says it's for security reasons.. changes build number so there can be a flaw on androids system on OB6 :what: it says nothing about stagefright patches...
[Verizon Galaxy Note 3 General] sandvich123127:
Last attachment wasn't clear sorry.
[Verizon Galaxy Note 3 General] thunderblaster88:
Yes this is what I was talking about thank you
[Verizon Galaxy Note 3 General] thunderblaster88:
Idk if anyone here would know but I traded a friend of mine his note 3 I rooted last year on 4.4.2 and I just did the safestrap jasmine 5.0 rom update..now safestrap isn't working?? Anyone know about this or what I can do about a recovery?
[Verizon Galaxy Note 3 General] aklyatne:
This is not the place for that, start your own thread. You're breakin' rule 15.
[Verizon Galaxy Note 3 General] w00ly:
Any update on this working for root?
[Verizon Galaxy Note 3 General] aklyatne:
If there were, I think you would be able to read about it here.

There are no updates. It 'works' for root, someone just has to develop and release a script to exploit it. If/when that happens, I am sure we will hear about it.
[Verizon Galaxy Note 3 General] fjl307:
Where in the MyVerizon app is the option to enable and disable Mobile Hotspot? By app, you do mean the mobile app and not the website right?
[Verizon Galaxy Note 3 General] bradg24:
Use foxfi and you don't have to worry about using anything verizon ..
[Verizon Galaxy Note 3 General] donc113:
Under your plan's feature....where you can add or subtract features. Using either the website or the MyVerizon app.

You can also activate it via phone or just by trying to use the mobile hotspot app...where it gives you the choice to subscribe to it. ONLY if you have an unlimited data plan....mobile hotspot is included in tiered data pkans...but of course uses data.
[Verizon Galaxy Note 3 General] fjl307:
I know you can do this on the website but I still don't see it in the MyVerizon app that's why I was asking if you could do it in the app. If I try to enable the hotspot from within settings, I'm prompted with a window (this must be new in 5.0, the old window was different and simply said to call) to either "Go to My Verizon Mobile" or "Call Customer Service." If I click to the link to open the app, there is no option to add or remove any features for me.

I'm running version 10.0.751 if that matters. Verizon's apps are a joke though, I'm sure you can do it but it's just not showing it for me.

Expecting competent app development for Verizon is a pipe dream though.

If FoxFi is working now then I suppose there's no point to all this anyways. I actually didn't mind paying VZW for the few days a month I use it though.
[Verizon Galaxy Note 3 General] donc113:
Here's a screen shot of MyVerizon

Well..screen shot didn't upload....it's on the main my account page, after you sign in on MyVerizon...the bars show several options...the 2nd bar says Change Features
[Verizon Galaxy Note 3 General] Aier:
Give up.

Simply, give up. The note 4 is out already, and if there were devs working on this around the clock, there would have been a root method already. 4.4.4 was released almost A YEAR AGO. No root method ever emerged since. We have been left behind, and nobody is coming to save us. Either keep upgrading to keep the nagging software update menu from popping up and be happy with your stock phone, or get a new device that is rootable. That isn't an option for me, due to contract. Just be happy your phone preforms regular functions.
[Verizon Galaxy Note 3 General] johnsmith76251:
That's a pissy attitude, especially if you have a note 3 but you may be right!
[Verizon Galaxy Note 3 General] aklyatne:
Come on now, that's just ignorant, Aier. Devs will continue to develop root methods for a variety of devices. At least one of those root methods will work for this device. It might take some time, but even if no developers spend any time on this exact device, it will be easily rootable some time in the future.
[Verizon Galaxy Note 3 General] Banggugyangu:
That's not necessarily true. The only times that a universal root method happens is when there is a fundamental vulnerability in android or an app manages to circumvent things and achieve root privileges. This isn't common. That's why most root methods use exploits in the particular build on the device itself. These builds are usually similar in multiple devices from the same manufacturer, so one root method may work for several generations of a device. Without a working exploit to be able to write to system, though, there's no chance of getting root.
[Verizon Galaxy Note 3 General] aklyatne:
...just like the mediaserver vulnerability that was disclosed, what, last week? It was even linked in this thread. Those kinds of vulnerabilities do exist, and they will continue to be found.
[Verizon Galaxy Note 3 General] Banggugyangu:
That still requires a dev willing to take it and turn it into a method of rooting.
[Verizon Galaxy Note 3 General] aklyatne:
Correct - but this is one of those 'universal root' things you mentioned. It affects all android devices, new and old. New devices get more developer attention.
[Verizon Galaxy Note 3 General] rdiddy:
Man we still in the dark with root... Smh.
[Verizon Galaxy Note 3 General] Banzar:
Boy, if I knew where to find the resources to develop these sort of things into something useful, and how to do it, I feel I'd be more useful than I am now, seemingly sitting on the sidelines, waiting for a root method to be handed to me.

