yashsingh1/xdaforums huggingface dataset:
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] j'vai:
aaah, for the SECOND time -

Android Vulnerabilities Allow For Easy Root Access

"What devices are vulnerable?

The system call perf_event_open (which is used by this attack) is open on most smart phones. However, vendors can heavily customize the kernel and SELinux policies of their devices, making it difficult to identify which devices are vulnerable.

According to Google’s February security bulletin, CVE-2016-0805 affects versions earlier than 4.4.4 to 6.0.1. We cannot comprehensively test all Android devices, but our own testing indicates the following devices are affected:

•Nexus 5

•Nexus 6

•Nexus 6P

•Samsung Galaxy Note Edge

We believe that any Snapdragon-powered Android device with a 3.10-version kernel is potentially at risk of this attack. As mentioned earlier, given that many of these devices are either no longer being patched or never received any patches in the first place, they would essentially be left in an insecure state without any patch forthcoming.

Summary

This attack allows an attacker to escalate the privileges of any code that is executed on a target device. However, this scenario still relies on the attacker getting his malicious code onto the device in the first place. Users should be very careful of installing apps from untrusted sources, especially those outside of the Play Store.

We advise Android users to check with the makers of their devices if an update is available that will fix these flaws. "

you're welcome..
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Tiffany84:
Sorry to go off topic but what AdBlocker are you using with Samsung Browser 4.0? Thanks
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] ALLDAT:
Done
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] OPGT:
Signed and made sure to retweet and reply to tmobile and Samsung.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Xileforce:
Except we don't have Linux kernel version 3.10.xx and we don't have a krait core. SD 820 runs 3.18.xx Linux. Which is a year or so newer than 3.10.xx. Afaik the s7 is the first phone to make this kernel jump.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Tiffany84:
I'm pretty sure it was TWRP
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] namlas:
Did you read the part where it says that the vulnerabilities were already patched by google? There are already a few critical updates available for the s7/s7edge, and while I'm not able to find a changelog, these two exploits are likely already addressed: http://www.sammobile.com/2016/03/09...rgent-software-update-for-the-galaxy-s7-edge/

I also don't see a publicly available method to exploit the two CVEs listed in that article.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] AUSTIN3:16:
Signed.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] KOLIOSIS:
Look for AdBlock Fast in the Google Play Store.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] ice5192:
We are at 220+ Sigs

https://www.change.org/p/samsung-unl...ers-s7-s7-edge

Ice

Keep Re-tweeting as well

You can follow me if you like!

https://twitter.com/petersenmarc
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Pneumatic:
I am trying out AdGuard. I figure since it may be a while I may as well start finding ways to do what I need to do. I am also checking out FoxFi for Wi-Fi tethering. :)
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Fenny:
I had the stock kernel image and had modified the initramfs. That is what I tried to flash when I discovered, to my chagrin, that the bootloader was locked.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] UnixSlayer:
https://block-this.com/
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Bubba Fett:
Waiting sucks! Can't wait to TEKify this one. Hopefully
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] runehasa:
Cant wait bud thanks id advance
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] AngioNicholai:
Seems the S7 already has TWRP and root http://xdaforums.com/showthread.php?t=3333770
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] AKW:
Definitely as step in the right direction, but it does not yet work for the edge. Hopefully Tek and Fenny can port whatever he did to our device, although without a kernel, I'm not sure how we'll get around the dm-verity issue. I really need to learn how to develop.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] chipworkz:
Yes it is nice to see the development but I would be happier if this was for the Snapdragon version of the S7 instead of the Exynos. I don't mind waiting on the development process but not knowing if we are actually locked down or not is like not knowing if they are going to cancel Christmas this year or not. :p
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] mamdroid:
+1
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] mocsab:
Looks Like S7EDGE also has TWRP (International) http://xdaforums.com/s7-edge/development/recovery-official-twrp-hero2lte-3-0-0-0-t3334084

I know that it was announced here that the S7 had it - but I thoiught this might make it that much closer for us on the S7Edge....
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] chipworkz:
Yep, I would assume the S7 and S7 edge would be very similar. We just need some Snapdragon love now.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] lordcisco:
mines the SM-935T asked for source didnt get anythign yet where can i find the snapdragon to verify thats the cpu i have>?

