yashsingh1/xdaforums huggingface dataset:
[Verizon Galaxy Note 3 General] radionerd:
If you are still looking I might be able to help, PM me.

Note3 pit is different than S5:

CID is in block mmcblk0 CID is something like this (replaced a few numbers with *): 1501004d42473**74300e4f1b***a000

aboot is mmcblk0p6

Read your CID: /sys/block/mmcblk0/device/cid

DevEd note3 dump:

root@hltevzw:/ # cat /proc/partitions
major minor #blocks name

7 0 39533 loop0
7 1 33296 loop1
7 2 6269 loop2
7 3 32256 loop3
179 0 30535680 mmcblk0
179 1 15360 mmcblk0p1
179 2 58816 mmcblk0p2
179 3 512 mmcblk0p3
179 4 32 mmcblk0p4
179 5 32 mmcblk0p5
179 6 2048 mmcblk0p6
179 7 512 mmcblk0p7
179 8 512 mmcblk0p8
179 9 10240 mmcblk0p9
179 10 10240 mmcblk0p10
179 11 14336 mmcblk0p11
179 12 3072 mmcblk0p12
179 13 3072 mmcblk0p13
179 14 11264 mmcblk0p14
179 15 13312 mmcblk0p15
179 16 13312 mmcblk0p16
179 17 7159 mmcblk0p17
179 18 3072 mmcblk0p18
179 19 1 mmcblk0p19
179 20 8 mmcblk0p20
179 21 8192 mmcblk0p21
179 22 9216 mmcblk0p22
179 23 2777088 mmcblk0p23
179 24 1048576 mmcblk0p24
179 25 26521583 mmcblk0p25
179 32 512 mmcblk0rpmb
179 64 62422016 mmcblk1
179 65 62420992 mmcblk1p1
254 0 39532 dm-0
254 1 33295 dm-1
254 2 6268 dm-2
254 3 32256 dm-3
root@hltevzw:/ #

/dev/block/platform/msm_sdcc.1/by-name:
lrwxrwxrwx 1 root root 20 Jan 2 18:08 aboot -> /dev/block/mmcblk0p6 <-------aboot
lrwxrwxrwx 1 root root 20 Jan 2 18:08 apnhlos -> /dev/block/mmcblk0p1
lrwxrwxrwx 1 root root 21 Jan 2 18:08 backup -> /dev/block/mmcblk0p17 <-----backup
lrwxrwxrwx 1 root root 21 Jan 2 18:08 boot -> /dev/block/mmcblk0p14
lrwxrwxrwx 1 root root 21 Jan 2 18:08 cache -> /dev/block/mmcblk0p24
lrwxrwxrwx 1 root root 20 Jan 2 18:08 dbi -> /dev/block/mmcblk0p4
lrwxrwxrwx 1 root root 20 Jan 2 18:08 ddr -> /dev/block/mmcblk0p5
lrwxrwxrwx 1 root root 21 Jan 2 18:08 efs -> /dev/block/mmcblk0p11 <------EFS
lrwxrwxrwx 1 root root 21 Jan 2 18:08 fota -> /dev/block/mmcblk0p16
lrwxrwxrwx 1 root root 21 Jan 2 18:08 fsc -> /dev/block/mmcblk0p19
lrwxrwxrwx 1 root root 21 Jan 2 18:08 fsg -> /dev/block/mmcblk0p18 <-----FSG
lrwxrwxrwx 1 root root 20 Jan 2 18:08 modem -> /dev/block/mmcblk0p2
lrwxrwxrwx 1 root root 21 Jan 2 18:08 modemst1 -> /dev/block/mmcblk0p12
lrwxrwxrwx 1 root root 21 Jan 2 18:08 modemst2 -> /dev/block/mmcblk0p13
lrwxrwxrwx 1 root root 20 Jan 2 18:08 pad -> /dev/block/mmcblk0p9
lrwxrwxrwx 1 root root 21 Jan 2 18:08 param -> /dev/block/mmcblk0p10
lrwxrwxrwx 1 root root 21 Jan 2 18:08 persdata -> /dev/block/mmcblk0p22
lrwxrwxrwx 1 root root 21 Jan 2 18:08 persist -> /dev/block/mmcblk0p21
lrwxrwxrwx 1 root root 21 Jan 2 18:08 recovery -> /dev/block/mmcblk0p15
lrwxrwxrwx 1 root root 20 Jan 2 18:08 rpm -> /dev/block/mmcblk0p7
lrwxrwxrwx 1 root root 20 Jan 2 18:08 sbl1 -> /dev/block/mmcblk0p3
lrwxrwxrwx 1 root root 21 Jan 2 18:08 ssd -> /dev/block/mmcblk0p20
lrwxrwxrwx 1 root root 21 Jan 2 18:08 system -> /dev/block/mmcblk0p23
lrwxrwxrwx 1 root root 20 Jan 2 18:08 tz -> /dev/block/mmcblk0p8
lrwxrwxrwx 1 root root 21 Jan 2 18:08 userdata -> /dev/block/mmcblk0p25
#
[Verizon Galaxy Note 3 General] en11gma:
i read it and it dont mention how to keep root when downgrading from LP 5.0 (OF1) to KK 4.4.4 (NK1 or NJ6)

