yashsingh1/xdaforums huggingface dataset:
[Verizon Galaxy S 5 Android Development] Dudash:
That is awesome to know. I didn't know you had received more than the 1 CID. Good news there.

And I don't think they'd backtrack.. a few months ago a Samsung Update schedule leaked and said they were working on MM for the "Galaxy S5 (Verizon)" (no other US S5 was listed in the document). I don't think they'd punish the majority of their users when only a small amount can/are doing this.

Since it's only about half of the vzw s5s that can even do this, I don't think it would be worth their time to punish everyone. Luckily, both of mine can do it :P

I just unlocked my second one about half an hour ago.
[Verizon Galaxy S 5 Android Development] GeTex:
Lucky, I have so many 11's
[Verizon Galaxy S 5 Android Development] Dudash:
Wasn't someone mailing you a 15?
[Verizon Galaxy S 5 Android Development] GeTex:
Multiple broken 15's xD
[Verizon Galaxy S 5 Android Development] thewebsiteisdown:
I have an 11 here but what would you need? It's the wife's just don't want to hard brick.
[Verizon Galaxy S 5 Android Development] Dudash:
Unfortunately both of my 15's are daily drivers.

Otherwise I'd do a swap with you for one of your 11's.

:(
[Verizon Galaxy S 5 Android Development] GeTex:
Haha, is cool!
[Verizon Galaxy S 5 Android Development] Dudash:
Is there any chance of fixing at least one of the broken ones?

Unbrick images? Getting inside and soldering/replacing parts? If you got sent a bunch of paperweights.. That's just.. upsetting.. lol. You were prolly all excited and then boom, giant letdown.

I wonder if anyone on ebay, swappa, etc would be willing to install the emmc brick bug app to check what kind it is before purchase..

I bet a lot of them would just say "No. Take it or leave it." but some may not be total dicks.
[Verizon Galaxy S 5 Android Development] autonomousperson:
Hard bricks can be fixed with an sd card unbrick img. Water damage is just tons of rubbing alcohol and a bit of baking. Shouldnt be too hard to fix. Soldering smd components and trying to reflow a BGA eehhh might as well just throw them away.
[Verizon Galaxy S 5 Android Development] Dudash:
I'm curious if there is some way we can narrow down an indicator for 11's and 15's that isn't related to checking the CID itself.

I also wonder what the Hardware Version of the 11's are.

Under Settings>About Phone>Hardware Version.

Both of my 15's are G900V.05

I'm not sure if anyone has asked or checked to see if they are different depending on if you have an 11 or 15 or not but there has to be some indicator that shows they use different hardware somewhere.
[Verizon Galaxy S 5 Android Development] GeTex:
Mine were sent known dead. One has an activation lock, the other is a no boot
[Verizon Galaxy S 5 Android Development] Dudash:
What do your 11's say under the battery under SKU?

And what is the Hardware Version under Settings>About Phone?
[Verizon Galaxy S 5 Android Development] InsaneHype:
Couldn't one use the exploit [MENTION=1168000]jkru[/MENTION]se gave for rooting the G900V to change the CID to a working one?
[Verizon Galaxy S 5 Android Development] autonomousperson:
Lol you guys need to do some googling before posting. [MENTION=7096958]InsaneHype[/MENTION] CID is stored and managed by eMMC firmware not the os. Root is only useful for talking to the eMMC chip to reprogram the CID.

the 11 and 15 devices should be identical in terms of serials. Could be different manufacturing plants? If so id check the origioal battery. There may be a link between battery production location and chip type.
[Verizon Galaxy S 5 Android Development] InsaneHype:
Oh I see this issue now just wasn't comprehending it. So that means there needs to be a way to get the firmware

to change it or am I still oblivious and it's getting the firmware to unlock from that?......
[Verizon Galaxy S 5 Android Development] GeTex:
FCCID: A3LSMG900V

SKU: SMG900VKZV

Made In Korea

15.09 G900V 16GB

IMEI: XXXXXXXXXXXXXXXXXXXXXX
[Verizon Galaxy S 5 Android Development] InsaneHype:
CID is 11