I'm guessing I start with the Android SDK and accompanying documentation. Does anyone know where I would go from there?
[Verizon Galaxy Note 3 General] btstarcher:
Not a clue.
[Verizon Galaxy Note 3 General] aklyatne:
I might be able to help you there a bit!

I feel the same way you do about this, and have started digging around for information about exploiting stack overflows and escalating privileges from there. It's not easy to find a well-rounded collection of information about this.

Here's everything I've found so far, mostly explanations of how to exploit older vulnerabilities. Some are very useful, others less so, but they've all helped me understand more about the process.

I'm eager to dive in, after a little more reading :)

http://researchcenter.paloaltonetwo...id-system-service-vulnerability-exploitation/

http://www.xda-developers.com/a-demonstration-of-stagefright-like-mistakes/

http://www.securityweek.com/high-severity-flaw-android-allows-arbitrary-code-execution

http://blog.nativeflow.com/the-futex-vulnerability

http://tinyhack.com/2014/07/07/exploiting-the-futex-bug-and-uncovering-towelroot/

And then a three-part series, the first part is less relevant to this but still a good read -

http://blog.nativeflow.com/the-futex-vulnerability

http://blog.nativeflow.com/escalating-futex

http://blog.nativeflow.com/pwning-the-kernel-root
[Verizon Galaxy Note 3 General] Knick Knack:
just getting my 10 posts
[Verizon Galaxy Note 3 General] Banzar:
Thank you for the helpful links, aklyatne!

I don't think I'll be reading them for a little while, though, at least not until I understand the SDK better, including code language. I mean, if the quoted sections of code in your linked articles appear as 99% Greek to me, then I'm pretty sure I's got a ways to go, you know, bro? :confused:
[Verizon Galaxy Note 3 General] aklyatne:
They're Greek to me too.

I know it's going to take more than one read to learn everything I can from those links, so I skimmed those parts. They'll be more helpful later.

Focusing on the theory, and the process - the words - was very helpful.

You have to start somewhere. If you wait until you can perfectly understand every line of all of the code in there., it's never going to happen. You're going to spend years learning C++ and Java, and then what?

If you want to become more familiar with the SDK first, I guess that's up to you. But it really would take *years* of dedicated study for you to learn enough to understand even half of that code, and it wouldn't get you any closer to developing a root method.

I think you are focusing on the SDK a little too much, it's honestly one of the least important tools in this entire process. Some of the tools that *are* important...are covered in those links.

The words in between the code are much, *much* more important than the code itself.
[Verizon Galaxy Note 3 General] Dravekx:
I'm not sure if everyone understands why the bootloader was locked. The Block C argument almost held ground with the FCC, stating that it was an infringement of our rights. Verizon countered that argument, saying that people with unlocked bootloader and custom ROMs could cause vulnerabilities within their network and cause problems for other users. The FCC took Verizons side, due to that statement, which left us where we are now.

Now, the argument of being off their network and having your bootloader unlocked is an option, but Verizon can spend years giving you the run around, legally.

AT&T and other carriers are starting to follow suite. Soon, we'll all be paying $1000 for hardware that can only run the software from the carrier provided... UNLESS someone comes up with a free network signal and customization... which, with WIFI spanning to everywhere, might be an option soon. All someone needs to do is purchase order a custom open bootloader from Samsung... which is NOT cheap. Wish I had the money guys, but for now... the FCC has us trap locked.
[Verizon Galaxy Note 3 General] Banzar:
And then it'll change on me!

I couldn't have said it better myself, aklyatne. I'm going to give the linked articles a good read, following your advice of skimming past the code parts. I suppose I felt intimidated when I saw it, and thought that I had to know some code, right from the get-go. Thank you for summarizing for me that I don't; you've saved me several hours of plausibly needless book-nosing!
[Verizon Galaxy Note 3 General] GrainOsand:
If this is a true statement, and I'm not saying it it. Then how can Verizon sell the Nexus 6? They're argument only works if they Encrypt all bootloaders on they're network. It's Bull****! :mad:
[Verizon Galaxy Note 3 General] Dravekx:
I completely agree!! Maybe if that argument was put in play, the FCC would break, but then again... it might cause a lock on all bootloaders instead of an unlock. :(
[Verizon Galaxy Note 3 General] GrainOsand:
Well, I actually think verizon will have to change there ways and start activating Compatible Unlocked phones. Their new plans almost dictate that they have too