i might have missed it.

if you could be so kind to provide the exact steps it would be great

thanks
[Verizon Galaxy Note 3 General] alexp1289:
I've got a Note 3 developer device. If this is still a viable option that will work then I'll help out. Just give me directions for how to get what you need. I'm on 4.4 bootloader dev edition. And no I didn't accidently re lock it's still a genuine developer device 4.4 bootloader which means that if this were to work we could boot cm 13 once support is available.
[Verizon Galaxy Note 3 General] ikillechewbacca:
please keep us updated with any progress if there is any :)
[Verizon Galaxy Note 3 General] alexp1289:
I'm waiting for someone to tell me what they need and where to send the files to. But no one has responded yet. Try and grab someone's attention so we can get the ball rolling. Anyone that sees this try and help get things moving I can't do anything without further instructions. In other words I'm a noob with a dev edition note 3 so until someone more experienced helps we're still at square one.

Try and help if you can get me in touch with the people that need my aboot and I'll email it to them. I'm not sure if it contains sensitive information so I won't post a link to it. However it's on my Google Drive waiting for the right person.
[Verizon Galaxy Note 3 General] davekaz:
Npjohnson started this

---------- Post added at 05:43 AM ---------- Previous post was at 05:42 AM ----------

All,<br />

<br />

Due to the recent accidental leak of Samsung eMMC vendor commands allowing write to protected eMMC areas, we are now able to write CID values on production devices.<br />

<br />

Beaups has written an awesome tool called 'SamsungCID' (found here: https://github.com/beaups/SamsungCID). This makes the process all teh simpler!<br />

<br />

I have built this tool from his source, and used it on a multitude of devices that use a Samsung eMMC. It works without flaw on the Moto G (Second Generation), Galaxy S5 (VZW/ATT, though, ATT doesn't have a Developer Edition that I am aware of), and many, many others.<br />

<br />

How does this apply to you?<br />

<br />

The Note 3 uses a Samsung eMMC, and has a Developer Edition. This means that it is vulnerable to this exploit.<br />

<br />

<br />

How can I help this progress?<br />

<br />

I need a few thing to make this work:<br />

<br />

- A few testers with Production devices, and root (temp-root should work fine) -- I will contact these people individually, do not ask here to test.<br />

<br />

- One person with a Developer Edition that has root (need an aboot dump, and them to run one command to dump their CID).<br />

<br />

If any of you know of someone with a Developer Edition, please get them in contact with me. I can be reached on Hangouts, or on Telegram (@npjohnson).<br />

<br />

PLEASE do not post your CID publicly.