sorry some what new.but i been rooting since the google nexus 4, and I also helped root the "WOPR" :D:eek:
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] king3opobn:
The T in the model number means you got the t-mobile version, which only comes in snapdragon
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] lordcisco:
Thanks I guess I'll start connecting this to Odin
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] AKW:
I'd hold off on that for now. There's really nothing you can flash. The only kernel and recovery available for the Edge are for the F variant, which uses the Exynos processor. There' s nothing available for the T variant yet, but some of the best devs on the forum are working on it so it's only a matter of time. We must all be patient, but I can't wait to be able to figure out what's going on with the Android System drain several users, myself included, are experiencing.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] lordcisco:
is the stock version available yet, ill probably need that for when I mess it up, also why would they release the 930 935F s and not the T, did i request it wrong ? or is this common for them

Mobile Phone	SM-G930F	G930FXXU1APAW	SM-G930F_MM_Opensource.zip	announcement	Inquiry Link

Mobile Phone	SM-G935F	G935FXXU1APAW	SM-G935F_MM_Opensource.zip
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] AKW:
I do believe the stock firmware is available for the T variant, but not the kernel sources yet. I was referring to there being no real reason to connect to ODIN since, apart from the firmware that's already on your phone, there's nothing to flash (Custom kernel, Recocery etc.) I guess it's good practice to have a copy of the stock firmware available, just in case, but I don't see how you'd need it yet.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] mocsab:
I wasnt Sure - I seem to recall there being some differences between the S6 and S6 Edge - I don't think the Recovery was the same - and the kernels were also different - for example if you flashed a kernel from the s6 Edge on the S6 - your screen touches got reversed - roms were flashable from one to the other - at least some were - but you had to flash the correct kernel for your device to work properly - I only owned the s6 until the note 5 came out so I am not sure if that changed later or not -
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Bubba Fett:
It's been a long time since I've had to use an unrooted phone. Soooo many ads. It's very frustrating. I find myself not using it as I normally would cause I can't do anything without killing my battery or having to hit the back button 10 times!
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Xileforce:
Samsung told me they would release source when phone officially came out...figures they only release the F variant stuff. I've since re requested the source. Btw you can just go to the osc site and click the email button and request source there. No need to do the inquiry on a similar device etc.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Root-Maniac:
[MENTION=4107827]TEKHD[/MENTION] will figure it out before long, I'm sure
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] lordcisco:
I have I'm still waiting also found out I also qualify for the Bogo so looking to be the first to get this rooted and try and sell a rooted s7 edge on egay see how the works out if we can get this snapdragon rooted btw I'm also getting the vr goggles

---------- Post added at 12:06 AM ---------- Previous post was at 12:04 AM ----------

There was a time when the edge needed to be rooted with the regular rom I had to do that once I vaguely remember
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Bubba Fett:
Appreciate the support though if your are helping out.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] UnixSlayer:
That's why I'm not accepting any updates until this gets figured out. Too many people updated too fast, and they lost the chance to Root with Towel Root....
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] j'vai:
I read MUCH further than that, even..

The problem is a bug in the Qualcomm "performance component", which is in a Linux kernel module, which perf_event open could exploit, -

which Samsung pro-actively uses it's selinux flags to lock the bootloader -

Mitigations

This is a summary of the mitigations provided by the Android security platform and service protections such as SafetyNet. These capabilities reduce the likelihood that security vulnerabilities could be successfully exploited on Android.

• Exploitation for many issues on Android is made more difficult by enhancements in newer versions of the Android platform. We encourage all users to update to the latest version of Android where possible.

• The Android Security team is actively monitoring for abuse with Verify Apps and SafetyNet which will warn about potentially harmful applications about to be installed. Device rooting tools are prohibited within Google Play. To protect users who install applications from outside of Google Play, Verify Apps is enabled by default and will warn users about known rooting applications. Verify Apps attempts to identify and block installation of known malicious applications that exploit a privilege escalation vulnerability. If such an application has already been installed, Verify Apps will notify the user and attempt to remove any such applications.

• As appropriate, Google Hangouts and Messenger applications do not automatically pass media to processes such as mediaserver."

Perf: From Profiling to Kernel Exploiting

"Perf has been added into Linux kernel since 2.6.3x to provide a framework for all things performance analysis. It covers hardware level (CPU/PMU, Performance Monitoring Unit) features and software features (software counters, trace points) as well. Among the supported perf measurable event list, there is a small set of common hardware events monikers which get mapped onto an actual events provided by the CPU, if they exists, otherwise the event cannot be used. So there is no surprise CPU vendors may customize related codes in kernel source.

In this talk, we will dive deeply into a major CPU vendor’s perf implement in its Android kernels which are widely deployed in hundreds of millions of popular Android devices. We will describe details of a series of new discovered critical vulnerabilities. We will choose one of these critical vulnerabilities to explain our exploit methodology and show how we can bypass all existing Android protection mechanisms and finally gain root on the device.