SKU: SMG900VKZV

FCCID:A3LSMG900V

15.09 G900V 16GB

IMEI: not listing
[Verizon Galaxy S 5 Android Development] PartyDroid:
Which one do i have?

would some one please tell me what is the diffeance here? 11 Chips eMMC

i am on CID 11
[Verizon Galaxy S 5 Android Development] InsaneHype:
If you have a computer get ADB and fastboot and run fastboot getvar cid. And your other question is the EMMC 15 chips are capable of being unlocked with some work but the EMMC 11 Chips (like I have) cannot be at the moment that is what this whole thread is about. Getting the 11 Chips to be unlocked.
[Verizon Galaxy S 5 Android Development] PartyDroid:
i was just getting ready to update my post i am on CID 11

---------- Post added at 09:14 AM ---------- Previous post was at 09:12 AM ----------

Thank you for your reply.:good:
[Verizon Galaxy S 5 Android Development] InsaneHype:
Then you also can't unlock bootloader ATM
[Verizon Galaxy S 5 Android Development] PartyDroid:
me personally don't care if i am unlocked or not i just started being curious. as long as i am rooted and untrottled tethering i am happy more a less besides making wife and kids happy too.:D
[Verizon Galaxy S 5 Android Development] faehsemc:
I'm more than willing to brick this thing as a test phone if you got something going. I know you said you had a bunch already though. I'm not even on vzw right now because I'm stationed in spain so i can let you know any GSM related issues as well. Truly can't stand this phone with the stock system. TW has too much bloat even with a **** ton of stuff removed. If my S3 didn't **** the bed, I would still be using it.

Just to clarify too, this is a vzw s5 with the Toshiba chip.
[Verizon Galaxy S 5 Android Development] limeaide:
I swear in the other thread jrkruse posted how to get around the lock. Maybe I read it wrong or the other person posted wrong. But I swear that is how it is stated.
[Verizon Galaxy S 5 Android Development] GeTex:
I believe he did

also if you are only looking to kill bloat, just get root, no need to unlock!
[Verizon Galaxy S 5 Android Development] Dudash:
Unless you guys made a typo, I think I figured it out.

My black S5 (15) has a SKU of SMG900VZKV

My white S5 (15) has a SKU of SMG900VZWV

Our devices have different SKUs. The Z's and the K's are switched.

This may be an easier way for people to tell if their device can be unlocked or not.

What are your Hardware Versions under Settings>About Phone?

and when were they manufactured? We may be able to narrow down a timeline for them too.

My black one was manufactured 2014.07.12

My white one was manufactured 2014.08.06

Also, side note, the FCC ID on both of mine are the same as yours GeTex so I don't think that matters.
[Verizon Galaxy S 5 Android Development] 0aLIV1P:
CID: 11

SKU: SMG900VMBV

FCCID: A3LSMG900V

Made In China

14.10 G900V 16GB

IMEI: XXXXXXXXXXXXXXXXXXXXXX

Hardware version: G900V.05

Manufactured: 2014.10.24
[Verizon Galaxy S 5 Android Development] GeTex:
I'll double check, 100% sure wasn't a typo

Also everyone post origin of manufacture?
[Verizon Galaxy S 5 Android Development] InsaneHype:
Deleted

---------- Post added at 12:54 AM ---------- Previous post was at 12:48 AM ----------

Hey my 11 is Made in China or do you want manufacturer date
[Verizon Galaxy S 5 Android Development] GeTex:
My 11 is Korea?
[Verizon Galaxy S 5 Android Development] InsaneHype:
I just looked does this mean I'm a 15 or that I am a 16gb? I looked in Root Explorer before I reset to stock no root and it was 11
[Verizon Galaxy S 5 Android Development] jjdavis699:
Sorry man, just means you've got 16gb.
[Verizon Galaxy S 5 Android Development] GeTex:
You have an 11, do not clog up R&D threads please
[Verizon Galaxy S 5 Android Development] autonomousperson:
Hows that firmware dump coming? If you can get vendor cmds its only a matter of editing beaups code
[Verizon Galaxy S 5 Android Development] GeTex:
In progress, gotta get through to Engineering now
[Verizon Galaxy S 5 Android Development] Dudash:
How do you have these hook-ups at Toshiba?