---------- Post added at 05:44 AM ---------- Previous post was at 05:43 AM ----------

Thanks alexp. ..
[Verizon Galaxy Note 3 General] alexp1289:
I've pm'd him and hangouts messaged him and emailed him but no dice yet. I just don't know what's in these files and if any of it is sensitive so I'm hesitant to post a link directly to it but I'd be more than happy to email it or whatever once he responds to me.
[Verizon Galaxy Note 3 General] thunderblaster88:
Hopefully he gets back to you, this would be amazing stuff if a bootloader unlock happened. I'm not holding my breath but crappy noone thought root was going to happen again either.
[Verizon Galaxy Note 3 General] davekaz:
All of us thank you for potentially unlocking our Note. We will wait and see ,it is the weekend so lets just hope
[Verizon Galaxy Note 3 General] alexp1289:
Well I gave my aboot and cid to firewaterdevs he said he doesn't have time to work on it today but hopefully in the next couple of days. He checked that my aboot matches my cid which it does.

Now we wait.
[Verizon Galaxy Note 3 General] davekaz:
Fantastic. ..your the best my friend. Thanks again
[Verizon Galaxy Note 3 General] alexp1289:
I'm glad I found this thread this helps me as well since there's a lack of development due to you guys being locked down. So once we get you guys unlocked it's fun for us all. I really want cm 13 lmfao.
[Verizon Galaxy Note 3 General] davekaz:
Yes I would definitely put that on as well. Good I'm glad your in
[Verizon Galaxy Note 3 General] alexp1289:
[MENTION=5512597]davekaz[/MENTION] [MENTION=711482]beaups[/MENTION] was the guy that contacted me through firewaterdevs. It shouldn't be long until we're all unlocked now.
[Verizon Galaxy Note 3 General] thereallugo:
holy **** i cant beleive this is happeneing holy ****tttttt, cm13 here i come
[Verizon Galaxy Note 3 General] davekaz:
Weeeeeeeee
[Verizon Galaxy Note 3 General] alexp1289:
Figured I'd post all the proof I have since people really want to believe. I'm not yanking anyone's chain and there's proof. I know what it feels like getting your hopes up back when I didn't have a developer device and I wished I had an unlocked bootloader.
[Verizon Galaxy Note 3 General] alexp1289:
[MENTION=7024149]thereallugo[/MENTION] [MENTION=5512597]davekaz[/MENTION] we're still chatting and getting all the info he needs together he's got my aboot and cid already. I'll keep posting updates in this thread as things progress. Stay tuned :)

If you're interested in how the exploit works here's a PDF that explains it: https://drive.google.com/file/d/0B83noRHOimrRRWVxM01zQTFYZW8/view?usp=docslist_api
[Verizon Galaxy Note 3 General] davekaz:
This is exciting. Thanks to all of you
[Verizon Galaxy Note 3 General] alexp1289:
So he's got all the things he needs, now the real waiting begins.
[Verizon Galaxy Note 3 General] thereallugo:
i love you man!!.. but will he be able to unlock it today? or we give him sometime? thankss!!
[Verizon Galaxy Note 3 General] alexp1289:
Probably not today.
[Verizon Galaxy Note 3 General] mightysween:
I had almost given up on this device... but now I am looking at blobs and libs to start test-building CM13. :)

Sweet...hope this really comes together.
[Verizon Galaxy Note 3 General] alexp1289:
One major issue that needs to be looked at the last time I ran CM11 on my developer device is I had an issue with the noise cancelling microphone my ZeroLemon case because of the noise cancelling microphone wasn't functioning properly so if we can figure it out how to fix that as well that would be great I'm working on flashing my retail (not my developer edition device) device with the 0F1 firmware and getting it prepared for testing.

---------- Post added at 05:26 PM ---------- Previous post was at 05:10 PM ----------

If you need any files for CM13 from my developer edition for development contact me at-- Alexp1289@gmail.com -- hangouts would be best.
[Verizon Galaxy Note 3 General] macgyver40:
This is really cool. Would love to see this work out as I just ordered a N900v used from Amazon since Verizon is the only service available in my new home town.
[Verizon Galaxy Note 3 General] alexp1289:
I'm ready for testing :)
[Verizon Galaxy Note 3 General] davekaz:
Hope it works. Your testing your retail?
[Verizon Galaxy Note 3 General] alexp1289:
As soon as it's ready for testing although I work 3 p.m. to 11 p.m. Eastern Standard Time so it won't be until either after I get home from work or maybe before depending on when it's ready.
[Verizon Galaxy Note 3 General] davekaz:
I work 10 to 7 eastern ...hope all goes well
[Verizon Galaxy Note 3 General] alexp1289:
Do you have twitter?
[Verizon Galaxy Note 3 General] radionerd:
I've never seen the A fuse above 2 increment. Your DevEd is A3 and retail is A4, Interesting. I assumed A was aboot, but I must be wrong. Also assumed T was trust zone both of yours are still T1.