Finally, we will present a live demonstration on rooting a Nexus 6 equipped with the latest Android release by using a zero permission required application."

Samsung just didn't implement an unlockable bootloader "just for the sake of doing so" or to be grey zebras on drugs, you'd have to ask *why*..
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] cwalker0906:
Just got this and removed ad guard which only blocks ads in browser....block this blocks all ads...thanks for the link
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] quikt:
signed

this is still a good phone keeping it root or not
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Schiaboner:
And I, like and idiot, updated my phone...saw "edge features" and didn't think anything of it. I immediately regretted it.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Xileforce:
Oddly you leave out the one key portion of the whole perf argument. "This particular vulnerability lies in the function get_krait_evtinfo." Not only is the 820 not of the krait architecture, but it's also of s significantly newer kernel version. Additionally, how is locking the bootloader going to prevent these exploits from working in the first place?
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] kwkw480:
Me either pal. I figured the boot loader was unlocked so updating wasn't a problem. Never again!
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] OPGT:
Wait.. I'm confused... so when you got the phone, there was an update? I never received one?
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] UnixSlayer:
If you're on T-Mobile, there is an update for the SM-935T Galaxy S7 Edge..... I wouldn't advise accepting it.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] guaneet:
Just a pointer, you can factory reset your phone and it'll get rid of the update since the update was given by galaxy apps, not by the official software updating app.

I can confirm that you can decline the update after factory reset.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Xileforce:
Afaik that was just an update to the edge screen service. Not a system update. Otherwise build # would change and you would have to reboot the device. You should be fine.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] OPGT:
Must have just not noticed it... I usually decline things if I don't know.. Should I try towel root?
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] j'vai:
it wasn't needed if my very 1st reply post *was read, comprehended*..

do you know what **perf** is in the Linux kernel? (in my 1st post in this thread)

the threat as a whole was susceptible on current android handsets (ongoing) & IoT devices.., using QUALCOMM snapdragon soc's, not only 808, 810 etc, it's the soc , period.. regardless of older of newer kernel, perf is in the mainline tree, it's like wax development in an ear.. it's in there..

once you grasp the gravity of that, then you'd know why Samsung locked the bootloader as such;

the s7's with the snapdragon soc are already out in the market..

they aren't doing a recall on them because a vulnerability maximized by an unlocked bootloader, ( they weren't shipped as so), so what do they do to protect the current flagship?..
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] StrumerJohn:
Dude get out of here. Go make a new thread for all your jargon. You're not even fully explaining things and leaving out important details. Tweet/FB/Email, pop in your screenshot, sign the petition and go. Nobody cares about your old information.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] j'vai:
sure thing, what I expected..
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Root-Maniac:
Before I accepted the update kingroot left my system status custom when I looked In download mode also had the padlock on the bootscreen. Since I updated I no longer get that
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] RusherDude:
Guys one technical question:

Bootloader locked + Secure Boot (not flashing or booting unsigned bootloaders) + Secure Download (not flashing unsigned kernels or recoveries) + dm-verity (not booting modified system partition).

But nothing checks if the kernel or recovery have been modified in boot, or in any case, do another thing that triggering knox right? Secure boot doesn't stop the boot if an unsigned kernel is found asap I know, and with a temporal root, kernel and recovery could be written and it would just trip knox and they will stay there being usable right? Or Im wrong in all this? Because in this scenario, I don't know why this is different than any previous locked phones.. everything but the BL could be beaten.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] UnixSlayer:
Just remember two important things when doing a reset....

**1). Turn off, and remove your Google account from your phone. Otherwise there is a 72 hour lock on your phone.

**2). Remember your Samsung Account login, and password that you used to setup your phone for the first time. Otherwise you'll be locked out, and you won't get past the Samsung Account setup after the reset.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] guaneet:
i've done multiple factory resets(3) since getting the phone i haven't been locked out yet.

but yes to be cautious follow these parameters!
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Xileforce:
Dude. Your reply stated the issue was in the perf system of the kernel. The threat lies in Qualcomms modifications to it to accommodate krait as it says in the article you linked... Not to mention the Nexus 6 and 6p use an outdated kernel so who cares what vulnerabilities they have. On top of that locking the bootloader doesn't stop that issue anyways. Stop dropping buzzwords, and copy pasting articles. I'm done posting about this.