Maybe you shouldn't answer that? lol.

I wish I knew people that could hand over info this important.

Different topic, I have ZERO experience with hardware hacking, I stick to software hacking, but is it possible to completely replace the chip on the device and have it still work?

I was wondering if it would be possible to find somewhere that sells the Samsung eMMC chip that you Toshiba chip users can switch it out with and then do the 15 bootloader unlock.

Or perhaps you could use one of the bricked 15's chips that you have to replace your 11 chip.

This is all gibberish if replacing the chip won't work but just throwing out ideas that I have no clue about. lol.
[Verizon Galaxy S 5 Android Development] brd912:
I've been watching closely because I can't really help but I haven't seen anyone really say what happens when running the script for the 15 chip? I can clearly tell by the other thread that there are multiple noobs unlocking their phones right now and I just about bet one of them doesn't have an 15 chip

---------- Post added at 10:54 PM ---------- Previous post was at 10:44 PM ----------

I thinks he's tried. No go
[Verizon Galaxy S 5 Android Development] camcorder123:
I have a white S5 with Samsung eMMC, here's my info from under the battery:

Model: SM-G900V

SKU: SMG900VZWV

FCC ID: A3LSMG900V

Made In China

14.07 G900V 16GB

IMEI : 9900049135XXXXX

In my many attempts at custom roms/rooting I've hard-bricked 3 S5's before (I just got my fourth warranty replacement :D) and I've checked the CID on all of them at some point due to brickbug checker and just my curiosity - I've received 2 Toshiba eMMC's and 2 Samsung ones - but there's no correlation to manufacturing date, it's actually been a sorta "every other" pattern for me since August of 2014. Not to mention that the manufacturing date of the current device that I have is quite recent, and I have a Samsung eMMC

Little known fact - if you need a replacement and your warranty is voided (but still within a year from issuing), a "dd if=/dev/urandom of=/dev/block/mmblk(everything except system and data, do those last)" clears knox. Then a good playing dumb and yelling at Verizon customer service gets you a replacement with next day delivery ;). Just a little advice for anyone who might break their phone doing this. It breaks it beyond jtag to the point of Samsung not being able to even check knox. Or they actually don't check it at all. My first phone was sent back to them with a (still booting) port of Alliancerom and they shipped me a new one without concern......
[Verizon Galaxy S 5 Android Development] ryanbg:
They can actually just take a MicroSD and unbrick it within seconds.
[Verizon Galaxy S 5 Android Development] BooRad78:
White S5

Model: SM-G900V

SKU: SMG900VZWV

FCC ID: A3LSMG900V

China

15.06 G900V 16GB

IMEI: 9900048530xxxxx

Would serial, device id, kernal.... be of any help?
[Verizon Galaxy S 5 Android Development] GeTex:
I have Family working in the sales division, so If I'm lucky!

New topic but if you change your 11 chip to a 15, it likely will be blank. Using a sdcard prepared bootloader you could boot from the SDcard and then flash a full system.tar with PIT file from ODIN and make a working system. I am repairing my BGA Rework station so.... maybe?

Uhhh, no one with an 11 is unlocking their bootloader with the current method. It literally DOESNT WORK! Running it on an 11 Chip will tell you that it's unsupported. You haven't read the thread?
[Verizon Galaxy S 5 Android Development] brd912:
I have, I just couldn't find a post that stated the outcome of running the script on an 11chip. All I seen was you say it wouldn't work.
[Verizon Galaxy S 5 Android Development] ryanbg:
There's no script running... It's a binary compiled with the Android NDK. The source code is readily available, there shouldn't even be any questioning if the material and instructions were read.
[Verizon Galaxy S 5 Android Development] GeTex:
I'm not sure he even read the PDF explaining that this was a Samsung specific exploit and 11's are Toshiba Chips....
[Verizon Galaxy S 5 Android Development] Hariiiii:
Have you looked through this at all?:

https://android.googlesource.com/kernel/omap.git/+/982e388969468146dacd6a9a64dda39338630e69

this in particular looks interesting:

https://android.googlesource.com/ke...9a64dda39338630e69/drivers/mmc/core/mmc_ops.c

I don't know C, but 'mmc_send_cxd_data' might be helpful.
[Verizon Galaxy S 5 Android Development] brd912:
To be fair dude, these threads are completely clustered and the info is scattered as hell.