I wonder if any of the devs out there can ID the fuses.

Sent from my Nexus6P running Bean's *Pure Nexus*
[Verizon Galaxy Note 3 General] davekaz:
Dave Kaz@pchappy777 hardly use it. I'll load it back on my phone
[Verizon Galaxy Note 3 General] mightysween:
Been looking at the exploit...neat stuff. It seems like it doesn't matter what firmware we are currently running, or whether the device is rooted.

The modded aboot should be accepted as "stock" when flashed from ODIN. After a reboot back to DL mode, the bootloader should be unlocked and allow recovery to be flashed.
[Verizon Galaxy Note 3 General] davekaz:
Love it hope it's successful
[Verizon Galaxy Note 3 General] en11gma:
this is so awesome
[Verizon Galaxy Note 3 General] alexp1289:
Actually the aboot isn't moded it's the eMMC/CID of the retail phone that is moded/changed to be exactly the same eMMC/CID as in my dev aboot that I donated. In simple terms by changing the eMMC/CID to reflect the aboot hashed eMMC/CID you're making a clone of my dev device. The aboot checks to see if the devices CID is identical to the CID that's hashed in the devices aboot. And to do all that you need to change the eMMC/CID in the retail and then flash the dev edition aboot which doesn't get changed in the process. And as far as I know you do need root as he asked me if my retail had root for testing. So I had to root my retail stock 0F1 to be prepared for testing. As of this time I haven't done any testing yet so he probably hasn't got it ready yet.
[Verizon Galaxy Note 3 General] mightysween:
Hmmm... I thought the aboot would have to be changed or it would get rejected during ODIN flash.

Not sure how the tool is packaged, but if it runs as a root level APK, the need for root makes sense. Otherwise, once thr CID is changed and aboot is flashed, root becomes irrelevant as it could just be flashed.
[Verizon Galaxy Note 3 General] alexp1289:
We used this app to check my eMMC/CID https://play.google.com/store/apps/details?id=net.vinagre.android.emmc_check

This doesn't check aboot at all. Aboot is checked via IDA disassembler.
[Verizon Galaxy Note 3 General] mightysween:
Yes, just looked at some the code for it and it is indeed an APK-based exploit that uses the SD card and does require root. Very interesting... I guess I just assumed it would run on a PC.

Looking at the struggles on some some of the other device threads... hopefully ours goes smoothly!
[Verizon Galaxy Note 3 General] macgyver40:
Well still waiting on delivery of my N900V but once I have it and I don't need a PC I am willing to help out best I can. This sounds so promising.
[Verizon Galaxy Note 3 General] en11gma:
so we have a 4.4.4 dev edition bootloader but i just re-read the part that says "and root"

4.4.4 does not have a root right?

O_o
[Verizon Galaxy Note 3 General] davekaz:
Aw. This is true..hope that's not a requirement
[Verizon Galaxy Note 3 General] mightysween:
4.4 is the bootloader version... the firmware would be 5.0
[Verizon Galaxy Note 3 General] davekaz:
Sounds hopeful
[Verizon Galaxy Note 3 General] bishop0114:
Regardless, 4.4.4 is rootable... Just root 5.0 and downgrade using Flashfire and keep root. That is what I did.
[Verizon Galaxy Note 3 General] davekaz:
Have not been following thread for 4.4. Since 5 root ..that's great. .didn't know you could downgrade through flashfire just through odin ..thanks all clear for unlocking
[Verizon Galaxy Note 3 General] alexp1289:
Here's the answer to your questions guys.
[Verizon Galaxy Note 3 General] davekaz:
Beautiful
[Verizon Galaxy Note 3 General] alexp1289:
Not an APK apparently.