---------- Post added at 04:31 PM ---------- Previous post was at 04:30 PM ----------

Afaik we don't have towel root yet. Think he was just using that as example.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] ice5192:
We are at 250+ Sigs

Keep up the sharing and re-tweeting

- Ice

https://www.change.org/p/samsung-unlock-boot-loaders-s7-s7-edge
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] RusherDude:
Wasn't the lock only if you changed the password lately??
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Xileforce:
Interesting idea. I assume you mean achieving root, then using terminal to DD a custom kernel to the boot partition overwriting the existing one if I understood correctly. Unfortunately ive no experience with locked bootloader's and the like so I have no clue if that would work.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] UnixSlayer:
This just happened to me last week on my Galaxy S5.... I had it Sim Unlocked, and gave it to a family member to use. When I reset the phone to factory, I found this out the hard way. Just beware of these two things.... I thought I was going to have to send my phone into Samsung to be factory erased, and reset..... it was an AT&T branded Galaxy S5.... maybe the T-Mobile branded phones are different..... I don't know.....
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] jdidtht:
Why is that? I've never had a 72 hour lock on any samsung device because of my Google account and a factory reset, and Ive never been fully locked out of my device because of not remembering my Samsung password. It's not hard to get if you forget it.. but since when did a device get a 72 hour lock due to a Google account and factory reset
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] RusherDude:
Yep, root and dd'ing over kernel and recoveries partition. A custom kernel without dm-verity would free the system partition and there the party would start.

What I don't know if the bootloader, after checking for the unsigneds kernel and recovery, and after tripping knox 0x1, would boot the unsigned kernel/recovery or stop the booting with some SECURE BOOT ERROR: kernel or such. I don't know if secure boot includes kernel/recovery in this device or not, but I have read on the forums that some nexus booted up with bootloader locked, secure boot and twrp flashed via boardiag (or however its written).
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] UnixSlayer:
Brand new since Android Lollipop 5.0 came out. It was not instituted in previous versions. They are trying to cut down resets on stolen phones....
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] mikeyinid:
I personally don't think it is locked. I've been wrong before though....

My reasoning is, ever since 5.1.1 a repacked stock kernel will not boot on Samsung devices. We had the same issue on the S6. That error you got is the exact same error we were getting. DM verity and some other things need to be disabled in order to be able to unpack/repack a boot.img and get it to boot, which can only be done in source and compiled.

Like I said, I could be wrong. But we'll see when kernel source drops.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Xileforce:
Yea it's definitely an interesting idea. Especially considering that if it worked, it wouldn't be too hard to turn into a script for easy unlocking. Just seems like somebody would've tried it before. Either way. We only have Verizon kernel source ATM and no root :( I think the kernel source is the same regardless on the carrier but better safe than sorry.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] jdidtht:
I've reset many many times after 5.0 on up and never one time have had a 72hr lock on any of my last 3 devices with 5.0 on up. Thats strange, I've never even heard of anyone encountering that on any of the past 3 samsung devices on any xda threads for samsungs.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] danon.brown:
Sprint also if it's the p version
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] ronj1986:
Signed the petition.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] MorePAIN:
Please tell me there's hope for this phone. Dammit just got rid of my Note 5 love TekHd Roms. This freaking sucks.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] Fenny:
It is not that it won't boot, it won't even flash. Doesn't even trip Knox. Others have tried twrp, and the kernel source is available for the other US variants: http://opensource.samsung.com/reception/receptionSub.do?method=sub&sub=F&searchValue=Sm-g935
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] UnixSlayer:
https://support.google.com/android-one/answer/6172890?hl=en

http://www.samsung.com/us/support/answer/ANS00038761/846737562/Y/
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] ronj1986:
Have you inputted the incorrect password a few times? I have never encountered the 72 hour lock issue myself, just trying to get to the bottom of it so that others can avoid it.
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] jdidtht:
That's fine, I'm just stating I've never seen the issue ever arise on samsung forum on xda on any of the past three devices I've had with 5.0 or higher. Thanks for the info

---------- Post added at 05:53 PM ---------- Previous post was at 05:51 PM ----------

A Samsung password? Yes I have. But never seen a Samsung device lock for 72 hours after changing a Google password or whatever the faq was
[T-Mobile Samsung Galaxy S7 Edge Guides, News, & Di] ice5192:
Gents please make sure we stay on topic we do not want the fire to dwindled because people are off topic this is a very long process please respect the thread and its members on it. We have achieved alot in the past 72 hours acknowledgement from a CEO is pretty big news

We are sitting at 260+ Sigs

I am actually going to take a little bit of a break and spend some time with my family i have been at this for the past 72 hours ignoring them so give me a few hours and ill be back with updates thanks so much for making it this far we need to hit 500

https://www.change.org/p/samsung-unlock-boot-loaders-s7-s7-edge

I will post the next update at 8PM CNT

Follow me on twitter if you like

https://twitter.com/petersenmarc