Did you even read my post? Since you like to make assumptions. I know exactly what the exploit is for and I fully understand the difference between the chips...but even though I've read every bit of this thread and the other, I still haven't seen an exact explanation of what happens when you run the exploit on an 11 device. With all the guys in the other thread who can't even get the command right, I figured someone with an 11 chip has ran it. I never seen you post that it would say its unsopprted. You should focus that energy on the questions that make less sense.

---------- Post added at 06:03 PM ---------- Previous post was at 05:56 PM ----------

I wasn't hoping to unlock my 11 device with a Toshiba chip with an exploit made for a sumsung chip...I simply wanted to know the outcome of running it anyways.
[Verizon Galaxy S 5 Android Development] InsaneHype:
Ah I figured
[Verizon Galaxy S 5 Android Development] TioCareca:
The important info are in the OP...

And if you use this in a Toshiba chip it dont run, it say is not compatible...
[Verizon Galaxy S 5 Android Development] camcorder123:
[MENTION=766721]ryanbg[/MENTION] I thought of that too. I was pretty much joking to be honest, but the time that it happened both me and a Samsung Experience Store employee attempted using an unbrick image on a micro sd, thinking the phone would go into rescue mode - but nothing happened whatsoever. The phone didn't even show up as an unrecognized HID device when plugged in. I dunno m8, but really, it was just for ****s and giggles :D

---------- Post added at 10:48 PM ---------- Previous post was at 10:46 PM ----------

Have you looked at the source? You can probably edit out the check and force it.

Bad things would happen (they tend to with commands this low-level), and it will most likely not give any positive result.

---------- Post added at 10:50 PM ---------- Previous post was at 10:48 PM ----------

I've read through both info packets and I really don't see a way to make this work without more info on the vendor commands. I see evidence of some of the commands used by [MENTION=711482]beaups[/MENTION], even the same wording of these commands, but I see no evidence of the command used to change the CID security bit. Oh and CMD26 and CMD62 are BOTH related to CID reprogramming, from what I've seen. I still can't really make heads or tails of any of this, though.
[Verizon Galaxy S 5 Android Development] GeTex:
Further more, We have a post stating exactly what happens in the original thread. I own an 11 and it literally just says unsupported and if you remove the check, it says backdoor failed
[Verizon Galaxy S 5 Android Development] pyrite123:
I have an 11.

0168

Model: SM-G900V UD

SKU: SMG900VZKV

FCC ID: A3LSMG900V

For Information call 1 888 987 4357

MADE IN CHINA

15.03 G900V 16GB

IMEI: 9900048493XXXXX

Hope this helps somehow. Good luck and god speed~ :)
[Verizon Galaxy S 5 Android Development] GeTex:
Info, I'm meeting with an Engineer come round May, will keep you posted!
[Verizon Galaxy S 5 Android Development] sean19661:
Well I don't think posting your phone's info will help sorry if this is off topic for this thread
[Verizon Galaxy S 5 Android Development] gram117:
Sweet! hope all goes well
[Verizon Galaxy S 5 Android Development] alin919:
You are chatting with a lady:)
[Verizon Galaxy S 5 Android Development] PrinceOfGodamnPersia:
Ive read all of your replies and I sorta didn't know what was going on. (Early stages of getting of CE degree - trying to go on the software side a little bit too!).

Is it unlikely that people with 11 emmc will have an unlocked bootloader?