I've heard in the S5 forums that this requires at least a 4 gb micro sd card.
[Verizon Galaxy Note 3 General] Anonymous115:
If this works could we flash a 4.xx cyanogenmod rom?
[Verizon Galaxy Note 3 General] en11gma:
i believe so
[Verizon Galaxy Note 3 General] Anonymous115:
Finally. Freedom reigns
[Verizon Galaxy Note 3 General] davekaz:
It's note here yet.

---------- Post added at 10:22 PM ---------- Previous post was at 10:22 PM ----------

Just a pun
[Verizon Galaxy Note 3 General] en11gma:
status update????
[Verizon Galaxy Note 3 General] alexp1289:
No status update man. I'm not going to bug beaups because he's doing this out of his free time. The dude is probably busy and a family man. Chill out and keep yourself occupied some other way till its ready. Patients is key man, this phone has been out like what? 3 years with no unlock I'm pretty sure you'll survive a while longer lol. If I don't hear anything by next Monday I'm going to nicely ask for a status update. No sooner and no later. I don't want him to decide is not worth his time because he may feel like he's not appreciated if I bug him. Now isn't the time to start freaking out because your bootloader unlock isn't out yet. This just started progressing on Sunday it's only been 2 full days lol.
[Verizon Galaxy Note 3 General] davekaz:
You are correct sir. I would wait until he gets back to you. We should all let it go until it is done one way or another. To bad there isn't a thread to watch but don't badger him at all...

---------- Post added at 10:58 AM ---------- Previous post was at 10:39 AM ----------

https://www.google.com/url?sa=t&sou...EDRWtSkzn9YnVUi1w&sig2=7zg8jcksodGSesGvV8R1ZQ

At the end the writer states not to pm him or stalk him..leave it alone
[Verizon Galaxy Note 3 General] en11gma:
funny how you make it look like its me as the only one wondering what is going on...

lol

if he dont do it someone else is going to as the next release i wouldnt be surprised would be a universal samsung release that unlocks the bl to all samsung devices

im not saying that is how its gonna be but it wouldnt surprise me.
[Verizon Galaxy Note 3 General] davekaz:
I agree and didn't mean to put you out there and do apologize. .I want this to happen yesterday ..I certainly want an update also and I'm sure the minute Alex hears something it will be relayed to all here
[Verizon Galaxy Note 3 General] BostonDan:
Rule 1 of XDA-Developers - Don't bug developers on schedule. It'll happen when/if it happens.

Look at how long we waited for stock root on KitKat 4.4.4 + Lollipop... I'll bide my time and be most appreciative of developers efforts for performing these services (even when they are not successful) because of the personal time these developers put into this type of research.

Cheers,

B.D.
[Verizon Galaxy Note 3 General] reaverclan:
I wait patiently for this.
[Verizon Galaxy Note 3 General] davekaz:
[emoji56]
[Verizon Galaxy Note 3 General] alexp1289:
Sorry about that we just don't need people freaking out over this. It will get here when it's here. Didn't mean to single you out at all. As soon as I hear something I'll let everyone know.
[Verizon Galaxy Note 3 General] en11gma:
yep agreed.

although i know there have to a dev channel on irc or some are prob even using google talk or w/e that chat name is (yuck).

let us join in on the irc channel and just mute us. some of us would prob like that dev talk

im on #twrp and #koush and #cyanogenmod quite often

i bet you guys got irc channel right?

also i wonder if it will be a twrp or cwmr and after that i wonder what the best cm12 or do we get cm13?