And why the did Samsung have to use different chips? Why do they hate us?
[Verizon Galaxy S 5 Android Development] gerryl432:
i have 11 too...just my luck :(. hope they find an exploit soon
[Verizon Galaxy S 5 Android Development] GeTex:
This is an R&D thread, posts should remain R&D related
[Verizon Galaxy S 5 Android Development] autonomousperson:
Oh yeah, if you cant get the firmware, any technical documentation or specs would be EXTREMELY helpful. If we know what controller it is it would possibly pull the firmware off with existing tools (in a way similar to sd cards)
[Verizon Galaxy S 5 Android Development] autonomousperson:
http://www.hardkernel.com/main/products/prdt_info.php?g_code=G135415955758

It seems like these chips need nothing more than a few passives to work as a sd card
[Verizon Galaxy S 5 Android Development] autonomousperson:
Ok, most of the pins are not used, JEDEC says that EMMC is MMC and SD readers are backwards compat with MMC. All you have to do is solder some pins to a microsd adapter

[MENTION=5414005]GeTex[/MENTION] you had a riff box?

http://imageshack.com/a/img818/9664/57fj.jpg

http://www.amazon.com/socket-Interface-BGA153-BGA169-recovery/dp/B015DZD382
[Verizon Galaxy S 5 Android Development] GeTex:
Hmmm, I could find my Riff box. Thats possible but I will not mutilate my 11 to do so, only cuz I have no other functional phones yet
[Verizon Galaxy S 5 Android Development] munchy_cool:
https://swappa.com/listing/WQS067/view

not me selling it :)

Edit-sorry for OT
[Verizon Galaxy S 5 Android Development] GeTex:
my $1.25 bank account sadly isn't sufficent.

I have 2 15 EMMC boards here now but need the remainder of the phone

Anyone got parts? Zombie phone?
[Verizon Galaxy S 5 Android Development] autonomousperson:
I have 3 frames sitting around and misc parts.
[Verizon Galaxy S 5 Android Development] Master Melab:
A few things:

Does "CID" stand for "Card ID" or "Carrier ID"?

Is the bootloader signature checked by the boot ROM?

What flag are you trying to modify?
[Verizon Galaxy S 5 Android Development] autonomousperson:
CID is Card ID, A unique id assigned to the eMMC Chip.

The bootloader's signature is checked qflash or whatever samsung's anoying thing is... If its not signed by samsung it wont flash. We are intrested in Dev BL signitures. This is done with something else being attached to the aboot. The BL does some magic then compares it to the thing attached to the aboot. (Now that I think about it, shouldnt it be sorta easy to brute force it? its only numbers). As far as I know, there is nothing that is "physically etched on to the chip". The eMMC's firmware is rewritable and I doubt that the CID is etched in based on reading JDEC spec.

We are trying to modify the CID so when the BL checks the CID, everything matches and it allows flashing of whatever you want.
[Verizon Galaxy S 5 Android Development] Master Melab:
So the first-stage bootloader is verified prior to being executed? Or only prior to being flashed? Knowing Samsung phones, it might be both.

"Physically etched" just means mask ROMs. Most SoCs have them, though not all are configured to perform digital signature checks. The CID is in all likelihood not part of a mask ROM as it is a field that must differ between units.
[Verizon Galaxy S 5 Android Development] autonomousperson:
BL is verified on flash and the Dev edition check occurs on boot. I do not think the BL is reverified after flash.

And yeah, CID is likely not a part of a mask ROM as JEDEC says they can be programmed.
[Verizon Galaxy S 5 Android Development] GeTex:
PM Me Autonomous

Beyond that, Will continue to keep things posted

I can't get a firmware dump likely but i probably can get us vendor commands, If i'm lucky!
[Verizon Galaxy S 5 Android Development] camcorder123:
If aboot.mbn isn't verified during boot, what's to stop someone from modifying the dev bootloader's CID to match theirs with a hex editor and flashing the unsigned bootloader directly through DD?

The original unlock thread mentioned someone's "friend of a friend" accomplishing an unlock through that method, maybe looking into that isn't the worst idea.