gonna be flashing alot of roms to check this out. my fav part :)
[Verizon Galaxy Note 3 General] alexp1289:
That's actually a good idea I honestly don't know of any irc channels besides the twrp one. Go hunt around for them and report back if you find anything but by no means should we bug the developers like beaups and firewaterdevs. If we can listen in to what's going on without bugging them then I don't see how that would be a problem. I'm actually not a developer I just happen to own a developer device because in order to keep my unlimited data I had to buy full price no contract. And just decided a developer device would be cool and may even come in handy if an exploit like this was found. My thought was that if there was a way for my device to help in the future then cool I would be able to help. Funny thing is I backed up my aboot for safe keeping a little over 2 years ago in case I ever needed it. And it only became useful to have until this past Sunday. Now I'm not sure if many of you know but most of the developer devices came with a 4.3 bootloader which also came with a 4.3 version of Android. Mine however came with a 4.4 bootloader and Android 4.4.4 which was fairly uncommon for developer devices I purchased mine before they stopped selling them and they stopped selling them a few months after I bought mine actually. And if you didn't know in order to run CyanogenMod 13 you have to have a 4.4 bootloader at minimum so the mere fact that it's a 4.4 bootloader and that it's useful for this exploit means that this will save a lot of devices from being replaced by newer phones when it's a perfectly good device and runs fantastic. It will run even better with cyanogenmod 13 on it which I do plan on helping with development. My skills are limited so I may not be much help but I sure will try lol.
[Verizon Galaxy Note 3 General] mightysween:
There are current builds of TWRP for n900v, but alex said they bootlooped on his device. So getting a working recovery will certainly be an essential step... until then, we may be limited in what we can flash.

That said, with an unlocked BL it seems that the FlashFire option may become viable for CM13 roms...

And yes, there will be unofficial CM13 builds at the very least!
[Verizon Galaxy Note 3 General] en11gma:
cant wait. was lurking in #twrp and hearing a lil chatter bout this :)
[Verizon Galaxy Note 3 General] en11gma:
so we should be preparing to flash back to 4.4.4

the question is which version? NJ6 or NK1?

this dev bl they are working is for which 4.4.4?

cant wait
[Verizon Galaxy Note 3 General] alexp1289:
Beaups said firmware and bootloader version shouldn't matter. Still haven't gotten to do any testing yet just FYI hopefully soon but idk when. He said he's still been busy lately.
[Verizon Galaxy Note 3 General] alexp1289:
Honestly I think if he had no intention of helping us he wouldn't have responded at all to me. I wish we had the exploit already as well but waiting is all we can do. We've got nothing to lose by waiting we're locked either way until the codes changed for our device.
[Verizon Galaxy Note 3 General] macgyver40:
I can't even root my SGN3. No access to a PC and live in the middle of no where to gain access. So waiting for this is easy.
[Verizon Galaxy Note 3 General] davekaz:
Root is required I'm sorry to say
[Verizon Galaxy Note 3 General] alexp1289:
Go to a public library and download to a usb? Or go to a friends house?
[Verizon Galaxy Note 3 General] macgyver40:
Where I live the library just closed for good. No car and sadly no friends near where I live now since I moved last week. Not that I really have friends offline.

Thanks for the suggestions. Getting files etc is easy on the note and a 64GB SD. Running the software on a public computer is another trick as most won't allow application install. My best hope is my nephew coming to visit since I currently live @ his mother's house until my wife and I find our own. Luckily being retired leaves me with plenty of time to get things done. I have also thought about asking some of my Ingress gamer friends next time I am in a larger town. Living in the remote woods by a lake has its draw backs

I also figure by the time the bootloader is cracked I will have found access to a PC and can root and unlock all at once. Only had this phone a few days. Not my first note 3 but my first verizon version. I do miss the 900T and the N910T very much. I have had way to many phones lmao.
[Verizon Galaxy Note 3 General] alexp1289:
I'd just like to know if [MENTION=5848265]npjohnson[/MENTION] is still even interested in this conversion. Seems like the intent in this thread was good but doesn't seem like he's still interested. I'm not trying to start anything but give us some insight on what's going on if you can. If you're no longer interested I'm sure everyone here understands just give people some clarity. So far everything we know is from beaups and we're still patiently waiting to hear back. Don't take this out of context it's just a post asking for a simple answer. I'm more than willing to help as I've stated.
[Verizon Galaxy Note 3 General] npjohnson:
I just need a developer about and CID combo. No one ever offered one.
[Verizon Galaxy Note 3 General] alexp1289:
I am pm'ing you everything you need my cid is in the pm as well.

Here's my note 3 dev aboot: https://drive.google.com/file/d/0B83noRHOimrRUU02Z3JaN3F2LTQ/view?usp=docslist_api
[Verizon Galaxy Note 3 General] davekaz:
I thought you were in the loop with all this. I'm not sure why Alex started this conversation directed at you but he gave all of developer info to firewater devs