...even though I'm assuming that wouldn't work
[Verizon Galaxy S 5 Android Development] GeTex:
That person was apparently a notorious Liar, as they told me it worked.

You will brick doing that

It verifies it's own checksum to the signature on boot

Welcome to Qualcomm Secure Boot, it's on the hardware level
[Verizon Galaxy S 5 Android Development] autonomousperson:
Oh. Didnt know it checks BL's sig again on boot. I thought it only checked on flash and blocks any sort of flashing if it doesnt match.
[Verizon Galaxy S 5 Android Development] Hariiiii:
Does anyone know C? Can anyone write a firmware dump binary using this?:

https://android.googlesource.com/ke...9a64dda39338630e69/drivers/mmc/core/mmc_ops.c

look at mmc_send_cxd_native and mmc_send_cxd_data. You can also look at beaups' work here for reference:

https://github.com/beaups/SamsungCID/blob/master/samsung_cid.c
[Verizon Galaxy S 5 Android Development] GeTex:
We have some code regarding 11 EMMC's right now, but it's not public for now
[Verizon Galaxy S 5 Android Development] alin919:
That's a good news :good:
[Verizon Galaxy S 5 Android Development] Bren123:
That's good
[Verizon Galaxy S 5 Android Development] Legitsu:
I am sorry but would the noobs kindly be quiet and not post Jesus Unless you are a expert on the subject or have some knowledge of reverse engineering

You do nothing but clutter the thread with your inane 'hopefulness' and 'idea's''

this is DEV THREAD NOT A THREAD FOR YOUR TO BEG FOR PROGRESS or STATUS Updates, POST WHATEVER RANDOM NON=SENSE Popped into your uneducated head

I am sorry for sounding like a jerk but the crap posts do nothing but hinder progress and derail threads AND waste the moderators time

and its become a theme that every-time the word unlock or root pops up in a thread the noobs come crawling out the wood work and hover over our solders while we work,its dam annoying
[Verizon Galaxy S 5 Android Development] GeTex:
I'm not going to be as hostile about it but as the Op says, if you aren't a contributor, please don't post!
[Verizon Galaxy S 5 Android Development] autonomousperson:
Also, if anyone knows c and a solid understanding of how eMMC cmds work pm [MENTION=5414005]GeTex[/MENTION] [MENTION=766721]ryanbg[/MENTION] or I, perhaps you can help. Currently I believe we are trying to use CMD13 to check status and 56 to pull data off. And [MENTION=5414005]GeTex[/MENTION] , Isnt 56 to read contents of the MMC card? Not the FW?
[Verizon Galaxy S 5 Android Development] autonomousperson:
http://bunniefoo.com/bunnie/sdcard-30c3-pub.pdf

Fun read. Firmware dumping didnt even involve cmd56
[Verizon Galaxy S 5 Android Development] Lightn1ng:
I've got a 15' chip, unlocked. I'd love to help out.

Anything I could upload?

(probably not but asking anyway)
[Verizon Galaxy S 5 Android Development] Chay555:
What are the numbers behind your battery in your S5? Model number, SKU, FCC, number in top right corner between CE and !, ....etc. Trying to decipher on whether I have a 15 or 11.
[Verizon Galaxy S 5 Android Development] camcorder123:
Why don't you just do this:

cat /sys/class/block/mmcblk0/device/cid

Correct me if I'm wrong, but I'm pretty sure this doesn't require root - just did it on my Gear S2 out of random interest.
[Verizon Galaxy S 5 Android Development] captainm27:
So I have a free phone from work that is a spare sitting next to me. It's an 11 Chip. I know I should return it so that it can be assigned to another employee or someone else, but there's a part of me that is just too excited to find out if there will be an unlock for the 11 chips. :)
[Verizon Galaxy S 5 Android Development] NighthawkXL:
Possibly losing your job to help further the R&D on the 11 chips is hardly worth it. Please use some logic. As much as we want the device unlocked (although, I left the Galaxy scene back in the summer) we don't need someone becoming financially at risk or unemployed because of it.